Network connection Thru VPN to Domain

[pikk67]

Hi All,

Ok...let me explain. I run a Win2k3 Server as our PDC. Only a 35 user network. It also acts as the DNS server. I run DHCP etc. I used to run an NT 4.0 box last year. For our VPN, I use a Linux box with FreeSWAN. The problem I'm finding now with the Win2k3 box is that I can no longer connect to any shares on that server when I VPN in from home. It did work with NT. For instance...I try to connect to browse the network and I can see the Domain but when I try to access it...all I see is my laptop. If I try to connect by IP or by typing the share name...I get; "there are currently no logon servers to service the logon request". Even Net Use does not work.

I guess I'm a little green yet for Win2k3 so I must have overlooked something. Any ideas?

By the way...my laptop is Windows 2000 Pro and I can connect to my Exchange Server (runing NT 4.0) just fine.

Thanks in advance!

P'

 

[ShackDaddy]

Let's hit the most common stuff first. Is the network you are using for your home network and the one you are using for the office the same? Ie, are they both essentially the same subnet (192.168.1.0 or something like that)? That will kill your connectivity, even if the VPN seems to be built properly. You need to have two separate address spaces, or packets won't route across the VPN tunnel properly. Has there been any re-ip'ing on either the office or home network since you were able to connect to the NT box? Key question: can you ping office hosts across the VPN when connected?

Next, who is providing the IP address to the VPN client, if the client is being given a new IP (virtual adapter) as part of the VPN connection. If it's the FreeSWAN, then you may not be supplying enough information to the VPN client... you will need to give it DNS information as well as an IP address.

What OS is your laptop running? What happens if, before you connect to the VPN, you set your DNS server address on the client to be the same address as your server? If your client isn't talking to your server for DNS, it won't be able to logon. An external DNS server won't cut it. I'm sure you know that already.

ShackDaddy

 

[technome]

SMB signing settings ? Perhaps disable them on the WK2003 server.


........................................
Chernobyl disaster..a must see pictorial

http://www.kiddofspeed.com/default.htm