External ping not working, internal ping is

BrianTaylor42 · 07-02-2009, 02:11 PM

Not sure if this is the right place for this...

I am setting up a server (2003, not SB) with an external IP address. Everything is configured correctly on my firewall as the settings are cloned from another server that does work and I am able to ping the address, but only from inside my network. When I try to do it from outside of the firewall, my ping is timed out.

There are two NIC cards on this server, both of which are connected to the same switch (which is then connected to the firewall). I tried switching the configuration, thinking its a bad NIC card, but it does not work on either card.

I have also tried disabling the firewall on the server and disabling AV software.

Any help would be greatly appreciated.

Prometheus_Fire · 07-02-2009, 03:46 PM

Would you be able to provide a simple network diagram?

BrianTaylor42 · 07-02-2009, 04:20 PM

Prometheus_Fire · 07-03-2009, 07:28 AM

OK, so you have connectivity between everything on the switch, yes?

Which device holds the default gateway for your network?

Can you ping the default gateway from the server?

Have you created a rule that allows traffic to and from this new IP address on the hardware firewall?

Can you ping the new IP from the firewall?

If yes, can you in the web GUI (on the ISP router) see a MAC entry for all attached devices?

BrianTaylor42 · 07-06-2009, 08:01 AM

Yes, I can RDC, ping, etc. from everything on the switch.

The default gateway is controlled by the firewall.

Yes I can ping the primary default gateway (10.2.2.1 - the firewall in the diagram above) but cannot ping the default gateway for the IP block.

Yes, the rules and policies are all defined on the firewall. I am able to connect just fine from the other two servers, which is why I don't think that its a problem on the firewall.

Yes I can ping the new IP from the firewall. Using Wireshark I can see pings coming in to the firewall, being routed to the server but not being bounced back.

I don't have access to the ISP router but I will see if they can do that.

07-02-2009, 02:11 PM	#1 (permalink)
BrianTaylor42 Registered User Join Date: Jul 2009 Posts: 3 OS: Vista SP1	External ping not working, internal ping is Not sure if this is the right place for this... I am setting up a server (2003, not SB) with an external IP address. Everything is configured correctly on my firewall as the settings are cloned from another server that does work and I am able to ping the address, but only from inside my network. When I try to do it from outside of the firewall, my ping is timed out. There are two NIC cards on this server, both of which are connected to the same switch (which is then connected to the firewall). I tried switching the configuration, thinking its a bad NIC card, but it does not work on either card. I have also tried disabling the firewall on the server and disabling AV software. Any help would be greatly appreciated.

07-02-2009, 03:46 PM	#2 (permalink)
Prometheus_Fire Registered User Join Date: Jan 2007 Posts: 134 OS: Win2K, WinXP, Win Vista, Win2K3, Win2K8, IOS	Re: External ping not working, internal ping is Would you be able to provide a simple network diagram?

07-02-2009, 04:20 PM	#3 (permalink)
BrianTaylor42 Registered User Join Date: Jul 2009 Posts: 3 OS: Vista SP1	Re: External ping not working, internal ping is Sure: ISP router (Unmanaged) \| Firewall \| Switch \| \|----Internal Network \| \|----Web Server* \| \|----File Server* \| \|----File Server** * Connected correctly with static IPs and active ** Trouble Server For what its worth I am using HP Procurve Switches and a Juniper Netscreen (ns5gt) Firewall.

07-03-2009, 07:28 AM	#4 (permalink)
Prometheus_Fire Registered User Join Date: Jan 2007 Posts: 134 OS: Win2K, WinXP, Win Vista, Win2K3, Win2K8, IOS	Re: External ping not working, internal ping is OK, so you have connectivity between everything on the switch, yes? Which device holds the default gateway for your network? Can you ping the default gateway from the server? Have you created a rule that allows traffic to and from this new IP address on the hardware firewall? Can you ping the new IP from the firewall? If yes, can you in the web GUI (on the ISP router) see a MAC entry for all attached devices? Last edited by Prometheus_Fire; 07-03-2009 at 07:30 AM. Reason: Missed info.

07-06-2009, 08:01 AM	#5 (permalink)
BrianTaylor42 Registered User Join Date: Jul 2009 Posts: 3 OS: Vista SP1	Re: External ping not working, internal ping is Yes, I can RDC, ping, etc. from everything on the switch. The default gateway is controlled by the firewall. Yes I can ping the primary default gateway (10.2.2.1 - the firewall in the diagram above) but cannot ping the default gateway for the IP block. Yes, the rules and policies are all defined on the firewall. I am able to connect just fine from the other two servers, which is why I don't think that its a problem on the firewall. Yes I can ping the new IP from the firewall. Using Wireshark I can see pings coming in to the firewall, being routed to the server but not being bounced back. I don't have access to the ISP router but I will see if they can do that.