Re: change ISA IP address

You can have multiple IP's on the external interface for web-publishing
purposes. Other than that it's not a good idea. Even for web publishing you
can re-use the same listener (at the same IP) for all your web publishing
rules. I can see some configurations where you would want several dedicated
listeners, each one with different methods of authentication etc, but in a
regular setup that is unnecessary.

Virgil



"ZBoT" <NoReply@xxxxxxxxxxxxxxxx> wrote in message
news:NoReply-4BE709.08591009112005@xxxxxxxxxxxxxxxxxxxxxxxx
> Awesome! Thanks so much for the information! That looks like it will
> be a perfect work-around. I didn't know that you couldn't use multiple
> IP's on an interface. I only have one IP on the internal card but I
> have multiple on the external one. I'll have to do some research and
> see if I should change that. Thanks again!
>
> In article <Xa2dnch2Vf8rUvLenZ2dnUVZ_tOdnZ2d@xxxxxxxxxx>,
> "ZVR" <nospamever@xxxxxx> wrote:
>
>> That's not how you do it. You should not configure multiple IP addresses
>> on
>> any ISA 2004 interface - from your post I sense your intention is to add
>> a
>> second internal IP, maybe? Do NOT do that - there is a number of reasons
>> why
>> that's not a good idea (I won't go into detail here as that can be a
>> loooong
>> thread by itself).
>>
>> Also, to answer your question you cannot "instruct" ISA to function on
>> some
>> IP but not on others. ISA is not a web server, you know. It is a firewall
>> and as such will take control of all your network interfaces and IP
>> addresses when deployed.
>>
>> Moreover, if you want to use Proxy Autodetect with a WPAD entry published
>> through DNS, then your PAC (proxy autoconfig) file needs to be published
>> on
>> port 80, as WPAD in DNS does NOT allow specifying a custom port like WPAD
>> in
>> DHCP does. And since your IIS is running on port 80 already you obviously
>> can't use the same port to publish ISA auto-discovery information.
>>
>> Here's what I recommend you instead:
>> -configure ISA (under the properties of the "Internal" network object) to
>> publish proxy auto-discovery information on, say, port 81
>> -open IE on a LAN workstation and type the following in the address bar:
>> http://10.0.0.1:81/wpad.dat, then press Enter
>> -you will be prompted to save the WPAD.DAT file which is actually the PAC
>> (proxy autoconfig) file your WPAD clients will use
>> -copy that file to the root of the default web site running on 10.0.0.1,
>> and
>> configure the root folder of the site for anonymous access
>> -make sure that the file is available anonymously from the LAN by
>> browsing
>> at http://10.0.0.1/wpad.dat (note this time the port 81 designation is
>> missing, as the file is located on your default web site now)
>> -configure WPAD in DNS to point to 10.0.0.1
>> -configure your IE clients for proxy autodetect
>>
>> Hope this helps,
>> Virgil
>>
>>
>>
>> "ZBoT" <NoReply@xxxxxxxxxxxxxxxx> wrote in message
>> news:NoReply-046F31.14393507112005@xxxxxxxxxxxxxxxxxxxxxxxx
>> > Hi All! I am currently using SBS 20003. I am running ISA server 2004
>> > on this box with an ip of 10.0.0.1. I am also running the default
>> > website on this same address. My problem is I want to setup ISA server
>> > to automatically configure Internet Explorer clients. To do this using
>> > a wpad DNS entry (so the clients don't have to have admin rights unlike
>> > the DHCP option) you have to have port 80 open. Since I already IIS
>> > running on port 80 on this IP I want to setup another IP for ISA only.
>> > So I need to know where to tell ISA which IP addresses to run on. I
>> > can't seem to find this. Any help would be MUCH appreciated. Thanks!


.

Relevant Pages

  • Re: external ports
    ... whether a port is open depends on several things. ... requests to the other interface are forwarded to the listening interface. ... interface and internet, get multiple IP's on the external side. ...
    (microsoft.public.windows.server.sbs)
  • Re: change ISA IP address
    ... > You can have multiple IP's on the external interface for web-publishing ... > can re-use the same listener for all your web publishing ... I didn't know that you couldn't use multiple ... as WPAD in DNS does NOT allow specifying a custom port like WPAD ...
    (microsoft.public.isa)
  • Re: ports
    ... You can define one port per interface. ... You can also assign multiple protocols ...
    (microsoft.public.windows.terminal_services)
  • Re: Additional Hardware Module with Xilinx MicroBlaze Processor
    ... a pcore for your LCD module. ... You can write to the fsl interface with the function putfslx, ... What I would like to do is define a GPIO port on the processor to ... and write to the FSL bus suffice? ...
    (comp.arch.fpga)
  • ng_one2many v.s. AFT (NIC Fault Tolerance/Fail Over/Redundancy Revisited)
    ... Then I was thinking about the OpenBSD/NetBSD bridgeinterface. ... Spanning Tree as an alogirth could provide Intel AFT ... illustrates, regardless of which interface is the root port, ARP replys ... Topology change flag not set, detected flag not set, changes 54 ...
    (freebsd-questions)