cant ping dns server why?

[arcolino]

hi all, i have a cisco router that was working fine before. now i cant ping the dns server(was able to before) i
checked the config everything looks fine but i cant ping the dns
server for some reason. i'm getting this error:

jackbenny8#ping

http://www.google.com

Translating "

http://www.google.com"...domain

server (10.0.0.2)
% Unrecognized host or address, or protocol not running.

i am able to ping internal ip's but not external ip's and i can ping
the gateway if i put a satic ip on e1/0 same result.

could the file be corrupt? any suggestions would be helpful.

this is my config file below:
jackbenny8#sh config
Using 988 out of 30712 bytes
!
version 12.1
no service single-slot-reload-enable
service timestamps debug datetime msec
service timestamps log datetime
service password-encryption
!
hostname jackbenny8
!
no logging buffered
no logging rate-limit
no logging console
enable secret 5 $1$x8NH$LLCv0i0PfxWyfr3ykyBw1.
!
ip subnet-zero
!
!
no ip finger
ip name-server 10.2.2.2
!
ip audit notify log
ip audit po max-events 100
!
!
!
interface Ethernet0/0
ip address 192.168.1.1 255.255.255.0
ip nat inside
half-duplex
!
interface Serial0/0
no ip address
shutdown
!
interface Ethernet1/0
ip address dhcp 255.255.255.0
ip nat outside
half-duplex
!
ip default-gateway 67.57.32.1
ip nat inside source list 1 interface Ethernet1/0 overload
ip classless
no ip http server
!
access-list 1 permit 192.168.1.0 0.0.0.255
access-list 1 permit 192.168.21.0 0.0.0.255
access-list 2 permit 192.168.1.0 0.0.0.255
!
line con 0
transport input none
line aux 0
line vty 0 4
access-class 2 in
password 7 000A155 F0803
login
!
end

jackbenny8#

 

[BuckWeet]

You have "ip name-server 10.2.2.2" as your name-sevrer for the router, yet that is a private address, so it would be to be inside of your network. but also you don't have that addressed.

do "no ip name-server 10.2.2.2"

then do "ip name-server (dns ip here)"

buckweet

 

[tschouten]

Buckweet handing out more good advice.

 

[arcolino]

hello buckweet, thx for responding, --- that is the dns ip address? i changed isp's from cable to dsl, but the dns for the cable was (example) 62.38.29.138 i was getting the same error, so if the dns ip address is now 10.2.2.2(and u say its private, and if its private its not routerable?)


arco.

 

[maxcolmer25]

arcolino,

Get in touch with your ISP and ask them for their primary and secondary DNS server IP addresses. As buckweet said in post remove your private DNS entry and replace with
jackbenny8(config)#ip name-server (enter DNS IP from ISP here)

Not sure what country your in but some that i use are:
159.134.237.6
192.111.39.1
194.125.2.240

Hope this helps

Max

 

[arcolino]

ok i got a little further, thanks to u guys help, i got better dns ip addresses. this is how my config looks now(change some of the middle numbers for security)

jackbenny8#sh config
Using 1022 out of 30912 bytes
!
version 12.1
no service single-slot-reload-enable
service timestamps debug datetime msec
service timestamps log datetime
service password-encryption
!
hostname jackbenny8
!
no logging buffered
no logging rate-limit
no logging console
enable secret 4 $1$x8NH$LLCv0i0Pgxkd5r3ykyBw1.
!
ip subnet-zero
!
!
no ip finger
ip name-server 198.11.24.122
ip name-server 198.11.24.142
!
ip audit notify log
ip audit po max-events 100
!
!
!
interface Ethernet0/0 192.168.1.1 255.255.255.0
ip nat inside
half-duplex
!
interface Serial0/0
no ip address
shutdown
!
interface Ethernet1/0 216.248.77.80 255.255.255.0
ip nat outside
half-duplex
!
ip default-gateway 216.248.77.1
ip nat inside source list 1 interface Ethernet1/0 overload
ip classless
no ip http server
!
access-list 1 permit 192.168.1.0 0.0.0.255
access-list 1 permit 192.168.21.0 0.0.0.255
access-list 2 permit 192.168.1.0 0.0.0.255
!
line con 0
transport input none
line aux 0
line vty 0 4
access-class 2 in
password 7 0000C60F0903
login
!
end

jackbenny8#

*****BUT WHEN I TRY TO PING G/W I GET THIS?*****


Sending 5, 100-byte ICMP Echos to 216.248.77.1, timeout is 2 seconds:
..UUU
Success rate is 0 percent (0/5)
jackbenny8#ping 216.248.77.1^@
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 216.248.77.1, timeout is 2 seconds:
UUUUU
Success rate is 0 percent (0/5)
jackbenny8#ping 216.248.77.1^@
Type esabort.
Sending 5, 100-byte ICMP Echos to 216.248.77.1, timeout is 2 seconds:
UUUUU
Success rate is 0 percent (0/5)
jackbenny8#


***WHAT IS ALL THE UUUU'S ABOUT???******
****AND NOW I CANT PING THE COMPUTER ON THE NETWORK?*******
****AND STILL CANT PING DNS SERVERS??*******
****ALSO IF I GO DHCP FOR OUTSIDE INTERFACE OR STATIC SAME RESULT???*****

jackbenny8#ping 192.168.1.11^@
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.1.11, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
jackbenny8#

****AND THIS IS ME TRYING TO PING DNS??*****
jackbenny8#ping 198.11.24.122

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 198.11.24.122, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
jackbenny8#ping 198.11.24.142

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 198.11.24.142, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
jackbenny8#


***I CAN PING EVERYTHING WHEN I ATTACH FEED STRAIGHT TO NIC CARD WITHOUT ROUTER WHAT COULD BE WRONG??***

 

[CaptHarrased]

arcolino,

I have an idea what your problem is. Do a tracert to the dns server and let us know what the icmp reply is.

 

[arcolino]

this is the tracert from dns....i see that 10.0.0.2 in there i dont think thats good?????

G:\>tracert 198.11.24.142

Tracing route to cache07.ns.uu.net [198.11.24.142]
over a maximum of 30 hops:

1 <1 ms <1 ms <1 ms 10.0.0.2
2 20 ms 21 ms 20 ms 216.248.77.1
3 22 ms 19 ms 23 ms 207.251.184.134
4 21 ms 22 ms 22 ms 50.ATM6-0.VR2.NYC4.ALTER.NET [137.39.207.41]
5 23 ms 23 ms 23 ms 214.at-0-0-0.HR1.NYC4.ALTER.NET [152.63.21.150]

6 23 ms 21 ms 21 ms 902.at-6-1-0.XR4.NYC4.ALTER.NET [152.63.19.218]

7 23 ms 21 ms 24 ms 0.so-2-0-0.XL2.NYC4.ALTER.NET [152.63.18.29]
8 29 ms 28 ms 30 ms 0.so-6-1-0.XL2.BOS4.ALTER.NET [152.63.21.73]
9 30 ms 30 ms 29 ms 0.so-7-0-0.XR2.BOS4.ALTER.NET [152.63.16.134]
10 31 ms 32 ms 32 ms 178.ATM6-0.GW1.BOS4.ALTER.NET [152.63.16.241]
11 29 ms 28 ms 27 ms pos5-0.soesr3.bos4.maint.ops.us.uu.net [207.18.1
73.246]
12 33 ms 30 ms 32 ms cache07.ns.uu.net [198.11.24.142]
Trace complete.

****second dns****

G:\>tracert 198.11.24.122
Tracing route to cache06.ns.uu.net [198.11.24.122 ]
over a maximum of 30 hops:
1 <1 ms <1 ms <1 ms 10.0.0.2
2 21 ms 20 ms 21 ms 216.248.77.1
3 22 ms 20 ms 21 ms 207.251.184.134
4 22 ms 23 ms 23 ms 50.ATM6-0.VR2.NYC4.ALTER.NET [137.39.207.41]
5 21 ms 21 ms 23 ms 214.at-0-0-0.HR1.NYC4.ALTER.NET [152.63.21.150]
6 23 ms 21 ms 21 ms 902.at-6-1-0.XR3.NYC4.ALTER.NET [152.63.19.126]
7 24 ms 21 ms 21 ms 0.so-2-0-0.XL1.NYC4.ALTER.NET [152.63.17.29]
8 23 ms 22 ms 23 ms 0.so-1-0-0.TL1.NYC8.ALTER.NET [152.63.0.137]
9 87 ms 85 ms 87 ms 0.so-1-1-0.TL1.SAC1.ALTER.NET [152.63.10.78]
10 87 ms 89 ms 92 ms 0.so-7-0-0.XL1.SAC1.ALTER.NET [152.63.53.249]
11 86 ms 87 ms 90 ms 0.so-3-0-0.XR1.SAC1.ALTER.NET [152.63.53.238]
12 88 ms 89 ms 89 ms 185.ATM6-0.GW1.SAC1.ALTER.NET [152.63.51.73]
13 88 ms 88 ms 89 ms pos5-0.soesr1.sac1.maint.ops.us.uu.net [207.18.1
72.122]
14 89 ms 89 ms 88 ms cache06.ns.uu.net [198.11.24.122]

Trace complete.

***and this is the tracert for default gateway*****
****shouldnt it be more hops??????*****
***checking with isp for static default gateway if possible???*****

G:\>tracert 216.248.77.1
Tracing route to 216.233.88.1 over a maximum of 30 hops

1 <1 ms <1 ms <1 ms 10.0.0.2
2 23 ms 21 ms 23 ms 216.248.77.1
Trace complete.

 

[CaptHarrased]

No the 10.0.0.2 is not good. Mind you i notice from your previous config that the dns server was originally 10.2.2.2 which has me a bit confused! Now i think one of your problems is that you are not removing entries from the config correctly. But you do appear to have a couple of configuration issues also. Do you have a topolgy map?

 

[arcolino]

not sure what the command is to get the &quot;topolgy map&quot;? but the 10.0.0.2 is just a type-o (remember i changed some numbers for security reasons) the 10.0.0.2 is pointing to a dynamic dns server, when i tracert i get a loop back. i got the isp to give me satic dns servers. but now the gateway tracert is looping back. i am waiting to here from isp if they have a satic
default/gatway?(if there is such a thing)

 

[CaptHarrased]

Be that as it may you should not have an entry in your router for a dns server thats on an internal address. You have removed it from your config yet when you do a tracert it still goes to the internal address first. That indicates that all is not well with your config. I would definately copy your current config away, flatten the router then blow the config back. It will not cost you anything to do this and if nothing else will clean the roouter out.

 

[tschouten]

Your ISP may have changed the DNS address. My #1 suggestion is call your ISP, or look at their website. They usually supply you with the name and the address of the DNS servers, email servers, etc. to your area of service. Get this information from them, then use it on your router. Make sure all your information is correct.

After that, if you notice things are incorrect on your routers configuration. Save a copy of the config, (I usually print it out to have a template to go off of) erase the config from the router. Rebuild from the ground up using the correct information. Depending on your taste you can try changing the config file itself to meet you specs, or work on the router to rebuild from there.