PacketTrace Default Gateway - cisco-ios

I've set up the default gateway of the router I am configurating as serial2/0 as they call it on packet trace with the address of 172.16.68.1. When I try and ping the gateway from the pc with the address 172.16.16.1 I just get an error saying request timed out.
Have I done the default gateway correctly and if I have can anyone suggest what is causing the time out?

The subnet 172.16.16.1/21 which includes the PC does not contain the IP of its default gateway (172.16.68.1). That means that the PC cannot access its own default gateway with its current routing table.
You need to either setup a router/gateway within the PC's current subnet, or change the subnet settings to include the gateway. Keep in mind that the last alternative might not be applicable in your network.

Answered my own question. The gateway was correct it was the DTE and the DCE that was messed up on my end and causing problems with the pinging as I can now ping it with no problems. Thank you for all your help :)

Related

Local Area Network Configuration Question

Comcast installed a Juniper Universal Access Router ACX1100, I plugged our switch to the port that the technician told us that is in/out port. But nothing happened, after reading and asking I was told that I need a managed switch to be configured with the gateway IP and that IP is a /29. That's where I got lost. According to him there are 6 usable IP's.
example:
Gateway: 192.168.120.161/29
Usable Range: 192.168.120.162 - 192.168.120.167
One of my multiple questions is what hardware do I need to be able to connect my PC's?, I configured a managed switch, but when I connect my laptop to it I get Unidentified Network and No Internet Connection.
I have been reading and I think I need a VPN with DHCP server integrated.
If some one can help me I'll appreciate it.
/29 is the subnet mask, it can also be expressed as 255.255.255.248. Basically it defines which part of the IP is the network ID and which part of IP is the host ID.
I think in order to accurate assess your situation, we need to know exactly what kind of configuration you set on the managed switch you purchased, also which managed switch did you purchase?
Also currently on your laptop's NIC, what IP is assigned on there?
Either on your old unmanaged switch or on the managed switch, you can try assigning one of the addresses from the /29 block that the technician told you about statically. And the default-gateway with the addresses you posted in your question.

Access Network router and find IP address (unknown gateway and gateway not shown)

I have an old netgear router and I don't remember the gateway for it, whenever I connect to it over ethernet no gateway is specified. Is there any way to find the ip so that I can connect to it?
(I don't know what router type it is, its serial is 1JX167B007721)
Update
So it was just the ethernet port on my laptop that was messed up. When I plugged the router to my old desktop it worked and gave me the default gateway (192.168.0.1)
The proper way to do this would be to iterate through all possible (common) ip addresses and ping them. The easiest way to do this would be to use batch and just run through the ping command.
Most of the time it'll be 192.168.1.1 . To start fresh make sure you do a complete reset on it. Hopefully there is a reset button on it, holding that for a few seconds should perform the clean reset.

Domain name not resolving

I have centos6 with physical firewall of Cisco ASDM6.1. When I am executing dig gmail.com or dig google.com, it gives me following error:
connection timed out; no servers could be reached
To get the domain resolved, do I need to make any change in firewall? If yes, then what change do I need to make in CISCO ASDM Firewall? If not, then how can I solve this?
If DNS is working fine then check whether firewall is blocking DNS port. if so open the DNS port and see whether it works.

Modem 3G - Two different IPs

I just saw something I never have seen before.
I got a new SIM card from Nextel (communication company). I tried to use it on a 3G modem E3131, where I had a successful case before with VIVO (another communication company). Now it is different, instead to have only an external IP, I'm getting two different IPs.
For example:
When I go to some service like whatismyip.com, I see an IP 200.xxx.xxx.xxx, but when I check it out on ipconfig /all, I see another IP 10.xxx.xxx.xxx.
My problem is I can't connect to my app from another computer because there's no port redirection to internal IP. I must connect to some specific ports.
Does anyone know how to fix this problem?
Thanks in advance!

Special IP addresses

In particular I'm looking for an IP address that I can put in my hosts file that will black-hole a given DNS name. Right now I'm using 127.0.0.1 but that would start acting odd if I installed any services.
How can I prevent a 3rd party program from contacting a given server?
RFC-3330 seems to be the goldmine
The best option seems to be:
192.0.2.0/24 - This block is assigned as "TEST-NET" for use in
documentation and example code. It is often used in conjunction with
domain names example.com or example.net in vendor and protocol
documentation. Addresses within this block should not appear on the
public Internet.
Actually the loopback IP 127.0.0.1 is ideal for ad blocking. If you run Apache anyway, you setup a virtual server that returns 404 for requests on 127.0.0.1. That way your browser is not constantly waiting for the connect to an unknown host to timeout. All those ad requests return instantly, freeing up resources in your browser to get the actual page content.
I've used 0.0.0.0 in my hosts file to block ad web sites. Not sure if there are any side affects?!?!
I see that you've correctly found that 192.0.2.0/24 is reserved for testing, and won't appear on the Internet.
However if your local area network relies on a default route to get to the rest of the Internet then you'll still be sending this traffic out of your network towards your ISP.
Best case is that your ISP will send back ICMP_NET_UNREACHABLE errors and your applications will notice those and act accordingly. Worst case is that the traffic is completely blackholed, at which point your applications will sit around until the connections timeout.
The correct strategy for avoiding this depends on your OS and local network configuration. On a Linux system I'd just add a route for that /24 with "reject" as a target.
Addresses 127.0.0.0 to 127.255.255.255 can be used for loopback connections.
So have your httpd listening on 127.0.0.1 and use any of the others for the blacklist.
If you use any of the private IP address ranges (10.whatever, 192.168.whatever) that you aren't connected to that should work.
One advantage of using 127.0.0.1 is that an attempt to contact the server will return immediately with failure (as long as you're not running a local server, of course). If you use any other address that does not refer to a specific machine, such as 192.0.2.x, then attempts to connect to a server at that address will take some time to time out (at least a minute or more).
I use denyhosts for ssh. http://denyhosts.sourceforge.net/ It attempts to block known malicious sources. Is this what you're talking about?
0.0.0.0 ( as another poster put ) shouldn't be used - it has a distinct meaning that isn't "nothing" and it isn't reserved for what in most cases is a dead-end. As for BCS's comment to dulaneyb about DCHP and private ranges - a private range is a private range. If you're kicking to your private range, then you're routing to an empty slot. If you're kicking to one of the other private ranges, then an upstream device should drop it.

Resources