?
Solved

Site-to-Site VPN Works using Netgear DG834 to SBS 2003 - Everything But File & Printer Sharing!

Posted on 2007-04-03
8
Medium Priority
?
1,651 Views
Last Modified: 2009-09-18
Hi Guys & Gals,
I have just been to see a client that has a SBS 2003  Standard Dell Server which is running fine. They have 5 users on one site all connected through a Netgear DG834G ADSL Router and another lone PC at a remote mangers premises connected to ADSL via the same router model. Previously they were using the Small Business Connection Manger to create a software VPN connection.

 He found this very slow and kept forgetting to 'dialup' therefore they wanted to setup a hardware VPN tunnel. Now they didn't want to replace or purchase new hardware and as the Netgear DG834G router supports created an IPSec VPN tunnel router to router and as they are the same routers even has a wizard to do most of it for you - they opted to configure this. This went well and the tunnel as established.
SITE A HAS THE SBS SERVER
ROUTER IP - 192.168.2.1
SUBNET: 255.255.255.0
SERVER: - 192.168.2.99 (SBS 2003 SP1 – STANDARD)
ALL CLIENT PC’s IP’s DYNAMIC THROUGH SBS DHCP
SITE B (Remote OFFICE)
Router IP - 192.168.1.2
SUBNET: 255.255.255.0
HIS PC: 192.168.1.2 (Windows XP SP2)
 I setup his network card with a static IP address and assigned the DNS servers manually (one I set as 192.168.1.99 (the server) and the other his router - I also enabled NETBios over TCP/IP and assigned a static WINS server pointing at the SBS server).

 Doing this allow him seamlessly use the companyweb, Outlook 2003 connected to exchange and everything seemed fine.
You can ping the server name and it will resolve to the correct IP (meaning DNS must be ok), you can open the remote router configuration page from his network...everything seems to be connected correctly! From the SBS network you can ping his computer name and it will resolve to his IP you can even remote desktop back and forth without problem.

HOWEVER File and Print sharing will return a error of PATH NOT FOUND if you try and open a file \\servername and obviously he is always 'working offline' from the server and of course he can’t synchronise any file changes!

NOW FOR THE REALLLLLY WEIRD BIT
If I then connect to the server using the old software VPN client on his XP SP2 PC File and Print sharing works as it always did - however if I then disconnect the software connection...it still works over the router-to-router VPN connection and will continue to work until a router drops the VPN or his PC restarts.

I can't for the life of me think what could be causing it - there is no firewall client on the PC (except XP SP2 Firewall Client) or the server, the routers have a built in firewall - I have even enabled DMZ the routers to both his PC and the server at each end and it makes no difference. But it behaves like a firewall is blocking File & Print Sharing across the VPN or the server is blocking him for some reason (to get companyweb to work from his PC I had to add his IP range into the trusted IPS under security for the IIS Server).
 Any insight appreciated as I haven't setup many router-to-router VPN connections in my time as a SBS guy!
My first thoughts were firewall or DNS on the server...but I have run into a brick wall. At the moment to share files they are emailing or posting on the companyweb!

ANY IDEAS?? WHY WOULD STARTING UP THE SOFTWARE VPN EVEN FOR 10 SECONDS ALLOW THE ROUTER-TO-ROUTER CONNECTION TO WORK FOR THE LONGEST AN ENTIRE WEEKEND!??

Regards
Steve
0
Comment
Question by:swcomputers07
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
8 Comments
 
LVL 7

Assisted Solution

by:LimeSMJ
LimeSMJ earned 400 total points
ID: 18847690
Did you try connecting via \\ServerIPAddress?
0
 
LVL 77

Accepted Solution

by:
Rob Williams earned 1600 total points
ID: 18848100
>>"Router IP - 192.168.1.2
SUBNET: 255.255.255.0
HIS PC: 192.168.1.2"
I assume this is a typo as you connection works, but the router and PC must have different IP's.

\\Server name  uses NetBIOS to connect, Sounds like WINS is not running on the server or not working for some reason.
Test this with LimeSMJ's suggestion above.
You can try to force name resolution by adding the domain suffix. Test if you can connect with the full computer and domain name as  \\ComputerName.domain.local  
If so, add the suffix, DomainName.local, to the DNS configuration of the client's network adapter [ right click network adapter | properties | TCP/IP properties | Advanced | DNS | "Append these DNS suffixes (in order)" | Add ]

Sounds like the old VPN connection is adding the appropriate DNS information when you connect. This would be cached, but deleted upon reboot.
0
 

Author Comment

by:swcomputers07
ID: 18849073
NETBIOS is working as if I ping 'servername' it will resolve to the correct IP address. I am just in the process of updating the firmware on the routers as Netgear say on there new firmware it solves a problem of "connecting to shared resources via \\computername\sharefolder" so I am hoping its just the router at fault. Now updating firmware on a router 100 miles away without going there...humm..
0
Moving data to the cloud? Find out if you’re ready

Before moving to the cloud, it is important to carefully define your db needs, plan for the migration & understand prod. environment. This wp explains how to define what you need from a cloud provider, plan for the migration & what putting a cloud solution into practice entails.

 
LVL 77

Expert Comment

by:Rob Williams
ID: 18855031
I would try to use DNS for name resolution over the VPN, it is much more dependable. There is also an option on the VPN configuration of most of the Netgears to enable NetBIOS over the tunnel. This is usually disabled by default.
0
 

Author Comment

by:swcomputers07
ID: 18869941
Found out its a problem with the firmware on the Netgear DG834 which stops people opening links such as \\servername\share. Upgraded the firemware and this now works also solved a problem with the tunnel closing and not being able to reconnect.
0
 
LVL 77

Expert Comment

by:Rob Williams
ID: 18870746
Good to know.
Thanks swcomputers07,
Cheers !
--Rob
0
 
LVL 3

Expert Comment

by:fcarrai
ID: 25363207
swcomputers07,
can you kindly tell me which firmware version solve the problem (it looks like I'm in the same situation..)
Thanks!
0
 

Author Comment

by:swcomputers07
ID: 25363941
It was the latest version at the time of the post, can't remember off the top of my head, but VPN issues was listed in the fixes on the firmware information. hope that helps
0

Featured Post

Don't Cry: How Liquid Web is Ensuring Security

WannaCry is just the start. Read how Liquid Web is protecting itself and its customers against new threats.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Originally, this post was published on Monitis Blog, you can check it here . It goes without saying that technology has transformed society and the very nature of how we live, work, and communicate in ways that would’ve been incomprehensible 5 ye…
This article is in regards to the Cisco QSFP-4SFP10G-CU1M cables, which are designed to uplink/downlink 40GB ports to 10GB SFP ports. I recently experienced this and found very little configuration documentation on how these are supposed to be confi…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Monitoring a network: how to monitor network services and why? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the philosophy behind service monitoring and why a handshake validation is critical in network monitoring. Software utilized …
Suggested Courses

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question