[Personal Alpha] No IP access to Host but ping (again)

[Didier DTL Morandi]

This is from the system which has the bug
=========================================
System> $ ifconfig -a
LO0: flags=100c89
inet 127.0.0.1 netmask ff000000 ipmtu 4096

SE0: flags=c43
*inet 192.168.1.103 netmask ffffff00 broadcast 192.168.1.255 ipmtu 1500

TN0: flags=80

TN1: flags=80

System> $ netstat -rn
Routing tables
Destination Gateway Flags Refs Use Interface

Route Tree for Protocol Family 26:

Route Tree for Protocol Family 2:
default 192.168.1.1 UGS 0 0 SE0
127.0.0.1 127.0.0.1 UHL 1 0 LO0
192.168.1/24 192.168.1.103 U 1 0 SE0
192.168.1.103 192.168.1.103 UHL 0 0 SE0
System> $ netstat -n
System> $ show net /ful

The following network services are available at this time:

Product: DECNET Manufacturer: Hewlett-Packard Company
Node: DTL03 Address(es): 1.103
Network Type: DNA IV Interface(s): net 0


Node Volatile Characteristics as of 6-DEC-2009 13:13:52

Executor node = 1.103 (DTL03)

Identification = HP DECnet for OpenVMS Alpha
Management version = V4.0.0
Incoming timer = 45
Outgoing timer = 60
Incoming Proxy = Enabled
Outgoing Proxy = Enabled
NSP version = V4.1.0
Maximum links = 32
Delay factor = 80
Delay weight = 5
Inactivity timer = 60
Retransmit factor = 10
Routing version = V2.0.0
Type = nonrouting IV
Routing timer = 600
Broadcast routing timer = 180
Maximum address = 1023
Maximum circuits = 16
Maximum cost = 1022
Maximum hops = 30
Maximum visits = 63
Maximum area = 63
Max broadcast nonrouters = 64
Max broadcast routers = 32
Maximum path splits = 1
Area maximum cost = 1022
Area maximum hops = 30
Maximum buffers = 100
Buffer size = 576
Nonprivileged user id = DECNET
Nonprivileged password = CACTIMPHS
Default access = incoming and outgoing
Pipeline quota = 4032
Alias maximum links = 32
Path split policy = Normal
Maximum Declared Objects = 31




Known Link Volatile Summary as of 6-DEC-2009 13:13:52

No information in database



Node Counters as of 6-DEC-2009 13:13:52

Executor node = 1.103 (DTL03)

0 Maximum logical links active
0 Aged packet loss
0 Node unreachable packet loss
0 Node out-of-range packet loss
0 Oversized packet loss
0 Packet format error
0 Partial routing update loss
0 Verification reject



Product: TCP/IP Manufacturer: Hewlett-Packard Company
Node: dtl03.home Address(es): 192.168.1.103
Network Type: TCP/IP Interface(s):

HP TCP/IP Services for OpenVMS Alpha Version V5.6
on a DEC 3000 Model 400 running OpenVMS V8.3


Port Remote
Device_socket Type Local Remote Service Host

bg35 STREAM 21 0 FTP *
bg38 STREAM 23 0 TELNET *

Communication Parameters

Local host: dtl03 Domain: home

Maximum Current Peak
Proxies 20


Remote Terminal
Large buffers: 0
UCBs: 0
Virtual term: disabled

System> $ tcpip show services /full

Service: FTP
State: Enabled
Port: 21 Protocol: TCP Address: 0.0.0.0
Inactivity: 5 User_name: TCPIP$FTP Process: TCPIP$FTP
Limit: 1000 Active: 0 Peak: 0

File: TCPIP$SYSTEM:TCPIP$FTP_RUN.COM
Flags: None

Socket Opts: Rcheck Scheck
Receive: 0 Send: 0

Log Opts: Acpt Actv Dactv Conn Error Exit Logi Logo Mdfy Rjct TimO Addr
File: SYS$SYSDEVICE:[TCPIP$FTP]TCPIP$FTP_RUN.LOG

Security
Reject msg: not defined
Accept host: 0.0.0.0
Accept netw: 0.0.0.0

Service: TELNET
State: Enabled
Port: 23 Protocol: TCP Address: 0.0.0.0
Inactivity: 1 User_name: not defined Process: not defined
Limit: 10000 Active: 0 Peak: 0

File: not defined
Flags: Listen Rtty IPv6

Socket Opts: Keepalive Rcheck Scheck
Receive: 3000 Send: 3000

Log Opts: Actv Dactv Conn Error Logi Logo Mdfy Rjct
File: not defined

Security
Reject msg: not defined
Accept host: 0.0.0.0
Accept netw: 0.0.0.0
System>

[Didier DTL Morandi]

And this is from the system which works fine
============================================

DTL> $ ifconfig -a
LO0: flags=100c89
inet 127.0.0.1 netmask ff000000 ipmtu 4096

SE0: flags=c43
*inet 192.168.1.101 netmask ffffff00 broadcast 192.168.1.255 ipmtu 1500

TN0: flags=80

TN1: flags=80

DTL> $ netstat -rn
Routing tables
Destination Gateway Flags Refs Use Interface

Route Tree for Protocol Family 26:

Route Tree for Protocol Family 2:
default 192.168.1.1 UGS 0 1 SE0
127.0.0.1 127.0.0.1 UHL 7 44 LO0
192.168.1/24 192.168.1.101 U 2 202 SE0
192.168.1.101 192.168.1.101 UHL 0 0 SE0
DTL> $ netstat -n
Active Internet connections
Proto Recv-Q Send-Q Local Address Foreign Address (state)
tcp 0 0 127.0.0.1.705 127.0.0.1.49152 ESTABLI
SHED
tcp 0 0 127.0.0.1.49152 127.0.0.1.705 ESTABLI
SHED
tcp 0 0 127.0.0.1.705 127.0.0.1.49153 ESTABLI
SHED
tcp 0 0 127.0.0.1.49153 127.0.0.1.705 ESTABLI
SHED
tcp 0 0 127.0.0.1.705 127.0.0.1.49154 ESTABLI
SHED
tcp 0 0 127.0.0.1.49154 127.0.0.1.705 ESTABLI
SHED
tcp 0 639 192.168.1.101.23 192.168.1.20.1579 ESTABLI
SHED
tcp 0 0 127.0.0.1.705 *.* LISTEN
udp 0 0 192.168.1.101.123 *.*
udp 0 0 127.0.0.1.123 *.*
udp 0 0 *.123 *.*
udp 0 0 *.161 *.*
DTL> $ show net /ful

The following network services are available at this time:

Product: DECNET Manufacturer: Hewlett-Packard Company
Node: DTL01 Address(es): 1.101
Network Type: DNA IV Interface(s): net 0


Node Volatile Characteristics as of 6-DEC-2009 11:50:27

Executor node = 1.101 (DTL01)

Identification = HP DECnet for OpenVMS Alpha
Management version = V4.0.0
Incoming timer = 45
Outgoing timer = 60
Incoming Proxy = Enabled
Outgoing Proxy = Enabled
NSP version = V4.1.0
Maximum links = 32
Delay factor = 80
Delay weight = 5
Inactivity timer = 60
Retransmit factor = 10
Routing version = V2.0.0
Type = nonrouting IV
Routing timer = 600
Broadcast routing timer = 180
Maximum address = 1023
Maximum circuits = 16
Maximum cost = 1022
Maximum hops = 30
Maximum visits = 63
Maximum area = 63
Max broadcast nonrouters = 64
Max broadcast routers = 32
Maximum path splits = 1
Area maximum cost = 1022
Area maximum hops = 30
Maximum buffers = 100
Buffer size = 576
Nonprivileged user id = DECNET
Nonprivileged password = ADDALLYNIA
Default access = incoming and outgoing
Pipeline quota = 4032
Alias maximum links = 32
Path split policy = Normal
Maximum Declared Objects = 31




Known Link Volatile Summary as of 6-DEC-2009 11:50:27

No information in database



Node Counters as of 6-DEC-2009 11:50:27

Executor node = 1.101 (DTL01)

0 Maximum logical links active
0 Aged packet loss
0 Node unreachable packet loss
0 Node out-of-range packet loss
0 Oversized packet loss
0 Packet format error
0 Partial routing update loss
0 Verification reject



Product: TCP/IP Manufacturer: Hewlett-Packard Company
Node: dtl01.home Address(es): 192.168.1.101
Network Type: TCP/IP Interface(s):

HP TCP/IP Services for OpenVMS Alpha Version V5.6
on a DEC 3000 Model 400 running OpenVMS V8.3


Port Remote
Device_socket Type Local Remote Service Host

bg35 STREAM 21 0 FTP *
bg42 DGRAM 123 0 NTP *
bg43 DGRAM 123 0 NTP *
bg44 DGRAM 123 0 NTP *
bg50 DGRAM 0 0 *
bg55 STREAM 705 0 *
bg56 DGRAM 161 0 SNMP *
bg61 DGRAM 0 0 *
bg64 STREAM 49152 705 127.0.0.1
bg66 STREAM 49153 705 127.0.0.1
bg77 STREAM 49154 705 127.0.0.1
bg81 STREAM 705 49152 127.0.0.1
bg82 STREAM 705 49153 127.0.0.1
bg83 STREAM 705 49154 127.0.0.1
bg85 STREAM 23 0 TELNET *
bg87 STREAM 23 1579 TELNET 192.168.1.20

Communication Parameters

Local host: dtl01 Domain: home

Maximum Current Peak
Proxies 20


Remote Terminal
Large buffers: 0
UCBs: 0
Virtual term: disabled

DTL> $ tcpip show services /full

Service: ESNMP
State: Disabled
Port: 705 Protocol: UDP Address: 0.0.0.0
User_name: not defined Process: ESNMP

Service: FTP
State: Enabled
Port: 21 Protocol: TCP Address: 0.0.0.0
Inactivity: 5 User_name: TCPIP$FTP Process: TCPIP$FTP
Limit: 1000 Active: 0 Peak: 0

File: TCPIP$SYSTEM:TCPIP$FTP_RUN.COM
Flags: None

Socket Opts: Rcheck Scheck
Receive: 0 Send: 0

Log Opts: Acpt Actv Dactv Conn Error Exit Logi Logo Mdfy Rjct TimO Addr
File: SYS$SYSDEVICE:[TCPIP$FTP]TCPIP$FTP_RUN.LOG

Security
Reject msg: not defined
Accept host: 0.0.0.0
Accept netw: 0.0.0.0

Service: NTP
State: Enabled
Port: 123 Protocol: UDP Address: 0.0.0.0
Inactivity: 0 User_name: TCPIP$NTP Process: TCPIP$NTP
Limit: 1 Active: 0 Peak: 0

File: TCPIP$SYSTEM:TCPIP$NTP_RUN.COM
Flags: None

Socket Opts: Rcheck Scheck
Receive: 0 Send: 0

Log Opts: Acpt Actv Dactv Conn Error Exit Logi Logo Mdfy Rjct TimO Addr
File: SYS$SPECIFIC:[TCPIP$NTP]TCPIP$NTP_RUN.LOG

Security
Reject msg: not defined
Accept host: 0.0.0.0
Accept netw: 0.0.0.0

Service: SNMP
State: Enabled
Port: 161 Protocol: UDP Address: 0.0.0.0
Inactivity: 0 User_name: TCPIP$SNMP Process: TCPIP$SNMP
Limit: 1 Active: 0 Peak: 0

File: TCPIP$SYSTEM:TCPIP$SNMP_RUN.COM
Flags: None

Socket Opts: Rcheck Scheck
Receive: 0 Send: 0

Log Opts: Acpt Actv Dactv Conn Error Exit Logi Logo Mdfy Rjct TimO Addr
File: SYS$SYSDEVICE:[TCPIP$SNMP]TCPIP$SNMP_RUN.LOG

Security
Reject msg: not defined
Accept host: 0.0.0.0
Accept netw: 0.0.0.0

Service: TELNET
State: Enabled
Port: 23 Protocol: TCP Address: 0.0.0.0
Inactivity: 1 User_name: not defined Process: not defined
Limit: 10000 Active: 1 Peak: 1

File: not defined
Flags: Listen Rtty IPv6

Socket Opts: Keepalive Rcheck Scheck
Receive: 3000 Send: 3000

Log Opts: Actv Dactv Conn Error Logi Logo Mdfy Rjct
File: not defined

Security
Reject msg: not defined
Accept host: 0.0.0.0
Accept netw: 0.0.0.0
DTL>

[Didier DTL Morandi]

(sorry I missed the "attach request)

As for your questions, here are some answers:

Just curious, why does PC2 have a different set of DNS servers? I don't think this is the cause of your problems, just curious if that was intentional.

it's just an error. I built the new PC "by heart". 1.1. is the ADSL gateway and DHCP server (that I do not use).

> When you telnet from VMS2 (on XPPC2) to VMS1 (on XPPC1), what ip address is displayed from VMS1$ show user/ful (user logged in from VMS2)

DTL01>
%%%%%%%%%%% OPCOM 6-DEC-2009 12:05:41.38 %%%%%%%%%%%
Message from user INTERnet on DTL01
TELNET Login from Host: 192.168.1.103 Port: 49152

DTL01> sh use/nod/full
OpenVMS User Processes at 6-DEC-2009 12:06:13.90
Total number of users = 1, number of processes = 2

Username Process Name PID Terminal
DTL DTL 0000012C TNA2: (Host: 192.168.1.20 Port: 1579)
DTL _TNA3: 00000134 TNA3:
(Host: 192.168.1.103 Locn: _OPA0:/SYSTEM)
DTL01>
(the first user is logged in into VMS1 via Kea-VT from PC1)

> Also, can VMS2 telnet/ftp to itself? It should be able to.
Yes, it can and works fine.

Was the system disk for VMS2 (DTL03 if I understand correctly) the clone of VMS1's system disk "then copied my virtual disks from one of the previous PCs", with the TCP config redone?
yes it was.

Thanks all for your time!

[Bill Pedersen]

Didier:

You mention differences on the report from ipconfig/all between the two PCs but then do not provide the listing of the two reports. If the problem is in fact the PC config it would be helpful to see these reports.

Thanks,

Bill.

[Jon Pinkley]

see note with timestamp

Dec 6, 2009 09:57:52 GMT

which has ipconfig/all output

[Didier DTL Morandi]

@ Bill
They are (in French) in my post dated 09:57.

[Jon Pinkley]

From DTL03 (VMS2/PA2) you can telnet to DTL01 (VMS1/PA1) as shown by your Dec 6, 2009 12:37:53 GMT post.

From DTL01 can you telnet to DTL03? (I think you said no).

This seems to be a firewall issue, because you can establish connection from DTL03 to DTL01 (therefore two way connectivity), but something is blocking the establishment of connections coming the other way.

Let's look at the low level stuff.

You are running DECNET IV, therefore it is changing the MAC address (I would expect it to be aa-00-04-00-67-04 given DECnet address 1.103)

From PC2 ping 192.168.1.103 (you said this works). Then issue

> arp -a

what MAC address is associated with 192.168.1.103?

From DLT103

$ ping 192.168.1.14

$ tcpip show arp

Do you see MAC address 00-26-55-3E-20-27 associated with 192.168.1.14?

Just to make sure. Have you rebooted PERMANENCEZERO (PC2) after installing PA and configuring DTL03?

Does PERMANENCEZERO have any "internet security" software? Is there something other than just the firewall built into XP SP3 that may be interfering with inbound connections?

Can you remote make a remote desktop connection from PC1 to PC2?

[Didier DTL Morandi]

> From DTL03 (VMS2/PA2) you can telnet to DTL01 (VMS1/PA1) as shown by your Dec 6, 2009 12:37:53 GMT post.

Yes I can

> From DTL01 can you telnet to DTL03?

Yes I can

> This seems to be a firewall issue, because you can establish connection from DTL03 to DTL01 (therefore two way connectivity), but something is blocking the establishment of connections coming the other way.

No. As I said, everything between the two Alpha is running fine.

> Let's look at the low level stuff.

let's do that.

> You are running DECNET IV, therefore it is changing the MAC address (I would expect it to be aa-00-04-00-67-04 given DECnet address 1.103) From PC2 ping 192.168.1.103 (you said this works). Then issue

> arp -a

> what MAC address is associated with 192.168.1.103?

C:\Documents and Settings\Administrateur>arp -a

Interface : 192.168.1.14 --- 0x10003
Adresse Internet Adresse physique Type
192.168.1.1 00-15-56-0a-3e-d1 dynamique
192.168.1.20 00-13-d4-58-8f-46 dynamique
192.168.1.103 aa-00-04-00-67-04 dynamique

C:\Documents and Settings\Administrateur>

> From DTL103

$ ping 192.168.1.14

$ tcpip show arp

Do you see MAC address 00-26-55-3E-20-27 associated with 192.168.1.14?

DTL03> tcpip
TCPIP> ping 192.168.1.14
PING 192.168.1.14 (192.168.1.14): 56 data bytes
64 bytes from 192.168.1.14: icmp_seq=0 ttl=128 time=6 ms
64 bytes from 192.168.1.14: icmp_seq=1 ttl=128 time=2 ms
64 bytes from 192.168.1.14: icmp_seq=2 ttl=128 time=1 ms
64 bytes from 192.168.1.14: icmp_seq=3 ttl=128 time=1 ms


----192.168.1.14 PING Statistics----
4 packets transmitted, 4 packets received, 0% packet loss
round-trip (ms) min/avg/max = 1/2/6 ms
TCPIP> sh arp
Cnt Flags Timer Host Phys Addr
1: UC 4 192.168.1.14 00-26-55-3e-20-27
2: UC 15 192.168.1.20 00-13-d4-58-8f-46

Yes I can.

> Just to make sure. Have you rebooted PERMANENCEZERO (PC2) after installing PA and configuring DTL03?

Yes I did.

Does PERMANENCEZERO have any "internet security" software? Is there something other than just the firewall built into XP SP3 that may be interfering with inbound connections?

No. The PC2 is a real mirror of PC1 but the network interface which is not the same. Maybe we should have a look at that card ?

Can you remote make a remote desktop connection from PC1 to PC2?

The remote terminal window pops up, then an error message sez that the target PC closed the connection.

[Didier DTL Morandi]

remote access from PC1 to PC2 is now fine. I forgot to enable it on PC2. Sorry for that.

[Jon Pinkley]

What can you do from PC1 to VMS1 (DTL01) that you can not do from PC2 to VMS2 (DTL03)?

Examples: ftp, telnet

Please show log of failures.

What can you do from VMS1 (DTL01) to PC1 that you can't do from VMS2 (DTL03) to PC2?

It is harder for me to think of things you would do, unless you have some services running on the PC.

Please show log of failures.