Internet Connection Wizard Does Not Succeed When the Server Does Not Have an Interface in the LAT (293286)


The information in this article applies to:

  • Microsoft Small Business Server 2000
  • Microsoft BackOffice Server 2000
  • Microsoft Internet Security and Acceleration Server 2000
This article was previously published under Q293286

SYMPTOMS

When you run the Internet Connection Wizard (ICW) for Microsoft Small Business Server (SBS) 2000 or Microsoft BackOffice Server (BOS) 2000 with the Internet Security and Acceleration (ISA) Server installed, you may receive the following error messages:
The Internet Connection Wizard was interrupted because of an error or user intervention. Details have been recorded in the file Icwlog.txt, which can be found in the C:\Program Files\Microsoft BackOffice\Support directory.
Would you like to cancel this action?

Click Yes to exit the wizard and restore your pre-wizard settings.
Click No to proceed with the wizard and configure any remaining components.
Click Cancel to close the wizard immediately without restoring your pre-wizard settings.
You receive this error regardless of whether you click one of the following options on the Configure Packet Filtering page of the ICW:

Enable
Disable
Do not change ISA server packet filters

The Icwlog.txt file contains the following lines:
calling StartFirewallService (0x8007041c).
Error 0x8007941c returned from call to CCometCommit::Commit().
NOTE: The specified path, C:\Program Files\Microsoft BackOffice\Support, is the default path for a typical installation. The actual path that is referenced in the error message is the one that the server uses if it differs from the default.

You may receive the following error message:
"The specified IP address of your local network card is not recorded in the Local Address Table (LAT) of ISA server. You must either change the IP address of your network card to one that is recorded in the LAT, or edit the LAT to include this IP address"
You must click OK on the Configure Network Adapters dialog box to acknowledge the warning. If you receive this error message, the ICW cannot continue. You must cancel it and make the required changes in the LAT of the ISA server before you re-run ICW.

In addition, the following error messages may be logged in Event Viewer:

System Log:
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7024
Description: The Microsoft Firewall service terminated with service-specific error 213000.
Application Log:
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 14017
Description: Incorrect network configuration. The server address is not internal and is not in the Local Address Table (LAT). For more information about this event, see ISA Server Help.

CAUSE

These errors are logged if the server does not have an interface with an IP address within the LAT. This error is most common in cases where two logical network interfaces exist (for example, a network adapter and a Point to Point serial Protocol adapter such as dial-up networking interface adapter), and both interfaces have public IP addresses. This can occur as the result of changing the IP address of the internal interface on the server.

RESOLUTION

To resolve this issue, you have to correctly configure the ISA portion of the ICW. To successfully configure ISA, either change the IP address of the network adapter on the server to include it in the LAT, or modify the LAT to include a range of IP addresses that includes the IP address of one of your interfaces.

Note: The inclusion of an interface with a public IP address in the LAT may pose possible security implications. Please refer to ISA Help for more information about modifing the LAT.

To modify the LAT:
  1. Click Start, click Programs, click Microsoft ISA Server, and then click ISA Administrator to open the ISA Management Microsoft Management Console (MMC).
  2. Double-click the Network Configuration folder, right-click Local Address Table, and then click Construct LAT.
  3. Modify the necessary address ranges to include the IP address of one of the interfaces.
  4. Restart the ISA services:
    1. Click Start, click Programs, click Microsoft ISA Server, and then click ISA Administrator.
    2. Right-click the Microsoft ISA Server Control service, click Restart, and then click Yes to restart the list of services in the Restart Other Services dialog box.
    3. Right-click Microsoft H.323 Gatekeeper Service, and then click Restart.
  5. Re-run ICW.

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.
Modification Type:MinorLast Reviewed:1/18/2006
Keywords:kberrmsg kbnetwork kbprb KB293286
©2004 Microsoft Corporation. All rights reserved.