RE: ISA server and SnapGear VPN server
- From: "Thomas W Shinder" <tshinder@xxxxxxxxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Mon, 24 Mar 2003 20:37:55 -0600
Hi Michael,
OK, makes sense now. You need to configure VPN passthrough. Check out my
article on configuring VPN connections with back to back DMZ
configuration over at www.isaserver.org/shinder if you're not familiar
with the details. Essentially, the clients establish a VPN configuration
with the device in front, and then tunnel inside that tunnel to create
the internal firewall, which is ISA Server in this case.
HTH,
Tom
Thomas W Shinder
www.isaserver.org/shinder
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp
-----Original Message-----
From: Michael Bonnice [mailto:whadmin@xxxxxxxxxxxxxx]
Sent: Monday, March 24, 2003 9:24 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISA server and SnapGear VPN server
http://www.ISAserver.org
hi Tom
ISA server is bundled with small business server. My ISA server
is also the main server for most things.
The VPN server is the SnapGear firewall which is connected to
the external NIC of the ISA. The LAN is connected to the internal NIC.
ie. LAN ----- SBS server with ISA ---- VPN server (snapgear
firewall) ---- adsl modem.
The VPN clients will be remote dialup users. I have tested this
and I can connect successfully to the VPN server , however i cannot pass
through the ISA server to the LAN. They are all on the same subnet.
ISA is blocking the VPN clients getting through.
Thanks,
Michael
----- Original Message -----
From: Thomas W Shinder
<mailto:tshinder@xxxxxxxxxxxxxxxxxx>
To: [ISAserver.org Discussion List]
<mailto:isalist@xxxxxxxxxxxxx>
Sent: Tuesday, March 25, 2003 12:13 PM
Subject: [isalist] RE: ISA server and SnapGear VPN
server
http://www.ISAserver.org
Hi Michael,
Some things aren't clear:
1. Where is the ISA Server?
2. Where is the VPN server?
3. Where is the VPN client?
Thanks!
Tom
Thomas W Shinder
www.isaserver.org/shinder
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp
-----Original Message-----
From: Michael Bonnice
[mailto:whadmin@xxxxxxxxxxxxxx]
Sent: Monday, March 24, 2003 7:49 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] ISA server and SnapGear VPN
server
http://www.ISAserver.org
Hi All.
Just wondering if anyone can help me, I
currently have this setup ..
LAN > 2000 SBS with ISA server > SnapGear Pro+
Firewall unit with VPN server > ADSL modem
I have the SnapGear unit setup as the VPN server
and I can connect and authenticate fine. However when I try to contact
the SBS server or anything behind it i.e.. the LAN , I cant ping at all.
I can ping the firewall but not the SBS ISA server. I think this is
because ISA server is blocking the outside incoming VPN traffic.
Could anyone shed some light this.
Thanking You
Michael Bonnice
------------------------------------------------------
List Archives:
http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ:
http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site:
http://www.msexchange.org/
Windows Security Resource Site:
http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this
ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
List Archives:
http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ:
http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site:
http://www.msexchange.org/
Windows Security Resource Site:
http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org
Discussion List as: whadmin@xxxxxxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
List Archives:
http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ:
http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion
List as: tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')
Other related posts:
