This is really a bit of a can of worms. New problems may just keep
popping up. AD plus NAT plus PPPoE plus Macs!
If you must use your DC as the Internet router, you certainly should be
using RRAS and NAT (not bridging). For AD to work, all the AD clients should
be using the 10.0.0 IP addresses you used to set up AD, and they should be
using the local (10.0.0.x ) DNS server.
The server has an Internet connection using PPPoE. With W2k3 this can be
set up within RRAS. The PPPoE interface becomes your "public" interface for
NAT. The 10.0.0.x interface of the server becomes the private interface in
NAT. NAT allows the LAN clients to share the server's Internet connection.
The LAN clients get their config from DHCP on your server. They should
get an IP in the 10.0.0.0 subnet and a default gateway and DNS setting of
your server's 10.0.0 address. You will need to modify your local DNS so
that it forwards requests to a public DNS server (such as your ISP's DNS).
When you have AD and NAT working, you can experiment with VPN. Enable
remote access in RRAS and try making a VPN connection from a LAN client.
(VPN will work over the local LAN). This will let you debug the VPN config
on your server locally.
Because your RRAS server is a DC, you may get name resolution problems
when a remote access client connects. See KB 292822 .
When this works, you can try connecting from a remote client. Your
no-ip.com address should point you to the server's current public IP. If it
works internally, it should work over the Internet.
"gregory_t" <(E-Mail Removed)> wrote in message
news:A74B5BAE-0361-412C-8BBE-(E-Mail Removed)...
> Hi all. I'm hoping someone can help me.
>
> Here's my current setup. I have an IBM xServer running Windows 2003 Std
> Edition. I have DHCP and AD setup. Initially, I set up DHCP's scope to
> 10.0.0.10 - 10.0.0.25. I have 9 XP clients, and 3 eMacs so far in the
> lab.
> There are two NICs in the server. One for the private LAN, and the other
> is
> directly connected to the DSL modem. By browsing to 192.168.2.1 on the
> Server, I'm able to access my ISP's (Bell Sympatico) setup page and enter
> all
> the PPPoE info I need to connect. Once this is entered, I can browse the
> Internet on the server. However, I wasn't able to successfully access the
> Internet form the XP clients. The only way I can get Internet access on
> the
> XP machines and the eMacs is by bridiging the two network cards.
>
> Once I bridge the connections, all the XP machines and the eMacs get an IP
> from the server and the IPs of those are 192.168.2.10 - 192.168.2.25. On
> the
> server, I setup a no-ip.com account to inform me of the IP whenever it
> changes so I can always point to the lab from a remote connection, but it
> will also point back to the ISP setup page, and not to the server.
> Whenever
> I try to connect through a VPN connection, I get error 800 and have no
> clue
> where to go from here.
>
> I'd like to get VPN access to the machines but I don't know where to go
> from
> here. Is there a better way to get Internet access to the machines? Do I
> need to set up routing and remote access on the server to get a VPN
> connection? How can I open the proper ports so that my no-ip.com will
> point
> and access a VPN session on the server?
>
> Thanks for reading guys.
>
> G.
>
|