Welcome to ISAserver.org

Tri Homed seetup

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 General] >> Web Publishing >> Tri Homed seetup

Page: [1]

Message

<< Older Topic Newer Topic >>

Tri Homed seetup - 18.Nov.2002 5:40:00 PM

Robbie Phelan

Posts: 1
Joined: 18.Nov.2002
From: Limerick, Ireland
Status: offline

I have three nics installed on isa server. I want to setup a tri-homed DMZ.

External Nic ;191.7.54.118, 255.255.255.240
DMZ Nic ;191.7.54.108, 255.255.255.240
Internal Nic ;194.168.2.23 255.255.255.0

Is the above correct or do I have to change the DMZ subnet?

How do I get my internal clients to see the default gateway, when I do an ipconfig/all??

What is the procedure for publishing a webserver?
Is it create a destination set, web publishing rule and then a ip packet filter.

I have tried this config but can't get access from external user to web server on dmz..

Where am I going wrong..

Please help, thks.

Post #: 1

Featured Links*

RE: Tri Homed seetup - 18.Nov.2002 9:49:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Robbie,

for info about the ISA different DMZ scenario's, check out:
- http://www.isaserver.org/tutorials/ISA_Server_DMZ_Scenarios.html
- http://support.microsoft.com/default.aspx?scid=%2Fservicedesks%2Fwebcasts%2Fwc110801%2Fwcblurb110801%2Easp

Your external and DMZ subnet seems to be good. Just make sure there is *only* one default gateway set on the ISA server and it must be on the external interface. Also, in your ISP router, there should be a static route for your DMZ subnet pointing to your ISA external interface. Of course, the DMZ hosts should have your ISA DMZ interface as default gateway.

Keep in mind, that you have to define specific IP packet filters to allow traffic from the external world to/from the DMZ subnet/hosts.

HTH,
Stefaan

(in reply to Robbie Phelan)

Post #: 2