1602i standalone AP cannot ping RADIUS server

I have a new 1602i standalone AP trying to use RADIUS authentication. For some reason the 1602 cannot ping the RADIUS server, but will get a response from other devices. Both are on the same subnet, the new one at .213 and the RADIUS at .209.
AP6#ping xxx.xx.120.209
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to xxx.xx..120.209, timeout is 2 seconds:
Success rate is 0 percent (0/5)
AP6#ping xxx.xx.120.217
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to xxx.xx..120.217, timeout is 2 seconds:
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/3/4 ms
The RADUIS server is able to ping the new AP successfully.
AP1#ping xxx.xx.120.213
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to xxx.xx.120.213, timeout is 2 seconds:
Success rate is 100 percent (5/5), round-trip min/avg/max = 2/2/3 ms
Any thoughts to why that AP is unable to ping that one particular client? Other APs are successfully contacting it for RADIUS authentication.

version 15.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
hostname AP6
logging rate-limit console 9
enable secret 5 xxxxxxxxxxxx
aaa new-model
aaa group server radius rad_eap
server xxx.xx.120.209 auth-port 1812 acct-port 1813
aaa group server radius rad_mac
aaa group server radius rad_acct
aaa group server radius rad_admin
aaa group server tacacs+ tac_admin
aaa group server radius rad_pmip
aaa group server radius dummy
aaa authentication login eap_methods group rad_eap
aaa authentication login mac_methods local
aaa authorization exec default local
aaa accounting network acct_methods start-stop group rad_acct
aaa session-id common
clock timezone -0500 -5 0
clock summer-time -0400 recurring
no ip routing
no ip cef
dot11 syslog
dot11 ssid xxx.xx
   authentication open eap eap_methods
   authentication network-eap eap_methods
   authentication key-management wpa
crypto pki token default removal timeout 0
username Cisco privilege 15 password 7 xxxxx
bridge irb
interface Dot11Radio0
no ip address
no ip route-cache
encryption mode ciphers tkip
ssid MANH
antenna gain 0
stbc
beamform ofdm
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
interface Dot11Radio1
no ip address
no ip route-cache
shutdown
antenna gain 0
dfs band 3 block
channel dfs
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
interface GigabitEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
bridge-group 1
bridge-group 1 spanning-disabled
no bridge-group 1 source-learning
interface BVI1
ip address dhcp client-id GigabitEthernet0
no ip route-cache
ip forward-protocol nd
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
ip radius source-interface BVI1
snmp-server view dot11view ieee802dot11 included
snmp-server community RW
snmp-server chassis-id AP6
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps tty
snmp-server enable traps entity
snmp-server enable traps disassociate
snmp-server enable traps deauthenticate
snmp-server enable traps authenticate-fail
snmp-server enable traps dot11-qos
snmp-server enable traps switch-over
snmp-server enable traps rogue-ap
snmp-server enable traps wlan-wep
snmp-server enable traps config-copy
snmp-server enable traps config
snmp-server enable traps syslog
snmp-server enable traps cpu threshold
snmp-server enable traps aaa_server
snmp-server host .0.39 public
radius-server local
user user1 nthash 7
radius-server attribute 32 include-in-access-req format %h
radius-server host xxx.xx.120.209 auth-port 1812 acct-port 1813 key 7
radius-server vsa send accounting
bridge 1 route ip
line con 0
line vty 0 4
transport input all
sntp server xxx.xx.0.11
sntp broadcast client
end

Similar Messages

WLC cannot reach Radius server

I am currently configuring Radius server with Cisco Wireless Controller 5508. Using debug aaa at the CLI, I can see the controller receive radius client message but nothing coming back from the radius server.
For some reason, Wireless Controller 5508 cannot ping the Radius server using CLI. Yet, I can ping the 5508 controller from the Radius server. The Radius server is running Windows 2008 NPS with firewall turned off. There are no antivirus firewall installed on the Radius server. NPS is installed and configured on Windows 2008. Nothing shows up in the NPS log.
Any idea?

if you put a PC onto WLC management subnet can you ping your NPS from that PC ?
Also are you using service port of your WLC ?
HTH
Rasika
**** Pls rate all useful responses ****

Cannot ping REAL server IP addresses from CSM 6500

I have a dual 6500/CSM routed topology in which the traffic from clients to the server VIP works fine. However, in preparation for some upcoming work, I find that I cannot ping the REAL server IP addresses. This would seem to be an important troubleshooting step. Any ideas why this wouldn't work?

Gilles, followup question. If I understand this, what you outlined above will allow traffic external coming into the 6500/CSM to be forwarded thru to the REAL server IPs. If it wasn't clear, I was trying to ping from the native-mode 6500 that contains the CSM. I've tried regular and extended pings using the CSM-configured server VLAN's IP and alias IP, but get no response back from any of the REAL server IP addresses.
Is what you've indicated required to ping even if I'm on the 6500 which contains the CSM?

Cannot Ping Vodaphone Server

Hi,
anybody know why I cannot ping the Vodaphone server? It seems to stop at a BT backbone server and gets no further??
thnaks for any help...you can offer
C:\Users\Iain>tracert 212.183.133.177
Tracing route to cluster4.vap.vodafone.co.uk [212.183.133.177]
over a maximum of 30 hops:
1     1 ms    <1 ms    <1 ms READYSHARE [192.168.0.1]
2    23 ms    25 ms    25 ms 217.47.108.186
3    23 ms    25 ms    23 ms 217.47.109.193
4    26 ms    24 ms    26 ms 213.1.69.102
5    26 ms    24 ms    25 ms 213.120.162.71
6    27 ms    27 ms    28 ms 31.55.165.109
7    25 ms    27 ms    26 ms 109.159.250.178
8    32 ms    37 ms    40 ms 109.159.250.148
9    30 ms    30 ms    30 ms peer2-xe3-3-0.telehouse.ukcore.bt.net [109.159.2
54.231]
10    33 ms    33 ms    31 ms t2c3-xe-0-2-2-0.uk-lon1.eu.bt.net [166.49.211.17
4]
11    30 ms    31 ms    30 ms 166-49-211-254.eu.bt.net [166.49.211.254]
12     *        *        *     Request timed out.
13     *        *        *     Request timed out.
14     *        *        *     Request timed out.
15     *        *        *     Request timed out.
16     *        *        *     Request timed out.
17    *        *        *     Request timed out.
18     *        *        *     Request timed out.
19     *        *        *     Request timed out.
20     *        *        *     Request timed out.
21     *        *        *     Request timed out.
22     *        *        *     Request timed out.
23     *        *        *     Request timed out.
24     *        *        *     Request timed out.
25     *        *        *     Request timed out.
26     *        *        *     Request timed out.
27     *        *        *     Request timed out.
28     *        *        *     Request timed out.
29     *        *        *     Request timed out.
30     *        *        *     Request timed out.
Trace complete.

some servers do not accept being pinged or sometimes only at a very low priority
If you want to say thanks for a helpful answer,please click on the Ratings star on the left-hand side If the reply answers your question then please mark as ’Mark as Accepted Solution’

Cannot register radius server in active directory

Hi All
What I can't do is to register the RADIUS server to the Active Directory service which is located on the same server and stand alone server same problem (see screenshot). I've tried to do this as both domain administrator and local administrator.
How can I fix this problem?
IT Helpdesk

Hi,
Try to use netsh nps add registeredserver
command. This command is used for adding a Network Policy Server (NPS) to the list of registered servers in Active Directory.
The NPS server is registered in AD DS when it is added as a member of the RAS and IAS Servers security group.
For detailed information, please view the link below:
NPS Server Commands
http://technet.microsoft.com/en-us/library/cc754758(WS.10).aspx#BKMK_1
Hope this helps.
Steven Lee
TechNet Community Support
Thank You working to me ;)
IT Helpdesk

Cisco ASA 9.1(1) Cannot Ping Public Server

Cisco ASA 9.1(1) I have defined a public server. Ping from outside fails. Packet Tracer shows the following:

Thank you for responding, Vibhor: Here are the pertinent NAT statements in my running configuration:
object network Grede-Test-Server
host xx.xx.xx.xx (Public IP Address)
description Grede Test Server Menocon
object network Grede-Test-Server-Private
host 10.1.104.21
description Grede-Test Server
nat (Inside-Test,Outside) source static Grede-Test-Server-Private Grede-Test-Server
Cheers,
M.

Cannot Ping Linux Server From Windows Terminal

Hi Guys
Please forgive me if this is a really stupid quesion but I am very new to Linux.
I have recently installed Oracle Enterprise Linux 4 onto a server with the server name: oradbsvr
After following a tutorial from otn, I have successfully installed a 10g Database (10.2.0.1) and Apex 3.1 and APACHE. Whilst operating on the Linux box locally, all urls for the EM console and Apex work fine:
e.g.
http://oradbsvr:7777/pls/apex
When i try and access any of the EM or Apex sites from my windows box, I have to replace the hostname oradbsvr with its ip address (192.168.1.14)
This is the same at the cmd prompt from windows in that I can ping the Linux machine by ip but not hostname.
Since the Linux box will eventually be switched over to use DHCP, manually adding an IP address to the windows host file is not an option.
I guess my question is what do i need to do on the Linux box so that it can accessed via its hostname when using DHCP?
Thanks for any suggestions
Duncs

Hi, Duncs!
Well, you need do nothing to the Linux box; that is not how the naming system works. You will need a way to have your Windows boxen know how to look up the server name in your naming service.
For example, you probably have a line in the "/etc/hosts" file on you Linux box that looks something like:
xxx.xxx.xxx.xxx oradbsvr
If not, then your sys admin has defined an entry in the Domain Naming Service (DNS) or the WINDOWS equivalent. Your WINDOWS boxen need to be able to resolve the name to an IP address; that's not done by your Linux server.
Is your Linux box part of a local network domain? If so, it will have a fully-qualified domain name (FQDN, in the lingo). Perhaps oradbsvr.mynet.mycompany.com; if so, your WINDOWS boxen will need to use the whole FQDN name unless they have "mynet.mycompany.com" as their default DNS search list.
Life will be much easier if your sysadmin will use DHCP to assign a fixed IP address to the server and then you configure your WINDOWS TCP/IP services to use the same DNS service as the Linux box.
So, to make a long story short (too late, alas!) is that the problem is in your client setup, not the Linux server. Your network admin can make quick work of this, if you have one.
Cheers

Cannot ping IAS RADIUS from WLC 2504

I'm having some weird issues where I cannot ping from the WLC to the IAS RADIUS server. All of my clients cannot connect, but from the switch, router, RADIUS server, and hard wired clients, I can ping to the WLC and RADIUS server. The only thing that cannot ping the RADIUS server is the WLC itself. Nothing in the FW is blocking connectivity. Any ideas?
(Cisco Controller) >show radius summ
Vendor Id Backward Compatibility................. Disabled
Call Station Id Case............................. lower
Call Station Id Type............................. IP Address
Aggressive Failover.............................. Disabled
Keywrap.......................................... Disabled
Fallback Test:
    Test Mode.................................... Off
    Probe User Name.............................. cisco-probe
    Interval (in seconds)........................ 300
MAC Delimiter for Authentication Messages........ none
MAC Delimiter for Accounting Messages............ hyphen
Authentication Servers
Idx Type Server Address    Port    State     Tout RFC3576 IPSec - AuthMode/Phase1/Group/Lifetime/Auth/Encr
1    NM    10.10.50.63       1645    Enabled   5     Enabled   Disabled - none/unknown/group-0/0 none/none
2    NM    10.10.50.130      1645    Enabled   5     Enabled   Disabled - none/unknown/group-0/0 none/none
Accounting Servers
Idx Type Server Address    Port    State     Tout RFC3576 IPSec - AuthMode/Phase1/Group/Lifetime/Auth/Encr
1      N     10.10.50.63       1646    Enabled   5     N/A       Disabled - none/unknown/group-0/0 none/none
2      N     10.10.50.130      1646    Enabled   5     N/A       Disabled - none/unknown/group-0/0 none/none

It's in the arp cache through the default router
(Cisco Controller) >show interface detailed management
Interface Name................................... management
MAC Address...................................... d0:c2:82:df:5b:c0
IP Address....................................... 10.30.72.250
IP Netmask....................................... 255.255.255.0
IP Gateway....................................... 10.30.72.1
External NAT IP State............................ Disabled
External NAT IP Address.......................... 0.0.0.0
VLAN............................................. untagged
Quarantine-vlan.................................. 0
Active Physical Port............................. 1
Primary Physical Port............................ 1
Backup Physical Port............................. Unconfigured
Primary DHCP Server.............................. 10.10.10.65
Secondary DHCP Server............................ Unconfigured
DHCP Option 82................................... Disabled
ACL.............................................. Unconfigured
AP Manager....................................... Yes
Guest Interface.................................. No
L2 Multicast..................................... Disabled
(Cisco Controller) >show arp switch
Number of arp entries................................ 19
    MAC Address        IP Address     Port   VLAN   Type
50:57:A8:D6:DE:C0   10.10.19.1       1      5      Host
50:57:A8:D6:DE:C0   10.10.20.138     1      5      Host
50:57:A8:D6:DE:C0   10.10.50.63      1      5      Host
64:00:F1:08:A0:D0   10.30.72.1       1      0      Host
50:57:A8:9E:B5:CD   10.30.72.40      1      0      Host
50:57:A8:A1:7B:C5   10.30.72.44      1      0      Host
50:57:A8:9E:99:78   10.30.72.48      1      0      Host
50:57:A8:3B:66:E3   10.30.72.49      1      0      Host
00:07:7D:43:23:DA   10.30.72.58      1      0      Host
50:57:A8:9E:B6:1D   10.30.72.59      1      0      Host
50:57:A8:9E:95:C5   10.30.72.60      1      0      Host
50:57:A8:A1:7C:0D   10.30.72.61      1      0      Host
00:07:7D:65:36:DD   10.30.72.62      1      0      Host
50:57:A8:44:57:0C   10.30.72.63      1      0      Host
50:57:A8:CA:CC:01   10.30.72.64      1      0      Host

I have a Mac on my home network and also a Systemline music server on same network. My PC was able to find the server but my MAC cannot. I can ping the server from the mac, but cannot actually connect . Also can't add the mac as a location from server

I have a Mac on my home network and also a Systemline music server on same network. My PC was able to find the server but my MAC cannot. I can ping the server from the mac, but cannot actually connect . Also can't add the mac as a location from server, despite following the Systemline instructions that impy this can be done.
Can anyone please advise what I am doing wrong?

Hi LowLuster
Thanks for reply. I am not an expert on these sharing protocols but I think I have turned on SMB sharing but still wont connect. I tried adding netwrik drive by using cntrl K in finder and using smb\\network address but nothing. It is driving me mad!!

Main Server cannot ping the 2nd server in another location but the 2nd server can ping the main server

I have 3 servers : Main server, and 2 file servers in another country.
My main server can only ping the 2nd file server.
But both of our 2 file servers from another country can ping the main server.
In short, I cannot remote to the first file server.
The settings on both file servers are the same. And I don't have issues in accessing the 2nd file server using the Main server.
Can somebody have the patience to help me figure out the issue?

Being able to ping the server does not mean that you remotely access it.
If you are trying to RDP a server then you need to check that RDP is enabled on the server and that traffic to port 3389 is not blocked or filtered. You can use PortQryUI for checking.
For testing, you can temporary disable security software running on the servers and try again. Also, check the filtering done on network equipment in between your servers.
This posting is provided AS IS with no warranties or guarantees , and confers no rights.
Ahmed MALEK
My Website Link
My Linkedin Profile
My MVP Profile

Cisco C6500 CSM - Real server cannot ping its VIP.

I've been running into an issue with Cisco CSM for a number of years, but always found a way around it. Im attempting to get to the bottom of this to find out once and for all, if this is infact a limitation of the device, or a config issue/work around is possible.
Here is my situation. My CSM's are configured in bridging mode. Traffic works great, traffic bridges across vlans correctly. Everything works and have many instances of smilar configurations running in production. Every once and a while, a client requests that a "real" server (ie LWCMW-021)
cannot ping its VIP address (10.95.88.68). I am assuming this is related to the NAT Server, but not 100% sure. Clients have requested this functionality for some type of application based purpose, but Im unaware if CSM in bridging mode can provide this or not.
Any suggestions?
real LWCMW-021
address 10.95.88.59
inservice
real LWCMW-022
address 10.95.88.60
inservice
serverfarm LWCMW-80
nat server
no nat client
real name LWCMW-021 80
inservice
real name LWCMW-022 80
inservice
probe HTTP-80 (defined elsewhere)
vserver LWCMW-80
virtual 10.95.88.68 tcp WWW
vlan 120
serverfarm LWCMW-80
persistent rebalance
inservice

Sorry for giving false hope. It is only possible in ACE module. In case of CSM I believe we can only use workaround.
In case of ACE we can bind the Virtual IP to mutliple vlan. In that case we see a ARP entry like this.
10.10.10.111    e0.5f.b9.a1.72.2b vlan345   VSERVER    LOCAL     _         up
10.10.10.111    e0.5f.b9.a1.72.2b vlan346   VSERVER    LOCAL     _         up
As Virtual IP is not bound to a particular vlan in case of CSM it does not work here, but I can say for sure it is expected behavior.
The logic would be that the server tries to resolve the ARP for Virtual IP and it does not get a response.
In my case virtual ip is 10.10.10.111 before applying policy on ACE you can see that it is exhibiting the same behaviour.
Time     | Vmware_b4:72:11                       | 10.0.0.0                              | 10.10.10.4                            |
|         |                   | Broadcast         |                   | 224.0.0.1         |                   | 224.0.0.22        |
|0.000    |         Who has 10.10.10.11           |                   |                   |                   |                   |ARP: Who has 10.10.10.111? Tell 10.10.10.11
|         |(0)      ------------------> (0)      |                   |                   |                   |          |
|0.999    |         Who has 10.10.10.11           |                   |                   |                   |                   |ARP: Who has 10.10.10.111? Tell 10.10.10.11
|         |(0)      ------------------> (0)      |                   |                   |                   |                   |
|         |                   |                   |                   |                   |(0)      ------------------> (0)      |
|1.998    |         Who has 10.10.10.11           |                   |                   |                   |                   |ARP: Who has 10.10.10.111? Tell 10.10.10.11
|         |(0)      ------------------> (0)      |                   |                   |                   |                   |
|3.014    |         Who has 10.10.10.11           |                   |                   |                   |                   |ARP: Who has 10.10.10.111? Tell 10.10.10.11
|         |(0)      ------------------> (0)      |                   |                   |                   |                   |
|4.014    |         Who has 10.10.10.11           |                   |                   |                   |                   |ARP: Who has 10.10.10.111? Tell 10.10.10.11
|         |(0)      ------------------> (0)      |                   |                   |                   |                   |
Hope that helps.

Cannot ping RRAS Client from RRAS server.

I have recently created an RRAS pptp connection for an outside network. The RRAS client connects fine and can ping the RRAS server and every device on the RRAS servers local network. The RRAS server cannot ping the remote pptp client nor can any device on
the RRAS servers local network. RRAS is configured to be within the same subnet as the RRAS servers local network. On connection it pulls from a static IP pool.
Any help is truly appreciated

The server is behind a nat device and for testing purposes i have disabled the firewall on both devices. Also I am having an issue where the pptp connection just stops accepting and sending data to the rras server but if you look at the active connections
the client never disconnects. I have attached ipconfig information
CLIENT
Windows IP Configuration
   Host Name . . . . . . . . . . . . : Fellows-PC
   Primary Dns Suffix . . . . . . . :
   Node Type . . . . . . . . . . . . : Hybrid
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No
PPP adapter Welsh:
   Connection-specific DNS Suffix . :
   Description . . . . . . . . . . . : Welsh
   Physical Address. . . . . . . . . :
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   IPv4 Address. . . . . . . . . . . : 172.16.128.66(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.255
   Default Gateway . . . . . . . . . :
   NetBIOS over Tcpip. . . . . . . . : Enabled
Ethernet adapter Local Area Connection:
   Connection-specific DNS Suffix . :
   Description . . . . . . . . . . . : Realtek PCIe GBE Family Controller
   Physical Address. . . . . . . . . : BC-5F-F4-75-C5-AD
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes
   Link-local IPv6 Address . . . . . : fe80::5418:aba9:4af2:1e12%11(Preferred)
   IPv4 Address. . . . . . . . . . . : 192.168.1.2(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Lease Obtained. . . . . . . . . . : Wednesday, March 26, 2014 8:35:58 AM
   Lease Expires . . . . . . . . . . : Saturday, March 29, 2014 8:35:58 AM
   Default Gateway . . . . . . . . . : 192.168.1.1
   DHCP Server . . . . . . . . . . . : 192.168.1.1
   DHCPv6 IAID . . . . . . . . . . . : 247226356
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-18-C3-16-85-BC-5F-F4-75-C5-AD
   DNS Servers . . . . . . . . . . . : 75.75.75.75
                                       75.75.76.76
   NetBIOS over Tcpip. . . . . . . . : Enabled
Tunnel adapter isatap.{DF8CAC0D-588D-495A-9185-78C9992DC12F}:
   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix . :
   Description . . . . . . . . . . . : Microsoft ISATAP Adapter
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
Tunnel adapter Teredo Tunneling Pseudo-Interface:
   Connection-specific DNS Suffix . :
   Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   IPv6 Address. . . . . . . . . . . : 2001:0:9d38:6abd:1c88:1312:b8c2:97a9(Pref
erred)
   Link-local IPv6 Address . . . . . : fe80::1c88:1312:b8c2:97a9%12(Preferred)
   Default Gateway . . . . . . . . . : ::
   NetBIOS over Tcpip. . . . . . . . : Disabled
Tunnel adapter isatap.{D8973397-8880-4110-A7F9-4D1F6A1C2E8C}:
   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix . :
   Description . . . . . . . . . . . : Microsoft ISATAP Adapter #2
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
SERVER
Windows IP Configuration
   Host Name . . . . . . . . . . . . : IMS
   Primary Dns Suffix . . . . . . . :
   Node Type . . . . . . . . . . . . : Unknown
   IP Routing Enabled. . . . . . . . : Yes
   WINS Proxy Enabled. . . . . . . . : Yes
PPP adapter RAS Server (Dial In) Interface:
   Connection-specific DNS Suffix . :
   Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface
   Physical Address. . . . . . . . . : 00-53-45-00-00-00
   DHCP Enabled. . . . . . . . . . . : No
   IP Address. . . . . . . . . . . . : 172.16.128.65
   Subnet Mask . . . . . . . . . . . : 255.255.255.255
   Default Gateway . . . . . . . . . :
Ethernet adapter Local Area Connection:
   Media State . . . . . . . . . . . : Media disconnected
   Description . . . . . . . . . . . : Broadcom BCM5709C NetXtreme II GigE (NDIS
VBD Client)
   Physical Address. . . . . . . . . : 00-10-18-8D-BC-42
Ethernet adapter Local Area Connection 2:
   Media State . . . . . . . . . . . : Media disconnected
   Description . . . . . . . . . . . : Broadcom BCM5709C NetXtreme II GigE (NDIS
VBD Client) #2
   Physical Address. . . . . . . . . : 00-10-18-8D-BC-40
Ethernet adapter Local Area Connection 4:
   Media State . . . . . . . . . . . : Media disconnected
   Description . . . . . . . . . . . : Broadcom BCM5716C NetXtreme II GigE (NDIS
VBD Client)
   Physical Address. . . . . . . . . : 84-2B-2B-68-6A-FA
Ethernet adapter Local Area Connection 3:
   Connection-specific DNS Suffix . :
   Description . . . . . . . . . . . : Broadcom BCM5716C NetXtreme II GigE (NDIS
VBD Client) #2
   Physical Address. . . . . . . . . : 84-2B-2B-68-6A-F9
   DHCP Enabled. . . . . . . . . . . : No
   IP Address. . . . . . . . . . . . : 172.16.128.1
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 172.16.128.254
   DNS Servers . . . . . . . . . . . : 172.16.128.254
                                       75.75.75.75
   NetBIOS over Tcpip. . . . . . . . : Disabled

Cannot ping from zone or ping zone from another server

Hi all,
I've just setup a zone, configured the OS on it and booted it.
1) From the global zone I can ping the zone
2) From another server(s) I cannot ping the zone although I can ping the global zone
3) From the zone I cannot even ping the global zone let alone anything else
Any ideas whats gone wrong. the zone xml looks like:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE zone PUBLIC "-//Sun Microsystems Inc//DTD Zones//EN" "file:///usr/share/lib/xml/dtd/zonecfg.dtd.1">

<zone name="ivcp0.lon.oss.colt.net" zonepath="/zones/ivcp0.lon.oss.colt.net" autoboot="true">
<inherited-pkg-dir directory="/lib"/>
<inherited-pkg-dir directory="/platform"/>
<inherited-pkg-dir directory="/sbin"/>
<inherited-pkg-dir directory="/usr"/>
<inherited-pkg-dir directory="/opt/sfw"/>
<filesystem special="/home" directory="/home" type="lofs"/>
<network address="212.74.77.211/25" physical="bge1"/>
</zone>
zoneadm list -vc
ID NAME STATUS PATH
0 global running /
2 ptl1.lon.oss.colt.net running /zones/ptl1.lon.oss.colt.net
3 ptl1.dev.lon.oss.colt.net running /zones/ptl1.dev.lon.oss.colt.net
7 ivcp0.lon.oss.colt.net running /zones/ivcp0.lon.oss.colt.net

Might help to send along the "ifconfig -a" and "netstat -rnv" output from both the global zone and the local zones that are having problems.
Traceroute might also help you isolate the problem

IPV6 clients cannot ping each other while getting IP from DHCP server running in windows 2008

I have two windows 7 clients and a windows 2008 server connected to a switch with static IP 172:16:5::1/64.
DHCP server is configured with static IP 172:16:5::20/64
when i statically assign IP to windows 7 clients like 172:16:5::21 & ::22, they can ping each other. if they get ip from DHCP server, they cannot ping each other.
if i configure the gateway (172:16:5::1) in the clients manually, they can ping each other.
is there any way we can make dhcp server to give gateway to the clients along with IP?

From what I have gathered:
IPv6 won't route because the DHCP server is setup in 'stateless' mode and the switches do not support IPv6. (
"But if your routers are not IPv6 supported (yet), you can
reconfigure DHCPv6 to Disable Stateless mode, and that'll issue IPv6 addresses that
will eliminate the Ping problem." -
http://www.networkworld.com/article/2228461/microsoft-subnet/setting-up-dhcpv6-to-dynamically-issue-ipv6-addresses-in-a-network.html)
So you must change to 'disable stateless' mode. Which the only way I can THINK to do this is to uninstall DHCP and reinstall DHCP and select 'disable stateless' during the installation (which I haven't confirmed). (In
case, “Disable DHCPv6 stateless mode for this server” option was selected duringrole installation" -
http://blogs.technet.com/b/teamdhcp/archive/2009/03/03/dhcpv6-understanding-of-address-configuration-in-automatic-mode-and-installation-of-dhcpv6-server.aspx)
zz.. but my understanding of DHCP is fragmented, please take what I find with a grain of salt. I am off to reinstall DHCP :] .. fun.
Mediocre Access 2010 | (Baby) Beginner C Sharp | OK at Active Directory (2012) | Fragmented understanding of DNS/DHCP | Laughable experience with Group Policy | Expert question asker on MSDN Forums

Puzzling situation: XP clients cannot ping server while W7 clients can

We have an SBS 2011 server with XP and Win7 clients. The server provides DHCP and DNS services. Clients are all DHCP.
Another DHCP server was on the network, which caused the 2011 box to shut down DHCP services. We have fixed that and all is working now, but....
While troubleshooting, we found differences between the behavior of XP and W7 machines. All could still connect to the internet and ping the gateway. But only the W7 machines could communicate with the server (email, ping, DNS, RDP).
The XP machines could not even ping the server's IP address. Around 5-6 of each client OS were examined and the results were consistent. Examples of configurations are as follows:
Server
IP: 192.168.3.1
SM: 255.255.252.0
GW: 192.168.3.2
DNS: 192.168.3.1, 8..8.8.8
W7 client
IP: 192.168.0.20
SM: 255.255.252.0
GW: 192.168.3.2
DNS: 192.168.3.1, 8.8.8.8
DHCP: 192.168.3.1
XP client
IP: 192.168.1.26
SM: 255.255.252.0
GW: 192.168.3.2
DNS: 192.168.3.1, 8.8.8.8
DHCP: 192.168.3.1
Also, upon booting an XP machine, it would not get any IP address. After booting a W7 box, it would have the appropriate IP configuration and we were able to RDP to the server and browse the internet.
As I said, everything is working now after removing the foreign DHCP server, but we found the behavior odd and would like to understand why there were differences between the two client platforms.

Well, I can't really do this now, because everything is working. I know - why waste time trying to fix something that isn't broken. It just doesn't make sense to me.
I am just trying to determine why XP machines behaved in one way and W7 machines in another - but only while the DHCP service was down on the SBS box. I looked at several of each, so I don't think I was a problem with the IP stack, unless
all XP clients had the same issue at the same time, and all spontaneously resolved when the DHCP server came back up.
I tested multiple XP machines and multiple W7 machines in multiple buildings, so I'm confident that the problem was platform-specific.

1602i standalone AP cannot ping RADIUS server

Similar Messages

Maybe you are looking for