IP Ranges in the ISA VPN configuration aren't about routing, but about "allowed" source IPs for that network. It's a filtering, not a routing mechanism. ------------------------------------------------------- Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/Jim_Harrison/ http://isatools.org Read the help / books / articles! ------------------------------------------------------- -----Original Message----- From: Ball, Dan [mailto:DBall@xxxxxxxxxxx] Sent: Tuesday, January 25, 2005 14:21 To: [ISAserver.org Discussion List] Subject: [isalist] RE: SSL Problems with ISA 2004 http://www.ISAserver.org That might make sense, but when I added IP ranges to the Network settings in ISA, they didn't show up in RRAS or the ROUTE PRINT, even after reboot. -----Original Message----- From: Steve Moffat [mailto:steve@xxxxxxxxxx] Sent: Tuesday, January 25, 2005 15:01 To: [ISAserver.org Discussion List] Subject: [isalist] RE: SSL Problems with ISA 2004 http://www.ISAserver.org ISA controls RRAS, any mods you make in the RRAS mmc are overwritten by ISA. Steve -----Original Message----- From: Ball, Dan [mailto:DBall@xxxxxxxxxxx] Sent: Tuesday, January 25, 2005 3:15 PM To: ISA Mailing List Subject: [isalist] RE: SSL Problems with ISA 2004 http://www.ISAserver.org Precisely! This is what I had determined last year, but was only able to actually test it over the last month. I do have a couple of questions about this though (I can hear you groaning already). The IP Ranges configured for each "Network" don't seem to have an effect on actual routing, I was kinda expecting them to make the appropriate modifications to the W2K3 routing tables, but it doesn't seem to work that way. What "actual" effect does entering IP ranges in Network Properties have? So, to work around this, I entered in static routes using the Routing and Remote Access MMC, but those didn't seem to have much of an effect either. When I entered these routes in using the ROUTE ADD command from the command prompt, they took effect immediately. I haven't researched this yet, but was under the assumption that both the MMC and the command prompt method modified the same routing table. Is this not the case? -----Original Message----- From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx] Sent: Tuesday, January 25, 2005 11:18 To: [ISAserver.org Discussion List] Subject: [isalist] RE: SSL Problems with ISA 2004 http://www.ISAserver.org Hi David, As I predicted very early on, the term "multi-networking" has created unneeded confusion :) Multinetworking is a marketing terms and its very simple. ISA Server 2000 was LAT based and supported only two networks -- LAT and non-LAT ISA Server 2004 supports an unlimited of Networks (capital N) because there is NO LAT. HTH, Tom www.isaserver.org/shinder Tom and Deb Shinder's Configuring ISA Server 2004 http://tinyurl.com/3xqb7 MVP -- ISA Firewalls ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: isalist@xxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: dball@xxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx All mail to and from this domain is GFI-scanned.