Welcome to ISAserver.org

ISA 2004 B2 to external VPN (PPTP)

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> VPN >> ISA 2004 B2 to external VPN (PPTP)

Page: [1]

Message

<< Older Topic Newer Topic >>

ISA 2004 B2 to external VPN (PPTP) - 5.Feb.2004 7:19:00 AM

cluberti

Posts: 7
Joined: 9.Sep.2002
From: Chicago, IL.
Status: offline

I'm stumped. I'm setting up a test network at a remote site, and I need to connect back to my corporate LAN via VPN. I'm using ISA Server 2004 (Beta 2) PPTP to connect to the dedicated VPN appliance on site, and here is my problem.

The VPN connection is established, and my ISA server is assigned an IP address via DHCP (let's say 192.168.50.1). The ISA server itself can ping around the corporate network, make connections using VNC, etc. Clients behind the ISA server, however, cannot seem to access resources on the corporate network. It appears that sessions are established (so says the logs), but no connections are made in return. I used the Site to Site VPN wizard in ISA Server 2004 and also created a network rule to route traffic from the internal LAN to the corporate LAN, but still no go. If I use one of the internal clients to connect to the corporate VPN server, everything works - which means it is highly likely I have something misconfigured, but I have absolutely no clue what it is. This connection worked in ISA 2000, but with 2004 being different, I've missed something (hopefully obvious).

Any suggestions?

Post #: 1

Featured Links*

RE: ISA 2004 B2 to external VPN (PPTP) - 5.Feb.2004 1:43:00 PM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi cluberti,

Did you set a routed relationship between the Internal network and the remote network?

Thanks!
Tom

(in reply to cluberti)

Post #: 2

RE: ISA 2004 B2 to external VPN (PPTP) - 5.Feb.2004 5:23:00 PM

cluberti

Posts: 7
Joined: 9.Sep.2002
From: Chicago, IL.
Status: offline

I believe so - under Configuration > Networks, I created the remote corporate network, and under Network Rules I created a route from my Internal network to the corporate network. Am I missing something?

(in reply to cluberti)

Post #: 3

RE: ISA 2004 B2 to external VPN (PPTP) - 6.Feb.2004 12:31:00 AM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Cluberti,

That sounds correct to me. You need to create the remote network object, then configure the routing relationship, and then create the access policy.

Could it be the branch office is receiving the packets, but not returning them?

Thanks!
Tom

(in reply to cluberti)

Post #: 4

RE: ISA 2004 B2 to external VPN (PPTP) - 6.Feb.2004 4:00:00 AM

cluberti

Posts: 7
Joined: 9.Sep.2002
From: Chicago, IL.
Status: offline

It could very well be a problem with the remote office. I'm setting up a Windows 2000 RRAS server temporarily to see if that works better. If so, I'll have to look deeper into the connection between the appliance and the firewall. Thanks for your help.

(in reply to cluberti)

Post #: 5

RE: ISA 2004 B2 to external VPN (PPTP) - 6.Feb.2004 1:52:00 PM