Re: 2 servers and 3 nics = pain of my life

Hi Robert,

Thanks for your suggestions - im not so bothered about dns at the moment, if
i could only reach the network would be a start via ip - i cant ping it at
all... which makes me think that what you said :

"Since you are using 3rd party VPN, you need not only enable IP
routing on the windows server but also Nortel router needs to have a route
point to 192.168.16.0/24."

...will nail the issue - im going to have a word with our VPN hosts, i will
post back the outcome.

"Robert L. (MS-MVP)" wrote:

1. It is not recommended to run a DC on a multihomed computer. If you do,
you may have a name resolution or routing issue. This search result may
help..
Name resolution on VPN
Can't ping VPN client by name Connection issues on DC, ISA, DNS and
WINS server as VPN server DNS and Split Tunneling for VPN? How to assign DNS
and WINS on ...
www.chicagotech.net/nameresolutionpnvpn.htm

2. Since you are using 3rd party VPN, you need not only enable IP
routing on the windows server but also Nortel router needs to have a route
point to 192.168.16.0/24. The following how to may help.
Routing how to
How to disable ip routing/forwarding on a W2K Pro? ... For
example, the Generic Routing Encapsulation (GRE) IP protocol (protocol
number 47) is added to the ...
www.howtonetworking.com/Networking/routing.htm - Similar pages

ipconfig
To enable IP routing on W2K/XP, go to the properties of the
connection>TCP/IP>Advanced>Options>IP Filtering, check Enable IP Filtering.
....
www.howtonetworking.com/Networking/ipconfig.htm




--
Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on
http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on
http://www.HowToNetworking.com
"MrOrange" <MrOrange@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:4F01A0CF-2B7A-4910-BB85-835FB9F7D33F@xxxxxxxxxxxxxxxx
Yes - site A is a Dc -

As for the VPN Its a 3rd party managed VPN service using Nortel routers..

I havent enabled ip routing - i just assumed it was on already - do i need
it? where do i switch it on? Sorry for sounding like a noob, your help is
greatly appreciated!!



"Robert L. (MS-MVP)" wrote:

Is the Site A server DC? Do you setup Windows VPN or 3rd party VPN? Have
you
enabled the IP routing on A server?

--
Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on
http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on
http://www.HowToNetworking.com
"MrOrange" <MrOrange@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:153C75C5-9F46-4362-8925-88A2C61D2AC1@xxxxxxxxxxxxxxxx
Hi there,

I have already posted in the Windows XP forum - tbh - i think that was
incorrect for my issue - thanks to Robert L. (MS-MVP) for his
suggestions,
however i feel posting in the right forum/discussion group can only aid
my
cause in end to resolve my issue if possible.

In a nutshell, i have two sites linked via a vpn

Site A Server:

Two Nic's:

One nic is plugged into the router with an address of

192.168.15.2
255.255.255.0
192.168.15.254 (gw)

The other nic is plugged into the local network and has the following
address

192.168.16.1
255.255.255.0
(No gateway set)


Site B Server

One nic plugged into the switch (router plugged into switch)

192.168.44.8
255.255.255.0
192.168.44.29 (gw)


Now i can sit at site B and open a rdp connection to Site A's server
(192.168.15.2)

If i try from site B to access via rdp again, only this time going for
site
A's other nic's address 192.168.16.1 - it fails.

If i rdp onto site A's 192.168.15.2 - then from within the sessions
desktop
i open the following:

Start \ Run

\\192.168.16.1

..........it opens it own network shares - which is expected

if i repeat the process, entering the other nic address of
\\192.168.15.2
it
fails - (could not open network share msg)

If i repeat the process, only entering the address of site A's server,
\\192.168.44.8 - it opens it - after authentication.

Going in the other direction, rdp to Site B, then trying to reach
\\192.168.16.1 - fails

trying to reach \\192.168.15.2 displays an authentication requestor -
which
i cannot seem to get past - all authentication attempts just seem to
fail/ignore.



It sounds far down the line, but my end goal is to allow Citrix users
to
print on their local printers.

Citrix is hosted at site B and the clients and their printers are
hosted
at
site A - i cannot install the printers into Citrix as i cannot reach
them...

i feel that this all can be fixed with the addition to site A's routing
table, but my brain turns to fudge when i try to think about it...


Any help would be gratefully appreciated...






.

Relevant Pages

  • Re: [Full-disclosure] Remote Desktop Command Fixation Attacks
    ... This set of steps is redundant in many places, and it's also enormously expensive, since you're using no less than three different expensive bits of networking hardware (AP, PIX, VPN Concentrator), in addition to a bunch of x86 server hardware, windows server licenses, and at least one ISA license. ... Your computers necessarily don't have full access to your network infrastructure when they aren't logged on, so GPOs, software updates, etc can't be applied at the times you want them to be applied. ... Turning on, enabling, and implementing every possible security setting and device you think of is not defence in depth, and will probably only have two effects - your users won't use your wireless network, and you'll burn so much cash you won't have any left to spend on *useful* security measures. ...
    (Full-Disclosure)
  • Re: VPN with SBS 2003 (not R2) and DSL.
    ... Reading property value for VPN returned OK ... Reading VPN Server Name returned OK ... identical network cards. ... it seems doubtful that SBS will work properly with two NICs ...
    (microsoft.public.windows.server.sbs)
  • RE: VPN Connection Problems
    ... Note that we are able to successfully VPN into the office. ... to browse the network, RDP to the server or even ping the server. ... > This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • Re: VPN clients unable to connect to other resources.
    ... on the SBS 2003 server just not sure where to go for help on it. ... Next time I'm at my home PC, I'll VPN in and see what IP info I'm getting ... client PC on your LAN, you should be able to do so from a remote VPN client, ... get the network path was not found. ...
    (microsoft.public.windows.server.sbs)
  • RE: VPN Error 800
    ... The VPN client IP is 10.0.1.40, this is a private IP address. ... server IP address is 81.137.105.244, this is a Internet IP address. ... not test VPN connection from your perimeter network. ... SBS on your switch to make it work. ...
    (microsoft.public.windows.server.sbs)
Loading