RE: Three-homed DMZ

If I well understood, what you say is only possible on "standard"
configuration that's with two network cards on ISA Server machine.

I read the article "ISA Server DMZ scenarios" (published on
www.isaserver.org).
My case is "Trihomed DMZ" with 3 network cards.

After title "Trihomed DMZ must have public IP address" I found:
"The fact that the DMZ segment on trihomed DMZ must have public
addresses can't be overstated..."

Then, after title "Packet are routed to the DMZ - NOT translated" I
read:
"In order to get your DMZ IP addresses in order, you are going to need
to subnet your IP address block..."

Please, help me!!!!
Many thanks.

Michele



-----Messaggio originale-----
Da: Muqeem Syed [mailto:Syed.Muqeem@xxxxxxxxxxxx] 
Inviato: giovedì 29 novembre 2001 12.22
A: [ISAserver.org Discussion List]
Oggetto: [isalist] RE: Three-homed DMZ


http://www.ISAserver.org


Hi MIchele,
You dont have to use public IP's on the DMZ interfaces... they can be
set to use the NAT on the outside interface of the ISA. 

-----Original Message-----
From: Michele Taverna [mailto:michele.taverna@xxxxxxxxxxxxx]
Sent: Thursday, November 29, 2001 1:16 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Three-homed DMZ


http://www.ISAserver.org


Hi all,

I've a simple question about ISA Server NICs configuration on
three-homed DMZ. I understood I've to use public IP on DMZ segment, ok.
But the nic which connect my ISA Server machine to DMZ network, must
have public IP too?

For example, take a look at this ISA Server's interface IP config...

Internet : 123.123.123.200
Subnet   : 255.255.255.248

Local    : 10.10.10.1
Subnet   : 255.255.255.0

DMZ      : 123.123.123.201
Subnet   : 255.255.255.248

So, I've to use 2 public IP address on my ISA Server machine? Are there
alternatives?

Thank you.

Michele Taverna - Italy


------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
syed.muqeem@xxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')

------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
michele.taverna@xxxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')

Other related posts: