Welcome to ISAserver.org

Front End/Back End Server

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 General] >> Web Publishing >> Front End/Back End Server

Page: [1]

Message

<< Older Topic Newer Topic >>

Front End/Back End Server - 12.May2001 6:15:00 PM

vanzelone

Posts: 39
Joined: 9.Apr.2002
From: Illinois
Status: offline

O.K. I have read and digested the tutorial on publishing an OWA server. However it is specifically for a simple setup. Right?

On my network I have all internet traffic coming into my ISA firewall. From there I have an internal network and a DMZ on two separate subnets. So far I have RIP, DNS,ADS, and WINS working correctly. I am able to browse, surf, etc. from my internal network.

Exchange 2000 is setup on both the DMZ and the Internal Network in a Front End/Back End configuration and I am able to route mail in an out of the network. Yes, my servers are setup as SecureNAT clients.

Question: What do I have to do differently to publish OWA with this configuration? All of my mailboxes and stores are located on my internal network so how do I get traffic to go from the Internet to the ISA box to my front end server on the DMZ to the back end server on the internal network?

------------------
Thanks,

Vince

Post #: 1

Featured Links*

RE: Front End/Back End Server - 13.May2001 1:53:00 AM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Vince,

How do you have your DMZ set up? Is it a trihomed DMZ using public addresses for the DMZ, or a back to back ISA Server setup with the DMZ using private IP addresses?

Tom

------------------
Tom Shinder
http://www.isaserver.org/shinder/

Get it Here!

(in reply to vanzelone)

Post #: 2

RE: Front End/Back End Server - 13.May2001 4:18:00 AM

vanzelone

Posts: 39
Joined: 9.Apr.2002
From: Illinois
Status: offline

My DMZ is using a private IP. I guess that would make it Back-to-Back. I only have one public/static IP and that's on my ISA server where all of the Internet/Public traffic is coming in. From there I have two other adapters that are using private IP's.

The two internal adapters on my ISA server are both on different subnets. So basically the ISA box has three adapters with three different subnets...

I followed the tutorial on publishing OWA, but it's not for a Front End/Back End setup.

Thanks in advance for your help. I can't wait to get your book so I can understand some of this a little better...

------------------
Thanks,

Vince

(in reply to vanzelone)

Post #: 3

RE: Front End/Back End Server - 15.May2001 12:03:00 AM

vinle

Posts: 3
Joined: 14.May2001
Status: offline

ISA and Exchange 2000 FE are the same box. the port 80 is conflict between them. All I do to make it work is stop ISA services and start IIS OWA web service then restart ISA services.

(in reply to vanzelone)

Post #: 4

RE: Front End/Back End Server - 15.May2001 12:03:00 AM

vinle

Posts: 3
Joined: 14.May2001
Status: offline

ISA and Exchange 2000 FE are the same box. the port 80 is conflict between them. All I do to make it work is stop ISA services and start IIS OWA web service then restart ISA services.

(in reply to vanzelone)

Post #: 5

RE: Front End/Back End Server - 15.May2001 10:33:00 AM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Vince,

The trick here is then to get the FE Ex2k server to communicate with the Ex2k server on the internal network. There are two ways to do this: VPN or publishing the service ports required on the interal Ex2k server.

I'm just ramping up on Ex2k, so I'll have to do some checking on what ports are required if you want to publish.

If you search the Exchange Help file for "Using firewall with Outlook Web Access" it actual includes diagrams that describe what ports on the BE server need to be published. I have not tried out this configuration yet, so I can't attest to it working with ISA Server.

Try it out and let us know!

Tom

------------------
Tom Shinder
http://www.isaserver.org/shinder/

Get it Here!

(in reply to vanzelone)

Post #: 6