Win2k3 routing between two networks - cross post

I think I originally posted this in the wrong news group when it should
be here.

I am trying to get my Win2k3 server to forward LAN requests for internet
addresses to my router. I'm a complete DNS neophyte so please be kind.

Here's what I've got:
ISP's modem connects to Linksys router. ISP assigns a DHCP address and
DNS servers. Linksys router's LAN address is 192.168.1.1.

Linksys router is also serving DHCP for wireless internet access.

Server with (2) NIC's. NIC1, named "Public Internet" has an IP address
of 192.168.1.2. NIC2 is named "Private LAN" and has an IP address of
192.168.2.1. DNS, DHCP and web server are bound to 192.168.2.1.

I've got a Cisco Catalyst 4006 switch for the private LAN and a several
servers/workstations inside the private LAN.

I need to be able to route from the internet to a LAN server and route
from the LAN to the public internet. I can't seem to do that. When I
have the LAN network card enabled I can't surf the internet. When it is
disabled I can.

Public Internet card: 192.168.1.2/255.255.255.0, gateway: 192.168.1.1,
DNS 192.168.1.1

Private LAN card: 192.168.2.1/255.255.2550, gateway 192.168.2.1, dns
192.168.2.1

Can anyone help please. If I need to change the topology i have no
problem doing that. Ultimately I want to have VPN access to the LAN
hosted by one of the Win2k3 servers through the linksys router. Each
network works fine independent of each other.

Thank you in advance.
-- Matt Beals Consultant Enfocus Certified Trainer Markzware Recognized
Trainer (425) 582-8554 - Office (206) 201-2320 - Voicemail (206)
618-2537 - Mobile private.php?do=newpm&u= Come visit me at:
http://www.automatetheworkflow.com http://www.mattbeals.com
http://blog.mattbeals.com Friends don't let friends write HTML email

Hi,
Try removing the default gateway and DNS entries on LAN interface an
try for internet.
A system can have only one default gateway.
The dns also can be a problem since internet trafic tries to resolv
with local dns.

Regards,
Anis

--
anishj
-----------------------------------------------------------------------
anishjo's Profile: http://forums.techarena.in/members/anishjo.ht
View this thread: http://forums.techarena.in/server-networking/1107237.ht

http://forums.techarena.i

Thank you, that worked for the server.

When I try to use a LAN connected workstation I cannot get to the
internet. I look at ipconfig /all and get this:

Ethernet adapter Ethernet:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/100 VE Network
Connection
Physical Address. . . . . . . . . : 00-0F-B0-FE-C4-D5
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.2.2
Subnet Mask . . . . . . . . . . . : 255.255.255.0
IP Address. . . . . . . . . . . . : fe80::20f:b0ff:fefe:c4d5%4
Default Gateway . . . . . . . . . : 192.168.2.1
DHCP Server . . . . . . . . . . . : 192.168.2.1
DNS Servers . . . . . . . . . . . : 192.168.2.1
fec0:0:0:ffff::1%2
fec0:0:0:ffff::2%2
fec0:0:0:ffff::3%2
Primary WINS Server . . . . . . . : 192.168.2.2
Lease Obtained. . . . . . . . . . : Thursday, January 22, 2009
6:56:44 AM
Lease Expires . . . . . . . . . . : Friday, January 30, 2009
6:56:44 AM

Ethernet adapter Builtin Wireless:

Media State . . . . . . . . . . . : Media disconnected
Description . . . . . . . . . . . : Intel(R) PRO/Wireless
3945ABG Network Connection
Physical Address. . . . . . . . . : 00-13-02-27-1C-A6

Tunnel adapter Teredo Tunneling Pseudo-Interface:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling
Pseudo-Interface
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-00
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : fe80::ffff:ffff:fffd%6
Default Gateway . . . . . . . . . :
NetBIOS over Tcpip. . . . . . . . : Disabled


Matt Beals
Consultant
Enfocus Certified Trainer
Markzware Recognized Trainer
(425) 582-8554 - Office
(206) 201-2320 - Voicemail
(206) 618-2537 - Mobile
private.php?do=newpm&u=

Come visit me at:
http://www.automatetheworkflow.com
http://www.mattbeals.com
http://blog.mattbeals.com

Friends don't let friends write HTML email

anishjo wrote:
> Hi,
> Try removing the default gateway and DNS entries on LAN interface and
> try for internet.
> A system can have only one default gateway.
> The dns also can be a problem since internet trafic tries to resolve
> with local dns.
>
> Regards,
> Anish
>
>

Matt Beals <(E-Mail Removed)> wrote:
> Thank you, that worked for the server.
>
> When I try to use a LAN connected workstation I cannot get to the
> internet. I look at ipconfig /all and get this:
>
> Ethernet adapter Ethernet:
>
> Connection-specific DNS Suffix . :
> Description . . . . . . . . . . . : Intel(R) PRO/100 VE Network
> Connection
> Physical Address. . . . . . . . . : 00-0F-B0-FE-C4-D5
> Dhcp Enabled. . . . . . . . . . . : Yes
> Autoconfiguration Enabled . . . . : Yes
> IP Address. . . . . . . . . . . . : 192.168.2.2
> Subnet Mask . . . . . . . . . . . : 255.255.255.0
> IP Address. . . . . . . . . . . . : fe80::20f:b0ff:fefe:c4d5%4
> Default Gateway . . . . . . . . . : 192.168.2.1
> DHCP Server . . . . . . . . . . . : 192.168.2.1
> DNS Servers . . . . . . . . . . . : 192.168.2.1
> fec0:0:0:ffff::1%2
> fec0:0:0:ffff::2%2
> fec0:0:0:ffff::3%2

Do you use AD? I wouldn't use the router for a DHCP server or for a DNS
server - I'd put both those roles on the Windows servers in each location.

> Primary WINS Server . . . . . . . : 192.168.2.2
> Lease Obtained. . . . . . . . . . : Thursday, January 22, 2009
> 6:56:44 AM
> Lease Expires . . . . . . . . . . : Friday, January 30, 2009
> 6:56:44 AM
>
> Ethernet adapter Builtin Wireless:
>
> Media State . . . . . . . . . . . : Media disconnected
> Description . . . . . . . . . . . : Intel(R) PRO/Wireless
> 3945ABG Network Connection
> Physical Address. . . . . . . . . : 00-13-02-27-1C-A6
>
> Tunnel adapter Teredo Tunneling Pseudo-Interface:
>
> Connection-specific DNS Suffix . :
> Description . . . . . . . . . . . : Teredo Tunneling
> Pseudo-Interface
> Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-00
> Dhcp Enabled. . . . . . . . . . . : No
> IP Address. . . . . . . . . . . . : fe80::ffff:ffff:fffd%6
> Default Gateway . . . . . . . . . :
> NetBIOS over Tcpip. . . . . . . . : Disabled

Uninstall IPv6. It's highly unlikely that you need it.
>
<snip>

You know, I think I was a real knucklehead when I set this up. I made
this much more complex than I needed to.

Use the Linksys as the router, assign it a static IP. Pass VPN to server.
Use the server to serve dhcp/dns/vpn/etc to internal network.

That way it stays all on one subnet. I don't know why I didn't do this
in the first place. At any rate, it works now like it should. Thank you
for your assistance, I appreciate it.

Matt Beals
Consultant
Enfocus Certified Trainer
Markzware Recognized Trainer
(425) 582-8554 - Office
(206) 201-2320 - Voicemail
(206) 618-2537 - Mobile
private.php?do=newpm&u=

Come visit me at:
http://www.automatetheworkflow.com
http://www.mattbeals.com
http://blog.mattbeals.com

Friends don't let friends write HTML email

Lanwench [MVP - Exchange] wrote:
> Matt Beals <(E-Mail Removed)> wrote:
>> Thank you, that worked for the server.
>>
>> When I try to use a LAN connected workstation I cannot get to the
>> internet. I look at ipconfig /all and get this:
>>
>> Ethernet adapter Ethernet:
>>
>> Connection-specific DNS Suffix . :
>> Description . . . . . . . . . . . : Intel(R) PRO/100 VE Network
>> Connection
>> Physical Address. . . . . . . . . : 00-0F-B0-FE-C4-D5
>> Dhcp Enabled. . . . . . . . . . . : Yes
>> Autoconfiguration Enabled . . . . : Yes
>> IP Address. . . . . . . . . . . . : 192.168.2.2
>> Subnet Mask . . . . . . . . . . . : 255.255.255.0
>> IP Address. . . . . . . . . . . . : fe80::20f:b0ff:fefe:c4d5%4
>> Default Gateway . . . . . . . . . : 192.168.2.1
>> DHCP Server . . . . . . . . . . . : 192.168.2.1
>> DNS Servers . . . . . . . . . . . : 192.168.2.1
>> fec0:0:0:ffff::1%2
>> fec0:0:0:ffff::2%2
>> fec0:0:0:ffff::3%2
>
> Do you use AD? I wouldn't use the router for a DHCP server or for a DNS
> server - I'd put both those roles on the Windows servers in each location.
>
>> Primary WINS Server . . . . . . . : 192.168.2.2
>> Lease Obtained. . . . . . . . . . : Thursday, January 22, 2009
>> 6:56:44 AM
>> Lease Expires . . . . . . . . . . : Friday, January 30, 2009
>> 6:56:44 AM
>>
>> Ethernet adapter Builtin Wireless:
>>
>> Media State . . . . . . . . . . . : Media disconnected
>> Description . . . . . . . . . . . : Intel(R) PRO/Wireless
>> 3945ABG Network Connection
>> Physical Address. . . . . . . . . : 00-13-02-27-1C-A6
>>
>> Tunnel adapter Teredo Tunneling Pseudo-Interface:
>>
>> Connection-specific DNS Suffix . :
>> Description . . . . . . . . . . . : Teredo Tunneling
>> Pseudo-Interface
>> Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-00
>> Dhcp Enabled. . . . . . . . . . . : No
>> IP Address. . . . . . . . . . . . : fe80::ffff:ffff:fffd%6
>> Default Gateway . . . . . . . . . :
>> NetBIOS over Tcpip. . . . . . . . : Disabled
>
> Uninstall IPv6. It's highly unlikely that you need it.
> <snip>
>
>

Matt Beals <(E-Mail Removed)> wrote:
> You know, I think I was a real knucklehead when I set this up. I made
> this much more complex than I needed to.
>
> Use the Linksys as the router, assign it a static IP. Pass VPN to
> server. Use the server to serve dhcp/dns/vpn/etc to internal network.
>
> That way it stays all on one subnet. I don't know why I didn't do this
> in the first place. At any rate, it works now like it should. Thank
> you for your assistance, I appreciate it.

You're moset welcome - glad you got it sorted out. And I love the word
"knucklehead" - it's underused nowadays. ;-)

>