Hi,

due to an ISP issue I need to temporarily route an external IP address via
the site to site VPN and then out to the Internet. The site to site VPN is
up and running, just not sure how to configure ISA to route one external IP
address via the VPN.

Can it be done? If so can I have the beginners guide please ?

Re: Route an external IP address via site to site vpn by Ray

Ray
Wed Mar 26 09:56:14 PDT 2008

Sorry, some more information SBS 2003 with ISA 2004 and 2 nics.

"Ray Collins" <Ray.Collins@NoSpamBigpond.com> wrote in message
news:uVXiCH2jIHA.1164@TK2MSFTNGP02.phx.gbl...
> Hi,
>
> due to an ISP issue I need to temporarily route an external IP address via
> the site to site VPN and then out to the Internet. The site to site VPN is
> up and running, just not sure how to configure ISA to route one external
> IP address via the VPN.
>
> Can it be done? If so can I have the beginners guide please ?
>
>



Re: Route an external IP address via site to site vpn by v-terliu

v-terliu
Thu Mar 27 02:06:43 PDT 2008

Hello Ray,

Thank you for posting here.

According to your description, I understand that you want to route an
external IP address via the site-to-site VPN, and then out to Internet at
the remote site. If I have misunderstood the problem, please don't hesitate
to let me know.

First, I would like to know what make you to do this. Meanwhile, do you
setup the site-to-site VPN connection thru 2 ISA 2004 servers?

I assume your situation is that: Your local ISP block the traffic to an
external IP, but the remote ISP not. You want to make the traffic to this
IP go to the remote site first, then go to Internet. If this is want you
want to do, I suggest we try the following steps:

We only need to add a static IP route on local ISA server to let the ISA
know the traffic to this IP need go to remote ISA:

Run the following command on local ISA server:
Router add ExternalIP RemoteISAInternalIP

Note: The route will disappear after you restart the local ISA.

If we cannot resolve the issue after we perform the above steps, please
help me collect some information for further investigation:

1. Do you setup the site-to-site VPN connection thru 2 ISA 2004 servers?

2. Let me know the external IP address.

3. Run command "ipconfig /all > c:\ipconfig_sbs_local.txt" and "route print
> c:\route_sbs_local.txt" on local ISA server 2004, send the files
c:\ipconfig_sbs_local.txt and c:\route_sbs_local.txt to me at
v-terliu@microsoft.com

4. Run command "ipconfig /all > c:\ipconfig_sbs_remote.txt" and "route
print > c:\route_sbs_ remote.txt" on remote ISA server 2004, send the files
c:\ipconfig_sbs_ remote.txt and c:\route_sbs_ remote.txt to me at
v-terliu@microsoft.com

I hope these steps will give you some help.

Thanks and have a nice day!

Best regards,

Terence Liu(MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| From: "Ray Collins" <Ray.Collins@NoSpamBigpond.com>
| References: <uVXiCH2jIHA.1164@TK2MSFTNGP02.phx.gbl>
| Subject: Re: Route an external IP address via site to site vpn
| Date: Thu, 27 Mar 2008 03:56:14 +1100
| Lines: 16
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2900.3138
| X-RFC2646: Format=Flowed; Response
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198
| Message-ID: <OszXPJ2jIHA.484@TK2MSFTNGP04.phx.gbl>
| Newsgroups: microsoft.public.windows.server.sbs
| NNTP-Posting-Host: 210-11-144-11.static.netspeed.com.au 210.11.144.11
| Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP04.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:99986
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Sorry, some more information SBS 2003 with ISA 2004 and 2 nics.
|
| "Ray Collins" <Ray.Collins@NoSpamBigpond.com> wrote in message
| news:uVXiCH2jIHA.1164@TK2MSFTNGP02.phx.gbl...
| > Hi,
| >
| > due to an ISP issue I need to temporarily route an external IP address
via
| > the site to site VPN and then out to the Internet. The site to site VPN
is
| > up and running, just not sure how to configure ISA to route one
external
| > IP address via the VPN.
| >
| > Can it be done? If so can I have the beginners guide please ?
| >
| >
|
|
|


Re: Route an external IP address via site to site vpn by Ray

Ray
Thu Mar 27 02:52:08 PDT 2008

Hi, the reason we want to this is that the ISP at site 1 has a problem with
a router on their network. We we try to retrive e-mail the traffic doesn't
get to the e-mail server. We use a different ISP at site 2 and so they
don't have an issue. This is just a tempory route until the ISP gets there
router sorted out. So far it has been broken for 4 days, luckily most of
that was Easter holidays.

The site to site connection is via ISA 2004 at both ends


"Terence Liu [MSFT]" <v-terliu@online.microsoft.com> wrote in message
news:c$3Ign%23jIHA.7148@TK2MSFTNGHUB02.phx.gbl...
> Hello Ray,
>
> Thank you for posting here.
>
> According to your description, I understand that you want to route an
> external IP address via the site-to-site VPN, and then out to Internet at
> the remote site. If I have misunderstood the problem, please don't
> hesitate
> to let me know.
>
> First, I would like to know what make you to do this. Meanwhile, do you
> setup the site-to-site VPN connection thru 2 ISA 2004 servers?
>
> I assume your situation is that: Your local ISP block the traffic to an
> external IP, but the remote ISP not. You want to make the traffic to this
> IP go to the remote site first, then go to Internet. If this is want you
> want to do, I suggest we try the following steps:
>
> We only need to add a static IP route on local ISA server to let the ISA
> know the traffic to this IP need go to remote ISA:
>
> Run the following command on local ISA server:
> Router add ExternalIP RemoteISAInternalIP
>
> Note: The route will disappear after you restart the local ISA.
>
> If we cannot resolve the issue after we perform the above steps, please
> help me collect some information for further investigation:
>
> 1. Do you setup the site-to-site VPN connection thru 2 ISA 2004 servers?
>
> 2. Let me know the external IP address.
>
> 3. Run command "ipconfig /all > c:\ipconfig_sbs_local.txt" and "route
> print
>> c:\route_sbs_local.txt" on local ISA server 2004, send the files
> c:\ipconfig_sbs_local.txt and c:\route_sbs_local.txt to me at
> v-terliu@microsoft.com
>
> 4. Run command "ipconfig /all > c:\ipconfig_sbs_remote.txt" and "route
> print > c:\route_sbs_ remote.txt" on remote ISA server 2004, send the
> files
> c:\ipconfig_sbs_ remote.txt and c:\route_sbs_ remote.txt to me at
> v-terliu@microsoft.com
>
> I hope these steps will give you some help.
>
> Thanks and have a nice day!
>
> Best regards,
>
> Terence Liu(MSFT)
>
> Microsoft CSS Online Newsgroup Support
>
> Get Secure! - www.microsoft.com/security
>
> =====================================================
> This newsgroup only focuses on SBS technical issues. If you have issues
> regarding other Microsoft products, you'd better post in the corresponding
> newsgroups so that they can be resolved in an efficient and timely manner.
> You can locate the newsgroup here:
> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
>
> When opening a new thread via the web interface, we recommend you check
> the
> "Notify me of replies" box to receive e-mail notifications when there are
> any updates in your thread. When responding to posts via your newsreader,
> please "Reply to Group" so that others may learn and benefit from your
> issue.
>
> Microsoft engineers can only focus on one issue per thread. Although we
> provide other information for your reference, we recommend you post
> different incidents in different threads to keep the thread clean. In
> doing
> so, it will ensure your issues are resolved in a timely manner.
>
> For urgent issues, you may want to contact Microsoft CSS directly. Please
> check http://support.microsoft.com for regional support phone numbers.
>
> Any input or comments in this thread are highly appreciated.
> =====================================================
>
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>
> --------------------
> | From: "Ray Collins" <Ray.Collins@NoSpamBigpond.com>
> | References: <uVXiCH2jIHA.1164@TK2MSFTNGP02.phx.gbl>
> | Subject: Re: Route an external IP address via site to site vpn
> | Date: Thu, 27 Mar 2008 03:56:14 +1100
> | Lines: 16
> | X-Priority: 3
> | X-MSMail-Priority: Normal
> | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138
> | X-RFC2646: Format=Flowed; Response
> | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198
> | Message-ID: <OszXPJ2jIHA.484@TK2MSFTNGP04.phx.gbl>
> | Newsgroups: microsoft.public.windows.server.sbs
> | NNTP-Posting-Host: 210-11-144-11.static.netspeed.com.au 210.11.144.11
> | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP04.phx.gbl
> | Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:99986
> | X-Tomcat-NG: microsoft.public.windows.server.sbs
> |
> | Sorry, some more information SBS 2003 with ISA 2004 and 2 nics.
> |
> | "Ray Collins" <Ray.Collins@NoSpamBigpond.com> wrote in message
> | news:uVXiCH2jIHA.1164@TK2MSFTNGP02.phx.gbl...
> | > Hi,
> | >
> | > due to an ISP issue I need to temporarily route an external IP address
> via
> | > the site to site VPN and then out to the Internet. The site to site
> VPN
> is
> | > up and running, just not sure how to configure ISA to route one
> external
> | > IP address via the VPN.
> | >
> | > Can it be done? If so can I have the beginners guide please ?
> | >
> | >
> |
> |
> |
>



Re: Route an external IP address via site to site vpn by v-terliu

v-terliu
Fri Mar 28 04:20:31 PDT 2008

Hello Ray,

Thank you for your update.

Your situation is nearly same as I supposed. You can try the command "route
add" on site 1 ISA server.

If the command unable to resolve your issue, please gather the information
I asked in my previous reply.

Thanks and have a nice weekend!

Best regards,

Terence Liu(MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| From: "Ray Collins" <Ray.Collins@NoSpamBigpond.com>
| References: <uVXiCH2jIHA.1164@TK2MSFTNGP02.phx.gbl>
<OszXPJ2jIHA.484@TK2MSFTNGP04.phx.gbl>
<c$3Ign#jIHA.7148@TK2MSFTNGHUB02.phx.gbl>
| Subject: Re: Route an external IP address via site to site vpn
| Date: Thu, 27 Mar 2008 20:52:08 +1100
| Lines: 140
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2900.3138
| X-RFC2646: Format=Flowed; Original
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198
| Message-ID: <O$TS$A$jIHA.1744@TK2MSFTNGP05.phx.gbl>
| Newsgroups: microsoft.public.windows.server.sbs
| NNTP-Posting-Host: 210-11-144-11.static.netspeed.com.au 210.11.144.11
| Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:100122
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Hi, the reason we want to this is that the ISP at site 1 has a problem
with
| a router on their network. We we try to retrive e-mail the traffic
doesn't
| get to the e-mail server. We use a different ISP at site 2 and so they
| don't have an issue. This is just a tempory route until the ISP gets
there
| router sorted out. So far it has been broken for 4 days, luckily most of
| that was Easter holidays.
|
| The site to site connection is via ISA 2004 at both ends
|
|
| "Terence Liu [MSFT]" <v-terliu@online.microsoft.com> wrote in message
| news:c$3Ign%23jIHA.7148@TK2MSFTNGHUB02.phx.gbl...
| > Hello Ray,
| >
| > Thank you for posting here.
| >
| > According to your description, I understand that you want to route an
| > external IP address via the site-to-site VPN, and then out to Internet
at
| > the remote site. If I have misunderstood the problem, please don't
| > hesitate
| > to let me know.
| >
| > First, I would like to know what make you to do this. Meanwhile, do you
| > setup the site-to-site VPN connection thru 2 ISA 2004 servers?
| >
| > I assume your situation is that: Your local ISP block the traffic to an
| > external IP, but the remote ISP not. You want to make the traffic to
this
| > IP go to the remote site first, then go to Internet. If this is want you
| > want to do, I suggest we try the following steps:
| >
| > We only need to add a static IP route on local ISA server to let the ISA
| > know the traffic to this IP need go to remote ISA:
| >
| > Run the following command on local ISA server:
| > Router add ExternalIP RemoteISAInternalIP
| >
| > Note: The route will disappear after you restart the local ISA.
| >
| > If we cannot resolve the issue after we perform the above steps, please
| > help me collect some information for further investigation:
| >
| > 1. Do you setup the site-to-site VPN connection thru 2 ISA 2004 servers?
| >
| > 2. Let me know the external IP address.
| >
| > 3. Run command "ipconfig /all > c:\ipconfig_sbs_local.txt" and "route
| > print
| >> c:\route_sbs_local.txt" on local ISA server 2004, send the files
| > c:\ipconfig_sbs_local.txt and c:\route_sbs_local.txt to me at
| > v-terliu@microsoft.com
| >
| > 4. Run command "ipconfig /all > c:\ipconfig_sbs_remote.txt" and "route
| > print > c:\route_sbs_ remote.txt" on remote ISA server 2004, send the
| > files
| > c:\ipconfig_sbs_ remote.txt and c:\route_sbs_ remote.txt to me at
| > v-terliu@microsoft.com
| >
| > I hope these steps will give you some help.
| >
| > Thanks and have a nice day!
| >
| > Best regards,
| >
| > Terence Liu(MSFT)
| >
| > Microsoft CSS Online Newsgroup Support
| >
| > Get Secure! - www.microsoft.com/security
| >
| > =====================================================
| > This newsgroup only focuses on SBS technical issues. If you have issues
| > regarding other Microsoft products, you'd better post in the
corresponding
| > newsgroups so that they can be resolved in an efficient and timely
manner.
| > You can locate the newsgroup here:
| > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
| >
| > When opening a new thread via the web interface, we recommend you check
| > the
| > "Notify me of replies" box to receive e-mail notifications when there
are
| > any updates in your thread. When responding to posts via your
newsreader,
| > please "Reply to Group" so that others may learn and benefit from your
| > issue.
| >
| > Microsoft engineers can only focus on one issue per thread. Although we
| > provide other information for your reference, we recommend you post
| > different incidents in different threads to keep the thread clean. In
| > doing
| > so, it will ensure your issues are resolved in a timely manner.
| >
| > For urgent issues, you may want to contact Microsoft CSS directly.
Please
| > check http://support.microsoft.com for regional support phone numbers.
| >
| > Any input or comments in this thread are highly appreciated.
| > =====================================================
| >
| > This posting is provided "AS IS" with no warranties, and confers no
| > rights.
| >
| > --------------------
| > | From: "Ray Collins" <Ray.Collins@NoSpamBigpond.com>
| > | References: <uVXiCH2jIHA.1164@TK2MSFTNGP02.phx.gbl>
| > | Subject: Re: Route an external IP address via site to site vpn
| > | Date: Thu, 27 Mar 2008 03:56:14 +1100
| > | Lines: 16
| > | X-Priority: 3
| > | X-MSMail-Priority: Normal
| > | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138
| > | X-RFC2646: Format=Flowed; Response
| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198
| > | Message-ID: <OszXPJ2jIHA.484@TK2MSFTNGP04.phx.gbl>
| > | Newsgroups: microsoft.public.windows.server.sbs
| > | NNTP-Posting-Host: 210-11-144-11.static.netspeed.com.au 210.11.144.11
| > | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP04.phx.gbl
| > | Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:99986
| > | X-Tomcat-NG: microsoft.public.windows.server.sbs
| > |
| > | Sorry, some more information SBS 2003 with ISA 2004 and 2 nics.
| > |
| > | "Ray Collins" <Ray.Collins@NoSpamBigpond.com> wrote in message
| > | news:uVXiCH2jIHA.1164@TK2MSFTNGP02.phx.gbl...
| > | > Hi,
| > | >
| > | > due to an ISP issue I need to temporarily route an external IP
address
| > via
| > | > the site to site VPN and then out to the Internet. The site to site
| > VPN
| > is
| > | > up and running, just not sure how to configure ISA to route one
| > external
| > | > IP address via the VPN.
| > | >
| > | > Can it be done? If so can I have the beginners guide please ?
| > | >
| > | >
| > |
| > |
| > |
| >
|
|
|