Solved

Can u have 2 Gateways on a scope for DHCP server on Windows 2003?

Posted on 2007-03-26
18
473 Views
Last Modified: 2010-04-20
I have a Windows 2003 server which is providing DHCP addresses to client machines. I have just installed a backup circuit from a different ISP. So now I have 2 different ISPs coming into my location. Because of certain equipment and my setup I have need to now point everyone to a new gateway. However if the primary router fails the users will no longer be able to browse the internet because their gateway will be pointing to the new router.
I would like to add an additional gateway in my DHCP server settings so that if the primary route goes down they will be able to go to the other gateway. Is this possible with Windows 2003? Can you have 2 gateways in a DHCP scope? If the first gateway does not get them out to the internet will it automatically fail over to the 2nd gateway in the scope?
0
Comment
Question by:krmis
  • 6
  • 4
  • 3
  • +2
18 Comments
 
LVL 77

Accepted Solution

by:
Rob Williams earned 200 total points
Comment Utility
You can assign multiple gateways with DHCP, and it "should" fail over to the second gateway when the first fails. However, it doesn't always work, and the bigger issue is when the first gateway/ISP connection is restored Windows will not change back to the first gateway without manual intervention or the DHCP lease being renewed.

The best way to handle multiple service providers is at the router by purchasing a dual WAN port router which will automate load balancing between the two connections or offer "fail-over" protection in the event one ISP goes off line. Dual WAN routers are available from most suppliers with the least expensive probably being the Linksys RV042
0
 
LVL 31

Expert Comment

by:Toni Uranjek
Comment Utility
You can add mutliple gateways in DHCP server, change setting 003 Router in your scope. If first gateway will not respond, client will use the other one.

HTH

Toni
0
 

Author Comment

by:krmis
Comment Utility
What if the gateway does respond but the default route does not go anywhere will it than fail over?
0
 
LVL 31

Assisted Solution

by:Toni Uranjek
Toni Uranjek earned 200 total points
Comment Utility
AFAIK, no, if first gateway responds, client will not switch to another.
0
 
LVL 77

Expert Comment

by:Rob Williams
Comment Utility
To the best of my knowledge, no it will not. Only if the gateway/router is unavailable. Basically you would have to unplug the router to force the switch-over.
It's not an ideal solution for managing multiple ISP's.
0
 
LVL 70

Expert Comment

by:KCTS
Comment Utility
There is absolutly no point in having multiple default gateways unless you have a multi-homed PC (ie one with IP addresses on 2 different subnets, you cannot assign multiple gateways to act as backups in case one is down.
0
 
LVL 70

Expert Comment

by:KCTS
Comment Utility
BTW the fact that you cannot have 'failover gateways' is not a limitation of Windows - its the way that TCP/IP works.
0
 
LVL 77

Expert Comment

by:Rob Williams
Comment Utility
KCTS I believe multiple gateways on the same network adapter works, in theory, though not that well in practice, but I would agree you could not have multiple default gateways with multiple adapters on different subnets. Using the multiple gateways with DHCP will assign different metrics to the same network adapter, allowing only the the first to be used. The second would only be used in the event that the first were not available.
0
 

Author Comment

by:krmis
Comment Utility
The scope and the gateways are on the same subnet. Because I'm using a Cisco Pix and Cisco router across a IPsec VPN tunnel dymanic routing will not work. That is why I'm trying to add a second gateway in windows should the Cisco router die clients will not get out to the internet because the default gateway points to the PIX. I want users to be able to get out to the internet if that Cisco router dies. This usually highly unlikely but the redundancy is still needed.
0
Shouldn't all users have the same email signature?

You wouldn't let your users design their own business cards, would you? So, why do you let them design their own email signatures? Think of the damage they could be doing to your brand reputation! Choose the easy way to manage set up and add email signatures for all users.

 
LVL 70

Assisted Solution

by:KCTS
KCTS earned 100 total points
Comment Utility
0
 
LVL 51

Expert Comment

by:Netman66
Comment Utility
You should be able to use HSRP in Cisco so that the second router takes over the first router's IP should it fail.

More on HSRP:

http://www.cisco.com/univercd/cc/td/doc/cisintwk/ics/cs009.htm
0
 
LVL 77

Expert Comment

by:Rob Williams
Comment Utility
>>"you appear to be correct "
That's a first for me :-)
Agree 100% though, having 2 default gateways "available" will not work. The assumption with the 2 supplied by DHCP, is the metrics will only allow 1 available at a time.

Have you come across any better ways to handle multiple ISP's KCTS, only one I am familiar with that works well, is the dual WAN routers. The multiple gateway option is flaky at  best. Looking at your profile, I am assuming "you have been around the block a few times". Have you stumbled on any other solutions. It's a common question.

Cheers !
--Rob
0
 
LVL 77

Expert Comment

by:Rob Williams
Comment Utility
Sorry, didn't refresh before posting. Netman66's solution looks far more stable and professional, given the provided hardware.
0
 

Author Comment

by:krmis
Comment Utility
To Netman66:

HSRP would be great but I have one router and one PIX. The pix handles one circuit and the router handles another. The pix will not send routes out the same interface it learns it from. It also can't do dynamic routing because an IPSEC tunnel will not send multicast traffic across a VPN tunnel so the pix and router will never learn about the remote networks across the tunnel. Which I need it to learn. A way around this is to create GRE tunnel which will send a routing protocol across an IPSEC tunnel.  But the PIX can't do GRE tunnels.
I'm also using the two circuits for backup and redundancy for VPN tunnels back to our corporate location. So the router will be the primary route for VPN tunnel back to corporate the PIX will be the backup for the VPN tunnel back to our corporate location. Also were using one circuit for internet traffic and the other primary for VPN traffic. Its not a plain vanilla solution.
They way I'm reading HSRP you need to routers not a router and a pix? Am I wrong in thinking this is correct?
0
 
LVL 51

Expert Comment

by:Netman66
Comment Utility
You're partially correct (I think!).

I'm not sure if PIX supports HSRP in the new software or not, but I know who will.

Hang on.

0
 

Author Comment

by:krmis
Comment Utility
Just a side note my pix will not support version 7.0 which is another issue that I face. Thanks for getting the infomation for me.
0
 
LVL 51

Expert Comment

by:Netman66
Comment Utility
I think you can use the PIX as the failover from the router, but you'll likely not be able to failover the other way if using HSRP.

This may be enough though.

0
 
LVL 77

Expert Comment

by:Rob Williams
Comment Utility
Thanks krmis, for the points.
If Netman66's option looks like it will be of some assistance, perhaps you should re-open the question and further split the points, as it might  be your best option.
Cheers !
--Rob
0

Featured Post

What Security Threats Are You Missing?

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

This is my 3rd article on SCCM in recent weeks, the 1st (http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Windows_Server_2008/A_4466-A-beginners-guide-to-installing-SCCM2007-on-Windows-2008-R2-Server.html) dealing with installat…
Remote Apps is a feature in server 2008 which allows users to run applications off Remote Desktop Servers without having to log into them to run the applications.  The user can either have a desktop shortcut installed or go through the web portal to…
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…
This video demonstrates how to create an example email signature rule for a department in a company using CodeTwo Exchange Rules. The signature will be inserted beneath users' latest emails in conversations and will be displayed in users' Sent Items…

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now