Re: Alerts Setting up ISA 2004

Exactly what is listed in your Internal network?

 Jim Harrison
 MCP(NT4, W2K), A+, Network+, PCG
 http://www.microsoft.com/isaserver
 http://isaserver.org/Jim_Harrison
 http://isatools.org

 Read the help, books and articles!
----- Original Message ----- 
From: "Chris H" <ntpro@xxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Friday, July 30, 2004 10:11
Subject: [isalist] Re: Alerts Setting up ISA 2004


http://www.ISAserver.org

Tom,

Now I am gettng the error on the External interface ...

ISA Server detected routes through adapter "External" that do not correlate
with the network element to which this adapter belongs. The address ranges
in conflict are:
10.0.0.0-10.48.255.255;10.50.0.0-10.51.0.255;10.51.12.0-10.255.255.254;194.247.124.0-194.247.124.255;.
Fix the network element and/or the routing table to make these ranges
consistent; they should be in both or in neither. If you recently created a
remote site network, check if the event recurs. If it does not, you may
safely ignore this message

Here is my route table:

ctive Routes:
etwork Destination        Netmask          Gateway       Interface  Metric
         0.0.0.0          0.0.0.0    66.42.146.253     66.42.146.68     20
       10.49.0.0      255.255.0.0        10.49.4.3        10.49.4.3     20
       10.49.0.0  255.255.255.255      10.49.1.254        10.49.4.3      1
       10.49.4.3  255.255.255.255        127.0.0.1        127.0.0.1     20
       10.51.1.0    255.255.255.0      10.49.1.254        10.49.4.3      1
       10.51.2.0    255.255.255.0      10.49.1.254        10.49.4.3      1
       10.51.3.0    255.255.255.0      10.49.1.254        10.49.4.3      1
       10.51.4.0    255.255.255.0      10.49.1.254        10.49.4.3      1
       10.51.5.0    255.255.255.0      10.49.1.254        10.49.4.3      1
       10.51.6.0    255.255.255.0      10.49.1.254        10.49.4.3      1
       10.51.7.0    255.255.255.0      10.49.1.254        10.49.4.3      1
       10.51.8.0    255.255.255.0      10.49.1.254        10.49.4.3      1
       10.51.9.0    255.255.255.0      10.49.1.254        10.49.4.3      1
      10.51.10.0    255.255.255.0      10.49.1.254        10.49.4.3      1
      10.51.11.0    255.255.255.0      10.49.1.254        10.49.4.3      1
  10.255.255.255  255.255.255.255        10.49.4.3        10.49.4.3     20
     66.42.146.0    255.255.255.0     66.42.146.68     66.42.146.68     20
    66.42.146.68  255.255.255.255        127.0.0.1        127.0.0.1     20
    66.42.146.69  255.255.255.255        127.0.0.1        127.0.0.1     20
    66.42.146.70  255.255.255.255        127.0.0.1        127.0.0.1     20
    66.42.146.71  255.255.255.255        127.0.0.1        127.0.0.1     20
  66.255.255.255  255.255.255.255     66.42.146.68     66.42.146.68     20
       127.0.0.0        255.0.0.0        127.0.0.1        127.0.0.1      1
   194.247.124.0    255.255.255.0      10.49.1.254        10.49.4.3      1
       224.0.0.0        240.0.0.0        10.49.4.3        10.49.4.3     20
       224.0.0.0        240.0.0.0     66.42.146.68     66.42.146.68     20
 255.255.255.255  255.255.255.255        10.49.4.3        10.49.4.3      1
 255.255.255.255  255.255.255.255     66.42.146.68     66.42.146.68      1
Default Gateway:     66.42.146.253

----- Original Message ----- 
From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Friday, July 30, 2004 10:50 AM
Subject: [isalist] Re: Alerts Setting up ISA 2004


http://www.ISAserver.org

Hi Chris,

The Internal address range on the ISA firewall IS NOT THE LAT.

Enter only addresses that area reachable from that interface. Make sure
the routing table is correctly configured on the ISA firewall so that it
can correctly create the Internal Network address range from the
information in the Windows routing table.

HTH,

Tom
www.isaserver.org/shinder
Get the book!
Tom and Deb Shinder's Configuring ISA Server 2004
http://tinyurl.com/3xqb7
MVP -- ISA Firewalls



-----Original Message-----
From: Chris H [mailto:ntpro@xxxxxxxxxx]
Sent: Friday, July 30, 2004 9:08 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Alerts Setting up ISA 2004


http://www.ISAserver.org

do you mean if the ISA Server isnt physically on that subnet even though
it
may be an internal one?
In the past I added all internal IP's to the LAT regardless of whether
or
not the ISA server was on it.
Correct?

----- Original Message ----- 
From: "Jim Harrison" <jim@xxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Friday, July 30, 2004 9:53 AM
Subject: [isalist] Re: Alerts Setting up ISA 2004


> http://www.ISAserver.org
>
> ISA generally complains about this because:
> 1 -  you've excluded the broadcast addresses in the Internal network.
> 2 - you've defined off-subnet addresses for one or more netwrok
objects
> 3 - you have two or more default gateways
>
> Compare your "ipconfig/all" and your Internal Network addressing.
> If ISA doesn't belong to a subnet, remove it from that network object.
>
>  Jim Harrison
>  MCP(NT4, W2K), A+, Network+, PCG
>  http://isaserver.org/Jim_Harrison/
>  http://isatools.org
>  Read the help / books / articles!
>
>
> On Fri, 30 Jul 2004 09:33:58 -0400
> "Chris H" <ntpro@xxxxxxxxxx> wrote:
> http://www.ISAserver.org
>
> This is my first time setting up 2004 server and I am getting this
alert
> all the time??
> I have it set up as an "edge" server. Two nics. One internal with all
the
> 10.x addresses and one external with a 66.42.x.x address. Any ideas?
>
> Description: ISA Server detected routes through adapter "Local Area
> Connection" that do not correlate with the network element to which
this
> adapter belongs. The address ranges in conflict are:
>
10.0.0.0-10.48.255.255;10.50.0.0-10.51.0.255;10.51.12.0-10.255.255.254;1
94.247.124.0-194.247.124.255;.
> Fix the network element and/or the routing table to make these ranges
> consistent; they should be in both or in neither. If you recently
created
> a remote site network, check if the event recurs. If it does not, you
may
> safely ignore this message.
> ISA Server detected routes through adapter "Local Area Connection 2"
that
> do not correlate with the network element to which this adapter
belongs.
> The address ranges in conflict are:
>
194.247.124.0-194.247.124.255;10.0.0.0-10.48.255.255;10.50.0.0-10.51.0.2
55;10.51.12.0-10.255.255.254;.
> Fix the network element and/or the routing table to make these ranges
> consistent; they should be in both or in neither. If you recently
created
> a remote site network, check if the event recurs. If it does not, you
may
> safely ignore this message.
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:

> jim@xxxxxxxxxxxx
> To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:

> ntpro@xxxxxxxxxx
> To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: 
ntpro@xxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist 


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: 
jim@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist



Other related posts: