2621XM Query

surfthegecko

Hi,

I am having trouble backing up the IOS image from my new 2621XM router to my pc.

Currently my PC has the following connections:
192.168.1.1 /24 - Wireless connection to the internet
192.168.1.30 / 24 - PC ethernet to 2621XM router

The router is connected via console cable and via fa 0/0 to my pc with an interface IP of:
192.168.1.20 /24

My PC can Ping the following:
192.168.1.1 /24 - PC Wireless adapter
192.168.1.30 /24 - PC ethernet connection to Router
192.168.1.20 /24 - Router connection to PC ethernet port

My Router can ping itself on 192.168.1.20 /24 but cannot ping my pc.

I have made sure that Port 69 is open on my PC but still no luck.

Until my Router can ping my pc I cannot use TFTP.

Any ideas?
Thanks

dynamik

Did you also allow ICMP on your PC's firewall?

Maybe it is making the connection, but your server is misconfigured. Have you looked at its logs at all?

surfthegecko

Dynamik,

I checked and the current settings for ICMP are configured on my firewall:

ICMP DEstination Unreachable (in) is allowed
ICMP Echo Reply (in) is allowed
ICMP Time Exceeded (in) is allowed
Any incoming ICMP is not allowed.

I think this would be okay?

dynamik

I would assume the echo reply is what you need.

Do you have another PC you can use to try to ping it? That would be an easy way to isolate the problem.

surfthegecko

Actually for some reason I cant ping the routers interface from my pc now:
192.168.1.20

I think I have been trying to tweak this in so many ways i may have made it worse.
Maybe my tweaking eg rip/default gateway settings made this worse?

Show Run is attached, got a forbidden error when trying to paste this into the reply window.

dynamik

It's not going to be a problem with routing or the default route since they're on the same subnet.

What does show interface fastethernet0/0 give you?

You said you're connecting the router to your PC's NIC? Are you using a crossover cable? Like devices require a crossover (unless they support auto-MDIX).

I've had problems posting configs too. The security's pretty tight here now, and some innocuous things might trigger SQL injection warnings.

surfthegecko

The cable would definately appear to be crossover, i just double checked the PINs.
Attached is the 'show int fa 0/0' line and protocol are showing as up.

kalebksp

surfthegecko wrote: »

Dynamik,

I checked and the current settings for ICMP are configured on my firewall:

ICMP DEstination Unreachable (in) is allowed
ICMP Echo Reply (in) is allowed
ICMP Time Exceeded (in) is allowed
Any incoming ICMP is not allowed.

I think this would be okay?

You need to allow echo requests. The router sends an echo request, the computer responds with an echo reply.

dynamik

kalebksp wrote: »

You need to allow echo requests. The router sends an echo request, the computer responds with an echo reply.

Oh, that must be something you learn in CCNP studies...

tim100

surfthegecko wrote: »

Hi,

I am having trouble backing up the IOS image from my new 2621XM router to my pc.

Currently my PC has the following connections:
192.168.1.1 /24 - Wireless connection to the internet
192.168.1.30 / 24 - PC ethernet to 2621XM router

The router is connected via console cable and via fa 0/0 to my pc with an interface IP of:
192.168.1.20 /24

My PC can Ping the following:
192.168.1.1 /24 - PC Wireless adapter
192.168.1.30 /24 - PC ethernet connection to Router
192.168.1.20 /24 - Router connection to PC ethernet port

My Router can ping itself on 192.168.1.20 /24 but cannot ping my pc.

I have made sure that Port 69 is open on my PC but still no luck.

Until my Router can ping my pc I cannot use TFTP.

Any ideas?
Thanks

Just do it the other way around and configure the tftp-server on the router:

conf t
tftp-server flash:name of image.bin

Netwurk

Here's what caught my eye in your firewall config:

surfthegecko wrote: »

Any incoming ICMP is not allowed.

That means your PC can ping another device, but it can't be pinged.

Why not shut off your firewall (temporarily) and see if it works then?

Best way I can think of to make sure it's not the firewall

surfthegecko

Thanks for all your suggestions.
I figured out that the tf-tp application was acting as a DHCP server which was messing things up.

Disabled the DHCP server feature and then hey presto, everything works fine.


Sorry about not replying sooner, I kept getting 'Forbidden' error messages when trying to reply and found out from the Admins that its because I was using the word tee-ef-tee-pee which their posts dont allow. Hence the above mentioned tf-tp.

Netwurk

surfthegecko wrote: »

Thanks for all your suggestions.
I figured out that the tf-tp application was acting as a DHCP server which was messing things up.

Disabled the DHCP server feature and then hey presto, everything works fine.


Sorry about not replying sooner, I kept getting 'Forbidden' error messages when trying to reply and found out from the Admins that its because I was using the word tee-ef-tee-pee which their posts dont allow. Hence the above mentioned tf-tp.

Glad you got it working - not sure why the forum now blocks the word t f t p

Maybe a bug in the software?

Probably something trivial

surfthegecko

I think it blocks it to stop signature injection or something like that.
It was explained to me but I deleted the email now.

Anyway all running sweet now.