Networks

Ask something
Discussion Locked

Dual nic routing issue in server

0 helpful
7 replies

by dschwer

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
Here goes. I have a windows 2000 server with 2 nics. One (192.168.16.1)goes to a hub that serves all my internal clients. The other (10.0.0.2) goes to a dlink firewall(10.0.0.1) which has a wan port that is connected to my cable modem which is my internet access. My problem is this my server can ping any address on the internet however my internal clients can not. They can however use Internet explorer to access the web. I havent turned off icmp anywhere. I am trying to figure out why these machines cannot ping a public address. Any help would be much appreciated

7 replies

by joseph moore

Do a TRACERT from a client workstation to a public IP address (www.yahoo.com is a good one to use, since you can PING www.yahoo.com).
See where the trace route fails.
At that point, whatever device it is, is blocking ICMP packets. It could be upstream from you at your IPS somewhere.

hope this helps

by dschwer

Tracert first hop is ********it doesnt go anywhere from local machines. From server I can tracert to anything. Thats why I cant figure how my local machines are getting port 80 access.

by todd kimbrell

Both nics are not sharing the same DNS addresses. So your clients ping command does not have a gateway to follow.

Trust me on this
You need to plug the Dlink Firewall into your 192.x.x.x. nic and then on the wan port plug in the cable modem. From there take a patch cable and uplink to the hub. This now protects your server and network at the core, and allows your complete network to use the same dns addresses as your server. If you have a static IP on your cable modem then use that addressas your gateway in the Dlink Router. Make sure proxy service is enabled on the 2000 Server. This now bridges your wan and lan connections with the proper protection.

Let me know how it works out.

Todd

by dschwer

Thanks Todd for the advice. One question, How are my machines able to surf the net thru Internet explorer. If I make the changes as you stated I am certain that everything will be perfect. I am just confused on why port 80 traffic is being allowed to pass thru my double nat but not anyother traffic if I have no filters set.

This discussion is closed to new replies.