W2003 - RRAS Server - VPN-Dialin setup

T

Treasure

Hi,

i wanted to set up a win2003 server as a dialin VPN server for internet
users to access our lan.
the server has 2 network cards. both in my lan. my gateway to the internet
is a normal router, which registers dyndns. the port 1723 is already
forwarded.

a second w2003 server is the dhcp server of my domain.

when i configure the RRAS server (as vpn dialin) my internal interface gets
no ip address.
i wondered that i dont have a PPP-Adapter in my ipconfig table - but i think
that depends on the error of my internal interface...

i searched microsoft and many websites, but didnt find anything.

any suggestions?
thank you very much in advance!
best regards
 
R

Robert L [MS-MVP]

Not sure about "my internal interface gets no ip address". If you setup the server as RRAS, it is better to have a static IP. posting the result of ipconfig here may help.


Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
Hi,

i wanted to set up a win2003 server as a dialin VPN server for internet
users to access our lan.
the server has 2 network cards. both in my lan. my gateway to the internet
is a normal router, which registers dyndns. the port 1723 is already
forwarded.

a second w2003 server is the dhcp server of my domain.

when i configure the RRAS server (as vpn dialin) my internal interface gets
no ip address.
i wondered that i dont have a PPP-Adapter in my ipconfig table - but i think
that depends on the error of my internal interface...

i searched microsoft and many websites, but didnt find anything.

any suggestions?
thank you very much in advance!
best regards
 
T

Treasure

Hi,
the RRAS-Service is started and thats my ipconfig. it both adapter do have
static addresses - i tested it with and without dhcp - doesnt matter it
never works.
i dont know whats the name of the internal-interface because i use the
german language pack. i got one server on another domain, where everything
works fine. i ll send you this ipconfig too. i didnt find anything how to
config the PPP-Adapters IP....

FIRST: NON-WORKING CONFIG:

Ethernet-Adapter LAN-Verbindung:

Verbindungsspezifisches DNS-Suffix:
Beschreibung . . . . . . . . . . : Intel 8255x-basierter
PCI-Ethernet-Adapter (10/100) #2
Physikalische Adresse . . . . . . : 00-00-E2-6D-CB-E5
DHCP aktiviert . . . . . . . . . : Nein
IP-Adresse. . . . . . . . . . . . : 192.168.99.12
Subnetzmaske . . . . . . . . . . : 255.255.255.0
Standardgateway . . . . . . . . . : 192.168.99.254
DNS-Server . . . . . . . . . . . : 192.168.99.10

Ethernet-Adapter RAS:

Verbindungsspezifisches DNS-Suffix:
Beschreibung . . . . . . . . . . : Intel 8255x-basierter
PCI-Ethernet-Adapter (10/100)
Physikalische Adresse . . . . . . : 00-00-E2-6D-CB-E6
DHCP aktiviert . . . . . . . . . : Nein
IP-Adresse. . . . . . . . . . . . : 192.168.99.14
Subnetzmaske . . . . . . . . . . : 255.255.255.0
Standardgateway . . . . . . . . . :
Primärer WINS-Server . . . . . . : 192.168.99.10

SECOND: WORKING CONFIG:

Ethernet-Adapter Dual Port Gigabit Ethernet Adapter Link A:

Verbindungsspezifisches DNS-Suffix:
Beschreibung . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet
Physikalische Adresse . . . . . . : 00-0F-1F-65-57-48
DHCP aktiviert . . . . . . . . . : Nein
IP-Adresse. . . . . . . . . . . . : 192.168.110.20
Subnetzmaske . . . . . . . . . . : 255.255.255.0
Standardgateway . . . . . . . . . : 192.168.110.1
DNS-Server . . . . . . . . . . . : 192.168.110.10
192.168.110.20

Ethernet-Adapter RAS:

Verbindungsspezifisches DNS-Suffix:
Beschreibung . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet
#2
Physikalische Adresse . . . . . . : 00-0F-1F-65-57-4A
DHCP aktiviert . . . . . . . . . : Nein
IP-Adresse. . . . . . . . . . . . : 192.168.110.21
Subnetzmaske . . . . . . . . . . : 255.255.255.0
Standardgateway . . . . . . . . . :
NetBIOS über TCP/IP . . . . . . . : Deaktiviert

PPP-Adapter RAS-Server-(Einwähl-)Schnittstelle:

Verbindungsspezifisches DNS-Suffix:
Beschreibung . . . . . . . . . . : WAN (PPP/SLIP) Interface
Physikalische Adresse . . . . . . : 00-53-45-00-00-00
DHCP aktiviert . . . . . . . . . : Nein
IP-Adresse. . . . . . . . . . . . : 192.168.110.125
Subnetzmaske . . . . . . . . . . : 255.255.255.255
Standardgateway . . . . . . . . . :


THANKS FOR YOUR SUPPORT!!!
Anything to try?








Not sure about "my internal interface gets no ip address". If you setup the
server as RRAS, it is better to have a static IP. posting the result of
ipconfig here may help.


Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on
http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on
http://www.HowToNetworking.com
Hi,

i wanted to set up a win2003 server as a dialin VPN server for internet
users to access our lan.
the server has 2 network cards. both in my lan. my gateway to the internet
is a normal router, which registers dyndns. the port 1723 is already
forwarded.

a second w2003 server is the dhcp server of my domain.

when i configure the RRAS server (as vpn dialin) my internal interface
gets
no ip address.
i wondered that i dont have a PPP-Adapter in my ipconfig table - but i
think
that depends on the error of my internal interface...

i searched microsoft and many websites, but didnt find anything.

any suggestions?
thank you very much in advance!
best regards
 
B

Bill Grant

Does it work if you try to connect from a local machine using the
server's local IP? It is a good idea to check this before you try to make a
connection from outside.

You will find that the internal interface will get an IP address as soon
as you make a successful connection. This is a symptom that nothing has ever
connected, not a cause.
 
T

Treasure

Hi,

ok, thanks! now i got a ip on the internal interface. connection from inside
works fine, but connection from outside times out with an 619 error on the
client and a 20049 error on the server.

i googled 2 houres today, but didnt find a solution. i didnt know that is
that difficult to set up a ras server.
 
T

Treasure

i forgott to say:
pptp port is forwarded correctly trough the firewall on the lan-cards
address where the server listens to...
 
B

Bill Grant

It isn't difficult if the server is directly connected to the Internet.
Problems arise when you have to get past a router/firewall. You have proved
that your server setup is OK by connecting locally. So your problem is
getting to the server from the Internet.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top