Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

Register Log in
  • Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

2 Routers (static + RIP) - Can't ping but can tracert

Status
Not open for further replies.
StoneColdDave

StoneColdDave

Technical User
Oct 3, 2002
16
GB
Hi,

I have two routers connected over a LES10. I can ping all the interfaces from each Router and from a DOS prompt on either side of the network. But if I try to ping a Server or workstation from LAN A to LAN B it doesn't work. After running a Tracert on the IP address I couldn't ping I then find I can ping the address, it's like tracert fixes the problem, I think the problem with either with the RIP configuration, default gateway or possible a firewall configuration on the network. Any ideas?

Cisco Configuration attached
ROUTER A

ip subnet-zero
no ip domain-lookup
!
!
!
process-max-time 200
!
interface FastEthernet0/0
description Connected to LES10 circuit
ip address 172.16.1.1 255.255.0.0
no ip directed-broadcast
speed 10
full-duplex
!
interface FastEthernet1/0
description Connected to BH switch
ip address 172.24.5.34 255.255.255.0
no ip directed-broadcast
!
router rip
version 2
network 172.16.0.0
network 172.24.0.0
no auto-summary
!
ip classless
ip route 0.0.0.0 0.0.0.0 FastEthernet1/0 permanent
ip route 172.24.6.0 255.255.255.0 FastEthernet0/0 permanent
no ip http server
!


ROUTER B
ip subnet-zero
no ip domain-lookup
!
!
!
!
interface FastEthernet0/0
description Connected to LES10 circuit
ip address 172.16.1.2 255.255.0.0
no ip directed-broadcast
speed 10
full-duplex
!
!
interface FastEthernet1/0
description Connected to OF LAN switch
ip address 172.24.6.3 255.255.255.0
no ip directed-broadcast
duplex auto
speed auto
!
router rip
version 2
network 172.16.0.0
network 172.24.0.0
no auto-summary
!
ip default-gateway 172.24.6.7
ip classless
ip route 172.24.5.0 255.255.255.0 FastEthernet0/0 permanent
no ip http server



The default gateway 172.24.6.7 is a firewall, but when I have tried removing this address and the same thing still happens.

Regards

Dave
 
Sort by date Sort by votes
Dave,

If you do a 'show ip route' in Router B, does it show a default route? I do not think that the 'ip default-gateway' statement will work on Router B since you are running a routing protocol (RIP). Todd Hethmon
thethmon@hethmon.com
 
Upvote 0 Downvote
Try running ip default-network instead of default-gateway
Default-network is not dependent on any routing protocol and performs much the same way.

Hope that helps!
 
Upvote 0 Downvote
A couple of things:

1) Have you checked for full duplex errors?
2) Why are you using rip v2?
3) Have you run sh arp?
Post the results of sh arp and sh route.
 
Upvote 0 Downvote
Thanks for the replies

1. I don't know why RIP V2 is being used, as I didn't configure it.

2. I have removed the IP default-gateway on Router B to no effect, I understand the default-gateway isn't compabile with RIP.

Posting of arp & route

RouterA#sh arp
Protocol Address Age (min) Hardware Addr Type Interface
Internet 172.24.6.190 238 0002.b90d.44a0 ARPA FastEthernet0/0
Internet 172.24.5.164 13 0006.5b6e.8672 ARPA FastEthernet1/0
Internet 172.24.5.145 9 00b0.d09b.d4ea ARPA FastEthernet1/0
Internet 172.24.6.146 220 0002.b90d.44a0 ARPA FastEthernet0/0
Internet 172.24.5.157 9 00c0.4ffa.aa7b ARPA FastEthernet1/0
Internet 172.24.5.132 13 0006.5b6c.aef1 ARPA FastEthernet1/0
Internet 172.24.6.135 43 0002.b90d.44a0 ARPA FastEthernet0/0
Internet 172.24.6.138 165 0002.b90d.44a0 ARPA FastEthernet0/0
Internet 172.24.6.139 116 0002.b90d.44a0 ARPA FastEthernet0/0
Internet 172.24.5.138 8 0006.5be4.2d2c ARPA FastEthernet1/0
Internet 172.24.6.137 176 0002.b90d.44a0 ARPA FastEthernet0/0
Internet 172.24.6.143 38 0002.b90d.44a0 ARPA FastEthernet0/0
Internet 213.38.146.3 0 Incomplete ARPA
Internet 172.24.5.192 5 00c0.4f56.42b1 ARPA FastEthernet1/0
Internet 172.24.5.194 24 0800.4661.fe6b ARPA FastEthernet1/0
Internet 172.24.5.207 49 0030.6e00.0577 ARPA FastEthernet1/0
Internet 172.24.6.205 237 0002.b90d.44a0 ARPA FastEthernet0/0
Internet 172.24.6.56 195 0002.b90d.44a0 ARPA FastEthernet0/0
Internet 172.24.5.34 - 0030.194a.2170 ARPA FastEthernet1/0
Internet 172.24.6.19 236 0002.b90d.44a0 ARPA FastEthernet0/0
Internet 172.24.6.17 201 0002.b90d.44a0 ARPA FastEthernet0/0
Internet 172.24.6.20 200 0002.b90d.44a0 ARPA FastEthernet0/0
Protocol Address Age (min) Hardware Addr Type Interface
Internet 172.24.6.21 203 0002.b90d.44a0 ARPA FastEthernet0/0
Internet 172.24.6.26 213 0002.b90d.44a0 ARPA FastEthernet0/0
Internet 172.24.6.29 222 0002.b90d.44a0 ARPA FastEthernet0/0
Internet 172.24.5.1 0 0004.768e.49c5 ARPA FastEthernet1/0
Internet 172.24.6.3 48 0002.b90d.44a0 ARPA FastEthernet0/0
Internet 172.24.5.3 0 0002.b388.6e55 ARPA FastEthernet1/0
Internet 172.24.6.1 23 0002.b90d.44a0 ARPA FastEthernet0/0
Internet 172.24.6.6 235 0002.b90d.44a0 ARPA FastEthernet0/0
Internet 172.24.5.4 0 0001.0231.bb40 ARPA FastEthernet1/0
Internet 172.24.6.7 46 0002.b90d.44a0 ARPA FastEthernet0/0
Internet 172.24.6.5 47 0002.b90d.44a0 ARPA FastEthernet0/0
Internet 172.24.5.9 0 00c0.4f4b.2003 ARPA FastEthernet1/0
Internet 172.24.6.10 0 0002.b90d.44a0 ARPA FastEthernet0/0
Internet 172.24.5.11 0 00c0.4fa9.4aa8 ARPA FastEthernet1/0
Internet 172.24.6.8 45 0002.b90d.44a0 ARPA FastEthernet0/0
Internet 172.16.1.1 - 0030.194a.2160 ARPA FastEthernet0/0
Internet 172.24.6.14 47 0002.b90d.44a0 ARPA FastEthernet0/0
Internet 172.24.5.15 0 0006.5b3f.d8db ARPA FastEthernet1/0
Internet 172.24.6.13 185 0002.b90d.44a0 ARPA FastEthernet0/0
Internet 172.16.1.2 8 0002.b90d.44a0 ARPA FastEthernet0/0
Internet 172.24.5.113 0 00b0.d0f9.c65c ARPA FastEthernet1/0
Internet 172.24.5.115 1 0006.5b6a.af5b ARPA FastEthernet1/0
Protocol Address Age (min) Hardware Addr Type Interface
Internet 172.24.5.117 4 00c0.4f56.42b5 ARPA FastEthernet1/0
Internet 172.24.5.123 12 00c0.4f03.29da ARPA FastEthernet1/0
Internet 172.24.5.105 19 0800.4656.c59c ARPA FastEthernet1/0
Internet 172.24.5.109 13 0008.741b.658f ARPA FastEthernet1/0
Internet 172.24.6.110 177 0002.b90d.44a0 ARPA FastEthernet0/0
Internet 172.24.5.111 13 00c0.4f03.29c4 ARPA FastEthernet1/0
Internet 172.24.6.66 44 0002.b90d.44a0 ARPA FastEthernet0/0
