Re: ISA Server detected routes - Event 14147

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



The routing table on your computer says that address 10.255.255.255
(broadcast address) would go out of the WAN NIC. ISA configuration, however,
does not have 10.255.255.255 associated with the same network (e.g.
external).

I think that in the case of a broadcast address you can usually ignore this
alert, although the best thing to do would be to add 10.255.255.255 to the
network that WAN is assocuated with.

HTH,
Ori.

--
Please do not send email directly to this alias. This alias is for newsgroup
purposes only.This posting is provided "AS IS" with no warranties, and
confers no rights.
"Ifstat" <Ifstat@xxxxxxxxxxxxx> wrote in message
news:C5305A36-F6D5-47BE-9464-298D23407A3A@xxxxxxxxxxxxxxxx
Hi,
Could some please help me uderstand this error and find the solution. I
have
read the article at ISA.org, but still struggling?
I have attached my network configuration, obivously some minor details
have
been altered.

Event Type: Error
Event Source: Microsoft Firewall
Event Category: None
Event ID: 14147
Date: 6/22/2006
Time: 10:29:25 AM
User: N/A
Computer: OCECPRISA
Description:
ISA Server detected routes through adapter WAN that do not correlate with
the network
element to which this adapter belongs. For best practice, the address
range
of an ISA
Server network should match the address ranges routable through the
associated network
adapter as defined in the routing table. Otherwise valid packets may be
dropped as spoofed.
(This alert may occur momentarily when you create a remote site network.
You
may safely ignore
this message if it does not reoccur.)
The address ranges in conflict are: 10.255.255.255-10.255.255.255;.

Windows IP Configuration
Host Name . . . . . . . . . . . . : isa
Primary Dns Suffix . . . . . . . : mydomain.com.cy
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : Yes
DNS Suffix Search List. . . . . . : mydomain.com.cy

com.cy

PPP adapter RAS Server (Dial In) Interface:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . :

WAN (PPP/SLIP) Interface
Physical Address. . . . . . . . . : *Removed*
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 10.0.0.29
Subnet Mask . . . . . . . . . . . : 255.255.255.255
Default Gateway . . . . . . . . . :

Ethernet adapter LAN:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . :
Intel(R) PRO/1000 MT Network Connection
Physical Address. . . . . . . . . : *Removed*
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 10.0.0.10
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : 10.0.0.4

Ethernet adapter WAN:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/100 Network Connection
Physical Address. . . . . . . . . : *Removed*
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.1.2
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1

IPv4 Route Table
===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface

0x10002 ...*Removed* ...... WAN (PPP/SLIP) Interface

0x10003 ...*Removed* ...... Intel(R) PRO/1000 MT Network Connection

0x10004 ...*Removed* ...... Intel(R) PRO/100 Network Connection

===========================================================================
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface
Metric
0.0.0.0 0.0.0.0 192.168.1.1 192.168.1.2 30
10.0.0.0 255.255.255.0 10.0.0.10 10.0.0.10 10
10.0.0.10 255.255.255.255 127.0.0.1 127.0.0.1 10
10.0.0.26 255.255.255.255 10.0.0.29 10.0.0.29 1
10.0.0.29 255.255.255.255 127.0.0.1 127.0.0.1 50
10.255.255.255 255.255.255.255 10.0.0.10 10.0.0.10 10
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
192.168.1.0 255.255.255.0 192.168.1.2 192.168.1.2 30
192.168.1.2 255.255.255.255 127.0.0.1 127.0.0.1 30
192.168.1.255 255.255.255.255 192.168.1.2 192.168.1.2 30
218.x.x.x 255.255.255.255 192.168.1.1 192.168.1.2 30
224.0.0.0 240.0.0.0 10.0.0.10 10.0.0.10 10
224.0.0.0 240.0.0.0 192.168.1.2 192.168.1.2 30
255.255.255.255 255.255.255.255 10.0.0.10 10.0.0.10 1
255.255.255.255 255.255.255.255 192.168.1.2 192.168.1.2 1
Default Gateway: 192.168.1.1
===========================================================================
Persistent Routes:
None


.



Relevant Pages

  • Re: ISA Server detected routes - Event 14147
    ... the WAN adapter. ... address of 10.0.0.29 called WAN. ... The "WAN" NIC is associated with External connection on the ISA ... The "LAN" NIC is associated with the Internal network connection 10.0.0.10 ...
    (microsoft.public.isa)
  • Re: ISA Server detected routes - Event 14147
    ... Another option I can think of is if the internal network was manually ... with the WAN adapter. ... address of 10.0.0.29 called WAN. ... Connection-specific DNS Suffix. ...
    (microsoft.public.isa)
  • Re: Cannot connect to Domain....
    ... Internal Network Adapter is not configured to register IP address in DNS ... the procedure for "Internal or single network adapter configuration" in the ...
    (microsoft.public.windows.server.sbs)
  • Re: Can only access servers via UNC if I use the FQDN
    ... Windows IP Configuration ... Please describe your network topology or post a link ...
    (microsoft.public.windows.server.networking)
  • Re: ISA Server detected routes - Event 14147
    ... Another option I can think of is if the internal network was manually ... with the WAN adapter. ... address of 10.0.0.29 called WAN. ...
    (microsoft.public.isa)