Re: RES: RE: Two external interface internet (Routing)

  • From: Jim Harrison <jim@xxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Mon, 01 Dec 2003 10:25:48 -0800

Let's get some clarity here.
ISA
DOES
NOT
SUPPORT
MULTIPLE
PUBLIC
INTERFACES

ISA (Windows, really) will support multiple subnets on a single interface.
..so while your workaround is technically functional, your beginning statement 
is patently false.

  Jim Harrison
  MCP(NT4, W2K), A+, Network+, PCG
  http://isaserver.org/Jim_Harrison/
  http://isatools.org
  Read the help / books / articles!


On Mon, 1 Dec 2003 12:17:37 -0500
 "Jay" <jschwarzkopf@xxxxxxxxxx> wrote:
http://www.ISAserver.org

They're wrong.  It's actually pretty easy to do.

If I understand you correctly, all traffic should go through one ISP, except
that traffic destined for x.y.z.0 network.  This might be useful if you
wanted to dedicate an entire ISP bandwidth to a private remote office vpn
for example.

Join both ISP networks and your external nic into a switch.
Add a second IP address to your external nic.
Leave the default gateway on the primary IP.
Add a route on your ISA server for only the 222.222.222.0 network.


We've had this configuration with a failover script for 2 years.  Actually
with 5 remote offices vpn'd to external firewalls.

----- Original Message ----- 
From: "Fabricio Tose" <fabriciotose@xxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Saturday, November 29, 2003 2:00 PM
Subject: [isalist] RES: RE: Two external interface internet (Routing)


> http://www.ISAserver.org
>
> G´day all,
>
> Does everybody agree with the information below?
>
> Regards,
> Fabricio Tose
>
> -----Mensagem original-----
> De: John Tolmachoff (Lists) [mailto:johnlist@xxxxxxxxxxxxxxxxxxx]
> Enviada em: sexta-feira, 28 de novembro de 2003 12:40
> Para: [ISAserver.org Discussion List]
> Assunto: [isalist] RE: Two external interface internet (Routing)
>
>
> http://www.ISAserver.org
>
> ISA does not support more than one external interface. You would need a
3rd
> party product for that.
>
> John Tolmachoff
> Engineer/Consultant/Owner
> eServices For You
>
> > -----Original Message-----
> > From: Fabricio Tose [mailto:fabriciotose@xxxxxxxxxxxx]
> > Sent: Friday, November 28, 2003 3:53 AM
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] Two external interface internet (Routing)
> > Importance: High
> >
> > http://www.ISAserver.org
> >
> > G´day all,
> >
> > I work with ISA as NAT in my network and I have two external interface
for
> > internet.
> >
> > I´d like to have some help here:
> > I need to connect to an especific network through only one of my links.
> > For example:
> > Every time I access the network 222.222.222.0 255.255.255.0, it should
be
> > made through NEC2. And the access for any other network BUT
222.222.222.0
> > 255.255.255.0, should be made through NEC1.
> >
> > Please, can somebody send me an article or site related to this subject?
> > It´s very important!
> >
> > Regards,
> > Fabricio
> >
> >
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Other Internet Software Marketing Sites:
> > Leading Network Software Directory: http://www.serverfiles.com
> > No.1 Exchange Server Resource Site: http://www.msexchange.org
> > Windows Security Resource Site: http://www.windowsecurity.com/
> > Network Security Library: http://www.secinf.net/
> > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org Discussion List as:
> > johnlist@xxxxxxxxxxxxxxxxxxx
> > To unsubscribe send a blank email to $subst('Email.Unsub')
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> fabriciotose@xxxxxxxxxxxx
> To unsubscribe send a blank email to $subst('Email.Unsub')
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
jschwarzkopf@xxxxxxxxxx
> To unsubscribe send a blank email to $subst('Email.Unsub')


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: 
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


Other related posts: