Welcome to ISAserver.org

VPN Client Authentication against DC on the other side of a site-to-site tunnel.

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Firewall] >> VPN >> VPN Client Authentication against DC on the other side of a site-to-site tunnel.

Page: [1]

Message

<< Older Topic Newer Topic >>

VPN Client Authentication against DC on the other side ... - 15.Nov.2008 5:36:49 PM

brrrdog

Posts: 24
Joined: 8.May2008
Status: offline

My isa array servers are members of DomainA in network 10.0.1.x
In my VPN Clients Properties I have allowed DomainB\VPN Users

the DC for DomainB is in network 10.0.2.x

At one point network .1.x and .2.x were connected with a vpn tunnel maintained on our old gateway. At this time members of VPN Users had no problem authenticating to the vpn.

We have since replaced the old tunnel with a new one on the ISA array. Now those in the VPN Users group cannot authenticate when connecting a vpn client.

All other communication between network .1.x and .2.x seems to be normal.

Post #: 1

Featured Links*

RE: VPN Client Authentication against DC on the other s... - 20.Nov.2008 12:11:54 AM

brrrdog

Posts: 24
Joined: 8.May2008
Status: offline

I'll take any leads you can give me here. I'm not seeing any blocked traffic. I've added both my array network and my vpn'd network to the "Allow RPC from ISA Server to trusted servers" rule. I've tried Enforce strict RPC compliance on and off.

(in reply to brrrdog)

Post #: 2