Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium


Export ISA 2006 config to new server with blank ISA install but now we have a problem

Posted on 2014-07-15
Medium Priority
Last Modified: 2014-08-13
Hi, We are moving our 2006 ISA server which is configured as a publishing server for 10 applications which is internet facing to a new DMZ. The current server has 10 internet published IP addresses which are bound to the NIC, one IP address per application.

What I have done:
Built a new 2003 server and assigned the new 10 (natted) IP addresses to the NIC, installed ISA 2006. Exported the ISA policy from first server and imported to second server - all looks good.
I now need to change the listeners foe each app to point to or rather listen to one of the new ip addresses but I can't. When I access the "external" node from within ISA it is still showing me the IP addresses that were configured for the other server. It has remembered the IP addresses but I can't seem to see any way of removing them and adding my new IP address. Any ideas much appreciated.
Question by:Jason Thomas
LVL 51

Expert Comment

by:Keith Alabaster
ID: 40254962
Is it still an issue?
LVL 70

Expert Comment

ID: 40254963
See if this helps to change the ip addresses.
If you have one network card and one ip address bound to that network card already, you would have a file in /etc/sysconfig/network-scripts called "ifcfg-eth0".
This file contains the configuration for that network card.
If you want to bind more than one ip address to the card you need to create an additional configuration file for each of ip addresses that you wish to add.
Binding multiple ip addresses to one nic
LVL 47

Expert Comment

by:Craig Beck
ID: 40255065
@Merete - This is a Windows server, not a Linux box :-)

@JasonHels - You need to do three things...

1] Add the old IP addresses to the external NIC on the new server, then restart the Firewall service or restart the server
2] Reconfigure the listeners for each application to use the designated new IP
3] Remove the old IP addresses from the external NIC then restart the Firewall service or restart the server

You may need to take the new ISA server offline and connect it to an isolated switch to do this, as you may otherwise cause an IP conflict.
Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.


Author Comment

by:Jason Thomas
ID: 40256118
Hi craigbeck, sorry for the late reply. I understand the explanation but here's the thing....  The old IP addresses that were bound to the NIC prior to exporting the config are in fact not bound to the new NIC? So, Although i can do steps 1 and 2 I can't do step 3 and here is my problem.
LVL 47

Accepted Solution

Craig Beck earned 2000 total points
ID: 40256150
I see what you're saying, but that's why you have to re-add the old IP addresses, even if they're not being used.

The old configuration thinks that the old addresses are still there, so you need to put them back, then reconfigure the rules/listeners with the new IPs, then remove the old ones from the NIC.

Author Comment

by:Jason Thomas
ID: 40257707
OK great thank you, will give it a go later and get back to you...

Author Closing Comment

by:Jason Thomas
ID: 40258407
Worked a treat - thank you.
LVL 47

Expert Comment

by:Craig Beck
ID: 40258473
My pleasure :-)

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This is a fairly complicated script that will install the required prerequisites to install SCCM 2012 R2 on a server.  It was designed under the functional model in order to compartmentalize each step required, reducing the overall complexity.  The …
The System Center Operations Manager 2012, known as SCOM, is a part of the Microsoft system center product that provides the user with infrastructure monitoring and application performance monitoring. SCOM monitors:   Windows or UNIX/LinuxNetwo…
When cloud platforms entered the scene, users and companies jumped on board to take advantage of the many benefits, like the ability to work and connect with company information from various locations. What many didn't foresee was the increased risk…
With just a little bit of  SQL and VBA, many doors open to cool things like synchronize a list box to display data relevant to other information on a form.  If you have never written code or looked at an SQL statement before, no problem! ...  give i…
Suggested Courses
Course of the Month13 days, 16 hours left to enroll

580 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question