Welcome to ISAserver.org

Can't ping remote nets from ISA 2006

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Firewall] >> VPN >> Can't ping remote nets from ISA 2006

Page: [1]

Message

<< Older Topic Newer Topic >>

Can't ping remote nets from ISA 2006 - 1.Nov.2006 3:04:03 PM

omslaw

Posts: 10
Joined: 31.Jul.2001
From: Overland Park, KS US
Status: offline

I have a Site-to-Site VPN setup with ISA 2006 on both ends. I can access resources on each network from the other.

What I can't do is access the remote network from the ISA server! Is this even possible? When I ping any device on the remote network from the ISA server I get:

'Negotiating IP Security.'

How can I access the remote nets from ISA?

Post #: 1

Featured Links*

RE: Can't ping remote nets from ISA 2006 - 8.Nov.2006 10:25:24 AM

cesarpaez

Posts: 2
Joined: 8.Nov.2006
Status: offline

I have the same problem!
At first i thougt about a routing problem but after hours of trial and error foud that from my pc wich is in the internal network can ping to the remote site...

The config is this:

2003 sp1DC, Mail Server, ISA 2004 sp2 on the same machine... (I know is not the best scenario)

the server has 3 legs: internal, external (internet + mail), another external (VPN) because of bandwith limitations of ISPs, in the area...

Thanks

Cesar

(in reply to omslaw)

Post #: 2

RE: Can't ping remote nets from ISA 2006 - 8.Nov.2006 4:52:47 PM

bfuchs

Posts: 3
Joined: 27.Mar.2003
From: Dk
Status: offline

Hi..

I had the same problem but solved it after reading this :
http://www.isaserver.org/tutorials/Troubleshooting-IPSec-Tunnel-Mode-Scenarios.html

what is was missing was :
On each ISA Server (or 3rd party VPN gateway), add the external IP address of the opposing ISA firewall into the Addresses tab of the connection.

Cheers

Brian.

(in reply to cesarpaez)

Post #: 3