Unable to view COMPANYWEB website on SBS 2008 (SBS2008) from a subnet other than the local subnet of the SBS server
Posted on 2009-04-23
I am having an issue where I am unable to view the COMPANYWEB website on SBS2008 (SBS 2008) from a second subnet. This is not complicated or tricky...a second subnet is used in the office due to an IP phone system, and the server is on one subnet, with clients on another. The router routing traffic is a Cisco 1800.
If I put the clients on the same subnet as the SBS server, everything works fine.
There are NO access-lists preventing anything from accessing the 2nd subnet.
SBS2003 (SBS 2003) used to have the same issue because, during installation, the IIS websites and virtual folders were PRE-POPULATED with security limitations allowing ONLY the local subnet of the server to access the IIS websites. You needed to manually change each virtual folder from (local subnet only) to (ANY).
In SBS 2008 (and IIS7) I cannot find the setting that will allow an alternate subnet to the IIS websites / virtual folders. If I pick the website or virtual folder from IIS manager and select "ipv4 address and domain restrictions", there are no entries for any of the websites (by default, SBS 2008 has about 6 websites). The default action APPEARS to be set to allow all subnets unless otherwise specified.
If I specifically allow the other subnet in the IIS manager (192.168.1.0/24), then the websites stop working on the server subnet (192.168.0.0/24) and I am unable to access the "ipv4 address and domain restrictions" icon anymore. In order for this to start working again, I needed to MANUALLY go into the webconfig file in "c:\windows\system32\inetsrv" and remove the subnet entries.
Does anyone know how to enable remote subnets to access the default websites in SBS2008 (SBS 2008) the way that they did in SBS 2003? Or, if that's not how you do it, what are the steps to enable?