Solved

Microsoft Server VPN to client XP prof via cisco 2900 switch connected to a 2620 router router on a stick

Posted on 2007-04-10
3
415 Views
Last Modified: 2012-06-22
I have a Microsoft RASS VPN connected to a cisco 2900 switch connected to a cisco 2020  router that I wish to communicate to a XP prof client.  The Server is XP proff or might change it to Server 2003. I'm sure of the setup of the Server and the client I think ,but I can't get communication. I have AD, DHCP and WINS setup on the network and the web connection is DSL. The Server is on a different subnet VPN than the client VPN. I am not trying to connect via the internet. I guess the setup is called a router on stick. Any help with my understanding or soultion would be great

Thanks
PASET
0
Comment
Question by:Paset
  • 2
3 Comments
 
LVL 7

Accepted Solution

by:
TheTull earned 500 total points
ID: 18886919
You're going to have to provide more info, such as subnet info and the way you have your routing setup.

As an FYI, you are going to need to have the router route the GRE protocol between each subnet (this is protocol 47).  With it being a Cisco router, we need to know if you have ACLs setup and whether or not the workstation can communicate with the server period.
0
 

Author Comment

by:Paset
ID: 18887157

Okay I will need to look into how have how to have the router route the GRE protocal 47. We do not have ACL's set.  We do not have communication between work station and server. Follows is our IP addressing scheme. I have a viso diagram of our setup but can't figure how to cut and paste it.  

First the way I am understanding this, I have two NIC cards in the server and one is a public NIC that needs to connect to default gateway of the switch and on to the router gateway. The private NIC needs to be connected to the ethernet port of the switch and than is connected to the router ethernet port.
The client needs to be connected to etherent port of the default gateway of the switch and on to a ethernet port of the router.
To allow the VLAN's to talk to each other I created a trunk port (using dot.1q 1 protocal). I then gave the router a subinterface and IP address within each VLAN and subnet., and then pointed the hosts at the router as their default gateway. The hosts still would need to be connected to the switch on to the ethernet port of the router.

On the swtich I first created static VLAN's followed by assigning ports to the VLAN's . I than setup Inter-VLAN Communication via Router-on-a-Stick. The series of commands I used were closely followed via CCNA protable guide. What I configued does seem to be runnig. I not at the site of the network so I can't copy and paste the running config.

IP Address      Computer
10.209.1.221      External / Proxy
      
192.168.10.33      F0 / Gateway
192.168.10.34      Server Switch
192.168.10.35      AD1 – Primary Active Directory / DNS
192.168.10.36      AD2 – Secondary Active Directory / DNS
192.168.10.37      DHCP – Primary DHCP / Backup WINS
192.168.10.38      WINS – Primary WINS / Backup DHCP
192.168.10.39      Not used
192.168.10.40      Not used
192.168.10.41      RAS – RAS Server
192.168.10.42      WWW – Apache Server
192.168.10.43      SAMBA – Samba Server
192.168.10.44      MAIL – Sendmail Server
      
192.168.10.65      
192.168.10.66      Client 1
192.168.10.67      Client 2
192.168.10.93      Printer 1
192.168.10.94      Printer 2
      
192.168.30.1      S1 / Proxy
192.168.30.2      S2 / Gateway
      
192.168.40.1      F1 / Gateway
192.168.40.2      VOIP Switch
192.168.40.3      Call Manager Server
192.168.40.4      Client 1
192.168.40.5      Client 2

                                     This the range of IP's      

                                             Network Address :- 192.168.10.0
                                             Subnet Mask :-255.255.255.224
                                             Host IP addresses :-192.168.10.1 –30

                                            Network Address :- 192.168.10.32
                                           Subnet Mask :-255.255.255.224
                                           Host IP addresses :-192.168.10.33 –62


                                            Network Address :- 192.168.10.64
                                            Subnet Mask :-255.255.255.224
                                            Host IP addresses :-192.168.10.65 –94


                                           Network Address :- 192.168.10.96
                                           Subnet Mask :-255.255.255.224
                                            Host IP addresses :-192.168.10.97 –126

                                           Network Address :- 192.168.10.128
                                           Subnet Mask :-255.255.255.224
                                           Host IP addresses :-192.168.10.129 –158


                                          Network Address :- 192.168.10.160
                                           Subnet Mask :-255.255.255.224
                                          Host IP addresses :-192.168.10.161 –190


                                           Network Address :- 192.168.10.192
                                           Subnet Mask :-255.255.255.224
                                          Host IP addresses :-192.168.10.193 -222

 PASET
0
 

Author Comment

by:Paset
ID: 18895022
Here is how the NIC cards on the 2003 server  are s/u for RASS VPN followed by the NIC card for the XP client on a different subnet and VPN

PASET

Public NIC
IP address 192.168.10.41
Subnet mask 255.255.255.224
F0/Gateway 192.168.10.33
Preferred DNS Server 192.168.10.35
Alternative DNS server 192.168.10.36

Under the Advanced TCP/IP settings
WINS addresses, in order of use:
192.168.10.38
192.168.10.37

Checked the Enable LMHOSTS lookup
Checked the NetBIOS setting default
----------------------------------
Private NIC
IP address 192.168.10.40
Subnet mask 255.255.255.224
Default gateway:    not set
Preferred DNS server 192.168.10.36
Alternative DNS server 192.168.10.35

Under the Advanced TCP/IP settings
WINS addresses, in order of use:
192.168.10.38
192.168.10.37

Checked the Enable LMHOSTS lookup
Checked the NetBIOS setting default

When I try to join the Domain I get an error message Dialog box Computer Name Changes, A domain controller for the domain CreativeNet could not be contracted.

On the VPN client running XP pro
TCP/IP properties
Under use the following address
IP address 192.168.10.41
Preferred DNS Server 192.168.10.35
Alternative DNS server 192.168.10.36

Advanced TCP/IP Settings
Preferred DNS server 192.168.10.36
Alternative DNS server 192.168.10.35
WINS addresses, in order of use
192.168.10.38
192.168.10.37

Using PPPT as this time



0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Juniper SRX 210H Throwing Error umass0: BBB reset failed, IOERROR 4 14
EIGRP Full Mesh 2 65
ASA - RV130 VPN tunnel, cannot pass traffic 8 53
SSL VPN 3 21
Problem Description:   Couple of months ago we upgraded the ADSL line at our branch office from Home to Business line. The purpose of transforming the service to have static public IP’s. We were in need for public IP’s to publish our web resour…
I've written this article to illustrate how we can implement a Dynamic Multipoint VPN (DMVPN) with both hub and spokes having a dynamically assigned non-broadcast multiple-access (NBMA) network IP (public IP). Here is the basic setup of DMVPN Pha…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…

863 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

28 Experts available now in Live!

Get 1:1 Help Now