Re: MSN Messenger while on VPN

From: Andrew Webb (andrew.webb_at_not-here.eme-med.co.uk)
Date: 03/30/04 

Date: Tue, 30 Mar 2004 12:05:03 +0100

Thanks for this - I will try enabling the policy and let him request and
address. Will other clients be issued addresses as normal ?

I think that he does have the 'use the default gateway on the remote
network' option ticked. We want this ticked because we don't want traffic
from both a local internet connection and the VPN being active at the same
time for security reasons. The problem is that traffic over the PPTP tunnel
doesn't seem to get routed correctly out on to the Internet and back, so MSN
messenger (and ping) don't work. Is this normal - if I UNtick the box, then
pings go out through the local network connection.

Any thoughts ?

Thanks

Andrew

"Manjari Bonam [MSFT]" <manjarib@online.microsoft.com> wrote in message
news:ubVT30XFEHA.1600@tk2msftngp13.phx.gbl...
> Yes, you can do that. You can have a policy on the VPN server and say
> "client may request an IP address" so that when the client comes in with
the
> IP, he is given the same IP everytime.
>
> Is Internet access possible on your network? If it is and still the user
is
> not able to go to Internet then
> I think he does not have the option "Use the default gateway on the remote
> network enabled".
>
> --
> - Manjari
> This posting is provided "AS IS" with no warranties, and confers no
rights.
> "Andrew Webb" <andrew.webb@not-here.eme-med.co.uk> wrote in message
> news:#k9z8vXFEHA.3424@tk2msftngp13.phx.gbl...
> > Hi
> >
> > One of our staff uses MSN Messenger, so I opened this service up for him
> > through ISA - he gets a 'fixed' IP address from DHCP. Normally we block
> MSN.
> > When he connects to the VPN, he doesn't get the same IP address - can
> > Windows RRAS always issue him with the same address when he connects via
> > PPTP as well ?
> >
> > Assuming we can get an IP address or range that he can use that allows
> MSN,
> > would MSN be able to route back out to the Internet whilst he is on the
> VPN
> > ? When on the VPN, he can't ping servers, so which traffic can't get
back
> > through the VPN and on to the Internet ?
> >
> > We have just a single ISA server which is a firewall and proxy, and
people
> > VPN in to this using PPTP (and SecurID authentication). We access is via
> the
> > proxy service which works fine on or off the VPN.
> >
> > Any thoughs ?
> >
> > Thanks
> >
> > Andrew
> >
> >
>
>

Relevant Pages

  • Re: cups relaying remote broadcasts to a local subnet (SOLVED)
    ... This sounds like an application that could use a vpn (virtual private ... network) over the internet. ... port 9100 it only has to be set up on the gateway machine. ...
    (Fedora)
  • Re: Using a Linksys router, should I also use Zonealarm?
    ... public internet to access corporate network. ... In the "old days" when people used to use Dial-In instead of VPN you ware ... protected by corporate Firewall -- since there was no public Internet ...
    (microsoft.public.security)
  • Re: cups relaying remote broadcasts to a local subnet
    ... This sounds like an application that could use a vpn (virtual private ... network) over the internet. ... The 10.x.x.x series of IP addresses is set aside as private address space. ...
    (Fedora)
  • Re: Http access across a site 2 site VPN
    ... Troubleshooting Client Authentication on Access Rules in ISA Server 2004 ... Microsoft Internet Security & Acceleration Server: ... access rule that represents access to the vpn between the sites. ... corresponding network rules and access rules, and I went ahead and created ...
    (microsoft.public.isa)
  • Re: Remote Access and Setting up a VPN....need some expert advice....
    ... Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net ... Assuming you need to access the server shared folder only, it is better to use VPN. ... Since you have two NICs in the server, you can setup VPN follow this step by step how to. ... > internal network and has an address of 10.0.0.254. ...
    (microsoft.public.windows.server.sbs)
Loading