Welcome to ISAserver.org

RE: Can't access Terminal Server behind ISA

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 Firewall] >> General >> RE: Can't access Terminal Server behind ISA

Page: << < prev 1 [2]

Message

<< Older Topic Newer Topic >>

RE: Can't access Terminal Server behind ISA - 20.Dec.2003 8:17:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi tolvar,

are you saying that if you bind the TS running on ISA itself to the internal IP address '192.168.0.1' you can't connect to it from an internal host such as '192.168.0.8'? Are you kidding? [Wink]

What happens if you disable the server publishing rule? With the server publishing rule disabled, what is the result of the command ' netstat -an | find ":3389" '?

HTH,
Stefaan

(in reply to tolvar)

Post #: 21

Featured Links*

RE: Can't access Terminal Server behind ISA - 21.Dec.2003 10:57:00 AM

tolvar

Posts: 29
Joined: 10.Feb.2003
Status: offline

The internal connection error occured when I published the Terminal Server, after i removed the rule I could then connect again but only from the workstation.

I've now gone into Terminal Services Configuration and selected the internal NIC running ip 192.168.0.1 and this does appear to now work locally, I've yet to try the connection from a remote site.

(in reply to tolvar)

Post #: 22

RE: Can't access Terminal Server behind ISA - 21.Dec.2003 8:31:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi tolvar,

after binding the TS on the internal interface, check out that only a listener is installed on the internal IP address '192.168.0.1' with the command netstat -an | find ":3389". If that's OK, create then your server publishing rule.

Keep in mind that from an internal station you should always contact the TS on ISA on IP address '192.168.0.1'. However from an external host you will have to use the external IP address you have published the TS on.

HTH,
Stefaan

(in reply to tolvar)

Post #: 23

RE: Can't access Terminal Server behind ISA - 21.Dec.2003 10:01:00 PM

tolvar

Posts: 29
Joined: 10.Feb.2003
Status: offline

Hi

ok, I created a sever publishing rule and this is what i see after running a netstat -an

TCP 192.168.0.1:3389 0.0.0.0:0 LISTENING
TCP 192.168.0.1:3389 192.168.0.8:1095 ESTABLISHED

does this look ok??

[ December 21, 2003, 11:39 PM: Message edited by: tolvar ]

(in reply to tolvar)

Post #: 24

RE: Can't access Terminal Server behind ISA - 21.Dec.2003 10:49:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi tolvar,

yep, that looks perfect! Moreover, I've just tried it and I got the Windows Logon screen! [Smile]

The meaning of the netstat output is:

1) The first line tells you that the TS is listening on the ISA external interface. If you would disable the server publishing rule, then this line should not appear.

2) The second line says that the TS is listening on the ISA internal interface.

3) The third line shows an active connection from an internal host.

HTH,
Stefaan

[ December 21, 2003, 10:58 PM: Message edited by: spouseele ]

(in reply to tolvar)

Post #: 25

RE: Can't access Terminal Server behind ISA - 21.Dec.2003 11:33:00 PM