Solved

Nokia Static Routes.

Posted on 2007-04-08
10
2,300 Views
Last Modified: 2013-11-16
hi every body.

i m having a a problem setting up Nokia ip330.

the problem is that how to add static routes so my clien pc can access the internet.

diagram.

internet---{Modem} 192.168.1.254 ---------Nokia (interface 1 internet . 192.168.1.118) -----Nokia interface 2 (no IP) (nokia interface 3 internal  192.168.0.1)-------Dlink Router internal ip 192.168.0.2) ------- client PC(192.168.0.100)

how can i add a static route in the Voyager.  Do i have the right setup or can you please advice me how to do this.

many thanks.




   
0
Comment
Question by:greekstones
  • 5
  • 5
10 Comments
 
LVL 4

Expert Comment

by:nstand
Comment Utility
So your Nokia has 2 active interfaces that you have defined as internal (192.168.0.1) and external (192.168.1.118) and your external connection is then connected to an upstream modem of some sort that has the ip address 192.168.1.254..........

This setup looks ok and would require a default gateway to be added to voyager to point to 192.168.1.254. You should then test this setup by logging onto Voyager via SSH (coz you turned Telnet off right?) and pinging an external website (bbc.com is good one to test as it actually replies to pings). You may need to ping the IP rather than DNS name as the Nokia box wont have local DNS settings set. If it fails ping the default gateway 192.168.1.254 or trace to the external IP.

Now the internal setup looks a little odd, why do you have a Dlink Router (192.168.0.2) in between your client PC's and the Nokia internal card. This might make sense if you were separating out network segments but your client PC's, DLink and Internal Nokia are all on the same network segment (192.168.0.x/24).

Assuming I am understanding your network correctly if you remove the DLink and connect the internal Nokia ethernet card to a switch that is also connected to the client pcs then your in business. Your client PC's then have a default gateway of 192.168.0.1 (nokia internal). Again test this setup by pinging 0.1 from your client PC's.

Good luck

nstand
0
 
LVL 6

Author Comment

by:greekstones
Comment Utility
hello there thanks for your reply

ok i tryed this by replacing d-link with a switch and i set up my client gateway 192.168.0.1 and client PC 192.168.0.100 but still the nokia box does not route any traffic.

i can ping 192.168.1.254 /192.168.0.100 and access the internet from the nokia box but from my client i can't ping 192 .168.1.254 or any internet sites however i can ping 192.168.1.101 interface.
-----------------------------------------------------------------------------------------------

the static route on the nokia is 192.168.1.254.

Modem(192.168.1.254-----Nokia internet int: 192.168.1.101----nokia interface2 (no IP)-----nokia interface 3: 192.168.0.1-----switch---------client pc 192.168.0.100.

------------------------------------------------------------------------------------------------

This is my new setup and i still have the same problem.

0
 
LVL 4

Expert Comment

by:nstand
Comment Utility
I dont think routing is your issue. To test this setup a continuos ping from your client PC (-a) to the 192.168.1.254 address. Then log onto your Nokia box and run:

"tcpdump -i ethXXXX src 192.168.0.100" where ethXXXX is the name of your external interface (probably something like eth1 or eth-s1p1c0 if you have an additional ethernet card installed)

What we are trying to do with this command is see whether the icmp echo request packets from your client pc are being routed out the external interface. My guess is that they are. If you see traffic on your tcpdump then that good, Ctrl-C to stop. If you saw packets then run the following command:

"tcpdump -i ethXXXX dst 192.168.0.100" where ethXXXX is the name of your external interface

What we are trying to do now is see if the icmp echo reply packet is coming back from 192.168.1.254. If you see a load of reply packets from that IP then this is good.

If this is still working then lastly run

"tcpdump -i ethXXXX dst 192.168.0.100" where ethXXXX is the name of your internal interface

This will show you if the reply packet is being passed through the Nokia box back to your client pc. This is almost certainly not working.

Now I think the problem maybe one of ARP or FW. Are you running any firewall software on the IP330? Have you configured any ARP or Proxy ARP settings, viewable in Voyager through the Interfaces link.

Let me know how the tcpdump stuff goes.
0
 
LVL 6

Author Comment

by:greekstones
Comment Utility
hi there

ok i'm not running any fw or arp . i try this this evening and i keep u informed.


thanks.
0
 
LVL 6

Author Comment

by:greekstones
Comment Utility
hello there here is the out come

-----------------------------------------------------------------------------------------------------------

tcpdump -i eth-s3p1 src 192.168.0.100
tcpdump: listening on eth-s3p1
16:41:11.712227 O 192.168.0.100 > 192.168.1.254: icmp: echo request
16:41:16.977158 O 192.168.0.100 > 192.168.1.254: icmp: echo request
16:41:22.477140 O 192.168.0.100 > 192.168.1.254: icmp: echo request
16:41:27.977151 O 192.168.0.100 > 192.168.1.254: icmp: echo request
16:42:29.652121 O 192.168.0.100 > 192.168.1.254: icmp: echo request
16:42:34.976888 O 192.168.0.100 > 192.168.1.254: icmp: echo request
16:42:40.476889 O 192.168.0.100 > 192.168.1.254: icmp: echo request
16:42:45.976869 O 192.168.0.100 > 192.168.1.254: icmp: echo request


SFXFW01[admin]# tcpdump -i eth-s3p1 dst 192.168.0.100
tcpdump: listening on eth-s3p1


nothing happens


SFXFW01[admin]# tcpdump -i eth-s5p1 dst 192.168.0.100
tcpdump: listening on eth-s5p1

nothing happens

--------------------------------------------------------------------------------------------------------------

Where do you thing is the problem.

many thanks.
0
Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

 
LVL 4

Accepted Solution

by:
nstand earned 500 total points
Comment Utility
If eth-s3p1 is your external nic then one good thing, your routing is working fine!

OK so you dont see the reply packet from your upstream modem, thats the next problem and one problem I see with your config if your not running any firewall software (and hence your outbound pc echo-request to 192.168.1.254 is not being NAT'd) is that your modem only knows 2 networks, the internet through its WAN port and the 192.168.1.0/24 network through the internal nic port. Therefore when your modem sees your pc's packet it replies to it using the default gateway which will be the internet and hecne you never see the reply packet. If your able to add routes to the router add the network 192.168.0.0/24 with the next hop being your IP330's exteranl nic card (192.168.1.118). Your IP330 is directly connected to the 192.168.0.0/24 network so no additional routes are required on the IP330 for the reply packet.

Hope that makes sense. Failing that it could be ARP but pretty certain its a modem routing issue
0
 
LVL 4

Expert Comment

by:nstand
Comment Utility
**Edit - first line should say your outbound IP330 routing is fine**
0
 
LVL 6

Author Comment

by:greekstones
Comment Utility
it works thank you very much.

i can ping 192.168.1.254 but where can i put my dns server in , can i put 192.168.1.254?


other than that i would like to thank you
0
 
LVL 4

Expert Comment

by:nstand
Comment Utility
great! For future reference tcpdump is an excellent program for network debugging on the Nokia boxes.

Re:DNS, when you say where can you put it, do you mean you have a physical DNS server and you dont know where to put it or you mean your client dns settings?

If its the latter then on my home network I dont use the DNS servers provided by my ISP, I use OpenDNS
http://www.opendns.com/start/windows_xp.php
0
 
LVL 6

Author Comment

by:greekstones
Comment Utility
sorry it was the modem . i added the route 192.168.0.0/24 gateway: 192.168.1.118 i also solved the dns problem .  

thanks.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Join & Write a Comment

Suggested Solutions

Wikipedia defines 'Script Kiddies' in this informal way: "In hacker culture, a script kiddie, occasionally script bunny, skiddie, script kitty, script-running juvenile (SRJ), or similar, is a derogatory term used to describe those who use scripts or…
This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …
You have products, that come in variants and want to set different prices for them? Watch this micro tutorial that describes how to configure prices for Magento super attributes. Assigning simple products to configurable: We assigned simple products…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now