Re: 1 NIC v. 2 NICS & remote access questions from beginner



> There are a couple of ways that you could configure your network. Since
> you're using SBS Standard and not Premium, I'll assume that there is no
> ISA Server on your network.
>
> A typical configuration would be to have your ISP's router connected to
> your firewall device. [I'll assume that your Symantec router is really
> your firewall.] The firewall would have a public IP address assigned by
> the ISP to the WAN port, and it would have a private address
> (192.168.etc.etc) assigned to its LAN port.
>
> The server needs to have only a single NIC on the same subnet as the
> firewall LAN port. So if the firewall LAN port is at 192.168.0.1, then
> you could put your server at 192.168.0.2 and your workstations and
> network printers would follow the pattern.

All of the above is correct.


>
> To access features of the server remotely (such as Outlook Web Access or
> Remote Web Workplace), you will need to setup port forwarding on the
> firewall. Examples: port 25 for inbound email, 443 for HTTPS needed for
> OWA, 4125 needed for Remote Web, etc.

Which one of the above (or sharepoint?) allows our users to access files on
the server remotely? Is it better to use the router/firewall's VPN?

Here's where I get confused. Our router/firewall (Symantec) has public
ip...118 attached to it's WAN port that's our Gateway, correct? (We have a
block of 5 IPs.) We then followed SBS directions which stated we need to
have our ISP point a DNS "A" record to server.domainname.com and we told
them it'll be public ip...117. I assume this was to access the server
locally. We also had them point our MX pointer to .117. We're not using
Exchange YET.

So do I setup the .117 on our server's NIC? Do I port forward to the
servers private IP?

Thanks again.


> ______________________________________
> Bradley J. Dinerman, MVP - Windows Server Systems
> President, New England Information Security Group
> http://www.neisg.org
>
> Russell DeMarco wrote:
> > We have SBS 2003 std that we've been using for a few months now. We now
> > want to access the server remotely and setup Exchange. We have 1 NIC,
do we
> > need (or is it preferred) 2? The first NIC is a local IP 192..., do we
> > setup the 2nd NIC with one of our public IPs? Is there something I need
to
> > do in our Symantec router (forward ports or something)? (It's not
recognized
> > by SBS.) Is it better if I use the VPN in the router?
> >
> > Thanks.
> >
> >


.

Relevant Pages

  • Re: forward port to IP when SBS is the router
    ... How do I check the ISA Server version? ... The SBS Server is the firewall. ... you will also have to allow the port through. ...
    (microsoft.public.windows.server.sbs)
  • Re: How to Maintain an IIS Server?
    ... > server running on a Windows 2000 server. ... before a firewall and antivirus have been installed]. ... open ports; however, this will not identify which program is using the port. ...
    (microsoft.public.inetserver.iis.security)
  • Re: CEICW fails at firewall config
    ... ISA Server prevents connection to a remote desktop when you connect through ... Remote Web Workplace on a Windows Small Business Server 2003-based computer ... Acceleration Server as a firewall. ... connection uses TCP port 4125. ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS VPN setup?
    ... And if you have a hardware firewall you haven't flashed in years they just got in through a exploit. ... SBS plugs into a switch with the other computers and the switch is plugged into a firewall appliance with 2-nics. ... To compare apples to apples, let us assume there is a network setup as I outlined above...and the firewall appliance is an ISA server, such as those available from Celestix. ... > learn and test the RWW solution before deploying it. ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS VPN setup?
    ... The 2-nic configuration is used when the SBS server will *also* act as your network's firewall. ... You purchase 2k3 PREMIUM and that comes with ISA to handle the firewall duties. ... To compare apples to apples, let us assume there is a network setup as I outlined above...and the firewall appliance is an ISA server, such as those available from Celestix. ...
    (microsoft.public.windows.server.sbs)