Solaris 10 routing problems

Anyone have routing working on Solaris 10?
Running S10_72 on a Dell Gx110 w/ 2 NICs. Trying to set it up to replace my Netgear router (and eventually configure IPv6 tunnel). having problems getting it to route packets. I turned off all of my ipfilters for debugging.
2 networks 10.10.1.x and 10.1.1.x no routing daemon, just static routes
Here are the parts of the ifconfig that matter, the output from routeadm and the routing table, along with a ping to hosts on each side and a tcpdump from the input interface elxl0 (the packets to be routed arrive here) the tcpdump on the side the packets should come out is empty (there are DNS packets and the like from the host, but no routed packets). What am I missing here?
elxl0: flags=1100843<UP,BROADCAST,RUNNING,MULTICAST,ROUTER,IPv4>
inet 10.1.1.1 netmask ffffff00 broadcast 10.1.1.255
ether 0:b0:d0:85:e0:b4
iprb0: flags=1104843<UP,BROADCAST,RUNNING,MULTICAST,DHCP,ROUTER,IPv4 >
inet 10.10.1.67 netmask ffffff00 broadcast 10.10.1.255
ether 0:a0:c9:98:1d:6b
# routeadm
Configuration Current Current
Option Configuration System State
IPv4 forwarding enabled enabled
IPv4 routing default (disabled) disabled
IPv6 forwarding disabled disabled
IPv6 routing disabled disabled
IPv4 routing daemon "/usr/sbin/in.routed"
IPv4 routing daemon args ""
IPv4 routing daemon stop "kill -TERM `cat /var/tmp/in.routed.pid`"
IPv6 routing daemon "/usr/lib/inet/in.ripngd"
IPv6 routing daemon args "-s"
IPv6 routing daemon stop "kill -TERM `cat /var/tmp/in.ripngd.pid`"
Routing Table: IPv4
Destination Gateway Flags Ref Use Interface
10.10.1.0 10.10.1.67 U 1 26 iprb0
10.1.1.0 10.1.1.1 U 1 2 elxl0
224.0.0.0 10.10.1.67 U 1 0 iprb0
default 10.10.1.1 UG 1 1 iprb0
127.0.0.1 127.0.0.1 UH 7 7281 lo0
PING 10.10.1.1: 56 data bytes
64 bytes from 10.10.1.1: icmp_seq=0. time=1.67 ms
----10.10.1.1 PING Statistics----
1 packets transmitted, 1 packets received, 0% packet loss
round-trip (ms) min/avg/max/stddev = 1.54/1.61/1.67/-NaN
PING 10.1.1.2: 56 data bytes
64 bytes from 10.1.1.2: icmp_seq=0. time=0.659 ms
----10.1.1.2 PING Statistics----
1 packets transmitted, 1 packets received, 0% packet loss
round-trip (ms) min/avg/max/stddev = 0.592/0.625/0.659/-NaN
tcpdump -vv -e -i elxl0
15:24:17.414252 00:c0:9f:20:16:a8 > 00:b0:d0:85:e0:b4, ethertype IPv4 (0x0800), length 98: IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], length: 84) 10.1.1.2 > 10.10.1.1: icmp 64: echo request seq 30213

Hi,
I have a Sunfire V100 - and have the exact same problem. The settings are correct; I have configure dual-NIC cards many times in the past - but this issue is simply eluding me. I can swap in a Linux machine in router / ip forwarding mode and there are no problems, but when I put back in the Sunfire I encounter the same issues you have.
In effect, packets from the LAN arrive at the NIC on the Solaris machine, but then don't get forwarded to the other NIC's gateway. I'm at a loss, but I have seen this problem pop-up (without answer) a half-dozen times in this forum alone, and multiple times on different support sites. Did you (or anyone) ever come across a solution for this? Is this not some easily overlooked yet possibly cryptic flag or variable that I've missed? Anyone?

Similar Messages

Another routing problem

I just replaced a FreeBSD box with Solaris 10 x86 U5.
I want my Windows boxes to reach internet thru Solaris. At the moment windows clients are able to ping both NICs on the Solaris. However, they can not ping default gateway of Solaris box. There is no problem on Solaris. I can reach internet without any problem.
Before posting, I used routeadm and (1) I enabled only ipv4-forwarding (did not work), (2) I enabled only ipv4-routing (did not work), (3) I enabled both ipv4-forwarding & ipv4-routing (did not help)
I also read about 5 pages of similar routing problems in forums. No clear solution is provided in any of them. I am posting this with the hope to find a solution.
Some information about my network is as follows:
bash-3.00# ifconfig -a
lo0: flags=2001000849<UP,LOOPBACK,RUNNING,MULTICAST,IPv4,VIRTUAL> mtu 8232 index 1
inet 127.0.0.1 netmask ff000000
bge0: flags=1000843<UP,BROADCAST,RUNNING,MULTICAST,IPv4> mtu 1500 index 2
inet 192.168.2.2 netmask ffffff00 broadcast 192.168.2.255
ether 0:1c:c4:31:5:fd
e1000g0: flags=1000843<UP,BROADCAST,RUNNING,MULTICAST,IPv4> mtu 1500 index 3
inet 192.168.1.3 netmask ffffff00 broadcast 192.168.1.255
ether 0:1b:21:15:15:29
bash-3.00#
bash-3.00# netstat -rn
Routing Table: IPv4
Destination Gateway Flags Ref Use Interface
default 192.168.2.1 UG 1 15658
192.168.1.0 192.168.1.3 U 1 177 e1000g0
192.168.2.0 192.168.2.2 U 1 8 bge0
127.0.0.1 127.0.0.1 UH 4 58 lo0
bash-3.00#
bash-3.00# routeadm
Configuration Current Current
Option Configuration System State
IPv4 routing disabled disabled
IPv6 routing disabled disabled
IPv4 forwarding disabled disabled
IPv6 forwarding disabled disabled
Routing services "route:default ripng:default"
Routing daemons:
STATE FMRI
disabled svc:/network/routing/legacy-routing:ipv4
disabled svc:/network/routing/legacy-routing:ipv6
disabled svc:/network/routing/ndp:default
disabled svc:/network/routing/zebra:quagga
disabled svc:/network/routing/rip:quagga
disabled svc:/network/routing/ripng:default
disabled svc:/network/routing/ripng:quagga
disabled svc:/network/routing/ospf:quagga
disabled svc:/network/routing/ospf6:quagga
disabled svc:/network/routing/bgp:quagga
disabled svc:/network/routing/rdisc:default
disabled svc:/network/routing/route:default
bash-3.00#
bash-3.00# ndd -get /dev/ip ip_forwarding
0
bash-3.00#

kucukoglu wrote:
I just replaced a FreeBSD box with Solaris 10 x86 U5.
I want my Windows boxes to reach internet thru Solaris. At the moment windows clients are able to ping both NICs on the Solaris. However, they can not ping default gateway of Solaris box. There is no problem on Solaris. I can reach internet without any problem.Does the outside world know how to route to the clients behind Solaris? I'll bet they do not.
If that's true, then routing/forwarding isn't useful. You'll have to set up the Solaris box as a NAT gateway instead. Ipfilter can do that. There are several cookbooks for it.
Before posting, I used routeadm and (1) I enabled only ipv4-forwarding (did not work), (2) I enabled only ipv4-routing (did not work), (3) I enabled both ipv4-forwarding & ipv4-routing (did not help)
I also read about 5 pages of similar routing problems in forums. No clear solution is provided in any of them. I am posting this with the hope to find a solution.Your solution is fine for outbound packets (the clients use Solaris as a gateway and then it forwards them on to the internet). But for the return packet, that's not possible. There's no route published.
Darren

TV Guide fails - router problem?

When the guide failed on our main TV is the family room, I tried trouble-shooting it -- no luck. Then I "chatted" online with Verizon's "Raul" for two hours, trying everything he asked, including swapping the box with the one in the bedroom -- Raul thought it was the biox and gave me an 800 number to call to get a swap in boxes. However, before the weekend is over, all but one TV has the same problem. Right now, we get the guide on one TV and no guide on four TVs.
I've worked on this all day so far today. Verizon's In-Home Agent reports that none of the TVs have connectivity with the router. So I've concentrated on that, I've unplugged the router and the boxes, reset the router, accessed the router's control panel to see it seems to be working well. The only thing I can see wrong is this: The router's "WAN Ethernet" light stays dark, though its "WAN Coax" light stays lit. I wonder if this could be the problem; and, if so, how could I fix that?
One thing worries me about a router problem, though: Why would I still have the guide on one of the six TVs?
Anyone have a clue if I'm on the right track?
Thanks,
George

Yes, sounds like a router problem.
The STB has to download the program guide via the router. Each box should download 10 days worth of programing. So when the router goes out it could take as much as 10 days before the guide disappears. So the one box that still has the guide, was the last one to update and had more guide data stored than the others. It will go as well just given time.
If you have rebooted and reset the router, then the problem is either you have a bad router or possibly a bad splitter. Either way, you need to call tech support so they can get a tech out.
====================================================================================
Error exists between keyboard and chair.

Agent 2.2, Apache 2.0.59 and Solaris 10 - problem- Urgent

Hi,
We are using Solaris 10 (T2000), apache 2.0.59 and Policy Agent 2.2.. Apache Server 2.0.59 works just fine. When I installed Policy Agent 2.2. The Apache start gives following error:
/usr/local/apache2/bin/apachectl start
Syntax error on line 1 of /etc/opt/SUNWam/agents/apache/config/_usr_local_apache2_conf/dsame.conf:
Cannot load /opt/SUNWam/agents/apache/lib/libamapc_ssl.so into server: ld.so.1: httpd: fatal: relocation error: file /opt/SUNWam/agents/apache/lib/libamapc_ssl.so: symbol ap_pstrdup: referenced symbol not found
Does anybody knows whats going wrong?
Thanks,
Vivek

I'm not sure of the exact error issued, but if one uses the Apache version that comes bundled with Solaris, then problems arise. If that's not what you've done, then never mind. Here's the warning from the documentation
PDF = http://192.18.109.11/819-4770/819-4770.pdf
HTML = http://docs.sun.com/app/docs/doc/819-4770
Caution - Do not use the version of Apache HTTP Server that comes bundled with Solaris 9 Operating System or with Solaris 10 Operating System. The bundled Apache HTTP Server package is incomplete. Any attempt to Install Agent for Apache HTTP Server on a bundled version of Apache HTTP Server is likely to fail.
Therefore, download the desired version of Apache HTTP Server from the Apache web site at http://www.apache.org/ before attempting to install the agent.
John D.

Router problems how can I connect direct

I am continually having router problems from my service provider. How can i connect my printer directly to my computer? Thanks

Hi,
You need a printer which supports this first and then use the following instructions:
http://www8.hp.com/au/en/campaigns/wireless-printing-center/wireless-direct.html
Regards.
BH
**Click the KUDOS thumb up on the left to say 'Thanks'**
Make it easier for other people to find solutions by marking a Reply 'Accept as Solution' if it solves your problem.

Mysterious routing problem / interface determination

Hi,
I have a very very strange routing problem with XI.
A message is sent from R/3 to XI and then send via adapter to an external party. The routing is configured well. But sometimes I have the following problem:
A message is received by XI (from R/3). The receiver is determinated. Although an interface determination and receiver agreement is configured, the trace shows "no interface determination fpr party xyz and service abc found". The very strange thing is that finally the receiver interface DELINS.DELFOR01 with namespace urn:sap-com:document:sap:idoc:messages is set!!
Finally, the error message is "no receiver agreement found for "... DELINS.DELFOR01, urn:sap-com:document:sap:idoc:messages", which is reasonable because this receiver interface has never ever been configured!
Any idea why the interface determination cannot be found and nevertheless a completely wrong receiver interface is set?
This error occurs just sometimes for certain partners, but not always with all messages for these partners!
Help appreciated!
Christopher

Hi,
all routing objects are 100% correct. Particularly the receiver service has definitely no DELINS.DELFOR01 interface, but nevertheless the Integration Runtime tries to send the message to this interface. Another strange thing is that in the trace there is the warning "no interface determination for party xxx and service xxx found".
By the way: The Receiver Determination was configured to terminate message processing when no receiver can be found.
CHRIS

On the continuing saga of third party router problems......

I got an Apple TV which works great with my wireless Airport WDS, but then I was looking into any problems people could be having with it and ran into this:
http://discussions.apple.com/thread.jspa?threadID=901401&tstart=0
Check the third party router problems where Airports worked great.
Networking is ...networking, but you also get what you pay for.

Hi mgrant,
The information at the bottem of the article in in Keith_Beddoe's personal website may help. Link: Using your own router for Infinity
The MTU Size needs to be set as 1492
Cheers
jac_95 | BT.com Help Site | BT Service Status
Someone Solved Your Question?
Please let other members know by clicking on ’Mark as Accepted Solution’
Try a Search
See if someone in the community had the same problem and how they got it resolved.

E2000 + WAG160N routing problem?

Hi all,
I have a new E2000 router with address 192.168.0.1 connected to a WAG160N Modem router with address 192.168.1.1
and several computers at each router. All have DHCP activated and wifi active and working.
The cascading connection between both devices seems working well only in one direction.
All seems ok as I can access to internet from any computer. Also, computers connected to E2000 have accces
to computers on WAG160N modem BUT computers connected at modem do NOT have access to computer at router.
In fact from a computer connected to the E2000 I can configure the web interface of the E2000 and also the WAG160N
but from a computers connected at WAG160N I have access only to this interface but not to the E2000 interface.
I don't know if could be a routing problem. Any help will be appreciated.
Thanks in advance,
Marti

The E2000 is configured to do NAT and thus protects the LAN from the internet side. If it was easily accessible your WAG LAN would be easily accessible from the internet.
You want to set up the E2000 as simple access point:
Unplug the E2000 from the WAG160N and open the web interface of the E2000 from a computer wired to the E2000.
On the main setup page
1. change the internet connection type to Automatic/DHCP (in case you have changed it).
2. change the LAN IP address from 192.168.0.1 to 192.168.1.2.
3. Disable the DHCP server.
4. Save settings.
Unplug the computer.
Now wire one of the numbered LAN ports of the E2000 to the WAG160N. Don't use the internet port on the E2000.
That's the best setup you can do with your two routers... The E2000 is only used as simple access point and ethernet switch.

Route problem

Hi all, I am new to this forum and also new to Archlinux. I have been using SuSE for 4 years and learned how to use that gui. I never learned the grassroot of linux though. I completed the install on my TPad 600e without any problem at all. I am using a old orinoco gold that has been my standby forever. I have googled and searched this forum for several hours and tried all the suggestions I came across. My problem seems to be the same as many others have had. I had originally thought it was a route problem, but the output or netstat -nr is exactly the same as the output on my SuSE computer. I am not good with words, but let me try a description.
I cannot connect to my home lan at all. I have assigned a static ip and the output of iwconfig verifies that it is correct as I have assigned. When I try to ping my router the system returns the famous "Destination Host Unreachable" As mentioned I have tried to setup my default gateway and it is identical to the the output from my SuSE computer. When I try a dhcp setup and do a network restart the restart always fails. I have gone over and over my conf files looking for a fatfinger mistake but all looks exactly the way the examples I have searched up and I cannot see any typos. I would like to get this figured out for myself but I am out of clues on where to look and would appreciate new ideas.
It is as if there is a firewall in place, but this is a straight from the CD basic install to which I have installe the network section.
I really need to be pointed in a new direction.
David

ralvez wrote:Here ... my IP is 192.168.1.21 try to reach me
Gotcha!
PING 192.168.1.21 (192.168.1.21) 56(84) bytes of data.
64 bytes from 192.168.1.21: icmp_seq=1 ttl=64 time=5.21 ms
64 bytes from 192.168.1.21: icmp_seq=2 ttl=64 time=3.62 ms
64 bytes from 192.168.1.21: icmp_seq=3 ttl=64 time=7.20 ms
64 bytes from 192.168.1.21: icmp_seq=4 ttl=64 time=4.03 ms
64 bytes from 192.168.1.21: icmp_seq=5 ttl=64 time=5.38 ms
64 bytes from 192.168.1.21: icmp_seq=6 ttl=64 time=5.31 ms
64 bytes from 192.168.1.21: icmp_seq=7 ttl=64 time=5.33 ms
64 bytes from 192.168.1.21: icmp_seq=8 ttl=64 time=5.31 ms
64 bytes from 192.168.1.21: icmp_seq=9 ttl=64 time=4.83 ms
64 bytes from 192.168.1.21: icmp_seq=10 ttl=64 time=4.84 ms
64 bytes from 192.168.1.21: icmp_seq=11 ttl=64 time=4.12 ms
64 bytes from 192.168.1.21: icmp_seq=12 ttl=64 time=8.28 ms
64 bytes from 192.168.1.21: icmp_seq=13 ttl=64 time=5.25 ms
64 bytes from 192.168.1.21: icmp_seq=14 ttl=64 time=5.24 ms
64 bytes from 192.168.1.21: icmp_seq=15 ttl=64 time=4.21 ms
64 bytes from 192.168.1.21: icmp_seq=16 ttl=64 time=5.20 ms
64 bytes from 192.168.1.21: icmp_seq=17 ttl=64 time=4.19 ms
64 bytes from 192.168.1.21: icmp_seq=18 ttl=64 time=6.17 ms
--- 192.168.1.21 ping statistics ---
18 packets transmitted, 18 received, 0% packet loss, time 17096ms
rtt min/avg/max/mdev = 3.624/5.212/8.288/1.101 ms
OK - fun's over. Spotslayer, can you post the output of ifconfig and iwconfig? (and don't mind ralvez - hide anything you want )

Solaris 10 12/06 IP Routing problems

Hello,
I have setup a Solaris x86 12/06 with a dual port Intel PRO 1000 MT Server adapter and I have an ADSL NAT router connecting to the internet, I also have a PC running Windows XP Pro 2002 SP2 and a gigabit switch.
e1000g0: 10.16.0.1/16
e1000g1: 10.32.0.1/16
Router : 10.32.255.254/16
WinXP : 10.16.5.1/16 GW 10.16.0.1 DNS 10.32.255.254
WinXP and e1000g0 are physically connected to the gigabit switch.
e1000g1 is connected to the Router.
The Solaris server can connect to the internet without issue, however when I try to connect from my WinXP workstation I cannot, I can ping 10.32.0.1 from WinXP.
/etc/ipf/ipf.conf
pass in quick on lo0 all
pass out quick on lo0 all
pass in quick on e1000g0 all
pass out quick on e1000g0 all
pass in quick on e1000g1 all
pass out quick on e1000g1 all
/etc/ipf/pfil.pa
e1000g -1 0 pfil
Routing Table: IPv4
Destination Gateway Flags Ref Use Interface
default 10.32.255.254 UG 1 18
10.16.0.0 10.16.0.1 U 1 2 e1000g0
10.32.0.0 10.32.0.1 U 1 3 e1000g1
224.0.0.0 10.16.0.1 U 1 0 e1000g0
127.0.0.1 127.0.0.1 UH 1 40 lo0
As root I have done the following:
routeadm -e ipv4-routing
routeadm -e ipv4-forwarding
routeadm -u
svcadm enable ipfilter
{have also rebooted}
The ipfilter service is online and modinfo confirms ipf is loaded, ipf (IP Filter: v4.1.9)
Is there supposed to be a loaded module for pfil?
What do I need to do so traffic from 10.16.0.0/16 is routed via 10.32.0.0/16?
Any assistance greatly appreciated,
Kenny.

Hello,
I have setup a Solaris x86 12/06 with a dual port
Intel PRO 1000 MT Server adapter and I have an ADSL
NAT router connecting to the internet, I also have a
PC running Windows XP Pro 2002 SP2 and a gigabit
switch.
e1000g0: 10.16.0.1/16
e1000g1: 10.32.0.1/16
Router : 10.32.255.254/16
WinXP : 10.16.5.1/16 GW 10.16.0.1 DNS 10.32.255.254Does your ADSL router have a route for 10.16.0.0/16? Unless it knows to forward it to the Solaris machine, there's no way for return traffic to get back.
What do I need to do so traffic from 10.16.0.0/16 is
routed via 10.32.0.0/16?For all the routing devices to know that. How is the ADSL router configured?
Darren

WebLogic 10.3.2.0 (11gR1) on Solaris 10 problems with jdbc

I have Solaris 10 10/09 running on a SPARC machine.
I install WebLogic 11gR1, use development mode (using the SUN 1.6 jvm) and create a JDBC connection to DB2 on another machine using Oracle's XA DB2 driver. The connection test is successful. A restart of WebLogic returns everything is good. I change the connection pool max capacity to 50 (up from the default of 15) in the web interface and save the settings, everything is fine. Then I shutdown WebLogic using the appropriate command and re-start it... only to find that the jdbc connection has failed with the following error:
<Feb 22, 2010 11:02:31 AM EST> <Error> <Deployer> <BEA-149205> <Failed to initialize the application 'jdbc/DB2DataSource' due to error weblogic.application.ModuleException: .
weblogic.application.ModuleException:
at weblogic.jdbc.module.JDBCModule.prepare(JDBCModule.java:290)
at weblogic.application.internal.flow.ModuleListenerInvoker.prepare(ModuleListenerInvoker.java:199)
at weblogic.application.internal.flow.DeploymentCallbackFlow$1.next(DeploymentCallbackFlow.java:391)
at weblogic.application.utils.StateMachineDriver.nextState(StateMachineDriver.java:83)
at weblogic.application.internal.flow.DeploymentCallbackFlow.prepare(DeploymentCallbackFlow.java:59)
Truncated. see log file for complete stacktrace
Caused By: sun.security.pkcs11.wrapper.PKCS11Exception: CKR_DEVICE_ERROR
at sun.security.pkcs11.wrapper.PKCS11.C_Verify(Native Method)
at sun.security.pkcs11.P11Signature.engineVerify(P11Signature.java:529)
at java.security.Signature$Delegate.engineVerify(Signature.java:1140)
at java.security.Signature.verify(Signature.java:592)
at sun.security.x509.X509CertImpl.verify(X509CertImpl.java:441)
Truncated. see log file for complete stacktrace
Nothing else is changed or deployed in WebLogic.
Switching back to a thread pool max of 15 doesn't work, and throws this error:
<Feb 22, 2010 11:09:41 AM EST> <Warning> <Deployer> <BEA-149004> <Failures were detected while initiating redeploy task for application 'jdbc/DB2DataSource'.>
<Feb 22, 2010 11:09:41 AM EST> <Warning> <Deployer> <BEA-149078> <Stack trace for message 149004
weblogic.application.ModuleException:
at weblogic.jdbc.module.JDBCModule.prepare(JDBCModule.java:290)
at weblogic.application.internal.flow.ModuleListenerInvoker.prepare(ModuleListenerInvoker.java:199)
at weblogic.application.internal.flow.DeploymentCallbackFlow$1.next(DeploymentCallbackFlow.java:391)
at weblogic.application.utils.StateMachineDriver.nextState(StateMachineDriver.java:83)
at weblogic.application.internal.flow.DeploymentCallbackFlow.prepare(DeploymentCallbackFlow.java:59)
Truncated. see log file for complete stacktrace
Caused By: java.lang.NoClassDefFoundError: Could not initialize class javax.crypto.SunJCE_b
at javax.crypto.SecretKeyFactory.a(DashoA13*..)
at javax.crypto.SecretKeyFactory.<init>(DashoA13*..)
at javax.crypto.SecretKeyFactory.getInstance(DashoA13*..)
at weblogic.jdbc.db2base.PropertyEncrypter.<init>(Unknown Source)
at weblogic.jdbc.db2base.BaseLicenseUtility.readBulkLoadRowLimit(Unknown Source)
Truncated. see log file for complete stacktrace
<Feb 22, 2010 11:09:42 AM EST> <Error> <Console> <BEA-240003> <Console encountered the following error weblogic.application.ModuleException:
at weblogic.jdbc.module.JDBCModule.prepare(JDBCModule.java:290)
at weblogic.application.internal.flow.ModuleListenerInvoker.prepare(ModuleListenerInvoker.java:199)
at weblogic.application.internal.flow.DeploymentCallbackFlow$1.next(DeploymentCallbackFlow.java:391)
Modifying the connection in the xml to lower the max pool size back to the default value of 15 doesn't net any progress.
Removing and re-creating the connection doesn't fix the problem. Creating a new WebLogic domain doesn't fix the problem. The only thing that fixes the problem (allows the jdbc connection to be re-created and run successfully) is to blow away the entire WebLogic install, reinstall and re-create the domain. Occasionally even this doesn't help.
This is repeatable like clockwork.
Moving the pool max up to 30 didn't throw the error, but moving to 50 did.
Edited by: second infinity on Feb 22, 2010 2:24 PM

Hi. I've never seen anything like this, and it seems to be something which
the JDBC module is going to be an innocent victim of, rather than a
contributor to... Your best course is to open an official support case.
Joe

Solaris starting problem

Hello Guys,
I have encounter the problem that is after installation of solaris 10 on dell poweredge1000. I am rebooting this but after rebooting solaris is not started only Grub is coming on display so how can i restart the solaris10?
Edited by: 953912 on Aug 21, 2012 5:58 AM

hi will you please edit the grub with -v option
in grub
select second line and put -v
kernel /platform/i86pc/muliboot -v
provide the o/p of this
validate the o/p

ASA Routing problems?

Hi there,
i have a problem with Routing on ASA 5505.
Here is a brief explanation of the topology:
DC Upstream IP: 77.246.165.141/30
ASA 5505 Upstream to DC IP: 77.246.165.142/30
Interface outside.
There is a Cisco Switch connected to one of ASA Ethernet ports, forming Public/DMZ VLAN.
ASA 5505 Public VLAN interface ip: 31.24.36.1/26
Cisco 3750 Public VLAN interface ip: 31.24.36.62, default gateway: 31.24.36.1, IP Routing enabled on Switch.
From the Cisco Switch I can access the Internet with source ip: 31.24.36.62.
Now I have asked from DC additional subnet: 31.24.36.192/26 and they have it routed correctly towards the ASA Outside interface ip: 77.246.165.142.
I have created additional Public2 VLAN on the Switch with IP address of: 31.24.36.193/26.
On the ASA 5505 i added the route to this Public2 VLAN:
#route public 31.24.36.192 255.255.255.192 31.24.36.62 1
Now the problem is that from the Switch with Source IP: 31.24.36.193 i can ping ASA 5505 Public VLAN IP: 31.24.36.1 so the routing between subnets 31.24.36.0/26 and 31.24.36.192/26 is working OK on both the ASA 5505 and the Switch.
But I can't access the Internet from the Switch with Source IP: 31.24.36.193.

Thanks for the replies.
I am running:
Cisco Adaptive Security Appliance Software Version 8.2(2)
As for NAT configuration, there is NAT configured between the Outside Interface IP and the Internal Subnet:
global (outside) 1 interface
nat (inside) 1 192.168.X.0 255.255.255.0
nat (inside) 1 0.0.0.0 0.0.0.0
also there is NAT exemption configured because of the Site-to-Site IPSec VPN that we have:
nat (inside) 0 access-list inside_nat0_outbound1
access-list inside_nat0_outbound1 extended permit ip any 192.168.X.0 255.255.255.0
access-list inside_nat0_outbound1 extended permit ip 192.168.X.0 255.255.255.0 OtherSiteLAN 255.255.255.0
access-list inside_nat0_outbound1 extended permit ip any 192.168.X.240 255.255.255.248
access-list inside_nat0_outbound1 extended permit ip 192.168.X.0 255.255.255.128 OtherSiteLAN 255.255.255.0
I don't have any ACL configured on the Public interface in any direction.
Here is the configuration on the Switch regarding this scenario:
interface FastEthernet2/0/X
description Access Port for Public Subnet(31.24.32.0/26) to ASA
switchport access vlan 500
switchport mode access
interface Vlan500
description Public VLAN 1
ip address 31.24.36.62 255.255.255.192
interface Vlan510
description Public VLAN 2
ip address 31.24.36.193 255.255.255.192
ip route 0.0.0.0 0.0.0.0 31.24.36.1
Here is the output when pinging the ASA Public Interface IP with source IP address of: 31.24.36.193(VLAN 510)
SWITCH#ping 31.24.36.1 source vlan 510
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 31.24.36.1, timeout is 2 seconds:
Packet sent with a source address of 31.24.36.193
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/4/9 ms
And here is when I try to ping some Internet host:
SWITCH#ping 8.8.8.8 source vlan 510
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 8.8.8.8, timeout is 2 seconds:
Packet sent with a source address of 31.24.36.193
Success rate is 0 percent (0/5)

S2S VPN - ASA 5505 to ASA 5540 - Routing Problems

I'm a software developer (no doubt the issue) trying to setup my remote office (5505) to the main office (5540). No problem getting the S2S VPN up, but I definitely have problems with the routing. Using tracert, it shows it going into the remote network for a couple of hops, but then timing out. Packet tracer shows everything is fine. Using my client VPN credentials to the remote network, same on the return path...does a few hops, then gets lost. I've stripped down the config to the basics and ensured it isn't security settings on both ends, but still doesn't work. I've spent A LOT of hours trying to get this to work, so thanks for any assistance!
Current running config:
ASA Version 8.2(5)
hostname asa15
enable password XXXXX encrypted
passwd XXXXX encrypted
names
name 10.0.0.0 remote-network
interface Ethernet0/0
switchport access vlan 2
interface Ethernet0/1
interface Ethernet0/2
interface Ethernet0/3
interface Ethernet0/4
interface Ethernet0/5
interface Ethernet0/6
interface Ethernet0/7
interface Vlan1
nameif inside
security-level 100
ip address 172.16.5.1 255.255.255.0
interface Vlan2
nameif outside
security-level 0
ip address dhcp setroute
ftp mode passive
access-list outside_1_cryptomap extended permit ip 172.16.5.0 255.255.255.0 remote-network 255.0.0.0
access-list inside_nat0_outbound extended permit ip 172.16.5.0 255.255.255.0 remote-network 255.0.0.0
access-list inside_access_in extended permit ip 172.16.5.0 255.255.255.0 remote-network 255.0.0.0
access-list inside_nat0_outbound_1 extended permit ip 172.16.5.0 255.255.255.0 remote-network 255.0.0.0
pager lines 24
logging enable
logging asdm informational
mtu outside 1500
mtu inside 1500
icmp unreachable rate-limit 1 burst-size 1
asdm location remote-network 255.0.0.0 inside
no asdm history enable
arp timeout 14400
global (outside) 1 interface
nat (inside) 0 access-list inside_nat0_outbound_1
nat (inside) 1 0.0.0.0 0.0.0.0
access-group inside_access_in in interface inside
route outside 0.0.0.0 0.0.0.0 99.X.X.7 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
timeout floating-conn 0:00:00
dynamic-access-policy-record DfltAccessPolicy
http server enable
http 172.16.5.0 255.255.255.0 inside
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
crypto ipsec transform-set ESP-AES-128-SHA esp-aes esp-sha-hmac
crypto ipsec transform-set ESP-AES-128-MD5 esp-aes esp-md5-hmac
crypto ipsec transform-set ESP-AES-192-SHA esp-aes-192 esp-sha-hmac
crypto ipsec transform-set ESP-AES-192-MD5 esp-aes-192 esp-md5-hmac
crypto ipsec transform-set ESP-AES-256-SHA esp-aes-256 esp-sha-hmac
crypto ipsec transform-set ESP-AES-256-MD5 esp-aes-256 esp-md5-hmac
crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
crypto ipsec transform-set ESP-3DES-MD5 esp-3des esp-md5-hmac
crypto ipsec transform-set ESP-DES-SHA esp-des esp-sha-hmac
crypto ipsec transform-set ESP-DES-MD5 esp-des esp-md5-hmac
crypto ipsec security-association lifetime seconds 3600
crypto ipsec security-association lifetime kilobytes 4608000
crypto map outside_map 1 match address outside_1_cryptomap
crypto map outside_map 1 set peer 99.X.X.7
crypto map outside_map 1 set transform-set ESP-AES-128-SHA
crypto map outside_map 1 set reverse-route
crypto map outside_map interface outside
crypto isakmp enable outside
crypto isakmp policy 10
authentication pre-share
encryption aes
hash sha
group 2
lifetime 28800
vpn-addr-assign local reuse-delay 5
telnet timeout 5
ssh timeout 5
console timeout 0
dhcpd auto_config outside
dhcpd address 172.16.5.100-172.16.5.130 inside
dhcpd auto_config outside interface inside
dhcpd enable inside
threat-detection basic-threat
threat-detection statistics access-list
threat-detection statistics tcp-intercept rate-interval 30 burst-rate 400 average-rate 200
webvpn
tunnel-group 99.X.X.7 type ipsec-l2l
tunnel-group 99.X.X.7 ipsec-attributes
pre-shared-key XXXXX
class-map inspection_default
match default-inspection-traffic
policy-map type inspect dns preset_dns_map
parameters
message-length maximum client auto
message-length maximum 512
policy-map global_policy
class inspection_default
inspect dns preset_dns_map
inspect ftp
inspect h323 h225
inspect h323 ras
inspect rsh
inspect rtsp
inspect esmtp
inspect sqlnet
inspect skinny
inspect sunrpc
inspect xdmcp
inspect sip
inspect netbios
inspect tftp
inspect ip-options
service-policy global_policy global
prompt hostname context
no call-home reporting anonymous
: end

just out of curiosity, why do you have
route outside 0.0.0.0 0.0.0.0 99.X.X.7 1
You already set your default route through DHCP setroute under the interface. this could be the issue.
If your VPN config is ok and you are seeing encaps/decaps, it is likely a routing issue.
Does the remote device have the correct default gateway?
May be a Natting issue if you have a one-way tunnel (usually send but no receive)...
Patrick

Basic Questions on ActionTec MI424-WR Router - problems with poor download/upload speed

First, I will get to the point and ask my questions, then will explain what's happening - I'm interested in hearing whether the right actions are being taken to solve my problem.
1) After perusing the forums, I see frequent reference to the "Rev" version of the ActionTec MI424-WR Router. How do you find the Rev version? I have logged into the Router and in the "System Monitoring" icon, the Router Status lists my Hardware version as 'A'. Does this mean I have Rev 'A'?
2) What is Verizon handing out these days for Routers? Mine is being replaced, and I am wondering what to expect. I have Verizon FIOS Phone, TV, and Internet service, and have the 25/25 Internet service. Will they give me another MI424-WR? If so, what Rev level are they likely to give me?
Here's why my router is being replaced - opinions/comments/advice welcomed.
For the past year or two, I've consistently measured (via speedtest.speakeasy.net) about 30Mbs download, and around 22-25 Upload. Lately, I noticed that my downloads were quite slow, so I tested my speed at the above website, which I had not done in many months. I measured only about 2-3 Download and 1-2 up. Note all of what I am discussing hear takes place with hard-wired ethernet, NOT wireless.
I tried testing from multiple computers, running XP, Vista, and Windows 7. All getting consistently similar poor speeds. I verified my account still is supposed to have 25/25/ service, which I verified online.
Tried rebooting the router, no change. Then tried hard reset (pushing in the recessed button, holding it for about 20-30 seconds. After it reconnected to the Internet, I tested speed again. No change.
Interestingly, I tested wireless speed on the laptop I have. Speed is MUCH better, around 15 down, and 10-12 up.
I tried the speed optimization tool on two of my PCs, it made no improvement. Finally, got into an online chat with a Verizon Tech. He did some tests on the line, we repeated some of the things I already tried, and then he asked how old my Router was...I am pretty sure it is the original one I received when I first signed up for FIOS, around 5-6 years ago, which is one of the reasons I asked how to tell which rev level I had. So the tech concluded the problem was probably my Router.
I TEND to agree, especially because I recently had an "anomaly" on my network. My son complained one day that Internet was down. When I got home, I found out my NetGear Gigbit switch was dead, and two of my hard-wired ethernet network printers could no longer talk to the network. I replaced the switch, so now I am thinking perhaps the Router was damaged somehow. I have no idea what the cause of this anomaly was - everything that connects to my network was plugged into Triplite ISOBAR surge protectors, but that only protects AC power.
I would think a hardware failure would completely kill the ethernet portion of the router, not simply reduce speed, but I could be wrong. Anyone been through something similar to this before? I expect to receive the new Router next Thursday, so hopefully I should know by then, but still - what should the next steps be if the new router does not fix the problem?
Thanks for any comments, insight or shared experiences you might be willing to share...
Solved!
Go to Solution.

This is embarrassing.
Smith6612, you are absolutely correct, and you nailed it!
When all this mess started, I checked my Verizon account to make sure I was signed up for 25/25 Internet. I was.
I don't know what has happened, but after reading Smith6612's response, I went back to recheck my account. I was set up for 15/5! So, the speedtest measurements I have been getting the last couple of days are exactly what I should be getting. Two possibilities:
1) My Triple-Play bundle must have expired in the past two weeks by coincidence.
2) The Verizon tech may have changed my account profile when I worked with them online last week, although this was never discussed.
At any rate, Smith6612 wins the prize. It certainly explains the download/upload speeds I am getting. I have logged into Verizon and signed up for a new bundle. According to their website, my new profile should take effect Tuesday 1/10, so after that point, I should be measuring 25/25 again.
Thanks to all who responded to this thread. I will update this thread to confirm after Tuesday. I get nervous whenever I have to change anything with Verizon - although everything has worked fine for the past few years, we have so many services with them - Cell Phone, TV, Internet, and Home Phone, that I worry something will go wrong with the billing, but we'll see.

Solaris 10 routing problems

Similar Messages

Maybe you are looking for