How an ISA Server 2000 Configuration Migration Works in Visual C#

Generate QR-Code in Visual C# How an ISA Server 2000 Configuration Migration Works

When you perform an ISA Server configuration migration, you install ISA Server 2004 and then migrate the ISA Server 2000 configuration to the new ISA Server computer. To migrate the ISA Server 2000 configuration to ISA Server 2004, complete the following high-level steps: 1. Run the ISA Server Migration Wizard on the ISA Server 2000 computer. The wizard creates an .xml file with the configuration information. 2. If you are moving ISA Server to another server, install ISA Server 2004 on the new server. If you are installing ISA Server 2004 on the same server, completely uninstall ISA Server 2000 and then install ISA Server 2004. 3. Import the .xml file to the ISA Server 2004 computer. Before you import the .xml file, perform a full backup of the current settings on the ISA Server 2004 computer.

The actual IP address of the external network adapter on the original ISA Server 2000 computer is saved in the .xml file with the configuration information. If ISA Server 2004 is installed on a different computer, you must correct the IP address after you import the .xml file.

When you perform a configuration migration, the ISA Server 2000 configuration is migrated with the same limitations as when you perform an in-place upgrade.

2-38

2

If you have a Windows Server computer providing VPN access through RRAS, you can upgrade some of the VPN settings to ISA Server 2004. If you install ISA Server 2004 on a server running RRAS, the VPN configuration is migrated into ISA Server automatically. The server does not need to be running ISA Server 2000. You can also use the ISA Server Migration Wizard to migrate the RRAS settings to a new installation of ISA Server 2004. When you upgrade RRAS to ISA Server 2004, the following limitations apply:

The maximum number of remote VPN clients allowed to connect to ISA Server 2004 is set to whichever is larger on RRAS: the number of Point-to-Point Tunneling Protocol (PPTP) ports or the number of L2TP ports. If the number of IP addresses statically assigned is smaller than the number of VPN clients, the number of VPN clients is reduced to fit the size of the static address pool. Pre-shared keys configured for RRAS and for site-to-site connections are not exported. If an invalid IP address is configured for the DNS or WINS servers, the addresses are not exported. The DHCP settings are used instead, and a warning message is issued. If a site-to-site connection on RRAS is configured as PPTP first (and then L2TP), it is upgraded to a remote site network on ISA Server 2004 that uses PPTP only. If a site-to-site connection on RRAS is configured as L2TP first (and then PPTP), it is upgraded to a remote site network on ISA Server 2004 that uses L2TP only. Credentials configured for site-to-site connections in Routing and Remote Access are not exported. On ISA Server 2004, outgoing VPN connections are disabled until you reconfigure them.

Application filters and Web filters supplied by third-party vendors for ISA Server 2000 are not compatible with ISA Server 2004. Some third-party vendors have created new versions for ISA Server 2004. To upgrade to the new versions, uninstall the application filters and Web filters from the ISA Server 2000 computer. Then perform the upgrade to ISA Server 2004 and install the new version of the application filter or Web filter.

Use the following questions to help determine whether you have learned enough to move on to the next lesson. If you have difficulty answering these questions, review the material in this lesson before beginning the next lesson. You can find answers to these questions in the Questions and Answers section at the end of this chapter.