Tema: Re: isa add static route
Autorius: myk
Data: 2010-09-30 12:48:26
tskant VIGOR lane esanti kompa 192,168,1,10 padariau DMZ host ir vis viena 
nepavyksta papingint arba RDP
"myk" <tester@myk.mine.nu> wrote in message 
news:i81mbn$kvf$1@trimpas.omnitel.net...
> Sveiki.
>
> yra tokia schema
>
> Yra ISA 2006 routeris, kurio LAN 192.168.0.0/24 i kurio LAN pajungtas 
> VIGOR 2910g routeris per WAN porta. DC kontroleris isduoda vigorui 
> 192.168.0.53 adresa. Vigoro LAN 192,168,1,0/24
>
> Pasijungus i vigoro tinkla ISA tinkla pasiekti pavyksta.
>
> Is ISA tinklo pasiekti vigor LAN nepavyksta.
>
> Kaip prideti ISA static route?
> pabandziau
>
> 1. route add 192,168,1,0 mask 255,255,255,0 192,168,0,53
>
> 2. sukuriau access rule
> allow protocol icmp, rdp from INTERNAL (192,168,0,0/24) and localhost to 
> VIGOR(192,168,1,0/24) all users
>
> 3. pridejau network rule
> source INTERNAL destination VIGOR relationship route.
>
> rezultatai.
>
> pingas nepraeina - destination host unreachable
> ISA monitoring rodo
> source            destination
> 192.168.0.1 192.168.1.10 PING ICMP - - -  Local Host vigor   Denied 
> Connection    -    30.09.2010 11:35:48 30.09.2010 09:35:48 8 0 0 0 0 
> 0xc004002d FWX_E_UNREACHABLE_ADDRESS  0x0 0x0 Firewall -
>
>
> tai kas ne taip? dekui uz mintis
>