RE: Static routes for specific servers

  • From: "Richard Morris" <richard@xxxxxxxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Fri, 20 May 2005 08:03:21 +0200

The ISA box has two interfaces, X1 Internal X1 External, then I have a
Cisco 2600 router which routes to a PIX, and the PIX routes to a 2501
which is connected to a ATM connection. 

Both on same subnet. What you want to achieve is difficult and
expensive. Rather just put in a second ISA box that runs your mail, and
the existing one for HTTP and other traffic. Our ISA box uses the
gateway of the broadband connection and the mail server the gateway of
the Cisco router. 

Hoe this helps. 

-----Original Message-----
From: adrian bolzan [mailto:abolzan@xxxxxxxxxxxxxxxxxxxxxxxxx] 
Sent: 20 May 2005 07:51 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Static routes for specific servers

http://www.ISAserver.org


Thanks, Richard.
So, how many interfaces does your ISA server have?  Do you have a single
EXTERNAL interface with the two internet connections on a hub/switch
connected to the EXT interface? If so, can you specify the route for the
specific server?
DO your two servers reside on different subnets using different
interfaces? 

Thanks for any input- I am trying to understand the topology and what
may be involved.

My initial thought from your email, etc. is:
                Internet                
                    |
                   EXT
                    |
Server1 -DMZ1--ISA--DMZ2-Server2
                    |
                   INT

Or
                  Internet
                  |      |
               EXT1   EXT2
                      |
  Server1 -DMZ1--ISA--DMZ2-Server2
                      |
                     INT

Or
???

(hope that formated ok...)

Cheers.


> -----Original Message-----
> From: Richard Morris [mailto:richard@xxxxxxxxxxxxxxxxx]
> Sent: Friday, 20 May 2005 3:32 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: Static routes for specific servers
>
> http://www.ISAserver.org
>
> We have X2 internet connections as per what you want to do.
> We have X2 servers each with a separate gateway. The email
> runs on ATM and all HTTP on a broadband wireless. Not sure
> about load balancing though, prob some plug in available
>
> -----Original Message-----
> From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx]
> Sent: 20 May 2005 07:16 AM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: Static routes for specific servers
>
> http://www.ISAserver.org
>
> Neither product has any form of load balancing.
>
> -----Original Message-----
> From: Andrew English [mailto:andrew@xxxxxxxxxxxxxxxxxxxxxx]
> Sent: Thursday, May 19, 2005 7:39 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: Static routes for specific servers
>
> http://www.ISAserver.org
>
> Not sure which version of ISA you are talking about. However ISA
> 2000/2004 do not support dual WAN connections. I am not sure
> at the extent ISA 2000's load balancing works, but I know ISA
> 2004 doesn't support it.
>
> Andrew
>
> -----Original Message-----
> From: adrian bolzan [mailto:abolzan@xxxxxxxxxxxxxxxxxxxxxxxxx]
> Sent: Thursday, May 19, 2005 9:35 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] Static routes for specific servers
>
> http://www.ISAserver.org
>
>
> Hi,
>
> I do not use ISA server but am investigating it at the moment.
> I have a design question which I hope you can answer.
>
> We wish to have two internet connections which connect to a
> hub on the EXT interface
>
> Internet --- Router1 (Public IP 1) ---
>
>                                                 Hub ---  F/W  --DMZ--
> Squid server (192.168.1.25), mail server (.1.30) Internet ---
> Router2 (public IP 2) ---
>
>                      
>
> The default route for the F/W is Router (Public IP 1)
> Router1 is for business critical connections (such as email), whereas
> Router2 will be an ADSL connection for internal staff's web browsing.
>
> We have two servers on the DMZ, a squid server and a mail server.
>
>
> Is there a way to set a static route so that the squid server
> connects to the internet via the Router2 interface rather
> than the Router1 interface, whilst still allowing the mail
> server to sent mail via the firewall's default route (Router1)?
>
> Is there a better way to do this?
>
> Best regards,
> Adrian
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site:
> http://www.windowsecurity.com/ Network Security Library:
> http://www.secinf.net/ Windows 2000/NT Fax Solutions:
> http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> jim@xxxxxxxxxxxx
> To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>
> All mail to and from this domain is GFI-scanned.
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site:
> http://www.windowsecurity.com/ Network Security Library:
> http://www.secinf.net/ Windows 2000/NT Fax Solutions:
> http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> richard@xxxxxxxxxxxxxxxxx
> To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site:
> http://www.windowsecurity.com/ Network Security Library:
> http://www.secinf.net/ Windows 2000/NT Fax Solutions:
> http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion
> List as: abolzan@xxxxxxxxxxxxxxxxxxxxxxxxx To unsubscribe
> visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>

============================================================
IMPORTANT - This email and any attachments is confidential.
If received in error, please contact the sender and delete
all copies of this email. Please note that any use,
dissemination, further distribution or reproduction of this
message in any form is strictly prohibited. Before opening or
using attachments, check them for viruses and defects.
Regardless of any loss, damage or consequence, whether caused
by the negligence of the sender or not, resulting directly or
indirectly from the use of any attached files, our liability
is limited to resupplying any affected attachments. 
Any representations or opinions expressed in this email are
those of the individual sender, and not necessarily those
of the Capital Transport Services.
============================================================

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
richard@xxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx






Other related posts: