Got it

The problem handing summary after TSM software enable the terminal mutual access

Latest reply: Apr 8, 2016 09:47:30 1429 1 0 0 0
After all clients in a office site enable the terminal mutual access control policy ,some clients unable to access to the other terminal at the same inter-trust domain.
Problem phenomenon:
The client can not normally access to the office Server

Handling Process
1, If the client has installed 360 firewall, please close the 360 firewall; Confirm TSM Agent pass the security certification; Through ping 10.134.1.3 to test, if can ping pass, open web access office server, and check whether can normal access;
2, can not open the web page when ping 10.134.1.3 is passable, please download and update the IE browser flash plug-in from the Server;
3, if ping packet prompting Request timed out, please restart computer and make ping packet test again, if ping pass means problem solved; If ping impassability, then select the "control panel" - "management tool" - "Service", to check whether the IPSEC Service is start, if is not start, please manually startup the Service, if can't start, it is required to repair operating system, in order to ensure the Service can normal start;
4, if ping packet prompting Negotiating IP Security, please through the following ways to check IPSEC policy: in turn choose "start" and "run", and input secpol.msc, choose "IP Security policy, in the local computer", and double-click the IPSEC POLICYAUTHEN ", to check whether there is the content "InterConnInPass". if have, then select "control panel" - "management tool" - "Service", to check whether the IPSEC Service is start, if it is started, please deregister both ends of the TSM Agent and authenticate again; If it is not start, please manually startup the Service, if can't start, it is required to repair operating system, in order to ensure the Service can normal start;
5, if can not find the "InterConnInPass" this IP security rule in the step 4, please check the terminal computer network adapter whether configured multiple IP address. Please delete redundant IP address, and after deregister TSM Agent, authenticate again;
6. If have not installed the terminal TSM Agent, please through the U disk or from server download TSM client installation software to install;
Root Cause
1, have not installed TSM Agent software;
2, the client has installed 360 firewall or rising firewall software, prevent the access between terminals;
3, the client does not shutdown for a long time, TSM Agent software do not deregister for a long time or authenticate again, leading to the new policy can't timely dispensing to the client, so can not access to the server.
4, do not start IPSEC Service on the client computer, leading to terminal mutual access policy can't effect, therefore can not access to the server.
5, the client network adapter configured multiple IP address, lead to terminal mutual access policy can't establish correctly;
6, after the patch updated, the flash plug-in of some terminal IE browser need to update;
Solution
Suggestions
Before work every day administrator restart TSM server among the each city, and after deregister TSM Agent client software on the application server, login and authenticate again, in order to achieve the latest IPSEC policy information.
Note:
The service restarting steps on the TSM server are as follows:
In turn choose "start", "program", "Huawei", "TSM Server", and then select "stop Server," after stop service, then select the "start Server" and enter the "service" of "management tool", to check whether the service named as TSM Server display as "started" status, to ensure the service of TSM Server in normal operation
View more
  • x
  • convention:

Comment

You need to log in to comment to the post Login | Register
Comment

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " User Agreement."

My Followers

Login and enjoy all the member benefits

Login

Block
Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.
Reminder
Please bind your phone number to obtain invitation bonus.