Dear Sirs,

For example, a traceroute to yahoo from server with ip address 172.31.0.3 goes through the vsat connection.But when i go to myipaddress.com, i can see  that the connection goes through the ISA server.

Active Directory replications are not being done, since traffic is not going through ISA server.  We have  partners  servers  to which our  AD  servers  replicate.These  partners  say that   replications are not being done because AD replication traffic is not going through ISA server.

I need to make sure AD replication traffic goes through ISA server.

Thanks.

Because the host you want to traverse the ISA server is in the same VLAN as the ISA server you would be better served to make the ISA server the default gateway for hosts that require the functionality you are describing. 

As an alternative you could attempt the topology below.

Option 1
- 3560 default route points to ISA server
- ISA Server default route points to ISA

Option 2
- 3560 default route points to the ASA
- PBR on Server VLAN SVI that selectively sends traffic to ISA server

Chris

http://travelingtech.net

Dear Sir,

Thanks for the  reply.Option 2  is  what  is  being  done  now. But  with  that  option   PBR on Server VLAN SVI does not selectively sends traffic to ISA server.Some times it does but after a few minutes it sends the traffic do the default route pointing to ASA.

For AD replications to work i need traffic for servers to be permanently sent to ISA server.The servers can not have the ISA server as their def gateway because in that case they will no more be accessible to users vlans.