How do I Connect from the WAN side to a Terminal Server ?

The network consists of SBS2003 running exchange, remote web workplace and
the domain controller. I have installed a second server running a trial of
win server 2003 (in order to try terminal services). The terminal server has
2 nics: 1 to the lan and 1 to its own router which then connects to the
internet. I have a public ip address and assumed that when I entered that
into the remote client I would be able to start a TS session on the domain
network accross the internet. Unfortunately this is not the case. I can only
log onto the TS from within the LAN but only if I disable the 2nd nic (the
one that connects the TS to its own router).
Where did I go wrong ?
Any help greatly appreciated.
Craig C

Since you have two NICs, have you enabled the NAT? I would check that first. Otherwise post the result of ipconfig /all here.

Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
"Craig C" <(E-Mail Removed)> wrote in message news:3AEDDBC2-92BA-44AD-8664-(E-Mail Removed)...
The network consists of SBS2003 running exchange, remote web workplace and
the domain controller. I have installed a second server running a trial of
win server 2003 (in order to try terminal services). The terminal server has
2 nics: 1 to the lan and 1 to its own router which then connects to the
internet. I have a public ip address and assumed that when I entered that
into the remote client I would be able to start a TS session on the domain
network accross the internet. Unfortunately this is not the case. I can only
log onto the TS from within the LAN but only if I disable the 2nd nic (the
one that connects the TS to its own router).
Where did I go wrong ?
Any help greatly appreciated.
Craig C

Thanks for your reply here are the details:
LAN Connection - NIC 1
DHCP: NO
IP Address:10.0.0.249
Subnet Mask:255.255.255.0
Default Gateway: 10.0.0.250
DNS Server:10.0.0.250
WINS Server:10.0.0.250

Router Connection - NIC 2
DHCP: NO
IP Address:10.0.0.248
Subnet Mask:255.255.255.0
Default Gateway:
DNS Server:10.0.0.250
WINS Server:10.0.0.250



"Robert L [MS-MVP]" wrote:

> Since you have two NICs, have you enabled the NAT? I would check that first. Otherwise post the result of ipconfig /all here.
>
> Bob Lin, MS-MVP, MCSE & CNE
> Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
> How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
> "Craig C" <(E-Mail Removed)> wrote in message news:3AEDDBC2-92BA-44AD-8664-(E-Mail Removed)...
> The network consists of SBS2003 running exchange, remote web workplace and
> the domain controller. I have installed a second server running a trial of
> win server 2003 (in order to try terminal services). The terminal server has
> 2 nics: 1 to the lan and 1 to its own router which then connects to the
> internet. I have a public ip address and assumed that when I entered that
> into the remote client I would be able to start a TS session on the domain
> network accross the internet. Unfortunately this is not the case. I can only
> log onto the TS from within the LAN but only if I disable the 2nd nic (the
> one that connects the TS to its own router).
> Where did I go wrong ?
> Any help greatly appreciated.
> Craig C

That is the problem. you should not setup multihomed computer using the same IP range. You should not assign two default gateway to the multihomed computer/ This search result may help,

Routing Don't add default gateway across disjoint networks Is it possible both sites of the VPN using the same IP range Metric is the same for both the remote ...
www.chicagotech.net/routing.htm


Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
"Craig C" <(E-Mail Removed)> wrote in message news:8A68F05E-8289-4106-A597-(E-Mail Removed)...
Thanks for your reply here are the details:
LAN Connection - NIC 1
DHCP: NO
IP Address:10.0.0.249
Subnet Mask:255.255.255.0
Default Gateway: 10.0.0.250
DNS Server:10.0.0.250
WINS Server:10.0.0.250

Router Connection - NIC 2
DHCP: NO
IP Address:10.0.0.248
Subnet Mask:255.255.255.0
Default Gateway:
DNS Server:10.0.0.250
WINS Server:10.0.0.250



"Robert L [MS-MVP]" wrote:

