RE: DMZ addresses

  • From: "Roger Riggins" <riggins@xxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Fri, 18 Jan 2002 14:22:39 -0600

Here's what I've got:

WAN IP: 65.168.219.241
    SM: 255.255.255.248
    DG: 65.168.219.1

DMZ IP: 65.168.219.253
    SM: 255.255.255.248
    DG: 65.168.219.1

DMZ HOST IP: 65.168.219.254
           SM: 255.255.255.248
         DG: 65.168.219.253

From the DMZ host (DNS and web server) I am able to ping 65.168.219.253.
From ISA I am able to do an nslookup to the DMZ host and resolve any
addresses on that machine, but not outside. I created packet filters
using predefined protocols of DNS lookup and HTTP server. I enabled IP
routing and packet filtering, however I'm not able to get that DMZ host
to get past the ISA server. You guys have any ideas?

Thanks!

ROGER RIGGINS
A+, MCSE, CCNA, CCA
COMPUTER PROS
319-352-1234
HTTP://WWW.CPROS.NET


-----Original Message-----
From: Arif, Aboo M [mailto:Aboo@xxxxxxxxxxxxxxxxxx] 
Sent: Friday, January 18, 2002 11:05 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: DMZ addresses

http://www.ISAserver.org


U have to use public ips in DMZ.
First u have to create two  subnets ( DMZ and Unsecured)with  your
public IP's.
Put one IP for the external NIC which is in Unsecured subnet. Your
router , Wan Link IP all comes in this subnet(if u have ).
And assign the Another Public IP(from DMZ subnet. ) for the DMz NIC .For
all servers in dmz u have to assign public ips from this spool.

Private IPS are only for the  internal NIC.

Regards
Aboo Arif
Emcure InfoTech Ltd. 
Pune 
India


-----Original Message-----
From: Roger Riggins [mailto:riggins@xxxxxxxxx] 
Sent: Friday, January 18, 2002 10:00 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] DMZ addresses

http://www.ISAserver.org


I haven't configured a DMZ with ISA before. Do I assign a public IP to
the third NIC and  private IPs to the machines in the DMZ?
 
Thanks!
 
ROGER RIGGINS
A+, MCSE, CCNA, CCA
COMPUTER PROS
319-352-1234
HTTP://WWW.CPROS.NET
 

------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
aboo@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
riggins@xxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


Other related posts: