NEED Some HELP

Sat Oct 10 13:24:41 UTC 2009

Hi Roland,

My GSR and 6509 are newly installed and no ACLs in place. You can try to
ping 180.178.73.1 and 180.178,73.2.

180.178.73.1 - GSR
180.178,73.2 - 6509

I can only reach 180.178.73.1 from outside. I cannot reach 180.178.73.2
which is the IP of my 6509. Not sure if this has something to do with the
hardware.

I am just wondering why I can't reach 180.178,73.2. Like I said earlier in
my email, I have the default route from my 6509 to te GSR.

My GE module is inserted to the GSR slot 1. Is the "hw-module" config
requred on the GSR?

Please help.

Thanks,
-bong

------------------------------

Message: 7
Date: Sat, 10 Oct 2009 16:24:35 +0700
From: Roland Dobbins <rdobbins at arbor.net>
Subject: Re: NEED Some HELP
To: NANOG list <nanog at nanog.org>
Message-ID: <0D85644F-A83F-461B-A9FB-EEBF54259DD6 at arbor.net>
Content-Type: text/plain; charset=us-ascii; format=flowed; delsp=yes

On Oct 10, 2009, at 4:12 PM, Bong Barnido wrote:

> I cannot ping the IP on my Cisco 6509 from the internet.

Quite out of the context of the connectivity issue you're trying to
troubleshoot, it's in fact extremely desirable to have your 6509 (and
all your routers, for that matter) unpingable from the outside your
own network.  The BCP is to use iACLs, CoPP, et. al. to keep out all
unsolicited traffic headed to, as opposed to through (like traceroute,
pinging customer hosts, etc.), your network infrastructure.

-----------------------------------------------------------------------
Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>

Sorry, sometimes I mistake your existential crises for technical
insights.

                       -- xkcd #625

------------------------------

Message: 6
Date: Sat, 10 Oct 2009 17:12:13 +0800
From: Bong Barnido <bong.barnido at gmail.com>
Subject: NEED Some HELP
To: nanog at nanog.org
Message-ID:
       <16a26ba20910100212i2158e929peef59520613150c8 at mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1

Hi Nanog Members,

I've been troubleshooting this problem for a few days already but i'm still
unable to fix it. I think it's now time to ask some help from Nanog members.

I cannot ping the IP on my Cisco 6509 from the internet.

Here are the setup:
*Internet*---(copper)-->*GSR*----(fiber)--->* Cisco 6509*   <<<<<This setup
is NOT OK - I cannot ping
*Internet*---(copper)-->*GSR*----(copper)---> *Cisco 6509*   <<<<< This
setup is OK - I can ping(this is directly connected to the PRP2)

NOTES:

  - I am using PRP2 on my GSR and the fiber is connected to the 4xGE module
  - I have a default route from Cisco 6509 to GSR
  - From the 6509 I can only ping the IP addresses on the GSR, addresses
  outside the GSR are not reachable
  - From the internet, I can only ping up to the GSR
  - I can ping from GSR to 6509 and vise versa
  - The IP on the 6509 is configured on the interface that is directly
  connected to the GSR.

Thanks,
-bong