RE: Domain/NIC problem

From: Renee Geffre [ MSFT] (reneeg_at_online.microsoft.com)
Date: 08/17/04 

Date: Tue, 17 Aug 2004 22:16:40 GMT

Hi:

Thank you for using the Microsoft Small Business Server Newsgroup. I
understand that you are having a problem with RRAS/VPN and your Internet
Connection. The type of behavior you describe can happen on an server when
the RRAS configuration Wizard is run and VPN/Remote access is the only
choice selected. This causes the server to be set up to only allow VPN
connections and will interfere with the LAN/WAN connections on the server.

To resolve this issue Open Routing and Remote Access.
Right click on the Server name and choose "Disable Routing and Remote
Access."
Check to make sure that you have LAN access and Internet access to the
server.
Run the "Configure Remote Access" wizard from the To Do List in Server
Management to configure VPN/Dial in Access.

Finally, if you are not running ISA server then you will need to do the
following to re-enable the Basic Firewall:

Run the "Configure Email and Internet Connection" wizard by clicking on
"Connect to the Internet" in the Server Management "To Do List."
Verify your Connection type settings.
Choose the Ports to open for the Firewall and the Web Services you want to
make available.
Do not change your certificate.
Do not Change Exchange settings.

Once the wizard is complete your server should be configured correctly for
VPN, LAN and WAN access and the issue you are experiencing should be
resolved. Part of the problem is that your VPN server is using an
AutoConfigured IP address. Another tip to prevent that is to go into RRAS
and set up a Static Pool of IP addresses for VPN connections. Here is how
to do that:

1. Open Routing and Remote Access.
2. Right click on the server name and choose "Properties."
3. On the IP tab change the setting from DHCP to Static and enter a range
of addresses. It is best to make these different from your Internal network
so you could use 10.0.100.1 through 10.0.100.50 for instance. RRAS will
handle the routing in VPN so there is no problem connecting with a
different IP than what's on the LAN.

Best Regards,

Renee Geffre, Windows 2000 MCSE, MCSA
Microsoft Online Support Engineer

Get Secure! - www.microsoft.com/security

========================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

========================================================
This posting is provided "As Is" with no warranties, and confers no rights.

Relevant Pages

  • RE: VPN issue on SBS2003
    ... I understand that you encountered VPN connection issue when you use VPN to ... Internet clients or VPN to external VPN Server from SBS Client computers? ... Configure E-mail and Internet Connection Wizard ... Total GRE packets sent = 1 ...
    (microsoft.public.windows.server.sbs)
  • RE: PPTP VPN connection problems
    ... The problem is that the VPN does not disconnect. ... However after some idle period I can not send packets across the connection. ... A ping to the server would result in "Request timed out". ... If I connect with the VPN client locally to the internet ...
    (microsoft.public.windows.server.sbs)
  • Re: VPN Ports to Open
    ... the VPN connection after you change the firewall before SBS. ... On the server, please stop the Routing and Remote Access service. ... Total GRE packets sent = 1 ...
    (microsoft.public.windows.server.sbs)
  • Re: Windows 2003 VPN Default Gateway Issues
    ... Ethernet adapter Local Area Connection: ... If the VPN server is configured to use a static IP address ... the default gateway on the client is not the problem. ...
    (microsoft.public.windows.server.networking)
  • RE: VPN Connectivity issues through LAN
    ... I understand that you cannot ping SBS after ... you can establish VPN connection from the remote LAN. ... You have to rerun the CEICW to make sure your SBS 2003 server have right ...
    (microsoft.public.windows.server.sbs)