RE: Public IP becomes unpingable after time
- From: "klbiswe" <kylelb@xxxxxxxx>
- Date: Tue, 17 Jan 2006 19:08:02 -0800
Hi Crina
I just wanted to say that I am certain that I am running Server 2003
Enterprise Edition and that this server is behind no firewall at this time.
Also to clear up any confusion the VPN does work most of the time its just
that after a time the PUBLIC NIC becomes unresponsive to any pings which is
giving the error 800 on the VPN side but it also makes our website become
unavailable until I go in and disable and re-enable the PUBLIC NIC.
I have no idea what CEICW is? As for #2 I have a static pool of 50 ip
addresses that the server can assign. I have also confirmed that I get the
same issues from multiple locations and from multiple computers. If you need
a diagram of our network layout to see how it has been configured I can get
that information together for you.
Thanks,
Kyle
""Crina Li"" wrote:
> Hi Kyle,
>
> Thank you for posting in SBS newsgroup.
>
> From the description, I understand the issue to be: when you created VPN
> from client computer to Windows 2003 server, you got error 800 and Public
> NIC of server become unresponsive. If I have misunderstood your concerns,
> please do not hesitate to let me know.
>
> Would you please help me double confirm you are using Windows server 2003
> Enterprise or SBS 2003 Standard edition?
>
> Currently, I will provide some general information from SBS 2003 as
> following:
>
> The error code indicated "Unable to establish the VPN connection. The VPN
> server may be unreachable, or security parameters may not be configured
> properly for this connection". In most cases, the problem could be caused
> because the server address information was not properly configured in the
> remote access wizard or the relevant ports are not opened on router.
>
> Would you please double confirm if you have followed the steps below to
> configure VPN access on an SBS environment?
>
> 1. Run CEICW, follow the wizard and select Enable firewall and then make
> sure Virtual Private Networking (VPN) is selected in the Services
> Configuration page. And make sure you have typed the public FQDN of the SBS
> server on the Web Server Certificate page.
> 2. Run Remote Access Wizard in Server Management\Internet and
> E-mail\Configure Remote Access, and select VPN access in the Remote Access
> Method page. After finishing this wizard, RRAS is configured to allow
> inbound VPN access, and it can assign IP addresses to the VPN clients by
> using DHCP.
>
> Note: When we run the remote access wizard to set up the VPN service, we
> need to input the public IP address or the public FQDN of the SBS server.
> We need to make sure that the address can be accessed from the internet.
>
> 3. On the VPN client, go to https://publicFQDN/remote, clear I'm using a
> public or shared computer, log in and download Connection Manager.
> 4. Install Connection Manager on the VPN client.
> 5. Is there a hardware router installed in front of the SBS server? If so,
> ensure that the port forwarding for TCP 1723 and GRE port (protocol number
> 47) are opened. PPTP VPN is negotiating a connection on TCP port 1723 and
> send data to and from the PPTP server using the GRE protocol (IP Protocol
> 47, 0x2F if you are looking in Network Monitor). You should open port 1723
> on the router and also make sure IP Protocol 47 is allowed.
>
> If you still cannot establish the VPN connection, please help to collect
> the following information for troubleshooting the problem:
>
> 1. What's the VPN server name you entered when you ran the Remote Access
> Wizard? Can you ping that name from the external client? The VPN server
> name should be the public FQDN or the public IP address of the SBS server.
> 2. Can you create VPN to SBS through new connection wizard on My Network
> Places on external client?
> 3. Get the IPCONFIG /ALL results when Creating VPN on client computer and
> SBS.
> 4. Can you ping the server name and IP from the problematic client?
> 5. Would you please post a screen shot to newsgroup?
> 6. In addition, you may test as following: connect a workstation between
> the external side of the SBS server and the router, then configure it with
> the proper IP settings to match the subnet on that side of the server and
> try to see if you can VPN by using the external IP of the SBS server on
> this case (and not the public IP on the router), if this works, then the
> problem would lie somewhere on the router or the Internet route, but if it
> fails, then we have something to start working on from the server side.
>
> Also, you may try connecting to SBS using VPN in another external location
> to test if the problem exists.
>
> More information:
>
> 319108 Error Message: VPN Connection Error 800: Unable to Establish
> Connection
> http://support.microsoft.com/?id=319108
>
> 323441 How To Install and Configure a Virtual Private Network Server in
> Windows
> http://support.microsoft.com/?id=323441
>
> 305550 How to configure a VPN connection to your corporate network in
> Windows
> http://support.microsoft.com/?id=305550
>
> I appreciate you taking the time to gather the information above; it is
> very important for us to narrow down the cause of the problem.
>
> Hope the information help and I look forward to your reply.
>
> Best regards,
>
> Crina Li (MSFT)
>
> Microsoft CSS Online Newsgroup Support
>
> Get Secure! - www.microsoft.com/security
>
> =====================================================
> This newsgroup only focuses on SBS technical issues. If you have issues
> regarding other Microsoft products, you'd better post in the corresponding
> newsgroups so that they can be resolved in an efficient and timely manner.
> You can locate the newsgroup here:
> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
>
> When opening a new thread via the web interface, we recommend you check the
> "Notify me of replies" box to receive e-mail notifications when there are
> any updates in your thread. When responding to posts via your newsreader,
> please "Reply to Group" so that others may learn and benefit from your
> issue.
>
> Microsoft engineers can only focus on one issue per thread. Although we
> provide other information for your reference, we recommend you post
> different incidents in different threads to keep the thread clean. In doing
> so, it will ensure your issues are resolved in a timely manner.
>
> For urgent issues, you may want to contact Microsoft CSS directly. Please
> check http://support.microsoft.com for regional support phone numbers.
>
> Any input or comments in this thread are highly appreciated.
>
> =====================================================
>
> This posting is provided "AS IS" with no warranties, and confers no rights.
> --------------------
> | Thread-Topic: Public IP becomes unpingable after time
> | | From: "=?Utf-8?B?a2xiaXN3ZQ==?=" <kylelb@xxxxxxxx>
> | Subject: Public IP becomes unpingable after time
> | Date: Mon, 16 Jan 2006 21:25:02 -0800
> | | Newsgroups: microsoft.public.windows.server.sbs
> | |
> | Hi,
> | I am actually running Server 2003 Ent. Edition, but anyhow my server has
> 2
> | NIC's in it a public and a private. It is currently acting as a VPN
> server
> | and a Web Server. I'm not sure exaclty what happens to the Public NIC to
> make
> | it become unresponsive but on the VPN side it gives me an error 800. I
> have
> | found that if I disable and then enable the Public NIC then everything
> will
> | run fine again for a day or two but the issue allways comes back. Both my
> | public and private NIC's have static ip's and I have confirmed the DNS
> | servers on both. I am at a loss and very frustrated with the issue any
> help
> | would be greatly appreciated.
> |
> | Thanks,
> | Kyle
> |
>
>
.
- Follow-Ups:
- RE: Public IP becomes unpingable after time
- From: "Crina Li"
- RE: Public IP becomes unpingable after time
- References:
- RE: Public IP becomes unpingable after time
- From: "Crina Li"
- RE: Public IP becomes unpingable after time
- Prev by Date: RE: Failure to install remote access capability of SBS 2003
- Next by Date: Re: what to do with local and remote users for a SBS Network?
- Previous by thread: RE: Public IP becomes unpingable after time
- Next by thread: RE: Public IP becomes unpingable after time
- Index(es):
Relevant Pages
|
