Slow access to server?

[+BudMan MVC]

And whats the IP address of the gateway for the 10.87 network and mask??? Again you can not just talk to a gateway that is NOT on your network!! The mask of the 10.83 network does not overlap with those 10.87 IPs. So they can NOT talk to each other without routing. For sure once you leave a layer 2 lan!! Do they have their own gateway on the 10.87??

And you normally don't use proxies in 1 arm bandit mode ;) With the same exact address as the ingress and egress IPs.. Sure if want to run different IP space on the interface - one as entrance other as exit, ok maybe not the best option - but does work.

Im glad you can get rid of the 192 and put yourself back to how it was -- but it still sounds like a complete and utter cluster F___!

[game_over]

So what would you suggest i do here? If i'm going to do it i may as well do it properly :)

[+BudMan MVC]

I agree you need to do it the proper way.. There should be a gateway for machines on the 10.87 network to talk to - on that network.. Its not possible for them to get off the 10.87 network without that.. So only way they would be able to talk to anything off the 10.87 network would be a proxy on the 10.87 network.

Which I from my understanding the netpilotcache thing is on the 10.83... So Its seems impossible to me that these boxes are doing anything other than talking to other boxes on the 10.87 network.

What is config off one of these machines? Does your ISP connection have more than that 10.83.112.1 IP address? Does it have one on the 10.87 network as well?

Did you ever get a config off your 3550 switch, or your 3coms?

[game_over]

I agree you need to do it the proper way.. There should be a gateway for machines on the 10.87 network to talk to - on that network.. Its not possible for them to get off the 10.87 network without that.. So only way they would be able to talk to anything off the 10.87 network would be a proxy on the 10.87 network.

Which I from my understanding the netpilotcache thing is on the 10.83... So Its seems impossible to me that these boxes are doing anything other than talking to other boxes on the 10.87 network.

What is config off one of these machines? Does your ISP connection have more than that 10.83.112.1 IP address? Does it have one on the 10.87 network as well?

Did you ever get a config off your 3550 switch, or your 3coms?

I don't know the exact config of the 10.87, we can basically just forget about those.. they are configured to work, i don't own the machines, they are locked down and fully managed by the local authority. That is the Admin side. Im really only interested in the Curriculum side (10.83). So as far as i'm aware i need to drop the ISA Server, uninstall firewall client from machines. Change the IP range of DHCP to 10.83 rather than 192.168. setup the statics, change client proxy settings which should adopt 10.83.112.X / 255.255.240.0 / Gateway: 10.83.112.1

I can't find a cable for for the switches so struggling to get config. will sort it asap though.

[+BudMan MVC]

Yup that sounds correct.. The only question I have is how does the netcachepilot thing come into to play?? Are the clients on the 10.83 pointing to it as just a proxy? That does not filter other types of access then - unless there is some kind of filter at 10.83.112.1 that only allows the netpilot thing to talk outbound?

[game_over]

Yup that sounds correct.. The only question I have is how does the netcachepilot thing come into to play?? Are the clients on the 10.83 pointing to it as just a proxy? That does not filter other types of access then - unless there is some kind of filter at 10.83.112.1 that only allows the netpilot thing to talk outbound?

yes thats correct

it's primary use in our environment is blocking and allowing certain websites using smoothwall url filtering.

[+BudMan MVC]

I understand its purpose -- so your saying you access it via proxy setting.. And if you don't use that proxy, then you can not access the internet.

edit: even when on the 10.83 and a gateway pointing to 10.83.112.1

[game_over]

I understand its purpose -- so your saying you access it via proxy setting.. And if you don't use that proxy, then you can not access the internet.

edit: even when on the 10.83 and a gateway pointing to 10.83.112.1

yes, we originally used the cachepilot:8000 settings, if the client didnt have this in proxy settings internet couldn't be accessed