[isalist] Re: Need help - Configuring Wireless Network with ISA Server 2006

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
  • To: <isalist@xxxxxxxxxxxxx>
  • Date: Sun, 11 Jan 2009 19:15:47 -0600

I don't know if it supports 802.1q VLAN technology, but that wouldn't be
required. But it makes sense that you could just connect it to the
non-external interfaces and it would work, though I don't know about the
DHCP. Worth a try though.

 

From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Steven Comeau
Sent: Sunday, January 11, 2009 7:09 PM
To: isalist@xxxxxxxxxxxxx
Subject: RE: [isalist] Re: Need help - Configuring Wireless Network with
ISA Server 2006

 

Depending upon how the WAP routes wirless connections, couldn't the WAP
just have the non-external interfaces (some have 4) connect to the VLAN
connected on the DMZ side of the ISA server - ignoring the router mode?
As long as the DHCP server (should only have 1 going and that from the
Windows Server) points the gateway address to the IP of the ISA server,
you should be fine.

 

Steve Comeau            

Associate Director of IT

Rutgers Athletics

83 Rockafeller Road

Piscataway, NJ  08854

732-445-7802

732-445-4623 (fax)

www.scarletknights.com <http://www.scarletknights.com/> 

 

________________________________

From: isalist-bounce@xxxxxxxxxxxxx on behalf of Thomas W Shinder
Sent: Sun 1/11/2009 7:52 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Need help - Configuring Wireless Network with ISA
Server 2006

Hi Tee,

 

You don't need a new WAP - you can still run it in router mode. Just
create a network behind the wireless router that connects to the DMZ
network on the firewall. I've done that sort of thing before and it
works just fine.

 

Tom

 

From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Tee Darling
Sent: Sunday, January 11, 2009 4:01 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Need help - Configuring Wireless Network with ISA
Server 2006

 

Thanks Jim. I'll take my time later today and listen to your webcast and
see where I am doing this whole configuration wrong. At first I thought
this whole configuration will be easy after reading some articles and
checking out forums about people who have set it up before. It's been a
week since I started doing this wireless and ISA server configuration
and I haven't been successful yet. 

Now it looks like I should have done my research about the right WAP to
use to connect it to ISA server. I spent $140 on this Netgear WAP and
just be'cos I can't configure it in WAP only mode, I won't be able to
move forward to finish my configuration. Now, I have to come up with
some money to buy the DLink WAP. 

Thanks guys,

TD

On Sun, Jan 11, 2009 at 4:40 PM, Jim Harrison <Jim@xxxxxxxxxxxx> wrote:

Mine can and is.

________________________________

From: isalist-bounce@xxxxxxxxxxxxx [isalist-bounce@xxxxxxxxxxxxx] On
Behalf Of Tee Darling [tee.darling77@xxxxxxxxx]
Sent: Sunday, January 11, 2009 1:34 PM


To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Need help - Configuring Wireless Network with ISA
Server 2006

 

So that means the D-Link - Xtreme N Wireless-N Gigabit Router access
point can be configured in WAP only mode? 

TD

On Sun, Jan 11, 2009 at 1:32 PM, Thomas W Shinder <tshinder@xxxxxxxxxxx>
wrote:

I don't have that router, so I can't tell you about that. Maybe it
doesn't support WAP only mode? All my DLink's do.

 

____________________________________________

TOM SHINDER   |   Sr. Consultant/Technical Writer 
206.443.1117   |   SHINDER@xxxxxxxxxxxxxxx


5701 Sixth Avenue South   |   Seattle, WA 98108  
PROWESS   |   WWW.PROWESSCORP.COM <http://www.prowesscorp.com/> 

____________________________________________

 

From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Tee Darling
Sent: Sunday, January 11, 2009 12:14 PM


To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Need help - Configuring Wireless Network with ISA
Server 2006

 

And how does one configure the WAP in WAP only mode. I have searched
around the menus on the Netgear RangeMax Wireless-N Gigabit router
access point but I don't see where I can configure in WAP only mode. 

TD

On Sun, Jan 11, 2009 at 1:04 PM, Thomas W Shinder <tshinder@xxxxxxxxxxx>
wrote:

The WAP doesn't need to communicate with the firewall. The DMZ interface
on the firewall should have a static IP address.

 

Make sure the WAP is configured in WAP only mode -- not router mode.

 

Tom

 

____________________________________________

TOM SHINDER   |   Sr. Consultant/Technical Writer 
206.443.1117   |   SHINDER@xxxxxxxxxxxxxxx


5701 Sixth Avenue South   |   Seattle, WA 98108  
PROWESS   |   WWW.PROWESSCORP.COM <http://www.prowesscorp.com/> 

____________________________________________

 

From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Tee Darling
Sent: Sunday, January 11, 2009 11:48 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Need help - Configuring Wireless Network with ISA
Server 2006

 

I don't have a problem for the WAP to assign IP addresses. It's just
that when I do that and try to use the software that came with the WAP
to configure it, it tries to change the static IP address assigned to
the NIC the WAP is connected to, to a dynamic IP.  

Thanks,

TD

On Sun, Jan 11, 2009 at 12:37 PM, Thomas W Shinder
<tshinder@xxxxxxxxxxx> wrote:

Why not have the WAP assign the IP addressing information?

 

Tom

 

____________________________________________

TOM SHINDER   |   Sr. Consultant/Technical Writer 
206.443.1117   |   SHINDER@xxxxxxxxxxxxxxx


5701 Sixth Avenue South   |   Seattle, WA 98108  
PROWESS   |   WWW.PROWESSCORP.COM <http://www.prowesscorp.com/> 

____________________________________________

 

From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Tee Darling
Sent: Sunday, January 11, 2009 10:03 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Need help - Configuring Wireless Network with ISA
Server 2006

 

Guys,
 I am in the process of configuring my Netgear RangeMax Wireles-N
Gigabit Router Access Point with an ISA Server 2006. Before I go ahead
and let you know my configuration problems, I just want to point out
that I have already read Tom Shinder's articles: 

http://www.isaserver.org/articles/2004wirelessdmzpart2.html

http://isaserver.org/tutorials/2004wirelessdmzpart1.html

Now my problem:
 I have assigned 3 NICs to the ISA server. The NIC assigned to the
External network has no IP address since this NIC is connected to my
Verizon box which gets IP dynamically from Verizon. The 2nd NIC assigned
to the Internal network has an IP 192.168.5.1, 255.255.255.0 and with no
default gateway. My ISA server has been configured as a DNS and a DHCP
server. This configuration has been working out fine since I configured
this network more than a year and a half ago. Two Laptops with wireless
built-in cards have been added to my network so I decided to purchase a
wireless access point and add it to the ISA server. 

Now the 3rd NIC which is connected to the Netgear Access Point has an IP
address of 192.168.1.5. The Access Point IP address is 192.168.1.1. I
have configured the access point not to issue an IP to the client as a
DHCP server. 

The Default Internal network and the Default External network have been
connected to the Wireless network which I have named WLAN-DMZ. I have
also created "One Network Rule that defines a NAT route relationship
between the DMZ and the Default External Network and  one Network Rule
that defines a NAT route relationship between the Default Internal
Network and the DMZ "  as Tom mentioned in his article part 2 above. 

DNS to DMZ interface - configured.
HTTP DMZ to Internet - configured

How will the Laptops get and an IP address from the ISA server? My
wireless connection seem not to be communicating at all with my ISA
server. When I try to configure the access point with the software that
came with it, it always tries to make the access point a DHCP server
even though I have manually configured it not to assign IP addresses to
wireless clients. 

Any thing am missing out here? 

Thanks for all of your help.

TD

 

 

 

 

Other related posts: