Do you mean that you have 2 seperate offices (different networks)? Have you checked if you are having DNS issues in the 1st office? I would changed the local DNS on a workstation in the 1st office using an external DNS (ISP or 126.96.36.199) and see if you are able to browse to that website.
Dont think its system MTU issue, because i have GRE tunnel over Point to pint link between two offices, and i can open website on same XP machine, when i route via my GRE tunnel and use second office internet. but dont work in first office with its own WAN link.
Now here is interesting thing, when i route this website via my second office , i pass through same PIX :) and it works.
so now i think its my router playing some thing.
any idea why router behaving like this?
attached diagram shows Green path is good.
red path is bad, jsut for clarification of my setup.
Since the Office 1 looks like a router you can experiement with the MSS on there, on your inbound FA or outbound SER (for Office 1) try ip tcp-adjust mss 1200. This will allow you to test the MTU without having to mess with the windows registry.
I know you said it doesn't look like a MTU problem but you also said that you can telnet to port 80 of the web site without any issues at all. That, right there clears any ACL, routing issues, or established connections. Honestly it sounds like a MTU problem to me.
Is your connection from the PIX to Office 1 and IPSEC tunnel?
Question We run asr9001 with XR 6.1.3, and we have a very long delay to
login w/ SSH 1 or 2 to the device compare to IOS device. After
investigation, the there is 1s delay between the client KEXDH_INIT and
the server (XR) KEXDH_REPLY. After debug ssh serv...
Introduction The purpose of this document is to demonstrate the Open
Shortest Path First (OSPF) behavior when the V-bit (Virtual-link bit) is
present in a non-backbone area. The V-bit is signaled in Type-1 LSA only
if the router is the endpoint of one or ...
Hi, I am seeing quite a few issues with patch install and wanted to
share my experience and workaround to this. Login to admin via CLI, then
access root with the “shell” command Issue “df –h” and you’ll probably
see the following directory full or nearly ...