Welcome to ISAserver.org

Weird VPN Behaviour

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> VPN >> Weird VPN Behaviour

Page: [1]

Message

<< Older Topic Newer Topic >>

Weird VPN Behaviour - 22.Sep.2004 8:17:00 PM

Guest

Hello,

I have some strange VPN behaviour with ISA2004.

I have configured ISA 2004 to allow 5 VPN connections. I've only allowed PPTP and not L2P.

I have the necessary secuirty permissions for the client dialing in.

When the client tries to VPN in, I get Error 800. When I view the ISA2004 realtime logs, it says "Protocol: PPTP Server, Action: Failed Connection Attempt".

I couldn't figure out what was going on so I manually went into RRAS to double check the settings that ISA2004 should have configured in it.
I noticed that there are only L2P ports available (WAN Miniport (L2P)(VPN4-0) )! No PPTP ports are configured!

So, I went back to ISA 2004 and I can see for sure that PPTP is selected and L2P/IPSEC is NOT selected. SO, what is going on? Why is this happening? Is it a bug? Why are no L2P ports available and that is probably why I cant connect!

please advise, thanks

Post #: 1

Featured Links*

RE: Weird VPN Behaviour - 23.Sep.2004 6:22:00 AM

tshinder

Posts: 47669
Joined: 10.Jan.2001
From: Texas
Status: online

Hi ZD,

That's pretty weird! Anything in the Event viewer?

Thanks!
Tom

(in reply to Guest)

Post #: 2

RE: Weird VPN Behaviour - 23.Sep.2004 5:03:00 PM

Posts: 15
Joined: 15.Apr.2004
Status: offline

Hi Tom,

Thanks for your reply.

There is nothing of value in the event log.

Only related messages say that I've made changes to the ISA config that require a reboot (which I did).

Cant seem to figure out what in the world is going on....

any suggestions? I can send you screenshots if you think i'm crazy!

-ZD

(in reply to Guest)

Post #: 3

RE: Weird VPN Behaviour - 28.Sep.2004 8:23:00 PM

Posts: 15
Joined: 15.Apr.2004
Status: offline

UPDATE:

The issue was that I have another PPTP VPN server published on the internal network.

This was causing problems for ISA2004 because the VPN port was trying to be used by both the ISA2004 VPN server and the listener for the internally published VPN server.

My question, however, is why cant I choose which external IP address I want to bind the ISA2004 VPN server to? (my ISA2004 box has multiple internet IP's on its external NIC).

This way, I could use ISA VPN on one IP, and publish the internal VPN server on the other IP .

thanks
-ZD

(in reply to Guest)

Post #: 4