 




<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Cannot access one IP address</title>
	<atom:link href="http://itknowledgeexchange.techtarget.com/itanswers/cannot-access-one-ip-address/feed/" rel="self" type="application/rss+xml" />
	<link>http://itknowledgeexchange.techtarget.com/itanswers/cannot-access-one-ip-address/</link>
	<description></description>
	<lastBuildDate>Sun, 26 May 2013 01:40:27 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	
	<item>
		<title>By: bmarone</title>
		<link>http://itknowledgeexchange.techtarget.com/itanswers/cannot-access-one-ip-address/#comment-36308</link>
		<dc:creator>bmarone</dc:creator>
		<pubDate>Fri, 10 Nov 2006 07:51:29 +0000</pubDate>
		<guid isPermaLink="false">#comment-36308</guid>
		<description><![CDATA[Routing is the most likely problem, given the differences between the .74 and .76 traceroutes.  See if you can get a tracert from the webserver.  On a private network, or even usually over the Internet, routes should hit the same routers forward and back.

The 10.1.16.1 router should be fine, as both routes are the same to that point.  Question why the .76 needs to be going thru the extra 10.32.25.2 router.

It could be the webserver was recently dual-homed on the 10.32.25.x and 10.32.26.x networks, and it is favoring the 10.32.25.x route back to you.  TCP connections would need consistent routes to work.  If it&#039;s dual-homed, the webserver routes may need a permanent route added depending on who can&#039;t see the server and which solution is preferred:
1) Add a new static route to 10.34.42.0/24 using the 10.32.26.x router.
2) Change the metrics of the default routes 0.0.0.0 so the 10.32.26.x router is preferred.

If my assumptions and the tracerts are all correct, the router is likely the 10.1.16.2 and has an interface 10.32.26.1 for that subnet.

But a word of caution: some companies, esp larger corporations, would frown upon publishing IP address schemes and tracerts on a public website.  If you don&#039;t own the network or the webserver, careful how you present your ideas towards the problem.

Also for a large corporation, there should be some change-mgmt/trouble ticket from the timeframe the website became unreachable, either for the webserver or its gateway router.  Maybe someone can find this ticket to determine what happened.
]]></description>
		<content:encoded><![CDATA[<p>Routing is the most likely problem, given the differences between the .74 and .76 traceroutes.  See if you can get a tracert from the webserver.  On a private network, or even usually over the Internet, routes should hit the same routers forward and back.</p>
<p>The 10.1.16.1 router should be fine, as both routes are the same to that point.  Question why the .76 needs to be going thru the extra 10.32.25.2 router.</p>
<p>It could be the webserver was recently dual-homed on the 10.32.25.x and 10.32.26.x networks, and it is favoring the 10.32.25.x route back to you.  TCP connections would need consistent routes to work.  If it&#8217;s dual-homed, the webserver routes may need a permanent route added depending on who can&#8217;t see the server and which solution is preferred:<br />
1) Add a new static route to 10.34.42.0/24 using the 10.32.26.x router.<br />
2) Change the metrics of the default routes 0.0.0.0 so the 10.32.26.x router is preferred.</p>
<p>If my assumptions and the tracerts are all correct, the router is likely the 10.1.16.2 and has an interface 10.32.26.1 for that subnet.</p>
<p>But a word of caution: some companies, esp larger corporations, would frown upon publishing IP address schemes and tracerts on a public website.  If you don&#8217;t own the network or the webserver, careful how you present your ideas towards the problem.</p>
<p>Also for a large corporation, there should be some change-mgmt/trouble ticket from the timeframe the website became unreachable, either for the webserver or its gateway router.  Maybe someone can find this ticket to determine what happened.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: t2hieu</title>
		<link>http://itknowledgeexchange.techtarget.com/itanswers/cannot-access-one-ip-address/#comment-36309</link>
		<dc:creator>t2hieu</dc:creator>
		<pubDate>Fri, 10 Nov 2006 04:28:48 +0000</pubDate>
		<guid isPermaLink="false">#comment-36309</guid>
		<description><![CDATA[I agree with Douger.
Paul, check routing table on 10.1.16.2 router, also, check correct subnet and subnetmask for 10.32.26.xx
T2Hieu]]></description>
		<content:encoded><![CDATA[<p>I agree with Douger.<br />
Paul, check routing table on 10.1.16.2 router, also, check correct subnet and subnetmask for 10.32.26.xx<br />
T2Hieu</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: petroleumman</title>
		<link>http://itknowledgeexchange.techtarget.com/itanswers/cannot-access-one-ip-address/#comment-36311</link>
		<dc:creator>petroleumman</dc:creator>
		<pubDate>Tue, 07 Nov 2006 09:53:44 +0000</pubDate>
		<guid isPermaLink="false">#comment-36311</guid>
		<description><![CDATA[Ahhhh....my mistake. I see from a later posting that Paulcat&#039;s computer is on a seperate subnet than the webserver. My advice won&#039;t apply in this case.

Good luck!]]></description>
		<content:encoded><![CDATA[<p>Ahhhh&#8230;.my mistake. I see from a later posting that Paulcat&#8217;s computer is on a seperate subnet than the webserver. My advice won&#8217;t apply in this case.</p>
<p>Good luck!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: mortree</title>
		<link>http://itknowledgeexchange.techtarget.com/itanswers/cannot-access-one-ip-address/#comment-36312</link>
		<dc:creator>mortree</dc:creator>
		<pubDate>Sat, 04 Nov 2006 00:51:18 +0000</pubDate>
		<guid isPermaLink="false">#comment-36312</guid>
		<description><![CDATA[Do not worry about failed pings and tracert&#039;s. 

Web servers (and some routers too) often block/ignore these to avoid the &quot;Ping of Death&quot; type Denial of Service attacks. 

Sometimes the blocking is based on IP. Home workstations are often less trusted than a IPs of a business partner or government office.]]></description>
		<content:encoded><![CDATA[<p>Do not worry about failed pings and tracert&#8217;s. </p>
<p>Web servers (and some routers too) often block/ignore these to avoid the &#8220;Ping of Death&#8221; type Denial of Service attacks. </p>
<p>Sometimes the blocking is based on IP. Home workstations are often less trusted than a IPs of a business partner or government office.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: mortree</title>
		<link>http://itknowledgeexchange.techtarget.com/itanswers/cannot-access-one-ip-address/#comment-36314</link>
		<dc:creator>mortree</dc:creator>
		<pubDate>Sat, 04 Nov 2006 00:42:04 +0000</pubDate>
		<guid isPermaLink="false">#comment-36314</guid>
		<description><![CDATA[I agree that there might be routing issues. But they might be using Variable Length Subnet Masks (variable sized subnets as well) at the end.

I&#039;d look back at the webpage message itself. &quot;Oops!...&quot; isn&#039;t   a normal IE or FireFox internal mesage (you didn&#039;t mention browser type) but is a typical open source web server error message.

So I am wondering if your home workstation is simply being blocked/filtered from accessing the page based on IP address.]]></description>
		<content:encoded><![CDATA[<p>I agree that there might be routing issues. But they might be using Variable Length Subnet Masks (variable sized subnets as well) at the end.</p>
<p>I&#8217;d look back at the webpage message itself. &#8220;Oops!&#8230;&#8221; isn&#8217;t   a normal IE or FireFox internal mesage (you didn&#8217;t mention browser type) but is a typical open source web server error message.</p>
<p>So I am wondering if your home workstation is simply being blocked/filtered from accessing the page based on IP address.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: douger</title>
		<link>http://itknowledgeexchange.techtarget.com/itanswers/cannot-access-one-ip-address/#comment-36316</link>
		<dc:creator>douger</dc:creator>
		<pubDate>Fri, 03 Nov 2006 18:18:31 +0000</pubDate>
		<guid isPermaLink="false">#comment-36316</guid>
		<description><![CDATA[Paul,

Something else that is odd in your tracerts.  The one that reaches it&#039;s destination ends with &quot;request timed out&quot; instead of &quot;Trace complete&quot;.  I&#039;m not sure what would cause that, but it&#039;s not right.  I&#039;m still suspicious of router issues.  

D ]]></description>
		<content:encoded><![CDATA[<p>Paul,</p>
<p>Something else that is odd in your tracerts.  The one that reaches it&#8217;s destination ends with &#8220;request timed out&#8221; instead of &#8220;Trace complete&#8221;.  I&#8217;m not sure what would cause that, but it&#8217;s not right.  I&#8217;m still suspicious of router issues.  </p>
<p>D </p>
]]></content:encoded>
	</item>
	<item>
		<title>By: douger</title>
		<link>http://itknowledgeexchange.techtarget.com/itanswers/cannot-access-one-ip-address/#comment-36317</link>
		<dc:creator>douger</dc:creator>
		<pubDate>Fri, 03 Nov 2006 18:10:05 +0000</pubDate>
		<guid isPermaLink="false">#comment-36317</guid>
		<description><![CDATA[Paul,

I disagree with petrol about routing.  You are on subnet 10.34.42.xx, your web server is on 10.32.26.xx.  Different subnets as far as I can see.

The tracerts you posted are interesting.  When you trace to the web server, the fifth hop is 10.32.25.2 .  When you trace to the other address the fifth hop is the address you are trying to hit.  

I would suspect a problem in the routing tables on the 10.1.16.2 router.  

If you hook up your laptop or use someone else&#039;s computer, what does the tracert look like?  Also, what ip address do you get?  It could be that you are assigned an address in a different subnet, or that your coworkers computer has an address in a different subnet.  This could produce different results.

If you don&#039;t have access to the routers, I don&#039;t think that you will be able to fix this on your own.

D]]></description>
		<content:encoded><![CDATA[<p>Paul,</p>
<p>I disagree with petrol about routing.  You are on subnet 10.34.42.xx, your web server is on 10.32.26.xx.  Different subnets as far as I can see.</p>
<p>The tracerts you posted are interesting.  When you trace to the web server, the fifth hop is 10.32.25.2 .  When you trace to the other address the fifth hop is the address you are trying to hit.  </p>
<p>I would suspect a problem in the routing tables on the 10.1.16.2 router.  </p>
<p>If you hook up your laptop or use someone else&#8217;s computer, what does the tracert look like?  Also, what ip address do you get?  It could be that you are assigned an address in a different subnet, or that your coworkers computer has an address in a different subnet.  This could produce different results.</p>
<p>If you don&#8217;t have access to the routers, I don&#8217;t think that you will be able to fix this on your own.</p>
<p>D</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: petroleumman</title>
		<link>http://itknowledgeexchange.techtarget.com/itanswers/cannot-access-one-ip-address/#comment-36318</link>
		<dc:creator>petroleumman</dc:creator>
		<pubDate>Fri, 03 Nov 2006 10:23:20 +0000</pubDate>
		<guid isPermaLink="false">#comment-36318</guid>
		<description><![CDATA[Hello,

Since the webserver (.76 address) is on the same subnet as your computer it should not be transversing a router, therefore the problem must lay somewhere between your local computer and the webserver. Anything beyond that would affect other machines on the subnet. 

From your computer run the command C:&gt;ipconfig /flushdns to clear out any corrupt entries in your local DNS resolver cache. Now from the webserver run first C:&gt;ipconfig /flushdns to clear the DNS resolver cache on the webserver, then run C:&gt;ipconfig /registerdns to force a re-registration of the webserver&#039;s DNS information with the DNS server responsible for your subnet. 

Since you are able to hit the website from other computers on your subnet and your not transversing a router it leads me to believe that the problem is in the DNS resolver cache because if an entry (right or wrong) exists in the cache, this is where the process stops. It only moves up the chain if an entry is not available.

Good luck!]]></description>
		<content:encoded><![CDATA[<p>Hello,</p>
<p>Since the webserver (.76 address) is on the same subnet as your computer it should not be transversing a router, therefore the problem must lay somewhere between your local computer and the webserver. Anything beyond that would affect other machines on the subnet. </p>
<p>From your computer run the command C:&gt;ipconfig /flushdns to clear out any corrupt entries in your local DNS resolver cache. Now from the webserver run first C:&gt;ipconfig /flushdns to clear the DNS resolver cache on the webserver, then run C:&gt;ipconfig /registerdns to force a re-registration of the webserver&#8217;s DNS information with the DNS server responsible for your subnet. </p>
<p>Since you are able to hit the website from other computers on your subnet and your not transversing a router it leads me to believe that the problem is in the DNS resolver cache because if an entry (right or wrong) exists in the cache, this is where the process stops. It only moves up the chain if an entry is not available.</p>
<p>Good luck!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: paulcat</title>
		<link>http://itknowledgeexchange.techtarget.com/itanswers/cannot-access-one-ip-address/#comment-36319</link>
		<dc:creator>paulcat</dc:creator>
		<pubDate>Fri, 03 Nov 2006 10:19:31 +0000</pubDate>
		<guid isPermaLink="false">#comment-36319</guid>
		<description><![CDATA[The trace is successful for a nearby address:
tracert 10.32.26.76
1 ]]></description>
		<content:encoded><![CDATA[<p>The trace is successful for a nearby address:<br />
tracert 10.32.26.76<br />
1 </p>
]]></content:encoded>
	</item>
	<item>
		<title>By: douger</title>
		<link>http://itknowledgeexchange.techtarget.com/itanswers/cannot-access-one-ip-address/#comment-36320</link>
		<dc:creator>douger</dc:creator>
		<pubDate>Thu, 02 Nov 2006 15:26:50 +0000</pubDate>
		<guid isPermaLink="false">#comment-36320</guid>
		<description><![CDATA[Paul,

You say that tracert fails at the .76 address directly.  I would be suspicious of the router that is right before that.  It may have an incorrect return route to you.  Have you spoken to the administrator of that router?. 

D]]></description>
		<content:encoded><![CDATA[<p>Paul,</p>
<p>You say that tracert fails at the .76 address directly.  I would be suspicious of the router that is right before that.  It may have an incorrect return route to you.  Have you spoken to the administrator of that router?. </p>
<p>D</p>
]]></content:encoded>
	</item>
</channel>
</rss>

<!-- Performance optimized by W3 Total Cache. Learn more: http://www.w3-edge.com/wordpress-plugins/

Page Caching using memcached
Database Caching 6/9 queries in 0.013 seconds using memcached
Object Caching 394/397 objects using memcached

Served from: itknowledgeexchange.techtarget.com @ 2013-05-26 02:06:49 -->