RE: ISA VPN behind PIX

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Mon, 24 Mar 2003 19:43:11 -0600

Hi William,

You need to allow IP protocol number 47 through the PIX. That's GRE.

HTH,
Tom

Thomas W Shinder 
www.isaserver.org/shinder 
ISA Server and Beyond: http://tinyurl.com/1jq1 
Configuring ISA Server: http://tinyurl.com/1llp 



-----Original Message-----
From: William Robertson [mailto:robertson.william@xxxxxxxxxxxxxx] 
Sent: Monday, March 24, 2003 7:39 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] ISA VPN behind PIX


http://www.ISAserver.org


Hi there

I know I know, setting up a VPN should be like falling out of a tree....
but I did and now it hurts!!!! I think my problem may be that I've got a
PIX firewall in front of my ISA.

I have opened TCP and UDP 1723 on my PIX Firewall, and run the VPN
Vlient
cConnection wizard on my ISA Server, but when I try and establsh a VPN
Connection I can establish connection quite quickly but it just times
out
on the "Verifying Username & Password..." prompt with the error:
Disconnected.
Error 721: The remote computer did not respond.

Does anyone know if I need to open any other special ports on the PIX
Firewall (Maybe something like GRE? But what is GRE's Port Number?)

Any other ideas you may have regarding the possible connection failure
would be greatly appreciated.

Cheers
William R.

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


Other related posts: