Pinging does not verify name resolution for WINS. Ping will resolve a name
using DNS. MS uses WINS (NetBIOS naming) for Domain Logins and for mapping
drives, etc.
Try this link on Cisco's website for help with coordinating your NT domain
with your network layout:
http://www.cisco.com/warp/publi
gt;From: "Benjamin Walling" <[EMAIL PROTECTED]>
> >Reply-To: "Benjamin Walling" <[EMAIL PROTECTED]>
> >To: [EMAIL PROTECTED]
> >Subject: Re: Still doesn't work: tough VPN question
> >Date: Fri, 8 Dec 2000 08:27:04 -0500
> >
>
Jim, here is a link to an MS KB article outlining the requirements for
domain traffic over a firewall. Open these ports on the firewall to pass
the domain traffic.
Here's what happens: a client comes up and broadcasts for an available DC.
This also happens over TCP/IP, even if TCP/IP is the on
ROTECTED]]
> Sent: Friday, December 08, 2000 9:21 AM
> To: [EMAIL PROTECTED]
> Subject: Re: Still doesn't work: tough VPN question
>
>
> Yes, WINS resolves NetBIOS names to IP addresses, but only for Windows
> networking functions. It is not used for ping, ftp, telnet, etc. It is
> The way you have written makes it sound as if I did not have DNS and I
> did a ping, telnet, or ftp by name that it would not work, and that is
> not the case.
That is not what I intended. If you do a ping, it is not a test of whether
WINS is working because there are other ways to resolve a n
-
From: Benjamin Walling [mailto:[EMAIL PROTECTED]]
Sent: Friday, December 08, 2000 12:21 PM
To: [EMAIL PROTECTED]
Subject: Re: Still doesn't work: tough VPN question
Yes, WINS resolves NetBIOS names to IP addresses, but only for Windows
networking functions. It is not used for ping, ftp, t
Are you doing NAT 0 between sites so that everyone get's to use the real
IP's and not the NAT'ed ones? Are all the domain controllers, WINS boxes
etc. in the access-list defining what get's encrypted? If you are
setting up a VPN based on IP's only then you do not need to define what
ports get open
ge
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> I beg to disagree with you. I can certainly telnet, ftp and ping to any
> NETBios name on my network.
>
>
>
> -Original Message-
> From: Benjamin Walling [mailto:[EMAIL PROTECTED]]
> Sent: Friday, December 08,
How about getting a test machine and running nbtstats to test the WINS
resolution?
>>>Brian
>From: "Benjamin Walling" <[EMAIL PROTECTED]>
>Reply-To: "Benjamin Walling" <[EMAIL PROTECTED]>
>To: [EMAIL PROTECTED]
>Subject: Re: Still doesn&#x
;
>Reply-To: "Benjamin Walling" <[EMAIL PROTECTED]>
>To: [EMAIL PROTECTED]
>Subject: Re: Still doesn't work: tough VPN question
>Date: Fri, 8 Dec 2000 08:27:04 -0500
>
>Pinging does not verify name resolution for WINS. Ping will resolve a name
>using DNS. MS
I beg to disagree with you. I can certainly telnet, ftp and ping to any
NETBios name on my network.
-Original Message-
From: Benjamin Walling [mailto:[EMAIL PROTECTED]]
Sent: Friday, December 08, 2000 9:21 AM
To: [EMAIL PROTECTED]
Subject: Re: Still doesn't work: tough VPN que
wick" <[EMAIL PROTECTED]>
>To: [EMAIL PROTECTED]
>Subject: Re: Still doesn't work: tough VPN question
>Date: Fri, 08 Dec 2000 17:56:25 -
>
>How about getting a test machine and running nbtstats to test the WINS
>resolution?
>
> >>>Brian
>
>
>
Hi,
Are you using NAT anywhere in the setup - NAT breaks some NetBIOS stuff,
particularly domain logons and NT trusts.
NAT meaning are you referencing the DC by a false IP address, or by it's
valid address.
If you are not using NAT, then forget about the IPSec, just think of it as a
router to r
min Walling'; [EMAIL PROTECTED]
Subject: RE: Still doesn't work: tough VPN question
I beg to disagree with you. I can certainly telnet, ftp and ping to any
NETBios name on my network.
-Original Message-
From: Benjamin Walling [mailto:[EMAIL PROTECTED]]
Sent: Friday, Decemb
Are you sure the PDC has a route back to the VPN client?
"Justin Menga" <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Hi,
>
> Are you using NAT anywhere in the setup - NAT breaks some NetBIOS stuff,
> particularly domain logons and NT trusts.
>
> NAT meaning
ary 22, 2001 2:49 PM
> To: [EMAIL PROTECTED]
> Subject: Re: Still doesn't work: tough VPN question
>
>
> Are you sure the PDC has a route back to the VPN client?
>
> "Justin Menga" <[EMAIL PROTECTED]> wrote in message
> [EMAIL PROTECTED]">news:[
16 matches
Mail list logo
