1. Home
  2. Cisco Systems
  3. Router debug

Router debug

Users cannot connect to the applications but can PING the app servers (10.10.10.130/134/135) - these are NATted - users see them as

192.168.0.42/37/35. Any suggestions on what the router debug output is saying?

3725_Backup#

*Mar 1 00:11:12: %ISDN-6-CONNECT: Interface BRI1/0:1 is now connected to xxxxxxx 3725_Backup# show ip nat trans Pro Inside global Inside local Outside local Outside global

--- 10.10.10.130 192.168.0.42 --- ---

--- 10.10.10.134 192.168.0.37 --- ---

--- 10.10.10.135 192.168.0.35 --- ---

3725_Backup# ********************************************************************************** w client logon attempt

3725_Backup# debug ip packet detail

17:42:35: IP: s=10.10.10.130 (Dialer4), d=10.10.10.135, len 48, rcvd 2 17:42:35: TCP src=2739, dst=3200, seq=3212891754, ack=0, win=32768 SYN

17:42:35: IP: s=10.10.10.135 (local), d=10.10.10.130 (Dialer4), len

40, sending 17:42:35: TCP src=3200, dst=2739, seq=0, ack=3212891755, win=0 ACK RST

17:42:35: IP: s=10.10.10.130 (Dialer4), d=10.10.10.135, len 48, rcvd 2

17:42:35: TCP src=2739, dst=3200, seq=3212891754, ack=0, win=32768 SYN

17:42:35: IP: s=10.10.10.135 (local), d=10.10.10.130 (Dialer4), len

40, sending 17:42:35: TCP src=3200, dst=2739, seq=0, ack=3212891755, win=0 ACK RST

17:42:36: IP: s=10.10.10.130 (Dialer4), d=10.10.10.135, len 48, rcvd 2

17:42:36: TCP src=2739, dst=3200, seq=3212891754, ack=0, win=32768 SYN

17:42:36: IP: s=10.10.10.135 (local), d=10.10.10.130 (Dialer4), len

40, sending 17:42:36: TCP src=3200, dst=2739, seq=0, ack=3212891755, win=0 ACK RST
Reply to
terrydoc
Loading thread data ...

It's showing that the source IP 10.10.10.130 is attempting to connect to

10.10.10.135 on port 3200 (The SYN packet). The server then responds with a RST packet, which indicates that no application is listening on port 3200. The source and destination are all inside networks (all on the 10.10.10.x network), so no NATing is being done
**********************************************************************************
Reply to
Thrill5

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.