[92084] in North American Network Operators' Group
RE: Router / Protocol Problem
daemon@ATHENA.MIT.EDU (Mike Walter)
Wed Sep 6 09:48:29 2006
Date: Wed, 6 Sep 2006 09:41:22 -0400
From: "Mike Walter" <mwalter@3z.net>
To: <nanog@merit.edu>
Errors-To: owner-nanog@merit.edu
This is a multi-part message in MIME format.
------_=_NextPart_001_01C6D1BA.23C8B063
Content-Type: text/plain;
charset="US-ASCII"
Content-Transfer-Encoding: quoted-printable
One more thing, I can successfully do a tcptraceroute if that matters.
Mike Walter=20
________________________________
From: tony sarendal [mailto:dualcyclone@gmail.com]=20
Sent: Wednesday, September 06, 2006 9:32 AM
To: Mike Walter
Cc: nanog@merit.edu
Subject: Re: Router / Protocol Problem
On 06/09/06, Mike Walter <mwalter@3z.net> wrote:=20
I normally would not post to the group, but I am 100% stumped
and have talked with peers with no luck. =20
I have (2) Cisco 7204 Routers running BGP with 3 peers and HSRP.
I am not doing anything special with BGP, pretty much a default config
that has not changed in years. =20
Recently with no changes to my network, I have been having
problems connecting to certain websites and mail servers. I am always
able to ping the sites and trace route without error. If I telnet to
port 80 or port 25 it does not connect. If I login to my router and
telnet sourcing my each of Internet Providers ports, I am able to get to
the sites. I have talked with all the providers and none can find a
problem. If I shut down one specific peer, everything works fine. So I
keep thinking it was that peers problem some how. I have tested with
just that peer up and I still can not connect. However, when talking
with that peer, they are able to telnet from their network to the sites
I can not reach. I don't know what else to check besides shutting down
that peer. Which since it is under a 3 year contract, not an option.
That isn't the real solution anyhow. =20
Can anyone shed some light on or off-list?
Give your peer a /32 to install on their access router, verify that
return path
is via them and have them do connectivity tests to your problem sites.
If that checks out you step by step through it. Ask to be moved to a
different
access router, next change your hardware.
/Tony
--=20
Tony Sarendal - tony@polarcap.org
IP/Unix
-=3D The scorpion replied,
"I couldn't help it, it's my nature" =3D-
------_=_NextPart_001_01C6D1BA.23C8B063
Content-Type: text/html;
charset="US-ASCII"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Dus-ascii">
<META content=3D"MSHTML 6.00.2900.2963" name=3DGENERATOR></HEAD>
<BODY>
<DIV dir=3Dltr align=3Dleft><SPAN class=3D539384013-06092006><FONT =
face=3DArial=20
color=3D#0000ff size=3D2>One more thing, I can successfully do a =
tcptraceroute if=20
that matters.</FONT></SPAN></DIV><!-- Converted from text/rtf format -->
<P><SPAN lang=3Den-us><FONT face=3DVerdana size=3D2>Mike =
Walter</FONT></SPAN>
<HR tabIndex=3D-1>
<FONT face=3DTahoma size=3D2><B>From:</B> tony sarendal=20
[mailto:dualcyclone@gmail.com] <BR><B>Sent:</B> Wednesday, September 06, =
2006=20
9:32 AM<BR><B>To:</B> Mike Walter<BR><B>Cc:</B>=20
nanog@merit.edu<BR><B>Subject:</B> Re: Router / Protocol=20
Problem<BR></FONT><BR></P>
<DIV></DIV><BR><BR>
<DIV><SPAN class=3Dgmail_quote>On 06/09/06, <B =
class=3Dgmail_sendername>Mike=20
Walter</B> <<A href=3D"mailto:mwalter@3z.net">mwalter@3z.net</A>>=20
wrote:</SPAN>
<BLOCKQUOTE class=3Dgmail_quote=20
style=3D"PADDING-LEFT: 1ex; MARGIN: 0pt 0pt 0pt 0.8ex; BORDER-LEFT: =
rgb(204,204,204) 1px solid">
<DIV>
<DIV>
<P><FONT face=3DArial size=3D2>I normally would not post to the group, =
but I am=20
100% stumped and have talked with peers with no luck. =
</FONT></P>
<P><FONT face=3DArial size=3D2>I have (2) Cisco 7204 Routers running =
BGP with 3=20
peers and HSRP. I am not doing anything special with BGP, pretty =
much a=20
default config that has not changed in years. </FONT></P>
<P><FONT face=3DArial size=3D2>Recently with no changes to my network, =
I have been=20
having problems connecting to certain websites and mail servers. =
I am=20
always able to ping the sites and trace route without error. If =
I telnet=20
to port 80 or port 25 it does not connect. If I login to my =
router and=20
telnet sourcing my each of Internet Providers ports, I am able to get =
to the=20
sites. I have talked with all the providers and none can find a=20
problem. If I shut down one specific peer, everything works =
fine. =20
So I keep thinking it was that peers problem some how. I have =
tested=20
with just that peer up and I still can not connect. However, =
when=20
talking with that peer, they are able to telnet from their network to =
the=20
sites I can not reach. I don't know what else to check besides =
shutting=20
down that peer. Which since it is under a 3 year contract, not =
an=20
option. That isn't the real solution anyhow. </FONT></P>
<P><FONT face=3DArial size=3D2>Can anyone shed some light on or=20
off-list?</FONT></P></DIV></DIV></BLOCKQUOTE>
<DIV><BR>Give your peer a /32 to install on their access router, verify =
that=20
return path<BR>is via them and have them do connectivity tests to your =
problem=20
sites.<BR><BR>If that checks out you step by step through it. Ask to be =
moved to=20
a different<BR>access router, next change your=20
hardware.<BR><BR></DIV></DIV>/Tony<BR><BR>-- <BR>Tony Sarendal - <A=20
href=3D"mailto:tony@polarcap.org">tony@polarcap.org</A><BR>IP/Unix<BR>&nb=
sp; =20
-=3D The scorpion=20
replied,<BR> &=
nbsp; =20
"I couldn't help it, it's my nature" =3D-<BR></BODY></HTML>
------_=_NextPart_001_01C6D1BA.23C8B063--
