RE: HELP-Intermittent Outbound VPN Problems
- From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Wed, 8 Dec 2004 11:29:16 -0600
Hi Guinn,
Try setting the NICs on the ISA firewall to harded coded speeds, based
on the speeds of the devices they're connected to.
HTH,
Tom
www.isaserver.org/shinder
Tom and Deb Shinder's Configuring ISA Server 2004
http://tinyurl.com/3xqb7
MVP -- ISA Firewalls
-----Original Message-----
From: Guinn Unger [mailto:mlists@xxxxxxxxxxxxx]
Sent: Wednesday, December 08, 2004 11:05 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: HELP-Intermittent Outbound VPN Problems
http://www.ISAserver.org
Tom,
That's pretty much what I expected since other people seem to be able to
connect without any problems. When I have been able to connect, the
stability has been fine.
Any other suggestions on how to troubleshoot my network/ISA to see what
the
problem is from here?
Guinn
-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx]
Sent: Wednesday, December 08, 2004 10:55 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: HELP-Intermittent Outbound VPN Problems
http://www.ISAserver.org
Hi Guinn,
I get authentication dialog boxes from Windows 2000 and Windows XP
clients, testing from behind both ISA Server 2000 and ISA 2004. Can't
vouch for the stability of the connections, but I do get the option to
log on.
Tom
www.isaserver.org/shinder
Tom and Deb Shinder's Configuring ISA Server 2004
http://tinyurl.com/3xqb7
MVP -- ISA Firewalls
-----Original Message-----
From: Guinn Unger [mailto:mlists@xxxxxxxxxxxxx]
Sent: Wednesday, December 08, 2004 10:02 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: HELP-Intermittent Outbound VPN Problems
http://www.ISAserver.org
No, they are using 10.x.x.x.
Guinn
-----Original Message-----
From: John Tolmachoff (Lists) [mailto:johnlist@xxxxxxxxxxxxxxxxxxx]
Sent: Wednesday, December 08, 2004 9:41 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: HELP-Intermittent Outbound VPN Problems
http://www.ISAserver.org
Lets say your LAN is 192.168.0.0/24. (192.168.0.0 with a subnet mask of
255.255.255.0) Is it possible that the LAN on the other side of the VPN
falls within the same range, or visa versa?
John Tolmachoff
Engineer/Consultant/Owner
eServices For You
> -----Original Message-----
> From: Guinn Unger [mailto:mlists@xxxxxxxxxxxxx]
> Sent: Wednesday, December 08, 2004 6:56 AM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: HELP-Intermittent Outbound VPN Problems
>
> http://www.ISAserver.org
>
> I'm not sure I understand the question (I'm a developer, not a network
guy),
> but I don't think so.
>
> Guinn
>
> -----Original Message-----
> From: David Haam [mailto:DavidH@xxxxxxxxxxxx]
> Sent: Wednesday, December 08, 2004 8:11 AM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: HELP-Intermittent Outbound VPN Problems
>
> http://www.ISAserver.org
>
> Do you have the same IP address space as the target network for the
VPN
> connection?
>
>
>
> -----Original Message-----
> From: Guinn Unger [mailto:mlists@xxxxxxxxxxxxx]
> Sent: Tuesday, December 07, 2004 1:50 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: HELP-Intermittent Outbound VPN Problems
>
> http://www.ISAserver.org
>
> The laptop connects to the client just fine when connected directly to
> the T1. It still does not work behind the firewall.
>
> Guinn
>
> -----Original Message-----
> From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx]
> Sent: Tuesday, December 07, 2004 2:57 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: HELP-Intermittent Outbound VPN Problems
>
> http://www.ISAserver.org
>
> Hi Guinn,
>
> You said you have T1 line? Plug a laptop into the T1 route and assign
it
> a public address for your public block and assign it a default gateway
> that is the LAN interface of the T1 router. Then see if you have the
> same problems.
>
> HTH,
>
>
> Tom
> www.isaserver.org/shinder
> Tom and Deb Shinder's Configuring ISA Server 2004
> http://tinyurl.com/3xqb7
> MVP -- ISA Firewalls
>
>
> -----Original Message-----
> From: Guinn Unger [mailto:mlists@xxxxxxxxxxxxx]
> Sent: Tuesday, December 07, 2004 2:22 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: HELP-Intermittent Outbound VPN Problems
>
> http://www.ISAserver.org
>
> Tom,
>
> Here is the tracert result: (192.168.0.15 is my ISA Server)
>
> ------------
>
> Tracing route to 209.x.x.x over a maximum of 30 hops
>
> 1 <1 ms <1 ms <1 ms 192.168.0.15
> 2 <1 ms <1 ms <1 ms 69.15.118.25
> 3 9 ms 10 ms 10 ms 172.22.134.141
> 4 9 ms 10 ms 11 ms 192.168.38.34
> 5 9 ms 10 ms 21 ms d3-0-1-0.a03.hstntx01.us.ra.verio.net
> [128.241.3.161]
> 6 15 ms 12 ms 10 ms
ge-0-1-0-4.r02.hstntx01.us.bb.verio.net
> [129.250.29.94]
> 7 24 ms 18 ms 24 ms p16-1-0-3.r20.dllstx09.us.bb.verio.net
> [129.250.5.40]
> 8 15 ms 13 ms 18 ms p16-3-0-0.r01.dllstx09.us.bb.verio.net
> [129.250.2.185]
> 9 15 ms 17 ms 14 ms so-2-3-0.edge2.Dallas1.Level3.net
> [4.68.127.41]
> 10 17 ms 32 ms 21 ms so-0-0-0.bbr1.Dallas1.Level3.net
> [4.68.96.117]
> 11 14 ms 22 ms 33 ms so-0-2-0.mp1.Houston1.Level3.net
> [209.247.11.169]
> 12 14 ms 15 ms 17 ms so-8-0.hsa1.Houston1.Level3.net
> [4.68.112.142]
> 13 16 ms 21 ms 22 ms bigcity-core3.hou1.level3.net
> [209.245.208.146]
> 14 14 ms 22 ms 21 ms 209.x.x.x
>
> Trace complete.
>
> ----------------
>
> I'm able to get to the server just fine (same IP address) using Remote
> Desktop or a web browser. It's just VPN that is the problem.
>
> Whenever I am unable to get to the VPN server other people have no
> problem, so I still think it's a problem on my end.
>
> Guinn
>
> -----Original Message-----
> From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx]
> Sent: Tuesday, December 07, 2004 1:59 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: HELP-Intermittent Outbound VPN Problems
>
> http://www.ISAserver.org
>
> Hi Guinn,
>
> What happens when you do a tracert from the client to the VPN servers
> address when its not working? The fact that it works sometimes, but
not
> other times, indicates that its not an ISA firewall issue, but
something
> to do with the underlying network infrastructure. It could be
something
> as simple as the VPN server admin not supplying enough addresses or
> ports for all the VPN clients they want to support.
>
> HTH,
>
> Tom
> www.isaserver.org/shinder
> Tom and Deb Shinder's Configuring ISA Server 2004
> http://tinyurl.com/3xqb7
> MVP -- ISA Firewalls
>
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com Leading
> Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
> Security Resource Site: http://www.windowsecurity.com/ Network
Security
> Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
> http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> tshinder@xxxxxxxxxxxxxxxxxx
> To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com Leading
> Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
> Security Resource Site: http://www.windowsecurity.com/ Network
Security
> Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
> http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> mlists@xxxxxxxxxxxxx
> To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com Leading
> Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
> Security Resource Site: http://www.windowsecurity.com/ Network
Security
> Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
> http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> davidh@xxxxxxxxxxxx To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> mlists@xxxxxxxxxxxxx
> To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> johnlist@xxxxxxxxxxxxxxxxxxx
> To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
mlists@xxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
mlists@xxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
Other related posts:
