RE: VPN & SQL Issue

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Hi Joel,

Welcome to SBS newsgroup.

Issue description:
===========

I understand that you want to access the SQL database on the SBS 2000 via
VPN connection establishing from SBS 2003.

Analyzing and suggestion:
============

Can I assume that you connect to SBS via VPN connection, then you could not
access the SQL database via the file link on SBS 2003.

Generally speaking, this should be a DNS or WINS issue. As you access the
SQL database through local network, you need to resolve the remote SBS 2000
server via either FQDN or IP address. You need to make sure that the VPN
connection to the SBS 2003 domain should use the default gateway on SBS
side but not remote side, or the traffic will not through the SBS 2003
default gateway but through default gateway on the VPN clients.

For your convenience, I would like to give you some suggestions on this
issue:

Windows default VPN client:

1. Right click the VPN connection on the client computer, choose properties.
2. In the networking tab, choose the Internet Protocol (TCP/IP) from the
list. Then click the properties.
3. Click the Advance in the next page.
4. Check the "Default gateway on the remote network".


If you use the Connection Manager to access the SBS network, by default it
will use the default gateway on SBS 2003 domain.

If you connect the VPN via third part VPN client, you need to follow the
instruction manual of the VPN client to change the default gateway to be
SBS 2003 domain.

For your network design:

SBS 2003:

As you have two NICs with one hardware firewall, please make sure that you
have point the default gateway on the hardware firewall's internal IP or
you will encounter problem to access outside domain resources.

SBS 2000:

We recommend use the DNS on SBS 2000 and configure DNS forward to point to
ISP' DNS or point to your firewall, this will prevent many unexpected DNS
resolution problem when user access internal resources such as SQL database
exchange or shared resources.

If the problem still exists, could you describe your network topology more
clear, if my description below is not correctly.

{SBS 2003 Side}-firewall-{SBS 2000}

I appreciate your understanding, if you have any further concerns, please
feel free to let me know. I am glad to help you.



Best regards,

Charles Yang (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.


=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| Thread-Topic: VPN & SQL Issue
| thread-index: AcWzP/XMGwaPs3VoQtaxisjIwg9erw==
| X-WBNR-Posting-Host: 24.73.192.54
| From: "=?Utf-8?B?Sm9lbA==?=" <Joel@xxxxxxxxxxxxxxxxxxxxxxxxx>
| Subject: VPN & SQL Issue
| Date: Tue, 6 Sep 2005 17:06:13 -0700
| Lines: 24
| Message-ID: <C5DBFA2E-0B53-4028-896A-7E04742EF8F4@xxxxxxxxxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| Newsgroups: microsoft.public.windows.server.sbs
| NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:151285
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| I have a Dell Poweredge 2800 server running SBS 2003 SP1 on Domain A. It
| functions as DC, Exchange server and file server.
| Then I have a Dell Poweredge 1400 server running SBS 2000 on Domain B.
It
| functions as the SQL server.
| Servers A & B are completely seperate, one is not a member server of
| another. As it stands internal users from Domain A can use the SQL
database
| on Domain B. This is done by using a link file on server/domain A, which
| points to server/domain B.
|
| Now the problem is that when users tunnel in using the VPN function of
SBS
| 2003 (Domain A) they are completely unable to see server/domain B and are
| unable to access the SQL database.
|
| Any ideas as to where the culprit may lie. DNS settings perhaps?
|
| Server A is the DHCP & DNS server for all of the workstations in the
| building. It has 2 NIC's one internal and one external. All workstation
| internet traffic is then routed to the gateway(Watchguard Firewall).
Server
| B is using one nic and it's DNS is pointed directly to the gateway. This
was
| done in order to allow internet access to the SQL database via a web
| interface. (similar to Exchange via OWA)
|
| Thanks in advance for any suggestions/comments, and feel free to ask for
any
| other info you may need.
|

.

Relevant Pages

  • Re: Some Questions
    ... you may need to follow the steps below to configure VPN access ... And make sure you have typed the public FQDN of the SBS ... server on the Web Server Certificate page. ... log in and download Connection Manager. ...
    (microsoft.public.windows.server.sbs)
  • RE: VPN Connection Problems
    ... Note that we are able to successfully VPN into the office. ... to browse the network, RDP to the server or even ping the server. ... > This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • RE: Enabling VPN Remote Access using SBS 2003 standard with ISA 20
    ... I am glad to hear the VPN issue has been resolved! ... on the SBS Server. ... Enabling VPN Remote Access using SBS 2003 standard with ISA ...
    (microsoft.public.windows.server.sbs)
  • RE: SBS 2003 and WAN connections useing Cisco Routers
    ... Thank you for posting in SBS newsgroup. ... do you mean you have created VPN using router to router or router ... server on the Web Server Certificate page. ... 0x2F if you are looking in Network Monitor). ...
    (microsoft.public.windows.server.sbs)
  • RE: Enabling VPN Remote Access using SBS 2003 standard with ISA 2004
    ... SBS Server, the inbound VPN connection no longer worked. ... Configure the VPN connection on the client and do a VPN test. ...
    (microsoft.public.windows.server.sbs)