RE: How Does ISA 2004 Performs Routing
- From: v-bpeng@xxxxxxxxxxxxxxxxxxxx (Bill Peng [MSFT])
- Date: Wed, 21 Sep 2005 09:50:45 GMT
Hi Matt,
Thank you for posting back.
First of all, when configuring the client computers, please do not use
ISA's NIC as its default gateway. Instead, use the router's IP address.
Since I'm still not very clear about the network topology, will you please
draw the network topology and paste it here? In addition, help me to
collect:
1. The output of "IPconfig /all" command on ISA and an internal computer.
2. ISA Info.
a. Download the file from the following URL:
http://www.isatools.org/isainfo/ISAInfo.zip
b. Extract all files to a folder on ISA server
c. Double click Isainfo.js. This will generate 2 files
ISAInfo2004-<computer-name>.log and ISAInfo2004-<computer-name>.xml in the
current folder.
d. Please send these files to me at v-bpeng@xxxxxxxxxxxxxx
Thank you for your time and I look forward to your update.
Regards,
Bill Peng
MCSE 2000, MCDBA, CCNP, CCDA
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
=====================================================
The public newsgroup only focuses on SBS related technical issues, for
other Microsoft products, we recommend you to post to appropriate newsgroup
to get most qualified responses.
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive notification. When responding to
posts via your newsreader, please "Reply to Group" so that others may learn
and benefit from your issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft PSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
>Thread-Topic: How Does ISA 2004 Performs Routing
>thread-index: AcW99sgUqufcBxNaRkSbemhOqyK/yw==
>X-WBNR-Posting-Host: 195.153.122.67
>From: "=?Utf-8?B?TWF0dA==?=" <mattk@xxxxxxxxxxxxxx>
>References: <EAC6AC0B-BB1B-4927-9E7C-17DA14AD2F15@xxxxxxxxxxxxx>
<3UPESNbvFHA.768@xxxxxxxxxxxxxxxxxxxxx>
>Subject: RE: How Does ISA 2004 Performs Routing
>Date: Tue, 20 Sep 2005 08:20:06 -0700
>Lines: 38
>Message-ID: <BF07B45D-1E9C-474F-A1E2-7131B5A581B8@xxxxxxxxxxxxx>
>MIME-Version: 1.0
>Content-Type: text/plain;
> charset="Utf-8"
>Content-Transfer-Encoding: 7bit
>X-Newsreader: Microsoft CDO for Windows 2000
>Content-Class: urn:content-classes:message
>Importance: normal
>Priority: normal
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>Newsgroups: microsoft.public.isa
>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.isa:13411
>X-Tomcat-NG: microsoft.public.isa
>
>Thanks Phillip and Bill for your comments and links.
>
>I don't think I was too clear about my question on routing as I wasn't
>referring to routing between the 2 NICs but was referring to how the ISA
>server itself routed to the next proxy server in the proxy chain. This was
>after I had the "Destination Host Unreachable" message when trying to ping
>the next proxy. The reason I was looking at this was that I had an alert
>stating that the next proxy chain was unreachable with the ISA Dashboard
and
>proxying obviously wasn't working at this point in time.
>
>I think that this must have been a glitch during setup as I have now
removed
>the Next Proxy server address from the Internal network definition and it
>still works OK. I've even rebooted that server and it still works.
>
>Some of the articles you suggested state that you should add all addresses
>into the Internal network when setting up an ISA server with only 1 NIC.
>
>I don't really want to do this as I want to be able to distiguish between
>what I would class as External addresses and also the Backup Network I
>mentioned in my previous post. This is so that I can use Web Chaining
rules
>to by-pass the next proxy chain if the server is on our Internal network
and
>will also allow me to setup a Firewall policy to allow the Backup software
to
>backup the server only from the Backup Network. The Firewall Policy rules
>also make more sense Allowing Internal to External for HTTP,HTTPS & FTP as
>opposed to Internal to Internal etc.
>
>Can you foresee any issues with me leaving my config like this or are
there
>fundamental reasons why I need to include all addresses in the Internal
>network?
>
>There are also still 2 NICs in the server and when selecting the Single
>adapter template it suggests that one should be disabled. Are there any
>reasons why I should disable the 2nd NIC or is it OK for me retain it as
it
>is purely being used for our CommVault backup solution to back the server
up?
>
>Many thanks
>Matt
>
>
.
- Follow-Ups:
- RE: How Does ISA 2004 Performs Routing
- From: Bill Peng [MSFT]
- RE: How Does ISA 2004 Performs Routing
- References:
- RE: How Does ISA 2004 Performs Routing
- From: Bill Peng [MSFT]
- RE: How Does ISA 2004 Performs Routing
- Prev by Date: Re: Office 2003 clipart through ISA Server 2004
- Next by Date: Re: ISA service stops responsing due to a resource allocation problem
- Previous by thread: RE: How Does ISA 2004 Performs Routing
- Next by thread: RE: How Does ISA 2004 Performs Routing
- Index(es):
Relevant Pages
|
