Kh?c ph?c: Outgoing k?t n?i t? SecureNAT khch hng c th? khng lin t?c khng v? c?a cch Forefront Threat Management Gateway 2010 qu?n l? h? bi c?ng NAT ngu?n

D?ch tiu ? D?ch tiu ?
ID c?a bi: 2596065 - Xem s?n ph?m m bi ny p d?ng vo.
Ch ?
Quan tr?ng Bi vi?t ny ch?a thng tin v? lm th? no ? thay ?i s? ng k?. Hay chc chn sao lu s ng ky trc khi ban sa i no. Hay chc chn rng ban bit cach khi phuc s ng ky nu s c xay ra. bit thm thng tin v cach sao lu, phuc hi, va sa i s ng ky, hay bm s bai vit sau y xem bai vit trong C s Kin thc Microsoft:
322756 Cch sao lu v lu tr? s? ng k trong Windows
Bung t?t c? | Thu g?n t?t c?

TRI?U CH?NG

G?i i cc k?t n?i t? SecureNAT khch hng c th? khng lin t?c khng v? c?a nh th? no Microsoft Forefront Threat Management Gateway (TMG) 2010 qu?n l? i m?ng ?a ch? d?ch (NAT) ngu?n c?ng bi.

NGUYN NHN

Khi k?t n?i SecureNAT g?i i ?c th?c hi?n thng qua m?t my ch? TMG v NAT ?c p d?ng, TMG ? xc ?nh ngu?n i c?ng s? ?c s? d?ng cho k?t n?i NAT. TMG duy tr? m?t h? bi c?a ngu?n c?ng ? s? d?ng cho cc k?t n?i NAT g?i i. Khi k?t n?i ?c ng l?i, c?ng ngu?n g?i i ?c gi?i phng quay l?i h? bi v ngay l?p t?c c s?n cho m?t k?t n?i sau i.

Hay xem xet cac tinh hung sau:
  • M?t c?ng ngu?n g?i i ?c s? d?ng ngay sau khi k?t n?i tr?c thng qua cc c?ng ngu?n ?c ng l?i.
  • i ngu?n c?ng ?c s? d?ng ? k?t n?i g?i i m?i ?n cng m?t my ch? bn ngoi.
  • K?t n?i tr?c trn my ch? bn ngoi l thu?c TIME_WAIT.
Trong tr?ng h?p ny, i?u ny c? g?ng k?t n?i c th? khng.

Nh n?c TIME_WAIT l m?t ph?n c?a cc TCP RFC 793 ?c i?m k? thu?t v ?c s? d?ng ? b?o v? cc k?t n?i t? b? h?ng b?i cc gi d? li?u v?n c th? n?i b?t t? m?t k?t n?i tr?c. Nh m?t RFC 793, khi k?t n?i gracefully ng c?a, n nn ?c gi? trong m?t nh n?c TIME_WAIT cho b?n pht, kho?ng hai l?n t?i a phn o?n ?i.

K?t n?i SecureNAT i s? khng thnh cng khi cc i?u ki?n sau l ng:
  • TMG s? d?ng c?ng ngu?n tng t? cho m?t k?t n?i g?i i ?n my ch? bn ngoi trong v?ng b?n pht c?a m?t k?t n?i tr?c.
  • Cc my ch? bn ngoi c cc k?t n?i tr?c t? c?ng ngu?n tng t? trong m?t nh n?c TIME_WAIT.
Khi cc i?u ki?n ny l c th?t, my ch? bn ngoi s? khng ch?p nh?n n? l?c k?t n?i m?i. i?u ny gy ra SecureNAT k?t n?i th?t b?i.

V?n ? ny l g?p ph?i ch? khi c nh?ng m?c ? i SecureNAT khch hng lu l?ng truy c?p cao, v khi h?u h?t cc giao thng i khch hng SecureNAT l h?ng ?n my ch? bn ngoi.

GI?I PHP

C?nh bo V?n ? nghim tr?ng c th? x?y ra n?u b?n s?a ?i registry khng chnh xc b?ng cch s? d?ng k? bin so?n ho?c b?ng cch s? d?ng m?t phng php. Nhng s c nay co th yu cu ban cai t lai h iu hanh. Microsoft khng th bao am rng nhng s c nay co th c giai quyt. Ban phai t chiu rui ro khi sa i s ng ky.

MG Service Pack 2 thm TIME_WAIT h? tr? cho h? bi ra c?ng NAT.

? gi?i quy?t v?n ? ny, ci ?t cc gi d?ch v? ?c m t? trong bi vi?t c s? ki?n th?c Microsoft sau:
2555840 M t? c?a gi d?ch v? 2 cho Microsoft Forefront Threat Management Gateway 2010
Theo m?c ?nh, h? tr? TIME_WAIT trong TMG Service Pack 2 khng ?c php. ? kch ho?t tnh nng h? tr? TIME_WAIT, b?n ph?i t?o registry subkey sau y:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Fweng\Parameters

DWORD:
ApplyCooldownForLocalSourcePortReuseValue = 1.
Gia tri mc inh: 0. (T?i thi?u gi tr? = 0. Gi tr? t?i a = 1.)
B?n ph?i kh?i ?ng l?i my ch? TMG cho s? thay ?i ng k? ? c hi?u l?c.

Nh m?t RFC 793, mt xu?ng ? ti s? d?ng c?ng m?c ?nh l b?n pht trong mili giy (240000).

M?c d chng ti khng khuyn b?n nn thay ?i gi tr? m?c ?nh, th?i gian mt xu?ng c th? ?c i?u ch?nh b?ng cch s? d?ng registry subkey sau y:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Fweng\Parameters

DWORD: CooldownForLocalSourcePortReuseTime
Gia tri: Th?i gian trong mili giy.
M?c ?nhgi tr?:240000. (T?i thi?u gi tr? = 0. Gi tr? t?i a = 100000000.)
B?n ph?i kh?i ?ng l?i my ch? TMG cho s? thay ?i ng k? ? c hi?u l?c.

T?NH TR?NG

Microsoft ? xc nh?n r?ng y l m?t v?n ? trong cc s?n ph?m c?a Microsoft ?c li?t k trong ph?n "p d?ng cho".

THAM KH?O

bit thm thng tin v thut ng cp nht phn mm, hay bm vao s bai vit sau xem bai vit trong C s Kin thc Microsoft:
824684 M ta thut ng chun c s dung m ta cac ban cp nht phn mm cua Microsoft

Thu?c tnh

ID c?a bi: 2596065 - L?n xem xt sau cng: 17 Thang Mi 2011 - Xem xt l?i: 1.0
p d?ng
  • Microsoft Forefront Threat Management Gateway 2010 Enterprise
  • Microsoft Forefront Threat Management Gateway 2010 Standard
  • Microsoft Forefront Threat Management Gateway 2010 Service Pack 1
T? kha:
kbfix kbbug kbexpertiseinter kbsurveynew kbmt KB2596065 KbMtvi
My d?ch
QUAN TRONG: Bi vi?t ny ?c d?ch b?ng ph?n m?m d?ch my c?a Microsoft ch? khng ph?i do con ng?i d?ch. Microsoft cung c?p cc bi vi?t do con ng?i d?ch v c? cc bi vi?t do my d?ch ? b?n c th? truy c?p vo t?t c? cc bi vi?t trong C s? Ki?n th?c c?a chng ti b?ng ngn ng? c?a b?n. Tuy nhin, bi vi?t do my d?ch khng ph?i lc no c?ng hon h?o. Lo?i bi vi?t ny c th? ch?a cc sai st v? t? v?ng, c php ho?c ng? php, gi?ng nh m?t ng?i n?c ngoi c th? m?c sai st khi ni ngn ng? c?a b?n. Microsoft khng ch?u trch nhi?m v? b?t k? s? thi?u chnh xc, sai st ho?c thi?t h?i no do vi?c d?ch sai n?i dung ho?c do ho?t ?ng s? d?ng c?a khch hng gy ra. Microsoft c?ng th?ng xuyn c?p nh?t ph?n m?m d?ch my ny.
Nh?p chu?t vo y ? xem b?n ti?ng Anh c?a bi vi?t ny:2596065

Cung cp Phan hi

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com