Newbie: External IP's? Confused. Please help! 1

[Stevehewitt]

Hey,

I've got my ISA server coming off from a switch into 192.168.0.1. The other NIC in the ISA server is 192.168.1.2. This goes off to the router which then goes to the ISDN.
The problem I am having is that I cannot create a Server publishing rule as I don't know where/how to tell ISA server that the external IP is 192.168.1.2. I can't even type in our fixed public IP as its not registered (in some sort of list) in ISA Server. I have looked at my LAT and all it contains is the IP's from 192.168.0.0 - 192.168.0.255. Which I think is OK.

Any ideas?

Thanks in advance,

Steve Hewitt
Systems Manager

 

[SgtB]

Well, from what I understand of this. Your ISA is not sitting on the perimeter of your network. That means that both internal and external interfaces of the ISA server are private (ie 192.168.x.x). Is this correct?
Then it goes into your external router which also has a private IP?

Please post your configuration (IPs) for me so I can help.
LAN network = ?
ISA internal interface (the one pointing to your LAN) = ?
ISA external interface (the one pointing to your ISP) = ?
Ethernet interface of your router = ?

Please omit the last two octets of your public IP addresses for security reasons. (ie: 204.70.x.x)

Cool upcoming game! Check it out!

http://www.planetside-universe.com

!

 

[Bod29]

if you are using the ISDN as a dial on demand service, it may be that the PPP when connected is assigned a dynamic IP address by the ISP anyway.

You would have to request a static IP address from your ISP in order to get the ISA server to send traffic to the "outside"

just hazarding a guess though, if you can post up some specifics (but not too specific ;-) [see SgtB's comment] you might get a better response

Roddy

 

[Stevehewitt]

Hey,

Thanks so far. We are on a fixed IP and the ISA server goes to a router before the ISDN.

OK here goes:

LAN side of ISA Server: 192.168.0.1
WAN side of ISA Server: 192.168.1.2
LAN side of Router: 192.168.1.1
WAN side of Router: 195.216.x.x
Subnet Mask: 255.255.255.0

Basically, the ISA server should route all packets from the internal network that require external data to the WAN interface (192.168.1.2). The WAN interface should then send the packets to the Router (192.168.1.1) which then does its stuff and whacks it the ISDN line. (195.216.x.x)

(And Vice/Versa for incomming data such as Terminal Services).

Does that help?

Steve Hewitt
Systems Manager

 

[SgtB]

Well, I'm pretty sure you'd need to publish the server on the external interface. You were on the right track. I do not think that ISA will allow you to publish to a private IP address though. I thought I read this somewhere. Either way, I'd ask on the isaserver.org boards. Author of the renowned ISA 2000 books posts there quite a bit, and I'm sure he'd be able to help you out.

Essentially you'd need to port forward on the router to the ISA server, then port forward (publish server) again to the TS server. You may have to deal with some NAT or PAT issues here.

Why ISA is not 'seeing' the external interface is unkown to me, but I think it has something to do with the private IP address for the external interface.
Go to

http://www.isaserver.org

and post on those boards. Give all the details you gave i nthis post, and maybe Dr. Shinder will answer.

Sorry I couldn't be of more help.


Cool upcoming game! Check it out!

http://www.planetside-universe.com

!

 

[Stevehewitt]

Thanks for trying. A Star for you.

Steve Hewitt
Systems Manager