What IP addresses work with ISA server?

Hello,

I'm new to ISA server.  I've tried several configurations on my network and so far none of them have worked.  This is how my network looks.....

ISP.....cable modem.....Linksys router.......ISA server(server 2003)......LAN

I have 2 nics installed on the ISA.  My question is, what IP addresses do I put in the nics?   I've tried the same settings on my router that came from my ISP and that didn't work, plus a handful of other "suggestions" from forum members.

My nics are listed as "public" and "private"....also, how should I configure my LAN machines?

Thanks in advance to all.......

cyoung3000

cyoung3000Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

mmcmcmcCommented:
This is depending on whether you want to use the ISA server as Web-cache or firewall, or both. I would do it like this:

ISP.....cable modem.....(public ip)Linksys router(10.0.0.1/255.255.255.0).......(10.0.0.2/255.255.255.0)ISA server(server 2003)(192.168.0.1/255.255.255.0)......(192.168.0.10-255/255.255.255.0)LAN. Then set the clients up with 192.168.0.1 as the gateway. I recommend using the 2003 server as DHCP and if you are using it as a domain controller, then set DNS up on the server as well, otherwise use the ISP supplied DNS server.
jburgaardCommented:
The LAT, local adress table, should be populated with adress inf. for your LAN ( in ex. the 192.168.0.1-192.168.0.255)
Great link http://www.isaserver.org/
jburgaardCommented:
What is the ver. of your ISA?
Did you set up firewallclient from \\isaservername\mspclnt on the clients?
Are the clients set up to use port 8080 to your isaserver?
Witch allow rules did yuo set up?
How do you test connectivity?
-can you from your isa ping dns-server of ISP?
-dont expect to be able to ping IP outsideworld adress from client.
-IE on ISA is also a special matter
Your Guide to Achieving IT Business Success

The IT Service Excellence Tool Kit has best practices to keep your clients happy and business booming. Inside, you’ll find everything you need to increase client satisfaction and retention, become more competitive, and increase your overall success.

makanaCommented:
Actually you dont need the ISA here, or if you have ISA, you dont need the Linksys Router.
This had made your network slightly bigger unnecessarily. ISA has got strong routing and Firewalling capacity which doesnt require the Linksys.  Still you can do this

you must have got a Stat IP from your ISP, use that for NIC1. Your Cable modem is already Registered with your ISP ( no worries). Which Linksys Router you have? Suppose its befsr series.
Give its IP or MAC to your ISP so that it can be your gateway for the Internet.

Now let ISA get the IP from Linksys which is its gateway to your ISP through the Router.Now configure the ISA for total 254 ( I assume you have that much or less pcs) PCs for your Local LAN; use 192.168.0.1-192.168.0.254; subnet will be 255.255.255.0. now for the LAN NIC, use any of the IPs between 1-254 which was set as the gateway for ISA to linksys---Cable modem--ISP.

   
cyoung3000Author Commented:
Hello,

Thanks for the replies.  To sum it up, I'm using ISA 2000 on Server 2003 and I have all the updates.  My router is configured in the 192.168.15.1 range.  From pieces I gathered from all the replies, would the following work?

cable modem.......linksys router (192.168.15.1/static IP/IP supplied DNS).........ISA Server Public NIC(same info as Linksys?)........Private side NIC(192.168.0.1/Linksys gateway/ISP DNS

I'm still a little confused regarding DNS on the private side DNS.  ISAserver.org suggests having a DNS server on the private side only but how would that resolve internet addresses?  Sounds to me like the DNS should point to my Linksys router in some way.  

So does it look like this configuration would work?  Thanks again....

cyoung3000
mmcmcmcCommented:
Your Linksys router should supply a DNS server address for your clients (tjeck the DHCP settings of the router), you are now to use this on the local DNS server to forward any unknown DNS request to your ISP's DNS server. Else you should be able to find the ISP's DNS server in the ip-settings of the router.
jburgaardCommented:
This is to sum up, when internal side of linksys is 192.168.15.1.

ISP.....
cable modem.....
('realword-public' IP/DHCP-client? )Linksys router(192.168.15.1 mask 255.255.255.0).......
'public'(192.168.15.2, mask 255.255.255.0, dgw 192.168.15.1)ISA server2000 on w2k3s)'private'(192.168.0.1 mask 255.255.255.0 NO dgw)......
LAN with clientpc etc (192.168.0.2..254  mask 255.255.255.0 dgw 192.168.0.1)

cyoung3000Author Commented:
O.K. nothings working.......

I tried jburgaard's setup but it didn't work.  My network looks like this....

ISP....Linksys...(IP/68.66.x.x.......Subnet/255.255.254.0......no that's not a typo, it's 254.....
                      Gateway/68.66.x.x....DNS 67.21.x.x)     All of these settings came from my ISP......

Now, on my ISA Server....
What should I configure my "public NIC card" as?.....ip/sub/gate AND DNS (preferred and alternate)

What should I configure my "private NIC card as?.....ip/sub/gate AND DNS (preferred and alternate)


On my LAN machine......
What should I configure my first LAN machine as?....ip/sub/gate AND DNS (preferred and alternate)

I access my Linksys (192.168.15.1)

I am really stuck on this one guys.....any help would be appreciated...

cyoung3000


It'll take a guru to figure this one out, is there one out there?
jburgaardCommented:
you have linksys inside addr. 192.168.15.1 mask 255.255.255.0
and isa 'public' 192.168.15.2 mask 255.255.255.0
can you ping 192.168.15.1 from isa?
cyoung3000Author Commented:
Yes I can ping my ISA server

My network looks like this....

ISP....Linksys...(IP/68.66.x.x.......Subnet/255.255.254.0......no that's not a typo, it's 254.....
                      Gateway/68.66.x.x....DNS 67.21.x.x)     All of these settings came from my ISP......

Now, on my ISA Server....
What should I configure my "public NIC card" as?.....ip/sub/gate AND DNS (preferred and alternate)

What should I configure my "private NIC card as?.....ip/sub/gate AND DNS (preferred and alternate)


On my LAN machine......
What should I configure my first LAN machine as?....ip/sub/gate AND DNS (preferred and alternate)

I access my Linksys (192.168.15.1)

I am really stuck on this one guys.....any help would be appreciated...
jburgaardCommented:
You can ping 192.168.15.1 from isa
O.K. somethings working ;-)

can you ping 67.21.x.x (ISP DNS) ?

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Forefront ISA Server

From novice to tech pro — start learning today.