Welcome to ISAserver.org

2 ISP lines

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Firewall] >> Network Infrastructure >> 2 ISP lines

Page: [1]

Message

<< Older Topic Newer Topic >>

2 ISP lines - 9.Jan.2007 8:02:32 AM

munchi

Posts: 4
Joined: 21.Dec.2004
From: Greenland
Status: offline

ISA 2006 configuration with 2 ISP connections

We currently using ISA 2006 as our main firewall, and we have a dedicated line from our ISP with a static IP adress.

But the connection with the static IP address is pretty expensive per MB.
So we bought a ADSL router line through our ISP provider, the ADSL is much cheaper per MB down/uploaded.

The issue I have atm is to make these 2 connections work at the same time.

The line with static IP have a Public IP address
The ADSL router has a dynamic IP address on the internet side and internal it uses a static IP address 192.168.254.100

How can I set up my ISA to route the communication by the right “channels” like SMTP and special sercvices that require the “public” line and simple surfing / download by the ADSL line?

Post #: 1

Featured Links*

RE: 2 ISP lines - 9.Jan.2007 10:11:08 AM

elmajdal

Posts: 5105
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

ISA does not support multiple gateways ( ISPs )

u can accomplish this by installing a router infront of ISA . ( a router that supports multiple gateways , example : cisco 1841)

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to munchi)

Post #: 2

RE: 2 ISP lines - 11.Jan.2007 9:04:12 AM

munchi

Posts: 4
Joined: 21.Dec.2004
From: Greenland
Status: offline

ok many thx for the information )

Ill look into the Cisco 1841 router or another that supports multiple gateways

(in reply to munchi)

Post #: 3

RE: 2 ISP lines - 11.Jan.2007 9:15:20 AM

elmajdal

Posts: 5105
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

Hi munchi,

we are all looking forward to have this feature available in ISA Server 2008, that might be release in the end of 2007.

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to munchi)

Post #: 4

RE: 2 ISP lines - 5.Feb.2007 10:15:22 AM

munchi

Posts: 4
Joined: 21.Dec.2004
From: Greenland
Status: offline

Looking forward to that release )

(in reply to elmajdal)

Post #: 5

RE: 2 ISP lines - 8.Feb.2007 2:16:26 AM

porkiey

Posts: 1
Joined: 11.Sep.2005
Status: offline

I think a while ago I ran across an addon program that did that - cant remember what it was called though!!

(in reply to munchi)

Post #: 6

RE: 2 ISP lines - 8.Feb.2007 2:31:14 AM

elmajdal

Posts: 5105
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

its is rainconnect : http://www.emc-rainwall.com/products/rainconnect_isa.html
but i believe it has been discontinued.

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to porkiey)

Post #: 7

RE: 2 ISP lines - 10.Apr.2007 6:49:32 PM

tim_d_wagner

Posts: 6
Joined: 10.Apr.2007
Status: offline

Is it not possible to set your lower cost link as your default gateway, then configure the other connection manualy to route inbound and outbound traffic as is apropreate?

For example I am planning to have a "bulk" cable connection to be my default gateway (nic0). I am getting a faster SDHL connection (nic1) that will be my premium link. I will then use internal rules and external DNS to route the apropreate traffic to the correct link. I will set all VPN, rcp/https, and citrix trafic externaly to nic1, and setup rules to reply through nic1. The downside is there is no automatic failover right? That is where the 3rd party apps(like rainwall and erainconnect) or in-line hardware firewalls (like the FireBox550e or CISCO 1811) have the upper hand if bought with the right OS updates.

I am buying new hardware for ISA 2006 (have ISA 2004 now) this year, and was hoping to put off automatic fail over till next fiscal. I'm leaning towards the FireBox 550e with the Pro OS update since the new version shold let you do policy based outbound routing aind failover and it will be simpler than a CISCO 1811or1841 and more reliable than a Symantec 360. But if what I wrote above might not work I may need to reasses that.

< Message edited by tim_d_wagner -- 12.Apr.2007 9:09:01 PM >

(in reply to elmajdal)

Post #: 8