Welcome to ISAserver.org

Site - Site - Wrong subnet for IKE

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Firewall] >> VPN >> Site - Site - Wrong subnet for IKE

Page: [1]

Message

<< Older Topic Newer Topic >>

Site - Site - Wrong subnet for IKE - 31.Mar.2008 1:55:02 PM

varitrac

Posts: 1
Joined: 31.Mar.2008
Status: offline

Running ISA 2006
Internal Network Address range is 10.0.5.0/24

Am trying to set-up a new site to site connection with a large corporate that has many other tunnels. Because of all the address reservations on their side, I can only use 10.0.5.0/29 for my internal network on this connection.

I have set up network rules restricting the traffic on this tunnel to the 10.0.5.0/29 range on the internal side, however this only seems to affect the routable addresses and not the IKE negotiation.

When ISA tries to negotiate PHASE 2 with the checkpoint firewall, it is trying to negotiate with 10.0.5.0/24 not /29 which is causing the SA to fail and preventing the tunnel from coming up.

Question is: How do I limit/restrict my internal network to 10.0.5.0/29 for this specific connection.

Thanks

Phil