54SA.COM|专注于系统运维管理,为中国SA提供动力!
Getting online shouldn't be tough. $7.99 .COMs
系统管理员之家Banner
当前位置: 主页 > Windows > 服务器 > ISA >

配置ISA防火墙作为网络间的路由器二

时间:2010-10-28 21:31来源:未知 编辑:Tina

  3、测试LAN2到LAN1的连通性
  
  我们在位于LAN2的Client1上进行测试,Ping位于LAN1的Server1,并访问运行在其之上的FTP服务。
  
  /* 在Client1上进行测试*/
  
  C:Documents and Settingsxx>ipconfig
  
  Windows IP Configuration
  
  Ethernet adapter Loopback:
  
  Connection-specific DNS Suffix . :
  IP Address. . . . . . . . . . . . : 192.168.2.8
  Subnet Mask . . . . . . . . . . . : 255.255.255.0
  Default Gateway . . . . . . . . . : 192.168.2.1
   
  /* Ping自己的网关(ISA防火墙的LAN2接口)*/
  
  C:Documents and Settingsxx>ping 192.168.2.1 -n 2
  
  Pinging 192.168.2.1 with 32 bytes of data:
  
  Reply from 192.168.2.1: bytes=32 time=6ms TTL=128
  Reply from 192.168.2.1: bytes=32 time<1ms TTL=128
  
  Ping statistics for 192.168.2.1:
  Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
  Approximate round trip times in milli-seconds:
  Minimum = 0ms, Maximum = 6ms, Average = 3ms
  
  /* Ping ISA防火墙的LAN1接口*/
  
  C:Documents and Settingsxx>ping 192.168.0.254 -n 2
  
  Pinging 192.168.0.254 with 3
  
  2 bytes of data:
  Reply from 192.168.0.254: bytes=32 time=1ms TTL=128
  Reply from 192.168.0.254: bytes=32 time<1ms TTL=128
  
  Ping statistics for 192.168.0.254:
  Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
  Approximate round trip times in milli-seconds:
  Minimum = 0ms, Maximum = 1ms, Average = 0ms
   
  /* Ping LAN1中的Server1*/
  C:Documents and Settingsxx>ping 192.168.0.1 -n 2
  
  Pinging 192.168.0.1 with 32 bytes of data:
  
  Reply from 192.168.0.1: bytes=32 time=2ms TTL=127
  Reply from 192.168.0.1: bytes=32 time<1ms TTL=127
  
  Ping statistics for 192.168.0.1:
  Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
  Approximate round trip times in milli-seconds:
  Minimum = 0ms, Maximum = 2ms, Average = 1ms
  
  /*访问Server1上的ftp服务*/
  C:Documents and Settingsxx>ftp 192.168.0.1
  Connected to 192.168.0.1.
  220 External ftp server ready...
  User (192.168.0.1:(none)): anonymous
  331 User name okay, please send complete E-mail address as password.
  Password:
  230 User logged in, proceed.
  ftp> dir
  200 PORT Command successful.
  150 Opening ASCII mode data connection for /bin/ls.
  drw-rw-rw- 1 user group 0 Jul 29 17:58 .
  drw-rw-rw- 1 user group 0 Jul 29 17:58 ..
  drw-rw-rw- 1 user group 0 Jul 29 17:58 AdminScripts
  drw-rw-rw- 1 user group 0 Jul 29 17:58 ftproot
  drw-rw-rw- 1 user group 0 Jul 29 17:58 wwwroot
  226 Transfer complete.
  ftp: 收到 314 字节,用时 0.00Seconds 314000.00Kbytes/sec.
  ftp>
  
  此时,我们在Server1上的ftp管理控制台中看看
   
  注意看客户的IP地址,这是ISA防火墙的LAN1接口的IP。Why?不需要我回答吧。
  
  Okay,这个测试就成功结束了。
  
  4、配置内部到外部使用路由方式
  
  现在我们来修改网络规则,配置内部到外部使用路由方式试试。
  
  点开配置下的网络,在右边的网络规则中双击Internet访问,然后在弹出的属性对话框中,点击网络关系标签,修改为路由。修改后如下图所示:
   
  然后点击应用保存修改和更新防火墙策略。
  
  5、测试LAN2到LAN1的连通性二
  
  /* 在Client1上进行测试*/
  
  C:Documents and Settingsxx>ipconfig
  
  Windows IP Configuration
  
  Ethernet adapter Loopback:
  
  Connection-specific DNS Suffix . :
  IP Address. . . . . . . . .
  
  . . . : 192.168.2.8
  Subnet Mask . . . . . . . . . . . : 255.255.255.0
  Default Gateway . . . . . . . . . : 192.168.2.1
   
  /* Ping自己的网关(ISA防火墙的LAN2接口)*/
  
  C:Documents and Settingsxx>ping 192.168.2.1 -n 2
  
  Pinging 192.168.2.1 with 32 bytes of data:
  
  Reply from 192.168.2.1: bytes=32 time=6ms TTL=128
  Reply from 192.168.2.1: bytes=32 time<1ms TTL=128
  
  Ping statistics for 192.168.2.1:
  Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
  Approximate round trip times in milli-seconds:
  Minimum = 0ms, Maximum = 6ms, Average = 3ms
  
  /* Ping ISA防火墙的LAN1接口*/
  
  C:Documents and Settingsxx>ping 192.168.0.254 -n 2
  
  Pinging 192.168.0.254 with 32 bytes of data:
  
  Reply from 192.168.0.254: bytes=32 time=1ms TTL=128
  Reply from 192.168.0.254: bytes=32 time<1ms TTL=128
  
  Ping statistics for 192.168.0.254:
  Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
  Approximate round trip times in milli-seconds:
  Minimum = 0ms, Maximum = 1ms, Average = 0ms
   
  /* Ping LAN1中的Server1*/
  C:Documents and Settingsxx>ping 192.168.0.1 -n 2
  
  Pinging 192.168.0.1 with 32 bytes of data:
  
  Request timed out.
  Request timed out.
  
  Ping statistics for 192.168.0.1:
  Packets: Sent = 2, Received = 0, Lost = 2 (100% loss),
  
  Ping不通了?Why?相信你应该可以从上面的TCP/IP配置说明中分析出这一点。
  
  我们再在LAN1中的Server1上进行测试:
  
  /* 在Server1上进行测试*/
  
  C:Documents and SettingsAdministrator>ipconfig /all
  
  Windows IP Configuration
  
  Host Name . . . . . . . . . . . . : Sydney
  Primary Dns Suffix . . . . . . . :
  Node Type . . . . . . . . . . . . : Unknown
  IP Routing Enabled. . . . . . . . : No
  WINS Proxy Enabled. . . . . . . . : No
  
  Ethernet adapter Local Area Connection:
  
  Connection-specific DNS Suffix . :
  Description . . . . . . . . . . . : Intel 21140-Based PCI Fast Ethernet Adapter (Generic)
  Physical Address. . . . . . . . . : 00-03-FF-FF-36-DB
  DHCP Enabled. . . . . . . . . . . : No
  IP Address. . . . . . . . . . . . : 192.168.0.1
  Subnet Mask . . . . . . . . . . . : 255.255.255.0
  Default Gateway . . . . . . . . . : 192.168.0.1
   
  /* Ping ISA防火墙的LAN1接口*/
  C:Documents and SettingsAdministrator>ping 192.168.0.254
  
  Pinging 192.168.0.254 with 32 bytes of data:
  
  Reply from 192.168.0.254: bytes=32 time<1ms TTL=128
  Reply from 192.168.0.254: bytes=32 time<1ms TTL=128
  Ping statistics for 192.168.0.254:
  Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
  Approximate round trip times in milli-seconds:
  Minimum = 0ms, Maximum = 0ms, Average = 0ms
  Control-C
  ^C
  
  /* Ping ISA防火墙的LAN2接口*/
  C:Documents and SettingsAdministrator>ping 192.168.2.1
  
  Pinging 192.168.2.1 with 32 bytes of data:
  
  Request timed out.
  Request timed out.
  
  Ping statistics for 192.168.2.1:
  Packets: Sent = 2, Received = 0, Lost = 2 (100% loss),
  Control-C
  ^C
  
  /* Ping 位于LAN2的Client1*/
  C:Documents and SettingsAdministrator>ping 192.168.2.8
  
  Pinging 192.168.2.8 with 32 bytes of data:
  
  Request timed out.
  
  Ping statistics for 192.168.2.8:
  Packets: Sent = 1, Received = 0, Lost = 1 (100% loss),
  Control-C
  ^C
   
  位于LAN2的接口都Ping不通,Why?很简单,在Server1上没有到LAN2的路由。我们看看Server1的路由表:
  C:Documents and SettingsAdministrator>route print
  
  IPv4 Route Table
  ==============================================
  Interface List
  0x1 ........................... MS TCP Loopback interface
  0x10003 ...00 03 ff ff 36 db ...... Intel 21140-Based PCI Fast Ethernet Ad

[责任编辑:Lavy]


------分隔线----------------------------
发表评论
请自觉遵守互联网相关的政策法规,严禁发布色情、暴力、反动的言论。
评价:
用户名:
最新评论 进入详细评论页>>