Re: RRAS and RDP issue

From: Marina Roos [SBS-MVP] (marina_at_roos.nodontwantspam.nl.com)
Date: 01/03/05


Date: Mon, 3 Jan 2005 21:06:10 +0100

Running the CEICW wizard and having the proper nic setup would have done
this automagically for you.

-- 
Regards,
Marina
Microsoft SBS-MVP
One of the Magical M&M's
"Datavalve" <Datavalve@discussions.microsoft.com> schreef in bericht
news:34054DFC-FE22-45D8-BE05-CA89F56C3829@microsoft.com...
> Ok I fixed my own problem. It would appear theat when RRAS is enabled it
adds
> a basic firewall to the external interface by default. I simply added the
> port (3389) required by Remote Desktop and was able to reconnect.
>
> Cudos to David Copeland for getting me to think in the right direction on
> this issue with his comment about blocking all traffic to and from the
server
> in VPN configuration. While the VPN configuration was not the issue, it
maked
> me think about  basic firewalling and what might be blocked prompting me
to
> look into the basic firewall setting in RRAS.
>
> So for anyone else facing this issue,  open the RRAS management console
and
> expand the server tree (YOURSERVERNAME (local)) then expand the IP Routing
> tree. Click on NAT/Basic Firewall. Right click on your External Interface
in
> the right pane and  choose Properties. On the Services and Ports tab
select
> Remote Desktop and click ok. Close the windows RRAS and you will be all
set.
>
> Thanks to all who helped, even Marina who ran me around in circles asking
> for IP information and pointing me to articles telling me that my TCP/IP
> configuration was "totally wrong", when there was nothing wrong with the
> TCP/IP config, but rather the configuration of the basic firewall in RRAS.
>
> "David Copeland [MSFT]" wrote:
>
> > How did you configure RRAS? Sounds like RRAS is being configured as a
VPN
> > server via it's own wizard, which will bock all traffic to/from the
server
> > except for VPN traffic.   Try disabling RRAS, and then configuring it
via
> > the SBS wizard under Start/Server Management/Internet and
E-mail/Configure
> > Remote Access.
> >
> > Or you can check in Start/Administrative Tools/Routing and Remote
> > Access/servername/IP Routing/General/ right click on the external nic
and
> > select Properties  then check in the Inbound and Outbound filters.
> >
> >
> > -- 
> >
> > Hope that helps,
> > David Copeland
> > Microsoft Small Business Server Support
> >
> > This posting is provided "AS IS" with no warranties, and confers no
rights.
> >
> > Newsgroups:
> > SBS v4.x : microsoft.public.backoffice.smallbiz
> > SBS 2000: microsoft.public.backoffice.smallbiz2000
> > SBS 2003: microsoft.public.windows.server.sbs
> >
> >
> > "Datavalve" <Datavalve@discussions.microsoft.com> wrote in message
> > news:F27A260B-7BE1-4C18-A625-F951AFFFD5AE@microsoft.com...
> > >I am not connecting via VPN I am using remote desktop.  The IP address
of
> > >the
> > > external interface of the sertver is DHCP assigned by the ISP and
changes
> > > on
> > > almost every reboot. The internal nic's address is posted in the
original
> > > post but it is:
> > > IP: 192.168.1.1
> > > SNM: 255.255.255.0
> > > DFGW: None (uses default gateway of external nic)
> > > DNS: 192.168.1.1 ( for local resolution)
> > >
> > >
> > >
> > > "Marina Roos [SBS-MVP]" wrote:
> > >
> > >> Hi,
> > >>
> > >> Please post the ipconfig/all from the server and from the vpn client
when
> > >> vpn-ed in.
> > >>
> > >> -- 
> > >> Regards,
> > >>
> > >> Marina
> > >> Microsoft SBS-MVP
> > >> One of the Magical M&M's
> > >>
> > >> "Datavalve" <Datavalve@discussions.microsoft.com> schreef in bericht
> > >> news:44C626A2-25D5-48F4-B062-E35D5E84178A@microsoft.com...
> > >> > Hi,
> > >> >       I have installed SBS 2003 and can connect via Remote Desktop
> > >> > without
> > >> > issue. When I enable RRAS using the default configuration, I can
not
> > >> > ping
> > >> the
> > >> > external interface and once I disconnect, I can not reconnect via
> > >> > Remote
> > >> > Desktop any longer until the RRAS service is stopped. Once RRAS is
> > >> > stopped
> > >> I
> > >> > can connect and ping without issue, however, my users can not
access
> > >> > the
> > >> > internet. Am I missing something here? Thanks for your help in
advance.
> > >> >
> > >> > Configuration:
> > >> > RealTek nic (external Interface)
> > >> > DHCP assigned IP address from ISP
> > >> >
> > >> > Sis900 nic (internal interface)
> > >> > IP:192.168.1.1
> > >> > SNM:255.255.255.0
> > >> > DFGW: none (uses DFGW of external nic)
> > >> > DNS: 192.168.1.1 (for local net resolution)
> > >> >
> > >> > I have installed the newest driver form RealTek. The newest driver
from
> > >> SIS
> > >> > (windows 2000 version of driver)  would not install saying it was
not
> > >> > for
> > >> my
> > >> > hardware so I kept the default driver that came with the OS.
> > >>
> > >>
> > >>
> >
> >
> >


Relevant Pages

  • Re: VPN Error 733, Event Log Error 20050 with SBS 2003 - revisited
    ... the VPN from within the LAN with anti-virus ... It seems that I need to look at repairing the whole of RRAS. ... disable or uninstall any antivirus software on the RRAS Server. ... check if there are some firewall between remote VPN client and RRAS server. ...
    (microsoft.public.windows.server.sbs)
  • Re: VPN and LAN conflicts
    ... After connecting to the RRAS, the server should have PPTP IP information. ... Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net ... > connections, applying computer settings and applying your personal settings) ...
    (microsoft.public.win2000.ras_routing)
  • Re: Bizzare ISA2004 VPN Issues, Please help
    ... Rebooted the server. ... I then manually opened RRAS, configured it to accept PPTP VPN connections. ...
    (microsoft.public.isa)
  • Re: RRAS on W2K3
    ... If I connect to the ISP using the RRAS ... Not much connection here. ... the same server? ... Networking, Internet, Routing, VPN Troubleshooting on ...
    (microsoft.public.windows.server.networking)
  • Re: VPN Error 733, Event Log Error 20050 with SBS 2003 - revisited
    ... First, we need to ensure the RRAS is running in a clean environment, make ... SBS Server from the LAN client directly by following this KB: ... How to configure a VPN connection to your corporate network in Windows XP ... the CEICW Wizard and the remote access wizard. ...
    (microsoft.public.windows.server.sbs)

Loading