site to site VPN with Cisco Routers

Hello,

I have a remote office in ottowa that I wish to setup a site to site
vpn.

I have two cisco 1811 routers. Site to Site vpn is configured on both
routers.

I can ping the dns server, and I can do a dnslookup as well.

however, I am not able to join the pc to the domain.

When asked for the user and password, I attempted at giving it a fake
ID. It comes back saying that the username or password is incorrect.
This event lets me assume that it was able to resolve the domain name,
and it tried to authenticate, since it knew the account name or
password is not correct. When I enter the correct info, the client pc
comes back saying that the server was not able to complete the task!
whats more weird is that checkign AD in the domain controller, the
computer name of the client I am attempting to join to the domain
shows up in the list!. So, it is updating AD and creating an account
for it. However, the client never finish the process and sits in
limbo.


can someone please give me any inputs?

thanks a lot guys

It is better to have WINS server for VPN name resolution. Add WINS may fix
the problem.

Does Windows 2000/2003 domain needs WINSDoes Windows 2000/2003 domain needs
WINS. Q1: Is there a definitive list of the services and operations that
will no longer work in Windows 2003 Server if ...
www.howtonetworking.com/server/wins1.htm


--
Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on
http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on
http://www.HowToNetworking.com


"El CiD" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Hello,
>
> I have a remote office in ottowa that I wish to setup a site to site
> vpn.
>
> I have two cisco 1811 routers. Site to Site vpn is configured on both
> routers.
>
> I can ping the dns server, and I can do a dnslookup as well.
>
> however, I am not able to join the pc to the domain.
>
> When asked for the user and password, I attempted at giving it a fake
> ID. It comes back saying that the username or password is incorrect.
> This event lets me assume that it was able to resolve the domain name,
> and it tried to authenticate, since it knew the account name or
> password is not correct. When I enter the correct info, the client pc
> comes back saying that the server was not able to complete the task!
> whats more weird is that checkign AD in the domain controller, the
> computer name of the client I am attempting to join to the domain
> shows up in the list!. So, it is updating AD and creating an account
> for it. However, the client never finish the process and sits in
> limbo.
>
>
> can someone please give me any inputs?
>
> thanks a lot guys
>

Hi,

I have to disagree with the web page below since our network has absolutly
no WINS server and segmented network browsing and Exchange both work
flawlessly.

ThePro

"Robert L (MS-MVP)" <(E-Mail Removed)> wrote:
> It is better to have WINS server for VPN name resolution. Add WINS may fix
> the problem.
>
> Does Windows 2000/2003 domain needs WINSDoes Windows 2000/2003 domain
> needs WINS. Q1: Is there a definitive list of the services and operations
> that will no longer work in Windows 2003 Server if ...
> www.howtonetworking.com/server/wins1.htm
>
>
> --
> Bob Lin, MS-MVP, MCSE & CNE
> Networking, Internet, Routing, VPN Troubleshooting on
> http://www.ChicagoTech.net
> How to Setup Windows, Network, VPN & Remote Access on
> http://www.HowToNetworking.com
>
>
> "El CiD" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
>> Hello,
>>
>> I have a remote office in ottowa that I wish to setup a site to site
>> vpn.
>>
>> I have two cisco 1811 routers. Site to Site vpn is configured on both
>> routers.
>>
>> I can ping the dns server, and I can do a dnslookup as well.
>>
>> however, I am not able to join the pc to the domain.
>>
>> When asked for the user and password, I attempted at giving it a fake
>> ID. It comes back saying that the username or password is incorrect.
>> This event lets me assume that it was able to resolve the domain name,
>> and it tried to authenticate, since it knew the account name or
>> password is not correct. When I enter the correct info, the client pc
>> comes back saying that the server was not able to complete the task!
>> whats more weird is that checkign AD in the domain controller, the
>> computer name of the client I am attempting to join to the domain
>> shows up in the list!. So, it is updating AD and creating an account
>> for it. However, the client never finish the process and sits in
>> limbo.
>>
>>
>> can someone please give me any inputs?
>>
>> thanks a lot guys
>>
>
>

What is your DNS Scheme like on this remote segment?,...the main
segment?,...and how are they setup to work together?

Make sure that are no restrictions on these "VPN Devices",...many of them
double as a "firewall" and the vendor may make assumptions about what you
may not want to allow over the link,...assumptions that may be wrong.


--
Phillip Windell
www.wandtv.com

The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------

"ThePro" <mcthepro_@nospam.hotmail.com> wrote in message
news:339B22DD-E14A-4943-B7C6-(E-Mail Removed)...
> Hi,
>
> I have to disagree with the web page below since our network has absolutly
> no WINS server and segmented network browsing and Exchange both work
> flawlessly.
>

<<<Snipped to save space>>>

>>> I have a remote office in ottowa that I wish to setup a site to site
>>> vpn.
>>>
>>> I have two cisco 1811 routers. Site to Site vpn is configured on both
>>> routers.
>>>
>>> I can ping the dns server, and I can do a dnslookup as well.
>>>
>>> however, I am not able to join the pc to the domain.
>>>
>>> When asked for the user and password, I attempted at giving it a fake
>>> ID. It comes back saying that the username or password is incorrect.
>>> This event lets me assume that it was able to resolve the domain name,
>>> and it tried to authenticate, since it knew the account name or
>>> password is not correct. When I enter the correct info, the client pc
>>> comes back saying that the server was not able to complete the task!
>>> whats more weird is that checkign AD in the domain controller, the
>>> computer name of the client I am attempting to join to the domain
>>> shows up in the list!. So, it is updating AD and creating an account
>>> for it. However, the client never finish the process and sits in
>>> limbo.