Re: ISA Server doesn't support VLANs?

From: Dmitry Mashkov (dm_at_byte-et.ru)
Date: 03/22/04 

Date: Mon, 22 Mar 2004 13:34:18 +0400

I forgot one important detail:
We have IP addresses from two different external networks (a.b.c1.d1 and
a.b.c2.d2).
The problem is reproduced ONLY with two IP address from different subnets
and VLANs.
IPs from one subnet and VLANs work OK.
IPs from different subnets and no VLANs work OK.

"Tristan Kington [MS]" <tristank@online.microsoft.com> wrote in message
news:eb4u1w#DEHA.2308@tk2msftngp13.phx.gbl...
> Generally, if your IP infrastructure is working correctly and Windows is
> properly configured for it, ISA should also be working correctly. I've
used
> ISA with VLANs in the past, and there hasn't been an issue, though it was
on
> a different brand of hardware.
>
> Is there anything of interest in the IPPEXT and FWSEXT logs when the
failure
> occurs? Can the ISA Server use itself as a Web Proxy at that point?
>
> Cheers,
> Tristan
>
> --
> This posting is provided "AS IS" with no warranties, and confers no
rights.
>
> "Dmitry Mashkov" <dm@byte-et.ru> wrote in message
> news:OCec6$9DEHA.3404@TK2MSFTNGP10.phx.gbl...
> We are migrating to new switch and LAN infrastructure and faced strange
> problem.
>
> We have correctly running ISA with two NICs.
> Then we have to install Intel ProSET and create a tagged VLANs. So we have
> two VLANs, one is configured as LAN, second as Internet.
> IP configuration is EXACTLY the same.
> When ISA Server Firewall service is stopped, we can ping external network
> without any problems.
> But, after starting Firewall service, ping returns "Destination host
> unreachable".
>
> This problem reproduces on every clean install of ISA, even with ISA 2004
> Beta 2.
>
> How can I make ISA to work correctly with VLANs?
>
> Regards,
> Dmitry Mashkov
>
>
>

Relevant Pages

  • Re: Welche Netzklasse ist die richtige.
    ... Clients ebenfalls in mehrere VLANs logisch strukturiert. ... ganze über ein ISA Interface, welches am Core Switch in alle VLANs getagged ... Standort groß genug auslegen, um nicht irgentwann einmal ein Resubnetting ... Du meinst sicherlich Ether-Interface nicht ISA ?:) ...
    (microsoft.public.de.german.windows.server.networking)
  • Re: ISA Server doesnt support VLANs?
    ... We have IP addresses from two different external networks (a.b.c1.d1 and ... IPs from one subnet and VLANs work OK. ... ISA should also be working correctly. ... > This problem reproduces on every clean install of ISA, ...
    (microsoft.public.isaserver)
  • Re: ISA Server doesnt support VLANs?
    ... not being routed to external network doesn't rule out other protocols being ... I've misunderstood your intent in using VLANs). ... your configuration and the "tagged VLAN" concept. ... ISA should also be working correctly. ...
    (microsoft.public.isaserver)
  • Re: ISA Server doesnt support VLANs?
    ... not being routed to external network doesn't rule out other protocols being ... I've misunderstood your intent in using VLANs). ... your configuration and the "tagged VLAN" concept. ... ISA should also be working correctly. ...
    (microsoft.public.isa)
  • Problem with nntp protocol
    ... I have a network relation set to NAT between internal and external networks ... I have a fw policy that enable NNTP protocol from internal to external ... droped by the isa firewall. ...
    (microsoft.public.isaserver)