RE: Static routes for specific servers
- From: "adrian bolzan" <abolzan@xxxxxxxxxxxxxxxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Fri, 20 May 2005 16:20:48 +1000
Hi,
Thanks for your assistance. Your reply has been very informative.
I could therefore use two of my current firewalls to do the same thing.
I was hoping that ISA 2004 might provide me with a few more options.
Thanks again,
Adrian
> -----Original Message-----
> From: Richard Morris [mailto:richard@xxxxxxxxxxxxxxxxx]
> Sent: Friday, 20 May 2005 4:03 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: Static routes for specific servers
>
> http://www.ISAserver.org
>
> The ISA box has two interfaces, X1 Internal X1 External, then
> I have a Cisco 2600 router which routes to a PIX, and the PIX
> routes to a 2501 which is connected to a ATM connection.
>
> Both on same subnet. What you want to achieve is difficult
> and expensive. Rather just put in a second ISA box that runs
> your mail, and the existing one for HTTP and other traffic.
> Our ISA box uses the gateway of the broadband connection and
> the mail server the gateway of the Cisco router.
>
> Hoe this helps.
>
> -----Original Message-----
> From: adrian bolzan [mailto:abolzan@xxxxxxxxxxxxxxxxxxxxxxxxx]
> Sent: 20 May 2005 07:51 AM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: Static routes for specific servers
>
> http://www.ISAserver.org
>
>
> Thanks, Richard.
> So, how many interfaces does your ISA server have? Do you
> have a single EXTERNAL interface with the two internet
> connections on a hub/switch connected to the EXT interface?
> If so, can you specify the route for the specific server?
> DO your two servers reside on different subnets using
> different interfaces?
>
> Thanks for any input- I am trying to understand the topology
> and what may be involved.
>
> My initial thought from your email, etc. is:
> Internet
> |
> EXT
> |
> Server1 -DMZ1--ISA--DMZ2-Server2
> |
> INT
>
> Or
> Internet
> | |
> EXT1 EXT2
> |
> Server1 -DMZ1--ISA--DMZ2-Server2
> |
> INT
>
> Or
> ???
>
> (hope that formated ok...)
>
> Cheers.
>
>
> > -----Original Message-----
> > From: Richard Morris [mailto:richard@xxxxxxxxxxxxxxxxx]
> > Sent: Friday, 20 May 2005 3:32 PM
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] RE: Static routes for specific servers
> >
> > http://www.ISAserver.org
> >
> > We have X2 internet connections as per what you want to do.
> > We have X2 servers each with a separate gateway. The email
> runs on ATM
> > and all HTTP on a broadband wireless. Not sure about load balancing
> > though, prob some plug in available
> >
> > -----Original Message-----
> > From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx]
> > Sent: 20 May 2005 07:16 AM
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] RE: Static routes for specific servers
> >
> > http://www.ISAserver.org
> >
> > Neither product has any form of load balancing.
> >
> > -----Original Message-----
> > From: Andrew English [mailto:andrew@xxxxxxxxxxxxxxxxxxxxxx]
> > Sent: Thursday, May 19, 2005 7:39 PM
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] RE: Static routes for specific servers
> >
> > http://www.ISAserver.org
> >
> > Not sure which version of ISA you are talking about. However ISA
> > 2000/2004 do not support dual WAN connections. I am not sure at the
> > extent ISA 2000's load balancing works, but I know ISA
> > 2004 doesn't support it.
> >
> > Andrew
> >
> > -----Original Message-----
> > From: adrian bolzan [mailto:abolzan@xxxxxxxxxxxxxxxxxxxxxxxxx]
> > Sent: Thursday, May 19, 2005 9:35 PM
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] Static routes for specific servers
> >
> > http://www.ISAserver.org
> >
> >
> > Hi,
> >
> > I do not use ISA server but am investigating it at the moment.
> > I have a design question which I hope you can answer.
> >
> > We wish to have two internet connections which connect to a
> hub on the
> > EXT interface
> >
> > Internet --- Router1 (Public IP 1) ---
> >
> > Hub --- F/W --DMZ--
> > Squid server (192.168.1.25), mail server (.1.30) Internet ---
> > Router2 (public IP 2) ---
> >
> >
> >
> > The default route for the F/W is Router (Public IP 1)
> > Router1 is for business critical connections (such as
> email), whereas
> > Router2 will be an ADSL connection for internal staff's web
> browsing.
> >
> > We have two servers on the DMZ, a squid server and a mail server.
> >
> >
> > Is there a way to set a static route so that the squid
> server connects
> > to the internet via the Router2 interface rather than the Router1
> > interface, whilst still allowing the mail server to sent
> mail via the
> > firewall's default route (Router1)?
> >
> > Is there a better way to do this?
> >
> > Best regards,
> > Adrian
> >
> >
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Other Internet Software Marketing Sites:
> > World of Windows Networking:
> http://www.windowsnetworking.com Leading
> > Network Software Directory: http://www.serverfiles.com
> > No.1 Exchange Server Resource Site:
> http://www.msexchange.org Windows
> > Security Resource Site:
> > http://www.windowsecurity.com/ Network Security Library:
> > http://www.secinf.net/ Windows 2000/NT Fax Solutions:
> > http://www.ntfaxfaq.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org
> Discussion List as:
> > jim@xxxxxxxxxxxx
> > To unsubscribe visit
> > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > Report abuse to listadmin@xxxxxxxxxxxxx
> >
> > All mail to and from this domain is GFI-scanned.
> >
> >
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Other Internet Software Marketing Sites:
> > World of Windows Networking:
> http://www.windowsnetworking.com Leading
> > Network Software Directory: http://www.serverfiles.com
> > No.1 Exchange Server Resource Site:
> http://www.msexchange.org Windows
> > Security Resource Site:
> > http://www.windowsecurity.com/ Network Security Library:
> > http://www.secinf.net/ Windows 2000/NT Fax Solutions:
> > http://www.ntfaxfaq.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org
> Discussion List as:
> > richard@xxxxxxxxxxxxxxxxx
> > To unsubscribe visit
> > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > Report abuse to listadmin@xxxxxxxxxxxxx
> >
> >
> >
> >
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Other Internet Software Marketing Sites:
> > World of Windows Networking:
> http://www.windowsnetworking.com Leading
> > Network Software Directory: http://www.serverfiles.com
> > No.1 Exchange Server Resource Site:
> http://www.msexchange.org Windows
> > Security Resource Site:
> > http://www.windowsecurity.com/ Network Security Library:
> > http://www.secinf.net/ Windows 2000/NT Fax Solutions:
> > http://www.ntfaxfaq.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org
> Discussion List as:
> > abolzan@xxxxxxxxxxxxxxxxxxxxxxxxx To unsubscribe visit
> > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > Report abuse to listadmin@xxxxxxxxxxxxx
> >
>
> ============================================================
> IMPORTANT - This email and any attachments is confidential.
> If received in error, please contact the sender and delete
> all copies of this email. Please note that any use,
> dissemination, further distribution or reproduction of this
> message in any form is strictly prohibited. Before opening or
> using attachments, check them for viruses and defects.
> Regardless of any loss, damage or consequence, whether caused
> by the negligence of the sender or not, resulting directly or
> indirectly from the use of any attached files, our liability
> is limited to resupplying any affected attachments.
> Any representations or opinions expressed in this email are
> those of the individual sender, and not necessarily those of
> the Capital Transport Services.
> ============================================================
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site:
> http://www.windowsecurity.com/ Network Security Library:
> http://www.secinf.net/ Windows 2000/NT Fax Solutions:
> http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> richard@xxxxxxxxxxxxxxxxx
> To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>
>
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site:
> http://www.windowsecurity.com/ Network Security Library:
> http://www.secinf.net/ Windows 2000/NT Fax Solutions:
> http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion
> List as: abolzan@xxxxxxxxxxxxxxxxxxxxxxxxx To unsubscribe
> visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>
============================================================
IMPORTANT - This email and any attachments is confidential.
If received in error, please contact the sender and delete
all copies of this email. Please note that any use,
dissemination, further distribution or reproduction of this
message in any form is strictly prohibited. Before opening or
using attachments, check them for viruses and defects.
Regardless of any loss, damage or consequence, whether caused
by the negligence of the sender or not, resulting directly or
indirectly from the use of any attached files, our liability
is limited to resupplying any affected attachments.
Any representations or opinions expressed in this email are
those of the individual sender, and not necessarily those
of the Capital Transport Services.
============================================================
Other related posts:
