Welcome to ISAserver.org

Two routers, one for internet and one for accept incoming requests. Solution?

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> Network Infrastructure >> Two routers, one for internet and one for accept incoming requests. Solution?

Page: [1]

Message

<< Older Topic Newer Topic >>

Two routers, one for internet and one for accept incomi... - 12.Aug.2004 9:55:00 PM

olafo

Posts: 56
Joined: 12.Aug.2004
From: Bilbao
Status: offline

I have one router Cisco 827 to give access from LAN to internet. The other router Cisco 1760 is for accept incoming requests to various WEB Servers.

Now the situation is:

Internet (827)

||

I S A

||

L A N

The idea is following:

Internet (827) RequestfromInternet(1760)

L A N D M Z

-The LAN users can access internet(by 827) and DMZ.
-The Requests from Internet to Servers are managed by the 1760. There will be several web servers (i have 16 public addresses).

What is the best solution?
Public or private address for web servers?
If web servers have public addresses. What ip address i set to DMZ interface of ISA?

My idea is like this:

Internet (827) RequestfromInternet(1760)
| | | |
ISA1 ------------------------- ISA2
|| ||
L A N D M Z

Is this correct?
How do i route the traffic from 1760 to DMZ in ISA2?

Thanks

Post #: 1

Featured Links*

RE: Two routers, one for internet and one for accept in... - 17.Aug.2004 5:16:00 PM

tshinder

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi olafo,

For security reasons, private addresses are always better, and the ISA firewall can use these to your best advantage.

HTH,
Tom

(in reply to olafo)

Post #: 2

RE: Two routers, one for internet and one for accept in... - 21.Aug.2004 4:22:00 PM

penrose.l@2college.nl

Posts: 474
Joined: 29.Jan.2004
From: Netherlands
Status: offline

Hi ,

since you're posting this in the ISA 2004 forum I presume you have ISA 2004.
You don't need 2 ISA servers , it will only make your network slower. Better is to use that second ISA server as a NLB host when ISA 2004 Enterprise comes out ( next year ).

Put a Intel Pro/1000 MT QUAD gig nic in your ISA , and connect the 4 networks to your ISA :

- Internet (827)
- RequestfromInternet(1760)
- L A N
- D M Z

Setup your ISA with correct rules and you're there. That's my suggestion.

Lex P.

(in reply to olafo)

Post #: 3

RE: Two routers, one for internet and one for accept in... - 20.Sep.2004 6:36:00 PM

olafo

Posts: 56
Joined: 12.Aug.2004
From: Bilbao
Status: offline

Thanks Tom and Lex.

This is the best solution, but i need to expect the enterprise edition.

Greetings,

Olaf

(in reply to olafo)

Post #: 4

RE: Two routers, one for internet and one for accept in... - 21.Sep.2004 4:42:00 PM

tshinder

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Olaf,

I consider the enterprise solution to be the best solution.

HTH,
Tom

(in reply to olafo)

Post #: 5

Page: [1]	<< Older Topic Newer Topic >>

All Forums >> [ISA Server 2004 Firewall] >> Network Infrastructure >> Two routers, one for internet and one for accept incoming requests. Solution?

Page: [1]