asked on Different Gateways for Data and Internet Traffic (web proxy)
Hi,
i would like to change data and Internet traffic by adding different gateways.
current network setup:
- internet is connected to firewall outside interface (122.133.121.120)
- firewall Inside interface (192.168.10.254 ) is connect to L3 (HP Procurve) swithch (192.168.10.1 ) and (192.168.20.1 - LAN)
- we have vlans configured on L3 switch and L3 switch is acting as Gateway for LAN machines.
- firewall LAN interface (192.168.10.1) is acting as GW for L3 switch.
* All data (vpn also) and internet traffic is passing through L3 and then Firewall at this moment.
- I configured Proxy server using TMG. ( TMG lan interface is having 192.168.20.2 without Gateway and WAN interface is having Public IP address.
i like to add routes as below:
1) All IP/Data traffic ( or ) traffic coming from 192.168.20.0 should pass through 192.168.20.1.
2) remaining all traffic (internet ) should pass through Proxy Server (TMG).
we are using HP Procurve 2910al switch.
much appreciate if any body help me to setup.
many thanks.
i would like to change data and Internet traffic by adding different gateways.
current network setup:
- internet is connected to firewall outside interface (122.133.121.120)
- firewall Inside interface (192.168.10.254 ) is connect to L3 (HP Procurve) swithch (192.168.10.1 ) and (192.168.20.1 - LAN)
- we have vlans configured on L3 switch and L3 switch is acting as Gateway for LAN machines.
- firewall LAN interface (192.168.10.1) is acting as GW for L3 switch.
* All data (vpn also) and internet traffic is passing through L3 and then Firewall at this moment.
- I configured Proxy server using TMG. ( TMG lan interface is having 192.168.20.2 without Gateway and WAN interface is having Public IP address.
i like to add routes as below:
1) All IP/Data traffic ( or ) traffic coming from 192.168.20.0 should pass through 192.168.20.1.
2) remaining all traffic (internet ) should pass through Proxy Server (TMG).
we are using HP Procurve 2910al switch.
much appreciate if any body help me to setup.
many thanks.
Microsoft Forefront ISA ServerNetworkingRouters
Last Comment
giltjr
ASKER
Thanks for quick response,
but, what about websites running between VPN's . can we still access those sites,if i use GPO for poxy.
but, what about websites running between VPN's . can we still access those sites,if i use GPO for poxy.
Yes , but it would probably require some routes/adjustments on the TMG/proxy
I started with Experts Exchange in 2004 and it's been a mainstay of my professional computing life since. It helped me launch a career as a programmer / Oracle data analyst
William Peck
ASKER
i think it would be easy, if we route traffic on L3 switch right.
no need to make changes in GPO and we leave by configuring Transparent Proxy.
Thanks,
no need to make changes in GPO and we leave by configuring Transparent Proxy.
Thanks,
You should be able to set the default route to 192.168.20.2 (the TMG proxy) and then setup routes for all other subnets pointing to 192.168.20.1.
This assumes that the TMG box is configured so that it will act as a transparent proxy and a router/GW at the same time.
This assumes that the TMG box is configured so that it will act as a transparent proxy and a router/GW at the same time.
ASKER
Thanks for response,
i got it. but,
i used the following commands
- ip route 192.168.0.0 255.255.255.0 192.168.20.1 ( for data and internal websites)
- ip route 0.0.0.0 0.0.0.0 192.168.20.2 ( for internet )
these commands didn't worked for me.
can you tell me commands or any example commands for my setup.
Thanks
i got it. but,
i used the following commands
- ip route 192.168.0.0 255.255.255.0 192.168.20.1 ( for data and internal websites)
- ip route 0.0.0.0 0.0.0.0 192.168.20.2 ( for internet )
these commands didn't worked for me.
can you tell me commands or any example commands for my setup.
Thanks
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.
What do you mean by didn't work?
did you get an error or something?
did you get an error or something?
ASKER CERTIFIED SOLUTION
Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a questionASKER
sorry,
Data traffic is ok.
but,
unable to access local sites (inter-company) and internet is also not working.
Data traffic is ok.
but,
unable to access local sites (inter-company) and internet is also not working.
SOLUTION
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.
ASKER
check the all reply messages.
This is the best money I have ever spent. I cannot not tell you how many times these folks have saved my bacon. I learn so much from the contributors.
rwheeler23
Are there other IP subnets on your internal network?
If so, then you need static routes defined pointing to the the correct router/GW. 192.168.20.1?
If so, then you need static routes defined pointing to the the correct router/GW. 192.168.20.1?
If data traffic is working through .2, then this would be fine.
but as i said you would need to add the other sites as well in the routing table. Otherwise it will go to the TMG.
And for the "internet", are you sure the correct route is followed? do a traceroute and see what happens?
but as i said you would need to add the other sites as well in the routing table. Otherwise it will go to the TMG.
And for the "internet", are you sure the correct route is followed? do a traceroute and see what happens?
ASKER
resolved issue my self.
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.
Could you share with us how you resolved it. That way others that need to do the same thing may benefit from your solution.
and point that to the TMG.