Welcome to ISAserver.org

Cisco VPN Client through ISA2k4

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> VPN >> Cisco VPN Client through ISA2k4

Page: [1]

Message

<< Older Topic Newer Topic >>

Cisco VPN Client through ISA2k4 - 2.Mar.2004 5:07:00 PM

kfb_1701

Posts: 15
Joined: 2.Mar.2004
From: Canada
Status: offline

Hello,

I have a simple configuration, 20 computers behind ISA2k4, one of those computers need to establish a IPSec VPN session to a outbound Cisco PIX (don't know the model). On the ISA server I'm able to connect to the PIX but not with any computers on my network.

I don't know what to do "[Confused]"

Thanks,

Bruno

Post #: 1

Featured Links*

RE: Cisco VPN Client through ISA2k4 - 2.Mar.2004 7:29:00 PM

tshinder

Posts: 47420
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Bruno,

Is the destination network on a different network ID?

Thanks!
Tom

(in reply to kfb_1701)

Post #: 2

RE: Cisco VPN Client through ISA2k4 - 2.Mar.2004 10:41:00 PM

kfb_1701

Posts: 15
Joined: 2.Mar.2004
From: Canada
Status: offline

Yes

(in reply to kfb_1701)

Post #: 3

RE: Cisco VPN Client through ISA2k4 - 3.Mar.2004 2:08:00 PM

tshinder

Posts: 47420
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Bruno,

If the destination network is on a different network ID, then you should have no problems connecting to computers on the local network, since the default gateway change won't have an effect on local connections. However, if you're trying to connect to remote segments on your local network, then you'll have to wait for the VPN connect to disconnect for security reasons (and isn't that what VPN is about?).

HTH,
Tom

(in reply to kfb_1701)

Post #: 4

RE: Cisco VPN Client through ISA2k4 - 3.Mar.2004 4:02:00 PM

kfb_1701

Posts: 15
Joined: 2.Mar.2004
From: Canada
Status: offline

I'm able to establish the connection to the Cisco PIX on the ISA server with the Cisco VPN client but with a station behind the ISA server, the Cisco VPN client give me this error: The remote peer is no longer responding.

Here's what I want to do: With one of my local network station (The station is behind ISA2k4) I need to establish a IPSec VPN connection via the internet to a other network. The station need to connect to a Terminal Server on the remote network. Everything's working on the ISA server itself, the VPN connection and the terminal session but it's not working on my local network station.

(in reply to kfb_1701)

Post #: 5

RE: Cisco VPN Client through ISA2k4 - 5.Mar.2004 1:52:00 AM

tshinder

Posts: 47420
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Kfb,

What Access Rules have you created to support the VPN client connection?

Thanks!
Tom

(in reply to kfb_1701)

Post #: 6

RE: Cisco VPN Client through ISA2k4 - 5.Mar.2004 6:05:00 PM

awj

Posts: 104
Joined: 26.Feb.2004
From: UK
Status: offline

This may or may not help but i had similar problems and it turned out that by making the client PC's default gateway the ISA servers internal ip everything worked. Put it to internal router on my network that connects up the 2 sites we have and no luck.

(in reply to kfb_1701)

Post #: 7

RE: Cisco VPN Client through ISA2k4 - 7.Mar.2004 4:42:00 PM

tshinder

Posts: 47420
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Al,

The client does need to be configured as a SecureNAT client, so if the client is on a network remote from the ISA firewall, then the routing tables on the network routers may need to be adjusted in terms of their default gateway settings.

HTH,
Tom

(in reply to kfb_1701)

Post #: 8