Posts: 18
Joined: 12.Jul.2005
From: Portland, OR
Status: offline
So, we have an ISA 2k4 server at our main office with a WAN and LAN interface. We are building another one now aimed at our remote office. We have a 6mb DSL line there, and my plan is to take the Qwest DSL modem, toss it in bridge mode and put the ISA server right behind it. Then put its LAN interface on a local switch there and have the ISA server act as a gateway/router, NAT, etc (going to make it an AD server w/ DHCP & DNS).
I hear that Windows 2003 has a good PPPoE native driver built in, however, I also hear that Qwest only does PPPoA. My netgear router that is temporarily filling the spot for the ISA server is doing PPPoE (according to the configuration), and it works . . . so i'mnot really sure WHAT Qwest is doing
If they go PPPoE, I think i'm fine. If it's PPPoA, then I'm not so sure. One option, is that I believe all of the DSL modems that are PPPoA come with a Windows driver that loads support for it, sometimes customized for that device. I'm hoping that this could solve the problem if necessary, by loading it on the ISA server itself.
I'm hoping some people here have had experiences like this, and can give me some pointers (both to any possible catches in running an AD server, DNS, DHCP & ISA on one box) and also to the PPPoE/A situation.
RE: ISA + PPPoE/A Remote Office - 6.Sep.2005 4:27:00 PM
Guest
I can do that. I was hoping to simplify the design, and not have a number of different devices in the middle. One of the ideas in why I wanted to do it with it being a passthrough device to replace a router, was that I have always encountered some routing issues behind certain routes. Sometimes its as simple as a router that dosn't support routing GRE, other times its NAT -> NAT issues.
I'm assuming in your case that you are speaking about putting the ISA behind the router up there in a single NIC environment and using it as the Proxy which then routes to the other router? (or maybe not, maybe have dual NICs and one connects to the router and one to the LAN.). I definetly prefer to have the ISA server as the only point of access to the network, it eliminates anyone from pointing their default gateway to the router and bypassing any of ISA's features, such as our usage of SurfControl's Web Filter.
Well, anyway, I am basically thinking out loud. Your input is greatly appreciated though!