> Since you have two NICs, have you enabled the NAT? I would check that first. Otherwise post the result of ipconfig /all here.
>
> Bob Lin, MS-MVP, MCSE & CNE
> Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
> How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
> "Craig C" <(E-Mail Removed)> wrote in message news:3AEDDBC2-92BA-44AD-8664-(E-Mail Removed)...
> The network consists of SBS2003 running exchange, remote web workplace and
> the domain controller. I have installed a second server running a trial of
> win server 2003 (in order to try terminal services). The terminal server has
> 2 nics: 1 to the lan and 1 to its own router which then connects to the
> internet. I have a public ip address and assumed that when I entered that
> into the remote client I would be able to start a TS session on the domain
> network accross the internet. Unfortunately this is not the case. I can only
> log onto the TS from within the LAN but only if I disable the 2nd nic (the
> one that connects the TS to its own router).
> Where did I go wrong ?
> Any help greatly appreciated.
> Craig C

Thanks Robert, I have now changed the ip address to 192.168.0.248 on the nic
that connects to the router. I have removed the gateway setting. I changed
the NAT setting on the router accordingly so that requests to port 3389 are
forwarded to 192.168.0.248. I can now log onto TS on the domain from within
the LAN but still not from outside accross the internet.

Craig C

"Robert L [MS-MVP]" wrote:

> That is the problem. you should not setup multihomed computer using the same IP range. You should not assign two default gateway to the multihomed computer/ This search result may help,
>
> Routing Don't add default gateway across disjoint networks Is it possible both sites of the VPN using the same IP range Metric is the same for both the remote ...
> www.chicagotech.net/routing.htm
>
>
> Bob Lin, MS-MVP, MCSE & CNE
> Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
> How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
> "Craig C" <(E-Mail Removed)> wrote in message news:8A68F05E-8289-4106-A597-(E-Mail Removed)...
> Thanks for your reply here are the details:
> LAN Connection - NIC 1
> DHCP: NO
> IP Address:10.0.0.249
> Subnet Mask:255.255.255.0
> Default Gateway: 10.0.0.250
> DNS Server:10.0.0.250
> WINS Server:10.0.0.250
>
> Router Connection - NIC 2
> DHCP: NO
> IP Address:10.0.0.248
> Subnet Mask:255.255.255.0
> Default Gateway:
> DNS Server:10.0.0.250
> WINS Server:10.0.0.250
>
>
>
> "Robert L [MS-MVP]" wrote:
>
> > Since you have two NICs, have you enabled the NAT? I would check that first. Otherwise post the result of ipconfig /all here.
> >
> > Bob Lin, MS-MVP, MCSE & CNE
> > Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
> > How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
> > "Craig C" <(E-Mail Removed)> wrote in message news:3AEDDBC2-92BA-44AD-8664-(E-Mail Removed)...
> > The network consists of SBS2003 running exchange, remote web workplace and
> > the domain controller. I have installed a second server running a trial of
> > win server 2003 (in order to try terminal services). The terminal server has
> > 2 nics: 1 to the lan and 1 to its own router which then connects to the
> > internet. I have a public ip address and assumed that when I entered that
> > into the remote client I would be able to start a TS session on the domain
> > network accross the internet. Unfortunately this is not the case. I can only
> > log onto the TS from within the LAN but only if I disable the 2nd nic (the
> > one that connects the TS to its own router).
> > Where did I go wrong ?
> > Any help greatly appreciated.
> > Craig C

posting the NAT configuration here may help. To generate the NAT configuration, follow this instruction,

windows tools Using Netsh command to troubleshoot NAT issue Why I can't get print spooler when typing net start art print spooler? What's Netsh? Management Utilities ...
www.chicagotech.net/wintools.htm


Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
"Craig C" <(E-Mail Removed)> wrote in message news2AF185F-D200-4D9B-BA5B-(E-Mail Removed)...
Thanks Robert, I have now changed the ip address to 192.168.0.248 on the nic
that connects to the router. I have removed the gateway setting. I changed
the NAT setting on the router accordingly so that requests to port 3389 are
forwarded to 192.168.0.248. I can now log onto TS on the domain from within
the LAN but still not from outside accross the internet.

Craig C

"Robert L [MS-MVP]" wrote:

> That is the problem. you should not setup multihomed computer using the same IP range. You should not assign two default gateway to the multihomed computer/ This search result may help,
>
> Routing Don't add default gateway across disjoint networks Is it possible both sites of the VPN using the same IP range Metric is the same for both the remote ...
> www.chicagotech.net/routing.htm
>
>
> Bob Lin, MS-MVP, MCSE & CNE
> Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
> How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
> "Craig C" <(E-Mail Removed)> wrote in message news:8A68F05E-8289-4106-A597-(E-Mail Removed)...
> Thanks for your reply here are the details:
> LAN Connection - NIC 1
> DHCP: NO
> IP Address:10.0.0.249
> Subnet Mask:255.255.255.0
> Default Gateway: 10.0.0.250
> DNS Server:10.0.0.250
> WINS Server:10.0.0.250
>
> Router Connection - NIC 2
> DHCP: NO
> IP Address:10.0.0.248
> Subnet Mask:255.255.255.0
> Default Gateway:
> DNS Server:10.0.0.250
> WINS Server:10.0.0.250
>
>
>
> "Robert L [MS-MVP]" wrote:
>
> > Since you have two NICs, have you enabled the NAT? I would check that first. Otherwise post the result of ipconfig /all here.
> >
> > Bob Lin, MS-MVP, MCSE & CNE
> > Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
> > How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
> > "Craig C" <(E-Mail Removed)> wrote in message news:3AEDDBC2-92BA-44AD-8664-(E-Mail Removed)...
> > The network consists of SBS2003 running exchange, remote web workplace and
> > the domain controller. I have installed a second server running a trial of
> > win server 2003 (in order to try terminal services). The terminal server has
> > 2 nics: 1 to the lan and 1 to its own router which then connects to the
> > internet. I have a public ip address and assumed that when I entered that
> > into the remote client I would be able to start a TS session on the domain
> > network accross the internet. Unfortunately this is not the case. I can only
> > log onto the TS from within the LAN but only if I disable the 2nd nic (the
> > one that connects the TS to its own router).
> > Where did I go wrong ?
> > Any help greatly appreciated.
> > Craig C

Craig C wrote:
> Thanks Robert, I have now changed the ip address to 192.168.0.248 on
> the nic
> that connects to the router. I have removed the gateway setting. I
> changed
> the NAT setting on the router accordingly so that requests to port
> 3389 are
> forwarded to 192.168.0.248. I can now log onto TS on the domain from
> within
> the LAN but still not from outside accross the internet.

Did you give the external NIC the router's IP as its gateway?

--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This Helps
===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
http://support.wftx.us/
http://message.wftx.us/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oehelp.com/OEBackup/Default.aspx
===================================

I did initially but before I changed the IP address to a different range to
the LAN. My networking skills are fairly basic and I feel I may have
underestimated the complexity of the process. However I am willing to learn
if anyone can point me in the direction of some step by step instructions.

Craig C

"Kevin D. Goodknecht Sr. [MVP]" wrote:

> Craig C wrote:
> > Thanks Robert, I have now changed the ip address to 192.168.0.248 on
> > the nic
> > that connects to the router. I have removed the gateway setting. I
> > changed
> > the NAT setting on the router accordingly so that requests to port
> > 3389 are
> > forwarded to 192.168.0.248. I can now log onto TS on the domain from
> > within
> > the LAN but still not from outside accross the internet.
>
> Did you give the external NIC the router's IP as its gateway?
>
> --
> Best regards,
> Kevin D. Goodknecht Sr. [MVP]
> Hope This Helps
> ===================================
> When responding to posts, please "Reply to Group"
> via your newsreader so that others may learn and
> benefit from your issue, to respond directly to
> me remove the nospam. from my email address.
> ===================================
> http://www.lonestaramerica.com/
> http://support.wftx.us/
> http://message.wftx.us/
> ===================================
> Use Outlook Express?... Get OE_Quotefix:
> It will strip signature out and more
> http://home.in.tum.de/~jain/software/oe-quotefix/
> ===================================
> Keep a back up of your OE settings and folders
> with OEBackup:
> http://www.oehelp.com/OEBackup/Default.aspx
> ===================================
>
>
>