06-06-2008 01:36 AM - edited 03-03-2019 10:15 PM
Good Morning. I hope someone can help me because I am at my wits ends.
On one of my WAN links I am experiencing a most unusual problem.
The campus is served by a Cisco router and a T1 that accesses the internet through my NOC just fine. However when they try to access my DMZ, they get timeouts. When doing ping testing, I find that the end users in that bldg can ping one particular IP on my ME 6524 (which was only installed 3 weeks ago) and will get exactly 59-60 successful replies followed by exactly 11 dropped replies, then it repeats. Meanwhile the entire time they are pinging www.yahoo.com cleanly.
Now both the connections to our DMZ and to the internet for this location route through our ME6524... it is just that there are two different IPs for the two different routes.
To make matters more interesting, when I ping the "problem" address from the inside interface of the router at the location in question I have no problems. As soon as I hook up something to the inside interface and then try the same ping test from that device (I used a laptop and crossover cable).. I get the 60 good pings replies followed by 11 drops.
I tried replacing the router. I also rebooted all equipment along the path.
I just don't know what else to do.
I shouldn't see a pattern to the dropouts.
Thank You,
Joe
06-06-2008 06:10 AM
Have you checked for an IP address conflict for the "problem" address?
From the laptop, you could check your ARP table for the MAC address of the IP when it works, and check it again when it doesn't work. If the MAC changes when it doesn't work, then there's a conflict somewhere.
06-06-2008 10:19 PM
Hi,
There might be speed/duplex mismatch. Please recheck and fix the speed/duplex settings on both ends.
Regards,
06-07-2008 01:45 PM
Use the L2 traceroute utility, it will even show you the duplex/speed of the layer 2 path.
Regards
Farrukh
06-08-2008 08:46 AM
I have just skimed thru ur post, so apologies if I am out of synch.
If the drop rate is consistent, there could be protection somewhere in the path. Watch out for QOS policing dropping ICMP packets.
HTH
Sam
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: