Welcome to ISAserver.org

Cannot browse access network shares with VPN

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Firewall] >> VPN >> Cannot browse access network shares with VPN

Page: [1]

Message

<< Older Topic Newer Topic >>

Cannot browse access network shares with VPN - 30.Apr.2007 6:14:04 AM

ChrisTSB

Posts: 4
Joined: 30.Apr.2007
Status: offline

Hi there

I'm new to this website and to ISA2006. I've setup a L2TP VPN connection for our various external XP and Vista machines to use.

The problem I am having is I cannot make my laptops access shared folders on various servers. I have the VPN setup so clients can only access the services I specify rather than being able to access everything.

I find if I tell my client to connect to the IP address of the server (\\132.*.*.*\sharename) it works correctly, i.e. it pops up asking the client to authenticate on the domain and then shows you the available shares.

If I do the same with the server name (\\Servername\sharename) it comes up with a empty folder.

Can anyone give me a clue what I'm missing. I have setup both DNS and WINS on ISA although i'm not even I should be using WINS in this day and age.
I can also PING the servers correctly using their server names so I know I am able to resolve hostnames correctly.

Any ideas what services I should be selecting under the protocols list for my access rule to resolve my problem? I tried doing Microsoft CIF (TCP) without any joy.

Hope someone can help :)

Chris

Post #: 1

Featured Links*

RE: Cannot browse access network shares with VPN - 30.Apr.2007 7:56:41 AM

tshinder

Posts: 47663
Joined: 10.Jan.2001
From: Texas
Status: online

Hi Chris,

I find that WINS is very helpful in VPN situation where they are not assigned primary domain name suffixes correctly.

Also make sure if you're running XP or Vista that you create the registry entries that put the RAS interface on the top of the Interface list.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to ChrisTSB)

Post #: 2

RE: Cannot browse access network shares with VPN - 10.May2007 12:05:34 PM

Lumenvox

Posts: 13
Joined: 4.Jun.2003
Status: offline

Hello Tom,

i'm having the same issue here. VPN client can only access shares using IP addresses in the UNC convention. VPN client are not able to resolve internal network names. My current solution is to use host file on the client machine.
I've set up static IP address for VPN client with DNS and WINS but it's still not resolving computer names.
Can you help?

Thanks,

(in reply to tshinder)

Post #: 3

RE: Cannot browse access network shares with VPN - 10.May2007 12:27:03 PM

elmajdal

Posts: 5106
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

Hi,

can your ping using FQDN ??

An ipconfig /all will provide us with some usefull information also. establish a vpn connection and use the ipconfig /all command

Tarek.

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to Lumenvox)

Post #: 4

RE: Cannot browse access network shares with VPN - 10.May2007 1:00:53 PM

Lumenvox

Posts: 13
Joined: 4.Jun.2003
Status: offline

Hello Tarek,

Thanks for replying to my post.
ipconfig /all

has the following for the PPP adapter
ip address;10.16.0.6
mask; 255.255.255.255
gateway: 10.16.0.6
dns:10.0.0.3 and 10.0.0.2
wins: 10.0.0.2

The netmask should be 255.0.0.0 but there's no mask configuration settings for VPN client in ISA.

peter

(in reply to elmajdal)

Post #: 5

RE: Cannot browse access network shares with VPN - 10.May2007 2:06:27 PM

elmajdal

Posts: 5106
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

Hi,
i need all the output of the ipconfig /all

and u did not answer me, can your ping using FQDN ?? ???

Thanks,
Tarek

< Message edited by elmajdal -- 10.May2007 2:12:20 PM >

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to Lumenvox)

Post #: 6