[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now


Are there any problems with setting up a dual homed ( 2 NICs ) terminal server?

Posted on 2008-11-04
Medium Priority
Last Modified: 2012-05-05
I am adding a terminal server to a SBS 2003 network and want to put the terminal server on both the LAN and a private network, behind a hardware firewall just like the current SBS server is today.
Both of the servers are dual homed.  This seem to be a good architecture but I would like to know that someone has it working and can advise of the problems encountered.
Question by:ableinc

Assisted Solution

firemanf29 earned 160 total points
ID: 22881808
Dual homes systems are never recommended and in almost every case not needed.  They tend to cause issues on domain controllers and DNS servers in particular.  Since you're running SBS I'm assuming the systems are doing both.  If you properly configure the firewall and routers then you should only need one IP address on any internal server.  The only exceptions to this may be web servers but that's more of an IIS topic.  Search EE and you'll find we have lot's of questions about problems with dual homed systems.  In every case the expert recommends reconfiguring the network to eliminate the need for a dual homed server.            

Author Comment

ID: 22882055
Thanks for the quick response.
Are you saying that best practice would be to have the router / firewall connected directly to the LAN and use port forwarding to route the SMTP and RDP traffic to the respective server?
The SBS server is currently dual homed and provides added isolation from the Internet using ISA.
 The current Firewall / Router provides for guest access to the internet and only passes SMTP and RWW traffic from the outside to SBS.
I didn't want to further load ISA with all of the Terminal Server traffic although I only expect 5 to 8 users at any one time.

Accepted Solution

IQComp earned 340 total points
ID: 22882131
It is true that they are not recommended, but I have implemented several multi-homed 2K3 Enterprise servers for a school division.  This was the only way they could go through their proxy filtering system to the WAN.  The only important things I would probably recommend is:

1.  The hosts file on each server should have the IP's of all of the other servers in the domain.
      e.g.        domain.com    # DC01
            domain.com    # DC02

2.  Binding order:
     Network Connections -> "Advanced" menu -> Select "Advanced Settings..."
     Make sure the binding order is set to have your LAN adapter first followed by the WAN.

3.  Routing - routing the LAN traffic through the WAN interface and vice-versa.

4.  Make sure both subnets are in "Sites and Services"

5.  WAN NIC configuration
     Uncheck "Register this connection's address in DNS" under the DNS tab in the TCP/IP settings.

6.  DNS configuration:  Make sure only 1 address is listed for the A records.
                                     Properties for DNS under the Interfaces, set it so it listens on only the LAN
                                     interface (whatever its IP is).

Hopefully that's helpful enough - can't think of much else.

Featured Post


Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Because virtualization becomes more and more common, and, with Microsoft Hyper-V included in Windows Server at no additional costs, and, most server hardware nowadays is more than capable of running a physical Small Business Server (SBS) 2008 or 201…
On July 14th 2015, Windows Server 2003 will become End of Support, leaving hundreds of thousands of servers around the world that still run this 12 year old operating system vulnerable and potentially out of compliance in many organisations around t…
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …

872 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question