Search the Community

Hey, I was unsure whether to post this in Wired Networking or Server 2019 but opted for here. So working on a weird issue currently with a DC not being able to detect the PDC and LocatorCheck failing in DCDIAG, basically I've narrowed it down to that the DC is unable to LDAP Ping the PDC on UDP/389 (tested using PortQuery and NetTools). Myself sat inside the same site behind the same VPN can LDAP Ping the PDC in the other site, logons, replication etc all seem to be fine though for the affected DC. LDAP Ping from other sites DC's is fine except one more that I know of so whatever the issue here is likely the issues there too. All are Server 2019 and are patched fully. Rapidly running out of ideas so any sparks of wisdom anybody can come up with would be greatly appreciated.

I am having a massive stock clearance of Fortigate Firewall, UTM and VPN hardware. More info on the Ebay listing links. All units have expired Support and UTM licenses but we will transfer ownership of the serial number of any purchased units to your own Fortinet support account. (If you have one) You do not need to purchase a license to use these as a normal Firewall/Router/VPN server etc. NON WIRELESS MODELS Fortigate 40C - £40 Fortigate 40C - No License | eBay Fortigate 50B - £30 Fortigate 50B - No License | eBay Fortigate 60C - £70 Fortigate 60C - No License | eBay Fortigate 80C - £120 Fortigate 80C - No License | eBay WIRELESS MODELS FortiWiFi 40C - £50 FortiWiFi 40C - No License | eBay FortiWiFi 50B - £40 FortiWiFi 50B - No License | eBay FortiWifi 60C - £80 FortiWiFi 60C - No License | eBay If anyone wants one outside of Ebay just let me know by PM. Dan

Hello, Okay this might sound rudimentary, but I'm in need of some help here configuring my server. I am fairly new to Server 2012 R2 and I've only recently started studying for my MCSA due to my new job. Listed below is the hardware i currently use for my lab and the issues I've been having. Current hardware setup: So first off I have an ISP modem/router right now that hands out a 10.0.0.x IP address. Then I have a linksys router that I'm using and it hands out a 192.168.1.x IP address. Then I have a netgear 8 port switch. (Only Switch i had on hand) I have an Ethernet cable running from port 1 on the ISP modem to the Internet port on the router. Then I have an Ethernet cable running from port 1 on the router to port 1 on the switch. Then on port 2 on the switch I have an Ethernet cable going to the Windows server. So when I go to build the server I turn off DHCP on the router and leave it with the static 192.168.1.1 IP address with a subnet mask of 255.255.255.0 Then I setup the DHCP server and DNS server with the address scheme of 192.168.1.2 Also I have statically map my servers NIC to the following. IP: 192.168.1.2 Subnet mask: 255.255.255.0 Default gateway: 192.168.1.1 Primary DNS: 192.168.1.2 Secondary DNS: 192.168.1.1 Services Currently Installed on the Server Active Directory- Working DHCP- Working- Scope: 192.168.1.40 - 192.168.1.75 Router: 192.168.1.1 [*]DNS- Working [*]RAS- Not working Current RAS Configuration: I configured it for VPN Access only to test if someone can access docs, software, etc. outside the network. i have the DHCP automatically handing out the DHCP to the clients instead of having an address pool. i have also allowed access for the VPN in AD and I'm using PPTP. -I have port forwarding on the router setup for PPTP: 1723 and i have enabled VPN Passthrough. -on the client side i have configured the vpn connection going to the server "192.168.1.2" and i entered the correct domain credentials, but it wont connect to the network. Currently im stuck at this point and i've watched every video under the sun on how to configure Remote access with 1 NIC and i still cant get the remote access to work.

Surely there will be an easy simple way........... I came from a Frog school which allowed all staff to login to the VLE and see all the network drives so they could theoretically work from home on all the schools data and access what they required. Is there a way or a product which will allow me to implement this at the school I am now at? I have a VPN connection set up for staff with school laptops but as you can imagine not everyone has those! Thanks in advance!!

Hi All, Our head has requested that we provide SIMS.net access for our teaching staff from home but do not want to stump up for the cost of SIMS learning gateway. Has anyone else setup a similar system because I just need a few pointers. Can this be setup through RemoteApp? Some hand holding would be greatly appreciated.

Hello, I'm having a slight issue and needing some advise on VPN's in Windows 8.1. I've setup a VPN using the built in wizard called Incoming Connections however, when I connect to the VPN from another location I can't seen to resolve the Host computer or IP address. I can only resolve IP addresses of things like my NAS box but can't resolve the Host Name of that either or anything else. I'm not sure what the problem seems to be ?

Hi, Just installed Smoothwall and have OpenVPN for remote access. Whats the workaround for running Open VPN without 'run as administrator' for standard users ? Cheers in advance ; )

Hi, We use the YHGFL SMS vpn solution in our schools but I am unable to address the server by host name in a couple of our schools running Server 2012 R2 environments. Connection to vpn is successful but when trying to access drives mapped by \\hostname\Share fails with the following error. "The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you"- I can access without issue by IP address only but I do not wish to use ip mappings in these schools A bit about the environment - single server 2012R2 DFL and FFL. Clients running Windows 7 with a host file entry for the server - server runs infrastructure services, ADDS, dhcp, dns, file and print etc. I stumbled across an article that suggested opening port 88 (udp & tcp) on the server firewall - this has been done - I also noticed that group policy updates etc fail due to lack of connectivity to the server and that the vpn adaptor uses an ip on a 24 bit subnet where as the schools are on 21bit. I digress, posting this in hopes that someone has seen and fixed this problem or one of the tech bod's at Y & H have the answer? Thanks in advance, Chris (MINT)

Afternoon, I have been following the following guide to setup Always on VPN with IKE but I am having issues with IKE not finding a valid machine certificate and I don't know why. Part 1 https://www.petenetlive.com/KB/Article/0001399 ​Part 2 https://www.petenetlive.com/KB/Article/0001403 I am using a Windows Server 2016 with RRAS and NPS. I have a public certificate which is installed under Local Computer > Personal > Certificates and two internal certificates stored under the same location. The one private cert just has the following EKU Client and Server Authentication where as the other cert has Client & Server Authentication as well as IP Security IKE Intermediate. The client machine has a user certificate with client authentication and a machine certificate with client & server authentication. Can anyone help me to see where I am going wrong? I know Microsoft does not have a lot of documentation on the Always On VPN feature but it is something I would like to implement with the new staff laptops. Regards I

Dear all, I'm having some trouble setting up a site to site link between two schools and would be very grateful for any pointers as I'm a bit stuck. SETUP: Firstly, both sites are on SWGFL and we've had the required ipsec ports opened at both ends. Cisco routers at both ends are managed by SWGFL. We also have a pair of Cisco SA540 security appliances which have now been configured as a site to site link, this is up and running (states connection established at both ends). Multiple 2008 R2 Servers run as DC’s at both sites (DHCP/DNS…) currently RRAS isn’t running on any of the DC’s. QUESTION: How would I go about routing the correct traffic though the VPN so I can setup one site as a child domain? Am I correct in assuming adding a static route on the DCs could be the answer? My other thought at the moment is to put a change request in to SWGFL (ISP) and get them to add a new route in to both routers, I’m a bit lost on this one though. Any help would be most appreciated. Thanks in advance, Dave

My school has a modest I.T setup with several (30 approx) PCs connecting to a 2008r2 server, most are desktops but 8 are laptops connecting via WiFi. They all log into the severs AD domain. The server handles DHCP and DNS (LAN 10.0.10.xxx) as is standard. We do have a fixed WAN IP address. The school wants to implement an admin type office in a public shared office space (located about 1½mile away), what would I need (if even possible) to set up a router in the shared office which would allow computers / laptops to connect and login to the server in the main site? Effectively Id like the router to handle some type of VPN tunnel in such a way as the computers connecting to it will be given their IP address from the DHCP server in the main site so that they would be on the same subnet. The router on the shared office will get its IP via DHCP but I have no control over anything the WAN side of the router (I do believe that the public shared office does not have a fixed WAN IP although they've told me very rarely changes) The school have a watchguard T10 device and are on (like everyone else I think) a very tight budget Any pointers would be much appreciated.

Hi All, I wonder what could be the possibilities for sharing files securely on Windows server environment if you are not allowed to use any free services (Drop box, rapidshare.com, etccc) and must be securely published to the Windows Client users ? FYI: at the moment I'm using Juniper SSL VPN to access terminal server environment.

If anyone is trying to connect their SmoothWall (or other VPN device for that matter) to SchoolBase, you may have run into bother recently when they seem to have changed their settings. Our support team reliably inform me that a few folks ran into this (thanks Anton!) and there is now a kb article on it: https://support.smoothwall.net/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=347&nav=0,25 Should apply to any VPN device, not just Smoothie. Hope that helps someone!

Is anyone on be BGFL network able to VPN tonight, are you able to access their servers? I cant seem access Google when connected via VPN either. help

Hello Im looking at setting up a VPN. Our network is connected to a larger network which in turn is connected to the internet. Ive just installed smoothwall express and was all excited by the built in VPN capability which allows you to connect to smoothwall protected lans together over the net via ipsec VPN. However. It wants the red (external) interface to have a static, public facing IP. Then theres stuff about NAT getting in the way (dont fully understand this - new sorry) Can the larger network assign my smoothwall box a public facing IP (provided from its ISP i presume)? Will NAT get in the way? Is NAT always used when you connect to the internet via a 2nd netwrok like this? Whats the difference between a NATed connection in this scenario and a Routed connection or are they one in the same? We dont have to use smoothwall vpn, would open vpn be easier to setup, or tinc? Hope someone can help. Regards Gary

Dear Edugeeks, My company, security software vendor IS Decisions is seeking beta testers for UserLock 5.0, its solution to secure access to Windows-based networks by: - stopping or limiting concurrent sessions - limiting user access per workstation or customizable range - setting time restrictions - providing administrators with session control, alerts and full connectivity analysis and reporting features. UserLock 5.0 beta comes with numerous enhancements and new features, including: - entirely revamped Graphical User Interface (console and Web) - dynamic display of the Active Directory tree - protection of RAS and VPN (RRAS and RADIUS) sessions - protection of WiFi Access Points - … Interested in joining UserLock 5.0 Beta Testing Program? Please complete the brief registration process on IS Decisions’ Web site and we will send you every useful information and provide you with personalized Technical Support during your evaluation. Thank you in advance for your feedback about UserLock 5.0!

Morning all over the past few weeks we have had problems with the ADSL line that comes in to school for monitoring the CCTV. The CCTV company say it the length on the phone extention to the caretakers office thats causing us the problem and I have no doubt it proberbly is, as it runs the lenght of the school. So I sugested that we put the box ast the other end of school and use the school network to get to the camera box at the other end. which will allow me to set up a vpn and it will give us more use of the costly ADSL line we have. Now comes the problem while I did a ccna course a few years ago since then I have not had the chance to do any thing like this as the only networking stuff I get to do is internal as we have our broadband provided by our LEA and I have resisted the temptation to blow out the password and fiddle. Does any one have a VPN guide for dummys or any tips on what i should be looking out for when it all stops working :-)

I'm looking to setup an always on VPN service for our staff laptops. However, I'd prefer the VPN Server to reside on an isolated network as is best practice. Our firewall is provided by Exa via Link2ICT and is fully managed. I've asked if it's possible for a VLAN to be created on the Exa router and it to be isolated from the rest of the network. They've said an additional VLAN can be created in a different range, however it's not possible for it to be isolated i.e traffic would be free to flow between the subnets which the defeats the purpose of this. I've been given the option of the VLAN or a /30 point to point layer 3 link and handling the routing ourselves (something which I'm not particularly comfortable with) Has anybody had any experience with this type of scenario?, I would approach Exa support directly however, Link2ICT has an agreement with them and so we can't contact them directly Any help is greatly appreciated

Hello, I'm having a few people struggling to get a VPN connection to our 2012 R2 server. We have a static pool of 13 addresses but they don't all get used even though there is demand from remote users ie the connection attempt is rejected even when there is enough IP addresses in the static pool. In this screen shot I'm confused as to what the 192.168.8.192 IP Address is? When the static range was entered it just appeared. Do you need enough free IP address for the range you enter plus the generated IP Address? Many thanks