Demand Dial router internet access

[Guest]

Hi,

I am using two WIN 2k3 computers configured in site to site VPN with demand
dial routing.
everything is working fine expect the calling router does not have internet
access.

Here is the network layout: Internet --> DSL Modem --> calling router.
gateway for the calling router is the internal NIC of the DSL
Proxy settings for IE is given from ISP.
DNS is 127.0.0.1 since it a DNS and DC
DNS 2 is IP addres of DNS server in HQ.

DNS is properly configured on the calling router since NSLOOKUP can resolve
both internal and external addresses.

when we try to access the internet via the calling router a DNS error
appears if we disconnect the VPN link between the two offices the internet is
works again.

can you please help me solve this problem.

Thanks
Laith

 

[Robert L [MS-MVP]]

what do you mean "DNS is 127.0.0.1 since it a DNS and DC"? Do you use 127.0.0.1 as DNS and DC's IP?

Bob Lin, MS-MVP, MCSE & CNE
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
This posting is provided "AS IS" with no warranties.

Hi,

I am using two WIN 2k3 computers configured in site to site VPN with demand
dial routing.
everything is working fine expect the calling router does not have internet
access.

Here is the network layout: Internet --> DSL Modem --> calling router.
gateway for the calling router is the internal NIC of the DSL
Proxy settings for IE is given from ISP.
DNS is 127.0.0.1 since it a DNS and DC
DNS 2 is IP addres of DNS server in HQ.

DNS is properly configured on the calling router since NSLOOKUP can resolve
both internal and external addresses.

when we try to access the internet via the calling router a DNS error
appears if we disconnect the VPN link between the two offices the internet is
works again.

can you please help me solve this problem.

Thanks
Laith

 

[Guest]

The router is a DNS Server and a DC, as recommended from microsoft we should
point the primary DNs server to its slef when it is a DNS server, so i
cnonfigured the primary DNS settings for the calling router to be as 127.0.0.1

 

[Bill Grant]

This sounds a pretty dicey setup to me. Using a DC as a site-to-site
router (or any sort of router for that matter) is not a great idea. The
statement "proxy settings for IE are given by ISP" worries me a lot. You
have a DC which is using a proxy server at your ISP for Internet access?