Welcome to ISAserver.org
Forums |
Register |
Login |
My Profile |
Inbox |
RSS
|
My Subscription |
My Forums |
Address Book |
Member List |
Search |
FAQ |
Ticket List |
Log Out
VPN Fails at Logon
|
Users viewing this topic:
none
|
Logged in as: Guest
|
Login | |
|
VPN Fails at Logon - 10.Nov.2004 9:55:00 PM
|
|
|
Zan
Posts: 3
Joined: 10.Nov.2004
Status: offline
|
Ok, so I have a Windows 2003 member server that has ISA 2004 installed; which works great. But I'm attempting to set it up to allow for inbound VPN clients, I've gone through the reference papers and seem to have hit all the right configs, but when a client attempts to VPN in, the PPTP hits, but then I get an Unidentified IP Traffic error which is denied. I look in the logs and it's appears that the GRE traffic is being denied. Am I missing something here?
|
|
|
|
RE: VPN Fails at Logon - 10.Nov.2004 10:06:00 PM
|
|
|
FORsaken
Posts: 30
Joined: 25.Apr.2002
From: Israel
Status: offline
|
yep ..... u have to allow port 47 tcp for the PPTP also
|
|
|
|
RE: VPN Fails at Logon - 10.Nov.2004 10:10:00 PM
|
|
|
Zan
Posts: 3
Joined: 10.Nov.2004
Status: offline
|
Where do I need to do that, since I have an access policy for VPN clien to internal network that has all outbound traffic. Is this an additional access policy to allow for GRE to the internal network?
|
|
|
|
RE: VPN Fails at Logon - 10.Nov.2004 10:18:00 PM
|
|
|
FORsaken
Posts: 30
Joined: 25.Apr.2002
From: Israel
Status: offline
|
mmmmmmmmmm .... i will have to check it out, i didnt try that trick on ISA 2004 , i have done it with ISA 2000 and it worked just fine .
try to define it like an Server publishing PORT 47 from the external nic to the internal ...... see if that works for you .......
|
|
|
|
RE: VPN Fails at Logon - 11.Nov.2004 1:33:00 AM
|
|
|
Zan
Posts: 3
Joined: 10.Nov.2004
Status: offline
|
nope, that didn't work; it would seem werid to need that rule anyways...I'm sure I'm missing something else.
|
|
|
|
RE: VPN Fails at Logon - 11.Nov.2004 5:14:00 AM
|
|
|
sajidfiaz
Posts: 39
Joined: 25.Jun.2002
Status: offline
|
hi,
u better visit following site . U will have answer of question.
[URL=http://www.microsoft.com/isaserver/techinfo/guidance/2004/vpn.asp ]http://www.microsoft.com/isaserver/techinfo/guidance/2004/vpn.asp[/URL]
becoz i did it my self it works fine. with ISA 2004 and win 2003 server
|
|
|
|
RE: VPN Fails at Logon - 11.Nov.2004 6:41:00 PM
|
|
|
AbqBill
Posts: 478
Joined: 3.Jun.2003
From: Albuquerque NM USA
Status: offline
|
Hi all,
FYI, it's not port 47 you need to allow, but IP protocol 47 (GRE).
Regards,
Bill
|
|
|
|
New Messages |
No New Messages |
Hot Topic w/ New Messages |
Hot Topic w/o New Messages |
Locked w/ New Messages |
Locked w/o New Messages |
|
Post New Thread
Reply to Message
Post New Poll
Submit Vote
Delete My Own Post
Delete My Own Thread
Rate Posts |
|