RE: HELP-Intermittent Outbound VPN Problems

  • From: "Guinn Unger" <mlists@xxxxxxxxxxxxx>
  • To: "'[ISAserver.org Discussion List]'" <isalist@xxxxxxxxxxxxx>
  • Date: Tue, 7 Dec 2004 14:22:15 -0600

Tom,

Here is the tracert result: (192.168.0.15 is my ISA Server)

------------

Tracing route to 209.x.x.x over a maximum of 30 hops

  1    <1 ms    <1 ms    <1 ms  192.168.0.15 
  2    <1 ms    <1 ms    <1 ms  69.15.118.25 
  3     9 ms    10 ms    10 ms  172.22.134.141 
  4     9 ms    10 ms    11 ms  192.168.38.34 
  5     9 ms    10 ms    21 ms  d3-0-1-0.a03.hstntx01.us.ra.verio.net
[128.241.3.161] 
  6    15 ms    12 ms    10 ms  ge-0-1-0-4.r02.hstntx01.us.bb.verio.net
[129.250.29.94] 
  7    24 ms    18 ms    24 ms  p16-1-0-3.r20.dllstx09.us.bb.verio.net
[129.250.5.40] 
  8    15 ms    13 ms    18 ms  p16-3-0-0.r01.dllstx09.us.bb.verio.net
[129.250.2.185] 
  9    15 ms    17 ms    14 ms  so-2-3-0.edge2.Dallas1.Level3.net
[4.68.127.41] 
 10    17 ms    32 ms    21 ms  so-0-0-0.bbr1.Dallas1.Level3.net
[4.68.96.117] 
 11    14 ms    22 ms    33 ms  so-0-2-0.mp1.Houston1.Level3.net
[209.247.11.169] 
 12    14 ms    15 ms    17 ms  so-8-0.hsa1.Houston1.Level3.net
[4.68.112.142] 
 13    16 ms    21 ms    22 ms  bigcity-core3.hou1.level3.net
[209.245.208.146] 
 14    14 ms    22 ms    21 ms  209.x.x.x 

Trace complete.

----------------

I'm able to get to the server just fine (same IP address) using Remote
Desktop or a web browser.  It's just VPN that is the problem.

Whenever I am unable to get to the VPN server other people have no problem,
so I still think it's a problem on my end.

Guinn

-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx] 
Sent: Tuesday, December 07, 2004 1:59 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: HELP-Intermittent Outbound VPN Problems

http://www.ISAserver.org

Hi Guinn,

What happens when you do a tracert from the client to the VPN servers
address when its not working? The fact that it works sometimes, but not
other times, indicates that its not an ISA firewall issue, but something
to do with the underlying network infrastructure. It could be something
as simple as the VPN server admin not supplying enough addresses or
ports for all the VPN clients they want to support. 

HTH,

Tom
www.isaserver.org/shinder
Tom and Deb Shinder's Configuring ISA Server 2004
http://tinyurl.com/3xqb7
MVP -- ISA Firewalls




Other related posts: