Hi Roland, My GSR and 6509 are newly installed and no ACLs in place. You can try to ping 180.178.73.1 and 180.178,73.2. 180.178.73.1 - GSR 180.178,73.2 - 6509 I can only reach 180.178.73.1 from outside. I cannot reach 180.178.73.2 which is the IP of my 6509. Not sure if this has something to do with the hardware. I am just wondering why I can't reach 180.178,73.2. Like I said earlier in my email, I have the default route from my 6509 to te GSR. My GE module is inserted to the GSR slot 1. Is the "hw-module" config requred on the GSR? Please help. Thanks, -bong ------------------------------ Message: 7 Date: Sat, 10 Oct 2009 16:24:35 +0700 From: Roland Dobbins <rdobbins@arbor.net> Subject: Re: NEED Some HELP To: NANOG list <nanog@nanog.org> Message-ID: <0D85644F-A83F-461B-A9FB-EEBF54259DD6@arbor.net> Content-Type: text/plain; charset=us-ascii; format=flowed; delsp=yes On Oct 10, 2009, at 4:12 PM, Bong Barnido wrote:

I cannot ping the IP on my Cisco 6509 from the internet.

Quite out of the context of the connectivity issue you're trying to troubleshoot, it's in fact extremely desirable to have your 6509 (and all your routers, for that matter) unpingable from the outside your own network. The BCP is to use iACLs, CoPP, et. al. to keep out all unsolicited traffic headed to, as opposed to through (like traceroute, pinging customer hosts, etc.), your network infrastructure. ----------------------------------------------------------------------- Roland Dobbins <rdobbins@arbor.net> // <http://www.arbornetworks.com> Sorry, sometimes I mistake your existential crises for technical insights. -- xkcd #625 ------------------------------ Message: 6 Date: Sat, 10 Oct 2009 17:12:13 +0800 From: Bong Barnido <bong.barnido@gmail.com> Subject: NEED Some HELP To: nanog@nanog.org Message-ID: <16a26ba20910100212i2158e929peef59520613150c8@mail.gmail.com> Content-Type: text/plain; charset=ISO-8859-1 Hi Nanog Members, I've been troubleshooting this problem for a few days already but i'm still unable to fix it. I think it's now time to ask some help from Nanog members. I cannot ping the IP on my Cisco 6509 from the internet. Here are the setup: *Internet*---(copper)-->*GSR*----(fiber)--->* Cisco 6509* <<<<<This setup is NOT OK - I cannot ping *Internet*---(copper)-->*GSR*----(copper)---> *Cisco 6509* <<<<< This setup is OK - I can ping(this is directly connected to the PRP2) NOTES: - I am using PRP2 on my GSR and the fiber is connected to the 4xGE module - I have a default route from Cisco 6509 to GSR - From the 6509 I can only ping the IP addresses on the GSR, addresses outside the GSR are not reachable - From the internet, I can only ping up to the GSR - I can ping from GSR to 6509 and vise versa - The IP on the 6509 is configured on the interface that is directly connected to the GSR. Thanks, -bong