Used to be able to VPN/RDP now i can only VPN

Discussion in 'Windows Small Business Server' started by Tony Girgenti, Jun 8, 2005.

  1. Hello.

    If i plug my computer at home directly into the cable modem, i can VPN and
    RDP to my office without a problem. Win XP Pro SP2.

    Now, i brought home a Dell server, installed SBS2003 SP1, no ISA, two nics,
    Linksys router, Belkin switch and plugged cable modem into Linksys router.
    I also plugged the home computer into the Belkin switch.

    Everthing works fine, server and home computers can access internet and
    email just being plugged into switch, not really logging onto server, just
    staying local.

    Problem: Workstation that was able to VPN/RDP, can now VPN but cannot RDP.
    Message "The client could not connect to the remote computer" comes up.

    If i plug computer into switch or cable modem, i'm back to VPN/RDP. Once i
    put it back to switch on network, VPN OK but no RDP.

    I have been trying to fix this problem for weeks now. Any help would be
    greatly appreciated.

    Thanks,
    Tony

    Here are the IPCONFIG /ALL for the home computer, home SBS2003server and
    office SBS2000 server.

    Home computer===========================
    C:\Documents and Settings\Administrator>ipconfig /all

    Windows IP Configuration

    Host Name . . . . . . . . . . . . : TONYHOME
    Primary Dns Suffix . . . . . . . :
    Node Type . . . . . . . . . . . . : Hybrid
    IP Routing Enabled. . . . . . . . : No
    WINS Proxy Enabled. . . . . . . . : No
    DNS Suffix Search List. . . . . . : LakesideOfficeSystemsInc.local

    Ethernet adapter Local Area Connection:

    Connection-specific DNS Suffix . : LakesideOfficeSystemsInc.local
    Description . . . . . . . . . . . : SiS 900 PCI Fast Ethernet
    Adapter
    Physical Address. . . . . . . . . : 00-D0-09-AF-A1-D6
    Dhcp Enabled. . . . . . . . . . . : Yes
    Autoconfiguration Enabled . . . . : Yes
    IP Address. . . . . . . . . . . . : 192.168.16.11
    Subnet Mask . . . . . . . . . . . : 255.255.255.0
    Default Gateway . . . . . . . . . : 192.168.16.2
    DHCP Server . . . . . . . . . . . : 192.168.16.2
    DNS Servers . . . . . . . . . . . : 192.168.16.2
    Primary WINS Server . . . . . . . : 192.168.16.2
    Lease Obtained. . . . . . . . . . : Sunday, June 05, 2005 9:11:01 AM
    Lease Expires . . . . . . . . . . : Monday, June 13, 2005 9:11:01 AM

    Home server==============================
    C:\Documents and Settings\Administrator>ipconfig /all

    Windows IP Configuration

    Host Name . . . . . . . . . . . . : lakeside
    Primary Dns Suffix . . . . . . . : LakesideOfficeSystemsInc.local
    Node Type . . . . . . . . . . . . : Hybrid
    IP Routing Enabled. . . . . . . . : Yes
    WINS Proxy Enabled. . . . . . . . : No
    DNS Suffix Search List. . . . . . : LakesideOfficeSystemsInc.local

    Ethernet adapter Internal Server Local Area Connection:

    Connection-specific DNS Suffix . :
    Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Dual Port Server
    Ada
    pter
    Physical Address. . . . . . . . . : 00-04-23-A5-CF-83
    DHCP Enabled. . . . . . . . . . . : No
    IP Address. . . . . . . . . . . . : 192.168.16.2
    Subnet Mask . . . . . . . . . . . : 255.255.255.0
    Default Gateway . . . . . . . . . :
    DNS Servers . . . . . . . . . . . : 192.168.16.2
    Primary WINS Server . . . . . . . : 192.168.16.2

    Ethernet adapter External Network Connection 2:

    Connection-specific DNS Suffix . :
    Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Dual Port Server
    Ada
    pter #2
    Physical Address. . . . . . . . . : 00-04-23-A5-CF-82
    DHCP Enabled. . . . . . . . . . . : No
    IP Address. . . . . . . . . . . . : 192.168.2.15
    Subnet Mask . . . . . . . . . . . : 255.255.255.0
    Default Gateway . . . . . . . . . : 192.168.2.1
    DNS Servers . . . . . . . . . . . : 192.168.16.2
    NetBIOS over Tcpip. . . . . . . . : Disabled

    C:\Documents and Settings\Administrator>
    Office server==============================
    C:\Documents and Settings\Administrator>ipconfig /all

    Windows 2000 IP Configuration

    Host Name . . . . . . . . . . . . : compexserver
    Primary DNS Suffix . . . . . . . : compex.local
    Node Type . . . . . . . . . . . . : Hybrid
    IP Routing Enabled. . . . . . . . : Yes
    WINS Proxy Enabled. . . . . . . . : No
    DNS Suffix Search List. . . . . . : compex.local

    Ethernet adapter Local Area Connection:

    Connection-specific DNS Suffix . :
    Description . . . . . . . . . . . : 3Com EtherLink III ISA
    (3C509b-Combo
    )
    Physical Address. . . . . . . . . : 00-60-08-A6-40-F6
    DHCP Enabled. . . . . . . . . . . : No
    IP Address. . . . . . . . . . . . : 10.1.1.1
    Subnet Mask . . . . . . . . . . . : 255.255.255.0
    Default Gateway . . . . . . . . . :
    DNS Servers . . . . . . . . . . . : 10.1.1.1
    66.92.224.2
    Primary WINS Server . . . . . . . : 10.1.1.1

    Ethernet adapter External:

    Connection-specific DNS Suffix . :
    Description . . . . . . . . . . . : Intel(R) PRO/100+ Management
    Adapter

    Physical Address. . . . . . . . . : 00-90-27-9D-64-11
    DHCP Enabled. . . . . . . . . . . : No
    IP Address. . . . . . . . . . . . : 192.168.1.2
    Subnet Mask . . . . . . . . . . . : 255.255.255.0
    Default Gateway . . . . . . . . . : 192.168.1.1
    DNS Servers . . . . . . . . . . . : 66.92.224.2
    216.231.41.2
     
    Tony Girgenti, Jun 8, 2005
    #1
    1. Advertisements

  2. I also have Linksys, the WAG54G, the only thing that helped me was to set my
    server as the DMZ host on the router, give that a try.
     
    Gabriel Viljoen, Jun 9, 2005
    #2
    1. Advertisements

  3. Tony Girgenti

    Crina Li Guest

    Hi Tony,

    Thank you for posting in SBS newsgroup.

    Firstly, I suggest you RDP to the server using the following method:

    1. Open http://SBS_IP/remote in Internet Explorer.

    2. Click Connect to Server Desktops.

    3. Choose your SBS server and try to connect.

    If you still cannot RDP to the server, please apply the following hot fix:

    899148 Some firewalls may reject network traffic that originates from
    Windows
    http://support.microsoft.com/?id=899148

    After that, if the problem still exists, please help me to gather the
    following information:

    1. Can you PING the remote RDP server?
    2. Do you mean you can VPN/RDP not via SBS?
    3. The detailed Network diagram. For example: How many switches are there
    in your network? The location of the switch, router, sbs and so on.

    In addition, Leythos' advice regarding the subnet may not correct because
    192.168.16.0/24 and 192.168.1.0/24 are not in the same subnet so it should
    not be the problem.

    Hope the information help and I look forward to your reply.

    Best regards,

    Crina Li (MSFT)

    Microsoft CSS Online Newsgroup Support

    Get Secure! - www.microsoft.com/security

    =====================================================
    When responding to posts, please "Reply to Group" via your newsreader so
    that others may learn and benefit from your issue.
    =====================================================

    This posting is provided "AS IS" with no warranties, and confers no rights.
    --------------------
    | From: "Tony Girgenti" <>
    | Subject: Used to be able to VPN/RDP now i can only VPN
    | Date: Wed, 8 Jun 2005 18:00:27 -0400
    | | Newsgroups:
    microsoft.public.windows.server.sbs,microsoft.public.windowsxp.work_remotely
    ||
    | Hello.
    |
    | If i plug my computer at home directly into the cable modem, i can VPN
    and
    | RDP to my office without a problem. Win XP Pro SP2.
    |
    | Now, i brought home a Dell server, installed SBS2003 SP1, no ISA, two
    nics,
    | Linksys router, Belkin switch and plugged cable modem into Linksys
    router.
    | I also plugged the home computer into the Belkin switch.
    |
    | Everthing works fine, server and home computers can access internet and
    | email just being plugged into switch, not really logging onto server,
    just
    | staying local.
    |
    | Problem: Workstation that was able to VPN/RDP, can now VPN but cannot
    RDP.
    | Message "The client could not connect to the remote computer" comes up.
    |
    | If i plug computer into switch or cable modem, i'm back to VPN/RDP. Once
    i
    | put it back to switch on network, VPN OK but no RDP.
    |
    | I have been trying to fix this problem for weeks now. Any help would be
    | greatly appreciated.
    |
    | Thanks,
    | Tony
    |
    | Here are the IPCONFIG /ALL for the home computer, home SBS2003server and
    | office SBS2000 server.
    |
    | Home computer===========================
    | C:\Documents and Settings\Administrator>ipconfig /all
    |
    | Windows IP Configuration
    |
    | Host Name . . . . . . . . . . . . : TONYHOME
    | Primary Dns Suffix . . . . . . . :
    | Node Type . . . . . . . . . . . . : Hybrid
    | IP Routing Enabled. . . . . . . . : No
    | WINS Proxy Enabled. . . . . . . . : No
    | DNS Suffix Search List. . . . . . : LakesideOfficeSystemsInc.local
    |
    | Ethernet adapter Local Area Connection:
    |
    | Connection-specific DNS Suffix . : LakesideOfficeSystemsInc.local
    | Description . . . . . . . . . . . : SiS 900 PCI Fast Ethernet
    | Adapter
    | Physical Address. . . . . . . . . : 00-D0-09-AF-A1-D6
    | Dhcp Enabled. . . . . . . . . . . : Yes
    | Autoconfiguration Enabled . . . . : Yes
    | IP Address. . . . . . . . . . . . : 192.168.16.11
    | Subnet Mask . . . . . . . . . . . : 255.255.255.0
    | Default Gateway . . . . . . . . . : 192.168.16.2
    | DHCP Server . . . . . . . . . . . : 192.168.16.2
    | DNS Servers . . . . . . . . . . . : 192.168.16.2
    | Primary WINS Server . . . . . . . : 192.168.16.2
    | Lease Obtained. . . . . . . . . . : Sunday, June 05, 2005 9:11:01
    AM
    | Lease Expires . . . . . . . . . . : Monday, June 13, 2005 9:11:01
    AM
    |
    | Home server==============================
    | C:\Documents and Settings\Administrator>ipconfig /all
    |
    | Windows IP Configuration
    |
    | Host Name . . . . . . . . . . . . : lakeside
    | Primary Dns Suffix . . . . . . . : LakesideOfficeSystemsInc.local
    | Node Type . . . . . . . . . . . . : Hybrid
    | IP Routing Enabled. . . . . . . . : Yes
    | WINS Proxy Enabled. . . . . . . . : No
    | DNS Suffix Search List. . . . . . : LakesideOfficeSystemsInc.local
    |
    | Ethernet adapter Internal Server Local Area Connection:
    |
    | Connection-specific DNS Suffix . :
    | Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Dual Port
    Server
    | Ada
    | pter
    | Physical Address. . . . . . . . . : 00-04-23-A5-CF-83
    | DHCP Enabled. . . . . . . . . . . : No
    | IP Address. . . . . . . . . . . . : 192.168.16.2
    | Subnet Mask . . . . . . . . . . . : 255.255.255.0
    | Default Gateway . . . . . . . . . :
    | DNS Servers . . . . . . . . . . . : 192.168.16.2
    | Primary WINS Server . . . . . . . : 192.168.16.2
    |
    | Ethernet adapter External Network Connection 2:
    |
    | Connection-specific DNS Suffix . :
    | Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Dual Port
    Server
    | Ada
    | pter #2
    | Physical Address. . . . . . . . . : 00-04-23-A5-CF-82
    | DHCP Enabled. . . . . . . . . . . : No
    | IP Address. . . . . . . . . . . . : 192.168.2.15
    | Subnet Mask . . . . . . . . . . . : 255.255.255.0
    | Default Gateway . . . . . . . . . : 192.168.2.1
    | DNS Servers . . . . . . . . . . . : 192.168.16.2
    | NetBIOS over Tcpip. . . . . . . . : Disabled
    |
    | C:\Documents and Settings\Administrator>
    | Office server==============================
    | C:\Documents and Settings\Administrator>ipconfig /all
    |
    | Windows 2000 IP Configuration
    |
    | Host Name . . . . . . . . . . . . : compexserver
    | Primary DNS Suffix . . . . . . . : compex.local
    | Node Type . . . . . . . . . . . . : Hybrid
    | IP Routing Enabled. . . . . . . . : Yes
    | WINS Proxy Enabled. . . . . . . . : No
    | DNS Suffix Search List. . . . . . : compex.local
    |
    | Ethernet adapter Local Area Connection:
    |
    | Connection-specific DNS Suffix . :
    | Description . . . . . . . . . . . : 3Com EtherLink III ISA
    | (3C509b-Combo
    | )
    | Physical Address. . . . . . . . . : 00-60-08-A6-40-F6
    | DHCP Enabled. . . . . . . . . . . : No
    | IP Address. . . . . . . . . . . . : 10.1.1.1
    | Subnet Mask . . . . . . . . . . . : 255.255.255.0
    | Default Gateway . . . . . . . . . :
    | DNS Servers . . . . . . . . . . . : 10.1.1.1
    | 66.92.224.2
    | Primary WINS Server . . . . . . . : 10.1.1.1
    |
    | Ethernet adapter External:
    |
    | Connection-specific DNS Suffix . :
    | Description . . . . . . . . . . . : Intel(R) PRO/100+ Management
    | Adapter
    |
    | Physical Address. . . . . . . . . : 00-90-27-9D-64-11
    | DHCP Enabled. . . . . . . . . . . : No
    | IP Address. . . . . . . . . . . . : 192.168.1.2
    | Subnet Mask . . . . . . . . . . . : 255.255.255.0
    | Default Gateway . . . . . . . . . : 192.168.1.1
    | DNS Servers . . . . . . . . . . . : 66.92.224.2
    | 216.231.41.2
    |
    |
    |
    |
     
    Crina Li, Jun 9, 2005
    #3
  4. Hello Crina.

    Thanks for your help.

    I tried the http://SBS_IP/remote link and gor "Page cannot be displayed". I
    also tried your othe link and that did not help.

    To answer your questions:
    I cannot ping the remote rdp server.
    I can VPN/RDP if i don't connect my workstation to the home network Belkin
    switch. If i just connect it directly to my cable modem i can VPN/RDP. If
    i plug my workstation into the home network Belkin switch then i can VPN but
    not RDP.

    Here is a digram of my network:
    SBS2003 server (SP1, two nics, no ISA)
    Internal nic (192.168.16.2) goes to Belkin router
    External nic (192.168.2.15) goes to Linksys router(192.168.2.1)
    Linksys router goes to cable modem.
    Workstation nic goes to Belkin switch.

    Thanks,
    Tony
     
    Tony Girgenti, Jun 10, 2005
    #4
  5. Tony Girgenti

    Crina Li Guest

    Hi Tony,

    Thanks for your reply.

    From the situation, you may still to help me to narrow down the problem:

    1. Have you tried to connect the workstation to the Linksys router
    directly? If you have done so, can you VPN and RDP?
    2. Can you try another switch to plug your workstation into the home
    network to see if you can VPN and RDP?

    I look forward to your reply.

    Best regards,

    Crina Li (MSFT)

    Microsoft CSS Online Newsgroup Support

    Get Secure! - www.microsoft.com/security

    =====================================================
    When responding to posts, please "Reply to Group" via your newsreader so
    that others may learn and benefit from your issue.
    =====================================================

    This posting is provided "AS IS" with no warranties, and confers no rights.
    --------------------
    | From: "Tony Girgenti" <>
    | References: <>
    <dmSn#>
    | Subject: Re: Used to be able to VPN/RDP now i can only VPN
    | Date: Fri, 10 Jun 2005 12:45:33 -0400
    | | Newsgroups: microsoft.public.windows.server.sbs
    |
    | Hello Crina.
    |
    | Thanks for your help.
    |
    | I tried the http://SBS_IP/remote link and gor "Page cannot be displayed".
    I
    | also tried your othe link and that did not help.
    |
    | To answer your questions:
    | I cannot ping the remote rdp server.
    | I can VPN/RDP if i don't connect my workstation to the home network
    Belkin
    | switch. If i just connect it directly to my cable modem i can VPN/RDP.
    If
    | i plug my workstation into the home network Belkin switch then i can VPN
    but
    | not RDP.
    |
    | Here is a digram of my network:
    | SBS2003 server (SP1, two nics, no ISA)
    | Internal nic (192.168.16.2) goes to Belkin router
    | External nic (192.168.2.15) goes to Linksys router(192.168.2.1)
    | Linksys router goes to cable modem.
    | Workstation nic goes to Belkin switch.
    |
    | Thanks,
    | Tony
    |
    |
     
    Crina Li, Jun 13, 2005
    #5
  6. Hello Crina.

    I can VPN/RDP successfully if i connect the workstation to the router.

    I can VPN/RDP successfully if i connect the workstation to the cable modem.

    I have tried another switch/hub.

    Thanks,
    Tony
     
    Tony Girgenti, Jun 13, 2005
    #6
  7. Tony Girgenti

    Crina Li Guest

    Hi Tony,

    Thanks for your reply.

    Would you please to help me to confirm the following information?

    1. Do you have configured the CEICW correctly on SBS as following?

    1) Leave the Default Gateway of the internal NIC blank.
    2) Configure both the internal NIC and the external NIC to use the internal
    DNS Service as the DNS Server.
    3) On the DNS Server, create the DNS Forwarder to forward the external DNS
    resolution requests to the ISP's DNS server. See:

    323380 How to configure DNS for Internet access in Windows Server 2003
    http://support.microsoft.com/?id=323380

    4) Strictly followed the instructions in the KB article below to run
    CEICW:

    825763 How to configure Internet access in Windows Small Business Server
    2003
    http://support.microsoft.com/?id=825763

    2. Make sure SBS' internal NIC is the Default Gateway of the workstation.
    3. Check if there are any errors in the event log of the SBS as following:

    1) Select Administrative Tools and click Event Viewer.
    2) In Event Viewer windows, click Application, select log files regarding
    to it.

    You may post the error message which you have changed your private
    information to newsgroup.

    Hope the information help and I look forward to your reply.

    Best regards,

    Crina Li (MSFT)

    Microsoft CSS Online Newsgroup Support

    Get Secure! - www.microsoft.com/security

    =====================================================
    When responding to posts, please "Reply to Group" via your newsreader so
    that others may learn and benefit from your issue.
    =====================================================

    This posting is provided "AS IS" with no warranties, and confers no rights.
    --------------------
    | From: "Tony Girgenti" <>
    || Subject: Re: Used to be able to VPN/RDP now i can only VPN
    | Date: Mon, 13 Jun 2005 16:42:15 -0400
    | | Newsgroups: microsoft.public.windows.server.sbs
    | |
    | Hello Crina.
    |
    | I can VPN/RDP successfully if i connect the workstation to the router.
    |
    | I can VPN/RDP successfully if i connect the workstation to the cable
    modem.
    |
    | I have tried another switch/hub.
    |
    | Thanks,
    | Tony
    |
    |
     
    Crina Li, Jun 14, 2005
    #7
  8. Tony Girgenti

    Crina Li Guest

    Hi Tony,

    Thanks for your reply.

    Today, we noticed that you have posted the same problem question in another
    thread "Use to be able to VPN/RDP. After installing SBS2003, can only
    VPN". David has replied you in that thread. To keep the post be read
    clearly, I will close this thread and then David will assist for you.

    Your understanding is highly appreciated. Thanks again.

    Best regards,

    Crina Li (MSFT)

    Microsoft CSS Online Newsgroup Support

    Get Secure! - www.microsoft.com/security

    =====================================================
    When responding to posts, please "Reply to Group" via your newsreader so
    that others may learn and benefit from your issue.
    =====================================================

    This posting is provided "AS IS" with no warranties, and confers no rights.
    --------------------
    | From: "Tony Girgenti" <>
    | | Subject: Re: Used to be able to VPN/RDP now i can only VPN
    | Date: Tue, 14 Jun 2005 14:07:58 -0400
    | | Newsgroups: microsoft.public.windows.server.sbs
    ||
    | Hello Crina.
    | I have followed your requests. Everything was already set up the way you
    requested, but ichecked it again and reran CEICW.
    | There are no errors in EVENT log.
    | I still have the same problem.
    | Thanks,
    | Tony
    | |
     
    Crina Li, Jun 16, 2005
    #8
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.