Trying to setup NAT, client dhcp issue

G

Guest

Hi..

I have a 2000 Server with sp4 acting as DHCP, DNS server and 5 XP clients. I
want to prove to a customer that it is possible to share Internet connection
from W2k server with a normal 56k dialup modem installed on it.
I have read several articles for setting up NAT, and I have few doubts to
clear:

- Should the DHCP server be stopped if an IP Pool is defined under NAT field.
- Should I enable the DNS feature in NAT

The status now is that only the host can connect to the net, while the XP
clients cannot. I have created Demand on Dial interface, configured a static
root for the modem, and created NAT. When I type nslookup from the W2k host
it gives me unkown host.

Any help is appreciated.
 
R

Robert L [MS-MVP]

You don't need to stop DHCP and should enable DNS in NAT. Can the client ping a public IP? if not make sure the NAT enable IP routing; if yes, check the DNS settings.

Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
Hi..

I have a 2000 Server with sp4 acting as DHCP, DNS server and 5 XP clients. I
want to prove to a customer that it is possible to share Internet connection
from W2k server with a normal 56k dialup modem installed on it.
I have read several articles for setting up NAT, and I have few doubts to
clear:

- Should the DHCP server be stopped if an IP Pool is defined under NAT field.
- Should I enable the DNS feature in NAT

The status now is that only the host can connect to the net, while the XP
clients cannot. I have created Demand on Dial interface, configured a static
root for the modem, and created NAT. When I type nslookup from the W2k host
it gives me unkown host.

Any help is appreciated.
 
G

Guest

Thanks Robert.

- Should I enter an IP address pool under NAT settings or it is not required
if using DHCP Server?
- For NAT enable IP routing, could you tell me where exactly?
-for DNS settings, when I do nslookup on the host it replies unknown host
for 192.168.0.1, although I can surf the net. but I cannot ping any website
by name or IP. Any ideas?
I noticed that the local dns server does not update automatically, moreover
the rollup for sp4 is not installed yet.
 
R

Robert L [MS-MVP]

1. If I want to assign IP range to the VPN clients, or the DHCP is in a router (that may not assign IP to VPN clients), or keep the VPN clients from my network, I use Static Address Pool. If you have a Windows DHCP server, you don't need the address pool.

2. ipconfig /all command will show if you have enabled IP routing or not. If not, check this link, routing issues on vpn Resolutions: 1) if you have two NICs in the VPN server, you may need to enable IP Routing. To do this, go to the RRAS>the Properties of the server>IP, ...
www.chicagotech.net/routingissuesonvpn.htm

3. Is 192.168.0.1 local DNS or NAT's DNS?


Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
Thanks Robert.

- Should I enter an IP address pool under NAT settings or it is not required
if using DHCP Server?
- For NAT enable IP routing, could you tell me where exactly?
-for DNS settings, when I do nslookup on the host it replies unknown host
for 192.168.0.1, although I can surf the net. but I cannot ping any website
by name or IP. Any ideas?
I noticed that the local dns server does not update automatically, moreover
the rollup for sp4 is not installed yet.
 
G

Guest

Thanks for the reply.

We do not have any vpn clients, so as you said the pool is not needed.

As for the 192.168.0.1, it is the ip address of the only nic on the server,
so i guess it is for the serever dns. I dont remember if there was any ip
address for the nat dans, the only other ip is a public one for the 56k
modem, and is obtained dynamically from the isp.
 
S

si via WinServerKB.com

Hi

This is confusing....!

If you cannot ping web sites by name or IP but CAN browse to them in a web
browser this suggests that something is blocking ping (or the pages are
cached)!! becuase you can connect on port 80 - http just not connect on
whatever port ping uses. Can you connect to any other external services like
FTP,SMTP,Telnet,IRC,SSL,RDP....you get the idea

Regarding the DNS question, if your XP machines use your DNS server for name
resolution then your DNS should forward (to your ISP ususally) or use root
hints to resolve external DNS requests.

The fact that the server has the IP of 192.168.0.1 suggests at some point ICS
has been enabled as this automatically sets the internal (in this case the
only NIC interface) as your external interface is your dialup connection, to
192.168.0.1. From memory I believe it says "manually configured" too - this
is when you check the status of the connection. Always seemed odd that, it
saying manually configured yet clealy windows configured it as part of
another process (enabling ICS)

With no AD involved I am not sure of the necessity fo only use your internal
DNS server it is a requirement in a domain but you dont mention a domain

An ipconfig from client and server may help

Regards

Simon


Thanks for the reply.

We do not have any vpn clients, so as you said the pool is not needed.

As for the 192.168.0.1, it is the ip address of the only nic on the server,
so i guess it is for the serever dns. I dont remember if there was any ip
address for the nat dans, the only other ip is a public one for the 56k
modem, and is obtained dynamically from the isp.
1. If I want to assign IP range to the VPN clients, or the DHCP is in a router (that may not assign IP to VPN clients), or keep the VPN clients from my network, I use Static Address Pool. If you have a Windows DHCP server, you don't need the address pool.
[quoted text clipped - 42 lines]
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top