You have not shown the subnet mask but I am presuming it is /24 or
255.255.255.0
So the IBMi is sending outbound traffic to the default route of
192.168.2.254 - What is the device at 192.168.2.254 a router or a firewall
or ?
What is the device that provides the VPN is it the same device as
192.168.2.254 ?
When you connect to the VPN an IP address is assigned, 10.10.1.200 and if
you run ipconfig /all (presuming windows) you will see this address, mask
and gateway.
So from your PC run a TRACERT 192.168.2.254 which will show you the hops
to get to the IBMi.
You could then run a TRACEROUTE on the IBMi to 10.10.1.200 and see where
it fails.
You will also need to check the firewall on your PC as ping will be denied
by default.
Commonly for security routers and firewalls will have icmp disabled which
makes this type of investigation more difficult so the results of the
route tracing may be incomplete but could provide some clues.
Lastly why do you need to ping your PC from the IBMi ? Is there another
problem ?
Thanks
Don
From: "Art Tostaine, Jr." <atostaine@xxxxxxxxx>
To: "Midrange Systems Technical Discussion"
<midrange-l@xxxxxxxxxxxxxxxxxx>
Date: 05/01/2021 06:33 AM
Subject: Network firewall change, can't ping my PC
Sent by: "MIDRANGE-L" <midrange-l-bounces@xxxxxxxxxxxxxxxxxx>
I connect to the VPN, the adapter gives me 10.10.1.200. I go to the IBM
i,
it can't ping the address.
IBM is 192.168.2.60, it has only have one *DFTROUTE to 192.168.2.254.
Display TCP/IP Route
Route destination . . . . . . . . . . : *DFTROUTE
Subnet mask . . . . . . . . . . . . . : *NONE
Type of service . . . . . . . . . . . : *NORMAL
Next hop . . . . . . . . . . . . . . . : 192.168.2.254
Tech says I don't need a route to 10.10.1.0 because this is a flat network
and 192.168.2.254 will route the 10 address.
I tried adding another route but it didn't work
Route destination . . . . . . . . . . : 10.10.1.0
Subnet mask . . . . . . . . . . . . . : 255.255.255.0
Type of service . . . . . . . . . . . : *NORMAL
Next hop . . . . . . . . . . . . . . . : 192.168.2.254
Anyone have an idea? Thanks in advance
midrange.com
