Re: Simple ISA Setup Required

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Mon, 22 Dec 2003 22:00:45 -0600

Hi Rolland,

Did you configure the ISA firewall to allow IP routing?

Go to www.isaserver.org and search for "PING" in the Search box and see
what comes up.

HTH,
Tom 

-----Original Message-----
From: Rolland Basi [mailto:basi948@xxxxxxxxxxx] 
Sent: Monday, December 22, 2003 4:13 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Simple ISA Setup Required

http://www.ISAserver.org

Yes,

I've configured my clients as SecureNAT Clients ie there gateway is
address of the ISA's internal NIC.
Pinging not possible as all on those clients. Performing a Ping and a
Tracert to my ISP is super fine unlike from the clients. Which gives
time out request.

Cheers
Rolland


>From: Jim Harrison <jim@xxxxxxxxxxxx>
>Reply-To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
>To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
>Subject: [isalist] Re: Simple ISA Setup Required
>Date: Mon, 22 Dec 2003 06:43:54 -0800
>
>http://www.ISAserver.org
>
>Exactly how is the ping test being performed?
>If the name resolution fails, for instance, the porevious configuration

>is irrelevant.
>
>   Jim Harrison
>   MCP(NT4, W2K), A+, Network+, PCG
>   http://isaserver.org/Jim_Harrison/
>   http://isatools.org
>   Read the help / books / articles!
>
>
>On Mon, 22 Dec 2003 22:13:05 +1100
>  "Greg Mulholland" <gmulholland@xxxxxxxxxxxxxxx> wrote:
>http://www.ISAserver.org
>
>Roland
>
>As Jim mentioned all internal clients if they are securenat clients and

>are configured in the LAT  should be able to ping any external
machines.
>Given that you have enabled ip routing in ISA. Is the gateway of the 
>internal machines set to the ISA's int interface (i.e securenat)
>
>Thanks
>
>Greg
>
>-----Original Message-----
>From: Rolland Basi [mailto:basi948@xxxxxxxxxxx]
>Sent: Monday, December 22, 2003 11:25 AM
>To: [ISAserver.org Discussion List]
>Subject: [isalist] Re: Simple ISA Setup Required
>
>http://www.ISAserver.org
>
>Hi Jim,
>
>Yes, undserstanding that browsing and ICMP are different, if browsing 
>is possible does that mean I should be able to ping from other clients 
>if the LAT Host and IP routing are configured?
>
>If the above are configured, what else do I need to do if Iam still not

>able to ping from other clients?
>
>Rgds
>Rolland
>
>
> >From: Jim Harrison <jim@xxxxxxxxxxxx>
> >Reply-To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
> >To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
> >Subject: [isalist] Re: Simple ISA Setup Required
> >Date: Thu, 18 Dec 2003 21:14:45 -0800
> >
> >http://www.ISAserver.org
> >
> >Using your browser to access web pages and ICMP are two entirely 
> >different matters.
> >In order for an internal client to use ICMP, you must:
> >1. configure the LAT host as a SecureNAT client 2. enable IP Routing 
> >in
>
> >IP Packet Filtering properties.
> >
> >If you can't accomplish both of these things, you can't ping across 
> >the
>
> >ISA.
> >
> >   Jim Harrison
> >   MCP(NT4, W2K), A+, Network+, PCG
> >   http://isaserver.org/Jim_Harrison/
> >   http://isatools.org
> >   Read the help / books / articles!
> >
> >
> >On Fri, 19 Dec 2003 14:55:56 +1000
> >  "Rolland Basi" <basi948@xxxxxxxxxxx> wrote:
> >http://www.ISAserver.org
> >
> >Hi All,
> >
> >I still have unsolved my problem after several times now uninstalling

> >and reinstalling my ISA Server.
> >The problem is that I can't ping my ISP from all other computers 
> >except
>
> >from the ISA Server itselft.
> >
> >I guess its my setup arrangements which is causing this problem. I 
> >can't find any simple setup arrangement similar to mine after 
> >searching
>
> >the ISA Articles.
> >
> >My setup is as follows:
> >I have a leased lined to my ISP. At my end my setup is as follows:
> >
> >LAN (DNS, DHCP) ------>ISA Server  ------> Cisco 800 series Router
> >-------> NTU(Leased Line Modem) -------> ISP
> >
> >My questions are,
> >1. Is there any article which I can refer to on how to configure my 
> >ISA
>
> >Server in regard to this setup?
> >2. Otherwise, is there a different setup arrangement that will enable

> >me to ping the ISP Server on other computers without reconfiguring 
> >the Router or requiring other devices?
> >3. Why is it that Browsing is possible from all computers but 
> >impossible for pinging even when ICMP Outbound IP Packet Filter and 
> >Protocol rules to allow any request has been configured.
> >
> >
> >Pls I need your help.
> >
> >_________________________________________________________________
> >The new MSN 8: smart spam protection and 2 months FREE* 
> >http://join.msn.com/?page=features/junkmail
> >
> >
> >------------------------------------------------------
> >List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> >ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> >ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> >------------------------------------------------------
> >Other Internet Software Marketing Sites:
> >Leading Network Software Directory: http://www.serverfiles.com
> >No.1 Exchange Server Resource Site: http://www.msexchange.org Windows

> >Security Resource Site: http://www.windowsecurity.com/ Network 
> >Security
>
> >Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
> >http://www.ntfaxfaq.com
> >------------------------------------------------------
> >You are currently subscribed to this ISAserver.org Discussion List
as:
> >jim@xxxxxxxxxxxx
> >To unsubscribe send a blank email to
> >$subst('Email.Unsub')
> >
> >------------------------------------------------------
> >List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> >ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> >ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> >------------------------------------------------------
> >Other Internet Software Marketing Sites:
> >Leading Network Software Directory: http://www.serverfiles.com
> >No.1 Exchange Server Resource Site: http://www.msexchange.org Windows

> >Security Resource Site: http://www.windowsecurity.com/ Network 
> >Security
>
> >Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
> >http://www.ntfaxfaq.com
> >------------------------------------------------------
> >You are currently subscribed to this ISAserver.org Discussion List
as:
> >basi948@xxxxxxxxxxx
> >To unsubscribe send a blank email to
> >$subst('Email.Unsub')
>
>_________________________________________________________________
>The new MSN 8: advanced junk mail protection and 2 months FREE* 
>http://join.msn.com/?page=features/junkmail
>
>
>------------------------------------------------------
>List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
>ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
>ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
>------------------------------------------------------
>Other Internet Software Marketing Sites:
>Leading Network Software Directory: http://www.serverfiles.com
>No.1 Exchange Server Resource Site: http://www.msexchange.org Windows 
>Security Resource Site: http://www.windowsecurity.com/ Network Security

>Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: 
>http://www.ntfaxfaq.com
>------------------------------------------------------
>You are currently subscribed to this ISAserver.org Discussion List as:
>gmulholland@xxxxxxxxxxxxxxx
>To unsubscribe send a blank email to
>$subst('Email.Unsub')
>
>
>
>------------------------------------------------------
>List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
>ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
>ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
>------------------------------------------------------
>Other Internet Software Marketing Sites:
>Leading Network Software Directory: http://www.serverfiles.com
>No.1 Exchange Server Resource Site: http://www.msexchange.org Windows 
>Security Resource Site: http://www.windowsecurity.com/ Network Security

>Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: 
>http://www.ntfaxfaq.com
>------------------------------------------------------
>You are currently subscribed to this ISAserver.org Discussion List as: 
>jim@xxxxxxxxxxxx
>To unsubscribe send a blank email to 
>$subst('Email.Unsub')
>
>------------------------------------------------------
>List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
>ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
>ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
>------------------------------------------------------
>Other Internet Software Marketing Sites:
>Leading Network Software Directory: http://www.serverfiles.com
>No.1 Exchange Server Resource Site: http://www.msexchange.org Windows 
>Security Resource Site: http://www.windowsecurity.com/ Network Security

>Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: 
>http://www.ntfaxfaq.com
>------------------------------------------------------
>You are currently subscribed to this ISAserver.org Discussion List as: 
>basi948@xxxxxxxxxxx
>To unsubscribe send a blank email to 
>$subst('Email.Unsub')

_________________________________________________________________
MSN 8 with e-mail virus protection service: 2 months FREE*
http://join.msn.com/?page=features/virus


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')




Other related posts: