Web proxy works.
Firewall Client works.

I can't PING, TRACERT, or connect to a remote VPN server. Quite strange.

In fact, all SecureNAT connections seem to be failing. I do have the appropriate protocol definitions, etc. I'd like to be able to PING. I NEED to access the remote VPN.

Any ideas?

Thank you for the easy question

Enabling IP Routing on the ISA Server, and your SecureNAT clients will be able to ping and initiate outbound PPTP connections.

Check out my article on the SecureNAT client at www.isaserver.org/shinder

HTH,
Tom

------------------
Tom Shinder
http://www.isaserver.org/shinder/

Get it Here!

What am I missing?

------------------
Gregory W. Smith
MCSE+I, CCA, CNA

I've done ISA Servers already, just not on dialup, and had none of this hassle. Guess it's good that it supports dialup at all.

And I can PING the ISA1 box, but if I TRACERT past it, even with it configured as the default gateway, all requests time out, even the first one, which should return from ISA1.

So I'll try loading up RRAS. Hope it doesn't break ISA in the process

------------------
Gregory W. Smith
MCSE+I, CCA, CNA

Nor a TRACERT at least goes to the ISA1 server (DNS resolves nicely) but times out thereafter.

------------------
Gregory W. Smith
MCSE+I, CCA, CNA

No! Don't configure RRAS, or you might find yourself in a world of hurt later on when trying to figure out why something else is acting whacky

Something else to check out is that the dial-up connection is used as the primary connection. This is done the properties of the network configuration. Also, check to make sure the default routing rule is also configured to use the dial-up connection as the primary connection.

HTH,
Tom

------------------
Tom Shinder
http://www.isaserver.org/shinder/

Get it Here!

------------------
Gregory W. Smith
MCSE+I, CCA, CNA

I'll keep you guys posted - and thanks for the help so far!

------------------
Gregory W. Smith
MCSE+I, CCA, CNA

Sounds like the machine just need some rest

Tom

------------------
Tom Shinder
http://www.isaserver.org/shinder/

Get it Here!

quote:

---

Originally posted by tshinder:
Sounds like the machine just need some

---

I expect it was something with a requirement for the service to be restarted. Just wish I knew what, so I can expect it in the future...

Thanks for your time and effort, though!

------------------
Gregory W. Smith
MCSE+I, CCA, CNA

Yes, sometimes you have to wait a quite a while for the changes to take place. If you don't restart the services manually, you're never sure when the ISA Server will get around to doing that itself.

There a Q article in the 'bugs' section of this site that explains how the changes don't take place immediately. Check it out!

Thanks!

Tom

------------------
Tom Shinder
http://www.isaserver.org/shinder/

Get it Here!

I had the same problem. With lots of help from Mr. Shinder (thanks ), I finally got my SecureNAT working when i re-enabled my RRAS. Now I dont understand too much about RRAS, but once i disabled and re-enabled it, my PING started working instantly. I am not advising this solution authoritatively becuase RRAS did warn me about losing all the settings but i nevertheless went ahead as I had nothing to lose.

Cheers,
Sanjay

------------------
everyone is on the ladder of knowledge, albeit on different rungs.

Good to hear that I've been able to help.

You bring up a good point. I think that more than a few ISA Server installations get messed up because there are pre-existing RRAS configurations (routes, NAT) configured that are not compatible with the ISA Server installation.

I've found it a good idea to document what was already done in RRAS, and then disable it. Then install ISA Server. If there is something specific in the RRAS configuration that needs to be accomplished, I'll re-enable it *after* I've confirmed that everything I need to work in ISA Server is working first.

Thanks!

Tom

------------------
Tom Shinder
http://www.isaserver.org/shinder/

Get It Here