RE: Site to Site VPN using 2 different versions of ISA Server?
- From: "Jim Harrison" <Jim@xxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Sat, 14 May 2005 06:42:36 -0700
You worry too much.
VPN connections are handled by RRAS, not ISA.
ISA maintains policies that allot the traffic to be seen by RRAS, but
that's it.
There is no "compatibility" problem between ISA 2000 and ISA 2004.
Build your box, create your S2S VPN definition (process is a bit
different that ISA 2000) and enjoy the rest of your day.
-----Original Message-----
From: Mike Anderson [mailto:mike@xxxxxxxxxxxx]
Sent: Friday, May 13, 2005 9:36 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Site to Site VPN using 2 different versions of
ISA Server?
http://www.ISAserver.org
So then, I can assume the following:
Leave the Texas and Illinois connections as is (because that's the way
it's gotta be for now), take my existing ISA 2000 Server in Wisconsin
OFF-line, bring my new ISA 2004 ON-line, create the connection profiles
for the Texas and Illinois connections, and it should magically connect
up immediately correct?
That is the key thing I need to be assured of. Both Texas and Illinois
both dial the Wisconsin ISA Server - so if I get the setup right first
time around, the links should come up shortly after I properly configure
the ISA 2004 Server. (does that sound like a likely scenario?)
Again, thanks for everything.
Mike
-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx]
Sent: Friday, May 13, 2005 11:27 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Site to Site VPN using 2 different versions of
ISA Server?
http://www.ISAserver.org
Hi Mike,
Yes, I've got it either on the ISAserver.org Web site, in the book, or
both.
HTH,
Tom
www.isaserver.org/shinder
Tom and Deb Shinder's Configuring ISA Server 2004
http://tinyurl.com/3xqb7
MVP -- ISA Firewalls
-----Original Message-----
From: Mike Anderson [mailto:mike@xxxxxxxxxxxx]
Sent: Friday, May 13, 2005 11:18 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Site to Site VPN using 2 different versions of
ISA Server?
http://www.ISAserver.org
Okay wait a second,
This thread may not be totally clear, so I need to ask once more...
I am not concerned about the actual upgrade process, or having the
actual install of 2004 recognize my existing setup, in order to migrate
my settings. I was planning on starting from scratch anyway, by redoing
the server whenever I got there, and they would be down during that
time.
I just need to know, if I can have a ISA 2004 Server running in one
location, and have it accept a Remote VPN connection from an ISA 2000
Server on the remote end - That's ALL.
Is this possible? Or do BOTH ends have to be running the SAME version
of ISA Server, in order to successfully connect with each other? I
figure if it's either PPTP or L2TP - ISA shouldn't care what is on the
other end, as long as it's Microsoft based, and they speak the same
lingo.
So now that I reworded it, will this work?
Thanks again everybody,
Mike
-----Original Message-----
From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx]
Sent: Friday, May 13, 2005 8:01 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Site to Site VPN using 2 different versions of
ISA Server?
http://www.ISAserver.org
Maybe I wasn't clear -
"ISA will migrate the VPN settings"
You can upgrade in any pattern you want.
-----Original Message-----
From: Mike Anderson [mailto:mike@xxxxxxxxxxxx]
Sent: Thursday, May 12, 2005 10:01 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Site to Site VPN using 2 different versions of
ISA Server?
http://www.ISAserver.org
Aw your kidding right?
Wow that really stinks - now I am really in a quandary, as to how I'm
supposed to magically fly out to Texas and Illinois, and somehow be in
Wisconsin all at the same time, while I simultaneously upgrade all the
old ISA servers to the new.
And this is all because of that damn site-to-site VPN bug that was
present a few months back, before it got fixed in SP1 recently. Yes I
know I could have called support back then (after finding out WAY after
the fact) but I simply burned too much of everybody's schedule at that
juncture in time - and they all demanded I go back to the original
configuration. Can't say that I blame them...
So you are all positive, that I can't setup a new ISA 2004 Server in
Wisconsin, and somehow have my 2 satellite locations running ISA 2000,
connect to it using site-to-site VPN Connections in the interim?
Sorry if it sounds like I'm complaining, it's just all that lost time I
will never get back and it makes me sick when stuff like this happens.
Thank you all for your wonderful advice as always...
Mike
-----Original Message-----
From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx]
Sent: Thursday, May 12, 2005 7:46 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Site to Site VPN using 2 different versions of
ISA Server?
http://www.ISAserver.org
No.
The VPN connections are migrated.
-----Original Message-----
From: Mike Anderson [mailto:mike@xxxxxxxxxxxx]
Sent: Thursday, May 12, 2005 5:07 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Site to Site VPN using 2 different versions of ISA
Server?
http://www.ISAserver.org
Hello All,
Presently, I have 3 sites connected together using ISA 2000. I
eventually want to convert all those sites to ISA 2004 - but the
question is, do I have to perform all of the upgrades at the exact same
time, in order to keep connectivity going?
Or, can I upgrade the primary site (which dials both remote sites) to
ISA 2004, and still have it successfully connect to the ISA 2000 remote
servers? Then travel to each of the remaining sites when I get time, to
perform the final upgrades.
Thanks in advance for any information,
Mike
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
All mail to and from this domain is GFI-scanned.
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
mike@xxxxxxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
All mail to and from this domain is GFI-scanned.
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
mike@xxxxxxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
mike@xxxxxxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
All mail to and from this domain is GFI-scanned.
Other related posts:
