RE: Disable ICMP redirects
From: Toby (Toby_at_discussions.microsoft.com)
Date: 08/18/04
- Next message: Ray Fong [MSFT]: "RE: CALs disappeared; were they not activated?"
- Previous message: Elton: "Re: New Upgrade"
- In reply to: Steven Laverty: "Disable ICMP redirects"
- Messages sorted by: [ date ] [ thread ]
Date: Wed, 18 Aug 2004 10:17:03 -0700
What it sound like you need to do to have the firewall only see the server is
set-up ISA server, install a 2nd network card, and completly redo the network
set-up, that way all internet requests would be processed through the server.
Right now the server is redirecting the clients to the firewall because (I
assume.) that the server's gateway is the ip for the firewall, (10.0.0.250).
Quite honestly it would be easier and less time consuming to buy the licenses
for the firewall.
"Steven Laverty" wrote:
> I have 20 users connecting to a sbs 2003 (10.0.0.1) server
> as their default gateway. The SERVER's default gateway is
> (unfortunately) on the same lan, this is a sonicwall
> (10.0.0.250).
>
> The sonic is complaining that all its 10 lan licenses are
> used up and only about 10 users can access the internet.
> So it seems to me that the sbs server is doing icmp
> redirects for the lan clients saying "look, next time you
> wanna go to the internet go to the sonic directly" and
> thus it uses up a license needlessly.
>
> I want it so that the sonic only sees one lan client and
> that is the SBS server, without redesigning the lan
> (either physically or via subnetting) as we have a vpn
> setup that works using this design and cannot change the
> setup.
>
> I presume the SBS is doing the redirects. There is a reg
> fix for this ie KB293626 but I tried both versions and
> neither worked.
>
> Has anyone got any ideas ? Cannot afford the additional
> sonic licenses. Sonic suggest telling the firewall to have
> a rule only allow access from SBS but that will probably
> kill off all internet access . . . . will try asd a last
> resort.
>
> Regards,
>
> Steve
>
- Next message: Ray Fong [MSFT]: "RE: CALs disappeared; were they not activated?"
- Previous message: Elton: "Re: New Upgrade"
- In reply to: Steven Laverty: "Disable ICMP redirects"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
