Solved

Microsoft Server VPN to client XP prof via cisco 2900 switch connected to a 2620 router router on a stick

Posted on 2007-04-10
3
413 Views
Last Modified: 2012-06-22
I have a Microsoft RASS VPN connected to a cisco 2900 switch connected to a cisco 2020  router that I wish to communicate to a XP prof client.  The Server is XP proff or might change it to Server 2003. I'm sure of the setup of the Server and the client I think ,but I can't get communication. I have AD, DHCP and WINS setup on the network and the web connection is DSL. The Server is on a different subnet VPN than the client VPN. I am not trying to connect via the internet. I guess the setup is called a router on stick. Any help with my understanding or soultion would be great

Thanks
PASET
0
Comment
Question by:Paset
  • 2
3 Comments
 
LVL 7

Accepted Solution

by:
TheTull earned 500 total points
ID: 18886919
You're going to have to provide more info, such as subnet info and the way you have your routing setup.

As an FYI, you are going to need to have the router route the GRE protocol between each subnet (this is protocol 47).  With it being a Cisco router, we need to know if you have ACLs setup and whether or not the workstation can communicate with the server period.
0
 

Author Comment

by:Paset
ID: 18887157

Okay I will need to look into how have how to have the router route the GRE protocal 47. We do not have ACL's set.  We do not have communication between work station and server. Follows is our IP addressing scheme. I have a viso diagram of our setup but can't figure how to cut and paste it.  

First the way I am understanding this, I have two NIC cards in the server and one is a public NIC that needs to connect to default gateway of the switch and on to the router gateway. The private NIC needs to be connected to the ethernet port of the switch and than is connected to the router ethernet port.
The client needs to be connected to etherent port of the default gateway of the switch and on to a ethernet port of the router.
To allow the VLAN's to talk to each other I created a trunk port (using dot.1q 1 protocal). I then gave the router a subinterface and IP address within each VLAN and subnet., and then pointed the hosts at the router as their default gateway. The hosts still would need to be connected to the switch on to the ethernet port of the router.

On the swtich I first created static VLAN's followed by assigning ports to the VLAN's . I than setup Inter-VLAN Communication via Router-on-a-Stick. The series of commands I used were closely followed via CCNA protable guide. What I configued does seem to be runnig. I not at the site of the network so I can't copy and paste the running config.

IP Address      Computer
10.209.1.221      External / Proxy
      
192.168.10.33      F0 / Gateway
192.168.10.34      Server Switch
192.168.10.35      AD1 – Primary Active Directory / DNS
192.168.10.36      AD2 – Secondary Active Directory / DNS
192.168.10.37      DHCP – Primary DHCP / Backup WINS
192.168.10.38      WINS – Primary WINS / Backup DHCP
192.168.10.39      Not used
192.168.10.40      Not used
192.168.10.41      RAS – RAS Server
192.168.10.42      WWW – Apache Server
192.168.10.43      SAMBA – Samba Server
192.168.10.44      MAIL – Sendmail Server
      
192.168.10.65      
192.168.10.66      Client 1
192.168.10.67      Client 2
192.168.10.93      Printer 1
192.168.10.94      Printer 2
      
192.168.30.1      S1 / Proxy
192.168.30.2      S2 / Gateway
      
192.168.40.1      F1 / Gateway
192.168.40.2      VOIP Switch
192.168.40.3      Call Manager Server
192.168.40.4      Client 1
192.168.40.5      Client 2

                                     This the range of IP's      

                                             Network Address :- 192.168.10.0
                                             Subnet Mask :-255.255.255.224
                                             Host IP addresses :-192.168.10.1 –30

                                            Network Address :- 192.168.10.32
                                           Subnet Mask :-255.255.255.224
                                           Host IP addresses :-192.168.10.33 –62


                                            Network Address :- 192.168.10.64
                                            Subnet Mask :-255.255.255.224
                                            Host IP addresses :-192.168.10.65 –94


                                           Network Address :- 192.168.10.96
                                           Subnet Mask :-255.255.255.224
                                            Host IP addresses :-192.168.10.97 –126

                                           Network Address :- 192.168.10.128
                                           Subnet Mask :-255.255.255.224
                                           Host IP addresses :-192.168.10.129 –158


                                          Network Address :- 192.168.10.160
                                           Subnet Mask :-255.255.255.224
                                          Host IP addresses :-192.168.10.161 –190


                                           Network Address :- 192.168.10.192
                                           Subnet Mask :-255.255.255.224
                                          Host IP addresses :-192.168.10.193 -222

 PASET
0
 

Author Comment

by:Paset
ID: 18895022
Here is how the NIC cards on the 2003 server  are s/u for RASS VPN followed by the NIC card for the XP client on a different subnet and VPN

PASET

Public NIC
IP address 192.168.10.41
Subnet mask 255.255.255.224
F0/Gateway 192.168.10.33
Preferred DNS Server 192.168.10.35
Alternative DNS server 192.168.10.36

Under the Advanced TCP/IP settings
WINS addresses, in order of use:
192.168.10.38
192.168.10.37

Checked the Enable LMHOSTS lookup
Checked the NetBIOS setting default
----------------------------------
Private NIC
IP address 192.168.10.40
Subnet mask 255.255.255.224
Default gateway:    not set
Preferred DNS server 192.168.10.36
Alternative DNS server 192.168.10.35

Under the Advanced TCP/IP settings
WINS addresses, in order of use:
192.168.10.38
192.168.10.37

Checked the Enable LMHOSTS lookup
Checked the NetBIOS setting default

When I try to join the Domain I get an error message Dialog box Computer Name Changes, A domain controller for the domain CreativeNet could not be contracted.

On the VPN client running XP pro
TCP/IP properties
Under use the following address
IP address 192.168.10.41
Preferred DNS Server 192.168.10.35
Alternative DNS server 192.168.10.36

Advanced TCP/IP Settings
Preferred DNS server 192.168.10.36
Alternative DNS server 192.168.10.35
WINS addresses, in order of use
192.168.10.38
192.168.10.37

Using PPPT as this time



0

Featured Post

Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

Join & Write a Comment

Creating an OSPF network that automatically (dynamically) reroutes network traffic over other connections to prevent network downtime.
This is an article about my experiences with remote access to my clients (so that I may serve them) and eventually to my home office system via Radmin Remote Control. I have been using remote access for over 10 years and have been improving my metho…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

760 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

24 Experts available now in Live!

Get 1:1 Help Now