+ Post New Thread
Results 1 to 8 of 8
Windows Thread, ISA SERVER in Technical; Is anyone here good with ISA??? Having a bit of a nightmare at work and can't seem to get my ...
  1. #1

    Join Date
    Mar 2007
    Location
    Bolton / Bury, Manchester
    Posts
    10
    Thank Post
    2
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Smile ISA SERVER

    Is anyone here good with ISA??? Having a bit of a nightmare at work and can't seem to get my head around why it is happening....

    ISA sits between bolton lea microwave link and our network, just upgraded from 200 to 2006, been done the ISA course during the summer so know the ins and outs. Trying to get access to our exchange box from outside net... mail.harper-green.bolton.sch.uk (yeah check it, dont think the lea have set up outside dns right) thats not the point though, isa external ip = 10.10.11.200, 255,0,0,0 internal networks are 2 cards, 10.15.1.1 and 10.12.1.201 for net and admin domains, set up isa as lea have asked with exchange but not working, have a pc in the switch on external network which is set at 10.10.11.45 to see if i can see the isa from the lea network (we are the only school to break away and have our own isolated network) the ip dont work, cant ping the isa box even though rules are set up to allow it, can see in log ping go into isa but does nothing........... main reason am asking..... isa throws a fit in alerts and says its going to ignore spoof attacks from the 10 10- addresses on both the internal and external cards, ie why the ping packets are dropped by the isa...

    anyone had a nightmare like this? googled the errors and tried suggested things, cleared ip table etc......

    any ideas?

  2. #2

    Join Date
    Jan 2006
    Location
    Surburbia
    Posts
    2,178
    Thank Post
    74
    Thanked 307 Times in 243 Posts
    Rep Power
    115
    external ip = 10.10.11.200, 255,0,0,0 internal networks are 2 cards, 10.15.1.1 and 10.12.1.201
    Sorry, that's broken - you can't have 10.x.x.x addresses on the internal NICs when the external NIC has a 10.x.x.x address with a 255.0.0.0 netmask and expect it to work. That's telling the system that all addresses beginning with 10. live on the outside which is clearly not true in your case.

    I'd make the netmask on the external NIC 255.255.255.0. Make sure the netmasks on the internal NICs do not have the same problem - the netmasks there should be 255.255.x.y where x.y depends on the number of PCs you have on each internal subnet.

  3. #3

    Join Date
    Mar 2007
    Location
    Bolton / Bury, Manchester
    Posts
    10
    Thank Post
    2
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Yeah i thought it was that lol!! tried che subnet mask of 255.255.252.0 and 255.255.255.0 on external card but internet dies for pc's, didn't reboot though with new ip's, will remote in and change it, or wait till Monday lol!! if i remote in and change and it dont work its off till mon morn lol!!! Cheers for ur help, had an idea this was the problem, just wanted to get someone else view on it to make sure i was correct

  4. #4
    eejit's Avatar
    Join Date
    Jun 2005
    Location
    Ireland
    Posts
    606
    Thank Post
    52
    Thanked 12 Times in 12 Posts
    Rep Power
    22
    I'd change the internal LAN to use the 192.168.x.x range to be honest. Nice to have a clear distinction.

    I'm not 100% sure what these 10.15.1.1 and 10.12.1.201 ranges are in your post? Admin and Curriculum ranges? If so, are they on separate physical networking?

  5. #5

    Join Date
    Jan 2006
    Location
    Surburbia
    Posts
    2,178
    Thank Post
    74
    Thanked 307 Times in 243 Posts
    Rep Power
    115
    tried che subnet mask of 255.255.252.0 and 255.255.255.0 on external card but internet dies for pc's,
    Before you do any rebooting what is the Gateway set to for the external NIC i.e. what's the address of the router?

  6. #6

    Join Date
    Mar 2007
    Location
    Bolton / Bury, Manchester
    Posts
    10
    Thank Post
    2
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    external nic gateway is 10.10.11.254, not sure what is at the lea's end... know theres a websense server so prob another isa box lol!!

  7. #7

    Join Date
    Mar 2007
    Location
    Bolton / Bury, Manchester
    Posts
    10
    Thank Post
    2
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    10.15.1.1 and 10.12.1.201 are both admin and curriculum networks but on the same infastructure, admin is active dir with fixed ip's, curriculum is act dir, dhcp, dns for both domains, as is the isa. bit of a pain network but it does work quite well, want to put all on 1 network but thats a task for the summer lol!!

  8. #8

    Join Date
    Jan 2006
    Location
    Surburbia
    Posts
    2,178
    Thank Post
    74
    Thanked 307 Times in 243 Posts
    Rep Power
    115
    external nic gateway is 10.10.11.254
    Ok.. when you said the "internet dies" I had a momentary panic about how many bits were needed in the external NIC netmask. With that gateway address a 255.255.255.0 netmask seems correct i.e. will allow that side of the ISA box to find & talk to the gateway.

    I'd go check the internal NIC netmasks are ok and probably do the initial ISA 2K6 configuration again (haven't done that for ages but it's the bit with the pictures where you choose your topology), then start looking at making rules permitting some LAN->WAN traffic.

  9. Thanks to PiqueABoo from:

    smallsoldier (16th February 2008)

SHARE:
+ Post New Thread

Similar Threads

  1. Windows Server 2003 - time server settings
    By CESIL in forum Windows
    Replies: 4
    Last Post: 22nd November 2007, 11:24 AM
  2. Replies: 5
    Last Post: 5th July 2007, 11:43 PM
  3. Windows Server 2003 File Server Resource Manager
    By mrforgetful in forum Windows
    Replies: 1
    Last Post: 17th June 2007, 01:51 PM
  4. Virtual Server 2005 R2 kills server network connection
    By ajbritton in forum Thin Client and Virtual Machines
    Replies: 0
    Last Post: 31st August 2006, 06:19 AM
  5. Downsides to passing tftp server via 2003 DHCP server?
    By pete in forum Wireless Networks
    Replies: 7
    Last Post: 11th July 2006, 10:07 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •