ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    ZeroTier Question

    IT Discussion
    zerotier
    9
    279
    174.5k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      dafyre
      last edited by

      Show us the output of

      ipconfig /all
      

      ?

      W 1 Reply Last reply Reply Quote 0
      • D
        Dashrender @WLS-ITGuy
        last edited by

        @WLS-ITGuy said in ZeroTier Question:

        @scottalanmiller said in ZeroTier Question:

        @WLS-ITGuy said in ZeroTier Question:

        Let me ask this question...

        We are a subdomain of the main branch organization. They have rmoved to Office 365 but we cannot be a part of that move. Don't get me started on that part. 🙂

        Could this be part of the issue?

        I don't see how but at this point I am looking at everything.

        O365 doesn't have any components that would be involved here.

        Let me explain a bit.

        www.wels.net is the main org

        www.wls.wels.net is us.

        The main org went Azure and Office 365 but due to costs we weren't going to move to office 365.

        Could it have something to do with their DNS of www.wels.net being pointed to Office 365?

        That would depend, but only in so much as finding things for Outlook setting itself up to find Exchange, etc, activesync for phones. It won't affect DNS itself for finding servers inside your organization.

        1 Reply Last reply Reply Quote 0
        • D
          Dashrender
          last edited by

          Are their email address - username@wels.net
          and your email address - username@wls.wels.net?

          If so, those are two different DNS MX records. They can each go anywhere you want them to.

          W 1 Reply Last reply Reply Quote 0
          • W
            WLS-ITGuy @dafyre
            last edited by

            @dafyre said in ZeroTier Question:

            Show us the output of

            ipconfig /all
            

            ?
            http://i.imgur.com/4KvbqJ0.png
            http://i.imgur.com/Q8orjss.png

            1 Reply Last reply Reply Quote 0
            • W
              WLS-ITGuy @Dashrender
              last edited by

              @Dashrender said in ZeroTier Question:

              Are their email address - username@wels.net
              and your email address - username@wls.wels.net?

              If so, those are two different DNS MX records. They can each go anywhere you want them to.

              That is correct. Exchange works fine as it is. I was just wondering if *.wels.net was getting sucked into Office 365 somehow.

              We have noticed a few issues with people who are trying to access their Microsoft Accounts getting errors saying that there is no account for them at WELS Cloud.

              D 1 Reply Last reply Reply Quote 0
              • D
                Dashrender @WLS-ITGuy
                last edited by

                @WLS-ITGuy said in ZeroTier Question:

                @Dashrender said in ZeroTier Question:

                Are their email address - username@wels.net
                and your email address - username@wls.wels.net?

                If so, those are two different DNS MX records. They can each go anywhere you want them to.

                That is correct. Exchange works fine as it is. I was just wondering if *.wels.net was getting sucked into Office 365 somehow.

                We have noticed a few issues with people who are trying to access their Microsoft Accounts getting errors saying that there is no account for them at WELS Cloud.

                I would think in your case, you wouldn't want to have a *.wels.net record because of problems like this.

                W 1 Reply Last reply Reply Quote 0
                • W
                  WLS-ITGuy @Dashrender
                  last edited by

                  @Dashrender said in ZeroTier Question:

                  @WLS-ITGuy said in ZeroTier Question:

                  @Dashrender said in ZeroTier Question:

                  Are their email address - username@wels.net
                  and your email address - username@wls.wels.net?

                  If so, those are two different DNS MX records. They can each go anywhere you want them to.

                  That is correct. Exchange works fine as it is. I was just wondering if *.wels.net was getting sucked into Office 365 somehow.

                  We have noticed a few issues with people who are trying to access their Microsoft Accounts getting errors saying that there is no account for them at WELS Cloud.

                  I would think in your case, you wouldn't want to have a *.wels.net record because of problems like this.

                  Sorry - I meant the * as wls.wels.net

                  1 Reply Last reply Reply Quote 0
                  • W
                    WLS-ITGuy @Dashrender
                    last edited by

                    @Dashrender said in ZeroTier Question:

                    Sounds like you have a DNS issue. You might not be able to use short NetBIOS type names.. you might have to move to FQDN instead.

                    For example, if you're at StarBucks and the DHCP server gives a suffix of starbucks.com out with the IP, and you ping server1, your system might be pinging server1.starbucks.com instead of server1.yourdomain.com

                    I missed this or it didn't click. So you're saying that I might have to go to wls-dc01.wls.wels.net instead of WLS-DC01, correct?

                    D 1 Reply Last reply Reply Quote 1
                    • W
                      WLS-ITGuy
                      last edited by

                      Also, if I ping another server from off site I get this:

                      http://i.imgur.com/i2l62Y5.png

                      D 1 Reply Last reply Reply Quote 0
                      • D
                        dafyre
                        last edited by dafyre

                        You need to go into the NIC settings for your ZT adapter and specify the ZT IP address of you internal DNS server...

                        What is happening is your ping / nslookup from off-site is using whatever DNS servers your ISP gives you.

                        0_1462907878991_upload-dd55b6bd-b398-417a-a37b-21ee802b126d

                        Both of the IP addresses that I pointed to are the ZT IP addresses of my internal DNS servers.

                        W 1 Reply Last reply Reply Quote 2
                        • W
                          WLS-ITGuy @dafyre
                          last edited by

                          @dafyre said in ZeroTier Question:

                          You need to go into the NIC settings for your ZT adapter and specify the ZT IP address of you internal DNS server...

                          What is happening is your ping / nslookup from off-site is using whatever DNS servers your ISP gives you.

                          0_1462907878991_upload-dd55b6bd-b398-417a-a37b-21ee802b126d

                          Both of the IP addresses that I pointed to are the ZT IP addresses of my internal DNS servers.

                          DUDE! YOU ARE A GENIUS! <---Absoluetely no sarcasm

                          D 1 Reply Last reply Reply Quote 0
                          • D
                            dafyre @WLS-ITGuy
                            last edited by dafyre

                            @WLS-ITGuy said in ZeroTier Question:

                            @dafyre said in ZeroTier Question:

                            You need to go into the NIC settings for your ZT adapter and specify the ZT IP address of you internal DNS server...

                            What is happening is your ping / nslookup from off-site is using whatever DNS servers your ISP gives you.

                            0_1462907878991_upload-dd55b6bd-b398-417a-a37b-21ee802b126d

                            Both of the IP addresses that I pointed to are the ZT IP addresses of my internal DNS servers.

                            DUDE! YOU ARE A GENIUS! <---Absoluetely no sarcasm

                            This goes back to what I was saying earlier though... Your AD servers may have two IP addresses for everything... so if you ping ad01.mydomain.net, you might get the internal IP address... and that is fine if you are on site.

                            If you are off-site and your DNS server returns the internal IP, stuff still ain't gonna work. 😞

                            Edit: Thanks for the Kudos. 😄

                            W JaredBuschJ 2 Replies Last reply Reply Quote 0
                            • W
                              WLS-ITGuy @dafyre
                              last edited by

                              @dafyre I got the onsite vs offsite part. However, shouldn't ZeroTier handle the offsite routing? Or is that not how this works 🙂

                              D D 2 Replies Last reply Reply Quote 0
                              • D
                                dafyre @WLS-ITGuy
                                last edited by

                                @WLS-ITGuy said in ZeroTier Question:

                                @dafyre I got the onsite vs offsite part. However, shouldn't ZeroTier handle the offsite routing? Or is that not how this works 🙂

                                ZT will only run traffic across its NIC that falls on the ZT IP Range. So if you DNS Server returns 172.16.10.100 and your ZT Network is 192.168.100.x ... Your ZT Network won't know how to get you to the 172 network.

                                1 Reply Last reply Reply Quote 0
                                • D
                                  Dashrender @WLS-ITGuy
                                  last edited by

                                  @WLS-ITGuy said in ZeroTier Question:

                                  @dafyre I got the onsite vs offsite part. However, shouldn't ZeroTier handle the offsite routing? Or is that not how this works 🙂

                                  It's not about handling routing because there would be no route.

                                  Example
                                  Server internal wire network IP - 192.16.8.10
                                  ________________________ZT IP - 10.0.50.10

                                  If, when you're offsite, DNS returns the 192.16.8.10 address, the ZT network would never look at this traffic because it's not part of the ZT network. Instead that traffic would go to the normal NIC, wireless probably, and go out that way and of course fail.

                                  D 1 Reply Last reply Reply Quote 1
                                  • D
                                    Dashrender @WLS-ITGuy
                                    last edited by

                                    @WLS-ITGuy said in ZeroTier Question:

                                    @Dashrender said in ZeroTier Question:

                                    Sounds like you have a DNS issue. You might not be able to use short NetBIOS type names.. you might have to move to FQDN instead.

                                    For example, if you're at StarBucks and the DHCP server gives a suffix of starbucks.com out with the IP, and you ping server1, your system might be pinging server1.starbucks.com instead of server1.yourdomain.com

                                    I missed this or it didn't click. So you're saying that I might have to go to wls-dc01.wls.wels.net instead of WLS-DC01, correct?

                                    Yes this is exactly what I meant.

                                    1 Reply Last reply Reply Quote 0
                                    • D
                                      Dashrender @WLS-ITGuy
                                      last edited by

                                      @WLS-ITGuy said in ZeroTier Question:

                                      Also, if I ping another server from off site I get this:

                                      http://i.imgur.com/i2l62Y5.png

                                      WOW - how does that happen? What is returning that IP address? I wonder if the coffeehouse server is returning bad info?

                                      D W 2 Replies Last reply Reply Quote 0
                                      • D
                                        dafyre @Dashrender
                                        last edited by

                                        @Dashrender said in ZeroTier Question:

                                        @WLS-ITGuy said in ZeroTier Question:

                                        @dafyre I got the onsite vs offsite part. However, shouldn't ZeroTier handle the offsite routing? Or is that not how this works 🙂

                                        It's not about handling routing because there would be no route.

                                        Example
                                        Server internal wire network IP - 192.16.8.10
                                        ________________________ZT IP - 10.0.50.10

                                        If, when you're offsite, DNS returns the 192.16.8.10 address, the ZT network would never look at this traffic because it's not part of the ZT network. Instead that traffic would go to the normal NIC, wireless probably, and go out that way and of course fail.

                                        And this is why I default to building a ZT Gateway. Yes, it is more work up front. Yes, it is slightly more complicated. However, it prevents you from having to deal with these types of issues.

                                        W scottalanmillerS 2 Replies Last reply Reply Quote 0
                                        • D
                                          dafyre @Dashrender
                                          last edited by

                                          @Dashrender said in ZeroTier Question:

                                          @WLS-ITGuy said in ZeroTier Question:

                                          Also, if I ping another server from off site I get this:

                                          http://i.imgur.com/i2l62Y5.png

                                          WOW - how does that happen? What is returning that IP address? I wonder if the coffeehouse server is returning bad info?

                                          You probably need to ipconfig /flushdns ?

                                          D 1 Reply Last reply Reply Quote 1
                                          • W
                                            WLS-ITGuy @Dashrender
                                            last edited by

                                            @Dashrender said in ZeroTier Question:

                                            @WLS-ITGuy said in ZeroTier Question:

                                            Also, if I ping another server from off site I get this:

                                            http://i.imgur.com/i2l62Y5.png

                                            WOW - how does that happen? What is returning that IP address? I wonder if the coffeehouse server is returning bad info?

                                            This is from a single user at his home.

                                            1 Reply Last reply Reply Quote 0
                                            • 1
                                            • 2
                                            • 5
                                            • 6
                                            • 7
                                            • 8
                                            • 9
                                            • 13
                                            • 14
                                            • 7 / 14
                                            • First post
                                              Last post