Re: adding a route to the client

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance



Enable "use gateway on remote network" in the Dialup Connectiod. Then if
the LAN's routing scheme is valid and functional the Client can get to all
segments of the LAN after they connect.

If you disable "use gateway on remote network" then the client will only be
able to connect to the subnet that they directly VPN into.

--
Phillip Windell
www.wandtv.com

The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/ISA2004_AccessRules.html

Troubleshooting Client Authentication on Access Rules in ISA Server 2004
http://download.microsoft.com/download/9/1/8/918ed2d3-71d0-40ed-8e6d-fd6eeb6cfa07/ts_rules.doc

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.mspx

Microsoft ISA Server Partners: Partner Hardware Solutions
http://www.microsoft.com/forefront/edgesecurity/partners/hardwarepartners.mspx
-----------------------------------------------------

"jogdial" <jogdial@xxxxxxxxx> wrote in message
news:1856ae74-7bdf-44d3-af65-b69477b54028@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hi,

This isn't exactly an ISA question I guess, but the client is
connecting to an ISA server and I don't know anywhere else that anyone
will know what I'm talking about.

I connect my clients VPN to an ISA server. The ISA server gives the
client and IP address via DHCP, so it naturally may change each time
you connect.

I have a network at work, and it is connect to additional networks in
different IP ranges via another router.

To get to those networks, I need a route add network on my client PC.
Currently, that is easy enough for me as I get the IP number that I
have been give via DHCP and use that as the gateway. Now I have
other users that are not network savy that need to do the same thing
and before I go writing scripts or anything to parse out the local IP
address so I can use it in a batch file to put in as my gateway in the
route command... is there any way that I can do this without gettting
the local ISA server/DHCP assigned IP address? I don't route
everything through my ISA server is why I need to do this.. as we only
have limited bandwidth at work and everyone has their windows
firewalls on etc, I don't want to route everything they do on the
Intenet through our network, only traffic bound for our networks.

Hope that makes some sense to someone as it's already starting to look
like assembler code I wrote 10 years ago to me, made sense at the time
anyway... ;-)

Cheers


.



Relevant Pages

  • Re: VPN networking problem
    ... Try UNchecking the box in your client vpn properties that says "use default ... gateway on remote network". ... > Ethernet adapter Local Area Connection: ...
    (microsoft.public.win2000.networking)
  • Re: ISA 2004 Access Denied Error
    ... You do not need a default gateway on the internal NIC. ... Make sure your Internal address range (under Network objects in the ... toolbox) correctly reflects the 10.x.x.x range of your lab internal net. ... > The internal NIC on the ISA server is configured with an IP address on ...
    (microsoft.public.isaserver)
  • Re: Convention User Woas
    ... gateway, they're not able to reach off the LAN either, as most operating ... Where they st00pid enough to not spoof the MAC address as well? ... If this is a _wired_ network, you can set your switch so that it knows on ... with some APs you can set them so there is no client to client traffic ...
    (comp.dcom.lans.ethernet)
  • Re: adding a route to the client
    ... If you disable "use gateway on remote network" then the client will only be ... Troubleshooting Client Authentication on Access Rules in ISA Server 2004http://download.microsoft.com/download/9/1/8/918ed2d3-71d0-40ed-8e6d- ... ...
    (microsoft.public.isa.vpn)
  • Re: IE 6 and Proxy Setting Exceptions
    ... Enter those address's in the internal network object on the tab where you ... entered or entered through a gpo will be removed by the script. ... Firewall Client installed. ... On the ISA server the config set for the ...
    (microsoft.public.isa)