• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 525
  • Last Modified:

how to share internet from server 2008 to another PCs?

1-      I have formatted new server and I installed windows server Enterprise 2008 r2 64bit sp1
2-      I have two NIC on the server, I called the first NIC: LAN and the second is: WAN.
3-      I installed domain controller, DNS, on the server.
4-      Server is connected to the internet via NIC I called it WAN and it takes a real IP.
5-      The other NIC I called it LAN and it is connected to switch where other PCs are connected too.
6-      I need to join 20 PCs to the domain controller, and let them share internet.
7-      What are all possible methods that I can do to connect 20 PCs to the internet VIA this server? Please notice that I cannot install forefront TMG 2010 in the same AD/DC server.
Please help? thanks
0
reoroman
Asked:
reoroman
  • 9
  • 5
  • 2
  • +1
1 Solution
 
joelsplaceCommented:
Question - why this config and not a router?
There is always ICS or routing and remote access
http://technet.microsoft.com/en-us/library/cc754692(WS.10).aspx

0
 
Stelian StanNetwork AdministratorCommented:
To use a router is a better solution even if you use a cheap 60$ router. I would definitely consider a router instead of a expensive server.
0
 
MASTechnical Department HeadCommented:
Router is the first choice

But if you do not have router try this
Network and Sharing Center--> click Manage network connections-->Right-click connection which has internet, and then click Properties-->Sharing tab-->Tick 'Allow other network users.....this computer's internet connection'

http://technet.microsoft.com/en-us/library/cc770507(WS.10).aspx
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 
reoromanAuthor Commented:
okay I agree ... but people needs domain controller.

please read:
Things you should know about ICS
1. When you enable Internet Connection Sharing, IP address of the Interne NIC in the ICS server is always 192.168.0.1. All clients will be assigned other IP addresses in the 192.168.0.x range.
2. You should not enable ICS on the computer as a domain controller, DHCP server, or DNS server.
3. To enable ICS, you must be logged on as a member of the Administrators
4. You may experience some problems if you use NetMeeting and VPN in your ICS network.
5. You should have two NICs.
http://www.chicagotech.net/icssetup.htm

SO I should not enable ICS on domain controller, so what now ? can I use RRAS insted of ICS with domain controller?

0
 
reoromanAuthor Commented:
how to configure RRAS/NAT instead?
0
 
MASTechnical Department HeadCommented:
-->1. When you enable Internet Connection Sharing, IP address of the Interne NIC in the ICS server is always 192.168.0.1. All clients will be assigned other IP addresses in the 192.168.0.x range.

I changed the IP manually in the server and installed
tinyDHCP
to get lease IP for clients
but it was not a DC
0
 
reoromanAuthor Commented:
okay .. so can I use router to make access to internet for all clients and make the server domain controller active directory ?? is it right?
0
 
Stelian StanNetwork AdministratorCommented:
YES. That's right.
0
 
reoromanAuthor Commented:
on windows 7 client i got this settings on (screen shot1) from DHCP router and i can connect to internet normally.

domain controller server IP is static and I put it : 172.20.0.115 ----- 255.255.255.0

in this scenario i got problem that my client windows 7 can connect to internet not to domain controller, if i want to connect it to domain controller I have to change Default gateway and DNS to be 172.20.0.115, and then i cannot connect to internet.

how can i make it to connect to domain controller and internet at the same time?

thanks
1.png
0
 
reoromanAuthor Commented:
When I connect to the Domain, the internet doesn't work.
When I'm not connected to the domain, the internet works ????????????? please help
0
 
reoromanAuthor Commented:
im simple word: i will connect all PCs on the lan to domain controller, then I want them all to be able to acess internet ,,, what is the solutios please?

on the server i have two NIC, one is connected to LAN and the other to WAN (internet). how can i make bridge for the LAN users to access internet VIA server?

0
 
Stelian StanNetwork AdministratorCommented:
Those setting from your attached files should be your WAN settings on the router.
====================
IP Address: 172.20.0.112
SM: 255.255.255.0
GW: 172.20.0.1
DNS: 109.107.128.101
         109.107.131.171
====================
Configure your router as an DHCP server.
Configure your LAN setting on the router. By default the network address is 192.168.0.x but you can change that. Connect a switch to that router. On that switch connect your DC and workstations.

Configure your DC, for example:
====================
IP: 192.168.0.10
NM: 255.255.255.0
GW: 192.168.0.1 (is by default but it can be changed)
DNS: 192.168.0.10
====================
0
 
reoromanAuthor Commented:
Now I have server running as a domain controller and DHCP with only one Ethernet connected to switch and all clients got their IPs from DHCP and I joined them to the domain.

Domain controller server IP:
IP: 192.168.0.1
SM: 255.255.255.0
DG:
DNS: 192.168.0.1
Now how I can also make them access internet?? do i need another another server act as gateway?
0
 
Stelian StanNetwork AdministratorCommented:
I was wrong on my previous post. On the LAN side of the router you have to configure the Ip address for the DC and make the DC a DNS and DHCP server.
0
 
reoromanAuthor Commented:
These settings on the NIC, comes from the ISP modem .
DHCP Enabled: Yes
IPv4 Address: 172.20.0.112
IPv4 Subnet Mask: 255.255.255.0
IPv4 Default Gateway: 172.20.0.1
IPv4 DHCP Server: 172.20.0.1
IPv4 DNS Servers: 109.107.128.101, 109.107.131.171

So I make ADDC server IP:
IP: 172.20.0.20
SM: 255.255.255.0
DG: 172.20.0.1
DNS: 172.20.0.20

On the client
IP: 172.20.0.15
SM: 255.255.255.0
DG: 172.20.0.1
DNS: 172.20.0.20
And I Configure Conditional Forwarders in Windows Server 2008 DNS.

Now it works. Later on I delete the Conditional Forwarders, but server still forward quires and clients can access internet, now how I can restore things as before I Configured Conditional Forwarders, so client cannot access internet. I just want to know. Many thanks
0
 
Stelian StanNetwork AdministratorCommented:
in order to block the clients internet access either through

a) block port 80 using windows firewall .
b) block client access on your router
c) Convert a DNS Server to a Root DNS Server (http://support.microsoft.com/kb/231794)

More info about DNS:
http://support.microsoft.com/kb/231794
http://oreilly.com/pub/a/sysadmin/2007/04/26/5-basic-mistakes-not-to-make-in-dns.html
0
 
reoromanAuthor Commented:
thanks
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 9
  • 5
  • 2
  • +1
Tackle projects and never again get stuck behind a technical roadblock.
Join Now