Welcome to ISAserver.org

VPN Site 2 Site NAT

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> VPN >> VPN Site 2 Site NAT

Page: [1]

Message

<< Older Topic Newer Topic >>

VPN Site 2 Site NAT - 22.Feb.2005 10:54:00 PM

markeboyle

Posts: 22
Joined: 28.Feb.2003
From: chicago
Status: offline

Is there a way in ISA 2004 on W2k3 to have my DMZ server be seen as a PUBLIC IP address?

My DMZ server is currently 10.10.10.x and when I create an IPSec tunnel through ISA the CISCO VPN Concentrator see's my traffic as 10.10.10.x. I would like it to be my public IP address instead.

Thanks for any help or direction,
Mark

Post #: 1

Featured Links*

RE: VPN Site 2 Site NAT - 25.Feb.2005 2:03:00 AM

tshinder

Posts: 47663
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Mark,

What is the DMZ server doing? Is it a Web server or something? How does it fit into this issue?

Where is the ISA firewall?

Where is the VPN server?

Thanks!
Tom

[ February 25, 2005, 02:04 AM: Message edited by: tshinder ]

(in reply to markeboyle)

Post #: 2

RE: VPN Site 2 Site NAT - 1.Mar.2005 7:12:00 AM

markeboyle

Posts: 22
Joined: 28.Feb.2003
From: chicago
Status: offline

My server on the DMZ is an application server that provides data to the local webservers (also on the same DMZ) from data it receives from 3rd party over this IPSec VPN.

A--B--Internet--C--D

A = 3rd Party App Server
B = 3rd Party VPN solution
C = My ISA Server (IPSec thru B)
D = My App Server (gets data from A)

(current) vpn works in this config:
A and B have public ip's
C has public ip 216.1.1.1
D has private ip 10.10.10.x

(desired) 3rd party currently allows my incoming requests (seen as 10.10.10.x) but they want me to stop using this private range and want to see my traffic as public ip, so we need:
D to have public IP 216.1.1.2

Thanks in advance for any guidance,
Mark

(in reply to markeboyle)

Post #: 3