Solved

sbs 2008 vpn issue

Posted on 2012-04-10
9
585 Views
Last Modified: 2012-06-21
Hey guys,

I had an issue with an update on my SBS08 server and got it up after hours of frustration.

I have one lingering issue which I hope you can help.

It seems that today when my users log in with the SBS VPN that they are given the wrong IP address. They are given a 169.254.***.** IP address instead of a 192. 168.***.** IP address??

How can I fix this? I see 169.254.151.114 IP address in the DNS properties but it is unchecked.
0
Comment
Question by:sbodnar
  • 3
  • 3
  • 3
9 Comments
 
LVL 8

Expert Comment

by:X-treem
Comment Utility
this is an apipa address, which means the clients didn't get a DHCP address from the SBS server, is the DHCP server running fine, are there firewall rules blocking DHCP traffic for the vpn clients?
0
 
LVL 9

Accepted Solution

by:
Geodash earned 500 total points
Comment Utility
a 169 is an APIPA address, but it doesn't mean a wrong address. It usually means it can see a DHCP server but is not getting an address. Have you checked DHCP on your Server? Check DHCP and the addresses, see if you are out of addresses. What are the lease times on your scope? Do you have scavenging on? Try restarting the DHCP server service see if it helps.
0
 

Author Comment

by:sbodnar
Comment Utility
if I restart the DHCP server will that kick everyone off?
0
 
LVL 9

Expert Comment

by:Geodash
Comment Utility
no. They have the Leases so they are good. Do you notice any errors in your DHCP scope? Look through and see what the machine names are. How many clients do you have vs addresses available?
0
What Security Threats Are You Missing?

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

 
LVL 8

Expert Comment

by:X-treem
Comment Utility
no
0
 

Author Comment

by:sbodnar
Comment Utility
I do not see anything that would throw up a red flag in my DHCP Scope. I see the RRAS icons there and they are showing what would be the right IP address if they were being assigned. All other addresses are correct.
0
 
LVL 9

Expert Comment

by:Geodash
Comment Utility
What I am saying, are you running out of addresses? If scavenging is not setup correctly, you could potentially run out of address if they were not being recycled correctly. Is it only VPN users having issues? Can you take a client on the network, run a ipconfig /release ipconfig /renew and see if you have the same issue with an internal client?
0
 

Author Comment

by:sbodnar
Comment Utility
all internal are fine. It only seems to be VPN.
0
 
LVL 8

Expert Comment

by:X-treem
Comment Utility
If you turn on the logging in the isa, do you see blocked ports hen a vpn connection is made
0

Featured Post

Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

Join & Write a Comment

I wrote this article to explain some important DNS concepts that should be known to avoid some typical configuration errors I often see in forums. I assume that what is described here is the typical behavior of Microsoft DNS client. I don't know …
BIND is the most widely used Name Server. A Name Server is the one that translates a site name to it's IP address. There is a new bug in BIND (https://kb.isc.org/article/AA-01272), affecting all versions of BIND 9 from BIND 9.1.0 (inclusive) thro…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now