Cisco WAN :: 1760 V - Unable To Ping External Addresses
Mar 1, 2010
I have a 1760-v router set up at my home lab and I am unable to access IP addresses outside my local network. I have my Cisco router's fast Ethernet port connected to a small net gear router which then connects to my cable modem. The Cisco router is able to ping local address fine, but when I try to ping an outside address or domain name it times out. However, when I am at the CLI and type something like Ping { URL}, it resolves Google's IP address but it will not ping it. I have IP DEFAULT-GATEWAY and IP NAME-SERVER both pointing to my net gear router and pointing to my ISP's DNS server.
I'm trying to setup my home network so that I can access it when away from home but I've ran into problems and I can't figure out what is causing the problem.I've setup the router to forward incoming requests on port 80 to be directed to my PC running WAMP. The PC has a static IP and if I access it from another PC on my network I get the WAMP page load as expected.I've also setup an account with no-ip.com to resolve my (dynamic) ip. If I use the address they have setup while I'm on my network I get the login page for the router, again this is what I expect.The problem begins when I try and access my home address (whatever.no-ip.biz) from outside my network. I've tried it from 2 different locations and via a dial-up account and I get nothing.
Both my DIR-655 and DIR-815, when setup as wireless access points, are unable to ping external IP addresses and thus cannot contact the dlink ntp servers. I've disabled UPnP, disabled DHCP, changed the LAN IP address to an available address on the network. The wireless works, devices are getting an IP from the network DHCP server and can surf the internet. But the DLink router itself cannot ping any external IP addresses. But the DLink router itself cannot ping any external IP addresses.
I've made a static route between a Cisco Router 1760 and a Cisco Router 2651xm using crossover cable to connect to their Fast-Ethernet ports so this is the configuration:
2651xm(config)#ip route 192.168.10.0 255.255.255.128 192.168.1.0 (Same thing) The IP of the 2651xm is 192.168.10.2 The IP of the 1760 is 192.168.10.1.3
I'm I doing it wrong? is the destination wrong? I can't seem to ping any other IP. I've got another laptop. I've put a static IP of 192.168.10.5, the primary Laptop is using has an IP of 192.168.1.138. I'm trying to PING the 192.168.10.5 laptop. But this doesn't work.
I have a Cisco 1760 configured as easy VPN server. Using the cisco VPN client I can connect to the VPN server. The problem is that there is no ping between clients. When I connect several clients to the VPN server there is no ping between the clients. But when I login into the router I can ping the clients and make ssh remote logins into the clients. It seems that there is no access between the clients and they cannot communicate at all.
The cisco router is placed in DMZ zone. Remote clients can connect into the router.
Here is the configuration of the VPN server:
[code] ! version 12.4 service timestamps debug datetime msec
My FastEthernet 0/0 interface uses DHCP and got 172.16.2.126 /16. My Ethernet 0/0 interface is my internal interface, it has static 192.168.0.1 /24. On the Ethernet 0/0 interface, I have a PC attached, IP 192.168.0.150 /24.
The router's gateway is set to IP 172.16.1.1
My PC can ping 192.168.0.1 and can ping 172.16.2.126 (both interfaces of my router). My router can ping anywhere on the Internet. But my PC cannot ping 172.16.1.1. Firewall disabled, all security disabled.
Class and Policy maps are defined properly but when I am going to apply the policy-map on interface ,throwing an error as "'set' command is not supported in a 2nd level policymap".
Class/Policy map configuration given below ....
class-map match-any cm_traffic_control match access-group name acl_traffic_control class-map match-any BE match access-group name be [Code] ....
I'm am using Google Analytics for my webpage, and I want to exclude(filter) the IP range of my router's external IP addresses from the Analytics data. How do I determine the IP range of my router's public IP?
if possible with the RV042.Primary External IP address uses port forwards for some ports, all okay.I would like to have other external ip addresses assigned to machines on my lan.Basic host multiple web servers, on different IP addresses, using port 80. [code]
From what i am reading, it looks like the RV042 can do this, but I am not real clear what my rules should look like.
I would think my high priority rule for each external IP address would be to deny all traffic first for each machine on the lan.Then create one entry with source 202.x.x.2 port 80 -> 192.168.168.2 ?
How should I set my rules to do this, and what settings should I have on the Nic of the second machine?
How do i tell my firewall to start listen also on another outside ipadress assigned by my ISP? I have it used on other firewall right now. So my steps would be shutting down ip address assignment off old firewall interface. Assign that ip address to ASA5510 outside interface and configure NAT.
I am a total Cisco novice who has just had a ASA5505 installed to replace a linux freeware firewall (smoothwall).I'm told that the 5505 can't port forward traffic (e.g. ssh) from two external IP addresses to two internal destination machines via the same port # (22 in this example).
Trying to get a service setup with a third party to access our system (ERP web service to access our ERP data, making data available to customers and vendors via internet). They require that I setup four external IP addresses to have access through the firewall. I haven't figured out how to do this. I'm using a Linksys WRV200 router.
I recently cut over from a WRT54G to a RV120W. I am having an issue where I type [URL] (for a server running on my network) in my web browser while on the internal network and it always comes back with the router login page. Basically it is supposed to go out of the router and then come back in on the public IP address and hit that server. There was a function on the WRT54G called "Filter Internet NAT redirection" which when turned off would allow this to happen. I am not seeing a feature like this on the RV120W
I know the CSS is too old but I have one in production environment and I was asked if it is possible to CSS to make NAT from inside addresses and translate them into one external IP address to diferent kind of communications, for example: 172.16.4.9 and 172.16.4.10 (inside addresses) should start connection to external IP addresses destinations 50.50.50.50 / 60.60.60.60 70.70.70.70 / 80.80.80.80 and so on, the default gateway to those Servers is the CSS and I would like to know if it is possible that all connection to external world to be translate into one IP address 172.16.4.100.
I have purchased a subnet of 8 private IP addresses from my ISP. 109.x.x.128/29.The ISP has placed a juniper router within our data centre which is routing purely from 109.x.x.206/30 to 109.x.x.128/29 with the ip of fa0/1 set to .129.
I have linked a cisco 5505 to fa0/1 of the juniper from fa0/0 and configured its IP to .130. I have configured NAT to translate our client pool 192.168.16.x /24 address' to the internet.
Is it possible for the 5505 to route / map my remaing private IP addresses through its external port? I have tried creating a seperate VLAN for a DMZ for our servers to sit within but am returned with a subnetting error as VLAN for my external port is all ready configured within the same subnet.
If I ping a NAT'ed IP address configured on an ASA 5505, is it handled at the firewall (as far as priority) as if I were pinging the firewall interface itself, or the end device? The reason I ask is I am seeing waves of ping latency that I can relate to data transfers, but the nothing is even close to being maxed out as far as CPU, memory, or bandwidth. My guess is this is being handled by the ASA in software instead of in hardware.
From My Router that connects to Cable modem i am unable to ping website 4.2.2.2I am able to ping all other websites fines.Same website i can ping from my pc and all other switches fine.Router has only 1 ACL thats for NAT.
I have a Linksys WRT54GS wireless router (10.77.79.1, 255.255.255.0) which hands-out DHCP addresses to my wireless/wired clients. This router is connected to the cable modem which then connects to the wonderful World Wide Web. Port 1 of this router is connected to a Cisco SG200-8 Small Business Switch (10.77.79.3, 255.255.255.0). My Dell 2950 is then connected to the SG200-8.
I know I'm doing something wrong because I cannot ping any of the 192.168.10.X IP addresses from the 10.77.79.X network, and vice-versa. All VLANs on the SG200-8 are set at their defaults (1 and Trunked?). Are there any additional configuration steps I need to perform in the SG200-8 or WRT54G?Is what I want to do even possible with my hardware?
DNS resolution works and I can surf the web without fail. But if I try to ping any external hosts (I can ping inside interface of ASA fine) from the LAN I get timeouts. I can ping anything from the ASA without fail.
I've had some issues with my 892 router. [code] When match address is set to acl-net12, I can't ping my router on external interface and tunnel is working very bad (15%-20% packet loss).If I change match address from acl-net12 to acl-net12-new then I can ping my router on external interface and vpn si working fine.
I have also an acl (set on external interface) which allow ping but it seems that is not working when acl-net12 is used on crypto map. [code]
I have setup a new RV180 and it appears to be connected to the WAN, however, I cannot ping the external IP. In some of the documentation, there are references to default access rules, however, there does not appear to be any rules setup. What other settings need to be made to allow the firewall to be pinged on the WAN interface?
I have spent two days on the phone with virgin mobile broadband where I bought the device and they do not know what I am talking about.First of all the mifi is working fine on the one and only computer I have set up so for..it is Vista operating system..I am trying to set up my vista computer as an FTP server on the mifi or wifi or whatever you call it.when I disable the DHCP service on this virgin mobile mifi device so that I can generate my own internal ip for this particular computer..It is not functioning that is I cannot connect to the internet..I tried to get from Virginmobile the DNS server address but they were confused...When I log into the device itself under advanced options it does allow for me to disable DHCP..but my problem is what IP do I use when setting up the wireless connections, I disengaged the automatic, but I am having a heck of a time trying to use the right IP then the gateway address and the DNS.
I have a PIX 515E that I want to use to as a border between my internet connection and my Cisco AIR1131AG. I have configured the PIX to have the outside interface as a dhcp client which gets its dynamic IP address from the cable modem. the AP is connected to the E1 inside interface. Now I could see the E1 interface from the arp table from the AP but I cannot ping it. From the firewall I don't see the ARP table from the firewall. and i cannot ping the AP. what is wrong with the configuration? side note, i am able to connect to the AIR1131AG from my laptop I was not able to retrieve an IP address.
FW1 - CONFIGURATION
interface Ethernet0 description uplink towards the techsavvy modem speed 100 nameif outside security-level 0 ip address dhcp setroute !interface Ethernet1 description >>> WIFI LAN ACCESS <<< nameif inside security-level 100 ip address 10.0.0.1 255.255.255.0
I've configured a 5505 but internal clients can't ping external ip. To test I've connect a pc with the ip of the default router on the Outside int the ASA can ping the PC and the PC can ping the ASA, but internal clients can't ping the PC
PC config 195.12.23.241/28
Here's the ASA config, so far I've wiped the ASA and started with a blank sonfig and built it up but still not working.
As a raw test it is handy for us to ping externally the WAN port of the SRP 527W. How we configure the SRP 527W to allow this? FYI we have the inbulit SRP firewall enabled.
i have my Cisco E4200 set up with a 6rd tunnel. the tunnel seems to work fine for the most part. i can ping ipv6.google.com and get a response.however, i cannot ping the addresses of the IPv6 Tunnel ends from within my network. If i run a ping from outside the network, i can ping the IPv6 address of the server end, however, i cannot ping the E4200's end of the tunnel. is there a specific option that needs to be set? i have allowed ping so that my IPv4 address is pingable, am i missing something for IPv6?
I'm looking to setup a few ip security cameras in my house and would like to monitor from work. The first thing I did was give the ip camera a static ip on my local LAN 192.168.1.104. I also forwarded port 9000 to this ip. I then went to [URL] to look up my external ip address. I was able to obtain one ip for my router and another for my modem (disconnected router and went direct through modem).
I've since tried to ping my router WAN ip from work numerous times via http://24.x.xxx.xx:9000 and I get timeout errors. I've tried traceroute and it gets close, but times out the last 3 hops. I've had Comcast on the phone many times trying to resolve and needless to say they weren't able to work.
I have some issues with router configuration. I cannot open any external web pages, but ping or telnet is just fine. Im using router-on-a-stick scenario. Router connected to LAN trough EtherSwitch module. Config attached.
We have a Cisco 871W working as PIX, controlling external VPN connections to our private network.The configuration is very similar to the one described here - "Cisco Router as a Remote VPN Server using SDM Configuration Example" url...
About once a week, it stops working, without aparent external intervention.The ping to the external IP stops answering, and the internal IP stops answering pings also.The solution is power-off and power-on, and it starts working again ...
What is the correct way to debug this situation ?I can connect a HyperTerminal using direct cable to the 871, but dont know the relevant commands to debug this situation.
Is there any LOG I can have a look into ? Yes, I am quite new to Cisco world .By the way : "show version" says Cisco IOS Software, C870 Software (C870-ADVSECURITYK9-M), Version 12.4(15)T7, RELEASE SOFTWARE (fc3)
I have installed quite recently a cisco ASA 5520 replacing a linux based firewall I have only 2 zones ..one is internal netowrk and other external the internal network has web servers, dns and mail server all having public IPs Every thing is OK but i have seen that if I try to ping an external server for example [URL] i cannot ping says
but I can ping from systems which are outside my firewall perfectly with the linux firewall i had before i could ping perfectly to yahoo from any of my internal servers?
I am trying to setup an RV016 router to do "1 to 1 NAT". I am starting with setting the external IP address of my RV016 to 10.8.58.219 on the WAN1 port, and LAN IP 10.10.20.254. Simple enough. When I connect my laptop to port1 on the router's LAN side I can ping the router's external AND internal IP addresses fine; But I can not ping from outside when connected through WAN1 port.I am performing a simple local test with an external hub, I put a patch cable from WAN1 port to the hub, another patch cable from port 1 on LAN side to the same hub, and from my laptop to the hub. When I use my laptop's IP address with the internal schema (10.10.20.100 for example) I can ping both WAN1 and LAN IP's; but when I use on my laptop the external IP schema (10.8.58.100 for example) I can not ping it. Therefore is not working when I connect my router to the real network.I went into the web setup pages of the router and dissabled: firewall and basicaly all security "blocks" it has, and leave it open for my testing.
I have several drives that are accessed through a LAN but as soon as I connet to another drive through VPN all the drives get disconnected. According to the IT people this is a feature of VPN for security reasons and there is no way to access those drives.Anyone knows if there is a way to connect to the VPN drive and the local LAN drives without getting the LAN drives disconnected?
