Recent content by Comstocb

The IPSEC tunnel through FW1 (not a VPN tunnel terminating at FW1) is up and working but the tunnel traffic itself is being denied. researching it shows that outbound tunnel traffic is allowed but return traffic is denied as the FW thinks its far end initiated traffic. I see a log entry for...

Easy way to tell. Veiw the error statistics on the port (on the switch) the PC is attached to. If you see no transmit or receive errors, its full duplex. Zero errors means no collisions and that just isn't the case with half duplex when csma/cd is in effect. The switch will report the...

Extreme recommends multinetting as a transistion strategy only as it makes troubleshooting difficult and bandwidth can become an issue since network isolation is not occuring in this scenario. May be other reasons but I have never used this so I don't know. The right way to accomplish what you...

Is the DHCP server on this same network? If it is, did you modify the mask for the DHCP servers interface? Since you changed it to .252, does the default router IP address change? If so does all equipment know this? (DHCP server, scope configuration, router, etc.) If its not on the same...

I have learned that Extremes NAT feature only works in one direction (meaning I can NAT the source address),from private to public for example, but if I want to establish a session to the public IP that corresponds to the private IP (meaning I NAT the destination address), can't do it. I can't...

Does the firewall have a route configured to get to the internet? Thinking the Extreme is fine and the firewall doesn't know what to do with the re-directed traffic. One other thought, does the traffic go back through that Summit 48i after the firewall has seen it? if so I would think that...

Yeah, I get the feeling they might limit the information on purpose so customers are more inclined to purchase services from their engineering services division. The way I deal with it is to set up labs and just experiment to learn the details. I you traffic capture and analysis alot to...

You could determine alot by assigning a static IP from the DHCP range 192.168.254.x and see if you can ping any of the local devices (other PC's and the router). If you can then DHCP is not configured properly on the XP machine (one minor possibility is the DHCP server is out of IP addresses to...

The attempts I have seen so far for automation tend to be inaccurate so you spend just as much time verifing as you would building from scratch. Flukes Network Inspector software now called Optiview Console is the best attempt I have seen so far (still not 100% accurate). Has some really cool...

Oops, spelled it wrong, its Ethereal Brian

Just skip all other options that always leave you with questions and go directly to traffic capture. Introduce a 10/100 hub between the modem and router and then take a pc or laptop loaded with etherreal (free on the net) and watch the packets. This will force you to learn about layer2...

First, is your network switched or shared? If its shared, no problem, you can use just about any of the free traffic analysis tools to get an idea of whos generating the most traffic on the network. If it is switched however, the only choice you have that I can think of is MRTG as mentioned...

If you supernet the network to include the DMZ, then you no longer have a DMZ as all devices are on the same network meaning any security you were counting on by being in the DMZ are now gone. This just needs to be considered. Also, if your running DHCP (it will work for static equipment as...

Kind of a curious question I don't know the answer to...What current routers don't support CIDR? How old will a router be before you need to understand if it supports CIDR or not? I've only been at this a few years and I have never had to worry about a router not supporting CIDR. Maybe I am...

You have a statement in your question saying you get ping responses back from the DSL router, is this the 192.168.254.254 router in your drawing?? If ping works, there should be no reason that tracert doesn't. Anyway, I am not sure what the problem is from your description but remember that...