RE: ISA-Server 2000 With Multiple Network Card-Routing
- From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Tue, 31 May 2005 05:33:11 -0500
I heard this was a good book at one time:
http://www.amazon.com/exec/obidos/tg/detail/-/1928994113/
Tom
www.isaserver.org/shinder
Tom and Deb Shinder's Configuring ISA Server 2004
http://tinyurl.com/3xqb7
MVP -- ISA Firewalls
-----Original Message-----
From: Roy Tsao [mailto:roy_tsao@xxxxxxxxxxxx]
Sent: Tuesday, May 31, 2005 2:07 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISA-Server 2000 With Multiple Network
Card-Routing
http://www.ISAserver.org
Jim is no good guy in telling you the basic TCP/IP knowlowdeg aside
from ISA.
1) Please do read the KB
2) After that, you will understand why the gateway IP address
is not accessble (due to difference segement).
Why the IP address your designed are in the same broadcast subnet.
(= one Lan in fact)
3) Please re-design the IP segement properly.
> --0-2003241504-1117522101=:21238
> Content-Type: text/plain; charset=us-ascii
>
> hi jim;
>
> thank you for your reply, i was not understanding this idea, can i
send you my queries, regarding this idea.
>
> once agian thanks for youer help.
>
> Jim Harrison <Jim@xxxxxxxxxxxx> wrote:
> http://www.ISAserver.org
>
> Your design is flawed.
> 1. all of the "company #" NICs can see the same router IP, so they're
> clearly in the same broadcast subnet
> 2. since they're all in the same BCST subnet, there is no gain in
using
> separate NICs or even separate subnets, for that matter.
> 3. Since the subnets you chose are 10.1.x/24, Windows will not allow
you
> to use a gateway outside the 10.1.x/24 subnet
>
> Basically, you have some reading to do:
> http://support.microsoft.com/default.aspx?scid=kb;en-us;164015
>
>
> -------------------------------------------------------
> Jim Harrison
> MCP(NT4, W2K), A+, Network+, PCG
> http://isaserver.org/Jim_Harrison/
> http://isatools.org
> Read the help / books / articles!
> -------------------------------------------------------
>
> -----Original Message-----
> From: hodakara kara [mailto:hatem20102011@xxxxxxxxx]
> Sent: Sunday, May 29, 2005 23:59
> To: [ISAserver.org Discussion List]
> Subject: [isalist] ISA-Server 2000 With Multiple Network Card-Routing
>
> http://www.ISAserver.org
>
>
> Dear All,
>
> i am preparing My Company with other office as well
> to have Internet Connection.
>
> we Have here one Box, which installed on it Windows
> 2000 Advanced server , Routing & Remote Access server
> .
>
> This server has 4 Nic's, 3 of them for each company
> and one for our network as the following :-
>
> 1. NIC 1:-
>
> its for Company No 1, with this IP: 10.1.1.20 / 24,
> Gateway: 100.0.80.125
> ------------------------------------------------------
>
> NIC 2:-
>
> its for Company No2, IP:10.1.2.20 / 24,
> Gateway: 100.0.80.125
> ------------------------------------------------------
> 3. NIC 3:-
> its for Comapny No 3, IP: 10.1.3.20 / 24,
> Gateway: 100.0.80.125.
> =======================================================
>
> 4. NIC 4:-
> its for the server , and its connected to our Company
> and it has internet connection through Web Proxy
> Client, and it has the following information:-
>
> IP: 100.0.80.125 / 16
> Gateway: 100.0.0.25
> DNS: 100.0.0.25
>
> All of my Comapany is under Subnet mask 255.255.0.0
> =======================================================
>
> What i need is, i want to install ISA Server 2000 on
> this BOX, which is connected to our Network, and
> configure Each Company to browse internet through this
> Server by installing for them Firewall Client and
> configure it with its only Server .
>
> So can any one Advice me , if this Idea will work or
> not, and can any one help me How can i route ISA
> server traffice for Multiple NIC with Diffrent
> Network.
>
> Thanks in Advanced.
>
>
>
>
> __________________________________
> Do you Yahoo!?
> Yahoo! Small Business - Try our new Resources site
> http://smallbusiness.yahoo.com/resources/
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> jim@xxxxxxxxxxxx
> To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>
> All mail to and from this domain is GFI-scanned.
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
hatem20102011@xxxxxxxxx
> To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>
> __________________________________________________
> Do You Yahoo!?
> Tired of spam? Yahoo! Mail has the best spam protection around
> http://mail.yahoo.com
> --0-2003241504-1117522101=:21238
> Content-Type: text/html; charset=us-ascii
>
> <DIV>hi jim;</DIV>
> <DIV> </DIV>
> <DIV>thank you for your reply, i was not understanding this
idea, can i send you my queries, regarding this idea.</DIV>
> <DIV> </DIV>
> <DIV>once agian thanks for youer help.<BR><BR><B><I>Jim Harrison
<Jim@xxxxxxxxxxxx></I></B> wrote:</DIV>
> <BLOCKQUOTE class=replbq style="BORDER-LEFT: #1010ff 2px solid;
MARGIN-LEFT: 5px; PADDING-LEFT:
5px">http://www.ISAserver.org<BR><BR>Your design is flawed.<BR>1. all of
the "company #" NICs can see the same router IP, so they're<BR>clearly
in the same broadcast subnet<BR>2. since they're all in the same BCST
subnet, there is no gain in using<BR>separate NICs or even separate
subnets, for that matter.<BR>3. Since the subnets you chose are
10.1.x/24, Windows will not allow you<BR>to use a gateway outside the
10.1.x/24 subnet<BR><BR>Basically, you have some reading to
do:<BR>http://support.microsoft.com/default.aspx?scid=kb;en-us;164015
<BR><BR><BR>-------------------------------------------------------<BR>J
im Harrison<BR>MCP(NT4, W2K), A+, Network+,
PCG<BR>http://isaserver.org/Jim_Harrison/<BR>http://isatools.org<BR>Read
the help / books /
articles!<BR>-------------------------------------------------------<BR>
<BR>-----Original Message-----<BR>From: hodakara kara
> [mailto:hatem20102011@xxxxxxxxx] <BR>Sent: Sunday, May 29, 2005
23:59<BR>To: [ISAserver.org Discussion List]<BR>Subject: [isalist]
ISA-Server 2000 With Multiple Network
Card-Routing<BR><BR>http://www.ISAserver.org<BR><BR><BR>Dear All,
<BR><BR>i am preparing My Company with other office as well<BR>to have
Internet Connection.<BR><BR>we Have here one Box, which installed on it
Windows<BR>2000 Advanced server , Routing & Remote Access
server<BR>.<BR><BR>This server has 4 Nic's, 3 of them for each
company<BR>and one for our network as the following :-<BR><BR>1. NIC
1:-<BR><BR>its for Company No 1, with this IP: 10.1.1.20 / 24,
<BR>Gateway:
100.0.80.125<BR>------------------------------------------------------<B
R><BR>NIC 2:-<BR><BR>its for Company No2, IP:10.1.2.20 / 24,<BR>Gateway:
100.0.80.125<BR>------------------------------------------------------<B
R>3. NIC 3:-<BR>its for Comapny No 3, IP: 10.1.3.20 / 24,<BR>Gateway:
>
100.0.80.125.<BR>=======================================================
<BR><BR>4. NIC 4:-<BR>its for the server , and its connected to our
Company<BR>and it has internet connection through Web Proxy<BR>Client,
and it has the following information:-<BR><BR>IP: 100.0.80.125 /
16<BR>Gateway: 100.0.0.25<BR>DNS: 100.0.0.25<BR><BR>All of my Comapany
is under Subnet mask
255.255.0.0<BR>=======================================================<B
R><BR>What i need is, i want to install ISA Server 2000 on<BR>this BOX,
which is connected to our Network, and<BR>configure Each Company to
browse internet through this<BR>Server by installing for them Firewall
Client and<BR>configure it with its only Server . <BR><BR>So can any one
Advice me , if this Idea will work or<BR>not, and can any one help me
How can i route ISA<BR>server traffice for Multiple NIC with
Diffrent<BR>Network.<BR><BR>Thanks in
Advanced.<BR><BR><BR><BR><BR>__________________________________ <BR>Do
you Yahoo!? <BR>Yahoo! Small
> Business - Try our new Resources
site<BR>http://smallbusiness.yahoo.com/resources/<BR><BR>---------------
---------------------------------------<BR>List Archives:
http://www.webelists.com/cgi/lyris.pl?enter=isalist<BR>ISA Server
Newsletter: http://www.isaserver.org/pages/newsletter.asp<BR>ISA Server
FAQ:
http://www.isaserver.org/pages/larticle.asp?type=FAQ<BR>----------------
--------------------------------------<BR>Other Internet Software
Marketing Sites:<BR>World of Windows Networking:
http://www.windowsnetworking.com<BR>Leading Network Software Directory:
http://www.serverfiles.com<BR>No.1 Exchange Server Resource Site:
http://www.msexchange.org<BR>Windows Security Resource Site:
http://www.windowsecurity.com/<BR>Network Security Library:
http://www.secinf.net/<BR>Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com<BR>---------------------------------------------
---------<BR>You are currently subscribed to this ISAserver.org
Discussion List as:<BR>jim@xxxxxxxxxxxx<BR>To
> unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist<BR>Report abuse to
listadmin@xxxxxxxxxxxxx<BR><BR>All mail to and from this domain is
GFI-scanned.<BR><BR><BR>------------------------------------------------
------<BR>List Archives:
http://www.webelists.com/cgi/lyris.pl?enter=isalist<BR>ISA Server
Newsletter: http://www.isaserver.org/pages/newsletter.asp<BR>ISA Server
FAQ:
http://www.isaserver.org/pages/larticle.asp?type=FAQ<BR>----------------
--------------------------------------<BR>Other Internet Software
Marketing Sites:<BR>World of Windows Networking:
http://www.windowsnetworking.com<BR>Leading Network Software Directory:
http://www.serverfiles.com<BR>No.1 Exchange Server Resource Site:
http://www.msexchange.org<BR>Windows Security Resource Site:
http://www.windowsecurity.com/<BR>Network Security Library:
http://www.secinf.net/<BR>Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com<BR>---------------------------------------------
---------<BR>You are
> currently subscribed to this ISAserver.org Discussion List as:
hatem20102011@xxxxxxxxx<BR>To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist<BR>Report abuse to
listadmin@xxxxxxxxxxxxx<BR></BLOCKQUOTE><p>_____________________________
_____________________<br>Do You Yahoo!?<br>Tired of spam? Yahoo! Mail
has the best spam protection around <br>http://mail.yahoo.com
> --0-2003241504-1117522101=:21238--
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
Other related posts:
