2 gateways

Recently I've started a new job and inherited a network with issues. The
main one being 2 gateways. There are 2 nic cards no redundancy between DC's
and all sorts of issues. I have a 135.11.12.x gateway and a 135.11.20.x
gateway and the entire network is 255.255.0.0 subnet. In addition, I have
2nd nic's with 10.10.1.x with 255.255.0.0 ip's with no gateway.

I'm trying to figure out the best way to make use of both Gateways. My main
objective is to try to use the 135.11.20.x as the main and the 135.11.12 as
the secondary. Is there a way I can make use of the 10.10.1.x with the
135.11.12 as the gateway? If for nothing else as for but for redundancy?

Some help please.

Plenty to read here.

157025 - Default Gateway Configuration for Multihomed Computers
http://support.microsoft.com/default...roduct=win2000

159168 - Multiple Default Gateways Can Cause Connectivity Problems
http://support.microsoft.com/kb/159168/EN-US/

128978 - Dead Gateway Detection in TCP/IP for Windows NT
http://support.microsoft.com/default...b;EN-US;128978

171564 - TCP/IP Dead Gateway Detection Algorithm Updated for Windows NT
http://support.microsoft.com/default...b;EN-US;171564

Default gateways
http://www.microsoft.com/technet/pro...d3859f5b1.mspx

--
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/IS...cessRules.html

Microsoft Internet Security & Acceleration Server: Guidance
http://www.microsoft.com/isaserver/t...dance/2004.asp
http://www.microsoft.com/isaserver/t...dance/2000.asp

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.asp
-----------------------------------------------------
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com


"1xnyer" <(E-Mail Removed)> wrote in message
news:12EDF58C-7B56-48F6-9B44-(E-Mail Removed)...
> Recently I've started a new job and inherited a network with issues. The
> main one being 2 gateways. There are 2 nic cards no redundancy between
DC's
> and all sorts of issues. I have a 135.11.12.x gateway and a 135.11.20.x
> gateway and the entire network is 255.255.0.0 subnet. In addition, I have
> 2nd nic's with 10.10.1.x with 255.255.0.0 ip's with no gateway.
>
> I'm trying to figure out the best way to make use of both Gateways. My
main
> objective is to try to use the 135.11.20.x as the main and the 135.11.12
as
> the secondary. Is there a way I can make use of the 10.10.1.x with the
> 135.11.12 as the gateway? If for nothing else as for but for redundancy?
>
> Some help please.

More to this story... What I also found out is that second server connected
to the 135.11.12.x gateway has RAS installed and is where the VPN firewall is
connected. Clients RAS into that server. I can't just take it down, can I
however a)multihome that pc adding a nat perhaps
b)Or perhaps creating a Radius server where that authicates to and then
allow it to interact with the 135.11.20.x side.

Can you point me in that direction?

"Phillip Windell" wrote:

> Plenty to read here.
>
> 157025 - Default Gateway Configuration for Multihomed Computers
> http://support.microsoft.com/default...roduct=win2000
>
> 159168 - Multiple Default Gateways Can Cause Connectivity Problems
> http://support.microsoft.com/kb/159168/EN-US/
>
> 128978 - Dead Gateway Detection in TCP/IP for Windows NT
> http://support.microsoft.com/default...b;EN-US;128978
>
> 171564 - TCP/IP Dead Gateway Detection Algorithm Updated for Windows NT
> http://support.microsoft.com/default...b;EN-US;171564
>
> Default gateways
> http://www.microsoft.com/technet/pro...d3859f5b1.mspx
>
> --
> -----------------------------------------------------
> Understanding the ISA 2004 Access Rule Processing
> http://www.isaserver.org/articles/IS...cessRules.html
>
> Microsoft Internet Security & Acceleration Server: Guidance
> http://www.microsoft.com/isaserver/t...dance/2004.asp
> http://www.microsoft.com/isaserver/t...dance/2000.asp
>
> Microsoft Internet Security & Acceleration Server: Partners
> http://www.microsoft.com/isaserver/partners/default.asp
> -----------------------------------------------------
> Phillip Windell [MCP, MVP, CCNA]
> www.wandtv.com
>
>
> "1xnyer" <(E-Mail Removed)> wrote in message
> news:12EDF58C-7B56-48F6-9B44-(E-Mail Removed)...
> > Recently I've started a new job and inherited a network with issues. The
> > main one being 2 gateways. There are 2 nic cards no redundancy between
> DC's
> > and all sorts of issues. I have a 135.11.12.x gateway and a 135.11.20.x
> > gateway and the entire network is 255.255.0.0 subnet. In addition, I have
> > 2nd nic's with 10.10.1.x with 255.255.0.0 ip's with no gateway.
> >
> > I'm trying to figure out the best way to make use of both Gateways. My
> main
> > objective is to try to use the 135.11.20.x as the main and the 135.11.12
> as
> > the secondary. Is there a way I can make use of the 10.10.1.x with the
> > 135.11.12 as the gateway? If for nothing else as for but for redundancy?
> >
> > Some help please.
>
>
>

"1xnyer" <(E-Mail Removed)> wrote in message
news:C290D542-1420-4DB9-A2B5-(E-Mail Removed)...
> More to this story... What I also found out is that second server
connected
> to the 135.11.12.x gateway has RAS installed and is where the VPN firewall
is
> connected. Clients RAS into that server. I can't just take it down, can
I
> however a)multihome that pc adding a nat perhaps
> b)Or perhaps creating a Radius server where that authicates to and then
> allow it to interact with the 135.11.20.x side.
>
> Can you point me in that direction?

No. You have too big a mess for me to sort out.

You need to take care of correcting any basic "every day" networking
problems they have left you first,...before you go making things even more
complicated,...and possibly even more wrong. Having multiple Default
Gateways on a single machine is the first biggest mistake they have done.
Multple Gateways are only done in a Dead Gateway Detection setup, but I have
no way to know that this was what was intended. What is the chance that the
guy you replaced didn't know what he was doing,....created a mess,...and
then left?

--
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/IS...cessRules.html

Microsoft Internet Security & Acceleration Server: Guidance
http://www.microsoft.com/isaserver/t...dance/2004.asp
http://www.microsoft.com/isaserver/t...dance/2000.asp

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.asp
-----------------------------------------------------
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com

In a word big! I am most likely going to redesign everything and change that
sedn gateway to a 10.10 address because there are existing network cards in
these machines that are connected to a 10.10 network. We'll c.

Thanks for your insite.

"Phillip Windell" wrote:

> "1xnyer" <(E-Mail Removed)> wrote in message
> news:C290D542-1420-4DB9-A2B5-(E-Mail Removed)...
> > More to this story... What I also found out is that second server
> connected
> > to the 135.11.12.x gateway has RAS installed and is where the VPN firewall
> is
> > connected. Clients RAS into that server. I can't just take it down, can
> I
> > however a)multihome that pc adding a nat perhaps
> > b)Or perhaps creating a Radius server where that authicates to and then
> > allow it to interact with the 135.11.20.x side.
> >
> > Can you point me in that direction?
>
> No. You have too big a mess for me to sort out.
>
> You need to take care of correcting any basic "every day" networking
> problems they have left you first,...before you go making things even more
> complicated,...and possibly even more wrong. Having multiple Default
> Gateways on a single machine is the first biggest mistake they have done.
> Multple Gateways are only done in a Dead Gateway Detection setup, but I have
> no way to know that this was what was intended. What is the chance that the
> guy you replaced didn't know what he was doing,....created a mess,...and
> then left?
>
> --
> -----------------------------------------------------
> Understanding the ISA 2004 Access Rule Processing
> http://www.isaserver.org/articles/IS...cessRules.html
>
> Microsoft Internet Security & Acceleration Server: Guidance
> http://www.microsoft.com/isaserver/t...dance/2004.asp
> http://www.microsoft.com/isaserver/t...dance/2000.asp
>
> Microsoft Internet Security & Acceleration Server: Partners
> http://www.microsoft.com/isaserver/partners/default.asp
> -----------------------------------------------------
> Phillip Windell [MCP, MVP, CCNA]
> www.wandtv.com
>
>
>

Ok, good luck! Once you have a cleaner and more clear environment it will
be less of a problem to help with specific issues.

--
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/IS...cessRules.html

Microsoft Internet Security & Acceleration Server: Guidance
http://www.microsoft.com/isaserver/t...dance/2004.asp
http://www.microsoft.com/isaserver/t...dance/2000.asp

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.asp
-----------------------------------------------------
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com

"1xnyer" <(E-Mail Removed)> wrote in message
news:75A7F201-E2D8-40A2-BD77-(E-Mail Removed)...
> In a word big! I am most likely going to redesign everything and change
that
> sedn gateway to a 10.10 address because there are existing network cards
in
> these machines that are connected to a 10.10 network. We'll c.
>
> Thanks for your insite.
>
> "Phillip Windell" wrote:
>
> > "1xnyer" <(E-Mail Removed)> wrote in message
> > news:C290D542-1420-4DB9-A2B5-(E-Mail Removed)...
> > > More to this story... What I also found out is that second server
> > connected
> > > to the 135.11.12.x gateway has RAS installed and is where the VPN
firewall
> > is
> > > connected. Clients RAS into that server. I can't just take it down,
can
> > I
> > > however a)multihome that pc adding a nat perhaps
> > > b)Or perhaps creating a Radius server where that authicates to and
then
> > > allow it to interact with the 135.11.20.x side.
> > >
> > > Can you point me in that direction?
> >
> > No. You have too big a mess for me to sort out.
> >
> > You need to take care of correcting any basic "every day" networking
> > problems they have left you first,...before you go making things even
more
> > complicated,...and possibly even more wrong. Having multiple Default
> > Gateways on a single machine is the first biggest mistake they have
done.
> > Multple Gateways are only done in a Dead Gateway Detection setup, but I
have
> > no way to know that this was what was intended. What is the chance that
the
> > guy you replaced didn't know what he was doing,....created a mess,...and
> > then left?
> >
> > --
> > -----------------------------------------------------
> > Understanding the ISA 2004 Access Rule Processing
> > http://www.isaserver.org/articles/IS...cessRules.html
> >
> > Microsoft Internet Security & Acceleration Server: Guidance
> > http://www.microsoft.com/isaserver/t...dance/2004.asp
> > http://www.microsoft.com/isaserver/t...dance/2000.asp
> >
> > Microsoft Internet Security & Acceleration Server: Partners
> > http://www.microsoft.com/isaserver/partners/default.asp
> > -----------------------------------------------------
> > Phillip Windell [MCP, MVP, CCNA]
> > www.wandtv.com
> >
> >
> >