Hi,
Thanks for your reply. Would you please post the results of running"ipconfig/all" on the TMG server and a server in each VLAN?
Best regards,
Susie
Hi Susie,
Apologize for the delay. The ipconfig info is below. I think I still need to configure / think of the TMG as a router so to speak. The INT_LAN NIC should probably be assigned a private IP address like 200.1.1.1. It should be connected to the 3750 on a routed
port with an IP of something like 200.1.1.2, not a switch port, and some type of static route configured so it can act as a true router / firewall. I just need to wrap my brain around configuring this setup.
TMG Server:
Windows IP Configuration
Host Name . . . . . . . . . . . . :
Primary Dns Suffix . . . . . . . : skincdc.com
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : skincdc.com
hsd1.dc.comcast.net.
Ethernet adapter INT_LAN:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : vmxnet3 Ethernet Adapter #3
Physical Address. . . . . . . . . : 00-0C-29-C1-DF-B1
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv4 Address. . . . . . . . . . . : 10.0.10.1(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : 10.0.10.9
NetBIOS over Tcpip. . . . . . . . : Enabled
Ethernet adapter DMz:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : vmxnet3 Ethernet Adapter
Physical Address. . . . . . . . . : 00-0C-29-C1-DF-BB
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv4 Address. . . . . . . . . . . : 192.168.0.1(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : 192.168.0.9
NetBIOS over Tcpip. . . . . . . . : Enabled
Ethernet adapter XFINITY_INet:
Connection-specific DNS Suffix . : hsd1.dc.comcast.net.
Description . . . . . . . . . . . : vmxnet3 Ethernet Adapter #2
Physical Address. . . . . . . . . : 00-0C-29-C1-DF-C5
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IPv4 Address. . . . . . . . . . . : 69.(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.254.0
Lease Obtained. . . . . . . . . . : Monday, September 15, 2014 3:31:05 AM
Lease Expires . . . . . . . . . . : Friday, September 19, 2014 3:31:05 AM
Default Gateway . . . . . . . . . : 69.
DHCP Server . . . . . . . . . . . : 69.
DNS Servers . . . . . . . . . . . : 127.0.0.1
NetBIOS over Tcpip. . . . . . . . : Enabled
Internal VLAN 10 F&P Server:
Windows IP Configuration
Host Name . . . . . . . . . . . . :
Primary Dns Suffix . . . . . . . : skincdc.com
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : skincdc.com
Ethernet adapter Ethernet:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : vmxnet3 Ethernet Adapter
Physical Address. . . . . . . . . : 00-0C-29-04-A3-CE
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::dc4:97e5:5f7a:d074%12(Preferred)
IPv4 Address. . . . . . . . . . . : 10.0.10.12(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 10.0.10.1
DHCPv6 IAID . . . . . . . . . . . : 301993001
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-1B-5D-18-09-00-0C-29-04-A3-CE
DNS Servers . . . . . . . . . . . : 10.0.10.9
NetBIOS over Tcpip. . . . . . . . : Enabled
Tunnel adapter isatap.{27CD176D-0080-4CCD-920B-D03C5A09EB25}:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
VLAN 5 DMz DNS Server:
Windows IP Configuration
Host Name . . . . . . . . . . . . :
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
Ethernet adapter Ethernet:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : vmxnet3 Ethernet Adapter
Physical Address. . . . . . . . . : 00-0C-29-B5-67-1E
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv4 Address. . . . . . . . . . . : 192.168.0.9(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.1
DNS Servers . . . . . . . . . . . : 192.168.0.9
NetBIOS over Tcpip. . . . . . . . : Enabled
Tunnel adapter isatap.{91E3F742-20C5-4DBA-A792-9D842D999267}:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
-SK