| Author |
Funny situation....
|
|
| Richard Johnson 2002-02-25, 7:24 am |
| Hello,
Having an odd problem between to point-to-point sites. I have 2 routers, everything seems to be on the up and up. I can ping the routers from each other and I can ping the remote router at site A from a workstation at site B. However, I can't ping site B from a workstation at site A but I can ping router A. I have ip route 0.0.0.0 x.x.x.x and no access-lists configured. Anyone have any ideas ???!!! | |
| peterd 2002-02-25, 8:07 am |
| Hello,
it looks like it's not finding the route to router B for some reason. Have a look at 'show ip route' to see if the route is known.
Try setting a specific route to router B going out of the interface 'ip route etc serial0'.
Has the interface got an ip address? Set your static route to the far-end ip address rather than just 'ip route etc serial0' etc.
If it still doesn't work then perhaps you could post the configs of both routers?
Regards
Peter | |
|
| check the pc's default gateway is set to router A's address. | |
| peterd 2002-02-25, 9:04 am |
| Hi Mat,
ah yes, that would do it. You can tell I'm not a PC man can't you? :-)
Regards
Peter | |
| Richard Johnson 2002-02-25, 9:28 am |
| OK, here are the 2 configs. These are from 2 sites connected via T1...I don't know too many specifics because this was sent from a friend.
site1
Current configuration:
!
version 12.0
service timestamps debug
uptime
service timestamps log uptime
no service password-encryption
!
hostname rooakhill
!
enable secret 5 $1$fW0W$e8xN8oUWrQEF9/EtW39EN0
enable password gcsins
!
username romthope password 0 cheap1
!
!
!
!
ip subnet-zero
!
!
!
!
--More—
interface FastEthernet0/0
ip address 35.0.0.11 255.255.255.0
no ip directed-broadcast
no ip mroute-cache
speed auto
half-duplex
!
interface Serial0/0
ip address 192.168.254.2 255.255.255.0
no ip directed-broadcast
encapsulation ppp
no ip mroute-cache
ppp authentication chap
ppp chap password 7 13061F170A1C55
!
interface FastEthernet0/1
no ip address
no ip directed-broadcast
no ip mroute-cache
shutdown
duplex auto
speed auto
!
--More—
ip local pool setup_pool 35.0.0.40 35.0.0.44
ip classless
ip route 0.0.0.0 0.0.0.0 192.168.254.1
ip route 36.0.0.0 255.255.255.0 192.168.254.1
no ip http server
!
!
map-list word
dialer-list 1 protocol ip permit
dialer-list 1 protocol ipx permit
route-map >exit permit 10
!
snmp-server engineID local 0000000902000008A3A70D20
snmp-server community public RO
bridge 1 protocol dec
!
line con 0
transport input none
line aux 0
line vty 0 4
password cheap1
login
______________________________
_______________
site 2
Current configuration:
!
version 12.0
service config
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname romthope
!
enable secret 5 $1$94zU$x1ekovoTunVOEKUPmhObl.
enable password gcsins
!
username rooakhill password 0 cheap1
!
!
!
!
ip subnet-zero
!
!
! interface FastEthernet0/0
ip address 36.0.0.10 255.255.255.0
no ip directed-broadcast
ip irdp
no ip mroute-cache
speed auto
half-duplex
no cdp enable
!
interface Serial0/0
ip address 192.168.254.1 255.255.255.0
no ip directed-broadcast
encapsulation ppp
no ip mroute-cache
no fair-queue
!
interface FastEthernet0/1
no ip address
no ip directed-broadcast
no ip mroute-cache
shutdown
duplex auto
no ip mroute-cache
shutdown
duplex auto
speed auto
no cdp enable
!
ip classless
ip route 0.0.0.0 0.0.0.0 192.168.254.2
no ip http server
!
snmp-server engineID local 0000000902000008A3A716C0
snmp-server community public RO
!
line con 0
exec-timeout 0 0
transport input none
line aux 0
line vty 0 4
password cheap1
login
!
end
I'm not sure exactly what he's got going on here but I just noticed an absence of a routing protocol.... | |
| Yankee 2002-02-25, 8:16 pm |
| You don't need a routing protocol when you use just statics, but IP ROUTING may have solved your problem.
Yankee | |
| peterd 2002-02-26, 2:54 am |
| Hello,
why does site 1 serial 0/0 have ppp authentication and chap password set? This is not something that I've seen on a serial (non-dialup) i/f before, but if there's a reason for it then surely it also needs to be set on the serial i/f at site 2?
Regards
Peter | |
|
| I think it would be nice to get some feedback from Richard.
I agree with Yankee on the static routes, although peter if he can ping between the routers then obviously ppp is working and there isn't an authentication issue - I suspect that now you've mentioned this though he probably can't.
If I was Richard I'd probably do the following -
1. Reconfirm that BOTH sites can ping across the link from the router.
2. If not, disable Chap temporarily using the command "no ppp authentication chap" then retry step 1.
3. If pings are getting across then move to a PC at both ends, ping the local ethernet address, if successful ping the local WAN address, If successful Ping the remote WAN address, If successful ping the remote ethernet address.
If only the first ping works I'd double check the default gateway on the PC's. | |
| Bolero 2002-02-26, 6:55 pm |
| You could also try a traceroute/pathping from the host A and see if it gets to router A and beyond...
HTH  | |
| Yeti-GBR1 2002-02-26, 8:09 pm |
| Ok I'm assuming that this is a test lab setup in which case I suggest you use the following:
I have eliminated all the crap that is not needed in the configs, and you should be able to erase the startups and reload, then paste these in and do a "copy run start" afterwards on each router.
Site1
-----------------------------------------------
hostname rooakhill
!
enable secret 5 $1$fW0W$e8xN8oUWrQEF9/EtW39EN0
enable password gcsins
!
username romthope password 0 cheap1
!
ip subnet-zero
!
interface FastEthernet0/0
ip address 35.0.0.11 255.255.255.0
speed auto
half-duplex
!
interface Serial0/0
ip address 192.168.254.2 255.255.255.0
!
ip classless
ip route 0.0.0.0 0.0.0.0 192.168.254.1
!
snmp-server engineID local 0000000902000008A3A70D20
snmp-server community public RO
!
line con 0
transport input none
line aux 0
line vty 0 4
password cheap1
login
-----------------------------------------------
Site 2
-----------------------------------------------
hostname romthope
!
enable secret 5 $1$94zU$x1ekovoTunVOEKUPmhOb1.
enable password gcsins
!
username rooakhill password 0 cheap1
!
ip subnet-zero
!
interface FastEthernet0/0
ip address 36.0.0.10 255.255.255.0
speed auto
half-duplex
!
interface Serial0/0
ip address 192.168.254.1 255.255.255.0
!
ip classless
ip route 0.0.0.0 0.0.0.0 192.168.254.2
!
snmp-server engineID local 0000000902000008A3A716C0
snmp-server community public RO
!
line con 0
exec-timeout 0 0
transport input none
line aux 0
line vty 0 4
password cheap1
login
!
end
---------------------------------------------
If its a real live network then you may want to try this out of hours and make sure you backup your running-config for both sites first.
But I have tested this on my Lab and it works 
As for what this guy is trying to do with PPP, dialer & access-lists defies all my knowledge | |
|
| I wouldn't waste your time, he's already fixed it!
It is good though having real world Q's to work on. | |
| Yeti-GBR1 2002-02-27, 5:52 am |
| Dhoooooo, darn and there was I thinking I was posting a fix...aaaaaargh oh well.  |
|
|
|