RE: VPN into ISA from too-small-for-another-ISA remote LAN

  • From: "Alfonso Lopez de Ayala" <alopezdeayala@xxxxxxxxxxxx>
  • To: "'[ISAserver.org Discussion List]'" <isalist@xxxxxxxxxxxxx>
  • Date: Wed, 22 May 2002 18:53:52 -0700

Thanks.  I actually use that setting you describe for larger offices.
The idea is that these remote offices are too small (sometimes just 2 or
3 computers) to have any servers (Win2k Svr) and would like to use a
simple VPN device like the SonicWall rather.

-----Original Message-----
From: Daniel Danilovski [mailto:daniel@xxxxxxxxxxxxx] 
Sent: Wednesday, May 22, 2002 5:55 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: VPN into ISA from too-small-for-another-ISA
remote LAN

http://www.ISAserver.org


If you have Win2K Server in the remote office, you can set RRAS to
establish VPN to ISA server. Start the wizard on the ISA and finish it.
Write down details what will wizard do. Now you will have to configure
RRAS on Win2k Server manualy with those details
Create user account on Win2k Srv same as one that ISA wizard uses for
dial out, set password for this account and then set dial out
credentials on ISA RRAS to use this password.  
Set the dial out credentials on RRAS on W2K with user account that ISA
will expectd for dialing in (the one that wizard creates. For this
account you will have to reset password that ISA server created and set
new one.

This worked for me in the test lab. 

Daniel

-----Original Message-----
From: Alfonso Lopez de Ayala [mailto:alopezdeayala@xxxxxxxxxxxx] 
Sent: Wednesday, May 22, 2002 10:13 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] VPN into ISA from too-small-for-another-ISA remote
LAN


http://www.ISAserver.org


Hi... any ideas on best way to set small remote LAN (2 to 5 computers)
to VPN into ISA server?  Having so few computers in remote LAN doesn't
warrant a remote ISA box.

 - Anyone tried or has info re a SonicWall or similar box to VPN into
ISA from remote LAN? Is this a good idea?  (It'd have to use PPTP,
rather than L2TP, I imagine?)  The idea is NOT to have to set up those
computers in remote office any different than those in the central
office or with VPN client software.

 - Or is the only way to VPN from each W2kPro workstation into the
central ISA server?

------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
daniel@xxxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')


------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
alopezdeayala@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')



Other related posts: