Pinging problem

[arifbaqi19]

Hi, We have ISA sever having two NIC the IP address as following : the first NIC 192.168.2.1 , connected directlay to coreswitch 192.168.100.254 the second NIC 10.10.10.3 connected dierectly to internet router 2800 ,  f0/0 10.10.10.1  the problem when i am treying to ping from my PC whic is the IP address is 192.168.100.12 to internet router 10.10.10.1 , it is not pinging but i can telnet . please i need your assistance .  waiting for your relpy  thanks,

[kapathak]

Hello,

Can you provide a brief topology diagram/representation depicting the connection of all the concerned devices  ? The problem description is a little vague, pardon me if I missed something out, but how does the Server come into the picture here?

You mentioned that you have a problem pinging from a PC to the router. Can you share the results of a traceroute from the PC to the router?

Cheers!

[arifbaqi19]

Hi,

this is the tracerout from PC to router

C:\>tracert 10.10.10.1

Tracing route to 10.10.10.1 over a maximum of 30 hops

  1     1 ms     1 ms     1 ms  192.168.100.253
  2     *        *        *     Request timed out.
  3     *        *        *     Request timed out.
  4     *        *        *     Request timed out.
  5     *        *

192.168.100.253 is our core switch

please look at the attachment , this is our daigram , which i cannot ping from my PC to the router .

thanks

[kapathak]

I would also double check to confirm that there arent any access lists  blocking ICMP.

[arifbaqi19]

Ok how can i check if the ICMP blocking

or not ?

[kapathak]

Arif,
Is your core switch able to ping the server? If yes, is it able to ping the router?  Basically the idea is to ping hop by hop to understand where the ping fails.

What does arp -a on the PC tell about 10.10.10.1

[arifbaqi19]

yes i can ping from the core switch to the server, but i am not able to ping from switch to router .

& this is arp -a

C:\>arp -a 10.10.10.1
No ARP Entries Found.

[dijohn]

run

sh ip int brie | ex unass

on the Switch... Do you have IP Addresses on the switch..is it Layer 3?

[kapathak]

I would check for ACLs on the router. show ip access-lists

[arifbaqi19]

yes our switch is L3 , it Cisco core switch 6500

please look at the attachment .

[kapathak]

Please post the running configs from router as well and a show ip int br | ex unass

[kapathak]

Which port connects on the core switch connects to the server. To make this easier, can you post the show run from the switch?

[dijohn]

ipconfig /all
ping 192.168.100.12
ping 192.168.2.250
ping 192.168.100.253
ping 192.168.2.1
ping 10.10.10.1

on your PC

[arifbaqi19]

Hi,

please check the attachment , for show run for the switch & for the router .

the ISA server is connecting to core switch on port 2/13.

thanks,

[kapathak]

Can you change 2/13 to trunk instead of access port. Right now, it is configured as an access port for vlan 2 which means it will only allow traffic from vlan 2 to traverse the link. Making it a trunk will allow it to carry traffic for multiple vlans, in this case from PC in vlan 100