a.) On the general tab type a name etc. "Skype UDP Send-Receive". b.) On the Parameters tab Portnumber etc.: 65530 Protocol type : UDP Direction : Send Receive
c.) Secondary connections: Port Range : 1024 - 65530 Protocol type : UDP Direction : Send Receive
2.) New defination "Skype TCP Inbound"
a.) On the general tab type a name etc. "Skype TCP Inbound". b.) On the Parameters tab Portnumber etc.: 65530 Protocol type : TCP Direction : Inbound
3.) New defination "Skype TCP Outbound" a.)On the general tab type a name etc. "Skype TCP Outbound". b.) On the Parameters tab Portnumber etc.: 65530 Protocol type : TCP Direction : Outbound
c.) Secondary connections: Port Range : 1024 - 65530 Protocol type : TCP Direction : Outbound
4.) And a last you need a new Server Publishing Rule a.) On the general tab type a name etc. "Skype Connect". v Enable (hooked off) b.) On the Action tab: IP Address of internal Server etc.: 10.0.0.5 External IP address on ISA Server etc. 220.127.116.11 Mapped server protocol(The one you made above "Skype TCP Inbound") c.) On the Applies To tab This rule applies to: Marked for Any request
From: Sydney, Australia
You've probably got other weired stuff going on with ISA as well I imagine given that your internal and external IP address'es are IN THE SAME SUBNET! Even if you were using /30 subnet masking to create (up to 64) internal networks with smaller ranges .252 & .253 would still not work. How can ISA know whats local and whats external when the IPs' are side-by-side and your LAT is probably also misconfigured.
Try using a different range for your external network, say 10.1.0.whatever and ensure ONLY 10.1.1.1 is in your LAT.
I've been able to connect using these steps. But, before it worked I had to specify in Skype's options under the connection tab to use port 65530 for incomming connections. I do not use the firewall client but am a SecureNAT client.
For step no.4 , I unmanaged to create the server publishing rule. This is because my external interface at ISA 2000 server is private IP address. We did the NAT at VPN box in order for the ISA server to go out. For your info, we used many to one NAT.
I tried to keyin the public IP address (where I obtained from the NAT), but it prompted me to browse from the external IP arrays. Where can I keyin my external IP address in the array/list at ISA 2000 server?
Am I correct as I use the NAT (public IP address)?
RE: How to configure Skype on ISA Server 2000 - 27.May2005 7:28:00 AM
I did it all: created rules and opened all ports greater than 1024, TCP and UDP with protocol rules and opened incoming 65530 with a server publishing rule... no success. I think there are some other restrictions that I've missed...