Ipsec between Windows 2000 Isa server and 3rd part firewall

[anerikkehvadderskals]

Hi,

I'm trying to set up a ipsec tunnel between a Windows 2000 Isa server and a firewall called Q-networks. The tunnel is running and by port sniffing a client on my subnet I can see that a Ping request from the other subnet can reach my client(so the tunnel seems to be working). And the client replies but it all stops at my ISA/windows 2000 mashine. The w2000 server dosent now how to route it to the "unknown" subnet. How do I tell it where to go. My internal sub is 192.168.0.0 and ext 212.x.x.0 The sub I want my client to talk to is 172.23.246.224 throug the qnetworks firewall at 62.x.x.x. How do I get the windows 2000 server to route the clients answer to the 172 subnet.

HELP!

Tia

LC

 

[anerikkehvadderskals]

Hi,

I found a solution to the problem. There is no solution :-(
You cannot have a pure IPsec tunnel on and Isa server. It must be with l2tp.

/LC