Hi again,
I've just read & worked through the excellent
post from Jeff. If anyone else has, i'd appreciate some
help! The RRAS has been set up properly with a static
pool on a different Subnet from the LAN DHCP clients. It
doesn't matter that the Remote Client can browse the
Internet - just Network shares are ok! Now when the
remote client VPN's they get authenticated & connected
but can't see anything at all. Using the Route Print
shows that the VPN client routes to the Static Pool I
configured through the RRAS. The Server and any clients
on the LAN do respond to a ping. No need to enter WINS
address (Win XP Pro clien) & Servers IP address is
entered as DNS Server. Any suggestions?

Cheers & Thanks

Gary

Re: VPN configuration by Rob

Rob
Tue Feb 10 13:43:23 CST 2004

What, if anything, happens when you type the command \\servername at the run
prompt of your client in VPN (I've found that having offline files on some
clients can upset them too). If that doesnt show the server shares (give it
time - VPN can be very slow), in the command prompt what run "ipconfig /all"
and confirm all the DNS, WIN and other settings point at your server.

"Gary" <anonymous@discussions.microsoft.com> wrote in message
news:e0a301c3efe7$6b12e4b0$a601280a@phx.gbl...
> Hi again,
> I've just read & worked through the excellent
> post from Jeff. If anyone else has, i'd appreciate some
> help! The RRAS has been set up properly with a static
> pool on a different Subnet from the LAN DHCP clients. It
> doesn't matter that the Remote Client can browse the
> Internet - just Network shares are ok! Now when the
> remote client VPN's they get authenticated & connected
> but can't see anything at all. Using the Route Print
> shows that the VPN client routes to the Static Pool I
> configured through the RRAS. The Server and any clients
> on the LAN do respond to a ping. No need to enter WINS
> address (Win XP Pro clien) & Servers IP address is
> entered as DNS Server. Any suggestions?
>
> Cheers & Thanks
>
> Gary



Re: VPN configuration by Gary

Gary
Wed Feb 11 07:16:11 CST 2004

Hi Rob, thanks for the answer. Firstly ipconfig /all
shows DNS, WINS etc pointing to Server. we can ping the
Server or any other client machine on the LAN & get a
reply. \\ Servername just brings up a blank IE Browser.
I've tried setting it to use port 8080 as a Proxy Server -
nothing. the machine is abroad but I joined it to the
Domain before it left. i've even tried joining it to a
Workroup then trying "Joining a computer to the Domain
over a VPN link as in VPN Deployment guide. Same result.
All permissions are set for person - Dial In, 9oviously
works as they're authenticated onto the Server) & the
person is a member of the Domain Users group so should be
able to open shares, (importantly the database) Any ideas
as I'm absolutely stumped? Any input is greatly
appreciated.

Regards,

Gary
>-----Original Message-----
>What, if anything, happens when you type the command
\\servername at the run
>prompt of your client in VPN (I've found that having
offline files on some
>clients can upset them too). If that doesnt show the
server shares (give it
>time - VPN can be very slow), in the command prompt what
run "ipconfig /all"
>and confirm all the DNS, WIN and other settings point at
your server.
>
>"Gary" <anonymous@discussions.microsoft.com> wrote in
message
>news:e0a301c3efe7$6b12e4b0$a601280a@phx.gbl...
>> Hi again,
>> I've just read & worked through the excellent
>> post from Jeff. If anyone else has, i'd appreciate some
>> help! The RRAS has been set up properly with a static
>> pool on a different Subnet from the LAN DHCP clients.
It
>> doesn't matter that the Remote Client can browse the
>> Internet - just Network shares are ok! Now when the
>> remote client VPN's they get authenticated & connected
>> but can't see anything at all. Using the Route Print
>> shows that the VPN client routes to the Static Pool I
>> configured through the RRAS. The Server and any clients
>> on the LAN do respond to a ping. No need to enter WINS
>> address (Win XP Pro clien) & Servers IP address is
>> entered as DNS Server. Any suggestions?
>>
>> Cheers & Thanks
>>
>> Gary
>
>
>.
>

Re: VPN configuration by Jim

Jim
Wed Feb 11 08:51:55 CST 2004

Go ahead and print the complete ip config/all but blank out the real
world ip. Anything to give some clues. Also route print. You are doing
\\jimssbs or whatever your server name is? You can ping the server by
ip and name?

"Gary" <anonymous@discussions.microsoft.com> wrote:

>Hi Rob, thanks for the answer. Firstly ipconfig /all
>shows DNS, WINS etc pointing to Server. we can ping the
>Server or any other client machine on the LAN & get a
>reply. \\ Servername just brings up a blank IE Browser.
>I've tried setting it to use port 8080 as a Proxy Server -
> nothing. the machine is abroad but I joined it to the
>Domain before it left. i've even tried joining it to a
>Workroup then trying "Joining a computer to the Domain
>over a VPN link as in VPN Deployment guide. Same result.
>All permissions are set for person - Dial In, 9oviously
>works as they're authenticated onto the Server) & the
>person is a member of the Domain Users group so should be
>able to open shares, (importantly the database) Any ideas
>as I'm absolutely stumped? Any input is greatly
>appreciated.
>
>Regards,
>
>Gary
>>-----Original Message-----
>>What, if anything, happens when you type the command
>\\servername at the run
>>prompt of your client in VPN (I've found that having
>offline files on some
>>clients can upset them too). If that doesnt show the
>server shares (give it
>>time - VPN can be very slow), in the command prompt what
>run "ipconfig /all"
>>and confirm all the DNS, WIN and other settings point at
>your server.
>>
>>"Gary" <anonymous@discussions.microsoft.com> wrote in
>message
>>news:e0a301c3efe7$6b12e4b0$a601280a@phx.gbl...
>>> Hi again,
>>> I've just read & worked through the excellent
>>> post from Jeff. If anyone else has, i'd appreciate some
>>> help! The RRAS has been set up properly with a static
>>> pool on a different Subnet from the LAN DHCP clients.
>It
>>> doesn't matter that the Remote Client can browse the
>>> Internet - just Network shares are ok! Now when the
>>> remote client VPN's they get authenticated & connected
>>> but can't see anything at all. Using the Route Print
>>> shows that the VPN client routes to the Static Pool I
>>> configured through the RRAS. The Server and any clients
>>> on the LAN do respond to a ping. No need to enter WINS
>>> address (Win XP Pro clien) & Servers IP address is
>>> entered as DNS Server. Any suggestions?
>>>
>>> Cheers & Thanks
>>>
>>> Gary
>>
>>
>>.
>>

Jim B. SBS MVP
remove the mvp to send email

Re: VPN configuration by Gary

Gary
Wed Feb 11 10:26:15 CST 2004

Thanks Jim here it is just for you to check :

Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\Gary >ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . .: gary
Primary Dns Suffix . . . . .: Domain.local
Node Type . . . . . . . . . .: Hybrid
IP Routing Enabled. . . . . .: No
WINS Proxy Enabled. . . . : No
DNS Suffix Search List. . : Domain.local

Ethernet adapter Local Area Connection: ( USB ADSL
0.5 MB connection )

Media State . . . . . . . . .: Media disconnected
Description . . . . . . . . .: NETGEAR FA311
Fast Ethernet Adapter
Physical Address. . . . . . .:00-02-E3-18-5B-0F

PPP adapter BT Broadband:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : WAN (PPP/SLIP)
Interface
Physical Address. . . .: 00-53-45-00-00-00
Dhcp Enabled. . . . . .: No
IP Address. . . . . . .: 217.44.XX.XX
Subnet Mask . . . . . .: 255.255.255.255
Default Gateway . . . : 217.44.XX.XX
DNS Servers . . . . . : 194.72.9.34 (ISP DNS Servers )
:217.35.209.180


PPP adapter Domain:

Connection-specific DNS Suffix :
Description . . . . . . . . . . : WAN (PPP/SLIP)
Interface
Physical Address. . . . . . .: 00-53-45-00-00-00
Dhcp Enabled. . . . . . . . .: No
IP Address. . . . . . . . . .: 10.x.x.x (Static
Route assigned to VPN clients )
Subnet Mask . . . . . . . . .: 255.255.255.255
Default Gateway . . . . . . .: 10.x.x.x
DNS Servers . . . . . . . . .: 192.168.16.2
Primary WINS Server . . . : 192.168.16.2

I can ping the Server by name & by IP address. I've
followed Kb 303650 & am now looking at Kb 810582. Has
anyone had any issues with Kb 810582? - primarily being
able to access an Access XP database?

Thanks for your time.

Gary

>-----Original Message-----
>Go ahead and print the complete ip config/all but blank
out the real
>world ip. Anything to give some clues. Also route print.
You are doing
>\\jimssbs or whatever your server name is? You can ping
the server by
>ip and name?
>
>"Gary" <anonymous@discussions.microsoft.com> wrote:
>
>>Hi Rob, thanks for the answer. Firstly ipconfig /all
>>shows DNS, WINS etc pointing to Server. we can ping the
>>Server or any other client machine on the LAN & get a
>>reply. \\ Servername just brings up a blank IE Browser.
>>I've tried setting it to use port 8080 as a Proxy
Server -
>> nothing. the machine is abroad but I joined it to the
>>Domain before it left. i've even tried joining it to a
>>Workroup then trying "Joining a computer to the Domain
>>over a VPN link as in VPN Deployment guide. Same
result.
>>All permissions are set for person - Dial In, 9oviously
>>works as they're authenticated onto the Server) & the
>>person is a member of the Domain Users group so should
be
>>able to open shares, (importantly the database) Any
ideas
>>as I'm absolutely stumped? Any input is greatly
>>appreciated.
>>
>>Regards,
>>
>>Gary
>>>-----Original Message-----
>>>What, if anything, happens when you type the command
>>\\servername at the run
>>>prompt of your client in VPN (I've found that having
>>offline files on some
>>>clients can upset them too). If that doesnt show the
>>server shares (give it
>>>time - VPN can be very slow), in the command prompt
what
>>run "ipconfig /all"
>>>and confirm all the DNS, WIN and other settings point
at
>>your server.
>>>
>>>"Gary" <anonymous@discussions.microsoft.com> wrote in
>>message
>>>news:e0a301c3efe7$6b12e4b0$a601280a@phx.gbl...
>>>> Hi again,
>>>> I've just read & worked through the
excellent
>>>> post from Jeff. If anyone else has, i'd appreciate
some
>>>> help! The RRAS has been set up properly with a static
>>>> pool on a different Subnet from the LAN DHCP
clients.
>>It
>>>> doesn't matter that the Remote Client can browse the
>>>> Internet - just Network shares are ok! Now when the
>>>> remote client VPN's they get authenticated &
connected
>>>> but can't see anything at all. Using the Route Print
>>>> shows that the VPN client routes to the Static Pool I
>>>> configured through the RRAS. The Server and any
clients
>>>> on the LAN do respond to a ping. No need to enter
WINS
>>>> address (Win XP Pro clien) & Servers IP address is
>>>> entered as DNS Server. Any suggestions?
>>>>
>>>> Cheers & Thanks
>>>>
>>>> Gary
>>>
>>>
>>>.
>>>
>
>Jim B. SBS MVP
>remove the mvp to send email
>.
>

Re: VPN configuration by Rob

Rob
Wed Feb 11 15:28:15 CST 2004

Hmm, not an expert, but comparing that to my own XP Pro VPN it looks OK.

You are using a USB connection instead of an NIC. I have heard of some
problems with these as USB can grab a lot of your PC's resources, however I
doubt that is going to be the problem.

I did have exactly your scenario having looked at the KBs, checked the
articles on smallbizserver.net, and worked through everything. I could
authenticate my connection but get no further, despite suggestions in this
newsgroup. It's probably not what you want to hear, but I had the
opportunity to go for the radiacal reload from scratch of my SBS, patched it
up, and simply following the smallbizserver.net article, without amy need
for doing the regedits and stuff, and VPN worked first time!

Rob

"Gary" <anonymous@discussions.microsoft.com> wrote in message
news:e1b101c3f0bb$c504e9d0$a301280a@phx.gbl...
> Thanks Jim here it is just for you to check :
>
> Microsoft Windows XP [Version 5.1.2600]
> (C) Copyright 1985-2001 Microsoft Corp.
>
> C:\Documents and Settings\Gary >ipconfig /all
>
> Windows IP Configuration
>
> Host Name . . . . . . . . . .: gary
> Primary Dns Suffix . . . . .: Domain.local
> Node Type . . . . . . . . . .: Hybrid
> IP Routing Enabled. . . . . .: No
> WINS Proxy Enabled. . . . : No
> DNS Suffix Search List. . : Domain.local
>
> Ethernet adapter Local Area Connection: ( USB ADSL
> 0.5 MB connection )
>
> Media State . . . . . . . . .: Media disconnected
> Description . . . . . . . . .: NETGEAR FA311
> Fast Ethernet Adapter
> Physical Address. . . . . . .:00-02-E3-18-5B-0F
>
> PPP adapter BT Broadband:
>
> Connection-specific DNS Suffix . :
> Description . . . . . . . . . . . : WAN (PPP/SLIP)
> Interface
> Physical Address. . . .: 00-53-45-00-00-00
> Dhcp Enabled. . . . . .: No
> IP Address. . . . . . .: 217.44.XX.XX
> Subnet Mask . . . . . .: 255.255.255.255
> Default Gateway . . . : 217.44.XX.XX
> DNS Servers . . . . . : 194.72.9.34 (ISP DNS Servers )
> :217.35.209.180
>
>
> PPP adapter Domain:
>
> Connection-specific DNS Suffix :
> Description . . . . . . . . . . : WAN (PPP/SLIP)
> Interface
> Physical Address. . . . . . .: 00-53-45-00-00-00
> Dhcp Enabled. . . . . . . . .: No
> IP Address. . . . . . . . . .: 10.x.x.x (Static
> Route assigned to VPN clients )
> Subnet Mask . . . . . . . . .: 255.255.255.255
> Default Gateway . . . . . . .: 10.x.x.x
> DNS Servers . . . . . . . . .: 192.168.16.2
> Primary WINS Server . . . : 192.168.16.2
>
> I can ping the Server by name & by IP address. I've
> followed Kb 303650 & am now looking at Kb 810582. Has
> anyone had any issues with Kb 810582? - primarily being
> able to access an Access XP database?
>
> Thanks for your time.
>
> Gary
>
> >-----Original Message-----
> >Go ahead and print the complete ip config/all but blank
> out the real
> >world ip. Anything to give some clues. Also route print.
> You are doing
> >\\jimssbs or whatever your server name is? You can ping
> the server by
> >ip and name?
> >
> >"Gary" <anonymous@discussions.microsoft.com> wrote:
> >
> >>Hi Rob, thanks for the answer. Firstly ipconfig /all
> >>shows DNS, WINS etc pointing to Server. we can ping the
> >>Server or any other client machine on the LAN & get a
> >>reply. \\ Servername just brings up a blank IE Browser.
> >>I've tried setting it to use port 8080 as a Proxy
> Server -
> >> nothing. the machine is abroad but I joined it to the
> >>Domain before it left. i've even tried joining it to a
> >>Workroup then trying "Joining a computer to the Domain
> >>over a VPN link as in VPN Deployment guide. Same
> result.
> >>All permissions are set for person - Dial In, 9oviously
> >>works as they're authenticated onto the Server) & the
> >>person is a member of the Domain Users group so should
> be
> >>able to open shares, (importantly the database) Any
> ideas
> >>as I'm absolutely stumped? Any input is greatly
> >>appreciated.
> >>
> >>Regards,
> >>
> >>Gary
> >>>-----Original Message-----
> >>>What, if anything, happens when you type the command
> >>\\servername at the run
> >>>prompt of your client in VPN (I've found that having
> >>offline files on some
> >>>clients can upset them too). If that doesnt show the
> >>server shares (give it
> >>>time - VPN can be very slow), in the command prompt
> what
> >>run "ipconfig /all"
> >>>and confirm all the DNS, WIN and other settings point
> at
> >>your server.
> >>>
> >>>"Gary" <anonymous@discussions.microsoft.com> wrote in
> >>message
> >>>news:e0a301c3efe7$6b12e4b0$a601280a@phx.gbl...
> >>>> Hi again,
> >>>> I've just read & worked through the
> excellent
> >>>> post from Jeff. If anyone else has, i'd appreciate
> some
> >>>> help! The RRAS has been set up properly with a static
> >>>> pool on a different Subnet from the LAN DHCP
> clients.
> >>It
> >>>> doesn't matter that the Remote Client can browse the
> >>>> Internet - just Network shares are ok! Now when the
> >>>> remote client VPN's they get authenticated &
> connected
> >>>> but can't see anything at all. Using the Route Print
> >>>> shows that the VPN client routes to the Static Pool I
> >>>> configured through the RRAS. The Server and any
> clients
> >>>> on the LAN do respond to a ping. No need to enter
> WINS
> >>>> address (Win XP Pro clien) & Servers IP address is
> >>>> entered as DNS Server. Any suggestions?
> >>>>
> >>>> Cheers & Thanks
> >>>>
> >>>> Gary
> >>>
> >>>
> >>>.
> >>>
> >
> >Jim B. SBS MVP
> >remove the mvp to send email
> >.
> >



Re: VPN configuration by Jim

Jim
Thu Feb 12 09:13:13 CST 2004

10.0.x.x is a private ip scheme so you reveal no secrets with the full
disclosure of thoise ips. You may need to do some routing to get the
10.0.x.x traffic into the 192.168.16.x. Personally I always have my
RRAS use ips from dhcp. Or at the most I will set a few ips but in the
internal network range. I mean if I do not use dhcp in RRAS I may tell
it to server 192.168.16.120-130.

So te refresh everyone when you do start-run \\servername you get no
response?

At the office can you vpn into the external nic and see what happens?
I would attach a hub to the external nic so that you can still have
internet access for the internal users. I would attach a wokstation to
the external hub and then make a vpn connection. This way you
eliminate isp problems for testing purposes.

"Gary" <anonymous@discussions.microsoft.com> wrote:

>Thanks Jim here it is just for you to check :
>
>Microsoft Windows XP [Version 5.1.2600]
>(C) Copyright 1985-2001 Microsoft Corp.
>
>C:\Documents and Settings\Gary >ipconfig /all
>
>Windows IP Configuration
>
> Host Name . . . . . . . . . .: gary
> Primary Dns Suffix . . . . .: Domain.local
> Node Type . . . . . . . . . .: Hybrid
> IP Routing Enabled. . . . . .: No
> WINS Proxy Enabled. . . . : No
> DNS Suffix Search List. . : Domain.local
>
>Ethernet adapter Local Area Connection: ( USB ADSL
>0.5 MB connection )
>
> Media State . . . . . . . . .: Media disconnected
> Description . . . . . . . . .: NETGEAR FA311
>Fast Ethernet Adapter
> Physical Address. . . . . . .:00-02-E3-18-5B-0F
>
>PPP adapter BT Broadband:
>
> Connection-specific DNS Suffix . :
> Description . . . . . . . . . . . : WAN (PPP/SLIP)
>Interface
> Physical Address. . . .: 00-53-45-00-00-00
> Dhcp Enabled. . . . . .: No
> IP Address. . . . . . .: 217.44.XX.XX
> Subnet Mask . . . . . .: 255.255.255.255
> Default Gateway . . . : 217.44.XX.XX
> DNS Servers . . . . . : 194.72.9.34 (ISP DNS Servers )
> :217.35.209.180
>
>
>PPP adapter Domain:
>
> Connection-specific DNS Suffix :
> Description . . . . . . . . . . : WAN (PPP/SLIP)
>Interface
> Physical Address. . . . . . .: 00-53-45-00-00-00
> Dhcp Enabled. . . . . . . . .: No
> IP Address. . . . . . . . . .: 10.x.x.x (Static
>Route assigned to VPN clients )
> Subnet Mask . . . . . . . . .: 255.255.255.255
> Default Gateway . . . . . . .: 10.x.x.x
> DNS Servers . . . . . . . . .: 192.168.16.2
> Primary WINS Server . . . : 192.168.16.2
>
>I can ping the Server by name & by IP address. I've
>followed Kb 303650 & am now looking at Kb 810582. Has
>anyone had any issues with Kb 810582? - primarily being
>able to access an Access XP database?
>
>Thanks for your time.
>
>Gary
>
>>-----Original Message-----
>>Go ahead and print the complete ip config/all but blank
>out the real
>>world ip. Anything to give some clues. Also route print.
>You are doing
>>\\jimssbs or whatever your server name is? You can ping
>the server by
>>ip and name?
>>
>>"Gary" <anonymous@discussions.microsoft.com> wrote:
>>
>>>Hi Rob, thanks for the answer. Firstly ipconfig /all
>>>shows DNS, WINS etc pointing to Server. we can ping the
>>>Server or any other client machine on the LAN & get a
>>>reply. \\ Servername just brings up a blank IE Browser.
>>>I've tried setting it to use port 8080 as a Proxy
>Server -
>>> nothing. the machine is abroad but I joined it to the
>>>Domain before it left. i've even tried joining it to a
>>>Workroup then trying "Joining a computer to the Domain
>>>over a VPN link as in VPN Deployment guide. Same
>result.
>>>All permissions are set for person - Dial In, 9oviously
>>>works as they're authenticated onto the Server) & the
>>>person is a member of the Domain Users group so should
>be
>>>able to open shares, (importantly the database) Any
>ideas
>>>as I'm absolutely stumped? Any input is greatly
>>>appreciated.
>>>
>>>Regards,
>>>
>>>Gary
>>>>-----Original Message-----
>>>>What, if anything, happens when you type the command
>>>\\servername at the run
>>>>prompt of your client in VPN (I've found that having
>>>offline files on some
>>>>clients can upset them too). If that doesnt show the
>>>server shares (give it
>>>>time - VPN can be very slow), in the command prompt
>what
>>>run "ipconfig /all"
>>>>and confirm all the DNS, WIN and other settings point
>at
>>>your server.
>>>>
>>>>"Gary" <anonymous@discussions.microsoft.com> wrote in
>>>message
>>>>news:e0a301c3efe7$6b12e4b0$a601280a@phx.gbl...
>>>>> Hi again,
>>>>> I've just read & worked through the
>excellent
>>>>> post from Jeff. If anyone else has, i'd appreciate
>some
>>>>> help! The RRAS has been set up properly with a static
>>>>> pool on a different Subnet from the LAN DHCP
>clients.
>>>It
>>>>> doesn't matter that the Remote Client can browse the
>>>>> Internet - just Network shares are ok! Now when the
>>>>> remote client VPN's they get authenticated &