Sign in with
Sign up | Sign in
Your question

DMZ and Ping issue when changing ip address for a server

Last response: in Networking
Share
January 4, 2007 5:54:43 AM

I have got a media server 2003 installed in DMZ zone (Cisco PIX 525) , with an ip address 192.168.101.204/24, it was able to ping other servers (sql server , help server, etc ) which are in DMZ zone as well. Basically all servers are in DMZ area

Recently this media server is not able to ping these servers (sql server , help server, etc) , I do not why, but if I changed the ip address (last octet only) for this media server to 192.168.101.222 , it would be able to ping other servers (sql server , help server, etc).

There is no firewall on the media server and there is no firewall on the other servers as well.

All servers have got win2003 OS.

The error message for ping is : timed out

This is no entry with our cisco PIX for both IP addresses 192.168.101.204 and 192.168.101.222
January 6, 2007 5:18:07 PM

I'm just curious, if you change the IP to *.*.*.222 and it works, why not just leave it there?
January 8, 2007 11:53:52 AM

"arp -d" command solved the issue, thanks guys for this advice
Related resources
January 8, 2007 12:58:49 PM

Glad things worked out, you could have also entered "clear arp" on the PIX to refresh the ARP table.
January 8, 2007 1:05:58 PM

Quote:
entered "clear arp" on the PIX

I would not have been thinking of that , because since the PIX won't do anything with the ICMP traffic on the DMZ local network.
ICMP traffic will go into one port of the switch and out the relevant one to the receiving server, and never reach the PIX.
!