can't get from LAN to internet

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I have just rebuilt a crashed W2K server but can't get the internet connection fixed right. Before the crash, users on the LAN side could access the internet through our firewall router connected to the server's 2nd NIC. Now the LAN works fine to the server, and the server connects to the Internet, but the users are unable to get through. The server is configured to act as a DMS/DHCP server providing the users with an IP address in the internal net range. The internet connection is a static DSL connection and the router is configured to act as the gateway for the server through the 2nd NIC card. What do I need to do to enable the users on the LAN to get through to the internet?
 
Do you have options 003, 006 and 015 in DHCP-server, Scope options? Have you
checked the bindingorder of your nics and made sure the internal nic is on
top (Network Connections, Advanced, Advanced)?
DNS on your servernics should *only* point to the server-IP.
Can you post the ipconfig/all from the server?

--
Regards,

Marina

kearneyb said:
I have just rebuilt a crashed W2K server but can't get the internet
Click to expand...
connection fixed right. Before the crash, users on the LAN side could access
the internet through our firewall router connected to the server's 2nd NIC.
Now the LAN works fine to the server, and the server connects to the
Internet, but the users are unable to get through. The server is configured
to act as a DMS/DHCP server providing the users with an IP address in the
internal net range. The internet connection is a static DSL connection and
the router is configured to act as the gateway for the server through the
2nd NIC card. What do I need to do to enable the users on the LAN to get
through to the internet?
 
In addition to Marina's comments, use regedit and go to:

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters

Set IPEnableRouter to a value of 1

Also, make sure the default gateway address you are pumping out with DHCP is
the internal NIC IP for the server and that the server's internal NIC does
not have a default gateway configured.

Doug Sherman
MCSE Win2k/NT4.0, MCSA, MCP+I, MVP

kearneyb said:
I have just rebuilt a crashed W2K server but can't get the internet
Click to expand...
connection fixed right. Before the crash, users on the LAN side could access
the internet through our firewall router connected to the server's 2nd NIC.
Now the LAN works fine to the server, and the server connects to the
Internet, but the users are unable to get through. The server is configured
to act as a DMS/DHCP server providing the users with an IP address in the
internal net range. The internet connection is a static DSL connection and
the router is configured to act as the gateway for the server through the
2nd NIC card. What do I need to do to enable the users on the LAN to get
through to the internet?
 
Options 003, 006, and 015 all set. I can't find a Network Connections, Advanced, Advanced location to check the binding order. Here is the ipconfigg/all data:
Microsoft Windows 2000 [Version 5.00.2195
(C) Copyright 1985-2000 Microsoft Corp

C:\Documents and Settings\Administrator>ipconfig/al

Windows 2000 IP Configuratio

Host Name . . . . . . . . . . . . : P4SERVE
Primary DNS Suffix . . . . . . . : GROVESNET.CO
Node Type . . . . . . . . . . . . : Hybri
IP Routing Enabled. . . . . . . . : Ye
WINS Proxy Enabled. . . . . . . . : N
DNS Suffix Search List. . . . . . : GROVESNET.CO

Ethernet adapter WAN

Connection-specific DNS Suffix .
Description . . . . . . . . . . . : D-Link DFE-530TX+ PCI Adapte
Physical Address. . . . . . . . . : 00-50-BA-54-01-C
DHCP Enabled. . . . . . . . . . . : N
IP Address. . . . . . . . . . . . : 192.168.0.
Subnet Mask . . . . . . . . . . . : 255.255.255.
Default Gateway . . . . . . . . . : 192.168.0.
DNS Servers . . . . . . . . . . . : 206.13.29.1
206.13.30.1

Ethernet adapter LAN

Connection-specific DNS Suffix .
Description . . . . . . . . . . . : Intel(R) PRO/100 VE Network Connect
o
Physical Address. . . . . . . . . : 00-07-E9-9D-79-F
DHCP Enabled. . . . . . . . . . . : N
IP Address. . . . . . . . . . . . : 10.0.0.15
Subnet Mask . . . . . . . . . . . : 255.255.255.
Default Gateway . . . . . . . . .
DNS Servers . . . . . . . . . . . : 10.0.0.15
206.13.29.1
206.13.30.1

Forgot to mention, all users are running W2K Pro

Thanks. Hope you can help. I'm gettoing so frustrated the level in the emergency bottle of single malt is dropping drastically
Kearne
 
In the DNS console on your server, right click the server and select
properties. On the Forwarders tab, make sure you have enabled forwarders
and entered these addresses: 206.13.29.12, 206.13.30.12

You should remove these addresses from your Lan NIC configuration.

Doug Sherman
MCSE Win2k/NT4.0, MCSA, MCP+I, MVP

kearneyb said:
Options 003, 006, and 015 all set. I can't find a Network Connections,
Click to expand...
Advanced, Advanced location to check the binding order. Here is the
ipconfigg/all data:
Microsoft Windows 2000 [Version 5.00.2195]
(C) Copyright 1985-2000 Microsoft Corp.

C:\Documents and Settings\Administrator>ipconfig/all

Windows 2000 IP Configuration

Host Name . . . . . . . . . . . . : P4SERVER
Primary DNS Suffix . . . . . . . : GROVESNET.COM
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : GROVESNET.COM

Ethernet adapter WAN:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : D-Link DFE-530TX+ PCI Adapter
Physical Address. . . . . . . . . : 00-50-BA-54-01-C4
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.0.2
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.1
DNS Servers . . . . . . . . . . . : 206.13.29.12
206.13.30.12

Ethernet adapter LAN:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/100 VE Network Connecti
on
Physical Address. . . . . . . . . : 00-07-E9-9D-79-FD
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 10.0.0.150
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : 10.0.0.150
206.13.29.12
206.13.30.12


Forgot to mention, all users are running W2K Pro.

Thanks. Hope you can help. I'm gettoing so frustrated the level in the
Click to expand...
emergency bottle of single malt is dropping drastically!
 
Control Panel, Network Connections, Advanced, Advanced.
DNS on the nic is not good. It should point to your server-IP only.
You put the ISP-DNS-numbers in the tab Forwarders of DNS-server.

--
Regards,

Marina

kearneyb said:
Options 003, 006, and 015 all set. I can't find a Network Connections,
Click to expand...
Advanced, Advanced location to check the binding order. Here is the
ipconfigg/all data:
Microsoft Windows 2000 [Version 5.00.2195]
(C) Copyright 1985-2000 Microsoft Corp.

C:\Documents and Settings\Administrator>ipconfig/all

Windows 2000 IP Configuration

Host Name . . . . . . . . . . . . : P4SERVER
Primary DNS Suffix . . . . . . . : GROVESNET.COM
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : GROVESNET.COM

Ethernet adapter WAN:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : D-Link DFE-530TX+ PCI Adapter
Physical Address. . . . . . . . . : 00-50-BA-54-01-C4
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.0.2
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.1
DNS Servers . . . . . . . . . . . : 206.13.29.12
206.13.30.12

Ethernet adapter LAN:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/100 VE Network Connecti
on
Physical Address. . . . . . . . . : 00-07-E9-9D-79-FD
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 10.0.0.150
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : 10.0.0.150
206.13.29.12
206.13.30.12


Forgot to mention, all users are running W2K Pro.

Thanks. Hope you can help. I'm gettoing so frustrated the level in the
Click to expand...
emergency bottle of single malt is dropping drastically!
 
Thanks for the suggestions, but some don't work. Can't enable forwarders because its a root server. I did remove the other DNS addresses from the NIC l\LAN configuration. Got the binding order changed so the LAN is first and the WAN second.
I set the IPEnableRouter value to 1. Do I need to reboot for any of these changes to take effect? If not, no change in the problem. If so, I'll have to wait until everyone goes home so I can take down the server. Thanks.
Kearney
 
In order to enable forwarders, remove the forward lookup zone called "."

See: http://support.microsoft.com/default.aspx?scid=kb;en-us;300202#8

Doug Sherman
MCSE Win2k/NT4.0, MCSA, MCP+I, MVP

kearneyb said:
Thanks for the suggestions, but some don't work. Can't enable forwarders
Click to expand...
because its a root server. I did remove the other DNS addresses from the NIC
l\LAN configuration. Got the binding order changed so the LAN is first and
the WAN second.
I set the IPEnableRouter value to 1. Do I need to reboot for any of these
Click to expand...
changes to take effect? If not, no change in the problem. If so, I'll have
to wait until everyone goes home so I can take down the server. Thanks.
 
We're getting close! Trying to connect from a LAN station to MSN.com, the name resolves to the IP address, but apparently times out. Tried Yahoo with same result: resolved to and showed the IP address, then after a period of time put up the "this page cannot e displayed" error message.
Kearney Tried changing the time out setting from 5 seconds to 30 seconds, but no joy.
 
Did you remove the "." zone in DNS-server, like Doug suggested? Does DNS on
both nics point to the server-IP *only*? On the external nic, is only TCP/IP
bound? Have you restarted DHCP-server and DNS-server?
Can you post the ipconfig/all from the server please?

--
Regards,

Marina

kearneyb said:
We're getting close! Trying to connect from a LAN station to MSN.com, the
Click to expand...
name resolves to the IP address, but apparently times out. Tried Yahoo with
same result: resolved to and showed the IP address, then after a period of
time put up the "this page cannot e displayed" error message.
Kearney Tried changing the time out setting from 5 seconds to 30
Click to expand...
seconds, but no joy.
 
Try - In IE on the client, delete all temporay Internet files.

Doug Sherman
MCSE Win2k/NT4.0, MCSA, MCP+I, MVP
..
kearneyb said:
We're getting close! Trying to connect from a LAN station to MSN.com, the
Click to expand...
name resolves to the IP address, but apparently times out. Tried Yahoo with
same result: resolved to and showed the IP address, then after a period of
time put up the "this page cannot e displayed" error message.
Kearney Tried changing the time out setting from 5 seconds to 30
Click to expand...
seconds, but no joy.
 
Deleted the "." zone but did not remove the DNS servers from the WAN NIC. Can't restart everything until the staff all goes home. Will clear the cache on ie on the workstation and reboot everything in the morning before the staff gets in. Meanwhile, here is the ipconfig/all info:

Microsoft Windows 2000 [Version 5.00.2195]
(C) Copyright 1985-2000 Microsoft Corp.

C:\Documents and Settings\Administrator>ipconfig/all

Windows 2000 IP Configuration

Host Name . . . . . . . . . . . . : P4SERVER
Primary DNS Suffix . . . . . . . : GROVESNET.COM
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : GROVESNET.COM

Ethernet adapter LAN:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/100 VE Network Connecti
on
Physical Address. . . . . . . . . : 00-07-E9-9D-79-FD
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 10.0.0.150
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : 10.0.0.150

Ethernet adapter WAN:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : D-Link DFE-530TX+ PCI Adapter
Physical Address. . . . . . . . . : 00-50-BA-54-01-C4
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.0.2
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.1
DNS Servers . . . . . . . . . . . : 206.13.29.12
206.13.30.12

Thanks again all!
Kearney
 
Status report: still can't get through from workstations.

Changed DNS server setting on WAN NIC to same as on LAN NIC (10.0.0.150), Restarted server. Cleared temp files and history from IE. Still attempted to connect showing the IP address of the target site rather than the name but timed out to the "The page cannot be displayed error message."

Next, I hooked into the net a Mac Tibook and had it check network configuration. It got its individual IP address from the DHCP server, showed the 10.0.0.150 gateway address and listed the router at 192.168.0.1. Still unable to complete a connection.

Here are the ipconfig/all settings:
Microsoft Windows 2000 [Version 5.00.2195]
(C) Copyright 1985-2000 Microsoft Corp.

C:\Documents and Settings\Administrator>ipconfig/all

Windows 2000 IP Configuration

Host Name . . . . . . . . . . . . : P4SERVER
Primary DNS Suffix . . . . . . . : GROVESNET.COM
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : GROVESNET.COM

Ethernet adapter LAN:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/100 VE Network Connecti
on
Physical Address. . . . . . . . . : 00-07-E9-9D-79-FD
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 10.0.0.150
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : 10.0.0.150

Ethernet adapter WAN:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : D-Link DFE-530TX+ PCI Adapter
Physical Address. . . . . . . . . : 00-50-BA-54-01-C4
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.0.2
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.1
DNS Servers . . . . . . . . . . . : 10.0.0.150
 
Do you have options 003, 006 and 015 set in DHCP-server, Scope options? 003
should point to your server-IP.

--
Regards,

Marina

kearneyb said:
Status report: still can't get through from workstations.

Changed DNS server setting on WAN NIC to same as on LAN NIC (10.0.0.150),
Click to expand...
Restarted server. Cleared temp files and history from IE. Still attempted to
connect showing the IP address of the target site rather than the name but
timed out to the "The page cannot be displayed error message."
Next, I hooked into the net a Mac Tibook and had it check network
Click to expand...
configuration. It got its individual IP address from the DHCP server, showed
the 10.0.0.150 gateway address and listed the router at 192.168.0.1. Still
unable to complete a connection.
Here are the ipconfig/all settings:
Microsoft Windows 2000 [Version 5.00.2195]
(C) Copyright 1985-2000 Microsoft Corp.

C:\Documents and Settings\Administrator>ipconfig/all

Windows 2000 IP Configuration

Host Name . . . . . . . . . . . . : P4SERVER
Primary DNS Suffix . . . . . . . : GROVESNET.COM
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : GROVESNET.COM

Ethernet adapter LAN:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/100 VE Network Connecti
on
Physical Address. . . . . . . . . : 00-07-E9-9D-79-FD
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 10.0.0.150
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : 10.0.0.150

Ethernet adapter WAN:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : D-Link DFE-530TX+ PCI Adapter
Physical Address. . . . . . . . . : 00-50-BA-54-01-C4
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.0.2
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.1
DNS Servers . . . . . . . . . . . : 10.0.0.150
Click to expand...
 
Back
Top