Sams Teach Yourself MCSE Windows NT Server 4 in 14 Days
(Publisher: Macmillan Computer Publishing)
Author(s): David Schaer, et al
ISBN: 0672311283
Publication Date: 12/15/97

If you are using IPX or TCP/IP and want to enable dynamic routing, you also must add the appropriate RIP service, RIP for NWLink IPX/SPX compatible transport for IPX, and RIP for Internet Protocol for TCP/IP. These are network services, which you can install via the Networking Control Panel.

13.7.3. Internet Connectivity

You also can use RAS to allow users of your network, including your remote users, to access the Internet via your company’s Internet service provider (see Figure 13.17).

Figure 13.17.  Use RAS to allow Internet access.

The first step in configuring Internet access is to ensure that the TCP/IP protocol is correctly configured on your RAS Server, using the address of your Internet service provider as the default gateway for accessing other networks. After you have configured the TCP/IP protocol, you must set up a dial-up networking connection from your RAS Server to your company’s Internet service provider.

Although you can allow users on your network to access the Internet by using just RAS, doing so is a security risk. It is much safer to use a product such as Microsoft Proxy Server because it gives you much more control over the connection.

13.7.4. Connecting Two (or More) LANs

Another common use of RAS as a router is to connect two networks that are separated by some distance (see Figure 13.18). In such an instance, RAS performs the task of routing packets of data from one LAN to the other.

Figure 13.18.  Use RAS to connect two networks.

In this example, two separate Microsoft-based LANs are connected by using RAS servers as routers. You only need to configure each RAS server with a dial-up networking connection to the RAS server on the other network and point to that server as the default gateway for connections to that network. Whenever a user on one network tries to connect to a resource on the other network, RAS automatically will dial in to the other network and negotiate the connection.

13.8. Troubleshooting RAS

Although many problems can occur when you are using the Remote Access Service, these problems tend to fall into two basic categories. Either the remote user cannot connect to your network at all or, once connected, the user cannot access the resources she needs. Although troubleshooting a remote connection can be quite frustrating, applying common troubleshooting methodology can help you assess the situation. If something does not work, was there a time when it did work? What has changed since then? Can none of your remote users connect or is just one having problems? Questions such as these, along with a thorough understanding of the principles behind the RAS Server, are your best tools for solving any problem.

Troubleshooting RAS is a topic you must know only in its most basic form for the NT Server exam. For example, if a user cannot access the network remotely, she might not have been granted access or the RAS service might not be running. You will not be expected to answer questions on protocol or modem troubleshooting.

13.8.1. Cannot Connect to RAS Server

Most of the time, the problem of not being able to connect to a RAS Server is a simple configuration problem in the client or server software. The following are the five main steps to take in making a remote connection (at least for the purposes of troubleshooting):

1.  The client machine attempts to make the connection by bringing up the dial-up networking interface. If this step fails, it usually is because the remote user is not actually trying to log on to the RAS Server but rather is logging on locally.

2.  The client machine dials the number to the RAS Server. You actually should hear the dial tone and dialing of the modem. If this step fails, it usually indicates an incorrect parameter in the setup of your modem or, possibly, a problem with the modem itself.

3.  A physical connection is made. You hear the squealing of the modem indicating this. If this step fails, it usually is because the telephony information is incorrect. Double-check the phone number being dialed. Failure of this step also can indicate that the RAS service on the server is not running.

4.  The connection is verified. If this step fails, it usually is because of a protocol or telephony configuration error. Double-check that you correctly installed the protocols and that dial-up networking is configured correctly to use this protocol.

5.  Logon is successful. If this step fails, the problem most likely is a permissions or user account problem. Check that the remote user is using the correct account and password and that the account exists on your network or RAS Server. Check also that the user has been granted dial-in permission to the RAS Server.

The preceding list presents general guidelines based on a typical configuration of the RAS service. Note also that, although steps 2 and 3 indicate sounds or events specific to modems connecting over analog lines, the specific events may differ if you are using other communications technology, such as ISDN or X.25.

13.8.2. Cannot Access Needed Resources

If a remote client can dial and connect to the RAS Server but cannot access the resources that she needs, then a simple configuration error most likely is the source of the problem. The first thing to check is that the appropriate modem and networking protocols are configured on the client and server machines. After you have done this, make sure that you have chosen correctly whether the client has access to the Entire network or to This computer only (see Figures 13.6 through 13.8). If these are correct, you must verify the user’s account settings and the permissions assigned to the needed resource.

13.9. Lab

This lab will aid in your learning by testing you on the information presented in this chapter, as well as by showing you how you could apply that knowledge in real-world situations. You can find answers to the review questions in Appendix B, “Answers to Review Questions.”