Hot Downloads

Welcome, Guest
Username: Password: Remember me

TOPIC: DMZ and Ping issue when changing ip address for a server

DMZ and Ping issue when changing ip address for a server 9 years 11 months ago #19186

  • zillah
  • zillah's Avatar
  • Offline
  • Frequent Member
  • Posts: 79
  • Karma: 0
I have got a media server 2003 installed in DMZ zone (Cisco PIX 525) , with an ip address 192.168.101.204/24, it was able to ping other servers (sql server , help server, etc ) which are in DMZ zone as well. Basically all servers are in DMZ area

Recently this media server is not able to ping these servers (sql server , help server, etc) , I do not why, but if I changed the ip address (last octet only) for this media server to 192.168.101.222 , it would be able to ping other servers (sql server , help server, etc).

There is no firewall on the media server and there is no firewall on the other servers as well.

All servers have got win2003 OS.

The error message for ping is : timed out

This is no entry with our cisco PIX for both IP addresses 192.168.101.204 and 192.168.101.222
The administrator has disabled public write access.

Re: DMZ and Ping issue when changing ip address for a server 9 years 11 months ago #19187

  • Smurf
  • Smurf's Avatar
  • Offline
  • Moderator
  • Posts: 1390
  • Karma: 1
Hi there,

Is the subnet masks correct on all servers ? Have you moved the UTP Cable to a different switch port that is in a different VLAN (if you are VLAN'ing) ?

Can you ping the Pix Interface ?

Cheers

Wayne
Wayne Murphy
Firewall.cx Team Member
www.firewall.cx

Now working for a Security Company called Sec-1 Ltd in the UK, for any
Penetration Testing work visit www.sec-1.com or PM me for details.
The administrator has disabled public write access.

Re: DMZ and Ping issue when changing ip address for a server 9 years 11 months ago #19192

  • zillah
  • zillah's Avatar
  • Offline
  • Frequent Member
  • Posts: 79
  • Karma: 0
Is the subnet masks correct on all servers ?
Yes
Have you moved the UTP Cable to a different switch port that is in a different VLAN (if you are VLAN'ing) ?
There is no VLAN.
Can you ping the Pix Interface ?
Yes
The administrator has disabled public write access.

Re: DMZ and Ping issue when changing ip address for a server 9 years 11 months ago #19193

  • Smurf
  • Smurf's Avatar
  • Offline
  • Moderator
  • Posts: 1390
  • Karma: 1
Can ya do an ipconfig /all on two of the servers and also list the arp cache and routing tables.

Please post here

Cheers
Wayne Murphy
Firewall.cx Team Member
www.firewall.cx

Now working for a Security Company called Sec-1 Ltd in the UK, for any
Penetration Testing work visit www.sec-1.com or PM me for details.
The administrator has disabled public write access.

Re: DMZ and Ping issue when changing ip address for a server 9 years 11 months ago #19223

  • zillah
  • zillah's Avatar
  • Offline
  • Frequent Member
  • Posts: 79
  • Karma: 0
Can ya do an ipconfig /all on two of the servers and also list the arp cache and routing tables. Please post here
I forgot to tell you that we have got two cisco switches in dmz zone 3550, and both of them as connected to each other. The servers in MDZ are spreaded between these two switches.
The administrator has disabled public write access.

Re: DMZ and Ping issue when changing ip address for a server 9 years 11 months ago #19224

  • Smurf
  • Smurf's Avatar
  • Offline
  • Moderator
  • Posts: 1390
  • Karma: 1
Hi there,

That should be fine since you are not using multiple VLAN's otherwise you would need to setup a VLAN Trunk.

So are you saying that machines on one switch cannot ping machine on the other switch ? I thought all machine could ping the Pix Interface ?

Can you provide the other details listed in the last post to help try and identify the issue ?

Cheers
Wayne Murphy
Firewall.cx Team Member
www.firewall.cx

Now working for a Security Company called Sec-1 Ltd in the UK, for any
Penetration Testing work visit www.sec-1.com or PM me for details.
The administrator has disabled public write access.
Time to create page: 0.085 seconds

CCENT/CCNA

Cisco Routers

  • SSL WebVPN
  • Securing Routers
  • Policy Based Routing
  • Router on-a-Stick

VPN Security

  • Understand DMVPN
  • GRE/IPSec Configuration
  • Site-to-Site IPSec VPN
  • IPSec Modes

Cisco Help

  • VPN Client Windows 8
  • VPN Client Windows 7
  • CCP Display Problem
  • Cisco Support App.

Windows 2012

  • New Features
  • Licensing
  • Hyper-V / VDI
  • Install Hyper-V

Linux

  • File Permissions
  • Webmin
  • Groups - Users
  • Samba Setup