Hello: For the last few days I have posted the following question: ============ Please help. This problem is going on for the last 7 weeks without fixing. TC1000 1-HiPer NMC 2-HiPerARC 10-Hiper DSP We are a small ISP (400 customers). We have 2-ISDN-PRI lines for our customers to dial in. Our entire system looks like this: / / T1 to External Internet / CISCO 26XX Router | HUB 10/100 | ---------------------------------------------------------------| | | | | | NMC ARC1 ARC2 Web Authentication ----------- 3Com ------------ Server/Email | | | | | | | | | Customer Dial-In Our customers can dial-in, are authenticated and can access the internal web site (www.tibonline.net) and retrieve their email. But when they try to connect to any web site (outside our network) on the external net (such as www.yahoo.com), they time out with a message saying that "this page can't be displayed". We have changed the HUBs, RJ45 cables. We have the CISCO Router tested fine. Finally, I replaced the 3COM box with a backup box and the problem continues. Interestingly, we can access any Internet web site (www.msn.com, www.yahoo.com, etc.) from our internal network (over LAN) without problem. ============ Since posting the above message, we have received a number of responses. Charles suggested to see how the CISCO 2600 was assigning the IP addresses (or something similar!!). For the last two days, AT&T technicians has been working with me to look into the router. They have setup static address and have done number of settings without success. I have switched 3COM to a backup 3COM box. Following are new the IP address: NMC (Port 17) 12.21.237.240 ARC1(Port 15) 12.21.237.241 IP Pool: 12.21.237.48/31 ARC2(Port 16) 12.21.237.242 IP Pool: 12.21.237.96/31 The problem is that out Dial-In customers can dial-in, access the internal network (email, authentication, DNS, Web Servers) but can not access the external Network (www.msn.com), etc. I have setup a dial-up PC (Win XP Pro) to test. The first time I connected, the IP address assigned was 12.21.237.98. I could not access the external network. I tried to do a external trace from www.traceroute.org. Following are the results of the trace. -------- Call this TRACE-1 Testing the network route from EASYNEWS.COM to 12.21.237.98... Started on Thursday July 28th, 2005 at 17:37:05 GMT (1122597425) HOST LOSS RCVD SENT BEST AVG WORST ge1-8-1000m.sw1.easynews.com 0% 10 10 0.35 3.29 28.63 e-2-11-1000m.core-03.phx1.puregig.net 0% 10 10 0.29 0.56 1.65 12.118.42.25 0% 10 10 10.84 33.96 117.05 12.123.28.58 0% 10 10 57.70 58.01 58.83 tbr1-cl2.dlstx.ip.att.net 0% 10 10 54.24 66.34 171.39 tbr2-cl1.attga.ip.att.net 0% 10 10 59.23 73.93 154.81 ar13-p3110.attga.ip.att.net 0% 10 10 52.91 94.74 205.18 12.124.52.74 0% 10 10 70.30 77.15 110.81 12.21.237.241 0% 10 10 63.97 64.57 65.97 ??? 100% 0 10 0.00 0.00 0.00 -------- Few minutes later, I dial-in and re-connected. This time, I connected to IP address 12.21.237.99. This time I could go to external Internet no problem. -------- Call this TRACE-2 Testing the network route from EASYNEWS.COM to 12.21.237.99... Started on Thursday July 28th, 2005 at 17:45:23 GMT (1122597923) HOST LOSS RCVD SENT BEST AVG WORST ge1-8-1000m.sw1.easynews.com 0% 10 10 0.35 4.46 38.83 e-2-11-1000m.core-03.phx1.puregig.net 0% 10 10 0.28 0.34 0.38 12.118.42.25 0% 10 10 10.68 10.84 10.97 12.123.28.58 0% 10 10 57.70 58.16 59.00 tbr1-cl2.dlstx.ip.att.net 0% 10 10 53.09 63.09 148.52 tbr2-cl1.attga.ip.att.net 0% 10 10 58.09 60.96 83.12 ar13-p3110.attga.ip.att.net 0% 10 10 51.81 92.41 256.88 12.124.52.74 0% 10 10 69.03 71.50 87.39 12.21.237.241 0% 10 10 63.16 66.77 87.36 12.21.237.242 0% 10 10 64.35 71.89 94.87 12.21.237.99 10% 9 10 166.21 245.81 808.73 -------- In TRACE-1 (outside network can not be connected) the trace stops at ARC1 (12.21.237.241). In TRACE-2 (outside network is connected & the dial-in connection works), the trace gets to my dial-in terminal (12.21.237.99). I have noticed couple of things in the above traces. In both traces, ARC1[Kirti S. Bajwa] (12.21.237.241) is first traced even though the IP address of my terminal (12.21.237.98 or 12.21.237.99) is on ARC2 (12.21.237.242)!! Can someone explain why trace is always first going to ARC1 IP? Can someone explain what is going on? Why sometime the dial-in wotks (access the external network) and other times it does not? AT&T is going to call back around 3:00PM (EST) to help. Is 3COM needs some settings changed? Thanks in advance. Kirti