• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Multiple internet connections in a DMZ

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2000 Firewall] >> DMZ >> Multiple internet connections in a DMZ Page: [1]
Login
Message << Older Topic   Newer Topic >>
Multiple internet connections in a DMZ - 7.Aug.2003 11:16:00 AM   
xlagerwaard

 

Posts: 22
Joined: 28.Jul.2003
From: Netherlands
Status: offline
I have 2 different dsl internet connections. I want to use 1 connection for all citrix traffic and the other connection for all other traffic. In my ISAserver i have 3 nics. 1 on the LAN, 2 in a DMZ with the private ipnr's 192.168.1.1 and 192.168.1.2.

I have 2 draytek routers. On the LAN interface of draytek1 the ipnr = 192.168.1.3 and on the LAN interface of draytek2 the ipnr = 192.168.1.4. Both draytek routers have public ip adresses on there WAN interface.

On the isaserver if you type route print in a command box you see:
0.0.0.0 0.0.0.0 192.168.1.3 192.168.1.1
0.0.0.0 0.0.0.0 192.168.1.4 192.168.1.2
0.0.0.0 0.0.0.0 LAN gateway LAN interface

If i connect to the public ipadres on draytek1 on port 1494 (citrix) i get connected to ipdres 192.168.1.1 on port 1494 and the ISAserver connects me to the citrix server on the local lan. This works fine as long as remove the default gateways from the LAN interface and 192.168.1.2. So you only have 0.0.0.0 0.0.0.0 192.168.1.3 192.168.1.1 left as the default route of the ISA server. YEAH ! it works, but....

If i want to use HTTP from an pc on the LAN it works fine, but it uses draytek1 and it should be using draytek2.

We used Wingate before in the exact same configuration and all worked fine. In Wingate you can say "if you receive traffic on the LAN interface on port 8080, route it via interface 192.168.1.2" On interface 192.168.1.2 the default route is draytek2 and that worked perfect.

How can i use ISAserver to split my traffic as i used to do with Wingate?

Thanks in advance,
Xander Lagerwaard
"[Confused]"
Post #: 1
RE: Multiple internet connections in a DMZ - 7.Aug.2003 10:07:00 PM   
spouseele

 

Posts: 12830
Joined: 1.Jun.2001
From: Belgium
Status: offline
Hi Xander,

first of all, NEVER put a default gateway on the ISA internal interface. Check out http://www.isaserver.org/tutorials/Configuring_ISA_Server_Interface_Settings.html for more info.

Secondly, out of the box ISA server supports only ONE external interface. The external interface is the interface with the default gateway set. If you need more external interfaces, check out http://www.isaserver.org/software/ISA/High_Avail._&_Load_Bal./ .

HTH,
Stefaan

(in reply to xlagerwaard)
Post #: 2
RE: Multiple internet connections in a DMZ - 8.Aug.2003 10:31:00 AM   
xlagerwaard

 

Posts: 22
Joined: 28.Jul.2003
From: Netherlands
Status: offline
Hi Stefaan,

First:
Thnx. Somehow I missed that, but solved by manually deleting the additional default routes [Big Grin]

Secondly:
Thnx! RainConnect looks like the product I need to solve the problem. Do you know any other products (in combination with ISA of course) with which I could do the same, or is RainConnect the only 1 ?

Do you have any experience with RainConnect? If so I would like your opinion (or from any1 who knows RainConnect) about RainConnect.

(in reply to xlagerwaard)
Post #: 3
RE: Multiple internet connections in a DMZ - 8.Aug.2003 11:15:00 PM   
spouseele

 

Posts: 12830
Joined: 1.Jun.2001
From: Belgium
Status: offline
Hi Xander,

I don't have first hand experience with RainConnect (yet). But from what I hear from Tom Shinder, he likes very much the product and technical support. Moreover, it seems to be the cheapest solution for ISA server. Drop him a mail at tshinder@isaserver.org and I'm sure he will respond.

HTH,
Stefaan

(in reply to xlagerwaard)
Post #: 4
RE: Multiple internet connections in a DMZ - 9.Aug.2003 4:49:00 PM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hey guys,

Yes, RainConnect works great! However, the one limitation that product has, that I hope they fix soon, is the Exchange RPC publishing.

HTH,
Tom

(in reply to xlagerwaard)
Post #: 5
RE: Multiple internet connections in a DMZ - 11.Aug.2003 10:04:00 AM   
xlagerwaard

 

Posts: 22
Joined: 28.Jul.2003
From: Netherlands
Status: offline
Hi Tom, Stefaan,

Thanks for your response. Since I want to use the Exchange RPC publishing feature in ISAServer, I would like to know what limitations I'm going to encounter if I install RainConnect ?

Bye the way.... HTH means "Hope this helps", or ??? never seen this abbreviation before [Confused]

Thanks,
Xander

(in reply to xlagerwaard)
Post #: 6
RE: Multiple internet connections in a DMZ - 15.Aug.2003 9:58:00 PM   
xlagerwaard

 

Posts: 22
Joined: 28.Jul.2003
From: Netherlands
Status: offline
Hi Tom,

What limitations am I going to encounter if I install RainConnect? Exchange RPC publishing will not work at all, or ?

Thanks,
Xander

(in reply to xlagerwaard)
Post #: 7
RE: Multiple internet connections in a DMZ - 26.Aug.2003 5:32:00 PM   
xlagerwaard

 

Posts: 22
Joined: 28.Jul.2003
From: Netherlands
Status: offline
Hi Tom,

Could you please inform me about the limitations I am going to encounter if I install RainConnect?

If Exchange RPC publishing won't work with RainConnect I would really like to know.

Thanks,
Xander Lagerwaard

[ August 27, 2003, 05:43 PM: Message edited by: Xander Lagerwaard ]

(in reply to xlagerwaard)
Post #: 8
RE: Multiple internet connections in a DMZ - 28.Aug.2003 11:11:00 PM   
spouseele

 

Posts: 12830
Joined: 1.Jun.2001
From: Belgium
Status: offline
Hi Xander,

I can't answer that one but, why not drop RainConnect a call or email to find it out?

HTH,
Stefaan

(in reply to xlagerwaard)
Post #: 9
RE: Multiple internet connections in a DMZ - 29.Aug.2003 11:27:00 AM   
xlagerwaard

 

Posts: 22
Joined: 28.Jul.2003
From: Netherlands
Status: offline
Hi Stefaan,

I already contacted Rainfinity (via e-mail) and asked if they are aware of any issue with Exchange RPC publishing in combination with Rainconnect. Ross Asquith (technical manager at Rainfinity) told me that there are no issue's that they know off.

Now i'm wondering what the issue is Tom mentioned in his response, so i can confront Ross Asquith at Rainfinity with the issue that Tom found.

So Tom, please respond, thanks.

Xander

(in reply to xlagerwaard)
Post #: 10
RE: Multiple internet connections in a DMZ - 29.Aug.2003 4:59:00 PM   
spouseele

 

Posts: 12830
Joined: 1.Jun.2001
From: Belgium
Status: offline
Hi Xander,

I will drop Tom an email for this topic.

HTH,
Stefaan

(in reply to xlagerwaard)
Post #: 11

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2000 Firewall] >> DMZ >> Multiple internet connections in a DMZ Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts