RE: ISA to ISA VPN problem
- From: "Biddle, Jim P." <Jpbiddle@xxxxxxx>
- To: "'[ISAserver.org Discussion List]'" <isalist@xxxxxxxxxxxxx>
- Date: Wed, 19 Dec 2001 08:17:03 -0700
Does anyone know how to block yahoo messenger??? All the other IM's are
blocked but it ! I have tried everything: finding port #'s on yahoo website,
blocking the actual sites it hits , to no avail !!! respond also to
jpbiddle@xxxxxxx .... free southwest airline passes (2) to whoever helps !
-----Original Message-----
From: Simon M [mailto:simon@xxxxxxxxxxxx]
Sent: Wednesday, December 19, 2001 7:59 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISA to ISA VPN problem
http://www.ISAserver.org
Thanks for the reply. I don't believe it's an Internet problem. I can
copy things from LON to/from NY using the external interfaces just fine,
it flys at the full speed of the available bandwidth. But try to copy
using internal addresses (to use the VPN) it only works one way for
anything >1 kb.
Am going in to reinstall for a third time tonight - this time disabling
the spare NIC in the machine before installing ISA. It's the only thing
I can think of that's different between the two boxes. If this doesn't
work it's not going to be a merry Xmas :-(
Regards
Simon
> -----Original Message-----
> From: Gary Anderson [mailto:gary.anderson@xxxxxxxxxxxxx]
> Sent: 19 December 2001 14:04
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: ISA to ISA VPN problem
>
>
> http://www.ISAserver.org
>
>
> Are they using the same route? I had a problem like this
> with a client. Paris - Kiev was great. Paris - Minsk was
> unsupportable. There was a satellite link between the London
> and Minsk. Once, when the satellite link went down, the
> traffic was routed through the US. The performance was great
> until the satellite link came back online.
>
> -----Original Message-----
> From: Simon M [mailto:simon.margrett@xxxxxxxxxxxx]
> Sent: Wednesday, December 19, 2001 02:26
> To: [ISAserver.org Discussion List]
> Subject: [isalist] ISA to ISA VPN problem
>
>
> http://www.ISAserver.org
>
>
> Hi,
>
> Hope someone can help, am at my wits end. Am having major
> trouble with a server to server VPN. I can't find any clues
> in the KB or MSDN - hope I'm not making some horribly simple
> fundamental error somewhere....
>
> Two physical sites, LON and NY, running with AD domain
> controllers present on each site for the domain CORP. LON is
> 10.2.7.0/24, NY is 10.2.8.0/24. GW-LON (internally
> 10.2.7.254) and GW-NY (internally
> 10.2.8.1) are the ISA servers. Both machines are configured
> to allow dialup VPN clients, which work perfectly well for
> roving users - the problem is with the site to site VPN.
>
> I used the setup local and remote VPN wizards on the server
> successfully. And both ISA's LAT's contain
> 10.2.7.0>10.2.7.255 and 10.2.8.0>10.2.8.255.
>
> The VPN connects, I can ping machines to/from either side
> using internal addresses perfectly well. However, sustained
> throughput is non-existant down one side. GW-LON can send
> data (using a simple filecopy) to any machine on the
> NY/10.2.8 network at the full speed of the available
> bandwidth; but any NY machine to GW-LON is so poor that
> attempting to copy files results in explorer throwing up
> various errors ('unable to complete copy the source no longer
> exists' and 'error performing inpage operation'). From
> perfmon'ing the VPN interface it seems that the first few kb
> of data gets through, then it falls silent - like sustained
> throughput just falls flat on it's face. Nothing is being
> logged, packets seem to disappear into a big black hole. If
> connections are made to/from the external interfaces of the
> ISA boxes, copying between the two GW-.. ISA machines
> (without the VPN) is fine in both directions.
>
> What is going on? Why would one direction of the VPN give up
> passing data after the first few kb, some data definitely
> gets through. There's nothing in any event logs.
>
> Regards
> Si
>
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion
> List as: gary.anderson@xxxxxxxxxx To unsubscribe send a blank
> email to $subst('Email.Unsub')
>
>
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion
> List as: simon.margrett@xxxxxxxxxxxx To unsubscribe send a
> blank email to $subst('Email.Unsub')
>
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jpbiddle@xxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
