Windows 2003 network drop problem.

[Raven]

Ok I've got a weird one. I've replaced just about everything I can think
off, and I've still got the following problem.

XP1, XP2, and XP3 clients can connect just find to a Windows 2003 standard
edition server. However for about 15 seconds the server will disappear
from the clients.

Here are some odd parts. It never disappears from all three clients at the
same time. When it does disappear from say XP1, XP1 cannot ping the
server. However at the same time, the server can ping XP1. And xp2, and
XP3 are not having any problems talking to the server.

All XP1 clients have the latest MS updates and patches, and the latest
device drivers for the nic's.

The server is also up to date.

Since the problem occurs from multiple clients, unless it's a bug in XP,
I've decided the problem cannot be there. However I did replace the nic in
one client, and the problem still occurs.

I've replaced the ethernet switch. Still got the problem. Replaced the
cabling, and checked the cables for faults. Still the problem exists.

So I replaced the Nic in the server. Same problem.

Rebuilt and replaced the server, with all new hardware. Same problem.

The server is a DC, with Exchange 2003, dual nic's, NAT and VPN. 1 gig of
RAM, P4 processor.

I'm thinking about a third nic, and trying load balancing to see if that
would make a difference.

Any ideas? One more hint, the problem seems to have gotten worse about two
months ago. Before that I noticed Outlook would sometimes complain about
losing the connection to the server. But now it does it at least once an
hour, for about 15 seconds to 20 seconds. On thing I haven't had a chance
to try is to see while XP1 can't ping the server, can it ping XP2 or XP3?

Anyone else see anything like this? I'm about to install network monitor
and try to look at the packets. I remember some SMB update a couple of
months ago, and have wondered if this had anything to do with it.

Anyone?

 

[Richard G. Harper]

Have you looked at the event logs on the server to see if anything is amiss
there? It wouldn't hurt to look at the clients event logs as well.

--
Richard G. Harper [MVP Shell/User] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm

 

[Raven]

Have you looked at the event logs on the server to see if anything is
amiss there? It wouldn't hurt to look at the clients event logs as
well.

I should have mentioned that was the first place I looked. Both on the
server and the clients. Clean in both the system and application logs.

Thanks for trying though!

 

[Richard G. Harper]

Reading your earlier message again, it looks like you have two NICs in the
server? Are both on the same subnet, or are they on different subnets?
What happens if you disable one of them?

What kind of network device (brand and model) connects all these PCs?

--
Richard G. Harper [MVP Shell/User] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm

 

[Raven]

Reading your earlier message again, it looks like you have two NICs in
the server? Are both on the same subnet, or are they on different
subnets? What happens if you disable one of them?

What kind of network device (brand and model) connects all these PCs?

One NIC connects to my firewall, and through it the Internet. The other
NIC connects to my Intranet. The server is acting as a second firewall
with NAT. As for IP's, completely different IP's and subnets.

Only thing enabled on Internet NIC is IP. Intranet is the first adapter in
Advanced Network Settings.

As for Switches, I've tried two Different SMC switches, a 8 and a 32 port,
and now I have Asound switch I keep as a backup switch. I'm going to go
back to my SMC EZ switch 10/100 since all three switches do the same thing.

As I've said, I've essentially, switched all Nics, all cables, and all
switches. If is a hardware problem, then someone really doesn't like me.

I can also duplicate the problem from multiple clients. I really think
it's just a bug in SP1 or one of the security updates since then. I'm
thinking of taking my old server, install Windows 2003 back on it. Try it
without any updates. Then installing all security updates, except SP1, and
seeing what happens. Then installing SP1, try again. Then the lastest
updates since SP1. And try one more time. I think this might be my only
way to find the faulty update.

I was just hopeing someone knew of hotfix, or some Registry setting
change...

Thanks for trying...

 

[Lanwench [MVP - Exchange]]

One NIC connects to my firewall, and through it the Internet. The other
NIC connects to my Intranet. The server is acting as a second firewall
with NAT. As for IP's, completely different IP's and subnets.

OT, but I strongly discourage multihoming DCs. And in general, even with
non-DC servers, hardware appliances are so inexpensive I don't see the
point.

 

[Richard G. Harper]

Seconded. I'm suspicious that it's related to having two active NIC cards,
and as stated previously, wonder what would happen if you could disable the
one not facing the internal network.

--
Richard G. Harper [MVP Shell/User] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm

 

[Raven]

Seconded. I'm suspicious that it's related to having two active NIC
cards, and as stated previously, wonder what would happen if you could
disable the one not facing the internal network.

I doubt that is the problem. I've been using multiple nics since NT 3.5.
I've setup at least 30 servers over the years and never had any problems
other than fail NIC's, poorly configured protocols, or other configuration
issue.

I've gotten wind that there is a fault in XP. It appears that XP clients,
are having a problem with the network disappearing for a few seconds. Good
old MS isn't saying anything much about it. But if you jump over the the
microsoft.public.network_web news group you will see similar problems with
the TCP/IP stack. It just stops working.

I'm going to do a test, I'm going to setup a Windows 2000 Pro machine and
see if I still have the same problem. If not then I know it's a XP issue.

 

[Guest]

i have a similar issue that is yet unresolved and i am getting desperate
have about 8 servers with gigabit nics connected to a cisco 2970 gigabit
switch,
mostly intel cards updated with latest drivers and turn power off to save
energy is disabled. Ping/connectivity seems to drop for no apparent reason.
start a ping -t and it may miss any number of pings and then pick up and stay
up until you cancel it. the problem only seems to appear on the local lan
not over the wan or when connected via vpn. Please help im desperately
seeking a solution to this. I have tried the same things that the above has
tried. Thanks in advance