Re: RRAS on ISA 2004 not keeping configs


"Phillip Windell" <@.> wrote in message
news:uLuoKJ6yGHA.4576@xxxxxxxxxxxxxxxxxxxxxxx
"Oliver O'Boyle" <oliver.oboyle@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:erhGMS5yGHA.2640@xxxxxxxxxxxxxxxxxxxxxxx
To be clear, it's the setting within RRAS itself that are not stable. All
the ISA settings remain intact 100% of the time.

ISA "owns" RRAS when they are on the same box. RRAS is no longer
independent. ISA will reset RRAS however it wants it whenever it wants
it.

If you want to work with RRAS separately, then run it on a separate box.


I am aware of this, however, when you configure site-to-site VPNs to use
EAP, even with ISA on the box, you still need to go into the RRAS service
and configure the demand-dial interface manually. There's no way around it
via the ISA Management Console.

Oliver




--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/ISA2004_AccessRules.html

Troubleshooting Client Authentication on Access Rules in ISA Server 2004
http://download.microsoft.com/download/9/1/8/918ed2d3-71d0-40ed-8e6d-fd6eeb6cfa07/ts_rules.doc

Microsoft Internet Security & Acceleration Server: Guidance
http://www.microsoft.com/isaserver/techinfo/Guidance/2004.asp
http://www.microsoft.com/isaserver/techinfo/Guidance/2000.asp

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.asp

Deployment Guidelines for ISA Server 2004 Enterprise Edition
http://www.microsoft.com/technet/prodtechnol/isa/2004/deploy/dgisaserver.mspx
-----------------------------------------------------





.

Relevant Pages

  • Re: Do I need RAS service enabled?
    ... VPN access through it. ... need to enable the RRAS service since you have ISA server on your SBS. ...
    (microsoft.public.windows.server.sbs)
  • Re: ISA verwirft ausgehende Pakete ohne assoziierte Regel
    ... RRAS und ISA laufen auf ein und demselben Rechner. ... In dieser Konfiguration wären VPN Clients dann im Perimeter Network ... || Netzwerken in alle geschützten Netze ...
    (microsoft.public.de.german.isaserver)
  • RE: ISA 2004 and RRAS
    ... I stopped Firewall Services (ISA 2004 Console) my RRAS stopped too. ... - after installing ISA 2004 the Group SBS Internet Users is changed by Any ... if we installed ISA Server ...
    (microsoft.public.windows.server.sbs)
  • Re: RRAS on ISA 2004 not keeping configs
    ... The rule is, if you can configure it in ISA, don't mess with it in RRAS. ... EAP, even with ISA on the box, you still need to go into the RRAS service ... Deployment Guidelines for ISA Server 2004 Enterprise Edition ...
    (microsoft.public.windows.server.networking)
  • VPN and QoS
    ... I've moved this Thread from the ISA Enterprise Forum to the RRAS forum. ... Another possibility is to find a method to direct different priority traffic over different tunnels; ...
    (microsoft.public.win2000.ras_routing)