Foreword: The Windows Server 2008 server can be logged in through the remote desktop, but it cannot be pinged on the intranet. The server in the adjacent cabinet can be remotely pinged, but this one cannot. To use this server for port mapping and publish the project to the external network, the premise is that the IP of this machine must be found in the internal network. None of the methods on the Internet solved my problem. After a long time of research in the high-temperature computer room, I finally solved the problem and shared it with everyone.
1. Turn off the firewall and exempt ICMP in IPSec
1. Operation explanation:
IPSec ("Internet Protocol Security)" is an open-standard framework that ensures secure communications over a network through encryption. The Windows Server family implements IPSec based on this standard. It provides proactive protection against attacks with end-to-end security.
ICMP is (Internet Control Message Protocol) Internet Control Message Protocol. It is a sub-protocol of the TCP/IP protocol suite and is used to transmit control messages between IP hosts and routers. Control messages refer to the messages of the network itself, such as whether the network is reachable, whether the host is reachable, and whether the route is available.
Ping uses the ICMP protocol, so ICMP is exempted in IPSec, that is, in end-to-end communication, the restrictions on Ping are released, and Ping can be used.
2. Operation steps:
Open Windows Firewall, click Open Firewall Properties, in the IPSec tab, set "Exempt from ICMP from IPSec" to "Yes";
After this step, the Ping can be passed. If not, check whether the echo rules of the printer are disabled. Because the following "echo request" system is enabled by default, generally no one disables it, and there will be no problems. And the first step "Exempt ICMP from IPSec" system default is "No", so first confirm whether it is set to "Yes".
2. Turn on "File and Printer Sharing (echo request)" in the inbound rules
Note: This system is turned on by default, and you can check whether it has been turned off by someone. It mainly depends on the first step.
Find " File and Printer Sharing (echo request IPv4)" and confirm whether it is turned on. If not, double-click to open it.
Check to see if it's "enabled"
