Re: VPN disconnection

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

I have already replaced the router when we migrated from sbs 2000 to sbs2003
After migrating VPN would not work at all with isa 2004 (however it had been
working with isa 2000 on sbs2000).
It turned out to be the router. It was an old router that did not
specifically handle vpn pass through. I replaced it with a new router
(Draytek 27000) activated vpn pass through and forwarded the pptp specific
port to sbs2003.

It solved the problem. We were then able to successfully connect.
However we are still seeing the random disconnections.

Do you think it could be caused by heavy traffic?
If that is the case is there any advantage in setting up some QoS rules on
the router to reserve some bandwith for VPN traffic?

Also when you mention setting uo loggin on ISA server what do you mean
specifically? We are slogging into an MSDE database.
Could please point me out some specific steps /tips to set up and analysing
the vpn logging?

thnak you


"Claus" <cjobes@xxxxxxxxxxxxx> escreveu na mensagem
news:u8ooIdLSIHA.4128@xxxxxxxxxxxxxxxxxxxxxxx
You can turn on ISA logging. But first I would eliminate the router as the
cause. Plug a laptop or some other box into the same switch that your SBS
WAN NIC is plugged in (the 10.x subnet) and test if the VPN disconnects
there too. If not, your problem is most likely the router or heavy traffic
at certain times in the day.

--
Claus
"Pedro CR" <pramilo@xxxxxxxxxxxxxxx> wrote in message
news:OZoA2vKSIHA.6036@xxxxxxxxxxxxxxxxxxxxxxx
There seem to be specific times of day when this occurs more frequently.
However I cannot pin-point the exact start and and end time when the
problems occur, but there is definitelly a tendency at some times of day.

The event log shows no errors.

This has always happened but is becoming more and more important as VPN
access is getting used more often. We previouslly didn't rely too much on
VPN access to get the job done so we skipped looking into this problem,
especially because there is no record in the event logs and we have no
clue on what might be causing it.
However we are now relying on VPN a lot so this has to be solved....

I have no clue on how to approch troubleshooting this issue...
Is there any specific error/debug logs that ISA Server produces regarding
VPN access? Are there specific error logs produced on the client?
Is there a tool/technique that I shoudl use?

Thank you


"Claus" <cjobes@xxxxxxxxxxxxx> escreveu na mensagem
news:uc0uvKKSIHA.5264@xxxxxxxxxxxxxxxxxxxxxxx
Any error messages in the event logs? Is this happening at a specific
time during the day? Has it ever worked without issues?
If so, what has changed just before you started experiencing the
problem?

--
Claus
"Pedro CR" <pramilo@xxxxxxxxxxxxxxx> wrote in message
news:O1LygRJSIHA.5164@xxxxxxxxxxxxxxxxxxxxxxx
Hi Claus

Thank you very much for your response.
We are using SBS VPN (ISA Server 2004). We have a router that is set up
to allow VPN pass through and forwards traffic on port 1723 to SBS.

This happens at least from two different client computers (which are
the only ones who actualy do rmeote access to the server). They are
both setup like this:
IP: 192.168.1.X
Subnet 255.255.255.0

Thank you



"Claus" <cjobes@xxxxxxxxxxxxx> escreveu na mensagem
news:uZODxvCSIHA.5016@xxxxxxxxxxxxxxxxxxxxxxx
Is this a hardware VPN or are you talking about the SBS VPN client?
If you are talking about the SBS VPN client, do you experience this
from any client or only from a specific computer?
If it is only one specific client, what is the IP of the remote subnet
that box is connecting from?

--
Claus
"Pedro CR" <pramilo@xxxxxxxxxxxxxxx> wrote in message
news:ewR21YCSIHA.3400@xxxxxxxxxxxxxxxxxxxxxxx
Hi

We have SBS 2003 R2 Premium with another Windows 2003 R2 Server as a
member server (additional domain controller).

We have been experiencing problems where, at certain times of the
day, the VPN connetion from clients keeps disconnecting. Sometimes
seconds after we connect the connection is lost again.
The symptoms for the disconnection are:
- We see the requests being sent (the LOCAL computer shows network
activity, sending to the VPN) but there apperas to be no answer from
the server. After a while the connection is lost.

Can you please point me out some clues on what might be causing this
or what should I do to troubleshoot the problem?

Thank you very much
Pedro.

IPCONFIG posted bellow:
----------------------------------------------


Windows IP Configuration



Host Name . . . . . . . . . . . . : sbs2003

Primary Dns Suffix . . . . . . . : XXXXX.local

Node Type . . . . . . . . . . . . : Unknown

IP Routing Enabled. . . . . . . . : Yes

WINS Proxy Enabled. . . . . . . . : Yes

DNS Suffix Search List. . . . . . : XXXXX.local



PPP adapter RAS Server (Dial In) Interface:



Connection-specific DNS Suffix . :

Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface

Physical Address. . . . . . . . . : 00-53-45-00-00-00

DHCP Enabled. . . . . . . . . . . : No

IP Address. . . . . . . . . . . . : 192.168.16.108

Subnet Mask . . . . . . . . . . . : 255.255.255.255

Default Gateway . . . . . . . . . :

NetBIOS over Tcpip. . . . . . . . : Disabled



Ethernet adapter Server Local Area Connection:



Connection-specific DNS Suffix . :

Description . . . . . . . . . . . : HP Network Team #1

Physical Address. . . . . . . . . : 00-18-71-4D-3B-65

DHCP Enabled. . . . . . . . . . . : No

IP Address. . . . . . . . . . . . : 192.168.16.200

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . :

DNS Servers . . . . . . . . . . . : 192.168.16.200

Primary WINS Server . . . . . . . : 192.168.16.200



Ethernet adapter Externo - Internet:



Connection-specific DNS Suffix . :

Description . . . . . . . . . . . : HP NC7781 Gigabit Server
Adapter

Physical Address. . . . . . . . . : 00-19-BB-CC-32-6A

DHCP Enabled. . . . . . . . . . . : No

IP Address. . . . . . . . . . . . : 10.0.0.1

Subnet Mask . . . . . . . . . . . : 255.0.0.0

Default Gateway . . . . . . . . . : 10.0.0.138

DNS Servers . . . . . . . . . . . : 192.168.16.200

NetBIOS over Tcpip. . . . . . . . : Disabled















.

Relevant Pages

  • Re: Switching IP address ranges
    ... ISA Server performs deep inspection of Internet ... inspection of all VPN traffic. ... Forth just because SBS is cheap it does not mean is bad. ... I used to believe on solid state firewalls (which SonicWall is not) but they ...
    (microsoft.public.windows.server.sbs)
  • Re: Unable to make VPN connection to ISA 2006 Standard
    ... Router and the isa server this nat enabled, then the pptp tunnel will fail? ... If i initialize an vpn connection with a windows client, ...
    (microsoft.public.isa.vpn)
  • Re: VPN drops
    ... we can try to set up several VPN connections ... hardware (DSL router) limitation. ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • Re: rasman 20209 vpn unable to authenticate
    ... to the router and had the same result. ... Do you know if there are any group policies that can impact VPN? ... your SBS WAN NIC is plugged in, give it a static IP in the same subnet as ... with the connection manager that was downloaded from the SBS. ...
    (microsoft.public.windows.server.sbs)
  • Re: I-Net und VPN über LANCOM-Router
    ... Der ISA hat mit dem VPN Tunnel eigentlich gar nichts zu tun, ... auf der 2.Netzwerkkarte ist der Router angeschlossen. ...
    (microsoft.public.de.german.isaserver)