Re: CEICW Network Error

I have tried both iterations of the DNS on the WAN NIC tonight...good
observation on your part.

Which should I set it to the SBS server 192.168.9.2 or the ISP supplied DNS
servers?

Thanks


"SuperGumby [SBS MVP]" <not@xxxxxxxxxxx> wrote in message
news:OHTl75R8IHA.3724@xxxxxxxxxxxxxxxxxxxxxxx
The rules on SBS Standard _should_ be created during CEICW (when possible)
and therefore should be available for enable/disable during the wiz. It is
also possible to create rules directly in the RRAS console but I fear you
may need to address your problem before this can be done.

1st I would correct the DNS settings, then run the CEICW and 'disable
firewall' (DO NOT forget to re-enable, your Cisco router does not appear
to be doing either NAT or port filtering), run the CEICW a 2nd time to
re-enable the firewall.

A previous post has:
DNS Servers . . . . . . . . . . . : 167.206.112.138
167.206.7.4

yet you suggest:

the WAN(external) NIC has a public IP address and points to SBS
192.168.0.2
for DNS...

ba-bong. Something wrong there.

With Standard and a router controlled by the ISP I would put a second
device (a true firewall) between the router and SBS and tell the ISP to
forward everything to what _appears_ to be my server IP. With no ISA I'd
probably run a single NIC.

"RickD" <support@xxxxxxxxxxxx> wrote in message
news:OKt5SsR8IHA.3724@xxxxxxxxxxxxxxxxxxxxxxx
This is SBS 2K3 standard therefore no ISA...but aren't there port rules
somewhere in the server console????

"SuperGumby [SBS MVP]" <not@xxxxxxxxxxx> wrote in message
news:ut2G%23oR8IHA.1592@xxxxxxxxxxxxxxxxxxxxxxx
ISA or no ISA?

Either way they can be adjusted via CEICW for the most part but if you
(or someone) have created rules manually in ISA then it's a trip through
the ISA console.

"RickD" <support@xxxxxxxxxxxx> wrote in message
news:uTHzmjR8IHA.2348@xxxxxxxxxxxxxxxxxxxxxxx
Tha was my original plan...to use a netgear wiireless router and allow
visitors internet access outside of SBS, but Optimum insiosted that to
have a static public IP I MUST use their Cisco....router...during
installation and configuration by Optimum(remotely) I had them pass all
traffic through to the router internal side (that has a public IP
address) and I configured my Dual-NIC'd SBS 2K3 WAN NIC to a public
IP.....as I said all was well until the (actually former) client
brought is someone else and heaven knows what he tinkered with...

right now I am trying to put humpty dumpty back together again as it
was and when I have completed that I will address the SPAM(the original
problem) and any suggested re-configurations.

Please keep the suggestions and ideas comming as I re-install Symantec
Endpoint 11.0....

Thanks sooooo much!

The other guy rtan CEICW a couple of times, and as I recall, CEICW
disables any custom port filters..I am drawing a mental blank as to
where to check those...ANYONE????

RickD

"Larry Struckmeyer [SBS-MVP]" <lstruckmeyer@xxxxxxxxxxxxxxx> wrote in
message news:%23M$qvbR8IHA.5164@xxxxxxxxxxxxxxxxxxxxxxx
Agreed on both counts. It is strange, and leave it alone. My comment
was intended to give Rick additional info that he might be able to act
on later. It is possible that the instructions were not clear from
Optimum.

What would you and Rick think of even a consumer grade router between
the nic and the Optimum device, which is more in line with what I was
creeping up on.?

-Larry

"Merv Porter [SBS-MVP]" <mwport@xxxxxxxxxxxxxxxxxxx> wrote in message
news:umWKoTR8IHA.2064@xxxxxxxxxxxxxxxxxxxxxxx
I think Optimum (seen other posts about this ISP) does some strange
things. If the ext. NIC hasn't been changed, probably best to leave it
alone at this point.

--
Merv Porter [SBS-MVP]
============================


"Larry Struckmeyer [SBS-MVP]" <lstruckmeyer@xxxxxxxxxxxxxxx> wrote in
message news:%23a1HUQR8IHA.616@xxxxxxxxxxxxxxxxxxxxxxx
Hi Rick:

While we can't possibly know the ins and outs of every ISP and
router on the planet, what you are describing sounds strange to me.
Merv gave you a link to a diagram for the usual way this is done.
The public IP goes on the Inet side of the router, and the SBS side
of the router and the external NIC get a private IP address range
that is different from the Internal SBS nic and the workstations.

It sounds to me like this device is not a router, but a DSL or Cable
modem that sits at the termination point of the ISP connection to
your office.

-Larry

"RickD" <support@xxxxxxxxxxxx> wrote in message
news:eTY0x8Q8IHA.4928@xxxxxxxxxxxxxxxxxxxxxxx
the WAN(external) NIC has had a public IP address all along....and
everything was working great....

the router was provided by Optimum Online and was needed (according
to them) to facilitate a static IP for the External NIC

The end-user complained of large amounts of SPAM and that is why
the purchased ESET, removed SEP and the whole thing went downhill
from there.






"Merv Porter [SBS-MVP]" <mwport@xxxxxxxxxxxxxxxxxxx> wrote in
message news:OtYMo2Q8IHA.3848@xxxxxxxxxxxxxxxxxxxxxxx
I suspect someone reconfigured the external NIC and gave it a
public address. Normally with a router in the mix, the router gets
the public IP address on its WAN side and its LAN side is given a
(static) private IP address in a subnet that is different from the
Internal LAN. Then the external NIC is given a (static) private IP
address in the same subnet as the router's LAN side.

SBS Two Nic configuration
(works with or without ISA)
http://www.smallbizserver.net/Articles/tabid/266/articleType/ArticleView/articleId/76/Two-Nics-a-static-IP-address-ISA-router.aspx

--
Merv Porter [SBS-MVP]
============================

"RickD" <support@xxxxxxxxxxxx> wrote in message
news:%231637xQ8IHA.1200@xxxxxxxxxxxxxxxxxxxxxxx

"Merv Porter [SBS-MVP]" <mwport@xxxxxxxxxxxxxxxxxxx> wrote in
message news:ea6ssoQ8IHA.1196@xxxxxxxxxxxxxxxxxxxxxxx
Hi Rick,

Please post results of an ipconfig /all for sbs server.

Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.

C:\Documents and Settings\administrator.AxxxxxxxE>ipconfig/all

Windows IP Configuration

Host Name . . . . . . . . . . . . : Axxxxxxx01
Primary Dns Suffix . . . . . . . : axxxxxxxe.local
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : Yes
DNS Suffix Search List. . . . . . : axxxxxxxe.local

Ethernet adapter LAN:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit
Ethernet
Physical Address. . . . . . . . . : 00-19-B9-FE-F2-8A
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.0.2
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : 192.168.0.2
Primary WINS Server . . . . . . . : 192.168.0.2

Ethernet adapter WAN:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Realtek RTL8139 Family PCI
Fast Ethernet
NIC #2
Physical Address. . . . . . . . . : 00-40-F4-70-7D-A5
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 96.nn.nn.250
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : 167.206.112.138
167.206.7.4


Any errors in the event logs?

--
Merv Porter [SBS-MVP]
============================

"RickD" <support@xxxxxxxxxxxx> wrote in message
news:OgckxfQ8IHA.2064@xxxxxxxxxxxxxxxxxxxxxxx
SBS 2K3 SP 2

Dual Nic

WAN public IP Address nnn.nnn.nnn.250
LAN 192.168.0.2

router with IP address nnn.nnn.nnn.249

Users brought in another tech and messed up internet
connectivity....server had internet access, but AD desktops
cannot get to internet.

NOW NEITHER server or desktops have internet access

I have reviewed both NICs, binding orders, services....etc...

When I run CEICW I get these errors in the error log:

Error 0c8007007e returned from call to installing RRAS (LAN)().
Error 0c8007007e returned from call to CNetCommit::Common().
Error 0c8007007e returned from call to CNetCommit::Common().
calling CRFireCommit::Commitex (0x2d93C0).
calling CRFireCommit::ValidatePropertyBag no RRAS NAT Public
Interface, Basic Firewall will not be configured.().
Error 0x1 returned from call to CRFireCommit::CommitEx
ValidatePropertyBag returned S_FALSE().


The whole problem started when the other tech tried to
mUNINSTALL Symantec Endpoint 11.0 and then install ESET server
and client.

Any H E L P is greatly appreciated...

TIA

RickD























.

Relevant Pages

  • Re: Server/Network setup question
    ... currently the users are getting IP addresses from DHCP on the router. ... SBS server a static IP address in the same range as the router. ... be in a subnet that is different from the SBS LAN (with their own Internet ...
    (microsoft.public.windows.server.sbs)
  • Re: Server/Network setup question
    ... By performing a full installation yourself, looking at what you may wish to ... IP Address/mask, same subnet as router. ... An SBS installation is complete _ONLY_ after all items in the ... My server is coming with SBS pre-installed. ...
    (microsoft.public.windows.server.sbs)
  • Re: Urgent! New router and big disaster
    ... DNS on your server is broken. ... Les Connor [SBS Community Member - SBS MVP] ... and put in the ip of the router. ... The local router has the broadband connection ...
    (microsoft.public.windows.server.sbs)
  • Re: Urgent! New router and big disaster
    ... seleting full time broadband connection. ... Les Connor [SBS Community Member - SBS MVP] ... check the router as well and unless I missed a firewall setting on it, ... Anyway the Server Ipconfig /all is this... ...
    (microsoft.public.windows.server.sbs)
  • Re: Urgent! New router and big disaster
    ... I checked the router, I am running a laptop off of it so I can post. ... Les Connor [SBS Community Member - SBS MVP] ... make sure the DHCP Client Service is running on the server. ... First Page of the Internet Connection Wizard, ...
    (microsoft.public.windows.server.sbs)
Loading