Welcome to ISAserver.org

VPN to work?

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Firewall] >> VPN >> VPN to work?

Page: [1]

Message

<< Older Topic Newer Topic >>

VPN to work? - 29.Aug.2008 11:16:54 PM

shaun.murray

Posts: 7
Joined: 25.Jun.2008
Status: offline

Of course... At home, I'm using an ISA 2006 as my firewall. At work, we are using a SonicWall Firewall as the VPN endpoint. When I have internal (at home) network access, and internet access thru the ISA, I cannot connect to my works VPN. I get the following errors:

An error occured.
The peer is not responding to phase 1 ISAKMP requests.
Failed to find MAC address 00:60:73:xx:xx:xx in the system interfaces table.

I know this isn't a SonicWall forum, but... With another coworker having the same settings on the VPN client as I do, he can connect. I've even went as far as opening ports 1 - 64000 TCP in and out, from any protected network, to the specific IP of our SonicWall WAN port. Its gotta be some sorta configuration that I'm missing. I just can't seem to put my finger on what it is.

Any help in this would be greatly appreciated! =D

Post #: 1

Featured Links*

RE: VPN to work? - 31.Aug.2008 2:28:04 PM

shaun.murray

Posts: 7
Joined: 25.Jun.2008
Status: offline

doin a bump!

(in reply to shaun.murray)

Post #: 2

RE: VPN to work? - 27.Sep.2008 5:50:50 PM

trunksy

Posts: 1
Joined: 27.Sep.2008
Status: offline

I'm trying to research this issue on Google but it looks like we're the only three people with this issue. The manual says that such an error existed in version 2.1 but it says nothing about how to troubleshoot each error that it lists. Have you figured out a way to make this work yet?

(in reply to shaun.murray)

Post #: 3

RE: VPN to work? - 30.Sep.2008 12:07:44 PM

shaun.murray

Posts: 7
Joined: 25.Jun.2008
Status: offline

LoL, it appears so!!! Most people I'd imagine are using their ISA as their VPN, makes sense, and I guess not many people are wanting or needing to use their SonicWALL VPN thru an ISA.

Still... Be nice to remote into work... LOL!

_____________________________

[[--Home--]]
ISA 2006
Windows Server 2003 Enterprise
Windows XP Professional
Windows Vista Ultimate 32-bit
Windows Vista Ultimate 64-bit

(in reply to trunksy)

Post #: 4

RE: VPN to work? - 30.Sep.2008 2:59:58 PM

pwindell

Posts: 782
Joined: 12.Apr.2004
From: Taylorville, IL
Status: offline

Well,..it isn't "VPN is VPN is VPN" (implying VPN is just VPN, its all the same thing).

What kind of VPN?,..it matters. Remote Access VPN? Router-to-Router VPN?

You cannot do outbound Remote Access VPN from behind ISA unless you are running as only a SecureNAT Client because only the SecureNAT Service can do GRE.

Why can SonicWall do outbound VPN easily then?.....Because it is just a NAT Box, a NAT Service just like the ISA's SecureNAT Service,...but it is just that, that is all the SonicWall is.
But ISA is much more than that. ISA is a Web Proxy Service, a Winsock Proxy Sevice (Firewall Service) and a NAT Service all built into the same product. What particular componenet of the product you use will determine what you can and cannot do with it.

Then there is the whole Router-to-Router VPN (aka. Site-to-Site VPN, Branch Office VPN). This has to be performed at the ISA, between it and the SonicWall and it will have to be done using IPsec.

_____________________________

Phillip Windell
www.wandtv.com

(in reply to shaun.murray)

Post #: 5