chris morin

Current setup is as follows
Main office (colorado):
Internet
- DSL Modem (no firewall)
- Netgear FVS318v3 ProSafe VPN Firewall (DHCP server)
- Windows SBS 2003 server & many XP clients (192.168.2.*)
Remote Office (Malaysia):
Internet
- DSL modem (no firewall)
- Netgear FVS318v3 ProSafe VPN Firewall (DHCP server)
- Several XP clients (192.168.3.*); no domain servers

I have followed the Microsoft instructions to configure a firewall for
domains & trusts opening ports on the Colorado side for RPC, NETBIOS, WINS,
LDAP, DNS, SMB & Kerberos. (Q179442) There is a gateway-to-gateway VPN setup
between the Netgear firewalls.

Problem: I can ping clients on both sides of the gateway from either side
by name and IP address. I can map drives and printers using IP address, but
NOT name. It also seems like I am not resolving login requests over the VPN
gateway. I cannot add new computers to the domain using the connectcomputer
utility in SBS; I get error "The list of users and computers cannot be
found...". What is missing in this setup that will allow the clients to
connect to the domain properly?

robert l [ms-mvp]

You may want to use browstat to check the master browser.

Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com


Main office (colorado):
Internet
- DSL Modem (no firewall)
- Netgear FVS318v3 ProSafe VPN Firewall (DHCP server)
- Windows SBS 2003 server & many XP clients (192.168.2.*)
Remote Office (Malaysia):
Internet
- DSL modem (no firewall)
- Netgear FVS318v3 ProSafe VPN Firewall (DHCP server)
- Several XP clients (192.168.3.*); no domain servers

I have followed the Microsoft instructions to configure a firewall for
domains & trusts opening ports on the Colorado side for RPC, NETBIOS, WINS,
LDAP, DNS, SMB & Kerberos. (Q179442) There is a gateway-to-gateway VPN setup
between the Netgear firewalls.

Problem: I can ping clients on both sides of the gateway from either side
by name and IP address. I can map drives and printers using IP address, but
NOT name. It also seems like I am not resolving login requests over the VPN
gateway. I cannot add new computers to the domain using the connectcomputer
utility in SBS; I get error "The list of users and computers cannot be
found...". What is missing in this setup that will allow the clients to
connect to the domain properly?

chris morin

The browser service is working... one of the Remote office XP PCs is serving
as the master browser. The master browser can ping the SBS 2003 domain
server by name and IP. However, that PC cannot map drives by name, only by
IP. There are no local servers providing WINS or anything like that... just
XP Pro clients. Must I have a Win 2000/2003 server on the remote LAN to
enable common use of the domain assets across the WAN?

Chris