Re: [RE: tough VPN question]

2000-12-07 Thread Sam Munzani

Does anybody know if a Altiga Client software will work with PIX? If it
does, Altiga client has options for WINS settings.

Sam

 I beleive your problem is WINS lookup.
 Create a LMHOST file without any extension.
 Write following line in your file

 IP address of PDC NAme of PDC #PRE #DOM
 Do not Include   signs, Just replace the words.
 DONT forget NO EXTENSION to file.
 Save file in WINNT\SYSTEM32\Drivers\ETC directory.
 You have to copy this file on every PC. the same folder.
 Good luck
 MK
 CCNA, MCSE, CNE


 "Scott Morris" [EMAIL PROTECTED] wrote:
  Your problem is likely the propgation of broadcasts...  Or lack thereof.
  One thing you can do (I'm assuming you have a router before (LAN-side)
the
  PIX) is set up an ip-helper address to forward UDP-level broadcasts
(like
  138/139 Netbios) to the NT server.
 
  The other thing you can do is bypass that broadcast thought process by
 using
  LMHosts files on the workstations at the branch office.  That will
pre-load
  (if you use the #PRE designation) the NetBIOS cache and give you IP
  addresses to go to.  So if you have IP reachability, things will work
just
  fine then.
 
  In LMHOSTS. :
 
  (ip address) (Netbios name) #PRE #DOM:(domain name if domain controller)
 
  Also, to refresh without rebooting the PCs, "nbtstat -R"
 
  Hope this helps!
 
  Scott
 
  -Original Message-
  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
  Jim Bond
  Sent: Thursday, December 07, 2000 1:19 AM
  To: [EMAIL PROTECTED]
  Cc: [EMAIL PROTECTED]
  Subject: tough VPN question
 
 
  Hello,
 
  I'm trying to set up a IPSec between a PIX (branch
  office) and router (central office). All PCs at branch
  office share 1 ip address. IPSec seems to be working
  fine because clients can ping/telnet/email/map drives
  from/to central office. The problem is they can't
  logon NT domain. They can ping domain controller
  though.
 
  Any idea why they can't log on NT domain? (The
  machines were already added to domain)
 
  Thanks in advance.
 
 
  Jim
 
  __
  Do You Yahoo!?
  Yahoo! Shopping - Thousands of Stores. Millions of Products.
  http://shopping.yahoo.com/
 
  ___
  To unsubscribe from the CCIELAB list, send a message to
  [EMAIL PROTECTED] with the body containing:
  unsubscribe ccielab
 
  _
  FAQ, list archives, and subscription info:
 http://www.groupstudy.com/list/cisco.html
  Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


 
 Get free email and a permanent address at http://www.netaddress.com/?N=1

 ___
 To unsubscribe from the CCIELAB list, send a message to
 [EMAIL PROTECTED] with the body containing:
 unsubscribe ccielab

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: [RE: tough VPN question]

2000-12-07 Thread Wayne Hu


Altiga VPN Client works with Pix 5.2


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Sam Munzani
Sent: December 7, 2000 4:38 PM
To: Manishkumar Patel; Scott Morris; Jim Bond; [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: Re: [RE: tough VPN question]


Does anybody know if a Altiga Client software will work with PIX? If it
does, Altiga client has options for WINS settings.

Sam

 I beleive your problem is WINS lookup.
 Create a LMHOST file without any extension.
 Write following line in your file

 IP address of PDC NAme of PDC #PRE #DOM
 Do not Include   signs, Just replace the words.
 DONT forget NO EXTENSION to file.
 Save file in WINNT\SYSTEM32\Drivers\ETC directory.
 You have to copy this file on every PC. the same folder.
 Good luck
 MK
 CCNA, MCSE, CNE


 "Scott Morris" [EMAIL PROTECTED] wrote:
  Your problem is likely the propgation of broadcasts...  Or lack thereof.
  One thing you can do (I'm assuming you have a router before (LAN-side)
the
  PIX) is set up an ip-helper address to forward UDP-level broadcasts
(like
  138/139 Netbios) to the NT server.
 
  The other thing you can do is bypass that broadcast thought process by
 using
  LMHosts files on the workstations at the branch office.  That will
pre-load
  (if you use the #PRE designation) the NetBIOS cache and give you IP
  addresses to go to.  So if you have IP reachability, things will work
just
  fine then.
 
  In LMHOSTS. :
 
  (ip address) (Netbios name) #PRE #DOM:(domain name if domain controller)
 
  Also, to refresh without rebooting the PCs, "nbtstat -R"
 
  Hope this helps!
 
  Scott
 
  -Original Message-
  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
  Jim Bond
  Sent: Thursday, December 07, 2000 1:19 AM
  To: [EMAIL PROTECTED]
  Cc: [EMAIL PROTECTED]
  Subject: tough VPN question
 
 
  Hello,
 
  I'm trying to set up a IPSec between a PIX (branch
  office) and router (central office). All PCs at branch
  office share 1 ip address. IPSec seems to be working
  fine because clients can ping/telnet/email/map drives
  from/to central office. The problem is they can't
  logon NT domain. They can ping domain controller
  though.
 
  Any idea why they can't log on NT domain? (The
  machines were already added to domain)
 
  Thanks in advance.
 
 
  Jim
 
  __
  Do You Yahoo!?
  Yahoo! Shopping - Thousands of Stores. Millions of Products.
  http://shopping.yahoo.com/
 
  ___
  To unsubscribe from the CCIELAB list, send a message to
  [EMAIL PROTECTED] with the body containing:
  unsubscribe ccielab
 
  _
  FAQ, list archives, and subscription info:
 http://www.groupstudy.com/list/cisco.html
  Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]


 
 Get free email and a permanent address at http://www.netaddress.com/?N=1

 ___
 To unsubscribe from the CCIELAB list, send a message to
 [EMAIL PROTECTED] with the body containing:
 unsubscribe ccielab

___
To unsubscribe from the CCIELAB list, send a message to
[EMAIL PROTECTED] with the body containing:
unsubscribe ccielab


__
Do You Yahoo!?
Talk to your friends online with Yahoo! Messenger.
http://im.yahoo.com

_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]