Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Can u have 2 Gateways on a scope for DHCP server on Windows 2003?

Posted on 2007-03-26
18
Medium Priority
?
482 Views
Last Modified: 2010-04-20
I have a Windows 2003 server which is providing DHCP addresses to client machines. I have just installed a backup circuit from a different ISP. So now I have 2 different ISPs coming into my location. Because of certain equipment and my setup I have need to now point everyone to a new gateway. However if the primary router fails the users will no longer be able to browse the internet because their gateway will be pointing to the new router.
I would like to add an additional gateway in my DHCP server settings so that if the primary route goes down they will be able to go to the other gateway. Is this possible with Windows 2003? Can you have 2 gateways in a DHCP scope? If the first gateway does not get them out to the internet will it automatically fail over to the 2nd gateway in the scope?
0
Comment
Question by:krmis
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 6
  • 4
  • 3
  • +2
18 Comments
 
LVL 77

Accepted Solution

by:
Rob Williams earned 800 total points
ID: 18792451
You can assign multiple gateways with DHCP, and it "should" fail over to the second gateway when the first fails. However, it doesn't always work, and the bigger issue is when the first gateway/ISP connection is restored Windows will not change back to the first gateway without manual intervention or the DHCP lease being renewed.

The best way to handle multiple service providers is at the router by purchasing a dual WAN port router which will automate load balancing between the two connections or offer "fail-over" protection in the event one ISP goes off line. Dual WAN routers are available from most suppliers with the least expensive probably being the Linksys RV042
0
 
LVL 31

Expert Comment

by:Toni Uranjek
ID: 18792454
You can add mutliple gateways in DHCP server, change setting 003 Router in your scope. If first gateway will not respond, client will use the other one.

HTH

Toni
0
 

Author Comment

by:krmis
ID: 18792474
What if the gateway does respond but the default route does not go anywhere will it than fail over?
0
Ransomware: The New Cyber Threat & How to Stop It

This infographic explains ransomware, type of malware that blocks access to your files or your systems and holds them hostage until a ransom is paid. It also examines the different types of ransomware and explains what you can do to thwart this sinister online threat.  

 
LVL 31

Assisted Solution

by:Toni Uranjek
Toni Uranjek earned 800 total points
ID: 18792517
AFAIK, no, if first gateway responds, client will not switch to another.
0
 
LVL 77

Expert Comment

by:Rob Williams
ID: 18792527
To the best of my knowledge, no it will not. Only if the gateway/router is unavailable. Basically you would have to unplug the router to force the switch-over.
It's not an ideal solution for managing multiple ISP's.
0
 
LVL 70

Expert Comment

by:KCTS
ID: 18792556
There is absolutly no point in having multiple default gateways unless you have a multi-homed PC (ie one with IP addresses on 2 different subnets, you cannot assign multiple gateways to act as backups in case one is down.
0
 
LVL 70

Expert Comment

by:KCTS
ID: 18792565
BTW the fact that you cannot have 'failover gateways' is not a limitation of Windows - its the way that TCP/IP works.
0
 
LVL 77

Expert Comment

by:Rob Williams
ID: 18792619
KCTS I believe multiple gateways on the same network adapter works, in theory, though not that well in practice, but I would agree you could not have multiple default gateways with multiple adapters on different subnets. Using the multiple gateways with DHCP will assign different metrics to the same network adapter, allowing only the the first to be used. The second would only be used in the event that the first were not available.
0
 

Author Comment

by:krmis
ID: 18792666
The scope and the gateways are on the same subnet. Because I'm using a Cisco Pix and Cisco router across a IPsec VPN tunnel dymanic routing will not work. That is why I'm trying to add a second gateway in windows should the Cisco router die clients will not get out to the internet because the default gateway points to the PIX. I want users to be able to get out to the internet if that Cisco router dies. This usually highly unlikely but the redundancy is still needed.
0
 
LVL 70

Assisted Solution

by:KCTS
KCTS earned 400 total points
ID: 18792688
0
 
LVL 51

Expert Comment

by:Netman66
ID: 18792755
You should be able to use HSRP in Cisco so that the second router takes over the first router's IP should it fail.

More on HSRP:

http://www.cisco.com/univercd/cc/td/doc/cisintwk/ics/cs009.htm
0
 
LVL 77

Expert Comment

by:Rob Williams
ID: 18792820
>>"you appear to be correct "
That's a first for me :-)
Agree 100% though, having 2 default gateways "available" will not work. The assumption with the 2 supplied by DHCP, is the metrics will only allow 1 available at a time.

Have you come across any better ways to handle multiple ISP's KCTS, only one I am familiar with that works well, is the dual WAN routers. The multiple gateway option is flaky at  best. Looking at your profile, I am assuming "you have been around the block a few times". Have you stumbled on any other solutions. It's a common question.

Cheers !
--Rob
0
 
LVL 77

Expert Comment

by:Rob Williams
ID: 18792826
Sorry, didn't refresh before posting. Netman66's solution looks far more stable and professional, given the provided hardware.
0
 

Author Comment

by:krmis
ID: 18793013
To Netman66:

HSRP would be great but I have one router and one PIX. The pix handles one circuit and the router handles another. The pix will not send routes out the same interface it learns it from. It also can't do dynamic routing because an IPSEC tunnel will not send multicast traffic across a VPN tunnel so the pix and router will never learn about the remote networks across the tunnel. Which I need it to learn. A way around this is to create GRE tunnel which will send a routing protocol across an IPSEC tunnel.  But the PIX can't do GRE tunnels.
I'm also using the two circuits for backup and redundancy for VPN tunnels back to our corporate location. So the router will be the primary route for VPN tunnel back to corporate the PIX will be the backup for the VPN tunnel back to our corporate location. Also were using one circuit for internet traffic and the other primary for VPN traffic. Its not a plain vanilla solution.
They way I'm reading HSRP you need to routers not a router and a pix? Am I wrong in thinking this is correct?
0
 
LVL 51

Expert Comment

by:Netman66
ID: 18794195
You're partially correct (I think!).

I'm not sure if PIX supports HSRP in the new software or not, but I know who will.

Hang on.

0
 

Author Comment

by:krmis
ID: 18794215
Just a side note my pix will not support version 7.0 which is another issue that I face. Thanks for getting the infomation for me.
0
 
LVL 51

Expert Comment

by:Netman66
ID: 18794452
I think you can use the PIX as the failover from the router, but you'll likely not be able to failover the other way if using HSRP.

This may be enough though.

0
 
LVL 77

Expert Comment

by:Rob Williams
ID: 18805154
Thanks krmis, for the points.
If Netman66's option looks like it will be of some assistance, perhaps you should re-open the question and further split the points, as it might  be your best option.
Cheers !
--Rob
0

Featured Post

Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Welcome to my series of short tips on migrations. Whilst based on Microsoft migrations the same principles can be applied to any type of migration. My first tip is around source server preparation. No migration is an easy migration, there is a…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
In this video, Percona Director of Solution Engineering Jon Tobin discusses the function and features of Percona Server for MongoDB. How Percona can help Percona can help you determine if Percona Server for MongoDB is the right solution for …
We’ve all felt that sense of false security before—locking down external access to a database or component and feeling like we’ve done all we need to do to secure company data. But that feeling is fleeting. Attacks these days can happen in many w…
Suggested Courses

715 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question