RE: Outlook/Exchange/VPN connectivity problem
Hmm. Technet's wrong. We run 1300 all over the place (it's the Cisco client). Are you still receiving the need to fragment message? -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. -Original Message- From: Warren Cundy [mailto:[EMAIL PROTECTED] Sent: Friday, July 18, 2003 4:15 PM To: Exchange Discussions Subject: RE: Outlook/Exchange/VPN connectivity problem Thanks for this Roger. However the ping still doesn't work at 1400. Technet says not to set this below 1400, what else can I do? Thanks -Warren -Original Message- From: Roger Seielstad [mailto:[EMAIL PROTECTED] Sent: Friday, July 18, 2003 10:54 AM To: Exchange Discussions Subject: RE: Outlook/Exchange/VPN connectivity problem Nope. Not DNS. MTU size. Do a technet search on MTU (or check with your VPN client vendor if you're not using the built in client) and find out how to set the MTU to 1500 (we use 1400). Outlook has a nasty habit of setting the Do Not Fragment bit on communications, and sends it at the existing MTU size. The VPN client then encapulates the packet and adds to the packet size, exceeding the network's MTU. The first hop router then generates an ICMP reply basically saying the packet needs to be fragmented by DF flag is set (Don't Fragment Flag). You can test it with the following command while connected via VPN. ping -l 1536 -f ipaddress 1536 is the standard Ethernet MTU. Try dropping that to 1400 and seeing if it works. I'd bet that's your culprit. -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. -Original Message- From: Warren Cundy [mailto:[EMAIL PROTECTED] Sent: Friday, July 18, 2003 1:06 PM To: Exchange Discussions Subject: Outlook/Exchange/VPN connectivity problem Hi guys, A few users are having an intermittent connectivity problem to Exchange server over a VPN connection. Here's what we're using: Exchange 2000 Sp3, Outlook 2002 Sp2 on the clients. When these users connect to our VPN, they can see/ping everything, including Exchange, but always have problems opening outlook. First they have to set their profile to manually control the connection and force an online connection. Even then they have to hit retry a few times, but it finally connects, although very slowly. I know DNS DNS DNS, but they can ping the Exchange server by name, and I even gave them entries in the HOSTS file for the local (internal VPN) address of the Exchange server... any thoughts here? Its driving me crazy. -W _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget ext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget ext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Outlook/Exchange/VPN connectivity problem
Why would technet say not to adjust the MTU? I have found it is neccesary to adjust this setting in a number of instances (probably depending on routers in the path). I have dumped it all the way down to 576, and have not had a difficulty that I can remember. Jim -Original Message- From: Roger Seielstad [mailto:[EMAIL PROTECTED] Sent: Monday, July 21, 2003 12:10 PM To: Exchange Discussions Subject: RE: Outlook/Exchange/VPN connectivity problem Hmm. Technet's wrong. We run 1300 all over the place (it's the Cisco client). Are you still receiving the need to fragment message? -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. -Original Message- From: Warren Cundy [mailto:[EMAIL PROTECTED] Sent: Friday, July 18, 2003 4:15 PM To: Exchange Discussions Subject: RE: Outlook/Exchange/VPN connectivity problem Thanks for this Roger. However the ping still doesn't work at 1400. Technet says not to set this below 1400, what else can I do? Thanks -Warren -Original Message- From: Roger Seielstad [mailto:[EMAIL PROTECTED] Sent: Friday, July 18, 2003 10:54 AM To: Exchange Discussions Subject: RE: Outlook/Exchange/VPN connectivity problem Nope. Not DNS. MTU size. Do a technet search on MTU (or check with your VPN client vendor if you're not using the built in client) and find out how to set the MTU to 1500 (we use 1400). Outlook has a nasty habit of setting the Do Not Fragment bit on communications, and sends it at the existing MTU size. The VPN client then encapulates the packet and adds to the packet size, exceeding the network's MTU. The first hop router then generates an ICMP reply basically saying the packet needs to be fragmented by DF flag is set (Don't Fragment Flag). You can test it with the following command while connected via VPN. ping -l 1536 -f ipaddress 1536 is the standard Ethernet MTU. Try dropping that to 1400 and seeing if it works. I'd bet that's your culprit. -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. -Original Message- From: Warren Cundy [mailto:[EMAIL PROTECTED] Sent: Friday, July 18, 2003 1:06 PM To: Exchange Discussions Subject: Outlook/Exchange/VPN connectivity problem Hi guys, A few users are having an intermittent connectivity problem to Exchange server over a VPN connection. Here's what we're using: Exchange 2000 Sp3, Outlook 2002 Sp2 on the clients. When these users connect to our VPN, they can see/ping everything, including Exchange, but always have problems opening outlook. First they have to set their profile to manually control the connection and force an online connection. Even then they have to hit retry a few times, but it finally connects, although very slowly. I know DNS DNS DNS, but they can ping the Exchange server by name, and I even gave them entries in the HOSTS file for the local (internal VPN) address of the Exchange server... any thoughts here? Its driving me crazy. -W _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget ext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget ext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Outlook/Exchange/VPN connectivity problem
It's a performance thing, really. The lower the MTU the higher the percentage of overhead due to the packet header. -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. -Original Message- From: Jim Richards [mailto:[EMAIL PROTECTED] Sent: Monday, July 21, 2003 8:15 AM To: Exchange Discussions Subject: RE: Outlook/Exchange/VPN connectivity problem Why would technet say not to adjust the MTU? I have found it is neccesary to adjust this setting in a number of instances (probably depending on routers in the path). I have dumped it all the way down to 576, and have not had a difficulty that I can remember. Jim -Original Message- From: Roger Seielstad [mailto:[EMAIL PROTECTED] Sent: Monday, July 21, 2003 12:10 PM To: Exchange Discussions Subject: RE: Outlook/Exchange/VPN connectivity problem Hmm. Technet's wrong. We run 1300 all over the place (it's the Cisco client). Are you still receiving the need to fragment message? -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. -Original Message- From: Warren Cundy [mailto:[EMAIL PROTECTED] Sent: Friday, July 18, 2003 4:15 PM To: Exchange Discussions Subject: RE: Outlook/Exchange/VPN connectivity problem Thanks for this Roger. However the ping still doesn't work at 1400. Technet says not to set this below 1400, what else can I do? Thanks -Warren -Original Message- From: Roger Seielstad [mailto:[EMAIL PROTECTED] Sent: Friday, July 18, 2003 10:54 AM To: Exchange Discussions Subject: RE: Outlook/Exchange/VPN connectivity problem Nope. Not DNS. MTU size. Do a technet search on MTU (or check with your VPN client vendor if you're not using the built in client) and find out how to set the MTU to 1500 (we use 1400). Outlook has a nasty habit of setting the Do Not Fragment bit on communications, and sends it at the existing MTU size. The VPN client then encapulates the packet and adds to the packet size, exceeding the network's MTU. The first hop router then generates an ICMP reply basically saying the packet needs to be fragmented by DF flag is set (Don't Fragment Flag). You can test it with the following command while connected via VPN. ping -l 1536 -f ipaddress 1536 is the standard Ethernet MTU. Try dropping that to 1400 and seeing if it works. I'd bet that's your culprit. -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. -Original Message- From: Warren Cundy [mailto:[EMAIL PROTECTED] Sent: Friday, July 18, 2003 1:06 PM To: Exchange Discussions Subject: Outlook/Exchange/VPN connectivity problem Hi guys, A few users are having an intermittent connectivity problem to Exchange server over a VPN connection. Here's what we're using: Exchange 2000 Sp3, Outlook 2002 Sp2 on the clients. When these users connect to our VPN, they can see/ping everything, including Exchange, but always have problems opening outlook. First they have to set their profile to manually control the connection and force an online connection. Even then they have to hit retry a few times, but it finally connects, although very slowly. I know DNS DNS DNS, but they can ping the Exchange server by name, and I even gave them entries in the HOSTS file for the local (internal VPN) address of the Exchange server... any thoughts here? Its driving me crazy. -W _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget ext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget ext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget ext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm
Re: Outlook/Exchange/VPN connectivity problem
ipconfig /flushdns - Original Message - From: Warren Cundy [EMAIL PROTECTED] To: Exchange Discussions [EMAIL PROTECTED] Sent: Friday, July 18, 2003 1:06 PM Subject: Outlook/Exchange/VPN connectivity problem Hi guys, A few users are having an intermittent connectivity problem to Exchange server over a VPN connection. Here's what we're using: Exchange 2000 Sp3, Outlook 2002 Sp2 on the clients. When these users connect to our VPN, they can see/ping everything, including Exchange, but always have problems opening outlook. First they have to set their profile to manually control the connection and force an online connection. Even then they have to hit retry a few times, but it finally connects, although very slowly. I know DNS DNS DNS, but they can ping the Exchange server by name, and I even gave them entries in the HOSTS file for the local (internal VPN) address of the Exchange server... any thoughts here? Its driving me crazy. -W _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
Re: Outlook/Exchange/VPN connectivity problem
do you also publish the exchange server through an ISA server for external RPC access? - Original Message - From: Warren Cundy [EMAIL PROTECTED] To: Exchange Discussions [EMAIL PROTECTED] Sent: Friday, July 18, 2003 4:15 PM Subject: RE: Outlook/Exchange/VPN connectivity problem Thanks for this Roger. However the ping still doesn't work at 1400. Technet says not to set this below 1400, what else can I do? Thanks -Warren -Original Message- From: Roger Seielstad [mailto:[EMAIL PROTECTED] Sent: Friday, July 18, 2003 10:54 AM To: Exchange Discussions Subject: RE: Outlook/Exchange/VPN connectivity problem Nope. Not DNS. MTU size. Do a technet search on MTU (or check with your VPN client vendor if you're not using the built in client) and find out how to set the MTU to 1500 (we use 1400). Outlook has a nasty habit of setting the Do Not Fragment bit on communications, and sends it at the existing MTU size. The VPN client then encapulates the packet and adds to the packet size, exceeding the network's MTU. The first hop router then generates an ICMP reply basically saying the packet needs to be fragmented by DF flag is set (Don't Fragment Flag). You can test it with the following command while connected via VPN. ping -l 1536 -f ipaddress 1536 is the standard Ethernet MTU. Try dropping that to 1400 and seeing if it works. I'd bet that's your culprit. -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. -Original Message- From: Warren Cundy [mailto:[EMAIL PROTECTED] Sent: Friday, July 18, 2003 1:06 PM To: Exchange Discussions Subject: Outlook/Exchange/VPN connectivity problem Hi guys, A few users are having an intermittent connectivity problem to Exchange server over a VPN connection. Here's what we're using: Exchange 2000 Sp3, Outlook 2002 Sp2 on the clients. When these users connect to our VPN, they can see/ping everything, including Exchange, but always have problems opening outlook. First they have to set their profile to manually control the connection and force an online connection. Even then they have to hit retry a few times, but it finally connects, although very slowly. I know DNS DNS DNS, but they can ping the Exchange server by name, and I even gave them entries in the HOSTS file for the local (internal VPN) address of the Exchange server... any thoughts here? Its driving me crazy. -W _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget ext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Outlook/Exchange/VPN connectivity problem
Yes, both FQDN and netbios name resolve to the internal IP and work properly. -Warren -Original Message- From: Ed Crowley [mailto:[EMAIL PROTECTED] Sent: Friday, July 18, 2003 7:58 PM To: Exchange Discussions Subject: RE: Outlook/Exchange/VPN connectivity problem Can they ping the FQDN? Ed Crowley MCSE+Internet MVP Freelance E-Mail Philosopher Protecting the world from PSTs and Bricked Backups!T -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Warren Cundy Sent: Friday, July 18, 2003 10:06 AM To: Exchange Discussions Subject: Outlook/Exchange/VPN connectivity problem Hi guys, A few users are having an intermittent connectivity problem to Exchange server over a VPN connection. Here's what we're using: Exchange 2000 Sp3, Outlook 2002 Sp2 on the clients. When these users connect to our VPN, they can see/ping everything, including Exchange, but always have problems opening outlook. First they have to set their profile to manually control the connection and force an online connection. Even then they have to hit retry a few times, but it finally connects, although very slowly. I know DNS DNS DNS, but they can ping the Exchange server by name, and I even gave them entries in the HOSTS file for the local (internal VPN) address of the Exchange server... any thoughts here? Its driving me crazy. -W _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Outlook/Exchange/VPN connectivity problem
No can you direct me where to look? Thanks -Warren -Original Message- From: Couch, Nate [mailto:[EMAIL PROTECTED] Sent: Saturday, July 19, 2003 10:19 AM To: Exchange Discussions Subject: RE: Outlook/Exchange/VPN connectivity problem Have you checked the RPC Binding Order entry in the registry? Nate Couch EDS Messaging -Original Message- From: Ed Crowley [mailto:[EMAIL PROTECTED] Sent: Friday, July 18, 2003 9:58 PM To: Exchange Discussions Subject: RE: Outlook/Exchange/VPN connectivity problem Can they ping the FQDN? Ed Crowley MCSE+Internet MVP Freelance E-Mail Philosopher Protecting the world from PSTs and Bricked Backups!T -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Warren Cundy Sent: Friday, July 18, 2003 10:06 AM To: Exchange Discussions Subject: Outlook/Exchange/VPN connectivity problem Hi guys, A few users are having an intermittent connectivity problem to Exchange server over a VPN connection. Here's what we're using: Exchange 2000 Sp3, Outlook 2002 Sp2 on the clients. When these users connect to our VPN, they can see/ping everything, including Exchange, but always have problems opening outlook. First they have to set their profile to manually control the connection and force an online connection. Even then they have to hit retry a few times, but it finally connects, although very slowly. I know DNS DNS DNS, but they can ping the Exchange server by name, and I even gave them entries in the HOSTS file for the local (internal VPN) address of the Exchange server... any thoughts here? Its driving me crazy. -W _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Outlook/Exchange/VPN connectivity problem
Yes we are receiving that message at 1400 over the VPN. I'll try 1300 thanks. -Warren -Original Message- From: Roger Seielstad [mailto:[EMAIL PROTECTED] Sent: Monday, July 21, 2003 4:10 AM To: Exchange Discussions Subject: RE: Outlook/Exchange/VPN connectivity problem Hmm. Technet's wrong. We run 1300 all over the place (it's the Cisco client). Are you still receiving the need to fragment message? -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. -Original Message- From: Warren Cundy [mailto:[EMAIL PROTECTED] Sent: Friday, July 18, 2003 4:15 PM To: Exchange Discussions Subject: RE: Outlook/Exchange/VPN connectivity problem Thanks for this Roger. However the ping still doesn't work at 1400. Technet says not to set this below 1400, what else can I do? Thanks -Warren -Original Message- From: Roger Seielstad [mailto:[EMAIL PROTECTED] Sent: Friday, July 18, 2003 10:54 AM To: Exchange Discussions Subject: RE: Outlook/Exchange/VPN connectivity problem Nope. Not DNS. MTU size. Do a technet search on MTU (or check with your VPN client vendor if you're not using the built in client) and find out how to set the MTU to 1500 (we use 1400). Outlook has a nasty habit of setting the Do Not Fragment bit on communications, and sends it at the existing MTU size. The VPN client then encapulates the packet and adds to the packet size, exceeding the network's MTU. The first hop router then generates an ICMP reply basically saying the packet needs to be fragmented by DF flag is set (Don't Fragment Flag). You can test it with the following command while connected via VPN. ping -l 1536 -f ipaddress 1536 is the standard Ethernet MTU. Try dropping that to 1400 and seeing if it works. I'd bet that's your culprit. -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. -Original Message- From: Warren Cundy [mailto:[EMAIL PROTECTED] Sent: Friday, July 18, 2003 1:06 PM To: Exchange Discussions Subject: Outlook/Exchange/VPN connectivity problem Hi guys, A few users are having an intermittent connectivity problem to Exchange server over a VPN connection. Here's what we're using: Exchange 2000 Sp3, Outlook 2002 Sp2 on the clients. When these users connect to our VPN, they can see/ping everything, including Exchange, but always have problems opening outlook. First they have to set their profile to manually control the connection and force an online connection. Even then they have to hit retry a few times, but it finally connects, although very slowly. I know DNS DNS DNS, but they can ping the Exchange server by name, and I even gave them entries in the HOSTS file for the local (internal VPN) address of the Exchange server... any thoughts here? Its driving me crazy. -W _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget ext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget ext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Outlook/Exchange/VPN connectivity problem
No, no no no. I've heard that's a bad idea. ;) -Warren -Original Message- From: Chris H [mailto:[EMAIL PROTECTED] Sent: Monday, July 21, 2003 7:19 AM To: Exchange Discussions Subject: Re: Outlook/Exchange/VPN connectivity problem do you also publish the exchange server through an ISA server for external RPC access? - Original Message - From: Warren Cundy [EMAIL PROTECTED] To: Exchange Discussions [EMAIL PROTECTED] Sent: Friday, July 18, 2003 4:15 PM Subject: RE: Outlook/Exchange/VPN connectivity problem Thanks for this Roger. However the ping still doesn't work at 1400. Technet says not to set this below 1400, what else can I do? Thanks -Warren -Original Message- From: Roger Seielstad [mailto:[EMAIL PROTECTED] Sent: Friday, July 18, 2003 10:54 AM To: Exchange Discussions Subject: RE: Outlook/Exchange/VPN connectivity problem Nope. Not DNS. MTU size. Do a technet search on MTU (or check with your VPN client vendor if you're not using the built in client) and find out how to set the MTU to 1500 (we use 1400). Outlook has a nasty habit of setting the Do Not Fragment bit on communications, and sends it at the existing MTU size. The VPN client then encapulates the packet and adds to the packet size, exceeding the network's MTU. The first hop router then generates an ICMP reply basically saying the packet needs to be fragmented by DF flag is set (Don't Fragment Flag). You can test it with the following command while connected via VPN. ping -l 1536 -f ipaddress 1536 is the standard Ethernet MTU. Try dropping that to 1400 and seeing if it works. I'd bet that's your culprit. -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. -Original Message- From: Warren Cundy [mailto:[EMAIL PROTECTED] Sent: Friday, July 18, 2003 1:06 PM To: Exchange Discussions Subject: Outlook/Exchange/VPN connectivity problem Hi guys, A few users are having an intermittent connectivity problem to Exchange server over a VPN connection. Here's what we're using: Exchange 2000 Sp3, Outlook 2002 Sp2 on the clients. When these users connect to our VPN, they can see/ping everything, including Exchange, but always have problems opening outlook. First they have to set their profile to manually control the connection and force an online connection. Even then they have to hit retry a few times, but it finally connects, although very slowly. I know DNS DNS DNS, but they can ping the Exchange server by name, and I even gave them entries in the HOSTS file for the local (internal VPN) address of the Exchange server... any thoughts here? Its driving me crazy. -W _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget ext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Outlook/Exchange/VPN connectivity problem
Q163576 -- From: Warren Cundy Reply To: Exchange Discussions Sent: Monday, July 21, 2003 1:48 PM To: Exchange Discussions Subject: RE: Outlook/Exchange/VPN connectivity problem No can you direct me where to look? Thanks -Warren -Original Message- From: Couch, Nate [mailto:[EMAIL PROTECTED] Sent: Saturday, July 19, 2003 10:19 AM To: Exchange Discussions Subject: RE: Outlook/Exchange/VPN connectivity problem Have you checked the RPC Binding Order entry in the registry? Nate Couch EDS Messaging -Original Message- From: Ed Crowley [mailto:[EMAIL PROTECTED] Sent: Friday, July 18, 2003 9:58 PM To: Exchange Discussions Subject: RE: Outlook/Exchange/VPN connectivity problem Can they ping the FQDN? Ed Crowley MCSE+Internet MVP Freelance E-Mail Philosopher Protecting the world from PSTs and Bricked Backups!T -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Warren Cundy Sent: Friday, July 18, 2003 10:06 AM To: Exchange Discussions Subject: Outlook/Exchange/VPN connectivity problem Hi guys, A few users are having an intermittent connectivity problem to Exchange server over a VPN connection. Here's what we're using: Exchange 2000 Sp3, Outlook 2002 Sp2 on the clients. When these users connect to our VPN, they can see/ping everything, including Exchange, but always have problems opening outlook. First they have to set their profile to manually control the connection and force an online connection. Even then they have to hit retry a few times, but it finally connects, although very slowly. I know DNS DNS DNS, but they can ping the Exchange server by name, and I even gave them entries in the HOSTS file for the local (internal VPN) address of the Exchange server... any thoughts here? Its driving me crazy. -W _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=la ng =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=la ng =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=la ng =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=la ng=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Outlook/Exchange/VPN connectivity problem
So we should set TCP/IP first? What is Local RPC, is that some sort of netbios/netbeui protocol? Thanks -Warren -Original Message- From: Couch, Nate [mailto:[EMAIL PROTECTED] Sent: Monday, July 21, 2003 11:57 AM To: Exchange Discussions Subject: RE: Outlook/Exchange/VPN connectivity problem Q163576 -- From: Warren Cundy Reply To: Exchange Discussions Sent: Monday, July 21, 2003 1:48 PM To: Exchange Discussions Subject: RE: Outlook/Exchange/VPN connectivity problem No can you direct me where to look? Thanks -Warren -Original Message- From: Couch, Nate [mailto:[EMAIL PROTECTED] Sent: Saturday, July 19, 2003 10:19 AM To: Exchange Discussions Subject: RE: Outlook/Exchange/VPN connectivity problem Have you checked the RPC Binding Order entry in the registry? Nate Couch EDS Messaging -Original Message- From: Ed Crowley [mailto:[EMAIL PROTECTED] Sent: Friday, July 18, 2003 9:58 PM To: Exchange Discussions Subject: RE: Outlook/Exchange/VPN connectivity problem Can they ping the FQDN? Ed Crowley MCSE+Internet MVP Freelance E-Mail Philosopher Protecting the world from PSTs and Bricked Backups!T -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Warren Cundy Sent: Friday, July 18, 2003 10:06 AM To: Exchange Discussions Subject: Outlook/Exchange/VPN connectivity problem Hi guys, A few users are having an intermittent connectivity problem to Exchange server over a VPN connection. Here's what we're using: Exchange 2000 Sp3, Outlook 2002 Sp2 on the clients. When these users connect to our VPN, they can see/ping everything, including Exchange, but always have problems opening outlook. First they have to set their profile to manually control the connection and force an online connection. Even then they have to hit retry a few times, but it finally connects, although very slowly. I know DNS DNS DNS, but they can ping the Exchange server by name, and I even gave them entries in the HOSTS file for the local (internal VPN) address of the Exchange server... any thoughts here? Its driving me crazy. -W _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode =la ng =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode =la ng =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode =la ng =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode =la ng=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
Re: Outlook/Exchange/VPN connectivity problem
Local RPC is RPC on the local machine. Unless the local machine is an Exchange server, there's probably no advantage to it being listed first. On 07/21/03 16:05, Warren Cundy [EMAIL PROTECTED] wrote: So we should set TCP/IP first? What is Local RPC, is that some sort of netbios/netbeui protocol? Thanks -Warren -Original Message- From: Couch, Nate [mailto:[EMAIL PROTECTED] Sent: Monday, July 21, 2003 11:57 AM To: Exchange Discussions Subject: RE: Outlook/Exchange/VPN connectivity problem Q163576 -- From: Warren Cundy Reply To: Exchange Discussions Sent: Monday, July 21, 2003 1:48 PM To: Exchange Discussions Subject: RE: Outlook/Exchange/VPN connectivity problem No can you direct me where to look? Thanks -Warren -Original Message- From: Couch, Nate [mailto:[EMAIL PROTECTED] Sent: Saturday, July 19, 2003 10:19 AM To: Exchange Discussions Subject: RE: Outlook/Exchange/VPN connectivity problem Have you checked the RPC Binding Order entry in the registry? Nate Couch EDS Messaging -Original Message- From: Ed Crowley [mailto:[EMAIL PROTECTED] Sent: Friday, July 18, 2003 9:58 PM To: Exchange Discussions Subject: RE: Outlook/Exchange/VPN connectivity problem Can they ping the FQDN? Ed Crowley MCSE+Internet MVP Freelance E-Mail Philosopher Protecting the world from PSTs and Bricked Backups!T -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Warren Cundy Sent: Friday, July 18, 2003 10:06 AM To: Exchange Discussions Subject: Outlook/Exchange/VPN connectivity problem Hi guys, A few users are having an intermittent connectivity problem to Exchange server over a VPN connection. Here's what we're using: Exchange 2000 Sp3, Outlook 2002 Sp2 on the clients. When these users connect to our VPN, they can see/ping everything, including Exchange, but always have problems opening outlook. First they have to set their profile to manually control the connection and force an online connection. Even then they have to hit retry a few times, but it finally connects, although very slowly. I know DNS DNS DNS, but they can ping the Exchange server by name, and I even gave them entries in the HOSTS file for the local (internal VPN) address of the Exchange server... any thoughts here? Its driving me crazy. -W _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode =la ng =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode =la ng =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode =la ng =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode =la ng=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=e nglish To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Outlook/Exchange/VPN connectivity problem
Have you checked the RPC Binding Order entry in the registry? Nate Couch EDS Messaging -Original Message- From: Ed Crowley [mailto:[EMAIL PROTECTED] Sent: Friday, July 18, 2003 9:58 PM To: Exchange Discussions Subject: RE: Outlook/Exchange/VPN connectivity problem Can they ping the FQDN? Ed Crowley MCSE+Internet MVP Freelance E-Mail Philosopher Protecting the world from PSTs and Bricked Backups!T -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Warren Cundy Sent: Friday, July 18, 2003 10:06 AM To: Exchange Discussions Subject: Outlook/Exchange/VPN connectivity problem Hi guys, A few users are having an intermittent connectivity problem to Exchange server over a VPN connection. Here's what we're using: Exchange 2000 Sp3, Outlook 2002 Sp2 on the clients. When these users connect to our VPN, they can see/ping everything, including Exchange, but always have problems opening outlook. First they have to set their profile to manually control the connection and force an online connection. Even then they have to hit retry a few times, but it finally connects, although very slowly. I know DNS DNS DNS, but they can ping the Exchange server by name, and I even gave them entries in the HOSTS file for the local (internal VPN) address of the Exchange server... any thoughts here? Its driving me crazy. -W _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
Outlook/Exchange/VPN connectivity problem
Hi guys, A few users are having an intermittent connectivity problem to Exchange server over a VPN connection. Here's what we're using: Exchange 2000 Sp3, Outlook 2002 Sp2 on the clients. When these users connect to our VPN, they can see/ping everything, including Exchange, but always have problems opening outlook. First they have to set their profile to manually control the connection and force an online connection. Even then they have to hit retry a few times, but it finally connects, although very slowly. I know DNS DNS DNS, but they can ping the Exchange server by name, and I even gave them entries in the HOSTS file for the local (internal VPN) address of the Exchange server... any thoughts here? Its driving me crazy. -W _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
Re: Outlook/Exchange/VPN connectivity problem
remember it looks at the cached names cache first clear that that may help From: Warren Cundy [EMAIL PROTECTED] Reply-To: Exchange Discussions [EMAIL PROTECTED] To: Exchange Discussions [EMAIL PROTECTED] Subject: Outlook/Exchange/VPN connectivity problem Date: Fri, 18 Jul 2003 10:06:02 -0700 Hi guys, A few users are having an intermittent connectivity problem to Exchange server over a VPN connection. Here's what we're using: Exchange 2000 Sp3, Outlook 2002 Sp2 on the clients. When these users connect to our VPN, they can see/ping everything, including Exchange, but always have problems opening outlook. First they have to set their profile to manually control the connection and force an online connection. Even then they have to hit retry a few times, but it finally connects, although very slowly. I know DNS DNS DNS, but they can ping the Exchange server by name, and I even gave them entries in the HOSTS file for the local (internal VPN) address of the Exchange server... any thoughts here? Its driving me crazy. -W _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ The new MSN 8: smart spam protection and 2 months FREE* http://join.msn.com/?page=features/junkmail _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Outlook/Exchange/VPN connectivity problem
Could not hurt to verify that RPC is working correctly using something like rpings. You could also configured a client that is normally having problems to used IMAP or POP and see if it goes awaycould be the VPN having problems with RPCs. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Warren Cundy Sent: Friday, July 18, 2003 10:06 AM To: Exchange Discussions Subject: Outlook/Exchange/VPN connectivity problem Hi guys, A few users are having an intermittent connectivity problem to Exchange server over a VPN connection. Here's what we're using: Exchange 2000 Sp3, Outlook 2002 Sp2 on the clients. When these users connect to our VPN, they can see/ping everything, including Exchange, but always have problems opening outlook. First they have to set their profile to manually control the connection and force an online connection. Even then they have to hit retry a few times, but it finally connects, although very slowly. I know DNS DNS DNS, but they can ping the Exchange server by name, and I even gave them entries in the HOSTS file for the local (internal VPN) address of the Exchange server... any thoughts here? Its driving me crazy. -W _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Outlook/Exchange/VPN connectivity problem
Nope. Not DNS. MTU size. Do a technet search on MTU (or check with your VPN client vendor if you're not using the built in client) and find out how to set the MTU to 1500 (we use 1400). Outlook has a nasty habit of setting the Do Not Fragment bit on communications, and sends it at the existing MTU size. The VPN client then encapulates the packet and adds to the packet size, exceeding the network's MTU. The first hop router then generates an ICMP reply basically saying the packet needs to be fragmented by DF flag is set (Don't Fragment Flag). You can test it with the following command while connected via VPN. ping -l 1536 -f ipaddress 1536 is the standard Ethernet MTU. Try dropping that to 1400 and seeing if it works. I'd bet that's your culprit. -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. -Original Message- From: Warren Cundy [mailto:[EMAIL PROTECTED] Sent: Friday, July 18, 2003 1:06 PM To: Exchange Discussions Subject: Outlook/Exchange/VPN connectivity problem Hi guys, A few users are having an intermittent connectivity problem to Exchange server over a VPN connection. Here's what we're using: Exchange 2000 Sp3, Outlook 2002 Sp2 on the clients. When these users connect to our VPN, they can see/ping everything, including Exchange, but always have problems opening outlook. First they have to set their profile to manually control the connection and force an online connection. Even then they have to hit retry a few times, but it finally connects, although very slowly. I know DNS DNS DNS, but they can ping the Exchange server by name, and I even gave them entries in the HOSTS file for the local (internal VPN) address of the Exchange server... any thoughts here? Its driving me crazy. -W _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget ext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Outlook/Exchange/VPN connectivity problem
Do you have more than one IP address on your Exchange server? Or if your server is behind NAT, then it would have an internal address and external address... Here is what I am getting at. Maybe under some circumstances Outlook is trying to get to the wrong IP address. Try the HOSTS file in this format Your.server.ip.address servername servername.yourdomain.name.com This way you will make sure that both the NetBIOS name and the FQDN of your server are pointing to the same IP. -Original Message- From: Warren Cundy [mailto:[EMAIL PROTECTED] Sent: Friday, July 18, 2003 1:06 PM To: Exchange Discussions Subject: Outlook/Exchange/VPN connectivity problem Hi guys, A few users are having an intermittent connectivity problem to Exchange server over a VPN connection. Here's what we're using: Exchange 2000 Sp3, Outlook 2002 Sp2 on the clients. When these users connect to our VPN, they can see/ping everything, including Exchange, but always have problems opening outlook. First they have to set their profile to manually control the connection and force an online connection. Even then they have to hit retry a few times, but it finally connects, although very slowly. I know DNS DNS DNS, but they can ping the Exchange server by name, and I even gave them entries in the HOSTS file for the local (internal VPN) address of the Exchange server... any thoughts here? Its driving me crazy. -W _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Outlook/Exchange/VPN connectivity problem
Thanks for this Roger. However the ping still doesn't work at 1400. Technet says not to set this below 1400, what else can I do? Thanks -Warren -Original Message- From: Roger Seielstad [mailto:[EMAIL PROTECTED] Sent: Friday, July 18, 2003 10:54 AM To: Exchange Discussions Subject: RE: Outlook/Exchange/VPN connectivity problem Nope. Not DNS. MTU size. Do a technet search on MTU (or check with your VPN client vendor if you're not using the built in client) and find out how to set the MTU to 1500 (we use 1400). Outlook has a nasty habit of setting the Do Not Fragment bit on communications, and sends it at the existing MTU size. The VPN client then encapulates the packet and adds to the packet size, exceeding the network's MTU. The first hop router then generates an ICMP reply basically saying the packet needs to be fragmented by DF flag is set (Don't Fragment Flag). You can test it with the following command while connected via VPN. ping -l 1536 -f ipaddress 1536 is the standard Ethernet MTU. Try dropping that to 1400 and seeing if it works. I'd bet that's your culprit. -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. -Original Message- From: Warren Cundy [mailto:[EMAIL PROTECTED] Sent: Friday, July 18, 2003 1:06 PM To: Exchange Discussions Subject: Outlook/Exchange/VPN connectivity problem Hi guys, A few users are having an intermittent connectivity problem to Exchange server over a VPN connection. Here's what we're using: Exchange 2000 Sp3, Outlook 2002 Sp2 on the clients. When these users connect to our VPN, they can see/ping everything, including Exchange, but always have problems opening outlook. First they have to set their profile to manually control the connection and force an online connection. Even then they have to hit retry a few times, but it finally connects, although very slowly. I know DNS DNS DNS, but they can ping the Exchange server by name, and I even gave them entries in the HOSTS file for the local (internal VPN) address of the Exchange server... any thoughts here? Its driving me crazy. -W _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchanget ext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: Outlook/Exchange/VPN connectivity problem
Can they ping the FQDN? Ed Crowley MCSE+Internet MVP Freelance E-Mail Philosopher Protecting the world from PSTs and Bricked Backups!T -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Warren Cundy Sent: Friday, July 18, 2003 10:06 AM To: Exchange Discussions Subject: Outlook/Exchange/VPN connectivity problem Hi guys, A few users are having an intermittent connectivity problem to Exchange server over a VPN connection. Here's what we're using: Exchange 2000 Sp3, Outlook 2002 Sp2 on the clients. When these users connect to our VPN, they can see/ping everything, including Exchange, but always have problems opening outlook. First they have to set their profile to manually control the connection and force an online connection. Even then they have to hit retry a few times, but it finally connects, although very slowly. I know DNS DNS DNS, but they can ping the Exchange server by name, and I even gave them entries in the HOSTS file for the local (internal VPN) address of the Exchange server... any thoughts here? Its driving me crazy. -W _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchangetext_mode=lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
