RE: ISA Server Error Displaying web pages
- From: v-terliu@xxxxxxxxxxxxxxxxxxxx (Terence Liu [MSFT])
- Date: Thu, 19 Jul 2007 12:06:36 GMT
Hello Greg,
Thank you for your update.
1. From the ipconfig result, I can see you did not perform my first
suggestion: to delete the third site-to-site VPN connection between two
branch offices. I suggest you to disable it to test.
2. The one of the PPP VPN connection is fail on SBS, you get the IP address
169.254.152.38, it is incorrect.
3. In the ipconfig of Branch, the PPP interface IP is 10.145.2.10, it in
same subnet with Ethernet adapter, it is incorrect. Please try to select
another subnet for VPN connection.
Before we go any further, please let me know the following information so
that we can understand your situation more clearly.
1. Please send me the network topology of the whole network.
2. What VPN device you use in branch offices?
3. Can you access the Internet from SBS?
4. What error did get when you try to access Internet? Please capture
screenshots on the error messages and send the pictures to me at
v-terliu@xxxxxxxxxxxxx
I appreciate your time and look forward to hearing from you.
Thanks and have a nice day!
Best regards,
Terence Liu(MSFT)
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| Thread-Topic: ISA Server Error Displaying web pages
| thread-index: AcfIpzLXn+YoOcHISvisJJ1VB4SNqg==
| X-WBNR-Posting-Host: 207.46.192.207
| From: =?Utf-8?B?R3JlZw==?= <Greg@xxxxxxxxxxxxxxxxxxxxxxxxx>
| References: <87692900-EDC7-46F5-B78D-3BA350AC14AE@xxxxxxxxxxxxx>
<Tm21HdDyHHA.4308@xxxxxxxxxxxxxxxxxxxxxx>
| Subject: RE: ISA Server Error Displaying web pages
| Date: Tue, 17 Jul 2007 12:18:04 -0700
| Lines: 183
| Message-ID: <21623245-9C7A-48A3-9DCD-5C013B12C401@xxxxxxxxxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
| Newsgroups: microsoft.public.windows.server.sbs
| Path: TK2MSFTNGHUB02.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:50913
| NNTP-Posting-Host: tk2msftsbfm01.phx.gbl 10.40.244.148
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Hi Terence, I have emailed you the files
| Thanks
| --
| Greg Larson
| GL Computer Service
|
|
| "Terence Liu [MSFT]" wrote:
|
| > Hello Greg,
| >
| > Thank you for posting here.
| >
| > According to your description, I understand that you cannot access
Internet
| > and internal web sites after you establish VPN connection for third
office.
| > If I have misunderstood the problem, please don't hesitate to let me
know.
| >
| > First I want to explain that this problem is a complex and it relate to
| > 3rd-party VPN devices. Our troubleshooting in newsgroup maybe
| > time-consuming. So if you would like to call CSS for assistance, I
would be
| > appreciate and think it is a more effective ways. To obtain the phone
| > numbers for specific technology request please take a look at the web
site
| > listed below.
| >
| > http://support.microsoft.com/default.aspx?scid=fh;EN-US;PHONENUMBERS
| >
| > If you are outside the US please see http://support.microsoft.com for
| > regional support phone numbers.
| >
| > However I will give you some general info if you still want to continue
| > here.
| >
| > Based on my research, I suggest we try the following steps to see if we
can
| > resolve this issue:
| >
| > 1. As you said "we added a second VPN Connection to the network from
each
| > office to a third location", if you establish 3 site-to-site VPN
connection
| > between the 3 offices, the VPN connection will in loop, please delete
the
| > site-to-site VPN connection between 2nd office and 3rd office. We only
need
| > 2 site-to-site VPN connection between the 3 offices: main office and
2nd
| > office, main office and 3rd office.
| >
| > 2. Please rerun the CEICW after you change the network configuration:
| > Go through the follow KB and Rerun CEICW again carefully.
| >
| > How to configure Internet access in Windows Small Business Server 2003
| > http://support.microsoft.com/kb/825763/en-us
| >
| > 3. Please go through the following document to setup site-to-site VPN
| > between ISA and Cisco device.
| >
| > Configuring IPSec Tunnel Mode VPN Between ISA Server 2004 and Cisco PIX
| > v6.3.1
| > http://www.microsoft.com/technet/isa/2004/plan/ipsecvpn.mspx
| >
| > If we cannot resolve the issue after we perform the above steps, please
| > kindly help me collect some information for further investigation:
| >
| > 1. Can you access Internet via no-HTTP protocols, like SMTP or RDP and
so
| > on?
| >
| > 2. Does this issue happen on all 3 offices?
| >
| > 3. As you said "I can access the companyweb from both locations", you
can
| > or cannot?
| >
| > 4. Run command "ipconfig /all > c:\ipconfig_sbs.txt" and "route print >
| > c:\route_sbs.txt" on SBS, send the files c:\ipconfig_sbs.txt and
| > c:\route_sbs.txt to me at v-terliu@xxxxxxxxxxxxx
| >
| > 5. Run command "ipconfig /all > c:\ipconfig_client.txt" and "route
print >
| > c:\route_client.txt" on problematic VPN client, send the files
| > c:\ipconfig_client.txt and c:\route_client.txt to me at
| > v-terliu@xxxxxxxxxxxxx
| >
| > Hope these steps will give you some help.
| >
| > Thanks and have a nice day!
| >
| > Best regards,
| >
| > Terence Liu(MSFT)
| >
| > Microsoft CSS Online Newsgroup Support
| >
| > Get Secure! - www.microsoft.com/security
| >
| > =====================================================
| > This newsgroup only focuses on SBS technical issues. If you have issues
| > regarding other Microsoft products, you'd better post in the
corresponding
| > newsgroups so that they can be resolved in an efficient and timely
manner.
| > You can locate the newsgroup here:
| > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
| >
| > When opening a new thread via the web interface, we recommend you check
the
| > "Notify me of replies" box to receive e-mail notifications when there
are
| > any updates in your thread. When responding to posts via your
newsreader,
| > please "Reply to Group" so that others may learn and benefit from your
| > issue.
| >
| > Microsoft engineers can only focus on one issue per thread. Although we
| > provide other information for your reference, we recommend you post
| > different incidents in different threads to keep the thread clean. In
doing
| > so, it will ensure your issues are resolved in a timely manner.
| >
| > For urgent issues, you may want to contact Microsoft CSS directly.
Please
| > check http://support.microsoft.com for regional support phone numbers.
| >
| > Any input or comments in this thread are highly appreciated.
| > =====================================================
| >
| > This posting is provided "AS IS" with no warranties, and confers no
rights.
| >
| > --------------------
| > | Thread-Topic: ISA Server Error Displaying web pages
| > | thread-index: AcfH9PXkShGdRzbhT9yxrJPmbfcN0Q==
| > | X-WBNR-Posting-Host: 207.46.192.207
| > | From: =?Utf-8?B?R3JlZw==?= <Greg@xxxxxxxxxxxxxxxxxxxxxxxxx>
| > | Subject: ISA Server Error Displaying web pages
| > | Date: Mon, 16 Jul 2007 15:02:11 -0700
| > | Lines: 36
| > | Message-ID: <87692900-EDC7-46F5-B78D-3BA350AC14AE@xxxxxxxxxxxxx>
| > | MIME-Version: 1.0
| > | Content-Type: text/plain;
| > | charset="Utf-8"
| > | Content-Transfer-Encoding: 7bit
| > | X-Newsreader: Microsoft CDO for Windows 2000
| > | Content-Class: urn:content-classes:message
| > | Importance: normal
| > | Priority: normal
| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
| > | Newsgroups: microsoft.public.windows.server.sbs
| > | Path: TK2MSFTNGHUB02.phx.gbl
| > | Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:50683
| > | NNTP-Posting-Host: tk2msftsbfm01.phx.gbl 10.40.244.148
| > | X-Tomcat-NG: microsoft.public.windows.server.sbs
| > |
| > | I have a customer with a branch office, Connected via vpn to the main
| > office.
| > | A couple of days ago we added a second VPN Connection to the the
network
| > from
| > | each office to a third location. Since then we cannot access web
sites
| > from
| > | the workstations or the servers. If i restart RRAS I get internet for
a
| > short
| > | time 5-10 minutes and then it quits again. The network is configured
as
| > | follows:
| > | Main Office
| > | Small business premium 2003 R2
| > | Server IP - Inside 10.145.1.2 /24
| > | Server IP - Outside 10.0.0.10 /24
| > | Primary Gateway 10.145.1.2
| > | DNS - 10.145.1.2
| > |
| > | Branch Office
| > | IP 10.145.2.X
| > | Connects to main office server to server VPN (Windows server 2003 R2)
| > | Server IP 10.145.2.5
| > |
| > | The gateway for the other VPN is 10.145.1.254 & 10.145.2.254
respectivly
| > | this goes through a cisco 501 to a seperate location for account
| > information.
| > |
| > | All the vpn connections appear steady and I can access the companyweb
| > from
| > | both locations. when I access a website i get the following:
| > |
| > | Technical Information (for support personnel)
| > |
| > | Error code: 12206
| > | Background: The page you requested could not be reached.
| > |
| > | I am sure there is a routing issue going on just not sure where the
| > answer
| > | is.
| > |
| > | Thanks for any help / Ideas you can provide
| > | --
| > | Greg Larson
| > | GL Computer Service
| > |
| >
| >
|
Attachment:
GSLNetwork.zip
Description: Binary data
- References:
- RE: ISA Server Error Displaying web pages
- From: Terence Liu [MSFT]
- RE: ISA Server Error Displaying web pages
- From: Greg
- RE: ISA Server Error Displaying web pages
- Prev by Date: re: Follow Up For Microsoft SBS Public Newsgroup Post (Cannot log out of RWW) with Robert Li ( 39859043)
- Next by Date: Re: Microsoft Search
- Previous by thread: RE: ISA Server Error Displaying web pages
- Next by thread: IMAP is working. Is there anything I can do for SMTP to make it more secure?
- Index(es):
Relevant Pages
|
