Welcome to ISAserver.org

a little help with this error please

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 General ] >> Installation >> a little help with this error please

Page: [1]

Message

<< Older Topic Newer Topic >>

a little help with this error please - 11.Jan.2006 4:45:35 PM

ezpcc

Posts: 46
Joined: 26.Jul.2005
From: New Jersey
Status: online

I could use a little help interpreting the following error please..

Alert Information:
Description: ISA Server detected routes through adapter "Internal" that do not correlate with the network element to which this adapter belongs. The address ranges in conflict are: 172.17.0.0-172.17.16.255;172.17.18.0-172.17.255.254;.Fix the network element and/or the routing table to make these ranges consistent; they should be in both or in neither. If you recently created a remote site network, check if the event recurs. If it does not, you may safely ignore this message.

ISA Server detected routes through adapter "External" that do not correlate with the network element to which this adapter belongs. The address ranges in conflict are: 172.17.0.0-172.17.16.255;172.17.18.0-172.17.255.255;. Fix the network element and/or the routing table to make these ranges consistent; they should be in both or in neither. If you recently created a remote site network, check if the event recurs. If it does not, you may safely ignore this message

One other note, there is a third nic in this computer that was pointing to an internet address but it is not active...

I am using 17.17.17.0 for my internal network... any hellp please ?? Thanks

Post #: 1

Featured Links*

RE: a little help with this error please - 11.Jan.2006 4:55:25 PM

tshinder

Posts: 47669
Joined: 10.Jan.2001
From: Texas
Status: online

Hi Ez,

What is the IP address and subnet mask for each NIC installed on the ISA firewall?

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to ezpcc)

Post #: 2

RE: a little help with this error please - 11.Jan.2006 5:00:03 PM

ezpcc

Posts: 46
Joined: 26.Jul.2005
From: New Jersey
Status: online

Hi Tom... thanks for your help... they are

Ext Nic

64.19.182.163
255.255.255.248

Internal Nic
172.17.17.22
255.255.0.0

Guess I will need to change the subnet I bet...
Thanks

Aleks

(in reply to tshinder)

Post #: 3

RE: a little help with this error please - 12.Jan.2006 5:12:12 PM

tshinder

Posts: 47669
Joined: 10.Jan.2001
From: Texas
Status: online

Hi Aleks,

Looks like the DMZ and the default Internal Network are on the same subnet ID. That won't work.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to ezpcc)

Post #: 4

RE: a little help with this error please - 12.Jan.2006 5:46:06 PM

ezpcc

Posts: 46
Joined: 26.Jul.2005
From: New Jersey
Status: online

Ok... I guess I must go back to the drawing board.... and review my subnetting... I
am not seeing it.. the 172 is a private address .. how is it in the same subnet ID??
I am very weak in the ip subnet department.. can you help to educate me please..?

Thanks

(in reply to tshinder)

Post #: 5

RE: a little help with this error please - 12.Jan.2006 7:31:34 PM

tshinder

Posts: 47669
Joined: 10.Jan.2001
From: Texas
Status: online

Hi EZ,

Sorry about that, I made a mistake and misread the questions.

Your subnetting looks OK.

Disable the third NIC NIC if you're not using using it. Don't just unplug it, but disable it in the Network Connections folder.

How have you defined your default Internal Network?

Do you have the remote access VPN server enabled? If so, how are you assigning addresses to the VPN clients?

Thanks!

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to ezpcc)

Post #: 6

RE: a little help with this error please - 12.Jan.2006 7:49:19 PM

ezpcc

Posts: 46
Joined: 26.Jul.2005
From: New Jersey
Status: online

Hi Tom.. I actually removed the nic completely.... I also had an error with regards to the 172 network
so I changed it to a 255.255.224.0 to limit it to the 172.17.17.0 address sceam. This and the other
change I made with regard to the OWA Listener seems to have fixed..

I was planning in implementing the VPN Gateway piece until all this trouble... will probably leave that
to last for now.

My next challenge is to setup a wild card SSL Certificate so that I can finally get my ISA 2000 server
off line..... Thanks for your help.. but I might need more later..

Aleks

(in reply to tshinder)

Post #: 7

RE: a little help with this error please - 15.Jan.2006 4:32:38 PM

tshinder

Posts: 47669
Joined: 10.Jan.2001
From: Texas
Status: online

Hi Aleks,

Great! Good to hear you got things working and thanks for the follow up!

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to ezpcc)

Post #: 8

RE: a little help with this error please - 19.Jan.2006 11:42:05 PM

ezpcc

Posts: 46
Joined: 26.Jul.2005
From: New Jersey
Status: online

I am hoping you can help identifiy this error that I am now having since you were very
instramental in helping me solve the last one...

I am still having the authenciation problem between the ISA server and my AD domain.
Trying to setup a granular VPN polciy - while adding an AD
domain group or user I get the following error:

Windows cannot process the object with the name "Domain Admins" because of the following error:
The Remote Procedure call failed and id not execute

Thanks
Aleks

(in reply to tshinder)

Post #: 9

RE: a little help with this error please - 20.Jan.2006 1:27:23 AM

ClintD

Posts: 1833
Joined: 26.Jan.2001
From: Keller, TX
Status: offline

Sounds like you have installed Windows 2003 SP1 (on the ISA Server or the DCs) and didn't install the required ISA 2004 SP1. This is the typical cause for the RPC call failed error.

(in reply to ezpcc)

Post #: 10

RE: a little help with this error please - 20.Jan.2006 5:42:14 PM

tshinder

Posts: 47669
Joined: 10.Jan.2001
From: Texas
Status: online

Hi Clint,

Your'e referring to the RPC hotfix, right?

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to ClintD)

Post #: 11

RE: a little help with this error please - 20.Jan.2006 6:14:50 PM

ezpcc

Posts: 46
Joined: 26.Jul.2005
From: New Jersey
Status: online

quote:

ORIGINAL: ClintD

Sounds like you have installed Windows 2003 SP1 (on the ISA Server or the DCs) and didn't install the required ISA 2004 SP1. This is the typical cause for the RPC call failed error.

Well, I am embarrassed...

That SP was supposed to have been installed many moons ago.... alas as the old
saying goes... if you want something done right.. do it yourself..

Checked and found you were right, no SP1 installed.... installed it rebooted the server
and the problem is gone... I hope to stay that way...

Thank you all again for your patiance with me.. I should have checked that first but
I assumed it has been done...

Thanks

(in reply to ClintD)

Post #: 12

RE: a little help with this error please - 20.Jan.2006 6:49:10 PM

tshinder

Posts: 47669
Joined: 10.Jan.2001
From: Texas
Status: online

Hi EZ,

GREAT! Good to hear you got it working and thanks for the follow up!

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to ezpcc)

Post #: 13