Welcome to ISAserver.org

site to site vpn

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 Firewall] >> VPN >> site to site vpn

Page: [1]

Message

<< Older Topic Newer Topic >>

site to site vpn - 8.Nov.2007 2:55:33 PM

mfinch

Posts: 4
Joined: 8.Nov.2007
Status: offline

I have ISA 2006 setup on a windows server 2003 sp2 fully patched and ISA 2000 setup on a windows server 2003 sp2 fully patched. I'm able to get the site to site vpn working but the issue that i'm having is the ISA 2000 server can't get out on the internet. Before I make the site to site connection I have no problems getting out on the internet with the ISA 2000 server. It's only after the site to site that i'm unable to get to the internet. I'm not sure if this is the right place to post so I will post this under ISA 2006 as well. Any help would be greatly appreciated.

mfinch

Post #: 1

Featured Links*

RE: site to site vpn - 8.Nov.2007 3:50:17 PM

AHIT

Posts: 1561
Joined: 22.Jul.2002
From: Sydney, Australia
Status: offline

suggest that the IP address assignment of the VPN connection is defining a default gateway.
This would be over-riding the previous default gateway of "send everything via the internet" to be "send everything via this VPN connection"

Hope this helps.

_____________________________

http://www.ahit.com.au/isa
(Previous nick: Tolk)

(in reply to mfinch)

Post #: 2

RE: site to site vpn - 8.Nov.2007 6:23:48 PM

mfinch

Posts: 4
Joined: 8.Nov.2007
Status: offline

Thank you for your reply, but I can not see the VPN assigning a Default Gateway on either server. I thought this may be a 2006 issue. I already have two ISA 2000 Servers running the site to site with no issues. When I attempt the connection with the 2006 ISA server I then have the problem.

(in reply to AHIT)

Post #: 3

RE: site to site vpn - 9.Nov.2007 1:27:36 AM

AHIT

Posts: 1561
Joined: 22.Jul.2002
From: Sydney, Australia
Status: offline

on the 'client' machine thats exhibiting the problem, go to a DOS prompt and run a
ipconfig /all
and verify that the VPN link is indeed 'connected' and that an IP address has been assigned. It'll also indicate whether there is a default gateway.

this article may also be of use - http://www.isaserver.org/tutorials/Creating-VPN-ISA-Server-2006-Firewalls-Main-Branch-Office-Part1html.html

_____________________________

http://www.ahit.com.au/isa
(Previous nick: Tolk)

(in reply to mfinch)

Post #: 4

RE: site to site vpn - 9.Nov.2007 9:56:14 AM

mfinch

Posts: 4
Joined: 8.Nov.2007
Status: offline

I have already done that and it shows that we are connected with the proper ip address. It has no default gateway. The only place that I have a default gateway is on my internet nic. Other then that through the VPN connection I don't have a default gateway.

(in reply to AHIT)

Post #: 5

RE: site to site vpn - 11.Nov.2007 6:11:22 PM

AHIT

Posts: 1561
Joined: 22.Jul.2002
From: Sydney, Australia
Status: offline

if you've verified IP addresses of the 'client' machine, default gateways, performed ping and trace tests to those public/internet destinations your trying to access and it hasn' tbecome apaprent yet then its time to dig out the packet sniffer and see where the request is going to, and whats happens from there..

_____________________________

http://www.ahit.com.au/isa
(Previous nick: Tolk)

(in reply to mfinch)

Post #: 6