LinkBack URL
About LinkBacks
Now that I have narrowed down my issue to a routing problem, I am posting here in the hope that this forum is more active. Previously started in Windows Server 2008R2 forum here.
Basically I am setting up a new office network for a local school. Its a fresh build and currently running in a testbed environment at my home, hence O2 router etc.
The initial requirement is 3xoffice Windows 7 PCs (office1,2,3) running on an active directory domain Windows 2008R2 server - configured as a host (griffin) and two hyper-V virtual machines - one for applications (leo) and the other for security/firewall (eagle).
The host has 4 NIC's, one for office LAN (192.168.3.x) host only, one school LAN (192.168.4.x) host only for future use, one IT LAN (192.168.2.x) host and VMs and one Internet WAN (192.168.1.x) VM only. The security/firewall app runs a trial of Microsoft Forefront TMG that is routing 192.168.2.x and 192.168.1.x.
Internally I am happy with the configuration, however, when I attach a client to the Office or School LANs, they cannot see the internet. I tracked this issue down to a routing issue where the security server (the default gateway of the host) could not route back to the office and school LANs. I thought that I had fixed this by setting up static routes on the security server back to the host, but subsequent testing indicated that this had, in some circumstances (when the destination IP was unavailable) caused circular routing and DHCP and domain membership of the office and school LANs are highly intermittent.
My configuration is as follows...omitted school LAN for clarity.
When the circular route is detected, its basically bouncing between griffin (192.168.2.1) and eagle (192.168.3.11) as follows...Code:office1 - Windows 7 DHCP - IP:192.168.3.100, Mask 255.255.255.0, Gateway 192.168.3.1 (Access type - No Internet access unless static route on eagle added) | | Netgear GS108T Smartswitch Static - IP:192.168.3.2, Mask 255.255.255.0, Gateway 192.168.3.1 | | griffin - Windows 2008R2 Server AD Domain Controller, DNS, DHCP, Hyper-V host Office NIC Static - IP:192.168.3.1, Mask 255.255.255.0 (Access type - Internet) | IT LAN NIC Static - IP:192.168.2.1, Mask 255.255.255.0, Gateway 192.168.2.11 (Access type - Internet) | | eagle - Windows 2008R2 Server (Virtual) IT LAN NIC Static - IP:192.168.2.11, Mask 255.255.255.0 (Access type - No Internet access) static route added dest 192.168.3.0, Mask 255.255.255.0, gateway 192.168.2.1 | Forefront TMG 2010 Eval | Internet NIC Static - IP:192.168.1.50, Mask 255.255.255.0, Gateway 192.168.1.254 (Access type - Internet) | | O2 Router (homebased testbed) Internet NIC Static - IP:192.168.1.254, Mask 255.255.255.0, Gateway as O2 default
C:\Users\Administrator>tracert 192.168.3.100
Tracing route to 192.168.3.100 over a maximum of 30 hops
1 * * * Request timed out.
2 <1 ms <1 ms <1 ms griffin.???.school [192.168.2.1]
3 <1 ms * <1 ms eagle.???.school [192.168.2.11]
4 <1 ms <1 ms <1 ms griffin.???.school [192.168.2.1]
5 <1 ms * <1 ms eagle.???.school [192.168.2.11]
6 <1 ms <1 ms <1 ms griffin.???.school [192.168.2.1]
7 1 ms * <1 ms eagle.???.school [192.168.2.11]
8 <1 ms <1 ms <1 ms griffin.???.school [192.168.2.1]
9 <1 ms * <1 ms eagle.???.school [192.168.2.11]
etc
I am assuming that DHCP, active directory domain join requests and other broadcast messages etc are getting lost in the circular routing as they are broadcast so do not have a valid destination address.
Appreciate any help on this.
Unfortunately, it is a small primary school and finance is very limited. The configuration may not be ideal/best practice, but the fact is, I have to work with what I have available to me.
