Re: Basic VPN

Tech-Archive recommends: Speed Up your PC by fixing your registry



"Matt" <mjn2NOSPAMrep@xxxxxxxxx> wrote in message
news:pb6h045lpu7h1i0m63me7gd7mdb1uvqadi@xxxxxxxxxx
I have a very basic question.
Have setup a VPN connection between two hardware devices.
LAN 1 : 192.168.101.1
LAN2:192.168.105.1
Now what I thought is in my networks I would be able to see both
LAN's..But this is not the case.

It isn't that simple.

Is there a simple way to allow the users to see the other LAN
resources??

You have to define "seeing".
If you mean Network Places, then that doesn't matter. The LAN could be
working perfectly fine and there isn't anything wrong with anything,...you
just don't see anything from the other subnet in Network Places.

Network Places is not "seeing",...it is electing a Master Browser that
gathers machine names based on the Netbios protocol and builds a "browse
list",...when you open Network Places is simply reads the browse list no
matter if the list is correct, incorrect, empty, or full. Netbios does not
work across subnets without a WINS Server,....of course then Netbois still
doesn't work over subnets,...it is just that the functionality of Netbios
gets replaced by WINS which builds a database and functions somewhat similar
to DNS in that it responds to queries from hosts.

If you mean something other than Network Places then you need to make sure
that you created the correct Access Rules on the two ISAs to allow the
traffic between the segments. The Access Rules on the two ISAs must agree
with each other.
Incorrect Access Rules will also cause WINS to fail.

--
Phillip Windell
www.wandtv.com

The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/ISA2004_AccessRules.html

Troubleshooting Client Authentication on Access Rules in ISA Server 2004
http://download.microsoft.com/download/9/1/8/918ed2d3-71d0-40ed-8e6d-fd6eeb6cfa07/ts_rules.doc

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.mspx

Microsoft ISA Server Partners: Partner Hardware Solutions
http://www.microsoft.com/forefront/edgesecurity/partners/hardwarepartners.mspx
-----------------------------------------------------


.



Relevant Pages

  • Re: More WTF!! ISA semantics "inbound" or "outound"
    ... point for directionality in an access rule is the "from" network. ... It seems the reference point for a publishing ... rule is always the ISA. ... directionality always looks wrong on access rules that allow traffic to ...
    (microsoft.public.windows.server.sbs)
  • Re: ISA 2006 configuration question - multiple VLANs and domains
    ... very familiar with network segments vs. domains et. al. ... multihomed ISA 2006 server forward a DHCP request to the proper VLAN ... ISA is a Firewall Product designed to protect a network from the Internet. ...
    (microsoft.public.isa.configuration)
  • Re: Disable dynamic route entries in Windows 2003?
    ... and how they're configured/managed by the network folks. ... My ISA servers have two NIC's: one in a VLAN that is an "internal" DMZ, ... So, from the standpoint of ISA Server, there are two separate interfaces ... the "Internal VLAN can NOT route to the Internet VLAN, ...
    (microsoft.public.windows.server.networking)
  • Re: Inter-Forest Communication
    ... Win2k network as external or Perimeter and its really internal isn't it? ... I'm intrigued by your comment that you can get ISA to behave as the LAN ... > Microsoft Internet Security & Acceleration Server: ...
    (microsoft.public.isa.configuration)
  • Re: Internet Intermittent Connection
    ... Here are my IPs for the network: ... ISA Internal NIC: 192.168.100.1 ... Modem External: Public IP Address ... I have an intermittent Internet connection that has been going on for ...
    (microsoft.public.isa)