Welcome to ISAserver.org

Outgoing VPN broke

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 Firewall] >> SecureNAT Client >> Outgoing VPN broke

Page: [1]

Message

<< Older Topic Newer Topic >>

Outgoing VPN broke - 4.Feb.2003 9:46:00 PM

Barryh

Posts: 44
Joined: 20.Mar.2002
From: Kirkland, WA
Status: offline

When I first setup ISA, I enabled IP routing and PPTP connections, and from our local network we could make pptp VPN connections through ISA out to the Internet. All of our clients are snat.

That recently quit working. The change I made some time ago was to enable the ISA server for incoming VPN. Does that change the ability for outgoing VPN?

I am somewhat confused because I have read that internal clients that need to connect VPN (pptp) through ISA to the Internet must be snat, and I also read they have to be web or firewall client, not snat! Well, our snat clients were definitely able to use pptp throug ISA before I configured the ISA server as a VPN server also.

So my question... can my ISA server configured also as a VPN server, still allow pptp snat clients to pass through to the internet? Or is this when they must be web or firewall clients?

Thanks,
barry

Post #: 1

Featured Links*

RE: Outgoing VPN broke - 4.Feb.2003 10:09:00 PM

Barryh

Posts: 44
Joined: 20.Mar.2002
From: Kirkland, WA
Status: offline

Okay, never mind this question, everything working again. snat clients able to use pptp outbound, and remote VPN clients able to come in.

(in reply to Barryh)

Post #: 2

RE: Outgoing VPN broke - 10.Feb.2003 4:26:00 PM

tshinder

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Barry,

Great! Good to hear that things are working again.

Thanks for the follow up!
Tom

(in reply to Barryh)

Post #: 3

RE: Outgoing VPN broke - 10.Feb.2003 6:09:00 PM

Barryh

Posts: 44
Joined: 20.Mar.2002
From: Kirkland, WA
Status: offline

Thanks Tom. FYI: the problem was that I had installed a CISCO VPN client on my PC, and my Microsoft VPN client would not work until I uninstalled the CISCO client.

-Barry

(in reply to Barryh)

Post #: 4

RE: Outgoing VPN broke - 11.Feb.2003 12:41:00 PM

rmatthewcole

Posts: 26
Joined: 12.Mar.2001
From: Auburn, AL USA
Status: offline

Actually you don�t have to uninstall the Cisco client. There is a Cisco VPN service that interferes with the MS IPSEC policy agent. All you should have to do is stop this service and your MS VPN connections will work great. The command prompt name of the service is cvpnd. Hope this helps.

[ February 11, 2003, 12:53 PM: Message edited by: rmatthewcole ]

(in reply to Barryh)

Post #: 5

RE: Outgoing VPN broke - 11.Feb.2003 5:49:00 PM