RX2600 not visible on the network, yet it can partially see others

[Alfreda Sanders]

My rx2600 is running hp-ux 11.23. I am stuck! The server is up yet I haven't been able to make it visible. No one on my network can see it( no pings, telnet or ftp). Not even other systems on the same subnet. This server can access the internet and can ping other internal system so I know the network card is good. Here are other things I know.
•dead gateway detection turned off in ndd by setting ip_ire_gw_probe to 0.

•there is no other machine on my network with the ip addr 133.138.133.26

•/etc/hosts
has the ip address,longname ,shortname

•subnet mask right
255.255.255.0

•default gateway right
138.13.133.1

nsquery host or6nsabb returns
Using "files [NOTFOUND=continue UNAVAIL=continue] dns [NOTFOUND=return UNAVAIL=return TRYAGAIN=return] dns " for the hosts policy.

Searching /etc/hosts for or6nsabb
Hostname: or6nsabb.losangeles.af.mil
Aliases: or6nsabb
Address: 138.13.133.26
Switch configuration: Terminates Search

•Under /etc/rc.config.d/ there's only one netconf

netstat –rn
Routing tables
Destination Gateway Flags Refs Interface Pmtu
127.0.0.1 127.0.0.1 UH 0 lo0 4136
138.13.133.26 138.13.133.26 UH 0 lan1 4136
138.13.133.0 138.13.133.26 U 2 lan1 1500
127.0.0.0 127.0.0.1 U 0 lo0 0
default 138.13.133.1 UG 0 lan1 0


•inetd.sec allows ftp and telnet on domain

How do I make it visible?

[John Payne_2]

Do you have another device on that subnet with the same IP address? If you can, a macine on that subnet and ask for the MAC address for the device at 138.13.133.26. Then run 'lanscan' and conpare the output to the MAC address you got to make sure they match.

Hope it helps

John

[Ermin Borovac · Accepted solution]

Is the system configured to use IPFilter (firewall product)? It comes preinstalled with 11.23.

Check with 'ipfstat -io'. It will show you if there are any inbound/outbound access lists.

[Alfreda Sanders]

The IPFilter was running. I have turned it off until I learned how to configure it. Although supposedly the default behavior should have been to allow all this was not the case for me. I did specify in my inetd.sec file what I what allowed so I don't see I need for IPFilter. Do you?

[Pat Lieberg]

inetd.sec filters on inetd services where ipfilter works against ip addresses, ports or protocols. You have to decide which level you want to secure access on.

Looking at your problem, you default gateway is not on the same network as your machine. How does the machine know how to reach the gateway? Is your subnet mask really correct?

[Mel Burslan]

At this point, are you able to ping your default gateway ?

if you ping the broadcast address, i.e.,

ping 133.138.133.255

do you get any responses other than this host itself, i.e., is any other device on your network/subnet is listening ? This usually happens to me if the network admins, does not join the switch port to the right VLAN.

[Alfreda Sanders]

When I ping 133.138.133.255

I do get a response from

138.13.133.1
138.13.133.3
138.13.133.12

These are default gateway, alternate route, and a Tru64 server on the same subnet.

[John Poff]

Is the IP address of your rx2600 133.138.133.26 or 133.13.133.26? Or 138.13.133.26?

Sorry, but I'm a little confused by your original post.

JP

[Alfreda Sanders]

I do apologize. I made a bad typo. My server in question is 138.13.133.26

[John Poff]

No problem. The 1's and 3's and 8's all run together, and my eyes are getting old. :)

I'm not a network wizard, but it kind of sounds like maybe the network port you are plugged into is configured for a different subnet. I'd suggest trying the 'linkloop' command between your rx2600 and another box to see if you have physical connectivity.

JP

[Mel Burslan]

so, according to this what you have posted on ping the broadcast address, your subnet has at least one other node in it. Is that node able to talk to anyone lese than this one or did these two, fall into the defaul VLAN of this switch and can not communicate with anyone else but each other ?

But again, you are pinging a default router and a backup so, this sounds like a legitimate subnet.

Do you have any firewalls that may be blocking you off from the other parts of the network ? Other than that I do not see any big conflict in your network topology with my naked eye.

[Alfreda Sanders]

Presently, everything is working fine.

I turned off IPFilter. I will probably not use it unless directed by our security department. I am not familiar with it enough to see a reason to use it.

Many thanks to all