[isalist] Re: Verizon DSL & ISA Server 2004 Configuration!!!
- From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
- To: <isalist@xxxxxxxxxxxxx>
- Date: Sat, 4 Nov 2006 11:21:04 -0600
http://www.ISAserver.org
-------------------------------------------------------
Hi John,
The network segment between the NAT device's internal interface and the
external interface of the ISA Firewall would be an anonymous access DMZ,
so that untrusted WLAN clients can be placed there. You could even put
trusted hosts there, and configure an ISA Firewall Network for that
network segment and create a route relationship to extend the domain
into that segment, if you like.
There are lots of options, but I generally put WAPs behind the ISA
Firewall, and never on the Internet gateway -- that's strickly SOHO, Kim
Komando/Leo Laporte simpletonism ;)
Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://blogs.isaserver.org/shinder/
Book: http://tinyurl.com/3xqb7
MVP -- Microsoft Firewalls (ISA)
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx
> [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of John T (Lists)
> Sent: Saturday, November 04, 2006 11:10 AM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: Verizon DSL & ISA Server 2004 Configuration!!!
>
> http://www.ISAserver.org
> -------------------------------------------------------
>
> > Go to isaserver.org and search for wlan.
> > Tom has a two-part article there.
>
> Jim, did a search and could not find it.
>
> To clarify, my read of Tee's post is the following:
>
> INTERNET CLOUD
> |
> |
> |
> WAN PORT DSL LINKSYS ROUTER
> |
> /\
> / \
> / \
> / \
> / \
> LAN port of router Wireless from router
> / \
> / \
> / \
> EXT PORT of ISA Wireless LAN from Linksys
> |
> |
> INT PORT of ISA
> |
> |
> LAN
>
> Tee wants both the LAN off of ISA and the Wireless LAN from
> the Linksys to
> use the same network addresses with ISA providing via DHCP
> say addresses
> 10.10.10.51-100 and the Linksys router providing via DHCP say
> addresses
> 10.10.10.101-150.
>
> In other words, my understanding is that Tee wants both the
> Wireless LAN
> directly off the Linksys Route and the LAN off of ISA to be the same
> network, but the EXT port of ISA would be part of that LAN off of the
> Linksys Router.
>
> Now, I can think of a way to do that via subnetting but that
> adds complexity
> and unless some one knows how to do that clearly will run
> into problems.
>
> So, is this scenario possible AND feasible or Tee is this not
> what you had
> in mind?
>
> John T
> eServices For You
>
> "Life is a succession of lessons which must be lived to be
> understood."
> Ralph Waldo Emerson (1802-1882)
>
>
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>
>
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
Other related posts:
