none
ISA Server detected routes through adapter ADSL that do not correlate with the network element to which this adapter belongs RRS feed

  • Вопрос

  • Description: ISA Server detected routes through adapter ADSL that do not correlate with the network element to which this adapter belongs. For best practice, the address range of an ISA Server network should match the address ranges routable through the associated network adapter as defined in the routing table. Otherwise valid packets may be dropped as spoofed. (This alert may occur momentarily when you create a remote site network. You may safely ignore this message if it does not reoccur.) The address ranges in conflict are: 172.16.0.0-172.16.255.255;.
    ISA Server detected routes through adapter IS that do not correlate with the network element to which this adapter belongs. For best practice, the address range of an ISA Server network should match the address ranges routable through the associated network adapter as defined in the routing table. Otherwise valid packets may be dropped as spoofed. (This alert may occur momentarily when you create a remote site network. You may safely ignore this message if it does not reoccur.) The address ranges in conflict are: 172.16.0.0-172.16.255.255;.
    ISA Server detected routes through adapter Loopback that do not correlate with the network element to which this adapter belongs. For best practice, the address range of an ISA Server network should match the address ranges routable through the associated network adapter as defined in the routing table. Otherwise valid packets may be dropped as spoofed. (This alert may occur momentarily when you create a remote site network. You may safely ignore this message if it does not reoccur.) The address ranges in conflict are: 172.16.3.100-172.16.3.100;.

     

    У меня постоянно появляются такие ошибки в журнале... В чем может быть проблема?

    Предупреждение появляется при установлении VPN-соединения до провайдера

    2 ноября 2006 г. 10:41

Все ответы

  • в определении сетей в исе эту сеть прописывали?
    2 ноября 2006 г. 12:03
  •  Фантом написано:
    Description: ISA Server detected routes through adapter ADSL that do not correlate with the network element to which this adapter belongs. For best practice, the address range of an ISA Server network should match the address ranges routable through the associated network adapter as defined in the routing table. Otherwise valid packets may be dropped as spoofed. (This alert may occur momentarily when you create a remote site network. You may safely ignore this message if it does not reoccur.) The address ranges in conflict are: 172.16.0.0-172.16.255.255;.
    ISA Server detected routes through adapter IS that do not correlate with the network element to which this adapter belongs. For best practice, the address range of an ISA Server network should match the address ranges routable through the associated network adapter as defined in the routing table. Otherwise valid packets may be dropped as spoofed. (This alert may occur momentarily when you create a remote site network. You may safely ignore this message if it does not reoccur.) The address ranges in conflict are: 172.16.0.0-172.16.255.255;.
    ISA Server detected routes through adapter Loopback that do not correlate with the network element to which this adapter belongs. For best practice, the address range of an ISA Server network should match the address ranges routable through the associated network adapter as defined in the routing table. Otherwise valid packets may be dropped as spoofed. (This alert may occur momentarily when you create a remote site network. You may safely ignore this message if it does not reoccur.) The address ranges in conflict are: 172.16.3.100-172.16.3.100;.

     

    У меня постоянно появляются такие ошибки в журнале... В чем может быть проблема?

    Предупреждение появляется при установлении VPN-соединения до провайдера

    При поднятии соединения с провайдером у вас в таблице маршрутизации появляется новые маршруты  на сети 172.16.0.0-172.16.255.255 и 172.16.3.100-172.16.3.100  Но в настройках Network ISA  они не прописаны.

    Разберитесь к какой Network относится каждая из этих сетей и пропишите ее там.

    2 ноября 2006 г. 12:49
    Модератор
  •  LiK написано:
    в определении сетей в исе эту сеть прописывали?

    Нет. Сейчас попробую, отпишусь о результате

    3 ноября 2006 г. 6:18
  •  Фантом написано:

     LiK написано:
    в определении сетей в исе эту сеть прописывали?

    Нет. Сейчас попробую, отпишусь о результате

     

     ISA Server detected routes through adapter ADSL that do not correlate with the network element to which this adapter belongs. For best practice, the address range of an ISA Server network should match the address ranges routable through the associated network adapter as defined in the routing table. Otherwise valid packets may be dropped as spoofed. (This alert may occur momentarily when you create a remote site network. You may safely ignore this message if it does not reoccur.)  The address ranges in conflict are:
    83.0.0.0-83.142.161.6;
    83.142.161.8-83.142.161.12;
    83.142.161.14-83.142.161.15;
    83.142.161.17-83.142.161.34;
    83.142.161.36-83.142.161.39;
    83.142.161.41-83.142.161.225;
    83.142.161.227-83.255.255.255;.

    <br>ISA Server detected routes through adapter IS that do not correlate with the network element to which this adapter belongs. For best practice, the address range of an ISA Server network should match the address ranges routable through the associated network adapter as defined in the routing table. Otherwise valid packets may be dropped as spoofed. (This alert may occur momentarily when you create a remote site network. You may safely ignore this message if it does not reoccur.)  The address ranges in conflict are:
    83.0.0.0-83.142.161.6;
    83.142.161.8-83.142.161.12;
    83.142.161.14-83.142.161.15;
    83.142.161.17-83.142.161.34;
    83.142.161.36-83.142.161.39;
    83.142.161.41-83.142.161.225;
    83.142.161.227-83.255.255.255;.

    <br>ISA Server detected routes through adapter Loopback that do not correlate with the network element to which this adapter belongs. For best practice, the address range of an ISA Server network should match the address ranges routable through the associated network adapter as defined in the routing table. Otherwise valid packets may be dropped as spoofed. (This alert may occur momentarily when you create a remote site network. You may safely ignore this message if it does not reoccur.)  The address ranges in conflict are:

    83.142.160.110-83.142.160.110;.

    В общем попробовал.... Часть проблемы решилось за что вам большое спасибо. Однако это только часть.

    У меня получаются два подключения до провайдера... по одному идет выход в сеть 172.16.3.0/24 по другому в интернет... при подъеме первого ошибка уже не выдается, когда подключаюсь к интернету, тогда и происходит ошибка.

     

    3 ноября 2006 г. 8:45
  • Еще уточнение.

    Иса сервер используется как сервер ВПН (PPTP). Для назначения ИП адресов используется DHCP сервер на ИСЕ, адреса из локального диапазона (192.168.0.х) у ИСЫ IP адрес (192.168.0.1).

    Смотрю состояние DHCP сервера, он выдал в аренду 10 IP адресов для ИСЫ. (192.168.0.12-192.168.0.21).

    Подключаюсь к VPN серверу и смотрю свойства подключения. Выходит что IP адрес сервера 192.168.0.12. У клиента какой-то другой, для примера 192.168.0.18. В логах исы возникает сообщение

    ISA Server detected routes through adapter ADSL that do not correlate with the network element to which this adapter belongs. For best practice, the address range of an ISA Server network should match the address ranges routable through the associated network adapter as defined in the routing table. Otherwise valid packets may be dropped as spoofed. (This alert may occur momentarily when you create a remote site network. You may safely ignore this message if it does not reoccur.) The address ranges in conflict are: 192.168.0.12-192.168.0.12;.

    Причем такое сообщение вылазит для нескольких адаптеров. (LAN, ADSL). Подумал исключить этот адрес из Internal, захожу в диалог указания IP адресов, нажимаю add adapter , выбираю LAN, а там он уже исключен.... Т.е. диапазон IP адресов разбит на два (192.168.0.1-192.168.0.11, 192.168.0.13-192.168.0.254). Добавил как предлагает... ошибка стала проявляться только на других интерфейсах.

    Имхо, адрес сервера же меняется (192.168.0.12) его выдает служба RRAS? посредством DHCP?

    4 декабря 2006 г. 4:22