How to Configure SBS for Dedicated Connection to the Internet

• Microsoft BackOffice Small Business Server versions 4.0, 4.0a, 4.5

SUMMARY

This article describes the changes necessary to configure a Small Business Server (SBS) server to connect to the Internet using a network interface card (NIC) for a dedicated connection instead of using a modem to dial out.

By default, SBS configures a modem-based dial-up connection for connectivity to the Internet. This dial-up connection is also used by Microsoft Proxy Server and Microsoft Exchange Server for bandwidth sharing and to deliver and receive mail.

It is possible to configure SBS to use a NIC to access the internet in situations where a dedicated permanent connection to the internet is available through a LAN-based IP Routing device.

MORE INFORMATION

To make SBS use a second NIC to access the Internet, follow these steps:

NOTE: While it is possible to achieve similar results with only one NIC, it is not advisable because of the inherent security risk to your internal network. This is also not a supported configuration, as far as Proxy Server is concerned.

1. Install SBS normally with one compatible NIC and modem.



2. After the installation finishes successfully, shut down the server and add the second NIC along with the appropriate drivers.



3. Set the network settings:
   
   
   1. In Control Panel, double-click Network, click the Protocols tab, select TCP/IP Protocol, and then click Properties.
   
   
   
   2. On the IP Address tab, remove the Default Gateway address of *10.0.0.2 from the internal NIC.
   
   
   
   3. On the WINS Address tab, populate both the primary and secondary WINS addresses for the internal NIC with the *10.0.0.2 address.
   
   
   
   4. On the IP Address tab, select the external NIC from the Adapters drop-down list, and set a valid IP address.
   
   
   
   5. Set the new Default Gateway address to the address of your router.
   
   
   
   6. Add any DNS server addresses that your ISP provides.
   
   
   
   7. Do not populate the WINS server address for this NIC.
   
   
   
   8. Do not turn on IP forwarding.
   
   
   * NOTE: This assumes the default IP address of 10.0.0.2 is being used. If the default IP address has been changed, verify the procedure by following information in the following Microsoft Knowledge Base article:

   Q194562 Change the Default IP Address in Small Business Server




4. Set the proxy settings:
   
   
   1. In WebProxy settings in Internet Service Manager, verify that the external NIC's address does not show up in the Proxy's Local address Table (LAT). If it does, remove it.
   
   
   
   2. Configure Proxy AutoDial not to have a phonebook entry to dial, and clear the dialout credentials.
   
   
   
   3. Disable Proxy Dial on Demand.
   
   
   



5. Configure Exchange. If the Exchange IMS is configured to dial out, it will have to be changed to connect through the LAN. Use the following steps to accomplish this:
   
   
   1. In the Exchange Administrator program, select the Internet Mail Service (IMS) under configuration\connections and press ENTER. This will present the IMS properties screen.
   
   
   
   2. Click the Dial-up Connections tab and click to clear the connection that is selected under the Available Connections section.
   
   
   
   3. Click the Connections tab and verify that the Dial Using check box, located in the Message Delivery section, is not selected.
   
   
   

Q164882 Practical Recommendations for Securing Internet-Connections

Additional query words:

Keywords :
Version : winnt:4.0,4.0a,4.5
Platform : winnt
Issue type : kbinfo