Dual NICs and VPN (RRAS)

[David]

I'm trying to install a VPN on a Windows 2000 server. I
have dual NICs (of course) and the internal facing NIC is
configured with DHCP and the external facing NIC has a
static IP, Subnet, and it's Gateway is our Firewall/Router.

Upon initial configuration everything seems to look good.
The server can access my internal network and the
Internet. Once I run the "Routing and Remote Access
Server Setup Wizard" the server is no longer able to
access the Internet or the local network. I get errors in
the event log acknowleding the the DHCP server and DC are
no longer reachable.

Can someone please tell me what I am doing wrong? I can't
get any further than this and, therefore, am not able to
enable my VPN.

Thanks in advance!
David

 

[Marina Roos]

Is the internal nic on top in the bindingorder (Network Connections,
Advanced, advanced)?
Internal nic has a blanc gateway, right?
Both external and internal nic point to your server-IP in the DNS-field,
right?
Make sure you've done the regedits in 292822.

Marina

 

[David]

Thanks Marina!

I'll check and change per your recommendations. I'm a
little unclear regarding the DNS suggestion though. The
internal NIC is DHCP, so nothing is in the DNS field.
However, it obtains the address of our DC as the DNS. For
the external NIC I have tried entering the same IP for the
DNS and also tried leaving blank. Which one should it be?

Thanks again for your help.
David

 

[David]

I changed the binding order so that it lists the internal
NIC on top.

How can the Internal NIC have a blank gateway when it is
DHCP? Is it necessary for the Internal NIC to have a
blank gateway? If so, how do I force this to happen if
it's DHCP?

I'm not sure how I can do the regedits in 292822 when it
says the following:

How can I put the IP of the internal NIC when it is DHCP?

Can Marina or anyone else please help me any further?
Thanks,
David

 

[Marina Roos]

Give the internal nic a static IP.
And only 1 DNS-field should be filled in with that same static IP as well
(if it is DNS-server). How many servers have you got?

Marina

 

[Marina Roos]

Internal nic never has a gateway, because the external nic is. So again,
give the internal nic a static IP.

Marina

 

[David]

Marina,

The VPN server is not a DNS. We have a separate
DNS/DHCP/DC server.

If I assign a static IP for the Internal NIC as well then
how will the VPN clients receive their DHCP info? Is
there a way to configure the DHCP server in the RRAS?

Thanks for your help.
David

 

[David]

Thank you Marina! I think I'm moving along now. If you
get a chance take a look at my recent post regarding RRAS
VPN and Exchange.

Take care!
David