Welcome to ISAserver.org

ISA SERVER EMERGENCY HELP

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 General] >> Installation >> ISA SERVER EMERGENCY HELP

Page: [1]

Message

<< Older Topic Newer Topic >>

ISA SERVER EMERGENCY HELP - 19.Dec.2005 9:06:59 AM

rolamohammed

Posts: 58
Joined: 19.Dec.2005
Status: offline

Dear All,

I have here an E-mergency situation.

I have here my network consist of 2 locations, connected to each other by using Wireless.

the 2 locations are sepeareat 2 subnets, which is connected to each other by Cisco Router.

All the users in Location - A - are configured to forward all the Packets to the Router which is located in the location A, and when i Ping from any user in Location A to the Default Gateway which is the Router, i get a reply and i can Ping.

Also when i am trying to Ping the Router which is located in Location B, i found my self i am able to ping Router in location B from user in LOcation A . the same situation for Location B as well.

=========

the Problem is, in Location A, i have ISA SERVER 2000, and its configured with 2 Nic Cards, the First One is FOR ISP, the SECOND ONE IS internal and its in the same subnet which is in LOCATION A,

Now, i want to make the Users which they are in location B able to access internet through ISA SERVER which is in Location A.

Now, when i am installing ISA SERVER, what is the best to do, shoud i Add in the LAT all the IP-Address of location A , and Location B ?

Or , should i make LAT to construct according to Routing Table ?what is the deffrient between them . please try to give hand for that ?

Post #: 1

Featured Links*

RE: ISA SERVER EMERGENCY HELP - 16.Jan.2006 6:58:06 AM

carorieta

Posts: 102
Joined: 15.Dec.2005
Status: offline

rolamohammed,

It is recommended to use your routing table, on that way you verify a good network infrastructure.
I am going to ask U some questions, if you can put the IP addresses info of your subnets will be great.
The questions I have or checks to troubleshoot:
Is LocationA able to ping the external RouterB IPAddress
Is LocationA able to ping the internal and host on LocationB
The same 2 questions (the oposite direction)
I would say your network looks like this:

INTERNET---ISAFIREWALL---LOCATIONA---ROUTERA))))))))ROUTERB---LOCATIONB

From the ISA point of view:

EXTERNAL---ISA--LANA---RA))))RB--LANB
Your LANA hosts have RouterA has their Default gateway
Your LANB hosts have RouterB as their default gateway
Your ISA Internal NIC belong to LANA and it DOES NOT have a default gateway
LANB knows that to access LANA use the gateway, and routerB knows how to handle this.
The same for LAN to LANB traffic
On LAN B
What about the other traffic (internet), that's where you need to add a last resource route pointing to next hoop (RouterA)
On your router use this command to add the last resource route
ip route 0.0.0.0 0.0.0.0 Next_Hop_Add - Default route
ip route 0.0.0.0 0.0.0.0 X.X.X.X (RouterA)
Now is RouterA who needs to handle this traffic, again use the same command, this time you will use the ISA internal NIC as your resource route
ip route 0.0.0.0 0.0.0.0 Next_Hop_Add - Default route
ip route 0.0.0.0 0.0.0.0 Y.Y.Y.Y (ISA internal NIC)

Your ISA server needs to know how to get to the subnet behind RouterA (remember your internal ISA NIC does
not have a default gateway), only the external NIC should be configured with a Default Gateway
You should add persistent routes on your ISA server from the command prompt. This will tell the ISA server how to get to LANB.
Open the command prompt and execute the following:
route add -p LANBIPSUBNET MASK 255.255.255.0 ROUTERAIPADDRESS
Typing route print from the CMD will show the persistent routes at the bottom of the route table
Test:
If you ping LANB hosts from the ISA machine your routing table is ready to go.
Of course you should be able to ping from LANB to ISA server as well

Now, you R sure your routing table is OK, verify from the LAT(ISA MMC).

I hope that helps

Good luck

_____________________________

carorieta

(in reply to rolamohammed)

Post #: 2