Welcome to ISAserver.org

VPN branch office to ISA server NET Meeting Configuration

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 General] >> H.323 Gatekeeper >> VPN branch office to ISA server NET Meeting Configuration

Page: [1]

Message

<< Older Topic Newer Topic >>

VPN branch office to ISA server NET Meeting Configuration - 18.Apr.2002 9:29:00 PM

sniper

Posts: 687
Joined: 9.Aug.2001
From: OK, USA
Status: offline

Seneraio:

ISA server in corp location, remote office attaches to corp via VPN thatis on ISA server

?'s

1. Do I set up the H323 gatekeeper and have both segemnts register with it for internal netmeeting sessions?

2. Can I register the gatekeeper to only handle the internal traffic and not accept inbound connection from the internet?

Any additional reading or insight is appreciated

Thx in advance

Post #: 1

Featured Links*

RE: VPN branch office to ISA server NET Meeting Configu... - 18.Apr.2002 11:26:00 PM

tshinder

Posts: 47439
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Chris,

Good questions! Someone else brought up a similar scenario and I've got it on my list of test scenarios I need to carry out.

It seems to me the simpliest setup is to configure all the machines on the corpnet to use a single Gatekeeper to register with. The Gatekeeper is just going to provide an address that's registered using the RAS protocol. So, I don't think the registration process should use up much traffic on the VPN link. However, they do reregister every few minutes, IIRC, so I suppose the total traffic depends on the number of clients registering.

You could also partition it so that clients on each end register with their own Gatekeepers. Then you can creating routing rules so that requests to clients registered on another Gatekeeper are routed to the address on that Gatekeeper. You should be able to do this with phone number rules and prefixes that are based on the user location.

I'm sure there are other ways to approach this, but these come to mind right now.

Thanks!

Tom

(in reply to sniper)

Post #: 2

RE: VPN branch office to ISA server NET Meeting Configu... - 19.Apr.2002 12:19:00 AM

sniper

Posts: 687
Joined: 9.Aug.2001
From: OK, USA
Status: offline

Hi Tom,

Thanks the other end of the VPN @ the branch is a RRAS server not ISA [Frown]

they wouldnt go for 2 licenses [Frown]

all connections from the branch come back to the corp site. There are 2 clients at the branch office so trafic is not intense and netmeeting will not be active all the time ( or so they say )

So if I read correct do I have the branch clients register with the gate keeper @ the corp site? And then just creat the H323 packet filters off the ISA box to the Corp Segment?

(in reply to sniper)

Post #: 3

RE: VPN branch office to ISA server NET Meeting Configu... - 19.Apr.2002 4:54:00 PM

sniper

Posts: 687
Joined: 9.Aug.2001
From: OK, USA
Status: offline

Tom,

Was able to get this to work by registering the H323 gatekeeper server on the private interfaces only and having both side register with gatekeeper on ISA server. IN the call rules set it so only registered database clients can recieve or send calls. Have screen shots if you want them for a config document

Chris

(in reply to sniper)

Post #: 4

RE: VPN branch office to ISA server NET Meeting Configu... - 19.Apr.2002 4:56:00 PM

tshinder

Posts: 47439
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Chris,

Great! That is how I would have approached it too. Have all the client register on the internal interface of the H.323 Gatekeeper. You config was a bit simpler than what I thought it was, as I though you have a Gatekeeper on each end. Fantastic to hear that its working!

Yes, I'd be interested in the screen shots. We can do a joint article on this. Send them to insider@tacteam.net and we could get started on this in the next or two.

Thanks!

Tom

(in reply to sniper)

Post #: 5