Solved

Dual ADSL Router to Win2003 Server with Single NIC

Posted on 2012-04-12
7
694 Views
Last Modified: 2012-04-17
Hi

I have a client who has had a 2nd ADSL installed with their SINGLE NIC Windows 2003 server behind.

They now have 2 Netgear DG834 routers configured as

Router1
Public IP 80.14.x.x
LAN IP 192.168.180.1

Router2
Public IP 85.20.x.x
LAN IP 192.168.180.5

SBServer
LAN IP 192.168.180.2
Gateway IP 192.168.180.1

This works fine to send incoming SMTP, Web and RAS traffic IN through Router1.

The problem occurs when I send traffic in through Router2. I get no response back from the server? I can see that the traffic is hitting the router from its logs and being forwarded to the Server.

Is this because the Server NIC has a gateway of 192.168.180.1 and is sending the response traffic out to Router 1?

I have tried setting a static route on Router 1 to Router 2 as follows:

Destination IP 85.20.x.x (Router2 Public IP)    Gateway 192.168.180.5

but that doesn't work.

I have tried setting a second gateway on the server NIC of 192.168.180.5 and that seems to break everything!

Can someone please advise.

M
0
Comment
Question by:Winfix1
7 Comments
 
LVL 11

Expert Comment

by:Kruno Džoić
ID: 37836459
You want to send traffic from Server to routers
or from Client to Server and Server to routers?
0
 

Author Comment

by:Winfix1
ID: 37836472
M3rc74

I want incoming SMTP, Web and other traffic to be able to come in and out through both routers. ie to use the second ADSL as a failover incoming route for SMTP traffic once a second MX record is setup.
0
 
LVL 11

Assisted Solution

by:Kruno Džoić
Kruno Džoić earned 150 total points
ID: 37836506
The best way to achieve this is to buy Dual WAN router or make one from old PC
0
Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

 
LVL 19

Expert Comment

by:Miguel Angel Perez Muñoz
ID: 37836737
With this scenario, can do manually, changing default gateway. But adding a second gateway not work.
0
 

Author Comment

by:Winfix1
ID: 37836765
I want to use the existing Routers and don't want manual intervention. Surely its a simple thing achieve. Maybe I need to add a static route to the IP config of the server?
0
 
LVL 2

Assisted Solution

by:Cal_George
Cal_George earned 150 total points
ID: 37838739
No, this is not a simple as it sounds. Drashiel is correct. Load balancing is more complicated than it sounds. The IP header only has one field for the return path. When you send something out over gateway-1, it will never come back over gateway-2.
Just my $0.02
0
 
LVL 5

Accepted Solution

by:
gortm001 earned 200 total points
ID: 37842035
The problem you are facing is that that you can only have 1 default gateway. Look at your server (open a dos-prompt and type route print)

You will see that youre server only knows his own network 192.168.180.x that is connected to his own Nic, the .2 address. Everything else that does not fit the mask of 192.168.180.x he will send to his default gateway on number 1, making it his problem to deliver it on the right location.

As M3rc74 already mentioned, if you really want to solve this with the least amount of mony spent, I would suggest that you replace both netgears with f.i. a Vigor 29x0 series router, who supports the use of 2 WAN's including load balancing and redundancy.

See http://www.draytek.com/user/PdInfoDetail.php?Id=31 for more detailed info.

Afaik this is  "Out of the box" functionality.

The reason portfowarding on your second router is not working is also easily explained: Your router is doing NAT, so the IPpackage from the outside  arriving at the outside address of your second router is delivered to the internal address of the server. Since the originating address is an external mailserver and NOT the internal address of of your second router (192.168.180.5) responses from the server will be sent through the default gateway. Since this is outbound traffic NAT in your first router will replace the originating sender addres (your servers internal address 192.168.180.1) with the external address of your first router.

You might see that this is very confusing for the sending mailserver, talking to Ip address A, getting answers from IP address B, that will not work.

Hope this helps,

KG
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

When it comes to security, there are always trade-offs between security and convenience/ease of administration. This article examines some of the main pros and cons of using key authentication vs password authentication for hosting an SFTP server.
In this article, I am going to show you how to simulate a multi-site Lab environment on a single Hyper-V host. I use this method successfully in my own lab to simulate three fully routed global AD Sites on a Windows 10 Hyper-V host.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…

786 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question