Hi Gabriel, I'm not sure what you're saying here regarding the use of the second external NIC. You should not be able to move packets from the internal network to the external network and not have problems with it (spoof errors and such). Are you seeing those problems? Thanks! Tom www.isaserver.org/shinder Thomas W Shinder, M.D., MCSE, MCT -----Original Message----- From: Gabriel Zabal [mailto:gabriel@xxxxxxxxxxx] Sent: Thursday, July 19, 2001 8:47 AM To: [ISAserver.org Discussion List] Subject: [isalist] Re: IP routing between two external adapters on the ISA server http://www.ISAserver.org Actually, I have and ISA with 3 NIC, one internal and 2 external. But with no routing between the external, I`m having the two external just to have the protocol and site and content rules work between the internal subnet and that subnet. The other extenal NIC is for Internet access. I hope it helps. Gabriel Zabal CTO - TecNext.com gabriel@xxxxxxxxxxx -----Mensaje original----- De: Jim Harrison [mailto:jim@xxxxxxxxxxxx] Enviado el: Jueves, 19 de Julio de 2001 10:33 a.m. Para: [ISAserver.org Discussion List] Asunto: [isalist] Re: IP routing between two external adapters on the ISA server http://www.ISAserver.org ISA does not support two external interfaces right now. The best you can do in this case is to plug the ISA single external NIC into a switch (NOT a hub) and plug both networks into it as well. Assign both IPs to the external interface. Jim Harrison MCP(2K), A+, Network+, PCG ----- Original Message ----- From: <asakharov@xxxxxxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Thursday, July 19, 2001 6:02 AM Subject: [isalist] IP routing between two external adapters on the ISA server http://www.ISAserver.org Hi to everyone. I want to setup ISA Server with 3 network cards. One will be connected to the internal network, where all client workstations and corporate file/mail servers are. Two other network cards will be connected to two independent external networks; each external network has it's own connection to the Internet (to different ISP). I do have some unix/nt servers on both external networks - www, SMTP, etc. I want ISA server to route packets between those two external networks. In the same time I need highest level of protection for the internal network. So, the question: is it possible? anybody has experience with this kind of configuration? Do I need to configure specific packet filters to allow traffic between external networks? Thank you in advance. Alex ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') To customise your settings for the list, kindly visit http://www.webelists.com/cgi/lyris.pl?enter=isalist ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: gabriel@xxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') To customise your settings for the list, kindly visit http://www.webelists.com/cgi/lyris.pl?enter=isalist ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') To customise your settings for the list, kindly visit http://www.webelists.com/cgi/lyris.pl?enter=isalist