Re: Setting up i5 for External Access

When you run the tracert from the other PC's are the first hops the same?

I wonder if the switch is configured in such a way that the route out can't be found for that IP? Unfortunately I don't know much about L3 switching.

Everything looks OK, based on what you have said. Who manages the switch?

Pete

Brian Piotrowski wrote:

Hi Pete,

Thanks for your help!

Here's the results of the traceroute to NRA.COM when I tried it on our
i5:

TRACEROUTE RMTSYS(NRA.ORG) Probing possible routes to NRA.ORG (64.29.201.96) using *ANY interface.
1 192.168.0.141 2.75 2.54 2.63 2 * * * 3 * * * 4 * * *
And it kept timing out, so I ended up stopping it.

I tried the same thing on another PC in the same subnet, and I received
a proper trace. I also noticed that the PCs in the same subnet as the
i5 go through our L3 switch (we have our network with several VLANs, and
my laptop is on a different subnet). So I went back and changed the
default route's first hop back to our L3 switch. Another traceroute
produced this result:

Probing possible routes to NRA.ORG (64.29.201.96) using *ANY interface.
1 192.168.0.2 0.512 0.544 0.448 2 192.168.0.141 2.66 2.54 2.57 3 *
Again, I stopped it due to timeouts.

/b;


-----Original Message-----
From: Pete Helgren [mailto:Pete@xxxxxxxxxx] Sent: Tuesday, April 24, 2007 12:38 PM
To: Midrange Systems Technical Discussion
Subject: Re: Setting up i5 for External Access

Brain,

The DNS server is internal so it can resolve the domain to an IP, so that makes sense. Did your tracert make it out of your local network? You said it went out through the firewall device. How far did it get?

Pete (butting in...sorry)