[isalist] Re: Two external interface on isa

  • From: Jim Harrison <Jim@xxxxxxxxxxxx>
  • To: "isalist@xxxxxxxxxxxxx" <isalist@xxxxxxxxxxxxx>
  • Date: Thu, 5 Mar 2009 06:18:32 -0800

Unfortunately, most people don't have that option.
Speaking of which, where's that article you were supposed to write on this 
point?
Huh?
Huh?!?
:)

JimmyJoeBob Alooba
Office 2007 on Win7 Beta



From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On 
Behalf Of Jerry Young
Sent: Wednesday, March 04, 2009 8:04 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Two external interface on isa

Jim,

Can you explain further by what you mean when saying "DNS redirection"?

While moving away from a purely Microsoft implementation, would it be possible 
to make creative use of IP Anycast (which is usually implemented across mutiple 
hosts in multiple geographic locations, not interfaces on the same host as far 
as I am aware) to provide the desired assumed behavior?
On Wed, Mar 4, 2009 at 10:02 AM, Jim Harrison 
<Jim@xxxxxxxxxxxx<mailto:Jim@xxxxxxxxxxxx>> wrote:

..and how would you provide inbound LB across ISP connections?

DNS redirection is the only way to accommodate this.





JimmyJoeBob Alooba

Office 2007 on Win7 Beta







From: isalist-bounce@xxxxxxxxxxxxx<mailto:isalist-bounce@xxxxxxxxxxxxx> 
[mailto:isalist-bounce@xxxxxxxxxxxxx<mailto:isalist-bounce@xxxxxxxxxxxxx>] On 
Behalf Of Steve Moffat
Sent: Wednesday, March 04, 2009 4:48 AM
To: ISA Mailing List
Subject: [isalist] Re: Two external interface on isa



Indeed. Only outgoing LB at the moment tho'



S



From: isalist-bounce@xxxxxxxxxxxxx<mailto:isalist-bounce@xxxxxxxxxxxxx> 
[mailto:isalist-bounce@xxxxxxxxxxxxx<mailto:isalist-bounce@xxxxxxxxxxxxx>] On 
Behalf Of Jerry Young
Sent: Wednesday, March 04, 2009 8:45 AM
To: ISA Mailing List
Subject: [isalist] Re: Two external interface on isa



So the solution (assuming a Microsoft-based solution) would be to drop ISA 
Server and pick up Forefront Threat Management Gateway?

On Wed, Mar 4, 2009 at 7:38 AM, Steve Moffat 
<steve@xxxxxxxxxx<mailto:steve@xxxxxxxxxx>> wrote:

Not without rainwall or some other 3rd party app. Can only have 1 gateway in 
ISA.



TMG does it natively.



From: isalist-bounce@xxxxxxxxxxxxx<mailto:isalist-bounce@xxxxxxxxxxxxx> 
[mailto:isalist-bounce@xxxxxxxxxxxxx<mailto:isalist-bounce@xxxxxxxxxxxxx>] On 
Behalf Of Jerry Young
Sent: Wednesday, March 04, 2009 8:36 AM
To: ISA Mailing List
Subject: [isalist] Re: Two external interface on isa



You're only allowed a single default route in a generic setting.



By having two avenues to the Internet, you're essentially indicating that you 
need two, which you won't be able to do.



Now, you may be able to leverage RRAS and configure the box as an OSPF router 
but I don't know if you can run ISA on top of such a configuration and if you 
can I don't know what might be able to be done to get ISA to play nicely with 
OSPF in the way you want it.

On Wed, Mar 4, 2009 at 7:26 AM, Vineet Tripathi 
<vineetktripathi@xxxxxxxxx<mailto:vineetktripathi@xxxxxxxxx>> wrote:

I want to setup ISA Server with 3 network cards. One will be connected
to the internal network, where all client workstations and corporate
file/mail servers are. Two other network cards will be connected to two
independent external networks; each external network has it's own
connection to the Internet (to different ISP). . I want ISA server to
route packets between those two external networks.

How I can do this?








--
Cordially yours,
Jerry G. Young II
Microsoft Certified Systems Engineer



--
Cordially yours,
Jerry G. Young II
Microsoft Certified Systems Engineer



--
Cordially yours,
Jerry G. Young II
Microsoft Certified Systems Engineer

Other related posts: