Welcome to ISAserver.org

2 and more address ranges for vpn clients

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Firewall] >> VPN >> 2 and more address ranges for vpn clients

Page: [1]

Message

<< Older Topic Newer Topic >>

2 and more address ranges for vpn clients - 17.Apr.2007 5:19:38 PM

vxed

Posts: 1
Joined: 17.Apr.2007
Status: offline

Hello,
am have problem with vpn - sometime server with isa2k6ee stop any network activity (in/out... both...) ping to server/from server return "Request timeout" but already established connections works... in isa logs/eventlog nothing abnormal...
after restart service (microsoft firewall) alls ok... also if am remove 10.0.0.1-10.9.255.255 from vpn user's address ranges alls ok...
plz help

information about server

software:
windows 2003 sp2
microsoft isa 2006 ee

interfaces:
lan - 192.168.0.1
wan - 87.245.ccc.ddd

vpn address ranges:
10.0.0.1-10.9.255.255
87.245.ccc.yyy-87.245.ccc.zzz

computer sets:
internal vpn: 10.0.0.2-10.9.255.255

network rules:
internal vpn -> external = nat
vpn clients -> external = route

< Message edited by vxed -- 17.Apr.2007 6:09:57 PM >

Post #: 1

Featured Links*

RE: 2 and more address ranges for vpn clients - 30.Apr.2007 8:00:19 AM

tshinder

Posts: 47663
Joined: 10.Jan.2001
From: Texas
Status: online

Best to assign the VPN clients addresses from a single Network ID. Does'nt make sure sense to do otherwise.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to vxed)