• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

can not ping address ranges in new network

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA 2006 General] >> General >> can not ping address ranges in new network Page: [1]
Login
Message << Older Topic   Newer Topic >>
can not ping address ranges in new network - 20.Jun.2011 4:42:18 AM   
hadideveloper

 

Posts: 156
Joined: 20.Jun.2011
Status: offline
Hi,
my company divide has two buildings. I have isa between them. I create a new network object for the second part. Immediately after I create the network object I lose the ping. the range ip on the second building is 192.168.x.x
Post #: 1
RE: can not ping address ranges in new network - 20.Jun.2011 8:18:47 AM   
paulo.oliveira

 

Posts: 3472
Joined: 3.Jan.2008
From: Amazon, Brazil
Status: offline
Hi,

when you create a new Network object on ISA firewall you must associate it to a physical network adapter.

For more info about ISA Networks: http://www.isaserver.org/tutorials/Overview-ISA-TMG-Networking-ISA-Networking-Case-Study-Part1.html

Regards,
Paulo Oliveira.

_____________________________

Microsoft Premier Field Engineer (PFE)
Blog: http://poliveirasilva.wordpress.com/
Twitter: https://twitter.com/poliveirasilva

(in reply to hadideveloper)
Post #: 2
RE: can not ping address ranges in new network - 20.Jun.2011 10:42:35 AM   
hadideveloper

 

Posts: 156
Joined: 20.Jun.2011
Status: offline
thanks paulo,
how can I associate the network object to nic.
I read the link you sent and I think I should be more specific.
I have 4 network objects. 1-internal 2-external 3-external trusted 4- vpn. In the external  trusted I associate 192.168.1.x to 192.168.40.x address range. now I can ping 192.168.80.x (due to access rule) but when I create new network object and give that 192.168.80.0 to 192.168.80.255 address range I lose my ping. The logging says fwx_e_unreachabeAddress

(in reply to paulo.oliveira)
Post #: 3
RE: can not ping address ranges in new network - 20.Jun.2011 12:03:32 PM   
paulo.oliveira

 

Posts: 3472
Joined: 3.Jan.2008
From: Amazon, Brazil
Status: offline
Hi,

if you read carefully the article, you will see this:
quote:

You can create multiple ISA Firewall Networks on a single ISA Firewall. For example, suppose you wanted to create an ISA Firewall Network for wireless guest computers to connect to the Internet. In this case, you would add a third NIC to the ISA firewall (the other two interfaces are for the external interface and the internal interface). The third NIC would become the “root” of a new ISA Firewall Network. You would then assign addresses to that ISA Firewall Network. Each NIC on the ISA firewall needs to be on a different network ID, so after installing the third NIC, we assign it an IP address on a network ID that is different than the other two NICs. Then we assign IP addresses for the new ISA Firewall Network. In the figure below, you can see that all addresses on network ID 192.168.0.0/24 are part of the Guest ISA Firewall Network.

Regards,
Paulo Oliveira.

_____________________________

Microsoft Premier Field Engineer (PFE)
Blog: http://poliveirasilva.wordpress.com/
Twitter: https://twitter.com/poliveirasilva

(in reply to hadideveloper)
Post #: 4
RE: can not ping address ranges in new network - 20.Jun.2011 12:13:07 PM   
hadideveloper

 

Posts: 156
Joined: 20.Jun.2011
Status: offline
thanks for your time paulo,
I will test that tomorrow morning. You know the strange thing for me is that, I can ping the address without network object.
but thnaks again for your replies

(in reply to paulo.oliveira)
Post #: 5
RE: can not ping address ranges in new network - 20.Jun.2011 12:57:29 PM   
paulo.oliveira

 

Posts: 3472
Joined: 3.Jan.2008
From: Amazon, Brazil
Status: offline
Hi,

as I said before, if you add the Network, ISA will try to find a physical adapter that is bound (associated) with the network range.

Since it does not find it, ISA says it can not reach it.

I know it sounds confusing, but if you read the article series you will really understand ISA Networks.

Regards,
Paulo Oliveira.

_____________________________

Microsoft Premier Field Engineer (PFE)
Blog: http://poliveirasilva.wordpress.com/
Twitter: https://twitter.com/poliveirasilva

(in reply to hadideveloper)
Post #: 6
RE: can not ping address ranges in new network - 21.Jun.2011 9:58:43 AM   
hadideveloper

 

Posts: 156
Joined: 20.Jun.2011
Status: offline
hi, paulo
my problem still exists. but I  think the problem is about the config that my network has. please see the picture and help me

isa ------->coder------->building3 range 192.168.10.x
                    |
                    |
               building 2 range 192.168.80.x

when I create network object for building 2 I lose my ping but after I read the article I think the problem is about coder. because 1 input and two outputs

(in reply to paulo.oliveira)
Post #: 7
RE: can not ping address ranges in new network - 21.Jun.2011 10:06:17 AM   
paulo.oliveira

 

Posts: 3472
Joined: 3.Jan.2008
From: Amazon, Brazil
Status: offline
Hi,

in this case you won´t create a Network for build 2.


Regards,
Paulo Oliveira.

_____________________________

Microsoft Premier Field Engineer (PFE)
Blog: http://poliveirasilva.wordpress.com/
Twitter: https://twitter.com/poliveirasilva

(in reply to hadideveloper)
Post #: 8
RE: can not ping address ranges in new network - 21.Jun.2011 10:14:18 AM   
hadideveloper

 

Posts: 156
Joined: 20.Jun.2011
Status: offline
tnx again paulo

(in reply to paulo.oliveira)
Post #: 9
RE: can not ping address ranges in new network - 21.Jun.2011 10:26:46 AM   
paulo.oliveira

 

Posts: 3472
Joined: 3.Jan.2008
From: Amazon, Brazil
Status: offline
You are welcome!

Regards,
Paulo Oliveira.

_____________________________

Microsoft Premier Field Engineer (PFE)
Blog: http://poliveirasilva.wordpress.com/
Twitter: https://twitter.com/poliveirasilva

(in reply to hadideveloper)
Post #: 10
RE: can not ping address ranges in new network - 21.Jul.2011 8:01:38 PM   
luluxiu

 

Posts: 6
Joined: 20.Jul.2011
Status: offline
Because it does not find it, ISA said, it can not reach it. I know this may sound to a little confusing, but if you read the series, you will truly understand the ISA network...

_____________________________

Tera Items,Tera Gold Cheap,WOW Items

(in reply to paulo.oliveira)
Post #: 11

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA 2006 General] >> General >> can not ping address ranges in new network Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts