topic Connectivity Issues in General Topics

Connectivity Issues

kevin.shain — Tue, 21 Sep 2010 12:53:49 GMT

We are having an odd connectivity issue that randomly shows up on some of our machines. They pull an IP # from the DHCP server, they are able to do nslookups, but when I run a traceroute they time out after the L3 Trust port (10.2.0.1). If you let it sit for a few minutes it will suddenly start working.

There is no record in the Traffic Logs of the traffic trying to get out until after it starts working.

Has anybody experienced anything similar?

I'm not sure if this is a PAN issue or an ISP issue.

Re: Connectivity Issues

pkruse — Tue, 21 Sep 2010 13:03:07 GMT

Good Morning,

If you open a CLI and type "show sessions all filter source xxx.xxx.xxx.xxx" where the xxx.xxx.xxx.xxx = the ip address of the originating device you should see your ICMP packets, this is the starting point of trouble shooting this connection issue. One thing you might also try is providing the device with a static IP address and manually assign default router and DNS, then see if you have the same behavior. This is a situation where the more information you have the clearer the solution will become.

Re: Connectivity Issues

kevin.shain — Wed, 22 Sep 2010 12:32:33 GMT

Hi,

I did this yesterday and it appears that the PAN is passing traffic properly as I can see it getting to the L3 Untrust port, but it never gets back to the machines that are having the difficulties.