Ascend Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: (ASCEND) firewall probs?
This really sounds like either:
1) A proxy ARP problem
2) A routing problem (Are you using RIP or OSPF?)
Is Proxy ARP enabled on any of the boxes involved?
If it is enabled, what is the reason for enabling it.
Is it set to None, Active, or Always?
Steve LaDuke.
-----Original Message-----
From: MyLink Admin [mailto:Admin@mylink.net]
Sent: Friday, September 11, 1998 8:35 AM
To: ascend-users@bungi.com
Subject: (ASCEND) firewall probs?
We are having problems with the firewall software ? causing our entire
network to lock up:
A client has two isdn circuits installed at his site. One pipeline 75 is
serving several pc's for simple
internet access....no firewalls on the pipeline....subnet routed to pipeline
with 16 addresses.....
5 computers on the network....one hub...pipeline 75 is called by a pipe 50
on our network (our line
is unmetered...).
There is also a pipeline 130 at the customer site. This pipeline was
configured with a single ip address
and is called by another pipeline 50 on our network. There is a firewall
installed on the pipe 130 at the customers site. We have an additional
single ip being routed from our backbone router (cisco) to our pipeline 50,
our pipeline 50 has a static route for the extra ip to his pipe130, his
pipe130 has a static route for the extra ip for an NT machine
that is being used as a web/ftp server. The client's NT machine and pipe130
are in a seperate hub from the rest of
his network (with the 5 windows machines and pipeline50).
The world can see the NT machine and pipe130 fine...no problems. The world
can see the windows machines and pipeline 50 no problems...they can surf
fine....but whenever the client accesses his web server on the pipeline 130
circuit from a windows computer on the pipeline 50 circuit his network
appears to freeze, and our network appears to freeze.....this did not happen
when the circuits were initially installed but at a later date when the
secure access firewall hash codes were entered and a firewall loaded.
The client does not want to turn off the firewall (security) and insists
that there is a problem with our routing.
The routing was working fine before the client entered the firewall hash
codes and loaded the firewall.
Our network monitoring scripts go nuts whenever he tries to access his
server from his surfing machines....
our cisco border router appears locked and will not respond, a max 4004 and
a max4048 appear locked and do not
respond, and the pipeline 50 on our end that provides the surfing machines
an unmetered connection appears locked
and does not respond. They stay locked until he reboots the windows machine
on his network that he tried to access his server from.
The client is getting irritated that we haven't found a solution yet (we've
been calling and emailing ascend with no response) and we are
getting worried that the client is starting to cause the freezes when we
have asked him to wait until we find a solution (last night
our equipment locked up for 2 hours during peek times).
Any ideas on what is going on? Is it a routing problem.....firewall
problem....cisco problem....ascend problem.....
Suggestions for things to try?
Thanks,
--------------------------------------------
Scott McDonald
Systems Engineer
MyLink, Inc.
++ Ascend Users Mailing List ++
To unsubscribe: send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd: <http://www.nealis.net/ascend/faq>
++ Ascend Users Mailing List ++
To unsubscribe: send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd: <http://www.nealis.net/ascend/faq>