Welcome to ISAserver.org

Can't Browse Network Over VPN

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 Firewall] >> VPN >> Can't Browse Network Over VPN

Page: [1]

Message

<< Older Topic Newer Topic >>

Can't Browse Network Over VPN - 27.Nov.2007 4:15:11 PM

danrocket

Posts: 6
Joined: 13.Apr.2005
Status: offline

Hi...

Maybe someone can shed some light on my current situation. The client can connect over VPN no problem to an ISA Server 2000 Box but can not ping any of the servers on the network. The clients IP address range is different than that of the corporate network. I statically assign an IP address to the client as well as pull DNS from the "south" or "inside" network card on RAS. RAS is configured the way I always have in the past I have this working at other clients fine. Its simply this particular installation.
I wonder if this has anything to do with installing DNS services on the ISA server its self. I followed the Quick Start guide off this site for those configurations and I have successfully installed that piece before. We have an internal DNS service running on a domain controller as well. Web Publishing works and people can get out to the internet fine.

Any suggestions would be appreciated.

Post #: 1

Featured Links*

RE: Can't Browse Network Over VPN - 27.Nov.2007 11:41:30 PM

AHIT

Posts: 1561
Joined: 22.Jul.2002
From: Sydney, Australia
Status: offline

first up, we can exclude ISA a being the cause of any problems as ISA 200 does act as a VPN server, it just passes the appropriate traffic to an internal RRAS/VPN server.

re: DNS - does name resolution work? ie: can you "ping mymachine.domain.int" and it resovles to an IP address? If the name DOES resolve to (the correct) IP address, then DNS is n problem. If you get a "could not find host" type message, then your DNS indeed has 'issues'

Can you ping the IP address of an internal machine? So NOT using a name at all. What response do you get? if that fails, can you ping the IP of the ISA server itself from the VPN client? If the ISA box itself responds but NOT other internal machines then I suspect the default gateway assigned/used by the VPN client is incorrect. A ping of the ISA machine usually works as the client often sees the ISA as "attached" or in the same subnet so no routing is required.
If there's no response to a ping of the ISA server machine, then you've got issues indeed! Is the client picking up an IP from the assigned range OK?

_____________________________

http://www.ahit.com.au/isa
(Previous nick: Tolk)

(in reply to danrocket)

Post #: 2

RE: Can't Browse Network Over VPN - 28.Nov.2007 8:49:26 AM

danielcramer

Posts: 2
Joined: 27.Nov.2007
Status: offline

Hi--

Thanks for you feedback. I think the DNS is working ok. Name resolution works on the corporate network fine. When I type either the IP address or the computer name I get the computer name or the IP address respectively

Over the VPN I can't ping the ISA server or ping its computer name

When I do an ipconfig/all on the VPN client is see that the DNS server that has been assigned to the VPN network adapter is that of the internal DNS server on the network.

Any Suggestions would be greatly appreciated.

Thank you

(in reply to danrocket)

Post #: 3

RE: Can't Browse Network Over VPN - 5.Dec.2007 7:18:37 AM

AHIT

Posts: 1561
Joined: 22.Jul.2002
From: Sydney, Australia
Status: offline

any software firewall's on the machine that could be stopping the traffic to that network?

_____________________________

http://www.ahit.com.au/isa
(Previous nick: Tolk)

(in reply to danielcramer)

Post #: 4

RE: Can't Browse Network Over VPN - 5.Dec.2007 9:04:31 AM

danielcramer

Posts: 2
Joined: 27.Nov.2007
Status: offline

nope. my client can connect to other networks I've set up that are identical

(in reply to AHIT)

Post #: 5

RE: Can't Browse Network Over VPN - 8.Dec.2007 6:10:28 AM

AHIT

Posts: 1561
Joined: 22.Jul.2002
From: Sydney, Australia
Status: offline

No ideas. Time for packet monitoring to see where they go and where reponses (if any) come from..

_____________________________

http://www.ahit.com.au/isa
(Previous nick: Tolk)

(in reply to danielcramer)

Post #: 6