• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

configuring external IPs

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2000 General] >> Server Publishing >> configuring external IPs Page: [1]
Login
Message << Older Topic   Newer Topic >>
configuring external IPs - 4.Dec.2002 4:40:00 PM   
amb

 

Posts: 3
Joined: 4.Dec.2002
Status: offline
Please help...newbie to ISA.

I am trying to configure ISA server publishing and when I try to publish a server, there are no external IPs for me to select from.

We did not configure the external IP on the external NIC before installing ISA since we wanted to install ISA "offline" and then drop it into our live environment.

So the question is, how do I get ISA to recognize the external IP addresses "after the fact"?
Post #: 1
RE: configuring external IPs - 4.Dec.2002 10:25:00 PM   
spouseele

 

Posts: 12826
Joined: 1.Jun.2001
From: Belgium
Status: offline
Hi amb,

you can only create a publishing rule if the external NIC is alive! So, if you want to do it offline, connect the NIC to a 'standalone' Hub.

HTH,
Stefaan

(in reply to amb)
Post #: 2
RE: configuring external IPs - 4.Dec.2002 10:41:00 PM   
Guest
Hi, I am actually having the same problem and my external nic is "alive". When I manually type in the IP of my external nic card, I get a dialog box telling me that my specified ip address is not external (I don't get any choices for ips in the list box either). I must not have my external ip address configured correctly?? I noticed that the "external" ip that I am using is included in the internal ip range on my LAT table. Could this be the issue? Do I have to manually take this ip out of my internal ip range in my LAT table? (not sure how to do that - get errors when trying.)

Any help is greatly appreciated - I'm a newbie too. thanks so much!

(in reply to amb)
  Post #: 3
RE: configuring external IPs - 4.Dec.2002 10:48:00 PM   
spouseele

 

Posts: 12826
Joined: 1.Jun.2001
From: Belgium
Status: offline
Hi Frank,

aha... always setup the NIC's correctly *before* installing the ISA server! This will save you a lot of problems afterwards.

To properly configure the NICS, check out:
- http://www.isaserver.org/tutorials/Configuring_ISA_Server_Interface_Settings.html
- http://www.isaserver.org/tutorials/Designing_An_ISA_Server_Solution_on_a_Complex_Network.html

BTW --- keep in mind that the external and internal interfaces MUST be on different networkID's.

HTH,
Stefaan

(in reply to amb)
Post #: 4
RE: configuring external IPs - 4.Dec.2002 11:01:00 PM   
tiny

 

Posts: 4
Joined: 4.Dec.2002
Status: offline
thanks Stefaan,

I will check out those links! thanks! (I just registered with a different login name...)

Q for you: I want ISA to accept a request on port 8001, then redirect this request on port 8000 to another server. Here's what I think I need to do:

-Open port 8001 via a packet filter rule (I have packet filtering enabled)
-Create a server publishing rule to redirect this request to appropriate backend server on port 8000 (I'm hoping that there's a "bridging" tab (like in web publishing rules) where I can redirect the request from ISA to backend server on 8000 instead of 8001).

Am I on the right track - do I want a server publishing rule for this? Is there any good basic tutorials that I could find to help me with this? I'm having a tough time finding basic tutorials.

Thank you very much for the help.

(in reply to amb)
Post #: 5
RE: configuring external IPs - 4.Dec.2002 11:12:00 PM   
amb

 

Posts: 3
Joined: 4.Dec.2002
Status: offline
Ah...I think I figured out my problem. I also had the external IP addresses in the LAT table. Need to make sure they are not in the LAT table, also program the IP address in the TCP/IP configuration for the external NIC.

The key then is to reboot the computer so that the services are restarted and then the external IP address show up when creating the rules.

(in reply to amb)
Post #: 6
RE: configuring external IPs - 4.Dec.2002 11:13:00 PM   
spouseele

 

Posts: 12826
Joined: 1.Jun.2001
From: Belgium
Status: offline
Hi tiny,

for good, very good information on ISA server, check out:

- the ISA help file. There is a lot of information in there.
- http://www.microsoft.com/isaserver
- http://www.isaserver.org/tutorial/
- http://www.isaserver.org/articles_tutorials/
- Tom Shinder's books: a must have and read!

You seldom need to create packet filters! So, don't create packet filters yourself if it is not strictly necessary. The protocol, site&content and publishing rules will create them dynamically for you.

To publish an internal service not based on HTTP/HTTPS you need to use server publishing rules. In server publishing rules you can *not* redirect to a different port number. So, the external and internal port number *must* be the same.

HTH,
Stefaan

(in reply to amb)
Post #: 7
RE: configuring external IPs - 4.Dec.2002 11:18:00 PM   
tiny

 

Posts: 4
Joined: 4.Dec.2002
Status: offline
Thank you for your help Stefaan. I'll look into all of this.

(in reply to amb)
Post #: 8
RE: configuring external IPs - 4.Dec.2002 11:21:00 PM   
spouseele

 

Posts: 12826
Joined: 1.Jun.2001
From: Belgium
Status: offline
Hey guys,

keep in mind that the LAT should only contain the internal IP's, nothing more, nothing less!

The three most important configuration steps are:
1) interface settings
2) the LAT
3) DNS name resolving

If those are configured correctly, you are in good shape! [Razz]

HTH,
Stefaan

(in reply to amb)
Post #: 9
RE: configuring external IPs - 4.Dec.2002 11:25:00 PM   
tiny

 

Posts: 4
Joined: 4.Dec.2002
Status: offline
hi amb,

How did you delete your external ip address from your lat table? In my lat table I have a range of internal ip addresses (my "external" ip is included in this range) and I cannot alter this entry at all - it tells me it can't "save the properties". Any help is appreciated. I'll look into this more, just wanted to see if you had a quick answer. thanks for any help.

(in reply to amb)
Post #: 10
RE: configuring external IPs - 5.Dec.2002 4:47:00 PM   
tiny

 

Posts: 4
Joined: 4.Dec.2002
Status: offline
Update: I could not create a server publishing rule because ISA wouldn't recognize my "external" IP address as really being bound to my "external" nic card. The reason that it couldn't recognize it as "external" was because this IP address was listed in my LAT table (LAT table lists all "internal" addresses only.) I couldn't delete my "external" IP from the LAT table though for a quirky reason: you have to make sure that you always have an entry for your internal ip in the lat table. I was trying to modify my internal ip range (which included both my internal and external ip addresses and was having trouble because I was also trying to temporarily delete my internal ip.) anyway.. hopefully that's useful to someone.

(in reply to amb)
Post #: 11
RE: configuring external IPs - 5.Dec.2002 10:40:00 PM   
spouseele

 

Posts: 12826
Joined: 1.Jun.2001
From: Belgium
Status: offline
Hi tiny,

good to hear you got it working and thanks for the follow up! [Smile]

Stefaan

[ December 05, 2002, 10:44 PM: Message edited by: spouseele ]

(in reply to amb)
Post #: 12

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2000 General] >> Server Publishing >> configuring external IPs Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts