Solved

SBS2003 server has Internet access but clients don't

Posted on 2007-04-11
14
712 Views
Last Modified: 2013-12-23
An SBS2003 Std server that I manage has stopped providing Internet access to all of its client machines. The server itself can access the Web just fine, and there is also a site-to-site IPSEC VPN which is working as well. The client computers can also access the VPN. There is obviously something at the server end which I need to change to give Internet access back. I've run the SBS Internet Connection Wizard a few times, and the DHCP is set up in the usual way (Router/DNS Server/WINS Server are set to 192.168.10.1), the server's gateway is set to 192.168.1.250 which is the Draytek router. (I've also restarted the server to no avail)
The server is running on one network card so maybe there's some protocol or configuration missing here. Is there some sort of web proxy service needing reconfigured?

A point of note perhaps is that the server was formerly on two NIC's but I changed this to one and also changed the server's internal IP with the wizard; I manually updated the gateway, DNS and DHCP settings etc myself. But everything was running fine for a good number of days before this with no hiccups, so I don't think it's related to that. Also, client machines seem to be able to resolve remote domain names but just can't ping/access them. If you could give me a few pointers this would be appreciated.
0
Comment
Question by:smickell
14 Comments
 
LVL 58

Expert Comment

by:tigermatt
ID: 18888316
You say your client's are configured with their gateway (router) as 192.168.10.1, which also runs your DNS and WINS? From this, I'm assuming that 192.168.10.1 is your SBS server, which is now only running on one network card. In that case, DNS and WINS should point to the SBS server, but the gateway needs to be the IP address of the router, which appears to be running on a separate subnet? (I'm assuming it's /24) If they are on separate subnets, you'll need to change the internal IP address of the router to an address on the same subnet as your SBS and the rest of the network, for example, 192.168.10.254 You can then use that IP address to configure the gateway on the server and all the clients. If you're using dynamic IP addressing, you can do it in the DHCP settings.

Hope this helps

tigermatt :-)
0
 

Author Comment

by:smickell
ID: 18888371
Sorry for not providing more detail. In the past I've posted too much detail in my first question and it seems to scare people away because I often get no replies!
Server: 192.168.10.250, subnet 255.255.255.0
Draytek router: 192.168.10.254,  subnet 255.255.255.0
DHCP clients: 192.168.10.10 up to 10.240,  subnet 255.255.255.0
The Draytek can ping the clients and the clients can ping the Draytek.
All clients are DHCP. The clients were previously using the Draytek as the gateway but I then set them to use the SBS as the gateway instead just an hour or two ago, but no joy. (This was all configured through SBS's DHCP 192.168.10.x scope options)

Another strange thing that happened a few days back is that Internet access re-appeared for the clients, and about 12 hours later it stopped again. Nothing overly strange appeared in the event logs either. I notice the WinHTTP service starting and stopping periodically but this is normal from what I have read.
0
 
LVL 58

Expert Comment

by:tigermatt
ID: 18888390
Hi smickell,

Can you post an ipconfig /all from the server and one workstation?

Many thanks
tigermatt
0
 
LVL 17

Expert Comment

by:kadadi_v
ID: 18888517
Check the DNS address settings on the SBS2003 server and at workstations ,
now your SBS server Ip address ( assuming that internal dns server configured/installed...right..?) is 192.168.10.250 .So configure the ISP dns address in forwarders tab of DNS managment console and at server and client side primary dns address is the server local ip address menas ur=192.168.10.250.



Regards,

V.K.
0
 

Author Comment

by:smickell
ID: 18888671
Windows IP Configuration

   Host Name . . . . . . . . . . . . : LDBSERVER
   Primary Dns Suffix  . . . . . . . : ldb.local
   Node Type . . . . . . . . . . . . : Unknown
   IP Routing Enabled. . . . . . . . : Yes
   WINS Proxy Enabled. . . . . . . . : Yes
   DNS Suffix Search List. . . . . . : ldb.local

Ethernet adapter North_Internal:
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Intel(R) PRO/1000 PT Server Adapter
   Physical Address. . . . . . . . . : 00-15-17-16-C5-3A
   DHCP Enabled. . . . . . . . . . . : No
   IP Address. . . . . . . . . . . . : 192.168.10.1
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 192.168.10.250
   DNS Servers . . . . . . . . . . . : 192.168.10.1
   Primary WINS Server . . . . . . . : 192.168.10.1

That is the output from the server. I'm not in the office at the minute to get access to one of the client computers.

The DNS seems to be configured just the same as my other servers. One thing though - when I go to populate the root hints page (through right-clicking server, 'Configure DNS Server, root hints only), it resolves IP addresses of only about 50% of the root server names - their IP addresses come up as 'unknown.'
In the DNS properties, the Interface is 192.168.10.1 (the server) and the forwarders are two BT Broadband DNS servers. I've just tried pinging the problematic root servers directly from the Draytek and the same problem happens. Maybe it's a problem with BT's (our ISP) DNS servers?
0
 
LVL 58

Expert Comment

by:tigermatt
ID: 18888715
"Maybe it's a problem with BT's (our ISP) DNS servers?"

Are your DNS servers in forwarders set to 194.74.65.68 and 194.72.0.114? I happen to also have a BT Broadband connection and have those set as my DNS forwarders, fortunately everything is working fine for me!
0
Maximize Your Threat Intelligence Reporting

Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

 
LVL 2

Expert Comment

by:cw808s
ID: 18890682
Can you ping 212.58.224.88?
This is the BBC website. If you can ping using an ip address it show that it is the DNS server that are down. Also try a few other ping to IP address in case BBC block pings.
If you dont get anywhere then it must be your connection.

I have a had a few calls to our helpdesk about people who cant access certain websites, this came from the midlands so maybe there is a DNS server down.
0
 

Author Comment

by:smickell
ID: 18890800
Clients can resolve the BBC domain name to an IP address but are unable to ping or access it.  The server can resolve & ping. If the server & Draytek router can both access it then BT's DNS servers are operating fine for us, and there isn't a problem with the actual Internet connection. Surely it has to be something to do with the server as a result of this?
0
 
LVL 58

Expert Comment

by:tigermatt
ID: 18891310
Any ideas when you will be able to get an ipconfig /all from a client machine? That's really what we need to investigate the issue further.

Cheers
tigermatt
0
 

Accepted Solution

by:
smickell earned 0 total points
ID: 18891871
Guess what - it's working again.
I only got to try this after 6pm (close of business) and web access on client PC's was scooting along nicely. This all coincides with the VPN going live last Monday, and it almost certainly looks to be that web access for the clients is falling over as a result of the VPN traffic. Also note my earlier post that web access was up temporarily last week - likely for the same reasons.
The only other change I made, networking-wise, was to the MTU of the Draytek (brought it back up to its original setting of 1500). I will have a better idea in about 18 hours time - if web access fails again, it's down to the router/VPN/something hardware-related, if it stays up, then changing the MTU must have fixed it.

This leads me to strongly believe that it is not software or server/dns/dhcp related. I'm hoping so anyway since I've set up a lot of SBS2003 systems and not had an irregular problem of this nature :)
I have details of the ipconfig/all of a client machine anyway; I'm keeping this question open obviously until I am certain what the cause is. Any more ideas to check on the server, let me know.

Windows IP Configuration
        Host Name . . . . . . . . . . . . : FrontDeskpc
        Primary Dns Suffix  . . . . . . . : ldb.local
        Node Type . . . . . . . . . . . . : Hybrid
        IP Routing Enabled. . . . . . . . : No
        WINS Proxy Enabled. . . . . . . . : No
        DNS Suffix Search List. . . . . . : ldb.local
                                            ldb.local

Ethernet adapter Local Area Connection:
        Connection-specific DNS Suffix  . : ldb.local
        Description . . . . . . . . . . . : Intel(R) PRO/100 VE Network Connection
        Physical Address. . . . . . . . . : 00-02-E3-4D-61-9B
        Dhcp Enabled. . . . . . . . . . . : Yes
        Autoconfiguration Enabled . . . . : Yes
        IP Address. . . . . . . . . . . . : 192.168.10.28
        Subnet Mask . . . . . . . . . . . : 255.255.255.0
        Default Gateway . . . . . . . . . : 192.168.10.250
        DHCP Server . . . . . . . . . . . : 192.168.10.1
        DNS Servers . . . . . . . . . . . : 192.168.10.1
        Primary WINS Server . . . . . . . : 192.168.10.1
        Lease Obtained. . . . . . . . . . : 11 April 2007 08:08:47
        Lease Expires . . . . . . . . . . : 19 April 2007 08:08:47

0
 
LVL 58

Expert Comment

by:tigermatt
ID: 18896348
All seems to be in order with your client ipconfig /all output, the gateway and DNS server is set correctly, which was my main concern before. You seem experienced with SBS 2003, so I doubt it would be a setting on the server.  It could be the router simply isn't capable of both VPN and traffic from the LAN, or maybe the MTU setting was restricting the flow of traffic from VPN users, which could have caused the problem.

The only way really to troubleshoot if it happens again is to disconnect all the VPN clients and see if it comes back online for the LAN.

Hope this helps
0
 
LVL 1

Expert Comment

by:Vee_Mod
ID: 20605194
Closed, 500 points refunded.
Vee_Mod
Community Support Moderator
0
 

Expert Comment

by:Alicart IT Dept.
ID: 33249333
Im having the same exact issue right now with a cisco pix firewall as the router DC works great has steady internet but the clients do not !  We are also on a IPSEC TUNNEL.
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

More or less everybody in the IT market understands the basics of Networking, however when we start talking about Storage Networks, things get a bit dizzier, and this is where I would like to help.
I'm a big fan of Windows' offline folder caching and have used it on my laptops for over a decade.  One thing I don't like about it, however, is how difficult Microsoft has made it for the cache to be moved out of the Windows folder.  Here's how to …
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…
You have products, that come in variants and want to set different prices for them? Watch this micro tutorial that describes how to configure prices for Magento super attributes. Assigning simple products to configurable: We assigned simple products…

747 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now