RAS and DNS problem

[Grant]

Im using:
- windows 2003 server
- 2 physical network cards
- Routing and remote access

The problem is that under DNS there are now 3 IP entries against that server
name and resolving the name takes a couple of seconds. Before RAS was setup,
it was instantaneous so I think I have not configured RAS properly during
the installation. I seem to remember there being an option where it asks
which network card is connected to the internet and which one to assign dhsp
addresses from etc...

Can anyone tell me what the correct procedure is for configuring RAS using 2
network cards?

Greatly appreciated,
Grant

 

[Robert L [MS-MVP]]

this may help, quoted from http://www.ChicagoTech.net
Connection issues on DC, ISA, DNS and WINS server as VPN server

Symptom: You have a Windows 2000/2003 server is configured as VPN running DNS, WINS, you may experience some connection issues. 1) the internal computers can't ping the server by name; 2) if the server is a DC and Master Browser, you may have a computer browsing issue; 3) you may receive Event ID: 4319 - A duplicate name has been detected on the tcp network; 4) You may receive error messages like "No Logon Servers Available to Service your Logon Request" when you try to open file shares or map network drives to the Routing and Remote Access server; 5) if the server is also a DC, you may not be able to logon the domain; 6) if the server is also running ISA, you cannot browse the Web from client computers on the local network, regardless of whether the computers are configured to use Web Proxy or the Microsoft Firewall Client. For example, "The page cannot be displayed" may appear in the Web browser with a "cannot find server or DNS" error message.

Cause: When a VPN client connects to the VPN server, the server creates a PPP adapter to communicate with the remote computer. The server may then register the IP address of this PPP adapter in the DNS or the WINS database. When the internal computers try to connect to the IP address of the PPP adapter, them cannot reach the PPP adapter, then the connections fail.
Don't send e-mail or reply to me except you need consulting services. Posting on MS newsgroup will benefit all readers and you may get more help.

Bob Lin, MS-MVP, MCSE & CNE
How to Setup Windows, Network, Remote Access on http://www.HowToNetworking.com
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
This posting is provided "AS IS" with no warranties.
I recommend Brinkster for web hosting!

Im using:
- windows 2003 server
- 2 physical network cards
- Routing and remote access

The problem is that under DNS there are now 3 IP entries against that server
name and resolving the name takes a couple of seconds. Before RAS was setup,
it was instantaneous so I think I have not configured RAS properly during
the installation. I seem to remember there being an option where it asks
which network card is connected to the internet and which one to assign dhsp
addresses from etc...

Can anyone tell me what the correct procedure is for configuring RAS using 2
network cards?

Greatly appreciated,
Grant

 

[BP]

I seem to remember there being an option where it asks

which network card is connected to the internet and which one to assign dhsp
addresses from etc...

This is one way to provide Internet connection sharing for
local network users and VPN client access, assigning dhcp
server or static IP pool under server properties IP tab.
Under the NAT/basic firewall click new interface add external NIC as public
with header translation checked and new interface Local as private.
Default gateway not assigned to either server NIC then add a static route gateway:
route add 0.0.0.0 mask 0.0.0.0 Internet address metric 1 -p
This stops rras from assigning its dhcp pool addresses to local clients and
assign Win2k3 dhcp server addresses. Local clients gateway is assigned rras
private address, provided no other router is in the mix.
It is necessary to reboot to clear the old Gatways on NIC's out of
server routing table.

 

[Bill Grant]

Three IP entries in DNS? Is it configured as a dialup and/or VPN server?

In most cases you do not need to have the "public" side NIC registered
in your local DNS. Your clients only need to find the private NIC. So you
can disable registration in your DNS of the public NIC.

If the server is configured for remote access, it will get a third IP
when a remote user connects. This is the server end of the RAS/VPN
connection. You need to make a registry change to prevent this address
registering in DNS (and make a few other changes to the config). See KB
289735 .

 

[Grant]

Thanks for your reply!

KB289735 fixed the problem.

Cheers,
Grant