Solved: No Internet Access but connected to domain. New install of Windows 7

KYLE NGUYEN · ‎09-07-2016

Hi everyone

I have a problem that's driving me nuts trying to troubleshoot. Brand new install of Windows 7 Dell latitude. I'm connected to our domain, but cannot browse the Internet with exclamation icon and msg "No Internet Access."

I can ping all internal servers and gateway. No issues there.

I took the laptop home and connected to my home network fine. Internet connection works perfectly.

But when I get back to the office, I tried connecting with both wired and wireless, both gives msg "No Internet Access."

Firewall is ASA 5505. I did some googling, and found some info on IP Shunning, but when I check my firewall settings, shunning is not enabled.

Any help is greatly appreciated. Thanks.

Austin Sabio · ‎09-09-2016

It could be related to CSCug87540. Please post show version.

Status:	Other
Severity:	2 Severe
Last Modified:	22-MAY-2015
Known Affected Releases:	3.2(1.0)
Known Fixed Releases:


Bug Id:	CSCug87540
Title:	3850: traffic L3 routed on 1 switch/member fails for newly added devices
Description:	Symptom:The following symptoms can appear on the impacted switch (which can be standalone or a stack member): - traffic is not routed between devices on different vlans (impacting newly connected devices, or devices that have changed ports) - new routes do not function - qos or ACL changes do not take effect This issue occurs due to a failure to program changes into hardware once the breakage occurs, so existing hardware programming will allow traffic between previously connected devices to continue to flow correctly. Conditions:Seen on Catalyst 3850 stacks running 3.2.0SE, 3.2.1SE and 3.2.2SE. Workaround:None. To recover reload the impacted switch. The issue does not show in 3.3.0(SE) due to code restructure.

View solution in original post

Georg Pauwen · ‎09-07-2016

If you have any antivirus software running on your laptop, try to disable it (including all services related to the antivirus software). Also, try and disable the Windows firewall...

KYLE NGUYEN · ‎09-07-2016

No antivirus software installed. Windows Firewall is turned OFF.

Georg Pauwen · ‎09-07-2016

Are you the administrator of the firewall at your office ? Check if any packets with the source being your MAC address or IP address are being dropped.

Do you get your IP address from a DHCP server at your office ? Do an 'ipconfig /release' and then 'ipconfig /renew' from a command prompt to make sure none of your home location settings are accidentally retained...

KYLE NGUYEN · ‎09-07-2016

some new developments. so I connected the new laptop directly to the ASA firewall and I get an Internet Connection immediately. I can ping all internal servers and browse the internet.

If I plug it back into the Cisco switch I lose internet connection, but I'm still connected to the domain/network.

I tried setting up another new desktop and I'm getting the exact same issue. No Internet Access, but I can join domain and connect to all internal servers.

Any idea what's going on?

Georg Pauwen · ‎09-08-2016

Hello,

weird indeed. I googled around and found this,give it a try and see if connectivity can be restored that way...

https://www.youtube.com/watch?v=pLy6sRFdRJY

KYLE NGUYEN · ‎09-08-2016

I actually found the same youtube video and tried it before posting on this forum. I didn't have Bonjour services and changing the metric didn't change anything either. Thanks for trying.

Georg Pauwen · ‎09-08-2016

Hello,

if you googled, you probably got the same results, so I assume you have tried:

- to rejoin the domain

- to update your NIC drivers

- to issue the following commands from a command prompt:

netsh winsock reset

netsh winsock reset catalog

netsh int ip reset c:\resetlog.txt

KYLE NGUYEN · ‎09-09-2016

After some more troubleshooting, I was able to narrow it down to a switch issue. We have seven Cisco 3850 switches spread throughout the campus.

I took the new laptop to each switch and plugged it in. I was able to connect to the network and ping all internal servers on all of them.

On two of the switches, I cannot connect to the Internet with msg "No Internet Access" even though I can still join domain and ping internal servers.

What's weird is that old computers that's still connected to these two "problem" switches are still working fine with full internet access. It's only when I try to connect a new device that I lose internet access.

Does this make any sense?

Georg Pauwen · ‎09-09-2016

Hello,

the only thing you could configure on the access ports is 'flowcontrol receive on' (it is turned off by default). Somewhere in the back of my head I remember that being an issue with certain NICs. Give it a try...

Austin Sabio · ‎09-08-2016

Can you please post your switch configuration? It could be an ACL blocking access to the internet.

Please rate if helpful.

KYLE NGUYEN · ‎09-09-2016

After some more troubleshooting, I was able to narrow it down to a switch issue. We have seven Cisco 3850 switches spread throughout the campus.

I took the new laptop to each switch and plugged it in. I was able to connect to the network and ping all internal servers on all of them.

On two of the switches, I cannot connect to the Internet with msg "No Internet Access" even though I can still join domain and ping internal servers.

What's weird is that old computers that's still connected to these two "problem" switches are still working fine with full internet access. It's only when I try to connect a new device that I lose internet access.

Does this make any sense?

Austin Sabio · ‎09-09-2016

we can't tell without seeing the switch config. It's possible an ACL is applied on certain ports.

KYLE NGUYEN · ‎09-09-2016

You want me to copy and paste the whole thing? It's very long.

ahmedshoaib · ‎09-09-2016

Hi;

Take the configuration backup of switch & Distribution switch with following command in notepad file and attached to case:

1. show etherchannal summary

2. show interface trunk

Thanks & Best regards;