Home All Groups Group Topic Archive Search About

No internet access - destination port unreachable

Author
14 Nov 2006 2:08 PM
Adam Thompson
HI all,

Getting a strange problem here.  Got about 120 computers, all from the
same unattended windows build, all picking up IP configuation from the
same DHCP range, and one of them, is giving 'destination port
unreachable' errors when trying to ping external addresses, either by
name or IP.

The machine can't see anything external to the company network (using
anything - have tried ping, IE6, telnet.exe), and I don't know why.

I've disabled NetBIOS over TCP/IP, I've removed the connection on the
XP machine, removed the adapter in device manager, re-installed the lot
and the same thing happens.

Any pointers would be most gratefully appreciated, as I'm out of ideas.

Author
14 Nov 2006 5:42 PM
Robert L [MVP - Networking]
Use tracert command to trace where the traffic to. Or these search results may help,

troubleshooting ping issues ping 4.2.2.1 Pinging 4.2.2.1 with 32 bytes of data: Reply from 209.165.105.129: Destination net unreachable. Causes: If you have incorrect IPSec settings, ...
      www.chicagotech.net/troubleshootingping.htm 


routing issues on vpn TTL expired in transit and Destination host unreachable. Can ping VPN server only but not other resources. Symptom: after establishing VPN, you can ping and ...
      www.chicagotech.net/routingissuesonvpn.htm 



Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
  "Adam Thompson" <adw***@gmail.com> wrote in message news:1163513322.516314.22170@i42g2000cwa.googlegroups.com...
  HI all,

  Getting a strange problem here.  Got about 120 computers, all from the
  same unattended windows build, all picking up IP configuation from the
  same DHCP range, and one of them, is giving 'destination port
  unreachable' errors when trying to ping external addresses, either by
  name or IP.

  The machine can't see anything external to the company network (using
  anything - have tried ping, IE6, telnet.exe), and I don't know why.

  I've disabled NetBIOS over TCP/IP, I've removed the connection on the
  XP machine, removed the adapter in device manager, re-installed the lot
  and the same thing happens.

  Any pointers would be most gratefully appreciated, as I'm out of ideas.
Author
15 Nov 2006 2:04 PM
Adam Thompson
Thanks for the suggestions, but neither seem to be applicable, as this
connection doesn't use IPSec or any kind of VPN connection.

Robert L [MVP - Networking] wrote:

Show quoteHide quote
> Use tracert command to trace where the traffic to. Or these search results may help,
>
> troubleshooting ping issues ping 4.2.2.1 Pinging 4.2.2.1 with 32 bytes of data: Reply from 209.165.105.129: Destination net unreachable. Causes: If you have incorrect IPSec settings, ...
>       www.chicagotech.net/troubleshootingping.htm
>
>
> routing issues on vpn TTL expired in transit and Destination host unreachable. Can ping VPN server only but not other resources. Symptom: after establishing VPN, you can ping and ...
>       www.chicagotech.net/routingissuesonvpn.htm
>
>
>
> Bob Lin, MS-MVP, MCSE & CNE
> Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
> How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
>   "Adam Thompson" <adw***@gmail.com> wrote in message news:1163513322.516314.22170@i42g2000cwa.googlegroups.com...
>   HI all,
>
>   Getting a strange problem here.  Got about 120 computers, all from the
>   same unattended windows build, all picking up IP configuation from the
>   same DHCP range, and one of them, is giving 'destination port
>   unreachable' errors when trying to ping external addresses, either by
>   name or IP.
>
>   The machine can't see anything external to the company network (using
>   anything - have tried ping, IE6, telnet.exe), and I don't know why.
>
>   I've disabled NetBIOS over TCP/IP, I've removed the connection on the
>   XP machine, removed the adapter in device manager, re-installed the lot
>   and the same thing happens.
>
>   Any pointers would be most gratefully appreciated, as I'm out of ideas.
>
> ------=_NextPart_000_006E_01C707E1.FFF04180
> Content-Type: text/html; charset=iso-8859-1
> Content-Transfer-Encoding: quoted-printable
> X-Google-AttachSize: 3365
>
> <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
> <HTML><HEAD>
> <META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
> <META content="MSHTML 6.00.2900.2963" name=GENERATOR>
> <STYLE></STYLE>
> </HEAD>
> <BODY bgColor=#ffffff>
> <DIV>Use tracert command to trace where the traffic to. Or these search results
> may help,</DIV>
> <DIV>&nbsp;</DIV>
> <DIV>
> <P class=g><A class=l
> href="http://www.chicagotech.net/troubleshootingping.htm"><FONT
> color=#663399>troubleshooting <B>ping</B> issues</FONT></A>
> <TABLE cellSpacing=0 cellPadding=0 border=0>
>   <TBODY>
>   <TR>
>     <TD class=j><FONT size=-1><B>ping</B> 4.2.2.1 Pinging 4.2.2.1 with 32
>       bytes of data: Reply from 209.165.105.129: <B>Destination</B> net
>       <B>unreachable</B>. Causes: If you have incorrect IPSec settings,
>       <B>...</B><BR><SPAN class=a><FONT color=#008000><A
>       href="http://www.chicagotech.net/troubleshootingping.htm">www.chicagotech.net/troubleshooting<B>ping</B>.htm</A>
>       </FONT></SPAN></FONT></TD></TR></TBODY></TABLE>
> <P class=g><A class=l
> href="http://www.chicagotech.net/routingissuesonvpn.htm"><FONT
> color=#663399>routing issues on vpn</FONT></A>
> <TABLE cellSpacing=0 cellPadding=0 border=0>
>   <TBODY>
>   <TR>
>     <TD class=j><FONT size=-1>TTL expired in transit and <B>Destination</B>
>       host <B>unreachable</B>. Can <B>ping</B> VPN server only but not other
>       resources. Symptom: after establishing VPN, you can <B>ping</B> and
>       <B>...</B><BR><SPAN class=a><FONT color=#008000><A
>       href="http://www.chicagotech.net/routingissuesonvpn.htm">www.chicagotech.net/routingissuesonvpn.htm</A>
>       </FONT></SPAN></FONT></TD></TR></TBODY></TABLE></P></DIV>
> <DIV><BR>Bob Lin, MS-MVP, MCSE &amp; CNE<BR>Networking, Internet, Routing, VPN
> Troubleshooting on <A
> href="http://www.ChicagoTech.net">http://www.ChicagoTech.net</A> <BR>How to
> Setup Windows, Network, VPN &amp; Remote Access on <A
> href="http://www.HowToNetworking.com">http://www.HowToNetworking.com</A> </DIV>
> <BLOCKQUOTE
> style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
>   <DIV>"Adam Thompson" &lt;<A
>   href="mailto:adw***@gmail.com">adw***@gmail.com</A>&gt; wrote in message <A
>   href="news:1163513322.516314.22***@i42g2000cwa.googlegroups.com">news:1163513322.516314.22170@i42g2000cwa.googlegroups.com</A>...</DIV>HI
>   all,<BR><BR>Getting a strange problem here.&nbsp; Got about 120 computers, all
>   from the<BR>same unattended windows build, all picking up IP configuation from
>   the<BR>same DHCP range, and one of them, is giving 'destination
>   port<BR>unreachable' errors when trying to ping external addresses, either
>   by<BR>name or IP.<BR><BR>The machine can't see anything external to the
>   company network (using<BR>anything - have tried ping, IE6, telnet.exe), and I
>   don't know why.<BR><BR>I've disabled NetBIOS over TCP/IP, I've removed the
>   connection on the<BR>XP machine, removed the adapter in device manager,
>   re-installed the lot<BR>and the same thing happens.<BR><BR>Any pointers would
>   be most gratefully appreciated, as I'm out of
> ideas.<BR></BLOCKQUOTE></BODY></HTML>
>
> ------=_NextPart_000_006E_01C707E1.FFF04180--
Author
15 Nov 2006 8:49 PM
Adam Thompson
Adam  Thompson wrote:

href="news:1163513322.516314.22***@i42g2000cwa.googlegroups.com">news:1163513322.516314.22170@i42g2000cwa.googlegroups.com</A>...</DIV>HI
> >   all,<BR><BR>Getting a strange problem here.&nbsp; Got about 120 computers, all
> >   from the<BR>same unattended windows build, all picking up IP configuation from
> >   the<BR>same DHCP range, and one of them, is giving 'destination
> >   port<BR>unreachable' errors when trying to ping external addresses, either
> >   by<BR>name or IP.<BR><BR>The machine can't see anything external to the
> >   company network (using<BR>anything - have tried ping, IE6, telnet.exe), and I
> >   don't know why.<BR><BR>I've disabled NetBIOS over TCP/IP, I've removed the
> >   connection on the<BR>XP machine, removed the adapter in device manager,
> >   re-installed the lot<BR>and the same thing happens.

Very odd this - still not entirely sure why it happened in the first
place.  I set off another build on the PC, so the whole disk would have
been wiped, Windows re-installed, and the apps would have been
re-deployed either by GP or Altiris.
I logged on for the first time, and the same thing was happening again!

I compared routing tables, and saw one entry was different, and sure
enough, traces to the outside world were taking a different path.

The IP was assigned by DHCP (same server and scope as all the other
working machines).  I released the IP of the machine (which was
presumably the same again, since the MAC address wouldn't have
changed), and checked on the server that nothing was leased to that
machine.  Rebooted the machine, it picked up its IP configuration from
the DHCP server again, and everything worked.

Still scratching my head, but at least it's fixed.

Thanks for the suggestions,


Adam.