SBS2k with 1 NIC and no ISA server

Am migrating an SBS install from one box to another. This new box is on a
network that has a 2Mg broadband feed supplied by an ISP that is firewalled
by them.

The broadband feed is presented to us as an ethernet cable with an IP that
is on the internal range of our network. I have asked they map a fixed
external IP to our new SBS2K box internal IP for email delivery, TS etc.

The question: with this set up I cannot see how I would use ISA server
(needs 2 NICS right?) and so am not going to install it. Instead I am going
to have DHCP give out the broadband ethernet IP as the default gateway. I
am pretty happy with the ISP's firewall technology (Nortel Shasta), but does
this set up pose problems I have not foreseen? Will DNS set-up from default
be fine or will it need work?

Anyone with any info, pointers about SBS2K with 1 nic would be most welcome.

thanks

Gerry

Marina
Tue Dec 09 18:51:19 CST 2003

You still can use ISA, although you will not have the full functionality.
DNS default setup is fine. On the nic you point to your server-IP, in
DNS-server, tab Forwarders you add the ISP-DNS-numbers.
Run ICW-wizard and you should be fine.

Marina

"Gerry Keen" <gerry@nospamgeraldkeen.com> schreef in bericht
news:OKXelCrvDHA.2540@TK2MSFTNGP09.phx.gbl...
> Am migrating an SBS install from one box to another. This new box is on a
> network that has a 2Mg broadband feed supplied by an ISP that is
firewalled
> by them.
>
> The broadband feed is presented to us as an ethernet cable with an IP that
> is on the internal range of our network. I have asked they map a fixed
> external IP to our new SBS2K box internal IP for email delivery, TS etc.
>
> The question: with this set up I cannot see how I would use ISA server
> (needs 2 NICS right?) and so am not going to install it. Instead I am
going
> to have DHCP give out the broadband ethernet IP as the default gateway. I
> am pretty happy with the ISP's firewall technology (Nortel Shasta), but
does
> this set up pose problems I have not foreseen? Will DNS set-up from
default
> be fine or will it need work?
>
> Anyone with any info, pointers about SBS2K with 1 nic would be most
welcome.
>
> thanks
>
> Gerry
>
>

Gerry
Tue Dec 09 19:09:14 CST 2003

thanks Marina, but..

you lost me on the bit
"..On the nic you point to your server-IP, ..."

not sure what you mean here.

I will have one Nic in the SBS box with a fixed IP of 192.168.16.2.
The ISP feed is on .1 and the workstations are on .20 - .254 (via DHCP)

thanks

Gerry

Bob
Tue Dec 09 19:42:40 CST 2003

http://www.smallbizserver.net/SBS2000/How_to_configure_DNS_to_host_a_site_on_the_server.aspx

Cheers,
Bob

"Gerry Keen" <gerry@nospamgeraldkeen.com> wrote in message
news:uvufTprvDHA.3220@tk2msftngp13.phx.gbl...
> thanks Marina, but..
>
> you lost me on the bit
> "..On the nic you point to your server-IP, ..."
>
> not sure what you mean here.
>
> I will have one Nic in the SBS box with a fixed IP of 192.168.16.2.
> The ISP feed is on .1 and the workstations are on .20 - .254 (via DHCP)
>
> thanks
>
> Gerry
>
>

Merv
Tue Dec 09 19:57:16 CST 2003

Thinking out loud here...

Paranoia... I'm not sure I'd trust an external vendor to maintain a firewall
for my network.

(I think we need an ISA expert here). I'm wondering if you couldn't still
use 2 NICs, ISA and a cheap router. Use the normal setup and then use the
feed from your ISP as the input on the WAN side of the router. You *might*
have to exclude the single WAN IP address - 192.168.16.1 - from your LAT
since that IP address is in the same subnet as your LAN. DHCP & WINS may
also have to be adjusted.

Just a thought.

--
Merv Porter [SBS MVP]
===================================
"Gerry Keen" <gerry@nospamgeraldkeen.com> wrote in message
news:uvufTprvDHA.3220@tk2msftngp13.phx.gbl...
> thanks Marina, but..
>
> you lost me on the bit
> "..On the nic you point to your server-IP, ..."
>
> not sure what you mean here.
>
> I will have one Nic in the SBS box with a fixed IP of 192.168.16.2.
> The ISP feed is on .1 and the workstations are on .20 - .254 (via DHCP)
>
> thanks
>
> Gerry
>
>

Marina
Wed Dec 10 03:33:10 CST 2003

On the Nic-properties, TCP/IP, field DNS: make sure that you only point to
your server-IP.

Marina

"Gerry Keen" <gerry@nospamgeraldkeen.com> schreef in bericht
news:uvufTprvDHA.3220@tk2msftngp13.phx.gbl...
> thanks Marina, but..
>
> you lost me on the bit
> "..On the nic you point to your server-IP, ..."
>
> not sure what you mean here.
>
> I will have one Nic in the SBS box with a fixed IP of 192.168.16.2.
> The ISP feed is on .1 and the workstations are on .20 - .254 (via DHCP)
>
> thanks
>
> Gerry
>
>

Gerry
Wed Dec 10 04:18:40 CST 2003

I had thought along these lines as well Merv, although the added complexity
to all this (that the ISP was going to sort for me) was our remote office in
Paris (France - not Texas).

I am putting a DC in there on the same subnet as the SBSbox, with a Cisco
firewall hanging off it. The Cisco and the ISP's firewall are going to have
a site to site VPN such that the remote office and our local office appear
as one to the workstation.. With WINS installed on the DC, which is
regulrarly sync'ing with our SBS box in London through the VPN tunnel, I can
thus have staff (who are 90% laptoppers) being able to log on in either
office and have all internal network resources to hand with no laptop
tweaks.

I think I need to look at the www.isaserver.org site as I really would
prefer it to be in place.

thanks

Gerry

"Merv Porter [SBS-MVP]" <mwport@hotmail.com_no_spam> wrote in message
news:%23m6IZDsvDHA.536@tk2msftngp13.phx.gbl...
> Thinking out loud here...
>
> Paranoia... I'm not sure I'd trust an external vendor to maintain a
firewall
> for my network.
>
> (I think we need an ISA expert here). I'm wondering if you couldn't still
> use 2 NICs, ISA and a cheap router. Use the normal setup and then use the
> feed from your ISP as the input on the WAN side of the router. You
*might*
> have to exclude the single WAN IP address - 192.168.16.1 - from your LAT
> since that IP address is in the same subnet as your LAN. DHCP & WINS may
> also have to be adjusted.
>
> Just a thought.
>
> --
> Merv Porter [SBS MVP]
> ===================================
> "Gerry Keen" <gerry@nospamgeraldkeen.com> wrote in message
> news:uvufTprvDHA.3220@tk2msftngp13.phx.gbl...
> > thanks Marina, but..
> >
> > you lost me on the bit
> > "..On the nic you point to your server-IP, ..."
> >
> > not sure what you mean here.
> >
> > I will have one Nic in the SBS box with a fixed IP of 192.168.16.2.
> > The ISP feed is on .1 and the workstations are on .20 - .254 (via DHCP)
> >
> > thanks
> >
> > Gerry
> >
> >
>
>