No internet from win2k client using RRAS on multihomed win2k server

[saintpi]

I have a win2k server with 2NIC. NIC1 has ip 192.168.0.1 is connected through a SWITCH. NIC2 has ip 192.168.1.100 is connected to a Linksys Router. The WAN port of the router is linked to the internet.
NIC2 has ICS enabled.
Problem: When I set up RRAS, it asks which LAN to use for DHCP & co., When I choose NIC1, I get addresses assigned to the win2k client of the type.. 169.254.227.76. When I use NIC2, I get ip 192.168.1.101. I'm never able to get ip 192.168.0.x which other systems on the LAN has.
I can connect to the server but not to the internet. How do I configure the server so that I can retain the present multihome situation and still dial-in from a win2k client to the internet. Thanks.

 

[MattWray]

I would not use ICS. If you set up NAT and your server as a Network Router thru RRAS, you will have much better luck. Also, make sure to include a static route with dest 0.0.0.0 and mask 0.0.0.0 from the Internal interface out the External interface, and do NOT put a gateway on the Internal interface....

Thanks,

Matt Wray
MCSE, MCSA, MCP, CCNA

http://www.sss-steel.com

http://www.total-tec.com

 

[saintpi]

I have stopped the ICS, and installed NAT to use RRAS, then used the netsh command to add the internal interface to NAT. I used a static address pool of 192.168.0.22 (to 24). The remote win2k client connects to the server but cannot browse. It also cannot ping the NIC2 with the ip 192.168.1.100. when I include the static route with dest 0.0.0 and mask 0.0.0.0 from the internal interface to any of the NIC1 or NIC2 interfaces, the win2k client still cannot access the internet, but the machines on LAN can no longer access the internet. Help!!!

 

[MattWray]

when I include the static route with dest 0.0.0 and mask 0.0.0.0 from the internal interface to any of the NIC1 or NIC2 interfaces
You must not understand what I am saying. Add the route to NIC1 and have it go out NIC2. Can the server access the Internet still? Can the clients ping the server? If you have NAT set up correctly and you add the route, they should get out.
What internal interface are you talking about? When I say internal, I mean the one connected to the LAN. External would be the one connected to the WAN/Internet...


Thanks,

Matt Wray
MCSE, MCSA, MCP, CCNA

http://www.sss-steel.com

http://www.total-tec.com

 

[saintpi]

I guess, I did not understand you. The internal I meant was the Routing interface for Dial-in clients.
Here is the present routing table:- (How do I add the routing you described?)

Destination,Network mask,Gateway,Interface,Metric,Protocol
255.255.255.255,255.255.255.255,192.168.0.1,Local Area Connection,1,Local

224.0.0.0,240.0.0.0,192.168.0.1,Local Area Connection,1,Local

192.168.0.0,255.255.255.0,192.168.0.1,Local Area Connection,1,Local

0.0.0.0,0.0.0.0,192.168.0.1,Local Area Connection,1,Network management

255.255.255.255,255.255.255.255,192.168.1.100,Local Area Connection 2,1,Local

224.0.0.0,240.0.0.0,192.168.1.100,Local Area Connection 2,1,Local

192.168.1.0,255.255.255.0,192.168.1.100,Local Area Connection 2,1,Local

0.0.0.0,0.0.0.0,192.168.1.1,Local Area Connection 2,1,Network management

192.168.1.100,255.255.255.255,127.0.0.1,Loopback,1,Local

192.168.0.1,255.255.255.255,127.0.0.1,Loopback,1,Local

127.0.0.1,255.255.255.255,127.0.0.1,Loopback,1,Local

127.0.0.0,255.0.0.0,127.0.0.1,Loopback,1,Local
____________

 

[MattWray]

To add the route, open the RRAS snap-in. Expand IP Routing, right-click Static Routes and choose add a new one. You will have a drop-down, choose NIC1 and dest 0.0.0.0 mask 0.0.0.0 gateway will be the IP of NIC2, default metric...

Thanks,

Matt Wray
MCSE, MCSA, MCP, CCNA

http://www.sss-steel.com

http://www.total-tec.com

 

[saintpi]

I did that but the win2k client still cannot connect to the internet.

 

[saintpi]

Any other suggestions? Time is running out on me... HELP!

 

[Seaspray0]

{{{internet}}}
|
(cable/dsl/etc modem} <==NO NAT HERE
|
(nic2 dynamic ip by ISP)
(Server with NAT )
(nic1 192.168.0.1 )
|
(hub/switch)
| | | |
clients

adjust your dhcp to listen only on 192.168.0.1
dissable remote routing and access. create a new network connection in network properties, make it a network connection the internet through nic2 and test your connection from the server. enable remote routing and access and set up NAT again with the wizzard. Add the static route above.

 

[ChicagoTechNet]

as Matt mentioned, you should modify the routing table. quoted from

http://www25.brinkster.com/ChicagoTech

Do not install VPN on W2K with ICS running

Many users have reported that they were experienced some difficulties after installing VPN on w2k/xp running ICS and ICS clients may receive &quot;Error: Page Can Not be Displayed&quot; message. The reason is that establishing a VPN connection on the ICS Host modifies the Routing Table on the ICS Host. that will forces all clients that try to connect to the Internet to use the VPN routing table instead of the ICS routing table used to connect to the Internet service provider (ISP).

You may modify the route table to fix this problem, for example, route -p add <network> mask <subnet mask> <router ip>. If you want too add a route for a single host (firewall which is on another subnet), do this route -p add <ip> mask 255.255.255.255 <host ip>, for example, route -p add 192.168.0.100 255.255.255.255 160.213.320.1.


Robert Lin, MS-MVP, MCSE & CNE
Windows, Network and How to at

http://www25.brinkster.com/ChicagoTech

 

[saintpi]

Thanks, I'll give these a try. But before I do so, can u answer this:
1. Is the win2k client not supposed to pick up 1p address and dns from the NAT? I see that it picks up the DNS that is on NIC2 - the internet.
2. Can I understand &quot;what the static route above mean? Is it the one suggested by Mattray?
3. In the IP setting on the RRAS properties, how do I set the last box so that NAT will supply the DHCP/DNS/etc and not the Lan Adapters displayed in the dialogue box?

Please reply asap! Thanks again!!!

 

[saintpi]

Thanks to all for your responses. I just succeeded in connecting the win2k client to the internet. Here is what I did:
1. I disabled RRAS and reconfigured as NAT server. i.e Router only. Set NAT to Automatically assign IP addresses by using DHCP. I gave the scope... and excluded the addresses I plan to use for the static address pool
2.I rebooted the server and tested the clients. All worked fine and connected to the internet.
3. I added the RAS service
4. I configured the static address pool of the RAS
5. Configured Security to include desired Authetication, Event Logging, PPP, etc
6. used the netsh command to add the internal interface to the NAT
7. Checked the properties of the dial-up connection on the win2k client. Discovered that default gateway was not selected (This played a major role) Selected it, i.e. use default gateway on remote network

Whoop! I pinged the internet gateway and wao, I got replies... Praise God, I was able to browse the net from the win2k client!

Thanks once again for your contributions!!!!!

 

[MattWray]

Hooray!

Thanks,

Matt Wray
MCSE, MCSA, MCP, CCNA

http://www.sss-steel.com

http://www.total-tec.com