RE: Cisco VPN Client through ISA server

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Sat, 24 May 2003 21:29:56 -0500

Hi Stefaan and Mario,

I just got back, but I'll look for it and take care of things in the
next couple of days.

Thanks!
Tom

Thomas W Shinder 
www.isaserver.org/shinder 
ISA Server and Beyond: http://tinyurl.com/1jq1 
Configuring ISA Server: http://tinyurl.com/1llp 



-----Original Message-----
From: Stefaan Pouseele [mailto:stefaan.pouseele@xxxxxxx] 
Sent: Friday, May 23, 2003 9:49 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Cisco VPN Client through ISA server


Hi Tom,

can you forward it to me so I can update my article?

Thanks,
Stefaan

-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx]
Sent: vrijdag 23 mei 2003 16:42
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Cisco VPN Client through ISA server


http://www.ISAserver.org


Hi Mario,

If you send it to me at insider@xxxxxxxxxxx I can post it on
ISAServer.org

Thanks!
Tom

Thomas W Shinder 
www.isaserver.org/shinder 
ISA Server and Beyond: http://tinyurl.com/1jq1 
Configuring ISA Server: http://tinyurl.com/1llp 



-----Original Message-----
From: Sebastian van Dijk [mailto:sebastian@xxxxxxxxxxxx] 
Sent: Friday, May 23, 2003 2:38 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Cisco VPN Client through ISA server


http://www.ISAserver.org


Can u email me it directly maybe ?

Tnx in advance

Sebas

-----Oorspronkelijk bericht-----
Van: Mario de Jonge [mailto:netwerkbeheerder@xxxxxxxxxxxxxxxx]
Verzonden: vrijdag 23 mei 2003 9:27
Aan: [ISAserver.org Discussion List]
Onderwerp: [isalist] RE: Cisco VPN Client through ISA server


http://www.ISAserver.org


I have the correct answer but its to big to give it on the board if some
one can help me to share it please allow me.

Regards

Mario


-----Original Message-----
From: Sebastian van Dijk [mailto:sebastian@xxxxxxxxxxxx] 
Sent: Friday, May 23, 2003 9:17 AM
To: [ISAserver.org Discussion List]

http://www.ISAserver.org


Hi Michael, 

I got the same problem.

Have tried solutions provided like you and other people have given..
but didn't work..

regards

sebastian

-----Oorspronkelijk bericht-----
Van: Michael Klimkin [mailto:mstrider@xxxxxxx]
Verzonden: woensdag 21 mei 2003 19:08
Aan: [ISAserver.org Discussion List]
Onderwerp: [isalist] Cisco VPN Client through ISA server


http://www.ISAserver.org


Hello

 

I ve installed Cisco Systems VPN Client 3.6.4 on Windows 2000 Pro system
(SecureNAT client) and configured the following:

 

1. Created two protocol definitions on my ISA server (integrated mode):

- UDP Port 500 Send Receive: this is for the IKE protocol (key
negotiation).

- UDP Port 10000 Send Receive: this is for the UDP encapsulated ESP
packets. 

2. Created protocol rule who allows those two created protocols.

3. Restarted ISA Services

 

Tried to connect to the remote Cisco VPN Server and got the error -
Remote peer is no longer responding.

 

And IP Packet log contained: 

 

 

#Fields: date     time      source-ip          destination-ip
protocol            param#1           param#2           tcp-flags
filter-rule       interface

2003-05-21        17:00:39           212.x.x.x          62.x.x.x
Udp      500       500       -           BLOCKED        62.x.x.x

 

Then I created static IP Packet filter:

 

Prot.: UDP

Direction: both

Local port   fixed   500

Remote port   fixed   500

 

And then I didn t get any  blocked  packets anymore. But Cisco VPN
Client still doesn t work and the error is the same - Remote peer is no
longer responding.

 

Could you please help me with this?

 

Best regards,

Michael

 

 

 

 

 


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
s.vandijk@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
netwerkbeheerder@xxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
s.vandijk@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
stefaan.pouseele@xxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


Other related posts: