Re: IP Addresses

Hello Terence,

Thanks for that information. I am going on site at the weekend and will set
it up then.

Andy Baker

"Terence Liu [MSFT]" <v-terliu@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:ij2w6bV8IHA.4832@xxxxxxxxxxxxxxxxxxxxxxxxx
Hello Andy,

Thank you for posting here. Let's also thank Cris for the good input.

According to your description, I understand that you want to know how to
setup your network structure for the inbound VPN connection. If I have
misunderstood the problem, please don't hesitate to let me know.

I agree with Cris, we can disable external NIC on SBS, and make the SBS
run
under single NIC. Then, your network structure is:

{Internet}=={router}=={switch}=={SBS and XPs and WAP}

You connect the switch to the router, then connect SBS and XP clients and
printer and WAP to the switch.

Please disable DHCP on router, and let the DHCP on SBS to assign IP
configuration for all clients. The SBS and clients default gateway should
all point to router.

Cris is right, we suggest you run the "Change Server IP Address" wizard on
the SBS server and change SBS IP to 192.168.16.2. Then, set the router
internal NIC IP to 192.168.16.1. It is good for the VPN.

Note: The SBS default gateway should point to 192.168.16.1.

Then, we need to run the CEICW to reconfigure the network: One network
adapter - manual router connection to broadband

a. On the Connection Type page, click Broadband, and then click Next.
b. On the Broadband Connection page, under My server uses, click A local
router device with an IP address, and then click Next.
c. On the Router Connection page, next to Preferred DNS server and next
to
Alternate DNS server, type the IP addresses that are provided by your ISP.
In the Local IP address of router box, type the IP address of the router
that the server uses to connect to the router.
d. Click to select the My server uses a single network connection for
both
Internet access and the local network check box, and then click Next.
e. A message may appear that warns that the firewall that is provided
cannot be configured. You are offered a chance to view information about
configuration settings for an existing firewall device.
f. On the Network Connection page, click Server Local Area Connection
under the Connection Name.
g. Click Next.
h. Complete the Configure E-mail and Internet Connection Wizard.

We do not need to create accounts for the non-domain PCs. The PCs can
access Internet thru router.

We recommend you set the non-domain PCs get IP from DHCP on SBS. If you
need to assign static IP addresses to them, please exclude the IPs from
the
DHCP pool on SBS, and ensure the clients' default gateway all point to
192.168.16.1.

I hope these steps will give you some help.

Thanks and have a nice day!

Best regards,

Terence Liu (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check
the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In
doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no
rights.

--------------------
NNTP-Posting-Date: Mon, 28 Jul 2008 05:47:15 -0500
From: "Andy Baker" <abaker@xxxxxxxxxxxxxxxxxx>
Newsgroups: microsoft.public.windows.server.sbs
References: <0I-dnUCnO50hQhTVnZ2dnUVZ8sninZ2d@xxxxxxxxxxxxxx>
<#VZI6lm7IHA.4864@xxxxxxxxxxxxxxxxxxxx>
Subject: Re: IP Addresses
Date: Mon, 28 Jul 2008 11:48:34 +0100
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0014_01C8F0A7.DD836680"
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2900.3138
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198
Message-ID: <L5idnTmvH9suPhDVnZ2dnUVZ8tvinZ2d@xxxxxxxxxxxxxx>
Lines: 269
X-Usenet-Provider: http://www.giganews.com
X-Trace:
sv3-9hDPtGSxEC2852Ls2hmOQLvFfkdec2A/B26Wl0PVBMEzRKwilOETWR1KWF4kz7KmS+GVQy2p
ecDxs+Z!gy1apG2f8RieicxY3WL4NgwPSImyR049kLfCyGya2fSANdxRbjxjKgc+iP6U024wPZww
Ot+p0J62!CriK5EhgvW3X
X-Abuse-and-DMCA-Info: Please be sure to forward a copy of ALL headers
X-Abuse-and-DMCA-Info: Otherwise we will be unable to process your
complaint properly
X-Postfilter: 1.3.39
Bytes: 12390
X-Original-Bytes: 12325
Path:
TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTFEEDS01.phx.gbl!newsfeed0
0.sul.t-online.de!t-online.de!border2.nntp.dca.giganews.com!Xl.tags.giganews
com!border1.nntp.dca.giganews.com!nntp.giganews.com!local02.nntp.dca.gigane
ws.com!nntp.posted.plusnet!news.posted.plusnet.POSTED!not-for-mail
Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:116980
X-Tomcat-NG: microsoft.public.windows.server.sbs

Hi Cris
Thanks for the tips. Where do I actually connect the router to? As I said
I have 2 nics on the SBS server, one is currently connected to the router,
and the other is connected to a network switch that has the 3 XP PCs, a
printer and a wireless access point plugged into it. If I disconnect the
router from the second port, do I plug the router into the switch, or the
router into the server, and the switch into the router. If the router is
conncted to the switch, what do I have to modify on the TCP/IP settings to
tell it where the router is?
The rest of it makes sense, almost. Do I have to set up accounts for
the non-domain PCs on the server? I think they only have 5 licenses - will
have to check that. I would prefer to keep 'our' network and their other
PCs separate if I can. Can I just use static IP addresses for their other
PCs?
Also, I think they do have ISA server. Not sure because I didn't set
it up, but it is SBS Premium release 2.
Regards,
Andy Baker
"Cris Hanna [SBS-MVP]" <crisnospamhanna@xxxxxxxxxxxxxxxxxxxxx> wrote in
message news:%23VZI6lm7IHA.4864@xxxxxxxxxxxxxxxxxxxxxxx
With DHCP enabled on the router as well as the SBS server, I'm surprised
that the DHCP server on the SBS box is not shutting down. It normally
does.
Here would be my recommendations.
You don't mention ISA Server on the SBS server so we'll assume it's not
there.
You should remove 1 nic (the one going to the router) from the SBS
server, AND configure the WAN side of the router to match the IP range of
the SBS server lan nic.
Turn off DHCP on the router. Then your internet connection to the WAN
side of the router.
Then when you plug non-domain pc's into the router..they should get an
IP address from the SBS server and be able to connect to the internet.
And this will better support VPN requirements.
HOWEVER, you may want to consider running the "CHANGE SERVER IP" wizard
on the SBS server and change the IP to 192.168.16.2 (which is what a
default install assigns to the LAN nic anyway) and configure the LAN side
of the router with the IP of 192.168.16.1. This will prevent conflicts
during VPN connections where the user's home networks may likely have
192.168.1.X networks
--
Cris Hanna [SBS-MVP]
-------------------------------------------------
Microsoft MVPs
Independent Experts (MVPs do not work for MS)
Real World Answers
---------------------------------------------------------
Please do not contact me directly regarding issues
"Andy Baker" <abaker@xxxxxxxxxxxxxxxxxx> wrote in message
news:0I-dnUCnO50hQhTVnZ2dnUVZ8sninZ2d@xxxxxxxxxxxxxxxxx
A customer of ours has a small network (running our software) consisting
of
a server (SBS2003 R2) and 3 XP PCs. The server has a static IP address,
192.168.1.1 and assigns dynamic IP addresses to the other PCs. There is
a
second network adapter in the server to which a 4-Port router is
connected.
The customer also has other PCs/laptops that don't require access to the
server, but do require occasional internet access. These are plugged
into
the router when needed.
Eventually we want to set up a VPN connection to the server, and the
XP
machines connected to it, if possible. My main questions are 1) Can we
do
this with the hardware we have or do we require a special VPN router and
2)
What should be the setup of the IP addresses for the router, and the
other
PCs on the network. In order to enable remote access to the XP machines
does
the router need to have an IP address in the same range as the server
(ie
192.168.1.***), and can I set a the static IP address for both network
adapters to be the same? At the moment the router is set to 10.0.0.1 and
the
DCHP server is enabled. Our server, and the customer's other PCs get
their
IP address from the router. This doesn't sound right to me.
Apologies if this sounds confused - I am! Any help would be
appreciated.
Andy Baker




.

Relevant Pages

  • RE: Problem Configurating Firewall
    ... First, you are right, the power failure may corrupt SBS system files. ... The SBS must be the only DHCP server in its network. ... router start the DHCP service. ... One network adapter - manual router connection to broadband ...
    (microsoft.public.windows.server.sbs)
  • Re: IP Addresses
    ... setup your network structure for the inbound VPN connection. ... I agree with Cris, we can disable external NIC on SBS, and make the SBS run ... Please disable DHCP on router, and let the DHCP on SBS to assign IP ... we suggest you run the "Change Server IP Address" wizard on ...
    (microsoft.public.windows.server.sbs)
  • Re: Urgent! New router and big disaster
    ... by CEICW for any type of connection other than full time broadband was ... exists - is completely transparent to the SBS. ... "local router with an IP address" is the setup that matches her network. ... between the server and my cable modem. ...
    (microsoft.public.windows.server.sbs)
  • Re: Urgent! New router and big disaster
    ... connected to is; what type of connection; or even whether a connection ... exists - is completely transparent to the SBS. ... "local router with an IP address" is the setup that matches her network. ... between the server and my cable modem. ...
    (microsoft.public.windows.server.sbs)
  • Re: DNS problems?
    ... external NIC on the server was assigned a static IP, the router ... You're laptop is connecting on the wrong side of the SBS network. ... SBS server also running DHCP? ... the problem is in the building internet connection resolving our static ...
    (microsoft.public.windows.server.sbs)