VPN kills Internet connection

Discussion in 'Windows Small Business Server' started by Richard Johansson, Parnasso, Sep 3, 2007.

  1. When running a SBS 2003 R2 Swedish edition, our company have four different
    offices consisting of one workstation each. The offices want to connect to
    the SBS network in order to get access to Exchange and file resources. In the
    previous installation of SBS 2003 (not R2) the clients created a simple PPTP
    VPN-connection in their computers respective. When setting up such a
    configuration now, the problem occurs that the name resolution doesn't seem
    to work properly as the clients cannot access the shared file resources nor
    the Exchange server through the VPN connection.

    The alternative to using a standard PPTP VPN-connection is to user the
    Connection Manager, being supplied through the Remote Web Workplace. When the
    Connection Manager is installed and a connection is being established with
    it, the network shares, Outlook and Exchange resources are correctly, but all
    connectivity to other Internet resources is being cut off for the clients
    until the SBS Connection is disconnected.

    The server has one NIC today, but another is on its way in. May this solve
    the issue of not being able to surf the Internet simultaneously to being
    connected to the SBS Network?

    The server is sitting behind a D-Link DGL-4300 with both TCP port 1723 and
    IP Protocol 47 forwarded to its static IP address. The adresses which the VPN
    clients receive when connecting to the VPN are in the same subnet as the
    local subnet of the SBS Network, but has not been so historically (in the
    previous installation that actually worked).

    Please help me to restore the Internet connectivity for my employees.

    Yours
    Richard Johansson
     
    Richard Johansson, Parnasso, Sep 3, 2007
    #1
    1. Advertisements

  2. What's the IP Range of your LAN?

    It should be something other than
    192.168.1.xxx
    or
    192.168.0.xxx

    Russ

    --

    Russell Grover
    Microsoft Gold Certified Partner
    Microsoft Certified Small Business Specialist.
    MCP, MCPS, MCNPS, (MCP-SBS)
    http://www.SBITS.Biz


    "Richard Johansson, Parnasso" <Richard Johansson,
    > wrote in message
    news:...
     
    Russ Grover \(SBITS.Biz\), Sep 3, 2007
    #2
    1. Advertisements

  3. My LAN is 192.168.5.¨xxx

     
    Richard Johansson, Parnasso, Sep 3, 2007
    #3
  4. What is Issuing your IP's on your LAN?
    The Linksys or the SBS Server?

    Russ

    --

    Russell Grover
    Microsoft Gold Certified Partner
    Microsoft Certified Small Business Specialist.
    MCP, MCPS, MCNPS, (MCP-SBS)
    http://www.SBITS.Biz


    "Richard Johansson, Parnasso"
     
    Russ Grover \(SBITS.Biz\), Sep 3, 2007
    #4
  5. there is a reason for this, but I don't know of a simple answer without
    checking m'self. So I'm answering to avoid people posting 'red herrings',
    and will try to remind m'self by looking into whether this can be changed
    easily.

    The connection manager setup includes 'use default gateway on remote
    network', avoiding what is known as 'split tunneling'. Split tunneling
    represents a security risk to the network. Theoretically someone could come
    from the internet, through the remote PC, into the LAN via the already
    established VPN. People commonly turn on split tunneling (by unchecking 'use
    default gateway on remote network') but it's not really a very good thing to
    do.

    "Richard Johansson, Parnasso" <Richard Johansson,
    > wrote in message
    news:...
     
    SuperGumby [SBS MVP], Sep 3, 2007
    #5
  6. Gumbys right I guess No Coffee this morning
    I didn't read the post all the way I was thinking "Intranet"

    --

    Russell Grover
    Microsoft Gold Certified Partner
    Microsoft Certified Small Business Specialist.
    MCP, MCPS, MCNPS, (MCP-SBS)
    http://www.SBITS.Biz
     
    Russ Grover \(SBITS.Biz\), Sep 3, 2007
    #6
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.