Welcome to ISAserver.org

Allow remote site to use this IPSec tunnel as it's default gateway

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Misc.] >> ISA Server 2004 Wish List >> Allow remote site to use this IPSec tunnel as it's default gateway

Page: [1]

Message

<< Older Topic Newer Topic >>

Allow remote site to use this IPSec tunnel as it's defa... - 3.Dec.2004 6:53:00 PM

wbplomp

Posts: 138
Joined: 18.Nov.2004
From: Netherlands, The
Status: offline

When you configure a Remote Site on ISA Server 2004 it created several IPSec (Quick Mode) Policies/filters.
When you configure a device on the remote site you are unable to use the IPSec tunnel as it's default gateway.
ERROR: No such policy...

Cisco and many other devices have a setting/feaure, lik this

"Allow remote site to use this tunnel as it's default gateway"

Adding 10.0.0.0/8, 192.168.0.0/16 and 172.16.0.0/12 not working well because of many overlapping subnets.

Microsoft, please. help me with this problem!
Need to consolidate 60 or more remote sites!

Kind regards,

Boudewijn

Post #: 1

Featured Links*

RE: Allow remote site to use this IPSec tunnel as it's ... - 4.Dec.2004 2:46:00 PM

tshinder

Posts: 47408
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Boudewijn,

Any possibility of using the much *more* secure L2TP/IPSec for the site to site links? IPSec tunnel mode is pretty weak compared to L2TP/IPSec.

Thanks!
Tom

(in reply to wbplomp)

Post #: 2

RE: Allow remote site to use this IPSec tunnel as it's ... - 6.Dec.2004 9:47:00 PM

wbplomp

Posts: 138
Joined: 18.Nov.2004
From: Netherlands, The
Status: offline

Hi Tom,

Thank you for responding to my post.
Well, first of all with L2TP I have the same problem. It uses the same IPSec filter in the Phase II Quick Mode.
Second, the router we are now using are being replaced by routers that don't support L2TP.

I hope someone can help me with it, because really nobody and nobody answeres to my questions. (except you Tom:-) I seem to have mentiond an issue here, this feature is missing.

Kind regareds,

Boudewijn

[ December 06, 2004, 10:09 PM: Message edited by: Boudewijn Plomp ]

(in reply to wbplomp)

Post #: 3