Re: SBS 2k3 and Additional Servers

I doubt your point was missed, but since you seem to need specifics then here they are:

You are trying to solve the problem with the wrong tools. Clustering DOES need domain joined servers as the clustering service uses AD for failover configuration and authentication. You should *not* be using your SBS domain for this though. A different domain would be sufficient for front-facing machines. Of course you lose the benefit of central administration. But since SBS doesn't support federated trusts, you'd be screwed even with the 2 nics. This is *not* an excuse to open a hole in your security by multi-homing your web machines.

So you have a choice. Deal with the shortcomings of maintaining two domains. Or don't use SBS. Or don't use clustering.

In my opinion setting up a server cluster is *serious* overkill for your application. A simple load balanced setup would be more that sufficient.

-Cliff


"Scott Sledgister" <ssledgister@xxxxxxxxxxxxxxxxx> wrote in message news:DF696FA7-E300-462A-9A9A-9222B14C879A@xxxxxxxxxxxxxxxx
Cris,

Thanks for your input but I think you missed my point of why I have to have them in the domain. I want to cluster 2 servers together and to do clustering is Windows they have to be domain clients. Also I can't get to the database server if they are not part of the domain.

I see no more security risk with this then using the SBS server to host the public websites, which we have been doing for a couple of years with no issues. I want to move hosting off the SBS onto a web server cluster to keep the site up during the weekly Windows update reboots. I also do not want to expose my database server to the internet at all. Putting the web server outside the domain will require I expose our database server to the internet which is beyond unacceptable.

Again my question stands: How do I adjust the additional server's external nic to keep the connection working beyond 60 minutes?



"Cris Hanna [SBS - MVP]" <crisnospamhanna@xxxxxxxxxxxxxxxxxxxxx> wrote in message news:ed4gZiLKJHA.1160@xxxxxxxxxxxxxxxxxxxxxxx
You should never have publically servicing webservers inside your lan and a member of the domain
HUGE security risk.

You can keep the database inside the domain and just make calls from the webapplication to the database if necessary

--
Cris Hanna [SBS - MVP]
Co-Author, Windows Small Business Server 2008 Unleashed
http://www.amazon.com/Windows-Small-Business-Server-Unleashed/dp/0672329573/ref=pd_bbs_sr_1?ie=UTF8&s=books&qid=1217269967&sr=8-1

------------------------------------
MVPs do not work for Microsoft
Please do not submit questions directly to me.

"Scott Sledgister" <ssledgister@xxxxxxxxxxxxxxxxx> wrote in message news:858C1563-BB1E-46E1-AA77-45578BC99D5E@xxxxxxxxxxxxxxxx
I am having an issue with our network. I have a SBS2k3 server running very well at the center of our network and connection our offices to the internet. I also have an additional server in the domain (Win 2k3 Standard server running as a webserver or Web01) hosting our public websites. Web01 has 2 nic's in it; one attached to the internal SBS network for domain control and profile hosting as well as wanting to use the fax in the SBS server, and a second attached to a public static ip that is used for hosting. Everything work fine for about 45-60 minutes and then the external nic is "dead". I have to disable the nic and then reable it before it will serve website connections. After another 45-60 minutes the nic is dead again. I disconnect the SBS network nic and the webserver is stable as can be. I attach it to the domain and it down again in an hour. Can anyone help?

I wanted to have the webservers attached to the internal domain for 2 main reasons. There will soon be a Web02 and I wanted to cluster them together to add sability to our web hosting ability. I have not done clustering before but it seems that the nodes have to be domain members to set it up and I don't want a second domain just for this (or do I???) he second is we have a database server that is not connected directly to the internet and I need the webservers to be able to connect it to for data. This database is part of the SBS network and used by to many other clients to move out of our domain.

Can anyone please advise how I can keep the webservers external nic running while the internal nic is attached to the SBS network?

Thanks

Scott


.

Relevant Pages

  • Re: Is this net traffic normal?
    ... accept RDP and connect to them from the server. ... Something worth checking at this point is that neither the SBS nor any workstation have any DNS server configured other than the LAN IP address of the SBS. ... You may have eliminated most of the workstations, but you can't remove the SBS, and worth remembering that many NICs have their transceivers powered even with the computer off, see below. ...
    (microsoft.public.windows.server.sbs)
  • Re: Installing new SBS 03 server. Will that be 1 Nic or 2 ?
    ... So you'll want and need to fully understand your Sonicwall and what it can do, and how to configure it properly. ... Personally, I stick my SBS Premium, with ISA 2k4, behind a good firewall and have two layers of protection on a dual NIC. ... I guess technically 2 NICs would be more secure, but hopefully the SonicWall makes that irrelevant. ... and when the server was about 6 weeks old a drive failed. ...
    (microsoft.public.windows.server.sbs)
  • Re: proper way of backing up exchange and reinstalling on same server
    ... label my nics internal and external as I use two nics in my servers. ... Workstation should point to the SBS nic and only the SBS nic for DNS ... You should but do nota have to use dhcp from the server. ... Connection-specific DNS Suffix. ...
    (microsoft.public.windows.server.sbs)
  • Re: VPN Setup Help
    ... The second server server IP would be static; ... the DHCP Server service for the SBS LAN. ... SBS ports that need to be forwarded from the "cheap" router to the IP ... Two Nics, a static IP address, ISA, router ...
    (microsoft.public.windows.server.sbs)
  • RE: Setting up a second network card (WAN)
    ... Thank you for posting to the SBS Newsgroup. ... ISA Server installed? ... 825763 How to configure Internet access in Windows Small Business Server ... Please make sure the IP addresses on the SBS external and the internal NICs ...
    (microsoft.public.windows.server.sbs)