On Thu, 6 Jul 2000, Becky wrote:
> I feel pretty stupid - I've just passed the CCNA this past Friday
> and am trying to get a simple 4000M 10baseT router to pass
> traffic from one segment to another. I just got this router to play
> with - yes, I passed the CCNA with out any real hands-on...(I know,
> I know - let the paper-cert debates begin...*grin*)....anyway, here
> is a copy of an extended ping:
>
> Internal1#ping
> Protocol [ip]:
> Target IP address: 10.0.0.115
> Repeat count [5]:
> Datagram size [100]:
> Timeout in seconds [2]:
> Extended commands [n]: y
> Source address or interface: 10.0.10.1
> Type of service [0]:
> Set DF bit in IP header? [no]:
> Validate reply data? [no]:
> Data pattern [0xABCD]:
> Loose, Strict, Record, Timestamp, Verbose[none]:
> Sweep range of sizes [n]:
> Type escape sequence to abort.
> Sending 5, 100-byte ICMP Echos to 10.0.0.115, timeout is 2 seconds:
> .....
> Success rate is 0 percent (0/5)
>
> I don't understand why I can't ping an address on my 10.0.0.0 segment
> from the 10.0.10.1 interface of my router???? I'm embarrassed to
> be asking this because I fear the answer is so simple, but then again
> I was taught to never be afraid to ask even stupid questions.... ;-)
Things to check:
Can you ping that host from its own connected interface? If yes, then
you know that ethernet segment is good. If not, look on the 10.0.0.0/24
segment.
The next thing that I would check is the netmask and gateway on the
10.0.0.115 host. If it is the classful mask of 255.0.0.0, then the
host will assume that the ping sourced from 10.0.10.1 is local, and not
forward it to the gateway. Make sure that the host has 10.0.0.250
as its default gateway.
Is the 10.0.10.1 interface up and up?
> So, here's my config and I would appreciate any words of wisdom.
Why do you have directed-broadcast enabled? It isn't generally useful
and not recommended on a production system for security reasons (Smurf
amplifier.)
The router config looks OK at first glance, I'd suspect a netmask or
gateway problem at the host if it's pingable from its connected interface,
and a physical layer problem if it is not.
> Regards,
> Becky
>
> Current configuration:
> !
> version 12.0
> service timestamps debug uptime
> service timestamps log uptime
> no service password-encryption
> !
> hostname Internal1
> !
> enable secret 5 $1$
> enable password
> !
> ip subnet-zero
> !
> !
> !
> interface Ethernet0
> ip address 10.0.0.250 255.255.255.0
> ip directed-broadcast
> media-type 10BaseT
> !
> interface Ethernet1
> ip address 10.0.10.1 255.255.255.0
> ip directed-broadcast
> media-type 10BaseT
> !
> ip classless
> ip route 0.0.0.0 0.0.0.0 10.0.0.1
> !
> dialer-list 1 protocol ip permit
> dialer-list 1 protocol ipx permit
--
Jay Hennigan - Network Administration - [EMAIL PROTECTED]
NetLojix Communications, Inc. NASDAQ: NETX - http://www.netlojix.com/
WestNet: Connecting you to the planet. 805 884-6323
___________________________________
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
