ISA 2004 Configuration and Traffic Redirection

Soldato
Joined
17 Oct 2002
Posts
3,941
Location
West Midlands
Greetings firstly i hate ISA secondly i have a problem with the following configuration.

Our customer has several partners for which they provide seperate ADSL connections for secure access to there Intranet portals.

One of these such connections hooks into the back of an ISA server directly connected to both the internal LAN and one of the ADSL partner connections, there is a single rule in ISA pointing any client trying to get to *.****star.com being said portal to retrieve the request directly which heads out it's directly connected interface.

Now we have recently implemented a new network with a new default gateway for internet access and connectivity between remote sites and i would like to put all traffic not destined for the partner Intranet through the new default gateway and out through the new firewall.

The ISA server is on a **.***.**.7 address and is manually configured on client machines in internet explorer allowing internal uses to get too said portal via the ISA server.

Now what i would like to do is keep the ISA configuration in Internet Explorer but configure ISA so that when a client submits a web request going to a domain other than the partner portal traffic is forwarded from the ISA server to the new default gateway on **.***.**.1

Is this possible with just two network cards or would i have to add a third and hook this into a spare LAN interface on the ASA5510 being the new firewall.

Any help would be much appreciated.


 
Windows Server 2003, and thus ISA 2004 / 06 server can only have a single default gateway configured at any one time. This limitation has not been removed in 2008.

There used to be an add on by some network firm but that dissapeared a few years ago.

Sorry
 
Set the default gateway on the NIC that connects to the LAN. Remove the default gateway on the NIC that connects to the ADSL router.

Use Route Add to add an entry to the servers local routing table to direct traffic for the IP / IP range of the intranet site out the NIC with the ADSL router.

route ADD 157.0.0.1 MASK 255.255.255.255 157.55.80.1 METRIC 3 IF 2

Destination = 157.0.0.1 e.g. the intranet sites IP
Mask = 255.255.255.255 e.g. use the correct mask for the range or 255.255.255.255 for a single IP
Gateway = 157.55.80.1 e.g. use the ADSL routers IP
Metric = METRIC 3 e.g. priority order in the routing table
Interface = IF 2 e.g. the number of the interface to use
 
Last edited:
Back
Top Bottom