Hướng đinh tuyến

[bachcon]

Tôi cài ISA 2004 - không dùng Domain
có 3 card mạng
c1:
192.168.100.5
255.255.255.0
192.168.100.1 ---> to Internet

c2:
10.41.150.8
255.255.255.0 ---> to LAN

c3:
192.168.150.16
255.255.255.0
---> to DMZ
trong ISA: có policy
- HTTP:80
... mơ tuong đối đầy đủ


Fortigate:
Route
192.168.150.x/255.255.255.0/10.41.150.8
10.41.205.0/255.255.255.0/10.41.150.8 ====> day la VPN tu Internet vao
10.41.152.0/255.255.255.0/10.41.150.8 ===> WEB noi bo

CHo hỏi từ VPN vào không vào được WEB nội bộ 10.41.152.x

theo dõi log trên ISA có báo
"
Closed Connection ISA_SERVER 10/21/2011 10:34:05 AM
Log type: Firewall service
Status: A connection was gracefully closed in an orderly shutdown process with a three-way FIN-initiated handshake.
Rule: Test
Source: VPN Clients ( 10.41.205.18:8)
Destination: Internal (dt.webcom.vn 10.41.152.244:0)
Protocol: Ping
User: cuadat
"

[nthtrang]

Chào bạn,

Bạn phải đảm bảo việc cấu hình VPN trên ISA chính xác thì việc truy cập mới thành công dc...
Nếu dc bạn chup cho mình xem dòng cấu hình trên ISA của bạn há :)

[bachcon]

hiện tại log windows báo lỗi

ISA Server detected routes through the network adapter Internet that do not correlate with the network to which this network adapter belongs. When networks are configured correctly, the IP address ranges included in each array-level network must include all IP addresses that are routable through its network adapters according to their routing tables. Otherwise valid packets may be dropped as spoofed. The following ranges are included in the network's IP address ranges but are not routable through any of the network's adapters: 10.41.152.0-10.41.152.239;10.41.154.0-10.41.179.255;10.41.200.0-10.41.201.255;. Note that this event may be generated once after you add a route, create a remote site network, or configure Network Load Balancing and may be safely ignored if it does not re-occur.