Welcome to ISAserver.org

Cannot set Web Listener to use specific IP

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 General ] >> Server Publishing >> Cannot set Web Listener to use specific IP

Page: [1]

Message

<< Older Topic Newer Topic >>

Cannot set Web Listener to use specific IP - 17.Feb.2004 1:57:00 PM

SHRUB22

Posts: 2
Joined: 17.Feb.2004
From: Canada
Status: offline

When configuring a web listener to listen for request comming from a specific IP mapped to the external interface, the "Selected IPs from this Network" option does not list any IPs mapped to the external interface.

Having confirmed that these 64 IPs have been mapped to the external interface, I am stuck trying to understand why ISA 2004 does not list them in this list.

Any help would be greatly appreciated.

FG

Post #: 1

Featured Links*

RE: Cannot set Web Listener to use specific IP - 17.Feb.2004 8:48:00 PM

tshinder

Posts: 47663
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Frederick,

Are the IP addresses public addresses? Are the on a different network ID than the VPN clients network and the Internet network and any other network you have created?

When you get to the IP Addresses page of the Web listener config, do you select the "External" option?

Thanks!
Tom

(in reply to SHRUB22)

Post #: 2

RE: Cannot set Web Listener to use specific IP - 17.Feb.2004 10:45:00 PM

SHRUB22

Posts: 2
Joined: 17.Feb.2004
From: Canada
Status: offline

After some testing, I have found out that it is impossible to configure the web listeners to listen to a specific IPs if the external network is unplugged.

Since plugging this machine would create many IP conflicts (will eventually replace many un-firewalled servers) during testing, it is too bad that one is not able to properly setup the firewall offline, thus minimizing architecture downtime.

(in reply to SHRUB22)

Post #: 3

RE: Cannot set Web Listener to use specific IP - 18.Feb.2004 4:45:00 AM

tshinder

Posts: 47663
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Frederick,

That is an interesting finding. I wonder if this will be the case in the final release.

Thanks!
Tom

(in reply to SHRUB22)

Post #: 4

RE: Cannot set Web Listener to use specific IP - 22.Jul.2004 10:03:00 AM

penrose.l@2college.nl

Posts: 474
Joined: 29.Jan.2004
From: Netherlands
Status: offline

Hi Tom ,

Found this out first-hand, it's not possible to setup your ISA 2004 final version when it's not connected.
Even worse , your firewall needs to have the FINAL Ip numbers to be able to process rules.

I'm still testing to find the EXACT fault but we're running into problems because we setup our firewall with alternate IP's , then changed them back to the correct ones to minimize downtime. This has been giving a LOT of troubles.

Kind regards,
Lex P.,

(in reply to SHRUB22)

Post #: 5

RE: Cannot set Web Listener to use specific IP - 22.Jul.2004 5:52:00 PM

tshinder

Posts: 47663
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Lex,

Are you sure about this? I was able to set up a RTM ISA 2004 firewall where *no* NICs connected. The IP addresses were maintained and worked fine when I plugged it in at the remote location. I did this yesterday and was plesantly suprized!

HTH,
Tom

(in reply to SHRUB22)

Post #: 6

RE: Cannot set Web Listener to use specific IP - 23.Jul.2004 4:14:00 AM

terrykerns

Posts: 23
Joined: 27.Feb.2003
From: Central Florida
Status: offline

I had the exact same issue!
The external interface was not plugged in and I could not create any listeners for specific IP's. I ended up plugging the external interface into a spare switch I had in order to create the rules before moving the firewall into a live production network. I assumed this was by design since the ISA Server seems to only look for enabled NIC's. Could this be a Windows 2003 issue? I have not tried this on a Windows 2000 server.

Regards,
Terry
BTW here is the ISA 2K4 version number: 4.0.2161.50

[ July 23, 2004, 04:32 AM: Message edited by: tkerns ]

(in reply to SHRUB22)

Post #: 7

RE: Cannot set Web Listener to use specific IP - 23.Jul.2004 8:10:00 AM

Uju Sivas

Posts: 236
Joined: 31.Dec.2001
Status: offline

can't the best bet would be to configure what ever we have and then once the computer is reached to the place , change the IP address. Windows 2003 with ISA 2004 does this on the fly....change of IP address does not affect at all.

auto sense of NIC is enabled by default in windows 2003. If there is no live connection, ISA *** cannot *** detect the external interface untill some registry level is changed...

(in reply to SHRUB22)

Post #: 8

RE: Cannot set Web Listener to use specific IP - 25.Jul.2004 5:18:00 PM

tshinder

Posts: 47663
Joined: 10.Jan.2001
From: Texas
Status: offline

Hey guys,

OK, I get it. When it wasn't plugged in, I just set the IP addresses on the NICs, I didn't configure listeners or anything. I believe you're right that you can't fully configure all firewall components until the firewall is plugged into a live jack.

Thanks!
Tom

(in reply to SHRUB22)

Post #: 9

RE: Cannot set Web Listener to use specific IP - 30.Jul.2004 10:47:00 PM

penrose.l@2college.nl

Posts: 474
Joined: 29.Jan.2004
From: Netherlands
Status: offline

Hi tom ,

Have to correct I tested changing the IP's and this works now. You can't make any publishing rules though , but you can successfully chaneg the IP's after you configured the server.

(in reply to SHRUB22)

Post #: 10

RE: Cannot set Web Listener to use specific IP - 4.Aug.2004 12:21:00 AM