Re: 2 site's - vpn link - Slow local browsing



Normally I would agree but he can’t connect to shares using the IP address of
the server and thus the master browser should be bypassed.
My reasoning that the remote server opens shares quickly as it is looking up
the ACLs on its local network where the remote server is probably connecting
through the VPN to get the ACLs from the other server.
It was only a suggestion.
He should defiantly set up WINS correctly or configure all his computers to
use DNS and remove NetBIOS over TCPIP. Any way I hope one of us can resolve
his issue.

"Bill Grant" wrote:

> Hi Wendel,
>
> Two sites assigned to two different subnets would certainly be an
> improvement! But I don't think it would solve the slow browsing. If a share
> in the "other" site opens faster than a local one, I agree with Ian that it
> is probably a master browser problem. I looks like there is not a
> network-wide browse list. The other alternative would be to use Dfs.
>
> And there is still the worry of DCs as routers.
>
> Wendel Hamilton wrote:
> > Perry,
> > You need to at least tell it you have 2 sites and the associated IP
> > address range.
> > Here is some Light reading Ha Ha.
> > http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerHelp/86a8abf7-7cfa-4aee-85fa-3cf25cf30e0e.mspx
> >
> > "Perry Perdijk" wrote:
> >
> >> Hi There,
> >>
> >> I dont know exaclty if I have a site link .I thougth windows did that
> >> automaticly.
> >> If i look in AD sites en services I see " default first sitename"
> >> under that i see the 2 servers .
> >> If i look in " inter-site-transport" then under "IP" I see
> >> "defaultfirstsitelink"
> >> If i look in "subnet's" There is nothing there.
> >>
> >> I'm not a sitelink expert so any idea's are more then welcome.
> >>
> >> Thx
> >> perry
> >>
> >>
> >> thx
> >> perry
> >> "Wendel Hamilton" <WendelHamilton@xxxxxxxxxxxxxxxxxxxxxxxxx> schreef
> >> in bericht news:5FC676BF-C6E1-442A-96FC-CB65378FFA7D@xxxxxxxxxxxxxxxx
> >>> Perry,
> >>> I don't think it's a master browser or wins problem.
> >>> Could be that it is getting the ACLs from your server over the VPN.
> >>> Do you have a site link between them?
> >>>
> >>> "Bill Grant" wrote:
> >>>
> >>>> Yes, you need WINS. Browsing uses Netbios names and LAN
> >>>> broadcasts. The only effective way to get in working in a WAN or a
> >>>> routed network is with WINS. Without WINS there is no way that
> >>>> the Domain Master Browser can find the master browser in the other
> >>>> segment to build a network-wide browse list.
> >>>>
> >>>> You can use one WINS server for the combined network. If you
> >>>> set up a WINS server at each site, make sure that they replicate.
> >>>>
> >>>>
> >>>> Perry Perdijk wrote:
> >>>>>> Does name resolution occur the same way at both sites? do both
> >>>>>> sites have wins and dns servers with the same info or are you
> >>>>>> broadcasting requests across the subnets for name resolution?
> >>>>>
> >>>>> Do i need wins on the servers?
> >>>>> I have dnsservers running on both domaincontrollers. On the prim.
> >>>>> domaincontroller and secondary dns on the sec.domaincontroller.
> >>>>> Dns seem to be working fine on both site's.
> >>>>>
> >>>>>> Are you using the domain controllers as VPN Servers? How many
> >>>>>> network cards do they have installed? What IP addresses for the
> >>>>>> Domain Controllers appear in Wins / DNS
> >>>>>
> >>>>> I do run the domaincontrollers as vpnservers. They both have 2
> >>>>> nic's installed, on internal (192.168.x.x) and 1 external
> >>>>> (10.0.0.137). Both servers got isa2000 installed.
> >>>>> Both dnsservers are listening on only the internal ipadres.
> >>>>>
> >>>>> Thx for your help so far...
> >>>>>
> >>>>> Main question about your comment, do i need to install winsservers
> >>>>> for this type of configuration?
> >>>>>
> >>>>> Thx
> >>>>> perry
> >>>>>
> >>>>> "Ian" <gruntyonline@xxxxxxxxxxx> schreef in bericht
> >>>>> news:%23Vc2WlByFHA.664@xxxxxxxxxxxxxxxxxxxxxxx
> >>>>>> Perry Perdijk wrote:
> >>>>>>> Hi There,
> >>>>>>>
> >>>>>>> I got 1 domain , 2 servers , the servers are configured with
> >>>>>>> isaserver 2000. The servers are connected over a vpn link.. The
> >>>>>>> prim.domain controller(192.168.0.0) is on 1 site of the link.
> >>>>>>> Secondary controller(192.168.1.1) on the other site.
> >>>>>>>
> >>>>>>> The problem is on the internal network on the remote location.
> >>>>>>> when the clients connect to a share wich is on the local server(
> >>>>>>> the network of the remote site) it is very slow.
> >>>>>>> At first I thought i had to do with the browser service , but
> >>>>>>> also when I connect to the server with " 192.168.1.1\share"
> >>>>>>> sometimes it takes about 30 seconds for the share to open. But
> >>>>>>> when i connect from the remote site to a share located on the
> >>>>>>> mainserver with " servername\share " the share does open very
> >>>>>>> quicly .. And that one goes over the vpn link. Dns on both
> >>>>>>> sites of the link is working properly.
> >>>>>>>
> >>>>>>> Anyone has an idea what is going wrong ?
> >>>>>>>
> >>>>>>> thx
> >>>>>>> perry
> >>>>>>>
> >>>>>>>
> >>>>>> Does name resolution occur the same way at both sites? do both
> >>>>>> sites have wins and dns servers with the same info or are you
> >>>>>> broadcasting requests across the subnets for name resolution?
> >>>>>>
> >>>>>> If you are relying on broadcast for 1 site then this could be the
> >>>>>> issue.
> >>>>>>
> >>>>>> or
> >>>>>>
> >>>>>> Are you using the domain controllers as VPN Servers? How many
> >>>>>> network cards do they have installed? What IP addresses for the
> >>>>>> Domain Controllers appear in Wins / DNS
> >>>>>>
> >>>>>>
> >>>>>> Ian
>
>
>
.



Relevant Pages

  • RE: How to Grant Power Users rights to administrative shares.
    ... This is on windows server 2003. ... right click shares and select new file share ... The "Create A Shared Folder Wizard" opens click next. ... Please check the permission settings of the shared folders. ...
    (microsoft.public.windows.server.sbs)
  • Re: VPN access to network file shares
    ... "The file shares are on a server running Windows Small Business Server ...
    (microsoft.public.windows.server.sbs)
  • Re: Permissions Chart ?? or web site ??
    ... The environments I deal in tend to have tens of thousands of file shares and thousands of local site admins, 99% of whom don't really understand in the slightest bit how Windows works so the most secure way of doing things is the most simple to understand easily automated way. ... In fact, in most environments I have to work on file share stuff for, I redirect them from ad hoc shares to three types of shares per server and the local site admins don't even have to understand what a share is let alone properly configure it. ... One single share per server for apps run from the servers. ...
    (microsoft.public.windows.server.active_directory)
  • Re: DFS and RODC Windows Server 2008
    ... Look into using the Enterprise version of Win 2k8 for the hub server. ... Think about putting all the shares on the branch office server into one ... It sounds like you just want to replicate ...
    (microsoft.public.windows.server.active_directory)
  • Re: Windows domain user is sometimes denied access to server share
    ... I would also check the server with the share security log ... He can access the shares that do not have security on them OK, ... with windows user and or windows group accounts. ...
    (microsoft.public.windows.server.security)