Unable to ping from VM to Host while Public firewall is ON

Question

Hello everyone.

Recently, I have started building a test lab for SCCM. I am using evaluation OS for everything in this lab setup.

Using Windows Server 2019 Standard Evaluation and Host is Windows 10 Pro.

So, the issue is when I try to ping from VM to Host using Internal switch VM is unable to establish the connection. I tried allowing ICMPv4 in Inbound and Outbound on both the machines. Host can ping to VM after allowing ICMPv4 but not VM.

But, VM is able to ping to Host when I turn off Public firewall.

There is no other issue throughout the whole process of setting up the Lab. Just this thing wanted to sort it out. I have tried and performed almost all the troubleshoot steps from different forms and websites.

If somebody can help me to fix this would be highly appreciated.

Cheers,

Sri

Answer 1

Please post an unedited ipconfig /all of both, also the results of tracert xxx.xxx.xxx.xxx

Answer 2

Hi @Anonymous , thanks for the response. Following are the results when the VM connected to Host with internal and external networks.

HOST

PS C:\Windows\system32> ipconfig /all
Windows IP Configuration

Host Name . . . . . . . . . . . . : LAPTOP-D2ENN5O5
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter vEthernet (INT-01):

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Hyper-V Virtual Ethernet Adapter #2
Physical Address. . . . . . . . . : 00-15-5D-9E-01-00
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::c3a:de4f:128:a228%24(Preferred)
IPv4 Address. . . . . . . . . . . : 10.0.0.1(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
DHCPv6 IAID . . . . . . . . . . . : 385881437
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-26-7E-52-7D-08-71-90-B7-0A-0C
DNS Servers . . . . . . . . . . . : 10.0.0.1
NetBIOS over Tcpip. . . . . . . . : Enabled

Unknown adapter Local Area Connection:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : TAP-Windows Adapter V9
Physical Address. . . . . . . . . : 00-FF-A0-75-5A-3C
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes

Wireless LAN adapter Local Area Connection* 1:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft Wi-Fi Direct Virtual Adapter
Physical Address. . . . . . . . . : 08-71-90-B7-0A-0D
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes

Wireless LAN adapter Local Area Connection* 2:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft Wi-Fi Direct Virtual Adapter #2
Physical Address. . . . . . . . . : 0A-71-90-B7-0A-0C
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes

Wireless LAN adapter Wi-Fi:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) Wi-Fi 6 AX201 160MHz
Physical Address. . . . . . . . . : 08-71-90-B7-0A-0C
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::c59b:6df0:83a2:5d8%9(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.43.214(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : Tuesday, 17 November 2020 10:34:16 AM
Lease Expires . . . . . . . . . . : Tuesday, 17 November 2020 11:34:15 AM
Default Gateway . . . . . . . . . : 192.168.43.126
DHCP Server . . . . . . . . . . . : 192.168.43.126
DHCPv6 IAID . . . . . . . . . . . : 101216656
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-26-7E-52-7D-08-71-90-B7-0A-0C
DNS Servers . . . . . . . . . . . : 192.168.43.126
NetBIOS over Tcpip. . . . . . . . : Enabled

Ethernet adapter Bluetooth Network Connection:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Bluetooth Device (Personal Area Network)
Physical Address. . . . . . . . . : 08-71-90-B7-0A-10
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes

Ethernet adapter vEthernet (EXT-01):

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . : sthelena.vic.edu.au
Description . . . . . . . . . . . : Hyper-V Virtual Ethernet Adapter
Physical Address. . . . . . . . . : 00-05-1B-D0-6B-AF
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes

Ethernet adapter vEthernet (Default Switch):

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Hyper-V Virtual Ethernet Adapter #3
Physical Address. . . . . . . . . : 00-15-5D-26-12-3C
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::f4a2:77ef:7a92:9a6a%29(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.34.145(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.240
Default Gateway . . . . . . . . . :
DHCPv6 IAID . . . . . . . . . . . : 486544733
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-26-7E-52-7D-08-71-90-B7-0A-0C
DNS Servers . . . . . . . . . . . : fec0:0:0:ffff::1%1
fec0:0:0:ffff::2%1
fec0:0:0:ffff::3%1
NetBIOS over Tcpip. . . . . . . . : Enabled

SCCM (VM)

PS C:\Windows\system32> ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : SCCM
Primary Dns Suffix . . . . . . . : ssri.local
Node Type . . . . . . . . . . . . : Mixed
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : ssri.local

Ethernet adapter Ethernet:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft Hyper-V Network Adapter
Physical Address. . . . . . . . . : 00-15-5D-9E-01-03
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::9803:17f2:1512:8ef2%20(Preferred)
IPv4 Address. . . . . . . . . . . : 10.0.0.3(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 0.0.0.0
10.0.0.2
DHCPv6 IAID . . . . . . . . . . . : 100668765
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-27-36-3A-78-00-15-5D-9E-01-03
DNS Servers . . . . . . . . . . . : 10.0.0.2
NetBIOS over Tcpip. . . . . . . . : Enabled

Ethernet adapter Ethernet 10:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . : sthelena.vic.edu.au
Description . . . . . . . . . . . : Microsoft Hyper-V Network Adapter #10
Physical Address. . . . . . . . . : 00-15-5D-9E-01-12
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes

HOST

PS C:\Windows\system32> tracert xxx.xxx.xxx.xxx

Tracing route to xxx.xxx.xxx.xxx [54.84.204.96]
over a maximum of 30 hops:

1 5 ms 1 ms <1 ms 192.168.43.126
2 79 ms 197 ms 233 ms 10.0.87.8
3 25 ms 20 ms 18 ms 10.194.30.145
4 117 ms 24 ms 31 ms 172.24.126.109
5 47 ms 52 ms 33 ms 10.194.123.209
6 * * * Request timed out.
7 * * * Request timed out.
8 48 ms 31 ms 52 ms bla2-hu0-5-0.ig.optusnet.com.au [211.29.126.234]
9 257 ms 494 ms 235 ms 203.208.131.29
10 214 ms 199 ms 202 ms 203.208.172.233
11 337 ms 204 ms 304 ms 203.208.149.254
12 444 ms 243 ms 186 ms 203.208.171.117
13 216 ms 193 ms 196 ms 203.208.171.118
14 268 ms 195 ms 206 ms lag-2.mpr2.lax12.us.zip.zayo.com [64.125.35.201]
15 244 ms 236 ms 366 ms ae13.cs2.lax112.us.eth.zayo.com [64.125.27.42]
16 216 ms 222 ms 232 ms ae12.cs2.dfw2.us.zip.zayo.com [64.125.26.182]
17 * * * Request timed out.
18 336 ms 263 ms 229 ms 99.83.66.4
19 232 ms 233 ms 234 ms 52.93.243.80
20 228 ms 240 ms 261 ms 15.230.48.28
21 * * * Request timed out.
22 268 ms 290 ms 262 ms 52.93.130.254
23 259 ms 256 ms 264 ms 150.222.243.73
24 * * * Request timed out.
25 * * * Request timed out.
26 * * * Request timed out.
27 * * Transmit error: code 1231.

Trace complete.

SCCM (VM)

Tracing route to xxx.xxx.xxx.xxx [54.85.131.147]
over a maximum of 30 hops:

1 4 ms 3 ms 1 ms 192.168.43.126
2 181 ms 196 ms 30 ms 10.0.87.8
3 36 ms 19 ms 119 ms 10.194.30.209
4 27 ms 38 ms 134 ms 172.24.126.111
5 96 ms 29 ms 140 ms 10.194.123.209
6 * * * Request timed out.
7 * * * Request timed out.
8 48 ms 33 ms 33 ms bla2-hu0-5-0.ig.optusnet.com.au [211.29.126.234]
9 214 ms 201 ms 206 ms 203.208.174.41
10 249 ms 185 ms 190 ms 203.208.172.233
11 203 ms 235 ms 205 ms 203.208.149.254
12 193 ms 196 ms 211 ms 203.208.171.117
13 229 ms 213 ms 209 ms 203.208.171.118
14 187 ms 203 ms 200 ms lag-2.mpr2.lax12.us.zip.zayo.com [64.125.35.201]
15 245 ms 229 ms 229 ms ae13.cs2.lax112.us.eth.zayo.com [64.125.27.42]
16 224 ms 225 ms 230 ms ae12.cs2.dfw2.us.zip.zayo.com [64.125.26.182]
17 * * * Request timed out.
18 246 ms 246 ms 308 ms 99.83.66.4
19 258 ms 398 ms 240 ms 52.93.243.56
20 263 ms 700 ms 227 ms 15.230.48.32
21 * * * Request timed out.
22 280 ms 255 ms 253 ms 52.93.130.252
23 876 ms 262 ms 251 ms 52.93.134.179
24 * * * Request timed out.
25 * * * Request timed out.
26 * * * Request timed out.
27 * * * Request timed out.
28 * * * Request timed out.
29 * * * Request timed out.
30 * * * Request timed out.

Trace complete.

Answer 3

Looks like there's no route between 10.0.0.2 and 192.168.43.126 networks. Also the tracert xxx.xxx.xxx.xxx should have been using the ip address you're tying to ping. The 0.0.0.0 default gateway may be problematic. The simplest solution is to create a new external vSwitch with checkbox checked for "allow management operating system to share...." then connect the guest to same vSwitch

--please don't forget to Accept as answer if the reply is helpful--

Answer 4

Hi,

Thanks for posting in Q&A platform.

Based on your description and the information provided, my understanding is you cannot ping host (10.0.0.1) from VM (10.0.0.3) when Public Firewall is enabled. Please correct me if my understanding is wrong.

Please help to confirm that rules related ICMPv4 were enabled in both Inbound and Outbound rules of Public Firewall.

For further troubleshooting, could you please help post the ping result?

Best Regards,
Sunny

----------

If the Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.