11-05-2006 10:28 PM - edited 03-09-2019 04:47 PM
I am not able to get the pages of a site from my on-site server. But the onsite people are able to access the page. It is timsheet of our project. Pl let me know the problem, how can i solve that one.
11-05-2006 10:46 PM
Hi Babu
You need to provide more info about the network topology you currently have in place both here in india and in onsite for the diagnosis of the problem..
Most probably you need to check for any access restriction to your network at the remote end firewall or security device..
regds
11-05-2006 11:12 PM
We have a Cisco 525 PIX firewall in our side and we are not blocking the traffic for the site. Using the public interent we are accessing the site.
11-05-2006 11:15 PM
Hi Babu
Are you getting any error while accessing ? if so can you paste the same .. also are you using up IE or any other in house application to acces ?
regds
11-06-2006 12:18 AM
We are getting "page cannot be displayed" error. Sometimes logon screen is displaying, but while we providing the login credentials, the page is not displaying. Please let me know it is network issuse or the remote server is not responding? IE asked for java enable, we enabled java plugin also.
11-06-2006 01:14 AM
Hi Babu
you can check the reachability to the server using normal ping if ICMP is permitted so that you can make sure the connectivity part.
May be the load or the sessions allowed on the server also result in this type of error message.
Also some of the delay sensitive application may time out if the minimum allowed latency is exceeded.
regds
11-06-2006 06:34 AM
Hi Babu,
When troubleshooting a firewall issue I normally follow a few steps:
(1) Review my basics: This includes (*) IP addresses, reachability by pinging directly connected hosts/routers, existence of relevant 'ICMP permit' statements, (*) Review of my access-lists (is the traffic permitted or denied, (*) Routes: do I have appropriate routing, (*) NAT: do I have appropriate NAT statements configured (for servers I expect to have 'static' statements). Alternatively, I may have 'no nat-control' if I do not need NAT to occur.
(1.1) from the firewall: pinging directly connected hosts typically verifies that my basic settings are correct.
(1.2) from the firewall: pinging devices that are one hop can help verify that the routes are correct.
(1.3) performing a 'show xlate | i
(1.4) performing a 'show conn | i
Normally, I jump right into a 'show log | i [dD]eny' to see if I see any log statements where traffic is being denied. For example, I have had overlapping static statements in the past where an xlate (NAT entry) could not be created. Certainly, it will let you know if a packet is being dropped by an ACL.
Other tools that I like: 'capture' feature, 'tracer' feature. Mileage may vary with the 'capture' feature depending upon firewall hardware and software release; therefore, I like to have standalone packet-captures available to verify information that the 'capture' command provides.
Best Regards and good luck,
Troy McCarty
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide