• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 468
  • Last Modified:

Accessing the internet with forefront after subnet change.

I change my subnet from 255.255.255.0 to 255.255.254.0 to allow more IPs. My old range is 192.168.1.0 - 192.168.1.254.

The new range is 192.168.0.0 - 192.168.1.254. The 192.168.1.x computers with the new subnet mask can still access the internet through Microsoft Forefront. The 192.168.0.x computers can not access the internet.

I added 192.168.0.1 - 192.168.1.254 to the internal address range in forefront but still no access. I also changed the mask on the internal network card on Forefront
0
Biofilminc
Asked:
Biofilminc
  • 2
1 Solution
 
ChrisCommented:
you will need to make sure the routing and networking is up to date on the TMG/ISA server as well so that the new network range is configured as being internal otherwise anything in the 192.168.0.0/24 subnet will be considered as external and dropped

for TMG if you go to the networking container and then on the networks Tab get the properties of the Internal Network and check on the Addresses Tab of the properties to make sure your new subnet is present or add
then check the routing tab and make sure the routing is up to date
If you have a standard two legged TMG setup then you will need to add the route via "route add" first to make sure the static route is correct and then TMG should pick it up
0
 
BiofilmincAuthor Commented:
It looks like it may be because my DNS server was not yet using the same subnet. Anything else I need to worry about with changing subnets?
0
 
ChrisCommented:
once you have checked routing and Network sets in the places above that should be enough

you should be good to go
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now