Re: Routing with ISA not Working
- From: <wajnee@xxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- To: isalist@xxxxxxxxxxxxx
- Date: Mon, 24 Jun 2002 10:06:35 PKT
For testing I made a Packet Filter rule to allow all any IP protocol in both
direction for one of perimeter network system. And made a protocol rule to
allow All IP Traffic to and from the trihomed DMZ segment.
But I m facing the same situation.
Can you tell me what should I do with ISA by that why my DMZ system(puplic IP)
will be able to ping,trace and browse Internet as it was doing before ISA.
Please reply me soon.
Regards,
On 24 Jun 2002 03:21 PKT you wrote:
> http://www.ISAserver.org
>
>
> Take a read in the ISA help, at www.microsoft.com/isaserver and
> www.isaserver.org for ISA setup and configuration.
> By default, ISA doesn't pass anything unless some rule allows it.
>
> Jim Harrison
> MCP(NT4, W2K), A , Network , PCG
> http://isaserver.org/authors/harrison/
> Read the books!
> ----- Original Message -----
> From: "Wajnee" <wajnee@xxxxxxxxxx>
> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
> Sent: Sunday, June 23, 2002 8:25 AM
> Subject: [isalist] Routing with ISA not Working
>
>
> http://www.ISAserver.org
>
>
> Hi All,
>
> Before Installing ISA in Trihomed DMZ,
>
> In Installed Windows 2000 on server with TWO NIC (one has external public
> IP
> other one has internal public IP), and my client system has one internal
> public IP with GW of windows 2000 Internal public IP
>
> Then I enabled Routing on Win2k by
> Registry Key:
> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
>
> My client is able to Ping, Trace, and browse Internet.
>
>
> Then I installed ISA in Trihomed DMZ on Windows 2000.
> ISA server (1 NIC with Public IP, 1 NIC with Public internal IP, 1 NIC
> with
> Private IP).
> I enabled Packet Filtering by ISA
> Access Policy>>>IP Packet Filters >> Properties>> General Tab >> Enable
> Packet Filtering >> Enable IP routing
>
> When I Ping, Trace, browse Internet I failed on my DMZ System (with
> internal
> public IP) either I enable Registry Key or disable that key.
>
> Why?????????????????????
>
>
>
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> jim@xxxxxxxxxxxx
> To unsubscribe send a blank email to $subst('Email.Unsub')
>
>
>
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> wajnee@xxxxxxxxxx
> To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
