Link to home
Create AccountLog in
Avatar of TRBR
TRBR

asked on

Cannot connect to Exchange OWA over Cisco Site to Site VPN

Hello,

I am unable to access Exchange OWA from a remote office connected to main office via a Cisco site to site VPN.
Exchange 2013 sever is located at main office on a 192.168.0.0 /24 subnet.
Remote office is on a 10.0.0.0 /24 subnet.
Cisco 860 router each end with IPSEC VPN.
Each office has own AD domain, DNS secondary zones for the alternate office are configured at each other office.
I can successfully ping the FQDN of the Exchange server from the remote office and it resolves to the Exchange server's local IP address on the 192.168.0.0 /24 subnet.
I can connect from the remote office to other devices located at the main office via TLS/SSL no problem.
OWA is working fine from main office connecting locally and every where else via Internet.
When I try to open OWA at the remote office I just get a Page cannot be displayed error.
What should I be looking at to resolve this issue?

Thanks in advance...
Avatar of BlueYonder
BlueYonder

From the command prompt run the following.  Replace OWA with the email server name.  The trace will stop at the problem network device.

tracert OWA
Avatar of TRBR

ASKER

The trace completes successfully to the Exchange server from the remote site
Hi,

Let me know first, thats exactly error that you are gettign while accessing OWA from remote site .

Thank You!
Avatar of TRBR

ASKER

I just get the standard "This page can't be displayed" in Internet Explorer 10
I can connect from the remote site to web interfaces of other devices at the main site using https no problem.
Avatar of kevinhsieh
I think you need to add a NAT exception to the outside interface of the ASA so that it doesn't NAT the exchange server when sending traffic to the remote site through the outside interface.
Avatar of TRBR

ASKER

I've just rechecked the config of the router and it does look to me that a NAT exemption is in place for the 192.168.0.0 /24 subnet when the destination is the 10.0.0.0 /24 subnet

These are a pair of 800 series routes that were given a basic config with Cisco Configuration Professional
ASKER CERTIFIED SOLUTION
Avatar of TRBR
TRBR

Link to home
membership
Create an account to see this answer
Signing up is free. No credit card required.
Create Account
Avatar of TRBR

ASKER

.