Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

isa2

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2004 General ] >> Installation >> isa2 Page: [1] 2   next >   >>
Login
Message << Older Topic   Newer Topic >>
isa2 - 28.May2007 7:26:00 AM   
cancee

 

Posts: 26
Joined: 13.Apr.2005
From: KSA ( Saudi Arabia )
Status: offline 		next

< Message edited by cancee -- 4.Jun.2007 2:18:47 AM >
Post #: 1
RE: ISA Installation on DSL - 30.May2007 6:01:32 PM   
tshinder

 

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline 		Always install the ISA Firewall with two or more NICs. It's silly to install the ISA Firewall with a single NIC. What firewall uses a single NIC?

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to cancee)
Post #: 2
RE - 31.May2007 5:25:11 AM   
cancee

 

Posts: 26
Joined: 13.Apr.2005
From: KSA ( Saudi Arabia )
Status: offline 		2nd

< Message edited by cancee -- 4.Jun.2007 2:19:38 AM >

(in reply to tshinder)
Post #: 3
RE: ISA Installation on DSL - 31.May2007 10:48:28 AM   
tshinder

 

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline 		Each NIC on the ISA FIREWALL needs to be on a different network ID. Then configure the external interface of the ISA FIREWALL to use the NAT device in front of it as its default gateway.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to cancee)
Post #: 4
RE: ISA Installation on DSL - 2.Jun.2007 6:40:08 AM   
cancee

 

Posts: 26
Joined: 13.Apr.2005
From: KSA ( Saudi Arabia )
Status: offline 		Sir ,

ok sir as you say that make 2 diffrent Network ID,s so now I make range like this

Nic 1

192.168.1.100/24
D/g NO
DNS Isa It self
192.168.1.100

Nic2
10.0.0.100/24
D/G 10.0.0.138 from DSL modem

Now the Problem that I dont define any one to External coz I dont have a REAL Ip so how I know on DSL " Dynamic" ips that which Nic is External ?
Should I Add both Networks in our LAT ?


3rd
Is it Worthy that ISA it, SELF a DNS Server ?


4th

In PPPoE conection I dont have REAL Ip so how to Enable NAT Sir .


B-Regards,
Rockey

< Message edited by cancee -- 2.Jun.2007 6:51:24 AM >

(in reply to tshinder)
Post #: 5
RE: ISA Installation on DSL - 2.Jun.2007 1:55:44 PM   
tshinder

 

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline 		Hi Rockey,

If the DSL modem is in bridge mode, then you should set the external interface of the ISA Firewall to use DHCP to get an address.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to cancee)
Post #: 6
RE: ISA Installation on DSL - 3.Jun.2007 2:30:19 AM   
cancee

 

Posts: 26
Joined: 13.Apr.2005
From: KSA ( Saudi Arabia )
Status: offline 		nwe below

< Message edited by cancee -- 3.Jun.2007 2:46:55 AM >

(in reply to tshinder)
Post #: 7
RE: ISA Installation on DSL - 3.Jun.2007 2:45:17 AM   
cancee

 

Posts: 26
Joined: 13.Apr.2005
From: KSA ( Saudi Arabia )
Status: offline 		ORIGINAL: cancee

Hi Sir,

Sir here is my shorts so now you have battr idea that how I can make my Network on DSL modem on dual Nic .
2nd I am using also Oneway Sattlite service and this Ip is from Sattlite provider on DVB card you see. so in this case how we setup ISA .
Is that we need a Internal DNS on ISA it Self ?

















you can see Isa Installation Problem .
 

B-Regards,
Rockey
[/quote]

< Message edited by cancee -- 3.Jun.2007 3:22:35 AM >

(in reply to cancee)
Post #: 8
RE: ISA Installation on DSL - 3.Jun.2007 10:27:32 AM   
tshinder

 

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline 		OK, if PPPoE is required, then you definitely don't want the device in bridge mode -- you want the PPPoE device to be in router mode, so that it can create the PPPoE connection. Then have the ISA Firewall use the LAN IP address on the NAT device as its default gateway.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to cancee)
Post #: 9
RE: ISA Installation on DSL - 4.Jun.2007 1:19:11 AM   
cancee

 

Posts: 26
Joined: 13.Apr.2005
From: KSA ( Saudi Arabia )
Status: offline 		 

Dear Sir,
Your Answer is very short  SIR I think you don,t see this movie which I made for you .

You can see that on the WAN there is automatically so many IP,s come
please watch this www.cancee.com/isa/isa.avi

Please mention here that in this sonario how we Install ISA SERVER .

When I install ISA it Give me Error on this Setup Which you Watch in MOVIE .

Also If you can write here as per Example so it can be easy for all guys to understand this.
B-Regards,
Rockey

< Message edited by cancee -- 4.Jun.2007 1:46:14 AM >

(in reply to tshinder)
Post #: 10
RE: ISA Installation on DSL - 4.Jun.2007 9:47:42 AM   
tshinder

 

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline 		OK, several problems I see already:

WAN and LAN interfaces are on the same network ID, that won't work.

Also, VMware is installed on the firewall, you should remove that too.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to cancee)
Post #: 11
RE: ISA Installation on DSL - 5.Jun.2007 1:21:52 AM   
cancee

 

Posts: 26
Joined: 13.Apr.2005
From: KSA ( Saudi Arabia )
Status: offline 		Ok !


But Sir Then What is the Sloution to INSTALL ISA SERVER on DSL ?


1-  HOW  to Define IP range ?
2-  Or make more Subnet in DSL modem ?
Regards,
Rockey

(in reply to tshinder)
Post #: 12
RE: isa2 - 5.Jun.2007 10:57:50 AM   
daviddavis

 

Posts: 6
Joined: 5.Jun.2007
Status: offline 		Hi Rockey,

Okay, I watched your video. The first thing that I see that you need to do is to uninstall parallels desktop & vmware, then reboot.

Next, make sure that you inside and outside (internal & external) networks are on different networks.

Then, please post the output of IPCONFIG /ALL here so we can help you determine what interface will be what when you install ISA.

Thanks,

_____________________________

David Davis
Train Signal Video Author of ISA Server Video Series
Available at: http://tinyurl.com/2sp33l
Also, checkout my Website for great FREE knowledgebase articles & forums: http://www.happyrouter.com

(in reply to cancee)
Post #: 13
RE: isa2 - 6.Jun.2007 3:44:37 AM   
cancee

 

Posts: 26
Joined: 13.Apr.2005
From: KSA ( Saudi Arabia )
Status: offline 		Dear David,

Thx ,
As you say I write here all in pictures.








B- Regards,
Rockey

(in reply to daviddavis)
Post #: 14
RE: isa2 - 6.Jun.2007 9:49:08 AM   
daviddavis

 

Posts: 6
Joined: 5.Jun.2007
Status: offline 		Hi Rockey,

Thanks for the info and pictures.

I am picturing the satellite Internet working just like any other DSL or cable connection, when it comes to networking. That may or may not be the case.

I am still having a little trouble understanding all the necessary IP info in this scenario so I drew a picture for us to try to see what we are talking about. I have attached the JPG version and posted the VSD version at:
http://www.happyrouter.com/downloads/Sat-internet-and-ISA-sample.vsd

That way, you can edit the Visio version and repost if you wish.

At this point, I see that you have three interfaces on the ISA server. I am wondering why we need 3 interfaces. Why not just 2 interfaces? I suggest you get rid of your 10.x.x.x interface (the inside interface) - just disable it. Then, rename the 192.168.x.x interface to be your new inside/internal interface. Then the DVB interface to the Internet would be your outside/external interface.



Does that make sense?

Thanks


Again, this

_____________________________

David Davis
Train Signal Video Author of ISA Server Video Series
Available at: http://tinyurl.com/2sp33l
Also, checkout my Website for great FREE knowledgebase articles & forums: http://www.happyrouter.com

(in reply to cancee)
Post #: 15
RE: isa2 - 7.Jun.2007 3:31:22 AM   
cancee

 

Posts: 26
Joined: 13.Apr.2005
From: KSA ( Saudi Arabia )
Status: offline 		Thanks Sir,

I update this VSD version File .

http://cancee.com/isa/isa06/Sat-internet-and-ISA-sample.vsd
B-Regards,

Rockey,

(in reply to daviddavis)
Post #: 16
RE: isa2 - 7.Jun.2007 3:22:07 PM   
daviddavis

 

Posts: 6
Joined: 5.Jun.2007
Status: offline 		Hi Rockey,

Okay, the updated diagrams helps but also helps to see how confusing the use of one-way internet with an ISA server can be. As I have never configured one-way satellite and ISA before, I searched for help on this using Google.

I found the following links. The first link actually looks very step by step and covers the use of the DVB card and how to configure ISA. I hope it is able to solve your problems:
http://www.bizarnet.ro/html/isaserver_en.asp
http://www.internetcon.ro/html/isaserver_en.asp
http://www.internetcon.ro/software/default_en.asp?soft=isaserver&sec=suport&doc=setup
http://www.isaserver.org/tutorials/starband.html
http://translate.google.com/translate?hl=en&sl=ru&u=http://www.satinternet.ru/tesinet.htm&sa=X&oi=translate&resnum=2&ct=result&prev=/search%3Fq%3Dplanetsky%2BISA%26hl%3Den%26sa%3DG

Personally, after looking at the diagram, and now understanding how your one-way satellite Internet service works, I do believe that your ISA server does need 3 adaptors:
1 - External / DVB
2 - External / Modem
3 - Internal / LAN

However, I defer to the links above on how to properly configure ISA with one-way satellite.

Thanks

_____________________________

David Davis
Train Signal Video Author of ISA Server Video Series
Available at: http://tinyurl.com/2sp33l
Also, checkout my Website for great FREE knowledgebase articles & forums: http://www.happyrouter.com

(in reply to cancee)
Post #: 17
RE: isa2 - 7.Jun.2007 9:14:06 PM   
Rotorblade

 

Posts: 976
Joined: 27.Feb.2007
Status: offline
quote:

Personally, after looking at the diagram, and now understanding how your one-way satellite Internet service works, I do believe that your ISA server does need 3 adaptors:
1 - External / DVB
2 - External / Modem
3 - Internal / LAN


Mr. Davis,

Sorry to butt in but when did ISA server start supporting the use of TWO external interfaces?

Just curious....

Rockey,

Having worked with and installed Satellite Internet systems, (two-way) network latency is a big issue. Using a one-way system is just going to work through ISA.

Sorry,

RB

(in reply to daviddavis)
Post #: 18
RE: isa2 - 7.Jun.2007 9:24:56 PM   
daviddavis

 

Posts: 6
Joined: 5.Jun.2007
Status: offline 		Hi Rotoblade,

Please, no apologies for commenting on this. I think that Rockey needs all the help he can get.

You are correct, I mistyped/misspoke on that. ISA doesn't support more than 1 external interface (here is a good link on that: http://www.microsoft.com/technet/isa/2004/plan/unsupportedconfigs.mspx)

I welcome your comments especially because you said that you have configured this before (I have never had the pleasure of working with a one-way satellite connection to the internet  )

So, rotoblade, what should Rockey's diagram look like with a 1 way satellite connection? How is ISA going to connect to the modem for outbound and the satellite card for inbound?

Thanks for anyone's help on this setup.

< Message edited by daviddavis -- 7.Jun.2007 9:27:51 PM >

_____________________________

David Davis
Train Signal Video Author of ISA Server Video Series
Available at: http://tinyurl.com/2sp33l
Also, checkout my Website for great FREE knowledgebase articles & forums: http://www.happyrouter.com

(in reply to Rotorblade)
Post #: 19
RE: isa2 - 7.Jun.2007 9:47:16 PM   
Rotorblade

 

Posts: 976
Joined: 27.Feb.2007
Status: offline 		David,

No problem, just wanted to clarify, actually my name is David too. Coming in on the tail-end which BTW I first followed when Rockey first posted his thread talking about DSL issues and Tom replied and it has since moved to one-way satellite issues. How it got to that is a little confusing, anyway personally, if Satellite is his only option, I would suggest an upgrade! We moved away from one-way 5 years ago. As I mentioned, latency is a big issue and there a things that just don’t work well with Sat internet. Video is one of them. I know it’s probably not the answer he is looking for but that would be my suggestion.

Regards,

RB
(Dave)

(in reply to daviddavis)
Post #: 20

Page:   [1] 2   next >   >> << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2004 General ] >> Installation >> isa2 Page: [1] 2   next >   >>
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts