topic Re: networking question in Operating System - HP-UX

networking question

Chris Fadrowski — Mon, 27 Sep 2004 14:56:46 GMT

I have a new itanium server that i am setting up. It's running 11.23 HPUX.. My problem is, i can't get outside of our network. I can ping anything inside but not outside like www.yahoo.com by name or IP.. i checked my /etc/hosts which includes

192.168.x.x gw_host

and my nsswitch.conf which includes

hosts: files, DNS

i should be getting out.. what am i missing? It's not the firewall, i have access for that.

Re: networking question

Geoff Wild — Mon, 27 Sep 2004 14:59:33 GMT

What does traceroute reveal?

How about? netstat -rn

What is in? /etc/resolv.conf

Rgds...Geoff

Re: networking question

Chris Fadrowski — Mon, 27 Sep 2004 15:05:10 GMT

during a traceroute, it never leaves the the local server (itself). i get this;

traceroute: Warning: www.yahoo.com has multiple addresses; using 216.109.118.73
traceroute to www.yahoo.com (216.109.118.73), 30 hops max, 40 byte packets
1 hostname (192.168.3.21) 0.067 ms !N 0.020 ms !N 0.019 ms !N

Netstat -m is not supported in 11.23 (reading from a core file is no longer supported) is the message i get.

and /etc/rsolv.conf is correct with my DNS and name servers.

my netconf file is also the same as the other unix servers that can get out.

Re: networking question

Scot Bean — Mon, 27 Sep 2004 15:05:17 GMT

Check your browser settings, especially for proxy, if needed at your site.

Re: networking question

Chris Fadrowski — Mon, 27 Sep 2004 15:06:30 GMT

i won't be using a browser on this server, however, i punched a hole in my firewall for this server so i know it should be bypassing the proxy.

Re: networking question

Sridhar Bhaskarla — Mon, 27 Sep 2004 15:08:18 GMT

Hi Chris,

Looks like your default gateway is not setup on the system as it is trying to use your local interface.

Try 'netstat -rn' (it's "r" and "n") and you should see an entry with 'default' string. If you don't have it then add it using the command

route add default gw_host 1

and then try.

Adjust your netconf file with the ROUTE entries. Examples are given in there.

-Sri

Re: networking question

Todd McDaniel_1 — Mon, 27 Sep 2004 15:08:41 GMT

What does your /etc/rc.config.d/netconf say?

Do you have a gateway setup with route hop set at 1 or with your HOST as the gateway and hop set to 0?

INTERFACE_NAME[0]=lan0
IP_ADDRESS[0]=132.201.xx.xx
SUBNET_MASK[0]=255.255.255.224
BROADCAST_ADDRESS[0]=""
INTERFACE_STATE[0]=""
DHCP_ENABLE[0]=0

ROUTE_GATEWAY[0]=132.201.yy.yy
ROUTE_COUNT[0]=1
ROUTE_DESTINATION[0]=default

Re: networking question

Geoff Wild — Mon, 27 Sep 2004 15:10:47 GMT

actually - it's netstat -rn ( r n )

Are you running ipfilter on the 11.23 server?

Can you actually get to you firewall?

Rgds...Geoff

Re: networking question

Chris Fadrowski — Mon, 27 Sep 2004 15:21:16 GMT

netconf file

INTERFACE_NAME[0]=lan0
IP_ADDRESS[0]=192.168.3.21
SUBNET_MASK[0]=255.255.255.0
BROADCAST_ADDRESS[0]=192.168.255.255
INTERFACE_STATE[0]=""
DHCP_ENABLE[0]=0

ROUTE_DESTINATION[0]=default
ROUTE_MASK[0]=""
ROUTE_GATEWAY[0]=192.168.1.1
ROUTE_COUNT[0]=1
ROUTE_ARGS[0]=""

it does look like it can't find the gateway after doing netstat -rn.. it was looking to 127.0.0.1

i did the route add and now everything works. I just don't recall having to do this in the past. I would config the netconf file and it would work. thanks to all ..

Re: networking question

Steven E. Protter — Mon, 27 Sep 2004 16:15:25 GMT

Chris that default gateway in your netconf file must be reachable.

You have to be able to ping it in order for it to work and have that NIC be the first place traceroutes and other internet traffic go.

SEP

Re: networking question

rick jones — Mon, 27 Sep 2004 19:15:59 GMT

if your router will not respond to ICMP echo requests (pings), then you have to disable dead gateway detection via ndd - ip_ire_gw_probe to 0.

And based on your 192.168.X.X stuff, I presume your gateway is also a NAT.

Re: networking question

Todd McDaniel_1 — Wed, 29 Sep 2004 10:58:55 GMT

Chris,

Correct me if Im wrong isnt your gateway address wrong?

INTERFACE_NAME[0]=lan0
IP_ADDRESS[0]=192.168.3.21
SUBNET_MASK[0]=255.255.255.0
BROADCAST_ADDRESS[0]=192.168.255.255
INTERFACE_STATE[0]=""
DHCP_ENABLE[0]=0

ROUTE_GATEWAY[0]=192.168.1.1

Shouldnt it be 192.168."3".1, where there is a 3 instead of a 1???

Re: networking question

Todd McDaniel_1 — Wed, 29 Sep 2004 10:59:57 GMT

sorry didnt see you got your solution...

No points on my last post or this one.

Re: networking question

Chris Fadrowski — Wed, 29 Sep 2004 12:05:37 GMT

actually the gateway is not wrong, we are using class B subnet. with 172 addressing.