RE: VPN Issue

Hi Ripley,

Thank you for posting in SBS newsgroup.

From the description, I understand the issue to be: 2 users can create VPN
to SBS but they can not ping SBS and access internal resource. If I have
misunderstood your concerns, please do not hesitate to let me know.

As I know, this issue may occur if you configure the VPN connection to use
the default gateway on the remote network. This setting overrides the
default gateway settings that you specify in your Transmission Control
Protocol/Internet Protocol (TCP/IP) settings. For detailed information,
please refer to the following KB article:

317025 You Cannot Connect to the Internet After You Connect to a VPN Server
http://support.microsoft.com/?id=317025

If it does not help, would you please help me collect the following
information?

1. Is everything OK if you manually create a VPN connection to the SBS
server? To do so, see:

305550How to configure a VPN connection to your corporate network in
Windows XP Professional
http://support.microsoft.com/default.aspx?scid=kb;EN-US;305550

314076 How to configure a connection to a virtual private network (VPN) in
http://support.microsoft.com/?id=314076

2. Get the IPCONFIG /ALL results when Creating VPN on remote client and SBS.

Also I provide the following articles for your reference regarding the VPN:

323441 How To Install and Configure a Virtual Private Network Server in
Windows
http://support.microsoft.com/?id=323441

Site-to-Site VPN in ISA Server 2004
http://www.microsoft.com/technet/prodtechnol/isa/2004/plan/sitetositevpn.msp
x

How to configure networks in ISA Server 2004
http://support.microsoft.com/?id=867483

What's New and Improved in ISA Server 2004
http://www.microsoft.com/isaserver/evaluation/whatsnew.asp

ISA Server 2004 Performance Best Practices
http://www.microsoft.com/technet/prodtechnol/isa/2004/performancebestpractic
es.mspx

I appreciate your time and look forward to hearing from you.

Best regards,

Crina Li (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| Thread-Topic: VPN Issue
| thread-index: AcaUU6a5o1FpXQyVToeeK4l5XD41ag==
| X-WBNR-Posting-Host: 81.138.254.211
| From: =?Utf-8?B?UmlwbGV5?= <Ripley@xxxxxxxxxxxxxxxxxxxxxxxxx>
| Subject: VPN Issue
| Date: Tue, 20 Jun 2006 03:24:02 -0700
| Lines: 37
| Message-ID: <C5030DEE-947C-49A0-BEB5-595E5E344655@xxxxxxxxxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
| Newsgroups: microsoft.public.windows.server.sbs
| Path: TK2MSFTNGXA01.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:276260
| NNTP-Posting-Host: TK2MSFTNGXA01.phx.gbl 10.40.2.250
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Wonder if anyone can help here, as I'm tearing my hair out!
|
| I run a SBS 2003 domain, with ISA Server 2004 configured for VPN access.
| This works fine on dial-up, users are placed in the security group
"Mobile
| Users" and they are then able to dial up to the internet, connect to the
VPN,
| and access Exchange (through Outlook) and our UNIX system (via IP
address).
| They can also access the Intranet, and all internet access is routed
through
| the ISA server (and is monitored).
|
| It was decided to deploy broadband out to our mobile sales reps. This was
| first done with a standard usb broadband modem on XP Professional. Again,
| this works fine. User connects up to broadband, then connects via VPN.
Unless
| they are connected to VPN, they cannot access the internet on their
broadband
| (which reduces the possiblity of them browsing the internet for personal
| usage).
|
| However, I've got 2 mobile guys who have had a new broadband package
(from
| the same ISP as above) using a router / modem .... and this just isn't
| working. They can connect to the broadband, then when they launch
Internet
| Explorer nothing loads. If they untick their proxy server, they can
access
| internet over the broadband just fine. Once connected to broadband, they
then
| connect to the VPN, this authenticates and connects them .... but they
then
| cannot ping ANY server on our domain, their Exchange doesn't work, they
| cannot access the internet or intranet, and they cannot log in to our
UNIX
| server over IP.
|
| I've got other people on different broadband packages, using different
| routers or modems, and these people can ping any server, and do
everything
| they need to. I did have an issue a while back where NOBODY could ping
| anything when connected via VPN but this was corrected by going into the
| company VPN connectiod properties, clicking networking, highlighting
TCP/IP,
| properties, advanced, DNS, and adding a DNS suffix of domain.local.
|
| I've tried the broadband providers who blame my server, but if other
users
| can connect ok how can this be?
|
| I would appreciate any help you can offer on this one. Thanks.
|

.

Relevant Pages

  • Re: Sometimes it works sometimes it doesnt (VPN data issues)
    ... NIC1 "Internet" is set to ... (the IP of the external firewall) and the DNS is set to ... A connection between the VPN server and the VPN client xxx.xxx.xxx.xxx ...
    (microsoft.public.windows.server.networking)
  • RE: VPN Error code 800 HELP!
    ... Can you visit Internet and OWA on SBS server? ... Just one PC get error code 800 connecting VPN connecting to SBS? ...
    (microsoft.public.windows.server.sbs)
  • RE: Sharing VPN client connection
    ... as a VPN server, configure the internal clients to connect the remote ... office by VPN connection and then access to the Internet from the Remote ... Enable internal clients to access the Internet. ... On the server, go to My Network Places, click New Connection Wizard. ...
    (microsoft.public.windows.server.sbs)
  • Re: VPN Problem, need your help.....
    ... Are you actually connecting one card to the NAT ... get this server to a single NIC scenario ... > VPN server. ... > Internet for all the systems on the network. ...
    (comp.security.firewalls)
  • Re: The OTHER problem with Netgear WGT624 (and probably others)
    ... |>|>Isolated network zone, enforced by router and firewall rules. ... My preferred solution is to put the server behind ... |>| authenticated VPN and blocks all outbound connections. ... |>How does VPN help an office connect to the internet? ...
    (alt.internet.wireless)