Re: RRAS on ISA 2004 not keeping configs


"Phillip Windell" <@.> wrote in message
news:uqaROL7yGHA.4044@xxxxxxxxxxxxxxxxxxxxxxx
Yes there are some things you still do in RRAS Admin, but it is really
"fuzzy" sometimes. I don't have an "lists" of what you can or can't do. I
don't really know what else to tell you.


The rule is, if you can configure it in ISA, don't mess with it in RRAS. EAP
and RRAS Policies are two areas that require you to work in RRAS.

I don't believe my problem is "normal", and so there is probably no stock
answer out there. I am hoping to hear from someone who has also seen this,
or who knows why it's happening.

But thanks for trying :)

Oliver

--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com


"Oliver O'Boyle" <oliver.oboyle@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:eZ27YR6yGHA.3440@xxxxxxxxxxxxxxxxxxxxxxx

"Phillip Windell" <@.> wrote in message
news:uLuoKJ6yGHA.4576@xxxxxxxxxxxxxxxxxxxxxxx
"Oliver O'Boyle" <oliver.oboyle@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:erhGMS5yGHA.2640@xxxxxxxxxxxxxxxxxxxxxxx
To be clear, it's the setting within RRAS itself that are not stable.
All the ISA settings remain intact 100% of the time.

ISA "owns" RRAS when they are on the same box. RRAS is no longer
independent. ISA will reset RRAS however it wants it whenever it wants
it.

If you want to work with RRAS separately, then run it on a separate box.


I am aware of this, however, when you configure site-to-site VPNs to use
EAP, even with ISA on the box, you still need to go into the RRAS service
and configure the demand-dial interface manually. There's no way around
it via the ISA Management Console.

Oliver




--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/ISA2004_AccessRules.html

Troubleshooting Client Authentication on Access Rules in ISA Server 2004
http://download.microsoft.com/download/9/1/8/918ed2d3-71d0-40ed-8e6d-fd6eeb6cfa07/ts_rules.doc

Microsoft Internet Security & Acceleration Server: Guidance
http://www.microsoft.com/isaserver/techinfo/Guidance/2004.asp
http://www.microsoft.com/isaserver/techinfo/Guidance/2000.asp

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.asp

Deployment Guidelines for ISA Server 2004 Enterprise Edition
http://www.microsoft.com/technet/prodtechnol/isa/2004/deploy/dgisaserver.mspx
-----------------------------------------------------









.

Relevant Pages

  • Re: Do I need RAS service enabled?
    ... VPN access through it. ... need to enable the RRAS service since you have ISA server on your SBS. ...
    (microsoft.public.windows.server.sbs)
  • Re: ISA verwirft ausgehende Pakete ohne assoziierte Regel
    ... RRAS und ISA laufen auf ein und demselben Rechner. ... In dieser Konfiguration wären VPN Clients dann im Perimeter Network ... || Netzwerken in alle geschützten Netze ...
    (microsoft.public.de.german.isaserver)
  • RE: ISA 2004 and RRAS
    ... I stopped Firewall Services (ISA 2004 Console) my RRAS stopped too. ... - after installing ISA 2004 the Group SBS Internet Users is changed by Any ... if we installed ISA Server ...
    (microsoft.public.windows.server.sbs)
  • VPN and QoS
    ... I've moved this Thread from the ISA Enterprise Forum to the RRAS forum. ... Another possibility is to find a method to direct different priority traffic over different tunnels; ...
    (microsoft.public.win2000.ras_routing)
  • RE: ISA 2004 and RRAS
    ... if we installed ISA Server ... the RRAS will no longer perform the NAT (Network Address ... How To Install and Configure a Virtual Private Network Server in Windows ...
    (microsoft.public.windows.server.sbs)