Welcome to ISAserver.org

When VPN Clients Connect, Internal Network Clients can't use internet

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> VPN >> When VPN Clients Connect, Internal Network Clients can't use internet

Page: [1]

Message

<< Older Topic Newer Topic >>

When VPN Clients Connect, Internal Network Clients can'... - 20.Aug.2005 11:27:00 AM

fedato

Posts: 7
Joined: 6.Sep.2004
Status: offline

Hi,

I have the following situation:
When vpn clients connect to ISA Server 2004, all the internat network clients can't use internet, cause they try to use the vpn gateway, and it only become to normal when vpn clients disconnects.

Post #: 1

Featured Links*

RE: When VPN Clients Connect, Internal Network Clients ... - 22.Aug.2005 11:07:00 AM

tshinder

Posts: 47669
Joined: 10.Jan.2001
From: Texas
Status: online

Hi Washington,

That's not normal.

Can you give some details of your ISA firewall's networking and services config?

Thanks!
Tom

(in reply to fedato)

Post #: 2

RE: When VPN Clients Connect, Internal Network Clients ... - 22.Aug.2005 7:07:00 PM

fedato

Posts: 7
Joined: 6.Sep.2004
Status: offline

Hi Tom, thanks for your attention.
I've the following scenario:
2 NICs only, one for my external network (valid ip address) and the other for my internal network.
Internal Network: Fixed IPs, no DHCP (10.0.0.1 - 10.0.0.44)
VPN: Only 5 clients are enabled to connect (isa default) - 192.168.100.10 to 192.168.100.15.
Firewall Policy for VPN Clients: Just one policy allowing all protocolos from VPN Clients to Internal Network.

The situation: When there's no vpn clients connected my environment is OK, everything is working fine, but when some vpn client connect, starts the problem, all my internal network stops to work, i seem that my internal clients are trying to use the vpn client gateway (192.168.100.10) to connect to the internet, and when vpn clients disconnects everything becomes to normal again.
I'm using Windows 2003+Sp1 and Isa 2004 + Sp1.

Do you have any ideia of what going on?
Thanks again for your attention Tom!

Washington S. Fedato
Brazil

(in reply to fedato)

Post #: 3

RE: When VPN Clients Connect, Internal Network Clients ... - 23.Aug.2005 8:56:00 PM

longman

Posts: 44
Joined: 7.Feb.2005
Status: offline

Do you have a dns record for your isa server? How are you configuring the proxy server address in the clients? Sounds like you are using the isa netbios name which will have problems with broadcasts and the vpn clients.

(in reply to fedato)