cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
577
Views
10
Helpful
4
Replies

Bad Mask Info from ISP.

Purtech22
Level 1
Level 1

My ISP gave me 69.59.117.184-187 as available hosts. Subnet is /29, 255.255.255.248. Gateway is 69.59.117.183.

I confirmed this, even calling their operations center.

 

.184 with 255.255.255.248 produces a bad mask when I add to the Ethernet Interface. Instead I did .185 which worked. But traffic still does not flow. Gateway:  route outside 0.0.0.0 0.0.0.0 69.59.117.183 1

 

I tried .184 as the gateway for grins. Nothing. Is there away to trace packets to see what is going on?

I have an ASA 5505.

4 Replies 4

Francesco Molino
VIP Alumni
VIP Alumni
Hi

This isn't possible.
The /29 would be:
69.59.117.185 - 69.59.117.190

Which means 183 isn't in the range of usable IPs in this subnet.

Thanks
Francesco
PS: Please don't forget to rate and select as validated answer if this answered your question

Hello


@Purtech22 wrote:

My ISP gave me 69.59.117.184-187 as available hosts. Subnet is /29, 255.255.255.248. Gateway is 69.59.117.183.

I confirmed this, even calling their operations center.


If it is a /29 then @Francesco Molino is correct 69.59.117.183 isn't in the same network and the operations center is wrong - however /28 would be within range

 


Please rate and mark as an accepted solution if you have found any of the information provided useful.
This then could assist others on these forums to find a valuable answer and broadens the community’s global network.

Kind Regards
Paul

 

 

on a side note, what do you mean with 'traffic is not flowing' ? Can you ping, or not, the default gateway ?

 

In order to be sure that the ASA configuration is correct, you can run Packet Tracer (replace x.x.x.x with an inside IP address):

 

ASA#packet-tracer input inside icmp x.x.x.x 8 0 8.8.8.8

Correct I cannot ping the gateway. I guess I am a bit shocked. I spent nearly 45 minutes on the phone. They seemed to be not sure about the settings, but that is what they gave me. I even doubled checked. Their local plant operations manager did the same. I don't get why it is so hard. I will try the Packet Tracer next.

 

P.S. I tried the /28 with difference IPs I thought might work. Nothing has.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: