can't ping domain resources after VPN connection

I have a VPN server set up on Server 2003 Enterprise, and
want to log into a domain through the VPN. The domain is
set up on an NT 4.0 server. The VPN server is joined to
the domain and can browse the domain (and the NT can
browse the VPN server). I can start the RRAS service from
Remote Access Admin on the NT server, but it says that
the service is not started. When I log in, I can access and ping
the VPN server, but not any other servers on the domain.

Any help would be greatly appreciated!

Thanks,
Eric

quoted from http://www.ChicagoTech.net
Can't access the remote network from VPN clients

Symptoms: Your VPN client can ping/access the server but not other computers
in the remote network.

Resolutions: 1) if you have two NICs in the VPN server, you may need to
enable IP Routing. To do this, go to the RRAS>the Properties of the
server>IP, check IP Routing.
2) Make sure you don't uncheck Use the remote default gateway on VPN
client's VPN connection.
3) Make sure VPN client's LAN and the remote LAN are using the different IP
range and subnet.
4) Check routing table for troubleshooting.


--
For more and other information, go to http://www.ChicagoTech.net

Don't send e-mail or reply to me except you need consulting services.
Posting on MS newsgroup will benefit all readers and you may get more help.

Robert Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN, Anti-Virus, Tips & Troubleshooting on
http://www.ChicagoTech.net
This posting is provided "AS IS" with no warranties.

"Eric L. Epps" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
>I have a VPN server set up on Server 2003 Enterprise, and
> want to log into a domain through the VPN. The domain is
> set up on an NT 4.0 server. The VPN server is joined to
> the domain and can browse the domain (and the NT can
> browse the VPN server). I can start the RRAS service from
> Remote Access Admin on the NT server, but it says that
> the service is not started. When I log in, I can access and ping
> the VPN server, but not any other servers on the domain.
>
> Any help would be greatly appreciated!
>
> Thanks,
> Eric
>
>

Can you ping LAN machines by IP address? If not, there is something
wrong with your VPN setup.

If you can ping by IP address but not by name, the problem is name
resolution. Are you running WINS on the LAN? Does the remote client get the
correct WINS address?

If you can ping by name, can you see shares using net view \\servername
?

To do a domain login, the remote client will need to be able to find the
domain controller using its Netbios special name <domainname 1C> . It will
need to be able to find a WINS server to do this.

"Eric L. Epps" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> I have a VPN server set up on Server 2003 Enterprise, and
> want to log into a domain through the VPN. The domain is
> set up on an NT 4.0 server. The VPN server is joined to
> the domain and can browse the domain (and the NT can
> browse the VPN server). I can start the RRAS service from
> Remote Access Admin on the NT server, but it says that
> the service is not started. When I log in, I can access and ping
> the VPN server, but not any other servers on the domain.
>
> Any help would be greatly appreciated!
>
> Thanks,
> Eric
>
>

I can't ping or resolve names past the VPN server. I can ping the VPN server
on both subnets (192.168.5.13-the LAN subnet, 192.168.7.1-the block of VPN
addresses), see the shares using \\VPNSERVER, and browse up one level to the
domain so I can see the list of LAN shares that I can't access.

I can't ping, so I don't think it's a WINS issue. I have WINS running on the
domain controller, and WINS and DNS running on the VPN server (I even put
static mappings in, but it won't resolve).

Something is wrong with my VPN setup, but I'm a novice to this and don't
know where to look!

Thanks,
Eric L. Epps


"Bill Grant" <not.available@online> wrote in message
news:OA%(E-Mail Removed)...
> Can you ping LAN machines by IP address? If not, there is something
> wrong with your VPN setup.
>
> If you can ping by IP address but not by name, the problem is name
> resolution. Are you running WINS on the LAN? Does the remote client get
the
> correct WINS address?
>
> If you can ping by name, can you see shares using net view
\\servername
> ?
>
> To do a domain login, the remote client will need to be able to find
the
> domain controller using its Netbios special name <domainname 1C> . It
will
> need to be able to find a WINS server to do this.
>
> "Eric L. Epps" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
> > I have a VPN server set up on Server 2003 Enterprise, and
> > want to log into a domain through the VPN. The domain is
> > set up on an NT 4.0 server. The VPN server is joined to
> > the domain and can browse the domain (and the NT can
> > browse the VPN server). I can start the RRAS service from
> > Remote Access Admin on the NT server, but it says that
> > the service is not started. When I log in, I can access and ping
> > the VPN server, but not any other servers on the domain.
> >
> > Any help would be greatly appreciated!
> >
> > Thanks,
> > Eric
> >
> >
>
>

If the VPN clients are in their own subnet, you will need to enable IP
routing on the VPN server. If the VPN server is not the default gateway of
the LAN, you will also have to add extra routing to get the 192.168.7
traffic to the VPN server so that it can deliver to the remote clients.

"Eric L. Epps" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> I can't ping or resolve names past the VPN server. I can ping the VPN
server
> on both subnets (192.168.5.13-the LAN subnet, 192.168.7.1-the block of VPN
> addresses), see the shares using \\VPNSERVER, and browse up one level to
the
> domain so I can see the list of LAN shares that I can't access.
>
> I can't ping, so I don't think it's a WINS issue. I have WINS running on
the
> domain controller, and WINS and DNS running on the VPN server (I even put
> static mappings in, but it won't resolve).
>
> Something is wrong with my VPN setup, but I'm a novice to this and don't
> know where to look!
>
> Thanks,
> Eric L. Epps
>
>
> "Bill Grant" <not.available@online> wrote in message
> news:OA%(E-Mail Removed)...
> > Can you ping LAN machines by IP address? If not, there is something
> > wrong with your VPN setup.
> >
> > If you can ping by IP address but not by name, the problem is name
> > resolution. Are you running WINS on the LAN? Does the remote client get
> the
> > correct WINS address?
> >
> > If you can ping by name, can you see shares using net view
> \\servername
> > ?
> >
> > To do a domain login, the remote client will need to be able to find
> the
> > domain controller using its Netbios special name <domainname 1C> . It
> will
> > need to be able to find a WINS server to do this.
> >
> > "Eric L. Epps" <(E-Mail Removed)> wrote in message
> > news:(E-Mail Removed)...
> > > I have a VPN server set up on Server 2003 Enterprise, and
> > > want to log into a domain through the VPN. The domain is
> > > set up on an NT 4.0 server. The VPN server is joined to
> > > the domain and can browse the domain (and the NT can
> > > browse the VPN server). I can start the RRAS service from
> > > Remote Access Admin on the NT server, but it says that
> > > the service is not started. When I log in, I can access and ping
> > > the VPN server, but not any other servers on the domain.
> > >
> > > Any help would be greatly appreciated!
> > >
> > > Thanks,
> > > Eric
> > >
> > >
> >
> >
>
>