1 Server, 2 NICs, 2 Networks - How to make this work?

Posted on 2006-03-20
Last Modified: 2010-03-18
Windows 2003 Server

NIC One:

NIC one is connected to the "internet switch", which is connected to the firewall, which is connected to the router out to the internet.

NIC Two:

NIC Two is connected to the "LAN switch" which connects several different workstations.

As I am sure you are all aware, when setting the two different gateways, I get a nice warning message about redundant networks and how if it's two seperate networks this won't work.

NAT-ing for the servers public IP is not an option.

Keeping one IP public and one IP private, how can i make this work on W2K3?

Crazy thing is, I have 8 W2K servers attached to this same network, with the IP stacks similar as stated above, and seems to work fine and has for 2 years.  The public IP's work and the services provided by them work fine and are accessable by the public, and I can still access shares on the LAN and whatnot.
Question by:olivejar
    LVL 23

    Expert Comment

    I'm curious why you need to have a NIC in your servers for public IP access period?  Why aren't the all just using a LAN IP nic and then routing out through the firewall for their internet access?  And why isn't the firewall "publishing" any web servers, mail servers, etc so that your internal servers aren't actually exposed to the internet at all?
    LVL 51

    Accepted Solution

    Your issue sounds like it is in the question.

    NIC2 should not have a gateway; you are confusing the heck out of your server. You should only ever have one default gateway assigned. as the name suggets, it is the default nic to send data out of if it does not have a known route. Giving it two defaults is not a workable option.

    Nic1 is fine
    Set the dhcp scope on nic2 only (in its settings you tell it to use nic2 only to assign addresses on).
    Set the 003 (router option) for the dhcp scope to point all work stations to the NIC2 address of the server.

    LVL 51

    Expert Comment

    by:Keith Alabaster
    PS, if you have other roues/subnets that the internal network needs to get to, still remove the nic2 gateway then use the route command from the dos cmd prompt

    for example,
    route - p add mask
    LVL 51

    Expert Comment

    by:Keith Alabaster
    Thanks :)

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Highfive + Dolby Voice = No More Audio Complaints!

    Poor audio quality is one of the top reasons people don’t use video conferencing. Get the crispest, clearest audio powered by Dolby Voice in every meeting. Highfive and Dolby Voice deliver the best video conferencing and audio experience for every meeting and every room.

    FIPS stands for the Federal Information Processing Standardisation and FIPS 140-2 is a collection of standards that are generically associated with hardware and software cryptography. In most cases, people can refer to this as the method of encrypti…
    This article is in response to a question ( here at Experts Exchange. The Original Poster (OP) requires a utility that will accept a list of IP addresses …
    Need more eyes on your posted question? Go ahead and follow the quick steps in this video to learn how to Request Attention to your question. *Log into your Experts Exchange account *Find the question you want to Request Attention for *Go to the e…
    Sending a Secure fax is easy with eFax Corporate ( First, Just open a new email message.  In the To field, type your recipient's fax number You can even send a secure international fax — just include t…

    779 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    16 Experts available now in Live!

    Get 1:1 Help Now