VPN Server Deployment

Yesterday, I have worked on VPN server deployment in our office. We are planning to use our windows server 2003 as a VPN server.

But In our windows server 2003, we have only single NIC.

So, I have deployed VPN server according to single NIC. The procedure as follows

1. Configured RRAS server for single NIC
2. Enable Router to forward PPTP packets (1723)
3. Create a VPN client

After established the VPN connection, the VPN client not able to ping or communicate to the RRAS server. So, I Google it and found the following useful information.

Cannot reach beyond the RRAS server from VPN clients?

Many a time we face this issue - after making a VPN connection to the Routing and Remote Access server, we are unable to reach the machine on the network behind the VPN server. Here are a few tips to troubleshoot this.

Let's consider this example to understand this well.

VPN Client <---Internet---> RRAS server <----------------> LAN client

Static pool configured on RRAS server: 10.0.0.1 - 10.0.0.10 [This means that the VPN clients will get a 10.0.0.X address from this pool]

Public interface of RRAS server to which clients connect: 65.54.46.9

Private interface of RRAS server: 192.168.0.4 (The LAN clients on this network will have addresses 192.168.0.X)

We want to reach the LAN client 192.168.0.16 from the VPN client 10.0.0.2. The following are the things that we need to ensure for this

(1) Need to have proper routes on the VPN client to reach the machines behind the RRAS server

For our example, on the VPN client we need to have a route to reach the LAN client i.e. for 192.168.0.16 as the destination with the VPN server (10.0.0.1) as the gateway as follows.

route add 192.168.0.0 mask 255.255.255.0 10.0.0.1 if

This route makes sure that any packet destined to the LAN clients will go out through the PPP adapter of the client to the server's internal interface. As the RRAS server has one interface on the same network as the LAN client, it will route it accordingly to the LAN client.

On the VPN client side, a default route can also be added which can be used to reach the internet [otherwise even internet requests will go through the RAS server].

This concept is called split- tunneling and is explained in the below article. http://www.microsoft.com/technet/community/columns/cableguy/cg1003.mspx

(2) Need to have correct routes on the LAN clients behind the RRAS server for the VPN clients

The packet from the VPN client will reach the LAN client if the route on VPN client is proper which is ensured by (1) above.
However, for the packet from LAN client to reach the VPN client, we should have correct routes on the LAN client too. For example, when you try to ping 192.168.0.16 from the VPN client, the routes on the VPN client will aid in the echo request to reach 192.168.0.16.

However, for the echo reply from 192.168.0.16 to reach the VPN client, you LAN client should have a route for the VPN client with gateway as the private interface of RRAS server as follows:

route add 10.0.0.0 mask 255.255.255.0 192.168.0.4 if

This way, the echo reply destined to 10.0.0.2 will reach the RRAS server which is the next hop according to the above route. Once it reaches the RRAS server, the server knows how to send it to the client as it will have a route for all clients conencted to it.

Note: On the LAN clients, a reverse route can be added individually on all the clients or all LAN clients may be pointing to some router which then can have a reverse route for 10.0.0.0 network OR RRAS server itself can be the default router for LAN clients

NDTV Indian Of The Year - 2007 "Thalivar Rocks"

The much-awaited and much-anticipated ‘Indian of the Year Award 2008’, launched by NDTV, was finally on declared on 17th January, at Hotel Taj Palace. Started by NDTV a couple of year back, ‘Indian of the Year Award’ has today become one of the biggest honors to be bestowed on outstanding Indians, by a media house. The award is meant for those who have shown promise and excellence in their respective fields. It is a way to honor them for the efforts they have put in for building the ‘Brand India’.

Winners of NDTV Indian of the Year Award

NDTV Leader of the Year: "Dr Manmohan Singh"
NDTV Entertainer of the Year: "Rajnikanth"
NDTV Sports Leader of the Year: "Vishwanathan Anand"
NDTV Music Award: "A R Rehman"
NDTV Business Leader of the Year: "Mukesh Ambani"
NDTV Indian of the Year: "Indian Soldier"
NDTV Global Indian of the Year: "R K Pachauri"

Source : NDTV

VLC media player - 0.8.6d

VLC media player is a highly portable multimedia player for various audio and video formats (MPEG, MPEG-2, MPEG-4, DivX, mp3, ogg, ...) as well as DVDs, VCDs, and various streaming protocols.

Click to Download

The Network Bottleneck

Bottleneck :-

The delay in transmission of data through the circuits of a computer's over a TCP/IP network. The delay typically occurs when a system's bandwidth cannot support the amount of information being relayed at the speed it is being processed. There are, however, many factors that can create a bottleneck in a system.

Bottlenecks affect network performance by slowing down the flow of information transmitted across networks. TCP/IP connections were originally designed to transmit only text files, and the proliferation of bandwidth-intensive transmissions such as high-resolution graphics has caused bottlenecks in the process; therefore, the data moves more slowly across networks

Network Balancing

Subnetting your network and putting multiple NICs in your servers will help to solve the bottleneck, but you must figure out how to split the network so that the load will be evenly distributed - one connection may be lying idle while the other is saturated.

WIN XP - Double click with Mouse to File/Folder open Properties page

First time in My system, I cant double click to open file/folder or anything with Mouse.It opens only properties page.

I checked the following and no luck:-

1.Mouse button settings and properties
2.Accessibility options / sticky keys
2.Virus,Spyware/Malware programs

Finally...That was a simple and stupid fix.am re-installed the mouse driver and its working fine now.

Cannot Access Own website in Internal Domain

Last week, We've moved our web server and domain to new network and yesterday am troubled with internal network users unable to resolve our own website, but from external world we can access.

Then i checked the DNS server CNAME record for 'www' and found everything fine.And then googgle it, found DNS server cache is the issue.

And then clear the DNS server cache and last our internal network users can able to resolve our website.

Find more infomation about DNS server cache at DNS Cache

Microsoft Windows SharePoint Services 3.0 Step by Step
Pub : Microsoft Press
Author : byOlga Londer, Bill English, Todd BleekerandPenelope Coventry