Solved

ZyWall 5 and ISA server

Posted on 2009-04-01
1
496 Views
Last Modified: 2012-05-06
Hi All,

I want to add a ISA server to our network to control my users access to the internet and to secure our network against intruders.
That is working ok.

The tricky part is that we also have some remote offices which connect to the main office through IPSec VPN.

Today we have a ZyWall 35 in the main office and a ZyWall 5 in the branch offices. The ZyWall 5 is then establishing the IPSec VPN connection to the ZyWall 35.

All our LAN users in the main office is behind the ZyWall 35, and using this as the gateway.

We want to change the gateway for our office users to the ISA server, and still be able to connect to the users behind the VPN in the branch office.

How can we transform our current network setup into a working setup using a ISA in main office and the ZyWall 5 in branch offices as VPN Clients and if necessary the ZyWall 35 in main office?

Today working network:
Main office:
LAN Network: 192.168.1.0/255.255.240.0
ZyWall 35 LAN IP: 192.168.1.1
ZyWall 35 WAN IP: 80.x.x.20

Branch Office:
LAN Network: 192.168.51.0/255.255.240.0
ZyWall 5 LAN IP: 192.168.51.1

I hope I make myself clear, and your are able to give me a solution. If I am unclear in some parts please ask me for more information.
0
Comment
Question by:munchiman
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 

Accepted Solution

by:
munchiman earned 0 total points
ID: 24057177
Hi All,

I have found out of some things on my own:

- According to Zyxel support it is not possible to connect a ZyWall to a ISA Server VPN.
- It is not possible either to have a ZyWall behind the ISA, operating in Router or bridge mode, the ZyWall need to have its own link to the internet.

We solved the issue by adding the ZyWall to the internet too, give it an externally IP address, and then add some route tables to the ISA server to route all VPN-traffic correct. (since all equipment has the ISA server as primary gateway)
0

Featured Post

Manage your data center from practically anywhere

The KN8164V features HD resolution of 1920 x 1200, FIPS 140-2 with level 1 security standards and virtual media transmissions at twice the speed. Built for reliability, the KN series provides local console and remote over IP access, ensuring 24/7 availability to all servers.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

How to set-up an On Demand, IPSec, Site to SIte, VPN from a Draytek Vigor Router to a Cyberoam UTM Appliance. A concise guide to the settings required on both devices
Envision that you are chipping away at another e-business site with a team of pundit developers and designers. Everything seems, by all accounts, to be going easily.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

623 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question