Re: Requirements for RWW

When you configure the CEICW, it configures the Window Firewall.
You must do this in a 2 NIC setup. It's meant to be easy to setup.
I suppose what you can do is let all the relevant traffic through.
If you really intend to disable it, then it serves no purpose to have
2 NICs on the SBS box.

HTH,
Eugene Tan
SBS MVP

===================================
"JRowe12" <JRowe12@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:E89F9C5D-731C-46CA-8D1A-83EDE37124BF@xxxxxxxxxxxxxxxx
I forgot one last question, when I run the CEICW, I don't have to configure
Windows Firewall do I? I will have a firewall appliance doing that job, I
realize I still need to run the wizard, but was wondering about the
windows
firewall portion of it.

Thanks..

"Eugene Tan" wrote:

hi J,

On SBS2003, you MUST run the CEICW. Many things on SBS are
driven by wizards, they work and they keeps things easy and consistent
for most SBS end customers (and IT Pros that support them)
If you don't use the wizards, then you are likely to have a difficult
time;
even if you want a slightly different outcome, run the wizards and then
make adjustments.

Now your issue, you need to run the CEICW, then figure out and fix
what breaks. Is it because the RRAS is not running?
RWW is not working because your SBS is not setup correctly.

Henry has provided a good diagram of how your network should be
physically configured, along with some of the settings. But there is an
error on the SBS Internal NIC "Internal IP ( Static 192.168.2.1 )" -
it shd be a different private IP from the exernal NIC such as
192.168.16.2, and the DNS for this internal NIC shd point to itself
(i.e. 192.168.16.2). You then configure DNS forwards in the SBS's
DNS server, pointing to the ISP's DNS typcially.

If you run the CEICW (after your NICs are enabled, working and
appropriately named to avoid confusion), the wizard helps you to
configure and enable/disable several services, including RWW.

To use RWW, you need to specify a FQDN and then you need to
configure this exact FQDN on an external DNS point to your IP.
On your router, you need to forward all relevant traffic (or all traffic)
to your SBS.

While it's a production machine, you should set it up correctly.
Arrange a timeslot to get this done, and you'll have a smoother ride.

HTH,
Eugene Tan
SBS MVP

===================================
"JRowe12" <JRowe12@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:243E0D53-4DF4-4FD6-B1BD-B98F9555F4C8@xxxxxxxxxxxxxxxx
As far as the QB issue and 2 Nics, they have a programmer they work
with
and
the only way they got things to work correctly in their QB database was
to
disable the 2nd Nic and since that is their main business app, I didn't
want
to mess with something that was working. The model you have below, is
that
with me re-enabling the 2nd Nic? I've not run the CEICW, mainly becasue
on
the intial install of SBS, I ran the CEICW, and then could not connect
any
of
the workstations to the Server, if I run the CEICW, is basically what
I'm
looking for is the creating the certificate? They do not use this
server
for
mail. They use an external mail host for that via POP3. Thank you

"Henry Craven {SBS-MVP}" wrote:

What makes you believe QB doesn't work in a 2 NIC setup ?
It works fine for everyone else... so first I've heard of it...
I suggest we get you configured correctly to start with..

Internet
|
Public IP ( Static xxx.xxx.xxx.xxx)
Modem / Router ( forward ports to 192,168.1.2 )
Internal IP ( Static 192.168.1.1)
|
External IP ( Static 192,168.1.2)
SBServer
Internal IP ( Static 192.168.2.1 )
( forwarders DNS1 & 2 As recommended by your ISP )
DHCP Svr ( scope as set up by SBS 192.168.2.10 . 99)
|
Switch
|
---------------------------------------------
| | | | | |
Clients ( via DHCP) Printers ( static IPs 192.168.2.100..etc.)
( DNS points to SBServer 192.168.2.1 )

A record:
<YourServerName>.<yourDomainName>.<TLD(s)>
Your Public IP ( Static xxx.xxx.xxx.xxx)

MX Record ( if receiving Mail directly to SBS/Exchange )

10 <YourServerName>.<yourDomainName>.<TLD(s)>.
20 Failover Mail server 1
30 Failover mail server 2

In the CEICW create the Certificate as
<YourServerName>.<yourDomainName>.<TLD(s)>.

Connect to OWA from the internet via:
https://<YourServerName>.<yourDomainName>.<TLD(s)>/Exchange

Accept and install the Cert.

Connect to RWW from the internet via:
https://<YourServerName>.<yourDomainName>.<TLD(s)>/Remote

--
Henry Craven {SBS-MVP}


"JRowe12" <JRowe12@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:8266A286-0E31-4ABD-AB41-AF9800D2C36B@xxxxxxxxxxxxxxxx
Sorry I didn't reply to this sooner, the SBS in question has 2 Nics,
but I
had to disbale one due to their Quickbooks apps not liking the 2 nic
configuration. I do have public IP addresses I could use, is this
what
I
need
to do? Configure the SBS to use a public IP, make sure my ports are
forwarded, then try this? I have successfully connected to RWW
inside
the
network with the private IP address set on the server now.






.

Relevant Pages

  • Re: Changing ISPs
    ... The SBS internal nic and the external nics must be on different subnets. ... In all cases, the DNS is 192.168.16.2 on every nic in the LAN, but of course the SBS as DHCP server will give the workstations the correct settings after you run the CEICW. ...
    (microsoft.public.windows.server.sbs)
  • Re: Three network cards in a SBS 2003 server?
    ... So, in your case, you'd need to disable the iSCSI adapter while running the CEICW, but you could then re-enable it immediately after. ... I currently run 3 NICs - one internet facing, one on the SBS lan, and one connecting to a separate test subnet. ... Is it possible to have three network cards in a SBS 2003 server? ...
    (microsoft.public.windows.server.sbs)
  • Re: Three network cards in a SBS 2003 server?
    ... The CEICW _needs_ to see the two NICs that do the actual work of SBS. ... OTOH, if you boot off a local disk, and use it as the system disk, then your iSCSI is just additional drive letters. ...
    (microsoft.public.windows.server.sbs)
  • Re: Requirements for RWW
    ... As the IT Infrastructure Professional I'd suggest you speak to the programmer and ascertain exactly -why- it won't work with 2 NICs. ... That aside you can configure SBS with one NIC if you want. ... The CEICW has been thoroughly tested and de-bugged and runs successfully on hundreds of thousands of SBS Networks. ...
    (microsoft.public.windows.server.sbs)
  • Re: This event makes me nervous...
    ... CEICW = To-Do-List ... >> SBS premium, you've got ISA guarding that external NIC. ... >> Two Nics, a dynamic IP address, ISA, router ...
    (microsoft.public.windows.server.sbs)