Hi Chris, The Internal address range on the ISA firewall IS NOT THE LAT. Enter only addresses that area reachable from that interface. Make sure the routing table is correctly configured on the ISA firewall so that it can correctly create the Internal Network address range from the information in the Windows routing table. HTH, Tom www.isaserver.org/shinder Get the book! Tom and Deb Shinder's Configuring ISA Server 2004 http://tinyurl.com/3xqb7 MVP -- ISA Firewalls -----Original Message----- From: Chris H [mailto:ntpro@xxxxxxxxxx] Sent: Friday, July 30, 2004 9:08 AM To: [ISAserver.org Discussion List] Subject: [isalist] Re: Alerts Setting up ISA 2004 http://www.ISAserver.org do you mean if the ISA Server isnt physically on that subnet even though it may be an internal one? In the past I added all internal IP's to the LAT regardless of whether or not the ISA server was on it. Correct? ----- Original Message ----- From: "Jim Harrison" <jim@xxxxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Friday, July 30, 2004 9:53 AM Subject: [isalist] Re: Alerts Setting up ISA 2004 > http://www.ISAserver.org > > ISA generally complains about this because: > 1 - you've excluded the broadcast addresses in the Internal network. > 2 - you've defined off-subnet addresses for one or more netwrok objects > 3 - you have two or more default gateways > > Compare your "ipconfig/all" and your Internal Network addressing. > If ISA doesn't belong to a subnet, remove it from that network object. > > Jim Harrison > MCP(NT4, W2K), A+, Network+, PCG > http://isaserver.org/Jim_Harrison/ > http://isatools.org > Read the help / books / articles! > > > On Fri, 30 Jul 2004 09:33:58 -0400 > "Chris H" <ntpro@xxxxxxxxxx> wrote: > http://www.ISAserver.org > > This is my first time setting up 2004 server and I am getting this alert > all the time?? > I have it set up as an "edge" server. Two nics. One internal with all the > 10.x addresses and one external with a 66.42.x.x address. Any ideas? > > Description: ISA Server detected routes through adapter "Local Area > Connection" that do not correlate with the network element to which this > adapter belongs. The address ranges in conflict are: > 10.0.0.0-10.48.255.255;10.50.0.0-10.51.0.255;10.51.12.0-10.255.255.254;1 94.247.124.0-194.247.124.255;. > Fix the network element and/or the routing table to make these ranges > consistent; they should be in both or in neither. If you recently created > a remote site network, check if the event recurs. If it does not, you may > safely ignore this message. > ISA Server detected routes through adapter "Local Area Connection 2" that > do not correlate with the network element to which this adapter belongs. > The address ranges in conflict are: > 194.247.124.0-194.247.124.255;10.0.0.0-10.48.255.255;10.50.0.0-10.51.0.2 55;10.51.12.0-10.255.255.254;. > Fix the network element and/or the routing table to make these ranges > consistent; they should be in both or in neither. If you recently created > a remote site network, check if the event recurs. If it does not, you may > safely ignore this message. > > ------------------------------------------------------ > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ > ------------------------------------------------------ > Other Internet Software Marketing Sites: > World of Windows Networking: http://www.windowsnetworking.com > Leading Network Software Directory: http://www.serverfiles.com > No.1 Exchange Server Resource Site: http://www.msexchange.org > Windows Security Resource Site: http://www.windowsecurity.com/ > Network Security Library: http://www.secinf.net/ > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com > ------------------------------------------------------ > You are currently subscribed to this ISAserver.org Discussion List as: > jim@xxxxxxxxxxxx > To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist > > ------------------------------------------------------ > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ > ------------------------------------------------------ > Other Internet Software Marketing Sites: > World of Windows Networking: http://www.windowsnetworking.com > Leading Network Software Directory: http://www.serverfiles.com > No.1 Exchange Server Resource Site: http://www.msexchange.org > Windows Security Resource Site: http://www.windowsecurity.com/ > Network Security Library: http://www.secinf.net/ > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com > ------------------------------------------------------ > You are currently subscribed to this ISAserver.org Discussion List as: > ntpro@xxxxxxxxxx > To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist