Good point. I don't see a reason for switch it self to go out. So we should totally disable the default gateway for the switch. And yes I will always get to switch http management interface from internal network which is on same subnet 192.168.0.X. Am I right? -----Original Message----- From: Thor (Hammer of God) [mailto:thor@xxxxxxxxxxxxxxx] Sent: Sunday, February 13, 2005 11:45 AM To: [ISAserver.org Discussion List] Subject: [isalist] Re: default gateway confusion http://www.ISAserver.org Clients should point to the ISA box. The switch isn't a router, so it won't "forward" anything. Additionally, if you are always going to manage the switch from that one subnet, there is no reason to put the default gateway on the switch... just another potential exposure. Is there some reason for you to want your switch to be able to go to the Internet? t ----- Original Message ----- From: "Ara" <ara@xxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Sunday, February 13, 2005 10:43 AM Subject: [isalist] default gateway confusion > http://www.ISAserver.org > > Hello > I am a little confused here > > Clients are on same network of 192.168.0.X > There is a managed dell 48 port switch which has its own ip and default > gateway 192.168.0.2 and default gateway of 192.168.0.1 which is going to > be > internal ISA network adapter > Everybody is connected to switch and the uplink on switch will be > connected > to ISA > So the question is, should the clients inside refer to switch as default > gateway and then switch will forward the packet to internal isa nic or > they > should directly use isa as default gateway? > Thank you > > > > > > > ------------------------------------------------------ > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ > ------------------------------------------------------ > Other Internet Software Marketing Sites: > World of Windows Networking: http://www.windowsnetworking.com > Leading Network Software Directory: http://www.serverfiles.com > No.1 Exchange Server Resource Site: http://www.msexchange.org > Windows Security Resource Site: http://www.windowsecurity.com/ > Network Security Library: http://www.secinf.net/ > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com > ------------------------------------------------------ > You are currently subscribed to this ISAserver.org Discussion List as: > thor@xxxxxxxxxxxxxxx > To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist > Report abuse to listadmin@xxxxxxxxxxxxx > > ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: ara@xxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx
