Re: VPN, mapped drives
- From: v-terliu@xxxxxxxxxxxxxxxxxxxx (Terence Liu [MSFT])
- Date: Fri, 26 Oct 2007 12:04:57 GMT
Hello David,
Thank you for update.
1. First, you'd better create a new thread for your issue, but not reply
under other customer's post.
2. For how to setup VPN connection on SBS, here is a step by step guide:
1) Disable RRAS
a. Schedule a network down time.
b. Please open Routing and Remote Access console on SBS thru run command
"rrasmgmt.msc"
c. Right click the SBSname (local), select Disable Routing and Remote
Access console
2) Run CEICW on SBS
You have to rerun the CEICW to make sure your SBS 2003 server have right
network configuration. Go through the follow KB and Rerun CEICW again
carefully.
How to configure Internet access in Windows Small Business Server 2003
http://support.microsoft.com/kb/825763/en-us
Detailed steps for your reference:
a. On the SBS 2003 Server open the Server Management console. Go to
Standard Management\To Do List.
b. Click the "Connect to the Internet" link.
c. When navigating to the Firewall page, select "Enable firewall" and click
Next (I suppose you have 2 network adapters in SBS 2003).
d. On the "Services Configuration" page, select all the items and then
click Next.
e. On the "Web Services Configuration" page, make sure "Allow access to the
entire Web site from the Internet" is selected. If you select "Allow access
to only the following Web site services from the Internet", make sure all
items in the list are selected. Click Next.
f. On the "Web Server Certificate" page, choose to create a new Web server
certificate and then type the public domain name (your public DNS name)
that you will use to access OWA and RWW (for example, if your public domain
name that you use to access the sites is www.xyz.com, you should type
www.xyz.com as the new certificate name).
g. Go through the remaining steps.
3) Run Remote Access wizard
a. On the Small Business Server 2003-based server, click To Do List in the
left pane of the Server Management console.
b. Under Network Tasks, click Configure Remote Access.
c. Click Next, click Enable Remote Access, click to select the VPN Access
check box, and then click Next.
d. Type the fully qualified public domain name (your public DNS name) of
your server, click Next, and then click Finish.
e. When the wizard is completed, click Close.
4) Then you can access RWW to download Connection Manager or copy the file
from SBS server c:\ClientApps\Connection Manager\SBSPackage.exe. Please
save the sbspackage.exe file in VPN client computer. Then double-click
SBSPackage.exe to run it. After this file run the "connect to small
business server" will be created and you can use it to connect VPN to your
SBS server.
3. Based on my experience, error 800 is caused by a router that has
outdated firmware in some cases. Please check this KB article to see if
your hardware router has applied the latest firmware. You may contact the
vendor of the hardware router for more detailed information.
Error Message: VPN Connection Error 800: Unable to Establish Connection
http://support.microsoft.com/default.aspx?scid=kb;EN-US;Q319108
4. You have hardware firewall (firebox) before SBS, you need to forward GRE
47 to SBS external NIC for VPN connection. Please connect your firewall
support for detail steps.
To check if the VPN is blocked by the hardware router, we always use the
PPTP Ping to test if 1723 port and GRE protocol are allowed to pass
through. To do so:
a. Please run Pptpsrv.exe on the server side.
b. Run Pptpclnt.exe [ServerNameorIPaddress] on remote client.
c. When prompted by Pptpclnt.exe, type some text to send to Pptpsrv.exe,
and then click Enter.
d. You will see the text received at the host running Pptpsrv.exe. Then you
will see five GRE packets sent from Pptpclnt.exe and received at
Pptpsrv.exe.
Provide me with the output for reference.
NOTE: PPTP Ping tools (Pptpclnt and Pptpsrv) exist in Windows XP support
tools. For your convenience, I have attached the file within this reply.
If the issue persists, please create a new post to get further help.
Thank you for your understanding and have a nice weekend.
Best regards,
Terence Liu(MSFT)
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| From: david.monticelli@xxxxxxxxx
| Newsgroups: microsoft.public.windows.server.sbs
| Subject: Re: VPN, mapped drives
| Date: Thu, 25 Oct 2007 08:59:43 -0700
| Organization: http://groups.google.com
| Lines: 345
| Message-ID: <1193327983.912765.133440@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
| References: <13d8hk8rgq51led@xxxxxxxxxxxxxxxxxx>
| <1189770127.077630.282130@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
| <cVOsdsQ#HHA.5204@xxxxxxxxxxxxxxxxxxxxxx>
| NNTP-Posting-Host: 81.83.0.31
| Mime-Version: 1.0
| Content-Type: text/plain; charset="us-ascii"
| Content-Transfer-Encoding: quoted-printable
| X-Trace: posting.google.com 1193327984 373 127.0.0.1 (25 Oct 2007
15:59:44 GMT)
| X-Complaints-To: groups-abuse@xxxxxxxxxx
| NNTP-Posting-Date: Thu, 25 Oct 2007 15:59:44 +0000 (UTC)
| In-Reply-To: <cVOsdsQ#HHA.5204@xxxxxxxxxxxxxxxxxxxxxx>
| User-Agent: G2/1.0
| X-HTTP-UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; fr;
rv:1.8.1.8) Gecko/20071008 Firefox/2.0.0.8,gzip(gfe),gzip(gfe)
| Complaints-To: groups-abuse@xxxxxxxxxx
| Injection-Info: o3g2000hsb.googlegroups.com; posting-host=81.83.0.31;
| posting-account=ps2QrAMAAAA6_jCuRt2JEIpn5Otqf_w0
| Path:
TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTFEEDS02.phx.gbl!news-out.
cwix.com!newsfeed.cwix.com!newsfeed.stueberl.de!ecngs!feeder.ecngs.de!news.g
ermany.com!proxad.net!feeder1-2.proxad.net!64.233.178.134.MISMATCH!postnews.
google.com!o3g2000hsb.googlegroups.com!not-for-mail
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:71673
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| On 17 sep, 11:14, v-ter...@xxxxxxxxxxxxxxxxxxxx (Terence Liu [MSFT])
| wrote:
| > Hello David,
| >
| > Thank you for your update.
| >
| > There are 2 scenarios for VPN:
| >
| > Scenario 1: You use the SBS as VPN server, and VPN clients dial in VPN
to
| > SBS. Your router only do port forwarding.
| >
| > In this scenario, you can make SBS either works in double NICs or works
in
| > single NIC.
| >
| > Scenario 2: You use the router as VPN server, and VPN clients dial in
VPN
| > to your router.
| >
| > In this scenario, you need to make your SBS work in single NIC. We do
not
| > support VPN issue if you have double NICs on SBS in this scenario.
| >
| > If you using hardware VPN, and with double NICs SBS, the VPN issue is
| > mostly refer to the hardware router. Meanwhile, the SBS will work like a
| > router in this scenario. Therefore, we do not support this scenario.
| >
| > Thank you for your understanding and have a nice day.
| >
| > Best regards,
| >
| > Terence Liu(MSFT)
| >
| > Microsoft CSS Online Newsgroup Support
| >
| > Get Secure! -www.microsoft.com/security
| >
| > =====================================================
| > This newsgroup only focuses on SBS technical issues. If you have issues
| > regarding other Microsoft products, you'd better post in the
corresponding
| > newsgroups so that they can be resolved in an efficient and timely
manner.
| > You can locate the newsgroup
here:http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
| >
| > When opening a new thread via the web interface, we recommend you check
the
| > "Notify me of replies" box to receive e-mail notifications when there
are
| > any updates in your thread. When responding to posts via your
newsreader,
| > please "Reply to Group" so that others may learn and benefit from your
| > issue.
| >
| > Microsoft engineers can only focus on one issue per thread. Although we
| > provide other information for your reference, we recommend you post
| > different incidents in different threads to keep the thread clean. In
doing
| > so, it will ensure your issues are resolved in a timely manner.
| >
| > For urgent issues, you may want to contact Microsoft CSS directly.
Please
| > checkhttp://support.microsoft.comfor regional support phone numbers.
| >
| > Any input or comments in this thread are highly appreciated.
| > =====================================================
| >
| > This posting is provided "AS IS" with no warranties, and confers no
rights.
| >
| > --------------------
| > | From: david.montice...@xxxxxxxxx
| > | Newsgroups: microsoft.public.windows.server.sbs
| > | Subject: Re: VPN, mapped drives
| > | Date: Fri, 14 Sep 2007 04:42:07 -0700
| > | Organization:http://groups.google.com
| > | Lines: 327
| > | Message-ID: <1189770127.077630.282...@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
| > | References: <13d8hk8rgq51...@xxxxxxxxxxxxxxxxxx>
| > | <1189676654.090924.75...@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
| > | <rYEsoCs9HHA....@xxxxxxxxxxxxxxxxxxxxxx>
| > | NNTP-Posting-Host: 81.83.0.31
| > | Mime-Version: 1.0
| > | Content-Type: text/plain; charset="us-ascii"
| > | Content-Transfer-Encoding: quoted-printable
| > | X-Trace: posting.google.com 1189770127 5630 127.0.0.1 (14 Sep 2007
| > 11:42:07 GMT)
| > | X-Complaints-To: groups-ab...@xxxxxxxxxx
| > | NNTP-Posting-Date: Fri, 14 Sep 2007 11:42:07 +0000 (UTC)
| > | In-Reply-To: <rYEsoCs9HHA....@xxxxxxxxxxxxxxxxxxxxxx>
| > | User-Agent: G2/1.0
| > | X-HTTP-UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; fr;
| > rv:1.8.1.6) Gecko/20070725 Firefox/2.0.0.6,gzip(gfe),gzip(gfe)
| > | Complaints-To: groups-ab...@xxxxxxxxxx
| > | Injection-Info: g4g2000hsf.googlegroups.com; posting-host=81.83.0.31;
| > | posting-account=ps2QrAMAAAA6_jCuRt2JEIpn5Otqf_w0
| > | Bytes: 13394
| > | X-Original-Bytes: 13350
| > | Path:
| >
TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTFEEDS02.phx.gbl!newsfeed0
| >
0.sul.t-online.de!t-online.de!border2.nntp.dca.giganews.com!border1.nntp.dca
| >
..giganews.com!nntp.giganews.com!postnews.google.com!g4g2000hsf.googlegroups.
| > com!not-for-mail
| > | Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:62971
| > | X-Tomcat-NG: microsoft.public.windows.server.sbs
| > |
| > | On 14 sep, 13:16, v-ter...@xxxxxxxxxxxxxxxxxxxx (Terence Liu [MSFT])|
wrote:
| >
| > | > Hello David,
| > | >
| > | > Thank you for posting here.
| > | >
| > | > Your SBS 2000 is in the good network structure, but the SBS 2003
with
| > | > double NICs is not properly. If you want to use your router to
provide
| > VPN
| > | > connection, I suggest you make your SBS 2003 working in single NIC.
Like
| > | > your SBS 2000.
| > | >
| > | > Note: We do not support the VPN connection by router with double
NICs
| > SBS.
| > | >
| > | > If you still have question about your VPN connection issue. I
suggest
| > you
| > | > create a new post here to get help.
| > | >
| > | > Thank you for your understanding.
| > | >
| > | > Best regards,
| > | >
| > | > Terence Liu(MSFT)
| > | >
| > | > Microsoft CSS Online Newsgroup Support
| > | >
| > | > Get Secure! -www.microsoft.com/security
| > | >
| > | > =====================================================
| > | > This newsgroup only focuses on SBS technical issues. If you have
issues
| > | > regarding other Microsoft products, you'd better post in the
| > corresponding
| > | > newsgroups so that they can be resolved in an efficient and timely
| > manner.
| > | > You can locate the newsgroup
| > here:http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
| > | >
| > | > When opening a new thread via the web interface, we recommend you
check
| > the
| > | > "Notify me of replies" box to receive e-mail notifications when
there
| > are
| > | > any updates in your thread. When responding to posts via your
| > newsreader,
| > | > please "Reply to Group" so that others may learn and benefit from
your
| > | > issue.
| > | >
| > | > Microsoft engineers can only focus on one issue per thread.
Although we
| > | > provide other information for your reference, we recommend you post
| > | > different incidents in different threads to keep the thread clean.
In
| > doing
| > | > so, it will ensure your issues are resolved in a timely manner.
| > | >
| > | > For urgent issues, you may want to contact Microsoft CSS directly.
| > Please
| > | > checkhttp://support.microsoft.comforregional support phone numbers.
| > | >
| > | > Any input or comments in this thread are highly appreciated.
| > | > =====================================================
| > | >
| > | > This posting is provided "AS IS" with no warranties, and confers no
| > rights.
| > | >
| > | > --------------------
| > | > | From: david.montice...@xxxxxxxxx
| > | > | Newsgroups: microsoft.public.windows.server.sbs
| > | > | Subject: Re: VPN, mapped drives
| > | > | Date: Thu, 13 Sep 2007 02:44:14 -0700
| > | > | Organization:http://groups.google.com
| > | > | Lines: 349
| > | > | Message-ID: <1189676654.090924.75...@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
| > | > | References: <13d8hk8rgq51...@xxxxxxxxxxxxxxxxxx>
| > | > | <uFmVJ3Z6HHA....@xxxxxxxxxxxxxxxxxxxx>
| > | > | <13d94l3h3lia...@xxxxxxxxxxxxxxxxxx>
| > | > | <byGnPDg6HHA.4...@xxxxxxxxxxxxxxxxxxxxxx>
| > | > | <peTc$Av6HHA.5...@xxxxxxxxxxxxxxxxxxxxxx>
| > | > | <CKWV5L86HHA.5...@xxxxxxxxxxxxxxxxxxxxxx>
| > | > | NNTP-Posting-Host: 81.83.0.31
| > | > | Mime-Version: 1.0
| > | > | Content-Type: text/plain; charset="us-ascii"
| > | > | Content-Transfer-Encoding: quoted-printable
| > | > | X-Trace: posting.google.com 1189676654 3935 127.0.0.1 (13 Sep 2007
| > | > 09:44:14 GMT)
| > | > | X-Complaints-To: groups-ab...@xxxxxxxxxx
| > | > | NNTP-Posting-Date: Thu, 13 Sep 2007 09:44:14 +0000 (UTC)
| > | > | In-Reply-To: <CKWV5L86HHA.5...@xxxxxxxxxxxxxxxxxxxxxx>
| > | > | User-Agent: G2/1.0
| > | > | X-HTTP-UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; fr;
| > | > rv:1.8.1.6) Gecko/20070725 Firefox/2.0.0.6,gzip(gfe),gzip(gfe)
| > | > | Complaints-To: groups-ab...@xxxxxxxxxx
| > | > | Injection-Info: 50g2000hsm.googlegroups.com;
posting-host=81.83.0.31;
| > | > | posting-account=ps2QrAMAAAA6_jCuRt2JEIpn5Otqf_w0
| > | > | Bytes: 14553
| > | > | Path:
| > | >
| >
TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTFEEDS02.phx.gbl!newsfeed0
| > | >
| >
0.sul.t-online.de!t-online.de!border2.nntp.dca.giganews.com!nntp.giganews.co
| > | >
| >
m!out04b.usenetserver.com!news.usenetserver.com!in02.usenetserver.com!news.u
| > | >
| >
senetserver.com!postnews.google.com!50g2000hsm.googlegroups.com!not-for-mail
| > | > | Xref: TK2MSFTNGHUB02.phx.gbl
microsoft.public.windows.server.sbs:62641
| > | > | X-Tomcat-NG: microsoft.public.windows.server.sbs
| > | > |
| > | > | On 31 août, 13:35, v-ter...@xxxxxxxxxxxxxxxxxxxx (Terence
Liu[MSFT])| wrote:
| >
| > | >
| > | > | > Hello Corey,
| > | > | >
| > | > | > Thank you for your email.
