Re: Can't ping public IPs
- From: "Jim Harrison" <jim@xxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Thu, 14 Aug 2003 15:56:45 -0700
It sounds like you're trying to use IPSec.
That only works across any NAT (not just ISA) in transport mode.
Make sure:
1. the client supports IPSec transport mode
2. the remote server supports IPSec transport mode
Tom has some nice VPN articles on ISAServer.org...
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://www.microsoft.com/isaserver
http://isaserver.org/Jim_Harrison
http://isatools.org
Read the help, books and articles!
----- Original Message -----
From: "Winoto Huandra" <whuandra@xxxxxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Thursday, August 14, 2003 13:57
Subject: [isalist] Re: Can't ping public IPs
http://www.ISAserver.org
Jim,
Thank for the info, it worked.
After ping worked, it lead to another problem that I can't establish VPN
connection.
I'm using Cisco VPN client software ver 4.01 connect from workstation behind
ISA server and I got the error "Secure VPN connection terminated locally by
the client reason the remote peer is no longer responding" if I connect
without ISA server it works fine, what do I need to add on ISA server?
My ISA temp setting are
Site and content rules - Allow all destinations
Protocol Rules - Allow all IP traffic
IP packet filters - Allow any IP protocol on both direction
PPTP works fine
Can you help?
Thanks
Winoto
-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
Sent: Monday, August 11, 2003 10:07 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Can't ping public IPs
http://www.ISAserver.org
Only SecureNAT clients can ping or tracert (ICMP-based protocols).
Even then, they can only do that if:
1. they can resolve a name to a reachable IP
2. "Enable IP routing" is selected in IP Packet Filtering properties
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/Jim_Harrison/
http://isatools.org
Read the help / books / articles!
On Mon, 11 Aug 2003 21:59:15 -0600
whuandra@xxxxxxxxxxxxxxx wrote:
http://www.ISAserver.org
I can ping yahoo.com from ISA server, but I can't ping yahoo.com from
other workstations that have firewall client installed, if I ping
yahoo.com it reply with "Request timed out" but I can browse yahoo.com
website. no problem with browsing websites.
Can anyone please help?
Thanks
Huandra
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
whuandra@xxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
