Connecting Remote ofice with High Latency VSAT

Hi Guys,

I've been asked to help out with a issue and I need a little assistance.

This reminds me of one of those "Scenario" questions on the MCSE exams so
I'll try my best to keep it simple. So here we go.

The "Acme Trading Co" has a Windows 2003 AD infrastructure with multiple
users on 2 subnets. The use Exchange 2003 for messageing and hav Web access
enabled. All of the exisitng users reside ins the same office building and
use a traditional 10/100/1000 mbps cabled network.

All users are given access to the internet through ISA server. The gateway
is a high speed Cable connection which connects them to the public internet.

(now here's the fun bit)

Recently they have opened a storage facilty which has approximately 20 users
(Site B). This office is connected to the head office (Site A) via a VSAT
connection. The bandwidth is high (approx 512/512 kbps) and the latency is
approx 1200ms.

Users are given private IP and the router has a static route to the head
office (site b). Users are able to browse the internet through the circuit
but they are not able to log on to the exchange server. They get asked to
authenticate but nothing happens once they have entered their user name and
password.

On the OWA side, they can not gain access to the server if the use a private
IP address for the server, but, if thy "take he long way round" and use a
public name/address they can get on. Granted, its a bit slow but i works.

Has anyone go any ideas ?? Are here TTL limits in place that could cause
this or am i missing something ???

Any help would be greatly appreciated.

Thanks

Dave

Give some numbers...

What are the internal IP ranges on both sides of this network.

Is this a private connection, or a satellite internet connection? (just
checking)

Whats the DNS servers in play and ipconfig/all on either side's clients?

Chris


"David Crozier" <(E-Mail Removed)> wrote in message
news:375FAD83-5911-43FB-BAE5-(E-Mail Removed)...
> Hi Guys,
>
> I've been asked to help out with a issue and I need a little assistance.
>
> This reminds me of one of those "Scenario" questions on the MCSE exams so
> I'll try my best to keep it simple. So here we go.
>
> The "Acme Trading Co" has a Windows 2003 AD infrastructure with multiple
> users on 2 subnets. The use Exchange 2003 for messageing and hav Web
> access
> enabled. All of the exisitng users reside ins the same office building and
> use a traditional 10/100/1000 mbps cabled network.
>
> All users are given access to the internet through ISA server. The gateway
> is a high speed Cable connection which connects them to the public
> internet.
>
> (now here's the fun bit)
>
> Recently they have opened a storage facilty which has approximately 20
> users
> (Site B). This office is connected to the head office (Site A) via a VSAT
> connection. The bandwidth is high (approx 512/512 kbps) and the latency
> is
> approx 1200ms.
>
> Users are given private IP and the router has a static route to the head
> office (site b). Users are able to browse the internet through the
> circuit
> but they are not able to log on to the exchange server. They get asked to
> authenticate but nothing happens once they have entered their user name
> and
> password.
>
> On the OWA side, they can not gain access to the server if the use a
> private
> IP address for the server, but, if thy "take he long way round" and use a
> public name/address they can get on. Granted, its a bit slow but i works.
>
> Has anyone go any ideas ?? Are here TTL limits in place that could cause
> this or am i missing something ???
>
> Any help would be greatly appreciated.
>
> Thanks
>
> Dave
>
>
>
>
>
>

Chris,

Thanks for the reply. I can't remember the ranges off the top of myhead, I
can provide them later if necessary. From memory, Site B has a range of
172.xxx.xxx.xxx and Site A uses a 192.xxx.xxx.xxx.

the connection is through a Satellite ISP but Private IPS have been issued
to both routers. PC's on both sides can communicate and tests (FTP transfers)
have been sucessful.

Site B uses the same DNS as everyone at the main office (Site A).

As I said, i can get you all the ipconfig info later if needed.

Let me know.

Does any of this help ??

Dave

"Chris Lehr" wrote:

> Give some numbers...
>
> What are the internal IP ranges on both sides of this network.
>
> Is this a private connection, or a satellite internet connection? (just
> checking)
>
> Whats the DNS servers in play and ipconfig/all on either side's clients?
>
> Chris
>
>
> "David Crozier" <(E-Mail Removed)> wrote in message
> news:375FAD83-5911-43FB-BAE5-(E-Mail Removed)...
> > Hi Guys,
> >
> > I've been asked to help out with a issue and I need a little assistance.
> >
> > This reminds me of one of those "Scenario" questions on the MCSE exams so
> > I'll try my best to keep it simple. So here we go.
> >
> > The "Acme Trading Co" has a Windows 2003 AD infrastructure with multiple
> > users on 2 subnets. The use Exchange 2003 for messageing and hav Web
> > access
> > enabled. All of the exisitng users reside ins the same office building and
> > use a traditional 10/100/1000 mbps cabled network.
> >
> > All users are given access to the internet through ISA server. The gateway
> > is a high speed Cable connection which connects them to the public
> > internet.
> >
> > (now here's the fun bit)
> >
> > Recently they have opened a storage facilty which has approximately 20
> > users
> > (Site B). This office is connected to the head office (Site A) via a VSAT
> > connection. The bandwidth is high (approx 512/512 kbps) and the latency
> > is
> > approx 1200ms.
> >
> > Users are given private IP and the router has a static route to the head
> > office (site b). Users are able to browse the internet through the
> > circuit
> > but they are not able to log on to the exchange server. They get asked to
> > authenticate but nothing happens once they have entered their user name
> > and
> > password.
> >
> > On the OWA side, they can not gain access to the server if the use a
> > private
> > IP address for the server, but, if thy "take he long way round" and use a
> > public name/address they can get on. Granted, its a bit slow but i works.
> >
> > Has anyone go any ideas ?? Are here TTL limits in place that could cause
> > this or am i missing something ???
> >
> > Any help would be greatly appreciated.
> >
> > Thanks
> >
> > Dave
> >
> >
> >
> >
> >
> >
>
>
>

David,

The part I am missing still is connectivity between the two. It sounds like
they communicate across the Internet (FTP) - or do you have a site to site
VPN configured somehow.

Mmeaning - Can site B ping a site A IP address and vice-versa?

Chris


"David Crozier" <(E-Mail Removed)> wrote in message
news:FF03064C-EB05-46F2-A993-(E-Mail Removed)...
> Chris,
>
> Thanks for the reply. I can't remember the ranges off the top of myhead, I
> can provide them later if necessary. From memory, Site B has a range of
> 172.xxx.xxx.xxx and Site A uses a 192.xxx.xxx.xxx.
>
> the connection is through a Satellite ISP but Private IPS have been issued
> to both routers. PC's on both sides can communicate and tests (FTP
> transfers)
> have been sucessful.
>
> Site B uses the same DNS as everyone at the main office (Site A).
>
> As I said, i can get you all the ipconfig info later if needed.
>
> Let me know.
>
> Does any of this help ??
>
> Dave
>
> "Chris Lehr" wrote:
>
>> Give some numbers...
>>
>> What are the internal IP ranges on both sides of this network.
>>
>> Is this a private connection, or a satellite internet connection? (just
>> checking)
>>
>> Whats the DNS servers in play and ipconfig/all on either side's clients?
>>
>> Chris
>>
>>
>> "David Crozier" <(E-Mail Removed)> wrote in message
>> news:375FAD83-5911-43FB-BAE5-(E-Mail Removed)...
>> > Hi Guys,
>> >
>> > I've been asked to help out with a issue and I need a little
>> > assistance.
>> >
>> > This reminds me of one of those "Scenario" questions on the MCSE exams
>> > so
>> > I'll try my best to keep it simple. So here we go.
>> >
>> > The "Acme Trading Co" has a Windows 2003 AD infrastructure with
>> > multiple
>> > users on 2 subnets. The use Exchange 2003 for messageing and hav Web
>> > access
>> > enabled. All of the exisitng users reside ins the same office building
>> > and
>> > use a traditional 10/100/1000 mbps cabled network.
>> >
>> > All users are given access to the internet through ISA server. The
>> > gateway
>> > is a high speed Cable connection which connects them to the public
>> > internet.
>> >
>> > (now here's the fun bit)
>> >
>> > Recently they have opened a storage facilty which has approximately 20
>> > users
>> > (Site B). This office is connected to the head office (Site A) via a
>> > VSAT
>> > connection. The bandwidth is high (approx 512/512 kbps) and the
>> > latency
>> > is
>> > approx 1200ms.
>> >
>> > Users are given private IP and the router has a static route to the
>> > head
>> > office (site b). Users are able to browse the internet through the
>> > circuit
>> > but they are not able to log on to the exchange server. They get asked
>> > to
>> > authenticate but nothing happens once they have entered their user name
>> > and
>> > password.
>> >
>> > On the OWA side, they can not gain access to the server if the use a
>> > private
>> > IP address for the server, but, if thy "take he long way round" and use
>> > a
>> > public name/address they can get on. Granted, its a bit slow but i
>> > works.
>> >
>> > Has anyone go any ideas ?? Are here TTL limits in place that could
>> > cause
>> > this or am i missing something ???
>> >
>> > Any help would be greatly appreciated.
>> >
>> > Thanks
>> >
>> > Dave
>> >
>> >
>> >
>> >
>> >
>> >
>>
>>
>>

Chris,

the 2 sites communicate through the VSAT connections.

Site A uses a Cable/DSL connection (provided by a local telco) to gain
access to the internet. Everyone at site A uses this as the gateway to the
internet.

If a client from site B wants to access the internet, the request would got
through to site A and the out through site A's default gateway

To answer your question, both sites can ping each other.

Dave.

P.S i can send you a very rough drawing of the layout if it helps



"Chris Lehr" wrote:

> David,
>
> The part I am missing still is connectivity between the two. It sounds like
> they communicate across the Internet (FTP) - or do you have a site to site
> VPN configured somehow.
>
> Mmeaning - Can site B ping a site A IP address and vice-versa?
>
> Chris
>
>
> "David Crozier" <(E-Mail Removed)> wrote in message
> news:FF03064C-EB05-46F2-A993-(E-Mail Removed)...
> > Chris,
> >
> > Thanks for the reply. I can't remember the ranges off the top of myhead, I
> > can provide them later if necessary. From memory, Site B has a range of
> > 172.xxx.xxx.xxx and Site A uses a 192.xxx.xxx.xxx.
> >
> > the connection is through a Satellite ISP but Private IPS have been issued
> > to both routers. PC's on both sides can communicate and tests (FTP
> > transfers)
> > have been sucessful.
> >
> > Site B uses the same DNS as everyone at the main office (Site A).
> >
> > As I said, i can get you all the ipconfig info later if needed.
> >
> > Let me know.
> >
> > Does any of this help ??
> >
> > Dave
> >
> > "Chris Lehr" wrote:
> >
> >> Give some numbers...
> >>
> >> What are the internal IP ranges on both sides of this network.
> >>
> >> Is this a private connection, or a satellite internet connection? (just
> >> checking)
> >>
> >> Whats the DNS servers in play and ipconfig/all on either side's clients?
> >>
> >> Chris
> >>
> >>
> >> "David Crozier" <(E-Mail Removed)> wrote in message
> >> news:375FAD83-5911-43FB-BAE5-(E-Mail Removed)...
> >> > Hi Guys,
> >> >
> >> > I've been asked to help out with a issue and I need a little
> >> > assistance.
> >> >
> >> > This reminds me of one of those "Scenario" questions on the MCSE exams
> >> > so
> >> > I'll try my best to keep it simple. So here we go.
> >> >
> >> > The "Acme Trading Co" has a Windows 2003 AD infrastructure with
> >> > multiple
> >> > users on 2 subnets. The use Exchange 2003 for messageing and hav Web
> >> > access
> >> > enabled. All of the exisitng users reside ins the same office building
> >> > and
> >> > use a traditional 10/100/1000 mbps cabled network.
> >> >
> >> > All users are given access to the internet through ISA server. The
> >> > gateway
> >> > is a high speed Cable connection which connects them to the public
> >> > internet.
> >> >
> >> > (now here's the fun bit)
> >> >
> >> > Recently they have opened a storage facilty which has approximately 20
> >> > users
> >> > (Site B). This office is connected to the head office (Site A) via a
> >> > VSAT
> >> > connection. The bandwidth is high (approx 512/512 kbps) and the
> >> > latency
> >> > is
> >> > approx 1200ms.
> >> >
> >> > Users are given private IP and the router has a static route to the
> >> > head
> >> > office (site b). Users are able to browse the internet through the
> >> > circuit
> >> > but they are not able to log on to the exchange server. They get asked
> >> > to
> >> > authenticate but nothing happens once they have entered their user name
> >> > and
> >> > password.
> >> >
> >> > On the OWA side, they can not gain access to the server if the use a
> >> > private
> >> > IP address for the server, but, if thy "take he long way round" and use
> >> > a
> >> > public name/address they can get on. Granted, its a bit slow but i
> >> > works.
> >> >
> >> > Has anyone go any ideas ?? Are here TTL limits in place that could
> >> > cause
> >> > this or am i missing something ???
> >> >
> >> > Any help would be greatly appreciated.
> >> >
> >> > Thanks
> >> >
> >> > Dave
> >> >
> >> >
> >> >
> >> >
> >> >
> >> >
> >>
> >>
> >>
>
>
>

I think we are still not seeing eye to eye.

(or keyboard to keyboard?)

If site A is 192.x.x.x. and site B is 172.x.x.x

Can a PC on Site A ping a 172.x.x.x address?
Can a PC on Site B ping a 192.x.x.x address?

If they cannot - the sites are not actually linked (WAN) but instead both
access the internet. If all servers are at Site A, you will need to rely on
Internet based communications (OWA, RPC over HTTPS, etc)


"David Crozier" <(E-Mail Removed)> wrote in message
news:96255065-D878-4E1D-91E7-(E-Mail Removed)...
> Chris,
>
> the 2 sites communicate through the VSAT connections.
>
> Site A uses a Cable/DSL connection (provided by a local telco) to gain
> access to the internet. Everyone at site A uses this as the gateway to the
> internet.
>
> If a client from site B wants to access the internet, the request would
> got
> through to site A and the out through site A's default gateway
>
> To answer your question, both sites can ping each other.
>
> Dave.
>
> P.S i can send you a very rough drawing of the layout if it helps
>
>
>
> "Chris Lehr" wrote:
>
>> David,
>>
>> The part I am missing still is connectivity between the two. It sounds
>> like
>> they communicate across the Internet (FTP) - or do you have a site to
>> site
>> VPN configured somehow.
>>
>> Mmeaning - Can site B ping a site A IP address and vice-versa?
>>
>> Chris
>>
>>
>> "David Crozier" <(E-Mail Removed)> wrote in message
>> news:FF03064C-EB05-46F2-A993-(E-Mail Removed)...
>> > Chris,
>> >
>> > Thanks for the reply. I can't remember the ranges off the top of
>> > myhead, I
>> > can provide them later if necessary. From memory, Site B has a range of
>> > 172.xxx.xxx.xxx and Site A uses a 192.xxx.xxx.xxx.
>> >
>> > the connection is through a Satellite ISP but Private IPS have been
>> > issued
>> > to both routers. PC's on both sides can communicate and tests (FTP
>> > transfers)
>> > have been sucessful.
>> >
>> > Site B uses the same DNS as everyone at the main office (Site A).
>> >
>> > As I said, i can get you all the ipconfig info later if needed.
>> >
>> > Let me know.
>> >
>> > Does any of this help ??
>> >
>> > Dave
>> >
>> > "Chris Lehr" wrote:
>> >
>> >> Give some numbers...
>> >>
>> >> What are the internal IP ranges on both sides of this network.
>> >>
>> >> Is this a private connection, or a satellite internet connection?
>> >> (just
>> >> checking)
>> >>
>> >> Whats the DNS servers in play and ipconfig/all on either side's
>> >> clients?
>> >>
>> >> Chris
>> >>
>> >>
>> >> "David Crozier" <(E-Mail Removed)> wrote in
>> >> message
>> >> news:375FAD83-5911-43FB-BAE5-(E-Mail Removed)...
>> >> > Hi Guys,
>> >> >
>> >> > I've been asked to help out with a issue and I need a little
>> >> > assistance.
>> >> >
>> >> > This reminds me of one of those "Scenario" questions on the MCSE
>> >> > exams
>> >> > so
>> >> > I'll try my best to keep it simple. So here we go.
>> >> >
>> >> > The "Acme Trading Co" has a Windows 2003 AD infrastructure with
>> >> > multiple
>> >> > users on 2 subnets. The use Exchange 2003 for messageing and hav Web
>> >> > access
>> >> > enabled. All of the exisitng users reside ins the same office
>> >> > building
>> >> > and
>> >> > use a traditional 10/100/1000 mbps cabled network.
>> >> >
>> >> > All users are given access to the internet through ISA server. The
>> >> > gateway
>> >> > is a high speed Cable connection which connects them to the public
>> >> > internet.
>> >> >
>> >> > (now here's the fun bit)
>> >> >
>> >> > Recently they have opened a storage facilty which has approximately
>> >> > 20
>> >> > users
>> >> > (Site B). This office is connected to the head office (Site A) via a
>> >> > VSAT
>> >> > connection. The bandwidth is high (approx 512/512 kbps) and the
>> >> > latency
>> >> > is
>> >> > approx 1200ms.
>> >> >
>> >> > Users are given private IP and the router has a static route to the
>> >> > head
>> >> > office (site b). Users are able to browse the internet through the
>> >> > circuit
>> >> > but they are not able to log on to the exchange server. They get
>> >> > asked
>> >> > to
>> >> > authenticate but nothing happens once they have entered their user
>> >> > name
>> >> > and
>> >> > password.
>> >> >
>> >> > On the OWA side, they can not gain access to the server if the use a
>> >> > private
>> >> > IP address for the server, but, if thy "take he long way round" and
>> >> > use
>> >> > a
>> >> > public name/address they can get on. Granted, its a bit slow but i
>> >> > works.
>> >> >
>> >> > Has anyone go any ideas ?? Are here TTL limits in place that could
>> >> > cause
>> >> > this or am i missing something ???
>> >> >
>> >> > Any help would be greatly appreciated.
>> >> >
>> >> > Thanks
>> >> >
>> >> > Dave
>> >> >
>> >> >
>> >> >
>> >> >
>> >> >
>> >> >
>> >>
>> >>
>> >>
>>
>>
>>

Hi Chris,

I think PC's can ping from site a to b.

I'll double check this and verify.

If they can (i am sure they can), what else could be causing this problem ??

Its almost midnight here so I'll follow up wih you in the morning.

Thanks for your help.

Dave



"Chris Lehr" wrote:

> I think we are still not seeing eye to eye.
>
> (or keyboard to keyboard?)
>
> If site A is 192.x.x.x. and site B is 172.x.x.x
>
> Can a PC on Site A ping a 172.x.x.x address?
> Can a PC on Site B ping a 192.x.x.x address?
>
> If they cannot - the sites are not actually linked (WAN) but instead both
> access the internet. If all servers are at Site A, you will need to rely on
> Internet based communications (OWA, RPC over HTTPS, etc)
>
>
> "David Crozier" <(E-Mail Removed)> wrote in message
> news:96255065-D878-4E1D-91E7-(E-Mail Removed)...
> > Chris,
> >
> > the 2 sites communicate through the VSAT connections.
> >
> > Site A uses a Cable/DSL connection (provided by a local telco) to gain
> > access to the internet. Everyone at site A uses this as the gateway to the
> > internet.
> >
> > If a client from site B wants to access the internet, the request would
> > got
> > through to site A and the out through site A's default gateway
> >
> > To answer your question, both sites can ping each other.
> >
> > Dave.
> >
> > P.S i can send you a very rough drawing of the layout if it helps
> >
> >
> >
> > "Chris Lehr" wrote:
> >
> >> David,
> >>
> >> The part I am missing still is connectivity between the two. It sounds
> >> like
> >> they communicate across the Internet (FTP) - or do you have a site to
> >> site
> >> VPN configured somehow.
> >>
> >> Mmeaning - Can site B ping a site A IP address and vice-versa?
> >>
> >> Chris
> >>
> >>
> >> "David Crozier" <(E-Mail Removed)> wrote in message
> >> news:FF03064C-EB05-46F2-A993-(E-Mail Removed)...
> >> > Chris,
> >> >
> >> > Thanks for the reply. I can't remember the ranges off the top of
> >> > myhead, I
> >> > can provide them later if necessary. From memory, Site B has a range of
> >> > 172.xxx.xxx.xxx and Site A uses a 192.xxx.xxx.xxx.
> >> >
> >> > the connection is through a Satellite ISP but Private IPS have been
> >> > issued
> >> > to both routers. PC's on both sides can communicate and tests (FTP
> >> > transfers)
> >> > have been sucessful.
> >> >
> >> > Site B uses the same DNS as everyone at the main office (Site A).
> >> >
> >> > As I said, i can get you all the ipconfig info later if needed.
> >> >
> >> > Let me know.
> >> >
> >> > Does any of this help ??
> >> >
> >> > Dave
> >> >
> >> > "Chris Lehr" wrote:
> >> >
> >> >> Give some numbers...
> >> >>
> >> >> What are the internal IP ranges on both sides of this network.
> >> >>
> >> >> Is this a private connection, or a satellite internet connection?
> >> >> (just
> >> >> checking)
> >> >>
> >> >> Whats the DNS servers in play and ipconfig/all on either side's
> >> >> clients?
> >> >>
> >> >> Chris
> >> >>
> >> >>
> >> >> "David Crozier" <(E-Mail Removed)> wrote in
> >> >> message
> >> >> news:375FAD83-5911-43FB-BAE5-(E-Mail Removed)...
> >> >> > Hi Guys,
> >> >> >
> >> >> > I've been asked to help out with a issue and I need a little
> >> >> > assistance.
> >> >> >
> >> >> > This reminds me of one of those "Scenario" questions on the MCSE
> >> >> > exams
> >> >> > so
> >> >> > I'll try my best to keep it simple. So here we go.
> >> >> >
> >> >> > The "Acme Trading Co" has a Windows 2003 AD infrastructure with
> >> >> > multiple
> >> >> > users on 2 subnets. The use Exchange 2003 for messageing and hav Web
> >> >> > access
> >> >> > enabled. All of the exisitng users reside ins the same office
> >> >> > building
> >> >> > and
> >> >> > use a traditional 10/100/1000 mbps cabled network.
> >> >> >
> >> >> > All users are given access to the internet through ISA server. The
> >> >> > gateway
> >> >> > is a high speed Cable connection which connects them to the public
> >> >> > internet.
> >> >> >
> >> >> > (now here's the fun bit)
> >> >> >
> >> >> > Recently they have opened a storage facilty which has approximately
> >> >> > 20
> >> >> > users
> >> >> > (Site B). This office is connected to the head office (Site A) via a
> >> >> > VSAT
> >> >> > connection. The bandwidth is high (approx 512/512 kbps) and the
> >> >> > latency
> >> >> > is
> >> >> > approx 1200ms.
> >> >> >
> >> >> > Users are given private IP and the router has a static route to the
> >> >> > head
> >> >> > office (site b). Users are able to browse the internet through the
> >> >> > circuit
> >> >> > but they are not able to log on to the exchange server. They get
> >> >> > asked
> >> >> > to
> >> >> > authenticate but nothing happens once they have entered their user
> >> >> > name
> >> >> > and
> >> >> > password.
> >> >> >
> >> >> > On the OWA side, they can not gain access to the server if the use a
> >> >> > private
> >> >> > IP address for the server, but, if thy "take he long way round" and
> >> >> > use
> >> >> > a
> >> >> > public name/address they can get on. Granted, its a bit slow but i
> >> >> > works.
> >> >> >
> >> >> > Has anyone go any ideas ?? Are here TTL limits in place that could
> >> >> > cause
> >> >> > this or am i missing something ???
> >> >> >
> >> >> > Any help would be greatly appreciated.
> >> >> >
> >> >> > Thanks
> >> >> >
> >> >> > Dave
> >> >> >
> >> >> >
> >> >> >
> >> >> >
> >> >> >
> >> >> >
> >> >>
> >> >>
> >> >>
> >>
> >>
> >>
>
>
>

If they can, the next thing is to make sure that clients on bot side are
using/looking at the same DNS and WINS servers, and then manage them
properly so that the IP's that names resolve to are accessible on both
sides.

I dont think I asked, but assumed all machines are members of the same
domain?

Have a good night,
Chris


"David Crozier" <(E-Mail Removed)> wrote in message
news:F9FDF223-AFAF-450F-89B6-(E-Mail Removed)...
> Hi Chris,
>
> I think PC's can ping from site a to b.
>
> I'll double check this and verify.
>
> If they can (i am sure they can), what else could be causing this problem
> ??
>
> Its almost midnight here so I'll follow up wih you in the morning.
>
> Thanks for your help.
>
> Dave
>
>
>
> "Chris Lehr" wrote:
>
>> I think we are still not seeing eye to eye.
>>
>> (or keyboard to keyboard?)
>>
>> If site A is 192.x.x.x. and site B is 172.x.x.x
>>
>> Can a PC on Site A ping a 172.x.x.x address?
>> Can a PC on Site B ping a 192.x.x.x address?
>>
>> If they cannot - the sites are not actually linked (WAN) but instead both
>> access the internet. If all servers are at Site A, you will need to rely
>> on
>> Internet based communications (OWA, RPC over HTTPS, etc)
>>
>>
>> "David Crozier" <(E-Mail Removed)> wrote in message
>> news:96255065-D878-4E1D-91E7-(E-Mail Removed)...
>> > Chris,
>> >
>> > the 2 sites communicate through the VSAT connections.
>> >
>> > Site A uses a Cable/DSL connection (provided by a local telco) to gain
>> > access to the internet. Everyone at site A uses this as the gateway to
>> > the
>> > internet.
>> >
>> > If a client from site B wants to access the internet, the request would
>> > got
>> > through to site A and the out through site A's default gateway
>> >
>> > To answer your question, both sites can ping each other.
>> >
>> > Dave.
>> >
>> > P.S i can send you a very rough drawing of the layout if it helps
>> >
>> >
>> >
>> > "Chris Lehr" wrote:
>> >
>> >> David,
>> >>
>> >> The part I am missing still is connectivity between the two. It
>> >> sounds
>> >> like
>> >> they communicate across the Internet (FTP) - or do you have a site to
>> >> site
>> >> VPN configured somehow.
>> >>
>> >> Mmeaning - Can site B ping a site A IP address and vice-versa?
>> >>
>> >> Chris
>> >>
>> >>
>> >> "David Crozier" <(E-Mail Removed)> wrote in
>> >> message
>> >> news:FF03064C-EB05-46F2-A993-(E-Mail Removed)...
>> >> > Chris,
>> >> >
>> >> > Thanks for the reply. I can't remember the ranges off the top of
>> >> > myhead, I
>> >> > can provide them later if necessary. From memory, Site B has a range
>> >> > of
>> >> > 172.xxx.xxx.xxx and Site A uses a 192.xxx.xxx.xxx.
>> >> >
>> >> > the connection is through a Satellite ISP but Private IPS have been
>> >> > issued
>> >> > to both routers. PC's on both sides can communicate and tests (FTP
>> >> > transfers)
>> >> > have been sucessful.
>> >> >
>> >> > Site B uses the same DNS as everyone at the main office (Site A).
>> >> >
>> >> > As I said, i can get you all the ipconfig info later if needed.
>> >> >
>> >> > Let me know.
>> >> >
>> >> > Does any of this help ??
>> >> >
>> >> > Dave
>> >> >
>> >> > "Chris Lehr" wrote:
>> >> >
>> >> >> Give some numbers...
>> >> >>
>> >> >> What are the internal IP ranges on both sides of this network.
>> >> >>
>> >> >> Is this a private connection, or a satellite internet connection?
>> >> >> (just
>> >> >> checking)
>> >> >>
>> >> >> Whats the DNS servers in play and ipconfig/all on either side's
>> >> >> clients?
>> >> >>
>> >> >> Chris
>> >> >>
>> >> >>
>> >> >> "David Crozier" <(E-Mail Removed)> wrote in
>> >> >> message
>> >> >> news:375FAD83-5911-43FB-BAE5-(E-Mail Removed)...
>> >> >> > Hi Guys,
>> >> >> >
>> >> >> > I've been asked to help out with a issue and I need a little
>> >> >> > assistance.
>> >> >> >
>> >> >> > This reminds me of one of those "Scenario" questions on the MCSE
>> >> >> > exams
>> >> >> > so
>> >> >> > I'll try my best to keep it simple. So here we go.
>> >> >> >
>> >> >> > The "Acme Trading Co" has a Windows 2003 AD infrastructure with
>> >> >> > multiple
>> >> >> > users on 2 subnets. The use Exchange 2003 for messageing and hav
>> >> >> > Web
>> >> >> > access
>> >> >> > enabled. All of the exisitng users reside ins the same office
>> >> >> > building
>> >> >> > and
>> >> >> > use a traditional 10/100/1000 mbps cabled network.
>> >> >> >
>> >> >> > All users are given access to the internet through ISA server.
>> >> >> > The
>> >> >> > gateway
>> >> >> > is a high speed Cable connection which connects them to the
>> >> >> > public
>> >> >> > internet.
>> >> >> >
>> >> >> > (now here's the fun bit)
>> >> >> >
>> >> >> > Recently they have opened a storage facilty which has
>> >> >> > approximately
>> >> >> > 20
>> >> >> > users
>> >> >> > (Site B). This office is connected to the head office (Site A)
>> >> >> > via a
>> >> >> > VSAT
>> >> >> > connection. The bandwidth is high (approx 512/512 kbps) and the
>> >> >> > latency
>> >> >> > is
>> >> >> > approx 1200ms.
>> >> >> >
>> >> >> > Users are given private IP and the router has a static route to
>> >> >> > the
>> >> >> > head
>> >> >> > office (site b). Users are able to browse the internet through
>> >> >> > the
>> >> >> > circuit
>> >> >> > but they are not able to log on to the exchange server. They get
>> >> >> > asked
>> >> >> > to
>> >> >> > authenticate but nothing happens once they have entered their
>> >> >> > user
>> >> >> > name
>> >> >> > and
>> >> >> > password.
>> >> >> >
>> >> >> > On the OWA side, they can not gain access to the server if the
>> >> >> > use a
>> >> >> > private
>> >> >> > IP address for the server, but, if thy "take he long way round"
>> >> >> > and
>> >> >> > use
>> >> >> > a
>> >> >> > public name/address they can get on. Granted, its a bit slow but
>> >> >> > i
>> >> >> > works.
>> >> >> >
>> >> >> > Has anyone go any ideas ?? Are here TTL limits in place that
>> >> >> > could
>> >> >> > cause
>> >> >> > this or am i missing something ???
>> >> >> >
>> >> >> > Any help would be greatly appreciated.
>> >> >> >
>> >> >> > Thanks
>> >> >> >
>> >> >> > Dave
>> >> >> >
>> >> >> >
>> >> >> >
>> >> >> >
>> >> >> >
>> >> >> >
>> >> >>
>> >> >>
>> >> >>
>> >>
>> >>
>> >>
>>
>>
>>

Hi Chris,

All Machines are on members of the same domain.

I'll be visiing the site tomorrow so I'll check o see if they can all
resolve names etc etc.

Any other suggestions ???

I'll get back to you with my findings.

Thanks again for your help.

Dave


"Chris Lehr" wrote:

> If they can, the next thing is to make sure that clients on bot side are
> using/looking at the same DNS and WINS servers, and then manage them
> properly so that the IP's that names resolve to are accessible on both
> sides.
>
> I dont think I asked, but assumed all machines are members of the same
> domain?
>
> Have a good night,
> Chris
>
>
> "David Crozier" <(E-Mail Removed)> wrote in message
> news:F9FDF223-AFAF-450F-89B6-(E-Mail Removed)...
> > Hi Chris,
> >
> > I think PC's can ping from site a to b.
> >
> > I'll double check this and verify.
> >
> > If they can (i am sure they can), what else could be causing this problem
> > ??
> >
> > Its almost midnight here so I'll follow up wih you in the morning.
> >
> > Thanks for your help.
> >
> > Dave
> >
> >
> >
> > "Chris Lehr" wrote:
> >
> >> I think we are still not seeing eye to eye.
> >>
> >> (or keyboard to keyboard?)
> >>
> >> If site A is 192.x.x.x. and site B is 172.x.x.x
> >>
> >> Can a PC on Site A ping a 172.x.x.x address?
> >> Can a PC on Site B ping a 192.x.x.x address?
> >>
> >> If they cannot - the sites are not actually linked (WAN) but instead both
> >> access the internet. If all servers are at Site A, you will need to rely
> >> on
> >> Internet based communications (OWA, RPC over HTTPS, etc)
> >>
> >>
> >> "David Crozier" <(E-Mail Removed)> wrote in message
> >> news:96255065-D878-4E1D-91E7-(E-Mail Removed)...
> >> > Chris,
> >> >
> >> > the 2 sites communicate through the VSAT connections.
> >> >
> >> > Site A uses a Cable/DSL connection (provided by a local telco) to gain
> >> > access to the internet. Everyone at site A uses this as the gateway to
> >> > the
> >> > internet.
> >> >
> >> > If a client from site B wants to access the internet, the request would
> >> > got
> >> > through to site A and the out through site A's default gateway
> >> >
> >> > To answer your question, both sites can ping each other.
> >> >
> >> > Dave.
> >> >
> >> > P.S i can send you a very rough drawing of the layout if it helps
> >> >
> >> >
> >> >
> >> > "Chris Lehr" wrote:
> >> >
> >> >> David,
> >> >>
> >> >> The part I am missing still is connectivity between the two. It
> >> >> sounds
> >> >> like
> >> >> they communicate across the Internet (FTP) - or do you have a site to
> >> >> site
> >> >> VPN configured somehow.
> >> >>
> >> >> Mmeaning - Can site B ping a site A IP address and vice-versa?
> >> >>
> >> >> Chris
> >> >>
> >> >>
> >> >> "David Crozier" <(E-Mail Removed)> wrote in
> >> >> message
> >> >> news:FF03064C-EB05-46F2-A993-(E-Mail Removed)...
> >> >> > Chris,
> >> >> >
> >> >> > Thanks for the reply. I can't remember the ranges off the top of
> >> >> > myhead, I
> >> >> > can provide them later if necessary. From memory, Site B has a range
> >> >> > of
> >> >> > 172.xxx.xxx.xxx and Site A uses a 192.xxx.xxx.xxx.
> >> >> >
> >> >> > the connection is through a Satellite ISP but Private IPS have been
> >> >> > issued
> >> >> > to both routers. PC's on both sides can communicate and tests (FTP
> >> >> > transfers)
> >> >> > have been sucessful.
> >> >> >
> >> >> > Site B uses the same DNS as everyone at the main office (Site A).
> >> >> >
> >> >> > As I said, i can get you all the ipconfig info later if needed.
> >> >> >
> >> >> > Let me know.
> >> >> >
> >> >> > Does any of this help ??
> >> >> >
> >> >> > Dave
> >> >> >
> >> >> > "Chris Lehr" wrote:
> >> >> >
> >> >> >> Give some numbers...
> >> >> >>
> >> >> >> What are the internal IP ranges on both sides of this network.
> >> >> >>
> >> >> >> Is this a private connection, or a satellite internet connection?
> >> >> >> (just
> >> >> >> checking)
> >> >> >>
> >> >> >> Whats the DNS servers in play and ipconfig/all on either side's
> >> >> >> clients?
> >> >> >>
> >> >> >> Chris
> >> >> >>
> >> >> >>
> >> >> >> "David Crozier" <(E-Mail Removed)> wrote in
> >> >> >> message
> >> >> >> news:375FAD83-5911-43FB-BAE5-(E-Mail Removed)...
> >> >> >> > Hi Guys,
> >> >> >> >
> >> >> >> > I've been asked to help out with a issue and I need a little
> >> >> >> > assistance.
> >> >> >> >
> >> >> >> > This reminds me of one of those "Scenario" questions on the MCSE
> >> >> >> > exams
> >> >> >> > so
> >> >> >> > I'll try my best to keep it simple. So here we go.
> >> >> >> >
> >> >> >> > The "Acme Trading Co" has a Windows 2003 AD infrastructure with
> >> >> >> > multiple
> >> >> >> > users on 2 subnets. The use Exchange 2003 for messageing and hav
> >> >> >> > Web
> >> >> >> > access
> >> >> >> > enabled. All of the exisitng users reside ins the same office
> >> >> >> > building
> >> >> >> > and
> >> >> >> > use a traditional 10/100/1000 mbps cabled network.
> >> >> >> >
> >> >> >> > All users are given access to the internet through ISA server.
> >> >> >> > The
> >> >> >> > gateway
> >> >> >> > is a high speed Cable connection which connects them to the
> >> >> >> > public
> >> >> >> > internet.
> >> >> >> >
> >> >> >> > (now here's the fun bit)
> >> >> >> >
> >> >> >> > Recently they have opened a storage facilty which has
> >> >> >> > approximately
> >> >> >> > 20
> >> >> >> > users
> >> >> >> > (Site B). This office is connected to the head office (Site A)
> >> >> >> > via a
> >> >> >> > VSAT
> >> >> >> > connection. The bandwidth is high (approx 512/512 kbps) and the
> >> >> >> > latency
> >> >> >> > is
> >> >> >> > approx 1200ms.
> >> >> >> >
> >> >> >> > Users are given private IP and the router has a static route to
> >> >> >> > the
> >> >> >> > head
> >> >> >> > office (site b). Users are able to browse the internet through
> >> >> >> > the
> >> >> >> > circuit
> >> >> >> > but they are not able to log on to the exchange server. They get
> >> >> >> > asked
> >> >> >> > to
> >> >> >> > authenticate but nothing happens once they have entered their
> >> >> >> > user
> >> >> >> > name
> >> >> >> > and
> >> >> >> > password.
> >> >> >> >
> >> >> >> > On the OWA side, they can not gain access to the server if the
> >> >> >> > use a
> >> >> >> > private
> >> >> >> > IP address for the server, but, if thy "take he long way round"
> >> >> >> > and
> >> >> >> > use
> >> >> >> > a
> >> >> >> > public name/address they can get on. Granted, its a bit slow but
> >> >> >> > i
> >> >> >> > works.
> >> >> >> >
> >> >> >> > Has anyone go any ideas ?? Are here TTL limits in place that
> >> >> >> > could
> >> >> >> > cause
> >> >> >> > this or am i missing something ???
> >> >> >> >
> >> >> >> > Any help would be greatly appreciated.
> >> >> >> >
> >> >> >> > Thanks
> >> >> >> >
> >> >> >> > Dave
> >> >> >> >
> >> >> >> >
> >> >> >> >
> >> >> >> >
> >> >> >> >
> >> >> >> >
> >> >> >>
> >> >> >>
> >> >> >>
> >> >>
> >> >>
> >> >>
> >>
> >>
> >>
>
>
>

Hi Again Chris,

I've just returned from the site and let me tell you, its been a
frustraiting day.

I set up a completely new server and attached it to one side of the link.

I had Windows 2003 and Exchange 2003 server installed.

AD and DNS were setup and everything else was left off.

I joined the Domain with a notebook connected to the server directly and
headed off to the other site.

The IP addressing was setup as follows :

Server at Site A:

IP: 192.168.9.2
SN:255.255.255.128
GW:192.168.9.1

DNS: 127.0.0.1

Router (A):

IP:192.168.9.1
SN:255.255.255.128



Router (B)

IP: 192.168.9.130
SN: 255.255.255.128


PC at Site B:

IP: 192.168.9.131
SN:255.255.255.128
GW:192.168.9.130


DNS: 192.168.9.2


When I got to site B, I could ping the Router and the Server. I could do an
NS lookup and get a resolutuion.

I could connect to the server through Remote Desktop and I could access mail
via OWA.

I could not connect to the server when opeining MS outlook (2003). If I
tried to create a new account using Outlook I got stuck at the "check Name"
part. I even tried entering IP address in "Exchange Server Name" box but I
still had no luck.

I've set up numerous exchange servers in "same LAN" scenarios before. Am I
missing something here ? Do I have to setup the server differently if I'm
accessing it from another subnet ??


Cheers

Dave


"Chris Lehr" wrote:

> If they can, the next thing is to make sure that clients on bot side are
> using/looking at the same DNS and WINS servers, and then manage them
> properly so that the IP's that names resolve to are accessible on both
> sides.
>
> I dont think I asked, but assumed all machines are members of the same
> domain?
>
> Have a good night,
> Chris
>
>
> "David Crozier" <(E-Mail Removed)> wrote in message
> news:F9FDF223-AFAF-450F-89B6-(E-Mail Removed)...
> > Hi Chris,
> >
> > I think PC's can ping from site a to b.
> >
> > I'll double check this and verify.
> >
> > If they can (i am sure they can), what else could be causing this problem
> > ??
> >
> > Its almost midnight here so I'll follow up wih you in the morning.
> >
> > Thanks for your help.
> >
> > Dave
> >
> >
> >
> > "Chris Lehr" wrote:
> >
> >> I think we are still not seeing eye to eye.
> >>
> >> (or keyboard to keyboard?)
> >>
> >> If site A is 192.x.x.x. and site B is 172.x.x.x
> >>
> >> Can a PC on Site A ping a 172.x.x.x address?
> >> Can a PC on Site B ping a 192.x.x.x address?
> >>
> >> If they cannot - the sites are not actually linked (WAN) but instead both
> >> access the internet. If all servers are at Site A, you will need to rely
> >> on
> >> Internet based communications (OWA, RPC over HTTPS, etc)
> >>
> >>
> >> "David Crozier" <(E-Mail Removed)> wrote in message
> >> news:96255065-D878-4E1D-91E7-(E-Mail Removed)...
> >> > Chris,
> >> >
> >> > the 2 sites communicate through the VSAT connections.
> >> >
> >> > Site A uses a Cable/DSL connection (provided by a local telco) to gain
> >> > access to the internet. Everyone at site A uses this as the gateway to
> >> > the
> >> > internet.
> >> >
> >> > If a client from site B wants to access the internet, the request would
> >> > got
> >> > through to site A and the out through site A's default gateway
> >> >
> >> > To answer your question, both sites can ping each other.
> >> >
> >> > Dave.
> >> >
> >> > P.S i can send you a very rough drawing of the layout if it helps
> >> >
> >> >
> >> >
> >> > "Chris Lehr" wrote:
> >> >
> >> >> David,
> >> >>
> >> >> The part I am missing still is connectivity between the two. It
> >> >> sounds
> >> >> like
> >> >> they communicate across the Internet (FTP) - or do you have a site to
> >> >> site
> >> >> VPN configured somehow.
> >> >>
> >> >> Mmeaning - Can site B ping a site A IP address and vice-versa?
> >> >>
> >> >> Chris
> >> >>
> >> >>
> >> >> "David Crozier" <(E-Mail Removed)> wrote in
> >> >> message
> >> >> news:FF03064C-EB05-46F2-A993-(E-Mail Removed)...
> >> >> > Chris,
> >> >> >
> >> >> > Thanks for the reply. I can't remember the ranges off the top of
> >> >> > myhead, I
> >> >> > can provide them later if necessary. From memory, Site B has a range
> >> >> > of
> >> >> > 172.xxx.xxx.xxx and Site A uses a 192.xxx.xxx.xxx.
> >> >> >
> >> >> > the connection is through a Satellite ISP but Private IPS have been
> >> >> > issued
> >> >> > to both routers. PC's on both sides can communicate and tests (FTP
> >> >> > transfers)
> >> >> > have been sucessful.
> >> >> >
> >> >> > Site B uses the same DNS as everyone at the main office (Site A).
> >> >> >
> >> >> > As I said, i can get you all the ipconfig info later if needed.
> >> >> >
> >> >> > Let me know.
> >> >> >
> >> >> > Does any of this help ??
> >> >> >
> >> >> > Dave
> >> >> >
> >> >> > "Chris Lehr" wrote:
> >> >> >
> >> >> >> Give some numbers...
> >> >> >>
> >> >> >> What are the internal IP ranges on both sides of this network.
> >> >> >>
> >> >> >> Is this a private connection, or a satellite internet connection?
> >> >> >> (just
> >> >> >> checking)
> >> >> >>
> >> >> >> Whats the DNS servers in play and ipconfig/all on either side's
> >> >> >> clients?
> >> >> >>
> >> >> >> Chris
> >> >> >>
> >> >> >>
> >> >> >> "David Crozier" <(E-Mail Removed)> wrote in
> >> >> >> message
> >> >> >> news:375FAD83-5911-43FB-BAE5-(E-Mail Removed)...
> >> >> >> > Hi Guys,
> >> >> >> >
> >> >> >> > I've been asked to help out with a issue and I need a little
> >> >> >> > assistance.
> >> >> >> >
> >> >> >> > This reminds me of one of those "Scenario" questions on the MCSE
> >> >> >> > exams
> >> >> >> > so
> >> >> >> > I'll try my best to keep it simple. So here we go.
> >> >> >> >
> >> >> >> > The "Acme Trading Co" has a Windows 2003 AD infrastructure with
> >> >> >> > multiple
> >> >> >> > users on 2 subnets. The use Exchange 2003 for messageing and hav
> >> >> >> > Web
> >> >> >> > access
> >> >> >> > enabled. All of the exisitng users reside ins the same office
> >> >> >> > building
> >> >> >> > and
> >> >> >> > use a traditional 10/100/1000 mbps cabled network.
> >> >> >> >
> >> >> >> > All users are given access to the internet through ISA server.
> >> >> >> > The
> >> >> >> > gateway
> >> >> >> > is a high speed Cable connection which connects them to the
> >> >> >> > public
> >> >> >> > internet.
> >> >> >> >
> >> >> >> > (now here's the fun bit)
> >> >> >> >
> >> >> >> > Recently they have opened a storage facilty which has
> >> >> >> > approximately
> >> >> >> > 20
> >> >> >> > users
> >> >> >> > (Site B). This office is connected to the head office (Site A)
> >> >> >> > via a
> >> >> >> > VSAT
> >> >> >> > connection. The bandwidth is high (approx 512/512 kbps) and the
> >> >> >> > latency
> >> >> >> > is
> >> >> >> > approx 1200ms.
> >> >> >> >
> >> >> >> > Users are given private IP and the router has a static route to
> >> >> >> > the
> >> >> >> > head
> >> >> >> > office (site b). Users are able to browse the internet through
> >> >> >> > the
> >> >> >> > circuit
> >> >> >> > but they are not able to log on to the exchange server. They get
> >> >> >> > asked
> >> >> >> > to
> >> >> >> > authenticate but nothing happens once they have entered their
> >> >> >> > user
> >> >> >> > name
> >> >> >> > and
> >> >> >> > password.
> >> >> >> >
> >> >> >> > On the OWA side, they can not gain access to the server if the
> >> >> >> > use a
> >> >> >> > private
> >> >> >> > IP address for the server, but, if thy "take he long way round"
> >> >> >> > and
> >> >> >> > use
> >> >> >> > a
> >> >> >> > public name/address they can get on. Granted, its a bit slow but
> >> >> >> > i
> >> >> >> > works.
> >> >> >> >
> >> >> >> > Has anyone go any ideas ?? Are here TTL limits in place that
> >> >> >> > could
> >> >> >> > cause
> >> >> >> > this or am i missing something ???
> >> >> >> >
> >> >> >> > Any help would be greatly appreciated.
> >> >> >> >
> >> >> >> > Thanks
> >> >> >> >
> >> >> >> > Dave
> >> >> >> >
> >> >> >> >
> >> >> >> >
> >> >> >> >
> >> >> >> >
> >> >> >> >
> >> >> >>
> >> >> >>
> >> >> >>
> >> >>
> >> >>
> >> >>
> >>
> >>
> >>
>
>
>