RE: Hardware Needed
- From: "Aman Bedi" <gurkirpal.bedi@xxxxxxxxxxx>
- To: "'[ISAserver.org Discussion List]'" <isalist@xxxxxxxxxxxxx>
- Date: Thu, 7 Oct 2004 16:31:14 -0400
The network between cisco and ISA should be another private network .
All NICs on ISA should be on different networks.
Scanbuy Inc
Aman Bedi | Systems/Network Administrator (MCP, MCSD, MCSA 2000, MCSA 2003)
54 West 39th Street, 4th Floor, New York, NY 10018 | Fax +1(212) 202-4318 |
Phone +1(212) 278-0178 ext 234 | www.scanbuy.com
----------------------------------------------------------------------------
-------------------------------------
-----Original Message-----
From: Dan Johnson [mailto:djohnson@xxxxxxxxxxxxxxx]
Sent: Thursday, October 07, 2004 4:16 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Hardware Needed
http://www.ISAserver.org
My Next question is about the Nic 1 that connects to the cisco.
ISP Provider 66.x.x.x
|
v
Port 1 ----> Cisco ----> Port 2
| |
Empty v
ISA ( 3 Nics )
|
Nic 1 --- Nic 2 --- Nic 3
| | |
v v v
Connect to 10.8.100.2 10.8.102.2
Cisco
(???.???.???.???)
What will the IP be of the cisco so that both 10.8.100.x and 10.8.102.x
can see the outside world. I lack in the routing aspect.
Thanks
For your help
Dan
-----Original Message-----
From: Aman Bedi [mailto:gurkirpal.bedi@xxxxxxxxxxx]
Sent: Thursday, October 07, 2004 3:04 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Hardware Needed
http://www.ISAserver.org
Both networks will be on different NICs of ISA.
So both networks will use their respective ISA NIC as the default
gateway .
Scanbuy Inc
Aman Bedi | Systems/Network Administrator (MCP, MCSD, MCSA 2000, MCSA
2003) 54 West 39th Street, 4th Floor, New York, NY 10018 | Fax +1(212)
202-4318 | Phone +1(212) 278-0178 ext 234 | www.scanbuy.com
PRIVILEGED & CONFIDENTIAL
The information contained in this email message is intended only for use
of the person or entity to whom it is addressed. The contained
information is CONFIDENTIAL and LEGALLY PRIVILEGED and exempt from
disclosure under applicable laws. If you read this message and are not
the addressee, you are notified that use, dissemination or reproduction
of this message is prohibited. If you have received this message in
error, please notify the sender immediately.
------------------------------------------------------------------------
----
------------------------------------------------------------------------
----
-------------------------------------
-----Original Message-----
From: Dan Johnson [mailto:djohnson@xxxxxxxxxxxxxxx]
Sent: Thursday, October 07, 2004 4:00 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Hardware Needed
http://www.ISAserver.org
Sorry, another question. I am weak on the routing aspect of networking.
But if I have 2 networks 10.8.100.x and 10.8.102.x what will my gateway
be so that both networks can use that gateway to get out into the world.
Thanks
Dan
-----Original Message-----
From: Troy Radtke [mailto:TRadtke@xxxxxxxxxxxx]
Sent: Thursday, October 07, 2004 2:19 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Hardware Needed
http://www.ISAserver.org
Well, just another thought.... Stick a NLB out in front and use both
IP's... Not like it'd help much, since they are both probably from the
same provider and wouldn't add much in the department in redundancy....
But it would increase overall available bandwidth....
-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx]
Sent: Thursday, October 07, 2004 2:16 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Hardware Needed
http://www.ISAserver.org
Hi Troy,
Exactly how I do it (although I skip the Cisco and use Netopia or
Nortel).
Tom
www.isaserver.org/shinder
Get the book!
Tom and Deb Shinder's Configuring ISA Server 2004
http://tinyurl.com/3xqb7 MVP -- ISA Firewalls
-----Original Message-----
From: Troy Radtke [mailto:TRadtke@xxxxxxxxxxxx]
Sent: Thursday, October 07, 2004 2:09 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Hardware Needed
http://www.ISAserver.org
Ok, let's lose 1 of the 2 Public IP's for the sake of better
understanding....
So you have 2 private class c networks.
Let's try this once
the world
|
|
-----ISA----
| |
| |
10.8.100.x 10.8.102.x
3 NICs in the ISA would do it. Skip the Cisco (only time you'll EVER
here me say that) since you really don't need it unless you'd want to
stick another subnet in there for some reason and get this:
the world
| Public side
|
Cisco
| Private 192.168.1.x network
|
-----ISA----
| |
| |
10.8.100.x 10.8.102.x
I'm guessing that you have 2 Public IP's from the fact you have 2
buildings that were separate and each one had it's own.....
-----Original Message-----
From: Dan Johnson [mailto:djohnson@xxxxxxxxxxxxxxx]
Sent: Thursday, October 07, 2004 1:55 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Hardware Needed
http://www.ISAserver.org
Currently we have 2 different networks set up for 2 different buildings.
So each Cisco port has its own Public IP. What I do not want to do is
join both networks. They need to remain separate.
So you are saying that I should have the
ISA
|
v
Port 1 (10.8.100.1) <---> Cisco <---> Port 2(10.8.102.1)
| |
v v
Switch Switch
Am I understanding you correct?
Thanks
Dan
-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx]
Sent: Thursday, October 07, 2004 1:41 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Hardware Needed
http://www.ISAserver.org
Hi Dan,
Why do you need to LAN networks? Are you using multiple public netblocks
or ISPs?
What are the advantages of this approach? If you need multiple protected
networks, put them behind the ISA firewall. The ISA firewall will allow
you one default gateway.
HTH,
Tom
www.isaserver.org/shinder
Get the book!
Tom and Deb Shinder's Configuring ISA Server 2004
http://tinyurl.com/3xqb7 MVP -- ISA Firewalls
-----Original Message-----
From: Dan Johnson [mailto:djohnson@xxxxxxxxxxxxxxx]
Sent: Thursday, October 07, 2004 1:31 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Hardware Needed
http://www.ISAserver.org
The Cisco router has 2 public IP's to it. One for each or the ports on
the back. So one port is the 10.8.100.1 and the other is 10.8.102.1 I
then what to go from the Cisco and these 2 networks to the ISA.
Cisco
Port 1 <---- Cisco ---- > Port 2
|
v
ISA
So now I am wondering how many Nics I need to make this possible. With
one network this is easy but now with multiple makes it much more
complicated.
Dan
-----Original Message-----
From: Troy Radtke [mailto:TRadtke@xxxxxxxxxxxx]
Sent: Thursday, October 07, 2004 1:07 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Hardware Needed
http://www.ISAserver.org
Actually, do you have 3 fa interfaces on the router or is this a router
on a stick config?
-----Original Message-----
From: Quillman Shawn (RBNA/CSA1) * [mailto:Shawn.Quillman@xxxxxxxxxxxx]
Sent: Thursday, October 07, 2004 1:01 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Hardware Needed
http://www.ISAserver.org
How are you going to set up ISA on a Cisco Router???
haha, just kidding. Really wishing it was Friday right now......
As long as ISA will sit between those 2 networks you'll need at least 2
nics. ISA won't join the two networks.
Pictorally:
Good (2 nics required):
Port1 <-----> ISA <-----> Port2
Not Good (get RainConnect instead):
Port1 <------
|
v
ISA ----- <somewhere else>
^
|
Port2 <------
Also Good (3 nics required, DMZ-type setup):
<somewhere else>
^
|
v
Port1 <-----> ISA <-----> Port 2
-Shawn
-----
Shawn R. Quillman
Robert Bosch Corporation RBNA/CSA1
38000 Hills Tech Drive
Farmington Hills, MI 48331
(248) 553-1164 (P) (248) 848-6969 (F) shawn.quillman@xxxxxxxxxxxx
-----Original Message-----
From: Dan Johnson [mailto:djohnson@xxxxxxxxx]
Sent: Thursday, October 07, 2004 2:46 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Hardware Needed
http://www.ISAserver.org
I am going to set up an ISA on a Cisco Router with two ports: 10.8.100.1
& 10.8.102.1 b/c of 2 separate networks. How many Nics am I going to
need on my ISA so that I can use on server to firewall both networks.
Thank You
Dan
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com No.1 Exchange
Server Resource Site: http://www.msexchange.org Windows Security
Resource Site: http://www.windowsecurity.com/ Network Security Library:
http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
shawn.quillman@xxxxxxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com No.1 Exchange
Server Resource Site: http://www.msexchange.org Windows Security
Resource Site: http://www.windowsecurity.com/ Network Security Library:
http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tradtke@xxxxxxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com No.1 Exchange
Server Resource Site: http://www.msexchange.org Windows Security
Resource Site: http://www.windowsecurity.com/ Network Security Library:
http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
djohnson@xxxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com No.1 Exchange
Server Resource Site: http://www.msexchange.org Windows Security
Resource Site: http://www.windowsecurity.com/ Network Security Library:
http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com No.1 Exchange
Server Resource Site: http://www.msexchange.org Windows Security
Resource Site: http://www.windowsecurity.com/ Network Security Library:
http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
djohnson@xxxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com No.1 Exchange
Server Resource Site: http://www.msexchange.org Windows Security
Resource Site: http://www.windowsecurity.com/ Network Security Library:
http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tradtke@xxxxxxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com No.1 Exchange
Server Resource Site: http://www.msexchange.org Windows Security
Resource Site: http://www.windowsecurity.com/ Network Security Library:
http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com No.1 Exchange
Server Resource Site: http://www.msexchange.org Windows Security
Resource Site: http://www.windowsecurity.com/ Network Security Library:
http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tradtke@xxxxxxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com No.1 Exchange
Server Resource Site: http://www.msexchange.org Windows Security
Resource Site: http://www.windowsecurity.com/ Network Security Library:
http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
djohnson@xxxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com No.1 Exchange
Server Resource Site: http://www.msexchange.org Windows Security
Resource Site: http://www.windowsecurity.com/ Network Security Library:
http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
gurkirpal.bedi@xxxxxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com No.1 Exchange
Server Resource Site: http://www.msexchange.org Windows Security
Resource Site: http://www.windowsecurity.com/ Network Security Library:
http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
djohnson@xxxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
gurkirpal.bedi@xxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
Other related posts:
