Re: Simple ISA Setup Required
- From: "Jim Harrison" <jim@xxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Mon, 22 Dec 2003 15:52:42 -0800
If:
1. the clients and the ISA exist on the same subnet
or
2. you've correctly provided a route from the client subnet to the ISA
and
3. you have not added the changes specified here:
http://support.microsoft.com/default.aspx?scid=kb;en-us;283213&Product=ISAS
and
4. you've enabled IP routing in IP Packet Filtering properties
and
5. the destination responds to ICMP echo requests
This should be working.
Get a trace from both sides of ISA while trying to ping from a failing
client.
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://www.microsoft.com/isaserver
http://isaserver.org/Jim_Harrison
http://isatools.org
Read the help, books and articles!
----- Original Message -----
From: "Rolland Basi" <basi948@xxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Monday, December 22, 2003 14:12
Subject: [isalist] Re: Simple ISA Setup Required
http://www.ISAserver.org
Yes,
I've configured my clients as SecureNAT Clients ie there gateway is address
of the ISA's internal NIC.
Pinging not possible as all on those clients. Performing a Ping and a
Tracert to my ISP is super fine unlike from the clients. Which gives time
out request.
Cheers
Rolland
>From: Jim Harrison <jim@xxxxxxxxxxxx>
>Reply-To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
>To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
>Subject: [isalist] Re: Simple ISA Setup Required
>Date: Mon, 22 Dec 2003 06:43:54 -0800
>
>http://www.ISAserver.org
>
>Exactly how is the ping test being performed?
>If the name resolution fails, for instance, the porevious configuration is
>irrelevant.
>
> Jim Harrison
> MCP(NT4, W2K), A+, Network+, PCG
> http://isaserver.org/Jim_Harrison/
> http://isatools.org
> Read the help / books / articles!
>
>
>On Mon, 22 Dec 2003 22:13:05 +1100
> "Greg Mulholland" <gmulholland@xxxxxxxxxxxxxxx> wrote:
>http://www.ISAserver.org
>
>Roland
>
>As Jim mentioned all internal clients if they are securenat clients and
>are configured in the LAT should be able to ping any external machines.
>Given that you have enabled ip routing in ISA. Is the gateway of the
>internal machines set to the ISA's int interface (i.e securenat)
>
>Thanks
>
>Greg
>
>-----Original Message-----
>From: Rolland Basi [mailto:basi948@xxxxxxxxxxx]
>Sent: Monday, December 22, 2003 11:25 AM
>To: [ISAserver.org Discussion List]
>Subject: [isalist] Re: Simple ISA Setup Required
>
>http://www.ISAserver.org
>
>Hi Jim,
>
>Yes, undserstanding that browsing and ICMP are different, if browsing is
>possible does that mean I should be able to ping from other clients if
>the LAT Host and IP routing are configured?
>
>If the above are configured, what else do I need to do if Iam still not
>able to ping from other clients?
>
>Rgds
>Rolland
>
>
> >From: Jim Harrison <jim@xxxxxxxxxxxx>
> >Reply-To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
> >To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
> >Subject: [isalist] Re: Simple ISA Setup Required
> >Date: Thu, 18 Dec 2003 21:14:45 -0800
> >
> >http://www.ISAserver.org
> >
> >Using your browser to access web pages and ICMP are two entirely
> >different matters.
> >In order for an internal client to use ICMP, you must:
> >1. configure the LAT host as a SecureNAT client 2. enable IP Routing in
>
> >IP Packet Filtering properties.
> >
> >If you can't accomplish both of these things, you can't ping across the
>
> >ISA.
> >
> > Jim Harrison
> > MCP(NT4, W2K), A+, Network+, PCG
> > http://isaserver.org/Jim_Harrison/
> > http://isatools.org
> > Read the help / books / articles!
> >
> >
> >On Fri, 19 Dec 2003 14:55:56 +1000
> > "Rolland Basi" <basi948@xxxxxxxxxxx> wrote:
> >http://www.ISAserver.org
> >
> >Hi All,
> >
> >I still have unsolved my problem after several times now uninstalling
> >and reinstalling my ISA Server.
> >The problem is that I can't ping my ISP from all other computers except
>
> >from the ISA Server itselft.
> >
> >I guess its my setup arrangements which is causing this problem. I
> >can't find any simple setup arrangement similar to mine after searching
>
> >the ISA Articles.
> >
> >My setup is as follows:
> >I have a leased lined to my ISP. At my end my setup is as follows:
> >
> >LAN (DNS, DHCP) ------>ISA Server ------> Cisco 800 series Router
> >-------> NTU(Leased Line Modem) -------> ISP
> >
> >My questions are,
> >1. Is there any article which I can refer to on how to configure my ISA
>
> >Server in regard to this setup?
> >2. Otherwise, is there a different setup arrangement that will enable
> >me to ping the ISP Server on other computers without reconfiguring the
> >Router or requiring other devices?
> >3. Why is it that Browsing is possible from all computers but
> >impossible for pinging even when ICMP Outbound IP Packet Filter and
> >Protocol rules to allow any request has been configured.
> >
> >
> >Pls I need your help.
> >
> >_________________________________________________________________
> >The new MSN 8: smart spam protection and 2 months FREE*
> >http://join.msn.com/?page=features/junkmail
> >
> >
> >------------------------------------------------------
> >List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> >ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> >ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> >------------------------------------------------------
> >Other Internet Software Marketing Sites:
> >Leading Network Software Directory: http://www.serverfiles.com
> >No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
> >Security Resource Site: http://www.windowsecurity.com/ Network Security
>
> >Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
> >http://www.ntfaxfaq.com
> >------------------------------------------------------
> >You are currently subscribed to this ISAserver.org Discussion List as:
> >jim@xxxxxxxxxxxx
> >To unsubscribe send a blank email to
> >$subst('Email.Unsub')
> >
> >------------------------------------------------------
> >List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> >ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> >ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> >------------------------------------------------------
> >Other Internet Software Marketing Sites:
> >Leading Network Software Directory: http://www.serverfiles.com
> >No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
> >Security Resource Site: http://www.windowsecurity.com/ Network Security
>
> >Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
> >http://www.ntfaxfaq.com
> >------------------------------------------------------
> >You are currently subscribed to this ISAserver.org Discussion List as:
> >basi948@xxxxxxxxxxx
> >To unsubscribe send a blank email to
> >$subst('Email.Unsub')
>
>_________________________________________________________________
>The new MSN 8: advanced junk mail protection and 2 months FREE*
>http://join.msn.com/?page=features/junkmail
>
>
>------------------------------------------------------
>List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
>ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
>ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
>------------------------------------------------------
>Other Internet Software Marketing Sites:
>Leading Network Software Directory: http://www.serverfiles.com
>No.1 Exchange Server Resource Site: http://www.msexchange.org
>Windows Security Resource Site: http://www.windowsecurity.com/
>Network Security Library: http://www.secinf.net/
>Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
>------------------------------------------------------
>You are currently subscribed to this ISAserver.org Discussion List as:
>gmulholland@xxxxxxxxxxxxxxx
>To unsubscribe send a blank email to
>$subst('Email.Unsub')
>
>
>
>------------------------------------------------------
>List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
>ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
>ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
>------------------------------------------------------
>Other Internet Software Marketing Sites:
>Leading Network Software Directory: http://www.serverfiles.com
>No.1 Exchange Server Resource Site: http://www.msexchange.org
>Windows Security Resource Site: http://www.windowsecurity.com/
>Network Security Library: http://www.secinf.net/
>Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
>------------------------------------------------------
>You are currently subscribed to this ISAserver.org Discussion List as:
>jim@xxxxxxxxxxxx
>To unsubscribe send a blank email to $subst('Email.Unsub')
>
>------------------------------------------------------
>List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
>ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
>ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
>------------------------------------------------------
>Other Internet Software Marketing Sites:
>Leading Network Software Directory: http://www.serverfiles.com
>No.1 Exchange Server Resource Site: http://www.msexchange.org
>Windows Security Resource Site: http://www.windowsecurity.com/
>Network Security Library: http://www.secinf.net/
>Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
>------------------------------------------------------
>You are currently subscribed to this ISAserver.org Discussion List as:
>basi948@xxxxxxxxxxx
>To unsubscribe send a blank email to $subst('Email.Unsub')
_________________________________________________________________
MSN 8 with e-mail virus protection service: 2 months FREE*
http://join.msn.com/?page=features/virus
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
