配置ISA防火墙作为网络间的路由器( 三 )


Reply from 192.168.0.254: bytes=32 time<1ms TTL=128 Ping statistics for 192.168.0.254:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 1ms, Average = 0ms
/* Ping LAN1中的Server1*/
C:Documents and Settingsxx>ping 192.168.0.1 -n 2 Pinging 192.168.0.1 with 32 bytes of data: Request timed out.
Request timed out. Ping statistics for 192.168.0.1:
Packets: Sent = 2, Received = 0, Lost = 2 (100% loss),Ping不通了?Why?相信你应该可以从上面的TCP/IP配置说明中分析出这一点 。我们再在LAN1中的Server1上进行测试: /* 在Server1上进行测试*/ C:Documents and SettingsAdministrator>ipconfig /all Windows IP Configuration Host Name . . . . . . . . . . . . : Sydney
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No Ethernet adapter Local Area Connection: Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel 21140-Based PCI Fast Ethernet Adapter (Generic)
Physical Address. . . . . . . . . : 00-03-FF-FF-36-DB
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.0.1
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.1
/* Ping ISA防火墙的LAN1接口*/
C:Documents and SettingsAdministrator>ping 192.168.0.254
Pinging 192.168.0.254 with 32 bytes of data: Reply from 192.168.0.254: bytes=32 time<1ms TTL=128
Reply from 192.168.0.254: bytes=32 time<1ms TTL=128 Ping statistics for 192.168.0.254:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
Control-C
^C
/* Ping ISA防火墙的LAN2接口*/
C:Documents and SettingsAdministrator>ping 192.168.2.1 Pinging 192.168.2.1 with 32 bytes of data: Request timed out.
Request timed out. Ping statistics for 192.168.2.1:
Packets: Sent = 2, Received = 0, Lost = 2 (100% loss),
Control-C
^C /* Ping 位于LAN2的Client1*/
C:Documents and SettingsAdministrator>ping 192.168.2.8 Pinging 192.168.2.8 with 32 bytes of data: Request timed out.
Ping statistics for 192.168.2.8:
Packets: Sent = 1, Received = 0, Lost = 1 (100% loss),
Control-C
^C
位于LAN2的接口都Ping不通,Why?很简单,在Server1上没有到LAN2的路由 。我们看看Server1的路由表:
C:Documents and SettingsAdministrator>route print IPv4 Route Table
===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x10003 ...00 03 ff ff 36 db ...... Intel 21140-Based PCI Fast Ethernet Adapter
(Generic)
===========================================================================
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.0.1 192.168.0.1 20
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
192.168.0.0 255.255.255.0 192.168.0.1 192.168.0.1 20
192.168.0.1 255.255.255.255 127.0.0.1 127.0.0.1 20
192.168.0.255 255.255.255.255 192.168.0.1 192.168.0.1 20
224.0.0.0 240.0.0.0 192.168.0.1 192.168.0.1 20
255.255.255.255 255.255.255.255 192.168.0.1 192.168.0.1 1
Default Gateway: 192.168.0.1
===========================================================================
Persistent Routes: 默认路由是192.168.0.1,没有到LAN2的路由 。对于此情况,你需要添加到LAN2的路由,或者重新设置默认网关为ISA防火墙的LAN1接口 。在具体采用哪种方式时,你需要根据网络的环境来决定 。对于不能修改默认网关的情况,例如此主机是另外的网络出口的情况(如此计算机上还接有另外一个网卡,连接到Internet),你需要添加到LAN2的路由 。6、在LAN1的Server1上添加LAN2的路由 在Server1的cmd下运行route add 192.168.2.0 mask 255.255.255.0 192.168.0.254,然后看看路由表: C:Documents and SettingsAdministrator>route add 192.168.2.0 mask 255.255.255.0 192.168.0.254 -p C:Documents and SettingsAdministrator>route print IPv4 Route Table

推荐阅读