Solved

What is stopping ICMP echo replies?

Posted on 2009-04-09
15
1,011 Views
Last Modified: 2013-11-29
We have a BT (2Wire) 2700HGV Business Hub. We have 5 servers on our network which have been assigned static IP addresses. I currently get no response if I PING the servers from outside the office. Do you know what setting on the 2700HGV is blocking this? I have confirmed that the option "BLOCK PING" is not checked.
This is the entry in the router's log which we get for a blocked PING:
 

INF 2009-04-09T09:40:03+01:00 fw,fwmon src=217.194.218.53 dst=217.46.156.164 ipprot=1 icmp_type=8 icmp_code=0 Unknown inbound session stopped

Open in new window

0
Comment
Question by:jpguillebaud
  • 8
  • 7
15 Comments
 
LVL 1

Expert Comment

by:Nocturnal25
ID: 24105462
The servers are connected to a hub and the hub is connect to a router/modem and that is connected to your ISP am I correct?
0
 

Author Comment

by:jpguillebaud
ID: 24105470
Nocturnal25 - that is correct.
0
 
LVL 1

Expert Comment

by:Nocturnal25
ID: 24105484
You will only be able to ping the WAN ip on the router/modem since your servers sit behind that device they will have internal ip's. You could open up port 1723 for a vpn connection on the router but one of the servers would have to be hosting the vpn service ro you could open port 3389 for RDP and RDP to one of your servers and work from that server.
0
 

Author Comment

by:jpguillebaud
ID: 24105504
The IP addresses of the servers are in fact external IP addresses. We have been provided with 5 static external IP addresses by our BT Business Broadband account. The router is configured to allow certain protocols in: SMTP, HTTP etc which work, however I can't see how to configure inbound ICMP.

I have tried also pinging the IP address of the router which is also a public IP address but I get no response.
0
 
LVL 1

Expert Comment

by:Nocturnal25
ID: 24105521
I'm assuming these are windows boxes? Do they have firewall turned on?
0
 

Author Comment

by:jpguillebaud
ID: 24105600
It is unlikely to be a Windows Firewall issue because I can PING the servers from another computer on the same network.
0
 
LVL 1

Expert Comment

by:Nocturnal25
ID: 24105627
Can you configure your router to allow icmp packets through?
0
Maximize Your Threat Intelligence Reporting

Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

 

Author Comment

by:jpguillebaud
ID: 24105637
That is what I am hoping to do. Does anyone know if it is possible to configure this particular router model (BT 2wire 2700HGV) to allow ICMP inbound?
0
 
LVL 1

Expert Comment

by:Nocturnal25
ID: 24105697
If you open a browser and type home does naything popup.
0
 

Author Comment

by:jpguillebaud
ID: 24105775
Yes, I am able to open the router configuration pages and log on in order to make changes, however I don't know how to configure it to allow ICMP.
0
 
LVL 1

Expert Comment

by:Nocturnal25
ID: 24105880
If you go to advanced settings is block icmp checked?
0
 
LVL 1

Expert Comment

by:Nocturnal25
ID: 24105888
I mean ping.
0
 

Author Comment

by:jpguillebaud
ID: 24105893
No it isn't checked.
0
 
LVL 1

Expert Comment

by:Nocturnal25
ID: 24105928
What about under your firewall settings, maybe under other.
0
 

Accepted Solution

by:
jpguillebaud earned 0 total points
ID: 24106506
I am thinking that this make of router blocks ICMP requests by design for security reasons. Since it is a fairly basic router it doesn't allow much flexibility. I have looked through all the settings but can't find how to allow ICMP (IP protocol 1).

I have decided to close this question.
0

Featured Post

Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

Join & Write a Comment

In the world of WAN, QoS is a pretty important topic for most, if not all, networks. Some WAN technologies have QoS mechanisms built in, but others, such as some L2 WAN's, don't have QoS control in the provider cloud.
This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
Viewers will learn how to properly install and use Secure Shell (SSH) to work on projects or homework remotely. Download Secure Shell: Follow basic installation instructions: Open Secure Shell and use "Quick Connect" to enter credentials includi…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now