cannot Coonect to internet while trying to configure Nat on win 2003

Posted on 2009-04-01
Medium Priority
Last Modified: 2012-05-06
I am turning my win 2003 into a router via routing and remote access services.  I have configured everything per the instructions off of the micro soft site. ONe nic card configured with ISP  IP info and the other with my local netwrok info.Niether the machine that is the router nor the rest of my network can connect to the internet.

When opening services for people to use do I do that on the card that accesses the internet or card that access the local network ?
In opening services for everyone to use it asks for an IP address for the packets to go to.  I assume this is the cmp[uter that is the router?

Do I need to bridge the two network cards?
Do I need to provide any IP pooling or WAN info from my ISP provider.?
Question by:Longstreet_1861
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 6
  • 4
  • 2
LVL 14

Accepted Solution

theras2000 earned 1500 total points
ID: 24039945
Dude, that's very broad and you've missed a lot of necessary info.
(a) You seem to be quoting the MS guide that you're following, so how about providing a link to your document.
(b) You said you put the ISP's Ip on your external NIC, but how?  Does your ISP plug directly into the LAN port?  Surely you have another device inbetween.
(c) What are these services that you're talking about? e.g. are you hosting a web server on a computer behind the RRAS server?
(d) You may as well give us some computer names and IP addresses of your NICs, to help with the communication.
(e) What exactly have you done to setup the RRAS server?

My only suggestion thus far is to make sure your RRAS server's default gateway is set on the external NIC and pointing to the router/ISP.  Then make sure your workstations' gateways are pointing to the RRAS server's internal NIC.  For any other advice, you'll have to provide more info.

Author Comment

ID: 24040258
I am coming straight off the ISP modem  tHIS ONE OF the linkis  http://support.microsoft.com/kb/816581 This win box is becoming my router for the short term. Used I followed the install wizard for Win 2003 routing and remote access and created created a NAt to connect to a public network.
external nic card IP address is
Internal IP
no default
ponts to IS DNS

My moden ip
LVL 14

Expert Comment

ID: 24040652
OK, well we can ignore the NAT for the moment (which should be easy anyway).
If your modem is IP, it sounds like it is a router.  That means it is already doing the NAT for you.  Do you want to have the router adn your RRAS server doing NAT, or just one of them?
There's 3 ways to do this.
(1) Double-NAT.  Leave your modem as a router, make your RRAS external IP with gateway, and then go into the router config page to forward the service ports back to the RRAS  On the RRAS NAT, forward the service ports back to the web/server or computers that are providing the services.
(2) Router NAT only.  Leave your modem as a router, disable RRAS, let the LAN connect directly to the router, forward the service ports in the router back to the workstations you want.
(3) RRAS NAT only.  Set your RRAS server to IP so that you can access the router config page and change the router to bridged mode.  Now you can set the RRAS server back to the public IP detaiils you listed above.  Forward the ports on the NAT back to the correct workstations.

Your workstations will need a default gateway.  Make it the RRAS internal IP for option 1 & 3.  Make it for option 2.
Is this making sense?
Get 15 Days FREE Full-Featured Trial

Benefit from a mission critical IT monitoring with Monitis Premium or get it FREE for your entry level monitoring needs.
-Over 200,000 users
-More than 300,000 websites monitored
-Used in 197 countries
-Recommended by 98% of users

LVL 14

Expert Comment

ID: 24040684
Sorry I missed my first bit.  I was going to say ignore the NAT part and the port forwarding part for the moment, just work on getting an internet connection to the RRAS server.  To do this, you need to config the external NIC as in option 3 and then test the connection.  Ping the modem, ping the IPS gateway, ping google etc.  Then you can decide if you want the modem/router to be a router or a bridge.

Author Comment

ID: 24042423
I have access the the ISP modem and all router services are turned off so I am going to go with option 3.  I understand most of it. I  have access to the ISP router and I do not see bridge option on the router. What would that look like, I have not doen that before..  Thanks

Author Comment

ID: 24042445
Would bridging be the same thing as creating a static route .  
LVL 14

Expert Comment

ID: 24044296
No a static route is different altogether.
Umm the only other word I could think of for bridging is perhaps transparent.  If you tell me your router model I'll find a user guide and point you to the right page/menu.
Can you see like a status page that tells you the WAN IP of the router?  I'm just curious if it has one or not.  If you're not in bridged mode yet, it should be the same public IP that you mentioned.  Although turning off routing features should mean you are in bridged mode already.

There's one other thing that concerns me.  It could be a security risk posting your actual IP settings, like you did.  I'm sorry I didn't mention it, but generally on these posts you'd give fake details.  Perhaps you could press the Request Attention button and ask a moderator to edit the settings for you.  You could even specify some fake ones of your own choosing.

Author Comment

ID: 24044356
the wan address of our is our static IP which was 70.91.192..209  our router is an SMC8014
LVL 10

Expert Comment

ID: 24045294
"My moden ip"  

But I dont think your modem should not have an IP address, or if it does, it should be the gateway address ( doesn't match subnets of the other settings you gave.)

If you take a plain old computer(or your server), plug it directly into your DSL modem.
Set the PC's connected nic ip address to
at a command prompt ping the gateway:
*this gateway IP should be the modem or ISP equipment at the far end of your dsl line.  

If this does not work, you should call your ISP and tell them that test does not work.  If your dsl modem need to be reconfigured, they will help you with that.

Are you going to use ISA, what kind of firewall do you have?
LVL 14

Expert Comment

ID: 24050970
Here's your manual http://www.smc.com/files/AA/MN_SMC8014-BIZ.pdf and it seems you're right, there is no bridging.  I also notice that this is cable, not DSL, and you modem is called a gateway (usually aka router).

It's possible that Korbus is right, but his directions assume that your modem would already be bridged.  I doubt that's the case, because it seems to be a router itself with the public IP on the external side and a 10.x.x.x IP on the private side.

A good test would be this ... Leave the modem on it's normal settings and put the RRAS server's external NIC into DHCP client mode ("automatically assign an IP address" on the TCP/IP settings), and see if it gets a 10.x.x.x IP from the modem.  If it does, you should actually be able to browse the net like that.

So really, we're looking at option 1.  Now all you need to do is set a static IP of 10.x.x.x on the RRAS's external NIC.  Now you need to do the port forwarding on your RRAS and on the SMC modem (see manual p16).
LVL 14

Expert Comment

ID: 24139413
So ... how'd you go?
LVL 10

Expert Comment

ID: 24172699
yeah, how'd ya fix it?

Featured Post

Get your Disaster Recovery as a Service basics

Disaster Recovery as a Service is one go-to solution that revolutionizes DR planning. Implementing DRaaS could be an efficient process, easily accessible to non-DR experts. Learn about monitoring, testing, executing failovers and failbacks to ensure a "healthy" DR environment.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Quality of Service (QoS) options are nearly endless when it comes to networks today. This article is merely one example of how it can be handled in a hub-n-spoke design using a 3-tier configuration.
New style of hardware planning for Microsoft Exchange server.
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
Monitoring a network: how to monitor network services and why? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the philosophy behind service monitoring and why a handshake validation is critical in network monitoring. Software utilized …

800 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question