Re: one way or two way
- From: "Phillip Windell" <philwindell@xxxxxxxxxxx>
- Date: Fri, 11 Jan 2008 10:19:53 -0600
"Ramon Niese" <ramon@xxxxxxxxxxx> wrote in message
news:u0$xkrDVIHA.5508@xxxxxxxxxxxxxxxxxxxxxxx
Can anyone explain me this error?
A packet generated on the local host was rejected because its source IP
address is assigned to one network adapter and its destination IP address
is reachable through another network adapter.
If a machine has two nics in two different subnets and a packet is destined
for a particular destination,...then the Routing Table is used to determine
the proper Source Nic (source IP#) to have the packet "leave from" in order
to be routed correctly.
If you somehow "force" the Source Nic to be the other Nic then it will fail.
That is what the error says is happening. The Source Nic (source IP#) must
be allowed to be "dynamically" chosen based on the routing table (not
"forced"). For example: a packet destined for a subnet that is not a subnet
that the source machine is a member of will always be assigned the source
IP# of the Primary IP# of the Nic that posseses the Default Gateway,...hence
only one Default Gateway is allowed per machine.
Additional Gateways can be added but they need to all be within the same
subnet and all be listed on the same Nic which allows the same Source IP# to
be used no matter what. These will be used in a Dead Gateway Detection
situation.
--
Phillip Windell
www.wandtv.com
The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/ISA2004_AccessRules.html
Troubleshooting Client Authentication on Access Rules in ISA Server 2004
http://download.microsoft.com/download/9/1/8/918ed2d3-71d0-40ed-8e6d-fd6eeb6cfa07/ts_rules.doc
Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.asp
Microsoft ISA Server Partners: Partner Hardware Solutions
http://www.microsoft.com/forefront/edgesecurity/partners/hardwarepartners.mspx
-----------------------------------------------------
.
- References:
- one way or two way
- From: Ramon Niese
- Re: one way or two way
- From: Ramon Niese
- one way or two way
- Prev by Date: Re: Webvpnportforward
- Next by Date: Bypass proxy for local addresses and ISA Issue..
- Previous by thread: Re: one way or two way
- Next by thread: RE: Creating MessageLabs Network in ISA Server 2004
- Index(es):
Relevant Pages
|