VPN Not Passing Traffic Anymore

TheMSsForum.com: The Microsoft Software Forum

Have an SBS200 server using ISA for some time. Without any changes we know
of, we cannot connect via PPTP to hosts on the internal LAN. VPN connects
fine and shows connection with correct addresses, it just wont ping farther
that the addresss it gets, and cannot ping even to the address on the
internal nic on the SBS server. Any ideas? Thanks
Top

Re: VPN Not Passing Traffic Anymore by Robert

Robert
Sun Jan 30 19:37:17 CST 2005

do you have NAT that is blocking the ping?

--
For more and other information, go to http://howtonetworking.com.

Don't send e-mail or reply to me except you need consulting services.
Posting on MS newsgroup will benefit all readers and you may get more help.

Bob Lin, MS-MVP, MCSE & CNE
How to Setup Windows, Network, Remote Access on
http://www.HowToNetworking.com
Networking, Internet, Routing, VPN Troubleshooting on
http://www.ChicagoTech.net
This posting is provided "AS IS" with no warranties.
"JUVANUT" <JUVANUT@discussions.microsoft.com> wrote in message
news:330A27D1-EBCE-4846-BAFD-CAC3A3B16C8B@microsoft.com...
> Have an SBS200 server using ISA for some time. Without any changes we
> know
> of, we cannot connect via PPTP to hosts on the internal LAN. VPN connects
> fine and shows connection with correct addresses, it just wont ping
> farther
> that the addresss it gets, and cannot ping even to the address on the
> internal nic on the SBS server. Any ideas? Thanks


Top

Re: VPN Not Passing Traffic Anymore by JUVANUT

JUVANUT
Sun Jan 30 19:57:04 CST 2005

No, there is no NAT on either side of the SBS server. Tke client can only
ping it's own address, it can't reach anywhere else down the pike. I have
tested with a "bare naked" client connected to the Internet and was able to
connect and communicate with other PPTP VPNs.

"Robert L [MS-MVP]" wrote:

> do you have NAT that is blocking the ping?
>
> --
> For more and other information, go to http://howtonetworking.com.
>
> Don't send e-mail or reply to me except you need consulting services.
> Posting on MS newsgroup will benefit all readers and you may get more help.
>
> Bob Lin, MS-MVP, MCSE & CNE
> How to Setup Windows, Network, Remote Access on
> http://www.HowToNetworking.com
> Networking, Internet, Routing, VPN Troubleshooting on
> http://www.ChicagoTech.net
> This posting is provided "AS IS" with no warranties.
> "JUVANUT" <JUVANUT@discussions.microsoft.com> wrote in message
> news:330A27D1-EBCE-4846-BAFD-CAC3A3B16C8B@microsoft.com...
> > Have an SBS200 server using ISA for some time. Without any changes we
> > know
> > of, we cannot connect via PPTP to hosts on the internal LAN. VPN connects
> > fine and shows connection with correct addresses, it just wont ping
> > farther
> > that the addresss it gets, and cannot ping even to the address on the
> > internal nic on the SBS server. Any ideas? Thanks
>
>
>
Top

Re: VPN Not Passing Traffic Anymore by Marina

Marina
Sun Jan 30 19:57:27 CST 2005

Can you post the ipconfig/all from the VPN client when vpn-ed into the SBS
and the ipconfig from the SBS too please?

--
Regards,

Marina
Microsoft SBS-MVP
One of the Magical M&M's

"JUVANUT" <JUVANUT@discussions.microsoft.com> schreef in bericht
news:330A27D1-EBCE-4846-BAFD-CAC3A3B16C8B@microsoft.com...
> Have an SBS200 server using ISA for some time. Without any changes we
know
> of, we cannot connect via PPTP to hosts on the internal LAN. VPN connects
> fine and shows connection with correct addresses, it just wont ping
farther
> that the addresss it gets, and cannot ping even to the address on the
> internal nic on the SBS server. Any ideas? Thanks


Top

Re: VPN Not Passing Traffic Anymore by JUVANUT

JUVANUT
Sun Jan 30 21:03:03 CST 2005

Domain names, outside IP & MAC addresses have been changed for security

Server


Windows 2000 IP Configuration



Host Name . . . . . . . . . . . . : fs1
Primary DNS Suffix . . . . . . . : corp.acme.com
Node Type . . . . . . . . . . . . : Hybrid

IP Routing Enabled. . . . . . . . : Yes

WINS Proxy Enabled. . . . . . . . : No

DNS Suffix Search List. . . . . . : corp.acme.com
acme.com

Ethernet adapter LAN:



Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : 3Com EtherLink 10/100 PCI For Complete
PC Management NIC (3C905C-TX)
Physical Address. . . . . . . . . : 00-01-03-67-E7-1C

DHCP Enabled. . . . . . . . . . . : No

IP Address. . . . . . . . . . . . : 10.0.0.10

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . :

DNS Servers . . . . . . . . . . . : 10.0.0.10
Primary WINS Server . . . . . . . : 10.0.0.10


Ethernet adapter zInternet:



Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : NetServer 10/100TX PCI LAN Adapter
Physical Address. . . . . . . . . : 00-15-73-B9-BA-9B

DHCP Enabled. . . . . . . . . . . : No

IP Address. . . . . . . . . . . . : 168.123.123.132

Subnet Mask . . . . . . . . . . . : 255.255.255.240

IP Address. . . . . . . . . . . . : 168.123.123.131

Subnet Mask . . . . . . . . . . . : 255.255.255.240

IP Address. . . . . . . . . . . . : 168.123.123.130

Subnet Mask . . . . . . . . . . . : 255.255.255.240

Default Gateway . . . . . . . . . : 168.123.123.129

DNS Servers . . . . . . . . . . . : 10.0.0.10
Primary WINS Server . . . . . . . : 10.0.0.10


PPP adapter RAS Server (Dial In) Interface:



Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface

Physical Address. . . . . . . . . : 00-53-45-00-00-00

DHCP Enabled. . . . . . . . . . . : No

IP Address. . . . . . . . . . . . : 192.168.50.1

Subnet Mask . . . . . . . . . . . : 255.255.255.255

Default Gateway . . . . . . . . . :

DNS Servers . . . . . . . . . . . : 127.0.0.1



Workstation

Windows IP Configuration



Host Name . . . . . . . . . . . . : home

Primary Dns Suffix . . . . . . . :

Node Type . . . . . . . . . . . . : Hybrid

IP Routing Enabled. . . . . . . . : No

WINS Proxy Enabled. . . . . . . . : No



Ethernet adapter Local Area Connection:



Connection-specific DNS Suffix . : myisp.com

Description . . . . . . . . . . . : 3Com EtherLink XL 10/100 PCI TX
NIC (3C905B-TX)

Physical Address. . . . . . . . . : 00-58-24-e6-28-71

Dhcp Enabled. . . . . . . . . . . : Yes

Autoconfiguration Enabled . . . . : Yes

IP Address. . . . . . . . . . . . : 192.168.0.2

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . : 192.168.0.1

DHCP Server . . . . . . . . . . . : 192.168.0.1

DNS Servers . . . . . . . . . . . : 12.34.56.64

12.34.56.65

12.34.56.63

Lease Obtained. . . . . . . . . . : Sunday, January 30, 2005 9:44:37
PM

Lease Expires . . . . . . . . . . : Sunday, February 06, 2005
9:44:37 PM



PPP adapter Acme:



Connection-specific DNS Suffix . :

Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface

Physical Address. . . . . . . . . : 00-53-45-00-00-00

Dhcp Enabled. . . . . . . . . . . : No

IP Address. . . . . . . . . . . . : 192.168.50.3

Subnet Mask . . . . . . . . . . . : 255.255.255.255

Default Gateway . . . . . . . . . : 192.168.50.3

DNS Servers . . . . . . . . . . . : 10.0.0.10

Primary WINS Server . . . . . . . : 10.0.0.10



"Marina Roos [SBS-MVP]" wrote:

> Can you post the ipconfig/all from the VPN client when vpn-ed into the SBS
> and the ipconfig from the SBS too please?
>
> --
> Regards,
>
> Marina
> Microsoft SBS-MVP
> One of the Magical M&M's
>
> "JUVANUT" <JUVANUT@discussions.microsoft.com> schreef in bericht
> news:330A27D1-EBCE-4846-BAFD-CAC3A3B16C8B@microsoft.com...
> > Have an SBS200 server using ISA for some time. Without any changes we
> know
> > of, we cannot connect via PPTP to hosts on the internal LAN. VPN connects
> > fine and shows connection with correct addresses, it just wont ping
> farther
> > that the addresss it gets, and cannot ping even to the address on the
> > internal nic on the SBS server. Any ideas? Thanks
>
>
>
Top

Re: VPN Not Passing Traffic Anymore by Marina

Marina
Mon Jan 31 05:50:39 CST 2005

Hi,

NetBIOS over TCP/IP should be disabled on the external nic. You can delete
the WINS address on the external nic.
Before rerunning ICW, you will have to delete the 2nd IP on the external nic
(why do you need it anyway?).
Make sure the internal nic is on top. Make sure you have applied the
regedits in 292822.
The dns suffix should only point to your local AD domain name.
Make sure RRAS is set to supply IP to your RAS clients through DHCP of the
SBS server.

--
Regards,

Marina
Microsoft SBS-MVP
One of the Magical M&M's

"JUVANUT" <JUVANUT@discussions.microsoft.com> schreef in bericht
news:812C80EA-E291-4B5C-B757-5F6D8623075D@microsoft.com...
> Domain names, outside IP & MAC addresses have been changed for security
>
> Server
>
>
> Windows 2000 IP Configuration
>
>
>
> Host Name . . . . . . . . . . . . : fs1
> Primary DNS Suffix . . . . . . . : corp.acme.com
> Node Type . . . . . . . . . . . . : Hybrid
>
> IP Routing Enabled. . . . . . . . : Yes
>
> WINS Proxy Enabled. . . . . . . . : No
>
> DNS Suffix Search List. . . . . . : corp.acme.com
> acme.com
>
> Ethernet adapter LAN:
>
>
>
> Connection-specific DNS Suffix . :
> Description . . . . . . . . . . . : 3Com EtherLink 10/100 PCI For
Complete
> PC Management NIC (3C905C-TX)
> Physical Address. . . . . . . . . : 00-01-03-67-E7-1C
>
> DHCP Enabled. . . . . . . . . . . : No
>
> IP Address. . . . . . . . . . . . : 10.0.0.10
>
> Subnet Mask . . . . . . . . . . . : 255.255.255.0
>
> Default Gateway . . . . . . . . . :
>
> DNS Servers . . . . . . . . . . . : 10.0.0.10
> Primary WINS Server . . . . . . . : 10.0.0.10
>
>
> Ethernet adapter zInternet:
>
>
>
> Connection-specific DNS Suffix . :
> Description . . . . . . . . . . . : NetServer 10/100TX PCI LAN Adapter
> Physical Address. . . . . . . . . : 00-15-73-B9-BA-9B
>
> DHCP Enabled. . . . . . . . . . . : No
>
> IP Address. . . . . . . . . . . . : 168.123.123.132
>
> Subnet Mask . . . . . . . . . . . : 255.255.255.240
>
> IP Address. . . . . . . . . . . . : 168.123.123.131
>
> Subnet Mask . . . . . . . . . . . : 255.255.255.240
>
> IP Address. . . . . . . . . . . . : 168.123.123.130
>
> Subnet Mask . . . . . . . . . . . : 255.255.255.240
>
> Default Gateway . . . . . . . . . : 168.123.123.129
>
> DNS Servers . . . . . . . . . . . : 10.0.0.10
> Primary WINS Server . . . . . . . : 10.0.0.10
>
>
> PPP adapter RAS Server (Dial In) Interface:
>
>
>
> Connection-specific DNS Suffix . :
> Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface
>
> Physical Address. . . . . . . . . : 00-53-45-00-00-00
>
> DHCP Enabled. . . . . . . . . . . : No
>
> IP Address. . . . . . . . . . . . : 192.168.50.1
>
> Subnet Mask . . . . . . . . . . . : 255.255.255.255
>
> Default Gateway . . . . . . . . . :
>
> DNS Servers . . . . . . . . . . . : 127.0.0.1
>
>
>
> Workstation
>
> Windows IP Configuration
>
>
>
> Host Name . . . . . . . . . . . . : home
>
> Primary Dns Suffix . . . . . . . :
>
> Node Type . . . . . . . . . . . . : Hybrid
>
> IP Routing Enabled. . . . . . . . : No
>
> WINS Proxy Enabled. . . . . . . . : No
>
>
>
> Ethernet adapter Local Area Connection:
>
>
>
> Connection-specific DNS Suffix . : myisp.com
>
> Description . . . . . . . . . . . : 3Com EtherLink XL 10/100 PCI
TX
> NIC (3C905B-TX)
>
> Physical Address. . . . . . . . . : 00-58-24-e6-28-71
>
> Dhcp Enabled. . . . . . . . . . . : Yes
>
> Autoconfiguration Enabled . . . . : Yes
>
> IP Address. . . . . . . . . . . . : 192.168.0.2
>
> Subnet Mask . . . . . . . . . . . : 255.255.255.0
>
> Default Gateway . . . . . . . . . : 192.168.0.1
>
> DHCP Server . . . . . . . . . . . : 192.168.0.1
>
> DNS Servers . . . . . . . . . . . : 12.34.56.64
>
> 12.34.56.65
>
> 12.34.56.63
>
> Lease Obtained. . . . . . . . . . : Sunday, January 30, 2005
9:44:37
> PM
>
> Lease Expires . . . . . . . . . . : Sunday, February 06, 2005
> 9:44:37 PM
>
>
>
> PPP adapter Acme:
>
>
>
> Connection-specific DNS Suffix . :
>
> Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface
>
> Physical Address. . . . . . . . . : 00-53-45-00-00-00
>
> Dhcp Enabled. . . . . . . . . . . : No
>
> IP Address. . . . . . . . . . . . : 192.168.50.3
>
> Subnet Mask . . . . . . . . . . . : 255.255.255.255
>
> Default Gateway . . . . . . . . . : 192.168.50.3
>
> DNS Servers . . . . . . . . . . . : 10.0.0.10
>
> Primary WINS Server . . . . . . . : 10.0.0.10
>
>
>
> "Marina Roos [SBS-MVP]" wrote:
>
> > Can you post the ipconfig/all from the VPN client when vpn-ed into the
SBS
> > and the ipconfig from the SBS too please?
> >
> > --
> > Regards,
> >
> > Marina
> > Microsoft SBS-MVP
> > One of the Magical M&M's
> >
> > "JUVANUT" <JUVANUT@discussions.microsoft.com> schreef in bericht
> > news:330A27D1-EBCE-4846-BAFD-CAC3A3B16C8B@microsoft.com...
> > > Have an SBS200 server using ISA for some time. Without any changes we
> > know
> > > of, we cannot connect via PPTP to hosts on the internal LAN. VPN
connects
> > > fine and shows connection with correct addresses, it just wont ping
> > farther
> > > that the addresss it gets, and cannot ping even to the address on the
> > > internal nic on the SBS server. Any ideas? Thanks
> >
> >
> >


Top