snowch@care4pcs.info
2002-Dec-29 23:14 UTC
[Samba] win98 browsing problem across VPN subnets
I have just setup a VPN connection three sites using IPCOP. Everything seems to be talking ok, apart from browsing the network neighborhood. There are no NT/Win2K/XP servers running on any of the sites, all sites are just running win98 pc's using tcp/ip. I have tried configuring all PC's to be on the same workgroup and setup sharing, but still each site can only see the pc's connected on it's that site. I have read in some newsgroups that I need to setup a WINS server, and others have suggested setting up a PDC server. Who is correct? I have an e-smith server (linux/samba/qmail/etc) that is running at one site to distribute emails, and I have the possibility of setting this server to be a (samba) domain master. Would this resolve my browsing problem, or would I need to setup WINS browsing? Any help will be appreciated... Thanks, Chris Snow
I'm not certain I understand the need for WINS Server. I have freeswan and I can broadcast ping one subnet 192.168.1.255 PING 192.168.1.255 (192.168.1.255) from 64.105.122.138 : 56(84) bytes of data. 64 bytes from 66.114.66.239: icmp_seq=1 ttl=255 time=30.4 ms 64 bytes from 66.114.66.239: icmp_seq=2 ttl=255 time=28.5 ms 64 bytes from 66.114.66.239: icmp_seq=3 ttl=255 time=30.6 ms But not another www2:~ # ping -b 192.168.0.255 PING 192.168.0.255 (192.168.0.255) from 64.105.122.138 : 56(84) bytes of data. --- 192.168.0.255 ping statistics --- 4 packets transmitted, 0 received, 100% loss, time 3015ms And yet both are only attached by VPN. www2:~ # route -n |grep ipsec 64.0.231.99 64.105.122.137 255.255.255.255 UGH 0 0 0 ipsec0 66.114.66.239 64.105.122.137 255.255.255.255 UGH 0 0 0 ipsec0 64.105.122.136 0.0.0.0 255.255.255.248 U 0 0 0 ipsec0 192.168.1.0 64.105.122.137 255.255.255.0 UG 0 0 0 ipsec0 192.168.0.0 64.105.122.137 255.255.255.0 UG 0 0 0 ipsec0 What can cause this? The 192.168.0 is behind a FreSwan System with a gateway looking like this 216.254.100.195 64.0.231.97 255.255.255.255 UGH 0 0 0 ipsec0 64.105.122.138 64.0.231.97 255.255.255.255 UGH 0 0 0 ipsec0 66.114.66.239 64.0.231.97 255.255.255.255 UGH 0 0 0 ipsec0 64.0.231.96 0.0.0.0 255.255.255.248 U 0 0 0 eth1 64.0.231.96 0.0.0.0 255.255.255.248 U 0 0 0 ipsec0 10.0.0.0 64.0.231.97 255.255.255.0 UG 0 0 0 ipsec0 192.168.1.0 64.0.231.97 255.255.255.0 UG 0 0 0 ipsec0 192.168.0.0 192.168.0.100 255.255.255.0 UG 0 0 0 eth0 192.168.0.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0 127.0.0.0 0.0.0.0 255.0.0.0 U 0 0 0 lo 0.0.0.0 64.0.231.97 0.0.0.0 UG 0 0 0 eth1 This VPN Server is not the default route for the 192.168.0.0 subnet machines. The hosts behind it look like this in their routing: 192.168.0.110 0.0.0.0 255.255.255.255 UH 0 0 0 eth0 192.168.0.130 0.0.0.0 255.255.255.255 UH 0 0 0 eth0 192.168.1.0 192.168.0.130 255.255.255.0 UG 0 0 0 eth0 192.168.0.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0 127.0.0.0 0.0.0.0 255.0.0.0 U 0 0 0 lo 0.0.0.0 192.168.0.100 0.0.0.0 UG 0 0 0 eth0 It can't broadcast to the 192.168.1 network [root@superman /root]# ping -b 192.168.1.255 PING 192.168.1.255 (192.168.1.255) from 192.168.0.110 : 56(84) bytes of data. --- 192.168.1.255 ping statistics --- 3 packets transmitted, 0 packets received, 100% packet loss But it can ping an individual host in the 192.168.1 network PING 192.168.1.100 (192.168.1.100) from 192.168.0.110 : 56(84) bytes of data. 64 bytes from 192.168.1.100: icmp_seq=0 ttl=125 time=27.1 ms 64 bytes from 192.168.1.100: icmp_seq=1 ttl=125 time=25.9 ms 64 bytes from 192.168.1.100: icmp_seq=2 ttl=125 time=27.3 ms --- 192.168.1.100 ping statistics --- 3 packets transmitted, 3 packets received, 0% packet loss round-trip min/avg/max = 25.9/26.7/27.3 ms Ruben On 2002.12.29 18:08 snowch@care4pcs.info wrote:> I have just setup a VPN connection three sites using IPCOP. > > Everything seems to be talking ok, apart from browsing the network neighborhood. There are no NT/Win2K/XP servers running on any of the sites, all sites are just running win98 pc's using tcp/ip. I have tried configuring all PC's to be on the same workgroup and setup sharing, but still each site can only see the pc's connected on it's that site. > > I have read in some newsgroups that I need to setup a WINS server, and others have suggested setting up a PDC server. Who is correct? > > I have an e-smith server (linux/samba/qmail/etc) that is running at one site to distribute emails, and I have the possibility of setting this server to be a (samba) domain master. Would this resolve my browsing problem, or would I need to setup WINS browsing? > > Any help will be appreciated... > > Thanks, > > Chris Snow > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba >-- __________________________ Brooklyn Linux Solutions __________________________ DRM is THEFT - We are the STAKEHOLDERS http://fairuse.nylxs.com http://www.mrbrklyn.com - Consulting http://www.inns.net <-- Happy Clients http://www.nylxs.com - Leadership Development in Free Software http://www2.mrbrklyn.com/resources - Unpublished Archive or stories and articles from around the net http://www2.mrbrklyn.com/downtown.html - See the New Downtown Brooklyn.... 1-718-382-0585
snowch@care4pcs.info
2002-Dec-31 09:34 UTC
[Samba] win98 browsing problem across VPN subnets
I've setup the e-smith server as the PDC. I've setup the remote clients to use this server for WINS, and to logon to NT DOMAIN. The remote clients can't see the PDC shares from network neighborhood, but the shares can be mapped by running \\server_name\share_name Any ideas? Thanks, Chris On Sun, Dec 29, 2002 at 06:08:21PM -0500, snowch@care4pcs.info wrote:> I have just setup a VPN connection three sites using IPCOP. > > Everything seems to be talking ok, apart from browsing the network neighborhood. There are no NT/Win2K/XP servers running on any of the sites, all sites are just running win98 pc's using tcp/ip. I have tried configuring all PC's to be on the same workgroup and setup sharing, but still each site can only see the pc's connected on it's that site. > > I have read in some newsgroups that I need to setup a WINS server, and others have suggested setting up a PDC server. Who is correct? > > I have an e-smith server (linux/samba/qmail/etc) that is running at one site to distribute emails, and I have the possibility of setting this server to be a (samba) domain master. Would this resolve my browsing problem, or would I need to setup WINS browsing? > > Any help will be appreciated... > > Thanks, > > Chris Snow > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba