RE: VPN from internal to multiple external servers

  • From: "Iain Gurney" <iainpg@xxxxxxxxxxx>
  • To: isalist@xxxxxxxxxxxxx
  • Date: Wed, 25 May 2005 13:09:53 +0000

the local clients are set for ISA1

when i check ipconfig /all - all details are pointed toward isa1

starting to get out of my depth ?

Iain

From: "Jim Harrison" <Jim@xxxxxxxxxxxx>
Reply-To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Subject: [isalist] RE: VPN from internal to multiple external servers
Date: Wed, 25 May 2005 06:04:30 -0700

http://www.ISAserver.org

Outbound VPN access can only be performed from a SecureNAT client.
It sounds like your internal network (or hosts) is using ISA2 as the
default route to the Internet.
You'll have to change this so that it points to ISA1.

-----Original Message-----
From: Iain Gurney [mailto:iainpg@xxxxxxxxxxx]
Sent: Wednesday, May 25, 2005 4:18 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] VPN from internal to multiple external servers

http://www.ISAserver.org

Hi

I have the following scenerio - isa1 and isa2 - both are setup with the
south sides on the lan - the north side both shaer the same 2mb leased
line

I want to remove ISA2 but every time I remove this server (or even
diasble
the north nic) the internal lan cannot VPN out to any site.

We can VPN in ok and ping the vpn sites from the lan

I have checked access policies on both ISA servers and all other
settings
and they are identical, also checked RRAS as nothing seems out of joint

I am truly stumped?

May replace with a linux box

No errors in event log or ISA log and service packs up to date

Help my sanity please

Iain

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx

All mail to and from this domain is GFI-scanned.


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: iainpg@xxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx




Other related posts: