it could be the VPN filtering blocking the traffic. these may help, quoted from
http://www.ChicagoTech.net
No one can access our website behind NAT
Cause: 1) Network address translation interfaces are not properly configured. 2) TCP/UDP port translation is not enabled. 3) The range of public addresses is not configured correctly. 4) The range of private addresses is configured incorrectly. 5) The traffic being forwarded by the network address translation computer is not translatable. 6) IP packet filtering is preventing the receiving or sending of IP traffic.
Server can access the Internet but not clients
Symptoms: You have windows 2003 multihomed server with DNS and NAT/Firewall. The server can access the Internet but none of clients.
Causes: 1. Incorrect default gateway on the client settings.
2. Incorrect DNS on the client settings.
3. NAT/Firewall blocks the client accessing the Internet.
4. The server doesn't enable IP routing or incorrect routing table.
Bob Lin, MS-MVP, MCSE & CNE
How to Setup Windows, Network, VPN & Remote Access on
http://www.HowToNetworking.com
Networking, Internet, Routing, VPN Troubleshooting on
http://www.ChicagoTech.net
This posting is provided "AS IS" with no warranties.
Don't send e-mail or reply to me except you need consulting services. Posting on MS newsgroup will benefit all readers and you may get more help.
"Musnazril Mustaq Khan" <(E-Mail Removed)> wrote in message news:F408D5AF-888B-4112-8008-(E-Mail Removed)...
Hello, iam having a problems to setting up this role (refer topic) in windows
2003 Enterprise Server. I already trying more than 30 times with difference
setting also already follow lot of manual+tutorial on the internet including
MSCE E-book.
my first question;
is I need to run DHCP + DNS Server before i can setting up NAT/VPN role?
Currently iam not running DHCP + DNS Server.
my test enviroment is;
1 Server with 2 NIC
Dial up to internet using Windows PPPoE (1024Kbps download / 384Kbps upload)
2 Client running Windows XP Pro
This is Lattest Setting I had trial.
Primary NIC (DHCP Enable given by ADSL Modem)
IP = 192.168.1.2
Subnet = 255.255.255.0
Gateway = 192.168.1.1
DNS1 = 202.188.1.5
DNS2 = 202.188.0.133
Secondary NIC (Manual)
IP = 192.168.8.1
Subnet = 255.255.254.0
Gateway = Not Set
DNS1 = 202.188.1.5
DNS2 = 202.188.0.133
Client 1 (Manual)
IP = 192.168.8.2
Subnet = 255.255.254.0
Gateway = 192.168.8.1
DNS1 = 202.188.1.5
DNS2 = 202.188.0.133
Client 2 (Manual)
IP = 192.168.8.3
Subnet = 255.255.254.0
Gateway = 192.168.8.1
DNS1 = 202.188.1.5
DNS2 = 202.188.0.133
After Finishing Setting ALL NIC IP, iam back to the Server and run Manage
Your Server Configuration Wizard. Follow the adding NAT/VPN Role Wizard,
putting the adapter that have access to internet as Primary Adapter, All VPN
client will ge connected to Secondary NIC and also selecting Secondary NIC as
a share Internet Adapter (That the only one adapter offered by the wizard).
After finish, iam restarting Server and also all clients. Than dialing to
the internet. Once connected iam testing all connection.
Server able to access Internet, LAN, Share Resource.
Clients able to access LAN, Share Resource but unable to access Internet.
Remote Client, Connected using VPN Connection able to access LAN, Share
Resource but unable to access Internet.
So can somebody which is expert in this role teach me the correct way to
deploy NAT/VPN Role.
Note I already testing this IP configuration.
Primary NIC (DHCP Enable given by ADSL Modem)
IP = 192.168.1.2
Subnet = 255.255.255.0
Gateway = 192.168.1.1
DNS1 = 202.188.1.5
DNS2 = 202.188.0.133
Secondary NIC (Manual)
IP = 192.168.0.1
Subnet = 255.255.255.0
Gateway = Not Set
DNS1 = 202.188.1.5
DNS2 = 202.188.0.133
Client 1 (Manual)
IP = 192.168.0.2
Subnet = 255.255.255.0
Gateway = 192.168.8.1
DNS1 = 202.188.1.5
DNS2 = 202.188.0.133
Client 2 (Manual)
IP = 192.168.0.3
Subnet = 255.255.255.0
Gateway = 192.168.8.1
DNS1 = 202.188.1.5
DNS2 = 202.188.0.133
--
www.malaysia-edu.net