Re: VPN Clients not able to communicate with network behind ISA Server



I found out, why it's not possible to communicte with the 10.0.0.0/8
network:

The network relationship between the VPN Client Network and the internal
network was configured to "Route" by default. Since there was no route from
the 10.0.0.0/8 network to the APIPA address from the VPN Client the retour
packets were "misroutet".
Changing the relationship between the VPN Client network and the Internal
network to "NAT" solved my problem.

Are there any known issues about configured the network relationship between
VPN Clients and the interal Network to NAT ?
I want to use L2TP/IPSec VPN and PPTP VPN.
Further I want to use EAP TLS for VPN authentication and certificates for
windows domain smart card logon.

Thanks
MC



"MC" <seaedsit@xxxxxxxxxxx> wrote in message
news:OdbITTRoFHA.1948@xxxxxxxxxxxxxxxxxxxxxxx
> Hi,
>
> I have an ISA Server up and running with the following config:
>
> External IP: w.x.y.z
> Internal IP: 172.16.100.1/24
>
> Behind the 172.16.100.0/24 net I have a 10.0.0.0/8 subnet. There's a
> static host route on the ISA Server to access the 10.0.0.0/8 network.
> After some connection tests and tracert's everything seems to work fine.
>
> My PPTP VPN Clients get an APIPA address from the ISA server. Access to
> external resources on the internet work fine, but the VPN Clients are not
> able to communicate with the servers on the 10.0.0.0/8 subnet.
>
> 172.16.100.0/24 and 10.0.0.0/8 are both configured as "Internal" net on
> the ISA Server.
>
> Any ideas ?
>
> Thanks for answers.
> MC
>
>
>


.



Relevant Pages

  • Re: Internet Intermittent Connection
    ... "Mohammed A. Raslan" wrote: ... Internal Network: 192.168.100.1 - 192.168.100.255 ... "ISA Server detected a proxy chain loop. ... internet. ...
    (microsoft.public.isa)
  • Re: Internet Intermittent Connection
    ... Internal Network: 192.168.100.1 - 192.168.100.255 ... any other networks and remove any additional ranges if they are added. ... "ISA Server detected a proxy chain loop. ... I have an intermittent Internet connection that has been going on ...
    (microsoft.public.isa)
  • Re: Internet Intermittent Connection
    ... Internal Network: 192.168.100.1 - 192.168.100.255 ... any other networks and remove any additional ranges if they are added. ... "ISA Server detected a proxy chain loop. ... I have an intermittent Internet connection that has been going on ...
    (microsoft.public.isa)
  • Re: ISA Server 2004 and Application Events 14147
    ... This newsgroup only focuses on SBS technical issues. ... | any Internet access restriction from either the server or the internal ... |> Server computer is different from the ISA Server configuration. ... and add your internal network adapter. ...
    (microsoft.public.windows.server.sbs)
  • RE: ISA Server lost domain
    ... 172.16.18.131 is my External Network. ... Domian from the ISA server. ... adapter configuration for ISA server: ... >Intranet & the second one is used for internet, ...
    (microsoft.public.isaserver)