RE: Connect a branch office to main office by VPN router

Hi Loke,

Thank you for posting in SBS newsgroup.

From your description, I understand you want to create IPSec VPN between
ISA2004 and a third party router. If I have misunderstood your concerns,
please do not hesitate to let me know.

You may need to follow the articles to configure IPSec VPN between a third
party router and ISA 2004:

Site-to-Site VPN in ISA Server 2004
http://www.microsoft.com/technet/prodtechnol/isa/2004/plan/sitetositevpn.msp
x

Establishing an IPSec site-to-site tunnel between an ISA 2004 Firewall and
a D-Link DI-804HV IPSec VPN Router
http://www.isaserver.org/articles/2004isadlink.html

Configuring IPSec Site-to-Site Connections Between ISA Server 2004 and
Third-Party Gateways
http://www.microsoft.com/technet/prodtechnol/isa/2004/plan/sitetositeipsec.m
spx

Creating IPSec Tunnel Mode Site to Site VPNs with ISA Server 2004 Firewalls
http://www.isaserver.org/tutorials/2004ipsectunnelmode.html

More information:

How to configure networks in ISA Server 2004
http://support.microsoft.com/?id=867483

What's New and Improved in ISA Server 2004
http://www.microsoft.com/isaserver/evaluation/whatsnew.asp

ISA Server 2004 Performance Best Practices
http://www.microsoft.com/technet/prodtechnol/isa/2004/performancebestpractic
es.mspx

ISA Server 2004 Quick Start Guide
http://download.microsoft.com/download/3/7/b/37b0cbc4-e578-4082-a779-de4fbe8
76f06/ISA2004SE_quickstartguide-Rev%201%2003.doc

ISA Server 2004 ISA Server 2004 Configuration Guide
http://download.microsoft.com/download/3/7/b/37b0cbc4-e578-4082-a779-de4fbe8
76f06/ISA2004SE_configguide-Rev%201%2003.doc

Hope it helps.

I appreciate your time and look forward to hearing from you.

Best regards,

Crina Li (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| Thread-Topic: Connect a branch office to main office by VPN router
| thread-index: AcaVCR4wnNt+tXh2TgW6fYq0YVYlQQ==
| X-WBNR-Posting-Host: 62.101.208.74
| From: =?Utf-8?B?TG9rZQ==?= <loke@xxxxxxxxxxx>
| Subject: Connect a branch office to main office by VPN router
| Date: Wed, 21 Jun 2006 01:03:02 -0700
| Lines: 27
| Message-ID: <1335CF39-05CB-4E29-B3A7-33AC8EB314E7@xxxxxxxxxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 8bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
| Newsgroups: microsoft.public.windows.server.sbs
| Path: TK2MSFTNGXA01.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:276486
| NNTP-Posting-Host: TK2MSFTNGXA01.phx.gbl 10.40.2.250
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| I need to connect a branch office (BO) to main office (MO) by VPN. The
VPN is
| by IPSec, and the VPN router at BO third party. The MO consists of SBS
2003
| with ISA 2004 and two NIC. On the BO there is a few pc and a printer.
When
| connecting to Internet, all pc at BO shall go through the HTTP content
filter
| at the SBS before they allowed going to Internet. They shall also have
access
| to shared folder on the SBS and email.
|
| The workstations at BO is set up with the SBS IP as their DNS server,
|
| I have tree chooses:
| 1 â?? ISA WAN <VPN-tunnel> 3COM VPN router
| 2 â?? ISA DMZ to 3COM VPN router <VPN-tunnel> 3COM VPN router
| 3 â?? SBS LAN to 3COM VPN router <VPN-tunnel> 3COM VPN router
|
| The alternative 1 is working somewhat. The pc at BO is able to connect to
| Exchange and file resources on SBS. Unfortunately Iâ??m not able to do
remote
| assistance to BO pc when Iâ??m logged in the SBS.
|
| Alternative 2 require 3 NIC in SBS. This is my partners choose. I feel it
is
| a little bit overkill. Another chooses is alternative 3, but my partner
seas
| itâ??s troublesome to set up.
|
| Why do not remote assistance works in alternative 1? Do you have some
| recommendation on alternative 2 ore 3?
|
| --
| Loke
|

.

Relevant Pages

  • Re: Branch Office VPN Options
    ... Turn off the DHCP on the VPN router 1 and make sure is on the same subnet as ... you need to tell the SBS how to access those remote PCs (since the SBS ... >>> the domain) for Exchange email and ISA Server ...
    (microsoft.public.backoffice.smallbiz2000)
  • RE: How to setup SBS Network Interface for VPN connection to remot
    ... configuration at this company to allow the Router to Router method. ... You want to know how to create a site-to-site VPN connection from the SBS ... ISA server available). ...
    (microsoft.public.windows.server.sbs)
  • Re: error "duplicate name exists on the network"
    ... computers including the sbs and turned on just the sbs machine. ... that message still came up on the sbs server. ... What other router? ... The reason for having this VPN router is to let my home ...
    (microsoft.public.windows.server.sbs)
  • Re: Security comparison
    ... > Internet connection as well as VPN tunnel from both VPN router, ... Microsoft ISA server includes proxy and caching features as well, ... firewall is and how it is different from a stateful firewall and a NAT ...
    (microsoft.public.security)
  • Re: Adding Fortinet 100 in front of SBS 2000 running ISA server
    ... > firewall solution in front of a SBS 2000 running ISA Server? ... > I could assign the new router the public ip address and an internal ... > well as VPN and antivirus FTP ports. ...
    (microsoft.public.backoffice.smallbiz2000)
Loading