IT Employment

Ask something
Discussion Locked

ISA Server DMZ, VPN configuration

0 helpful
3 replies

by kent2612 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Firstly, i would like to know the ip address allocation in both a Threed-Home DMZ and Back-To-Back DMZ
Eg. Given by ISP IP address 203.126.100.2 + a range of ip addresses(203.126.60.1-203.126.60.6)

On a Threed-Home DMZ the network consist of: router
|
ISA Server- DMZ zone
|
LAN
external interface of Router assigned 203.126.100.2
Internal interface of Router assigned
10.0.0.1 (Private network)

ISA Server IP address 10.0.0.2 connected to router
ISA Server IP address 192.168.0.1 connected to LAN

My question until here is, in order to publish a Server on the LAN or on DMZ, is there a need to do a NAT on the Router first?
-------------------------------------------------
Back-To-Back DMZ
router
|
ISA Server (External)
|
|------DMZ
|
ISA Server (Internal)
|
LAN

1) For a Back-To-Back DMZ what are the possible ways to assign all the ip addresses?
2)If a VPN Server is to be configured on
ISA Server(External), what other configurations are needed to be done so that external client can reach users on the LAN.
3) Again is there a need to do a NAT on the router to the ISA Server (External) before publising rules can be configure on the ISA Servers.

I would appreciate any form of help and ways to allocate the IP Addresses...Thank you

3 replies

by joe_beasley

If the ISA does not have a real external address that is routable over the internet, then yes the router will have to either nat or forward the ports you are trying to publish.

by kent2612

Back-To-Back DMZ

router (External interface 203.126.100.2)
|
|
|
ISA Server (External)
|
|------DMZ
|
ISA Server (Internal)
|
LAN

by kent2612

To be more specific on my qns on Back-To-Back DMZ, is this allocation of ip address especially on the part of ISA Server (External) where both ip address are on the same subnet make sense or workable???
(Note that: 203.126.100.2 is on a different subnet from the range of ip given by isp (203.126.60.1-203.126.60.6)

Back-To-Back DMZ

router
|
|
|
ISA Server (External)
|
|------DMZ
|
ISA Server (Internal)
|
LAN

router External interface ip 203.126.100.2
router Internal interface ip 203.126.60.1

ISA Server (External)
(connection to router ip address 203.126.60.2)
(connection to DMZ ip address 203.126.60.3)

ISA Server (Internal)
(connection to DMZ ip address 203.126.60.4)
(connection to LAN ip address 192.168.0.X)

This discussion is closed to new replies.