Solved

Accessing the internet with forefront after subnet change.

Posted on 2013-12-10
3
392 Views
Last Modified: 2013-12-11
I change my subnet from 255.255.255.0 to 255.255.254.0 to allow more IPs. My old range is 192.168.1.0 - 192.168.1.254.

The new range is 192.168.0.0 - 192.168.1.254. The 192.168.1.x computers with the new subnet mask can still access the internet through Microsoft Forefront. The 192.168.0.x computers can not access the internet.

I added 192.168.0.1 - 192.168.1.254 to the internal address range in forefront but still no access. I also changed the mask on the internal network card on Forefront
0
Comment
Question by:Biofilminc
  • 2
3 Comments
 
LVL 18

Expert Comment

by:irweazelwallis
Comment Utility
you will need to make sure the routing and networking is up to date on the TMG/ISA server as well so that the new network range is configured as being internal otherwise anything in the 192.168.0.0/24 subnet will be considered as external and dropped

for TMG if you go to the networking container and then on the networks Tab get the properties of the Internal Network and check on the Addresses Tab of the properties to make sure your new subnet is present or add
then check the routing tab and make sure the routing is up to date
If you have a standard two legged TMG setup then you will need to add the route via "route add" first to make sure the static route is correct and then TMG should pick it up
0
 

Author Comment

by:Biofilminc
Comment Utility
It looks like it may be because my DNS server was not yet using the same subnet. Anything else I need to worry about with changing subnets?
0
 
LVL 18

Accepted Solution

by:
irweazelwallis earned 500 total points
Comment Utility
once you have checked routing and Network sets in the places above that should be enough

you should be good to go
0

Featured Post

Highfive + Dolby Voice = No More Audio Complaints!

Poor audio quality is one of the top reasons people don’t use video conferencing. Get the crispest, clearest audio powered by Dolby Voice in every meeting. Highfive and Dolby Voice deliver the best video conferencing and audio experience for every meeting and every room.

Join & Write a Comment

Suggested Solutions

Title # Comments Views Activity
SCCM service account minimum privilege ? 8 76
Fully delete GPO 2 41
CISCO ASA 5500 DDNS 4 54
PowerShell to find remote logins 6 57
Welcome to my series of short tips on migrations. Whilst based on Microsoft migrations the same principles can be applied to any type of migration. My first tip Migration Tip #1 – Source Server Health can be found listed in my profile here: http:…
Remote Apps is a feature in server 2008 which allows users to run applications off Remote Desktop Servers without having to log into them to run the applications.  The user can either have a desktop shortcut installed or go through the web portal to…
In this seventh video of the Xpdf series, we discuss and demonstrate the PDFfonts utility, which lists all the fonts used in a PDF file. It does this via a command line interface, making it suitable for use in programs, scripts, batch files — any pl…
Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now