Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

RE: ISA 2004 doesn't work at all

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2004 General ] >> General >> RE: ISA 2004 doesn't work at all Page: <<   < prev  1 [2]
Login
Message << Older Topic   Newer Topic >>
RE: ISA 2004 doesn't work at all - 27.Jul.2004 5:20:00 PM   
sueflar

 

Posts: 32
Joined: 1.Jul.2004
From: Kyiv, Ukraine
Status: offline
> I'd love to get some exact details on
> this configuration that are not working.

I've installed Windows 2003 Server Standard, configured external NIC and joined the server to the domain (internal NIC is configured by DHCP)After that I've installed ISA 2004 and get an errors mentioned above. There was no additional settings. I have one IP address on both external and internal NICs.

(in reply to sueflar)
Post #: 21
RE: ISA 2004 doesn't work at all - 28.Jul.2004 1:51:00 AM   
tshinder

 

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline
quote:
Originally posted by <wand>:
Wondering how do I get multiple external ip, when I got only one given by inet provider.

Tried to add dummy ip, didn't help - get the same problem (apply doesn't work). But sessions tab working now.

my config is:
internal net: 192.168.168.103, mask 255.255.255.0, gateway: empty
ext.net: 192.168.250.7, mask: 255.255.255.0, gateway: 192.168.250.1.

Internal net in ISA descibed as: 192.168.168.0-192.168.168.255. Version of ISA is 2004, final.

Hi Wand,

If you only have a single address from your provider, then you can't have multiple addresses on the external interface.

HTH,
Tom

(in reply to sueflar)
Post #: 22
RE: ISA 2004 doesn't work at all - 28.Jul.2004 9:22:00 AM   
Guest
Hi Tom

>then you can't have multiple addresses on the external interface.
but thing should work either way, i think

guess the problem is in my ext.adress - 192.168.255.7, somewhere in the route tables it's considered as local, but described in isa as external.

here is an alert I get every time server starts:
"ISA Server detected a network adapter connected to multiple networks: Address 192.168.250.7 belongs to network 'External' and address 192.168.168.104 belongs to network 'Internal'.
ISA Server detected routes through adapter "Local Area Connection" that do not correlate with the network element to which this adapter belongs. The address ranges in conflict are: 0.0.0.1-126.255.255.255;128.0.0.0-192.168.167.255;192.168.169.0-192.168.250.6;192.168.250.8-192.168.250.254;192.168.251.0-223.255.255.255;240.0.0.0-255.255.255.254;."

(the same error that Mykhaylo got above)

(in reply to sueflar)
  Post #: 23
RE: ISA 2004 doesn't work at all - 28.Jul.2004 9:12:00 PM   
dendor

 

Posts: 1
Joined: 28.Jul.2004
From: Den Haag, The netherlands
Status: offline
I have the same problem. However I thought it might be related to the vpn connection I use to connect to my provider.

Network 1: 10.10.1.x
Network 2: 10.0.0.x
vpn connects to my external adress: 194.109.224.169

I host a mailserver and IIS on the same machine, after all this is only a test network. Configuration gets a bit slow this way..

Pim

(in reply to sueflar)
Post #: 24
RE: ISA 2004 doesn't work at all - 29.Jul.2004 3:50:00 AM   
tshinder

 

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline
quote:
Originally posted by <wand>:
Hi Tom

>then you can't have multiple addresses on the external interface.
but thing should work either way, i think

guess the problem is in my ext.adress - 192.168.255.7, somewhere in the route tables it's considered as local, but described in isa as external.

here is an alert I get every time server starts:
"ISA Server detected a network adapter connected to multiple networks: Address 192.168.250.7 belongs to network 'External' and address 192.168.168.104 belongs to network 'Internal'.
ISA Server detected routes through adapter "Local Area Connection" that do not correlate with the network element to which this adapter belongs. The address ranges in conflict are: 0.0.0.1-126.255.255.255;128.0.0.0-192.168.167.255;192.168.169.0-192.168.250.6;192.168.250.8-192.168.250.254;192.168.251.0-223.255.255.255;240.0.0.0-255.255.255.254;."

(the same error that Mykhaylo got above)

Hi Wand,

I can't think of a scenario where you can have mutliple addresses on the external interface of the ISA firewall when you have a single public address. If the ISP is assigning a single address to you, how could you possibly have a second address? Remember, all addresses on the same interace need to be on the same network ID.

HTH,
Tom

(in reply to sueflar)
Post #: 25
RE: ISA 2004 doesn't work at all - 29.Jul.2004 2:02:00 PM   
sueflar

 

Posts: 32
Joined: 1.Jul.2004
From: Kyiv, Ukraine
Status: offline
In ISA 2004 Configuration Guide I've read ISA always should ask for server restart. But on the computer with Windows 2003 Server Standard installed I've never been asked for restart. Althrough I've been asked for restart when installed ISA 2004 on Windows 2000 SP4. Does it mean some components wasn't installed? If so which ones? Thanks.
Mykhaylo

(in reply to sueflar)
Post #: 26
RE: ISA 2004 doesn't work at all - 29.Jul.2004 3:11:00 PM   
tshinder

 

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Mykhaylo,

If you have installed the ISA firewall software on the machine sometime in the past, then you won't be asked to restart again.

HTH,
Tom

(in reply to sueflar)
Post #: 27
RE: ISA 2004 doesn't work at all - 29.Jul.2004 7:49:00 PM   
Jon9

 

Posts: 33
Joined: 11.Mar.2004
Status: offline
Hi everyone,

On my Win2k3 server with ISA 2004 is running fine too with multiple IPs on the external interface. I see that the guys with problems have private IP assigned to the external interface, maybe ISA 2004 doesn't like that? Correct me if I'm wrong, but they're not routable on the internet.

Thanks,

Jon

(in reply to sueflar)
Post #: 28
RE: ISA 2004 doesn't work at all - 30.Jul.2004 10:47:00 AM   
Guest
It may be so, couse my external ip adress isn't public, and it seems to be ISA 2004 really doesn't like that.
But its wrong. In Isa2000 there wasn't any problems with private external ip. Hope MS guys will publish patch or something.

(in reply to sueflar)
  Post #: 29
RE: ISA 2004 doesn't work at all - 30.Jul.2004 2:04:00 PM   
sueflar

 

Posts: 32
Joined: 1.Jul.2004
From: Kyiv, Ukraine
Status: offline
I had the problem even when I have one IP on both NIC. Today I've installed Win2K instead of Win2K3 and then installed ISA 2004. After that looks like everything works. Crazyness....

(in reply to sueflar)
Post #: 30
RE: ISA 2004 doesn't work at all - 30.Jul.2004 3:15:00 PM   
tshinder

 

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline
quote:
Originally posted by Jon9:
Hi everyone,

On my Win2k3 server with ISA 2004 is running fine too with multiple IPs on the external interface. I see that the guys with problems have private IP assigned to the external interface, maybe ISA 2004 doesn't like that? Correct me if I'm wrong, but they're not routable on the internet.

Thanks,

Jon

Hi Jon,

Its not an issue of having multiple private IP addresses on the external interface. It sounds like there are mutiple IP addresses on the external interface, but only a single public address, or something like that. It's definite4ly something "off-label" [Smile]

Thanks!
Tom

(in reply to sueflar)
Post #: 31
RE: ISA 2004 doesn't work at all - 30.Jul.2004 3:16:00 PM   
tshinder

 

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline
quote:
Originally posted by Mykhaylo Khodorev:
I had the problem even when I have one IP on both NIC. Today I've installed Win2K instead of Win2K3 and then installed ISA 2004. After that looks like everything works. Crazyness....

Hi Myk,

I can assure you that it was a coincidence! There is no problem binding 1 or 1000 addresses to the external interface!

HTH,
Tom

(in reply to sueflar)
Post #: 32
RE: ISA 2004 doesn't work at all - 5.Aug.2004 8:43:00 AM   
bheston

 

Posts: 1
Joined: 5.Aug.2004
Status: offline
I'll jump in with the same problem.

I was using ISA 2004 Beta 2 fine. I didn't have to restart after configuration changes and it was functioning correctly with two public ip addresses and one 192.168.* internal address.

I get event 14147 in the event log, can't see session count and can't apply changes.

When RTM was released, I uninstalled ISA from W2K3 and installed the RTM version.

I managed to fix the 14147 error, but I am still having the problem with the configuration application (which seems to be more than just an annoyance) and the unknown session count.

As a side problem, probably related, I can't get a site-to-site VPN connection to work from the ISA server to a W2K RRAS server. It will work from inside the ISA server.

This seems to be a pretty standard setup. Could this be a problem from having the beta on the same machine?

(in reply to sueflar)
Post #: 33
RE: ISA 2004 doesn't work at all - 5.Aug.2004 7:08:00 PM   
smithdo

 

Posts: 6
Joined: 7.Jul.2004
Status: offline
Hey Tom,

Same issue, but I am trying to configure it as a cahcing only server. One IP, one NIC. Same issue.

(in reply to sueflar)
Post #: 34
RE: ISA 2004 doesn't work at all - 19.Aug.2004 12:18:00 PM   
pimcs

 

Posts: 5
Joined: 27.Oct.2003
From: Pakistan
Status: offline
hi tom and all others
i also had same problem
event ID 14147, my details are
win 2000 + isa 2004
internal IP 192.168.10.1 no DNS no GW
external IP 202.1.1.1 and DNS and GW asigned by the ISP
now ISA is working fine but giving error at start of windows taking too much time and exact error is
"
ISA Server detected routes through adapter "Loopback" that do not correlate with the network element to which this adapter belongs. The address ranges in conflict are: 202.1.1.1-202.1.1.1;. Fix the network element and/or the routing table to make these ranges consistent; they should be in both or in neither. If you recently created a remote site network, check if the event recurs. If it does not, you may safely ignore this message.
"
and event ID is 14147
plz guide me what is thereason of this message as it is generation after everyminute
waiting
pimcs

(in reply to sueflar)
Post #: 35
RE: ISA 2004 doesn't work at all - 27.Oct.2004 9:39:00 AM   
istari

 

Posts: 17
Joined: 5.Aug.2004
From: Orebro, Sweden
Status: offline
I've got exactly the same problems on three of my four ISA servers (located at diferent sites). All servers are installed in single NIC mode and all sites have the same setup when it comes to network infrastructure. The fourth site is however slightly different then the rest when it comes to software and server setup. On the site where ISA works fine, there's only one Windows 2003 server with multiple functions installed (DNS, DHCP, WINS, Symantec 9.0 AV, Backup Exec) while in the sites where ISA have the problems mentioned we have three windows 2003 servers installed. In addition to ISA server there's only network services installed (domaincontroller, DNS, WINS and DHCP) on that server.

/Claes

(in reply to sueflar)
Post #: 36
RE: ISA 2004 doesn't work at all - 27.Oct.2004 3:13:00 PM   
sueflar

 

Posts: 32
Joined: 1.Jul.2004
From: Kyiv, Ukraine
Status: offline
Looks like this is typical bug of ISA 2004. Does Microsoft tells anything regarding this?

(in reply to sueflar)
Post #: 37
RE: ISA 2004 doesn't work at all - 15.Jan.2005 7:25:00 PM   
christera

 

Posts: 11
Joined: 29.Nov.2002
From: Sweden
Status: offline
I have noticed this error on several machines, on every machines i have noticed this behavior i have updated from Beta 2 to the evaluation version, from beta 2 to the RTM version or from evaluation to RTM. The symtoms is when you alter or create a firewall rule you get a message saying the configuration changes where saved to storage, but at least one service failed to load these changes. The event log include additional information on possible resaons for failure.but the eventlog does not report anything,when you start a query in the logging tab under monitoring you recive a message saying The query stopped because an error occurred while it was running.
the changes in the firewall is applyed at once and the firewall is working as it is supposed to but it is quite irretating with these errors, the only workaround i have found is to reinstall the whole computer which is not a good idea on all computers, if you have any idea on this TS i would be glad to help you correct this error as i have on ISA right now which is experince this problems.

(in reply to sueflar)
Post #: 38
RE: ISA 2004 doesn't work at all - 18.Jan.2005 11:51:00 AM   
istari

 

Posts: 17
Joined: 5.Aug.2004
From: Orebro, Sweden
Status: offline
I still have the exact same problems.... [Frown]

(in reply to sueflar)
Post #: 39
RE: ISA 2004 doesn't work at all - 28.Jan.2005 10:40:00 AM   
Guest
Try this

http://support.microsoft.com/?kbid=884496

G

(in reply to sueflar)
  Post #: 40

Page:   <<   < prev  1 [2] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2004 General ] >> General >> RE: ISA 2004 doesn't work at all Page: <<   < prev  1 [2]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts