Re: Unable to PING a single host from ISA 2006 Server

If I add “route add 10.1.242.22 mask 255.255.255.255 10.2.242.1”, then the
ping works.

Any ideas?

"Lee" wrote:

Q1 - have you done due diligence regarding the NIC drivers on the ISA? - I
have updated the NIC drivers on both the ISA's servers and still unable to
ping.

"Lee" wrote:

I have installed Ethereal on the ISA server. I am able to see the Ping
request and Ping reply come in and out of the internal interface that is on
the same VLAN is the F5's. The command window does not reply back with a
ping response.

Thanks for you help.

"Jim Harrison (ISA SE)" wrote:

Since ISA said "let it fly!" and Netmon doesn't see it, I'd start playing
with basic network configuration.
Q1 - have you done due diligence regarding the NIC drivers on the ISA?
Q2 - does the ISA have WS03 SP2 installed? If so, you may want to try the
steps outlined in
http://blogs.technet.com/isablog/archive/2007/03/27/isa-server-and-windows-server-2003-service-pack-2.aspx

--
Jim Harrison (ISA SE)

This posting implies no warranty and confers no rights.
http://catb.org/~esr/faqs/smart-questions.html



"Lee" <Lee@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:25A7960A-2775-4988-89FC-D394A8B27EF4@xxxxxxxxxxxxxxxx
I do not see it leaving the ISA box.

"Jim Harrison (ISA SE)" wrote:

Take the capture from the ISA itself.
if you can see it leave the NDIS layer, ISA isn't the problem.

--
Jim Harrison (ISA SE)

This posting implies no warranty and confers no rights.
http://catb.org/~esr/faqs/smart-questions.html



"Lee" <Lee@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:25E4B615-443D-4B50-868F-B7A4C4DF5B96@xxxxxxxxxxxxxxxx
An Engineer from our Networking Group is doing the captures with me using
their tool on the same VLAN. I am currently going over all the System
Policies and configuration to see if am missing something.

"Jim Harrison (ISA SE)" wrote:

Hm - good point.
You're using netmon (or whatever) to monitor traffic at the ISA itself?

--
Jim Harrison (ISA SE)

This posting implies no warranty and confers no rights.
http://catb.org/~esr/faqs/smart-questions.html



"Lee" <Lee@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:04A63708-88B2-44E2-9B1F-AAF075151A53@xxxxxxxxxxxxxxxx
I would agree if my captures showed traffic leaving my ISA server and
heading
towards the F5. Currently, there is no PING request leaving the ISA
server.
When I PING other host on same VLAN as ISA and F5, I am able to capture
both
the PING request and response.

"Jim Harrison (ISA SE)" wrote:

..time to troubleshoot the F5.
If all other hosts can respond to ping from ISA and this host can ping
ISA,
the problem is most likely the F5.

--
Jim Harrison (ISA SE)

This posting implies no warranty and confers no rights.
http://catb.org/~esr/faqs/smart-questions.html



"Lee" <Lee@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:BD927A02-ED40-4A58-B732-2783F42F6B06@xxxxxxxxxxxxxxxx
Action: Initiated Connection
Rule: [System] Allow ICMP requests from ISA Server to selected servers
Result Code: 0x0 ERROR_SUCCESS

I recieve this same message in the logging when I successfully PING
other
hosts on the same VLAN. This is really strange thing. ALL other host
reply
except this one. The host is a F5 hardware load balancer.

"Jim Harrison (ISA SE)" wrote:

Use the ISA logging.
What does it tell you for those tests?

--
Jim Harrison (ISA SE)

This posting implies no warranty and confers no rights.
http://catb.org/~esr/faqs/smart-questions.html



"Lee" <Lee@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:0C80AA6D-E8F4-49C9-88E4-6A55045A2995@xxxxxxxxxxxxxxxx
I am unable to PING a single host my ISA 2006 server. The host is
on
my
internal network. I am able to ping other host on the same VLAN. I
am
able
to ping from the host back to the ISA server. When i do a network
capture,
I
do not capture any traffic out of the ISA server to this host, but I
do
from
the ISA server to other hosts on the same VLAN and the host to the
ISA.
Thanks for any help.





.

Relevant Pages

  • Re: HTTP trouble in 2004
    ... > understand is why can't I ping the public address of the DC. ... >> separating the DC role from the ISA Server role. ... >>>I appear to be an ISA dummy and have a small problem. ... My nics are setup with teh DC being the DNS server and my IE ...
    (microsoft.public.isaserver)
  • Re: SBS Premium w/ ISA running as Virtual Machine in VMWARE-Connec
    ... Could you please point me to the article which indicate ISA server is not ... HOST A: ... *** Please suggest the best method to configure this Virtualization network ...
    (microsoft.public.windows.server.sbs)
  • RE: VPN Connects, but no Internal IP or network resources.
    ... versions of ISA yet seem to be having the same trouble. ... I just noticed in this post though, that you can't even ping the other ... an access issue rather than connectivity. ... My ISA server is going to be down until I rebuild it, so I can't even do any ...
    (microsoft.public.isa.vpn)
  • Re: Valid scenario for ISA 2004 Site to Site Deployment?
    ... Right - I understand your point regarding ping. ... rule setup so the corpnet can talk to the hosted server w/o any problems. ... So - back to the original question, would this be a valid scenario for ISA ...
    (microsoft.public.isa.configuration)
  • Re: Web Site Mystery
    ... there is a pointer to the ip address of the host ... When I ping any other address it does resolve to an ip address but returns ... www.europacrown.com don't work from our corporate network. ... promoted our a SQL server to act as a domain controller and active ...
    (microsoft.public.windows.server.general)