Comments on: Office Communications Server 2007 Enterprise Deployment - Part 4

By: Elan Shudnow

Elan Shudnow — Thu, 25 Sep 2008 12:41:07 +0000

Thank you for your kind words. Please check out the following blog post which gives great instructions on creating the SRV record:
http://blogs.msdn.com/byrons/archive/2007/10/04/test.aspx

By: bharat c

bharat c — Thu, 25 Sep 2008 10:02:42 +0000

It is a very nice post .. thanks for helping us out.
I went to develop OCServer with my virtual server , i have completed most of the steps described above. but i got stuck at one step that is configure SRV for server.
when i try to create a SRV record i could not find _sipinternaltls service in dropdown list. how it could it possible? i have installed DC & OCS on diffrent VPC. Is this the problem to figure out _sipinternaltls?

By: DariusCyrus

DariusCyrus — Fri, 15 Aug 2008 14:58:32 +0000

Thanks.

I’m sure I included the 192.x.x.x range when installing ISA.

I’ll do internal to see that. And dig in more to find out the problem. If I find out more information, I’ll let you know.

By: Elan Shudnow

Elan Shudnow — Thu, 14 Aug 2008 22:17:27 +0000

Probably because when you installed ISA and chose your internal IP range, you included your DMZ IP range. IPs that belong to your internal subnet range only show up as Internal and all others show up when you select External. If one NIC is in DMZ and 1 is in Internal Network, make your sure DMZ subnet isn’t included in your Internal Subnet information in ISA. If you have no DMZ, then you can just choose Internal instead of External and have the static NAT with the Internet IP go to the IP that’s specified as Internal on your Listener.

By: DariusCyrus

DariusCyrus — Thu, 14 Aug 2008 20:41:01 +0000

Another great article man!

I have a question with the Web Listener part…

I followed your steps and selected “External” and then clicked on “Select IP Address”..

however, there are no IPs in the “Available IP Addresses” field…

Could you please advise?

Thanks.

By: Elan Shudnow

Elan Shudnow — Fri, 01 Aug 2008 03:21:03 +0000

Thanks! The way I would configure ISA in a production environment is:
2 NICs
1 NIC in NAT DMZ
1 NIC in Corporate Subnet
Corporate NIC on the top of the binding order and with DNS configured
DMZ NIC second on the bidning order with no DNS configured with default gateway
Static Routes so all internal subnetted trafic goes to an internal router that can route to all internal subnets
Have a public internet routable IP address NAT’d to your DMZ NIC
Have the ExtWebFarm.domain.com DNS point to the public IP which will get NAT’d to your DMZ NIC and will then get proxied to your internal servers through the rule you have configured.

By: akatz0813

akatz0813 — Fri, 01 Aug 2008 01:45:17 +0000

Amazing posts so far!! Can’t wait for Part 5. Could you post a visio network topology diagram of how the interfaces should be setup? I am particularly interested to know whether the ISA should bridge the outside and internal or dmz and internal.

Thanks!!