We help IT Professionals succeed at work.

Basic Client Hyper-V test lab connectivity issue.

278 Views
Last Modified: 2017-03-20
Hi Experts

I've built a small test lab using Client Hyper-V on my Windows 10 machine at home.  It is in its infancy at the moment, as I am learning as I go.  See attached diagram for an overview

I have set up a server and a client and given them both static IP addresses.  I want to keep the servers away from the clients so I have set up a VyOS software router inbetween my two virtual switches.  As far as I can tell I have set the router up correctly and i can ping the nearside interfaces from the server machine and also the client machine.  However, when I try to ping the client machine from the server I get a Request Timed Out message.

I have disabled the firewall on both VMs and still get the same RTO message.   I don't believe the firewall is set on the VyOS by default but I may be wrong ?

So what could be blocking the ping request getting back, if I am right the RTO means the ping request is reaching its destination but for some reason not getting back to the sender ??

I have not installed anything else such as AD DS, DHCP, DNS, anti-virus etc on either the server or the client as yet.

As I say I may be overlooking something fuundamental at this stage but I'm only just getting started with this and wanted to get it right.

Any help would be great

Thanks
Matthew
testlab.jpg
Comment
Watch Question

CERTIFIED EXPERT
Distinguished Expert 2018
Commented:
Unlock this solution and get a sample of our free trial.
(No credit card required)
UNLOCK SOLUTION
Matthew HinchliffeIT Engineer

Author

Commented:
Thanks for that Cliff, I was thinking it was something to do with the VyOS install, but I wasn't sure.  I will have a look again at that and see if ICMO routing is enabled.

Thanks
Matthew
David Johnson, CDSimple Geek from the '70s
CERTIFIED EXPERT
Distinguished Expert 2019

Commented:
A router has an external and an internal port.  you can ping from the internal to the external but going the reverse way you can only ping the router and not the client unless you have configured NAT on the router to route ICMP to the client (and only 1 client)
CERTIFIED EXPERT
Distinguished Expert 2018

Commented:
Based on the diagram, I do not believe NAT is in play. You can certainly route between two subnets and ping all devices on either side.
Matthew HinchliffeIT Engineer

Author

Commented:
Hi guys

I meant to say that I have set this up as a Private network at the moment, so no access to my home LAN or to the internet.  I haven't set up NAT or anything like that.

Also, I am not currently using DHCP for the clients, but my intention is to set up a DHCP scope to provide IP addresses to the clients.

The idea is to keep the servers on a separate range to the clients.

From the research I have done ICMP is allowed by default on the VyOS router between
So perhaps I need to create a route on the router between the two subnets ?  

Thanks
Matthew
Matthew HinchliffeIT Engineer

Author

Commented:
Hopefully some can give me a bit more help with this or tell me if I'm barking up the wrong tree.  I've done some more testing and I am getting

Ping from the server (10.10.1.2)

My server 10.10.1.2 can ping itself and the "nearside" of the router Ie eth0 (10.10.1.1) OK.
When I try to ping the "farside" of the router Ie, eth1 (10.10.2.1) I get : reply from 10.10.1.2: Destination host unreachable.
When I try to ping the Win10 client (10.10.2.10)  I get : reply from 10.10.1.2: Destination host unreachable.

Ping from the Win10 client (10.10.2.10)

My Win10 client 10.10.2.10 can ping itself and the "nearside" of the router Ie eth1 (10.10.2.1) OK.
I can also ping the "farside" of the router IE. 10.10.1.1
When I try to ping the server (10.10.1.2) I'm getting : Request Timed Out

All the firewalls are switched off.

I may be in over my head with having separate subnets at this stage but it seems a fairly simple set up so I'm a bit stuck as to why it's not letting me ping both ways.

Any help would be greatly appreciated even if it is to say I've got it wrong and scrap it and start again :)

Thanks
Matthew
Matthew HinchliffeIT Engineer

Author

Commented:
Hi Everyone

Just for completeness I wanted to give and update.

I added a RIP route on the router, but after I did that I was still getting the same errors.  After a bit more playing around and not getting very far I decided to remove the NIC from the DC and re-add it.  Once I did that and re-configured it with the static etc. I was able to ping the workstation on the farside of the router and vice-versa.

I'm not sure what fixed the issue, probably just a reboot !!  But at least I can move on and get my lab set up how I wanted it.

Thanks again for the helpful comments.

Matthew

Gain unlimited access to on-demand training courses with an Experts Exchange subscription.

Get Access
Why Experts Exchange?

Experts Exchange always has the answer, or at the least points me in the correct direction! It is like having another employee that is extremely experienced.

Jim Murphy
Programmer at Smart IT Solutions

When asked, what has been your best career decision?

Deciding to stick with EE.

Mohamed Asif
Technical Department Head

Being involved with EE helped me to grow personally and professionally.

Carl Webster
CTP, Sr Infrastructure Consultant
Empower Your Career
Did You Know?

We've partnered with two important charities to provide clean water and computer science education to those who need it most. READ MORE

Ask ANY Question

Connect with Certified Experts to gain insight and support on specific technology challenges including:

  • Troubleshooting
  • Research
  • Professional Opinions
Unlock the solution to this question.
Thanks for using Experts Exchange.

Please provide your email to receive a sample view!

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.