Welcome to ISAserver.org

Cant make rule for VPN. Client 172.16/12

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Firewall] >> VPN >> Cant make rule for VPN. Client 172.16/12

Page: [1]

Message

<< Older Topic Newer Topic >>

Cant make rule for VPN. Client 172.16/12 - 2.Dec.2006 5:24:41 AM

Ten

Posts: 20
Joined: 28.Jul.2004
From: Russian, Kirov
Status: offline

At a server the external address 217.9.X.X
The provider gives the client (ADSL) the address from a range 172.16.0.0 - 172.31.255.255 (crazy ISP! this range mean "regional internet").
On rfc1918 this range is internal.
I can not adjust ISA2006 that allowed to establish VPN-connection.

When the client uses other registration record, the address from a range 217.9.X.X is given out to him and establish VPN-connection fine.

"Access Networks" in "Configure VPN Client Access" - all enabled.
Tried to bring both ranges in separate group and it to resolve - unsuccessfully, not connections :(
In log I see "Denied Connection" by "Default Rule"

What can i do?

P.S. Sorry for my English

Post #: 1

Featured Links*

RE: Cant make rule for VPN. Client 172.16/12 - 7.Dec.2006 7:56:46 PM

tshinder

Posts: 47663
Joined: 10.Jan.2001
From: Texas
Status: offline

What device has the external address?

What device has the 172.16. address?

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to Ten)

Post #: 2

RE: Cant make rule for VPN. Client 172.16/12 - 8.Dec.2006 7:19:31 AM

Ten

Posts: 20
Joined: 28.Jul.2004
From: Russian, Kirov
Status: offline

Hi Tom.
Netcard on the ISA2006 have external address 217.9.x.x, it connected to ISPs network throw xDSL Zyxel Prestige 791R.
ADSL-modem at home is Dlink DSL-500, ISPs DHCP-server get address 172.16.0.0 - 172.31.255.255 for it.

Look to the picture below

(in reply to Ten)

Post #: 3

RE: Cant make rule for VPN. Client 172.16/12 - 8.Dec.2006 8:35:15 AM

tshinder

Posts: 47663
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Ten,

The workstation computer is not connected to the Internet since it has a private IP address. What is the public IP address of the device that connects the workstation to the Internet?

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to Ten)

Post #: 4

RE: Cant make rule for VPN. Client 172.16/12 - 8.Dec.2006 9:04:42 AM

Ten

Posts: 20
Joined: 28.Jul.2004
From: Russian, Kirov
Status: offline

We live in Russia...
In our country providers do not know standards and do how by it conveniently.
I understand, that addresses in the Internet cannot be used. We admit(allow), that in this case it and not the Internet. But my server has the static 217.9.х.х address given to me by the same provider. The client receives addresses from this provider from a range 172.16.0.0 - 172.31.255.255.To you it is difficult for understanding, but it indeed.

And as I can solve my problem - I do not present :(

(in reply to tshinder)

Post #: 5

RE: Cant make rule for VPN. Client 172.16/12 - 18.Jan.2007 3:46:38 AM