Hello all. I am facing a strange problem here and would like to see if any of you can shed some light on it. It goes like this.
I have a firewall, which ip is 192.168.0.20, and I have a sun fire v240, on the same net as this firewall, which ip is 192.168.0.12. I can ping any other node on the same net without a problem, but yet I cannot ping the firewall.
Here's the output of ifconfig -a
root@atmdes # ifconfig -a
lo0: flags=1000849<UP,LOOPBACK,RUNNING,MULTICAST,IPv4> mtu 8232 index 1
inet 127.0.0.1 netmask ff000000
bge0: flags=1000843<UP,BROADCAST,RUNNING,MULTICAST,IPv4> mtu 1500 index 2
inet 192.168.0.206 netmask ffffff00 broadcast 192.168.0.255
ether 0:3:ba:1a:b6:4b
bge0:1: flags=1000843<UP,BROADCAST,RUNNING,MULTICAST,IPv4> mtu 1500 index 2
inet 192.168.0.12 netmask ffffff00 broadcast 192.168.0.255
root@atmdes #
Here's the output of traceroute 192.168.0.20
root@atmdes #
root@atmdes # traceroute 192.168.0.20
traceroute: Warning: Multiple interfaces found; using 192.168.0.206 @ bge0
traceroute to 192.168.0.20 (192.168.0.20), 30 hops max, 40 byte packets
1 * * *
2 * * *
3 * * *
4 *^Croot@atmdes #
root@atmdes #
As you can see, it times out..
Here's the output of netstat -nr
root@atmdes #
root@atmdes # netstat -nr
Routing Table: IPv4
Destination Gateway Flags Ref Use Interface
-------------------- -------------------- ----- ----- ------ ---------
10.0.98.0 192.168.0.6 UG 1 4
192.168.0.0 192.168.0.206 U 1 67480 bge0
192.168.0.0 192.168.0.12 U 1 0 bge0:1
224.0.0.0 192.168.0.206 U 1 0 bge0
default 192.168.0.9 UG 1 5
127.0.0.1 127.0.0.1 UH 2874258604 lo0
root@atmdes #
Strange thing is, I have laying around here an alpha server, with Tru-64 V5.1, which is on the same net, with different ip, which can PING the firewall !!
Heres the output of iconfig -a on the Tru-64 server..
#
# ifconfig -a
ee0: flags=c63<UP,BROADCAST,NOTRAILERS,RUNNING,MULTICAST,SIMPLEX>
inet 192.168.0.4 netmask ffffff00 broadcast 192.168.0.255 ipmtu 1500
ee1: flags=c63<UP,BROADCAST,NOTRAILERS,RUNNING,MULTICAST,SIMPLEX>
inet 172.22.27.35 netmask ffffff00 broadcast 172.22.27.255 ipmtu 1500
lo0: flags=100c89<UP,LOOPBACK,NOARP,MULTICAST,SIMPLEX,NOCHECKSUM>
inet 127.0.0.1 netmask ff000000 ipmtu 4096
sl0: flags=10<POINTOPOINT>
tun0: flags=80<NOARP>
tun1: flags=80<NOARP>
#
and here's the output of netstat -nr
#
# netstat -nr
Routing tables
Destination Gateway Flags Refs Use Interface
Route Tree for Protocol Family 26:
Route Tree for Protocol Family 2:
default 192.168.0.9 UGS 29 289344128 ee0
127.0.0.1 127.0.0.1 UHL 13 2437095 lo0
172.22.27/24 172.22.27.35 U 1 6758246 ee1
172.22.27.35 172.22.27.35 UHL 10 18049767 ee1
192.168.0/24 192.168.0.4 U 2 613580192 ee0
192.168.0.4 192.168.0.4 UHL 2 452 ee0
#
So, my question is: Can anyone give me a clue as of what can be happening here ? why I cannot ping the firewall from my solaris server but can from the alpha one ?
The security guy is sitting besides me here and we have added both servers ti the firewalls list, so it can be seen.
If anyone can shed some light on this, could be very appreciated.
Thanks to all!