Welcome to ISAserver.org

Site-to-Site VPN RRAS to ISA2004 Problems

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> VPN >> Site-to-Site VPN RRAS to ISA2004 Problems

Page: [1]

Message

<< Older Topic Newer Topic >>

Site-to-Site VPN RRAS to ISA2004 Problems - 16.Jul.2007 6:28:37 PM

yatesee

Posts: 10
Joined: 25.Apr.2005
Status: offline

Howdy,

I have ISA 2004 SP3 standard set up in our HQ. IP range is 172.16.16.0/20. Running Windows 2003 SP1.

Spanning off that is a branch office DC running Win2k3 SP2 with a 192.168.20.0/24 range.

The site-to-site VPN is using PPTP. Instructions fully followed from http://www.isaserver.org/tutorials/gatewaytogatewaywithdcpart2.html

So, the vpn works peachy. I can ping my internal servers from the branch office fine, and vice versa. Name resolution again is no problem. The problem i have is that after an undertermined time, although the VPN is still connected in RRAS and in ISA, it does not ping though. Once i disconnect the VPN tunnel (at either end) and then reconnect, it works grand again.
I havnt done enough tests to see whether it does it on idle or after a set period of time - i think its random. I have just started copying 1gb of data over from Branch to HQ, so we'll see how far that gets.

There is an MS Kb article on a VPN dropping after 15mins, but this does not apply in my case, as it definetly works fine for longer than that.

Can anyone assist or has anyone seen this issue before?

Cheers in advance chaps,

Yatesee

Post #: 1

Featured Links*

RE: Site-to-Site VPN RRAS to ISA2004 Problems - 18.Jul.2007 9:14:55 AM

tshinder

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline

Install Win2003 SP2 on both VPN gateways and see if that fixes the problem. Make sure to make the Registry entry to fix the RSS bug.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to yatesee)

Post #: 2

RE: Site-to-Site VPN RRAS to ISA2004 Problems - 20.Jul.2007 6:57:43 AM

yatesee

Posts: 10
Joined: 25.Apr.2005
Status: offline

Hi Tom,
This morning i installed SP2 for W2K3, and applied the registry fix for RSS. Rebooted at appropriate times.

The problem still exists.

Is there anything else i can try? If you need more info, give me a shout,

Thanks,

Tom

(in reply to tshinder)

Post #: 3

RE: Site-to-Site VPN RRAS to ISA2004 Problems - 23.Jul.2007 9:11:10 PM

tshinder

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Tom,

Check this week's newsletter. I included a link to a hotfix that might help this problem.

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to yatesee)

Post #: 4

RE: Site-to-Site VPN RRAS to ISA2004 Problems - 31.Jul.2007 3:22:48 AM

yatesee

Posts: 10
Joined: 25.Apr.2005
Status: offline

Hi Tom,

Are you talking about "Routing and Remote Access stops responding in Windows Server 2003"?

My symptons are not exactly as described in this article.

I can get the VPN back up and working if i disconnect it from the RRAS side (branch office), but if i do the same on the HQ Side that is running ISA2004, it does not fix the problem.

I have requested the hotfix anyway, so I'll let you know how i get on with it. (Do i install it on both gateways, or just the RRAS side?)

Thanks,

Tom

(in reply to tshinder)

Post #: 5

RE: Site-to-Site VPN RRAS to ISA2004 Problems - 1.Aug.2007 3:30:41 AM