RE: HELP-Intermittent Outbound VPN Problems

  • From: "Guinn Unger" <mlists@xxxxxxxxxxxxx>
  • To: "'[ISAserver.org Discussion List]'" <isalist@xxxxxxxxxxxxx>
  • Date: Tue, 7 Dec 2004 15:49:50 -0600

The laptop connects to the client just fine when connected directly to the
T1.  It still does not work behind the firewall.

Guinn

-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx] 
Sent: Tuesday, December 07, 2004 2:57 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: HELP-Intermittent Outbound VPN Problems

http://www.ISAserver.org

Hi Guinn,

You said you have T1 line? Plug a laptop into the T1 route and assign it
a public address for your public block and assign it a default gateway
that is the LAN interface of the T1 router. Then see if you have the
same problems.

HTH, 


Tom
www.isaserver.org/shinder
Tom and Deb Shinder's Configuring ISA Server 2004
http://tinyurl.com/3xqb7
MVP -- ISA Firewalls


-----Original Message-----
From: Guinn Unger [mailto:mlists@xxxxxxxxxxxxx] 
Sent: Tuesday, December 07, 2004 2:22 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: HELP-Intermittent Outbound VPN Problems

http://www.ISAserver.org

Tom,

Here is the tracert result: (192.168.0.15 is my ISA Server)

------------

Tracing route to 209.x.x.x over a maximum of 30 hops

  1    <1 ms    <1 ms    <1 ms  192.168.0.15 
  2    <1 ms    <1 ms    <1 ms  69.15.118.25 
  3     9 ms    10 ms    10 ms  172.22.134.141 
  4     9 ms    10 ms    11 ms  192.168.38.34 
  5     9 ms    10 ms    21 ms  d3-0-1-0.a03.hstntx01.us.ra.verio.net
[128.241.3.161] 
  6    15 ms    12 ms    10 ms  ge-0-1-0-4.r02.hstntx01.us.bb.verio.net
[129.250.29.94] 
  7    24 ms    18 ms    24 ms  p16-1-0-3.r20.dllstx09.us.bb.verio.net
[129.250.5.40] 
  8    15 ms    13 ms    18 ms  p16-3-0-0.r01.dllstx09.us.bb.verio.net
[129.250.2.185] 
  9    15 ms    17 ms    14 ms  so-2-3-0.edge2.Dallas1.Level3.net
[4.68.127.41] 
 10    17 ms    32 ms    21 ms  so-0-0-0.bbr1.Dallas1.Level3.net
[4.68.96.117] 
 11    14 ms    22 ms    33 ms  so-0-2-0.mp1.Houston1.Level3.net
[209.247.11.169] 
 12    14 ms    15 ms    17 ms  so-8-0.hsa1.Houston1.Level3.net
[4.68.112.142] 
 13    16 ms    21 ms    22 ms  bigcity-core3.hou1.level3.net
[209.245.208.146] 
 14    14 ms    22 ms    21 ms  209.x.x.x 

Trace complete.

----------------

I'm able to get to the server just fine (same IP address) using Remote
Desktop or a web browser.  It's just VPN that is the problem.

Whenever I am unable to get to the VPN server other people have no
problem,
so I still think it's a problem on my end.

Guinn

-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx] 
Sent: Tuesday, December 07, 2004 1:59 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: HELP-Intermittent Outbound VPN Problems

http://www.ISAserver.org

Hi Guinn,

What happens when you do a tracert from the client to the VPN servers
address when its not working? The fact that it works sometimes, but not
other times, indicates that its not an ISA firewall issue, but something
to do with the underlying network infrastructure. It could be something
as simple as the VPN server admin not supplying enough addresses or
ports for all the VPN clients they want to support. 

HTH,

Tom
www.isaserver.org/shinder
Tom and Deb Shinder's Configuring ISA Server 2004
http://tinyurl.com/3xqb7
MVP -- ISA Firewalls



------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx



------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
mlists@xxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx



Other related posts: