I've Just Installed ISA 2006 Firewall in Hyper-V RC1
After installing TMG Beta 1 in Hyper-V RC1, I've decided to try a simple ISA 2006 Firewall lab in Hyper-V RC1.
I must say that Hyper-V seems pretty damn fast and my simple ISA lab did not encounter any major issues.
I've been using for a long time VMware products, but I'm starting to be convinced/seduced by the new Hyper-V.
Having an ISA lab on my laptop is quite important, because I can test various settings, topologies and I can prepare a configuration file for a production environment.
With Jim Harrison's post on my mind I've proceeded:
Simple lab, two VMs:
- a VM on which to install Windows Server 2003 R2 SP2 x32 Enterprise Edition for the DC of this lab.
- a VM on which to install Windows Server 2003 R2 SP2 x32 Standard Edition for the ISA 2006 Firewall.
So I have the following Virtual Networks in Hyper-V, see Figure1.
Figure1: Hyper-V: Virtual Networks
The NICs on the host machine look like in Figure2 (I'm using my wireless adapter on my laptop, if you want more details see my TMG lab).
Figure2: Network Adapters on the Host
I've created a VM on which to install Windows Server 2003 R2 SP2 x32 Enterprise Edition for the DC of this lab.
I've used a Network Adapter for it and the "VN1" virtual network, see Figure4.
Figure4: Hyper-V: DC VM Settings
And installed Windows Server 2003 R2 SP2 x32 Enterprise Edition on it and configured it as a DC. No major problems here, see Figure5.
Figure5: Hyper-V: My DC VM up and running
Then I've created a VM on which to install Windows Server 2003 R2 SP2 x32 Standard Edition for the ISA 2006 Firewall.
I've used two Network Adapters for it: "BridgeVN" and "VN1" virtual networks. Syntethic NICs, see Figure6.
Figure6: Hyper-V: ISA 2006 VM Settings
The installation of Windows Server 2002 R2 SP2 x32 Standard Edition completed without problems.
And so did the installation of ISA 2006 Firewall (domain member). I did not touch the registry on the ISA VM, see Figure7.
Figure7: Hyper-V: ISA 2006 VM up and running
Internet connectivity for VMs behind ISA is fine, see Figure8.
Figure8: Hyper-V: ISA 2006 Log Web Access Internal Client
I did a quick test for inbound access from the Windows XP SP3 VM created for the TMG lab (I've published an IIS 6 web server), test which was successful, see Figure9 and Figure10.
Figure9: Hyper-V: XP VM - Access the Web Server Published through ISA
Figure10: Hyper-V: ISA 2006 Log Web Server Published through ISA
VPN Remote Access works without major problems too, see Figure11 and Figure12.
Figure11: Hyper-V: XP VM - PPTP VPN Connection
Figure12: Hyper-V: ISA 2006 Log PPTP VPN Connection