Re: Alerts Setting up ISA 2004
- From: "Chris H" <ntpro@xxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Fri, 30 Jul 2004 13:11:44 -0400
Tom,
Now I am gettng the error on the External interface ...
ISA Server detected routes through adapter "External" that do not correlate
with the network element to which this adapter belongs. The address ranges
in conflict are:
10.0.0.0-10.48.255.255;10.50.0.0-10.51.0.255;10.51.12.0-10.255.255.254;194.247.124.0-194.247.124.255;.
Fix the network element and/or the routing table to make these ranges
consistent; they should be in both or in neither. If you recently created a
remote site network, check if the event recurs. If it does not, you may
safely ignore this message
Here is my route table:
ctive Routes:
etwork Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 66.42.146.253 66.42.146.68 20
10.49.0.0 255.255.0.0 10.49.4.3 10.49.4.3 20
10.49.0.0 255.255.255.255 10.49.1.254 10.49.4.3 1
10.49.4.3 255.255.255.255 127.0.0.1 127.0.0.1 20
10.51.1.0 255.255.255.0 10.49.1.254 10.49.4.3 1
10.51.2.0 255.255.255.0 10.49.1.254 10.49.4.3 1
10.51.3.0 255.255.255.0 10.49.1.254 10.49.4.3 1
10.51.4.0 255.255.255.0 10.49.1.254 10.49.4.3 1
10.51.5.0 255.255.255.0 10.49.1.254 10.49.4.3 1
10.51.6.0 255.255.255.0 10.49.1.254 10.49.4.3 1
10.51.7.0 255.255.255.0 10.49.1.254 10.49.4.3 1
10.51.8.0 255.255.255.0 10.49.1.254 10.49.4.3 1
10.51.9.0 255.255.255.0 10.49.1.254 10.49.4.3 1
10.51.10.0 255.255.255.0 10.49.1.254 10.49.4.3 1
10.51.11.0 255.255.255.0 10.49.1.254 10.49.4.3 1
10.255.255.255 255.255.255.255 10.49.4.3 10.49.4.3 20
66.42.146.0 255.255.255.0 66.42.146.68 66.42.146.68 20
66.42.146.68 255.255.255.255 127.0.0.1 127.0.0.1 20
66.42.146.69 255.255.255.255 127.0.0.1 127.0.0.1 20
66.42.146.70 255.255.255.255 127.0.0.1 127.0.0.1 20
66.42.146.71 255.255.255.255 127.0.0.1 127.0.0.1 20
66.255.255.255 255.255.255.255 66.42.146.68 66.42.146.68 20
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
194.247.124.0 255.255.255.0 10.49.1.254 10.49.4.3 1
224.0.0.0 240.0.0.0 10.49.4.3 10.49.4.3 20
224.0.0.0 240.0.0.0 66.42.146.68 66.42.146.68 20
255.255.255.255 255.255.255.255 10.49.4.3 10.49.4.3 1
255.255.255.255 255.255.255.255 66.42.146.68 66.42.146.68 1
Default Gateway: 66.42.146.253
----- Original Message -----
From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Friday, July 30, 2004 10:50 AM
Subject: [isalist] Re: Alerts Setting up ISA 2004
http://www.ISAserver.org
Hi Chris,
The Internal address range on the ISA firewall IS NOT THE LAT.
Enter only addresses that area reachable from that interface. Make sure
the routing table is correctly configured on the ISA firewall so that it
can correctly create the Internal Network address range from the
information in the Windows routing table.
HTH,
Tom
www.isaserver.org/shinder
Get the book!
Tom and Deb Shinder's Configuring ISA Server 2004
http://tinyurl.com/3xqb7
MVP -- ISA Firewalls
-----Original Message-----
From: Chris H [mailto:ntpro@xxxxxxxxxx]
Sent: Friday, July 30, 2004 9:08 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Alerts Setting up ISA 2004
http://www.ISAserver.org
do you mean if the ISA Server isnt physically on that subnet even though
it
may be an internal one?
In the past I added all internal IP's to the LAT regardless of whether
or
not the ISA server was on it.
Correct?
----- Original Message -----
From: "Jim Harrison" <jim@xxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Friday, July 30, 2004 9:53 AM
Subject: [isalist] Re: Alerts Setting up ISA 2004
http://www.ISAserver.org
ISA generally complains about this because:
1 - you've excluded the broadcast addresses in the Internal network.
2 - you've defined off-subnet addresses for one or more netwrok
objects
3 - you have two or more default gateways
Compare your "ipconfig/all" and your Internal Network addressing.
If ISA doesn't belong to a subnet, remove it from that network object.
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/Jim_Harrison/
http://isatools.org
Read the help / books / articles!
On Fri, 30 Jul 2004 09:33:58 -0400
"Chris H" <ntpro@xxxxxxxxxx> wrote:
http://www.ISAserver.org
This is my first time setting up 2004 server and I am getting this
alert
all the time??
I have it set up as an "edge" server. Two nics. One internal with all
the
10.x addresses and one external with a 66.42.x.x address. Any ideas?
Description: ISA Server detected routes through adapter "Local Area
Connection" that do not correlate with the network element to which
this
adapter belongs. The address ranges in conflict are:
10.0.0.0-10.48.255.255;10.50.0.0-10.51.0.255;10.51.12.0-10.255.255.254;1
94.247.124.0-194.247.124.255;.
Fix the network element and/or the routing table to make these ranges
consistent; they should be in both or in neither. If you recently
created
a remote site network, check if the event recurs. If it does not, you
may
safely ignore this message.
ISA Server detected routes through adapter "Local Area Connection 2"
that
do not correlate with the network element to which this adapter
belongs.
The address ranges in conflict are:
194.247.124.0-194.247.124.255;10.0.0.0-10.48.255.255;10.50.0.0-10.51.0.2
55;10.51.12.0-10.255.255.254;.
Fix the network element and/or the routing table to make these ranges
consistent; they should be in both or in neither. If you recently
created
a remote site network, check if the event recurs. If it does not, you
may
safely ignore this message.
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
ntpro@xxxxxxxxxx
To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
ntpro@xxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Other related posts:
