Re: cannot access domain or internet with two nic cards active

Are you're workstations joined to the SBS domain and do they have the ISA
2004 firewall client installed on them?

--
Merv Porter [SBS-MVP]
============================

"Herb_C" <HerbC@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:95B5B012-5DB8-4B3A-8882-3FCA52D872B0@xxxxxxxxxxxxxxxx
The problem looks like it may be in the isa server which is isa server
2004
and I am showing ISA server updates as microsoft isa server 2004 service
pack
3 and microsoft isa server standard edition 2004 service pack 1. When I
attempt to go to the internet from a workstation I get the error message
below
" Explanation: There is a problem with the page you are trying to reach
and
it cannot be displayed.

Try the following:
Refresh page: Search for the page again by clicking the Refresh button.
The
timeout may have occurred due to Internet congestion.
Check spelling: Check that you typed the Web page address correctly. The
address may have been mistyped.
Access from a link: If there is a link to the page you are looking for,
try
accessing the page from that link.
If you are still not able to view the requested page, try contacting your
administrator or Helpdesk.



Technical Information (for support personnel)
Error Code: 403 Forbidden. The ISA Server denied the specified Uniform
Resource Locator (URL). (12202)
IP Address: 204.9.89.1
Date: 9/23/2007 5:11:44 PM
Server: national.NRExperts.local
Source: proxy "
As of this posting I am able to browse the workgroup and view workstations
in it but have not attempted to connect from them. I wil attempt to
connect
to the domain to see if this problem is resolved and post the results.

Thanks

Herb

"Merv Porter [SBS-MVP]" wrote:

Do you see any errors in any of the event logs?
Is this ISA 2004? What SP (SP1, SP2, SP3)?
Is this SBS 2003 SP1? Windows 2003 SP2?

--
Merv Porter [SBS-MVP]
============================

"Herb_C" <HerbC@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:0FA229EF-F908-47C0-9A07-47086232A911@xxxxxxxxxxxxxxxx
My answer to this post dissappeared so here goes again the original
setup
was
a dlink di624 wireless router with the westell 6100 configured to the
first
usable static ip. dhcp off the server and a 24 port dlink smart
gigabit
switch were connected to the di624. a 3com 24 port dual speed hub was
connected to the switch dhcp services provided by sbs2003

6100--di624--server
--smart switch--9 workstations
--3com hub--4 workstations

This worked
---------------------------------------------------------------------------------------
Setup now


netopia 3347nwg---sbs2003---dlink smart switch---9 workstations

---3com hub---4 workstations

---di624---wireless access only 4 workstations (laptops)


"Merv Porter [SBS-MVP]" wrote:

Only AT&T could come up with this kind of mess for business Internet
access:
http://www.broadbandreports.com/faq/bellsouth/2.51_Static_IP_FastAccess_Info

Are you're workstation (and the internal SBS NIC) connected to a
switch?
When you re-ran CEICW, did you enable the firewall, select the
serverices,
and complete the rest of CEICW? Did CEICW finish without any errors?

Internet
|
Netopia router
|
SBS External NIC
||
SBS Internet NIC
|
Swtich
| | | | |
Workstations

--
Merv Porter [SBS-MVP]
============================

"Herb_C" <HerbC@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:A05CD7C5-9F53-42A6-AA30-EF81A266EE42@xxxxxxxxxxxxxxxx
The WAN side of the netopia is assigned dynamically by the ISP, the
LAN
IP
interface is configured with the first of the assigned IP addresses
then
the
DHCP for the router/modem is set to assign the 1st thru 5th of the
usable
Static IP addresses. Under statefull inspection/ exposed addresses
it
is
configured to pass all protocals to all 5 static IP addresses. I
can
provide you with copy of log if it would be usefull.

Thanks
Herb
"Merv Porter [SBS-MVP]" wrote:

Hi Herb,

If the ISP is controlling the configuration of the Netopia
modem-router
and
they've opened it up to pass ALL traffic to your server, buy a
cheap
router
(DLink, Linksys, etc) and stick it between the Netopia and your
external
NIC. Since you only need 1 static (public) IP address, set the WAN
side
of
the router with one of the static IPs and then configure the rest
of
the
physical network per the following diagram:

Two Nics, a static IP address, ISA, router
(diagram works with or without ISA)
http://www.smallbizserver.net/Default.aspx?tabid=266&articleType=ArticleView&articleId=76

Once it's all set up physically, re-run CEICW

CEICW Walkthrough
http://www.sbs-rocks.com/sbs2k3/sbs2k3-n2.htm

--
Merv Porter [SBS-MVP]
============================

"Herb_C" <Herb_C@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:89A7ED91-D539-4E49-8E16-635E05B3B369@xxxxxxxxxxxxxxxx
I have just changed out the dsl modem in my sbs2003 from a westell
6100
configured for 1 static ip address. unfortunatly ATT decided to
replace
the
westell with a netopia 3347nwg modem/router manually configured
for
5
fixed
ip's. My problem is, that since the router is configured with no
firewall
to
allow all 5 ip's to pass through I have had to change the
configuration
of
the server from 1 nic to two nic cards utilizing the firewall
services
in
the
server. The wizzard has been run several times and the nic's
have
been
configured but I can only (1) reach the internet on the server
only
(2)
And
only when the internet options/ connections/ lan settings/
automatically
detect settings is checked and use proxy serverfor your lan is
unchecked.
(3)
I cannot login any user on the domain {error message that the
domain
is
not
available} neither can I browse any of the workstations from the
server.
I
know that I am overlooking something that is elementary however I
am
at
this
point just chasing my tail. PLEASE HELP! somebody point mi in
the
right
direction! PS: The ISP has the modem to server nic configured
to
the
255.255.255.248 subnet mask and the local subnet is 255.255.255.0

Thanks in advance











.

Loading