我有一个带有 2 个网络的 Windows 2019 标准服务器。
- 一个是域网络,为1GB。
- 一个是10GB网络,没有网关。
我可以简单地使用 UNC 路径 (\servername\c$) 访问 1GB 上的管理共享,并且一切正常。但是,如果我尝试从同一 10GB 子网上的另一台计算机 (\10GBip\c$) 访问 10GB 上的管理共享,则无法连接。
在目标机器的事件查看器中我有以下内容:
Error: The transport connection attempt was refused by the remote system.
Server name: 172.20.11.25
Server address: 172.20.11.25:445
Instance name: \Device\LanmanRedirector
Connection type: Wsk
Guidance:
This indicates a problem with the underlying network or transport, such as with TCP/IP, and not with SMB. A firewall that blocks TCP port 445, or TCP port 5445 when using an iWARP RDMA adapter, can also cause this issue
重申一下,这是同一网络上的 2 台设备。这些机器之间没有防火墙,并且 Windows 防火墙已禁用。
这是目标服务器上所有 SMB 设置的报告
LANMAN SERVER
===============
EnableAuthenticateUserSharing : 0
NullSessionPipes : {}
ServiceDll : C:\Windows\system32\srvsvc.dll
ServiceDllUnloadOnStop : 1
autodisconnect : 15
enableforcedlogoff : 1
enablesecuritysignature : 1
requiresecuritysignature : 1
restrictnullsessaccess : 1
Guid : {59, 18, 204, 117...}
PSPath : Microsoft.PowerShell.Core\Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Pa
rameters
PSParentPath : Microsoft.PowerShell.Core\Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer
PSChildName : Parameters
PSDrive : HKLM
PSProvider : Microsoft.PowerShell.Core\Registry
===============
LANMAN WORKSTATION
===============
EnablePlainTextPassword : 0
EnableSecuritySignature : 1
RequireSecuritySignature : 0
ServiceDll : C:\Windows\System32\wkssvc.dll
ServiceDllUnloadOnStop : 1
AllowInsecureGuestAuth : 0
PSPath : Microsoft.PowerShell.Core\Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Pa
rameters
PSParentPath : Microsoft.PowerShell.Core\Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanWorkstation
PSChildName : Parameters
PSDrive : HKLM
PSProvider : Microsoft.PowerShell.Core\Registry
===============
TCPIP4 PARAMETERS
===============
DataBasePath : C:\Windows\System32\drivers\etc
Domain : domain.local
ForwardBroadcasts : 0
ICSDomain : mshome.net
IPEnableRouter : 0
NameServer :
SyncDomainWithMembership : 1
NV Hostname : DF-PC-NAS01
Hostname : DF-PC-NAS01
SearchList :
UseDomainNameDevolution : 1
EnableICMPRedirect : 1
DeadGWDetectDefault : 1
DontAddDefaultGatewayDefault : 0
NV Domain : domain.local
ShutDownTimeAtLastDomainJoin : {178, 160, 178, 20...}
PSPath : Microsoft.PowerShell.Core\Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
PSParentPath : Microsoft.PowerShell.Core\Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip
PSChildName : Parameters
PSDrive : HKLM
PSProvider : Microsoft.PowerShell.Core\Registry
===============
TCPIP6 PARAMETERS
===============
Dhcpv6DUID : {0, 1, 0, 1...}
PSPath : Microsoft.PowerShell.Core\Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters
PSParentPath : Microsoft.PowerShell.Core\Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip6
PSChildName : Parameters
PSDrive : HKLM
PSProvider : Microsoft.PowerShell.Core\Registry
===============
SMB CLIENT CONFIGURATION
===============
ConnectionCountPerRssNetworkInterface : 4
DirectoryCacheEntriesMax : 16
DirectoryCacheEntrySizeMax : 65536
DirectoryCacheLifetime : 10
DormantFileLimit : 1023
EnableBandwidthThrottling : True
EnableByteRangeLockingOnReadOnlyFiles : True
EnableInsecureGuestLogons : True
EnableLargeMtu : True
EnableLoadBalanceScaleOut : True
EnableMultiChannel : True
EnableSecuritySignature : True
ExtendedSessionTimeout : 1000
FileInfoCacheEntriesMax : 64
FileInfoCacheLifetime : 10
FileNotFoundCacheEntriesMax : 128
FileNotFoundCacheLifetime : 5
KeepConn : 600
MaxCmds : 50
MaximumConnectionCountPerServer : 32
OplocksDisabled : False
RequireSecuritySignature : False
SessionTimeout : 60
UseOpportunisticLocking : True
WindowSizeThreshold : 1
PSComputerName :
===============
SMB SERVER CONFIGURATION
===============
AnnounceComment :
AnnounceServer : False
AsynchronousCredits : 512
AuditSmb1Access : False
AutoDisconnectTimeout : 15
AutoShareServer : True
AutoShareWorkstation : True
CachedOpenLimit : 10
DurableHandleV2TimeoutInSeconds : 180
EnableAuthenticateUserSharing : False
EnableDownlevelTimewarp : False
EnableForcedLogoff : True
EnableLeasing : True
EnableMultiChannel : True
EnableOplocks : True
EnableSecuritySignature : True
EnableSMB1Protocol : False
EnableSMB2Protocol : True
EnableStrictNameChecking : True
EncryptData : False
IrpStackSize : 15
KeepAliveTime : 2
MaxChannelPerSession : 32
MaxMpxCount : 50
MaxSessionPerConnection : 16384
MaxThreadsPerQueue : 20
MaxWorkItems : 1
NullSessionPipes :
NullSessionShares :
OplockBreakWait : 35
PendingClientTimeoutInSeconds : 120
RejectUnencryptedAccess : True
RequireSecuritySignature : True
ServerHidden : True
Smb2CreditsMax : 8192
Smb2CreditsMin : 512
SmbServerNameHardeningLevel : 0
TreatHostAsStableStorage : False
ValidateAliasNotCircular : True
ValidateShareScope : True
ValidateShareScopeNotAliased : True
ValidateTargetName : True
PSComputerName :