Correct way to setup Internet?

Hi All,

Would this be a good scenario for setting up Internet?

Having a main gig switch with servers (DC's, Exchange 2003 etc.).

Then hanging off this gig switch, a WatchGuard Firewall Box, then attached
to a Cisco 1801 Router?

I have all the equipment but I just wished to check that the network toplogy
/ design would be a good practice. I couldn't find anywhere, diagrams of good
internet connection / router setups.

Watchguard box will server VPN clients with Authentication setup for AD.

Thanks in advance!

Chris.
--
Chris White
United Kingdom

Chris White <(E-Mail Removed)> wrote:
> Hi All,
>
> Would this be a good scenario for setting up Internet?
>
> Having a main gig switch with servers (DC's, Exchange 2003 etc.).
>
> Then hanging off this gig switch, a WatchGuard Firewall Box, then
> attached to a Cisco 1801 Router?
>
> I have all the equipment but I just wished to check that the network
> toplogy / design would be a good practice. I couldn't find anywhere,
> diagrams of good internet connection / router setups.
>
> Watchguard box will server VPN clients with Authentication setup for
> AD.
>
> Thanks in advance!
>
> Chris.


Yes, that's a pretty common configuration.

<internet modem/router>
|
|
<Watchguard doing NAT>
|
|
<-------Ethernet switch------->
| | |
server wksta printer

Hello Chris,

This sounds very common and is a good solution. See also here:
http://support.microsoft.com/kb/323380

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hi All,
>
> Would this be a good scenario for setting up Internet?
>
> Having a main gig switch with servers (DC's, Exchange 2003 etc.).
>
> Then hanging off this gig switch, a WatchGuard Firewall Box, then
> attached to a Cisco 1801 Router?
>
> I have all the equipment but I just wished to check that the network
> toplogy / design would be a good practice. I couldn't find anywhere,
> diagrams of good internet connection / router setups.
>
> Watchguard box will server VPN clients with Authentication setup for
> AD.
>
> Thanks in advance!
>
> Chris.
>

Thanks guys!

What would be the correct settings for the Routing Service (RRAS) or isn't
this required to forward traffic on to the Watchguard Firewall? I guess there
maybe some NIC Configuration required on the DC's?

Just trying to get into my head how traffic is directed towards the Internet.

The Switch is a Layer 3 Dell PowerConnect Gigabit Switch. Nice bit of kit.

Cheers.

--
Chris White
United Kingdom


"Meinolf Weber" wrote:

> Hello Chris,
>
> This sounds very common and is a good solution. See also here:
> http://support.microsoft.com/kb/323380
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
> > Hi All,
> >
> > Would this be a good scenario for setting up Internet?
> >
> > Having a main gig switch with servers (DC's, Exchange 2003 etc.).
> >
> > Then hanging off this gig switch, a WatchGuard Firewall Box, then
> > attached to a Cisco 1801 Router?
> >
> > I have all the equipment but I just wished to check that the network
> > toplogy / design would be a good practice. I couldn't find anywhere,
> > diagrams of good internet connection / router setups.
> >
> > Watchguard box will server VPN clients with Authentication setup for
> > AD.
> >
> > Thanks in advance!
> >
> > Chris.
> >
>
>
>

"Chris White" <(E-Mail Removed)> wrote in message
news:86DDD8F2-D0FD-4903-944D-(E-Mail Removed)...
> Thanks guys!
>
> What would be the correct settings for the Routing Service (RRAS) or isn't
> this required to forward traffic on to the Watchguard Firewall? I guess
> there
> maybe some NIC Configuration required on the DC's?
>
> Just trying to get into my head how traffic is directed towards the
> Internet.
>
> The Switch is a Layer 3 Dell PowerConnect Gigabit Switch. Nice bit of kit.
>
> Cheers.
>
> --
No, you don't need RRAS. The firewall looks after all of that. Simply set
up your network machines to use the firewall as their default gateway. The
DC is just another machine on the LAN.

If you are running AD you will need to set the machines to use the local
DNS. To enable it to resolve foreign URLs as well as local names you need to
set your local DNS to forward to a public DNS server.