Welcome to ISAserver.org

Listener Services on ISA ?

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 General ] >> Server Publishing >> Listener Services on ISA ?

Page: [1]

Message

<< Older Topic Newer Topic >>

Listener Services on ISA ? - 8.Mar.2004 3:55:00 PM

cventour

Posts: 9
Joined: 8.Mar.2004
Status: offline

Hello folks ,

Let's suppose I install ISA as an Edge firewall to protect my servers behind it. I have 2 ftp servers that were previously published on the internet with real IPs on each one. Now I want to put them behind the ISA and still want both of them to be accessible.

Both of the should listen on the default FTP ports (TCP/21). How can I configure the the External Interface (Internet interface) of the ISA so it can listen for FTP on two different real IP addresses? I think that putting 2 IPs from the same subnet on the Internet interface is wrong. Is this possible to happen ?

Post #: 1

Featured Links*

RE: Listener Services on ISA ? - 8.Mar.2004 9:25:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi cventour,

assigning two IP's from the same subnet on the ISA external interface should do the trick! [Wink]

HTH,
Stefaan

(in reply to cventour)

Post #: 2

RE: Listener Services on ISA ? - 9.Mar.2004 9:08:00 AM

cventour

Posts: 9
Joined: 8.Mar.2004
Status: offline

Thank you,

I did not think I

But what if I wanted to listen for the entire IP range of the Internet Interface. In my case I have a 64 IP range. If wanted to put all my exposed servers behind the firewall I should put all of the 64 IPs on the external NIC ?

Your solution is fine for 2-3 IPs but for a given range more than 16 IPs, I think it should cause problems to the IP stack.

(in reply to cventour)

Post #: 3

RE: Listener Services on ISA ? - 9.Mar.2004 12:05:00 PM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi C,

You can enter hundreds of IP addresses on the external interface if you like. I have machines that run over hundred addresses on the external interface.

HTH,
Tom

(in reply to cventour)

Post #: 4

RE: Listener Services on ISA ? - 9.Mar.2004 9:51:00 PM

cventour

Posts: 9
Joined: 8.Mar.2004
Status: offline

Ok then I'll check it out...

Is there a way to enter an entire range of IPs easily ? I need to give an entire 64 IP range on my external interfaces.

(in reply to cventour)

Post #: 5

RE: Listener Services on ISA ? - 10.Mar.2004 11:56:00 AM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi C,

There might be a netsh command to do this. Remember that you can't enter the entire network ID, since the first and last addresses aren't usable.

HTH,
Tom

(in reply to cventour)

Post #: 6