Welcome to ISAserver.org

Add a routing table on ISA 2004 server

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> Network Infrastructure >> Add a routing table on ISA 2004 server

Page: [1]

Message

<< Older Topic Newer Topic >>

Add a routing table on ISA 2004 server - 30.Jul.2007 5:49:41 AM

clentini

Posts: 11
Joined: 28.Sep.2005
Status: offline

Hi at all...

I have, in my internal network an isdn router that allows connection to our customers.
I configured VPN connection through ISA Server 2004 Problem:I would like to connect from an extranl point to my company's network (using VPN) and at that point I want to be able to connect to extranl customer's using isdn router.Is this feasible?How can I configure my ISA server? I already added to the ISA server the routing correct tables but I am getting a configuration error.If I ping my customer's network a destination unreachable message appears. Thanks Daniele

Post #: 1

Featured Links*

RE: Add a routing table on ISA 2004 server - 23.Aug.2007 8:51:52 AM

tshinder

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline

Are you trying to create a site to site VPN?

Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to clentini)

Post #: 2

RE: Add a routing table on ISA 2004 server - 31.Aug.2007 6:35:24 AM

clentini

Posts: 11
Joined: 28.Sep.2005
Status: offline

No, I connect to my company using classical Vpn connection (VPN client acces) and this is working fine.
I ping and connect my network servers and network adapters correctly.

I also want to be able to use Isdn connections (from company network to customers) once connected to my company network from a general location with Vpn (Configured on ISA server).

Thanks

Daniele

(in reply to tshinder)

Post #: 3

RE: Add a routing table on ISA 2004 server - 3.Sep.2007 10:06:22 AM

tshinder

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline

OK, yes you can do that.

Just make sure the ISA Firewall has routes to all of your internal network IDs and also make sure the internal network routers use the ISA Firewall's internal IP address as the gateway address for the VPN Clients Network network ID.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to clentini)

Post #: 4

RE: Add a routing table on ISA 2004 server - 2.Oct.2007 10:38:11 AM

clentini

Posts: 11
Joined: 28.Sep.2005
Status: offline

This is an example of my configuration:

My ISDN router address is: 172.20.0.250
My customer LAN is 192.168.20.*
I add a routing table to the isa server:
route add 192.168.20.0 mask 255.255.255.0 172.20.0.250

But from ISA server, if I try to ping my customer network the isa server deny the traffic and an error message indicate that the route is incorrect.

(in reply to tshinder)

Post #: 5

RE: Add a routing table on ISA 2004 server - 2.Oct.2007 1:14:50 PM

ClintD

Posts: 1848
Joined: 26.Jan.2001
From: Keller, TX
Status: offline

Just to make sure, does your ISA Servers Internal Network contain 172.20.0.0-255?
What is your ISA Servers Internal Network adapter IP address?

(in reply to clentini)

Post #: 6

RE: Add a routing table on ISA 2004 server - 3.Oct.2007 2:22:24 AM

clentini

Posts: 11
Joined: 28.Sep.2005
Status: offline

My ISA server have two nic adapters.
One in a internal network with address 172.20.0.46 and one in DMZ network with address 192.168.200.130.

In the ISA network configuration the internal lan (172.20.0.0/172.20.255.255) is configured.

(in reply to ClintD)

Post #: 7

RE: Add a routing table on ISA 2004 server - 12.Oct.2007 1:04:19 PM

abqtech

Posts: 216
Joined: 9.Mar.2004
Status: offline

what does your routing table look like (netstat -nr or route print)?

what happens is you tracert to a valid address on the customer network from the ISA Server

when you add the route via route add are your forcing the route to persist:
( route add 192.168.20.0 mask 255.255.255.0 172.20.0.250 -p)

(in reply to clentini)

Post #: 8

RE: Add a routing table on ISA 2004 server - 12.Oct.2007 1:14:20 PM

wrochal

Posts: 1
Joined: 9.Dec.2004
Status: offline

Dear,

You create networks with definition route, enter DMZ > LAN, and LAN > DMZ, and add route persistent:

example: route add 192.168.1.0 mask 255.255.255.0 gateway 192.168.0.1 -p

Bye,

(in reply to abqtech)

Post #: 9