Connection issues between Win 2000 and Win XP machines

J

Jerad Rose

I know this question is asked a lot -- I've found several posts on this when
researching my problem -- so hopefully I can provide the right info up
front.

I have three computers in my network, all of which are behind a router. Two
computers are Windows 2000 Server machines, and the third is a Windows XP
Pro machine. The XP machine is able to ping and connect (through Windows
Explorer) to the Windows 2000 machines just fine -- I'm able to pull/push
files.

However, both Windows 2000 machines are unable to connect to the XP machine
at all via ping or Windows Explorer.

Here are some facts:

- From both Windows 2000 machines, I have tried pinging using both computer
name and IP address of XP machine, and both result in "Request timed out."
- From XP machine, pinging works fine to Windows 2000 machines using both IP
and computer name
- From both Windows 2000 machines, pinging works fine to other Windows 2000
machine using both IP and computer name
- Disabling Windows Firewall on XP machine has no affect at all (pings fail
with it enabled and with it disabled)
- I have no other firewalls running on XP machine (or on either Windows 2000
machine for that matter)
- All three machines are set up with static IP addresses
- TCP/IP settings on all three machines are identical (except, of course,
for the IP address)
- "Enable NetBIOS over TCP/IP" is selected on all three machines
- TCP/IP filtering is disabled on all three machines
- Tried disabling IPSEC Services on XP machine, but has no effect
- File and Printer Sharing for Microsoft Networks is enabled on all three
machines
- I've run out of any other ideas to try

Here are the dumps from IPCONFIG /ALL:

Windows XP machine:

Windows IP Configuration

Host Name . . . . . . . . . . . . : winxp
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/1000 CT Network
Connection
Physical Address. . . . . . . . . : 00-0E-A6-54-F5-C2
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.1.2
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1
DNS Servers . . . . . . . . . . . : 192.168.1.1

Windows 2000 machine #1:

Windows 2000 IP Configuration

Host Name . . . . . . . . . . . . : win2000_1
Primary DNS Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection 2:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : VIA Rhine II Fast Ethernet
Adapter #2
Physical Address. . . . . . . . . : 00-16-17-15-4E-D2
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.1.3
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1
DNS Servers . . . . . . . . . . . : 192.168.1.1

Windows 2000 machine #2:

Windows 2000 IP Configuration

Host Name . . . . . . . . . . . . : win2000_2
Primary DNS Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Gigabyte GN-WP01GS PCI WLAN
Card(Turbo)
Physical Address. . . . . . . . . : 00-16-E6-3B-C6-F8
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.1.4
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1
DNS Servers . . . . . . . . . . . : 192.168.1.1

Thanks in advance for any suggestions you can offer.

Jerad
 
S

Steve Winograd [MVP]

"Jerad Rose" said:
I know this question is asked a lot -- I've found several posts on this when
researching my problem -- so hopefully I can provide the right info up
front.

I have three computers in my network, all of which are behind a router. Two
computers are Windows 2000 Server machines, and the third is a Windows XP
Pro machine. The XP machine is able to ping and connect (through Windows
Explorer) to the Windows 2000 machines just fine -- I'm able to pull/push
files.

However, both Windows 2000 machines are unable to connect to the XP machine
at all via ping or Windows Explorer.

Here are some facts:

- From both Windows 2000 machines, I have tried pinging using both computer
name and IP address of XP machine, and both result in "Request timed out."
- From XP machine, pinging works fine to Windows 2000 machines using both IP
and computer name
- From both Windows 2000 machines, pinging works fine to other Windows 2000
machine using both IP and computer name
- Disabling Windows Firewall on XP machine has no affect at all (pings fail
with it enabled and with it disabled)
- I have no other firewalls running on XP machine (or on either Windows 2000
machine for that matter)
- All three machines are set up with static IP addresses
- TCP/IP settings on all three machines are identical (except, of course,
for the IP address)
- "Enable NetBIOS over TCP/IP" is selected on all three machines
- TCP/IP filtering is disabled on all three machines
- Tried disabling IPSEC Services on XP machine, but has no effect
- File and Printer Sharing for Microsoft Networks is enabled on all three
machines
- I've run out of any other ideas to try

Here are the dumps from IPCONFIG /ALL:

Windows XP machine:

Windows IP Configuration

Host Name . . . . . . . . . . . . : winxp
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/1000 CT Network
Connection
Physical Address. . . . . . . . . : 00-0E-A6-54-F5-C2
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.1.2
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1
DNS Servers . . . . . . . . . . . : 192.168.1.1

Windows 2000 machine #1:

Windows 2000 IP Configuration

Host Name . . . . . . . . . . . . : win2000_1
Primary DNS Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection 2:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : VIA Rhine II Fast Ethernet
Adapter #2
Physical Address. . . . . . . . . : 00-16-17-15-4E-D2
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.1.3
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1
DNS Servers . . . . . . . . . . . : 192.168.1.1

Windows 2000 machine #2:

Windows 2000 IP Configuration

Host Name . . . . . . . . . . . . : win2000_2
Primary DNS Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Gigabyte GN-WP01GS PCI WLAN
Card(Turbo)
Physical Address. . . . . . . . . : 00-16-E6-3B-C6-F8
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.1.4
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1
DNS Servers . . . . . . . . . . . : 192.168.1.1

Thanks in advance for any suggestions you can offer.

Jerad

The problem has all the symptoms of a firewall on XP blocking access
from the other computers. What does XP's Security Center say about
firewall protection?

Do you have a recent antivirus program from Norton or Trend Micro?
Those programs include firewall components that have to be configured.

Have you installed and un-installed a firewall program? That
sometimes leaves bits of the firewall behind. ZoneAlarm is infamous
for that. Look in Msconfig > Startup.
--
Best Wishes,
Steve Winograd, MS-MVP (Windows Networking)

Please post any reply as a follow-up message in the news group
for everyone to see. I'm sorry, but I don't answer questions
addressed directly to me in E-mail or news groups.

Microsoft Most Valuable Professional Program
http://mvp.support.microsoft.com
 
J

Jerad Rose

Thanks, Steve, for your response.

I spent some time this evening going through msconfig, and turning off
several needless (but seemingly harmless) startup applications and services.
However, none of these changes made any difference.

I went back, though, and went through the services (in Adminstrative Tools).
I saw where a VPN service was running -- Cisco Systems, Inc. VPN Service.
This was part of our company's VPN installation. I disabled this and tried
again, and sure enough, I was able to ping my XP system. After checking out
the app, I found an option for "Stateful Firewall" that was enabled. I
restarted the service, disabled this option, and that was exactly what was
blocking my connection. I had no idea that VPN client had a built-in
firewall, and had a heck of a time tracking it down.

Anyway, thanks so much for pointing me in the right direction.

Jerad
 
S

Steve Winograd [MVP]

"Jerad Rose" said:
[snip]
The problem has all the symptoms of a firewall on XP blocking access
from the other computers. What does XP's Security Center say about
firewall protection?

Do you have a recent antivirus program from Norton or Trend Micro?
Those programs include firewall components that have to be configured.

Have you installed and un-installed a firewall program? That
sometimes leaves bits of the firewall behind. ZoneAlarm is infamous
for that. Look in Msconfig > Startup.

Thanks, Steve, for your response.

I spent some time this evening going through msconfig, and turning off
several needless (but seemingly harmless) startup applications and services.
However, none of these changes made any difference.

I went back, though, and went through the services (in Adminstrative Tools).
I saw where a VPN service was running -- Cisco Systems, Inc. VPN Service.
This was part of our company's VPN installation. I disabled this and tried
again, and sure enough, I was able to ping my XP system. After checking out
the app, I found an option for "Stateful Firewall" that was enabled. I
restarted the service, disabled this option, and that was exactly what was
blocking my connection. I had no idea that VPN client had a built-in
firewall, and had a heck of a time tracking it down.

Anyway, thanks so much for pointing me in the right direction.

Jerad

You're welcome, Jerad. You did a nice job of finding the problem, and
I'm glad that I could help. Thanks for reporting the result.
--
Best Wishes,
Steve Winograd, MS-MVP (Windows Networking)

Please post any reply as a follow-up message in the news group
for everyone to see. I'm sorry, but I don't answer questions
addressed directly to me in E-mail or news groups.

Microsoft Most Valuable Professional Program
http://mvp.support.microsoft.com
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top