Link to home
Start Free TrialLog in
Avatar of rreddell
rreddell

asked on

No internet Access on some Servers / Computers

This morning, a few desktops and the terminal server could not access the internet.  It shows that it has internet connection but cannot access anything outside the domain.  The DNS server can access the internet just fine along w/ the Mail server.  

I have tried to change the DNS server IP on my local to a public DNS, no go.  I changed it to the DNS internal and also could not connect to the internet.  I cannot to everything local just fine.   But outside is a no go using Domain name or IP.

Firewall is an older Pix 506e.  
Avatar of arndawg
arndawg

Do these use DHCP? you need to check if the gateway is entered.

Are you sure DNS lookups work fine? Run a "nslookup google.com", and then run a "tracert google.com" to see what happends.
Are you not using a proxy server?

If the clients are vista and your ts server is 2008, it may be something like the network connection has not been classifield as a home or work network. Check the network and security center settings.
Avatar of rreddell

ASKER

No, the Servers use Static.

When I run nslookup google.com / tracert google.com I from a machine that does NOT have internet I get this -
Microsoft Windows [Version 6.1.7600]
Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

C:\Users\rreddell>nslookup google.com
Server:  UnKnown
Address:  192.168.1.6

Non-authoritative answer:
Name:    google.com
Address:  173.194.33.104


C:\Users\rreddell>tracert google.com

Tracing route to google.com [173.194.33.104]
over a maximum of 30 hops:

  1     *        1 ms     *     063-025.colo.ma.np1.net [64.61.63.20]
  2     *        *        *     Request timed out.
  3     *        *        *     Request timed out.
  4     *        *       13 ms  static-64-115-220-153.isp.broadviewnet.net [64.1
15.220.153]
  5     *        *        *     Request timed out.
  6     *        *        *     Request timed out.
  7     *        *        *     Request timed out.
  8    12 ms     *        *     static-64-61-112-182.isp.broadviewnet.net [64.61
.112.182]
  9     *        *        *     Request timed out.
 10     *        *        *     Request timed out.
 11     *       13 ms     *     74.125.49.212
 12     *        *        *     Request timed out.
 13     *        *        *     Request timed out.
 14     *       13 ms     *     lga15s14-in-f104.1e100.net [173.194.33.104]
 15     *        *        *     Request timed out.
 16     *        *        *     Request timed out.
 17     *        *       13 ms  lga15s14-in-f104.1e100.net [173.194.33.104]

Trace complete.

Then when I do it on a machine that the internet IS working I get this

Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.

C:\Documents and Settings\rreddell.T-G-C.000>nslookup google.com
*** Can't find server name for address 192.168.1.6: Non-existent domain
Server:  UnKnown
Address:  192.168.1.6

Non-authoritative answer:
Name:    google.com
Address:  173.194.33.104




Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.

C:\Documents and Settings\rreddell>tracert google.com

Tracing route to google.com [173.194.33.104]
over a maximum of 30 hops:

  1  4294967178 ms  4294967177 ms  4294967177 ms  063-025.colo.ma.np1.net [64.61
.63.20]
  2  4294967186 ms  4294967187 ms  4294967195 ms  bos-cust-erx-01.broadviewnet.n
et [64.115.5.7]
  3  4294967184 ms  4294967184 ms     7 ms  bos-core-m10-01-ge-0-0-0-u1.broadvie
wnet.net [64.61.136.194]
  4    12 ms  4294967189 ms    12 ms  static-64-115-220-153.isp.broadviewnet.net
 [64.115.220.153]
  5  4294967189 ms  4294967189 ms  4294967189 ms  static-64-115-72-110.isp.broad
viewnet.net [64.115.72.110]
  6  4294967189 ms  4294967189 ms  4294967189 ms  004-153.lo.ny.np1.net [64.61.4
.153]
  7  4294967189 ms  4294967189 ms  4294967189 ms  static-64-115-108-157.isp.broa
dviewnet.net [64.115.108.157]
  8  4294967189 ms  4294967189 ms  4294967190 ms  static-64-61-112-182.isp.broad
viewnet.net [64.61.112.182]
  9  4294967192 ms  4294967189 ms  4294967190 ms  sl-gw40-nyc-9-0-2.sprintlink.n
et [144.223.27.137]
 10  4294967190 ms  4294967190 ms  4294967190 ms  sl-crs1-nyc-0-10-5-0.sprintlin
k.net [144.232.13.51]
 11  4294967190 ms  4294967190 ms  4294967190 ms  74.125.49.212
 12  4294967190 ms  4294967190 ms  4294967190 ms  209.85.248.180
 13  4294967190 ms  4294967190 ms  4294967190 ms  216.239.48.24
 14  4294967198 ms  4294967190 ms  4294967190 ms  lga15s14-in-f104.1e100.net [17
3.194.33.104]

Trace complete.


This is set up on a domain.   Mix Servers.  Win 2003 / 2008 w/ mix clients XP/Vista/Win 7
Can you run ipconfig /all from the command line on a machine that works, and another on a machine that doesnt.

Please post the output
Something interesting.  The Win Server 2008, Vista and Win 7 machines are the only ones that cannot connect???   All the Server 2003 and XP machines are connecting just fine....  
ASKER CERTIFIED SOLUTION
Avatar of naykam
naykam
Flag of Australia image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Hmmm How do I disable it? :)  never played or used IP6.
untick the checkbox.

Like in this guide: http://goo.gl/diWX
make sure you restart after
:) that was easy.    But it didn't work.   :(  

Machine that is working- Server 2003R2

Windows IP Configuration

   Host Name . . . . . . . . . . . . : tgc-srv3
   Primary Dns Suffix  . . . . . . . : t-g-c.local
   Node Type . . . . . . . . . . . . : Unknown
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No
   DNS Suffix Search List. . . . . . : t-g-c.local

Ethernet adapter Local Area Connection:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet
   Physical Address. . . . . . . . . : 00-30-48-58-32-0E
   DHCP Enabled. . . . . . . . . . . : No
   IP Address. . . . . . . . . . . . : 192.168.1.3
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 192.168.1.1
   DNS Servers . . . . . . . . . . . : 192.168.1.6
                                       64.115.0.9

From my machine that is not working (Win 7) I have IP6 disabled and rebooted.  Not sure why it still shows up?

Windows IP Configuration

   Host Name . . . . . . . . . . . . :PC
   Primary Dns Suffix  . . . . . . . :
   Node Type . . . . . . . . . . . . : Hybrid
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Broadcom NetXtreme 57xx Gigabit Controlle
r
   Physical Address. . . . . . . . . : 00-19-B9-37-64-05
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   IPv4 Address. . . . . . . . . . . : 192.168.1.62(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 192.168.1.1
   DNS Servers . . . . . . . . . . . : 192.168.1.6
                                       64.115.0.9
   NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter isatap.{642D7B2A-AC5E-489F-9CF5-EE38EBBE6534}:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Microsoft ISATAP Adapter
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 11:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   IPv6 Address. . . . . . . . . . . : 2001:0:4137:9e74:1827:2935:3f57:fec1(Pref
erred)
   Link-local IPv6 Address . . . . . : fe80::1827:2935:3f57:fec1%12(Preferred)
   Default Gateway . . . . . . . . . : ::
   NetBIOS over Tcpip. . . . . . . . : Disabled

ipconfig /flushdns
on the machines thats are not working?
restart and try again?
no dice.    Only thing that is common is the fact that the machines that are Vista and above are the only ones.   They show that they have internet under Local Area Status, but just will not connect to anything outside the network.
Its a good one.
Because it is resolving the name through the trace route, its really stumped me.
The fact its only winVista and above, was my idea behind the IPv6.

What about reseting the tcp/ip stack http://goo.gl/VZbv
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
arndawg has a good point. I saw straight over it:

DNS Servers . . . . . . . . . . . : 192.168.1.6
                                       64.115.0.9

I think (hopefully someone can clarify this) that is not best practice to manage your DNS like this. If you have a DNS server, you should point all your internal computers at that. Then that DNS server will in turn point towards the internet. The hierarchical fun on DNS  
I put the Public DNS server under the 2nd DNS mostly as a backup in the event the Primary went down.   I have now changed it.

I also, did the TCP/IP Reset.  Still no go.  Again, all the systems that is running Vista or above is having the issue.  All the other machines are fine.    :(


Also, for some reason when I did the DHCP on my Win7 machine, it would not grab an IP from the DHCP server?  Below is are the results of the ipconfig /all


Windows IP Configuration

   Host Name . . . . . . . . . . . . : Ryanl-PC
   Primary Dns Suffix  . . . . . . . :
   Node Type . . . . . . . . . . . . : Hybrid
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Broadcom NetXtreme 57xx Gigabit Controlle
r
   Physical Address. . . . . . . . . : 00-19-B9-37-64-05
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   Autoconfiguration IPv4 Address. . : 169.254.64.165(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.0.0
   Default Gateway . . . . . . . . . : 0.0.0.0
   DNS Servers . . . . . . . . . . . : 192.168.1.6
                                       
   NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter isatap.{642D7B2A-AC5E-489F-9CF5-EE38EBBE6534}:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Microsoft ISATAP Adapter
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 11:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

It strange that you mentioned it just started happening.
Where windows updates applied the night before you noticed the problem ?
When I left the office Saturday, everything was working fine.  This morning around 5am I got a call that the Terminal Server was down.    I didn't think of anything wrong this since Saturday being I was still getting emails.

A worker told me that he tried to get on yesterday and couldn't.   So something could have been installed.  BUT my system (Win 7) is set up for manual update only.  

strange, nothing is adding up.
Im sorry, but its midnight here and past bedtime.
I will have another read through in the morning!
Yeah you've stomped us. hehe

DHCP not working.
Vista, win7 and 2008 not working.  hmmmm.

You should describe your network in detail. The Cisco Pix probably acts as a router. DHCP is probably hosted on a windows server? Only 1 subnet, no vlans? Is this SBS2003/2008 or plain Windows Server? All computers are on a single switch?

Just throwing ideas out there:
Security software running on any of these? Tried disabling the Windows Firewall and make sure it is in the correct mode. (Domain Network)

Could there have been a power-failure at night and some cisco-settings that weren't saved could have been reverted?

Or these machines have been configured with a proxy, but the other ones hadn't, so when the proxy died, only these machines "felt" it? :)
Well, to add to the confusion, everything is working again.  WTF?

The Pix does act as a router.  I also use it as the DHCP.

One 1 Domain.  

AD/DNS is hosted on a 2003 Server.  

Terminal Server is running on a 2008 Server

Single Switch.

No Proxy and only Eset is running.  

I will keep this open for today.   If it's all clear in the morning I will split the points w/ you two.  Thanks for the help!
Avatar of hypercube
When you say "cannot access the internet" and then show a traceroute that accesses the internet just fine, and demonstratres that DNS is working, that suggests we don't know what "access the internet" means in this context.  Do you mean "open web pages with a browser"?  Do you mean "can't get email?"
That's what it sounds like.

If you can't get web pages to open, that suggests a problem with the local computer / browser.
I guess you did reboot some of the machines and that did nothing to fix the problem, eh?

So, what happened:
a) when things broke down?
b) when things came back?
For example, might a router have been rebooted before things came back?
I've certainly seen cases where routers would not allow page access for *some* pages and would work fine with others.  A reboot fixed this.  It is very confusing when this happens because there is no logic to it and a rational analysis fails.
What I mean by cannot access the internet, is we could not open up a web page and browse anything outside the local network.  BUT users in other offices could not log into the computer outside the domain but could inside.  The 2nd Terminal Server runs 2003.  They could log into that server from outside the domain.

This morning, I rebooted the T1 Cisco, Pix and Switch.   I also rebooted the server.  Still it was not working.  

As for what did I do before it started working again?  Only thing I knew for sure was I was in the server room scratching my head, came back into my office and I noticed my MSN was online.   I then checked the server and sure enough,  internet!

You did change the DNS-settings though? If you've used that other external DNS all the time, your main DNS-server might have been temporarily unavailable and the vista-computers would act up. Vista might handle stuff like this more strict than what XP does.

Just speculating :)
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Still running smoothly.  If I had to guess, I would point towards the IP6.  Only thing that bugs me is the fact that the network has been set up like this for over a year.  

Thanks for all the help and ideas.   Not a cut and dry solution but it's working!