Windows Forum

Ask something
Discussion Locked

Multi-home Server traffic from wrong NIC

0 helpful
2 replies

by ngunity

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I am having a lot of trouble with multi-homed Windows 2000 servers in controlling which NIC the data exits on.

I have servers with one NIC with a LAN IP connected to my LAN switches and another NIC with public IP connected to my DMZ.
I am having constant problems with data exiting from the wrong NIC. e.g. my firewall sees data coming from my WAN interface IP, but coming from the LAN interface instead of the DMZ int and blocks the traffic 'cause it thinks it's a spoofed IP on the LAN.

I have multiple similar problems and would like some heavy documentation on multi-homing NT and in particular Win 2000.

Either a good link to a page with a tonne of applicable documentation or someone who I can e-mail specifics to would be great andget the points.

thanks

2 replies

by abubin

I think the settings is quite straight forward. Most probably your problem is how you configure your FIREWALL. But most of the modern firewall today could easily identify where/whom/what packet by the reference IP address. I am sure both of you NIC on the server have 2 different IP address thus the firewall are able to know from there.

BTW, what firewall are you using?

by ngunity

I am using a Sonicwall Pro firewall, I have a switch connected to the DMZ port and my server in the DMZ lives on this switch.

For my multi-homed servers I have configured the public IP on the NIC connected to the DMZ. The Lan NIC in the PC with aprivate IP is connected into my LAN switches. I don't really need traffic to go from one NIC to another and Routing and Remote access is OFF under services.

I am sure my firewall is blocking some traffic on the servers but the reason is because the traffic is originating from the wrong NICs, or the wrong IPs: e.g. somehow traffic originating from my public IP exits on the LAN NIC.

This discussion is closed to new replies.