Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Can't access shared drive.....

I am in the process of changing our network.....

So far I have put an ASA 5510 in place.  The ASA is set to a ppoe connection and dchp's ip to all pc in the office.  That all works fine.....The problem is connecting and staying connected to the shared drive on PC#1

PC#1 now cannot be accessed by any computer. 

However I can restart PC#1 and every office pc will be able to access it and its file.....but within an hour or so no one will be able to connect to PC#1.

Anyone have any ideas......The only change that has taken place is the AS5510....so is there some setting on that that is causing the hiccup...

Thanks!!!

17 REPLIES
Cisco Employee

Re: Can't access shared drive.....

This could be a connection timeout issue.

I would suggest looking into syslog with the PC#1 ip address to see if there is a timeout before you start seeing the issue.

I hope it helps.

PK

New Member

Re: Can't access shared drive.....

Good idea.....do I need to enable my logs to show ip and timeouts?

It seems mainly the only thing I see now in my logs is built dynamic TCP translation from to or  Built outsidet TCP connection from and to or Teardown dynamic UDP translation from and to....

Then there is also some deny inbound udp from and to stuff...

Cisco Employee

Re: Can't access shared drive.....

OK, the denies for the UDP could relate to NFS (file sharing). Check if they relate to your hosts and why they are denied.

PK

New Member

Re: Can't access shared drive.....

It appears PC#2 (my pc) can ping the PC#1 (pc with shared drive) but PC#1 can't ping PC#2...

let me locate the udp denial stuff....

2Oct 26 201011:32:24106006192.168.10.1451861192.168.1.19161Deny inbound UDP from 192.168.10.14/51861 to 192.168.1.19/161 on interface inside

Cisco Employee

Re: Can't access shared drive.....

Hello Toddy,

Where is PC1 located and what is its secuirty level, where is PC2 located and what is its security level. Is it just NFS that is not working? You mention that it works but then it stops is that correct?

Mike

Mike
New Member

Re: Can't access shared drive.....

Hey Mike -

PC#1 and PC#2 are both connected to the Inside interface of the ASA 5510....so both security levels would be 100....

PC#1 shares 1 folder that contains files that all staff use.......However that file is not accessible.  PC#1 can access the internet and can print to the network printer.

yes if i restart pc#1 pc#2 will be able to access the shared folder......however after some timeframe that access will end......Lastnight it all worked for hours, now this morning it only worked for 10 minutes.......

It seems to be either a time thing or a number of uses that connect at once......or something completely else.....

Thanks!

Cisco Employee

Re: Can't access shared drive.....

The traffic hitting the inside is classified as inbound.

What is the inside security level? And what is the security level of the destination? Pease do a sanity check on them.

PK

New Member

Re: Can't access shared drive.....

pkampana wrote:

The traffic hitting the inside is classified as inbound.

What is the inside security level? And what is the security level of the destination? Pease do a sanity check on them.

PK

inside security level is 100.

security level of the desination - 100

Because both pc's are on the inside network......

not sure how or what the sanity check is......sorry I'm a cisco(firewall) newbie....

Thanks for your help!

Cisco Employee

Re: Can't access shared drive.....

Hello Toddy

Are they on the same subnet? Or different subnets? Let me know.

Mike

Mike
New Member

Re: Can't access shared drive.....

Yes they are both on the same subnet...

Cisco Employee

Re: Can't access shared drive.....

Hello Toddy,

Well in that case the ASA is not going to participate on the communication between these two host. The only thing that can be messing this up would be a proxy arp.

When you try to ping the host 2 where the Shared drive is, does it work? If not can you do an arp -a on the cmd of your PC, grab the MAC address and compare it to the PC 2 MAC address?

Let me know.

Mike

Mike
New Member

Re: Can't access shared drive.....

pc1 192.168.10.18 - has the shared drive

pc2 192.168.10.12 - my pc

I cand ping pc1 from pc2  (100% success)

I can not ping pc2 from pc1 (0% success)

Gold

Re: Can't access shared drive.....

Hello,

As Mike suggested above, check the ARP tables on both PC1 and and PC2 after you ping both ways. Make sure that the MAC addresses are correct on both. It sounds like the MAC address learned for PC2 in PC1's ARP table might be incorrect.

Also, double check any host-based firewalls on these PCs if you haven't already.

Hope that helps.

-Mike

New Member

Re: Can't access shared drive.....

Oddly enough for the last couple days everything was good.....now within the last 2 hours it has not been good.....I have had to restart pc-1 a couple times to be able to access the shared drive....

SO I think you are right that the mac address are staying the same.....

It appears to that PC-1 (which has the shared drive)  and the other PC in the office are loosing/changing their mac addresses......I honestly think it is PC-1 that is making the change.  IF I restart PC-1 all is good.....but for whatever reason it seems to randomly switch....

What can I do so it does not do this???  And what could cause this?

Thanks.

Cisco Employee

Re: Can't access shared drive.....

Hello Toddy,

When the connection is not working from your computer please do a arp -a from the command prompt, check the MAC address of the computer that has the shared and find it on the network.

This issues are caused 99% of the times for duplicate IP's on the network, the rest 1% correspond to any other device doing proxy arp.

Hope it helps.

Mike.

Mike
Cisco Employee

Re: Can't access shared drive.....

like someone said above for 2-pcs in same subnet FW does not come into play and the only thing causing the trouble could be ASA proxying for other PC, who so ever respond first (pc-2 or ASA) to the query of PC-1 will get its arp updated on PC-1, that is why it may be intermittent

Can you disable sysopt noproxyarp interface inside ?

Also paste the snippet of show run static here

New Member

Re: Can't access shared drive.....

Doing an arp -a on my pc(pc-2) that cannot access the shared drive on pc-1 I see....

ip ------192.168.10.18----------physical address -------00-13-72-84-a2-5e-------dynamic

NOW on pc-1 I see the following info...

ip address - 192.168.10.18

physical address - 00-13-72-84-A2-5E

I can ping pc-1 from pc-2.

BUT cannot access the pc1 from pc2.....I see the windows cannot access \\server

IF/When I restart pc-1 everything works.....I can access the shared drive.   And after the restart ip address and physical address on pc-1 are the same....and pc-2 shows teh same after the arp -a command....

1004
Views
0
Helpful
17
Replies