Quillyn Posted August 14, 2015 Posted August 14, 2015 Background I have just inherited a bit of a mess, a small but IT heavy school. The admin systems are on manual IP's in a range specified by county 10.***.***. The Classroom systems are on a 192.168.0 range DHCP which I cannot change until we can replace the wireless system (long story) There are 2 servers with double network ports with one on each IP range one the domain the other DHCP The NAS and sims server are both on the 10.***.*** range The school has 3 cisco managed switches that are on default settings sg300-52 I am currently trying to get the Sophos antivirus server running it seems its only ever worked for the 10.*** network Question The 192.168.0 network can ping the 10.*** network yet the 10.*** network cannot get a reply from any machine on the 192.168.0 network. Firewalls are of course disabled. Does anyone have any idea why? I believe this might be the tip of the iceberg and most probably the origin of the Sophos issue.
andydis Posted August 14, 2015 Posted August 14, 2015 (edited) can you tracert from 192.168.0.x to the 10 ? Are the servers running routing and remote access? Edited August 14, 2015 by andydis
Quillyn Posted August 14, 2015 Author Posted August 14, 2015 I can traceroute from 192.168.0.* to 10.*** It routes via 192.168.0.2 (the DHCP and printer server, and default gateway for the classroom network) None of the servers are running routing or remote access
andydis Posted August 14, 2015 Posted August 14, 2015 (edited) sorry can you tracert from a CLIENT on 10 to client on 192 aswell ? whats the default gateway ip on the 10 clients? whats the subnet mask of the 10 clients? on a 10 client open a cmd prompt and type " route print" press enter and paste results here Edited August 14, 2015 by andydis
Quillyn Posted August 14, 2015 Author Posted August 14, 2015 Tracert from a 10 client to a 192 client goes off 10.***.***.1 (default gateway admin) the off the schools network to county. Subnet mask for 10 and 192 machines is set to 255.255.255.0 IP of client tested from is : 10.*.*.184 Interface List 11...a4 1f 72 7a 40 0c ......Realtek PCIe GBE Family Controller 1...........................Software Loopback Interface 1 12...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter 13...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface =========================================================================== IPv4 Route Table =========================================================================== Active Routes: Network Destination Netmask Gateway Interface Metric 0.0.0.0 0.0.0.0 10.***.***.1 10.***.***.184 276 10.***.***.0 255.255.255.0 On-link 10.***.***.184 276 10.*.*.184 255.255.255.255 On-link 10.*.*.184 276 10.*.*.255 255.255.255.255 On-link 10.*.*.184 276 127.0.0.0 255.0.0.0 On-link 127.0.0.1 306 127.0.0.1 255.255.255.255 On-link 127.0.0.1 306 127.255.255.255 255.255.255.255 On-link 127.0.0.1 306 224.0.0.0 240.0.0.0 On-link 127.0.0.1 306 224.0.0.0 240.0.0.0 On-link 10.*.*.184 276 255.255.255.255 255.255.255.255 On-link 127.0.0.1 306 255.255.255.255 255.255.255.255 On-link 10.*.*.184 276 =========================================================================== Persistent Routes: Network Address Netmask Gateway Address Metric 0.0.0.0 0.0.0.0 10.*.*.1 Default ===========================================================================
steve Posted August 14, 2015 Posted August 14, 2015 As the DHCP box is dual NIC, my guess would be the 192.168 network is routing all its non local traffic via your 10. network You could check this with a tracert to something like "www.microsoft.com" Or a pathping would show this too. On the DHCP box run a ROUTE PRINT This should show any routing rules created to forward on traffic from one subnet to the other. Look for lines containing both of your subnets. If all your switches are out of the box config, I guess theres no VLANs. If this is the case it would explain the single DHCP server. Putting a second DHCP server on the same LAN would result in clients picking which ever communicated with them first. You can run multipul subnets on the same LAN, it just can be a PIN to troubleshoot and work with. If your config is like this, you might not have any route from the admin to class subnets - despite being on the same LAN.
andydis Posted August 14, 2015 Posted August 14, 2015 10.***.***.1 is this a router? / managed router of somekind? if yes , IMO this is preventing your 10 speaking to your 192 as you have said Tracert from a 10 client to a 192 client goes off 10.***.***.1 (default gateway admin) the off the schools network to county i guess you mean , then goes off to the countys (LA) network... 1
Quillyn Posted August 27, 2015 Author Posted August 27, 2015 10.***.***.1 is counties router which they will not change in anyway under any circumstances after 2 weeks of me nagging, frustrating.
pete Posted August 27, 2015 Posted August 27, 2015 10.***.***.1 is counties router which they will not change in anyway under any circumstances after 2 weeks of me nagging, frustrating. Treat the county router as a network cable and configure routing on your switches instead. A quick glance at Google suggests those switches are capable of it.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now