Welcome to ISAserver.org

VPN Connection issues

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 General] >> Installation >> VPN Connection issues

Page: [1]

Message

<< Older Topic Newer Topic >>

VPN Connection issues - 14.Dec.2002 2:07:00 AM

keithqnguyen

Posts: 8
Joined: 8.Jun.2002
Status: offline

Hey, newbie here, I'm having a problem setting up my VPN. Basically everything looks good, but I can't access the VPN outside. I tried connecting internally and it works fine, but when I try remotely it fails.

I already gone through the articles on here and searched the archived messages, but no idea. Any one got a suggestion?

One other thought I had was, would my DSL Speed Stream 5851 Router cause any issues? Thanks --=Keith

[ December 14, 2002, 02:07 AM: Message edited by: keithqnguyen ]

Post #: 1

Featured Links*

RE: VPN Connection issues - 14.Dec.2002 11:31:00 PM

tshinder

Posts: 47663
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Keith,

What have you done so far to make it work?

What VPN protocols do you need to use?

Thanks!
Tom

(in reply to keithqnguyen)

Post #: 2

RE: VPN Connection issues - 15.Dec.2002 2:32:00 AM

keithqnguyen

Posts: 8
Joined: 8.Jun.2002
Status: offline

I just need the standard settings.... nothing special. I went throught he whole wizard and think i set everything up. I also went through the documentation that's here on the web site that walks you through setting it up, and again everything seems to be set correctly.

Why would i be able to connect internally and not remotely? I find that odd.... Thanks Tom --=Keith

(in reply to keithqnguyen)

Post #: 3

RE: VPN Connection issues - 15.Dec.2002 8:53:00 AM

md3v

Posts: 308
Joined: 22.Jan.2002
Status: offline

You need to publish your VPN server through ISA, have you done this?

(in reply to keithqnguyen)

Post #: 4

RE: VPN Connection issues - 15.Dec.2002 12:18:00 PM

keithqnguyen

Posts: 8
Joined: 8.Jun.2002
Status: offline

actually I haven't, what process is this? Thanks so much for the responce! --=Keith

(in reply to keithqnguyen)

Post #: 5

RE: VPN Connection issues - 15.Dec.2002 2:12:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi keith,

if ISA server is you VPN endpoint or gateway, check out:
- http://www.isaserver.org/tutorials/Configuring_ISA_Server_For_Inbound_VPN_Calls.html
- http://www.isaserver.org/tutorials/VPN_Client_Security_Issues.html
- http://www.isaserver.org/tutorials/Solving_the_Mystery_of_the_VPNRASWeb_Proxy_Client.html

Also, you might have to check with your ISP if they allow VPN connections through. The PPTP VPN uses TCP port 1723 and IP protocol 47 (GRE).

HTH,
Stefaan

(in reply to keithqnguyen)

Post #: 6

RE: VPN Connection issues - 16.Dec.2002 5:10:00 PM

keithqnguyen

Posts: 8
Joined: 8.Jun.2002
Status: offline

Thanks for the info, but I've gone through those articles already. How do you publish your VPN server on ISA? Thanks --=Keith

(in reply to keithqnguyen)

Post #: 7

RE: VPN Connection issues - 16.Dec.2002 9:28:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi keith,

ISA server *is* the VPN server. So, why do you think you need to publish it?

I suggest you place a workstation on the ISA external subnet and try a VPN connection from there. If it works then the ISA server is correctly configured and you should look for problems in the upstream path.

HTH,
Stefaan

(in reply to keithqnguyen)

Post #: 8

RE: VPN Connection issues - 17.Dec.2002 11:09:00 PM

keithqnguyen

Posts: 8
Joined: 8.Jun.2002
Status: offline

Well if you read a few post up, M says that i have to publish the VPN through ISA.....

(in reply to keithqnguyen)

Post #: 9

RE: VPN Connection issues - 18.Dec.2002 12:16:00 AM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi keith,

let's put it in another way. If you use ISA as a VPN gateway for VPN clients, then the VPN wizard will just create the necessary IP packet filters for you. So, the inbound VPN requests will first be allowed by the ISA IP packet filtering service and then passed on to the W2K RRAS service for further processing. No publishing is involved in this process.

HTH,
Stefaan

(in reply to keithqnguyen)

Post #: 10

RE: VPN Connection issues - 18.Dec.2002 4:54:00 AM

AHIT

Posts: 1561
Joined: 22.Jul.2002
From: Sydney, Australia
Status: offline

Keith,

spouseele's idea of sticking a workstation 'outside' on the same subnet as ISA and then trying to VPN from there.
It's quite possible that your ISP may be blocking the PPTN and/or GRE protocols. Trying from a 'lcoal' machine that doesn't need to go through multiple ISP's will ensure that your end is indeed working OK.
I had to do this for one of my ISP's and proved (At least to myself) that their claims of "yes, we opened those ports" was not necessarily true.

As an aside, many DSL providers don't allow VPN connections as they sometimes use those protocls for their own authentication. Might be worth checking with your ISP if they support VPN's.

(in reply to keithqnguyen)

Post #: 11