TCP/IP

  • Thread starter Thread starter MAK
  • Start date Start date
M

MAK

We are running Windows 2000 RRAS/VPN servers in a hub spoke
configuration. We also have clients coming in to the hub VPN. Each
branch office has it's own 2000 DC running DHCP and DNS. The hub and
one other brach office are also running WINS in addition to DHCP and
DNS. Each branch office is on it's own subnet. The problem that we
are having is that once in a while when we do a tracert the route
takes us to the proper IP, but wrong hostname. It is like a client
connects to the VPN hub, disconnects, but the name is not released.
When this happens out network begins to crawl. I try a nslookup on
the name and it fails, and a ping by name also fails. I have looked
in WINS and DNS and cleaned out any references to the name/IP mapping,
and after 15 minutes tracert reports only the IP address and no
hostname, and everything is working fine again. Is there a setting
that I can change to make sure the servers release the name/IP mapping
when the client disconnects?
 
It could be a caused by the "virtual" interface in RRAS registering itself
in DNS and/or WINS when VPN becomes active. By default, Netbios over TCP/IP
is enabled on this interface, so it registers in WINS. If the RRAS server is
also a DC, this gives you a multihomed DC. To prevent this you need to make
a registry change to disable Netbt on the internal interface. You only want
the LAN IP to register in WINS.

To prevent Netbt on the RRAS interface.

Open Registry Editor.
Navigate to HKLM\System\CurrentControlSet\Services (continued next line)
\RemoteAccess\Parameters\Ip

Create a new REG_DWORD called DisableNetbiosOverTcpip
Set its value to 1

If this was the problem, after you clean out old records in WINS and
restart RRAS, you should be OK.

If you have DDNS turned on, the same sort of thing can happen with DNS.
Usually setting DNS to only listen on the LAN interface solves the problem.

For more details on this problem, see KB289735 and 292822.
 
The computer is a stand alone VPN/RRAS box. I have tried your
recommendation below, and we will see what happens. :)

Thanks

Mike
 
Back
Top