Solved

issue with route add

Posted on 2014-04-08
6
281 Views
Last Modified: 2014-04-10
I have a server connected to the Fw

server is also connected to ISP router ( as default GW)

i have done

route add x.x.x.x mask 255.255.255.255 y.y.y.y ( FW interface )

but cannot ping the other side of the FW
tracert times out on the fist hop
server can ping FW ( same subnet)

when i do route print i see the route

any ideas ?
0
Comment
Question by:c_hockland
6 Comments
 
LVL 69

Accepted Solution

by:
Qlemo earned 500 total points
ID: 39987319
You are trying all that from the server, or is there a workstation involved? I'll assume the former.
If you can ping the FW from server, you'll have to make sure there is no other route having precedence - unlikely with a host route (mask 255.255.255.255).
More likely, the issue is with the FW itself not forwarding traffic, or the other side of the FW doesn't. What's on the other side of the FW?
0
 
LVL 10

Expert Comment

by:Rafael
ID: 39987320
The FW may be blocking ICMP traffic. See if you're allowing this.
0
 

Author Comment

by:c_hockland
ID: 39987340
the other side of the FW is 10.221.64.2
inside 192.168.3.35


how can i check if it forwards traffic from 3.35 to 64.2 ?
0
Visualize your virtual and backup environments

Create well-organized and polished visualizations of your virtual and backup environments when planning VMware vSphere, Microsoft Hyper-V or Veeam deployments. It helps you to gain better visibility and valuable business insights.

 

Author Comment

by:c_hockland
ID: 39987346
actually i have

route inside 0.0.0.0 0.0.0.0 10.221.64.1  ( 64.1 ) is the router after the FW

so it does FW traffic from inside to the router
0
 
LVL 69

Expert Comment

by:Qlemo
ID: 39987396
It might help if we knew the brand of the FW, and the devices behind it (on 10.221.64.x). You'll have to check step by step each device which is involved in the route.

We'll assume you can reach the FW fine. Then you'll need to set up a route for 10.221.64.0/24 to it, and test both IPs. Then the device behind those, which you have set the host route for. It also helps to make a traceroute on the target device towards your own FW's IPs, then your server.
Of course and in any case you will need the route back, too - is that set up on the target network?
0
 
LVL 12

Expert Comment

by:Infamus
ID: 39989616
route inside 0.0.0.0 0.0.0.0 192.168.3.35

It has to be the next hop IP address.
0

Featured Post

Secure Your Active Directory - April 20, 2017

Active Directory plays a critical role in your company’s IT infrastructure and keeping it secure in today’s hacker-infested world is a must.
Microsoft published 300+ pages of guidance, but who has the time, money, and resources to implement? Register now to find an easier way.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
IP range 6 58
Cisco Licensing for Wi Fi 4 43
How to transfer long file names 5 58
Network adapter for Windows 7 9 49
I recently attended Cisco Live! in Las Vegas, a conference that boasted over 28,000 techies in attendance, and a week of hands-on learning hosted by a solid partner with which Concerto goes to market.  Every year, Cisco displays cutting-edge technol…
When you try to share a printer , you may receive one of the following error messages. Error message when you use the Add Printer Wizard to share a printer: Windows could not share your printer. Operation could not be completed (Error 0x000006…
Viewers will learn how to connect to a wireless network using the network security key. They will also learn how to access the IP address and DNS server for connections that must be done manually. After setting up a router, find the network security…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

685 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question