multiple NIC multiple ISP

Hi all,
I currently have a W2K3 server running with 2 NICs - one is to my internal
LAN (192.168.1.x) and one to the "outside world" via a router (192.168.5.x).
I have a public static address on the other side of the 192.168.5.x router
with port forwarding for ISA/email, etc.
I want to put in another NIC attached to another router (192.168.6.x) which
will have a new static public address on the other side. This will be a
faster pipe, but not as reliable as my primary pipe. I want to split my
traffic - ISA stuff out the 192.168.6.x and email on the 192.168.5.x. I
I figure I can set the routers up to port forward, but my concern is in the
server itself - how is DNS handled?
Can I tell the ISA to go out a specified path?
have never gone with 3 NICs before - just 2...
Thanks,
Jerry

In this case you may need dual WAN router. This link may help,

what is
What is Dual WAN or Load Balance Router? What is svchost.exe? What is the Group Policy Management Console? Previous Page Next Page. Related Topics ...
http://www.howtonetworking.com/whatis/whatis.htm - Similar pages

What's Dual WAN or Load Balance Router
A Dual WAN router or called Load Balance Router allows a router to use multiple paths to a destination when forwarding packets. With the ability to connect ...
http://www.howtonetworking.com/whati...wanrouter1.htm


Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
"Jerry Dubuke" <(E-Mail Removed)> wrote in message news:(E-Mail Removed)...
Hi all,
I currently have a W2K3 server running with 2 NICs - one is to my internal
LAN (192.168.1.x) and one to the "outside world" via a router (192.168.5.x).
I have a public static address on the other side of the 192.168.5.x router
with port forwarding for ISA/email, etc.
I want to put in another NIC attached to another router (192.168.6.x) which
will have a new static public address on the other side. This will be a
faster pipe, but not as reliable as my primary pipe. I want to split my
traffic - ISA stuff out the 192.168.6.x and email on the 192.168.5.x. I
I figure I can set the routers up to port forward, but my concern is in the
server itself - how is DNS handled?
Can I tell the ISA to go out a specified path?
have never gone with 3 NICs before - just 2...
Thanks,
Jerry

"Jerry Dubuke" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> I currently have a W2K3 server running with 2 NICs - one is to my internal LAN
> (192.168.1.x) and one to the "outside world" via a router (192.168.5.x).
> I have a public static address on the other side of the 192.168.5.x router
> with port forwarding for ISA/email,

ISA is doing Static NAT (Reverse NAT) for the mail. There is really no such
thing as port forwarding, that term is just meaningless home user "techno-slang"
invented by Marketing when the home user broadband boxes got popular. The focus
of the action is on the IP#s not the port numbers,...the ports aren't doing
anything. It is a Layer3 function, not a Layer4.
But that wasn't what you were asking about.....

> I want to put in another NIC attached to another router (192.168.6.x) which
> will have a new static public address on the other side. This will be a faster
> pipe, but not as reliable as my primary pipe. I want to split my traffic - ISA
> stuff out the 192.168.6.x and email on the 192.168.5.x. I

Not possible.
1. they would have to be on separate subnets.
2. there is no mechanism to tell it to use one path for one protocol and
another path
for a different protocol.
3. Routing is based on the Destiantion's Layer3 Address (IP#),...not on the
Layer4
protocol being used.

> Can I tell the ISA to go out a specified path?

Sorta,...kinda,...but in this context you are asking in,...no.

--
Phillip Windell
www.wandtv.com

The views expressed, are my own and not those of my employer, or Microsoft, or
anyone else associated with me, including my cats.
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/IS...cessRules.html

Troubleshooting Client Authentication on Access Rules in ISA Server 2004
http://download.microsoft.com/downlo...7/ts_rules.doc

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.asp

Microsoft ISA Server Partners: Partner Hardware Solutions
http://www.microsoft.com/forefront/e...epartners.mspx
-----------------------------------------------------

thanks for the info - will look into this!
Jerry

"Robert L [MVP - Networking]" <(E-Mail Removed)> wrote in message news:(E-Mail Removed)...
In this case you may need dual WAN router. This link may help,

what is
What is Dual WAN or Load Balance Router? What is svchost.exe? What is the Group Policy Management Console? Previous Page Next Page. Related Topics ...
http://www.howtonetworking.com/whatis/whatis.htm - Similar pages

What's Dual WAN or Load Balance Router
A Dual WAN router or called Load Balance Router allows a router to use multiple paths to a destination when forwarding packets. With the ability to connect ...
http://www.howtonetworking.com/whati...wanrouter1.htm


Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
"Jerry Dubuke" <(E-Mail Removed)> wrote in message news:(E-Mail Removed)...
Hi all,
I currently have a W2K3 server running with 2 NICs - one is to my internal
LAN (192.168.1.x) and one to the "outside world" via a router (192.168.5.x).
I have a public static address on the other side of the 192.168.5.x router
with port forwarding for ISA/email, etc.
I want to put in another NIC attached to another router (192.168.6.x) which
will have a new static public address on the other side. This will be a
faster pipe, but not as reliable as my primary pipe. I want to split my
traffic - ISA stuff out the 192.168.6.x and email on the 192.168.5.x. I
I figure I can set the routers up to port forward, but my concern is in the
server itself - how is DNS handled?
Can I tell the ISA to go out a specified path?
have never gone with 3 NICs before - just 2...
Thanks,
Jerry

Jerry,

The rule for somehting like this is to always let the equipment do what it
is best at. In this case, having the windows server be the nexxus between
all of the different services isn't the best use of technology. This is what
routers do, and do well. When considering multiple ISPs you should always
think BGP on the EGP side and maybe iBGP on the inside to a contiguous
internal IP addressing space. This means your servers have a single IP
address and talk to the routers through NAT that they control.

This is the best, most scalable configuration. If you are big enough to
need multiple ISPs then you are big enough to need BGP. If you are in the
cisco x800 class routers consider buying more memory an dpulling the whole
table. Otherwise you'd move tothe 7x00 platform where you;d have more
options. Even the 6500 chassis with the right cards can get you there.

Look into your options and leverage the equipment you have rather than
forcing windows to do something it wasn't designed to do on an enterprise
scale.

--
Ryan Hanisco
MCSE, MCTS: SQL 2005, Project+
Chicago, IL


"Jerry Dubuke" wrote:

> Hi all,
> I currently have a W2K3 server running with 2 NICs - one is to my internal
> LAN (192.168.1.x) and one to the "outside world" via a router (192.168.5.x).
> I have a public static address on the other side of the 192.168.5.x router
> with port forwarding for ISA/email, etc.
> I want to put in another NIC attached to another router (192.168.6.x) which
> will have a new static public address on the other side. This will be a
> faster pipe, but not as reliable as my primary pipe. I want to split my
> traffic - ISA stuff out the 192.168.6.x and email on the 192.168.5.x. I
> I figure I can set the routers up to port forward, but my concern is in the
> server itself - how is DNS handled?
> Can I tell the ISA to go out a specified path?
> have never gone with 3 NICs before - just 2...
> Thanks,
> Jerry
>
>
>