RE: ISA server and SnapGear VPN server

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Tue, 25 Mar 2003 18:15:50 -0600

Hi Micheal,
 
Great! Let us know how it works out for you.
 
Thanks!
Tom

Thomas W Shinder 
www.isaserver.org/shinder 
ISA Server and Beyond: http://tinyurl.com/1jq1 
Configuring ISA Server: http://tinyurl.com/1llp 

        -----Original Message-----
        From: Michael Bonnice [mailto:whadmin@xxxxxxxxxxxxxx] 
        Sent: Monday, March 24, 2003 9:54 PM
        To: [ISAserver.org Discussion List]
        Subject: [isalist] RE: ISA server and SnapGear VPN server
        
        
        http://www.ISAserver.org
        
        
        Thanks so much for that Tom. Ill check the article out and have
a go. Im fairly new to ISA so I wasn't sure of the configuration
terminology.

                ----- Original Message ----- 
                From: Thomas W Shinder
<mailto:tshinder@xxxxxxxxxxxxxxxxxx>  
                To: [ISAserver.org Discussion List]
<mailto:isalist@xxxxxxxxxxxxx>  
                Sent: Tuesday, March 25, 2003 12:37 PM
                Subject: [isalist] RE: ISA server and SnapGear VPN
server
                
                
                http://www.ISAserver.org
                
                
                Hi Michael,
                 
                OK, makes sense now. You need to configure VPN
passthrough. Check out my article on configuring VPN connections with
back to back DMZ configuration over at www.isaserver.org/shinder if
you're not familiar with the details. Essentially, the clients establish
a VPN configuration with the device in front, and then tunnel inside
that tunnel to create the internal firewall, which is ISA Server in this
case.
                 
                HTH,
                Tom

                Thomas W Shinder 
                www.isaserver.org/shinder 
                ISA Server and Beyond: http://tinyurl.com/1jq1 
                Configuring ISA Server: http://tinyurl.com/1llp 

                        -----Original Message-----
                        From: Michael Bonnice
[mailto:whadmin@xxxxxxxxxxxxxx] 
                        Sent: Monday, March 24, 2003 9:24 PM
                        To: [ISAserver.org Discussion List]
                        Subject: [isalist] RE: ISA server and SnapGear
VPN server
                        
                        
                        http://www.ISAserver.org
                        
                        
                        hi Tom
                         
                        ISA server is bundled with small business
server. My ISA server is also the main server for most things.
                         
                        The VPN server is the SnapGear firewall which is
connected to the external NIC of the ISA. The LAN is connected to the
internal NIC.
                         
                        ie.   LAN ----- SBS server with ISA ---- VPN
server (snapgear firewall) ---- adsl modem.
                        
                        The VPN clients will be remote dialup users. I
have tested this and I can connect successfully to the VPN server ,
however i cannot pass through the ISA server to the LAN. They are all on
the same subnet.
                         
                         
                        ISA is blocking the VPN clients getting through.
                         
                        Thanks,
                         
                        Michael
                         
                         

                                ----- Original Message ----- 
                                From: Thomas W Shinder
<mailto:tshinder@xxxxxxxxxxxxxxxxxx>  
                                To: [ISAserver.org Discussion List]
<mailto:isalist@xxxxxxxxxxxxx>  
                                Sent: Tuesday, March 25, 2003 12:13 PM
                                Subject: [isalist] RE: ISA server and
SnapGear VPN server
                                
                                
                                http://www.ISAserver.org
                                
                                
                                Hi Michael,
                                 
                                Some things aren't clear:
                                 
                                1. Where is the ISA Server?
                                 
                                2. Where is the VPN server?
                                 
                                3. Where is the VPN client?
                                 
                                Thanks!
                                Tom

                                Thomas W Shinder 
                                www.isaserver.org/shinder 
                                ISA Server and Beyond:
http://tinyurl.com/1jq1 
                                Configuring ISA Server:
http://tinyurl.com/1llp 

                                -----Original Message-----
                                From: Michael Bonnice
[mailto:whadmin@xxxxxxxxxxxxxx] 
                                Sent: Monday, March 24, 2003 7:49 PM
                                To: [ISAserver.org Discussion List]
                                Subject: [isalist] ISA server and
SnapGear VPN server
                                
                                
                                http://www.ISAserver.org
                                
                                
                                Hi All.
                                 
                                Just wondering if anyone can help me, I
currently have this setup ..  
                                 
                                LAN > 2000 SBS with ISA server >
SnapGear Pro+ Firewall unit with VPN server > ADSL modem
                                 
                                I have the SnapGear unit setup as the
VPN server and I can connect and authenticate fine. However when I try
to contact the SBS server or anything behind it i.e.. the LAN , I cant
ping at all. I can ping the firewall but not the SBS ISA server. I think
this is because ISA server is blocking the outside incoming VPN traffic.
                                Could anyone shed some light this.
                                 
                                Thanking You
                                 
                                Michael Bonnice

Other related posts: