Re: RRAS/NAT connected stations can't access websites
- From: v-jpzhu@xxxxxxxxxxxxxxxxxxxx (Jian-Ping Zhu [MSFT])
- Date: Tue, 10 Jun 2008 02:25:27 GMT
Dear Customer,
Regarding your last email , I am just check and follow-up on your status.
I was wondering , if you were available to try conduct test and provide
the necessary information and logs.
Thank you for your time and attention.
Sincerely,
Neo Zhu,
Microsoft Online Support
Microsoft Global Technical Support Center
--------------------
| X-Tomcat-ID: 60725833
| References: <BE5FB8CD-0A16-475C-90CB-28AD916F5CAC@xxxxxxxxxxxxx>
<l2sUBFJxIHA.1784@xxxxxxxxxxxxxxxxxxxxxx>
<8310C5A6-3C4C-4799-8151-1E8D22CBBB7B@xxxxxxxxxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain
| Content-Transfer-Encoding: 7bit
| From: v-jpzhu@xxxxxxxxxxxxxxxxxxxx (Jian-Ping Zhu [MSFT])
| Organization: Microsoft
| Date: Wed, 04 Jun 2008 07:58:25 GMT
| Subject: Re: RRAS/NAT connected stations can't access websites
| X-Tomcat-NG: microsoft.public.windows.server.networking
| Message-ID: <SBROIjhxIHA.2252@xxxxxxxxxxxxxxxxxxxxxx>
| Newsgroups: microsoft.public.windows.server.networking
| Lines: 212
| Path: TK2MSFTNGHUB02.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl
microsoft.public.windows.server.networking:12989
| NNTP-Posting-Host: tk5tomimport1.phx.gbl 10.201.218.19
|
| Hello,
|
| I need more information for further investigation.
| Please help answer the following questions:
|
| 1. I'd like to confirm that you could ping ISP DNS Server IP address from
| client machines, is this correct?
|
| 2. On client machines, any web sites could not be opened and ping to the
| sites' IP address return destination unreachable, is this correct?
| Could you please copy and post back the output of the ping command?
| Please also give me an example of web site links which could not be
opened.
|
| 3. I'd like to confirm that this issue occurred on all client machines in
| your network, is this correct?
| Did you use the same model NIC on all the client machines?
| Based on my research, a bad NIC might also cause similar issues, please
| check whether your NIC on client machines work well and please update the
| NIC driver with the latest one.
|
| 4. Please check Inbound or Outbound Filters on both of the internal and
WAN
| interfaces on RRAS server.
|
| Meanwhile, please also help collect the following information:
|
| Networking Edition MPS_Report log:
| =============================
| Download the Network Edition of MPS_Report tool from
|
<http://download.microsoft.com/download/b/b/1/bb139fcb-4aac-4fe5-a579-30b0bd
| 915706/MPSRPT_NETWORK.EXE>, run it on the RRAS Server and client machine.
| Email me the %COMPUTERNAME%_MPSReports_.CAB file which is under the
| %systemroot%\MPSReports\network\bin\cab directory.
|
| My email address is v-jpzhu@xxxxxxxxxxxxx
|
| Thanks for your time and I look forward to hearing from you.
|
| Sincerely,
| Neo Zhu,
| Microsoft Online Support
| Microsoft Global Technical Support Center
|
| Get Secure! - www.microsoft.com/security
| =====================================================
| When responding to posts, please "Reply to Group" via your newsreader so
| that others may learn and benefit from your issue.
| =====================================================
| This posting is provided "AS IS" with no warranties, and confers no
rights.
|
| --------------------
| | From: "Thorin" <The_Mighty_Thorin@xxxxxxxxxxxxx>
| | References: <BE5FB8CD-0A16-475C-90CB-28AD916F5CAC@xxxxxxxxxxxxx>
| <l2sUBFJxIHA.1784@xxxxxxxxxxxxxxxxxxxxxx>
| | In-Reply-To: <l2sUBFJxIHA.1784@xxxxxxxxxxxxxxxxxxxxxx>
| | Subject: Re: RRAS/NAT connected stations can't access websites
| | Date: Mon, 2 Jun 2008 10:45:33 -0700
| | Lines: 128
| | Message-ID: <8310C5A6-3C4C-4799-8151-1E8D22CBBB7B@xxxxxxxxxxxxx>
| | MIME-Version: 1.0
| | Content-Type: text/plain;
| | format=flowed;
| | charset="iso-8859-1";
| | reply-type=original
| | Content-Transfer-Encoding: 7bit
| | X-Priority: 3
| | X-MSMail-Priority: Normal
| | X-Newsreader: Microsoft Windows Mail 6.0.6001.18000
| | X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6001.18000
| | X-MS-CommunityGroup-PostID: {8310C5A6-3C4C-4799-8151-1E8D22CBBB7B}
| | X-MS-CommunityGroup-ThreadID: BE5FB8CD-0A16-475C-90CB-28AD916F5CAC
| | X-MS-CommunityGroup-ParentID: F35FB906-978B-408D-814F-F8F172A88D82
| | Newsgroups: microsoft.public.windows.server.networking
| | Path: TK2MSFTNGHUB02.phx.gbl
| | Xref: TK2MSFTNGHUB02.phx.gbl
| microsoft.public.windows.server.networking:12965
| | NNTP-Posting-Host: TK2MSFTNGHUB02.phx.gbl 127.0.0.1
| | X-Tomcat-NG: microsoft.public.windows.server.networking
| |
| | Hi Jian-Ping
| |
| | Thanks for getting back to me so quickly.
| |
| | To answer your questions:
| |
| | > 1. To ensure that the connection to the internet works well, please
| check
| | > whether the web page could be opened on RRAS server.
| |
| | The RRAS Server is able to connect to the Internet when it is in a
| | stand-alone situation and not part of a domain.
| |
| | > 2. To ensure there aren't any route related issues, please check
whether
| | > you could ping any public IP addresses from your client PC. You could
| use
| | > the external DNS Server IP address provided by ISP to do the test.
| |
| | Before enabling NAT network access is fine and DNS resolution through
| | NSLOOKUP and a web browser both function correctly. After enabling NAT
it
| is
| | still possible to use NSLOOKUP from all client computers and the RRAS
| | Server, and it finds the ISP DNS Server. Names resolve to IP addresses
| | correctly but no machine on the network is able to ping or browse the
| web.
| | IP Addresses garnered from NSLOOKUP return "Destination Unreachable"
when
| | trying to PING them.
| |
| |
| | > 3. As you have mentioned that " Computers inside the network can ping
| the
| | > LAN Adapter successfully and using NSLookup from computers behind the
| NAT
| | > it is possible to resolve DNS Names to IP Addresses." Have you tried
to
| | > resolve the external web site's name to IP address? Can this be
resolved
| | > correctly?
| |
| | Yes for instance using NSLOOKUP from a client workstation you can
resolve
| a
| | name to an IP successfully. But the web browser will not return a
webpage
| by
| | DNS Name or IP Address.
| |
| | > 4. How did you configure your client PCs' DNS server
| settings?
| | > Did you point to the DNS server in your LAN?
| |
| | Yes, DHCP is being handled by the DC and it assigns itself as the
primary
| | DNS.
| |
| | > More informations:
| | > ================
| | > The following information is for your reference:
| | >
| | > Troubleshooting NAT
| | >
|
http://www.microsoft.com/technet/prodtechnol/windows2000serv/reskit/intwork/
| | > inae_ips_xsxh.mspx?mfr=true
| | >
| | > The above article also apply to Windows Server 2003.
| | >
| | > Deploying Dial-up and VPN Remote Access Servers
| | >
|
http://technet2.microsoft.com/windowsserver/en/library/8ff3534e-0f08-45bc-84
| | > 87-3b618bc8ad621033.mspx?mfr=true
| | >
| | > I look forward to hearing from you soon. :)
| | >
| | > Sincerely,
| | > Neo Zhu,
| | > Microsoft Online Support
| | > Microsoft Global Technical Support Center
| | >
| | > Get Secure! - www.microsoft.com/security
| | > =====================================================
| | > When responding to posts, please "Reply to Group" via your newsreader
so
| | > that others may learn and benefit from your issue.
| | > =====================================================
| | > This posting is provided "AS IS" with no warranties, and confers no
| | > rights.
| | >
| | > --------------------
| | > | From: "Thorin" <The_Mighty_Thorin@xxxxxxxxxxxxx>
| | > | Subject: RRAS/NAT connected stations can't access websites
| | > | Date: Sun, 1 Jun 2008 22:15:14 -0700
| | > | Lines: 23
| | > | Message-ID: <BE5FB8CD-0A16-475C-90CB-28AD916F5CAC@xxxxxxxxxxxxx>
| | > | MIME-Version: 1.0
| | > | Content-Type: text/plain;
| | > | format=flowed;
| | > | charset="iso-8859-1";
| | > | reply-type=original
| | > | Content-Transfer-Encoding: 7bit
| | > | X-Priority: 3
| | > | X-MSMail-Priority: Normal
| | > | X-Newsreader: Microsoft Windows Mail 6.0.6001.18000
| | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6001.18000
| | > | X-MS-CommunityGroup-MessageCategory:
| | > {E4FCE0A9-75B4-4168-BFF9-16C22D8747EC}
| | > | X-MS-CommunityGroup-PostID: {BE5FB8CD-0A16-475C-90CB-28AD916F5CAC}
| | > | Newsgroups: microsoft.public.windows.server.networking
| | > | Path: TK2MSFTNGHUB02.phx.gbl
| | > | Xref: TK2MSFTNGHUB02.phx.gbl
| | > microsoft.public.windows.server.networking:12958
| | > | NNTP-Posting-Host: TK2MSFTNGHUB02.phx.gbl 127.0.0.1
| | > | X-Tomcat-NG: microsoft.public.windows.server.networking
| | > |
| | > | Recently it became necessary to setup RRAS on Windows Server 2003
R2
| to
| | > | perform NAT for a small network that is being used as a testing
| | > environment.
| | > | The network had an existing domain controller that holds the roles
for
| | > | DHCP/DNS and Directory services. The RRAS server has just two
network
| | > | connections (WAN, LAN) and there it connects directly to the outside
| | > world.
| | > |
| | > | The WAN NIC is set to:
| | > | Public interface connected to the Internet
| | > | Enable NAT on this interface
| | > |
| | > | There are no Inbound or Outbound Filters on the connection.
| | > |
| | > | Computers inside the network can ping the LAN Adapter successfully
and
| | > using
| | > | NSLookup from computers behind the NAT it is possible to resolve DNS
| | > Names
| | > | to IP Addresses. What doesn't work is when a client tries to
connect
| to
| | > a
| | > | website using a browser all of the clients recieve an error that
they
| | > cannot
| | > | display the page.
| | > |
| | > | Has anyone seen a document that explains setting up a simple NAT
| router
| | > | using Windows Server 2003 R2?
| | > |
| | > | Thanks.
| | > |
| | > |
| | >
| |
| |
|
|
.
- References:
- RRAS/NAT connected stations can't access websites
- From: Thorin
- RE: RRAS/NAT connected stations can't access websites
- From: Jian-Ping Zhu [MSFT]
- Re: RRAS/NAT connected stations can't access websites
- From: Thorin
- Re: RRAS/NAT connected stations can't access websites
- From: Jian-Ping Zhu [MSFT]
- RRAS/NAT connected stations can't access websites
- Prev by Date: Re: Blank "network connections"
- Next by Date: Re: Browsing domains across a WAN
- Previous by thread: Re: RRAS/NAT connected stations can't access websites
- Next by thread: Re: Copying Shared folders and retaining share and file permissions
- Index(es):
Relevant Pages
|
