cannot ping external IP when connected to VPN

I have a web server at an external host. To connect to it as administrator I
need to be using my office IP address.

This is fine until I am working away from the office.

Then, I can connect to our office via VPN and use the internet but cannot
connect to the external server. I cannot ping the server - when I do the
name and ip is resolved but the request times out.

Any ideas?

Regards

Richard

Steve
Wed Oct 20 18:54:31 CDT 2004

Richard Prossor wrote:

> I have a web server at an external host. To connect to it as
> administrator I need to be using my office IP address.
>
> This is fine until I am working away from the office.
>
> Then, I can connect to our office via VPN and use the internet but
> cannot connect to the external server. I cannot ping the server -
> when I do the name and ip is resolved but the request times out.

You still don't have an "office IP address" if you're working remotely,
whether you establish a VPN or not.

If you can get to the internet while the VPN is connected, then you've
probably removed the "use default gateway on remote network" tick from
the VPN connectoid, which means you're potentially creating a back-door
into your office network. I would strongly recommend that you turn this
back on.

For safe internet access while connected via VPN, you need to configure
your client with either the SBS in your proxy settings (for IE/web
browsers), or use the firewall client.

If you make these changes, *then* you'll be going out to the internet
through the VPN tunnel, and this means you will appear to be on the
office IP address.

--
Steve Foster [SBS MVP]
---------------------------------------
MVPs do not work for Microsoft. Please reply only to the newsgroups.

richard
Mon Oct 25 12:24:41 CDT 2004

Steve

Thanks for your reply. I do have the vpn connectoid ticked and I do
have the proxy settings in IE.

.....but I cannot connect to my remote server

Any other ideas?

Regards

Richard







"Steve Foster [SBS MVP]" <steve.foster@picamar.co.uk> wrote in message news:<xn0dorjdb5kv5ff00u@msnews.microsoft.com>...
> Richard Prossor wrote:
>
> > I have a web server at an external host. To connect to it as
> > administrator I need to be using my office IP address.
> >
> > This is fine until I am working away from the office.
> >
> > Then, I can connect to our office via VPN and use the internet but
> > cannot connect to the external server. I cannot ping the server -
> > when I do the name and ip is resolved but the request times out.
>
> You still don't have an "office IP address" if you're working remotely,
> whether you establish a VPN or not.
>
> If you can get to the internet while the VPN is connected, then you've
> probably removed the "use default gateway on remote network" tick from
> the VPN connectoid, which means you're potentially creating a back-door
> into your office network. I would strongly recommend that you turn this
> back on.
>
> For safe internet access while connected via VPN, you need to configure
> your client with either the SBS in your proxy settings (for IE/web
> browsers), or use the firewall client.
>
> If you make these changes, *then* you'll be going out to the internet
> through the VPN tunnel, and this means you will appear to be on the
> office IP address.

richard
Tue Oct 26 00:15:19 CDT 2004

Is this an ISA issue?

Do I need to set up a protocol rule to allow ping when connected via
VPN to my SBS server?

Richard



richard.prossor@prossor.com (Richard Prossor) wrote in message news:<ffaf0abc.0410250924.101c1bd6@posting.google.com>...
> Steve
>
> Thanks for your reply. I do have the vpn connectoid ticked and I do
> have the proxy settings in IE.
>
> .....but I cannot connect to my remote server
>
> Any other ideas?
>
> Regards
>
> Richard
>
>
>
>
>
>
>
> "Steve Foster [SBS MVP]" <steve.foster@picamar.co.uk> wrote in message news:<xn0dorjdb5kv5ff00u@msnews.microsoft.com>...
> > Richard Prossor wrote:
> >
> > > I have a web server at an external host. To connect to it as
> > > administrator I need to be using my office IP address.
> > >
> > > This is fine until I am working away from the office.
> > >
> > > Then, I can connect to our office via VPN and use the internet but
> > > cannot connect to the external server. I cannot ping the server -
> > > when I do the name and ip is resolved but the request times out.
> >
> > You still don't have an "office IP address" if you're working remotely,
> > whether you establish a VPN or not.
> >
> > If you can get to the internet while the VPN is connected, then you've
> > probably removed the "use default gateway on remote network" tick from
> > the VPN connectoid, which means you're potentially creating a back-door
> > into your office network. I would strongly recommend that you turn this
> > back on.
> >
> > For safe internet access while connected via VPN, you need to configure
> > your client with either the SBS in your proxy settings (for IE/web
> > browsers), or use the firewall client.
> >
> > If you make these changes, *then* you'll be going out to the internet
> > through the VPN tunnel, and this means you will appear to be on the
> > office IP address.

Steve
Tue Oct 26 13:33:02 CDT 2004

Richard Prossor wrote:

> Steve
>
> Thanks for your reply. I do have the vpn connectoid ticked and I do
> have the proxy settings in IE.
>
> .....but I cannot connect to my remote server
>

Can't connect, or can't ping?

Ping's success or failure does not indicate whether another protocol
will succeed or fail. It can be a helpful indicator of where problems
might occur, but in this kind of complicated scenario, I doubt it would
be relevant.

--
Steve Foster [SBS MVP]
---------------------------------------
MVPs do not work for Microsoft. Please reply only to the newsgroups.