Solved

cannot see file shares on certain servers

Posted on 2014-11-17
5
108 Views
Last Modified: 2014-11-26
here's my configuration;
site to site vpn between two sonicwall tz devices
all traffic is allowed between lan and vpn and vice versa in both directions on both devices
servers are on 192.168.0.0 /24 subnet at main building
workstations are on 172.16.32.0 /24 subnet at remote building

problem is, i can access file shares on all servers except a couple that i know of.  connections to 445 from remote office to main office on these servers times out.  telnet to 445 cannot connect (from 172.16.32) .  i can connect to 445 to these servers without issues from the main office subnet (192.168.0)

i can connect to port 53 on the problem servers without problems from remote office to main office.

i'm at a loss here.  445 if open on the server and can be accessed from the local subnet but not from the remote subnet.  however 53 is open (it is a dns server) and i can telnet (on 53) and nslookup to the server from the remote subnet to the local subnet.  from what i see and know, firewall is not an issue.  i've tried adding a route 172.16.32.0 mask 255.255.255.0 192.168.0.109 (sonic wall gateway) on the problem server but that did not make any difference.

any ideas?

thanks in advance.

shawn
0
Comment
Question by:scraby
  • 3
  • 2
5 Comments
 
LVL 53

Expert Comment

by:McKnife
ID: 40448710
That have to be firewalls. They can be based at the server or the client or in between at the gateway/router. Ask your network admin for help.
0
 
LVL 7

Author Comment

by:scraby
ID: 40448926
the firewall is setup to allow everything in both directions between vpn and lan.  traffic passes to other servers through the same path without issues.  i can pass traffic on 445 to one server but not to another.  i can pass traffic on 53 to both servers.  that means outbound firewall on workstation is configured correctly.  it also means that in between firewall is configured correctly.  firewall is not enabled at the server.  i can get to both 53 and 445 from local subnet.  i can get through on 53 and 445 on one server from remote subnet but i can only get through on 53 on another and not on 445.

i think i'm going to have to use a tool like wireshark or logging on the firewall to see where traffic is blocked but that's about where my knowledge drops off.

btw, one man it team here.  i am the network admin
0
 
LVL 53

Assisted Solution

by:McKnife
McKnife earned 100 total points
ID: 40449218
Again: If telnet says it's closed, there's no other possible reason but a firewall. So either there's one that you are not aware of at the moment, or it is configured in a way you are not aware of or it acts defective.
So double check anything and look at all firewall logs. Keep in mind that security software might have enabled firewall components, too.
0
 
LVL 7

Accepted Solution

by:
scraby earned 0 total points
ID: 40449945
well, i did some monitoring and logging on both firewalls and found that traffic was not getting blocked at either of these appliances.  

i wound up deleting a couple of routes that i wasn't too sure about and also added a route on one server that i could not access port 445 on (route add 172.16.32.0 mask 255.255.255.0 192.168.0.109).  it started working.  i don't understand routes very well but i'm assuming that a packet originating from a 172 subnet with a 192 destination cannot get to it's destination if the destination machine does not have that subnet defined in it's routing table.

thanks for the help
0
 
LVL 7

Author Closing Comment

by:scraby
ID: 40466466
Thank for your help.  I think adding the route did the trick.

shawn
0

Featured Post

VMware Disaster Recovery and Data Protection

In this expert guide, you’ll learn about the components of a Modern Data Center. You will use cases for the value-added capabilities of Veeam®, including combining backup and replication for VMware disaster recovery and using replication for data center migration.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
windows7  "Need Network Password" error/request. 43 55
Class object 2 26
File and print server with Ubuntu? 7 23
Best motion capture software for windows 7 5 82
Trying to figure out group policy inheritance and which settings apply where can be a chore.  Here's a very simple summary I've written which might help.  Keep in mind, this is just a high-level conceptual overview where I try to avoid getting bogge…
This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
This Micro Tutorial will teach you how to change your appearance and customize your Windows 7 interface to your unique preference. This will be demonstrated using Windows 7 operating system.
This Micro Tutorial will give you basic overview of the control panel section on Windows 7. It will depth in Network and Internet, Hardware and Sound, etc. This will be demonstrated using Windows 7 operating system.

948 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

23 Experts available now in Live!

Get 1:1 Help Now