From IT major incidents to manufacturing line slowdowns, every business process generates insights that need to reach the people required to take action. You need a platform that integrates with your business tools to create fully enabled DevOps toolchains.
You need xMatters.
Course Of The Month
2 days, 11 hours left to enrollBecome a Premium Member and unlock a new, free course in leading technologies each month.
Solved
Different Gateways for Data and Internet Traffic (web proxy)
Posted on 2013-01-08
Hi,
i would like to change data and Internet traffic by adding different gateways.
current network setup:
- internet is connected to firewall outside interface (122.133.121.120)
- firewall Inside interface (192.168.10.254 ) is connect to L3 (HP Procurve) swithch (192.168.10.1 ) and (192.168.20.1 - LAN)
- we have vlans configured on L3 switch and L3 switch is acting as Gateway for LAN machines.
- firewall LAN interface (192.168.10.1) is acting as GW for L3 switch.
* All data (vpn also) and internet traffic is passing through L3 and then Firewall at this moment.
- I configured Proxy server using TMG. ( TMG lan interface is having 192.168.20.2 without Gateway and WAN interface is having Public IP address.
i like to add routes as below:
1) All IP/Data traffic ( or ) traffic coming from 192.168.20.0 should pass through 192.168.20.1.
2) remaining all traffic (internet ) should pass through Proxy Server (TMG).
we are using HP Procurve 2910al switch.
much appreciate if any body help me to setup.
many thanks.
i would like to change data and Internet traffic by adding different gateways.
current network setup:
- internet is connected to firewall outside interface (122.133.121.120)
- firewall Inside interface (192.168.10.254 ) is connect to L3 (HP Procurve) swithch (192.168.10.1 ) and (192.168.20.1 - LAN)
- we have vlans configured on L3 switch and L3 switch is acting as Gateway for LAN machines.
- firewall LAN interface (192.168.10.1) is acting as GW for L3 switch.
* All data (vpn also) and internet traffic is passing through L3 and then Firewall at this moment.
- I configured Proxy server using TMG. ( TMG lan interface is having 192.168.20.2 without Gateway and WAN interface is having Public IP address.
i like to add routes as below:
1) All IP/Data traffic ( or ) traffic coming from 192.168.20.0 should pass through 192.168.20.1.
2) remaining all traffic (internet ) should pass through Proxy Server (TMG).
we are using HP Procurve 2910al switch.
much appreciate if any body help me to setup.
many thanks.
[X]
Welcome to Experts Exchange
Add your voice to the tech community where 5M+ people just like you are talking about what matters.
- Help others & share knowledge
- Earn cash & points
- Learn & ask questions
-
6
5
4
15 Comments
I think you just need to apply a proxy to all the clients (either by gpo or manually)
and point that to the TMG.
and point that to the TMG.
Thanks for quick response,
but, what about websites running between VPN's . can we still access those sites,if i use GPO for poxy.
but, what about websites running between VPN's . can we still access those sites,if i use GPO for poxy.
i think it would be easy, if we route traffic on L3 switch right.
no need to make changes in GPO and we leave by configuring Transparent Proxy.
Thanks,
no need to make changes in GPO and we leave by configuring Transparent Proxy.
Thanks,
Active 2 days ago
You should be able to set the default route to 192.168.20.2 (the TMG proxy) and then setup routes for all other subnets pointing to 192.168.20.1.
This assumes that the TMG box is configured so that it will act as a transparent proxy and a router/GW at the same time.
This assumes that the TMG box is configured so that it will act as a transparent proxy and a router/GW at the same time.
Thanks for response,
i got it. but,
i used the following commands
- ip route 192.168.0.0 255.255.255.0 192.168.20.1 ( for data and internal websites)
- ip route 0.0.0.0 0.0.0.0 192.168.20.2 ( for internet )
these commands didn't worked for me.
can you tell me commands or any example commands for my setup.
Thanks
i got it. but,
i used the following commands
- ip route 192.168.0.0 255.255.255.0 192.168.20.1 ( for data and internal websites)
- ip route 0.0.0.0 0.0.0.0 192.168.20.2 ( for internet )
these commands didn't worked for me.
can you tell me commands or any example commands for my setup.
Thanks
Active 2 days ago
I re-read your question.
First please do answer setasoujiro's questions.
Second, you posted these two requirments:
1) All IP/Data traffic ( or ) traffic coming from 192.168.20.0 should pass through 192.168.20.1.
2) remaining all traffic (internet ) should pass through Proxy Server (TMG).
What do you mean by "IP/Data" and "Internet"? "Internet" is not a type of traffic, the type of traffic on the Internet is "IP" and typically carriers data.
Routing tables send things based on the IP address of the destination, not based on the type of traffic and the destination.
First please do answer setasoujiro's questions.
Second, you posted these two requirments:
1) All IP/Data traffic ( or ) traffic coming from 192.168.20.0 should pass through 192.168.20.1.
2) remaining all traffic (internet ) should pass through Proxy Server (TMG).
What do you mean by "IP/Data" and "Internet"? "Internet" is not a type of traffic, the type of traffic on the Internet is "IP" and typically carriers data.
Routing tables send things based on the IP address of the destination, not based on the type of traffic and the destination.
sorry,
Data traffic is ok.
but,
unable to access local sites (inter-company) and internet is also not working.
Data traffic is ok.
but,
unable to access local sites (inter-company) and internet is also not working.
the other sites connected over vpn... shouldn't they be included in your routes?
It seems to me they are included in the 0.0.0.0 and that won't work.
It seems to me they are included in the 0.0.0.0 and that won't work.
Active 2 days ago
Are there other IP subnets on your internal network?
If so, then you need static routes defined pointing to the the correct router/GW. 192.168.20.1?
If so, then you need static routes defined pointing to the the correct router/GW. 192.168.20.1?
If data traffic is working through .2, then this would be fine.
but as i said you would need to add the other sites as well in the routing table. Otherwise it will go to the TMG.
And for the "internet", are you sure the correct route is followed? do a traceroute and see what happens?
but as i said you would need to add the other sites as well in the routing table. Otherwise it will go to the TMG.
And for the "internet", are you sure the correct route is followed? do a traceroute and see what happens?
Featured Post
Only on Experts-Exchange: Sign-up for a free-trial and we'll send you your permanent license!
Here is what you get: 30 Nodes | Unlimited Sensors | No Time Restrictions | Absolutely FREE!
Act now. This offer ends July 14, 2017.
Question has a verified solution.
If you are experiencing a similar issue, please ask a related question
Join Greg Farro and Ethan Banks from Packet Pushers (http://packetpushers.net/podcast/podcasts/pq-show-93-smart-network-monitoring-paessler-sponsored/) and Greg Ross from Paessler (https://www.paessler.com/prtg) for a discussion about smart network …
Shadow IT is coming out of the shadows as more businesses are choosing cloud-based applications. It is now a multi-cloud world for most organizations. Simultaneously, most businesses have yet to consolidate with one cloud provider or define an offic…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
If you're a developer or IT admin, you’re probably tasked with managing multiple websites, servers, applications, and levels of security on a daily basis. While this can be extremely time consuming, it can also be frustrating when systems aren't wor…
Suggested Courses
Course of the Month2 days, 11 hours left to enroll
Earn Certification
Cisco CCNA Data Center: DCICT
$197.00$177.30
Earn Certification
Cisco CCENT R&S: ICND1 v3
$197.00$177.30
695 members asked questions and received personalized solutions in the past 7 days.
Join the community of 500,000 technology professionals and ask your questions.