RE: ISA-Server 2000 With Multiple Network Card-Routing
- From: "Roy Tsao" <roy_tsao@xxxxxxxxxxxx>
- To: isalist@xxxxxxxxxxxxx
- Date: Tue, 31 May 2005 01:07:08 -0600
Jim is no good guy in telling you the basic TCP/IP knowlowdeg aside
from ISA.
1) Please do read the KB
2) After that, you will understand why the gateway IP address
is not accessble (due to difference segement).
Why the IP address your designed are in the same broadcast subnet.
(= one Lan in fact)
3) Please re-design the IP segement properly.
> --0-2003241504-1117522101=:21238
> Content-Type: text/plain; charset=us-ascii
>
> hi jim;
>
> thank you for your reply, i was not understanding this idea, can i send you
> my queries, regarding this idea.
>
> once agian thanks for youer help.
>
> Jim Harrison <Jim@xxxxxxxxxxxx> wrote:
> http://www.ISAserver.org
>
> Your design is flawed.
> 1. all of the "company #" NICs can see the same router IP, so they're
> clearly in the same broadcast subnet
> 2. since they're all in the same BCST subnet, there is no gain in using
> separate NICs or even separate subnets, for that matter.
> 3. Since the subnets you chose are 10.1.x/24, Windows will not allow you
> to use a gateway outside the 10.1.x/24 subnet
>
> Basically, you have some reading to do:
> http://support.microsoft.com/default.aspx?scid=kb;en-us;164015
>
>
> -------------------------------------------------------
> Jim Harrison
> MCP(NT4, W2K), A+, Network+, PCG
> http://isaserver.org/Jim_Harrison/
> http://isatools.org
> Read the help / books / articles!
> -------------------------------------------------------
>
> -----Original Message-----
> From: hodakara kara [mailto:hatem20102011@xxxxxxxxx]
> Sent: Sunday, May 29, 2005 23:59
> To: [ISAserver.org Discussion List]
> Subject: [isalist] ISA-Server 2000 With Multiple Network Card-Routing
>
> http://www.ISAserver.org
>
>
> Dear All,
>
> i am preparing My Company with other office as well
> to have Internet Connection.
>
> we Have here one Box, which installed on it Windows
> 2000 Advanced server , Routing & Remote Access server
> .
>
> This server has 4 Nic's, 3 of them for each company
> and one for our network as the following :-
>
> 1. NIC 1:-
>
> its for Company No 1, with this IP: 10.1.1.20 / 24,
> Gateway: 100.0.80.125
> ------------------------------------------------------
>
> NIC 2:-
>
> its for Company No2, IP:10.1.2.20 / 24,
> Gateway: 100.0.80.125
> ------------------------------------------------------
> 3. NIC 3:-
> its for Comapny No 3, IP: 10.1.3.20 / 24,
> Gateway: 100.0.80.125.
> =======================================================
>
> 4. NIC 4:-
> its for the server , and its connected to our Company
> and it has internet connection through Web Proxy
> Client, and it has the following information:-
>
> IP: 100.0.80.125 / 16
> Gateway: 100.0.0.25
> DNS: 100.0.0.25
>
> All of my Comapany is under Subnet mask 255.255.0.0
> =======================================================
>
> What i need is, i want to install ISA Server 2000 on
> this BOX, which is connected to our Network, and
> configure Each Company to browse internet through this
> Server by installing for them Firewall Client and
> configure it with its only Server .
>
> So can any one Advice me , if this Idea will work or
> not, and can any one help me How can i route ISA
> server traffice for Multiple NIC with Diffrent
> Network.
>
> Thanks in Advanced.
>
>
>
>
> __________________________________
> Do you Yahoo!?
> Yahoo! Small Business - Try our new Resources site
> http://smallbusiness.yahoo.com/resources/
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> jim@xxxxxxxxxxxx
> To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>
> All mail to and from this domain is GFI-scanned.
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> hatem20102011@xxxxxxxxx
> To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>
> __________________________________________________
> Do You Yahoo!?
> Tired of spam? Yahoo! Mail has the best spam protection around
> http://mail.yahoo.com
> --0-2003241504-1117522101=:21238
> Content-Type: text/html; charset=us-ascii
>
> <DIV>hi jim;</DIV>
> <DIV> </DIV>
> <DIV>thank you for your reply, i was not understanding this idea, can i
> send you my queries, regarding this idea.</DIV>
> <DIV> </DIV>
> <DIV>once agian thanks for youer help.<BR><BR><B><I>Jim Harrison
> <Jim@xxxxxxxxxxxx></I></B> wrote:</DIV>
> <BLOCKQUOTE class=replbq style="BORDER-LEFT: #1010ff 2px solid; MARGIN-LEFT:
> 5px; PADDING-LEFT: 5px">http://www.ISAserver.org<BR><BR>Your design is
> flawed.<BR>1. all of the "company #" NICs can see the same router IP, so
> they're<BR>clearly in the same broadcast subnet<BR>2. since they're all in
> the same BCST subnet, there is no gain in using<BR>separate NICs or even
> separate subnets, for that matter.<BR>3. Since the subnets you chose are
> 10.1.x/24, Windows will not allow you<BR>to use a gateway outside the
> 10.1.x/24 subnet<BR><BR>Basically, you have some reading to
> do:<BR>http://support.microsoft.com/default.aspx?scid=kb;en-us;164015
> <BR><BR><BR>-------------------------------------------------------<BR>Jim
> Harrison<BR>MCP(NT4, W2K), A+, Network+,
> PCG<BR>http://isaserver.org/Jim_Harrison/<BR>http://isatools.org<BR>Read the
> help / books /
> articles!<BR>-------------------------------------------------------<BR><BR>-----Original
> Message-----<BR>From: hodakara kara
> [mailto:hatem20102011@xxxxxxxxx] <BR>Sent: Sunday, May 29, 2005 23:59<BR>To:
> [ISAserver.org Discussion List]<BR>Subject: [isalist] ISA-Server 2000 With
> Multiple Network Card-Routing<BR><BR>http://www.ISAserver.org<BR><BR><BR>Dear
> All, <BR><BR>i am preparing My Company with other office as well<BR>to have
> Internet Connection.<BR><BR>we Have here one Box, which installed on it
> Windows<BR>2000 Advanced server , Routing & Remote Access
> server<BR>.<BR><BR>This server has 4 Nic's, 3 of them for each company<BR>and
> one for our network as the following :-<BR><BR>1. NIC 1:-<BR><BR>its for
> Company No 1, with this IP: 10.1.1.20 / 24, <BR>Gateway:
> 100.0.80.125<BR>------------------------------------------------------<BR><BR>NIC
> 2:-<BR><BR>its for Company No2, IP:10.1.2.20 / 24,<BR>Gateway:
> 100.0.80.125<BR>------------------------------------------------------<BR>3.
> NIC 3:-<BR>its for Comapny No 3, IP: 10.1.3.20 / 24,<BR>Gateway:
>
> 100.0.80.125.<BR>=======================================================<BR><BR>4.
> NIC 4:-<BR>its for the server , and its connected to our Company<BR>and it
> has internet connection through Web Proxy<BR>Client, and it has the following
> information:-<BR><BR>IP: 100.0.80.125 / 16<BR>Gateway: 100.0.0.25<BR>DNS:
> 100.0.0.25<BR><BR>All of my Comapany is under Subnet mask
> 255.255.0.0<BR>=======================================================<BR><BR>What
> i need is, i want to install ISA Server 2000 on<BR>this BOX, which is
> connected to our Network, and<BR>configure Each Company to browse internet
> through this<BR>Server by installing for them Firewall Client
> and<BR>configure it with its only Server . <BR><BR>So can any one Advice me ,
> if this Idea will work or<BR>not, and can any one help me How can i route
> ISA<BR>server traffice for Multiple NIC with
> Diffrent<BR>Network.<BR><BR>Thanks in
> Advanced.<BR><BR><BR><BR><BR>__________________________________ <BR>Do you
> Yahoo!? <BR>Yahoo! Small
> Business - Try our new Resources
> site<BR>http://smallbusiness.yahoo.com/resources/<BR><BR>------------------------------------------------------<BR>List
> Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist<BR>ISA Server
> Newsletter: http://www.isaserver.org/pages/newsletter.asp<BR>ISA Server FAQ:
> http://www.isaserver.org/pages/larticle.asp?type=FAQ<BR>------------------------------------------------------<BR>Other
> Internet Software Marketing Sites:<BR>World of Windows Networking:
> http://www.windowsnetworking.com<BR>Leading Network Software Directory:
> http://www.serverfiles.com<BR>No.1 Exchange Server Resource Site:
> http://www.msexchange.org<BR>Windows Security Resource Site:
> http://www.windowsecurity.com/<BR>Network Security Library:
> http://www.secinf.net/<BR>Windows 2000/NT Fax Solutions:
> http://www.ntfaxfaq.com<BR>------------------------------------------------------<BR>You
> are currently subscribed to this ISAserver.org Discussion List
> as:<BR>jim@xxxxxxxxxxxx<BR>To
> unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=isalist<BR>Report abuse to
> listadmin@xxxxxxxxxxxxx<BR><BR>All mail to and from this domain is
> GFI-scanned.<BR><BR><BR>------------------------------------------------------<BR>List
> Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist<BR>ISA Server
> Newsletter: http://www.isaserver.org/pages/newsletter.asp<BR>ISA Server FAQ:
> http://www.isaserver.org/pages/larticle.asp?type=FAQ<BR>------------------------------------------------------<BR>Other
> Internet Software Marketing Sites:<BR>World of Windows Networking:
> http://www.windowsnetworking.com<BR>Leading Network Software Directory:
> http://www.serverfiles.com<BR>No.1 Exchange Server Resource Site:
> http://www.msexchange.org<BR>Windows Security Resource Site:
> http://www.windowsecurity.com/<BR>Network Security Library:
> http://www.secinf.net/<BR>Windows 2000/NT Fax Solutions:
> http://www.ntfaxfaq.com<BR>------------------------------------------------------<BR>You
> are
> currently subscribed to this ISAserver.org Discussion List as:
> hatem20102011@xxxxxxxxx<BR>To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=isalist<BR>Report abuse to
> listadmin@xxxxxxxxxxxxx<BR></BLOCKQUOTE><p>__________________________________________________<br>Do
> You Yahoo!?<br>Tired of spam? Yahoo! Mail has the best spam protection
> around <br>http://mail.yahoo.com
> --0-2003241504-1117522101=:21238--
Other related posts:
