Any one using Adelphia cable internet? Explain ping/trace printout....

[jamin123]

Help! Do you have a home network connected to Adelphia ISP? What version IOS and router are you using? My config works with Cox ISP , but not Adelphia. Help! I'm going through hell with Adelphia. I can't get a public IP on e0. Adelphia Tech supports no help. I got a private 10.x ip on e0, but Adelphia said the 10.x isn't from their network. e0 is connected to ISP. E1 connect to my LAN with ip 172.x.
Ping to yahoo/msn transilated into 68.x. Can some one tell what the ping and trace below means?

Router#sh ip int brief
Ethernet0 10.175.20.20 YES DHCP up up
Ethernet1 172.10.1.1 YES manual up up

Router#ping yahoo.com
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 68.168.78.92, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 44/56/68 ms
Router#trace yahoo.com

Type escape sequence to abort.
Tracing the route to msn.com (68.168.78.92)

1 0.0.0.0 12 msec 16 msec 8 msec
2 67.20.47.45 8 msec 8 msec 12 msec
3 68.161.20.141 8 msec 12 msec 8 msec
4 67.20.47.201 12 msec 12 msec 8 msec
5 68.168.17.109 12 msec 16 msec 12 msec
6 66.109.14.185 28 msec 16 msec 12 msec
7 66.109.0.109 20 msec 20 msec 20 msec
8 66.109.0.77 44 msec 24 msec 24 msec
9 66.109.0.206 44 msec 44 msec 44 msec
10 66.109.0.94 44 msec 44 msec 48 msec
11 66.109.1.114 64 msec 64 msec 64 msec
12 66.109.14.6 64 msec 92 msec 64 msec
13 * * *
14 * * *
15 * * *
16 * * *
17 * * *
18 *

 

[gconnect]

depending on how screwing your ISP is you may have to adjust your access list and nat to allow return traffic in.........

that translation just means that DNS is working.
although my attempts to traceroute yahoo translate to a different address
C:\>tracert

http://www.yahoo.com

Tracing route to

http://www.yahoo.akadns.net

[216.109.118.77]
over a maximum of 30 hops:
************************************************
************************************************
3 10 ms 10 ms 10 ms 68.87.227.85
4 10 ms 10 ms 10 ms 68.87.229.118
5 10 ms 11 ms 10 ms 68.87.229.121
6 10 ms 10 ms 10 ms 12.125.194.5
7 10 ms 20 ms 10 ms 12.123.4.226
8 10 ms 30 ms 10 ms ggr2-p310.cgcil.ip.att.net [12.123.6.65]
9 10 ms 10 ms 20 ms dcr1-so-3-3-0.Chicago.savvis.net [208.175.10.93]
10 30 ms 40 ms 30 ms dcr1-loopback.Washington.savvis.net [206.24.226.99]
11 30 ms 40 ms 40 ms bhr1-pos-10-0.Sterlingdc2.savvis.net [206.24.227.106]
12 30 ms 40 ms 40 ms 216.109.74.30
13 30 ms 41 ms 40 ms vl32.bas1-m.dcn.yahoo.com [216.109.120.150]
14 30 ms 40 ms 40 ms p14.

http://www.dcn.yahoo.com

[216.109.118.77]

Trace complete.


you seem to be able to communicate with the internet but a router in the path to yahoo is blocking BSD (UDP) style tracerouting. the 0.0.0.0 looks strange as hell. never seen that one before.

Not to be Mr. Paranoia but if your ISP says that their DHCP server does not allocate the 10.x.x.x block to customers there could be some rogue DHCP server that is dishing out Addresses, Rerouting and watching all traffic (heh heh)

on the other hand.
some cheap isp's use private addressing because its cheaper for them to NAT on their end but the customers cannot use IPSec Based VPNs unless accomodations are made (NAT-T) by you.

i'd really question the ISP who the hell 0.0.0.0 is

 

[ChrisAC]

This is strange ..

Router#ping yahoo.com
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 68.168.78.92, timeout is 2 seconds:
!!!!!

Given that said address is Adelphia Cable Communications.

[chris@uranium chris]$ whois 68.168.78.92
[Querying whois.arin.net]
[whois.arin.net]
Adelphia Cable Communications ADELPHIA-CABLE-4 (NET-68-168-0-0-1)
68.168.0.0 - 68.171.255.255
Adelphia 68168640-Z14 (NET-68-168-64-0-1)
68.168.64.0 - 68.168.79.255

It looks like they are dishing out private IP's from their authentication server and then passing all traffic through a transparent proxy server (perhaps?). I doubt that their helpdesk will know the set up on the network. Help desk staff usually have just enough training to talk people through setting up their modems and set up an email account on their PC! They usually know very little about how the routing or other system are actually set up. Maybe you could ask them to pass your questions on to second or third line support who may be able to provide some answers.

Try a traceroute to

http://www.tek-tips.com

and post it back. it should resolve to 216.45.19.33. If it resolves to an Adelphia address again then try using the correct IP address instead of the hostname and post that back. We'll see if they are NATing your private address or just passing all traffic through a proxy so that you never actually leave their network.

Chris.


**********************
Chris Andrew, CCNA, CCSA
chris@iproute.co.uk
**********************

 

[jamin123]

C:\>Tracert tek-tips.com
Tracing route to tek-tips.com [216.45.19.33]
over a maximum of 30 hops:

1 10 ms <10 ms 10 ms 10.175.0.1
2 * * * Request timed out.
3 *

C:\>Tracert 216.45.19.33
Tracing route to tek-tips.com [216.45.19.33]
over a maximum of 30 hops:

1 10 ms <10 ms 10 ms 10.175.0.1
2 * * * Request timed out


>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
Ping and trace to tek-tips.com timeout.

C:\>ping 216.45.19.33
Pinging tek-tips.com [216.45.19.33] with 32 bytes of data:
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Ping statistics for 216.45.19.33:


C:\>ping tek-tips.com

Pinging tek-tips.com [216.45.19.33] with 32 bytes of data:
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Ping statistics for 216.45.19.33:
Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms

 

[gconnect]

you may be right about the proxy theory, yahoo (probably does) have load balancing going on through 2 different Service Providers or some other load balancing (server clustering type) solution so that some people hit one addy and some hit another.
i tried tracerouting yahoo again and got a different addy (in the same range though)

C:\>tracert

http://www.yahoo.com

Tracing route to

http://www.yahoo.akadns.net

[216.109.117.108]
over a maximum of 30 hops:
_______________________________________________________


C:\>tracert

http://www.tek-tips.com

Tracing route to tek-tips.com [216.45.19.33]
over a maximum of 30 hops:

*************************************************
*************************************************
3 10 ms 10 ms 10 ms 68.87.229.118
4 10 ms 10 ms 10 ms 68.87.229.121
5 10 ms 20 ms 10 ms 12.125.194.5
6 10 ms 20 ms 10 ms 12.123.4.230
7 10 ms 20 ms 10 ms ggr2-p390.cgcil.ip.att.net [12.123.6.37]
8 20 ms 20 ms 10 ms dcr1-so-3-3-0.Chicago.savvis.net [208.175.10.93]

9 20 ms 10 ms 11 ms acr1-so-0-0-0.Chicago.savvis.net [208.172.3.54]

10 20 ms 10 ms 10 ms 208.172.3.134
11 20 ms 20 ms 20 ms shutter-4.usdtrt.savvis.net [209.176.95.158]
12 20 ms 20 ms 20 ms access1-mh.shutter.net [216.45.16.5]
13 * * * Request timed out.
14 * * * Request timed out.
15 * * * Request timed out.
16 * * * Request timed out.
17 * * * Request timed out.
18 * * * Request timed out.
19 * ^C

Echo packets with a Time To Live of 1 is probably denied somewhere close to tek tips servers (thus the timeouts)

-gC-

 

[gconnect]

my ping to tek-tips also timed out. Echo packets are denied there. Therefore the traceroute would have never worked anyway.

Smart Move

C:\>ping 216.45.19.33

Pinging 216.45.19.33 with 32 bytes of data:

Request timed out.
Request timed out.
Request timed out.
Request timed out.

Ping statistics for 216.45.19.33:
Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms

 

[ChrisAC]

Regardless of whether or not icmp is accepted by

http://www.tek-tips.com,

the point is proven.

gconnect can trace to tek-tips.com (or anything else) and that traffic leaves the local ISP. But jamin123 gets an altogether different result ..

C:\>Tracert tek-tips.com
Tracing route to tek-tips.com [216.45.19.33]
over a maximum of 30 hops:

1 10 ms <10 ms 10 ms 10.175.0.1
2 * * * Request timed out.
3 *


So, either icmp is filtered on the Adelphia network or there is no NAT going on, you are given a private address and all traffic is being intercepted by a transparent proxy, which a lot of ISP's are doing now. This is why you get a private address on your router from Adelphia's authentication servers. It's like being on a LAN and using the company proxy server for your internet access, except on a much larger scale. There is nothing stoping an ISP from using private address space on their network and treating it as a private "LAN". This may be what Adelphia are doing.

Chris.




**********************
Chris Andrew, CCNA, CCSA
chris@iproute.co.uk
**********************