RE: tough VPN question

From: Tracy Blackmore (TracyB@xxxxxxxxx)
Date: Thu Dec 07 2000 - 12:36:42 GMT-3


   
You need to make sure ports 137, 138, and I think 139 are clear both ways.
NetBIOS over IP uses these ports to authenticate to a Microsoft Domain. As
Robert said, you will need to manually update the lmhosts file on the
clients if browser traffic is not passing the tunnel.

Tracy W. Blackmore
T.S. Lad Consulting
1026 E Stanford Ave.
Gilbert, AZ., 85234
(480)558-0472

 -----Original Message-----
From: Gils@publicom.co.il [mailto:Gils@publicom.co.il]
Sent: Thursday, December 07, 2000 1:47 AM
To: trycisco@yahoo.com; cisco@groupstudy.com
Cc: ccielab@groupstudy.com
Subject: RE: tough VPN question

Hi,

  Does the network configured to work with the 10.x.x.x addresses as a C
class ?
If you do it sometimes cause a lot of problems with NBT so just for argument
sake try configuring two computers with a true C class or a True B class and
than try.

 I hope it helps
   Gil

-----Original Message-----
From: Jim Bond [mailto:trycisco@yahoo.com]
Sent: ??? ????? 07 ????? 2000 08:19
To: cisco@groupstudy.com
Cc: ccielab@groupstudy.com
Subject: tough VPN question

Hello,

I'm trying to set up a IPSec between a PIX (branch
office) and router (central office). All PCs at branch
office share 1 ip address. IPSec seems to be working
fine because clients can ping/telnet/email/map drives
from/to central office. The problem is they can't
logon NT domain. They can ping domain controller
though.

Any idea why they can't log on NT domain? (The
machines were already added to domain)

Thanks in advance.

Jim



This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 08:25:59 GMT-3