Merv
Tue Nov 04 21:33:30 CST 2003
I think you're right on target Les (add remote SBS IP to LAT).
http://groups.google.com/groups?hl=en&lr=&ie=UTF-8&oe=UTF-8&threadm=eRwp%24rklCHA.1864%40tkmsftngp02&rnum=1&prev=/groups%3Fhl%3Den%26lr%3D%26ie%3DUTF-8%26oe%3DUTF-8%26q%3Dhave%2Bto%2Bdisable%2Bfirewall%2Bcleint
--
Merv Porter [SBS MVP]
===================================
"Les Connor [SBS MVP]" <les.connor@cfiveDEL.ca> wrote in message
news:#NDGiO0oDHA.1632@TK2MSFTNGP10.phx.gbl...
> I wish I could remember what I did to be able to vpn and ts (either, or
> both) from behind isa to servers also behind isa.
>
> I think it's this:
>
> 10. addresses on the 'home' sbs. 192. addy's on all remote sbs. Add the
192.
> addy to the lat on the home sbs. Now you can ts from a client box with the
> firewall client enabled.
>
> VPN: All SBS systems set up with separate scope ip pool for VPN, in the
172.
> range. Add that to the home system lat. Now you can vpn and/or ts over vpn
> without disabling the firewall client. (but you can't browse the web while
> the vpn is active).
>
> If you're interested give it a shot, or I can confirm the setup tomorrow.
>
> --
> Les Connor [SBS MVP]
> -------------------------------------
> SBS Rocks !
>
>
>
> ""Peter Gallagher [MSFT]"" <petergal@online.microsoft.com> wrote in
message
> news:UY6l2kzoDHA.2700@cpmsftngxa06.phx.gbl...
> >
> >
> > Hello Jim,
> >
> > Couple of points here:
> > To VPN through ISA, you have to do 2 things:
> > 1. Run the ICW and choose VPN.
> > 2. Allow IP Routing on the properties of the servername in ISA
> Management.
> >
> > #1 above goes against basic ISA stuff, as it opens a packet filter for
VPN
> > on the server. Packet filters only affect stuff on the server, not
> > clients. VPN is the exception to the rule.
> >
> > To TS into a server on the remote network, you will need to disable the
> > firewall client on the local machine.
> >
> > Thanks for posting!!
> >
> > Regards,
> > Peter Gallagher
> > Microsoft Product Support
> > Small Business Server Team
> >
> >
> >
>
>