Anyway to get an IPSec VPN connection through a Microsoft Proxy Server 2.0?
Closest I have got to getting VPNs through is by creating a PPTP Client on the server and allowing the network to use the connection.
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Thanks JJ2 but,
http://support.microsoft.c
Is not applicable in this situation
http://support.microsoft.c
Good article, had already throughly read it, but it applys to PPTP not IPSec
http://www.isaserver.org/a
Only applys to ISA, which I can quite happily get working.
Just to re-iterate I am trying to get an IPSec VPN through a Proxy Server with Packet Filtering enabled.
You are aware that IPSEC through a proxy based connection will not work because the Proxy will reject the return packets.
A cisco VPN client will fail with VPNStart callback failed "CM_IKE_ESTABLISH_FAIL
I took this info from the CISCO site:
Introduction
This document describes how to configure IP Security (IPSec) over Transmission Control Protocol (TCP), which enables a VPN Client to operate in an environment in which standard Encapsulating Security Protocol (ESP, Protocol 50) or Internet Key Exchange (IKE, User Datagram Protocol (UDP) 500) cannot function, or can function only with modification to existing firewall rules. IPSec over TCP encapsulates both the IKE and IPSec protocols within a TCP packet, and it enables secure tunneling through both Network Address Translation (NAT) and Port Address Translation (PAT) devices and firewalls.
Note: IPSec over TCP does not work with proxy-based firewalls.
IPSec over TCP works with both the VPN Software Client and the VPN 3002 Hardware Client. It is a client to concentrator feature only. It does not work for LAN-to-LAN connections.
The VPN 3000 concentrator can simultaneously support standard IPSec, IPSec over TCP, and IPSec over UDP, depending on the client with which it is exchanging data.
The VPN 3002 Hardware Client, which supports one tunnel at a time, can connect using standard IPSec, IPSec over TCP, or IPSec over UDP.
Does this sound like your situation?
Mike
Sort of Mike,
The above documentation states "or can function only with modification to existing firewall rules", basically I know how to get IPSec clients through an ISA Server as I have lots of flexibility with the rules,protocols and packet filters.
But I don't know how to get it working on Microsoft Proxy Sever 2, so I am looking for help on how to Configure Microsoft Proxy Server 2 to allow IPSec.
Thanks
Mark
The Cisco VPN will not work across MSProxy. (If it is the cisco vpn client you are using). There have been other requests for this also (http://www.experts-exchan
Its not the Cisco VPN Client, but I expect one IPSec client is much like another. I had spotted that article on EE, I tend to search here first, and ask question if answer not found.
I have tried applying the ISA Packet Filter rules to the Proxy but it doesnt make any difference.
I think I will give up and not just use PPTP from the server.
I though it was worth asking again in case anyone had got it working.
Business Accounts
Answer for Membership
by: JJ2Posted on 2004-01-22 at 06:06:52ID: 10173801
http://support.microsoft.c
http://support.microsoft.c
http://www.isaserver.org/a