• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 180
  • Last Modified:

windows nt Authenticate to windows 2000 over vpn

hello all i have remote access set up most people have no problem authenticating to my win2k server behind my pix.
problem is one co worker uses winnt from home and he cant seem to map or authenticate to m doman. the cisco client informs him he is connected to my firewall but he cant go on further
0
briankeegan
Asked:
briankeegan
  • 7
  • 5
  • 4
1 Solution
 
adamdrayerCommented:
can you ping the DC or any of the firewalls behind the DC?
0
 
adamdrayerCommented:
wow. that should have read:
can you ping the DC or any of the computers behind the firewall?
0
 
briankeeganAuthor Commented:
he has not tried to but he tried to net use * \\192.168.30.10\app
and he got "cant find network path"
0
Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

 
jamesreddyCommented:
Is DSCLIENT installed on the NT machine?
0
 
adamdrayerCommented:
Is he using a DLS/Cable router?  is he using a VPN device?
0
 
briankeeganAuthor Commented:
he has a cable router at home that does dhcp for him. as far as dsclient i am 90% sure he does not have it.
0
 
jamesreddyCommented:
He said he is not connecting through a PIX via VPN...but he stated he was trying to authenticate to the domain.  AD domains would require DSCLIENT to be installed to authenticate.
0
 
jamesreddyCommented:
He said he IS...excuse me.  Typo.
0
 
jamesreddyCommented:
Tell him to download and install DSCLIENT on NT.  Check out the following link for info and download details.  See if it helps.

http://www.petri.co.il/dsclient_for_win98_nt.htm

0
 
briankeeganAuthor Commented:
thanks guys allot
0
 
briankeeganAuthor Commented:
ok we tried all of this last night. still to no avail . any other ideas? or does winnt over cisco client(ipsec) connecting to a win2k server always cause this issue?
0
 
adamdrayerCommented:
can you ping the DC or any of the computers behind the firewall?
0
 
briankeeganAuthor Commented:
not able to ping any of the servers. we have  active directory btw
0
 
adamdrayerCommented:

a few things to try..

1. Have him disable all software firewalls like ZoneAlarm.
2. Make sure his cable router is not blocking any ports. (53, 137, 139, 445, etc..)
3. add a route to the internal network like so:
"route -p add 192.168.1.0 mask 255.255.255.0 w.x.y.z"
Where 192.168.1.0 is the internal network of your main office, 255.255.255.0 is the subnet mask, and w.x.y.z is the external IP address of PIX

Now try and ping the IP address of the DC or any computer at the office.  not the computername but the IP address.
0
 
briankeeganAuthor Commented:
well what worked was finally getting a smartnet then then 6.3 then nat-t now he works
0
 
briankeeganAuthor Commented:
I am ot sure how to close this . but thanks guys/gals for the help
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Cloud Class® Course: MCSA MCSE Windows Server 2012

This course teaches how to install and configure Windows Server 2012 R2.  It is the first step on your path to becoming a Microsoft Certified Solutions Expert (MCSE).

  • 7
  • 5
  • 4
Tackle projects and never again get stuck behind a technical roadblock.
Join Now