I have a simple configuration, one network segment behind an ISA Server 2004 Standard Edition firewall. All addresses on the internal network are 192.168.1.x. We just added some Cisco gear to do VOIP, and one of the Cisco boxes has an IP address of 192.168.2.2, and it wants to use NTP to get TOD updates. This box is on the same segment as the 192.168.1.x machines.
The gateway address for the network is 192.168.1.19, which is the IP address of one of the NICs on the ISA Server. The other NIC on the ISA Server connects to the external router.
How do I setup the network configuration/definition and rule to allow the NTP traffic from 192.168.2.2 through ISA server? I get configuration errors trying simple things, like adding 192.168.2.2 to the Internal Network definition, and the NTP packet out is always denied with an error in the ISA monitor trace. I might be able to upgrade to ISA 2006 Standard Edition.
you say that the Cisco box is on the internal segment, but the IP subnet is different. What is your subnetmask? If you have a subnetmask of 255.255.255.0, the Cisco box in the 192.168.2.x range will not be able to reach the gateway 192.168.1.19.
If the subnetmask is a class B mask (255.255.0.0) then you should include the 192.168.0.0/16 range in the Internal network on ISA.
Thanks! That's the key bit of information I needed. Great guess about my subnet mask based on the very limited information provided with my question! I did indeed have the subnet mask set to 255.255.255.0 on the internal network NIC of the ISA server. Once I changed that, and the Internal network definition as you suggested, things began to flow very nicely.
|
My Subscription |
My Forums |
Address Book |
Member List |
Search |
FAQ |
Ticket List |
Log Out
Printable Version
All Forums >> [ISA Server 2004 Firewall] >> Network Infrastructure >> configuration question 
configuration question - 
RE: configuration question - 
I did indeed have the subnet mask set to 255.255.255.0 on the internal network NIC of the ISA server. 
Once I changed that, and the Internal network definition as you suggested, things began to flow very nicely. 
New Messages
No New Messages
Hot Topic w/ New Messages
Hot Topic w/o New Messages
Locked w/ New Messages
Locked w/o New Messages
Post New Thread