Paset
asked on
Microsoft Server VPN to client XP prof via cisco 2900 switch connected to a 2620 router router on a stick
I have a Microsoft RASS VPN connected to a cisco 2900 switch connected to a cisco 2020 router that I wish to communicate to a XP prof client. The Server is XP proff or might change it to Server 2003. I'm sure of the setup of the Server and the client I think ,but I can't get communication. I have AD, DHCP and WINS setup on the network and the web connection is DSL. The Server is on a different subnet VPN than the client VPN. I am not trying to connect via the internet. I guess the setup is called a router on stick. Any help with my understanding or soultion would be great
Thanks
PASET
Thanks
PASET
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Here is how the NIC cards on the 2003 server are s/u for RASS VPN followed by the NIC card for the XP client on a different subnet and VPN
PASET
Public NIC
IP address 192.168.10.41
Subnet mask 255.255.255.224
F0/Gateway 192.168.10.33
Preferred DNS Server 192.168.10.35
Alternative DNS server 192.168.10.36
Under the Advanced TCP/IP settings
WINS addresses, in order of use:
192.168.10.38
192.168.10.37
Checked the Enable LMHOSTS lookup
Checked the NetBIOS setting default
-------------------------- --------
Private NIC
IP address 192.168.10.40
Subnet mask 255.255.255.224
Default gateway: not set
Preferred DNS server 192.168.10.36
Alternative DNS server 192.168.10.35
Under the Advanced TCP/IP settings
WINS addresses, in order of use:
192.168.10.38
192.168.10.37
Checked the Enable LMHOSTS lookup
Checked the NetBIOS setting default
When I try to join the Domain I get an error message Dialog box Computer Name Changes, A domain controller for the domain CreativeNet could not be contracted.
On the VPN client running XP pro
TCP/IP properties
Under use the following address
IP address 192.168.10.41
Preferred DNS Server 192.168.10.35
Alternative DNS server 192.168.10.36
Advanced TCP/IP Settings
Preferred DNS server 192.168.10.36
Alternative DNS server 192.168.10.35
WINS addresses, in order of use
192.168.10.38
192.168.10.37
Using PPPT as this time
PASET
Public NIC
IP address 192.168.10.41
Subnet mask 255.255.255.224
F0/Gateway 192.168.10.33
Preferred DNS Server 192.168.10.35
Alternative DNS server 192.168.10.36
Under the Advanced TCP/IP settings
WINS addresses, in order of use:
192.168.10.38
192.168.10.37
Checked the Enable LMHOSTS lookup
Checked the NetBIOS setting default
--------------------------
Private NIC
IP address 192.168.10.40
Subnet mask 255.255.255.224
Default gateway: not set
Preferred DNS server 192.168.10.36
Alternative DNS server 192.168.10.35
Under the Advanced TCP/IP settings
WINS addresses, in order of use:
192.168.10.38
192.168.10.37
Checked the Enable LMHOSTS lookup
Checked the NetBIOS setting default
When I try to join the Domain I get an error message Dialog box Computer Name Changes, A domain controller for the domain CreativeNet could not be contracted.
On the VPN client running XP pro
TCP/IP properties
Under use the following address
IP address 192.168.10.41
Preferred DNS Server 192.168.10.35
Alternative DNS server 192.168.10.36
Advanced TCP/IP Settings
Preferred DNS server 192.168.10.36
Alternative DNS server 192.168.10.35
WINS addresses, in order of use
192.168.10.38
192.168.10.37
Using PPPT as this time
ASKER
Okay I will need to look into how have how to have the router route the GRE protocal 47. We do not have ACL's set. We do not have communication between work station and server. Follows is our IP addressing scheme. I have a viso diagram of our setup but can't figure how to cut and paste it.
First the way I am understanding this, I have two NIC cards in the server and one is a public NIC that needs to connect to default gateway of the switch and on to the router gateway. The private NIC needs to be connected to the ethernet port of the switch and than is connected to the router ethernet port.
The client needs to be connected to etherent port of the default gateway of the switch and on to a ethernet port of the router.
To allow the VLAN's to talk to each other I created a trunk port (using dot.1q 1 protocal). I then gave the router a subinterface and IP address within each VLAN and subnet., and then pointed the hosts at the router as their default gateway. The hosts still would need to be connected to the switch on to the ethernet port of the router.
On the swtich I first created static VLAN's followed by assigning ports to the VLAN's . I than setup Inter-VLAN Communication via Router-on-a-Stick. The series of commands I used were closely followed via CCNA protable guide. What I configued does seem to be runnig. I not at the site of the network so I can't copy and paste the running config.
IP Address Computer
10.209.1.221 External / Proxy
192.168.10.33 F0 / Gateway
192.168.10.34 Server Switch
192.168.10.35 AD1 – Primary Active Directory / DNS
192.168.10.36 AD2 – Secondary Active Directory / DNS
192.168.10.37 DHCP – Primary DHCP / Backup WINS
192.168.10.38 WINS – Primary WINS / Backup DHCP
192.168.10.39 Not used
192.168.10.40 Not used
192.168.10.41 RAS – RAS Server
192.168.10.42 WWW – Apache Server
192.168.10.43 SAMBA – Samba Server
192.168.10.44 MAIL – Sendmail Server
192.168.10.65
192.168.10.66 Client 1
192.168.10.67 Client 2
192.168.10.93 Printer 1
192.168.10.94 Printer 2
192.168.30.1 S1 / Proxy
192.168.30.2 S2 / Gateway
192.168.40.1 F1 / Gateway
192.168.40.2 VOIP Switch
192.168.40.3 Call Manager Server
192.168.40.4 Client 1
192.168.40.5 Client 2
This the range of IP's
Network Address :- 192.168.10.0
Subnet Mask :-255.255.255.224
Host IP addresses :-192.168.10.1 –30
Network Address :- 192.168.10.32
Subnet Mask :-255.255.255.224
Host IP addresses :-192.168.10.33 –62
Network Address :- 192.168.10.64
Subnet Mask :-255.255.255.224
Host IP addresses :-192.168.10.65 –94
Network Address :- 192.168.10.96
Subnet Mask :-255.255.255.224
Host IP addresses :-192.168.10.97 –126
Network Address :- 192.168.10.128
Subnet Mask :-255.255.255.224
Host IP addresses :-192.168.10.129 –158
Network Address :- 192.168.10.160
Subnet Mask :-255.255.255.224
Host IP addresses :-192.168.10.161 –190
Network Address :- 192.168.10.192
Subnet Mask :-255.255.255.224
Host IP addresses :-192.168.10.193 -222
PASET