Forefront, static route
-
3. května 2012 16:37
Hi,
I want to create Static route with Forefront, to route192.168.0.0 packets to drop in 10.12.7.0 network.
Všechny reakce
-
4. května 2012 3:48Moderátor
Hi,
Thank you for the post.
You may create route relationship between subnet 10.12.7.5 and subnet 192.168.0.10, and then add access rule to allow the traffic for these two subnets.
Regards,
Nick Gu - MSFT
- Navržen jako odpověď Nick Gu - MSFTMicrosoft Contingent Staff, Moderator 7. května 2012 9:19
- Označen jako odpověď Nick Gu - MSFTMicrosoft Contingent Staff, Moderator 8. května 2012 6:09
-
4. května 2012 12:43
Thank's for your response.
As you suggested, I am going to take following two path:
http://www.techrepublic.com/photos/solutionbase-terminating-the-remote-access-vpn-client-connection-at-the-front-end-device-in-an-isa-environment/93260?seq=13
http://retrohack.com/let-me-out-configuring-outbound-access-rules-in-tmg-2010/
So will it allow same time to pass all other traffic (internet traffic) through Internet connection, or will it create extra traffic.
Thank's a lot.
Regards
Lota
-
7. května 2012 7:00
Hi !
You must create route relationship between subnet 10.12.7.5 and subnet 192.168.0.10 and make a rules to allow traffic for these two subnet.
Example:
route -p add 192.168.10.0 mask 255.255.255.0 10.10.10.1
or
route -p add 192.168.10.0 mask 255.255.255.0 10.10.10.1 -p (permanent)
Read this articles:
http://www.isaserver.org/tutorials/Microsoft-Forefront-TMG-How-use-TMG-network-templates.html
Best regards Abdagic Ahmet Disclaimer: This posting is provided AS-IS with no warranties or guarantees and confers no rights.
- Navržen jako odpověď Ahmet Abdagic 7. května 2012 7:00
- Označen jako odpověď Nick Gu - MSFTMicrosoft Contingent Staff, Moderator 8. května 2012 6:09
-
9. května 2012 15:26
Dear Nick Gu, Abdagic Ahmet,
Thanks for your guidance.
10.12.7.0 traffic is route through 172.12.16.5.
Going through your advice, I have create address mapping inside router to pass the traffic 10.12.7.0 comes & going through 172.12.16.5 & 192.168.0.254.
Then I connect the patch cable from 192.168.0.254 to switch.
And configure static permanent route at each user station
route add 10.12.7.0 mask 255.255.255.0 192.168.0.254 -p
Now all users able to connect to SAP system without interruption.
Thanks again.
- Označen jako odpověď Lota 9. května 2012 15:28