Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 178
  • Last Modified:

Directing traffic from one server between two different routers.

Hi,

We have two Cisco ASA 5505's on two different DSL lines.  Their internal IP addresses are on the same LAN and on the same subnet.  One is 192.168.1.253 and the other is 192.168.1.254.  We have a Windows 2003 server on the same LAN and subnet (192.168.1.19) that we would like to be able to RDP to from either of the outside lines.  However, since the default gateway of this server points to the .254 router, we cannot access it from the outside address of the .253 router with RDP because the connection tries to send information back out of the .254 router (Thus giving a "denied, no tcp connection" error).  Is there any way we can use the ROUTE command on this server, or any other method to tell it to send data it receives from the .253 router back to the .253 router so clients can access the server from either outside IP address?

Let me know if I need to clarify anything or go into more detail.

Thank you
0
OAC Technology
Asked:
OAC Technology
1 Solution
 
SCarrisonCommented:
You can give a Windows machine more than one default gateway

The problem is you can never, with any great certainty determine which will be used consistently.
0
 
batry_boyCommented:
No, you won't be able to do that because you are allowing RDP traffic inbound through each firewall from anywhere, I assume, and there is no differentiating factor you can use in a route statement on the server to point return traffic to one firewall or the other.

The best I can think of to do is to configure remote access VPN connectivity for external RDP access to the server with each firewall handing out a separate set of DHCP addresses to the VPN clients.  Then you could configure a static route on the server that points traffic to the .253 firewall for addresses that are in that firewalls DHCP pool.  The default route that is already pointing to .254 will take care of the DHCP pool of addresses in the other firewall so you don't need a separate static route for that one.
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now