HPUX 11.0: Network Is UnReachable

[LG Porter]

I have a HP K580 server running HPUX 11.00 with two lan cards, 10BaseT (lan5..not used) and 10/100BaseT card (lan4..primary lan). The server several days ago was moved into the DMZ with a Nokia Check Point firewall. After being moved inside the DMZ, the server will not respond to ping as well as no response from the "gateway". Server functions correctly with local devices on same subnet however it will not respond to any thing off it's subnet. After checking the gateway status with the "ndd -get /ddev/ip /ip_ire_status" command and seeing a "IRE_GATEWAY DEAD" message, I used the "ndd -set /dev/ip /dev/ip_ire_gw_probe 0" command to a infinite period since gateway detection is turn on by default. Presently both lan cards are up (lanscan) however I can not communicated with it, nor is the server able to reach the gateway. "Netstat -rn" reveals no default gateway. I'm unable to manually add a default gateway. I have rebooted the server and double checked the /etc/hosts file and the /etc/rc.config.d/netconf file for errors. What items should I check or what is the best resolution for this problem?

[Naveej.K.A · Accepted solution]

Hi,

You can add the default gateway from the command line, using

route add default xx.xx.xx.xx (ip address)

Did you try adding the default gateway using SAM.

Regards
naveej

[Sundar_7]

Hi,

Post the error message from route command while adding the default route

Sundar

[V.Tamilvanan]

Hi,
You can disable the dead gateway detection permanently across reboot by adding following entries on /etc/rc.config.d/nddconf

TRANSPORT_NAME[0]=ip
NDD_NAME[0]=ip_ire_gw_probe
NDD_VALUE[0]=0

To add the default gateway permanently across reboots you need to put the below entry in /etc/rc.config.d/netconf file and restart the server.

ROUTE_DESTINATION[0]=default
ROUTE_MASK[0]=""
ROUTE_GATEWAY[0]=XX.XX.XX.XX
ROUTE_COUNT[0]=1
ROUTE_ARGS[0]=""

XX.XX.XX.XX is your gateway address.


Format for adding gateway manually on online system.

#route add default metric


HTH

[SureshKumar_2]

Hi LG

*) Confirm that u could able to communicate with HP box without firewall.
(from these u could isolate base configuration issues/hw & cable faulty) {try without gateway, routing - before modify the files notedown the entries}
o) Check "ndd -get /dev/ip/ip_ire_status" in basic setup.

*) Add gateway entry in /etc/rc.config.d/netconf, restart the service and check for route. {netstat -rn}
o) Check "ndd -get /dev/ip/ip_ire_status" in basic setup.

*) Check for communication from other systems.

[LG Porter]

Manual attempts to add the default gateway failed..that is using the "route add default xx.xx.xx.xx".

I did attempt to edit the /etc/rc.config.d/nddconf file with the entries
TRANSPORT_NAME=ip
NDD_NAME=ip_ire_gw_probe
NDD_ VALUE=0

Have double checked the /etc/rc.config.d/netconf file entries (As well as having it check by another sys admin....)

No success...still having the same issue

Questions:

What is the original default value for "ndd -set /dev/ip /dev/ip_ire_gw_probe paramter"?

What other areas should I check?

[SureshKumar_2]

default is 1

Hope this url will help u further.

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=534209&sortPointsFlag=1

[cxtwo]

Did you get the 'Network is Unreachable' error when trying to add the route? I think you are missing the hop count which needs to be '1' for remote networks.

#route add default a.b.c.d 1

This is also specified as route_count in /etc/rc.config.d/netconf

hth

[Jaffar]

Hi Porter

As from the message it seems there is blocking of ports at firewall .

R u able to ping the servers which is in the same network as of ur network.

Why gateway is required ?when u want to route the packets to other network,or defined to particular destination.

If it is showing not reachable means that u r in the one network segment and trying to reach the differnt segment.

Jaffar

[KapilRaj]

I have no doubt u should catch hold of ur network expert to get the Firewall policies changed. DMZ means a secured area hence most of the ports will be scanned and closed.

Does HP allow to add a gateway which u can not ping ?.

This is something to do with ur security policies

Regds,

Kaps