Welcome to ISAserver.org

VPN Access

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 Firewall] >> General >> VPN Access

Page: [1]

Message

<< Older Topic Newer Topic >>

VPN Access - 10.Feb.2001 1:04:00 AM

whorsfall

Posts: 33
Joined: 9.Feb.2001
From: Melbourne, Victoria, Australia
Status: offline

Hi,

I am wondering if anybody can help. I would like to know how to do the following:

Configure ISA Server so that LAN clients could connect to a remote VPN server on the internet. The remote server talks IPSec however is non-Microsoft (not ISA Server) and does not use L2TPP. However it does use IKE. Any ideas?

Thanks,

Ward.

Post #: 1

Featured Links*

RE: VPN Access - 10.Feb.2001 1:17:00 AM

jmunyan

Posts: 800
Joined: 3.Feb.2001
From: Seattle, WA
Status: offline

If you are using NAT I think you are out of luck since ipsec/l2tp can survive NAT.

John

(in reply to whorsfall)

Post #: 2

RE: VPN Access - 10.Feb.2001 1:23:00 AM

jmunyan

Posts: 800
Joined: 3.Feb.2001
From: Seattle, WA
Status: offline

can't survive nat.

SBT

John

(in reply to whorsfall)

Post #: 3

RE: VPN Access - 10.Feb.2001 7:57:00 AM

whorsfall

Posts: 33
Joined: 9.Feb.2001
From: Melbourne, Victoria, Australia
Status: offline

not sure what you mean can you explain further... ?

quote:
Originally posted by jmunyan:
can't survive nat.
SBT
John

(in reply to whorsfall)

Post #: 4

RE: VPN Access - 10.Feb.2001 12:14:00 PM

tshinder

Posts: 47663
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Ward,

ISA Server only support outbound PPTP calls from clients behind the ISA Server. You cannot call out using L2TP/IPSec. Client running behind a address translator cannot use IPSec for end-to-end protection because the translator changes the headers on the packet and invalidates them from the viewpoint of IPSec.

If you want to use PPTP, internal clients can connect to the remote VPN gateway. You just need to enable outbound PPTP. Right click on "Packet Filters", then click "Properties" then click the PPTP tab to enable.

HTH,

Tom

------------------
Tom Shinder
http://www.isaserver.org/shinder/