RE: Gateway to Gateway VPN

  • From: "G_Geral" <geral@xxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Thu, 27 Mar 2003 10:47:35 -0000

Hi TOM.

Yes, Winwk SP3, ISA Server SP1, and ISA Server Feature Pack 1, are installed.

L2TP/IPSec would be the next future step. PPTP was a start (I thought an easy 
one). hehe

And about VPN using Cisco PIX 501 on both sides with 3DES(for a more secure 
connection).
A already have a PIX on the RemoteVPN Server.
I could use other PIX between the router and LAN or ISA.
For a more reliable and secure connection.



What's your opinion?


Thanks!

//NFerreira


-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx] 
Sent: quinta-feira, 27 de Março de 2003 1:25
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Gateway to Gateway VPN

http://www.ISAserver.org


Hi N,

Are you using Win2k SP3? ISA Server SP1? ISA Server Feature Pack 1? 

If so, try using L2TP/IPSec, some people report that helps with stability 
issues.

Also, if you're using DSL, check out your MTU.

HTH,
Tom

Thomas W Shinder 
www.isaserver.org/shinder 
ISA Server and Beyond: http://tinyurl.com/1jq1 
Configuring ISA Server: http://tinyurl.com/1llp 



-----Original Message-----
From: G_Geral [mailto:geral@xxxxxxxxxx] 
Sent: Wednesday, March 26, 2003 10:08 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Gateway to Gateway VPN


http://www.ISAserver.org


Hi Tom

Yes I have no continuous ping.
Another example, if I make a terminal server connection (at the same time I can 
ping the remoteVPN) the connection is made but a few seconds later it hangs.

10x Thanks !!!
//NFerreira


-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx] 
Sent: quarta-feira, 26 de Março de 2003 15:47
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Gateway to Gateway VPN

http://www.ISAserver.org


Hi Geral,

How are you assessing the stability of the connection? What do you see to 
indicate instability? Maybe continuous pings?

Thanks!
Tom

Thomas W Shinder
www.isaserver.org/shinder 
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp

 
 


-----Original Message-----
From: G_Geral [mailto:geral@xxxxxxxxxx] 
Sent: Wednesday, March 26, 2003 2:27 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Gateway to Gateway VPN


http://www.ISAserver.org


Hi TOM!

I fallow the tutorial "ISA Server to Windows 2000 RRAS" The protocol I'm using 
is PPTP.
With my (client) computer I can established a stable VPN connection to both 
sides.
Between the servers the connection is also made, RRAS console on both sides' 
shows "connected" status. But in this case there isn't a stable connection.


//NFerreira


-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx] 
Sent: quarta-feira, 26 de Março de 2003 0:35
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Gateway to Gateway VPN

http://www.ISAserver.org


Hi Nuno,

How did you configure the gateways? Are both sides dialing up? What VPN
protocol are you using?

Thanks!
Tom

Thomas W Shinder 
www.isaserver.org/shinder 
ISA Server and Beyond: http://tinyurl.com/1jq1 
Configuring ISA Server: http://tinyurl.com/1llp 



-----Original Message-----
From: Nuno Ferreira [mailto:geral@xxxxxxxxxx] 
Sent: Tuesday, March 25, 2003 4:51 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Gateway to Gateway VPN


http://www.ISAserver.org


After configuring. RRAS console on both sides always shows connected
status.


But there are some breakdown connections, with ping request time out.

At the same time the localVPN side event viewer reports: 
Error: 21056
-An error has been returned by the <MBCStoGUID> API. API error code:
0000001FH. API
error text: A device attached to the system is not functioning.

Error: 21074
Failed to process a notification of a network configuration change.


My Configuration:
C:\>ipconfig

Windows 2000 IP Configuration

Ethernet adapter Local Area Connection:

        Connection-specific DNS Suffix  . :
        IP Address. . . . . . . . . . . . : 10.10.1.2
        Subnet Mask . . . . . . . . . . . : 255.0.0.0
        Default Gateway . . . . . . . . . :

Ethernet adapter ADSL Connection:

        Connection-specific DNS Suffix  . :
        IP Address. . . . . . . . . . . . : 192.168.254.1
        Subnet Mask . . . . . . . . . . . : 255.255.255.0
        Default Gateway . . . . . . . . . : 192.168.254.254

PPP adapter RAS Server (Dial In) Interface:

        Connection-specific DNS Suffix  . :
        IP Address. . . . . . . . . . . . : 10.10.1.208
        Subnet Mask . . . . . . . . . . . : 255.255.255.255
        Default Gateway . . . . . . . . . :

PPP adapter {8101C152-D63C-4905-952F-171977CA0EAF}:

        Connection-specific DNS Suffix  . :
        IP Address. . . . . . . . . . . . : 192.168.1.101
        Subnet Mask . . . . . . . . . . . : 255.255.255.255
        Default Gateway . . . . . . . . . :


Any help,
Thanks in advance!

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: 
geral@xxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: 
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: 
geral@xxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: 
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: 
geral@xxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


Other related posts: