LinuxQuestions.org
Review your favorite Linux distribution.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 03-15-2024, 01:52 PM   #1
garyfritz
LQ Newbie
 
Registered: Apr 2018
Posts: 13

Rep: Reputation: Disabled
Some systems on home network can't reach each other


This isn't strictly a Linux issue, but ...

My home network has a Win10 laptop, an iPad, an Android phone, and a RHEL9 system.

* All systems are in the 192.168.0.* subnet.
* All systems can reach the Internet through my router.
* Most systems can't reach SOME other systems:

iPad: can ping all systems
Linux: can't ping iPad
Android: can't ping Windows
Windows: can't ping iPad or Linux, CAN ping Android !?

I don't see any pattern here. Any guesses what might be causing it, and how I can diagnose / fix it?

Thanks!
 
Old 03-15-2024, 04:06 PM   #2
jefro
Moderator
 
Registered: Mar 2008
Posts: 21,987

Rep: Reputation: 3627Reputation: 3627Reputation: 3627Reputation: 3627Reputation: 3627Reputation: 3627Reputation: 3627Reputation: 3627Reputation: 3627Reputation: 3627Reputation: 3627
Ping is a poor test.

Since all of them can reach the internet then I'd consider this to be a firewall issue.

One some home routers they jail the connections between wired and wireless.
 
Old 03-15-2024, 05:20 PM   #3
teckk
LQ Guru
 
Registered: Oct 2004
Distribution: Arch
Posts: 5,138
Blog Entries: 6

Rep: Reputation: 1827Reputation: 1827Reputation: 1827Reputation: 1827Reputation: 1827Reputation: 1827Reputation: 1827Reputation: 1827Reputation: 1827Reputation: 1827Reputation: 1827
Map the network and see who is listening to what.
Code:
nmap -sP 192.168.0.0/24

nmap -sn 192.168.0.0/24 -oG -

nmap -sL 192.168.0.0/24

nmap -sn -PE 192.168.0.0/24
See:
man nmap

Also see what the router is doing with what machines:
Code:
traceroute 192.16.0.1
Then fix whatever setting is causing it.
 
1 members found this post helpful.
Old 03-15-2024, 09:50 PM   #4
garyfritz
LQ Newbie
 
Registered: Apr 2018
Posts: 13

Original Poster
Rep: Reputation: Disabled
Quote:
Originally Posted by jefro View Post
Ping is a poor test.
Since all of them can reach the internet then I'd consider this to be a firewall issue.
One some home routers they jail the connections between wired and wireless.
Yes ping is crude, but it's a simple first test.

If it's an external firewall (such as the router), wouldn't it divide the systems into two unconnected groups, e.g. wired/wireless? As you can see from the connectivity diagram, there's not a clean division like that.

If it's firewalls in the systems, wouldn't that require firewalls in all non-contactable systems? I.e. Windows, iPad, and Linux? Android is the only one that all other systems can reach.

I drew a diagram of "what systems can ping what other systems" to visualize it better -- below.

Quote:
Originally Posted by teckk View Post
Map the network and see who is listening to what.
Also see what the router is doing with what machines:
Code:
traceroute 192.16.0.1
As you'd expect, it's one hop from all systems. They're all connected directly to the router via wifi or (for Linux) LAN.

Unfortunately nmap is not on my system, and I can't get the installer (yum) to work. Still poking at it.
Attached Thumbnails
Click image for larger version

Name:	Pings.png
Views:	6
Size:	9.1 KB
ID:	42636  
 
Old 03-15-2024, 11:26 PM   #5
rkelsen
Senior Member
 
Registered: Sep 2004
Distribution: slackware
Posts: 4,453
Blog Entries: 7

Rep: Reputation: 2555Reputation: 2555Reputation: 2555Reputation: 2555Reputation: 2555Reputation: 2555Reputation: 2555Reputation: 2555Reputation: 2555Reputation: 2555Reputation: 2555
Windows' firewall is on by default. If you turn it off, you get nagged to turn it back on and sometimes it turns itself back on when you're not looking. Have you turned it off?
 
1 members found this post helpful.
Old 03-16-2024, 12:02 PM   #6
garyfritz
LQ Newbie
 
Registered: Apr 2018
Posts: 13

Original Poster
Rep: Reputation: Disabled
I hadn't, but I tried it. I turned off the Windows Defender firewall for the local private network. Only change I see is that the Linux system can no longer ping Windows. But that may have been an error before -- I still can't ping Linux -> Win after turning the firewall back on.
 
Old 03-16-2024, 12:24 PM   #7
lvm_
Member
 
Registered: Jul 2020
Posts: 931

Rep: Reputation: 337Reputation: 337Reputation: 337Reputation: 337
You are telling nothing about you network setup, but I presume most of your devices are connected via wi-fi and if it is at least dual-band. Some buggy routers have issues with communication between bands, try locking all your devices to a single band. Also many routers have a wireless isolation security option which intentionally prevents wireless devices from communicating with other devices on the network - check configuration of your router to see if it is enabled.
 
Old 03-16-2024, 01:58 PM   #8
garyfritz
LQ Newbie
 
Registered: Apr 2018
Posts: 13

Original Poster
Rep: Reputation: Disabled
The Linux system is connected via Ethernet LAN. All others (Win, Android, iOS) are on 5G IPv4 wifi.

The router (Arris TG3452A) has a firewall, but it's set to minimum security (nothing blocked). It supports "Home" and "Guest" networks. Each has an AP Isolation setting, which is currently On on the Guest network, Off on the Home network (where I work). I disabled it on both networks and saw no change.
 
Old 03-16-2024, 03:40 PM   #9
jefro
Moderator
 
Registered: Mar 2008
Posts: 21,987

Rep: Reputation: 3627Reputation: 3627Reputation: 3627Reputation: 3627Reputation: 3627Reputation: 3627Reputation: 3627Reputation: 3627Reputation: 3627Reputation: 3627Reputation: 3627
Guest network by design usually blocks inter lan access.
 
Old 03-16-2024, 05:58 PM   #10
rkelsen
Senior Member
 
Registered: Sep 2004
Distribution: slackware
Posts: 4,453
Blog Entries: 7

Rep: Reputation: 2555Reputation: 2555Reputation: 2555Reputation: 2555Reputation: 2555Reputation: 2555Reputation: 2555Reputation: 2555Reputation: 2555Reputation: 2555Reputation: 2555
Sometimes just turning these features off is insufficient. You may need to reboot the devices to get the new settings to work.
 
Old 03-16-2024, 06:02 PM   #11
jefro
Moderator
 
Registered: Mar 2008
Posts: 21,987

Rep: Reputation: 3627Reputation: 3627Reputation: 3627Reputation: 3627Reputation: 3627Reputation: 3627Reputation: 3627Reputation: 3627Reputation: 3627Reputation: 3627Reputation: 3627
What does arp -a tell?
 
Old 03-16-2024, 06:26 PM   #12
michaelk
Moderator
 
Registered: Aug 2002
Posts: 25,712

Rep: Reputation: 5899Reputation: 5899Reputation: 5899Reputation: 5899Reputation: 5899Reputation: 5899Reputation: 5899Reputation: 5899Reputation: 5899Reputation: 5899Reputation: 5899
Your Android phone and iPad may be configured for random MAC addresses when then connect which if you did not always check could cause part or your problem and I think that there is an iPad setting to regenerate a new mac every 24 hours.
Obviously the desktop would not change and then compounded by if you are using the guest access point for some devices.
 
Old 03-16-2024, 09:36 PM   #13
wpeckham
LQ Guru
 
Registered: Apr 2010
Location: Continental USA
Distribution: Debian, Ubuntu, RedHat, DSL, Puppy, CentOS, Knoppix, Mint-DE, Sparky, VSIDO, tinycore, Q4OS,Manjaro
Posts: 5,638

Rep: Reputation: 2697Reputation: 2697Reputation: 2697Reputation: 2697Reputation: 2697Reputation: 2697Reputation: 2697Reputation: 2697Reputation: 2697Reputation: 2697Reputation: 2697
Quote:
Originally Posted by jefro View Post
Ping is a poor test.

Since all of them can reach the internet then I'd consider this to be a firewall issue.

One some home routers they jail the connections between wired and wireless.
PING is a poor test, and one used by so much malware that some systems have the ECHO protocol it depends upon blocked. There is also a network "stealth mode" that prevents an "echo" reply. I recommend using several tools, not all based upon ping.
 
Old 03-16-2024, 10:50 PM   #14
garyfritz
LQ Newbie
 
Registered: Apr 2018
Posts: 13

Original Poster
Rep: Reputation: Disabled
Quote:
Originally Posted by jefro View Post
Guest network by design usually blocks inter lan access.
I assumed it probably did. But I don't use it. My housemate uses that network.

Quote:
Originally Posted by jefro View Post
What does arp -a tell?
Attached below.

Quote:
Originally Posted by michaelk View Post
Your Android phone and iPad may be configured for random MAC addresses
That would not explain Windows' inability to reach Linux, would it?

Quote:
Originally Posted by wpeckham View Post
PING is a poor test, ... I recommend using several tools, not all based upon ping.
I used several tools on Win/iOS/Android/Linux, but I think most of them were using ping. What tools would you suggest? I still haven't resolved the yum install issue on Linux so I have limited options there.

Interesting. When I did my tests yesterday, Windows and Linux could not reach iOS. I just did a test ping from Linux to iOS and it hung up. I left it runnning -- and several minutes later the pings started working. Now Windows can reach iOS too.

arp -a output:
Code:
? (192.168.0.254) at c0:25:e9:57:11:85 [ether] on enp0s2f1u2c2
? (192.168.0.137) at c2:25:e9:b0:71:e6 [ether] on enp0s2f1u2c2
arrisatom (192.168.0.1) at 48:4e:fc:eb:00:21 [ether] on enp0s2f1u2c2
arrisatom (192.168.0.1) at <incomplete> on virbr0
? (192.168.0.11) at <incomplete> on enp0s2f1u2c2
SAMSUNG-SM-G950U (192.168.0.156) at a0:cc:2b:b0:71:e6 [ether] on enp0s2f1u2c2
SPECTRE (192.168.0.218) at 48:a4:72:45:b3:5c [ether] on enp0s2f1u2c2
? (192.168.0.61) at b2:45:b6:e6:e5:cd [ether] on enp0s2f1u2c2
? (192.168.0.164) at b2:45:b6:e6:e5:cd [ether] on enp0s2f1u2c2

Last edited by garyfritz; 03-16-2024 at 10:53 PM.
 
Old 03-17-2024, 03:56 AM   #15
lvm_
Member
 
Registered: Jul 2020
Posts: 931

Rep: Reputation: 337Reputation: 337Reputation: 337Reputation: 337
You can verify if MAC spoofing is to blame by deleting arp entry for inaccessible device (arp -d).
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] Some (but not all) network hosts can't talk to each other dlanced Linux - Networking 25 08-08-2020 09:58 PM
Have access 2 RHN SS... how to create iso to patch systems that can't reach SS? notfaded1 Red Hat 3 04-05-2012 10:09 AM
setting up a home network/ machines won't ping each other rsheridan6 Linux - Networking 5 04-21-2003 02:12 AM
can't see other machines but they can see each other Silly22 Linux - Networking 1 11-20-2002 03:28 AM
How can I get 2 RH7.3 systems to see each other from Konqueror? ericcarlson Linux - Networking 2 07-28-2002 05:56 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 08:53 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration