Re: VPN through ISA, can we continue the troubleshooting

From: Joe (anonymous_at_discussions.microsoft.com)
Date: 06/22/04 

Date: Tue, 22 Jun 2004 03:40:07 -0700

The remote client has a dynamic ip from the isp. the
public interface for the ISA is 192.168.1.1-255.255.255.0
the internal ip for ISA is 192l.168.5.1-255.255.255.0.
Clients on the inside are all setup for DHCP. RRAS under
IP it is setup for DHCP, enable IP routing,allow IP based
remote access, enable broadcast name resolution, using
private for optaining DHCP, DNS, etc...

I have opened ports 1723 and gre on the router/fw. I
also opened port 4500.
>-----Original Message-----
>Joe, what are the IPs either end of the connection ?
>They can't be in the same Subnet.
>
>--
>Henry Craven {SBS-MVP}
> Melbourne Australia
>
>"Joe" <anonymous@discussions.microsoft.com> wrote in
message
>news:1f8f401c457f7$ff2bb690$a401280a@phx.gbl...
>> Tony here are the responses to the questions:
>>
>> - Are you using SBS2K3?
>> I'm using SBS 2003
>> - Are you connecting from a remote client to your
SBS2K3?
>> Yes I'm connecting from a remote client to SBS 2003
>> - Are you connecting from a remote client from behind a
>> FW
>> or NAT device?
>> I tried it with both, client directly connected to
>> internet and behind a NAT device.
>>
>> - Are you connecting from an SBS client to a remote
>> Server?
>> NO
>>
>> - If you're connecting from a remote client, is your
>> local
>> VPN endpoint the SBS?
>> YES
>>
>> - Are you getting any Event Errors?
>> NO
>>
>> - If you're not connecting, what <exactly> is your
error
>> message?
>>
>> connecting to x.x.x.x
>> The error is: error 800, unable to establish a
>> VPN connection. The VPN server maybe unreachable, or
>> security parameter may not be configured properly for
>> this connection.
>>
>> I can connect fine from one machine to the SBS
>> internally, so I take it the RRAS is ok.
>>
>> I will appriciate the help of this.
>>
>> If I am not able to get VPN working. What is the
proper
>> procedure in uninstalling ISA.
>>
>> Thanks,
>> Joe
>>
>>
>>
>> - Have you tried to telnet on port 1723 to determine
if a
>> Service is listening?
>>
>> Yes, I get connected for a second or two then
connection
>> is lost.
>>
>>
>> - How did you set up your VPN, did you run any wizards
>> and
>> if so which one?
>>
>> I ran RRAS wizard and internet and mail wizard.
>>
>> Thanks for the response.
>> Joe
>>
>>
>
>
>.
>

Relevant Pages

  • Re: The Web site cannot be found - errors
    ... problems connecting with the internet. ... Internet Connection Wizard from the server. ... > files and ISA cache on all ...
    (microsoft.public.windows.server.sbs)
  • Re: RWW not working externally (R2)
    ... selected RWW to be made accessible on the Internet? ... This is very frustrating and somewhat embarrassing, as RWW was one of my ... I don't think this is an ISA issue or you wouldn't be getting as far as ... Ethernet adapter Server Local Area Connection: ...
    (microsoft.public.windows.server.sbs)
  • Re: RWW not working externally (R2)
    ... selected RWW to be made accessible on the Internet? ... This is very frustrating and somewhat embarrassing, as RWW was one of my ... I don't think this is an ISA issue or you wouldn't be getting as far as ... Ethernet adapter Server Local Area Connection: ...
    (microsoft.public.windows.server.sbs)
  • Re: ISA2K Firewalldienst
    ... dass die InternetConnection Firewall ... > Nr.1 Der Firewalldienst des ISA startet nicht. ... > deaktivieren Sie bitte den Dienst mit dem Namen "Internet Connection ...
    (microsoft.public.de.german.isaserver)
  • Re: Web Proxy for External Clients
    ... internet cafes, and free hotspots. ... you have to isolate them somehow from the network environment at the remote ... making use of the CMAK (Connection Manager Administration Kit). ... and then server-publish it through your ISA. ...
    (microsoft.public.isa)