Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We have a multihomed windows server.

  • It has two physical interfaces A ( and B (
  • From machines on the same subnet both interfaces are pingable
  • From a 3rd subnet B is pingable but A is not
  • The windows machines default route is via interface A however there is a static route to the 3rd subnet via interface B

When you ping A from the third subnet the router reports that outbound connections from interface A are actually been sent out of interface B (and thus denied).

The goal is to be able to have both interfaces pingable from the 3rd subnet The network topology is fairly simple, three switches each with only their own subnet traffic A, B and C connected via a Cisco ASA 5520. There are other minor subnets around however they are not really relevant to the issue at hand.

This looks like windows isn't responding from the right interface (the interface it got the request in on) and is pushing all it's traffic out via which ever route it deems best. Is there any way to bind traffic to the correct interface? I'd even accept a Cisco ASA rule to allow the traffic (it's dropping the SYN ACK) out of the B subnet.

The routing table of the windows machine looks like so:

IPv4 Route Table
Interface List
0x1 ........................... MS TCP Loopback interface
0x10003 ...00 13 72 36 e5 30 ...... Broadcom BCM5708C NetXtreme II GigE (NDIS VBD Client)
0x10004 ...00 13 72 36 e5 32 ...... Broadcom BCM5708C NetXtreme II GigE (NDIS VBD Client) #2
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
     20      1     10     10     10      1     20     20     20     10     20      1      1
Default Gateway:
Persistent Routes:


share|improve this question
Please post the output of "route PRINT" from the Windows box. Also, is there any other way for the packets to be router between subnet A and B from C? An explanation of the network topology would be helpful. – Hyppy Mar 21 '11 at 13:18
What's the Cisco ASA have to do with Windows Server Routing?? – Chris S Mar 21 '11 at 13:42
At least tell us the network address of the third subnet! – LawrenceC Mar 21 '11 at 13:43
@Hyppy, included and the topology is very simple, safe to assume any/any permit IP rules between each subnet. – Antitribu Mar 21 '11 at 13:50
@Chris S, the Cisco is handling the routing between the subnets, I've edited that into the question – Antitribu Mar 21 '11 at 13:51

If you are trying to get traffic, including ICMP pings, across a different subnet, then forwarding needs to be involved. or the interfaces need to be on a router. Other than enabling Internet Connection Sharing, which restricts the IP ranges handed out on a second interface, I don't know how to enable IP forwarding on Windows.

Your 3rd subnet sounds like it shares some of the same network bits as interface B, and that's why you can ping B.

The proper way to do what you are trying to do is change the IP of interface A to be in the same subnet as interface B, and make sure your 3rd subnet is also the same subnet.

share|improve this answer
Routing is enabled on the Cisco ASA and it handles passing traffic between the sites. I'm not trying to enable forwarding or routing on the Windows box at all. I'm trying to have windows respond to traffic on the interface it received it from, so if I ping on interface A my reply should come from A not B which it currently is. The IP addresses can not be changed and merging the subnets unfortunately isn't feasible either. – Antitribu Mar 22 '11 at 9:49
Have you done any tracert's? Have you also confirmed traffic paths with tools other than ping, for example, do you have a service listening on (and only that you can possibly confirm as reachable from – LawrenceC Mar 22 '11 at 15:22

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.