static NAT

Hi,

does someone know how to achive static NAT(RRAS) with public IP(servers).

when connection came to port 110 on server1 that that connection is
redirected to server2 on port 110.

It isn't that simple. What things are and where they are physically located
and what they do makes a difference. Forget the "port stuff",..it isn't
about ports,..it is about IP#s with the ports being secondary. When
something comes in to the RRAS box on the Public IP# on a particualr port#
is gets passed back to an machine on the LAN at a different IP# with the
same Port#.

Static NAT does not change Port#s

PAT changes Port#s,...PAT only works in combination with Static NAT, but
never "stand-alone".

In RRAS I believe it uses the term "configuring services" or something like
that to refer to Static NAT. It will only work if the network is designed
properly and you are doing it according to the way it should be done.

--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com


"Darko Bazulj" <(E-Mail Removed)> wrote in message
news:O6Jht%(E-Mail Removed)...
> Hi,
>
> does someone know how to achive static NAT(RRAS) with public IP(servers).
>
> when connection came to port 110 on server1 that that connection is
> redirected to server2 on port 110.
>
>

According to your diagram,...no you can't do it that way.

The RRAS box needs to be acting as the NAT Device (Internet Sharing Device)
for the LAN and will have to have an external Nic on the Untrusted side and
in internal Nic on the Trusted Side. The traffic will have to come in on
the Untrusted side and then the SMTP Server will have to exist on the
internal Trusted LAN and the RRAS would pass the SMTP traffic back to it.

You diagram does not depict this scenario.

--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com
-----------------------------------------------------


"Darko Bazulj" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Hi Philip,
>
> i want to achive next(see attached pictures)
>
> when somethig came on IP 3.4.5.2 on port 110(server1-RRAS) that those
> packets are mapped to IP 3.4.5.7 on port 110(server2).
>
> I can achive that with WinGate in a second.
> Same thing with http://www.pocketsoap.com/tcptrace/
>
> Can I do that with RRAS?
>
> I tried RRAS/NAT --> services & ports but without success
>
> When I have public to private IP that work fine but I need public to
public
> IP.
>
> Thanks for help.
>
> Regards,
> Darko Bazulj
>
>
>
>

Installing security update MS05-019 or Windows Server 2003 Service Pack 1
may cause network connectivity between clients and servers to fail
http://support.microsoft.com/kb/898060


--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com


"Darko Bazulj" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Hi Philip,
>
> i want to achive next(see attached pictures)
>
> when somethig came on IP 3.4.5.2 on port 110(server1-RRAS) that those
> packets are mapped to IP 3.4.5.7 on port 110(server2).
>
> I can achive that with WinGate in a second.
> Same thing with http://www.pocketsoap.com/tcptrace/
>
> Can I do that with RRAS?
>
> I tried RRAS/NAT --> services & ports but without success
>
> When I have public to private IP that work fine but I need public to
public
> IP.
>
> Thanks for help.
>
> Regards,
> Darko Bazulj
>
>
>
>

Ignore that. It got posted to the wrong thread.
Sorry,

--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com

Hi Phillip,

thought it isn't possible but I needed to ask(maybe I missed something).

Now I start to play with ISA2004/publishing.
If you have any suggestion with ISA just tell.

Thanks for help.

Regards,
Darko Bazulj

"Darko Bazulj" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Now I start to play with ISA2004/publishing.
> If you have any suggestion with ISA just tell.

ISA needs to be on the "edge" of the Network. The public Internet User
needs to be able to get to the ISA's External nic. If there is a
Back-to-Back DMZ then the outer firewall must use Static NAT to get the
traffic back to the ISA.

The Publishing Features vary with what you are actually doing. There is no
"one-size-fits-all" answer.

Microsoft ISA Server: Publishing
http://www.microsoft.com/isaserver/t...ublishing.mspx


--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/IS...cessRules.html

Troubleshooting Client Authentication on Access Rules in ISA Server 2004
http://download.microsoft.com/downlo...7/ts_rules.doc

Microsoft Internet Security & Acceleration Server: Guidance
http://www.microsoft.com/isaserver/t...dance/2004.asp
http://www.microsoft.com/isaserver/t...dance/2000.asp

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.asp

Deployment Guidelines for ISA Server 2004 Enterprise Edition
http://www.microsoft.com/technet/pro...isaserver.mspx
-----------------------------------------------------

Hi Philllip,

I resolved my problem with tcptrace.exe, srvany.exe and instsrv.exe(working
perfect).

Thanks for help.

Regards,
Darko Bazulj


"Phillip Windell" <@.> wrote in message
news:(E-Mail Removed)...
> "Darko Bazulj" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
>> Now I start to play with ISA2004/publishing.
>> If you have any suggestion with ISA just tell.
>
> ISA needs to be on the "edge" of the Network. The public Internet User
> needs to be able to get to the ISA's External nic. If there is a
> Back-to-Back DMZ then the outer firewall must use Static NAT to get the
> traffic back to the ISA.
>
> The Publishing Features vary with what you are actually doing. There is no
> "one-size-fits-all" answer.
>
> Microsoft ISA Server: Publishing
> http://www.microsoft.com/isaserver/t...ublishing.mspx
>
>
> --
> Phillip Windell [MCP, MVP, CCNA]
> www.wandtv.com
> -----------------------------------------------------
> Understanding the ISA 2004 Access Rule Processing
> http://www.isaserver.org/articles/IS...cessRules.html
>
> Troubleshooting Client Authentication on Access Rules in ISA Server 2004
> http://download.microsoft.com/downlo...7/ts_rules.doc
>
> Microsoft Internet Security & Acceleration Server: Guidance
> http://www.microsoft.com/isaserver/t...dance/2004.asp
> http://www.microsoft.com/isaserver/t...dance/2000.asp
>
> Microsoft Internet Security & Acceleration Server: Partners
> http://www.microsoft.com/isaserver/partners/default.asp
>
> Deployment Guidelines for ISA Server 2004 Enterprise Edition
> http://www.microsoft.com/technet/pro...isaserver.mspx
> -----------------------------------------------------
>
>
>