Re: How to add static routes to ISA Server

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



Hi Phillip,

-Network ID 192.168.x.x
-Head office LAN ID (The one with ISA) 192.168.0.0, mask 255.255.255.128
-Branch office LAN ID (The one with Cisco router) 192.168.1.0, mask
255.255.255.128
-Branch office 2 LAN ID (The one with Cisco router) 192.168.2.0, mask
255.255.255.128
-Head office gateway for branches LANs (Cisco router private IP)
192.168.0.15, mask 255.255.255.128
-ISA private address 192.168.0.1, mask 255.255.255.128
-Static route command used on all computers in head office: "route add -p
192.168.1.0 mask 255.255.255.128 192.168.0.15" and "route add -p 192.168.2.0
mask 255.255.255.128 192.168.0.15"

Any comments?
--
---------------
Best Regards,
Marwan Kandeel
MCP, MCSA, MCSA + Messaging,
MCSE, MCSE + Messaging, MCT


"Phillip Windell" wrote:

What are the IP Ranges on the LAN?

How is the ISA addressed?

--
Phillip Windell
www.wandtv.com

The views expressed, are my own and not those of my employer, or Microsoft, or
anyone else associated with me, including my cats.
-----------------------------------------------------

"Marwan Kandeel" <MarwanKandeel@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:5B83B6E6-1BA2-4E35-AA9C-BF6868A6437B@xxxxxxxxxxxxxxxx
Hi All,
I have exactly the same situation: One internal network but two
subnets, subnets are connected by Cisco routers. In order to allow
communication between those subnets and the ISA, ISA needs to know the
network details like subnet mask and gateway. I've gone through all you
mentioned and did all rules and still it's not working. The strange thins is
that when I got to "CMD" and enter the command "route add -p 192.168.1.0 mask
255.255.255.128 192.168.0.15", I get the error:"The route addition failed:
Cannot create a file when that file already exists." I reset all settings
back to defaults just to avoid any duplication this message could mean but no
way. Any help? I'm running ISA 04.
--
---------------
Best Regards,
Marwan Kandeel
MCSA, MCSA + Messaging,
MCSE, MCSE + Messaging


"Sanjay Mehta" wrote:

Hi,

I am new to ISA Server. How do I achieve the following:


There is currently no Ethernet cable plugged into our CE devices attaching
them to the network.

Below are the device names and the LAN address with the subnet for each
location.


P1 -CE1 10.10.250.2 /24
P2 -CE1 10.10.247.254 /24
P3 -CE1 192.168.10.1 /24
P4 -CE1 192.168.1.1 /24


The next step is to connect a cable from the CE device to the customer's
network. With the exception of the main location (P1) use the CE IP address
as the end-user default gateway address. The main site in P1 in advertising
to the other sites as being the default gateway and there is also a static
route pointing to 10.10.250.1.


3 static routes, one per remote location, will need to be added to the
firewall at 10.10.250.1 pointing to the CE device 10.10.250.1 as the next hop
address.



Do i need to create 3 Access rules or what?

Thanks




.



Relevant Pages

  • Re: ISA 2006 Routing from a subnet connected to the Internal network
    ... ISA 2006 on a Windows 2003 SP2 server. ... The /24 mask provides for 254 ... Hosts which is th perfect size. ... Make this Router the Default Gateway of the *entire* LAN (both subnets) ...
    (microsoft.public.isa.configuration)
  • Help with Subnetting
    ... gateway set on my cable modem. ... In order to achieve what we want to do with our ISA server and DMZ, ... need to have two different subnets of public IP addresses. ... subnetted the 5 IPs into 2 seperate subnets. ...
    (comp.os.linux.networking)
  • Re: Can I setup ISA server with same subnet mask?
    ... > My ISA 2004 have two network card, and I want ot config like this: ... with default gateway and dns ... > will this work in ISA server? ... because the subnets are not distinct. ...
    (microsoft.public.isaserver)
  • Best solution to this ISA setup
    ... ISA 2006 Server, single public address NIC, and a single internal NIC, ... Inside the internal network I have 8 class C's set up as 10.100.x.0 ... the subnets because it has the /21 mask so I dont *need* to do anything ...
    (microsoft.public.isa)
  • Re: weird gateway to gateway vpn issue
    ... Could you give more infos about the ISA Nics config? ... works fine if the vpn link is broken. ... get to web sites from site B I have to disconnect the gateway ... Does both site got a DNS for internet name resolution? ...
    (microsoft.public.isa.vpn)