Welcome to ISAserver.org

Trouble when enable VPN connection

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> VPN >> Trouble when enable VPN connection

Page: [1]

Message

<< Older Topic Newer Topic >>

Trouble when enable VPN connection - 23.Aug.2005 2:09:00 AM

Mh.Hussein

Posts: 4
Joined: 23.Aug.2005
From: Qatar
Status: offline

Dear All

This is my first Participation in your forum and hope to find a solution of my problem.
When I Enable the VPN client Access, My users couldn't browse the web anymore and the firewall client detect the isa server. And When I disabled it everything comes back.

Please Advise

Post #: 1

Featured Links*

RE: Trouble when enable VPN connection - 23.Aug.2005 5:50:00 AM

tshinder

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Mohamed,

Did you create a rule that enables VPN clients to connect to the External Network?

Thanks!
Tom

(in reply to Mh.Hussein)

Post #: 2

RE: Trouble when enable VPN connection - 23.Aug.2005 9:20:00 AM

Mh.Hussein

Posts: 4
Joined: 23.Aug.2005
From: Qatar
Status: offline

Dear Tom

Thanks for your reply, I'm afraid I didn't such a rule, Shall I do so?

Regards

(in reply to Mh.Hussein)

Post #: 3

RE: Trouble when enable VPN connection - 23.Aug.2005 9:25:00 AM

cgreck

Posts: 9
Joined: 11.Jul.2004
Status: offline

Yes, since the VPN-Clients are going to access the external network from the VPN-Client network, you need this rule.

Claus Greck

(in reply to Mh.Hussein)

Post #: 4

RE: Trouble when enable VPN connection - 23.Aug.2005 3:24:00 PM

DennisCH

Posts: 20
Joined: 12.Jul.2005
From: US
Status: offline

Do you mean
1- your VPN clients cannot access the network or internet
or
2- once VPN access is enabled on the isa server, then your internal network clients cannot access the internet?

(in reply to Mh.Hussein)

Post #: 5

RE: Trouble when enable VPN connection - 24.Aug.2005 12:30:00 AM

Mh.Hussein

Posts: 4
Joined: 23.Aug.2005
From: Qatar
Status: offline

yes this exactly what I mean "once VPN access is enabled on the isa server, then my internal network clients cannot access the internet."

(in reply to Mh.Hussein)

Post #: 6

RE: Trouble when enable VPN connection - 24.Aug.2005 2:13:00 AM

Mh.Hussein

Posts: 4
Joined: 23.Aug.2005
From: Qatar
Status: offline

I found that the routing and remote access service is started when I stopped it every thing was doing fine but I have another inquiry, should I configure this ISA server to act as dns and dchp servers or not if yes what is the detailed steps to do so and how to prevent confilct between them and the other DNS and DHCP Servers which already existed in my entire network.

Please advise

(in reply to Mh.Hussein)

Post #: 7

RE: Trouble when enable VPN connection - 27.Aug.2005 11:29:00 PM

csnss

Posts: 14
Joined: 28.Oct.2003
Status: offline

I have run into the same thing. When I disable RRAS everything internal flows. Need to find a solution to this problem. Is there anyone still checking this thread?

(in reply to Mh.Hussein)

Post #: 8

RE: Trouble when enable VPN connection - 30.Aug.2005 10:37:00 AM

DennisCH

Posts: 20
Joined: 12.Jul.2005
From: US
Status: offline

I've just run into a slight variation of this. Once VPN access is enabled, it works great. Internal clients at the main site where the ISA 2004 server is located work fine - they can access the internet without issue.

However, internal clients at the remote offices connected by dedicated t1s cannot. I turn of VPN access and everyone can get out to the internet, but of course VPN access is dead. Any ideas?

Mohamed Hussein, do you have remote sites?

(in reply to Mh.Hussein)

Post #: 9

RE: Trouble when enable VPN connection - 1.Sep.2005 1:03:00 PM

Quodin

Posts: 1
Joined: 1.Sep.2005
Status: offline

How are the clients connecting? Individually via their own tunnels? If so, and you have internet access enabled via the web proxy, you need to apply the proxy settings to the connection specific network settings:

Start Internet Explorer -> Tools -> Internet Options -> Connections tab -> select specific VPN connection -> click Settings button -> configure proxy properties -> close all property pages by clicking OK.

This can also be configured in the CMAK wizard for connection deployment.

HTH

(in reply to Mh.Hussein)

Post #: 10

RE: Trouble when enable VPN connection - 6.Oct.2005 12:57:00 PM

DennisCH

Posts: 20
Joined: 12.Jul.2005
From: US
Status: offline

Thanks for the post Quodin but it didn't help.

To summarize
1 - internet access is fine at all three offices when vpn ability on the ISA 2004 server is disabled. The two remote offices are connected by dedicated t1s to the main office which has the isa 2004 server.
2 - When vpn ability is enabled, only the main office can connect to the internet. However, the ip phones and browsing server resources all work fine from any office to any office.

Help!

(in reply to Mh.Hussein)

Post #: 11

RE: Trouble when enable VPN connection - 10.Oct.2005 2:01:00 PM

DennisCH

Posts: 20
Joined: 12.Jul.2005
From: US
Status: offline

Everything works now. The solution was to enable RRAS on the ISA 2004 server, remove everything I had added through "route add" command and input those same routes through RRAS.

This is odd because when I had used RRAS on the ISA 2004 server before and had issues with the remote offices, Microsoft told me that ISA 2004 could not be used in that manner and I had to get another internal box to act as the default gateway for everything. I did so, and everything then worked.

Now with the odd vpn issue, Microsoft now tells me to fire up RRAS on the ISA 2004 server. The default gateway for the local and remote offices is still the other internal server. Oh well, at least everything is working.

Warning: the Microsoft tech told me that adding the routes through the RRAS g.u.i. doesn't always work as expected and to use the netsh command if problems occur.

(in reply to Mh.Hussein)

Post #: 12