using 2 internet connections

[Guest]

Actual

w2k domain D

Location A
subnet a.b.c.d
1st internet connection (fast) -gateway1-firewall, router, VPN, SMTP and
proxy (Borderware machine) connected to LAN switch
pdc w2k domain D - dns, DHCP with scope: DNS, WINS, GW 1
servers: w2k + winsrv2003
workstations: w2k, xp
laptops: xp
workstations + laptops -> deafault gw1 from DHCP

2nd internet connection(very fast) - gateway2 - firewall, router (D-Link
DI-604) connected to LAN switch

Location B
subnet a.b.x.y
3rd internet connection - gateway3-firewall, VPN, SMTP and proxy (Borderware
machine) connected to LAN switch
adc w2k domain D - dns, DHCP with scope: DNS, WINS, GW 3
servers: w2k
workstations: w2k, xp
laptops: xp
workstations + laptops -> deafault gw3 from DHCP

Location A + Location B
VPN GW <-> GW3 (Borderware + SSH client)

Wanted

Only in location A

3rd internet connection to be used for location A for HTTP, FTP and POP

All the servers have static GW1
I changed the scope from GW 1 to GW2:
a) all wkst+laptops browse internet through gw2 (very fast everybody
happy)
b) LAN available on a.b.c.d
C) wkst+laptops cannot see anymore Location B, ping doesn't work,
NETBIOS doesn't work
d) wkst+laptops from location B cannot see anymore wkst+laptops Location
A (servers Location A -YES)

If I change GW-dhcp from GW2 to GW1 everything comes back to normal.

Any suggestion?

Borderware machine does not support a second internet connection.

Any help would be higly appreciated.

Thank you.

Andrei G

 

[Guest]

I'm sorry.
Correction.

Wanted

Only in location A

2nd internet connection to be used for location A for HTTP, FTP and POP

 

[Phillip Windell]

I already answered this in another group. Do not post the same message to
more than one group unless it is "cross-posted". You are better off picking
the most relevant group and posting only to it. Many of these related
groups have all the same people answering the questions anyway.

Here is the reply from the other group.

I changed the scope from GW 1 to GW2:
a) all wkst+laptops browse internet through gw2 (very fast everybody
happy)
b) LAN available on a.b.c.d

That is fine. That is one correct way to do it

C) wkst+laptops cannot see anymore Location B, ping doesn't work,
NETBIOS doesn't work
d) wkst+laptops from location B cannot see anymore wkst+laptops Location
A (servers Location A -YES)

GW2 needs a Static route added to its routing table that tells it where the
Location B is. It needs to know that the path for Location B is the GW1 and
not the Internet. Since Location B has only one GW (GW3) there should not
be anything to configure on that end.

If the above suggestion doesn't work then...
For this type of problem we need to know:
1. The "private side" IP#s of each Gateway (public IP# not needed).
2. The real IPsubnet(s) used
3. If there is a LAN router involved, where it is, how it is used
(This is all topology and mostly Layer3 information)

But we would not need to know:
1. Any computer's OS (unless you made a router out of a computer)
2. If there is a Domain
3. ..anything about DNS, DHCP, WINS
(Networks exist and function even without any computers on them, it only
takes routers, hub/switches, and cables)

 

[Guest]

Thank you Phillip.
I'll keep in mind your advice.

Regards,

Andrei G

 

[Guest]

Hey Philip.
I solved it like this.
I left the gw1 default as given by the dhcp server.
GW2 does not support routing.
I have placed between gw2 and location A a xp machine.
I have installed a simple proxy on it.
I forced all the IEs from wkst to go through it.
Everything works perfect now.
I have to figure out how to setup the laptops because the mobile users
cannot afford to have a fixed proxy.
Thank you anyway.

Cheers,

Andrei G

 

[Phillip Windell]

Hey Philip.
I solved it like this.
I left the gw1 default as given by the dhcp server.
GW2 does not support routing.
I have placed between gw2 and location A a xp machine.
I have installed a simple proxy on it.
I forced all the IEs from wkst to go through it.
Everything works perfect now.
I have to figure out how to setup the laptops because the mobile users
cannot afford to have a fixed proxy.

Yes you can over come that with a proxy as you have. I have a slightly
similar situation with using ISA as one "way" out to the Internet, along
with a NAT box as an alternate "way" out to the Internet.

 

[Guest]

Hey Phillip,

Do you know a way how to broadcast from dhcp the proxy server as a scope?
Is it possible?
Thank you very much in advance.

Andrei G

 

[Phillip Windell]

I know of it, but don't know the specific steps by memory. It can be done
with either DHCP or with DNS (or both at the same time). The are two steps
to it,...the first step enables the client to "automatically" find the
configuration script, in the second step the configuration script, after it
is found, enables the Client to "automatically" find the proxy.

You can probably find details that are ISA centric on www.isaserver.org and
also on MS's site. The principles should be the same for any brand of proxy.
One keyword that would help locate details on those sites would be the
acronym "WPAD".

 

[Guest]

Dear Phillip,

You really helped me a lot today.
Thank you very much.

Cheers,

Andrei G

I know of it, but don't know the specific steps by memory. It can be done
with either DHCP or with DNS (or both at the same time). The are two steps
to it,...the first step enables the client to "automatically" find the
configuration script, in the second step the configuration script, after it
is found, enables the Client to "automatically" find the proxy.

You can probably find details that are ISA centric on www.isaserver.org and
also on MS's site. The principles should be the same for any brand of proxy.
One keyword that would help locate details on those sites would be the
acronym "WPAD".


--

Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com

Hey Phillip,

Do you know a way how to broadcast from dhcp the proxy server as a scope?
Is it possible?
Thank you very much in advance.

Andrei G