MPLS-VPN w/NAT for Internet connectivity.

We have implemented MPLS-VPN and site-to-site connectivity seems to be working fairly well. However, we are having strange issue when trying to access the Internet. For some odd reason, we are not able to get to some sites such as ebay.com, latimes.com, nytimes.com, moviefone.com. We are running dynamic NAT and the topology looks like this:
Laptop----CE-------PE-----NAT------BR-----Internet
This is a simple layout of what we have currently in the lab. NAT router is not running MPLS but we are using VRF to create sub-interfaces on FE connecting PE and NAT router for each customers. I have access-list allowing 10.x.x.x/8.
Laptop-CE - 10.0.0.8/30
CE-PE - 10.0.0.0/30
PE-NAT - 10.0.1.0/30
Also, we are able to ping, trace, ftp, use remote desktop, pcanywhere. It seems to be only affecting http. We've been working on this for couple of days now and we've hit a wall. Any help will be greatly appreciated.
JK

I had a slightly different yet similar problem a few months ago on our mpls network with the CE devices, and turned out the DF bit had to be set to 0 to enable fragmentation _prior_ to traffic entering the core.
Fixed it right up by setting a policy on the ethernet port.
-Jeff

Similar Messages

  • What is the easiest way to check for internet connection in C#?

    Hi!
    I searched a lot but I didn't get my answer. I'm looking for the easiest way to check for internet connection. Can you help me?
    Thanks a lot.

    Hi Pouya Ebrahimzadeh,
    I suggest you could connect a site to check if it can be opened.
    Public Shared Function CheckForInternetConnection() As Boolean
    Try
    Using client = New WebClient()
    Using stream = client.OpenRead("https://msdn.microsoft.com/")
    Return True
    End Using
    End Using
    Catch
    Return False
    End Try
    End Function
    If you have any other concern regarding this issue, please feel free to let me know.
    Best regards,
    Youjun Tang
    We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
    Click
    HERE to participate the survey.

  • Can i use new TC to connect wirelessly to home network and plug my tv into the time capsule for internet connectivity?

    My new tv needs to plug into an ethernet port for internet connectivity. 
    I'm hoping it can plug into my TC however my TC is wirelessly connected to my current home network... how can i get this to work?
    TC version A1470 (i think, brand new)
    Many thanks.
    Ben

    If the TC is connected to a wireless network provided by another Apple router, then the TC extends the network by default, and the Ethernet ports are enabled on the TC.
    If the TC is connected to a third party network wirelessly, then it must have been setup to "join" the wireless network. When the TC is set up this way, the TC becomes a wireless hard drive and nothing more. The Ethernet ports are not enabled when the TC "joins" a wireless network.
    So, a logical first troubleshooting step would be to confirm "how" the TC is currently set up. To do that.....assuming that you are using a current or recent version of AirPort Utility on your Mac.......
    Open AirPort Utility
    Click on the TC icon, then click Edit in the smaller window
    Click the Wireless tab at the top of the window
    Check the setting for Network Mode and report on that

  • Can i run a printer off the ethernet cable connection without hurting the imac or is the ethernet slot only for internet connection?

    can i run a printer off the ethernet cable connection without hurting the imac or is the ethernet slot only for internet connection?

    Hi, Alan -
    How can I connect to both printer (HP 4050n, via direct connection) and internet (via LAN), as my iMac has only one R45 port?
    You can, but you'll need to expand your cabling a bit.
    You'll need to get an intermediate ethernet hub, switch, or router. That device sits alone, with the Mac, your printer, and your modem/LAN plugged into it.
    If you are already using a router, either separate or in combination with the modem (many modems have a built-in router), then you just need a hub or switch.
    I use an ethernet switch (10/100/1000) to let both my Macs (a 2010 iMac and an elderly G4 DA model) use my HP4000n printer and my modem. The ethernet switch is a passive device, meaning there's no setup nor instructing it required - it's truly plug-and-play. All four items (two Macs, printer, and modem) are plugged into it via ethernet; both Macs have full-time independent access to the printer and the modem.

  • Dose USB dongle for internet connection work on MacBook?

    dose USB dongle for internet connection work on MacBook?

    Hi Adrian,
    IPv6 troubleshooting http://support.apple.com/kb/TS3802
    OpenSystem  Preferences > Network > select AirPort > click on Advanced  >TCP/IP > Configure IPv6 > Off > OK > Apply > Turn  AirPort Off> Turn AirPort On
    OpenSystem  Preferences > Network > select Ethernet > click on  Advanced> TCP/IP > Configure IPv6 > Off > OK > Apply
    http://docs.info.apple.com/article.html?path=Mac/10.6/en/11395.html
    http://support.apple.com/kb/HT1714

  • Can I use Ethernet for Internet connection and Airport express for printer

    How / can I use Ethernet for Internet connection and use an airport express to set up wifi for printer and Apple TV?
    Macbook Pro. OS X 10.9.4

    I've never tried it, so I don't know what the results will be.
    However, you can move Ethernet to the top of the Services list in Network System Prefs which will cause it to be the Internet source. There is a command in the gear menu to set the Service order.  However, after thinking about it, if there isn't an internet connection via Wi-Fi, it might automatically drop down to the Ethernet connection.
    Then, you can set up your Wi-Fi so that it doesn't connect to the Internet, as Linc stated. How to do that would be dependent on the Router.

  • I have a data plan on my iPad? Can you tether from an iPad to a laptop for Internet connection?

    I have a data plan on my iPad? Can you tether from an iPad to a laptop for Internet connection?

    Yes if your iPad is a New iPad and you have a "hotspot" plan from your provider.

  • Can I use I-Phone 4 for internet connection?

    can I use I-Phone 4 for internet connection to I Pad ?

    If your cell carrier supports tethering and the WiFi "hot spot" feature, as AT&T does, yes.
    Regards.

  • Application asks for internet connection

    Hi,
    When I start any application, that I wrote with python for my Nokia 5800(software version 60.0.003), it asks me for internet connection. Application doesn't use it or need it. And if I skip it applications works fine.
    I'm using ensymble(PyS60 application packager 2.0.0) with Python 2.5.2 to create application, and python version 2.0.0 on Nokia phone.
    I tried to put just "--caps=" or "--caps=ReadUserData" to check if this will remove it, but it still asks for access point. Even for simple application as: print"Hello world!"
    Does somebody knows how can I remove this?
    Thanks.

    First you've to add your WLAN network and define the settings. Now, if you open the browser in always ask mode, your new defined WLAN should be there.
    http://europe.nokia.com/support/product-support/c3-00/user-guide/guide-mch
    ‡Thank you for hitting the Blue/Green Star button‡
    N8-00 RM 596 V:111.030.0609; E71-1(05) RM 346 V: 500.21.009

  • Why the itunes radio keep asking for internet connection

    I recently changed broadband provider and since then whenever i try to access the music store or the radio the app ask for internet connection even when i am online

    No idea what the fix is but I just want to say I am having the same problem
    Stop asking for my ****ing password itunes - remember it please!

  • Terminal Commands for Internet Connect VPN?

    I could maybe do this as an applescript but I'm hoping there are terminal commands which I can incorporate into an rsync script...
    I need to open a PPTP VPN connection on a computer (Internet Connect VPN client, 10.4.8) , to connect to VPN services on OS X Server (10.4.8). The configuration works fine but really needs manual intervention at times. I would like to just script the equivalent of hitting the 'connect' button, so this can be run by cron.
    Any ideas or links?
    Ta.
    -david

    I did repair permissions with disk Utility and I used Onyx to delete the various caches, but that didn't work.
    Everything is functioning. The problem isn't on the VPN server side, because I can log into the VPN on my Powerbook and the status shows correctly. There's definitely something going on with my G5.
    This isn't a really huge deal, but it would be nice if the status indicated that I'm connected when I'm connected.

  • Windows 8.1 Group Policies For Internet Connection Sharing?

    Are there any more detailed policies available other than simply allowing or blocking Internet Connection Sharing?
    I need to find out if there are policies allow management of Internet Connection Sharing?  For instance we would like to allow ICS, but control it so that it cannot be set up by the user in unsafe manner.
    We would like to either set the PSK password in advance or at least disallow weak ICS WPA passwords.  It would also be a good idea if we could set up ICS so that only domain joined computers from our domain could join the ICS session from another computer
    on our domain or else disallow direct access and file sharing between the ICS host and the guests joining the ICS network.
    Can these types of things be managed via group policy?

    > Are there any more detailed policies available other than simply
    > allowing or blocking Internet Connection Sharing?
    No.
    Greetings/Grüße,
    Martin
    Mal ein
    gutes Buch über GPOs lesen?
    Good or bad GPOs? - my blog…
    And if IT bothers me -
    coke bottle design refreshment (-:

  • E90 Maps keeps asking for Internet Connection

    Hi,
    Why does E90 Maps keep asking for internet?
    "No Internet connection. Please check your Network settings"
    And even if there is Internet connection via wifi and telco's data service, Maps doesn't seem to see it.
    How do I stop it from asking?
    Thanks!
    And is there a way to tell maps to never show the zooom-in start up animation?Message Edited by kaon on 28-Jul-200703:45 PM

    Hi kaon,
    I checked the E90 manual online .. was curious ..
    Found out that it can be done !
    Page 54:
    To prevent the device from automatically downloading maps through the internet, for example, when you are outside your
    home cellular network, select Options > Settings > Network > Use network > Off.
    28-Jul-200711:39 PM
    kaon wrote:
    And even if there is Internet connection via wifi and telco's data service, Maps doesn't seem to see it.
    For the N95, if you select to set the Network to 'when need', then the phone will give you a chance to select the access point. Try selecting the right one -- WLAN/ Telco.
    Let me know how it goes !
    28-Jul-200711:39 PM
    kaon wrote:
    And is there a way to tell maps to never show the zooom-in start up animation?
    Hmm.. dont know..
    Cheers
    Let me be a ripple in the silent stream of your memory ~ Viveca

  • Script for internet connect with dial up modem, check email & log off

    I am looking for a script to connect to the internet (with dial up) external apple modem, then check email and then log off and disconnect. I don't want any other applications opening internet connect? A would use this script file with ical and could have my email checked and open up in the morning before I leave for work....being that we have dial up the entire process of connecting to the internet and checking email is time consuming. Any help is greatly appreciated. thks

    You need some additional logic in there - as written, the script will launch mail, then immediately disconnect the internet connection.
    At the very least you need to add a delay before disconnecting to allow for Mail to download awaiting messages.
    Since you cannot predict how long a delay you'll need, a better approach would be to query Mail.app and wait until it's idle, like:
    tell application "Mail"
      launch -- doesn't need to be frontmost
      check for new mail -- get all mail
      repeat until (get background activity count) = 0
        delay 2 -- wait 2 seconds before checking again
      end repeat
    end tell
    In this way the script forces a check of new mail (don't assume that Mail.app is set to auto-check, especially for dialup users who often compose mail offline and may have automatic checking disabled), and it hangs around until Mail.app has finished downloading all the messages.

  • VPN Password Required for Each Connection

    Prior to installing 10.5.6, when I accessed my VPN the password was automatically sent. Now I am required to type it in for each connection, although my setup remains the same as it was. Can someone tell me how to do this automatically?? Thanks

    Hi,
    You need to upgrade the excel addin to 9.3.1.3 as it resolves the following issue
    Spreadsheet Add-in. In the Login dialog box, Essbase was not storing non-default port information.
    If Essbase was listening on a non-default port, that information was not being saved after having
    previously connected successfully. Upon subsequent logins, it was necessary to re-enter the nondefault
    server and port numbers; it was not saved in the Server drop-down list. Additionally, after a
    successful connection on one sheet, re-connection was necessary after switching to another sheet
    when a non-default port was used. [7118611, 7298976]
    Ok?
    Cheers
    John
    http://john-goodwin.blogspot.com/

Maybe you are looking for