Re: VPN with Exchange issue

Thanks Kevin & all who replied, I am new to the list and was not aware 
of the 'reply directly to responder' rule. Since this contains new 
information, I am sure it will hit the list and I wanted everyone to 
know I was grateful.

I recently discovered that the client is using the Netscreen VPN client 
and I do not see anywhere I can specify a route or the execution of a 
batch file. If I replace the Netscreen startup with a batch file, will 
that do the same thing?

Thanks in advance,
Paul

Hart, Kevin wrote:
> Paul, 
> 
> If the destination IP address is in the same subnet as the hotel assigned IP
> address, the client is going to ARP on the local network to find the
> Exchange server unless you assign a discrete route to the remote Exchange
> server with a 32 bit mask. 
> This problem does occur with the Shiva product, but it also occurs with the
> Cisco VPN as well. I've been able to get around it by adding a route to the
> client's machine with a destination IP address of the Exchange server on the
> remote LAN and a gateway pointing to the DHCP assigned address on the VPN
> client.
> 
> For Example:
> 
> Local IP address assigned at hotel: 192.168.1.32
> VPN assigned IP address: 192.168.50.30
> Remote address of Exchange Server: 192.168.1.5
> 
> Route Statement: Route add 192.168.1.5 mask 255.255.255.255 192.168.50.30 
> 
> You will probably need to add routes for your remote DNS and WINS server in
> the same fashion.
> 
> This is definitely a cumbersome process, but it does work. If anyone has
> better ideas or solutions, I'd like to hear them.
> 
> Thanks,
> Kevin
> 
> 
> 
> 
> -----Original Message-----
> From: Dube, Paul [mailto:[email protected]] 
> Sent: Tuesday, November 30, 2004 8:14 PM
> To: [email protected]
> Subject: [VPN] VPN with Exchange issue
> 
> Greetings all,
> I have a client that is presenting me with a new issue for which I do 
> not yet have all the facts. I will be on site tomorrow and hope to at 
> least get those. However, from what I have gathered so far, they are 
> using Outlook and Exchange with a custom developed application using 
> public folders. The data in the public folders must be available when 
> not connected so it must use the 'available offline' aspect of that 
> combination.
> I am not completely familiar with Outlook/Exchange but I believe that 
> this synchronization of content only transpires when using the native 
> connect mode which is not commonly available without a VPN. My client is 
> using the Shiva VPN client to connect to the LAN and access the Exchange 
> server. The issue arises when they are in a hotel or other location with 
> a LAN in the same subnet (192.169.1.255) and there is a machine on the 
> LAN at the same IP address as the exchange server on the corporate LAN.
> I am wondering if simply putting the Exchange server on an IP unlikely 
> to be assigned to a machine on another LAN, using a reserved address and 
> 1-1 NAT, or routing the connection over an SSH redirect would be a 
> workable solution. I am also wondering if the issue only arises due to 
> an oversight in initial implementation and the Shiva VPN can be 
> configured to route all requests on the specified ports over the VPN to 
> a remote machine, ignoring any local machine with the same IP address.
> 
> Thank in advance,
> Paul Dube
> 	
> Paul Dube <[email protected]>
> _______________________________________________
> VPN mailing list
> [email protected]
> http://lists.shmoo.com/mailman/listinfo/vpn
>

_______________________________________________
VPN mailing list
[email protected]
http://lists.shmoo.com/mailman/listinfo/vpn

begin:vcard
fn:Paul Dube
n:Dube;Paul
adr:;;68 Radtke Road;Randolph;NJ;07869-3813;USA
email;internet:[email protected]
tel;home:973.537.7017
tel;cell:973.886.4889
note;quoted-printable:i-Name:=0D=0A=
	=0D=0A=
	HTML Link/HTML Link Code=0D=0A=
	=3Dpaul.dube=0D=0A=
	<a href=3D"http://public.xdi.org/=3Dpaul.dube">=3Dpaul.dube</a>=0D=0A=
	=0D=0A=
	Plain Text Link=0D=0A=
	http://public.xdi.org/=3Dpaul.dube=0D=0A=
	=0D=0A=
	Reachable via SIP:=0D=0A=
	011 0 393 225562 from Vonage=0D=0A=
	225562  FWD (226598)=0D=0A=
	0451  225562 from Packet8=0D=0A=
	1(700)9 225562 from Asterisk Exchange (IAXTEL)=0D=0A=
	**393 225562 from IConnectHere, CallUK, IPTel, InterViVo=0D=0A=
	PaulDube Skype=0D=0A=
	Reachable via IM:=0D=0A=
	PaulRDubeJr - AIM=0D=0A=
	162492218 - ICQ=0D=0A=
	PaulDube - Yahoo=0D=0A=
	[email protected] - MSNM=0D=0A=
	PSTN:=0D=0A=
	973-886-4889 cell=0D=0A=
	973-537-7017 home =
	=0D=0A=
	877-780-9920 business voicemail=0D=0A=
	877-780-9920 Fax=0D=0A=
	FWD SIP User Name: 226598=0D=0A=
	
x-mozilla-html:FALSE
url:http://www.pauldube.net
version:2.1
end:vcard