Posts: 9
Joined: 12.Jan.2008
From: The Netherlands
Status: offline
Good day,
Last week I received my new DOCSIS3 Cable Modem from my ISP. I would like to install the cable modem on the external NIC of My ISA2006 firewall. So far I did not manage to get it work. The problem is that the external NIC doesn't receive a public IP address from the ISP. I think this is a DHCP issue?!? All I see is 0.0.0.0.
Allready I added the external NIC in the DHCP secion (system policies). No result.
Connecting the modem 1 on 1 to my pc is working perfect. Putting a router between the PC and the cable modem is working also perfectly. As well on the server. But the cable modem directly connected to the external NIC is NOT working. Resetting and turning off and on everything doesn't help either :-(
Posts: 9
Joined: 12.Jan.2008
From: The Netherlands
Status: offline
Hi folks,
Finally I managed it to work! In the system policy I added the External network at the DHCP (From) section. After some discussions I decided to change that entry into "Everywhere". Next I disabled the public NIC en restarted the cable modem! After the modem booted up I enabled the NIC again. And voila! It works...
Next issue I struggle with is my Dual Home NIC configuration. My situation now is 1 private NIC (10.0.0.10) and the Public NIC (IP DHCP ISP). The W2K3 server has running it's own DNS server for internal use. So the DNS of the private NIC points to 10.0.0.10. My question is what to do with the DNS of the Public NIC. Should it point to its own DNS servers or should I change it to point to 10.0.0.10 ? What is your opinion here?
I also get an configuration error back from ISA. But right now i dont have it in the log. As soon I see the error again I wil let yah know.
Posts: 115
Joined: 16.Jul.2009
From: Bangalore, India
Status: offline
Hi Making change to the system policy is not recommended.Why do it when you can achieve the same with firewall policy. Anyways good to hear you got it working.
For the next issue you need to start a new thread or it ll be moved to the appropriate sections by the moderators shortly.
Do not use DNS on both NIC's. Use your Internal DNS only and Configure forwarders on your DNS server to resolve external resources
Posts: 115
Joined: 16.Jul.2009
From: Bangalore, India
Status: offline
I prefer & recommend that you use static IP Addresses on all your ISA server's NIC's. However in certain scenario like yours its not entirely possible to use static addressing where you get a dynamically assigned IP from the ISP There are workarounds to deal with this but it depends on what you really need on your Network
Posts: 9
Joined: 12.Jan.2008
From: The Netherlands
Status: offline
Okay thanks...
Now I have configured the public nic to get its IP adresses Dynamicly (DHCP ISP). The DNS entry on the other hand I configured Static with the internal DNS address (10.0.0.10).
So far it works well. But it looks like this is not what you mean...
What would you do ?
< Message edited by hermanf72 -- 24.Aug.2009 7:08:18 AM >
Posts: 115
Joined: 16.Jul.2009
From: Bangalore, India
Status: offline
Hi It ll work but its not the best practice. If i were you i would get a Static IP from the ISP. Besides you need Static IP for Server publishing rules to work as expected