Unable to allow Apple Mac users to use the internet

[VRIT]

I have been using ISA for about 6 months now and have set-up various rules to prevent the use of the internet by various users etc by creating groups etc etc.

However I have encountered a problem with my MAC users. The MAC users have an NT account and password (only 6 chars as MAC's dont like anything longer), this account allows them access to there email, it should also allow them access to the internet. However out of the 20 MACS I have only 2 can access the internet. I have checked IP settings, default gateways, user profiles etc etc and am at a lose to know why they dont work.

If anyone has any ideas on how I can resolve this issue I would be very grateful.

:-(

VRit

 

[danomac]

Hi VRit,

To connect our G3 to our ISA server is:

1. I configured the Mac to have a static IP address;
2. I configured DHCP on the server to exclude this address;
3. I created a Client Address Set in ISA server to use the static IP address;
4. I set up packet filters and protocol rules using the Client Address set;
5. Restarted the ISA services;
6. And finally, configured the default gateway on the Mac to point to the NIC on the ISA server.

We only have two Macs and this worked to connect them. As far as the static IPs are concerned you can exclude a range of addresses on DHCP, include that range in the Client Address set, and give your Macs static IPs in that defined range.

D

 

[VRIT]

Thanks DanoMac,

Havent tried it yet, but thought i'd just say thanks for posting a reply.

VrIT

 

[VRIT]

Hello again,

To add to this problem can I now say that I have about 30 MAC's that need to be able to do this and from a management point of view it would be nice to keep them on DHCP.

But I do thank you for your time and your soulution, I have at the very least have a solution for some people.

thanks

VrIT

 

[fluid11]

You can keep them on DHCP if you can set up your DHCP scopes somehow so that the Macs will always have an IP address that falls into a certain range. Maybe you can set up a separate DHCP scope just for the Macs that will always assign them an IP address in the range of 192.168.1.10 - 192.168.1.50. This way, you can just add that entire range of IPs to your client address set and it won't matter if the IPs change on the clients. You can set up your access policies using the client address set of the Macs.

You still need to set the default gateway to the internal interface of the ISA server.


ChrisP

 

[VRIT]

ChrisP,

Ah thats exactly the solution I was looking for....

Thanks everyone