In the console tree of ISA Server Management, click
Virtual Private Networks (VPN).
On the Tasks tab, click Define Address
Assignments.
On the Address Assignment tab, select one of the
following options:
Static address pool. To assign static addresses to the
remote VPN gateway or the remote VPN clients.
Dynamic Host Configuration Protocol (DHCP). To assign
addresses to the remote VPN gateway or the remote VPN clients
dynamically.
If you select Static address pool, do the following:
Click Add.
For ISA Server 2006 Enterprise Edition, in Select the
server, select the array member for which you are defining the
static address pool.
In Start address, type the first address in the range of
addresses to assign to the VPN clients.
In End address, type the last address in the range of
addresses to assign to the VPN clients.
In Use the following network to obtain DHCP, DNS and WINS
services, select the network on which the name resolution
servers are located.
Click Advanced. Then, do the following:
In Name Resolution, select one of the following:
Obtain DNS server addresses using DHCP configuration.
Select this option if VPN clients should obtain the DNS server by
using a DHCP configuration.
Use the following DNS server addresses. Select this
option to provide the static IP address of the DNS server that VPN
clients should use for name resolution.
If you select Use the following DNS server addresses, in
Primary, type the IP address of a DNS server located on the
Internal network that the VPN clients can use to resolve names on
the Internal network. In Backup, type the IP address of a
DNS server located on the Internal network that the VPN clients can
use to resolve names on the Internal network, when the primary DNS
server is not available.
Select one of the following:
Obtain WINS server addresses using DHCP configuration.
Select this option if VPN clients should obtain the WINS server by
using a DHCP configuration.
Use the following WINS server addresses. Select this
option to provide the static IP address of the WINS server that VPN
clients should use for name resolution.
If you select Use the following WINS server addresses,
in Primary, type the IP address of a WINS server located on
the Internal network that the VPN clients can use to resolve names
on the Internal network. In Backup, type the IP address of a
WINS server located on the Internal network that the VPN clients
can use to resolve names on the Internal network, when the primary
DNS server is not available.
Notes
To open ISA Server Management, click Start, point to
All Programs, point to Microsoft ISA Server, and then
click ISA Server Management.
For ISA Server 2006 Enterprise Edition, expand
Microsoft Internet Security and Acceleration
Server 2006, expand Arrays, expand
Array_Name, and then click Virtual Private
Networks (VPN).
For ISA Server 2006 Standard Edition, expand Microsoft
Internet Security and Acceleration Server 2006, expand
Server_Name, and then click Virtual Private
Networks (VPN).
Important
Routing and Remote Access users are not supported.
The remote IP address range specified in the wizard must
exactly match the network definition and subnet mask on the remote
site.
For Enterprise Edition, if you select Static address
pool, for remote site networks, you must create a static
address pool on each array member.
For Enterprise Edition, DHCP cannot be used on arrays with more
than one member server.
For Enterprise Edition, addresses assigned through Active
Directory (on the Dial-in tab of the user properties in
Computer Management) cannot be used on arrays with more than one
member server.
In ISA Server Enterprise Edition, you can configure ISA Server
to use a DHCP server to assign IP addresses for VPN remote clients
only for single-server arrays. Use static pool address assignment
whenever there are multiple array members, by selecting the Use
the following DNS server addresses. option.