Channel 9 Forums - Tech Off - VPN problems with networking http://mschnlnine.vo.llnwd.net/d1/Dev/App_Themes/C9/images/feedimage.png Channel 9 Forums - Tech Off - VPN problems with networking http://channel9.msdn.com/Forums Channel 9 keeps you up to date with the latest news and behind the scenes info from Microsoft that developers love to keep up with. From LINQ to SilverLight – Watch videos and hear about all the cool technologies coming and the people behind them. http://channel9.msdn.com/Forums en Sun, 19 May 2013 11:35:55 GMT Sun, 19 May 2013 11:35:55 GMT Rev9 3 -3 -1 Tech Off - VPN problems with networking I'm trying to establish a simple VPN set-up (with Windows Server 2003's Routing and Remote Access role), I'll worry about other stuff and tightening it up (like moving to IPSec) after I get this working first.

I added the RRAS role to the server, and configured the network firewall/router so all VPN connections pass through OK, I then enabled RRAS access on a test user account in ADUC.

Right now I'm on a computer unrelated (and untrusted) from the domain the RRAS server is in, additionally the RRAS's domain is unrelated to the Internet's DNS (it's "foobar.local").

I can create the VPN connection fine and also connect when I enter the credentials of that test user account, but when I do connect everything breaks on my side (bad, very bad). To be more precise, DNS fails and browsing the VPN network fails, I can only connect via Windows Explorer if I type in the IP address of the remote host in UNC format, using the NetBIOS hostname doesn't work. Everything is really slow as well (even though latency is only ~40ms). I can't even resolve "server.foobar.local", so something is seriously wrong.

At the remote site, the RRAS server (which is also a DC) has the IP address 192.168.0.2, but my local machine also happens to have the address 192.168.0.2; but when I connect via the VPN connection it's addressed by 192.168.0.62 and my computer is 192.168.0.61, so that sounds fine, but still... DNS is completely broken, I cannot resolve google.com for example, even though the RRAS server can (by virtue of being a DC it has a built-in DNS server). Its like it cuts off my own LAN as well.

Are there any settings I might have overlooked?

I've tried setting the priority of connections under Network Connections > Advanced > Advanced Settings > Adapters and Bindings to different orders, but to no avail.

Any tips?

Thanks

]]> http://channel9.msdn.com/Forums/TechOff/411309-VPN-problems-with-networking/411309#411309 Mon, 23 Jun 2008 22:15:59 GMT http://channel9.msdn.com/Forums/TechOff/411309-VPN-problems-with-networking/411309#411309 W3bbo 3 http://channel9.msdn.com/Niners/W3bbo/Discussions/RSS Tech Off - VPN problems with networking Get an UMTS card or place an remote server outside the domain and test via that.

I think the TCP/IP stack gets messed up because you are connected to multiple subnets that have the same region,...

edit:

Also check the default gateway and dns the vpn server is giving out thru DHCP.

]]> http://channel9.msdn.com/Forums/TechOff/411309-VPN-problems-with-networking/ce5eb7b55bdb48f6b77f9dfa00929073#ce5eb7b55bdb48f6b77f9dfa00929073 Tue, 24 Jun 2008 11:56:40 GMT http://channel9.msdn.com/Forums/TechOff/411309-VPN-problems-with-networking/ce5eb7b55bdb48f6b77f9dfa00929073#ce5eb7b55bdb48f6b77f9dfa00929073 Maddus Mattus 3 http://channel9.msdn.com/Niners/Maddus Mattus/Discussions/RSS Tech Off - VPN problems with networking
At the remote site, the RRAS server (which is also a DC) has the IP address 192.168.0.2, but my local machine also happens to have the address 192.168.0.2; but when I connect via the VPN connection it's addressed by 192.168.0.62 and my computer is 192.168.0.61, so that sounds fine, but still...

Um, why does this sound fine?

You should be trying to route between what should be two 'distinct' networks. From a TCP/IP point-of-view, the network mask is used to make this distinction. So unless your using some kind of tricky netmask setup that I can't imagine, then the best I would have ever expected to get would be simple a point-to-point connection. Though if both your (local) IP Address conflicts with the RRAS server, then I'm amazed you even get that.

Simplest solution would be to change your local IP Address range. ie Use something like 192.168.20.0/24 locally.

]]> http://channel9.msdn.com/Forums/TechOff/411309-VPN-problems-with-networking/2991d1efe5324ef584489dfa009290c9#2991d1efe5324ef584489dfa009290c9 Thu, 26 Jun 2008 11:41:52 GMT http://channel9.msdn.com/Forums/TechOff/411309-VPN-problems-with-networking/2991d1efe5324ef584489dfa009290c9#2991d1efe5324ef584489dfa009290c9 RichardRudek 3 http://channel9.msdn.com/Niners/RichardRudek/Discussions/RSS