Welcome to ISAserver.org

Trihomed Setup

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 Firewall] >> DMZ >> Trihomed Setup

Page: [1]

Message

<< Older Topic Newer Topic >>

Trihomed Setup - 30.Sep.2004 9:15:00 AM

rashpal

Posts: 41
Joined: 27.Mar.2002
Status: offline

Hi there,

I would like to setup trihomed dmz.

My ISP have provided me with this set of ip address 202.179.106.114 up to 118 and the mask is 255.255.255.248.

I believed I can subnet this any more if I do I can only use one ip address only right?

Does isa server 2004 requred public ip for dmz or can I use any private ip address?

Appreciate all the help.

[ September 30, 2004, 10:18 AM: Message edited by: rashpal ]

Post #: 1

Featured Links*

RE: Trihomed Setup - 30.Sep.2004 8:10:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi rashpal,

you can further subnet the given IP range into two IP ranges:

1) external: 202.179.106.112 255.255.255.250 .
The 2 usuable IP addresses are .114 (ISP router) and .115 (ISA external interface)

2) DMZ: 202.179.106.116 255.255.255.250 .
The 2 usuable IP addresses are .117 (ISA DMZ interface) and .118 (DMZ host).

Moreover, you should make sure that in the ISP router the LAN interface is set to 202.179.106.114 255.255.255.250 and that there is a static persistent route for 202.179.106.116 255.255.255.250 with as gateway 202.179.106.115 (ISA external interface).

With the above setup you can have *exactly* one DMZ host. However, if you go with ISA server 2004 then you can use private IP's in your DMZ.

HTH,
Stefaan

(in reply to rashpal)

Post #: 2

RE: Trihomed Setup - 1.Oct.2004 2:03:00 AM