Sign in
 
HomeForefront Threat Management GatewayForefront Unified Access GatewayLibraryForums
Forefront Edge Security TechCenter > Forefront Edge Security Forums > Forefront Edge Security - Installation, Upgrade, and Setup > ISA 2004 Routing between internal subnets/Networks??
Ask a questionAsk a question
Search Forums:
 

QuestionISA 2004 Routing between internal subnets/Networks??

  • Tuesday, February 03, 2009 5:05 PMJIGGELYPUFF Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Sign In to Vote
    0
    Sign In to Vote
    I have read up and browsed some of the isa forums on the internet and I have a question about a specific setup scenario.

    My company has purchased a new VOIP solution by Mitel which on their recommendation has been setup on a diffrent subnet/network on a VLAN created for the VOIP solution.

    There are machines on this seperate network which need to be able to communicate to machines on my existing network.

    Setup:

    Existing network is DHCP based 10.0.0.0 subnet 255.255.252.0 Default ROUTER/GATEWAY is ISA.
    VLAN setup on switch for VOIP network 192.0.0.0 subnet 255.255.252.0 default gateway to 10.* network defined in vlan is 192.0.3.254 and on switch for 192.* network is 10.0.3.254.

    Now how do I get isa to route between the two networks??

    If I add the 192.0.0.0 network as a INTERNAL network on isa; ISA generated configuration errors and the log shows ISA blocking communication between the networks.

    However setting a static route on machines work for 2 way communication.


    Accosrding to what I have read on the other forums after defining a internal network to ISA ;Isa  will automatically setup the routing between these networks.

    However this is not happening.


    now to add extra complication we are testing a new vpn wan connection which has the ip address of 10.0.0.21 on our internal network.

    Once again If i defined the new network as internal ISA does not seem to setup the route correctly.


    If I define static routes per machine it works ;but as you can think this is not very efficient.

    Please feel free to correct any miss understandings I have ;ANy help appreciated.
     

All Replies