In his article about VPN client security - Part 1: Split Tunneling Issues, Tom Shinder talks about the use of off-subnet IP addresses to improve the safety of your internal network by assigning the VPN clients off-subnet IP addresses. In this short article I will show you how to implement off-subnet IP addresses without having the limitation you can't use DHCP assigned IP addresses for the VPN clients.
One scenario frequently comes up on the Web boards and mailing list is how to configure a gateway to gateway VPN when one side is running ISA Server and the other side is running only the Windows 2000 RRAS NAT and VPN Server. This is a common scenario for companies who are willing to make the expenditure for a heavy duty firewall at the main office, but only want to provide basic NAT and VPN gateway services at a remote office.
Are you planning on putting together an ISA/VPN sever combo in the near future? If so, you might want to look at the advantages of using DHCP to assign IP addressing information to your VPN clients. Details within!
Are you thinking about using NLB on the external interfaces of your ISA Servers? If so, then check out this article and see how the NLB configuration will affect your Server Publishing Rules.
Featured Links*
Receive all the latest articles by email!
Receive Real-Time & Monthly ISAserver.org article updates in your mailbox. Enter your email below! Click for Real-Time sample & Monthly sample
Become an ISAserver.org member!
Discuss your ISA Server issues with thousands of other ISA Server experts. Click here to join!