July 25, 2008 05:39pm pdt

1. RobWill 301,172
2. batry_boy 235,234
3. lrmoore 135,928
4. arnold 115,903
5. mwecom... 65,324
6. dpk_wal 61,745
7. mkielar 42,800
8. ebjers 41,050
9. MrHusy 39,470
10. Voltz-dk 32,970
11. Cyclops3... 32,340
12. TechSoEasy 28,114
13. keith_ala... 27,046
14. trinak96 26,165
15. Qlemo 23,933

1. RobWill 1,454,065
2. lrmoore 936,671
3. batry_boy 409,944
4. grblades 214,434
5. rsivanandan 146,541
6. arnold 117,903
7. dpk_wal 114,745
8. calvinetter 112,055
9. TechSoEasy 101,193
10. mwecom... 83,124
11. keith_ala... 81,885
12. tim_holman 75,964
13. MrHusy 72,744
14. ewtaylor 68,324
15. Cyclops3... 68,285

09.04.2007 at 09:11PM PDT, ID: 22807131

	[x] Attachment Details

[x]

The Solution Rating System

With so many solutions, how can you tell which solutions are most likely to help you and which ones are not? To provide you with a tool to use, we rate our solutions based on various elements that most accurately determine if a solution is a quality solution. To explain what factors affect the solution rating, here are the elements we take into consideration when formulating our solution rating.

The Grade of the Solution
The Zone Rank of the Expert Providing the Solution
The Number of Author and Expert Comments
The Number of Experts Contributing
The Feedback of the Community

Your Input Matters
Because of the way the system is set up, the most important variable in this equation is you. As a member of Experts Exchange, you are able to cast your vote on the quality of the solutions in regard to how complete, accurate, helpful and easy to understand each solution is. When you provide your feedback, each rating is adjusted accordingly. So, if you see a solution that has a poor rating that you think is a good solution, let us know by rating it. As you do, the rating will be adjusted and will become more accurate for other members of our site.

If you have any suggestions that you would like to make for our rating system, please ask a question in the Suggestions Zone of Community Support.

Thank you!

7.6

SBS2003, ISA2004

Zones: Virtual Private Networking (VPN), SBS Small Business Server, MS Internet Security & Accel

Tags: SBS2003, ISA2004

I am now completely stumped with a VPN connection.

I have SBS2003 with ISA2006 at one end (Branch Office), and SBS2003/ISA2004 (Head Office) at the other. I can create a site-to-site connection from the Head Office to the Branch Office - works a treat once approriate rules were put in place. However, no matter what I do or how hard I try, I cannot get a connection through from the Branch to the Head Office (which is the one I need.)

Whenever I dial (either a RAS connection or by using the site-to-site creation wizard) the Head Office, I get an Error 628 disconnect. On the other hand, if I dial from a client at the Head office to the Head Office server, I can get a connection. I figure at lease the VPN end of the server is working.

I can connect from Branch to Home, so I guess I understand what I am trying to do.

The variables therefore seem to be the routers on either end. I have used the PPTP passthrough and checked the Port 1723 and GRE are opened. Using the Microsoft Windows Network Monitor, I can see the GRE packets at the Head Office Network, so I don't think I am blocking them. Just to be safe, I put the server in the DMZ in the hope that this would work. No luck.

I can telnet 1723, so I know that it is open. ISA logs show the packets being received, and then the connection is closed.

I have tried multiple users, ensuring that all are checked for dial in access.

Experience tells me that I am doing something really dumb, and have just spent the last how many hours going nowhere.

The setup is essentially:

Head Office
Private Adapater - 192.168.0.0-192.168.0.255 (server 192.168.0.21)
Public Adapter: 10.0.0.1 (server 10.0.0.21)
Router: Dlink DSL G604T - it makes the ADSL connection etc

Branch Office
Private Adapter: 192.168.1.0 - 192.168.1.255 (server 192.168.1.21)
Public Adapater: 172.16.0.0 - 172.16.0.255 (server 172.16.0.1)

The biggest clue I have so far is messed up routing. When I look at the public network on the Head Office Side, and I chose Add Adapter, I would have thought I would get only 10.0.0.0-10.0.0.255 plus loopback addresses etc. Instead, I get just about every address known to the universe. If I remove them and just use the 10.0.0.0 range, I lose external access to my web server on ports 80 and 443.
Router: billion 7404VGP 172.16.0.1

I would grately welcome any assistance possible in working out what on earth to do next.

Thanks

Start your free trial to view this solution

Question Stats

Zone: Software

Question Asked By: GillianBeaumontLegal

Solution Provided By: TechSoEasy

Participating Experts: 2

Solution Grade: A

Translate:

Loading Advertisement...

20080236-EE-VQP-29 / EE_QW_2_20070628