RE: ISA2000 + RRAS VPN

No probs Anthony



Greg Mulholland
http://www.isaserver.org
http://www.isaserver.mine.nu
http://groups.google.com 


-----Original Message-----
From: Anthony Michaud [mailto:anthonym@xxxxxxxxxxxxxx] 
Sent: Thursday, March 04, 2004 10:01 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISA2000 + RRAS VPN

http://www.ISAserver.org

Hi Greg,

(inline)

> -----Original Message-----
> From: Greg Mulholland [mailto:gmulholland@xxxxxxxxxxxxxxx]
> Sent: Wednesday, 3 March 2004 19:41
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: ISA2000 + RRAS VPN
> 
> RRAS only controls the behavior of your vpn server as such. 
> ISA  more or
> less passes or allows the traffic. You need to have RRAS configured 
> correctly as a VPN server and you need to have the proper rules set up

> in your firewall to allow the traffic in and even out,which I 
> specified in the previous post.

Yup, I knew that but - I just wanted some documentation to see the magic
step that I'd forgotten.

> As long as ISA and RRAS know that each other is working, that is that 
> they are setup to do the right thing you shouldn't have any problems.

Yup, I've got it working on another server, I just wanted to replicate
that.

> I think Tom may have included some info on this setup in his VPN 
> deployment docs. If its not I might write one over the next few days.
> 
> NB: Guys I cant stress the importance or value of these docs. I'm sure

> Jim, Steve and most others will back me up. There seems to be a large 
> number of people asking how to deploy stuff, majority of which have 
> been covered before over time. Not having a go at anyone at all, more 
> a constructive point. If you need to do something, get all the info 
> and all the tools then sit down and walk through it. If you still have

> problems then its time to ask. Steal works laser printer for a while, 
> print out these docs and any relevant docs and put them in a folder 
> for reference. Even bookmark them for later reference. Please, this is

> just a tip, im always happy to help.

and its incredibly frustrating when the same simple questions are asked
again and again.  I wanted to RTFM - I was just asking for a page number
:)  (Btw - the document that you prepared helped 100%!)

Another tip: have an administrative "This is where I save important
information" folder, where you save .CHM (compiled HTML) files.  They're
tidy (one file includes all images / content etc) and if you label them
correctly, you might even be able to find what you want easily.

Again, many thanks for the help - you guys make things a heck of a lot
easier for us!

Anthony.

> Greg Mulholland
> http://www.isaserver.org
> http://isatools.org
> http://groups.google.com
> 
> 
> -----Original Message-----
> From: Anthony Michaud [mailto:anthonym@xxxxxxxxxxxxxx]
> Sent: Wednesday, March 03, 2004 3:53 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: ISA2000 + RRAS VPN
> 
> http://www.ISAserver.org
> 
> Hi Greg,
> 
> Thanks - I've configured inbound & outbound on the RRAS *BUT* I did 
> this after I'd installed ISA.  Is this relevant?
> 
> I don't play with ISA often enough to remember this :/
> 
> > -----Original Message-----
> > From: Greg Mulholland [mailto:gmulholland@xxxxxxxxxxxxxxx]
> > Sent: Wednesday, 3 March 2004 10:51
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] RE: ISA2000 + RRAS VPN
> > 
> > 
> > http://www.ISAserver.org
> > 
> > Anthony
> > 
> > To assign DCHP addresses to incoming vpn clients you need to select 
> > this when you setup RRAS. It will ask you if you want to
> use DCHP or a
> 
> > static pool. As for allowing outbound vpn connections,
> right click on
> > IP packet filters node and go to the last tab. Select "PPTP through 
> > ISA firewall".
> > Now you should be able to do what you want.
> > 
> > 
> > 
> > Greg Mulholland
> > http://www.isaserver.org
> > http://isatools.org
> > http://groups.google.com
> > 
> > 
> > -----Original Message-----
> > From: Anthony Michaud [mailto:anthonym@xxxxxxxxxxxxxx]
> > Sent: Wednesday, March 03, 2004 10:36 AM
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] ISA2000 + RRAS VPN
> > 
> > http://www.ISAserver.org
> > 
> > Hi Guys,
> > 
> > Has someone got reference to setting up VPN on an ISA
> server, to allow
> 
> > both incoming DHCP assigned VPN clients, as well as outgoing VPN 
> > connections?  I had a quick search last night, but 2am
> isn't conducive
> 
> > to finding correct answers :)
> > 
> > Anthony.

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
gmulholland@xxxxxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')

Other related posts: