Welcome to ISAserver.org

RRAS Policy different for VPN Client and VPN Site to Site

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Firewall] >> VPN >> RRAS Policy different for VPN Client and VPN Site to Site

Page: [1]

Message

<< Older Topic Newer Topic >>

RRAS Policy different for VPN Client and VPN Site to Site - 7.Oct.2006 12:00:03 PM

aavdberg

Posts: 32
Joined: 30.Jul.2004
From: The Netherlands
Status: offline

I have a question about Remote Access Policies in RRAS with VPN Client and VPN Site to Site on the same ISA Server 2006.

We want to use RSA SecurID hardware tokens for the VPN Clients to setup a VPN connection.

And we want to use Preshare Key for the VPN Site to Site connection to one of our brance offices.

But when we change the remote access policies in RRAS and remove the MS-CHAPv2 then then VPN client can setup a connection but the VPN Site to Site connection cannot be set up.

What we want to do is only allow VPN clients to setup a connection with RSA SecurID EAP. And the VPN Site to Site can only be setup from a specific IP addres and use L2TP.

Who can help me with this configuration.

So seperate VPN Client on one machine and seperate VPN Site to Site is no problem only the two on one machine is the problem.

_____________________________

Greeting from
Andr� van den Berg.

Post #: 1

Featured Links*

RE: RRAS Policy different for VPN Client and VPN Site t... - 9.Oct.2006 10:16:36 AM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Andre,

Good question. Can you do this with RADIUS RAS policies?

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to aavdberg)

Post #: 2