Networking between International sites

[jon83]

Hi I have a customer who has sites in Australia, Malaysia, South Africa. I have setup clustering, the sites are getting out of service only for the sites in Malaysia and South Africa.
The IT guy tells me there is no port blocking going on. But when I do a trace calls are not even hitting the remote site. The only thing I can see is when I do a tracert or ping I have to bump up the wait time because it takes so long to reply about 300ms? Also the amount of hops it takes are about 10.

Any suggestion?

All the switches in Australia are ver 7, the ones in Malaysia and SA are ver 8.

 

[Lundah]

I'm assuming you're using IP trunking here. Can you verify the IP Trunk Profiles are set up correctly, and assigned to the correct Trunk Groups in IP/XNET Trunk Group Assignment?

If you issue a "state xnet all" from the Maintenance Commands window, what output do you get?

 

[nappyshock]

If you can ping or do a tracert to the remote sites then the routing is working ok. It's either ports being blocked or the configs.

 

[jon83]

I think there is port blocking going on. I got the IT bloke to do a trace on their routers and found some 3300s werent getting a reply on port 1067.

thanks

 

[nappyshock]

If it's a TCP port you think is getting blocked, temp disconnect the 3300 from the network and plug a PC in it's place with the same IP address and default gateway etc. At the Start Run prompt type cmd this will open a black DOS screen. Then type telnet x.x.x.x yyyy were x.x.x.x is the IP address you are trying to get to and yyyy is the port, if it works you will get a blank screen come up with a flashing cursor in the top left corner, this means your port has successfully connected with the remote device, if it fails it will sit there will "trying to connect to server" on the screen. This does NOT work with UDP ports.
Most routers/firewalls have the facility to log traffic getting blocked, can your customer do this.
You should also have a static one to one NAT on the routers at both ends of the link mapping the 3300 internal IP address to a dedicated public IP. IF you are using dynamic NAT then the router will change the source port number on leaving the site.
Also for your info most network security devices will not respond to pings or tracert so that doesn't mean your traffic is not getting to it's destination.