TMG 2010 - rule to send staff through one NIC and students through another NIC

[Paid_Peanuts]

TMG 2010.

3 NIC's:

1. NIC1 :Internal NIC
   
2. NIC2: External Council Staff filtered
   
3. NIC3: External Council Student filtered
   

 

The council connection is currently split between staff and students. The presentation is a Cisco switch:

• Ports 1-8 = Admin. IP Range: 10.229.16.1-254
  
• Ports 9-16 = Curr. IP Range: 10.229.130.1-254
  

 

The LEA provides filtering based upon originating IP address. So therefore when plugged into port 1 for example with a 10.229.16.5 IP address you get the staff filter - so Google images etc.

When plugged into port 9 with 10.229.130.5 you get student filter so no Google images etc.

 

Is it possible to setup a single TMG 2010 to route the traffic appropriately? So if a staff member wants the internet it sends traffic out through NIC2 and students go out through NIC3 based on their AD security groups?

[Paid_Peanuts]

The other way i had thought of achiving the same output is to run HyperV on the server and add an additional 2 port NIC and virtualize both TMG box's.

[ticker]

We are looking to do the same thing did you get this working.

[psydii]

"For all traffic handled by the Web Proxy Filter, TMG will still use [use the IP which had been configured in the first properties page of your network adapter TCP/IPv4 Properties]... It’s not possible to change this behavior because of the internal design of the Web Proxy Filter.

 

Please be aware, that the TMG Web Proxy Filter behavior in this regards doesn’t depend and cannot be modified by any Network Rule setting you configure"

 

TMG Enhanced NAT