VM with No Internet Access

[prutter]

I have a strange one that has me puzzled.  I have two servers in the DMZ.  Both setup the exact same way (diff IP address) however one will not get internet access.  One is my View security server.  has access to internet and functions just fine.  They are both Server2008 R2 VM's.  I tried different NICS, Different host, the same hosts, with no luck.  However i can put this on my internal network VLAN and it works just fine.

Under teh network and sharing center it shows the ted X thru the internet.  Changed it from Static to DHCP, tried diff network types (Private, public, etc) with now luck.  Been banging my head all day.  Anyone have any thoughts on this one??  Any help is appreicated.  Thanks

[Linjo]

Could it be that your ISP is only allowing for one public IP?

// Linjo

[prutter]

No.  We have a block of 32.  12 of which are running.  These 2 VM's are on the same vswith, same DMZ switch, have all the same network setting and still no luck.

[milton123]

You talk about internal network VLAN that get internet. Please make sure that your DMZ allow internet. I think your DMZ in different VLAN which does not have permission to access internet. So you have to use your internal network VLAN to have access internet.

Cheers, Yours Udin

[hbato]

@milton123

I don't think that it is in his DMZ's vlan since he has his View security server on DMZ up and running with internet connection. :smileysilly:

@Prutter

Did you tried to move your View security server and see if the other server gets connected? Might be a network misconfiguration of some sort.

Regards, Harold

[prutter]

hbato is correct.  Both the security server and the bad server are on teh same DMZ.  They were on seperate hosts (seperate vswitches) and i tried them on the same host with no luck.  I can ping teh gateway in my DMZ but that is as far as it gets.

hbato, i have not tried to do that since there were people sonnected to the security server.  I will have to schedule some time for that one. 

Thanks for all the replies!!

[rickardnobel]

prutter wrote:

I can ping the gateway in my DMZ but that is as far as it gets.

If you can ping the router in the DMZ this implies that the virtual networking on the ESXi is setup correctly, from the vSwitch perspective.

A very stupid and simple thing, but you are sure that you have a correct default gateway configured inside the VM?

And there are no other strange routes in the VM routing table that could cause incorrect routing? Check with "route print" in the command prompt.

Could there be any access lists or firewall rules on your router that could deny this VM connections outside the network?

[prutter]

Well, this one had me going for quite some time,  I got sonicwall tech suport on the line and they said all was working fine.  What i did discover was that the switch in the DMZ somehow picked up the IP address of our gateway and that's why i was able to ping it.  It was fighting for the IP address of teh gateway and that's why i couldn't get a connection.  This must have happened after i got my View Security server working and that's why one would work and the other didn't.  I changed the ip address of my security server and after doing that they were both broke.  That is when i discovered that the switch ws the problem.  Changed the ip address on the switch and we are all working now.  Thanks a bunch to all that replied to this thread.  I really hate it when things don't make sense and having other eyes sure does help.  Thanks again!!