Re: New to RRAS for Routing

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Dear Phillip and Bill,

Many thanks for your explanation and advice.

However, I don't understand your saying that "Don't forget to add the other
subnet to the LAT on the Proxy, as Bill also
reminded you too". I have added the new subnet to the LAT on the Proxy
(Just amend you statement). But what is the other subnet ?

Thanks
Stephen

"Phillip Windell" <@.> wrote in message
news:%23oys1mCnFHA.4028@xxxxxxxxxxxxxxxxxxxxxxx
> Bill's got you covered. I'll just toss in a few comments on your points
> below.
>
> "Stephen S" <anonymous@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> news:eo2yFiimFHA.1968@xxxxxxxxxxxxxxxxxxxxxxx
>> 1) In your point 1, all hosts on the LAN = Testing LAN ?
>
> LAN means the whole thing,...all subnets together. A subnet is effectively
> a
> network, the LAN is the whole collection of local Networks.
>
>> 2) In your point 2, the RRAS Router already connected to different LAN
>> segments. Does it mean that it is because I have enable "LAN Routing" in
>> Configure, Custom configuration; check the box for LAN routing ?
>
> It means the RRAS router is directly (physically) connected to each
> segment
> (it sits between them). Therefore they are already in its routing
> table,..therfore it already knows about them,..therefore there are no
> static
> routes to create.
>
>> 3) In your point 3, do you mean the Internet Sharing Device = Proxy
>> Server
>> in my office ?
>
> Yes, a Proxy, or a Hardware Firewall, or a NAT Server are all consider
> "Internet Sharing Devices". I use that generic form of the term when I do
> not know (or forget) exactly what king of device you are using.
>
>> 4) In your next mail, you mention there are entries have to be added to
> the
>> Local Address Table, how many entires have to be added there ?
>
> Just one. It goes on the Proxy itself. The proxy does not know about the
> Segment on the opposite side of the LAN Router because it is obviously not
> directly connected to it. Therefore it needs a Static route to cover
> that.
> If the "test Lan" is 192.18.17.x and the RRAS Router is 192.168.18.10 then
> the router would be dones as:
> "route add -p 192.168.17.0 mask255.255.255.0 192.168.18.10"
>
> *Don't* use those exact addresses if they are not correct. I was only
> guessing at what they would be from looking at your other post.
>
> Don't forget to add the other subnet to the LAT on the Proxy, as Bill also
> reminded you too.
>
> --
> Phillip Windell [MCP, MVP, CCNA]
> www.wandtv.com
> -----------------------------------------------------
> Understanding the ISA 2004 Access Rule Processing
> http://www.isaserver.org/articles/ISA2004_AccessRules.html
>
> Microsoft Internet Security & Acceleration Server: Guidance
> http://www.microsoft.com/isaserver/techinfo/Guidance/2004.asp
> http://www.microsoft.com/isaserver/techinfo/Guidance/2000.asp
>
> Microsoft Internet Security & Acceleration Server: Partners
> http://www.microsoft.com/isaserver/partners/default.asp
> -----------------------------------------------------
>
>
>


.

Relevant Pages

  • Re: Is ISA client SW required for Proxy access?
    ... added a rule to all HTTP from the subnet where my clients reside ... backend subnet, ... is stopping the proxy request from being filled. ... HTTP is 80, of course. ...
    (microsoft.public.isa)
  • Re: Cross Subnet Connections
    ... I have a central proxy that gives connections to the internet on one subnet, which all the others can connect to. ... These two computers are both able to access the internet through the proxy, but they cannot communicate directly with each other. ... Is there a way of making a connection between them, ... are you thinking of having the connection via the proxy host, ...
    (comp.os.linux.networking)
  • Re: Basic WINS config.
    ... I created a WINS Proxy on the workgroup subnet. ... The Proxy has the IP address of the SBS server in the TCP/IP config WINS tab. ...
    (microsoft.public.windows.server.sbs)
  • Basic firewall/networking question
    ... We are trying to implement a proxy server on a different subnet than ... the current firewall and proxy. ... The goal is to slowly test and ...
    (comp.security.firewalls)
  • Re: MS ISA server control
    ... Your LAT should be the IP address range that includes not ... that subnet that connect through that LAN adapter. ... Note that if your LAN IP range and your WAN are both ...
    (microsoft.public.isa)