Re: RES: RE: Two external interface internet (Routing)

  • From: "Jay" <jschwarzkopf@xxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Mon, 1 Dec 2003 12:17:37 -0500

They're wrong.  It's actually pretty easy to do.

If I understand you correctly, all traffic should go through one ISP, except
that traffic destined for x.y.z.0 network.  This might be useful if you
wanted to dedicate an entire ISP bandwidth to a private remote office vpn
for example.

Join both ISP networks and your external nic into a switch.
Add a second IP address to your external nic.
Leave the default gateway on the primary IP.
Add a route on your ISA server for only the 222.222.222.0 network.


We've had this configuration with a failover script for 2 years.  Actually
with 5 remote offices vpn'd to external firewalls.

----- Original Message ----- 
From: "Fabricio Tose" <fabriciotose@xxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Saturday, November 29, 2003 2:00 PM
Subject: [isalist] RES: RE: Two external interface internet (Routing)


> http://www.ISAserver.org
>
> G´day all,
>
> Does everybody agree with the information below?
>
> Regards,
> Fabricio Tose
>
> -----Mensagem original-----
> De: John Tolmachoff (Lists) [mailto:johnlist@xxxxxxxxxxxxxxxxxxx]
> Enviada em: sexta-feira, 28 de novembro de 2003 12:40
> Para: [ISAserver.org Discussion List]
> Assunto: [isalist] RE: Two external interface internet (Routing)
>
>
> http://www.ISAserver.org
>
> ISA does not support more than one external interface. You would need a
3rd
> party product for that.
>
> John Tolmachoff
> Engineer/Consultant/Owner
> eServices For You
>
> > -----Original Message-----
> > From: Fabricio Tose [mailto:fabriciotose@xxxxxxxxxxxx]
> > Sent: Friday, November 28, 2003 3:53 AM
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] Two external interface internet (Routing)
> > Importance: High
> >
> > http://www.ISAserver.org
> >
> > G´day all,
> >
> > I work with ISA as NAT in my network and I have two external interface
for
> > internet.
> >
> > I´d like to have some help here:
> > I need to connect to an especific network through only one of my links.
> > For example:
> > Every time I access the network 222.222.222.0 255.255.255.0, it should
be
> > made through NEC2. And the access for any other network BUT
222.222.222.0
> > 255.255.255.0, should be made through NEC1.
> >
> > Please, can somebody send me an article or site related to this subject?
> > It´s very important!
> >
> > Regards,
> > Fabricio
> >
> >
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Other Internet Software Marketing Sites:
> > Leading Network Software Directory: http://www.serverfiles.com
> > No.1 Exchange Server Resource Site: http://www.msexchange.org
> > Windows Security Resource Site: http://www.windowsecurity.com/
> > Network Security Library: http://www.secinf.net/
> > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org Discussion List as:
> > johnlist@xxxxxxxxxxxxxxxxxxx
> > To unsubscribe send a blank email to $subst('Email.Unsub')
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> fabriciotose@xxxxxxxxxxxx
> To unsubscribe send a blank email to $subst('Email.Unsub')
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
jschwarzkopf@xxxxxxxxxx
> To unsubscribe send a blank email to $subst('Email.Unsub')



Other related posts: