Networking Forums

Networking Forums > Computer Networking > Windows Networking > Build up NAT/VPN Role Server

Reply
Thread Tools Display Modes

Build up NAT/VPN Role Server

 
 
Musnazril Mustaq Khan
Guest
Posts: n/a

 
      07-02-2005, 08:15 AM
Hello, iam having a problems to setting up this role (refer topic) in windows
2003 Enterprise Server. I already trying more than 30 times with difference
setting also already follow lot of manual+tutorial on the internet including
MSCE E-book.

my first question;

is I need to run DHCP + DNS Server before i can setting up NAT/VPN role?
Currently iam not running DHCP + DNS Server.

my test enviroment is;

1 Server with 2 NIC
Dial up to internet using Windows PPPoE (1024Kbps download / 384Kbps upload)
2 Client running Windows XP Pro

This is Lattest Setting I had trial.

Primary NIC (DHCP Enable given by ADSL Modem)
IP = 192.168.1.2
Subnet = 255.255.255.0
Gateway = 192.168.1.1
DNS1 = 202.188.1.5
DNS2 = 202.188.0.133

Secondary NIC (Manual)
IP = 192.168.8.1
Subnet = 255.255.254.0
Gateway = Not Set
DNS1 = 202.188.1.5
DNS2 = 202.188.0.133

Client 1 (Manual)
IP = 192.168.8.2
Subnet = 255.255.254.0
Gateway = 192.168.8.1
DNS1 = 202.188.1.5
DNS2 = 202.188.0.133

Client 2 (Manual)
IP = 192.168.8.3
Subnet = 255.255.254.0
Gateway = 192.168.8.1
DNS1 = 202.188.1.5
DNS2 = 202.188.0.133

After Finishing Setting ALL NIC IP, iam back to the Server and run Manage
Your Server Configuration Wizard. Follow the adding NAT/VPN Role Wizard,
putting the adapter that have access to internet as Primary Adapter, All VPN
client will ge connected to Secondary NIC and also selecting Secondary NIC as
a share Internet Adapter (That the only one adapter offered by the wizard).

After finish, iam restarting Server and also all clients. Than dialing to
the internet. Once connected iam testing all connection.

Server able to access Internet, LAN, Share Resource.

Clients able to access LAN, Share Resource but unable to access Internet.

Remote Client, Connected using VPN Connection able to access LAN, Share
Resource but unable to access Internet.

So can somebody which is expert in this role teach me the correct way to
deploy NAT/VPN Role.

Note I already testing this IP configuration.

Primary NIC (DHCP Enable given by ADSL Modem)
IP = 192.168.1.2
Subnet = 255.255.255.0
Gateway = 192.168.1.1
DNS1 = 202.188.1.5
DNS2 = 202.188.0.133

Secondary NIC (Manual)
IP = 192.168.0.1
Subnet = 255.255.255.0
Gateway = Not Set
DNS1 = 202.188.1.5
DNS2 = 202.188.0.133

Client 1 (Manual)
IP = 192.168.0.2
Subnet = 255.255.255.0
Gateway = 192.168.8.1
DNS1 = 202.188.1.5
DNS2 = 202.188.0.133

Client 2 (Manual)
IP = 192.168.0.3
Subnet = 255.255.255.0
Gateway = 192.168.8.1
DNS1 = 202.188.1.5
DNS2 = 202.188.0.133

--
www.malaysia-edu.net
 
Reply With Quote
 
 
 
 
Robert L [MS-MVP]
Guest
Posts: n/a

 
      07-02-2005, 04:47 PM
it could be the VPN filtering blocking the traffic. these may help, quoted from http://www.ChicagoTech.net

No one can access our website behind NAT

Cause: 1) Network address translation interfaces are not properly configured. 2) TCP/UDP port translation is not enabled. 3) The range of public addresses is not configured correctly. 4) The range of private addresses is configured incorrectly. 5) The traffic being forwarded by the network address translation computer is not translatable. 6) IP packet filtering is preventing the receiving or sending of IP traffic.

Server can access the Internet but not clients

Symptoms: You have windows 2003 multihomed server with DNS and NAT/Firewall. The server can access the Internet but none of clients.

Causes: 1. Incorrect default gateway on the client settings.
2. Incorrect DNS on the client settings.
3. NAT/Firewall blocks the client accessing the Internet.
4. The server doesn't enable IP routing or incorrect routing table.


Bob Lin, MS-MVP, MCSE & CNE
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
This posting is provided "AS IS" with no warranties.
Don't send e-mail or reply to me except you need consulting services. Posting on MS newsgroup will benefit all readers and you may get more help.
"Musnazril Mustaq Khan" <(E-Mail Removed)> wrote in message news:F408D5AF-888B-4112-8008-(E-Mail Removed)...
Hello, iam having a problems to setting up this role (refer topic) in windows
2003 Enterprise Server. I already trying more than 30 times with difference
setting also already follow lot of manual+tutorial on the internet including
MSCE E-book.

my first question;

is I need to run DHCP + DNS Server before i can setting up NAT/VPN role?
Currently iam not running DHCP + DNS Server.

my test enviroment is;

1 Server with 2 NIC
Dial up to internet using Windows PPPoE (1024Kbps download / 384Kbps upload)
2 Client running Windows XP Pro

This is Lattest Setting I had trial.

Primary NIC (DHCP Enable given by ADSL Modem)
IP = 192.168.1.2
Subnet = 255.255.255.0
Gateway = 192.168.1.1
DNS1 = 202.188.1.5
DNS2 = 202.188.0.133

Secondary NIC (Manual)
IP = 192.168.8.1
Subnet = 255.255.254.0
Gateway = Not Set
DNS1 = 202.188.1.5
DNS2 = 202.188.0.133

Client 1 (Manual)
IP = 192.168.8.2
Subnet = 255.255.254.0
Gateway = 192.168.8.1
DNS1 = 202.188.1.5
DNS2 = 202.188.0.133

Client 2 (Manual)
IP = 192.168.8.3
Subnet = 255.255.254.0
Gateway = 192.168.8.1
DNS1 = 202.188.1.5
DNS2 = 202.188.0.133

After Finishing Setting ALL NIC IP, iam back to the Server and run Manage
Your Server Configuration Wizard. Follow the adding NAT/VPN Role Wizard,
putting the adapter that have access to internet as Primary Adapter, All VPN
client will ge connected to Secondary NIC and also selecting Secondary NIC as
a share Internet Adapter (That the only one adapter offered by the wizard).

After finish, iam restarting Server and also all clients. Than dialing to
the internet. Once connected iam testing all connection.

Server able to access Internet, LAN, Share Resource.

Clients able to access LAN, Share Resource but unable to access Internet.

Remote Client, Connected using VPN Connection able to access LAN, Share
Resource but unable to access Internet.

So can somebody which is expert in this role teach me the correct way to
deploy NAT/VPN Role.

Note I already testing this IP configuration.

Primary NIC (DHCP Enable given by ADSL Modem)
IP = 192.168.1.2
Subnet = 255.255.255.0
Gateway = 192.168.1.1
DNS1 = 202.188.1.5
DNS2 = 202.188.0.133

Secondary NIC (Manual)
IP = 192.168.0.1
Subnet = 255.255.255.0
Gateway = Not Set
DNS1 = 202.188.1.5
DNS2 = 202.188.0.133

Client 1 (Manual)
IP = 192.168.0.2
Subnet = 255.255.255.0
Gateway = 192.168.8.1
DNS1 = 202.188.1.5
DNS2 = 202.188.0.133

Client 2 (Manual)
IP = 192.168.0.3
Subnet = 255.255.255.0
Gateway = 192.168.8.1
DNS1 = 202.188.1.5
DNS2 = 202.188.0.133

--
www.malaysia-edu.net
 
Reply With Quote
 
Bill Grant
Guest
Posts: n/a

 
      07-03-2005, 02:27 AM
Ifyou are not running Active Directory you do not need to set up DNS.
You can set the DNS addresses directly on the clients(as you have done) or
use the NAT server as a DNS proxy (by configuring that option on the RRAS
server).

The config of the clients looks OK. I suspect the problem is with the
server config. PPPoE can be tricky. The "external" or "public" interface for
NAT must be the PPPoE interface, and this interface must have a default
route out to the Internet provider. This interface is probably not your
primary NIC. Have you configured the PPPoE interface from the RRAS console?
The "internal" or "private" interface for NAT must be your secondary NIC (ie
192.168.8.1).

Musnazril Mustaq Khan wrote:
> Hello, iam having a problems to setting up this role (refer topic) in
> windows 2003 Enterprise Server. I already trying more than 30 times
> with difference setting also already follow lot of manual+tutorial on
> the internet including MSCE E-book.
>
> my first question;
>
> is I need to run DHCP + DNS Server before i can setting up NAT/VPN
> role? Currently iam not running DHCP + DNS Server.
>
> my test enviroment is;
>
> 1 Server with 2 NIC
> Dial up to internet using Windows PPPoE (1024Kbps download / 384Kbps
> upload) 2 Client running Windows XP Pro
>
> This is Lattest Setting I had trial.
>
> Primary NIC (DHCP Enable given by ADSL Modem)
> IP = 192.168.1.2
> Subnet = 255.255.255.0
> Gateway = 192.168.1.1
> DNS1 = 202.188.1.5
> DNS2 = 202.188.0.133
>
> Secondary NIC (Manual)
> IP = 192.168.8.1
> Subnet = 255.255.254.0
> Gateway = Not Set
> DNS1 = 202.188.1.5
> DNS2 = 202.188.0.133
>
> Client 1 (Manual)
> IP = 192.168.8.2
> Subnet = 255.255.254.0
> Gateway = 192.168.8.1
> DNS1 = 202.188.1.5
> DNS2 = 202.188.0.133
>
> Client 2 (Manual)
> IP = 192.168.8.3
> Subnet = 255.255.254.0
> Gateway = 192.168.8.1
> DNS1 = 202.188.1.5
> DNS2 = 202.188.0.133
>
> After Finishing Setting ALL NIC IP, iam back to the Server and run
> Manage Your Server Configuration Wizard. Follow the adding NAT/VPN
> Role Wizard, putting the adapter that have access to internet as
> Primary Adapter, All VPN client will ge connected to Secondary NIC
> and also selecting Secondary NIC as a share Internet Adapter (That
> the only one adapter offered by the wizard).
>
> After finish, iam restarting Server and also all clients. Than
> dialing to the internet. Once connected iam testing all connection.
>
> Server able to access Internet, LAN, Share Resource.
>
> Clients able to access LAN, Share Resource but unable to access
> Internet.
>
> Remote Client, Connected using VPN Connection able to access LAN,
> Share Resource but unable to access Internet.
>
> So can somebody which is expert in this role teach me the correct way
> to deploy NAT/VPN Role.
>
> Note I already testing this IP configuration.
>
> Primary NIC (DHCP Enable given by ADSL Modem)
> IP = 192.168.1.2
> Subnet = 255.255.255.0
> Gateway = 192.168.1.1
> DNS1 = 202.188.1.5
> DNS2 = 202.188.0.133
>
> Secondary NIC (Manual)
> IP = 192.168.0.1
> Subnet = 255.255.255.0
> Gateway = Not Set
> DNS1 = 202.188.1.5
> DNS2 = 202.188.0.133
>
> Client 1 (Manual)
> IP = 192.168.0.2
> Subnet = 255.255.255.0
> Gateway = 192.168.8.1
> DNS1 = 202.188.1.5
> DNS2 = 202.188.0.133
>
> Client 2 (Manual)
> IP = 192.168.0.3
> Subnet = 255.255.255.0
> Gateway = 192.168.8.1
> DNS1 = 202.188.1.5
> DNS2 = 202.188.0.133



 
Reply With Quote
 
 
 
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
mac filter on NAT router (not DHCP server role) Yves Dhondt Windows Networking 5 09-28-2009 11:41 PM
First Time Home Server Build wp1782 Home Networking 0 11-29-2008 08:53 PM
A host denying server role hiwa Linux Networking 4 06-23-2005 10:27 AM
Linux network server build ss-sandsideoaks Linux Networking 3 06-02-2005 06:09 AM
Linux network build server ss-sandsideoaks Linux Networking 1 03-22-2005 05:24 PM



1 2 3 4 5 6 7 8 9 10 11