Routing and Remote Access NAT and VPN, client always drops first packet

-

have configured windows server 2008 nat server 2 network cards. 1 card connects t1 line, , other card connects our network. disabled firewall internal connection, nat filtering ports. every web page try visit client computers seems load or not @ first try, second try load. when ping client, this:

ping google.com -n 10

pinging google.com [209.85.171.100] 32 bytes of data:
request timed out.
reply 209.85.171.100: bytes=32 time=99ms ttl=243
reply 209.85.171.100: bytes=32 time=102ms ttl=243
reply 209.85.171.100: bytes=32 time=99ms ttl=243
reply 209.85.171.100: bytes=32 time=100ms ttl=243
reply 209.85.171.100: bytes=32 time=99ms ttl=243
reply 209.85.171.100: bytes=32 time=101ms ttl=243
reply 209.85.171.100: bytes=32 time=101ms ttl=243
reply 209.85.171.100: bytes=32 time=101ms ttl=243
reply 209.85.171.100: bytes=32 time=103ms ttl=243

ping statistics 209.85.171.100:
    packets: sent = 10, received = 9, lost = 1 (10% loss),
approximate round trip times in milli-seconds:
    minimum = 99ms, maximum = 103ms, average = 100m


it not matter how many packets send, first packet lost.

when ping server this:

ping google.com -n 10

pinging google.com [209.85.171.100] 32 bytes of data:
reply 192.168.1.2: destination host unreachable.
reply 209.85.171.100: bytes=32 time=100ms ttl=243
reply 209.85.171.100: bytes=32 time=99ms ttl=243
reply 209.85.171.100: bytes=32 time=100ms ttl=243
reply 209.85.171.100: bytes=32 time=102ms ttl=243
reply 209.85.171.100: bytes=32 time=100ms ttl=243
request timed out.
reply 209.85.171.100: bytes=32 time=115ms ttl=243
reply 209.85.171.100: bytes=32 time=101ms ttl=243
reply 209.85.171.100: bytes=32 time=169ms ttl=243

ping statistics 209.85.171.100:
    packets: sent = 10, received = 9, lost = 1 (10% loss),
approximate round trip times in milli-seconds:
    minimum = 99ms, maximum = 169ms, average = 110ms

from server, first reply comes internal ip address, , says "destination host unreachable"
but ocasionally lose packet, above. if notice stats, says 1 packet lost, though first 1 host unreachable, , seventh  timed out.

here ip config client:

ipconfig /all

windows ip configuration

   host name . . . . . . . . . . . . : clientname
   primary dns suffix  . . . . . . . : domain.mydomain.org
   node type . . . . . . . . . . . . : hybrid
   ip routing enabled. . . . . . . . : no
   wins proxy enabled. . . . . . . . : no
   dns suffix search list. . . . . . : domian.mydomain.org
                                       mydomain.org

ethernet adapter local area connection:

   connection-specific dns suffix  . : domain.mydomain.org
   description . . . . . . . . . . . : intel(r) 82562v-2 10/100 network connecti
on
   physical address. . . . . . . . . : 00-1a-a0-92-4d-89
   dhcp enabled. . . . . . . . . . . : yes
   autoconfiguration enabled . . . . : yes
   ipv4 address. . . . . . . . . . . : 192.168.1.72(preferred)
   subnet mask . . . . . . . . . . . : 255.255.255.0
   lease obtained. . . . . . . . . . : thursday, december 11, 2008 3:06:36 am
   lease expires . . . . . . . . . . : tuesday, december 23, 2008 3:07:01 am
   default gateway . . . . . . . . . : 192.168.1.2
   dhcp server . . . . . . . . . . . : 192.168.1.2
   dns servers . . . . . . . . . . . : 192.168.1.2
   netbios on tcpip. . . . . . . . : enabled

tunnel adapter local area connection* 6:

   media state . . . . . . . . . . . : media disconnected
   connection-specific dns suffix  . : domain.mydomain.org
   description . . . . . . . . . . . : isatap.domain.mydomain.org
   physical address. . . . . . . . . : 00-00-00-00-00-00-00-e0
   dhcp enabled. . . . . . . . . . . : no
   autoconfiguration enabled . . . . : yes

tunnel adapter local area connection* 7:

   media state . . . . . . . . . . . : media disconnected
   connection-specific dns suffix  . :
   description . . . . . . . . . . . : teredo tunneling pseudo-interface
   physical address. . . . . . . . . : 02-00-54-55-4e-01
   dhcp enabled. . . . . . . . . . . : no
   autoconfiguration enabled . . . . : yes

and here ip config server:


ipconfig /all

windows ip configuration

   host name . . . . . . . . . . . . : servername
   primary dns suffix  . . . . . . . : domain.mydomain.org
   node type . . . . . . . . . . . . : broadcast
   ip routing enabled. . . . . . . . : yes
   wins proxy enabled. . . . . . . . : no
   dns suffix search list. . . . . . : domain.mydomain.org
                                       mydomain.org

ethernet adapter local area connection 2:

   connection-specific dns suffix  . :
   description . . . . . . . . . . . : broadcom netlink (tm) gigabit ethernet
   physical address. . . . . . . . . : 00-1f-e2-61-95-ff
   dhcp enabled. . . . . . . . . . . : no
   autoconfiguration enabled . . . . : yes
   link-local ipv6 address . . . . . : fe80::4120:ec84:fb19:9837%11(preferred)
   ipv4 address. . . . . . . . . . . : 192.168.1.2(preferred)
   subnet mask . . . . . . . . . . . : 255.255.255.0
   default gateway . . . . . . . . . : 0.0.0.0
                                       192.168.1.254
   dns servers . . . . . . . . . . . : 127.0.0.1
   netbios on tcpip. . . . . . . . : disabled

ethernet adapter local area connection:

   connection-specific dns suffix  . :
   description . . . . . . . . . . . : d-link dfe-530tx+ pci adapter
   physical address. . . . . . . . . : 00-40-05-02-ed-e1
   dhcp enabled. . . . . . . . . . . : no
   autoconfiguration enabled . . . . : yes
   link-local ipv6 address . . . . . : fe80::28d2:8730:ae1d:796d%10(preferred)
   ipv4 address. . . . . . . . . . . : 192.168.1.1(preferred)
   subnet mask . . . . . . . . . . . : 255.255.255.0
   default gateway . . . . . . . . . : 192.168.1.254
   dns servers . . . . . . . . . . . : 127.0.0.1
   netbios on tcpip. . . . . . . . : enabled

tunnel adapter local area connection* 8:

   connection-specific dns suffix  . :
   description . . . . . . . . . . . : isatap.{e17568d3-baee-444c-98ac-798ef78bf
a0c}
   physical address. . . . . . . . . : 00-00-00-00-00-00-00-e0
   dhcp enabled. . . . . . . . . . . : no
   autoconfiguration enabled . . . . : yes
   link-local ipv6 address . . . . . : fe80::5efe:192.168.1.2%12(preferred)
   default gateway . . . . . . . . . :
   dns servers . . . . . . . . . . . : 127.0.0.1
   netbios on tcpip. . . . . . . . : disabled

tunnel adapter local area connection* 11:

   connection-specific dns suffix  . :
   description . . . . . . . . . . . : isatap.{dc503ebc-8bae-4d1a-93ce-02c2958a5
483}
   physical address. . . . . . . . . : 00-00-00-00-00-00-00-e0
   dhcp enabled. . . . . . . . . . . : no
   autoconfiguration enabled . . . . : yes
   link-local ipv6 address . . . . . : fe80::5efe:192.168.1.1%14(preferred)
   default gateway . . . . . . . . . :
   dns servers . . . . . . . . . . . : 127.0.0.1
   netbios on tcpip. . . . . . . . : disabled

thanks help.

  i'm sorry, config makes no sense @ all. router connects 2 segments use different ip subnets. both of nics in same ip subnet. cannot work router, nat or otherwise. if working nat router, "public" or external nic have default gateway setting. dg on private or internal nic blank.

    device @ 192.168.1 254? real gateway router , doing nat you. network traffic ends up. used dg lan machines?

    t1 link connect to?




bill


Windows Server  >  Network Infrastructure Servers



Comments

Post a Comment

Popular posts from this blog

Edit Group Policy

-
i have pc has power settings pushed out default domain policy in ad environment. of course on local machine "some settings managed system adminstrator". the machine temporarily no longer in contact domain controller (it's been physically moved , not on same network now) can't updated gpo settings. i believe if edit local group policy won't make difference because of group policy processing , precedence. since it's temporary away ad network, still want use settings of ad user. is there somewhere in registry stored can edit power plan manually until can sync domain? (i need prevent sleeping while plugged in - it's set 1 hour) thanks! allen crist i found site: http://gpsearch.azurewebsites.net/#7916 i able add policy to hkey_local_machine\software\policies\microsoft\power using specs found on site. looks solved issue. i'll report if didn't. thanks! allen crist ...
Read more

Hyper-V VM not reaching OS 'Logon' screen

-
i trying migrate vm vmware hyper-v. so far have done following (seemingly successfully): prepare vmware vm conversion hyper-v format (vhd) within vmware workstation 8.0 environment following steps guide: http://social.technet.microsoft.com/forums/en/winserverhyperv/thread/ef8c12f7-c45d-442e-9a30-c43cd87df3b3   (i.e. remove vm tools, add new ide hard disk…) use vmdk2vhd application convert individual vmdk files vhd ones create new vm in hyper-v exporting in 3 newly converted vhd files at point have checked settings , powered on vm in hyper-v find although windows begins load expected manages reach screen prior login screen saying either of following messages: “windows starting up…” “the active directory rebuilding indices… please wait” to knowledge, albeit limited in area, vm should present me login screen since appears in vmware. if start vm in safe mode can login not desired affect. below details of vm: operating system: windows server 2003 (enterprise edit...
Read more

DNS question...

-
i new setting dns server....my domain name expl. "domain.com"....i set "a" record in forward lookup for  www.domain.com itself...."server's local ip"....i've added no other zones , i seem able resolve names except own....www.domain.com.....also, do i put my isp's dns ip's....for external dns's server can't resolve?....forwarding or in nic setup?......i want setup in my dns server don't have include them on client side..... thanks mark     not put isp dsn server address in settings on nic dc or clients. should point local dns server on dc. set dns forward public dns, such isp. bill Windows Server  >  Network Infrastructure Servers
Read more