Re: Multiple external interfaces
- From: "Will" <westes-usc@xxxxxxxxxxxxxx>
- Date: Tue, 23 Oct 2007 13:00:11 -0700
"Jiri" <Jiri@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:0C90D11F-55C8-4A0C-AFF4-6A929DFA6D37@xxxxxxxxxxxxxxxx
Is there a way to setup an ISA server with multiple external interfaces? Iam
looking for a solution that would allow all server-related traffic (website,
Exchange server, file replication, etc.) and all VPN traffic to a secondto a
location to use one interface (T1) and offload all user Internet surfing
different one (DSL?). My understanding is that ISA 2004 can have only oneISA
external interface but I could not find anything about such a setup for
2006. Thanks.
This is a routing issue isn't it, not an issue about two "external"
interfaces. Think of external as the default route. Create routes on
ISA for the VPN and special traffic that take that traffic to a different
router. Router can be on a special subnet and model that in ISA as a
separate Network Object, and add another NIC port to the ISA, and route all
that traffic to the protected router on that dedicated subnet. You might
set up the ISA network rules for that to route traffic to the protected
router on the new Network, and NAT traffic to the External interface for
everything else.
There may be other ways to do this, but we have done very similar things and
while tricky even the ISA 2004 product handles it.
--
Will
.
- References:
- Multiple external interfaces
- From: Jiri
- Multiple external interfaces
- Prev by Date: Re: Kerberos authentication with ISA 2006 as reverse proxy
- Next by Date: Re: Kerberos authentication with ISA 2006 as reverse proxy
- Previous by thread: Multiple external interfaces
- Next by thread: Re: Multiple external interfaces
- Index(es):
Relevant Pages
|
