This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Server is unable to access firewall interface or web XG450

I have a particular server that cannot access the firewall interface or the internet. I get a connection refused error when trying to access from this particular server. ( other servers and workstaions can access not an issue at all )

The firewall is 172.16.1.254:4444 the server is 172.16.1.119.

packet trace shows

I had another sever that had similar issues the only way I got around it was to change the IP address of that host, this is not an option this time due to the number of places this one is referenced ( Skype front end server )

This thread was automatically locked due to age.

Parents

0 rfcat_vk over 4 years ago

Hi Guy,

please show a copy of the server network configuration.

ian
Cancel
Vote Up 0 Vote Down

Cancel
0 Guy Robertson over 4 years ago in reply to rfcat_vk

This is the setup of host that cannot access.

The server is a VM on Hyper V. Systems running on the same host, and same physical NIC's on the host are having no issues

This one is on the same hypervisior, same NIC same software defined network and can get on without an issue.
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 4 years ago in reply to Guy Robertson

Hi Guy,

a minor point there is a difference in DNS settings but that should not cause the issue. Is the server able to see other network devices?
ian
Cancel
Vote Up 0 Vote Down

Cancel
0 Guy Robertson over 4 years ago in reply to rfcat_vk

Yep it can see everything else without a drama (Production Skype server), We had a similar issue with one other server. Nothing we did would budge it, so I moved its network address and fixed it. I do not have that luxury this time around.
Cancel
Vote Up 0 Vote Down

Cancel
0 Guy Robertson over 4 years ago in reply to rfcat_vk

172.16.1.23 and 172.16.1.2 are both valid DNS hosts in our environment .. just a legacy of migrating from 2008 to 2016 domain have not updated all the static configurations as yet.
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 4 years ago in reply to Guy Robertson

Hi Guy,

the issue really sounds like a Nic configuration issue. Do you use the XG to provide dhcp addresses because there could be duplicate assignments.

ian
Cancel
Vote Up 0 Vote Down

Cancel
0 Guy Robertson over 4 years ago in reply to rfcat_vk

No all DHCP is via the windows network, looked everywhere for any IP duplicates without luck. The server range is all statically applied, cannot see any duplicates in the core switch network.
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 4 years ago in reply to Guy Robertson

Hi Guy,

from your configuration you have internal network routing, where does the XG fit into this? I think a simple diagram might help when others start looking at your issue.

Ian

Looking at your original post in detail again there error message indicates there is no firewall rule matching the IP address access. Do you have restrictive firewall rules in place?

Ian

Added an additional question.
[edited by: rfcat_vk at 6:05 AM (GMT -7) on 23 Sep 2020]
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 rfcat_vk over 4 years ago in reply to Guy Robertson

Hi Guy,

from your configuration you have internal network routing, where does the XG fit into this? I think a simple diagram might help when others start looking at your issue.

Ian

Looking at your original post in detail again there error message indicates there is no firewall rule matching the IP address access. Do you have restrictive firewall rules in place?

Ian

Added an additional question.
[edited by: rfcat_vk at 6:05 AM (GMT -7) on 23 Sep 2020]
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data