| > | > | >
| > | > | > I'm glad to hear that things are working correctly for you now.
| > | > | >
| > | > | > I'd like to make a summary for this post:
| > | > | >
| > | > | > Issue:
| > | > | > =============
| > | > | > cannot access the shares on the SBS Server thru VPN
| > | > | >
| > | > | > Cause:
| > | > | > =============
| > | > | > Netbios over Tcpip was disabled on VPN NIC
| > | > | >
| > | > | > Resolutions:
| > | > | > =============
| > | > | >
| > | >
| >
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\RemoteAccess\Parameters\IP\
| > | > | > DisableNetbiosOverTcpip
| > | > | >
| > | >
| >
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\RemoteAccess\Parameters\IP\
| > | > | > DisableNetbiosOverTcpip
| > | > | > Set these keys to 0 to enable Netbios over Tcpip
| > | > | >
| > | > | > Please do not hesitate to post in this great newsgroup if you
need
| > any
| > | > | > assistance in the future. I look forward to working with you
again.
| > | > | >
| > | > | > Thank you and have a nice day,
| > | > | >
| > | > | > Best regards,
| > | > | >
| > | > | > Terence Liu(MSFT)
| > | > | >
| > | > | > Microsoft CSS Online Newsgroup Support
| > | > | >
| > | > | > Get Secure! -www.microsoft.com/security
| > | > | >
| > | > | > =====================================================
| > | > | > This newsgroup only focuses on SBS technical issues. If you have
| > issues
| > | > | > regarding other Microsoft products, you'd better post in the
| > | > corresponding
| > | > | > newsgroups so that they can be resolved in an efficient and
timely
| > | > manner.
| > | > | > You can locate the newsgroup
| > | >
here:http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
| > | > | >
| > | > | > When opening a new thread via the web interface, we recommend
you
| > check
| > | > the
| > | > | > "Notify me of replies" box to receive e-mail notifications when
| > there
| > | > are
| > | > | > any updates in your thread. When responding to posts via your
| > | > newsreader,
| > | > | > please "Reply to Group" so that others may learn and benefit
from
| > your
| > | > | > issue.
| > | > | >
| > | > | > Microsoft engineers can only focus on one issue per thread. ...
| >
| > plus de détails »
| Hi Terence,
| I made some tests, but my VPN still doesn't work.
| Because I don't find any good tutorial for my case, I will explain
| what I desire, and I hope you'll accept to help me to find a solution.
| I would like to create a server VPN PPTP on our SBS2003 which has ISA
| Server 2004 currently installed.
| Client computers will connect to VPN using their domain login/
| password.
| For the moment, our "firebox" forwards the PPTP port to the external
| nic of our server.
| - when I test a VPN connection with a computer connected to
| the LAN, the VPN connection succeed.
| - When I test a VPN connection with a computer connected
| outhere, I can see the external ip of this client in the "sessions"
| tab of Isa Console Management, but I have the error "800" on the
| client computer.
| Could you please help me step by step to let me know how I have to
| configure Isa Server.
| Note: i can send you a schema of the structure of our network, but
| give me an other email address.
| Many thanks in advance,
| Regards,
| David
|
.
- References:
- Re: VPN, mapped drives
- From: david . monticelli
- Re: VPN, mapped drives
- Prev by Date: Re: Automatically forwarding emails
- Next by Date: Re: Windows Desktop Search 3.01 (Dear Microsoft)...
- Previous by thread: Re: VPN, mapped drives
- Next by thread: FQDN issues with sharepoint
- Index(es):
Relevant Pages
|
