Solved

ISA 2004 configuration DHCP, DNS , NAT

Posted on 2004-08-30
2
1,230 Views
Last Modified: 2013-11-16
Hello Everyone!

I am new to ISA and trying to install it in my office. we have about 20 client machines.
We have AD domain with 2 DC and active directory integrated DNS on both DC.
The DNS servers have ISP's DNS server as forwarders.

We have a DSL router with one public IP and a block of IPs (used for web sites by our web server)

The DSL router acts as DHCP also and as NAT .

we use 192.168.1.0 network internally.

I have gone through the ISA configuration guide and quick start guide and have a few questions.

1. I plan to set up my ISA as

DSL -> router -> ISA -> switch ->patch panel-> clients and servers... Am i right ?

2. Quick start guide says , i install DNS on ISA and configure it as STUB zone with my AD DNS servers. I did that and put ISP's DNS as forwarder on DNS on ISA. Do i Have to change anything on my AD (internal) DNS servers also ?

3. What about DHCP. Can i still use my DSL router as DHCP with current configuration ? or would i have to use a DHCP server on internal network? or do i have to install DHCP on ISA ?

4. How do i go about using NAT ? Can i still use my router ? or will have to configure somewhere else ?  

This is for now to get me started. i will probably have more questions as i get started with this.

Thanks
0
Comment
Question by:network-geek
2 Comments
 
LVL 35

Accepted Solution

by:
Bembi earned 50 total points
ID: 11980073
1. OK
2. Depends from your clients. Your clients should be able (at least the servers itself) to resolve names. If you allow only the servers to resolve (ISA with forwarders, DC not), you may be able to view web sites, but other services may not work. But you can point your clients to DC, your DC with forwarders to ISA, ans ISA with forwarders to your ISP..., or directly your clients to ISA as secondary zone.
3.) I would not do that, use your own. As ISA is on a secondary subnet on the external NIC, you have to allow DHCP relay through you ISA. You can better manage that inside your net. So setup DHCP on your DC and disable DHCP for your internal net on your router.
4.) No, nada, there is nothing to configure with NAT on ISA. If you want to publish servers (w.exc. of ISA), you can define server publishing rules. Otherwise, ISA will manage the NAT between internal and external Sub-Net. On you router, you can configurate, what ports are Natted into your Network. THis means, there may be pakets, which are Natted twice.

Just a few additional remarks:
Your ISA has two different subnets, one inside, and another one between ISA and router. ISA itself has one default gateway, pointing to your router (usually set on your external NIC on ISA).
0
 

Author Comment

by:network-geek
ID: 11999178
Thanks Bembi..

I will try to configure and see what comes..
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

Do you have a windows based Checkpoint SmartCenter for centralized Checkpoint management?  Have you ever backed up the firewall policy residing on the SmartCenter?  If you have then you know the hassles of connecting to the server, doing an upgrade_…
This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
In this seventh video of the Xpdf series, we discuss and demonstrate the PDFfonts utility, which lists all the fonts used in a PDF file. It does this via a command line interface, making it suitable for use in programs, scripts, batch files — any pl…
Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now