Welcome to ISAserver.org

VPN Configuration

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 General ] >> Installation >> VPN Configuration

Page: [1]

Message

<< Older Topic Newer Topic >>

VPN Configuration - 20.Dec.2007 10:12:55 AM

dagar45

Posts: 1
Joined: 20.Dec.2007
Status: offline

Hello

I have recieved the following configuration error

Description: ISA Server detected routes through the network adapter LAN that do not correlate with the network to which this network adapter belongs.

When networks are configured correctly, the IP address ranges included in each array-level network must include all IP addresses that are routable through its network adapters according to their routing tables. Otherwise valid packets may be dropped as spoofed.

The following ranges are included in the network's IP address ranges but are not routable through any of the network's adapters: 192.168.0.102-192.168.0.102;. Note that this event may be generated once after you add a route, create a remote site network, or configure Network Load Balancing and may be safely ignored if it does not re-occur.

The routing table for the network adapter Internal includes IP address ranges that are not defined in the array-level network VPN Clients, to which it is bound. As a result, packets arriving at this network adapter from the IP address ranges listed below or sent to these IP address ranges via this network adapter will be dropped as spoofed. To resolve this issue, add the missing IP address ranges to the array network.
The following IP address ranges will be dropped as spoofed:
Internal:192.168.0.102-192.168.0.102;

The internal network object is set to 192.168.0.0 - 192.168.3.255 to handle our three sites.. I can kind of appreciate that the internal network object will associate itself with the internal network card and may not be able to read routes to the other sites but I am confused as to why the VPN client has a complaint?

Any help would be greatly appreciated

Thanks in advance

Post #: 1

Featured Links*

RE: VPN Configuration - 20.Dec.2007 2:26:59 PM

iwannabfishn

Posts: 63
Joined: 21.Jun.2004
Status: offline

If I understand you correctly, I had the same problem. The problem resolved itself when I listed the networks individually on the internal networks configuration. Originally I had 192.168.0.0 -192.168.2.0. When I broke it up to be 3 seperate networks (192.168.0.0, 192.168.1.0 and 192.168.2.0). I stopped getting those configuration errors. It would be a pain for a large network, but it does work. I don't understand what the VPN network has to do with it either. Maybe someone else can help with that.

(in reply to dagar45)

Post #: 2