Persistant VPN using RRAS on Server 2003 and ISA 2006 routing question

What you have is probably a binding order problem.  Go into the network connections area under control panel and at the top there is an "advanced" menu.  Inside you can reorder your nics so your Bresnan comes before Quest.  I beleive there is also a "metric" property on the adapters themselves.

I'm guessing your default gateway is on the quest network - so a packet you want to go to bresnan doesn't go out the first nic because it's the wrong network entirely.  Quest wouldn't match either, but because it has a gateway it tries to route the packet to the gateway and let it handle it and it never gets a chance to try bresnan.

I will give that a try.  makes sense to change the metric too.  You dont think a static route setup in RRAS would be better?

I checked the provider order and bresnan was first.  I set the metric on the bresnan to 1 and the qwest to 2 and the lan to 1.  the results are the same, no packets going out on the bresnan.  I believe this requires a static route to fix.  Thank you very much though for the suggestion, it was worth the try  :)

I am attaching the route table for anyone who may be able to assist me

route-table.bmp

You only need to change the binding order or the metric, you don't need to change both.  I've pasted a screen shot as an example.

Are you trying to get to something that's NOT on the local subnet of bresden?  If so then yes you need a route where the gateway in the route specifies a router on the bresnan network in the interface is the the bresnan IP on your adapter.  But it looks like you have a default gateway specified on ALL your adapters.  I think there's a best practice somewhere that says you should never have multiple default gateways.  In other words the gateway box in your TCP/IP setup should be empty on everything but quest.  Right now, all your traffic is probably going out the first nic in your binding order.  Although if that's Bresnan I'm confused.

From the command line, does a
tracert -d <dest IP address>
give you any hints?

binding-order.jpg

done a tracert, definitely going out the Qwest default internet.  as I said, the provider order has Bresnan 1st, lan 2nd and qwest 3rd.  thinking I should just bye a real router  :)

I have come to find out that MS Persistent VPN using more then 2 adapters, there is no way to set routes without breaking the connection.  I have decided to buy Sonicwall TZ 190's.  thanks for your time.

I've never heard of such a thing.  However, I just realized we were never clear on something.  You're worried about traffic being routed thru the VPN over bresnan I think without confirming the traffic to ESTABLISH the vpn is also going over bresnan.  For example if the server you are VPNing to is y.y.y.y have you made sure you've added a route for y.y.y.y to the bresnan interface?