RE: Linksys in front of ISA...
- From: Marvin Cummings <MarvinC@xxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Fri, 8 Oct 2004 13:17:49 -0400
Got it!
thnks
On Fri, 8 Oct 2004 11:59:46 -0500, Quillman Shawn (RBNA/CSA1) *
<shawn.quillman@xxxxxxxxxxxx> wrote:
> http://www.ISAserver.org
>
> Nonono, internal interface of an ISA doesn't get a defgw. External
> interface gets a static IP (192.168.1.x), sm, defgw of the internal
> interface of the linksys.
>
> Here's the rundown:
>
> External Linksys Interface:
> PPPOE from DSL provider
>
> Internal Linksys Interface:
> 192.168.1.1(configured by default)
>
> External ISA Interface:
> Static: 192.168.1.x
> Sm: 255.255.255.0
> Gw: 192.168.1.1
>
> Internal ISA Interface:
> Static: <some other subnet than 192.168.1.x>
> Sm: whatever
> Gw: none
>
> -Shawn
>
> -----
> Shawn R. Quillman
> Robert Bosch Corporation RBNA/CSA1
> 38000 Hills Tech Drive
> Farmington Hills, MI 48331
> (248) 553-1164 (P) (248) 848-6969 (F)
> shawn.quillman@xxxxxxxxxxxx
>
> -----Original Message-----
> From: Marvin Cummings [mailto:MarvinC@xxxxxxxxx]
> Sent: Friday, October 08, 2004 12:50 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: Linksys in front of ISA...
>
> http://www.ISAserver.org
>
> So your ISA server uses the IP of the DSL device as its gateway. I
> don't have a gateway listed in the internal interface of the ISA
> server. So I'll change that. What I'm confused on is how your external
> interface is configured. Being that the external interface IP never
> change, you must not be on a dynamic connection. Or am I missing
> something here?
>
> thnks
>
> On Fri, 8 Oct 2004 11:34:07 -0500, Thomas W Shinder
> <tshinder@xxxxxxxxxxx> wrote:
> > http://www.ISAserver.org
> >
> > Hi Marvin,
> >
> > This is how I do it:
> >
> > LAN--ISA firewall--DSL NAT device--Internet
> >
> > ISA firewall has static addresses
> > ISA firewall uses LAN address of DSL NAT device at its default gateway
> > DSL NAT device handles dynamic public addressing and PPPoE
> >
> > Everything work! I just forward all incoming traffic from the Internet
> > to the ISA firewall's external interface.
> >
> > I use TZO for my DDNS server for publishing. Since the ISA firealls
> > external address never changes, everything always works.
> >
> > HTH,
> >
> > Tom
> > www.isaserver.org/shinder
> > Get the book!
> > Tom and Deb Shinder's Configuring ISA Server 2004
> > http://tinyurl.com/3xqb7
> > MVP -- ISA Firewalls
> >
> >
> >
> >
> > -----Original Message-----
> > From: Marvin Cummings [mailto:MarvinC@xxxxxxxxx]
> > Sent: Friday, October 08, 2004 11:26 AM
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] RE: Linksys in front of ISA...
> >
> > http://www.ISAserver.org
> >
> > For some reason setting up ISA to use static IP addresses is easy. I
> > set one up using SDSL with static IP's with a server setup similar to
> > yours and didn't have a problem. It's the dynamic dsl connections that
> > have given me fits.
> >
> > On Fri, 8 Oct 2004 11:04:49 -0500, Jeff Sloan <jsloan@xxxxxxxxxxxx>
> > wrote:
> > > http://www.ISAserver.org
> > >
> > > I am about to have to change ISPs as well, and are going to DSL with
> > 30
> > > static IP.
> > > Am I going to have to use a nat device in front of the ISA (2000) as
> > > well?
> > > Or will the static IP fix that problem?
> > > I have my web sites, terminal servers, et all published through ISA
> > and
> > > don't want an extra device screwing all that up.
> > > Thanks
> > >
> > > Jeff Sloan
> > > Network Administrator
> > > Cross Oil Refining & Marketing, Inc.
> > > 484 E. 6th St.
> > > Smackover, AR 71762
> > >
> > > -----Original Message-----
> > > From: Aman Bedi [mailto:gurkirpal.bedi@xxxxxxxxxxx]
> > > Sent: Friday, October 08, 2004 11:01 AM
> > > To: ISALists
> > > Subject: [isalist] RE: Linksys in front of ISA...
> > >
> > > http://www.ISAserver.org
> > >
> > > "The only way I seem to be able to get to the Internet is if I put
> my
> > > linksys in front of the ISA server and configure the external NIC to
> > use
> > > the IP of the linksys as its gateway."
> > >
> > > Isn't this how it should be .
> > >
> > > I have a Netopia DSL router in front of ISA .. and works fine .
> > > The router has one public for its interface. All other public ips
> are
> > > configured on external interface of ISA and configured for
> publishing
> > .
> > >
> > > Scanbuy Inc
> > > Aman Bedi | Systems/Network Administrator
> > >
> >
> ------------------------------------------------------------------------
> > > ----
> > > -------------------------------------
> > >
> > > -----Original Message-----
> > > From: Marvin Cummings [mailto:MarvinC@xxxxxxxxx]
> > > Sent: Friday, October 08, 2004 11:47 AM
> > > To: [ISAserver.org Discussion List]
> > > Subject: [isalist] Linksys in front of ISA...
> > >
> > > http://www.ISAserver.org
> > >
> > > Double-post.
> > > Need some help getting ISA to work on a DSL connection. The only way
> I
> > > seem to be able to get to the Internet is if I put my linksys in
> front
> > > of the ISA server and configure the external NIC to use the IP of
> the
> > > linksys as its gateway. I also had to provide it with a static
> > internal
> > > IP. I'm thinking this will come back to haunt me once I begin
> > publishing
> > > servers and services. I've read the articles on configuring DSL, the
> > > network interfaces, and ISA to support PPOE and have tried
> everything
> > > with no success. If I don't use the linksys I'm not able to access
> the
> > > Internet on any of my secureNAT clients. I seem to recall there
> being
> > > some talk on this subject and wonder if anyone can advise on the
> pros
> > > and cons of this type of setup, one that uses a linksys in front of
> > the
> > > firewall. I'm thinking I'd be better of going with a hardware
> > solutions
> > > or a linux firewall solution. Any responses are appreciated.
> > >
> > > TIA
> > >
> > > ------------------------------------------------------
> > > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > > ------------------------------------------------------
> > > Other Internet Software Marketing Sites:
> > > World of Windows Networking: http://www.windowsnetworking.com
> > > Leading Network Software Directory: http://www.serverfiles.com
> > > No.1 Exchange Server Resource Site: http://www.msexchange.org
> > > Windows Security Resource Site: http://www.windowsecurity.com/
> > > Network Security Library: http://www.secinf.net/
> > > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> > > ------------------------------------------------------
> > > You are currently subscribed to this ISAserver.org Discussion List
> as:
> > marvinc@xxxxxxxxx
> > > To unsubscribe visit
> > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > Report abuse to listadmin@xxxxxxxxxxxxx
> > >
> >
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Other Internet Software Marketing Sites:
> > World of Windows Networking: http://www.windowsnetworking.com
> > Leading Network Software Directory: http://www.serverfiles.com
> > No.1 Exchange Server Resource Site: http://www.msexchange.org
> > Windows Security Resource Site: http://www.windowsecurity.com/
> > Network Security Library: http://www.secinf.net/
> > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org Discussion List as:
> >
> >
> > tshinder@xxxxxxxxxxxxxxxxxx
> > To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > Report abuse to listadmin@xxxxxxxxxxxxx
> >
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Other Internet Software Marketing Sites:
> > World of Windows Networking: http://www.windowsnetworking.com
> > Leading Network Software Directory: http://www.serverfiles.com
> > No.1 Exchange Server Resource Site: http://www.msexchange.org
> > Windows Security Resource Site: http://www.windowsecurity.com/
> > Network Security Library: http://www.secinf.net/
> > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org Discussion List as:
> marvinc@xxxxxxxxx
> > To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > Report abuse to listadmin@xxxxxxxxxxxxx
> >
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> shawn.quillman@xxxxxxxxxxxx
>
>
> To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> marvinc@xxxxxxxxx
> To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>
Other related posts:
