Re: VPN Connections dropping

  • From: hiramacl@xxxxxxxxx
  • To: isalist@xxxxxxxxxxxxx
  • Date: Fri, 14 Feb 2003 18:55:32 -0700

Here's my setup - win2k clients with vpn network connections will
establish a connection to the main network passing through one firewall
that performs NAT and passes all traffic to the ISA on port 1723.  One
client connects no problem.  As soon as another client establishes a
connection both clients freeze and drop their connection.

I have built another RRAS server to test if the ISA was the problem. 
However, the same thing happened with the RRAS server.  I'm obviously
missing something in the setup of RRAS.

Any ideas on what the missing link???

Thanks for the help.

> This is a multi-part message in MIME format.
> 
> ------_=_NextPart_001_01C2D22D.917D10E4
> Content-Type: text/plain;
>       charset="us-ascii"
> Content-Transfer-Encoding: quoted-printable
> 
> Dude!
> =20
> How many times have I referred to the great Avenade doc in reference to
> making sure that one side is set as active and the other is set as
> passive? :-)  While this doesn't fix every whacked out VPN gateway
> config, its something that should be ruled out first.
> =20
> Good to hear you got it working though!
> =20
> Tom
> =20
> =20
> Thomas W Shinder
> www.isaserver.org/shinder <http://www.isaserver.org/shinder> =20
> ISA Server and Beyond: http://tinyurl.com/1jq1 <http://tinyurl.com/1jq1>
> 
> Configuring ISA Server: http://tinyurl.com/1llp
> <http://tinyurl.com/1llp> =20
> 
>       -----Original Message-----
>       From: Steve Moffat [mailto:steve@xxxxxxxxxxxxxxx]=20
>       Sent: Tuesday, February 11, 2003 5:21 PM
>       To: [ISAserver.org Discussion List]
>       Subject: [isalist] Re: VPN Connections dropping
> =09
> =09
>       http://www.ISAserver.org
> =09
> =09
>       Now there's a thing, after a couple of months scratching my head
> over site to site VPN's, I finally understood last night how to do it.
>       =20
>       =20
>       Here's a snippit from the doc I found
>       =20
> 
>       There are numerous important components to defining these
> site-to-site links.  It is imperative to recognize that only one of the
> VPN peers initiates the VPN connection.  The remote VPN peer simply
> recognizes the connection, and initiates the appropriate initialization
> of the local interface when the peer supplies a username (under login
> credentials) that matches the name of the local interface.
> 
>       =20
> 
>       ACTIVE VPN:
> 
>       =20
> 
>                   Router Name:  SEA_to_ORD
> 
>                   Remote IP Address: 205.178.180.125
> 
>                   Dial-Out Credentials (Username): SEA_to_ORD
> 
>                   Dial-Out Credentials (Password): <anything -
> preferably complex>
> 
>                   Dial-Out Credentials (Domain): SEATTLEVPN
> 
>                   Dial-In Credentials: <blank!>
> 
>       =20
> 
>       During the creation of the interface, Windows 2000 will prompt
> for dial-in credentials.  Since this interface is the active dialer,
> these credentials are not needed.  Instead, dial-out credentials should
> be specified.  Once this interface is configured, select the properties
> of the interface.  Change the type of interface to persistent, and set
> the redial attempts to 10000.
> 
>       =20
> 
>       =20
> 
>       PASSIVE VPN:
> 
>       =20
> 
>                   Router Name:  SEA_to_ORD
> 
>                   Remote IP Address: <blank!>
> 
>                   Dial-In Credentials (Username): SEA_to_ORD
> 
>                   Dial-Out Credentials (Domain): <blank!> ( enter
> anything at this point, because you won't finish the wizard until you
> do. Then right click the connector and select credentials and clear
> them.
> 
>       =20
> 
>       During the creation of this passive interface, dial-in
> credentials must be established.  This may be performed by selecting the
> add account so remote router can dial in option during configuration.
> After the interface is configured, select the properties of the
> interface. Change the interface to demand-dial, and set the
> disconnection time to never.
> 
>       =20
> 
>       When the ACTIVE VPN is initialized, a connection to the remote
> VPN is established.  Upon connection, the dial-out credentials are
> presented to the remote machine.  Upon receiving the credentials, the
> PASSIVE VPN recognizes that the name of the local RRAS interface matches
> the username of the credentials. Thus, it immediately associates the VPN
> interface to the connection - and routes packets appropriately.
> 
>       =20
> 
>       =20
> 
>       Add static routes at both ends, or use rip.
> 
>       =20
> 
>       Cheers
> 
>       =20
> 
>       Steve
> 
>   _____ =20
> 
> From:  Greg Foulks=09
> Sent:  Tue 11/02/2003 04:33 PM=09
> To:    [ISAserver.org Discussion List]=09
> Subject:       [isalist] Re: VPN Connections dropping=09
>  =09
>       http://www.ISAserver.org
> =09
> =09
>       Do you have QoS enabled?
> =09
>       greg
> =09
>       ----- Original Message -----
>       From: <hiramacl@xxxxxxxxx>
>       To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
>       Sent: Tuesday, February 11, 2003 3:27 PM
>       Subject: [isalist] VPN Connections dropping
> =09
> =09
>       > http://www.ISAserver.org
>       >
>       >
>       > We are trying to setup a remote office for VPN access.  We
> have the test
>       > environment set with two Win2k clients connecting to a primary
> firewall
>       > that nats the PPTP traffic to ISA.  One client drops the
> connection
>       > shortly after the second client authenticates to the network.
>       >
>       > Any ideas?
>       >
>       > Thanks!
>       >
>       > ------------------------------------------------------
>       > List Archives:
> http://www.webelists.com/cgi/lyris.pl?enter=3Disalist
>       > ISA Server Newsletter:
> http://www.isaserver.org/pages/newsletter.asp
>       > ISA Server FAQ:
> http://www.isaserver.org/pages/larticle.asp?type=3DFAQ
>       > ------------------------------------------------------
>       > Exchange Server Resource Site: http://www.msexchange.org/
>       > Windows Security Resource Site: http://www.windowsecurity.com/
>       > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
>       > ------------------------------------------------------
>       > You are currently subscribed to this ISAserver.org Discussion
> List as:
>       greg.foulks@xxxxxxxx
>       > To unsubscribe send a blank email to
> $subst('Email.Unsub')
>       >
> =09
> =09
>       ------------------------------------------------------
>       List Archives:
> http://www.webelists.com/cgi/lyris.pl?enter=3Disalist
>       ISA Server Newsletter:
> http://www.isaserver.org/pages/newsletter.asp
>       ISA Server FAQ:
> http://www.isaserver.org/pages/larticle.asp?type=3DFAQ
>       ------------------------------------------------------
>       Exchange Server Resource Site: http://www.msexchange.org/
>       Windows Security Resource Site: http://www.windowsecurity.com/
>       Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
>       ------------------------------------------------------
>       You are currently subscribed to this ISAserver.org Discussion
> List as: steve@xxxxxxxxxxxxxxx
>       To unsubscribe send a blank email to
> $subst('Email.Unsub')
>       ------------------------------------------------------
>       List Archives:
> http://www.webelists.com/cgi/lyris.pl?enter=3Disalist
>       ISA Server Newsletter:
> http://www.isaserver.org/pages/newsletter.asp
>       ISA Server FAQ:
> http://www.isaserver.org/pages/larticle.asp?type=3DFAQ
>       ------------------------------------------------------
>       Exchange Server Resource Site: http://www.msexchange.org/
>       Windows Security Resource Site: http://www.windowsecurity.com/
>       Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
>       ------------------------------------------------------
>       You are currently subscribed to this ISAserver.org Discussion
> List as: tshinder@xxxxxxxxxxxxxxxxxx
>       To unsubscribe send a blank email to
> $subst('Email.Unsub')  =20
>   _____ =20
> 
> 
> =09
> 
>       This E-Mail is confidential. It is not intended to be read,
> copied, disclosed or used by any person other than
> isalist@xxxxxxxxxxxxxx
> 
>       Unauthorised use, disclosure, or copying is strictly prohibited
> and may be unlawful. Optimum Computer Solutions disclaims any liability
> for any action taken in connection of this E-Mail. The comments or
> statements expressed in this E-Mail are not necessarily those of Optimum
> Computer Solutions or its subsidiaries or affiliates.
> 
>       usermanager@xxxxxxxxxxxxxxx
> <http://lw11fd.law11.hotmail.msn.com/cgi-bin/compose?mailto=3D1&msg=3DMSG=
> 103
> 6540747.31&start=3D150800&len=3D20303&src=3D&type=3Dx&to=3Dusermanager%40=
> optimum%2
> emine%2enu&cc=3D&bcc=3D&subject=3D&body=3D&curmbox=3DF000000001&a=3D6ae57=
> 4725cdd819b
> e54d0cade223e798>=20
> 
> =09
>   _____ =20
> 
> 
> 
> ------_=_NextPart_001_01C2D22D.917D10E4
> Content-Type: text/html;
>       charset="us-ascii"
> Content-Transfer-Encoding: quoted-printable
> 
> <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
> <HTML xmlns:o =3D=20
> "urn:schemas-microsoft-com:office:office"><HEAD><TITLE>Message</TITLE>
> <META http-equiv=3DContent-Type content=3D"text/html; =
> charset=3Dus-ascii">
> <META content=3D"MSHTML 6.00.2715.400" name=3DGENERATOR></HEAD>
> <BODY>
> <DIV><SPAN class=3D341212600-12022003><FONT face=3DArial color=3D#0000ff =
> 
> size=3D2>Dude!</FONT></SPAN></DIV>
> <DIV><SPAN class=3D341212600-12022003><FONT face=3DArial color=3D#0000ff =
> 
> size=3D2></FONT></SPAN>&nbsp;</DIV>
> <DIV><SPAN class=3D341212600-12022003><FONT face=3DArial color=3D#0000ff =
> size=3D2>How=20
> many times have I referred to the great Avenade doc in reference to =
> making sure=20
> that one side is set as active and the other is set as passive? =
> :-)&nbsp; While=20
> this doesn't fix every whacked out VPN gateway config, its something =
> that should=20
> be ruled out first.</FONT></SPAN></DIV>
> <DIV><SPAN class=3D341212600-12022003><FONT face=3DArial color=3D#0000ff =
> 
> size=3D2></FONT></SPAN>&nbsp;</DIV>
> <DIV><SPAN class=3D341212600-12022003><FONT face=3DArial color=3D#0000ff =
> size=3D2>Good=20
> to hear you got it working though!</FONT></SPAN></DIV>
> <DIV><SPAN class=3D341212600-12022003><FONT face=3DArial color=3D#0000ff =
> 
> size=3D2></FONT></SPAN>&nbsp;</DIV>
> <DIV><SPAN class=3D341212600-12022003><FONT face=3DArial color=3D#0000ff =
> 
> size=3D2>Tom</FONT></SPAN></DIV>
> <DIV>&nbsp;</DIV>
> <DIV>&nbsp;</DIV>
> <DIV align=3Dleft><FONT face=3D"Comic Sans MS" size=3D2><STRONG>Thomas W =
> 
> Shinder<BR></STRONG></FONT><A =
> href=3D"http://www.isaserver.org/shinder";><FONT=20
> face=3D"Comic Sans MS"=20
> size=3D2><STRONG>www.isaserver.org/shinder</STRONG></FONT></A><FONT=20
> face=3D"Comic Sans MS" size=3D2><STRONG> <BR>ISA Server and Beyond:=20
> </STRONG></FONT><A href=3D"http://tinyurl.com/1jq1";><FONT face=3D"Comic =
> Sans MS"=20
> size=3D2><STRONG>http://tinyurl.com/1jq1</STRONG></FONT></A><BR><FONT=20
> face=3D"Comic Sans MS" size=3D2><STRONG>Configuring ISA Server: =
> </STRONG></FONT><A=20
> href=3D"http://tinyurl.com/1llp";><FONT face=3D"Comic Sans MS"=20
> size=3D2><STRONG>http://tinyurl.com/1llp</STRONG></FONT></A><FONT=20
> face=3D"Comic Sans MS" size=3D2><STRONG> </STRONG></FONT></DIV>
> <BLOCKQUOTE style=3D"MARGIN-RIGHT: 0px">
>   <DIV></DIV>
>   <DIV class=3DOutlookMessageHeader lang=3Den-us dir=3Dltr =
> align=3Dleft><FONT=20
>   face=3DTahoma size=3D2>-----Original Message-----<BR><B>From:</B> =
> Steve Moffat=20
>   [mailto:steve@xxxxxxxxxxxxxxx] <BR><B>Sent:</B> Tuesday, February 11, =
> 2003=20
>   5:21 PM<BR><B>To:</B> [ISAserver.org Discussion =
> List]<BR><B>Subject:</B>=20
>   [isalist] Re: VPN Connections=20
>   dropping<BR><BR></FONT></DIV>http://www.ISAserver.org<BR><BR>
>   <DIV id=3DidOWAReplyText49747 dir=3Dltr>
>   <DIV dir=3Dltr><FONT face=3DArial color=3D#000000 size=3D2>Now there's =
> a thing, after=20
>   a couple of months scratching my head over site to site VPN's, I =
> finally=20
>   understood last night how to do it.</FONT></DIV>
>   <DIV dir=3Dltr><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
>   <DIV dir=3Dltr><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
>   <DIV dir=3Dltr><FONT face=3DArial size=3D2>Here's a snippit from the =
> doc I=20
>   found</FONT></DIV>
>   <DIV dir=3Dltr><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
>   <DIV dir=3Dltr>
>   <P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt"><FONT =
> face=3DHelvetica=20
>   size=3D2>There are numerous important components to defining these =
> site-to-site=20
>   links.<SPAN style=3D"mso-spacerun: yes">&nbsp; </SPAN>It is imperative =
> to=20
>   recognize that <B style=3D"mso-bidi-font-weight: normal">only one</B> =
> of the VPN=20
>   peers initiates the VPN connection.<SPAN style=3D"mso-spacerun: =
> yes">&nbsp;=20
>   </SPAN>The remote VPN peer simply recognizes the connection, and =
> initiates the=20
>   appropriate initialization of the local interface when the peer =
> supplies a=20
>   username (under login credentials) that matches the name of the local=20
>   interface.</FONT></P>
>   <P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt"><FONT =
> face=3DHelvetica=20
>   size=3D2></FONT>&nbsp;</P>
>   <P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt"><U><FONT =
> size=3D2><FONT=20
>   face=3DHelvetica>ACTIVE VPN:<o:p></o:p></FONT></FONT></U></P>
>   <P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt"><o:p><FONT =
> face=3DHelvetica=20
>   size=3D2>&nbsp;</FONT></o:p></P>
>   <P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt"><FONT =
> size=3D2><FONT=20
>   face=3DHelvetica><SPAN=20
>   style=3D"mso-tab-count: =
> 1">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=20
>   </SPAN>Router Name:<SPAN style=3D"mso-spacerun: yes">&nbsp;=20
>   </SPAN>SEA_to_ORD</FONT></FONT></P>
>   <P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt"><FONT =
> size=3D2><FONT=20
>   face=3DHelvetica><SPAN=20
>   style=3D"mso-tab-count: =
> 1">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=20
>   </SPAN>Remote IP Address: 205.178.180.125</FONT></FONT></P>
>   <P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt"><FONT =
> size=3D2><FONT=20
>   face=3DHelvetica><SPAN=20
>   style=3D"mso-tab-count: =
> 1">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=20
>   </SPAN>Dial-Out Credentials (Username): SEA_to_ORD</FONT></FONT></P>
>   <P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt"><FONT =
> size=3D2><FONT=20
>   face=3DHelvetica><SPAN=20
>   style=3D"mso-tab-count: =
> 1">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=20
>   </SPAN>Dial-Out Credentials (Password): &lt;anything &#8211; =
> preferably=20
>   complex&gt;</FONT></FONT></P>
>   <P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt"><FONT =
> size=3D2><FONT=20
>   face=3DHelvetica><SPAN=20
>   style=3D"mso-tab-count: =
> 1">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=20
>   </SPAN>Dial-Out Credentials (Domain): SEATTLEVPN</FONT></FONT></P>
>   <P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt"><FONT =
> size=3D2><FONT=20
>   face=3DHelvetica><SPAN=20
>   style=3D"mso-tab-count: =
> 1">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=20
>   </SPAN>Dial-In Credentials: &lt;blank!&gt;</FONT></FONT></P>
>   <P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt"><o:p><FONT =
> face=3DHelvetica=20
>   size=3D2>&nbsp;</FONT></o:p></P>
>   <P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt"><FONT =
> face=3DHelvetica=20
>   size=3D2>During the creation of the interface, Windows 2000 will =
> prompt for=20
>   dial-in credentials.<SPAN style=3D"mso-spacerun: yes">&nbsp; =
> </SPAN>Since this=20
>   interface is the active dialer, these credentials are not needed.<SPAN =
> 
>   style=3D"mso-spacerun: yes">&nbsp; </SPAN>Instead, dial-out =
> credentials should=20
>   be specified.<SPAN style=3D"mso-spacerun: yes">&nbsp; </SPAN>Once this =
> interface=20
>   is configured, select the properties of the interface.<SPAN=20
>   style=3D"mso-spacerun: yes">&nbsp; </SPAN>Change the type of interface =
> to <I=20
>   style=3D"mso-bidi-font-style: normal">persistent</I>, and set the <I=20
>   style=3D"mso-bidi-font-style: normal">redial attempts</I> to =
> 10000.</FONT></P>
>   <P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt">&nbsp;</P>
>   <P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt">&nbsp;</P>
>   <P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt"><U><FONT =
> size=3D2><FONT=20
>   face=3DHelvetica>PASSIVE VPN:<o:p></o:p></FONT></FONT></U></P>
>   <P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt"><o:p><FONT =
> face=3DHelvetica=20
>   size=3D2>&nbsp;</FONT></o:p></P>
>   <P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt"><FONT =
> size=3D2><FONT=20
>   face=3DHelvetica><SPAN=20
>   style=3D"mso-tab-count: =
> 1">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=20
>   </SPAN>Router Name:<SPAN style=3D"mso-spacerun: yes">&nbsp;=20
>   </SPAN>SEA_to_ORD</FONT></FONT></P>
>   <P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt"><FONT =
> size=3D2><FONT=20
>   face=3DHelvetica><SPAN=20
>   style=3D"mso-tab-count: =
> 1">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=20
>   </SPAN>Remote IP Address: &lt;blank!&gt;</FONT></FONT></P>
>   <P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt"><FONT =
> size=3D2><FONT=20
>   face=3DHelvetica><SPAN=20
>   style=3D"mso-tab-count: =
> 1">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=20
>   </SPAN>Dial-In Credentials (Username): SEA_to_ORD</FONT></FONT></P>
>   <P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt"><FONT =
> size=3D2><FONT=20
>   face=3DHelvetica><SPAN=20
>   style=3D"mso-tab-count: =
> 1">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=20
>   </SPAN>Dial-Out Credentials (Domain): &lt;blank!&gt; ( enter anything =
> at this=20
>   point, because you won't finish the wizard until you do. Then right =
> click the=20
>   connector and select credentials and clear them.</FONT></FONT></P>
>   <P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt"><o:p><FONT =
> face=3DHelvetica=20
>   size=3D2>&nbsp;</FONT></o:p></P>
>   <P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt"><FONT =
> size=3D2><FONT=20
>   face=3DHelvetica><B style=3D"mso-bidi-font-weight: normal">During the =
> creation of=20
>   this passive interface, dial-in credentials must be =
> established</B>.<SPAN=20
>   style=3D"mso-spacerun: yes">&nbsp; </SPAN>This may be performed by =
> selecting the=20
>   <I style=3D"mso-bidi-font-style: normal">add account so remote router =
> can dial=20
>   in</I> option during configuration.<SPAN style=3D"mso-spacerun: =
> yes">&nbsp;=20
>   </SPAN>After the interface is configured, select the properties of the =
> 
>   interface. Change the interface to <I>demand-dial</I>, and set the=20
>   disconnection time to <I=20
>   style=3D"mso-bidi-font-style: normal">never</I>.</FONT></FONT></P>
>   <P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt"><o:p><FONT =
> face=3DHelvetica=20
>   size=3D2>&nbsp;</FONT></o:p></P>
>   <P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt"><FONT =
> face=3DHelvetica=20
>   size=3D2>When the ACTIVE VPN is initialized, a connection to the =
> remote VPN is=20
>   established.<SPAN style=3D"mso-spacerun: yes">&nbsp; </SPAN>Upon =
> connection, the=20
>   dial-out credentials are presented to the remote machine.<SPAN=20
>   style=3D"mso-spacerun: yes">&nbsp; </SPAN>Upon receiving the =
> credentials, the=20
>   PASSIVE VPN recognizes that the name of the local RRAS interface =
> matches the=20
>   username of the credentials. Thus, it immediately associates the VPN =
> interface=20
>   to the connection &#8211; and routes packets appropriately.</FONT></P>
>   <P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt">&nbsp;</P>
>   <P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt">&nbsp;</P>
>   <P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt">Add static routes =
> at both ends,=20
>   or use rip.</P>
>   <P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt">&nbsp;</P>
>   <P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt">Cheers</P>
>   <P class=3DMsoNormal style=3D"MARGIN: 0in 0in 0pt">&nbsp;</P>
>   <P class=3DMsoNormal style=3D"MARGIN: 0in 0in =
> 0pt">Steve</P></DIV></DIV>
>   <DIV dir=3Dltr>
>   <HR tabIndex=3D-1>
> 
>   <TABLE tabIndex=3D-1 cols=3D2>
>     <TBODY>
>     <TR>
>       <TD><FONT face=3DTahoma size=3D2><B>From:</B></FONT></TD>
>       <TD><FONT id=3D_1 face=3DTahoma size=3D2>Greg =
> Foulks</FONT></TD></TR>
>     <TR>
>       <TD><FONT face=3DTahoma size=3D2><B>Sent:</B></FONT></TD>
>       <TD><FONT id=3D_2 face=3DTahoma size=3D2>Tue 11/02/2003 04:33 =
> PM</FONT></TD></TR>
>     <TR>
>       <TD><FONT face=3DTahoma size=3D2><B>To:</B></FONT></TD>
>       <TD><FONT id=3D_3 face=3DTahoma size=3D2>[ISAserver.org Discussion =
> 
>       List]</FONT></TD></TR>
>     <TR>
>       <TD><FONT face=3DTahoma size=3D2><B>Subject:</B></FONT></TD>
>       <TD><FONT id=3D_5 face=3DTahoma size=3D2>[isalist] Re: VPN =
> Connections=20
>         dropping</FONT></TD></TR>
>     <TR>
>       <TD colSpan=3D2>&nbsp;</TD></TR></TBODY></TABLE></DIV>
>   <DIV><PRE>http://www.ISAserver.org
> 
> 
> Do you have QoS enabled?
> 
> greg
> 
> ----- Original Message -----
> From: &lt;hiramacl@xxxxxxxxx&gt;
> To: "[ISAserver.org Discussion List]" &lt;isalist@xxxxxxxxxxxxx&gt;
> Sent: Tuesday, February 11, 2003 3:27 PM
> Subject: [isalist] VPN Connections dropping
> 
> 
> &gt; http://www.ISAserver.org
> &gt;
> &gt;
> &gt; We are trying to setup a remote office for VPN access.  We have the =
> test
> &gt; environment set with two Win2k clients connecting to a primary =
> firewall
> &gt; that nats the PPTP traffic to ISA.  One client drops the connection
> &gt; shortly after the second client authenticates to the network.
> &gt;
> &gt; Any ideas?
> &gt;
> &gt; Thanks!
> &gt;
> &gt; ------------------------------------------------------
> &gt; List Archives: =
> http://www.webelists.com/cgi/lyris.pl?enter=3Disalist
> &gt; ISA Server Newsletter: =
> http://www.isaserver.org/pages/newsletter.asp
> &gt; ISA Server FAQ: =
> http://www.isaserver.org/pages/larticle.asp?type=3DFAQ
> &gt; ------------------------------------------------------
> &gt; Exchange Server Resource Site: http://www.msexchange.org/
> &gt; Windows Security Resource Site: http://www.windowsecurity.com/
> &gt; Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> &gt; ------------------------------------------------------
> &gt; You are currently subscribed to this ISAserver.org Discussion List =
> as:
> greg.foulks@xxxxxxxx
> &gt; To unsubscribe send a blank email to =
> $subst('Email.Unsub')
> &gt;
> 
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=3Disalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=3DFAQ
> ------------------------------------------------------
> Exchange Server Resource Site: http://www.msexchange.org/
> Windows Security Resource Site: http://www.windowsecurity.com/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as: =
> steve@xxxxxxxxxxxxxxx
> To unsubscribe send a blank email to $subst('Email.Unsub')
> </PRE></DIV>------------------------------------------------------<BR>Lis=
> t=20
>   Archives: http://www.webelists.com/cgi/lyris.pl?enter=3Disalist<BR>ISA =
> Server=20
>   Newsletter: http://www.isaserver.org/pages/newsletter.asp<BR>ISA =
> Server FAQ:=20
>   =
> http://www.isaserver.org/pages/larticle.asp?type=3DFAQ<BR>---------------=
> ---------------------------------------<BR>Exchange=20
>   Server Resource Site: http://www.msexchange.org/<BR>Windows Security =
> Resource=20
>   Site: http://www.windowsecurity.com/<BR>Windows 2000/NT Fax Solutions: =
> 
>   =
> http://www.ntfaxfaq.com<BR>----------------------------------------------=
> --------<BR>You=20
>   are currently subscribed to this ISAserver.org Discussion List as:=20
>   tshinder@xxxxxxxxxxxxxxxxxx<BR>To unsubscribe send a blank email to=20
>   $subst('Email.Unsub') <STRONG><EM><FONT face=3DVerdana=20
>   color=3D#0000ff size=3D2>&nbsp;</FONT></EM></STRONG>=20
>   <HR>
> 
>   <P></P>
>   <P><FONT face=3DVerdana color=3D#0000ff size=3D2><STRONG><EM>This =
> E-Mail is=20
>   confidential. It is not intended to be read, copied, disclosed or used =
> by any=20
>   person other than isalist@xxxxxxxxxxxxxx</EM></STRONG></FONT></P>
>   <P><FONT face=3DVerdana color=3D#0000ff =
> size=3D2><STRONG><EM>Unauthorised use,=20
>   disclosure, or copying is strictly prohibited and may be unlawful. =
> Optimum=20
>   Computer Solutions disclaims any liability for any action taken in =
> connection=20
>   of this E-Mail. The comments or statements expressed in this E-Mail =
> are not=20
>   necessarily those of Optimum Computer Solutions or its subsidiaries or =
> 
>   affiliates.</EM></STRONG></FONT></P>
>   <P><A=20
>   =
> href=3D"http://lw11fd.law11.hotmail.msn.com/cgi-bin/compose?mailto=3D1&am=
> p;msg=3DMSG1036540747.31&amp;start=3D150800&amp;len=3D20303&amp;src=3D&am=
> p;type=3Dx&amp;to=3Dusermanager%40optimum%2emine%2enu&amp;cc=3D&amp;bcc=3D=
> &amp;subject=3D&amp;body=3D&amp;curmbox=3DF000000001&amp;a=3D6ae574725cdd=
> 819be54d0cade223e798"><FONT=20
>   face=3DVerdana size=3D2=20
>   =
> target=3D"_blank"><STRONG><EM>usermanager@xxxxxxxxxxxxxxx</EM></STRONG></=
> FONT></A></P>
>   <P>
>   <HR>
> </BLOCKQUOTE></BODY></HTML>
> =00
> ------_=_NextPart_001_01C2D22D.917D10E4--


Other related posts: