Small ISP network Configuration
Posted on 2006-04-04
I need your help to resolve this network setup for a client.
Here is the current configuration:
1). Windows 2000 & Windows 2003 Servers in a server farm of 18 machines.
2). Dedicated T1 connectivity with a class "C" address space.
3). 2 domain controllers running windows 2000 with active directory integrated DNS with 7 member servers, and 2 domain controllers running windows 2003 with active directory integratged DNS with 7 members servers.
4). Domain controllers with integrated active directory based DNS act as the primary and secondary name servers for the hosted domains.
5). Member servers are running IIS,SQL and Mail. Each member server is multihomed with dedicated ip address for each domain hosted under the network.
6). They have some partnered companies that access their servers to updated application specific data, so they need remote desktop access to these servers time to time.
I have been asked to take care of this network and implement a firewall solution for it asap since they are experiencing network issues time to time. Past management people purchased a pix firewall 506E, but they never able to implement it.
Here are my questions;
1). If i were to move the existing network inside the Pix interface then, all address will be changed to private address and i can setup the pix to provide the NAT translation.
Thus, a public class 'c' address as 126.96.36.199 will translated to 10.20.20.1. If i do this, all the members server and domain controllers ip address will be changed to private address, since it's active directory integrated, that would change the DNS zones to point to private address and people in the internet will not be able to access it ? Can you apply DNS doctoring on this ? If so how would you setup that in the pix 506E. I am asking this based on what i read on this site.
2). What is the best recommended network design model for a similar network ?
3). Is PIX 506E is enough for this ?
4). Implementing VPN solution for partner access ?
5). What is the based way to migrate this to new network model with no down time ?
Since i am new to Cisco Pix products, it would be helpfull if you can provide more information as possible on the possible network designs and configurations !
If you have any questions, please kindly ask me, and i will clear up with much information as i can.