RE: Connection times to devices behind VPN are extremely slow

Hello Customer,

Thank you for posting here. Let's also thank Claus for the input.

According to your description, I understand that the remote VPN client
unable ping internal clients. If I have misunderstood the problem, please
don't hesitate to let me know.

Based on my research, I suggest we try the following steps to reconfigure
the VPN connection see if we can resolve this issue:

1) Disable RRAS

a. Schedule a network down time.

b. Please open Routing and Remote Access console on SBS thru run command
"rrasmgmt.msc"

c. Right click the SBSname (local), select Disable Routing and Remote
Access console

2) Run CEICW on SBS

You have to rerun the CEICW to make sure your SBS 2003 server have right
network configuration. Go through the follow KB and Rerun CEICW again
carefully.

How to configure Internet access in Windows Small Business Server 2003
http://support.microsoft.com/kb/825763/en-us

3) Run Remote Access wizard

a. On the Small Business Server 2003-based server, click To Do List in the
left pane of the Server Management console.

b. Under Network Tasks, click Configure Remote Access.

c. Click Next, click Enable Remote Access, click to select the VPN Access
check box, and then click Next.

d. Type the fully qualified public domain name (your public DNS name) of
your server, click Next, and then click Finish.

e. When the wizard is completed, click Close.

4) Then you can access RWW to download Connection Manager or copy the file
from SBS server c:\ClientApps\Connection Manager\SBSPackage.exe. Please
save the sbspackage.exe file in VPN client computer. Then double-click
SBSPackage.exe to run it. After this file run the "connect to small
business server" will be created and you can use it to connect VPN to your
SBS server.

If we cannot resolve the issue after we reconfigure the VPN connection,
please help me collect some information for further investigation:

1. Can you ping SBS from remote clients?

2. Do the remote clients access Internet quite quick?

3. Once the VPN connection is established, run command "ipconfig /all >
c:\ipconfig_sbs.txt" and "route print > c:\route_sbs.txt" on SBS, send the
files c:\ipconfig_sbs.txt and c:\route_sbs.txt to me at
v-terliu@xxxxxxxxxxxxx

4. Once the VPN connection is established, run command "ipconfig /all >
c:\ipconfig_client.txt" and "route print > c:\route_client.txt" on
problematic client, send the files c:\ipconfig_client.txt and
c:\route_client.txt to me at v-terliu@xxxxxxxxxxxxx

5. Gather MPS network report on SBS:

a. Download MPSrepot_network from
http://download.microsoft.com/download/b/b/1/bb139fcb-4aac-4fe5-a579-30b0bd9
15706/MPSRPT_NETWORK.EXE

b. Run MPSRPT_NETWORK.exe on the server box.

c. The tool will automatically collect the information. This procedure will
take 10~15 minutes.

d. Open Windows Explorer, navigate to the folder:
%SystemRoot%\MPSReports\Network\Reports\Cab\

e. Send the .cab file directly to me at v-terliu@xxxxxxxxxxxxx

I hope these steps will give you some help.

Thanks and have a nice day!

Best regards,

Terence Liu(MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| From: voipfc <voipfc@xxxxxxxxxxxxxx>
| Newsgroups: microsoft.public.windows.server.sbs
| Subject: Connection times to devices behind VPN are extremely slow
| Date: Mon, 17 Sep 2007 14:50:30 -0700
| Organization: http://groups.google.com
| Lines: 22
| Message-ID: <1190065830.092120.149460@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
| NNTP-Posting-Host: 217.34.36.39
| Mime-Version: 1.0
| Content-Type: text/plain; charset="iso-8859-1"
| X-Trace: posting.google.com 1190065830 19575 127.0.0.1 (17 Sep 2007
21:50:30 GMT)
| X-Complaints-To: groups-abuse@xxxxxxxxxx
| NNTP-Posting-Date: Mon, 17 Sep 2007 21:50:30 +0000 (UTC)
| User-Agent: G2/1.0
| X-HTTP-UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US;
rv:1.8.1.6) Gecko/20070725 Firefox/2.0.0.6,gzip(gfe),gzip(gfe)
| Complaints-To: groups-abuse@xxxxxxxxxx
| Injection-Info: o80g2000hse.googlegroups.com; posting-host=217.34.36.39;
| posting-account=ps2QrAMAAAA6_jCuRt2JEIpn5Otqf_w0
| Path:
TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTFEEDS01.phx.gbl!news-out.
cwix.com!newsfeed.cwix.com!image.surnet.ru!newsfeed00.sul.t-online.de!t-onli
ne.de!news.glorb.com!postnews.google.com!o80g2000hse.googlegroups.com!not-fo
r-mail
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:63602
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
|
| I have set up Remove VPN access using the wizard and the Connection
| icon on the mobile users desktop.
|
| Connection to the server IP addresses are quick even on via dial up
| connection, but the other machines on the network hardly respond, they
| keep timing out. I get time outs when I try to ping their IP
| addresses.
|
| When they connect times are over 2000ms.
|
| Is there something in the VPN setup that slows down or blocks the
| connection?
|
| I even turned of the firewall running on the client computer and it
| was still slow.
|
| When I connect via putty to access systems through remote desktop
| connections are quite quick.
|
| /voipfc
|
|

.

Relevant Pages

  • Re: VPN Client Incorrect Netmask (Vista -> Win2K3)
    ... The remote client gets its network config from the remote access server as part of the ppp negotiation. ... Microsoft programmers SEVERLY damaged the VPN Client in Vista and Server 2008. ...
    (microsoft.public.windows.server.networking)
  • RE: VPN error with sbs2003 and isa 2000 installed
    ... connection from a remote client, the connection terminated in the process ... You receive an "Error 721" error message when you try to establish a VPN ... Open Server Management console and navigate to 'To Do ... Please temporarily place a client directly connected to the external NIC ...
    (microsoft.public.windows.server.sbs)
  • Re: VPN PPTP problem
    ... external NIC IP is in the same subnet with the remote client. ... Please try to establish the VPN connection from the internal clients. ... |> How to configure Internet access in Windows Small Business Server ...
    (microsoft.public.windows.server.sbs)
  • RE: Problems with connectcomputer and active directory
    ... I understand that you would like to join a remote client to the domain. ... If you have hardware VPN tunnel setup using Linksys or others, ... In this scenario you have to configure the SBS Server computer to enable ...
    (microsoft.public.windows.server.sbs)
  • [Full-Disclosure] R: Full-Disclosure Digest, Vol 3, Issue 42
    ... Full-Disclosure Digest, Vol 3, Issue 42 ... SD Server 4.0.70 Directory Traversal Bug ... Arkeia Network Backup Client Remote Access ...
    (Full-Disclosure)