Problem on Server 2003 Please Help

TheNetNewbie · Post by **TheNetNewbie** » Mon Feb 09, 2009 4:32 pm

Hey guys, this is my first day on this forum, was pushed to signing up due to the fact that after 4 days of attempting to resolve my problem, im still failing.

The Plan

To have a network flow accordingly to this map:

CABLE MODEM
||
Server(2003 R2)
||
Router now acting as a switch with DHCP Turned OFF(Router is a Linksys)
||
OTHER PC'S

CURRENT SETTINGS

I have installed DHCP, DNS, RRAS(NAT)
I have 2 network cards, 1 which goes to WAN(My ISP), 1 which goes to router now acting as a switch
My wan NIC, has EVERYTHING set to be obtained automatically
My LAN NIC, is set to IP addy 192.168.1.100 and SNM 255.255.255.0
my RRAS is configured so that WAN accesses internet and LAN is private, WAN also has firewall enabled
My DNS is set up with forwarders to 3 of my ISP's DNS servers

WHAT I NEED TO ACCOMPLISH
I want to no longer use my router to access internet nor its' DHCP services. I want my router to act solely as a switch with my server granting all PC's access to the internet.

THE PROBLEM
Also my DHCP is leasing IP addresses to others on my network, and i am able to ping each others on the network, i have NO access to the internet, NOT EVEN MY SERVER can access the internet.

THE SOLUTION
I wish I knew, if any of you can please help me resolve this that would be greatly appreciated and a lesson well learned on my part.

Post by **Philip** » Mon Feb 09, 2009 5:14 pm

If you changed the device that connects to your cable modem, you may have to power-cycle the cable modem.

The first step would be to resolve Internet connectivity on the server, since it's directly connected to the cable modem.

If the 2003 Server is set as a DHCP client... What is its IP address ? ( ipconfig in command prompt)
Can you ping the gateway (cable modem) ?
Can you ping external IP addresses (may be a DNS issue if you can't resovle just domains).

If you're using the Linksys router as a switch... You should have nothing connected to the WAN port, WAN should be disabled.

TheNetNewbie · Post by **TheNetNewbie** » Mon Feb 09, 2009 5:23 pm

the server ip address is 192.168.1.100, and i cant ping external ip's either. i think we have some confusion, the cable modem is a gateway? i want all to be server, cable modem jsut gives me internet access from my isp. but yea the server has DHCP installed leasing 192.168.1.100 to 192.168.1.150 the server is 192.168.1.100 running dhcp, dns, rras, wins.

Post by **Philip** » Mon Feb 09, 2009 5:46 pm

The LAN side IP address may be 192.168.1.100... For one NIC.
The other NIC that is connected to the cable modem should have another IP.

You can configure RRAS from: RRAS \ <Server Name> \IP Routing \General and then right click and add the interface or routing protocols as needed.

You may want to read up on RRAS here: http://technet.microsoft.com/en-us/libr ... 81568.aspx

TheNetNewbie · Post by **TheNetNewbie** » Mon Feb 09, 2009 5:47 pm

the other need is set to obtain everything automatically, so you want me to get that IP and ping it from another workstation?

edit: i am familiar with rras, just not sure why this is giving me such issues

TheNetNewbie · Post by **TheNetNewbie** » Mon Feb 09, 2009 6:20 pm

hey i just got back from messing with 2003 server again, i pinged google IP to make sure it wasnt just a dns issue. that wasnt it, cant ping either.

bilbus · Post by **bilbus** » Mon Feb 09, 2009 6:37 pm

Why do you want to loose your router? I can not think of a more unsafe way to connect to the internet.

All you need is one virus to stop the windows firewall .. and your box is dead.

RRAS is a pain to deal with, granted it the windows firewall is no longer a issue .. but its still awful.

The cable modem is not the gateway, it's just a modem (unless it is a router also .. but then that makes what you are doing pointless).

What is your wan ip?

In RRAS did you enable nat, and add both cards to the adapter list .. its not automatic.

Post by **YeOldeStonecat** » Mon Feb 09, 2009 6:46 pm

What make/model cable modem are you using? More and more cable ISPs are shipping combo modem routers (gateway appliances) on their business grade connections.

Please post the full IP information of your servers TCP/IP information, as well as the properties of your servers DHCP scope.

For your external (WAN) NIC, even though you can leave IP/subnet/gateway blank..set to auto, you want to configure the DNS settings for the WAN NIC to be the internal IP address of your server..192.168.1.100 it looks like in your case.

TheNetNewbie · Post by **TheNetNewbie** » Mon Feb 09, 2009 7:37 pm

hey i just reinstalled server 2003, figured why not start over, YeOlde, to what i have read about you, you are VERY knowledgable on this topic, would you please help me set this up?

Post by **YeOldeStonecat** » Mon Feb 09, 2009 8:06 pm

I do encourage you to build your server behind a NAT router, building your server (any Windows OS for that matter)..directly on a public IP address before you get all your updates and antivirus isn't a good idea.

If you have a router, you're better off running the server single NIC....similar to this guide here.
http://www.speedguide.net/read_articles.php?id=1660

If you wiped your server and reinstalled, you'll have to rejoin your workstations to the domain again.

TheNetNewbie · Post by **TheNetNewbie** » Mon Feb 09, 2009 11:04 pm

Ty for all your help, i redid all my configurations and it is working now, everything is fine and onto my next adventure of figuring out how to get server 2003 to allow ports #### through #### lol, as for your concern YeOlde i know, but i have all my updates and my server is as secure as it gets because i am now adding my hardware firewall :-) so it will be pretty safe im hoping :-)

bilbus · Post by **bilbus** » Fri Feb 13, 2009 6:20 pm

If you have a hardware firewall, adding a RRAS (another firewall) is pointless unless you are trying to create a dirty dmz, but you are not.