isa2 (Full Version)

All Forums >> [ISA Server 2004 General ] >> Installation



Message


cancee -> isa2 (28.May2007 7:26:00 AM)

next




tshinder -> RE: ISA Installation on DSL (30.May2007 6:01:32 PM)

Always install the ISA Firewall with two or more NICs. It's silly to install the ISA Firewall with a single NIC. What firewall uses a single NIC?

HTH,
Tom




cancee -> RE (31.May2007 5:25:11 AM)

2nd




tshinder -> RE: ISA Installation on DSL (31.May2007 10:48:28 AM)

Each NIC on the ISA FIREWALL needs to be on a different network ID. Then configure the external interface of the ISA FIREWALL to use the NAT device in front of it as its default gateway.

HTH,
Tom




cancee -> RE: ISA Installation on DSL (2.Jun.2007 6:40:08 AM)

Sir ,

ok sir as you say that make 2 diffrent Network ID,s so now I make range like this

Nic 1

192.168.1.100/24
D/g NO
DNS Isa It self
192.168.1.100

Nic2
10.0.0.100/24
D/G 10.0.0.138 from DSL modem

Now the Problem that I dont define any one to External coz I dont have a REAL Ip so how I know on DSL " Dynamic" ips that which Nic is External ?
Should I Add both Networks in our LAT ?


3rd
Is it Worthy that ISA it, SELF a DNS Server ?


4th

In PPPoE conection I dont have REAL Ip so how to Enable NAT Sir .


B-Regards,
Rockey




tshinder -> RE: ISA Installation on DSL (2.Jun.2007 1:55:44 PM)

Hi Rockey,

If the DSL modem is in bridge mode, then you should set the external interface of the ISA Firewall to use DHCP to get an address.

HTH,
Tom




cancee -> RE: ISA Installation on DSL (3.Jun.2007 2:30:19 AM)

nwe below




cancee -> RE: ISA Installation on DSL (3.Jun.2007 2:45:17 AM)

ORIGINAL: cancee

Hi Sir,

Sir here is my shorts so now you have battr idea that how I can make my Network on DSL modem on dual Nic .
2nd I am using also Oneway Sattlite service and this Ip is from Sattlite provider on DVB card you see. so in this case how we setup ISA .
Is that we need a Internal DNS on ISA it Self ?



[image]http://www.cancee.com/isa/1.JPG[/image]


[image]http://www.cancee.com/isa/2.JPG[/image]


[image]http://www.cancee.com/isa/3.JPG[/image]

[image]http://www.cancee.com/isa/Modem.JPG[/image]


[image]http://www.cancee.com/isa/Modem2.JPG[/image]


you can see Isa Installation Problem .
 

B-Regards,
Rockey
[/quote]




tshinder -> RE: ISA Installation on DSL (3.Jun.2007 10:27:32 AM)

OK, if PPPoE is required, then you definitely don't want the device in bridge mode -- you want the PPPoE device to be in router mode, so that it can create the PPPoE connection. Then have the ISA Firewall use the LAN IP address on the NAT device as its default gateway.

HTH,
Tom




cancee -> RE: ISA Installation on DSL (4.Jun.2007 1:19:11 AM)

 

Dear Sir,
Your Answer is very short  SIR I think you don,t see this movie which I made for you .

You can see that on the WAN there is automatically so many IP,s come
please watch this www.cancee.com/isa/isa.avi

Please mention here that in this sonario how we Install ISA SERVER .

When I install ISA it Give me Error on this Setup Which you Watch in MOVIE .

Also If you can write here as per Example so it can be easy for all guys to understand this.
B-Regards,
Rockey




tshinder -> RE: ISA Installation on DSL (4.Jun.2007 9:47:42 AM)

OK, several problems I see already:

WAN and LAN interfaces are on the same network ID, that won't work.

Also, VMware is installed on the firewall, you should remove that too.

HTH,
Tom




cancee -> RE: ISA Installation on DSL (5.Jun.2007 1:21:52 AM)

Ok !


But Sir Then What is the Sloution to INSTALL ISA SERVER on DSL ?


1-  HOW  to Define IP range ?
2-  Or make more Subnet in DSL modem ?
Regards,
Rockey




daviddavis -> RE: isa2 (5.Jun.2007 10:57:50 AM)

Hi Rockey,

Okay, I watched your video. The first thing that I see that you need to do is to uninstall parallels desktop & vmware, then reboot.

Next, make sure that you inside and outside (internal & external) networks are on different networks.

Then, please post the output of IPCONFIG /ALL here so we can help you determine what interface will be what when you install ISA.

