Cisco Switching/Routing :: 871W Ping To External IP Stops Answering
Apr 14, 2011
We have a Cisco 871W working as PIX, controlling external VPN connections to our private network.The configuration is very similar to the one described here - "Cisco Router as a Remote VPN Server using SDM Configuration Example" url...
About once a week, it stops working, without aparent external intervention.The ping to the external IP stops answering, and the internal IP stops answering pings also.The solution is power-off and power-on, and it starts working again ...
What is the correct way to debug this situation ?I can connect a HyperTerminal using direct cable to the 871, but dont know the relevant commands to debug this situation.
Is there any LOG I can have a look into ? Yes, I am quite new to Cisco world .By the way : "show version" says Cisco IOS Software, C870 Software (C870-ADVSECURITYK9-M), Version 12.4(15)T7, RELEASE SOFTWARE (fc3)
I have a cisco 871w router that I'm trying to incorporate into an existing network. I have FastEthernet4 (WAN port) plugged into an ISP device, which I don't have access to. I have the address set to use dhcp, which is successfully recognized and I see that the interface gets a valid ip address that I can ping with other computers on the same network.
Problems: I am logged into the router via the serial port and I cannot ping websites on the internet. I am able to ping sites that are hosted inside the WAN, but when I try "google.com" for instance, I see it sending out packets, but none are received. It resolves the hostname from the local DNS server, but there are no packets received.
I type into the console to set up the router. I'm missing a lot of stuff. This is what I've been able to piece together using google and the software manuals:
enable config t hostname [hostname] interface FastEthernet 4
I am new to Cisco and am studying for my CCENT certification. At the moment, I am attempting to correctly configure a Cisco 871W lab router. Since I have undertaken this task, I have run into nothing but problems. First off it was finding that the previous owner had left a password on it, having to purchase a new USB to DB9 adapter to pass the "break" sequence to the router, and then resetting the router in ROM Monitor mode.
Now, I cannot seem to configure the router correctly, and am quite stumped.
My ISP is Charter (cable internet), and the home network that I am using consists of a Motorola SBV5122 Digital Voice Modem, Motorola SB6120 Cable modem, and, ideally, should also include my Cisco 871W router.
When I connect my router to the SB6120 Cable modem, the router receives an IP address via DHCP and the WAN indicator light turns on.
I have a VLAN configured on the 4 switchports of the router, and it is setep to act as a DHCP server. However, when I connect my PC to rhe router via Cat5e Crossover cable, I cannot access the internet. The router gives the PC an IP address, yet all attempts to ping the PC from the router fail. Somehow, I can connect to the router via SSH though.
Furthermore, I can ping the 127.0.0.1 loopback address from my PC, but cannot do so from the router.
how to correctly configure this router to function as intended in my network situation, however, this is proving to be seemingly unsurmountable!
I have attached the config of my router along with both outputs and commands relating to my predicament.
I've acquired an 871W, because I'd like to use wireless, to replace my 851. I Ft Pd the 851's configuration to my FTP server and then Ft Pd this to the 871W. Save for the fact that this has a radio interface (currently shutdown), everything works save for FTP from the outside. I can not even telnet to port 21 of any of the internal FT servers. I can telnet to any other port (ssg, smtp, HTTP, https, etc.) but FTP will not pass. What's the difference?
I've a problem with my 871W. I can connect to the router by inside interfaces (LAN & WLAN) but not on WAN (Fa4). My client on the WAN is on the same subnet and I can ping 871.
I have an 871w set up to add wireless connectivity to an existing network. When adding a client to the physical interfaces to test VLAN internet connectivity, however, a DHCP address is assigned but internet traffic on the terminal never reaches the network nor does the network recognize the IP the terminal shows as being 'connected'. Also, pings sourced from the VLAN do reach destinations. I've attached my config file, I think it's a routing issue of some kind.
10.26.99.0 is the existing network. 10.26.99.1 is an existing 871w router set as the DHCP server for that network and 10.26.99.10 is a Windows Server 2003 DNS box. VLAN 2 and DHCP pool alpha were control sets for trialing DNS settings.
I've been trying to get my wireless configured for the past few days with no luck. I can ping every device on my local network and I can ping outside my network and surf the web. My wireless devices can see my wireless network but cannot connect to it.
I have an 871 set up at home with 2 VLANs, both of these vlans present a strange behavior where an user is unable to ping/contact another user on the same subnet, however if users are on different subnet it seems to work [code]
According to the troubleshooting that I have done, the issue seems to be with the broadcast traffic, ARP request/reply do not reach another host on the same subnet (wireless to wireless or wired to wireless) however if the wireless device iniciates the connection to wired, it works fine.
I have tried to enable proxy arp on the different VLANs and BVI and different combinations but no sucess in order to get traffic across 2 wireless devices on the same subnet or a connection that is iniciated for a wired client to a wireless one.
I tried enabling and disabling dot11 arp-cache but no luck.
I have a new 3560G to set up a small network for a remote site. I configured the vlan and an SVI as the gateway. The switch is also the DHCP server for the LAN. I configured Gi0/2 as L3 port, connecting to the nearest neighbor. My network runs EIGRP so i advertised the routes into the EIGRP process. The switch forms EIGRP neighbors and learns all routes in the enterprise network. The problems I'm having now are: 1. The switch learns all routes in my enterprise LAN and can ping devices in the enterprise LAN, but I can’t ping any interface on the switch from the enterprise LAN. 2.
I set this up and I can ping all the gateways but never the hosts. I was hoping I could make these links between 6500's a mix of L2 and L3. Check it out. They are connected in a linear fashion R1--->R2--->R3. I can ping from R1 to R3's SVI4 gateway but I can never ping a host on that SVI4. I was hoping that I could use the port-channels between 6500's as routed links or as trunk links depending on the type of traffic....thought it would ease the migration. I suppose I could always get rid of the port-channels and just make separate L2 and L3 links between the 6500's.
From My Router that connects to Cable modem i am unable to ping website 4.2.2.2I am able to ping all other websites fines.Same website i can ping from my pc and all other switches fine.Router has only 1 ACL thats for NAT.
We've got a cisco 2821 router which periodically stops routing all traffic. It seems to happen about once every 2 weeks, and I can't find anything that could be causing it. There are no entries in the log and the router stays up and running but requires a restart to begin processing traffic again. We're running 12.4(13r)T11.Any thoughts, or troubleshooting steps to track this down?
My Cisco 871w still stops working once a week.Today I found it frozen, after the weekend, and I have executed few commands from the HyperTerminal .The commands were given by cisco coleagues in previous post :show logshow ip int briefshow interfaces counters errorsshow interface FastEthernet1show interface FastEthernet1 statshow interface FastEthernet1 summaryshow interface FastEthernet1 switching
We have a Cisco 1811 which is running a number of different services. Let me try and explain how everything is working first.
On routed port 0, we have a statically configured fiber connection which routes a public /28. No BGP, etc just default routes. The /28 is divided into a two /29's, once of which is routed to Vlan3.
On routed port 1, we have a PPPoE DSL connection, with a single static IP.
Vlan1 is a 192.168.1.x subnet Vlan2 is a 192.168.2.x subnet Vlan3 is a y.y.y.x/29 subnet(the routed subnet)
Vlan1 and Vlan2 PAT the static fiber IP(not the other /29) along with the DSL. The other /29 is used for a few static NAT translations and SSLVPN
There is a zone based firewall in play, as well as a few route-maps to redirect traffic out certain interfaces on the inside.
The problem is, the fiber IP randomly stops responding to ping/ssh, however I can ping the interface IP assigned to Vlan3 from the WAN. DSL never loses connection in this manner.
I can normally reestablish "normal" connectivity by connecting to the DSL and bringing down the fiber and routed vlan in a specific order.
I have configured multicast(ip pim dense-mode) on two 2911 that are connected by a Multilink( 3 Mbps) Wan connection.The configuration works fine for awhile and sometimes all day but at some point one of the Multilink interfaces stops passing multicast traffic.I perform a SH Multilink 1 on the interfaces and one show multicast packets incrementing and one does not, it just stops.The problem acts like there is a buffer that gets full and after that happens it just stops working.
Stange problem which I encountered today, I have a Cisco 2960 which is connected to a netgear. The switch started showing itself in CDP and was running STP. I checked the cables physically today and noted 3 uplinks to the netgear, all port on the Cisco active and forwarding and green lights.
The Cisco was running STP, I changed it to R-PVST and the lights on the Cisco went crazy and I got the message port flapping on the switch but the switch did not block any ports (all ports on same vlan).
There after I changed it back to stp and the switch blocked the other up links apart from one.
i recently deployed cat4507e switch along with 3 nos of WS-X4748-RJ45V+E - 48 port gigabit PoE modules. I am using polycom IP560 phones.
I am facing issue of some switch ports (randomly) stops supplying power to phone at random time. So far there are about 4 incident and i have been plugging those connection to different - usused ports. I am planning to RESET the switch module during weekend and i think it might fix issues with those ports.
But what would be quick and easy way to fix this issue when the issue is faced? How/what to check on switch port interface wrt to power? If switch module is falling short of overall power requirement, is there a way to boost the power?
DNS resolution works and I can surf the web without fail. But if I try to ping any external hosts (I can ping inside interface of ASA fine) from the LAN I get timeouts. I can ping anything from the ASA without fail.
I've had some issues with my 892 router. [code] When match address is set to acl-net12, I can't ping my router on external interface and tunnel is working very bad (15%-20% packet loss).If I change match address from acl-net12 to acl-net12-new then I can ping my router on external interface and vpn si working fine.
I have also an acl (set on external interface) which allow ping but it seems that is not working when acl-net12 is used on crypto map. [code]
I have setup a new RV180 and it appears to be connected to the WAN, however, I cannot ping the external IP. In some of the documentation, there are references to default access rules, however, there does not appear to be any rules setup. What other settings need to be made to allow the firewall to be pinged on the WAN interface?
I have spent two days on the phone with virgin mobile broadband where I bought the device and they do not know what I am talking about.First of all the mifi is working fine on the one and only computer I have set up so for..it is Vista operating system..I am trying to set up my vista computer as an FTP server on the mifi or wifi or whatever you call it.when I disable the DHCP service on this virgin mobile mifi device so that I can generate my own internal ip for this particular computer..It is not functioning that is I cannot connect to the internet..I tried to get from Virginmobile the DNS server address but they were confused...When I log into the device itself under advanced options it does allow for me to disable DHCP..but my problem is what IP do I use when setting up the wireless connections, I disengaged the automatic, but I am having a heck of a time trying to use the right IP then the gateway address and the DNS.
We have a Router with one External IP and a couple of VLANs. We have got a Teleconferencing Unit that needs almost every port known to man to work, so decided to get the unit its own External IP.
We have the IP now and how to get it in the router and then also to use it only for the Video unit (From outside straight through to Video).
Im comfortable adding lines to the router but just don't know what the lines should be.
The new IP's purchased are 116.199.222.200/30 (Only need to use one address, lets say 116.199.222.200). No idea what the subnet mask should be...
The router config below stripped of irrelevant stuff:
interface FastEthernet0 no ip address ! interface FastEthernet1
I've configured a 5505 but internal clients can't ping external ip. To test I've connect a pc with the ip of the default router on the Outside int the ASA can ping the PC and the PC can ping the ASA, but internal clients can't ping the PC
PC config 195.12.23.241/28
Here's the ASA config, so far I've wiped the ASA and started with a blank sonfig and built it up but still not working.
As a raw test it is handy for us to ping externally the WAN port of the SRP 527W. How we configure the SRP 527W to allow this? FYI we have the inbulit SRP firewall enabled.
I have a 1760-v router set up at my home lab and I am unable to access IP addresses outside my local network. I have my Cisco router's fast Ethernet port connected to a small net gear router which then connects to my cable modem. The Cisco router is able to ping local address fine, but when I try to ping an outside address or domain name it times out. However, when I am at the CLI and type something like Ping { URL}, it resolves Google's IP address but it will not ping it. I have IP DEFAULT-GATEWAY and IP NAME-SERVER both pointing to my net gear router and pointing to my ISP's DNS server.
I'm trying to setup my home network so that I can access it when away from home but I've ran into problems and I can't figure out what is causing the problem.I've setup the router to forward incoming requests on port 80 to be directed to my PC running WAMP. The PC has a static IP and if I access it from another PC on my network I get the WAMP page load as expected.I've also setup an account with no-ip.com to resolve my (dynamic) ip. If I use the address they have setup while I'm on my network I get the login page for the router, again this is what I expect.The problem begins when I try and access my home address (whatever.no-ip.biz) from outside my network. I've tried it from 2 different locations and via a dial-up account and I get nothing.
Both my DIR-655 and DIR-815, when setup as wireless access points, are unable to ping external IP addresses and thus cannot contact the dlink ntp servers. I've disabled UPnP, disabled DHCP, changed the LAN IP address to an available address on the network. The wireless works, devices are getting an IP from the network DHCP server and can surf the internet. But the DLink router itself cannot ping any external IP addresses. But the DLink router itself cannot ping any external IP addresses.
how to properly route multiple external IPs to internal ips assigned to several servers. Where I'm getting a bit lost is that I have two levels of routing - one from the outside into a comcast business class cable modem, which also creates its own internal network. Within that internal network, I have my RV180 router, which creates another separate internal network in which the servers live (don't want the servers to have access to other computers within the Comcast Modem's internal network). I want to map the external ips to servers within the RV180 second level network.
To diagram:
Comcast Cable Modem / RV180 Computer(s) / S1 S2
An internal IP is assigned to the RV180 router. Suppose it is 192.168.1.100.
The cable modem itself supports NAT as well. Do I use NAT twice (on both cable modem and RV180) to route the external IP to S1 and S2?
Or do I modify the routing table on the cable modem? Then use One to One NAT on the RV180 to map the external IPs directly to the internals?
I'm looking to setup a few ip security cameras in my house and would like to monitor from work. The first thing I did was give the ip camera a static ip on my local LAN 192.168.1.104. I also forwarded port 9000 to this ip. I then went to [URL] to look up my external ip address. I was able to obtain one ip for my router and another for my modem (disconnected router and went direct through modem).
I've since tried to ping my router WAN ip from work numerous times via http://24.x.xxx.xx:9000 and I get timeout errors. I've tried traceroute and it gets close, but times out the last 3 hops. I've had Comcast on the phone many times trying to resolve and needless to say they weren't able to work.
I have an internal DVR system that I am trying to share to the outside world. We recently put in an ASA5505 and I am having trouble getting the settings correct.I want to use an external IP to access the DVR system from anywhere and have my ASA5505 redirect the traffic to the internal IP address. I assume I need to use a NAT and a route policy however can not figure out how it would be.
I have some issues with router configuration. I cannot open any external web pages, but ping or telnet is just fine. Im using router-on-a-stick scenario. Router connected to LAN trough EtherSwitch module. Config attached.