Re: Configuration Isa with two provider

  • From: "Jay" <jschwarzkopf@xxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Thu, 16 Jan 2003 00:01:44 -0500

You can't load balance these connections unless your ISP providers use BGP.

However, you can segment some traffic, as long as you know the remote IP.
For example, vpn connections to a vpn endpoint in front of the ISA server,
can be delegated through one ISP by adding routes to the ISA server, while
all other traffic travels through the default ISP.

And you can add passive failover, without any 3rd party software, by
continously monitoring the connection state of your default ISP, and in the
event of a failure, change the IP stack of the external nic (use the netsh
command).  If you are publishing services, publish them with both ISP IPs.
Also, publish DNS backup records (for example, create MX records for both
networks, with the passive IP having a higher preference).

Or you can load balance with hardware.  Nexland has a real inexpensive
router that purports to do this.  I used it about a year ago, but had
problems when priority for one connection was set below 90% (though it did
failover).  They might have addressed this.  Cisco has much more expensive
equipment that probably works much better.

As for a 3rd party solution, look at
http://www.microsoft.com/isaserver/partners/highavailability.asp

Good luck.




----- Original Message -----
From: "Volnei Camargo" <volneic@xxxxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Wednesday, January 15, 2003 11:38 AM
Subject: [isalist] Configuration Isa with two provider


> http://www.ISAserver.org
>
>
> Hi,
> I have a server isa server working with an internet provider represented
> in the illustration by the wan1 (256k), and it has been working very well
> (Isa is a great product); we are acquiring a second provider for
> redundancy represented in the illustration by the wan2 (512k), i would
> like to know if I have as configuring the two accesses in an only nic so
> that Isa uses both connections. I simply tried to add the second ip in the
> nic external but it didn't communicate, he either accepts an or other.
>
> I thank for any help.
>
>   Illustration
>
>   wan2 --- router ( 200.200.200.100 )  wan1 ---router ( 200.200.20.20 )
>      |                                     |
>      |                                     |
>      ---------------- hub external---------
>                             |
>                             |---nic external
>                                  ( 200.200.200.101 ) wan2
>                                  ( 200.200.20.21 ) wan1
>                                    |
>                                  isa server
>                                    |
>                                  nic internal
>                                    | ( 10.10.10.1)
>                                    |
>                                   hub internal
>
>
> Volnei
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Exchange Server Resource Site: http://www.msexchange.org/
> Windows Security Resource Site: http://www.windowsecurity.com/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
jschwarzkopf@xxxxxxxxxx
> To unsubscribe send a blank email to $subst('Email.Unsub')



Other related posts: