Welcome to ISAserver.org

VPN SITE TO SITE

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> VPN >> VPN SITE TO SITE

Page: [1]

Message

<< Older Topic Newer Topic >>

VPN SITE TO SITE - 20.Jun.2005 6:49:00 AM

mackan1109

Posts: 41
Joined: 2.Aug.2004
Status: offline

Hi i have setup an ipsec vpn from my local isa 2004 server to a remote checkpoint ipsec vpn server.

my wan ip is 62.49.130.xxx & the remote vpn wan is 194.201.68.26.

i have followed the guidlines as per TS's Book and various articals from this site.

when i come to ping the remote vpn server i get no response back, if i open logging i can see my server sending a ping request with the reply coming n as undefined IP traffic and being dropped.

I have checked my 2 access rules one from "internal" to "Remote VPN" & the other from "remote vpn" to "internal".

Any ideas what may be wrong, i did read somewhere that for ipsec the two networks have to be oin the same subnets?

many thanks

Post #: 1

Featured Links*

RE: VPN SITE TO SITE - 5.Jul.2005 5:58:00 PM

mark.vonk@e-office.com

Posts: 3
Joined: 1.Jul.2005
Status: offline

quote:
Originally posted by mackan1109:
Hi i have setup an ipsec vpn from my local isa 2004 server to a remote checkpoint ipsec vpn server.

my wan ip is 62.49.130.xxx & the remote vpn wan is 194.201.68.26.

i have followed the guidlines as per TS's Book and various articals from this site.

when i come to ping the remote vpn server i get no response back, if i open logging i can see my server sending a ping request with the reply coming n as undefined IP traffic and being dropped.

I have checked my 2 access rules one from "internal" to "Remote VPN" & the other from "remote vpn" to "internal".

Any ideas what may be wrong, i did read somewhere that for ipsec the two networks have to be oin the same subnets?

many thanks

Did you ever fix this problem? I am curious because I seem to have the same problem.

(in reply to mackan1109)

Post #: 2

RE: VPN SITE TO SITE - 6.Jul.2005 10:15:00 AM

mackan1109

Posts: 41
Joined: 2.Aug.2004
Status: offline

i managed to get the tunnel up, the main problem i found was in the ipsec settings, they have to be identical both ways i was out in the regenerate field,ISA sets it as seconds and i was quoted minutes.
what problems are you having.

(in reply to mackan1109)

Post #: 3