Welcome to ISAserver.org

Slow initial network share access

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Firewall] >> VPN >> Slow initial network share access

Page: [1]

Message

<< Older Topic Newer Topic >>

Slow initial network share access - 14.Jan.2007 5:48:19 PM

madsmg

Posts: 6
Joined: 14.Jan.2007
Status: offline

Hi,

I have configured L2TP VPN with a pre-shared key for remote users. When a client connects, he cannot map any network drives in the first approx. 30-45 seconds. The internal servers can be pinged as soon as the connection is established.

Any ideas?

Post #: 1

Featured Links*

RE: Slow initial network share access - 22.Jan.2007 11:04:52 AM

tshinder

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline

Have you assigned a clients a WINS server address?

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to madsmg)

Post #: 2

RE: Slow initial network share access - 22.Jan.2007 12:34:56 PM

madsmg

Posts: 6
Joined: 14.Jan.2007
Status: offline

Hi,

The vpn clients get their address'es and WINS from an Internal DHCP server. I have made a CMAK package which is installed on the client computers. This package runs a "net use" script when the tunnel is up. This fails (system error 53), but approx. 30 seconds later I can run it with success.

I have currently allowed only DNS from the VPN Clients to the Internal network, do I need to enable more protocols?

Any specific settings I need to check on the Internal NIC, or on the VPN clients themselves?

Regards

Mads

(in reply to tshinder)

Post #: 3

RE: Slow initial network share access - 24.Jan.2007 12:15:42 PM

tshinder

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline

You might want to enable NetBIOS to the WINS server.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to madsmg)

Post #: 4

RE: Slow initial network share access - 26.Jan.2007 6:47:18 AM

madsmg

Posts: 6
Joined: 14.Jan.2007
Status: offline

Hi,

No matter what I do, I cannot map drives in the first 30 seconds. I have enabled all protocols from VPN to Internal, and even this doesn't change the result.

I can open RDP connections, ping servers etc. without any problems, but accessing file shares isn't working in the first 30 seconds...

Regards

Mads

(in reply to tshinder)

Post #: 5

RE: Slow initial network share access - 26.Jan.2007 12:07:22 PM

tshinder

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline

Are the VPN clients domain members? If not, maybe if you assign them a primary DNS suffix that will work with the internal domain DNS servers will speed things up.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to madsmg)

Post #: 6