Welcome to ISAserver.org

INternal cant Ping DMZ Servers

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> DMZ >> INternal cant Ping DMZ Servers

Page: [1]

Message

<< Older Topic Newer Topic >>

INternal cant Ping DMZ Servers - 22.Jan.2007 1:01:27 AM

z_haseeb

Posts: 183
Joined: 15.Jun.2005
From: Karachi,Pakistan
Status: offline

To test ISA server, i use 3 systems.

1 . Domain controller (as premier network)
      IP address: 10.0.0.1, Gateway: 10.0.0.2

2. ISA server (member of domain)

      IP address: 10.0.0.2, Gateway: ---------(empty)
      IP address: 192.168.0.2, Gateway: ------(empty)

3. Client as LAN network or Internal NetworK / (client already join with domain)
    IP address: 192.168.0.1, Gateway: 192.168.0.2
-------------------------------------------------------------
Installtion process
1. I install Configuration Storage Server and with it install ISA server Management.

2. After Installation, I click on array and add new array.So i create an array on ISA server.

3. Then i run the Wizard of 3-Leg Perimeter Network(Configuration->Networks-> Wizard of 3-Leg Perimeter Network from the Templates->Next->again Next->here i ADD the Ranges of my Whole LAN "but not servers"(192.168.0.1-192.168.250)->Next->Here i ADD all Servers IP Addresses Range (10.0.0.1-10.0.0.40) ->Next->Select Block all)

4.) Make a Computer Set in the ISA Server (Firewall Policy->Network Objects->Computer Sets) and add all my Desire Computers which i want that they can access my Servers. here i add computer of lan having ip 192.168.0.1

5.) Make a Computer Set in the ISA Server (Firewall Policy->Network Objects->Computer Sets) and add all Servers which i want that they can access by Clients/Users.
here i add my permier network computer having ip 10.0.0.1

6.) Make a Access Rule and in the Source/From ADD the Computer Set which i have made in Step4 (desire Computer set which i want that they only can access my Servers), In the Destination/To ADD the Computer Set which i made in step5(Servers which i want that they can access by my desire computers/Listed users), In the Protocols select all outbound traffic.

Now lan network computer can ping 10.0.0.2 and 192.168.0.2
and premier network can ping 10.0.0.2 and 192.168.0.2

but LAN computer/INternal NetworK not able to ping premier netwrok computer(10.0.0.1).
and premier computer not able to ping lan computer/Internal NetworK PC (192.168.0.1)

< Message edited by z_haseeb -- 22.Jan.2007 1:03:59 AM >

_____________________________

MCP, IT ADMINISTRATOR
Interest ISA Server2004