Static NAT fails

Hello there,

I'm using a computer running Windows 2003 SBS Server as router.
This computer has two NIC: one is connected to a DSL modem trough PPPoE,
the other one is connected to my local network.

In the 'Routing and Remote Access' tool there is 3 connections:

- Small Business Broadband Connection (DSL Modem)
NAT/Basic Firewall : Public interface, Enable NAT
Service and Ports:
Added one entry : TCP, incoming port 12345 -> outgoing port 12345,
IP: 192.168.123.150

- Server Local Area Connection (connected to the local network)
NAT/Basic Firewall : Private interface, IP: 192.168.123.114

- Network Connection (connected to the DSL modem)
NAT/Basic Firewall : Private interface, IP: 192.168.123.188


NAT/Basic Firewall Properties
Address assignement:
Automaticaly assign IP adresses using DHCP is Active
IP : 192.168.123.0
Mask : 255.255.255.0


There is no inbound or outbound filters entries.
Firewall is disabled.

I try to access http://<my_internet_ip>:12345 and it fails. It works
fine with an hardware router.

Any clue?
Is there any way to get a diagnostic from logging info?

I am confused about the configuration. posting the ipconfig /all here may help.

Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
"Vinz" <(E-Mail Removed)> wrote in message news:(E-Mail Removed)...
Hello there,

I'm using a computer running Windows 2003 SBS Server as router.
This computer has two NIC: one is connected to a DSL modem trough PPPoE,
the other one is connected to my local network.

In the 'Routing and Remote Access' tool there is 3 connections:

- Small Business Broadband Connection (DSL Modem)
NAT/Basic Firewall : Public interface, Enable NAT
Service and Ports:
Added one entry : TCP, incoming port 12345 -> outgoing port 12345,
IP: 192.168.123.150

- Server Local Area Connection (connected to the local network)
NAT/Basic Firewall : Private interface, IP: 192.168.123.114

- Network Connection (connected to the DSL modem)
NAT/Basic Firewall : Private interface, IP: 192.168.123.188


NAT/Basic Firewall Properties
Address assignement:
Automaticaly assign IP adresses using DHCP is Active
IP : 192.168.123.0
Mask : 255.255.255.0


There is no inbound or outbound filters entries.
Firewall is disabled.

I try to access http://<my_internet_ip>:12345 and it fails. It works
fine with an hardware router.

Any clue?
Is there any way to get a diagnostic from logging info?

"Vinz" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> - Server Local Area Connection (connected to the local network)
> NAT/Basic Firewall : Private interface, IP: 192.168.123.114
>
> - Network Connection (connected to the DSL modem)
> NAT/Basic Firewall : Private interface, IP: 192.168.123.188

Looks like you have two nics in the same subnet to me. Post the output of
"Ipconfig /All" as Robert suggested.

--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com

ipconfig /all returns this output:

Windows IP Configuration

Host Name . . . . . . . . . . . . : server2003
Primary Dns Suffix . . . . . . . : vrcontext.local
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : Yes
DNS Suffix Search List. . . . . . : vrcontext.local

PPP adapter RAS Server (Dial In) Interface:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface
Physical Address. . . . . . . . . : 00-53-45-00-00-00
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.123.25
Subnet Mask . . . . . . . . . . . : 255.255.255.255
Default Gateway . . . . . . . . . :
NetBIOS over Tcpip. . . . . . . . : Disabled

Ethernet adapter Network Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : D-Link DFE-530TX PCI Fast
Ethernet Adapter (rev.C)
Physical Address. . . . . . . . . : 00-11-95-83-E4-18
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.123.188
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : 192.168.123.114
NetBIOS over Tcpip. . . . . . . . : Disabled



Ethernet adapter Server Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Network
Connection
Physical Address. . . . . . . . . : 00-13-D4-ED-EF-25
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.123.114
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : 192.168.123.114
Primary WINS Server . . . . . . . : 192.168.123.114

PPP adapter Small Business Broadband Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface
Physical Address. . . . . . . . . : 00-53-45-00-00-00
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 87.65.130.97
Subnet Mask . . . . . . . . . . . : 255.255.255.255
Default Gateway . . . . . . . . . : 87.65.130.1
DNS Servers . . . . . . . . . . . : 195.238.2.22
195.238.2.21
NetBIOS over Tcpip. . . . . . . . : Disabled


> I am confused about the configuration. posting the ipconfig /all here
> may help.
>
> Bob Lin, MS-MVP, MCSE & CNE
> Networking, Internet, Routing, VPN Troubleshooting on
> http://www.ChicagoTech.net
> How to Setup Windows, Network, VPN & Remote Access on
> http://www.HowToNetworking.com
>

As Phillip mentioned that one computer should not have two IP addresses in the same subnet.

Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
"Vinz" <(E-Mail Removed)> wrote in message news:(E-Mail Removed)...
ipconfig /all returns this output:

Windows IP Configuration

Host Name . . . . . . . . . . . . : server2003
Primary Dns Suffix . . . . . . . : vrcontext.local
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : Yes
DNS Suffix Search List. . . . . . : vrcontext.local

PPP adapter RAS Server (Dial In) Interface:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface
Physical Address. . . . . . . . . : 00-53-45-00-00-00
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.123.25
Subnet Mask . . . . . . . . . . . : 255.255.255.255
Default Gateway . . . . . . . . . :
NetBIOS over Tcpip. . . . . . . . : Disabled

Ethernet adapter Network Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : D-Link DFE-530TX PCI Fast
Ethernet Adapter (rev.C)
Physical Address. . . . . . . . . : 00-11-95-83-E4-18
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.123.188
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : 192.168.123.114
NetBIOS over Tcpip. . . . . . . . : Disabled



Ethernet adapter Server Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Network
Connection
Physical Address. . . . . . . . . : 00-13-D4-ED-EF-25
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.123.114
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : 192.168.123.114
Primary WINS Server . . . . . . . : 192.168.123.114

PPP adapter Small Business Broadband Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface
Physical Address. . . . . . . . . : 00-53-45-00-00-00
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 87.65.130.97
Subnet Mask . . . . . . . . . . . : 255.255.255.255
Default Gateway . . . . . . . . . : 87.65.130.1
DNS Servers . . . . . . . . . . . : 195.238.2.22
195.238.2.21
NetBIOS over Tcpip. . . . . . . . : Disabled


> I am confused about the configuration. posting the ipconfig /all here
> may help.
>
> Bob Lin, MS-MVP, MCSE & CNE
> Networking, Internet, Routing, VPN Troubleshooting on
> http://www.ChicagoTech.net
> How to Setup Windows, Network, VPN & Remote Access on
> http://www.HowToNetworking.com
>

Thanks for the links.
I got the solution when accessing the server from home. It works fine
from a computer on the extranet. Even the NAT server can't access it.
This make things hard to debug. Do you have any idea how to disable this
'feature'?

About the two IP addresses on the same subnet, this should not make any
problem (unless you prove me wrong of course .

Anyway, even if I change the subnet for 'Ethernet adapter Network
Connection' it has no effect and I can't access 'RAS Server (Dial In)
Interface' settings.


> As Phillip mentioned that one computer should not have two IP addresses
> in the same subnet.
>
> Bob Lin, MS-MVP, MCSE & CNE
> Networking, Internet, Routing, VPN Troubleshooting on
> http://www.ChicagoTech.net
> How to Setup Windows, Network, VPN & Remote Access on
> http://www.HowToNetworking.com
>

"Vincent Roger" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> About the two IP addresses on the same subnet, this should not make any
> problem (unless you prove me wrong of course .

I think it will.
You have *three* Nics in the same subnet.
192.168.123.25 [255.255.255.255] still falls within the same subnet as the
other two from the "their perspective".

--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com