Crewy

Hi can anyone help me.

I am running SBS 2000 with all relevant service packs and I am trying to set up a VPN connection for a remote user. Everytime I go to the VPN wizard to set up the service it asks whether I would like to start the Routing and Remote Access Service, to which I reply yes and the service starts. BUT............Once the service starts the log fills up with the following message.......

A Demand Dial connection to the remote interface xxx failed to be initated succesfully. The following error occurred: The interface credentials have not been set.

but I cant find any help on how to fix this. The Log fills up with this message and access to the server in question is denied to all users. The only way I can allow users on the network back on the server is to stop the service. I have followed the online instructions as per the Microsoft site and I have a copy of the SBS 2000 resource kit which details the same instructions. Both of which do the same.

I am running ISA Server 2000 and have an ADSL connection.

Anyone got any ideas?

Thanks

Crewy

Lust4Life

Kev,

Are you using RRAS packet filtering?

ISA server has packet filtering so you should make sure you are not using the RRAS packet filtering to control inbound and outbound access to and from the external interface of the ISA Server.

I'll have a dig round to see if I can find anything else.

Phil

Puff The Magic Wagon!

iTrader: (2)

Are you running 2 NICs? Need to ideally have 1 facing internal & 1 external, to which RAS binds.

VPN also needs to be "allowed" in ISA

Lust4Life

Try here as well

http://isaserver.org/articles/isa200...oymentkit.html

Phil

Crewy

Phil,

Me ole mucker, how goes it? You up for a chinky on Friday?
I have two cards is that the problem?

Cheers

Crewy

Lust4Life

Two cards are better than one but you might need to make sure you've got no overlap between RRAS and ISA in terms of controlling access.

This is an article about allowing outbound VPN connections but it makes some good points

http://www.tacteam.net/isaserverorg/...boundnat-t.htm

I'll be there on Friday

Phil

Crewy

Cheers Phil,

I will take a look, As there is only one person accesing the network (LB) then would PC Anywhere be any good? As VPN is a little techincal for me. And everytime i turn the F****er on all the clients fall off the network?

Cheers

Kev

Lust4Life

PC Anywhere would be cool.

You would have to connect him to one of your Public IP's and NAT it internally to his machine.

You would also have to allow the incoming connection in ISA server.

I would consider using custom port as well rather than the defaults.

This would probably be better for LB as you won't have to worry about data divergence.

Phil

Crewy

Phil,

If I were to use terminal services instead as its only email and some files. Is it ok to instal Office on a server?

Cheers

Kev

Lust4Life

Email me offline Kev.

Phil

Crewy

where are you

Lust4Life

Use my Frog address.

Phil

noodlez

Can anyone join in this ?

Lust4Life

Feel free if you know what the problem is

Phil