Re: Can't ping my Windows 2003 R2 server from the internet.

In news:%23VKOIwKnIHA.1768@xxxxxxxxxxxxxxxxxxxx,
Calab <dont.spam@xxxxxxx> typed:
My PC has two network cards... One is an onboard gigabit connected to
my LAN. The LAN is connected to a router, as are other PCs on my LAN.
The router is connected to a cable modem. The second NIC is a
10/100mbit PCI card connected directly to another cable modem.

The GigE NIC is hardcoded to an IP on my private network with the
following settings:
IP: 10.0.11.16
Mask: 255.255.255.0
DNS: 10.0.11.1, 64.59.135.143
Gateway: 10.0.11.1
Gateway metric: 100 (previously auto)
Interface metric: 100 (previously auto)

The 10/100 NIC pulls a dynamic IP from my cable internet provider and
currently has the following settings:
IP: 68.145.38.197
Mask: 255.255.255.0
DNS: 64.59.135.143, 64.59.135.145
Gateway: 68.145.36.1
Gateway metric: auto
Interface metric: auto

The router is configured with my private network info on the LAN side
and dynamic settings pulled from my cable internet provider on the
WAN side. Currently configured as follows:
LAN side...
IP: 10.0.11.1
Mask: 255.255.255.0
Gateway: 10.0.11.1
WAN side:
IP: 68.145.78.218
DNS: 64.59.135.143
Gateway: 68.145.76.1

At this point I'm unable to connect to any services on the 100mb
port, and up until my last settings changes and reboot I was not even
able to ping the 100mb port. My last change was to put the gateway
and interface metrics on the GigE port to 100 to ensure any remote
traffic was going through that interface, and to keep my local LAN
traffic on the GigE interface. I believe I should not have applied a
metric to the GigE interface though.
At this point I cannot connect to any services on either port. Before
my last settings change I was able to connect the the remote desktop
through the GigE interface, but not any longer.

What I am trying to do:
- Any PC on my LAN, except this one, should use the internet
connection through the router.
- This PC should pass local LAN traffic over the GigE port only.
- This PC should pass internet traffic over the 100mb port only.

The PC's on my LAN are all hardcoded for the 10.0.11.0/24 network.
Gateway is 10.0.11.1. This appears to be working.

This PC does not consistantly pass it's internet traffic through the
100mb port. I've tried removing the gateway IP from the GigE port,
changing the gateway metric to 100, and finally the interface metric
to 100.
Windows firewall is enabled on the 100mb port, but allow ICMP is
enabled, as well as any ports that I need opened.

What should I be doing to make this work???

What IP address are you trying to ping from the internet? The private IP
(10.x.x.x)? This will not be possible because the private ranges are not
routable on the internet. They are called black hole IPs.

But about your config -

First of all, you have two gateways indicated on your PC. There must ONLY be
ONE gateway. You cannot have two gateways hardcoded. In your case, choose
the cable modem. Yes, all outside traffic communications will go thru that
cable modem.

Second, the firewall may not be allowing ICMP on that interface. Disable it
and give it a shot.

Third, you MUST allow ICMP pass through on the cable modem router/firewall.
This is NOT good practice. However you can pass traffic such as web, ftp,
etc, to your PC's internal IP address. This way to the outside world it sees
the cable IP address. You would connect to the cable IP address for these
services.

What are your intentions for access to your PC from the outside world? Keep
in mind cable companies are notorious for blocking all kinds of inbound
traffic to keep people from running servers and stuff. Plus their upload
speed is turtle slow at 768kbps. Their download may be fast, but upload is a
crawl. They won't tell you that part. That is why I got rid of my cable
internet access. They keep pleading for me to come back to them but I tell
them their service is slow and does not fulfill my requirements.


--
Regards,
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT,
MVP Microsoft MVP - Directory Services
Microsoft Certified Trainer

For urgent issues, you may want to contact Microsoft PSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Infinite Diversities in Infinite Combinations


.

Relevant Pages

  • Re: Linux Gateway/Firewall
    ... > gateway to the internal ip of the Linux server and this hasnt done the ... > to determine what port requests comming to a port that is closed are ... which have no business on the internet. ...
    (comp.os.linux.networking)
  • pftpx failing on freebsd 5.4-stable
    ... I'm trying to get ftp working from my lan to the internet. ... # when being port scanned. ... pass in quick on $ext_if inet proto udp from $isp_dhcp_server port bootps to ...
    (freebsd-net)
  • Re: Cant ping my PC from the internet
    ... Getting rid of the gateway on the GigE port should ... mean that only local LAN traffic flows, but it didn't seem to work that way. ... At this point I'm unable to connect to any services on the 100mb port, ...
    (microsoft.public.windowsxp.network_web)
  • Re: Cant ping my PC from the internet
    ... The LAN is connected to a router, as are other PCs on my LAN. ... Gateway metric: 100 ... At this point I'm unable to connect to any services on the 100mb port, and up until my last settings changes and reboot I was not even able to ping the 100mb port. ... My last change was to put the gateway and interface metrics on the GigE port to 100 to ensure any remote traffic was going through that interface, and to keep my local LAN traffic on the GigE interface. ...
    (microsoft.public.windowsxp.network_web)
  • Re: Cant ping my PC from the internet
    ... I want all the PC's on the LAN except this one to surf the internet through ... It ignores bandwidth settings for each port. ... Gateway metric: 100 ... Interface metric: 100 ...
    (microsoft.public.windowsxp.network_web)