RE: ISA server and SnapGear VPN server
- From: "Michael Bonnice" <whadmin@xxxxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Tue, 25 Mar 2003 13:53:59 +1000
MessageThanks so much for that Tom. Ill check the article out and have a go. Im
fairly new to ISA so I wasn't sure of the configuration terminology.
----- Original Message -----
From: Thomas W Shinder
To: [ISAserver.org Discussion List]
Sent: Tuesday, March 25, 2003 12:37 PM
Subject: [isalist] RE: ISA server and SnapGear VPN server
http://www.ISAserver.org
Hi Michael,
OK, makes sense now. You need to configure VPN passthrough. Check out my
article on configuring VPN connections with back to back DMZ configuration over
at www.isaserver.org/shinder if you're not familiar with the details.
Essentially, the clients establish a VPN configuration with the device in
front, and then tunnel inside that tunnel to create the internal firewall,
which is ISA Server in this case.
HTH,
Tom
Thomas W Shinder
www.isaserver.org/shinder
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp
-----Original Message-----
From: Michael Bonnice [mailto:whadmin@xxxxxxxxxxxxxx]
Sent: Monday, March 24, 2003 9:24 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISA server and SnapGear VPN server
http://www.ISAserver.org
hi Tom
ISA server is bundled with small business server. My ISA server is also the
main server for most things.
The VPN server is the SnapGear firewall which is connected to the external
NIC of the ISA. The LAN is connected to the internal NIC.
ie. LAN ----- SBS server with ISA ---- VPN server (snapgear firewall)
---- adsl modem.
The VPN clients will be remote dialup users. I have tested this and I can
connect successfully to the VPN server , however i cannot pass through the ISA
server to the LAN. They are all on the same subnet.
ISA is blocking the VPN clients getting through.
Thanks,
Michael
----- Original Message -----
From: Thomas W Shinder
To: [ISAserver.org Discussion List]
Sent: Tuesday, March 25, 2003 12:13 PM
Subject: [isalist] RE: ISA server and SnapGear VPN server
http://www.ISAserver.org
Hi Michael,
Some things aren't clear:
1. Where is the ISA Server?
2. Where is the VPN server?
3. Where is the VPN client?
Thanks!
Tom
Thomas W Shinder
www.isaserver.org/shinder
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp
-----Original Message-----
From: Michael Bonnice [mailto:whadmin@xxxxxxxxxxxxxx]
Sent: Monday, March 24, 2003 7:49 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] ISA server and SnapGear VPN server
http://www.ISAserver.org
Hi All.
Just wondering if anyone can help me, I currently have this setup ..
LAN > 2000 SBS with ISA server > SnapGear Pro+ Firewall unit with VPN
server > ADSL modem
I have the SnapGear unit setup as the VPN server and I can connect and
authenticate fine. However when I try to contact the SBS server or anything
behind it i.e.. the LAN , I cant ping at all. I can ping the firewall but not
the SBS ISA server. I think this is because ISA server is blocking the outside
incoming VPN traffic.
Could anyone shed some light this.
Thanking You
Michael Bonnice
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
whadmin@xxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
whadmin@xxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
