Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Two ISA Server in Network Installation

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2004 General ] >> Installation >> Two ISA Server in Network Installation Page: [1]
Login
Message << Older Topic   Newer Topic >>
Two ISA Server in Network Installation - 20.Jun.2006 3:19:29 PM   
bhavin78

 

Posts: 429
Joined: 18.Jul.2005
From: USA
Status: offline
I am setting up test LAB to practise AD Sites with two ISA Server on each site.
This is what I have.

Two Public IP address.
Two servers one for each site.

I have promoted one of the server as DC and Installed ISA Server on it with Public IP address on one of three NIC and Internal Adress 192.168.0.1 on secnd Card.

Now how do I start working on second DC.
How I start working on it?
First install ISA SErver and make VPN Connection between two server and then DCPromo?
I want to use different IP Adress range on second site and still be on same forest and domain.[191.9.xxx.xxx].
What configuration I need to make so both sites will able to replicate data with each other and able to validate user in case of failure of DC in local site.
What configuration I should go with ISA Server as I will have two ISA Server for same network but, different site?
Post #: 1
RE: Two ISA Server in Network Installation - 20.Jun.2006 5:16:23 PM   
tshinder

 

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi B,

Don't install the ISA firewall on a DC.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to bhavin78)
Post #: 2
RE: Two ISA Server in Network Installation - 20.Jun.2006 5:20:35 PM   
bhavin78

 

Posts: 429
Joined: 18.Jul.2005
From: USA
Status: offline
For security reason it's not good to install DC on ISA but, for testing purpose it should fine or Not?

if the security is question than does SBS has ISA on it or No ? 
Help me with my 1st question, please?

(in reply to tshinder)
Post #: 3
RE: Two ISA Server in Network Installation - 20.Jun.2006 5:31:21 PM   
LLigetfa

 

Posts: 2184
Joined: 10.Aug.2004
From: fort frances.on.ca
Status: offline
ISA written specifically for SBS is not the same as vanilla ISA on a DC.  How can your tests be validated if you need to punch holes in your ISA to get the DC functionality?

_____________________________

The School of Hard Knocks is a mean teacher. She gives the exam before the lesson.

(in reply to bhavin78)
Post #: 4
RE: Two ISA Server in Network Installation - 20.Jun.2006 5:37:00 PM   
bhavin78

 

Posts: 429
Joined: 18.Jul.2005
From: USA
Status: offline
ok, I got that. But lets say I will not install ISA on DC how do I proceed further with question # 1 with ISA on both site and not installed on DC.
I have already configured DC and ISA on my network now I want to create site and put domain controller on that site for my branch office with ISA server?
What type on configuration I use for ISA at branch office, I have Enterprise edition of ISA at main office?

(in reply to LLigetfa)
Post #: 5
RE: Two ISA Server in Network Installation - 20.Jun.2006 7:25:33 PM   
bhavin78

 

Posts: 429
Joined: 18.Jul.2005
From: USA
Status: offline
still waiting for help?
I am confused and cannot figure our where to start?

here's more detail?
I have two Public IP adress one for each ISA Server?
I have install ISA server on one of the office, Now when I try to install on Branch office as array member it prompts me to enter fully qualified name of ISA Server, how is it going to resolve this name when there is no connection between two offices?
I am plannin to do VPN between two ISA server and than move forward for creating Sites and DC for branch office?
I have to make this work today for testing .

Thanks in Advance

(in reply to bhavin78)
Post #: 6
RE: Two ISA Server in Network Installation - 21.Jun.2006 4:59:55 AM   
tshinder

 

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi B,

Is this ISA 2004 or ISA 2006?

If you're looking at branch office deployments, I highly recommend that you use ISA 2006, as they have the apcfgwzd.exe tool that greatly simplifies this type of deployment.

However, if you really want to get down and dirty, you'll need to digest and act on this document:

http://www.microsoft.com/technet/prodtechnol/isa/2004/plan/intro_to_branch_deployment_ee.mspx

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to bhavin78)
Post #: 7
RE: Two ISA Server in Network Installation - 21.Jun.2006 5:17:02 AM   
bhavin78

 

Posts: 429
Joined: 18.Jul.2005
From: USA
Status: offline
Thanks Tom, this is the answer I was looking for. I read the article and need to do lot of work if I go with ISA Server 2004.
Right now I am just doing for testing purpose but, plan is to use latest version, when is ISA server 2006 going to be released?
If I use beta version will I be able to upgrade to the most current version without starting from scratch?

(in reply to tshinder)
Post #: 8
RE: Two ISA Server in Network Installation - 21.Jun.2006 5:45:40 AM   
tshinder

 

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi B,

Yes! The upgrade is almost completely painless:

http://www.microsoft.com/technet/prodtechnol/isa/2006/deploy/upgrade.mspx

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to bhavin78)
Post #: 9
RE: Two ISA Server in Network Installation - 21.Jun.2006 5:47:00 AM   
tshinder

 

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi B,

Also, the upgrade from RC to RTM will be supported too. There will be a doc on the ms.com site on how to do this when the product goes RTM.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to tshinder)
Post #: 10

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2004 General ] >> Installation >> Two ISA Server in Network Installation Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts