- Community Home
- >
- Servers and Operating Systems
- >
- Operating System - HP-UX
- >
- System Administration
- >
- Not able to ping
-
- Forums
-
Blogs
- Alliances
- Around the Storage Block
- Behind the scenes @ Labs
- HPE Careers
- HPE Storage Tech Insiders
- Infrastructure Insights
- Inspiring Progress
- Internet of Things (IoT)
- My Learning Certification
- OEM Solutions
- Servers: The Right Compute
- Shifting to Software-Defined
- Telecom IQ
- Transforming IT
- Infrastructure Solutions German
- L’Avenir de l’IT
- IT e Trasformazione Digitale
- Enterprise Topics
- ИТ для нового стиля бизнеса
- Blogs
-
Quick Links
- Community
- Getting Started
- FAQ
- Ranking Overview
- Rules of Participation
- Contact
- Email us
- Tell us what you think
- Information Libraries
- Integrated Systems
- Networking
- Servers
- Storage
- Other HPE Sites
- Support Center
- Enterprise.nxt
- Marketplace
- Aruba Airheads Community
-
Forums
-
Blogs
-
InformationEnglish
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
10-28-2009 10:33 AM
10-28-2009 10:33 AM
From a Unix server - ia64 hp server rx6600, I am successfully able to traceroute to our SMTP server in one hop.
But ping to the SMTP server fails.
Need help in finding out what the issue can be.
# ping 10.74.100.90
PING 10.74.100.90: 64 byte packets
----10.74.100.90 PING Statistics----
9 packets transmitted, 0 packets received, 100% packet loss
# traceroute 10.74.100.90
traceroute to 10.74.100.90 (10.74.100.90), 30 hops max, 40 byte packets
1 bg1d0d01.xxx.xxx.com (10.48.85.100) 0.076 ms !N 0.019 ms !N 0.018 ms !N
# netstat -in
Name Mtu Network Address Ipkts Ierrs Opkts Oerrs Coll
lan0 1500 10.48.84.0 10.48.85.100 22229 0 15824 0 0
lo0 4136 127.0.0.0 127.0.0.1 3633 0 3633 0 0
Solved! Go to Solution.
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
10-28-2009 10:41 AM
10-28-2009 10:41 AM
Re: Not able to ping
Hope this helps!
Regards
Torsten.
__________________________________________________
There are only 10 types of people in the world -
those who understand binary, and those who don't.
__________________________________________________
No support by private messages. Please ask the forum!
If you feel this was helpful please click the KUDOS! thumb below!

- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
10-28-2009 10:42 AM
10-28-2009 10:42 AM
Re: Not able to ping
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
10-28-2009 10:50 AM
10-28-2009 10:50 AM
Re: Not able to ping
You can check if ping is blocked with "bastille". Any firewall between the servers?
Hope this helps!
Regards
Torsten.
__________________________________________________
There are only 10 types of people in the world -
those who understand binary, and those who don't.
__________________________________________________
No support by private messages. Please ask the forum!
If you feel this was helpful please click the KUDOS! thumb below!

- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
10-28-2009 10:57 AM
10-28-2009 10:57 AM
Re: Not able to ping
# swlist |grep -i bastile
#
The mail SMTP server is a windows server & the server is pingable from rest of the Unix servers.
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
10-28-2009 11:13 AM
10-28-2009 11:13 AM
Re: Not able to ping
So is there any services that become active which stops pinging to the SMTP IP?
There was a veritas cluster software installed which had a virtual IP assigned to the lan interface lan0:1. I removed the VCS sw & removed all the virtual lan interfaces.
Still I am facing the same issue. Now there is just one LAN interface -
# netstat -in
Name Mtu Network Address Ipkts Ierrs Opkts Oerrs Coll
lan0 1500 10.48.84.0 10.48.85.100 62546 0 38609 0 0
lo0 4136 127.0.0.0 127.0.0.1 11517 0 11517 0 0
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
10-28-2009 12:37 PM
10-28-2009 12:37 PM
Solutiontraceroute to 10.74.100.90 (10.74.100.90), 30 hops max, 40 byte packets
1 bg1d0d01.xxx.xxx.com (10.48.85.100) 0.076 ms !N 0.019 ms !N 0.018 ms !N
Your traceroute looks a bit troubling - "!N" means "network unreachable". As this response comes from 10.48.45.100 which is your own lan0, it does not look good at all.
You did not tell us your netmask, but from the netstat -in output I can see that your network address is 10.48.84.0, so your netmask is something more than 255.255.0.0 but less than 255.255.255.0. That means you must go through at least one gateway to reach 10.74.100.90. So there definitely should be at least one more hop in the traceroute output.
Does your gateway respond to ping at all? If it doesn't, first verify that you're using the correct gateway address. Talk to your network administrator.
If the gateway address is OK and the gateway machine is working but is configured to not respond to pings, the Dead Gateway Detection feature of HP-UX may be triggering.
Run this command:
ndd -get /dev/ip ip_ire_gw_probe
If it responds with 1, the Dead Gateway Detection is enabled.
To disable it, run:
ndd -set /dev/ip ip_ire_gw_probe 0
But if it has already triggered, you must delete your gateway configuration from the routing table and add it back to reset it to working state:
route del default
route add default
If you can access your SMTP server after this, the problem was caused by a mis-fire of Dead Gateway Detection. To disable it permanently, edit /etc/rc.config.d/nddconf and add a group of three lines like this:
TRANSPORT_NAME[x]=/dev/ip
NDD_NAME[x]=ip_ire_gw_probe
NDD_VALUE[x]=0
Replace the "x" within the brackets with the first unused index value, i.e. if there are no un-commented groups of (TRANSPORT_NAME + NDD_NAME + NDD_VALUE), replace x with 0; if there is one group already, replace x with 1 etc.
If the problem was not solved with this, please show us the output of "netstat -rnv" command.
MK
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
10-28-2009 12:59 PM
10-28-2009 12:59 PM
Re: Not able to ping
Please provide
ping ip -n 10
/var/adm/syslog/mail.log
traceroute to mail relay server
traceroute to DNS server
How many subnets are there in your data center
Activate the 'spray' utility on two servers, preferably one is on another subnet vary the packet length and provide five reports of increasing size, as well as lanadmin dropped packet values and other data TO BE COLLECTED AS YOU SPRAY.
spray -c 5 -l 50
spray -c 5 -l 100, etc.
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
10-28-2009 02:11 PM
10-28-2009 02:11 PM
Re: Not able to ping
# swlist |grep -i bastile
Well, there is a typo.
# swlist |grep -i bastille
product name is HPUXBastille.
Hope this helps!
Regards
Torsten.
__________________________________________________
There are only 10 types of people in the world -
those who understand binary, and those who don't.
__________________________________________________
No support by private messages. Please ask the forum!
If you feel this was helpful please click the KUDOS! thumb below!

- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
10-28-2009 02:27 PM
10-28-2009 02:27 PM
Re: Not able to ping
Check if other than sec00 is installed, sec00 is the default security hardening in hp-ux for Bastille facility, Other than sec00 level it locks down most of the network services:
# swlist -l bundle | grep Sec0
- also can you try ssh or telnet to the ip or any ip in the same subnet. So that it will be clear if there is network firewall & if it is blocking ping requests.
Hth,
Raj.
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
10-28-2009 10:36 PM
10-28-2009 10:36 PM
Re: Not able to ping
I did as Matti suggested & was able to ping to the SMTP server.
But the route gateway specified in the netconf file is still not pinging
# ndd -get /dev/ip ip_ire_gw_probe
1
# ndd -set /dev/ip ip_ire_gw_probe 0
#
# route delete default 10.48.84.1 1
delete net default: gateway 10.48.84.1
#
# route add default 10.48.84.1 1
add net default: gateway 10.48.84.1
After this I was able to successfully ping to the SMTP server & send test mails from the unix server
# ping 10.74.100.90
PING 10.74.100.90: 64 byte packets
64 bytes from 10.74.100.90: icmp_seq=0. time=1. ms
----10.74.100.90 PING Statistics----
1 packets transmitted, 1 packets received, 0% packet loss
round-trip (ms) min/avg/max = 1/1/1
But I am still not able to ping to the route gateway - 10.48.84.1
# ping 10.48.84.1
PING 10.48.84.1: 64 byte packets
----10.48.84.1 PING Statistics----
1 packets transmitted, 0 packets received, 100% packet loss
I added the below lines in /etc/rc.config.d/nddconf. Do I have change the ip with the IP address?
TRANSPORT_NAME[0]=/dev/ip
NDD_NAME[0]=ip_ire_gw_probe
NDD_VALUE[0]=0
Torsten & Raj -
There are bastille & sec00 installed on the server. But how do i check their services are running or not?
# swlist |grep -i bastille
HPUXBastille B.3.0.23 Bastille Security Hardening Tool
You have mail in /var/mail/root
# swlist -l bundle | grep Sec0
Sec00Tools B.01.04.07 Install-Time security infrastructure.
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
10-28-2009 10:48 PM
10-28-2009 10:48 PM
Re: Not able to ping
Are you in a DMZ? This may be normal.
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
10-28-2009 11:02 PM
10-28-2009 11:02 PM
Re: Not able to ping
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
10-28-2009 11:13 PM
10-28-2009 11:13 PM
Re: Not able to ping
http://en.wikipedia.org/wiki/Demilitarized_zone_%28computing%29
Hope this helps!
Regards
Torsten.
__________________________________________________
There are only 10 types of people in the world -
those who understand binary, and those who don't.
__________________________________________________
No support by private messages. Please ask the forum!
If you feel this was helpful please click the KUDOS! thumb below!

- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
10-28-2009 11:18 PM
10-28-2009 11:18 PM
Re: Not able to ping
You need check with your "Network Team"
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
10-28-2009 11:40 PM
10-28-2009 11:40 PM
Re: Not able to ping
But the route gateway specified in the netconf file is still not pinging
Maybe it's not supposed to. Ask your network administrator.
MK
Hewlett Packard Enterprise International
- Communities
- HPE Blogs and Forum
© Copyright 2019 Hewlett Packard Enterprise Development LP