Start Free Trial

asked on

Hyper V virtual server not pinging other devices on the network

I have a Hyper V Virtual Server that is about 3 years old. Using it for Exchange. We recently went to Office 365 but kept the server as a on-premises server. I reduced the memory size on the server as I was adding more virtual servers to the main server. For some reason, I am unable to ping any other device outside of the current Lan. We have several off site locations which connect to this site and now I am unable to ping any outside site from this server. This was just noticed today. The memory change was over a week ago. Can anyone help?

we need a little more info. what is the gateway ip and can you ping the gateway? Can you post an ipconfig /all? Are you trying to ping by name or IP? have you checked dns?

ASKER

I have done all those things. I can ping the gateway and the DNS server. This has run like a top for at least 3 years with a static IP. Nothing has changed that I am aware of and then today, it doesn't connect to the Lan, but I have internet connection and can get on the internet fine. Also if I change it to DHCP, it works fine.

Was the virtual switch the VM is connected to changed?

Please post an IPConfig /All from the VM.

can you post a little more about your physical network? It sounds like it could be an ARP issue or an ip conflict

ASKER

C:\Users\cvhsadmin>ipconfig/all

Windows IP Configuration

Host Name . . . . . . . . . . . . : Exchange2010
Primary Dns Suffix . . . . . . . : cvhs.lan
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : cvhs.lan

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft Virtual Machine Bus Network Ada
pter
Physical Address. . . . . . . . . : 00-15-5D-5A-23-0F
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::ddc2:4f21:10e4:9872%10(Preferred)
IPv4 Address. . . . . . . . . . . : 10.100.90.139(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 10.100.90.5
DHCPv6 IAID . . . . . . . . . . . : 234886493
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-19-9D-96-F5-00-15-5D-5A-23-0F

DNS Servers . . . . . . . . . . . : 10.100.90.6
NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter isatap.{C041AC68-953A-4EDD-B063-502D85FB00EF}:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Teredo Tunneling Pseudo-Interface:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

C:\Users\cvhsadmin>

Is the .5 gateway the correct gateway to the other sites?

ASKER

No, each site has their own gateway. If I set the server to DHCP it works fine

ok so post the ipconfig /all from the dhcp

Clarification: Is the .5 gateway the gateway to the other sites _for_ the Exchange VM?

ASKER

C:\Users\cvhsadmin>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : Exchange2010
Primary Dns Suffix . . . . . . . : cvhs.lan
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : cvhs.lan

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . : CVHS.lan
Description . . . . . . . . . . . : Microsoft Virtual Machine Bus Network Ada
pter
Physical Address. . . . . . . . . : 00-15-5D-5A-23-0F
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::ddc2:4f21:10e4:9872%10(Preferred)
IPv4 Address. . . . . . . . . . . : 10.100.90.223(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : Thursday, October 15, 2015 1:59:57 PM
Lease Expires . . . . . . . . . . : Thursday, October 15, 2015 7:59:57 PM
Default Gateway . . . . . . . . . : 10.100.90.5
DHCP Server . . . . . . . . . . . : 10.100.90.6
DHCPv6 IAID . . . . . . . . . . . : 234886493
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-19-9D-96-F5-00-15-5D-5A-23-0F

DNS Servers . . . . . . . . . . . : 10.100.90.6
NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter isatap.CVHS.lan:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . : CVHS.lan
Description . . . . . . . . . . . : Microsoft ISATAP Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Teredo Tunneling Pseudo-Interface:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

C:\Users\cvhsadmin>

so you can route to the internet and other sites on dhcp but on the static IP you can only route to the internet but not the other sites right? also can you do a traceroute to a device at one of the other sites while on DHCP them do one when you are on the static IP

Static: IPv4 Address. . . . . . . . . . . : 10.100.90.139(Preferred)
DHCP: IPv4 Address. . . . . . . . . . . : 10.100.90.223(Preferred)

Verify the particular static address assigned to the VM is not blocked at the gateway.

Convert the IPv4 DHCP address to a reservation and leave it there, or create the reservation and set the IP address static for the vNIC and see if routing stops again.

ASKER

This is the tracert using the static ip
C:\Users\cvhsadmin>tracert 10.100.91.199

Tracing route to 10.100.91.199 over a maximum of 30 hops

1 * * * Request timed out.
2 * * ^C

This is the tracert using the DHCP ip
C:\Users\cvhsadmin>tracert 10.100.91.199

Tracing route to RNP002673905842 [10.100.91.199]
over a maximum of 30 hops:

1 4 ms 9 ms 1 ms 10.100.90.253
2 28 ms 26 ms 26 ms 63.88.105.98
3 26 ms 26 ms 27 ms RNP002673905842 [10.100.91.199]

Trace complete.

C:\Users\cvhsadmin>

so it looks like you are being routed through 10.100.90.253 is this a VPN router or something? Anyway have you checked if the IP is blocked in this device. That is what it looks like

ASKER

No, that is a switch. Why would the switch block this suddenly?

Switch has a rule set in place to filter the destination and allow/block based on source IP.

what type of switch is it? Its probably an ARP issue. there may have been an ipconflict. if its a managed switch login and clear the arp cache. If not you can try to just reboot the switch

ASKER

Cisco 3560. Why would this happen all of a sudden?

its hard to say but I would login and check the arp table. Match up the MAC addresses and see what is going on. If flushing it fixes it then you can look into what happen. When you updated the settings you did not change the network adapters and / or their mac addresses right.

ASKER

I am looking at the switch and it shows the external address of this server as incomplete. How do I fix that?

in the arp table?

ASKER

I cleared the arp, but I still have the issue.

Do you have any routes in this switch ?

ASKER

Yes, there are routes configured for our other sites. Each site comes through this switch. The ironic part is that this worked perfectly until this morning. No one has access to this at all.

ya that is strange but it does seem that this switch is stopping the traffic. did you double check the routes and make sure there is no miss configured route for the 10.100.90.139/32

ASKER

There isn't. It appears to be that our external IP connected to that internal IP is no longer working.

so are you ding some kind of NAT from the router?

ASKER

Would an expired certificate cause this to happen?

expired SSL cert on what ?

ASKER

On the server. It is an exchange server.

no that would not cause the routing issue. because it works on DHCP

ASKER

What would happen if I changed the IP address and pointed it to the external IP.?

you have a network setup like this right

[INTERNET] -> [FIREWALL / Router] ->NAT to LAN IP 10.100.90.139

is this correct

ASKER

Yes and because this is an exchange server it has an external ip that is set in our router and our MX record.

ASKER CERTIFIED SOLUTION

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

ASKER

Thomas Wheeler

After working on this all day today, it appears that something is blocking outbound mail from this server. What would start blocking this server or is there a way, I can determine if the external IP has been compromised in some sort of way? Interesting enough this happened suddenly without any warning whatsoever.

Can you telnet on port 25 to the Wan ip?

ASKER

no. I got permission denied. I turned off the Virus scan and email was able to leave the queued retry state. I don't know if this fixed my issue, but we did some nat changes in our firewall and I am able to ping the other sites

Do you use a 3rd party filtering relay?

ASKER

No we don't. Are you talking about a spam filter?