Thanks,




cancee -> RE: isa2 (6.Jun.2007 3:44:37 AM)

Dear David,

Thx ,
As you say I write here all in pictures.
[image]http://www.cancee.com/isa/isa06/lan.JPG[/image]

[image]http://www.cancee.com/isa/isa06/inside.JPG[/image]

[image]http://www.cancee.com/isa/isa06/outside.JPG[/image]

[image]http://www.cancee.com/isa/isa06/DVB.JPG[/image]

B- Regards,
Rockey




daviddavis -> RE: isa2 (6.Jun.2007 9:49:08 AM)

Hi Rockey,

Thanks for the info and pictures.

I am picturing the satellite Internet working just like any other DSL or cable connection, when it comes to networking. That may or may not be the case.

I am still having a little trouble understanding all the necessary IP info in this scenario so I drew a picture for us to try to see what we are talking about. I have attached the JPG version and posted the VSD version at:
http://www.happyrouter.com/downloads/Sat-internet-and-ISA-sample.vsd

That way, you can edit the Visio version and repost if you wish.

At this point, I see that you have three interfaces on the ISA server. I am wondering why we need 3 interfaces. Why not just 2 interfaces? I suggest you get rid of your 10.x.x.x interface (the inside interface) - just disable it. Then, rename the 192.168.x.x interface to be your new inside/internal interface. Then the DVB interface to the Internet would be your outside/external interface.

[image]http://www.happyrouter.com/downloads/Sat-internet-and-ISA-sample.jpg[/image]

Does that make sense?

Thanks


Again, this




cancee -> RE: isa2 (7.Jun.2007 3:31:22 AM)

Thanks Sir,

I update this VSD version File .

http://cancee.com/isa/isa06/Sat-internet-and-ISA-sample.vsd
B-Regards,

Rockey,




daviddavis -> RE: isa2 (7.Jun.2007 3:22:07 PM)

Hi Rockey,

Okay, the updated diagrams helps but also helps to see how confusing the use of one-way internet with an ISA server can be. As I have never configured one-way satellite and ISA before, I searched for help on this using Google.

I found the following links. The first link actually looks very step by step and covers the use of the DVB card and how to configure ISA. I hope it is able to solve your problems:
http://www.bizarnet.ro/html/isaserver_en.asp
http://www.internetcon.ro/html/isaserver_en.asp
http://www.internetcon.ro/software/default_en.asp?soft=isaserver&sec=suport&doc=setup
http://www.isaserver.org/tutorials/starband.html
http://translate.google.com/translate?hl=en&sl=ru&u=http://www.satinternet.ru/tesinet.htm&sa=X&oi=translate&resnum=2&ct=result&prev=/search%3Fq%3Dplanetsky%2BISA%26hl%3Den%26sa%3DG

Personally, after looking at the diagram, and now understanding how your one-way satellite Internet service works, I do believe that your ISA server does need 3 adaptors:
1 - External / DVB
2 - External / Modem
3 - Internal / LAN

However, I defer to the links above on how to properly configure ISA with one-way satellite.

Thanks




Rotorblade -> RE: isa2 (7.Jun.2007 9:14:06 PM)

quote:

Personally, after looking at the diagram, and now understanding how your one-way satellite Internet service works, I do believe that your ISA server does need 3 adaptors:
1 - External / DVB
2 - External / Modem
3 - Internal / LAN


Mr. Davis,

Sorry to butt in but when did ISA server start supporting the use of TWO external interfaces?

Just curious....

Rockey,

Having worked with and installed Satellite Internet systems, (two-way) network latency is a big issue. Using a one-way system is just going to work through ISA.

Sorry,

RB




daviddavis -> RE: isa2 (7.Jun.2007 9:24:56 PM)

Hi Rotoblade,

Please, no apologies for commenting on this. I think that Rockey needs all the help he can get.

You are correct, I mistyped/misspoke on that. ISA doesn't support more than 1 external interface (here is a good link on that: http://www.microsoft.com/technet/isa/2004/plan/unsupportedconfigs.mspx)

I welcome your comments especially because you said that you have configured this before (I have never had the pleasure of working with a one-way satellite connection to the internet [:D] )

So, rotoblade, what should Rockey's diagram look like with a 1 way satellite connection? How is ISA going to connect to the modem for outbound and the satellite card for inbound?

Thanks for anyone's help on this setup.




Rotorblade -> RE: isa2 (7.Jun.2007 9:47:16 PM)

David,

No problem, just wanted to clarify, actually my name is David too. Coming in on the tail-end which BTW I first followed when Rockey first posted his thread talking about DSL issues and Tom replied and it has since moved to one-way satellite issues. How it got to that is a little confusing, anyway personally, if Satellite is his only option, I would suggest an upgrade! We moved away from one-way 5 years ago. As I mentioned, latency is a big issue and there a things that just don’t work well with Sat internet. Video is one of them. I know it’s probably not the answer he is looking for but that would be my suggestion.

Regards,

RB
(Dave)




Page: [1] 2   next >   >>