ISA 2006 VPN Connection

I've set-up a VPN connection using ISAs wizards and have managed to connect my laptop to the VPN and obtain an IP address via DHCP. I cannot however access any machines on the internal network nor has the DHCP given out the correct default gateway of the internal network, IPCONFIG shows default gateway as 0.0.0.0. Any ideas what could be wrong?
EdMacFlyAsked:
Who is Participating?

[Webinar] Streamline your web hosting managementRegister Today

x
 
Hisham_ElkouhaConnect With a Mentor Commented:
try creating a new rule that allow connection from VPN clients and Local host to Internal Network
0
 
EdMacFlyAuthor Commented:
As a further note, the machine that is connecting is a Windows 7 machine. Also, within the ISA Alerts, it appears that the VPN connection has triggered an IP spoofing warning.
0
 
Mohamed KhairyEnterprise Solutions ArchitectCommented:
Did you create the firewall policy that enable the communication from VPN network to Internal network?

Also, Go to networking and tell me what is the network rule relation on the VPN network rule.


VPN-Policy.jpg
VPN-NETWork.jpg
0
SMB Security Just Got a Layer Stronger

WatchGuard acquires Percipient Networks to extend protection to the DNS layer, further increasing the value of Total Security Suite.  Learn more about what this means for you and how you can improve your security with WatchGuard today!

 
EdMacFlyAuthor Commented:
Both the rule and policy look the same as your screenshots.
0
 
Mohamed KhairyEnterprise Solutions ArchitectCommented:
Ok, make confirm that you can ping the internal network from the localhost.

Also, try to change the DHCP option on the ISA server to be taken from static address range.

0
 
EdMacFlyAuthor Commented:
I cannot ping from the VPN client. Should I try setting a static address or has that revealed the problem?
0
 
EdMacFlyAuthor Commented:
That's done it! Excellent. After connecting I could ping the ISA box using it's name but I could not ping the DC using it's name nor could I connect to it without using it's IP address. Any idea why that information is not getting through?
0
 
Mohamed KhairyEnterprise Solutions ArchitectCommented:
I can see from the previous steps that the error may be in the DHCP, you said that you can successfuly taking an Ip address from the DHCP and the error in the default gateway so we can make one more check on the DHCP options as follow:

Go to the DHCP and open the scope that you were assigned before to the VPN users and check the scope option for router ( optionn 003 ) and make confirm that the correct GW is available.

0
 
Mohamed KhairyEnterprise Solutions ArchitectCommented:
Also check the DNS setting on the DHCP scope options.
0
 
EdMacFlyAuthor Commented:
Right! I've checked those points and everything seems fine. I can now access internal resources so that is good and have also found that I can make an rdp connection to the DC using it's FQDN rather than just it's name which is fine.
0
All Courses

From novice to tech pro — start learning today.