Re: vpn 800 (so many people, so much research)

Tech-Archive recommends: Fix windows errors by optimizing your registry



Your external nic should have 192.168.16.2 listed for its dns. You
enter the isp dns when you run the connect to the internet wizard. I
have on occasion had to blow out and reinstall the dhcp settings. Not
on SBS installs but on plain jane Server 2003 where the dhcp got
goofy. You should not have comcast listed at all.

This is a valid and "proper" config.

Windows IP Configuration

Host Name . . . . . . . . . . . . : haassbs
Primary Dns Suffix . . . . . . . : haas.local
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : Yes
DNS Suffix Search List. . . . . . : haas.local

PPP adapter RAS Server (Dial In) Interface:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface
Physical Address. . . . . . . . . : 00-53-45-00-00-00
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.16.15
Subnet Mask . . . . . . . . . . . : 255.255.255.255
Default Gateway . . . . . . . . . :
NetBIOS over Tcpip. . . . . . . . : Disabled

Ethernet adapter Server Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Network
Connection
Physical Address. . . . . . . . . : 00-16-76-C4-1D-8E
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.16.3
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : 192.168.16.3
Primary WINS Server . . . . . . . : 192.168.16.3

Ethernet adapter External:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/1000 PM Network
Connection
Physical Address. . . . . . . . . : 00-16-76-C4-1D-8D
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 69.15.x.x
Subnet Mask . . . . . . . . . . . : 255.255.255.248
Default Gateway . . . . . . . . . : 69.15.x.x
DNS Servers . . . . . . . . . . . : 192.168.16.3
NetBIOS over Tcpip. . . . . . . . : Disabled

Your dhcp is bound to the internal nic and only the internal nic? dhcp
server name/Properties/Advanced/Bindings.

You have options 003, 006, 015, 044, 046 choosen? Look at these
setting which might be wrong but you should get these added back if
you delete and reinstall.

On Wed, 28 Feb 2007 12:28:09 -0500, "MDBJ" <me@xxxxxx> wrote:

I've looked, I've cried, I've reviewed, and I'm failing to find my solution-
if anyone has any avenues for me to pursue, I'd be most grateful.

I have sbs2003, not with ISA (actually, I have the license& disc but haven't
installed it yet, a year later)

I have lost the ability to connect to my SBS remotely via vpn

recently, I had a blackout, (always fun, in my house many things beep when
the power goes out)
so at 1-2am I went and shutdown my server & pc's & ups.s in the home office.

next AM I turned everything back on.. and I lost the ability to vpn to my
server from remote (8 miles away) among other things.. everything else is
now restored,
but my vpn connection continues to fail with a 800 message.

I've rerun ceicw, and tried the process of disabling RRAS, configuring it to
run both VPN and nat and renabling

I''ve checked my broadband ISP supplied modem/router (smc) and my server IP
and it is DMZ from the internet to my server
(so I don't think it is my router not passing the gre 47 protocol through)
my fixed IP's are the same.

I cannot use the sbs/remote download package to test as the remote PC is
running xp64 and the package won't run "not for this cpu architecture"
looking from the server, I can confirm at canyouseeme.org that port 1723 is
accepting traffic

the only error I have found, that MAY be connected, is a weird error in my
system log:
I have not figured out how to fix it
-----
"Event Type: Error Event Source: ipnathlp Event Category: None Event ID:
30013 Date: 2/27/2007 Time: 1:11:10 PM
User: N/A Computer: 84SLP71 Description:
The DHCP allocator has disabled itself on IP address 192.168.16.2, since the
IP address is outside the 192.168.116.2/255.255.255.0 scope from which
addresses are being allocated to DHCP clients. To enable the DHCP allocator
on this IP address, please change the scope to include the IP address, or
change the IP address to fall within the scope."
-----

192.168.116.2 for the dhcp allocator-- should be 16.2 and I can't find
where to change that at all.

as it's often asked for, I'm including a copy of my ipconfig /all at the
very bottom,

it's worth noting I did originally screw up in setting the system, and DHCP
is set work on my
internet connection because of this, I have always hard coded the ip's on my
devices as I added
them to the lan...I never bothered going through the ringamorle of moving
it.


C:\Documents and Settings\Administrator>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : 84slp71
Primary Dns Suffix . . . . . . . : AFRH.local
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : Yes
DNS Suffix Search List. . . . . . : AFRH.local
wp.comcast.net

Ethernet adapter Server Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/100 S Server Adapter
Physical Address. . . . . . . . . : 00-0E-0C-7F-36-44
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.16.2
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : 192.168.16.2
Primary WINS Server . . . . . . . : 192.168.16.2

Ethernet adapter internet connection:

Connection-specific DNS Suffix . : wp.comcast.net
Description . . . . . . . . . . . : Intel(R) PRO/100 S Server Adapter #2
Physical Address. . . . . . . . . : 00-0E-0C-7F-37-8E
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 10.1.10.22
Subnet Mask . . . . . . . . . . . : 255.255.0.0
Default Gateway . . . . . . . . . : 10.1.10.1
DHCP Server . . . . . . . . . . . : 10.1.10.1
DNS Servers . . . . . . . . . . . : 68.87.64.146
68.87.75.194
NetBIOS over Tcpip. . . . . . . . : Disabled
Lease Obtained. . . . . . . . . . : Tuesday, February 27, 2007 12:58:44
PM
Lease Expires . . . . . . . . . . : Tuesday, March 06, 2007 12:58:44 PM

C:\Documents and Settings\Administrator>


.



Relevant Pages

  • Re: Urgent! New router and big disaster
    ... OK, yes, I've struck a router which would only allow DHCP clients access to ... no internet connection from the server. ...
    (microsoft.public.windows.server.sbs)
  • Re: Urgent! New router and big disaster
    ... Set the 'external' interface of SBS to get it's IP via DHCP from the router ... If the ws does not get an IP from DHCP check the event log on the server, ... They can go one day with out internet, ...
    (microsoft.public.windows.server.sbs)
  • RE: VPN issues on SBS2003 with ISA 2004 installed
    ... server configuration. ... | internet access to the users. ... | DNS Suffix Search List: ... | Connection-specific DNS Suffix. ...
    (microsoft.public.windows.server.sbs)
  • Re: Single 2003 Server with DHCP, DNS and ISA 2006
    ... As soon as I created my own DHCP ... I can ping the server by IP address and name from the workstation. ... Not too surprising with the above subnet problems. ... To the Internet. ...
    (microsoft.public.windows.server.general)
  • Re: Problem With Joining XP Computer to Windows 2003 Domain
    ... One, if the DC is connected directly to the Internet, DISCONNECT IT by ... I have assigned the server to Domain Controller ... > seem to be pointing to DHCP scope possibly on the server's configuration ...
    (microsoft.public.windowsxp.network_web)