circa Mon, 6 Dec 2004 00:31:15 -0000, in
microsoft.public.win2000.active_directory, jas0n (
[email protected])
said,
Is there a reason for the doubt, or is it just a kind of
superstition. If the latter, then I'd say just learn to live with it.
;-)
you asked! ..... see below
.... ive just got a really odd situation, mainly with regards to the
vpn tunnel from this site to the main head office where the intranet
home page/internet proxy/exchange servers live.
here's a copy of a post to another group just to give you an idea of the
'strangeness':-
a long one ....
ive a site having odd network behavoir relating to its vpn connection to
head office. its an adsl vpn using a cisco series 800 router.
internet, intranet & email access is via the vpn link to head office.
initially it was fairly intermittant, had clients complaining of outlook
synchronising failing due to network problems (they work offline and
synch with server across the vpn)
also, IE6 wasnt always able to get to its home page which is an intranet
server. internet access via the proxy is also intermittant.
then it pretty much seemed to be all systems on this site, including the
server now have this problem.
heres what ive done so far:-
replaced adsl filter
replaced cables
replaced adsl router
had config for this site removed, redone, confirmed on the main head
office pix
had config scrutinized.confirmed/redone on the adsl router
confirmed line tests with isp are coming back good.
virusscans with uptodate mcafee enterprise 8.0i dats 1dec, none found
spyware, crapware detection on all systems on site, none found
confirmed windows updates for all critical uptodate and all recommended
relevant to the systems.
replaced network switches (was a planned upgrade anyway)
replaced network cables in the rack to get correct length (many were way
too long!)
replaced server network card and network cable.
hosts files on all machines are default with just the 127.0.0.1
localhost entry
the site laptops have cisco vpn software to dial in from home or through
network broadband .... if you use the network broadband option and
establish a vpn with head office everything is ok and internet, intranet
and email flows.
so .... again thinking this is still an issue with head office pix/vpn
concentrator have been through the mill with the guys contracted to look
after it yet they are adamment it is not anything to do with that side
.... they also have been logging stuff on the adsl cisco box and come up
blank there.
even when having these issues we can always ping, trace to the head
office side so the vpn is up ... its as though something is blocking web
and mail traffic somewhere but not pings, etc.
anyway, i then installed the cisco vpn software onto desktop machines to
start getting them some access to head office for these services
the weird part .....
once installed, these systems can then access the problem services - we
dont even use the software to connect via vpn, we just install it but
dont run it .... .what gives, what is being replaced that is allowing
access ??????????
_______
since that post one of the hard drives failed in the raid array for the
single DC/global catalogue onsite ..... its replaced and up and running
fine.
also, when I replaced the network card in the server it went back to
having problems connecting over the vpn for intranet and internet access
- yet a re-install of the cisco client software again brought that back
to a working state .... its almost as though some sort of binding or tcp
stack has failed and that the cisco software puts this right.
if i were a gambling man id have bet my socks on it being virus /
malware related but having been through the site thoroughly with
virus/malware/windows updates and coming up clean anyway it was really
annoying!
