Tom, if you think think about it, 99 percent of the companies out there utilize some measure of dedicated link to the Internet through their ISP, yes I am sure there are some dialup on demand connection links but the point I am making is at some point the packets that leave any corporate network at some point traverse the Internet cloud, I don't know of too many companies that deep enough pockets to have a full end to end dedicated link, especially when they office around the globe, that would be an immense cost, so yes, I was talking about the Internet but assumed that was a given. I don't think ISA is actually involved at this point because it uses the underlying services of RRAS, so I will be looking at RRAS separately trying to establish a dedicated tunnel outside of ISA, I am welcome to any other suggestion someone might have to make the TUNNEL in RRAS permanent. I am in the process of rebuilding my test servers and start all over. Thanks Tom for your valued input so far, it has been a huge help. Thanks Glenn -----Original Message----- From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx] Sent: Sunday, March 02, 2003 9:08 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: PPTP & L2TP VPN Tunnels http://www.ISAserver.org Hi Glenn, LOL! We're talking about the Internet right? There is no such thing as a permanant connection on the Internet. If you've had permanant VPN connections, then you must have done them over a dedicated link, not over the Internet. HTH, Tom Thomas W Shinder www.isaserver.org/shinder <http://www.isaserver.org/shinder> ISA Server and Beyond: http://tinyurl.com/1jq1 <http://tinyurl.com/1jq1> Configuring ISA Server: http://tinyurl.com/1llp <http://tinyurl.com/1llp> -----Original Message----- From: Glenn Maks [mailto:gmaks@xxxxxxxxx] Sent: Friday, February 28, 2003 3:15 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: PPTP & L2TP VPN Tunnels http://www.ISAserver.org I think I am going to start from scratch and rebuild both ISA test servers and install the Cert Service on one and go from there? At this point I am scratching my head. A Wake on Demand VPN tunnel is something I can not use in my network, I need the tunnels to be permanent 24x7 unless I tear them down. May I ask this, Are the PPTP and L2TP tunnels that ISA support Wake on Demand? or can they be configured to be permanent and always on. -----Original Message----- From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx] Sent: Friday, February 28, 2003 2:58 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: PPTP & L2TP VPN Tunnels http://www.ISAserver.org Hi Glenn, Does the tunnel reconnect if a client behind the ISA Server makes a request? Thanks! Tom Thomas W Shinder www.isaserver.org/shinder <http://www.isaserver.org/shinder> ISA Server and Beyond: http://tinyurl.com/1jq1 <http://tinyurl.com/1jq1> Configuring ISA Server: http://tinyurl.com/1llp <http://tinyurl.com/1llp> -----Original Message----- From: Glenn Maks [mailto:gmaks@xxxxxxxxx] Sent: Friday, February 28, 2003 1:37 PM To: [ISAserver.org Discussion List] Subject: [isalist] PPTP & L2TP VPN Tunnels http://www.ISAserver.org Am I missing something here, I must be, I have 2 ISA servers that I have setup for a test environment, currently I am working with VPN tunnels, both PPTP and L2TP, my problem is this, after establishing a tunnel, either PPTP or L2TP after short period of time the tunnel disconnects and no mater what I do I can not reestablish the link. Both of these ISA servers were built as standalone integrated web cache, firewall and proxy. I did install the Certificate service on one of the ISA servers, keeping in mind this is only to evaluate the ISA platform. My remote ISA server that ran Remote VPN wizard and read the config file also requested and installed a Cert from the Cert server? There must be a way to build either a PPTP or L2TP tunnel and have it enabled and always connected. What am I missing here? Thank you Glenn ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Exchange Server Resource Site: http://www.msexchange.org/ Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Exchange Server Resource Site: http://www.msexchange.org/ Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: gmaks@xxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Exchange Server Resource Site: http://www.msexchange.org/ Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Exchange Server Resource Site: http://www.msexchange.org/ Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: gmaks@xxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')