No Internet Access but connected to domain. New install of Windows 7

[KYLE NGUYEN]

Hi everyone

I have a problem that's driving me nuts trying to troubleshoot. Brand new install of Windows 7 Dell latitude. I'm connected to our domain, but cannot browse the Internet with exclamation icon and msg "No Internet Access."

I can ping all internal servers and gateway. No issues there.

I took the laptop home and connected to my home network fine. Internet connection works perfectly.

But when I get back to the office, I tried connecting with both wired and wireless, both gives msg "No Internet Access."

Firewall is ASA 5505. I did some googling, and found some info on IP Shunning, but when I check my firewall settings, shunning is not enabled. 

Any help is greatly appreciated. Thanks. 

[Georg Pauwen]

If you have any antivirus software running on your laptop, try to disable it (including all services related to the antivirus software). Also, try and disable the Windows firewall...

[KYLE NGUYEN]

No antivirus software installed. Windows Firewall is turned OFF. 

[Georg Pauwen]

Are you the administrator of the firewall at your office ? Check if any packets with the source being your MAC address or IP address are being dropped.  

Do you get your IP address from a DHCP server at your office ? Do an 'ipconfig /release' and then 'ipconfig /renew' from a command prompt to make sure none of your home location settings are accidentally retained...

[KYLE NGUYEN]

some new developments. so I connected the new laptop directly to the ASA firewall and I get an Internet Connection immediately. I can ping all internal servers and browse the internet. 

If I plug it back into the Cisco switch I lose internet connection, but I'm still connected to the domain/network.

I tried setting up another new desktop and I'm getting the exact same issue. No Internet Access, but I can join domain and connect to all internal servers.

Any idea what's going on? 

[Georg Pauwen]

Hello,

weird indeed. I googled around and found this,give it a try and see if connectivity can be restored that way...

https://www.youtube.com/watch?v=pLy6sRFdRJY

[KYLE NGUYEN]

I actually found the same youtube video and tried it before posting on this forum. I didn't have Bonjour services and changing the metric didn't change anything either. Thanks for trying. 

[Georg Pauwen]

Hello,

if you googled, you probably got the same results, so I assume you have tried:

- to rejoin the domain

- to update your NIC drivers

- to issue the following commands from a command prompt:

  netsh winsock reset

  netsh winsock reset catalog

  netsh int ip reset c:\resetlog.txt

[KYLE NGUYEN]

After some more troubleshooting, I was able to narrow it down to a switch issue. We have seven Cisco 3850 switches spread throughout the campus.

I took the new laptop to each switch and plugged it in. I was able to connect to the network and ping all internal servers on all of them.

On two of the switches, I cannot connect to the Internet with msg "No Internet Access" even though I can still join domain and ping internal servers. 

What's weird is that old computers that's still connected to these two "problem" switches are still working fine with full internet access. It's only when I try to connect a new device that I lose internet access. 

Does this make any sense?

[Georg Pauwen]

Hello,

the only thing you could configure on the access ports is 'flowcontrol receive on' (it is turned off by default). Somewhere in the back of my head I remember that being an issue with certain NICs. Give it a try...

[Austin Sabio]

Can you please post your switch configuration? It could be an ACL blocking access to the internet. 

Please rate if helpful. 

[KYLE NGUYEN]

After some more troubleshooting, I was able to narrow it down to a switch issue. We have seven Cisco 3850 switches spread throughout the campus.

I took the new laptop to each switch and plugged it in. I was able to connect to the network and ping all internal servers on all of them.

On two of the switches, I cannot connect to the Internet with msg "No Internet Access" even though I can still join domain and ping internal servers. 

What's weird is that old computers that's still connected to these two "problem" switches are still working fine with full internet access. It's only when I try to connect a new device that I lose internet access. 

Does this make any sense?

[Austin Sabio]

we can't tell without seeing the switch config. It's possible an ACL is applied on certain ports. 

[KYLE NGUYEN]

You want me to copy and paste the whole thing? It's very long.

[ahmedshoaib]

Hi;

Take the configuration backup of switch & Distribution switch with following command in notepad file and attached to case:

1. show etherchannal summary

2. show interface trunk

Thanks & Best regards;