Welcome to ISAserver.org

Configuring ISA 2004 On SBS 2003 With Two NICs? Please Help

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 General ] >> ISA 2004 SBS >> Configuring ISA 2004 On SBS 2003 With Two NICs? Please Help

Page: [1]

Message

<< Older Topic Newer Topic >>

Configuring ISA 2004 On SBS 2003 With Two NICs? Please ... - 7.Jul.2006 12:55:19 PM

habibalby

Posts: 126
Joined: 20.May2006
From: Kingdom of Bahrain
Status: offline

Configuring ISA 2004 On SBS 2003 With Two NICs? Please Help
--------------------------------------------------------------------------------
Hi All,

Due to the limitation of the Internet Bandwidth through our ISP, I'm planning to make an SBS 2003 to server our needs to utilize the internet bandwidth and other featuers.

I have SBS 2003 configured as:
1. Directory Services
2. DNS
3. DHCP
4. Exchange
5. Now trying to put the ISA 2004 to be as a deafault Gateway, Proxy Server and Firewall.

LAN Setup:

Is this right setup to be able to the users to get Internet Access?

Also, for the ISA, what is the template Network that i have to choose for this design?

What I know for the rules that should be available in the Firewall Access rules are as follows:

DHCP Rules:
1.Allow DHCP Request --- From Internal to LocalHost
2.Allow DHCP Reply --- From LocalHost to Internal

DNS Rules:
1. Allow DNS From Internal to LocalHost
2. Allow DNS from LocalHost to Internal

Internt Access:
1.Allow HTTP from Internal to External
2.Allow HTTPS from Internal to External
3.Allow FTP from Internal to External

DHCP Scope Options:
Start IP Address from 192.168.1.3 To 192.168.1.15

003 Router: 192.168.5.1
006 DNS Server: 192.168.1.1
015 DNS Domain Name: habibalby.com

Please, I need your reply on this design to be able to implement it.

Thanks,

Habibalby

< Message edited by habibalby -- 7.Jul.2006 1:15:03 PM >

_____________________________

For online help with ISA Server 2004 & 2006 SE or EE. Please call on +973-39228431

Post #: 1

Featured Links*

RE: Configuring ISA 2004 On SBS 2003 With Two NICs? Ple... - 11.Jul.2006 3:02:37 AM

Bif

Posts: 10
Joined: 27.Feb.2006
Status: offline

I've got pretty much the same setup using a cable modem instead of the ADSL.

I would highly suggest you read through all five of Tom Shindler's Trek through SBS2003 install. He never did the part six but the first five are great. They will get you up and going pretty quickly.

Here's the link to the first article. The links to the other's are in the article.
http://www.isaserver.org/articles/200sbsinstallpart1.html

(in reply to habibalby)

Post #: 2

RE: Configuring ISA 2004 On SBS 2003 With Two NICs? Ple... - 11.Jul.2006 3:43:32 AM

ababinchak

Posts: 195
Joined: 16.Aug.2005
From: Michigan
Status: offline

See my reply to your other post. SBS is a very complicated product. Much thought and configuration has gone into creating the wizards to install it. You need to use them to acheive bliss among all of the server products running on the same box.

_____________________________

Amy

Need more help? http://isainsbs.blogspot.com

(in reply to habibalby)

Post #: 3

RE: Configuring ISA 2004 On SBS 2003 With Two NICs? Ple... - 12.Jul.2006 5:13:49 PM

habibalby

Posts: 126
Joined: 20.May2006
From: Kingdom of Bahrain
Status: offline

hi guys,

I have done it using the posted design and it works perfectly. However, I'm facing little problem if i want to join clients into the Domain and I have relized that it's from the Firewall Policies that I have.

I have rules:

Allow HTTP from Internal to External
Allow HTTPS from Internal to External

Allow DHCP Request from Internal to LocalHost
Allow DHCP Reply from LocalHost to Internal

Allow DNS from LocalHost to External and Internal
Allow DNS from Internal to LocalHost

Allow Allow Outbound Traffic from Internal to LocalHost
When i disable this rule I cannot join clients into the Domain although, the DNS is allow for both from Localhost to internal and vice versa

But when i enable it, it allow me to join the clients to domain.

I want to close this Allow Allow Outbound Traffic from Internal to LocalHost protocol, as it;s not a good practice becuase it might be some computers in the Network infected with virus of something else and the SBS will be infected too.

Can u please advice me what are the correct ports that will allow me to join the clients to domain?

Thank,

Habibalby

< Message edited by habibalby -- 12.Jul.2006 5:17:59 PM >

(in reply to ababinchak)

Post #: 4

RE: Configuring ISA 2004 On SBS 2003 With Two NICs? Ple... - 20.Jul.2006 8:01:58 AM

habibalby

Posts: 126
Joined: 20.May2006
From: Kingdom of Bahrain
Status: offline

HI Once again,

I eventually relized that i wouldn't treat the SBS 2003 as a normal Server or DC. After getting the orginal 6 CDs from a friend of mine and installed it it works fine without it any problem in joing clients to domain by:
1. Adding the user, then automatically adding the computer name.
2. Going to clinet machine and access http://servername/connectcomputer it connects fine and the client joined into the SBS 2003 successfuly.

However, after installing ISA 2004 as a Edge Network using two NIC one from External and the other for internal, clients can access the internet using the Default Gateway as the Internal IP of the SBS 2003.

But I cannot access http://servername/connectcomputer to be able to connect the new client to SBS 2003 and also clients cannot get access to SBS 2003 Server to gain resources.

Moreover, when i try to access http://servername.domanname.com:80 it open successuly but i cannot click on Connect to Network. And I got an error message says that the IIS is Denied Access to this IP.

What are the defualt rules that must be in used ISA 2004 with SBS in order for SBS 2003 to function all the Services that SBS 2003 provides? like DNS, DHCP, ect.

Thanks,

Habibalby

(in reply to habibalby)

Post #: 5

RE: Configuring ISA 2004 On SBS 2003 With Two NICs? Ple... - 24.Jul.2006 11:58:03 PM

ababinchak

Posts: 195
Joined: 16.Aug.2005
From: Michigan
Status: offline

There are 28 system policies and 21 Firewall policies that make the SBS magic happen. Run the Connect to the Internet Wizard and it will set them up from you. You can tweak from there but you really need to start from the default base of policies.

_____________________________

Amy

Need more help? http://isainsbs.blogspot.com

(in reply to habibalby)

Post #: 6

RE: Configuring ISA 2004 On SBS 2003 With Two NICs? Ple... - 28.Jul.2006 9:49:06 AM

habibalby

Posts: 126
Joined: 20.May2006
From: Kingdom of Bahrain
Status: offline

hi guys,

now I solved the problem by using the ISA 2004 on SBS 2003 as a Proxy and Cache Server. Configured Auto Discovery for Firewall Client and in DHCP and the problem has been sloved.

By the Firewall Client, I can access both the Internal Network as well as the Internet.

Thanks guy for your great help.

Habibalby

(in reply to ababinchak)

Post #: 7

RE: Configuring ISA 2004 On SBS 2003 With Two NICs? Ple... - 11.Aug.2006 10:05:31 AM

sam_hunter

Posts: 46
Joined: 12.Nov.2005
Status: offline

Do all of you guys realize that there's a wizard in that SBS box called the "Connect to Internet and Email wizard" that does all this for you?

All of the needed rules for basic connectivity, email, etc.. are set up by that wizard.

And do you know about Remote Web workplace?

Listen to the podcasts on this website:

http://blogs.technet.com/sbs

(in reply to habibalby)

Post #: 8

RE: Configuring ISA 2004 On SBS 2003 With Two NICs? Ple... - 12.Aug.2006 10:03:11 AM

habibalby

Posts: 126
Joined: 20.May2006
From: Kingdom of Bahrain
Status: offline

HI sam_hunter,

First of all I'd like to thank you for your reply, but I want to clearify the Connect to Internet and Email Wizard.

Since my setup is clearly mentioned in the diagram below which one should I select:
1. A Local Router Device with an IP Address.
2. A Direcrt Broadband Connection.

To which one of these should I run?

BTW, I'm using ADSL Router with Dynamic IP.

Thanks,

Habibalby

(in reply to sam_hunter)

Post #: 9

RE: Configuring ISA 2004 On SBS 2003 With Two NICs? Ple... - 15.Aug.2006 9:15:05 AM

sam_hunter

Posts: 46
Joined: 12.Nov.2005
Status: offline

One of the problems I see is that you have a dynamic IP and the CEICW and ISA won't deal well with a dynamic IP. (this is not a limitation of ISA, but rather SBS's wizard). Place a router between you and that dynamic IP and then use the setting for "direct broadband" and enter in the static IP of an address near the router IP and the static IP address for an internal address scheme.

(in reply to habibalby)

Post #: 10

RE: Configuring ISA 2004 On SBS 2003 With Two NICs? Ple... - 18.Aug.2006 8:58:49 PM