Welcome to ISAserver.org

Port Address Translation

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 Firewall] >> SecureNAT Client >> Port Address Translation

Page: [1]

Message

<< Older Topic Newer Topic >>

Port Address Translation - 2.Oct.2004 3:04:00 PM

gabriel.baba

Posts: 4
Joined: 2.Oct.2004
From: Romania
Status: offline

I have a question regarding Port Address Translation with the ISA Server. I want to redirect web clients requests from "server 1" - port 80 to "server 2" - port 3111 (for example). Now I have ISA Server 2000. With Web Publishing is possible but with same ports. Is that right ?

ISA Server 2004 is maybe a solution for my question ?

Thanks,
Gabi

Post #: 1

Featured Links*

RE: Port Address Translation - 2.Oct.2004 7:17:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Gabi,

if you use Web publishing, it should be possible with ISA 2000 too. However, for Server publishing you will need ISA 2004.

BTW --- if you have a choice between ISA 2000 or 2004, go for ISA 2004.

HTH,
Stefaan

(in reply to gabriel.baba)

Post #: 2

RE: Port Address Translation - 4.Oct.2004 10:55:00 AM

gabriel.baba

Posts: 4
Joined: 2.Oct.2004
From: Romania
Status: offline

Hi Stefaan,
First of all thank you for response. As I tell you, I don�t want the client to type http://server1:3111/index.html. All requests for some private address (for example 192.1.1.1) I want to redirect to �server 2�. In my case, �server 2� is a Linux proxy server which already has port 80 open for other site (for this reason we have opened port 3111).

Thanks,
Gabi

(in reply to gabriel.baba)

Post #: 3

RE: Port Address Translation - 5.Oct.2004 8:41:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Gabi,

I'm not sure I understand your question correctly! [Confused]

Is this an inbound issue? In other words, are this external clients who must access a Web Published internal resource?

HTH,
Stefaan

(in reply to gabriel.baba)

Post #: 4

RE: Port Address Translation - 6.Oct.2004 3:02:00 PM

gabriel.baba

Posts: 4
Joined: 2.Oct.2004
From: Romania
Status: offline

Hi,

Sorry, I think that I must reformulate question. So, I have Microsoft ISA2000 Enterprise Edition installed in my company. My server run like a Web proxy and firewall for all my clients, some of them has Internet access based on some groups from active directory, other part do not have this rights.

From domain policy all users that logon into my domain has in the Internet Explorer connection settings filled automatically, at proxy settings, my ISA server.

Anyway I need to configure my ISA server to do next thing:

If an client (IP 10.10.x.x) issue a request on the IP 192.0.0.0/8 on port 80 (ex: http://192.1.1.1/index.html in Internet Explorer) then my ISA must do some kind of PAT and forward automatically the request to another proxy 10.10.y.y: on port 3111 (Linux).

In a few words, my ISA server must be like a gateway....

This is my problem in this moment and I can't find any solution for it [Frown]

Thank you.

(in reply to gabriel.baba)

Post #: 5

RE: Port Address Translation - 6.Oct.2004 8:49:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Gabi,

if I understand you correctly you want to redirect web requests to an upstream proxy server. In that case, you should define a Web Routing rule. For more info check out http://www.isaserver.org/tutorials/Using_routing_rules.html .

HTH,
Stefaan

(in reply to gabriel.baba)

Post #: 6

RE: Port Address Translation - 7.Oct.2004 9:07:00 AM

gabriel.baba

Posts: 4
Joined: 2.Oct.2004
From: Romania
Status: offline

Hi,

Thank you for information but I already know the article. In this article was specified: �Routing rules are available in all modes of installation except for the firewall mode�. I have ISA 2000 installed in integrated mode (cache and firewall). After days reading I understand that my issue could be resolved only if my ISA is installed in cache mode.
All this time I hoped that I could find alternative solution (with ISA installed in firewall and cache mode).

In fact, the main problem is to redirect web requests to an upstream proxy but due my firewall rules configurations there are any other applications witch used some TCP ports.

Thank you for help,

Gabi

(in reply to gabriel.baba)

Post #: 7

RE: Port Address Translation - 7.Oct.2004 8:00:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Gabi,

ISA can be installed in 3 modes: Caching only (aka Web Proxy), Firewall only and Integrated. In the latter case ISA contains as well the Web Proxy as the Firewall service. Now, because the Web Routing rules are a function of the Web Proxy service, you can use them if ISA is installed in Caching only and Integrated mode.

HTH,
Stefaan

(in reply to gabriel.baba)

Post #: 8

RE: Port Address Translation - 10.Oct.2004 12:07:00 AM