Welcome to ISAserver.org

Static Routes

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 General ] >> Web Publishing >> Static Routes

Page: [1]

Message

<< Older Topic Newer Topic >>

Static Routes - 6.Sep.2004 5:35:00 PM

tal

Posts: 3
Joined: 30.Aug.2004
From: Glenside
Status: offline

Currently I have a persistent route on my ISA 2000 (151.193.141.161 MASK 255.255.255.255 50.0.0.90) where Client are trying to get to RES.SABRE.COM 151.193.141.161 are routed to a frame and not using the ISA 2000. When trying to do the same with ISA 2004 It does not work. I opened a case with Microsoft (However, no Luck)

Post #: 1

Featured Links*

RE: Static Routes - 6.Sep.2004 10:50:00 PM

tshinder

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Tal,

I should work with the ISA firewall as well. Is the frame behind the ISA firewall, or in front of it?

Thanks!
Tom

(in reply to tal)

Post #: 2

RE: Static Routes - 7.Sep.2004 3:29:00 PM

tal

Posts: 3
Joined: 30.Aug.2004
From: Glenside
Status: offline

Hi Tom,

This is the setup:
Existing Architecture

Gate 1 Currently have 2 Full T1s connected to Cisco 1701 with two wic card managing Load balance and Fault Tolerance. (IP 146.145.193.17)
External DNS = 146.145.64.2 & 146.145.64.3
--------------------------------- W2K Server ----------------------------------------------------------------
Next is the ISA 2000 External = 146.145.193.18 - 30 MASK 255.255.255.240 & 146.145.17.81 - 86 MASK 255.255.255.248
Next is the ISA 2000 Internal = 50.0.0.48
--------------------------------------------------------------------------------------------------------------------

We are set up that each external IP address is pointing to some internal IP address.

example: www.gate1travel.com = 146.145.193.18 internal = 50.0.0.145 [GATE1WEB]

----------------------------- Internal Network -------------------------------------------------------------------
Internal IP scema 50.0.0.* MASK 255.0.0.0
Default Gateway = 50.0.0.48
Internal DNS = 50.0.0.201
Static IPs
Win 2003 Server Domain controler where 50% are Domain client and 50% are not part of the Domain
----------------------------------------------------------------------------------------------------------------------------

Our current requirements are as follow:

Hosting/Publishing
Web servers:
www.gate1travel.com 146.145.193.18 to GATE1WEB = 50.0.0.145 PORT 80 & 443
www.gateonetravel.com 146.145.193.18 to GATE1WEB = 50.0.0.145 PORT 80 & 443
www.gate1.com 146.145.193.18 to GATE1WEB = 50.0.0.145 PORT 80 & 443
www.varigtravelvacations.com 146.145.193.19 to GATE1WEB = 50.0.0.202 PORT 80 & 443
www.celtictoursres.com 146.145.17.83 to SOFTRIPWEB = 50.0.0.143 PORT 80 & 443
www.electronicreservations.net 146.145.193.24 to SOFTRIPWEB = 50.0.0.143 PORT 80 & 443
www.arzaworld.com 146.145.193.23 to SOFTRIPWEB = 50.0.0.206 PORT 80 & 443

Database Servers: Limited access from specific ip address/scemas (Server Publishing Rules)

Host name = Gate1Travel.com to GATE1DB = 50.0.0.141 SQL PORT
Host name = celtictoursres.com to SOFTRIPDB = 50.0.0.210 SQL PORT
Host name = electronicreservations.net to SOFTRIPDB = 50.0.0.210 SQL PORT
Host name = arzaworld.com to SOFTRIPDB = 50.0.0.210 SQL PORT
Host name = 146.145.17.84 to SOFTRIPDB = 50.0.0.210 SQL PORT

Mail Server Publishing (Mdeamon Mail Server)
-------------Currently one Mail Server Internally - 50.0.0.55 Hosting multiple Domains----------------------------

IMAP Server Published IP 146.145.193.18 internal = 50.0.0.55 (GATE1TRAVEL)
NNTP Server Published IP 146.145.193.18 internal = 50.0.0.55
POP3 Server Published IP 146.145.193.18 internal = 50.0.0.55
SMTP Server Published IP 146.145.193.18 internal = 50.0.0.55
POP3 Server Published IP 146.145.193.23 internal = 50.0.0.55 (ARZAWORLD)
IMAP Server Published IP 146.145.193.20 internal = 50.0.0.55 (SOFTRIP)
NNTP Server Published IP 146.145.193.20 internal = 50.0.0.55
POP3 Server Published IP 146.145.193.20 internal = 50.0.0.55
SMTP Server Published IP 146.145.193.20 internal = 50.0.0.55

Other Hosted Servers:
Mdeamon World Client Open Port 3000 to access mail server through a web browser application (http://mail.gate1travel.com:3000)
Air Server - GroupIST - Xalink from 146.145.17.83 to 50.0.0.140 Port 2509

Amadeus Print Manager - In 9876 from 146.145.193.18 to 50.0.0.110 Port 9876
Amadeus XML - In 20002 From 146.145.193.18 to 50.0.0.81 Port 20002

VPN/Terminal Services
Static IP Pool for VPN Clients 50.0.0.211 - 215

Sabre
We are connected to Sabre (Airline computer system) where we make air reservations. Using Client software pointing to res.sabre.com
Sabre provided us with a Cisco 800 router configured:
---------------------------------- external interface is a 256 Frame Relay ---------------------------------------------------------------------------
---------------------------------- Internal Interface is 50.0.0.90 ------------------------------------------------------------------------------------------

Currently to do so I have a static route on ISA2000 Route -p ADD 151.193.141.161 MASK 255.255.255.255 50.0.0.90
This way all trafic is pointing to Sabre and going through out double T1 connection.

Gatekeeper
We currently support Netmeeting as

(in reply to tal)

Post #: 3