none
Forwarding is not enabled on the external adapter. This might prevent remote client traffic from reaching the internal network.

    Pergunta

  • Hello,

    We have DA installed and working fine, but suddenly getting this error:

    Forwarding is not enabled on the external adapter.

    What does it means, what should I do?

    segunda-feira, 22 de julho de 2013 08:25

Respostas

  • Hi,

    Let start with the basics. What is the firewall profile of your external network adapter?

    If you have two network cards on your URA box, please be sure that your server cant' reach any of your domain controllers using the external network card.

    have a nice day


    BenoitS - Simple by Design http://danstoncloud.com/blogs/simplebydesign/default.aspx

    • Marcado como Resposta Beadmin quarta-feira, 7 de agosto de 2013 06:05
    segunda-feira, 22 de julho de 2013 10:46

Todas as Respostas

  • Hi,

    Let start with the basics. What is the firewall profile of your external network adapter?

    If you have two network cards on your URA box, please be sure that your server cant' reach any of your domain controllers using the external network card.

    have a nice day


    BenoitS - Simple by Design http://danstoncloud.com/blogs/simplebydesign/default.aspx

    • Marcado como Resposta Beadmin quarta-feira, 7 de agosto de 2013 06:05
    segunda-feira, 22 de julho de 2013 10:46
  • I am seeing similar kind of error. What all things should i look for apart from the firewall rule?

    -Ashish

    quinta-feira, 21 de maio de 2015 16:10
  • Similar case with one or two network interface?

    BenoitS - Simple by Design http://danstoncloud.com/blogs/simplebydesign/default.aspx

    quinta-feira, 21 de maio de 2015 16:18
  • with two network adaptor.
    quinta-feira, 21 de maio de 2015 17:10
  • Can your provide the output for NETSH INTERFACE IPV6 SHOW INTERFACE <LAN interface> and NETSH INTERFACE IPV6 SHOW INTERFACE <Public interface>. You might have the forwarding parameter configured to disabled.

    BenoitS - Simple by Design http://danstoncloud.com/blogs/simplebydesign/default.aspx

    quinta-feira, 21 de maio de 2015 18:45
  • LANExternal

    The first one is for LAN and Second one is for External.

    quinta-feira, 21 de maio de 2015 19:00
  • Hi,

    Does not seems to be a configuration problem at this level. Can you confirm that firewall profile of the LAN interface is Domain profile? Internet facing interface must be public/private.


    BenoitS - Simple by Design http://danstoncloud.com/blogs/simplebydesign/default.aspx

    • Sugerido como Resposta ashishvaidya sexta-feira, 22 de maio de 2015 14:22
    quinta-feira, 21 de maio de 2015 19:44
  • If that is correct too, then what should i check.

    -Ashish

    quinta-feira, 21 de maio de 2015 19:47
  • How can i check that using a powershell command. I am using windows 2012 server core edition as my base OS.
    quinta-feira, 21 de maio de 2015 23:36
  • get-NetConnectionProfile

    BenoitS - Simple by Design http://danstoncloud.com/blogs/simplebydesign/default.aspx

    sexta-feira, 22 de maio de 2015 07:36
  • The issue was with the profile. Thanks Benoit for your help on this.

    -Ashish

    sexta-feira, 22 de maio de 2015 14:22
  • i am seeing same error on same computer and the external interface is showing domainauthenticated. i tried to run the following command but that failed work get-netconnectionprofile -interfacealias "Name of the Interface" | set-netconnectionprofile -networkcategory Public. I also tried deleting the registry key but that didn't work either " HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList\Nla\Cache\IntranetAuth ". My last resort should be to disable the traffic from external interface to the domain controllers.

    -Ashish

    quarta-feira, 17 de junho de 2015 18:00
  • Hi

    It's hard to overide domain firewall profile, especially if the server can reach your domain using the external network interface. IMO, your only solution is to be sure that external network cannot be used to communicate with your internal network, so a dedicated VLAN.


    BenoitS - Simple by Design http://danstoncloud.com/blogs/simplebydesign/default.aspx

    quinta-feira, 18 de junho de 2015 07:29