Welcome to ISAserver.org

VPN Connection and FQDN

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 Firewall] >> VPN >> VPN Connection and FQDN

Page: [1]

Message

<< Older Topic Newer Topic >>

VPN Connection and FQDN - 23.May2001 11:11:00 AM

Windler

Posts: 2
Joined: 23.May2001
From: Tirat Carmel,Israel
Status: offline

In my company we dont use any dns or wins for resolving internal names,we use hosts file.
When someone connect to the company via vpn
every thing work fine with the internal server.
but the isa doesn't forward any other protocols
and the users cannot surf (it olso dosent work when the user use http://ipnumber )
what can i do to fix this ?

Post #: 1

Featured Links*

RE: VPN Connection and FQDN - 23.May2001 7:38:00 PM

mmillar

Posts: 30
Joined: 17.May2001
From: London, UK
Status: offline

Windler,

This is a big question but here are some things to try...

1. From your PC can you ping the ISA server?
2. Make sure the 'Default Gateway' or 'Router' settings on your PCs are set to the IP address of your ISA server's internal network card.
3. From your PC can you resolve a DNS name (such as www.microsoft.com)? If you are using W2K or NT use 'nslookup'.
4. Make sure the 'DNS servers' on your PCs are set to machines running DNS. You say you don't run DNS internally so they should be pointing to your ISP's DNS servers.
5. Create 'Allow All' rules for your Packet Filters and Protocol Rules on the ISA server.
6. Can your ISA server access the Internet?

Try these and let us know.

Cheers

Martin

(in reply to Windler)

Post #: 2

RE: VPN Connection and FQDN - 24.May2001 9:41:00 AM

Windler

Posts: 2
Joined: 23.May2001
From: Tirat Carmel,Israel
Status: offline

Mmillar thanks for give me an idea
So I solve the problem
On VPN client side you need to configure the tcpip.
Properties of the vpn connection on networking tab mark tcpip
And then properties advanced on general tab
Uncheck the use default gateway on remote network.
And then it will work fine.
You don�t need to make any packet filter rule for this.
If you're local LAN can serf it will work fine.
Windler Eyal

(in reply to Windler)

Post #: 3