RE: configuring multiple ip addresses

  • From: "Thor \(Hammer of God\)" <thor@xxxxxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Mon, 22 Aug 2005 04:10:28 -0700

Server publishing on ISA2k works on a port-by-IPAddress basis. You can't publish the same port on the same IPAddress to multiple back-end servers. Since 10.0.1.3 is published to 192.168.120.3, that's the IP you have to hit.

You can do a couple of things if you only want 10.0.1.1 to be used:
1) TS client into the ISA box, and from there, TS into the rest of the network.
2) Change the port that Terminal Services binds to on the other internal machines, and create multiple server publishing rules on 10.0.1.1 for the different ports. I.E. 192.168.120.2 listens on 33892, .3 listens on 33893, etc with 10.0.1.1 publishing those ports to the LAN.
3) VPN in and hit them directly.


hth
t

----- Original Message ----- From: "Dijk, Sebastian van" <sebastian.van.dijk@xxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Monday, August 22, 2005 2:59 AM
Subject: [isalist] RE: configuring multiple ip addresses



http://www.ISAserver.org

Anybody ?

-----Oorspronkelijk bericht-----
Van: Dijk, Sebastian van
Verzonden: vrijdag 19 augustus 2005 9:47
Aan: [ISAserver.org Discussion List]
Onderwerp: [isalist] configuring multiple ip addresses

http://www.ISAserver.org

Hi !

We have isa server 2000 running over here.
We have 3 servers on our lan that we want to reach from remote
locations.
ISA lan interface has ip address 192.168.120.2
ISA wan interface has ip address 10.0.1.1
So I configured a publishing rule for :
TCP port 3389 to forward 10.0.1.1 to 192.168.120.1

This works good, now we want to reach the other servers as well :

I added a second ip address on the wan interface of the isa server
10.0.1.2 and I configured a publishing rule for TCP port 3389 to forward
10.0.1.2 to 192.168.120.2


I added a third ip address on the wan interface of the isa server 10.0.1.3 and I configured a publishing rule for TCP port 3389 to forward 10.0.1.3 to 192.168.120.3


I added a fourth ip address on the wan interface of the isa server 10.0.1.4 and I configured a publishing rule for TCP port 3389 to forward 10.0.1.4 to 192.168.120.4

This works quite good.
However since we have some troubles with reaching another remote
location I started monitoring some devices.

At 1 device I saw that connections are made with source ip address
10.0.1.3.

This is not what I want, I want ONLY 10.0.1.1 to be used for outside
connections.

Where can I change the nat configuration of ISA server ?

Thanks

Met vriendelijke groet,


Sebastian van Dijk

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
sebastian.van.dijk@xxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx



------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: thor@xxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx





Other related posts: