RE: ISA2000 + RRAS VPN
- From: "Anthony Michaud" <anthonym@xxxxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Thu, 4 Mar 2004 10:00:45 +1100
Hi Greg,
(inline)
> -----Original Message-----
> From: Greg Mulholland [mailto:gmulholland@xxxxxxxxxxxxxxx]
> Sent: Wednesday, 3 March 2004 19:41
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: ISA2000 + RRAS VPN
>
> RRAS only controls the behavior of your vpn server as such.
> ISA more or
> less passes or allows the traffic. You need to have RRAS configured
> correctly as a VPN server and you need to have the proper rules set up
> in your firewall to allow the traffic in and even out,which I
> specified
> in the previous post.
Yup, I knew that but - I just wanted some documentation to see the magic step
that I'd forgotten.
> As long as ISA and RRAS know that each other is working, that is that
> they are setup to do the right thing you shouldn't have any problems.
Yup, I've got it working on another server, I just wanted to replicate that.
> I think Tom may have included some info on this setup in his VPN
> deployment docs. If its not I might write one over the next few days.
>
> NB: Guys I cant stress the importance or value of these docs. I'm sure
> Jim, Steve and most others will back me up. There seems to be a large
> number of people asking how to deploy stuff, majority of
> which have been
> covered before over time. Not having a go at anyone at all, more a
> constructive point. If you need to do something, get all the info and
> all the tools then sit down and walk through it. If you still have
> problems then its time to ask. Steal works laser printer for a while,
> print out these docs and any relevant docs and put them in a
> folder for
> reference. Even bookmark them for later reference. Please,
> this is just
> a tip, im always happy to help.
and its incredibly frustrating when the same simple questions are asked again
and again. I wanted to RTFM - I was just asking for a page number :) (Btw -
the document that you prepared helped 100%!)
Another tip: have an administrative "This is where I save important
information" folder, where you save .CHM (compiled HTML) files. They're tidy
(one file includes all images / content etc) and if you label them correctly,
you might even be able to find what you want easily.
Again, many thanks for the help - you guys make things a heck of a lot easier
for us!
Anthony.
> Greg Mulholland
> http://www.isaserver.org
> http://isatools.org
> http://groups.google.com
>
>
> -----Original Message-----
> From: Anthony Michaud [mailto:anthonym@xxxxxxxxxxxxxx]
> Sent: Wednesday, March 03, 2004 3:53 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: ISA2000 + RRAS VPN
>
> http://www.ISAserver.org
>
> Hi Greg,
>
> Thanks - I've configured inbound & outbound on the RRAS *BUT*
> I did this
> after I'd installed ISA. Is this relevant?
>
> I don't play with ISA often enough to remember this :/
>
> > -----Original Message-----
> > From: Greg Mulholland [mailto:gmulholland@xxxxxxxxxxxxxxx]
> > Sent: Wednesday, 3 March 2004 10:51
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] RE: ISA2000 + RRAS VPN
> >
> >
> > http://www.ISAserver.org
> >
> > Anthony
> >
> > To assign DCHP addresses to incoming vpn clients you need to select
> > this when you setup RRAS. It will ask you if you want to
> use DCHP or a
>
> > static pool. As for allowing outbound vpn connections,
> right click on
> > IP packet filters node and go to the last tab. Select "PPTP through
> > ISA firewall".
> > Now you should be able to do what you want.
> >
> >
> >
> > Greg Mulholland
> > http://www.isaserver.org
> > http://isatools.org
> > http://groups.google.com
> >
> >
> > -----Original Message-----
> > From: Anthony Michaud [mailto:anthonym@xxxxxxxxxxxxxx]
> > Sent: Wednesday, March 03, 2004 10:36 AM
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] ISA2000 + RRAS VPN
> >
> > http://www.ISAserver.org
> >
> > Hi Guys,
> >
> > Has someone got reference to setting up VPN on an ISA
> server, to allow
>
> > both incoming DHCP assigned VPN clients, as well as outgoing VPN
> > connections? I had a quick search last night, but 2am
> isn't conducive
>
> > to finding correct answers :)
> >
> > Anthony.
Other related posts:
