Cannot access resources beyond VPN server

I can VPN from my house to the main office's small business server 2003 and
use the vpn server (small business server 2003) resource. However, i can not
access the shared resources on the file server (windows server 2003).

I'm using a static T1 connected to my computer with a static IP; no routers
but direct connection to the T1 modem.

In the office we have

T1 > Linksys VPN router RV042 > SBS2003

SBS2003 is DHCP, DNS, VPN IIS, Exchange, and AD server with 2 network cards
(WAN 10.0.0.2 and LAN 10.0.03). It doesn' have ISA.

the RV042 is hooked to wan of SBS2003 and to the 48 port gigabit switch.

the windows 2003 file server and the other clients are connected to the 48
port switch.

After the VPN connection is sucessful, I can only ping the SBS2003 but the
file server and the other clients.

I Cannot access resources beyond VPN server.

How are you trying to access the file server? By name?

Can you ping the file server by its IP address? What about by its FQDN?

A VPN just gives you an IP connection. You do not get automatic name
resolution as you do on a LAN.

"Martin_C" <(E-Mail Removed)> wrote in message
news:8A284930-5B21-4BCC-AD85-(E-Mail Removed)...
>I can VPN from my house to the main office's small business server 2003 and
> use the vpn server (small business server 2003) resource. However, i can
> not
> access the shared resources on the file server (windows server 2003).
>
> I'm using a static T1 connected to my computer with a static IP; no
> routers
> but direct connection to the T1 modem.
>
> In the office we have
>
> T1 > Linksys VPN router RV042 > SBS2003
>
> SBS2003 is DHCP, DNS, VPN IIS, Exchange, and AD server with 2 network
> cards
> (WAN 10.0.0.2 and LAN 10.0.03). It doesn' have ISA.
>
> the RV042 is hooked to wan of SBS2003 and to the 48 port gigabit switch.
>
> the windows 2003 file server and the other clients are connected to the 48
> port switch.
>
> After the VPN connection is sucessful, I can only ping the SBS2003 but the
> file server and the other clients.
>
> I Cannot access resources beyond VPN server.
>

I tried to ping by the static ip of the file server and by it's FQDN
(fserver) and they both failed 100% loss. I also tried to ping different
client workstations by there's ip and FQDN and they both failed too.

"Bill Grant" wrote:

> How are you trying to access the file server? By name?
>
> Can you ping the file server by its IP address? What about by its FQDN?
>
> A VPN just gives you an IP connection. You do not get automatic name
> resolution as you do on a LAN.
>
> "Martin_C" <(E-Mail Removed)> wrote in message
> news:8A284930-5B21-4BCC-AD85-(E-Mail Removed)...
> >I can VPN from my house to the main office's small business server 2003 and
> > use the vpn server (small business server 2003) resource. However, i can
> > not
> > access the shared resources on the file server (windows server 2003).
> >
> > I'm using a static T1 connected to my computer with a static IP; no
> > routers
> > but direct connection to the T1 modem.
> >
> > In the office we have
> >
> > T1 > Linksys VPN router RV042 > SBS2003
> >
> > SBS2003 is DHCP, DNS, VPN IIS, Exchange, and AD server with 2 network
> > cards
> > (WAN 10.0.0.2 and LAN 10.0.03). It doesn' have ISA.
> >
> > the RV042 is hooked to wan of SBS2003 and to the 48 port gigabit switch.
> >
> > the windows 2003 file server and the other clients are connected to the 48
> > port switch.
> >
> > After the VPN connection is sucessful, I can only ping the SBS2003 but the
> > file server and the other clients.
> >
> > I Cannot access resources beyond VPN server.
> >
>
>

If your SBS server is behind a router, why does it have two NICs? Having
two NICs in the same IP subnet will almost always cause odd problems.

You only need two NICs in the server if it is connected to two networks,
such as the private LAN and the Internet. If a router is doing the Internet
routing, the server on the LAN only needs one NIC.

"Martin_C" <(E-Mail Removed)> wrote in message
news:8857D526-C05C-4107-BC11-(E-Mail Removed)...
>I tried to ping by the static ip of the file server and by it's FQDN
> (fserver) and they both failed 100% loss. I also tried to ping different
> client workstations by there's ip and FQDN and they both failed too.
>
> "Bill Grant" wrote:
>
>> How are you trying to access the file server? By name?
>>
>> Can you ping the file server by its IP address? What about by its FQDN?
>>
>> A VPN just gives you an IP connection. You do not get automatic name
>> resolution as you do on a LAN.
>>
>> "Martin_C" <(E-Mail Removed)> wrote in message
>> news:8A284930-5B21-4BCC-AD85-(E-Mail Removed)...
>> >I can VPN from my house to the main office's small business server 2003
>> >and
>> > use the vpn server (small business server 2003) resource. However, i
>> > can
>> > not
>> > access the shared resources on the file server (windows server 2003).
>> >
>> > I'm using a static T1 connected to my computer with a static IP; no
>> > routers
>> > but direct connection to the T1 modem.
>> >
>> > In the office we have
>> >
>> > T1 > Linksys VPN router RV042 > SBS2003
>> >
>> > SBS2003 is DHCP, DNS, VPN IIS, Exchange, and AD server with 2 network
>> > cards
>> > (WAN 10.0.0.2 and LAN 10.0.03). It doesn' have ISA.
>> >
>> > the RV042 is hooked to wan of SBS2003 and to the 48 port gigabit
>> > switch.
>> >
>> > the windows 2003 file server and the other clients are connected to the
>> > 48
>> > port switch.
>> >
>> > After the VPN connection is sucessful, I can only ping the SBS2003 but
>> > the
>> > file server and the other clients.
>> >
>> > I Cannot access resources beyond VPN server.
>> >
>>
>>

the router is not acting as a DHCP server. I'm using it because i'm hooking a
t1 1.5mb and a 10mb/2mb cable for internet redundancy which is a very common
practice.

For a small business server it is recommended to have to two NIC (one for
wan and LAN) if one decides to add ISA. It is always recommend to have more
than 1 NIC in a server so you can do network direct backup (which I don't
have it implemented in this client). Anyway, my network topology is a
standard design for ISA which has 2 NIC in a SBS2003 but not implemented due
to complains of restriction and so on.

The router is not used as a router (no DHCP). It is only used to switch from
Cable to T1 in case of ISP downtime.

my router is 10.0.0.1 and sbs2003 wan = 10.0.0.2 and sbs2003 lan = 10.0.0.3

"Bill Grant" wrote:

> If your SBS server is behind a router, why does it have two NICs? Having
> two NICs in the same IP subnet will almost always cause odd problems.
>
> You only need two NICs in the server if it is connected to two networks,
> such as the private LAN and the Internet. If a router is doing the Internet
> routing, the server on the LAN only needs one NIC.
>
> "Martin_C" <(E-Mail Removed)> wrote in message
> news:8857D526-C05C-4107-BC11-(E-Mail Removed)...
> >I tried to ping by the static ip of the file server and by it's FQDN
> > (fserver) and they both failed 100% loss. I also tried to ping different
> > client workstations by there's ip and FQDN and they both failed too.
> >
> > "Bill Grant" wrote:
> >
> >> How are you trying to access the file server? By name?
> >>
> >> Can you ping the file server by its IP address? What about by its FQDN?
> >>
> >> A VPN just gives you an IP connection. You do not get automatic name
> >> resolution as you do on a LAN.
> >>
> >> "Martin_C" <(E-Mail Removed)> wrote in message
> >> news:8A284930-5B21-4BCC-AD85-(E-Mail Removed)...
> >> >I can VPN from my house to the main office's small business server 2003
> >> >and
> >> > use the vpn server (small business server 2003) resource. However, i
> >> > can
> >> > not
> >> > access the shared resources on the file server (windows server 2003).
> >> >
> >> > I'm using a static T1 connected to my computer with a static IP; no
> >> > routers
> >> > but direct connection to the T1 modem.
> >> >
> >> > In the office we have
> >> >
> >> > T1 > Linksys VPN router RV042 > SBS2003
> >> >
> >> > SBS2003 is DHCP, DNS, VPN IIS, Exchange, and AD server with 2 network
> >> > cards
> >> > (WAN 10.0.0.2 and LAN 10.0.03). It doesn' have ISA.
> >> >
> >> > the RV042 is hooked to wan of SBS2003 and to the 48 port gigabit
> >> > switch.
> >> >
> >> > the windows 2003 file server and the other clients are connected to the
> >> > 48
> >> > port switch.
> >> >
> >> > After the VPN connection is sucessful, I can only ping the SBS2003 but
> >> > the
> >> > file server and the other clients.
> >> >
> >> > I Cannot access resources beyond VPN server.
> >> >
> >>
> >>
>
>

You missed the point. You have two NICs which are in the same network and
in the same IP subnet. This does not give you redundancy, it gives you
headaches! It is definitely _not_ standard ISA network topology.

To run ISA, the two NICs must be in different networks and different IP
subnets. ISA serves as a firewall between the "public" and "private"
networks.

Whether the router does DHCP or not does not have a lot to do with its
routing function. How do your LAN machines connect to the Internet?
Something must be acting as a router between the private and public
networks. What is the default gateway of your LAN machines?

"Martin_C" <(E-Mail Removed)> wrote in message
news:329FBD1E-0405-46EC-8ACB-(E-Mail Removed)...
> the router is not acting as a DHCP server. I'm using it because i'm
> hooking a
> t1 1.5mb and a 10mb/2mb cable for internet redundancy which is a very
> common
> practice.
>
> For a small business server it is recommended to have to two NIC (one for
> wan and LAN) if one decides to add ISA. It is always recommend to have
> more
> than 1 NIC in a server so you can do network direct backup (which I don't
> have it implemented in this client). Anyway, my network topology is a
> standard design for ISA which has 2 NIC in a SBS2003 but not implemented
> due
> to complains of restriction and so on.
>
> The router is not used as a router (no DHCP). It is only used to switch
> from
> Cable to T1 in case of ISP downtime.
>
> my router is 10.0.0.1 and sbs2003 wan = 10.0.0.2 and sbs2003 lan =
> 10.0.0.3
>
> "Bill Grant" wrote:
>
>> If your SBS server is behind a router, why does it have two NICs?
>> Having
>> two NICs in the same IP subnet will almost always cause odd problems.
>>
>> You only need two NICs in the server if it is connected to two
>> networks,
>> such as the private LAN and the Internet. If a router is doing the
>> Internet
>> routing, the server on the LAN only needs one NIC.
>>
>> "Martin_C" <(E-Mail Removed)> wrote in message
>> news:8857D526-C05C-4107-BC11-(E-Mail Removed)...
>> >I tried to ping by the static ip of the file server and by it's FQDN
>> > (fserver) and they both failed 100% loss. I also tried to ping
>> > different
>> > client workstations by there's ip and FQDN and they both failed too.
>> >
>> > "Bill Grant" wrote:
>> >
>> >> How are you trying to access the file server? By name?
>> >>
>> >> Can you ping the file server by its IP address? What about by its
>> >> FQDN?
>> >>
>> >> A VPN just gives you an IP connection. You do not get automatic
>> >> name
>> >> resolution as you do on a LAN.
>> >>
>> >> "Martin_C" <(E-Mail Removed)> wrote in message
>> >> news:8A284930-5B21-4BCC-AD85-(E-Mail Removed)...
>> >> >I can VPN from my house to the main office's small business server
>> >> >2003
>> >> >and
>> >> > use the vpn server (small business server 2003) resource. However, i
>> >> > can
>> >> > not
>> >> > access the shared resources on the file server (windows server
>> >> > 2003).
>> >> >
>> >> > I'm using a static T1 connected to my computer with a static IP; no
>> >> > routers
>> >> > but direct connection to the T1 modem.
>> >> >
>> >> > In the office we have
>> >> >
>> >> > T1 > Linksys VPN router RV042 > SBS2003
>> >> >
>> >> > SBS2003 is DHCP, DNS, VPN IIS, Exchange, and AD server with 2
>> >> > network
>> >> > cards
>> >> > (WAN 10.0.0.2 and LAN 10.0.03). It doesn' have ISA.
>> >> >
>> >> > the RV042 is hooked to wan of SBS2003 and to the 48 port gigabit
>> >> > switch.
>> >> >
>> >> > the windows 2003 file server and the other clients are connected to
>> >> > the
>> >> > 48
>> >> > port switch.
>> >> >
>> >> > After the VPN connection is sucessful, I can only ping the SBS2003
>> >> > but
>> >> > the
>> >> > file server and the other clients.
>> >> >
>> >> > I Cannot access resources beyond VPN server.
>> >> >
>> >>
>> >>
>>
>>

"Bill Grant" wrote:

> You missed the point. You have two NICs which are in the same network and
> in the same IP subnet. This does not give you redundancy, it gives you
> headaches! It is definitely _not_ standard ISA network topology.

Yes it is not a standard network topology because it is not a standard
windows 2003 running with single ISA server role + bunch of servers. The ISA
2004 for small business server is different than standard or enterprise ISA
server because of special integration of different basic server roles into
one box. Thus, there is no much redundacy that you can get. (I know it
sucks....)

>
> To run ISA, the two NICs must be in different networks and different IP
> subnets. ISA serves as a firewall between the "public" and "private"
> networks.
>

It is true but I'm not running ISA server in my configuration but it was
setup this way for future needs. For your reference,
http://www.smallbizserver.net/Articl...SA-router.aspx

> Whether the router does DHCP or not does not have a lot to do with its
> routing function. How do your LAN machines connect to the Internet?
> Something must be acting as a router between the private and public
> networks. What is the default gateway of your LAN machines?
>

All lan machines are connected through the private network using 10.0.0.3
default gateway (sbs2003 LAN port).

I'm adding a new RRAS role and testing it now. Maybe that's the problem ..

> "Martin_C" <(E-Mail Removed)> wrote in message
> news:329FBD1E-0405-46EC-8ACB-(E-Mail Removed)...
> > the router is not acting as a DHCP server. I'm using it because i'm
> > hooking a
> > t1 1.5mb and a 10mb/2mb cable for internet redundancy which is a very
> > common
> > practice.
> >
> > For a small business server it is recommended to have to two NIC (one for
> > wan and LAN) if one decides to add ISA. It is always recommend to have
> > more
> > than 1 NIC in a server so you can do network direct backup (which I don't
> > have it implemented in this client). Anyway, my network topology is a
> > standard design for ISA which has 2 NIC in a SBS2003 but not implemented
> > due
> > to complains of restriction and so on.
> >
> > The router is not used as a router (no DHCP). It is only used to switch
> > from
> > Cable to T1 in case of ISP downtime.
> >
> > my router is 10.0.0.1 and sbs2003 wan = 10.0.0.2 and sbs2003 lan =
> > 10.0.0.3
> >
> > "Bill Grant" wrote:
> >
> >> If your SBS server is behind a router, why does it have two NICs?
> >> Having
> >> two NICs in the same IP subnet will almost always cause odd problems.
> >>
> >> You only need two NICs in the server if it is connected to two
> >> networks,
> >> such as the private LAN and the Internet. If a router is doing the
> >> Internet
> >> routing, the server on the LAN only needs one NIC.
> >>
> >> "Martin_C" <(E-Mail Removed)> wrote in message
> >> news:8857D526-C05C-4107-BC11-(E-Mail Removed)...
> >> >I tried to ping by the static ip of the file server and by it's FQDN
> >> > (fserver) and they both failed 100% loss. I also tried to ping
> >> > different
> >> > client workstations by there's ip and FQDN and they both failed too.
> >> >
> >> > "Bill Grant" wrote:
> >> >
> >> >> How are you trying to access the file server? By name?
> >> >>
> >> >> Can you ping the file server by its IP address? What about by its
> >> >> FQDN?
> >> >>
> >> >> A VPN just gives you an IP connection. You do not get automatic
> >> >> name
> >> >> resolution as you do on a LAN.
> >> >>
> >> >> "Martin_C" <(E-Mail Removed)> wrote in message
> >> >> news:8A284930-5B21-4BCC-AD85-(E-Mail Removed)...
> >> >> >I can VPN from my house to the main office's small business server
> >> >> >2003
> >> >> >and
> >> >> > use the vpn server (small business server 2003) resource. However, i
> >> >> > can
> >> >> > not
> >> >> > access the shared resources on the file server (windows server
> >> >> > 2003).
> >> >> >
> >> >> > I'm using a static T1 connected to my computer with a static IP; no
> >> >> > routers
> >> >> > but direct connection to the T1 modem.
> >> >> >
> >> >> > In the office we have
> >> >> >
> >> >> > T1 > Linksys VPN router RV042 > SBS2003
> >> >> >
> >> >> > SBS2003 is DHCP, DNS, VPN IIS, Exchange, and AD server with 2
> >> >> > network
> >> >> > cards
> >> >> > (WAN 10.0.0.2 and LAN 10.0.03). It doesn' have ISA.
> >> >> >
> >> >> > the RV042 is hooked to wan of SBS2003 and to the 48 port gigabit
> >> >> > switch.
> >> >> >
> >> >> > the windows 2003 file server and the other clients are connected to
> >> >> > the
> >> >> > 48
> >> >> > port switch.
> >> >> >
> >> >> > After the VPN connection is sucessful, I can only ping the SBS2003
> >> >> > but
> >> >> > the
> >> >> > file server and the other clients.
> >> >> >
> >> >> > I Cannot access resources beyond VPN server.
> >> >> >
> >> >>
> >> >>
> >>
> >>
>
>