[isalist] Re: Error establishing a VPN to the ISA server

  • From: "Thor (Hammer of God)" <thor@xxxxxxxxxxxxxxx>
  • To: "isalist@xxxxxxxxxxxxx" <isalist@xxxxxxxxxxxxx>
  • Date: Wed, 28 Jun 2006 17:58:08 -0700

http://www.ISAserver.org
-------------------------------------------------------
  
Wow.  Just, wow.  ;)

Hey, if the guy is asking you to say, what can you say?  I'd have a really
hard time billing for that (as I'm sure you are now) but if he demands it,
then there is not a lot you can do.

Enjoy the trip!

t


On 6/28/06 5:50 PM, "Glenn P. JOHNSTON" <glenn.johnston@xxxxxxxxxxx> spoketh
to all:

> The user is a "turn it on, do what I normally do, it must work". If not, 'Yell
> and Scream', louder and louder till someone fixes it, type user.
>  
> The RPC/over/HTTP, whilst very easy and fairly simple, would have required him
> making a change to the outlook setup on his notebook, and with this user, it
> was just not an option, there just no way to get him to do it.
>  
> So I won a trip away for a couple of nights.
>  
> His Demaned I stay here in Melbourne, at his companies expense, on my hourly
> rate, till Saturday Morning, in case it stops working again, and he can't get
> his e-mail ! 
>  
> The wife said "Where do we find more users like this bozzo, maybe we can get
> some more trips away ?
> 
> ________________________________
> 
> From: isalist-bounce@xxxxxxxxxxxxx on behalf of Lists
> Sent: Wed 28/Jun/2006 14:31
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: Error establishing a VPN to the ISA server
> 
> 
> What about Tom's earlier suggestion if he only needs his e-mail to use Outlook
> 2003 with RPC/HTTP and eliminate the VPN? Very easily/nicely setup with SBS
> 2003.
> 
> ________________________________
> 
> From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
> Behalf Of Glenn P. JOHNSTON
> Sent: Tuesday, June 27, 2006 9:18 PM
> To: isalist@xxxxxxxxxxxxx
> Subject: RE: [isalist] Re: Error establishing a VPN to the ISA server
> 
> 
> Plan is, I am going to take;
> 
> 1. 
> A linksys 4 port BB router, to plug in between the hotels BB, and his
> notebook, which I think will do the trick nicely.
> 2. 
> A wireless broadband card, just in case.
> 3. 
> A second notebook with the companys SOE on it, also just in case.
> 4. 
> My Wife, it will be a nice little day or two away for us.
> 
> 
> ________________________________
> 
> From: isalist-bounce@xxxxxxxxxxxxx on behalf of Thor (Hammer of God)
> Sent: Wed 28/Jun/2006 14:06
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: Error establishing a VPN to the ISA server
> 
> 
> 
> http://www.ISAserver.org
> -------------------------------------------------------
>  
> You gonna add a new IP to the server, bring a little NAT router, or both? ;)
> 
> t
> 
> 
> On 6/27/06 9:00 PM, "Glenn P. JOHNSTON" <glenn.johnston@xxxxxxxxxxx> spoketh
> to all:
> 
>> I don't believe it.
>> 
>> I've just been offered a return first class plane ticket, a nights
>> accomodation, 2 nights if need be, all expenses + how ever many hours it
>> takes
>> at my normal hourly rate to go see the director in person and fix this for
>> him
>> so he can get his e-mail !
>> 
>> "Well I'll loose a whole day on this", "Fine, then charge us for every hour
>> your away, just get it fixed !"
>> 
>> 
>> 
>> ________________________________
>> 
>> From: isalist-bounce@xxxxxxxxxxxxx on behalf of Thor (Hammer of God)
>> Sent: Wed 28/Jun/2006 13:45
>> To: isalist@xxxxxxxxxxxxx
>> Subject: [isalist] Re: Error establishing a VPN to the ISA server
>> 
>> 
>> 
>> http://www.ISAserver.org
>> -------------------------------------------------------
>> 
>> OWA would be a great "backup" solution in the rare case where the local
>> Ethernet LAN is the same logical subnet as their own offices, even if he
>> couldn't sync.  But, in your case of having a jackass for a client, you're
>> kind of stuck.
>> 
>> An easier thing to do would be to get a little Linksys NAT router to stick
>> in between.  Plug the hotel ethernet to the "Internet" port, and plug the
>> laptop into a "LAN" port.  That way he'll get a local 192.168.1 address and
>> have no problems.  Plus, there is no configuration needed at all.  The
>> defaults will work just fine.  Just plug it in and go.
>> 
>> t
>> 
>> 
>> On 6/27/06 8:29 PM, "Glenn P. JOHNSTON" <glenn.johnston@xxxxxxxxxxx> spoketh
>> to all:
>> 
>>> I'm told he refuses to use OWA as he can't sync his mail with the OST on his
>>> notebook. There is just no helping some people, no matter how hard you try
>>> to
>>> be helpful and solve their problem, they just refuse all help on principle !
>>> 
>>> Also they passed on to me, that in his yelling and screaming his demanding
>>> to
>>> know 'Why someone did not realise this would happen, and get it fixed before
>>> hand, so I can get my e-mail"
>>> 
>>> I really feel sorry for the IT guy at the site, his early 20's, finished a
>>> development oriented IT degree last year, is quite bright really, but is
>>> still
>>> just learning the finer points of the winserver environment, supporting XP
>>> etc, and it working toward his MCSE, having passed the first 2 exams in the
>>> last couple of months. He reports to this Director, and from what I can see,
>>> gets one hell of a serve from him as soon as anything a little bit odd
>>> occurs.
>>> 
>>> I can't see a away around this, without the Director having to do something
>>> out of the ordinary, which apparently, is just not an option, and have just
>>> told them that.
>>> 
>>> I've suggested the only possibly way, I can see, is to go out and purchase a
>>> wireless broadband card from someone local, get it on the net,  set up a
>>> notebook with it and his e-mail, and get it express couriered to him. He'd
>>> have it early eveing or first thing in the morning.
>>> 
>>> There was a chocking sound on the other end of the phone, "but then he'd
>>> have
>>> to carry 2 notebooks back ! " and "What do I do if he gets it and it does
>>> not
>>> work ?" ..................................
>>> 
>>> Find another job came to mind..
>>> 
>>> ________________________________
>>> 
>>> From: isalist-bounce@xxxxxxxxxxxxx on behalf of Thor (Hammer of God)
>>> Sent: Wed 28/Jun/2006 12:49
>>> To: isalist@xxxxxxxxxxxxx
>>> Subject: [isalist] Re: Error establishing a VPN to the ISA server
>>> 
>>> 
>>> 
>>> http://www.ISAserver.org
>>> -------------------------------------------------------
>>> 
>>> Well, it would have worked other than the gw on the hotel being the same as
>>> the SBS box... Bad luck there.  But, I've had to do this several times for
>>> the exact same scenario with my people.  Seems the Marriott and I thought
>>> alike in our IP schemes ;)
>>> 
>>> You could always just add another IP address to the SBS box (well, you could
>>> if it were a "regular" server install-- I don't know what you'd have to go
>>> through on SBS to do that.)  That would work, though.
>>> 
>>> Not much we can do about a guy who wants to scream more than get the job
>>> done, though.  I'd tell him that if he wanted his email to STFU and do what
>>> was needed.  It's not like it is anyone's "fault."  There are other options
>>> you have, but they would all require him doing *something*.
>>> 
>>> I'm assuming that OWA is not an option for some reason?
>>> 
>>> t
>>> 
>>> 
>>> On 6/27/06 7:37 PM, "Glenn P. JOHNSTON" <glenn.johnston@xxxxxxxxxxx> spoketh
>>> to all:
>>> 
>>>> The internal IP of the SBS server is 192.168.110.2, G/W on the hotel BB
>>>> service is also 192.168.110.2 unfortunately !
>>>> 
>>>> I tried the static route on my home ADSL service by changing the internal
>>>> private IP to match the Hotel's to play with, and everything else works, I
>>>> can
>>>> get to the internet and other clients networks fine, but I can not get  to
>>>> anything on the remote network after the tunnel is connected, of the client
>>>> with the problem.
>>>> 
>>>> Putting the static route in I doubt will work anyway, the fellow will
>>>> probably
>>>> just yell and scream as soon as he is asked to do anything remotely
>>>> technical,
>>>> expecting it to be magically fixed from this end.
>>>> 
>>>> ________________________________
>>>> 
>>>> From: isalist-bounce@xxxxxxxxxxxxx on behalf of Thor (Hammer of God)
>>>> Sent: Wed 28/Jun/2006 12:27
>>>> To: isalist@xxxxxxxxxxxxx
>>>> Subject: [isalist] Re: Error establishing a VPN to the ISA server
>>>> 
>>>> 
>>>> 
>>>> http://www.ISAserver.org
>>>> -------------------------------------------------------
>>>> 
>>>> All he has to do is set a static route for the SBS box's IP to the gateway
>>>> address of the VPN endpoint.
>>>> 
>>>> IOW, if the SBS box is 192.168.110.101, and his PPP VPN interface got
>>>> assigned something like 192.168.110.11 from the RRAS server (do an IP
>>>> config
>>>> to see what ip his PPP adapter is, or look at the RRAS properties of the
>>>> connection) then you would have him do a:
>>>> 
>>>> ROUTE -p add 192.168.110.101 mask 255.255.255.255 192.168.110.11
>>>> 
>>>> That way, when he attempts to access the SBS server, the request will route
>>>> down the VPN rather than broadcasting on the "local" 192.168.110.x network.
>>>> 
>>>> t
>>>> 
>>>> 
>>>> On 6/27/06 7:13 PM, "Glenn P. JOHNSTON" <glenn.johnston@xxxxxxxxxxx>
>>>> spoketh
>>>> to all:
>>>> 
>>>>> http://www.ISAserver.org
>>>>> -------------------------------------------------------
>>>>> 
>>>>> Hi,
>>>>> 
>>>>> Maybe, maybe not directly and ISA question, and I've posted this in an SBS
>>>>> forum as well, but you people are pretty bright & I thought you might have
>>>>> some worth while input on this.
>>>>> 
>>>>> One of my clients has an issue with VPN tunnel. This has been inplace
>>>>> since
>>>>> Sunday afternoon, but they only rang me this morning.
>>>>> 
>>>>> One of their directors is at a week long conference, and the Hotel where
>>>>> he
>>>>> is
>>>>> staying, has provides an in room broadband service.
>>>>> The BroadBand in the hotel is using a 192.168.110.0/24 address range, the
>>>>> internal address of the clients network at the office is also a
>>>>> 192.168.110.0/24 range.
>>>>> 
>>>>> The VPN tunnel  establishes fine, and the VPN connector on his notebook
>>>>> get
>>>>> an
>>>>> address, of course, in the 192.168.110.100 to 192.168.110.199 range of the
>>>>> DHCP server on the SBS server.
>>>>> 
>>>>> Once the tunnel is established, he can acess nothing on the SBS. This is
>>>>> to
>>>>> be
>>>>> expected as the address ranges are the same, does anyone have any bright
>>>>> idea's on how to get around this. The Director is yelling and screaming
>>>>> about
>>>>> not being able to get his e-mail.
>>>>> 
>>>>> Unfortunately he is out out direct reach in another state, and has very
>>>>> little
>>>>> tolerance for such problems.
>>>>> 
>>>>> Regards
>>>>> Glenn
>>>>> ------------------------------------------------------
>>>>> List Archives: //www.freelists.org/archives/isalist/
>>>>> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
>>>>> ISA Server Articles and Tutorials:
>>>>> http://www.isaserver.org/articles_tutorials/
>>>>> ISA Server Blogs: http://blogs.isaserver.org/
>>>>> ------------------------------------------------------
>>>>> Visit TechGenix.com for more information about our other sites:
>>>>> http://www.techgenix.com
>>>>> ------------------------------------------------------
>>>>> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
>>>>> Report abuse to listadmin@xxxxxxxxxxxxx
>>>>> 
>>>>> 
>>>>> 
>>>> 
>>>> 
>>>> ------------------------------------------------------
>>>> List Archives: //www.freelists.org/archives/isalist/
>>>> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
>>>> ISA Server Articles and Tutorials:
>>>> http://www.isaserver.org/articles_tutorials/
>>>> ISA Server Blogs: http://blogs.isaserver.org/
>>>> ------------------------------------------------------
>>>> Visit TechGenix.com for more information about our other sites:
>>>> http://www.techgenix.com
>>>> ------------------------------------------------------
>>>> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
>>>> Report abuse to listadmin@xxxxxxxxxxxxx
>>>> 
>>>> 
>>>> 
>>> 
>>> 
>>> ------------------------------------------------------
>>> List Archives: //www.freelists.org/archives/isalist/
>>> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
>>> ISA Server Articles and Tutorials:
>>> http://www.isaserver.org/articles_tutorials/
>>> ISA Server Blogs: http://blogs.isaserver.org/
>>> ------------------------------------------------------
>>> Visit TechGenix.com for more information about our other sites:
>>> http://www.techgenix.com
>>> ------------------------------------------------------
>>> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
>>> Report abuse to listadmin@xxxxxxxxxxxxx
>>> 
>>> 
>>> 
>> 
>> 
>> ------------------------------------------------------
>> List Archives: //www.freelists.org/archives/isalist/
>> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
>> ISA Server Articles and Tutorials:
>> http://www.isaserver.org/articles_tutorials/
>> ISA Server Blogs: http://blogs.isaserver.org/
>> ------------------------------------------------------
>> Visit TechGenix.com for more information about our other sites:
>> http://www.techgenix.com
>> ------------------------------------------------------
>> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
>> Report abuse to listadmin@xxxxxxxxxxxxx
>> 
>> 
>> 
> 
> 
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> 
> 


------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/  
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp 
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ 
ISA Server Blogs: http://blogs.isaserver.org/ 
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com 
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp 
Report abuse to listadmin@xxxxxxxxxxxxx 

Other related posts: