• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

linksys to ISA gateway -- gateway problems

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2000 Firewall] >> VPN >> linksys to ISA gateway -- gateway problems Page: [1]
Login
Message << Older Topic   Newer Topic >>
linksys to ISA gateway -- gateway problems - 3.Mar.2003 12:08:00 PM   
Chris.Renshall

 

Posts: 10
Joined: 28.Feb.2003
From: UK
Status: offline
Right here goes, mt first posting on here.

What i have is a Linksys BEFvp41 router, that is a (VPN Gateway) installed in a remote office.

A win200 server with ISA at the workshop.

Muiltipule vpn clients log in fine from different locations useing PPtP .I.E traveling sales reps etc.

What im doing with the new linksys router is setting up a linksys gateway to ISA gateway setup.

ISA config : external 195.0.0.1 example
internal 10.5.1.1

Linksys : External : 195.0.0.5
internal : 192.168.1.5
useing isp gateway & dns

The linksys setup connects to the outside world fine.

When i setup the VPN tunnel, that also talks to and connects to the external card on the ISA box.

What i can't get to happen is for the internal ISA card to ping the remote clients. I keep getting [ Negotiating IP security ]. All the books say this should happen for say up to 4 seconds while security is established, then the ping should start up correctly, unfortunatly for not so ..

When I ping the ISA box from the remote client I can request timed out . oh joy.

I believe i have the IPsec rules and filter set up ok, but any advice on that matter would be great.

Has anyone had this problem when setting up a gateway to gateway with ISA before.

Chris
Post #: 1
RE: linksys to ISA gateway -- gateway problems - 3.Mar.2003 1:58:00 PM   
clarky

 

Posts: 5
Joined: 9.May2002
Status: offline
If you are setting up a pure ipsec tunnel, it will not work. It will work fine with a W2k Server and using RRAS but not with ISA. I hope this helps

(in reply to Chris.Renshall)
Post #: 2
RE: linksys to ISA gateway -- gateway problems - 3.Mar.2003 2:47:00 PM   
Chris.Renshall

 

Posts: 10
Joined: 28.Feb.2003
From: UK
Status: offline
Thanks for replying John.

Not what i wanted to hear, [Frown] but then im not surprised by the reply either.

Can any one try to give an explanation as to why this ain't going to work. I can get the tunnel to connect, but thats it. A rough idea of the why's and why not's would be great.

Chris

(in reply to Chris.Renshall)
Post #: 3
RE: linksys to ISA gateway -- gateway problems - 3.Mar.2003 7:59:00 PM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Chris,

For some reason ISA Server packet filters seem to be blocking the pure IPSec tunnel connections. Microsoft is working on this and hopefully we'll be able to get it fixed soon!

Thanks!
Tom

(in reply to Chris.Renshall)
Post #: 4
RE: linksys to ISA gateway -- gateway problems - 4.Mar.2003 10:37:00 AM   
Chris.Renshall

 

Posts: 10
Joined: 28.Feb.2003
From: UK
Status: offline
G'Day Tom

Thanks for the explanation.

Looks like its another linksys for the time being at workshop .

Once again thanks all for the help.

Chris

(in reply to Chris.Renshall)
Post #: 5
RE: linksys to ISA gateway -- gateway problems - 10.Mar.2003 2:00:00 AM   
invinceble13

 

Posts: 56
Joined: 21.Aug.2001
Status: offline
Hi Chris,
I too am looking towards that solution. Can you give me any pointers? We are still sticking with pptp for now but that Linksys with vpn support sounds great.
please email me as i have a lot of questions in regards to that

Thanks

Vince

(in reply to Chris.Renshall)
Post #: 6
RE: linksys to ISA gateway -- gateway problems - 13.Mar.2003 11:18:00 AM   
Chris.Renshall

 

Posts: 10
Joined: 28.Feb.2003
From: UK
Status: offline
G,Day Vince

I will let you know how i get on .

Im currently posting on the linksys braodband forum for some advice.

Chris

(in reply to Chris.Renshall)
Post #: 7
RE: linksys to ISA gateway -- gateway problems - 13.Mar.2003 5:59:00 PM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Chris,

Great! Just keep in mind that you MUST use PPTP or L2TP/IPSec.

HTH,
Tom

(in reply to Chris.Renshall)
Post #: 8
RE: linksys to ISA gateway -- gateway problems - 13.Mar.2003 5:59:00 PM   
eguardia

 

Posts: 3
Joined: 13.Mar.2003
From: Waltham, MA
Status: offline
I am very interested in setting up a Linksys VPN (BEFVP41) to ISA server ... Can you tell me how you got as far as you have ? Or if you find instructions, send them my way. eguardia@unveil.com

(in reply to Chris.Renshall)
Post #: 9
RE: linksys to ISA gateway -- gateway problems - 14.Mar.2003 8:16:00 AM   
Chris.Renshall

 

Posts: 10
Joined: 28.Feb.2003
From: UK
Status: offline
Rick , Tom

I have the 2 linksys routers up and running OK .

In this setup The ISA / W2K box is out of the new office loop.

Other than as a gateway for the fatory as usuall.

The Befvp41 to Befvp41 tunnel works just fine with me being able to ping and map drives no problem between the 2 191.168.1.x & 192.168.2.x lan's i have made.

Im going to go check my firewall rules, which also acts as a router as well, check that i ain't got any rules in place to drop ICMP packets

I will let you know how i get on .. I only got 2 more weeks to get it cracked .. LOL

Here is what I have.

=============================
Befvp41 No1 [remote office]
=============================
Ext ip : 195.44.x.x
255.255.255.0
Int ip : 192.168.2.x
255.255.255.0

Client Pc's : 192.168.x.x
255.255.255.0

==============================

==============================
Befvp41 No2 [main office]
==============================
Ext ip : 195.44.x.x
255.255.255.0
Int ip : 192.168.1.x
255.255.255.0

ClassA [subnet to B] network : 10.5.x.x
255.255.0.0

==============================

On our internal network we use a cisco router which has the network presences for both the 192.168.1.x , .2.x & 10.5.x.x lans.

The VPN tunnel works fine between the 2 routers and the
192.168.1.x & 192.168.2.x communicate fine. The 10.5.x.x
and the 192.168.1.x also work fine.

What i can't get to happen is for the 10.5.x.x clients to ping the 192.168.2.x clients.

A trace route finds the 192.168.2.x & 10.5.x.x clients from either side on the first hop but then on the second hop instead of finishing it gives a timeout, so i guess it can't find a way back.
==================================================

Chris

[ March 14, 2003, 08:20 AM: Message edited by: Chris Renshall ]

(in reply to Chris.Renshall)
Post #: 10
RE: linksys to ISA gateway -- gateway problems - 14.Mar.2003 8:41:00 AM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Chris,

Yes! The key to success is to have the same components talking to each other. You can create a gateway to gateway VPN between the linksys devices, and then create an ISA to ISA gateway to gateway tunnel inside the tunnel created by the linksys devices.

Thanks!
Tom

(in reply to Chris.Renshall)
Post #: 11
RE: linksys to ISA gateway -- gateway problems - 26.Mar.2003 3:33:00 PM   
eguardia

 

Posts: 3
Joined: 13.Mar.2003
From: Waltham, MA
Status: offline
I can get the Linksys's vpns to talk no problem, but what I really want is the linksys box (Remote office) to talk directly to the ISA server (central office)..

If anyone has this working, I would love to have the ISA server side setup direction ...

Thanks
Rick Guardia

(in reply to Chris.Renshall)
Post #: 12
RE: linksys to ISA gateway -- gateway problems - 26.Mar.2003 4:29:00 PM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Rick,

If you can get the Linksys to use PPTP or L2TP/IPSec, it should be no problem.

HTH,
Tom

(in reply to Chris.Renshall)
Post #: 13

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2000 Firewall] >> VPN >> linksys to ISA gateway -- gateway problems Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts