Solved

Outside access to webserver fails after a day - reboot restores access.

Posted on 2006-06-26
19
241 Views
Last Modified: 2010-03-18
We recently put a new 2003 webserver on line. To make a smooth transition, we just unplugged the old webserver (also 2003) and plugged the new one in, giving the new server the same IP address as the old server, so we wouldn't have to make any DNS changes. It worked like a charm! Everyone loved the new style and content. This was on Friday around noon.

On Saturday, the site was no longer accessible from the outside, but it was still available from inside. The mail server and terminal server remained available from outside. I unplugged the new server, and plugged the old one back in, and the old one worked fine. I tried plugging the new one back in, but it still wouldn't work. Finally, we tried disabling, then re-enabling the NIC, and were once again able to access from the outside.

I didn't build either one of the webservers, and I haven't had much experience with 2003 servers, I have been going through settings on both servers to try to find what could possibly make the server stop accepting traffic from the outside, but start again after a reboot. Any ideas?
0
Comment
Question by:10percent
  • 9
  • 6
19 Comments
 
LVL 13

Expert Comment

by:prashsax
ID: 16987425
Does, this server have two NIC cards.

One for inside network and other for outside.

0
 

Author Comment

by:10percent
ID: 16987437
Yes, it does.
0
 
LVL 13

Expert Comment

by:prashsax
ID: 16987473
Then, check if your outside NIC might be using Power saving options.

Right Click on the network card, Select Properties.

Click Configure Button, Goto Power Management Tab.

See, if any of the check boxes are checked.

If yes, then clear both of them.

0
Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

 

Author Comment

by:10percent
ID: 16987716
This server has a dual port NIC. One port is configured for LAN and one is configured for WAN. Both ports had been configured for power management, so I cleared those boxes. However, I am skeptical that this setting caused the problem, as both ports were set the same. What "triggers" the power down if this setting is enabled?
0
 

Author Comment

by:10percent
ID: 17000815
prashax - I cannot believe this was the problem, but the server has stayed up ever since I cleared the power saver settings on the NIC.

Thanks for sharing!
0
 

Author Comment

by:10percent
ID: 17012785
Unforunately - this issue is happening again/still. It happened right after I awarded the points yesterday. I spent most of yesterday on the phone with Dell - it's a PE1850, but they couldn't identify the problem.

I'd like to re-open this question, how do I go about that?
0
 
LVL 13

Expert Comment

by:prashsax
ID: 17012874
You can ask moderator to reopen this question.

You can do it by opening a 0 point question in Community Support Area.

Also, have you tried to ping some IP address from the server, when external NIC went down.
0
 

Author Comment

by:10percent
ID: 17012948
I have asked that this question be reopened.

I have been able to PING other addresses and have been successful, but is there a way to "force" a specific address to route a PING?
0
 
LVL 13

Expert Comment

by:prashsax
ID: 17013029
What do you mean.

Ping will use the default gateway to reach its detination.

If you want, you can add a static route on the machine, and then ping will use that route rather than default gateway.

What exactly you want to do.
0
 

Author Comment

by:10percent
ID: 17013332
There is more than one NIC on this machine.
0
 
LVL 13

Expert Comment

by:prashsax
ID: 17013437
Yes, IT has two NICs.

One has Public IP.
Other has Private IP.

Have you tried swapping the NICs.

I mean assign Public IP to the one which has private IP and vice versa.

Doing this will rule out hardware problem with NIC card.
0
 

Author Comment

by:10percent
ID: 17013763
Actually both IP addresses are private. There is one dual port NIC, port A is assigned 192.168.1.xxx, while port B is assigned 192.168.0.xxx. I have a PIX firewall that translates the external IP address, 12.109.149.212 to the internal address 192.168.1.xxx. My internal DNS also translates www.kepplerspeakers.com to 192.168.1.xxx.

This is what makes this problem so strange - why would I be able to access the website (192.168.1.xxx) internally, but not externally? I have checked the ARP table on the firewall and it is resolving the IP address (192.168.1.xxx) to the correct physical address. Also, why, oh why does it resolve correctly after disabling/enabling the NIC?
0
 
LVL 13

Expert Comment

by:prashsax
ID: 17013887
Ok.

Let suppose your Port A address is :192.168.1.10
And port B address is:192.168.0.20
Now you are translating address 192.168.1.10 to an external IP.

1. Are you able to ping 192.168.1.10, when your website access stops from outside.(from any other machine have IP in 192.168.1.x subnet).

If you cannot, then it has to be a problem with NIC. (Here you can just swap the ports A & B).
Just Swap the cables and the IP address on both ports.

If you can ping to IP 192.168.1.10 while your site in not accessible from outside, then their can be a problem in network else where.






0
 

Author Comment

by:10percent
ID: 17042822
Yes, I can ping it from inside when I cannot reach the webserver from the outside. Again, this is what makes this situation so strange.
0
 

Author Comment

by:10percent
ID: 17202290
I am testing a solution I stumbled upon with a colleague of mine - I needed another set of eyes after weeks of not finding the issue. He pointed out that my predecessor had put in two different default gateway addresses when he configured the NICs, one for the internal side of the network, and one for the external. I just continued to use the same settings with each rebuild of the server, without ever giving them more than a cursory glance - shame on me.

The web server has now been up for 60+ hours - longer than it has been since the upgrade. I am cautiously optimistic that dual default gateway entries was the problem all along.

As I answered my own question and have not had any interest in the issue for almost a month - I don't think any points shoud be awarded.
0
 

Accepted Solution

by:
ee_ai_construct earned 0 total points
ID: 17280920
PAQ / Refund
ee ai construct, community support moderator
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Sometimes you might need to configure routing based not only on destination IP address, but also on a combination of destination IP address (or hostname) and destination port number. I will describe a method how to accomplish this with free tools. …
Resolve DNS query failed errors for Exchange
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…
I've attached the XLSM Excel spreadsheet I used in the video and also text files containing the macros used below. https://filedb.experts-exchange.com/incoming/2017/03_w12/1151775/Permutations.txt https://filedb.experts-exchange.com/incoming/201…

856 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question