Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Static IP address (3 server ISA array)

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA 2006 Firewall] >> VPN >> Static IP address (3 server ISA array) Page: [1]
Login
Message << Older Topic   Newer Topic >>
Static IP address (3 server ISA array) - 2.Dec.2008 7:56:48 AM   
intersimi

 

Posts: 33
Joined: 12.May2007
Status: offline
Hi,

I have a 3 server ISA array that used to work fine, until we discovered an issue with one of them. The server was rebuilt and now everything is running fine, with the exception, that the new server is not acting as a VPN server.

On close examination, I found that the static pool below was configured for only two of the servers:-

192.168.168.1 - 192.168.168.254    ServerA
192.168.169.1 - 192.168.169.254    ServerA
192.168.170.1 - 192.168.170.254    ServerC

I have attempted to move the 2nd IP range to ServerB, however I get the following message pop-up:-

"The VPN static address pool of one of these servers includes IP addresses in the specified range. Please select another address range"

Ideally, I would like to configure it as below:-

192.168.168.1 - 192.168.168.254    ServerA
192.168.169.1 - 192.168.169.254    ServerB   (Not ServerA)
192.168.170.1 - 192.168.170.254    ServerC

_____________________________

regards,

Intersimi
Post #: 1
RE: Static IP address (3 server ISA array) - 2.Dec.2008 9:22:15 AM   
Jason Jones

 

Posts: 2247
Joined: 30.Jul.2002
From: United Kingdom
Status: offline
You probably need to remove it from Server A first...

Cheers

JJ

< Message edited by Jason Jones -- 2.Dec.2008 9:29:49 AM >


_____________________________

Jason Jones (MVP)

Silversands Limited http://www.silversands.co.uk
My Blog: http://blog.msfirewall.org.uk/

Get our NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to intersimi)
Post #: 2
RE: Static IP address (3 server ISA array) - 2.Dec.2008 9:29:48 AM   
intersimi

 

Posts: 33
Joined: 12.May2007
Status: offline
Thanks JJ.

I have tried to remove the range I wish to allocate to ServerB, however when I do this I get another pop up:-

"there are not enough IP addresses available for VPN connections.
For each server, the number of IP addresses in the static address pool must be at least one greater than the sum of the maximum number of connections allowed in the VPN configuration plus the number of VPN networks"

The number of maximum connections is set to 100 so it should allow me to remove the second range leaving:-

192.168.168.1 - 192.168.168.254    ServerA
(Deleted)
192.168.170.1 - 192.168.170.254    ServerC

Do I need to disable "enable VPN client access" before I do this?

(in reply to Jason Jones)
Post #: 3
RE: Static IP address (3 server ISA array) - 2.Dec.2008 9:33:15 AM   
Jason Jones

 

Posts: 2247
Joined: 30.Jul.2002
From: United Kingdom
Status: offline
Yeah, it does sound confused...

_____________________________

Jason Jones (MVP)

Silversands Limited http://www.silversands.co.uk
My Blog: http://blog.msfirewall.org.uk/

Get our NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to intersimi)
Post #: 4
RE: Static IP address (3 server ISA array) - 2.Dec.2008 9:33:58 AM   
intersimi

 

Posts: 33
Joined: 12.May2007
Status: offline
I have answered my own question. I have performed the following:-

  • unchecked the "Enable VPN client access" box
  • Removed the IP range I wish to assign to ServerB
  • Save config
  • Add the range and assign ServerB
  • Check the "Enable VPN client access" box
  • Save config

This worked a treat. Such an easy thing, I wander why this does not allow you to change whilst clients are able to connect.

(in reply to intersimi)
Post #: 5
RE: Static IP address (3 server ISA array) - 2.Dec.2008 9:37:43 AM   
Jason Jones

 

Posts: 2247
Joined: 30.Jul.2002
From: United Kingdom
Status: offline
Probably just logic to stop people doing something silly...backing out and redoing is sometimes the only way to solve stuff

_____________________________

Jason Jones (MVP)

Silversands Limited http://www.silversands.co.uk
My Blog: http://blog.msfirewall.org.uk/

Get our NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to intersimi)
Post #: 6
RE: Static IP address (3 server ISA array) - 2.Dec.2008 9:40:13 AM   
intersimi

 

Posts: 33
Joined: 12.May2007
Status: offline
Ahhhh.....Follow up.


"The Remote Access Service configuration for VPN could not be completed. As a result, the remote Access ervice may be stopped"

"The VPN Static Address Pool is empty. As a result, ISA Server cannot provide VPN functionality"

(in reply to intersimi)
Post #: 7
RE: Static IP address (3 server ISA array) - 2.Dec.2008 10:08:30 AM   
Jason Jones

 

Posts: 2247
Joined: 30.Jul.2002
From: United Kingdom
Status: offline
You may need to shut them all down and clear the VPN settings and then try to redefine it again...painful

_____________________________

Jason Jones (MVP)

Silversands Limited http://www.silversands.co.uk
My Blog: http://blog.msfirewall.org.uk/

Get our NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to intersimi)
Post #: 8
RE: Static IP address (3 server ISA array) - 2.Dec.2008 10:23:27 AM   
intersimi

 

Posts: 33
Joined: 12.May2007
Status: offline
I will let you know how I get on.

(in reply to Jason Jones)
Post #: 9
RE: Static IP address (3 server ISA array) - 2.Dec.2008 10:50:22 AM   
intersimi

 

Posts: 33
Joined: 12.May2007
Status: offline
All sorted now. Once ServerB rebooted, the new IP range was accepted and it all works again now.

Thanks JJ

(in reply to intersimi)
Post #: 10
RE: Static IP address (3 server ISA array) - 2.Dec.2008 5:36:21 PM   
Jason Jones

 

Posts: 2247
Joined: 30.Jul.2002
From: United Kingdom
Status: offline
Cool, good stuff

_____________________________

Jason Jones (MVP)

Silversands Limited http://www.silversands.co.uk
My Blog: http://blog.msfirewall.org.uk/

Get our NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to intersimi)
Post #: 11

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA 2006 Firewall] >> VPN >> Static IP address (3 server ISA array) Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts