On Tue, 29 May 2001, NRF wrote: > When I try to ping, the modem dials, and the async int comes up, etc. So > everything seems to behave normally when I ping. It just doesn't receive > any echo replies. > > I even debug ip packet on router B (the dial up server), and I see that > packets to yahoo are indeed being forwarded correctly. So the modem is > working, the dialer-list is correct, the IP routing is working. But > apparently replies never come back. Weird, really weird. > > Which is odd because I can ping www.yahoo.com from router B just fine. And, > like I said, I can trace Yahoo from A with no problem. I just cannot ping > yahoo from A. But A can ping all interfaces of router B. Possible causes (list not limitative): - NAT problem on B either on the way out or back in. - Filter somewhere that blocks the NAT outside address range in combo with ICMP echo requests or replies. > And yes, I have tried using IP addresses, without DNS names. Same result. > I can do everything except ping from A. *nod* I stopped counting "I can't reach (mumble)" problems that were actually bad resolver or name server configuration about a thousand years ago. > By the way, I like the idea of "debug serial killer". But of course, it > only works if you have previously typed the command "hostname charlesmanson" That actually depends on which IOS version you're using. Older versions may require use of different names. > ""ElephantChild"" wrote in message > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > On Tue, 29 May 2001, NRF wrote: > > > > > I got this weird situation here: > > > > > > I got router A that dials into router B through an analog modem (async > > > lines). On both routers A and B, I am using dialer profiles with > > > rotary-groups. B is also connected to the Internet, through E0 (to a > cable > > > modem), and I have properly set up NAT, so that E0 is the outside > interface > > > and the dialer interface is the inside interface. > > > > > > A can properly dial into B with no problem. A has a static route > pointing > > > to its dialer interface. A does not have any other routes (all other > > > interfaces have been shut, etc.) So basically, A has to dial to B to > get > > > anywhere. I have verified that dialing does indeed work properly. > > > > > > A cannot ping the outside world. For example, if I ping www.yahoo.com I > > get > > > nothing. But here's the really weird part. Apparently, A can trace to > > > www.yahoo.com, with no problem. I should also state that my > dialer-list > > is > > > this: > > > > > > dialer-list 1 protocol ip permit > > > > > > So, does anybody know why I can trace, but not ping? Is there something > > > about Async interfaces or Dialer interfaces that causes thing weird > > behavior > > > to happen? > > > > Does anything happen at all when you ping a remote machine? Modem > > dialing, or trying to? Does the ping work after the traceroute causes A > > to dial into B? > > > > Look at the output of the following debug commands: > > > > debug serial packets > > debug serial events > > debug serial killer > > debug ip icmp > > > > You may also try using IP adresses instead of names, to factor out any > > possible side effect of the DNS requests. > > > > > Check out this output: > > > > > > r1#trace www.yahoo.com > > > Translating "www.yahoo.com"...domain server (128.32.136.12) [OK] > > > > > > Type escape sequence to abort. > > > Tracing the route to www.yahoo.akadns.net (204.71.200.67) > > > > > > 1 50.50.50.50 40 msec 36 msec 36 msec > > > 2 24.250.141.1 52 msec 48 msec 48 msec > > > 3 r1-ge-3-0.pinol1.sfba.home.net (24.9.239.225) 52 msec 48 msec 52 > msec > > > 4 r1-dpt-srp-5-0.oakland1.sfba.home.net (216.197.144.148) 52 msec 52 > msec > > > 48 m > > > sec > > > 5 bb1-dpt-srp-1-0.rdc1.sfba.home.net (216.197.144.129) 56 msec 52 msec > 53 > > > msec > > > > > > 6 c2-pos5-1.snjsca1.home.net (24.7.76.181) 52 msec 52 msec 52 msec > > > 7 pos6-3.core1.SanJose1.Level3.net (209.245.146.129) 64 msec 56 msec > 52 > > > msec > > > 8 gigaethernet6-0.ipcolo1.SanJose1.Level3.net (209.244.13.42) 56 msec > 56 > > > msec > > > 52 msec > > > 9 POS11-0.ipcolo3.SanJose1.Level3.net (209.244.13.58) 52 msec 53 msec > 52 > > > msec > > > 10 cust-int.level3.net (64.152.69.18) 56 msec 56 msec 56 msec > > > 11 ge-1-2-0.msr2.pao.yahoo.com (216.115.100.154) 60 msec 52 msec 52 > msec > > > 12 vl21.bas2.snv.yahoo.com (216.115.100.229) 53 msec 56 msec 56 msec > > > 13 www.yahoo.akadns.net (204.71.200.67) 52 msec 56 msec 52 msec > > > r1#ping 204.71.200.67 > > > > > > Type escape sequence to abort. > > > Sending 5, 100-byte ICMP Echos to 204.71.200.67, timeout is 2 seconds: > > > ..... > > > Success rate is 0 percent (0/5) > > > r1# -- "Someone approached me and asked me to teach a javascript course. I was about to decline, saying that my complete ignorance of the subject made me unsuitable, then I thought again, that maybe it doesn't, as driving people away from it is a desirable outcome." --Me Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=6207&t=6207 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
