<div>
Hi 
Depending on the model of router, it may not reply to pings (ICMP). 
Destination NET unreachable usually means there's no route to the specified Host, however, if your router's working correctly, try running a trace route 
i.e. tracert [external ip address] 
Is it definitely an external address you're trying to ping? what're the first two groups of numbers (i.e. check they're NOT 10.x or 192.168 or 172.16 etc) 
hope this helps
</div>

<div>
yes starts with 62.24. 
I'm not even getting a responce now it, just request timed out... 
I'm connected to the internet fine.
</div>

<div>
when you say not getting a response now, does this mean you were getting replies from this router once... and there have been no changes?
</div>

<div>
also, is it a managed router or yours? 
who's the ISP? 
is it a firewall / router ? what make? It may have downloaded an update which changed the ICMP response... 
lastly, are you sure it's the correct IP address? Can you get admin access to it's configuration? 
If not, from internally, visit <a href="http://www.whatsmyip.org" rel="ugc">www.whatsmyip.org</a>&nbsp;and try a tracert to an external address from inside, noting the steps. 
 
.. a few things to try ;)
</div>

<div>
Managed by myself, 
the isp are a company called ecocall, could they be blocking this? 
100 % SURE its the correct ip, 
 
I'll try the tracert
</div>

<div>
Do you have an access-list on the router assuming it is a Cisco 837? &nbsp;Are you allowing ICMP echo to the outside interface if an access-list is applied? 
 
Add an entry to the access-list if you want to be able to ping it externally. 
 
ip access-list ext 
1 permit icmp any host 62.24.x.x echo &nbsp; &lt;--drop the echo option if you want to allow all ICMP
</div>

<div>
I did that, but I still cannot ping, would my isp be blocking the connection?
</div>

<div>
I've never heard of an ISP blocking ICMP. &nbsp;Can you post your configuration? 
 
Can you ping something on the Internet from the router itself?
</div>

<div>
 
Building configuration... 
 
Current configuration : 5237 bytes 
! 
version 12.3 
no service pad 
service timestamps debug datetime msec 
service timestamps log datetime msec 
no service password-encryption 
! 
hostname Router 
! 
boot-start-marker 
boot-end-marker 
! 
no logging buffered 
enable secret 5 $1$OJik$j/nBnvxwOGhysHNfcr6uO/ 
enable password Password 
! 
no aaa new-model 
ip subnet-zero 
ip dhcp excluded-address 10.13.1.1 10.13.1.49 
ip dhcp excluded-address 10.13.1.101 10.13.1.254 
! 
ip dhcp pool default 
&nbsp; &nbsp;import all 
&nbsp; &nbsp;dns-server 62.24.128.17 62.24.128.18 
! 
ip dhcp pool steve 
&nbsp; &nbsp;network 10.13.1.0 255.255.255.0 
&nbsp; &nbsp;default-router 10.13.1.1 
&nbsp; &nbsp;dns-server 62.24.128.18 
! 
! 
ip name-server 62.24.128.17 
ip name-server 62.24.128.18 
ip inspect name SDM_LOW cuseeme 
ip inspect name SDM_LOW ftp 
ip inspect name SDM_LOW h323 
ip inspect name SDM_LOW icmp 
ip inspect name SDM_LOW netshow 
ip inspect name SDM_LOW rcmd 
ip inspect name SDM_LOW realaudio 
ip inspect name SDM_LOW rtsp 
ip inspect name SDM_LOW sqlnet 
ip inspect name SDM_LOW streamworks 
ip inspect name SDM_LOW tftp 
ip inspect name SDM_LOW tcp 
ip inspect name SDM_LOW udp 
ip inspect name SDM_LOW vdolive 
ip audit notify log 
ip audit po max-events 100 
ip ssh break-string 
no ftp-server write-enable 
no scripting tcl init 
no scripting tcl encdir 
! 
! 
! 
! 
crypto isakmp policy 1 
&nbsp;encr 3des 
&nbsp;authentication pre-share 
&nbsp;group 2 
crypto isakmp key Password address remote site 
! 
! 
crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac 
! 
crypto map SDM_CMAP_1 1 ipsec-isakmp 
&nbsp;description Tunnel toremote site 
&nbsp;set peer remote site 
&nbsp;set transform-set ESP-3DES-SHA 
&nbsp;match address 102 
! 
! 
! 
! 
interface Ethernet0 
&nbsp;description $FW_INSIDE$ 
&nbsp;ip address 10.13.1.1 255.255.255.0 
&nbsp;ip access-group 100 in 
&nbsp;ip nat inside 
&nbsp;hold-queue 100 out 
! 
interface ATM0 
&nbsp;no ip address 
&nbsp;no atm ilmi-keepalive 
&nbsp;dsl operating-mode auto 
! 
interface ATM0.1 point-to-point 
&nbsp;ip tcp adjust-mss 1392 
&nbsp;pvc 0/38 
&nbsp; encapsulation aal5mux ppp dialer 
&nbsp; dialer pool-member 1 
&nbsp;! 
! 
interface FastEthernet1 
&nbsp;no ip address 
&nbsp;duplex auto 
&nbsp;speed auto 
! 
interface FastEthernet2 
&nbsp;no ip address 
&nbsp;duplex auto 
&nbsp;speed auto 
! 
interface FastEthernet3 
&nbsp;no ip address 
&nbsp;duplex auto 
&nbsp;speed auto 
! 
interface FastEthernet4 
&nbsp;no ip address 
&nbsp;duplex auto 
&nbsp;speed auto 
! 
interface Dialer0 
&nbsp;description $FW_OUTSIDE$ 
&nbsp;ip address 62.24.x.x 255.255.255.252 
&nbsp;ip access-group 101 in 
&nbsp;ip nat outside 
&nbsp;ip inspect SDM_LOW out 
&nbsp;encapsulation ppp 
&nbsp;dialer pool 1 
&nbsp;dialer-group 1 
&nbsp;ppp authentication chap pap callin 
&nbsp;ppp chap hostname user@ecocallnet.co.uk 
&nbsp;ppp chap password 0 password 
&nbsp;ppp pap sent-username user@ecocallnet.co.uk password 0 password 
&nbsp;crypto map SDM_CMAP_1 
! 
ip nat inside source route-map SDM_RMAP_1 interface Dialer0 overload 
ip classless 
ip route 0.0.0.0 0.0.0.0 Dialer0 
ip http server 
no ip http secure-server 
! 
! 
access-list 1 remark INSIDE_IF=Ethernet0 
access-list 1 remark SDM_ACL Category=2 
access-list 1 permit 10.0.0.0 0.255.255.255 
access-list 100 remark auto generated by SDM firewall configuration 
access-list 100 remark SDM_ACL Category=1 
access-list 100 deny &nbsp; ip 62.24.236.60 0.0.0.3 any 
access-list 100 deny &nbsp; ip host 255.255.255.255 any 
access-list 100 deny &nbsp; ip 127.0.0.0 0.255.255.255 any 
access-list 100 permit ip any any 
access-list 101 remark auto generated by SDM firewall configuration 
access-list 101 remark SDM_ACL Category=1 
access-list 101 remark IPSec Rule 
access-list 101 permit ip 192.168.0.0 0.0.0.255 10.13.1.0 0.0.0.255 
access-list 101 permit udp host remote site host 62.24.x.x eq non500-isakmp 
access-list 101 permit udp host remote site host 62.24.x.x eq isakmp 
access-list 101 permit esp host remote site host 62.24.x.x 
access-list 101 permit ahp host remote site host 62.24.x.x 
access-list 101 permit udp host 62.24.128.18 eq domain host 62.24.x.x 
access-list 101 permit udp host 62.24.128.17 eq domain host 62.24.x.x 
access-list 101 deny &nbsp; ip 10.0.0.0 0.255.255.255 any 
access-list 101 deny &nbsp; icmp any host 62.24.x.x 
access-list 101 permit icmp any host 62.24.x.x echo-reply 
access-list 101 permit icmp any host 62.24.x.x time-exceeded 
access-list 101 permit icmp any host 62.24.x.x unreachable 
access-list 101 deny &nbsp; ip 172.16.0.0 0.15.255.255 any 
access-list 101 deny &nbsp; ip 192.168.0.0 0.0.255.255 any 
access-list 101 deny &nbsp; ip 127.0.0.0 0.255.255.255 any 
access-list 101 deny &nbsp; ip host 255.255.255.255 any 
access-list 101 deny &nbsp; ip host 0.0.0.0 any 
access-list 101 deny &nbsp; ip any any log 
access-list 101 permit icmp any host 62.24.x.x 
access-list 102 remark SDM_ACL Category=4 
access-list 102 remark IPSec Rule 
access-list 102 permit ip 10.13.1.0 0.0.0.255 192.168.0.0 0.0.0.255 
access-list 103 remark SDM_ACL Category=2 
access-list 103 remark IPSec Rule 
access-list 103 deny &nbsp; ip 10.13.1.0 0.0.0.255 192.168.0.0 0.0.0.255 
access-list 103 permit ip 10.0.0.0 0.255.255.255 any 
dialer-list 1 protocol ip permit 
route-map SDM_RMAP_1 permit 1 
&nbsp;match ip address 103 
! 
! 
control-plane 
! 
! 
line con 0 
&nbsp;no modem enable 
&nbsp;transport preferred all 
&nbsp;transport output all 
line aux 0 
&nbsp;transport preferred all 
&nbsp;transport output all 
line vty 0 4 
&nbsp;exec-timeout 120 0 
&nbsp;password Password 
&nbsp;login 
&nbsp;length 0 
&nbsp;transport preferred all 
&nbsp;transport input all 
&nbsp;transport output all 
! 
scheduler max-task-time 5000 
! 
end 
 
Actually just looking through this I think I see a deny icmp somewhere.
</div>

<div>
Yeah, the deny ICMP is above the ICMP allow you just added. 
 
Do this: 
 
conf t 
ip access-list ext 101 
1 permit icmp any host 62.24.x.x 
 
The &quot;1&quot; at the beginning puts this allow at the top of the list.
</div>

<div>
thanks 
I get a duplicate number message tho 
do I need to delete the other line?
</div>

<div>
sorry duplicate sequence number
</div>

<div>
Okay, do a show access-list 101 and look at the sequence numbers. &nbsp;Try one that is free at the top.
</div>

<div>
They all go up in 10's so should I carry the sequence on or should I use 2?
</div>

<div>
Yeah, use 2. &nbsp;The router will reorder them into 10's on next reboot.
</div>

<div>
Still can't ping it, do I need to do a write mem command or should I still be able to ping it?
</div>

<div>
last sequence 
190 permit icmp any host 62.24.x.x 
 
should this be higher up?
</div>

<div>
Can you post a &quot;show access-list 101&quot;.
</div>

<div>
Router(config-ext-nacl)# 
Router#show access-list 101 
Extended IP access list 101 
&nbsp; &nbsp; 10 permit ip 192.168.0.0 0.0.0.255 10.13.1.0 0.0.0.255 (3300 matches) 
&nbsp; &nbsp; 20 permit udp host remote-site host 62.24.x.x eq non500-isakmp 
&nbsp; &nbsp; 30 permit udp host remote-site host 62.24.x.x eq isakmp (234 matches) 
&nbsp; &nbsp; 40 permit esp host remote-site host 62.24.x.x (11125 matches) 
&nbsp; &nbsp; 50 permit ahp host remote-site host 62.24.x.x 
&nbsp; &nbsp; 60 permit udp host dns eq domain host 62.24.x.x 
&nbsp; &nbsp; 70 permit udp host dns eq domain host 62.24.x.x 
&nbsp; &nbsp; 80 deny ip 10.0.0.0 0.255.255.255 any 
&nbsp; &nbsp; 90 permit icmp any host 62.24.x.xecho-reply 
&nbsp; &nbsp; 100 permit icmp any host 62.24.x.x time-exceeded 
&nbsp; &nbsp; 110 permit icmp any host 62.24.x.x unreachable 
&nbsp; &nbsp; 120 deny ip 172.16.0.0 0.15.255.255 any 
&nbsp; &nbsp; 130 deny ip 192.168.0.0 0.0.255.255 any 
&nbsp; &nbsp; 140 deny ip 127.0.0.0 0.255.255.255 any 
&nbsp; &nbsp; 150 deny ip host 255.255.255.255 any 
&nbsp; &nbsp; 160 deny ip host 0.0.0.0 any 
&nbsp; &nbsp; 170 deny ip any any log (193 matches) 
&nbsp; &nbsp; 180 permit icmp any host 62.24.x.x 

</div>

<div>
Okay, so try this: 
 
conf t 
ip access-list ext 101 
no permit icmp any host 62.24.x.x 
5 permit permit icmp any host 62.24.x.x
</div>

<div>
It doesnt seem to remove the rule, 
 
this is what I have done:- 
 
User Access Verification 
 
Password: 
router&gt;conf t 
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; ^ 
% Invalid input detected at '^' marker. 
 
Router&gt;en 
Password: 
Router#conf t 
Enter configuration commands, one per line. &nbsp;End with CNTL/Z. 
Router (config)#ip access-list ext 101 
Router(config-ext-nacl)#no permit icmp and host 62.24.x.x 
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;^ 
% Invalid input detected at '^' marker. 
 
Router(config-ext-nacl)#no permit icmp any host 62.24.x.x 
Router(config-ext-nacl)#5 permit permit icmp any host 62.24.x.x 
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; ^ 
% Invalid input detected at '^' marker. 
 
Router(config-ext-nacl)#5 permit icmp any host 62.24.x.x 
Router E(config-ext-nacl)# 
 
Router#show access-list 101 
Extended IP access list 101 
&nbsp; &nbsp; 10 permit ip 192.168.0.0 0.0.0.255 10.13.1.0 0.0.0.255 (4156 matches) 
&nbsp; &nbsp; 20 permit udp host remote-ip host 62.24.x.x eq non500-isakmp 
&nbsp; &nbsp; 30 permit udp host remote-ip host 62.24.x.x eq isakmp (422 matches) 
&nbsp; &nbsp; 40 permit esp host remote-ip host 62.24.x.x (12158 matches) 
&nbsp; &nbsp; 50 permit ahp host remote-ip host 62.24.x.x 
&nbsp; &nbsp; 60 permit udp host 62.24.dns1 eq domain host 62.24.x.x 
&nbsp; &nbsp; 70 permit udp host 62.24.dns2 eq domain host 62.24.x.x 
&nbsp; &nbsp; 80 deny ip 10.0.0.0 0.255.255.255 any 
&nbsp; &nbsp; 90 permit icmp any host 62.24.x.x echo-reply 
&nbsp; &nbsp; 100 permit icmp any host 62.24.x.x time-exceeded 
&nbsp; &nbsp; 110 permit icmp any host 62.24.x.xunreachable 
&nbsp; &nbsp; 120 deny ip 172.16.0.0 0.15.255.255 any 
&nbsp; &nbsp; 130 deny ip 192.168.0.0 0.0.255.255 any 
&nbsp; &nbsp; 140 deny ip 127.0.0.0 0.255.255.255 any 
&nbsp; &nbsp; 150 deny ip host 255.255.255.255 any 
&nbsp; &nbsp; 160 deny ip host 0.0.0.0 any 
&nbsp; &nbsp; 170 deny ip any any log (199 matches) 
&nbsp; &nbsp; 180 permit icmp any host 62.24x.x 

</div>

<div>
you are an absolute genius, I really appreciate your persistence in this issue, thanks alot 
Dan
</div>

<div>
<div class="content wysiwyg-content">
Hi 
 
I am trying to ping my routers static IP from outside of my network and I get the following message when I try to ping: 
 
reply from ip destination net unreachable
</div>
</div>

Hi

I am trying to ping my routers static IP from outside of my network and I get the following message when I try to ping:

reply from ip destination net unreachable

Ping from 837 - Destination net ureachable - outside network

A router is a networking device that forwards data packets between computer networks. Routers perform the "traffic directing" functions on the Internet. The most familiar type of routers are home and small office cable or DSL routers that simply pass data, such as web pages, email, IM, and videos between computers and the Internet. More sophisticated routers, such as enterprise routers, connect large business or ISP networks up to the powerful core routers that forward data at high speed along the optical fiber lines of the Internet backbone. Though routers are typically dedicated hardware devices, use of software-based routers has grown increasingly common.