Re: IP Addresses on DMZ
- From: "Jim Harrison" <jim@xxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Fri, 27 Jul 2001 16:48:06 -0700
The IP assignment for the three-homed DMZ is a subset of the external IP
range. For instance, if your ISA owns a 30-IP range of 123.123.123.33 - .62
with a mask of 255.255.255.224, you could assign IP's 33-47 to the external
interface and assign IPs 49 to 62 with a mask of 255.255.255.240 to the DMZ
and use 123.123.123.49 for the ISA DMZ NIC. 123.123.123.49 would become the
default gateway for any DMZ-based server. The ISA settings would then look
like:
External -
IP = 123.123.123.33
Mask = 255.255.255.224
DG = 123.123.123.xxx (router, or ISP-supplied)
DNS = <empty>
DMZ -
IP = 123.123.123.49
Mask = 255.255.255.240
DG = <empty>
DNS = <empty>
Internal -
IP = 192.168.0.1
Mask = 255.255.255.0
DG = <empty>
DNS = <depends on your config>
Jim Harrison
MCP(2K), A+, Network+, PCG
----- Original Message -----
From: "Guinn Unger" <mlists@xxxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Friday, July 27, 2001 11:20 AM
Subject: [isalist] IP Addresses on DMZ
http://www.ISAserver.org
We are trying to set up a DMZ scenario with a web server. We have three
NICs in the ISA server. One to the T1, one to the internal network, and one
to the DMZ. My question concerns the IP addresses on the DMZ. I assume
that one of the public IP addresses needs to be assigned to the NIC in the
web server. But what IP address can be used on the NIC in the ISA machine
that goes to the DMZ? Is there some additional information about this
somewhere?
Thanks.
Guinn Unger
Unger Technologies, Inc.
Microsoft Certified Partner
Compaq Solutions Alliance Partner
geunger@xxxxxxxxxxxxx
www.ungertech.com
281-367-2477
Hard work spotlights the character of people: some turn up their sleeves,
some turn up their noses, and some don't turn up at all. - Sam Ewig
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
