RE: VPN Connectivity issues through LAN
- From: v-terliu@xxxxxxxxxxxxxxxxxxxx (Terence Liu [MSFT])
- Date: Mon, 16 Jul 2007 05:54:53 GMT
Hello Customer,
Thank you for posting here.
According to your description, I understand that you cannot ping SBS after
the VPN connection established. If I have misunderstood the problem, please
don't hesitate to let me know.
As you mentioned, you can establish VPN connection from the remote LAN.
Please try to access SBS internal resources (For example,
\\SBSServerName\SharedFolderName, http://SBSServerName/exchange or
http://SBSInternalIPAddress/remote, etc.) after the VPN established, what's
the result?
Based on my research, I suggest we try the following steps to completely
reconfigure the VPN on SBS to see if we can resolve this issue:
1. Disable RRAS
a. Schedule a network down time.
b. Please open Routing and Remote Access console on SBS thru run command
"rrasmgmt.msc"
c. Right click the SBSname (local), select Disable Routing and Remote
Access console
2. Run CEICW on SBS
You have to rerun the CEICW to make sure your SBS 2003 server have right
network configuration. Go through the follow KB and Rerun CEICW again
carefully.
How to configure Internet access in Windows Small Business Server 2003
http://support.microsoft.com/kb/825763/en-us
3. Run Remote Access wizard
a) On the Small Business Server 2003-based server, click To Do List in the
left pane of the Server Management console.
b) Under Network Tasks, click Configure Remote Access.
c) Click Next, click Enable Remote Access, click to select the VPN Access
check box, and then click Next.
d) Type the fully qualified public domain name (your public DNS name) of
your server, click Next, and then click Finish.
e) When the wizard is completed, click Close.
4. Then you can access RWW to download Connection Manager or copy the file
from SBS server c:\ ClientApps\Connection Manager\SBSPackage.exe. Please
save the sbspackage.exe file in VPN client computer. Then double-click
SBSPackage.exe to run it. After this file run the "connect to small
business server" will be created and you can use it to connect VPN to your
SBS server.
If the issue reoccur, please use the PPTP Ping tool included in Windows XP
Support tools to confirm whether the ports are opened to allow VPN
connection. You can find Windows XP support tool from the "Support\Tools"
folder in the Windows XP CD.
a) Get two utilities pptpsrv.exe and pptpclnt.exe from the Windows XP
support tools.
b) Run the pptpsrv.exe utility on the SBS server.
c) Run the pptpclnt.exe utility on the problem Windows XP
Professional-based computer.
Detailed steps are:
Step 1. On the server, please stop the Routing and Remote Access service.
Then, please bring up a command prompt and go to the folder containing
PPTPsrv.exe. Then type PPTPsrv to run it instead of double clicking to run
the application. This method will let the final result displayed on screen
constantly.
Then, you will see the following on screen
----------------------------------------------------------------
C:\Documents and Settings\Administrator>cd desktop
C:\Documents and Settings\Administrator\Desktop>pptpsrv
Now you must run pptpclnt.exe on remote machine
Waiting for inbound connection on TCP port 1723...
------------------------------------------------------------------
Step 2. On the client computer, please bring up a command prompt and run
the command "pptpclnt SBSserver". The expected result should be as following
-----------------------------------------------------------------------
C:\Documents and Settings\user\Desktop>pptpclnt server.domain.com
Initializing WinSock...
Obtaining host information...
Successfully resolved server's host information
======================================
Enter data to send to server (between 1 and 255 chrs.), then hit enter:
-->This is a test
Successfully connected to server using TCP port 1723 (PPTP)
Sending data to server
Waiting for a reply to the data which was just sent...
Received a reply. Reply contains the following text:
---> Hello, there! This is a reply from the server.
=================================
Connectivity test to TCP Port 1723 was successful!!!
Closing down socket...
=================================
Creating a socket to test GRE protocol traffic...
Total GRE packets sent = 1
Total GRE packets sent = 2
Total GRE packets sent = 3
Total GRE packets sent = 4
Total GRE packets sent = 5
=====================================
Check server to see if the GRE packets were received successfully
=====================================
Closing down socket
Goodbye!
-----------------------------------------------------------------------
Step 3. At last, please go back to the server and check the result. You
will see the followings
---------------------------------------------------------------------------
Inbound connection from client has completed successful
Data received from client:
---> This is a test
Sending the message 'Reply from server' to the client
=====================================================
Connectivity test to TCP Port 1723 was successful!!!
Closing down socket...
=====================================================
Created socket for GRE protocol test
Listening on PROTOCOL 47 for incoming GRE packets...
Total GRE packets received = 1
Total GRE packets received = 2
Total GRE packets received = 3
Total GRE packets received = 4
Total GRE packets received = 5
======================================
GRE protocol test was successful!
======================================
Closing socket
Goodbye!
---------------------------------------------------------------------------
Do you pass the PPTP ping test?
If we cannot resolve the issue after we perform the above steps, please
kindly help me collect some information for further investigation:
1. Once the VPN connection is established, Run command "ipconfig /all >
c:\ipconfig_sbs.txt" and "route print > c:\route_sbs.txt" on SBS, send the
files c:\ipconfig_sbs.txt and c:\route_sbs.txt to me at
v-terliu@xxxxxxxxxxxxx
2. Once the VPN connection is established, Run command "ipconfig /all >
c:\ipconfig_client.txt" and "route print > c:\route_client.txt" on
problematic client, send the files c:\ipconfig_client.txt and
c:\route_client.txt to me at v-terliu@xxxxxxxxxxxxx
Hope these steps will give you some help.
Thanks and have a nice day!
Best regards,
Terence Liu(MSFT)
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| Thread-Topic: VPN Connectivity issues through LAN
| thread-index: AcfGiJrlA9x1DAv8SbmjuPb7WPmVjQ==
| X-WBNR-Posting-Host: 207.46.192.207
| From: =?Utf-8?B?V2VpLVllbg==?= <WeiYen@xxxxxxxxxxxxxxxxxxxxxxxxx>
| Subject: VPN Connectivity issues through LAN
| Date: Sat, 14 Jul 2007 19:34:01 -0700
| Lines: 18
| Message-ID: <B5015942-DBD8-432A-848E-2F36E02F27D4@xxxxxxxxxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
| Newsgroups: microsoft.public.windows.server.sbs
| Path: TK2MSFTNGHUB02.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:50381
| NNTP-Posting-Host: tk2msftsbfm01.phx.gbl 10.40.244.148
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| We have a client (who has Small Business Server Standard 2003) that we
| recently added in a second network card because they wanted to use a VPN
and
| such. I went through the ICW and the RAS Connection Wizard
appropriately.
|
| When the clients connect through their Vodafone Mobile Connect Cards (3G
| like the Sprint cards I suppose in the US) they are able to connect to
the
| VPN/SBS server just fine, it authenticates and I can see the network and
do
| everything I want. However when they are connect through a remote LAN
| connection, it authenticates and when I try to ping servers it fails. I
have
| tried using a the LAN different ip range and that doesn't work at all.
|
| The funny thing is that on our SBS Premium setup in our office. . .it
works
| like a snap. I am even able to connect to the VPN using the same ip range
on
| the remote LAN as the SBS/VPN server! So I am kind of baffled where to
look.
| I have tried to find the heart of the problem or where to go from here.
Any
| help would be appreciated.
|
|
|
.
- Prev by Date: RE: fax problems
- Next by Date: RE: Quick question on resetting computer accounts in AD
- Previous by thread: Re: Backup Fails sbs 2003 - same issue with two clients
- Next by thread: RE: Quick question on resetting computer accounts in AD
- Index(es):
Relevant Pages
|
