Hosting websites behind a RV180W Router but Verizon Hotspot Cannot access my websites

[dhptraining]

Hello everyone,

I've looked around and cannot come up with a fix to my problem.  First off let me say I am very new to being an IT guy.  I was kinda thrown into it here at work.  Anyway,  I have a network here at the office where we host our own business webpages.  We have the network setup through our Cisco Small Business RV180W Router.

We have ports 80, 110, 25, 21 forwarding to computers on our network that host our websites.

This works for us except for clients who are using Verizon Hotspots.  Insted if they type in our webpage at www.dhptraining.com  they get a error saying the webpage cannot be displayed.  Also if we ping the website it just times out.

I wouldn't be to worried about this except that my boss,  The owner of the company uses one of these verizon hotspots when he is out of town.  And he makes this very difficult for me.  I have access to a Verizon 890l 4g hotspot.  I am having the same issue when I hook up to it.

Does anyoneat all understand why I may be having this problem.  I have contacted verizon and they can't help at all.  Because of this anyone using a Verizon Hotspot cannot access the webpages, emails, vpn.

Thanks

Darrell

[rossdav42]

That doesnt make any sense to me.

I assume you have checked that your boss can browse to other sites when on this hotspot and its only your site that has the problem?

If not a user error, is it possible that its a DNS thing? You could try setting a fixed DNS (public one such as Google 8.8.8.8) on the device, rather than getting a dynamic one from Verizon. Does he get a page returned if he goes direct to the IP, ie http://70.90.200.221

Good Luck!

[dhptraining]

I am getting this in my error log

Tue Mar 26 11:26:04 2013(GMT-0700) [rv180w][System][PLATFORM] /pfrm2.0/bin/bwLimitConfig /tmp/system.db 18 dot11STA 6 failed. status=-1

[dhptraining]

Yes David,

Thanks for the reply. He can get to other sites. Right now it appears it is only our websites. I also have a verizon hotspot here a the desk with me and I am having the same issue.  I can get to other sites but cannot get to dhptraining.com and I just tested to see if it would go directly to the ip address 70.90.200.221 and it is also not working.  I try to ping it and all it does is timeout.

Your right it doesn't make any sense to me either.  If I set the network up behind my old linksys router it works but not on the RV180W.  I would do this but the reason I purchased the business router was because of bandwith issues.  i have gone through every possible security setting on the router I can think of.  I honestly believe the problem is verizon but I don't have any proof as I can switch out my routers and it does change the situation.  I just simply cannot use the linksys.

[Tom Watts]

This hotspot, is it any kind of routing device? If you connect a computer to it, does it give you DHCP ?

-Tom
Please mark answered for helpful posts

[rossdav42]

Hi Darrell,

Total stab in the dark, but have you tried temporariliy disabling the 'Attack Prevention' and 'Content Filtering' option of the RV180 in case they are in some way interfering or mis-idenitfying these requests from hotspot connections?

Interesting that you are getting an error in the log. You need a Cisco man to tell you what that means!

David.

[dhptraining]

LOL.  Thanks again David,

Yep disabled all those.  Turned off everything in attack prevention and content filtering.  I am working with a cisco guy too and he can't seem to figure out the problem. 

Darrell

[dhptraining]

Hi Tom,

Yes I believe it does. The DHCP is turned on and It is assigning the IP address to my computer.  I hope that is what you are asking I am not extremely good at this.  I even trie to set the website IP address on a DMZ and still had the issue.  I thought that DMZ bypassed all of the ROUTER functions for that particular ip.  i guess I was wrong.

[Tom Watts]

The hotspot DHCP and IP address t MUST be in a different subnet than the router. If the hotspot and router are both 192.168.1.x it will not work. Can you affirm those are different?

-Tom
Please mark answered for helpful posts

[dhptraining]

Hi Tom,

Thank again for the reply.  I think you might have gone over my head a bit.  i have attached some images of the router configuration.  The Verizon hotspot I am talking about is from a remote client trying to access my webpages.  Her IP address on her side is coming up as 192.162.1.x.  Again as far as I can tell most people can access my websites.  But it seems like people using a verizon 4g hotspot are the ones having the problem.  I don't know about any other hotspots like ATT, Virgin as I don't have any clients to talk to about it.

I hope this helps a little.  Please remember I don't know a lot about this.

Thanks

Darrell

[Tom Watts]

Oh, I see. They are not on site as the router, that is fair enough. Probably may help if I read this more carefully as well. So if that person uses any other internet connection they have access?

This is what to do...

There is a diagnostic page (Admin -> Diagnostics -> Capture packets) and on the diagnostic page there is a packet capture. Enable the WAN capture then try to connect to that web page while using the hotspot connection. Then stop the WAN capture after the page times out. Then start another capture for the LAN. Try to access the page again, wait until it times out then stop the LAN capture. Save those files somewhere you can find them. Once that is done, post that here or provide it to whoever is helping you at the SBSC/Verizon.

-Tom
Please mark answered for helpful posts

[dhptraining]

Ok Tom I did it.

The answer is yes.  If she plugs into a DSL line she can access the webpages.  I did what you asked on the packet captures  it created two cap files.  They look like binary files so i can't open them in notepad.  Not sure how to attach them here so I just uploaded them to my site and create these links 

http://www.dhptraining.com/downloads/lanpkt.cap

http://www.dhptraining.com/downloads/wanpkt.cap

Thanks again for your help.  I will try to get these to the verizon guys too.

Thanks

Darrell

[Tom Watts]

Darrell,  what is the source IP address (the internet IP) from the Hotspot connection?

-Tom
Please mark answered for helpful posts

[dhptraining]

Hi Tom,

I had her do a tracert and I believe her ip address is 66.174.192.193.  Im sure the IP is dynamic.

Thanks

Darrell

[Tom Watts]

Hi Darrel, on this trace there is a 67.174,92.8.  Lines 833,866, 974, there is a TCP unseen segment. The segment before those frames weren't captured.I am seeing several of these errors not just localized to the 67.174.92.8 address. You are also getting duplicate ACK errors, and fast retransmission errors.

Unseen segment may be related to asymmetric routing problems where it provides a different path than the ACK packet, it could be a link throughput issue or wireshark simply missing a packet in the other direction

Duplicate ACK errors are received by a host but they never reach the application since the checksums are incorrect.

TCP retransmit only happens when the transmit side does not receive the TCP-ACK from the receiving end. Fast retransmission errors can be caused from bad wires, slow hops from source to destination or some sort of buffering issue.

So I suspect you may have some other problems. It would seem like it may be more ISP related.

-Tom
Please mark answered for helpful posts