Welcome to ISAserver.org

browes internet from other VLAN

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> Network Infrastructure >> browes internet from other VLAN

Page: [1]

Message

<< Older Topic Newer Topic >>

browes internet from other VLAN - 5.Jul.2008 4:05:44 AM

naif

Posts: 1
Joined: 5.Jul.2008
Status: offline

Dears

In my network we have different VLANS with different subnets and I install ISA server on subnet “A” ’10.1.9.0’ which contain other servers like DHCP and Active directory and on ISA server we installed 2 NIC one internal interface with static IP address ’10.1.9.6’ from Subnet “A” and external interface connected with DSL modem also with static IP and gateway

Now all users in subnet “A” ’10.1.9.0’ can browse internet but other subnets can not access the internet and I add static routing in ISA server as

Ų route –p add 10.1.0.0 mask 255.255.0.0 10.1.9.6

because 10.1.0.0 with mask 255.255.0.0 contain all other subnets in my network ex: 10.1.46.0/24

but also it is not working at same time we got the following error in Event viewer
ISA Server detected routes through the network adapter Internal that do not correlate with the network to which this network adapter belongs. When networks are configured correctly, the IP address ranges included in each array-level network must include all IP addresses that are routable through its network adapters according to their routing tables. Otherwise valid packets may be dropped as spoofed.

Any help please

Post #: 1

Featured Links*

RE: browes internet from other VLAN - 5.Jul.2008 5:27:40 PM

elmajdal

Posts: 4944
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

Hi,

have you created the required subnets for each vlan ? and the Firewall policies?

check this article : Network Behind A Network (2004) - v1.1

HTH,
Tarek

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to naif)

Post #: 2