Re: Routing question
- From: "Jim Harrison" <jim@xxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Fri, 14 Jun 2002 21:38:53 -0700
Hey, anybody's entitled to a slipped bit.. :-p
It sounds like you've installed and configured RRAS, so the next question is
"how are the DMZ hosts configured?"
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/authors/harrison/
Read the books!
----- Original Message -----
From: "John Tolmachoff" <isalist@xxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Friday, June 14, 2002 5:22 PM
Subject: [isalist] Re: Routing question
http://www.ISAserver.org
.149 is in subnet block 10
.177 is in subnet block 12
I did not expect Jim to miss that. :(
I have subnetted at a router just inside of ISP router.
Route print is as follows:
0.0.0.0 0.0.0.0 xx.xx.xx.145
xx.xx.xx.149
xx.xx.xx.144 255.255.255.240 xx.xx.xx.149
xx.xx.xx.149
xx.xx.xx.149 255.255.255.255 127.0.0.1
127.0.0.1
xx.xx.xx.176 255.255.255.240 xx.xx.xx.177
xx.xx.xx.177
xx.xx.xx.177 255.255.255.255 127.0.0.1
127.0.0.1
xx.255.255.255 255.255.255.255 xx.xx.xx.149
xx.xx.xx.149
xx.255.255.255 255.255.255.255 xx.xx.xx.177
xx.xx.xx.177
127.0.0.1 255.0.0.0 127.0.0.1
127.0.0.1
192.168.20.0 255.255.255.0 192.168.20.5
192.168.20.5
192.168.20.5 255.255.255.255 192.168.20.5
192.168.20.5
224.0.0.0 224.0.0.0 xx.xx.xx.149
xx.xx.xx.149
224.0.0.0 224.0.0.0 xx.xx.xx.177
xx.xx.xx.177
224.0.0.0 224.0.0.0 192.168.20.5
192.168.20.5
255.255.255.255 255.255.255.255 xx.xx.xx.149 xx.xx.xx.149
No persistent.
John Tolmachoff
IT Manager, Network Engineer
RelianceSoft, Inc.
Fullerton, CA 92835
www.reliancesoft.com
-----Original Message-----
From: Jay [mailto:jschwarzkopf@xxxxxxxxxx]
Sent: Friday, June 14, 2002 10:24 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Routing question
http://www.ISAserver.org
His subnets look okay to me. What does a route print show? Have you
(or
your ISP) subnetted your IP range on your external router?
----- Original Message -----
From: "Jim Harrison" <jim@xxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Friday, June 14, 2002 12:24 PM
Subject: [isalist] Re: Routing question
> http://www.ISAserver.org
>
>
> Your DMZ and the external NICs are in the same logical subnet; you
should
> subnet the DMZ as .248 or greater and split your IPs accordingly.
> Jim Harrison
> MCP(NT4, W2K), A+, Network+, PCG
> http://isaserver.org/authors/harrison/
> Read the books!
> ----- Original Message -----
> From: "John Tolmachoff" <isalist@xxxxxxxxxxxx>
> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
> Sent: Thursday, June 13, 2002 3:38 PM
> Subject: [isalist] Routing question
>
>
> http://www.ISAserver.org
>
>
>
> This is a multi-part message in MIME format.
>
>
>
>
------------------------------------------------------------------------
--
--
> ----
>
>
> OK, I am stumped with a basic problem.
>
>
>
> I am in the midst of setting up a test lab for some simulations.
>
>
>
> ISA is three-homed.
>
>
>
> External xx.xx.xx.149 Mask 255.255.255.240 Gateway
xx.xx.xx.145
>
> Internal 192.168.20.5 Mask 255.255.255.0
>
> DMZ xx.xx.xx.177 Mask 255.255.255.240
>
>
>
> ISA is not installed yet, only serving as router and NAT. I was going
to
> wait to install ISA until after the first simulation which involves a
SQL
> migration.
>
>
>
> Internal can access Internet.
>
> ISA can access Internet.
>
> DMZ can not access Internet.
>
> Internal can ping DMZ.
>
> DMZ can ping internal.
>
> External can not ping DMZ.
>
>
>
> >From DMZ, I can ping both internal and external of ISA, but not ISA
gateway
> of xx.xx.xx.145.
>
>
>
> John Tolmachoff
>
> IT Manager, Network Engineer
>
> RelianceSoft, Inc.
>
> Fullerton, CA 92835
>
> www.reliancesoft.com
>
>
>
>
>
>
>
------------------------------------------------------------------------
--
--
> ----
>
>
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> jim@xxxxxxxxxxxx
> To unsubscribe send a blank email to
$subst('Email.Unsub')
>
>
>
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
jschwarzkopf@xxxxxxxxxx
> To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
isalist@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
