quote:

ORIGINAL: HePa

Let's say that the configuration looks like this:
[ISA]--[172.168.1.0 /24]--(Router)--[172.168.2.0 /24]

The ISA server has the IP-adress of 172.168.1.1 and is directly connected to 172.168.1.0 /24.
172.168.1.0 /24 and 172.168.2.0 /24 is connected to each other with a router. Do I need to add ad presisten route on the ISA server in a scenario like this? Wouldn't the router between the networks handle the traffic between the networks and to the to the ISA server?

quote:


And now for the third question, when and how does a situation look lite when you need to add presistent routes to the routing table on the ISA server. It's hard to find concrete information and examples of when and in which situations it's needed.

quote:

ORIGINAL: paulo.oliveira

Hello HePa,

quote:

ORIGINAL: HePa

Let's say that the configuration looks like this:
[ISA]--[172.168.1.0 /24]--(Router)--[172.168.2.0 /24]

The ISA server has the IP-adress of 172.168.1.1 and is directly connected to 172.168.1.0 /24.
172.168.1.0 /24 and 172.168.2.0 /24 is connected to each other with a router. Do I need to add ad presisten route on the ISA server in a scenario like this? Wouldn't the router between the networks handle the traffic between the networks and to the to the ISA server?

If your ISA is your edge firewall, the 172.168.2.0/24 network will be able to reach ISA, but the return is not true. ISA canīt "see" the other network because is not set up in itīs LAT (local address table) and for sure is not ISAīs DG. Always keep in mind that ISA must have only one DG.

quote:


And now for the third question, when and how does a situation look lite when you need to add presistent routes to the routing table on the ISA server. It's hard to find concrete information and examples of when and in which situations it's needed.

Here are some examples when to use it:
http://www.isaserver.org/articles/2004netinnet.html
http://www.isaserver.org/tutorials/Designing_An_ISA_Server_Solution_on_a_Complex_Network.html
http://blogs.isaserver.org/pouseele/2006/06/24/a-simple-routing-table-trick/

Regards.

quote:

ORIGINAL: elmajdal

Hi,

Regarding the network Interfaces, yes Only ONE Nic can have a Default Gateway, and that;s the External NIC

Check this article for details : Configuring ISA Server Interface Settings.


Also, in a Network Behind a Network, dont forget to Include the 192.168.2.0/24 range inside the Internal Network Address Range along with the 192.168.1.0/24

Then you will need to create a subnet and access rules as the articles explains.