Chàoc các bạn.
Hê thống mình có 2 Site chay VPN site to site, xảy ra hiện tương lạ như sau tại ISA site 2.
Card internal
IP address 10.0.0.99
Mask 255.0.0.0
External:
IP address 192.168.1.101
Mask 255.255.255.0
Gateway: 192.168.1.1
Thế nhưng trong khi mình cài ISA, add card internal chỉ có các dãy IP liên quan đến mạng 10. KHi cài ISA xong rồi thì xem lại card internal và external xuất hiện rất nhiều dãy IP lạ như hình.
Điều này khiến bảng route của mình bị sai, và các packet giữa 2 site bị drop mặc dù vẫn còn trạng thái connected. Nhưng không thể add tất cả IP lạ đó vào internal được. Cho mình hỏi những IP đó ở đâu ra. Và làm cách nào để loại bỏ chúng. Đồng thời bảng route của mình rất là nhiều, nhiều kinh khủng trong khi bảng route tại ISA site1 chi có mười mấy dòng:
Kèm theo thông báo lỗi trong ISA:
Description: The routing table for the network adapter Internal includes IP address ranges that are not defined in the array-level network Internal, to which it is bound. As a result, packets arriving at this network adapter from the IP address ranges listed below or sent to these IP address ranges via this network adapter will be dropped as spoofed. To resolve this issue, add the missing IP address ranges to the array network.
The following IP address ranges will be dropped as spoofed:
External:38.117.98.196-38.117.98.196,58.83.135.46-58.83.135.46,
60.6.200.18-60.6.200.20,60.6.200.31-60.6.200.31,
60.18.146.179-60.18.146.179,60.28.200.80-60.28.200.80,
60.254.131.146-60.254.131.146,60.254.131.161-60.254.131.161,
64.74.243.25-64.74.243.25,64.88.164.170-64.88.164.170,
85.17.72.66-85.17.72.66,89.202.157.215-89.202.157.215,93.
184.71.26-93.184.71.26,94.75.236.122-94.75.236.122,
110.232.176.30-110.232.176.30,117.135.134.28-117.135.134.28,
117.135.135.103-117.135.135.103,121.14.11.28-121.14.11.28,
121.14.11.156-121.14.11.156,121.14.11.187-121.14.11.187,
121.101.223.45-121.101.223.45,121.101.223.56-121.101.223.56,
122.226.213.92-122.226.213.92,122.228.202.5-122.228.202.5,
122.228.202.17-122.228.202.17,
123.235.43.246-123.235.43.246,124.238.243.51-124.238.243.51,
125.39.61.115-125.39.61.115,125.39.100.0-125.39.100.255,
195.222.17.41-195.222.17.41,203.77.188.253-203.77.188.253,
208.111.182.222-208.111.182.222,211.103.159.71-211.103.159.71,
211.103.159.89-211.103.159.89,
211.103.159.100-211.103.159.100,211.103.159.164-211.103.159.164,
212.96.161.234-212.96.161.234,212.96.161.253-212.96.161.253,
218.30.82.28-218.30.82.28,218.93.16.117-218.93.16.117,
219.138.163.14-219.138.163.14,219.232.254.23-219.232.254.23,
219.238.233.223-219.238.233.223,
220.181.85.253-220.181.85.253,220.181.126.7-220.181.126.7,
221.192.148.254-221.192.148.254,221.194.142.98-221.194.142.98,
222.242.199.34-222.242.199.34;
ISA Server detected routes through the network adapter External that do not correlate with the network to which this network adapter belongs. When networks are configured correctly, the IP address ranges included in each array-level network must include all IP addresses that are routable through its network adapters according to their routing tables. Otherwise valid packets may be dropped as spoofed. The following ranges are included in the network's IP address ranges but are not routable through any of the network's adapters: 38.117.98.196-38.117.98.196,58.83.135.46-58.83.135.46,
60.6.200.18-60.6.200.20,
60.6.200.31-60.6.200.31,60.18.146.179-60.18.146.179,
60.28.200.80-60.28.200.80,
60.254.131.146-60.254.131.146,60.254.131.161-60.254.131.161,
64.74.243.25-64.74.243.25,
64.88.164.170-64.88.164.170,85.17.72.66-85.17.72.66,89.202.157.
215-89.202.157.215,
93.184.71.26-93.184.71.26,94.75.236.122-94.75.236.122,
110.232.176.30-110.232.176.30,
117.135.134.28-117.135.134.28,117.135.135.103-117.135.135.103,
121.14.11.28-121.14.11.28,
121.14.11.156-121.14.11.156,121.14.11.187-121.14.11.187,
121.101.223.45-121.101.223.45,
121.101.223.56-121.101.223.56,122.226.213.92-122.226.213.92,
122.228.202.5-122.228.202.5,
122.228.202.17-122.228.202.17,123.235.43.246-123.235.43.246,
124.238.243.51-124.238.243.51,
125.39.61.115-125.39.61.115,125.39.100.0-125.39.100.255,
195.222.17.41-195.222.17.41,
203.77.188.253-203.77.188.253,208.111.182.222-208.111.182.222,
211.103.159.71-211.103.159.71,
211.103.159.89-211.103.159.89,211.103.159.100-211.103.159.100,
211.103.159.164-211.103.159.164,
212.96.161.234-212.96.161.234,212.96.161.253-212.96.161.253,
218.30.82.28-218.30.82.28,218.93.16.117-218.93.16.117,
219.138.163.14-219.138.163.14,219.232.254.23-219.232.254.23,
219.238.233.223-219.238.233.223,
220.181.85.253-220.181.85.253,220.181.126.7-220.181.126.7,
221.192.148.254-221.192.148.254,221.194.142.98-221.194.142.98,
222.242.199.34-222.242.199.34;. Note that this event may be generated once after you add a route, create a remote site network, or configure Network Load Balancing and may be safely ignored if it does not re-occur.
Cám ơn bất kỳ ý kiến nào.
