We have just deployed our replacement SBS2000 box.

I have a problem when I go to Start>Programs>Admin
Tools>Routing and Remote Access and Enable RRAS for VPN
users to clients through our server. When I enable the
service, I get pop-up warnings saying that DHCP will
assign IP addresses to any clients. Furthermore, as soon
as the RRAS service is enabled, a few clients are
experiencing problems browsing the web - as if the RRAS
blocks access to the web.

On clients that have this problem, the ISA firewall client
can update to the SBS, but cannot browse the web although
their browser is set to look at the Proxy server (ISA on
SBS).

Please can someone help me on this.

The SBS has two NICs - LAN and WAN. The LAN IP is
192.168.16.2 and the WAN IP address is 172.16.1.2 (as it
goes through a Firewall that NATs the IP). The WAN card
is hardcoded with the IP, even though the firewall runs
DHCP.

The SBS is fully patched via Windows Update and Service
Packed for SBS SP 1a.

skc

Re: RRAS and Internet by Marina

Marina
Wed Dec 10 03:33:11 CST 2003

Check the bindingorder and make sure the internal nic is on top.
Make sure you have applied the regedits in 292822.
Make sure the external IP-range is NOT in the LAT of ISA.

Marina

"skc" <anonymous@discussions.microsoft.com> schreef in bericht
news:027401c3befe$5c517a00$a001280a@phx.gbl...
> We have just deployed our replacement SBS2000 box.
>
> I have a problem when I go to Start>Programs>Admin
> Tools>Routing and Remote Access and Enable RRAS for VPN
> users to clients through our server. When I enable the
> service, I get pop-up warnings saying that DHCP will
> assign IP addresses to any clients. Furthermore, as soon
> as the RRAS service is enabled, a few clients are
> experiencing problems browsing the web - as if the RRAS
> blocks access to the web.
>
> On clients that have this problem, the ISA firewall client
> can update to the SBS, but cannot browse the web although
> their browser is set to look at the Proxy server (ISA on
> SBS).
>
> Please can someone help me on this.
>
> The SBS has two NICs - LAN and WAN. The LAN IP is
> 192.168.16.2 and the WAN IP address is 172.16.1.2 (as it
> goes through a Firewall that NATs the IP). The WAN card
> is hardcoded with the IP, even though the firewall runs
> DHCP.
>
> The SBS is fully patched via Windows Update and Service
> Packed for SBS SP 1a.
>
> skc



Re: RRAS and Internet by skc

skc
Wed Dec 10 04:27:31 CST 2003

see inline

>-----Original Message-----
>Check the bindingorder and make sure the internal nic is
on top.
>Make sure you have applied the regedits in 292822.
>Make sure the external IP-range is NOT in the LAT of ISA.

What do you mean by this? Do you mean our public IP
address?

>
>Marina
>
>"skc" <anonymous@discussions.microsoft.com> schreef in
bericht
>news:027401c3befe$5c517a00$a001280a@phx.gbl...
>> We have just deployed our replacement SBS2000 box.
>>
>> I have a problem when I go to Start>Programs>Admin
>> Tools>Routing and Remote Access and Enable RRAS for VPN
>> users to clients through our server. When I enable the
>> service, I get pop-up warnings saying that DHCP will
>> assign IP addresses to any clients. Furthermore, as
soon
>> as the RRAS service is enabled, a few clients are
>> experiencing problems browsing the web - as if the RRAS
>> blocks access to the web.
>>
>> On clients that have this problem, the ISA firewall
client
>> can update to the SBS, but cannot browse the web
although
>> their browser is set to look at the Proxy server (ISA on
>> SBS).
>>
>> Please can someone help me on this.
>>
>> The SBS has two NICs - LAN and WAN. The LAN IP is
>> 192.168.16.2 and the WAN IP address is 172.16.1.2 (as it
>> goes through a Firewall that NATs the IP). The WAN card
>> is hardcoded with the IP, even though the firewall runs
>> DHCP.
>>
>> The SBS is fully patched via Windows Update and Service
>> Packed for SBS SP 1a.
>>
>> skc
>
>
>.
>

Re: RRAS and Internet by Marina

Marina
Wed Dec 10 05:38:39 CST 2003

Your public IP should certainly not be in the LAT, but I meant the ip-range
of your external nic: 172.x.x.x.

Marina

"skc" <anonymous@discussions.microsoft.com> schreef in bericht
news:10d0401c3bf08$37e5da80$a601280a@phx.gbl...
> see inline
>
> >-----Original Message-----
> >Check the bindingorder and make sure the internal nic is
> on top.
> >Make sure you have applied the regedits in 292822.
> >Make sure the external IP-range is NOT in the LAT of ISA.
>
> What do you mean by this? Do you mean our public IP
> address?
>
> >
> >Marina
> >
> >"skc" <anonymous@discussions.microsoft.com> schreef in
> bericht
> >news:027401c3befe$5c517a00$a001280a@phx.gbl...
> >> We have just deployed our replacement SBS2000 box.
> >>
> >> I have a problem when I go to Start>Programs>Admin
> >> Tools>Routing and Remote Access and Enable RRAS for VPN
> >> users to clients through our server. When I enable the
> >> service, I get pop-up warnings saying that DHCP will
> >> assign IP addresses to any clients. Furthermore, as
> soon
> >> as the RRAS service is enabled, a few clients are
> >> experiencing problems browsing the web - as if the RRAS
> >> blocks access to the web.
> >>
> >> On clients that have this problem, the ISA firewall
> client
> >> can update to the SBS, but cannot browse the web
> although
> >> their browser is set to look at the Proxy server (ISA on
> >> SBS).
> >>
> >> Please can someone help me on this.
> >>
> >> The SBS has two NICs - LAN and WAN. The LAN IP is
> >> 192.168.16.2 and the WAN IP address is 172.16.1.2 (as it
> >> goes through a Firewall that NATs the IP). The WAN card
> >> is hardcoded with the IP, even though the firewall runs
> >> DHCP.
> >>
> >> The SBS is fully patched via Windows Update and Service
> >> Packed for SBS SP 1a.
> >>
> >> skc
> >
> >
> >.
> >



Re: RRAS and Internet by skc

skc
Wed Dec 10 11:10:54 CST 2003

see inline

>-----Original Message-----
>Check the bindingorder and make sure the internal nic is
on top.
>Make sure you have applied the regedits in 292822.
>Make sure the external IP-range is NOT in the LAT of ISA.
>

LAN card = 192.168.16.2
WAN card = 172.16.1.2

In my ISA LAT I have the following entries:

From 10.0.0.1 to 10.255.255.255
From 172.16.1.0 to 172.16.255.255
From 192.168.0.0 to 192.168.16.225
From 192.168.16.255 to 192.168.16.225

Is this correct?

Furthermore, I cannot find this Binding order thing
anywhere??

skc

>Marina
>
>"skc" <anonymous@discussions.microsoft.com> schreef in
bericht
>news:027401c3befe$5c517a00$a001280a@phx.gbl...
>> We have just deployed our replacement SBS2000 box.
>>
>> I have a problem when I go to Start>Programs>Admin
>> Tools>Routing and Remote Access and Enable RRAS for VPN
>> users to clients through our server. When I enable the
>> service, I get pop-up warnings saying that DHCP will
>> assign IP addresses to any clients. Furthermore, as
soon
>> as the RRAS service is enabled, a few clients are
>> experiencing problems browsing the web - as if the RRAS
>> blocks access to the web.
>>
>> On clients that have this problem, the ISA firewall
client
>> can update to the SBS, but cannot browse the web
although
>> their browser is set to look at the Proxy server (ISA on
>> SBS).
>>
>> Please can someone help me on this.
>>
>> The SBS has two NICs - LAN and WAN. The LAN IP is
>> 192.168.16.2 and the WAN IP address is 172.16.1.2 (as it
>> goes through a Firewall that NATs the IP). The WAN card
>> is hardcoded with the IP, even though the firewall runs
>> DHCP.
>>
>> The SBS is fully patched via Windows Update and Service
>> Packed for SBS SP 1a.
>>
>> skc
>
>
>.
>

Re: RRAS and Internet by Marina

Marina
Wed Dec 10 15:05:37 CST 2003

See inline:


"skc" <anonymous@discussions.microsoft.com> schreef in bericht
news:011501c3bf40$920243e0$a301280a@phx.gbl...
> see inline
>
> >-----Original Message-----
> >Check the bindingorder and make sure the internal nic is
> on top.
> >Make sure you have applied the regedits in 292822.
> >Make sure the external IP-range is NOT in the LAT of ISA.
> >
>
> LAN card = 192.168.16.2
> WAN card = 172.16.1.2
>
> In my ISA LAT I have the following entries:
>
> From 10.0.0.1 to 10.255.255.255
> From 172.16.1.0 to 172.16.255.255

Take the range 172.x out.

> From 192.168.0.0 to 192.168.16.225
> From 192.168.16.255 to 192.168.16.225
>
> Is this correct?
>
> Furthermore, I cannot find this Binding order thing
> anywhere??
>
Network Connections, Advanced, advanced.
And do the regedits in 292822.

Marina

> skc
>
> >Marina
> >
> >"skc" <anonymous@discussions.microsoft.com> schreef in
> bericht
> >news:027401c3befe$5c517a00$a001280a@phx.gbl...
> >> We have just deployed our replacement SBS2000 box.
> >>
> >> I have a problem when I go to Start>Programs>Admin
> >> Tools>Routing and Remote Access and Enable RRAS for VPN
> >> users to clients through our server. When I enable the
> >> service, I get pop-up warnings saying that DHCP will
> >> assign IP addresses to any clients. Furthermore, as
> soon
> >> as the RRAS service is enabled, a few clients are
> >> experiencing problems browsing the web - as if the RRAS
> >> blocks access to the web.
> >>
> >> On clients that have this problem, the ISA firewall
> client
> >> can update to the SBS, but cannot browse the web
> although
> >> their browser is set to look at the Proxy server (ISA on
> >> SBS).
> >>
> >> Please can someone help me on this.
> >>
> >> The SBS has two NICs - LAN and WAN. The LAN IP is
> >> 192.168.16.2 and the WAN IP address is 172.16.1.2 (as it
> >> goes through a Firewall that NATs the IP). The WAN card
> >> is hardcoded with the IP, even though the firewall runs
> >> DHCP.
> >>
> >> The SBS is fully patched via Windows Update and Service
> >> Packed for SBS SP 1a.
> >>
> >> skc
> >
> >
> >.
> >



Re: RRAS and Internet by skc

skc
Thu Dec 11 05:29:36 CST 2003

If I take the 172 out then do I need to stop/start any
services???

>-----Original Message-----
>See inline:
>
>
>"skc" <anonymous@discussions.microsoft.com> schreef in
bericht
>news:011501c3bf40$920243e0$a301280a@phx.gbl...
>> see inline
>>
>> >-----Original Message-----
>> >Check the bindingorder and make sure the internal nic
is
>> on top.
>> >Make sure you have applied the regedits in 292822.
>> >Make sure the external IP-range is NOT in the LAT of
ISA.
>> >
>>
>> LAN card = 192.168.16.2
>> WAN card = 172.16.1.2
>>
>> In my ISA LAT I have the following entries:
>>
>> From 10.0.0.1 to 10.255.255.255
>> From 172.16.1.0 to 172.16.255.255
>
>Take the range 172.x out.
>
>> From 192.168.0.0 to 192.168.16.225
>> From 192.168.16.255 to 192.168.16.225
>>
>> Is this correct?
>>
>> Furthermore, I cannot find this Binding order thing
>> anywhere??
>>
>Network Connections, Advanced, advanced.
>And do the regedits in 292822.
>
>Marina
>
>> skc
>>
>> >Marina
>> >
>> >"skc" <anonymous@discussions.microsoft.com> schreef in
>> bericht
>> >news:027401c3befe$5c517a00$a001280a@phx.gbl...
>> >> We have just deployed our replacement SBS2000 box.
>> >>
>> >> I have a problem when I go to Start>Programs>Admin
>> >> Tools>Routing and Remote Access and Enable RRAS for
VPN
>> >> users to clients through our server. When I enable
the
>> >> service, I get pop-up warnings saying that DHCP will
>> >> assign IP addresses to any clients. Furthermore, as
>> soon
>> >> as the RRAS service is enabled, a few clients are
>> >> experiencing problems browsing the web - as if the
RRAS
>> >> blocks access to the web.
>> >>
>> >> On clients that have this problem, the ISA firewall
>> client
>> >> can update to the SBS, but cannot browse the web
>> although
>> >> their browser is set to look at the Proxy server
(ISA on
>> >> SBS).
>> >>
>> >> Please can someone help me on this.
>> >>
>> >> The SBS has two NICs - LAN and WAN. The LAN IP is
>> >> 192.168.16.2 and the WAN IP address is 172.16.1.2
(as it
>> >> goes through a Firewall that NATs the IP). The WAN
card
>> >> is hardcoded with the IP, even though the firewall
runs
>> >> DHCP.
>> >>
>> >> The SBS is fully patched via Windows Update and
Service
>> >> Packed for SBS SP 1a.
>> >>
>> >> skc
>> >
>> >
>> >.
>> >
>
>
>.
>

Re: RRAS and Internet by Marina

Marina
Thu Dec 11 07:31:51 CST 2003

Not if, but when...
You might restart the Microsoft Firewall Service.

Marina

"skc" <anonymous@discussions.microsoft.com> schreef in bericht
news:0a9b01c3bfda$0e8b93f0$a301280a@phx.gbl...
> If I take the 172 out then do I need to stop/start any
> services???
>
> >-----Original Message-----
> >See inline:
> >
> >
> >"skc" <anonymous@discussions.microsoft.com> schreef in
> bericht
> >news:011501c3bf40$920243e0$a301280a@phx.gbl...
> >> see inline
> >>
> >> >-----Original Message-----
> >> >Check the bindingorder and make sure the internal nic
> is
> >> on top.
> >> >Make sure you have applied the regedits in 292822.
> >> >Make sure the external IP-range is NOT in the LAT of
> ISA.
> >> >
> >>
> >> LAN card = 192.168.16.2
> >> WAN card = 172.16.1.2
> >>
> >> In my ISA LAT I have the following entries:
> >>
> >> From 10.0.0.1 to 10.255.255.255
> >> From 172.16.1.0 to 172.16.255.255
> >
> >Take the range 172.x out.
> >
> >> From 192.168.0.0 to 192.168.16.225
> >> From 192.168.16.255 to 192.168.16.225
> >>
> >> Is this correct?
> >>
> >> Furthermore, I cannot find this Binding order thing
> >> anywhere??
> >>
> >Network Connections, Advanced, advanced.
> >And do the regedits in 292822.
> >
> >Marina
> >
> >> skc
> >>
> >> >Marina
> >> >
> >> >"skc" <anonymous@discussions.microsoft.com> schreef in
> >> bericht
> >> >news:027401c3befe$5c517a00$a001280a@phx.gbl...
> >> >> We have just deployed our replacement SBS2000 box.
> >> >>
> >> >> I have a problem when I go to Start>Programs>Admin
> >> >> Tools>Routing and Remote Access and Enable RRAS for
> VPN
> >> >> users to clients through our server. When I enable
> the
> >> >> service, I get pop-up warnings saying that DHCP will
> >> >> assign IP addresses to any clients. Furthermore, as
> >> soon
> >> >> as the RRAS service is enabled, a few clients are
> >> >> experiencing problems browsing the web - as if the
> RRAS
> >> >> blocks access to the web.
> >> >>
> >> >> On clients that have this problem, the ISA firewall
> >> client
> >> >> can update to the SBS, but cannot browse the web
> >> although
> >> >> their browser is set to look at the Proxy server
> (ISA on
> >> >> SBS).
> >> >>
> >> >> Please can someone help me on this.
> >> >>
> >> >> The SBS has two NICs - LAN and WAN. The LAN IP is
> >> >> 192.168.16.2 and the WAN IP address is 172.16.1.2
> (as it
> >> >> goes through a Firewall that NATs the IP). The WAN
> card
> >> >> is hardcoded with the IP, even though the firewall
> runs
> >> >> DHCP.
> >> >>
> >> >> The SBS is fully patched via Windows Update and
> Service
> >> >> Packed for SBS SP 1a.
> >> >>
> >> >> skc
> >> >
> >> >
> >> >.
> >> >
> >
> >
> >.
> >



Re: RRAS and Internet by skc

skc
Thu Dec 11 09:17:30 CST 2003

Marina,

I only took out the 172.x.x.x IP from the LAT and
everything seems OK. I started RRAS and although I got a
message saying that I need to put an IP address into DHCP
relaying everything is OK!

Can you please explain the above.

skc

>-----Original Message-----
>Not if, but when...
>You might restart the Microsoft Firewall Service.
>
>Marina
>
>"skc" <anonymous@discussions.microsoft.com> schreef in
bericht
>news:0a9b01c3bfda$0e8b93f0$a301280a@phx.gbl...
>> If I take the 172 out then do I need to stop/start any
>> services???
>>
>> >-----Original Message-----
>> >See inline:
>> >
>> >
>> >"skc" <anonymous@discussions.microsoft.com> schreef in
>> bericht
>> >news:011501c3bf40$920243e0$a301280a@phx.gbl...
>> >> see inline
>> >>
>> >> >-----Original Message-----
>> >> >Check the bindingorder and make sure the internal
nic
>> is
>> >> on top.
>> >> >Make sure you have applied the regedits in 292822.
>> >> >Make sure the external IP-range is NOT in the LAT of
>> ISA.
>> >> >
>> >>
>> >> LAN card = 192.168.16.2
>> >> WAN card = 172.16.1.2
>> >>
>> >> In my ISA LAT I have the following entries:
>> >>
>> >> From 10.0.0.1 to 10.255.255.255
>> >> From 172.16.1.0 to 172.16.255.255
>> >
>> >Take the range 172.x out.
>> >
>> >> From 192.168.0.0 to 192.168.16.225
>> >> From 192.168.16.255 to 192.168.16.225
>> >>
>> >> Is this correct?
>> >>
>> >> Furthermore, I cannot find this Binding order thing
>> >> anywhere??
>> >>
>> >Network Connections, Advanced, advanced.
>> >And do the regedits in 292822.
>> >
>> >Marina
>> >
>> >> skc
>> >>
>> >> >Marina
>> >> >
>> >> >"skc" <anonymous@discussions.microsoft.com> schreef
in
>> >> bericht
>> >> >news:027401c3befe$5c517a00$a001280a@phx.gbl...
>> >> >> We have just deployed our replacement SBS2000 box.
>> >> >>
>> >> >> I have a problem when I go to Start>Programs>Admin
>> >> >> Tools>Routing and Remote Access and Enable RRAS
for
>> VPN
>> >> >> users to clients through our server. When I
enable
>> the
>> >> >> service, I get pop-up warnings saying that DHCP
will
>> >> >> assign IP addresses to any clients. Furthermore,
as
>> >> soon
>> >> >> as the RRAS service is enabled, a few clients are
>> >> >> experiencing problems browsing the web - as if the
>> RRAS
>> >> >> blocks access to the web.
>> >> >>
>> >> >> On clients that have this problem, the ISA
firewall
>> >> client
>> >> >> can update to the SBS, but cannot browse the web
>> >> although
>> >> >> their browser is set to look at the Proxy server
>> (ISA on
>> >> >> SBS).
>> >> >>
>> >> >> Please can someone help me on this.
>> >> >>
>> >> >> The SBS has two NICs - LAN and WAN. The LAN IP is
>> >> >> 192.168.16.2 and the WAN IP address is 172.16.1.2
>> (as it
>> >> >> goes through a Firewall that NATs the IP). The
WAN
>> card
>> >> >> is hardcoded with the IP, even though the firewall
>> runs
>> >> >> DHCP.
>> >> >>
>> >> >> The SBS is fully patched via Windows Update and
>> Service
>> >> >> Packed for SBS SP 1a.
>> >> >>
>> >> >> skc
>> >> >
>> >> >
>> >> >.
>> >> >
>> >
>> >
>> >.
>> >
>
>
>.
>

Re: RRAS and Internet by Marina

Marina
Thu Dec 11 11:04:43 CST 2003

What message about DHCP relaying? Are you using a static pool for RAS or
not?

Marina

"skc" <anonymous@discussions.microsoft.com> schreef in bericht
news:11f4f01c3bff9$e526e800$a601280a@phx.gbl...
> Marina,
>
> I only took out the 172.x.x.x IP from the LAT and
> everything seems OK. I started RRAS and although I got a
> message saying that I need to put an IP address into DHCP
> relaying everything is OK!
>
> Can you please explain the above.
>
> skc
>
> >-----Original Message-----
> >Not if, but when...
> >You might restart the Microsoft Firewall Service.
> >
> >Marina
> >
> >"skc" <anonymous@discussions.microsoft.com> schreef in
> bericht
> >news:0a9b01c3bfda$0e8b93f0$a301280a@phx.gbl...
> >> If I take the 172 out then do I need to stop/start any
> >> services???
> >>
> >> >-----Original Message-----
> >> >See inline:
> >> >
> >> >
> >> >"skc" <anonymous@discussions.microsoft.com> schreef in
> >> bericht
> >> >news:011501c3bf40$920243e0$a301280a@phx.gbl...
> >> >> see inline
> >> >>
> >> >> >-----Original Message-----
> >> >> >Check the bindingorder and make sure the internal
> nic
> >> is
> >> >> on top.
> >> >> >Make sure you have applied the regedits in 292822.
> >> >> >Make sure the external IP-range is NOT in the LAT of
> >> ISA.
> >> >> >
> >> >>
> >> >> LAN card = 192.168.16.2
> >> >> WAN card = 172.16.1.2
> >> >>
> >> >> In my ISA LAT I have the following entries:
> >> >>
> >> >> From 10.0.0.1 to 10.255.255.255
> >> >> From 172.16.1.0 to 172.16.255.255
> >> >
> >> >Take the range 172.x out.
> >> >
> >> >> From 192.168.0.0 to 192.168.16.225
> >> >> From 192.168.16.255 to 192.168.16.225
> >> >>
> >> >> Is this correct?
> >> >>
> >> >> Furthermore, I cannot find this Binding order thing
> >> >> anywhere??
> >> >>
> >> >Network Connections, Advanced, advanced.
> >> >And do the regedits in 292822.
> >> >
> >> >Marina
> >> >
> >> >> skc
> >> >>
> >> >> >Marina
> >> >> >
> >> >> >"skc" <anonymous@discussions.microsoft.com> schreef
> in
> >> >> bericht
> >> >> >news:027401c3befe$5c517a00$a001280a@phx.gbl...
> >> >> >> We have just deployed our replacement SBS2000 box.
> >> >> >>
> >> >> >> I have a problem when I go to Start>Programs>Admin
> >> >> >> Tools>Routing and Remote Access and Enable RRAS
> for
> >> VPN
> >> >> >> users to clients through our server. When I
> enable
> >> the
> >> >> >> service, I get pop-up warnings saying that DHCP
> will
> >> >> >> assign IP addresses to any clients. Furthermore,
> as
> >> >> soon
> >> >> >> as the RRAS service is enabled, a few clients are
> >> >> >> experiencing problems browsing the web - as if the
> >> RRAS
> >> >> >> blocks access to the web.
> >> >> >>
> >> >> >> On clients that have this problem, the ISA
> firewall
> >> >> client
> >> >> >> can update to the SBS, but cannot browse the web
> >> >> although
> >> >> >> their browser is set to look at the Proxy server
> >> (ISA on
> >> >> >> SBS).
> >> >> >>
> >> >> >> Please can someone help me on this.
> >> >> >>
> >> >> >> The SBS has two NICs - LAN and WAN. The LAN IP is
> >> >> >> 192.168.16.2 and the WAN IP address is 172.16.1.2
> >> (as it
> >> >> >> goes through a Firewall that NATs the IP). The
> WAN
> >> card
> >> >> >> is hardcoded with the IP, even though the firewall
> >> runs
> >> >> >> DHCP.
> >> >> >>
> >> >> >> The SBS is fully patched via Windows Update and
> >> Service
> >> >> >> Packed for SBS SP 1a.
> >> >> >>
> >> >> >> skc
> >> >> >
> >> >> >
> >> >> >.
> >> >> >
> >> >
> >> >
> >> >.
> >> >
> >
> >
> >.
> >