ISA/Server VPN Client Connection Problems

[vickyd33]

Need help with VPN setup. Here is an example of the network.

The network is composed of 3 Windows 2000 domain controllers and a member server, the internal network id is 207.210.50.0.

The ISA/VPN Server has 2 NICs, one internal to the local domain and one external to the Internet.

There is a Cisco router firewall as well. (All protocols/ports have been set on the router and ISA firewall to allow vpn client connections) (47/1723,500,51,50,1701)

Problems:

1. When I enable RRAS, the server seems to be cut off from the network, no other internal systems can connect to it.

2. The VPN Client can connect to the VPN Server and seems to be authenticated in the domain, but can’t connect to nothing else. The client gets the address as follows:

VPN Client
IP: ex 207.210.50.15
Subnet mask 255.255.255.255
Gateway: 207.210.50.15
DNS: 207.210.50.35
WINS: 207.210.50.30

The VPN Client can ping the local and the external address of the VPN Server as well as browse the shares, but that’s it.

I’m not sure what else is there for me to check. I’ve gone through most of the forums and configured the network and ISA/VPN as I should have. I even tried using LMHOSTS files to locate the servers and hosts as well as added a WINS Server , but nothing seems to work.


Please HELP?

 

[ChicagoTechNet]

many possiblities. make sure the ip routing is enabled; check the NAT settings.

Robert Lin, MS-MVP, MCSE & CNE
Windows, Network, Internet, VPN, Routing and How to at

http://www.ms-mvps.com

 

[vickyd33]

IP routing is enabled. What NAT settings are you referring to, SecureNAT on ISA?

 

[tdenitti]

I'll agree with vickyd33. IP routing and packet filtering should be handled by ISA. RRAS should be decommisioned. ISA is more secure and will handle the traffic more efficiently.