We help IT Professionals succeed at work.

We've partnered with Certified Experts, Carl Webster and Richard Faulkner, to bring you two Citrix podcasts. Learn about 2020 trends and get answers to your biggest Citrix questions!Listen Now

x

Loss of network connectivity

Medium Priority
257 Views
Last Modified: 2012-05-06
I have a Dell Poweredge 2850 running Windows Server 2003 SP2 and is one of our AD controllers.  In addition to AD it also does some print serving and is our management server for Symantec Endpoint Protection.  Out of the blue I have lost all network connectivity to it.  It is running on a static IP.  I can ping its own address but when I try to ping other addresses I get "Destination host unreachable".

From another computer I have set up a continuous ping to the server.  I get Request timed out.

However, when I reboot the server and I see on the screen, "Preparing network connections" the continuous ping receives a reply from the server.  When the screen changes to "Applying computer settings" the continuous ping changes back to Request timed out.

So something in Windows is hosing the network stack on the server.  I've tried the following:

-removing SEP
-reinstalling SEP
-removing all Windows updates from the last two months
-stopping all non-Microsoft services
-replaced the nic
-replaced the cable
-tried plugging into a different switch port
-tried plugging into a switch
-updated nic drivers
-tried using DHCP instead of static address...no connectivity

I can't think of anything else to try.

Comment
Watch Question

Commented:
I had a similar problem with a client server and it was because of a particular windows update.  I had to boot into last known good to get the setting back as I am not sure what in the update killed the network.  
  Also for troubleshooting can you do a route print in dos and see where it thinks it is supposed to direct packets.
Kyle AbrahamsSenior .Net Developer
CERTIFIED EXPERT

Commented:
Any firewalls?  

Post your ipconfig /all for this machine as well as an external machine.

Also include your physical network paths.

Author

Commented:
From an external pc:
Ethernet adapter Local Area Connection:

        Connection-specific DNS Suffix  . :
        Description . . . . . . . . . . . : Broadcom NetXtreme 57xx Gigabit Cont
roller
        Physical Address. . . . . . . . . : 00-19-B9-04-7D-9D
        Dhcp Enabled. . . . . . . . . . . : No
        IP Address. . . . . . . . . . . . : 192.168.2.250
        Subnet Mask . . . . . . . . . . . : 255.255.255.0
        Default Gateway . . . . . . . . . : 192.168.2.9
        DNS Servers . . . . . . . . . . . : 192.168.2.13
                                            192.168.2.16
        Primary WINS Server . . . . . . . : 192.168.2.16
        Secondary WINS Server . . . . . . : 192.168.2.13

From the server in question:

Ethernet adapter LAN:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Network Connection
   Physical Address. . . . . . . . . : 00-14-22-0E-2A-FB
   DHCP Enabled. . . . . . . . . . . : No
   IP Address. . . . . . . . . . . . : 192.168.2.13
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 192.168.2.9
   DNS Servers . . . . . . . . . . . : 192.168.2.16
                                       192.168.2.13
   Primary WINS Server . . . . . . . : 192.168.2.16
   Secondary WINS Server . . . . . . : 192.168.2.13

Author

Commented:
Dan,
  Last Known Good Configuration did not work.  When I do a Route Print it shows the default gateway as 192.168.2.9 which is proper.

Author

Commented:
Ged325,
  to answer your other question, no firewalls between 192.168.2.13 and any other device on the 192.168.2.0 network.
Kyle AbrahamsSenior .Net Developer
CERTIFIED EXPERT

Commented:
Are you pinging by name or by IP?  

On the server what if you switched the WINS to be 2.13 for primary and 2.16 for the secondary?
Same for DNS.

Can 2.16 ping 2.13 by name or IP?

Commented:
Another thing to look at is the router.  Does the router see your IP in its arp table?  If you trace to any IP does it get to a second hop?

Author

Commented:
Dan,
  I don't have access to our routers, they are managed by our ISP.

If I run a tracert from the server I get a "destination host unreachable" right away.

Author

Commented:
Ged,
  I'm pinging by IP and name.  Same result.  I've tried switching the order of DNS and Wins...same result.

2.16 cannot ping 2.13 by name or IP.  When pinging by name it does resolve to the proper IP address.
Kyle AbrahamsSenior .Net Developer
CERTIFIED EXPERT

Commented:
Can server ping default gateway?  

Also any IPv6 going on?  If so can you disable for now?

Author

Commented:
The server cannot ping the default gateway.  No v6 here.
Kyle AbrahamsSenior .Net Developer
CERTIFIED EXPERT

Commented:
That needs to be resolved first.  There's got to be a piece of software or something that is preventing outbound connections.  Once that's fixed the rest will flow through.  Your issue is definitely on the server end.
Kyle AbrahamsSenior .Net Developer
CERTIFIED EXPERT

Commented:

Author

Commented:
I agree....I thought it might be a Windows Update but I have removed all updated downloaded in Feb, Jan, and Dec. but that hasn't resolved it.  I've turned off all non-Microsoft services as well but that hasn't resolved it either.  Not sure where to go other than demoting it, removing it from AD, and re-imaging.
Kyle AbrahamsSenior .Net Developer
CERTIFIED EXPERT

Commented:
what about RRAS?  or any other routing going on?  Can you do a wireshark trace on the server and do a ping to you GW?

Author

Commented:
No RRAS....but I just checked the Event Log and I see an error regarding IPSEC services.  The service is set to automatic but it is NOT started.  I checked my other servers and IPSEC is ON.  When I try to start IPSEC on this server I get an error message stating, "Error 2:  The system cannot find the file specified."

Could this be it?
Senior .Net Developer
CERTIFIED EXPERT
Commented:
worth a shot.  

Instructions on how to repiar:
http://support.microsoft.com/kb/912023

Not the solution you were looking for? Getting a personalized solution is easy.

Ask the Experts

Author

Commented:
Already working on that...results shortly.

Author

Commented:
Success....It was the IPSEC service that was not starting.  Following kb912023 fixed it.

Ged, I'll give you the points since pointing me to hanging services led me to find the problem.

Thanks for your help.
Access more of Experts Exchange with a free account
Thanks for using Experts Exchange.

Create a free account to continue.

Limited access with a free account allows you to:

  • View three pieces of content (articles, solutions, posts, and videos)
  • Ask the experts questions (counted toward content limit)
  • Customize your dashboard and profile

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.