Enabling VPN on w2k server disables network traffic

[matthewataylor]

When I enable the VPN on my w2k server it can no longer be accessed by the computers on the network. Has anyone know why this would happen?

 

[amasses]

I have exactly the same problem at a site I am workin on at the moment. The service is running W2K Server, with ISA server and 3 NIC's (1 Primary, 1 Unused, and 1 Satelite Card for 1-way-SAT Internet)

I have had some suggestions that this may be due to IP routing problems and that I should add a persistant route to the routing table (route -p add default gw ....)

Apart from that, I am baffeled....

 

[ChicagoTechNet]

this may help. quoted form

http://www.chicagotech.net

Can't access the internal server when remote client establishes VPN

Symptoms: Two offices are connected using a vpn. Both offices run W2K servers, RAS & TS. When office A connects to Office B you can not connect to office A from anywhere except from office B. You can not connect using TS, or a vpn connection. In order to gain access to office A, you have to connect to office B, disconnect the client in RAS, then you can connect to office A.

Resolution: When establishing VPN to the office A, the routing table changes. To fix this issue, disabl the "Use default gateway" on the Office A VPN server.


Robert Lin, MS-MVP, MCSE & CNE
Windows, Network and How to at

http://www.ChicagoTech.net

 

[matthewataylor]

Hi Robert,

I don't have anyone establishing a remote vpn connection yet. As soon as I enable VPN internal clients are bumped off. Would this resolution still work?

 

[ChicagoTechNet]

posting the result of ipconfig /all here may help.

Robert Lin, MS-MVP, MCSE & CNE
Windows, Network and How to at

http://www.ChicagoTech.net

 

[John Lewis]

Are you running a DNS server on the VPN server? There were some issues on W2K with DNS and RRAS running at the same time -- supposed to be fixed in SP3 (so SP4 would cover it).

Failing that, check your event logs, anything odd there?

Also, does TCP/IP connectivity die completely, or just name resolution? What happens if you ping the server by IP address from a workstation? What about a ping from the server to a workstation?

 

[Xemus]

Has anyone got any more information on this?

Similar problem here:
Windows 2003 server with DNS, DHCP, RRAS, and WINS.
As soon as I start RRAS, the network connection dies. No pings from the server to any client, and no pings from clients to the server.
The only difference between ipconfig /all is that IP Routing is enabled when RRAS starts.

System logs say that L2TP requires a certificate which could not be found (Q245476). Checking with Microsoft, it seems that L2tp is enabled but I don't have a certificate installed.

Any help beyond this would be appreciated.

http://www.closedsocket.com