Internet 172.24.6.70 217 0002.b90d.44a0 ARPA FastEthernet0/0
Internet 172.24.6.69 45 0002.b90d.44a0 ARPA FastEthernet0/0
BrindleyUK#sh arp
Protocol Address Age (min) Hardware Addr Type Interface
Internet 172.24.6.190 2 0002.b90d.44a0 ARPA FastEthernet0/0
Internet 172.24.5.164 17 0006.5b6e.8672 ARPA FastEthernet1/0
Internet 172.24.5.145 12 00b0.d09b.d4ea ARPA FastEthernet1/0
Internet 172.24.6.146 223 0002.b90d.44a0 ARPA FastEthernet0/0
Internet 172.24.5.157 13 00c0.4ffa.aa7b ARPA FastEthernet1/0
Internet 172.24.5.132 16 0006.5b6c.aef1 ARPA FastEthernet1/0
Internet 172.24.6.135 46 0002.b90d.44a0 ARPA FastEthernet0/0
Internet 172.24.6.138 168 0002.b90d.44a0 ARPA FastEthernet0/0
Internet 172.24.6.139 119 0002.b90d.44a0 ARPA FastEthernet0/0
Internet 172.24.5.138 11 0006.5be4.2d2c ARPA FastEthernet1/0
Internet 172.24.6.137 179 0002.b90d.44a0 ARPA FastEthernet0/0
Internet 172.24.6.143 41 0002.b90d.44a0 ARPA FastEthernet0/0
Internet 172.24.5.192 9 00c0.4f56.42b1 ARPA FastEthernet1/0
Internet 172.24.5.194 27 0800.4661.fe6b ARPA FastEthernet1/0
Internet 172.24.5.207 52 0030.6e00.0577 ARPA FastEthernet1/0
Internet 172.24.6.205 1 0002.b90d.44a0 ARPA FastEthernet0/0
Internet 172.24.6.56 198 0002.b90d.44a0 ARPA FastEthernet0/0
Internet 172.24.5.34 - 0030.194a.2170 ARPA FastEthernet1/0
Internet 172.24.6.19 0 0002.b90d.44a0 ARPA FastEthernet0/0
Internet 172.24.6.17 204 0002.b90d.44a0 ARPA FastEthernet0/0
Internet 172.24.6.20 203 0002.b90d.44a0 ARPA FastEthernet0/0
Internet 172.24.6.21 206 0002.b90d.44a0 ARPA FastEthernet0/0
Protocol Address Age (min) Hardware Addr Type Interface
Internet 172.24.6.26 216 0002.b90d.44a0 ARPA FastEthernet0/0
Internet 172.24.6.29 225 0002.b90d.44a0 ARPA FastEthernet0/0
Internet 172.24.5.1 0 0004.768e.49c5 ARPA FastEthernet1/0
Internet 172.24.6.3 51 0002.b90d.44a0 ARPA FastEthernet0/0
Internet 172.24.5.3 0 0002.b388.6e55 ARPA FastEthernet1/0
Internet 172.24.6.1 26 0002.b90d.44a0 ARPA FastEthernet0/0
Internet 172.24.6.6 238 0002.b90d.44a0 ARPA FastEthernet0/0
Internet 172.24.5.4 0 0001.0231.bb40 ARPA FastEthernet1/0
Internet 172.24.6.7 49 0002.b90d.44a0 ARPA FastEthernet0/0
Internet 172.24.6.5 50 0002.b90d.44a0 ARPA FastEthernet0/0
Internet 172.24.5.9 0 00c0.4f4b.2003 ARPA FastEthernet1/0
Internet 172.24.6.10 4 0002.b90d.44a0 ARPA FastEthernet0/0
Internet 172.24.5.11 0 00c0.4fa9.4aa8 ARPA FastEthernet1/0
Internet 172.24.6.8 48 0002.b90d.44a0 ARPA FastEthernet0/0
Internet 172.16.1.1 - 0030.194a.2160 ARPA FastEthernet0/0
Internet 172.24.6.14 50 0002.b90d.44a0 ARPA FastEthernet0/0
Internet 172.24.5.15 0 0006.5b3f.d8db ARPA FastEthernet1/0
Internet 172.24.6.13 188 0002.b90d.44a0 ARPA FastEthernet0/0
Internet 172.16.1.2 11 0002.b90d.44a0 ARPA FastEthernet0/0
Internet 172.24.5.113 0 00b0.d0f9.c65c ARPA FastEthernet1/0
Internet 172.24.5.115 4 0006.5b6a.af5b ARPA FastEthernet1/0
Internet 172.24.5.117 7 00c0.4f56.42b5 ARPA FastEthernet1/0
Protocol Address Age (min) Hardware Addr Type Interface
Internet 172.24.5.123 16 00c0.4f03.29da ARPA FastEthernet1/0
Internet 172.24.5.105 0 0800.4656.c59c ARPA FastEthernet1/0
Internet 172.24.5.109 16 0008.741b.658f ARPA FastEthernet1/0
Internet 172.24.6.110 180 0002.b90d.44a0 ARPA FastEthernet0/0
Internet 172.24.5.111 16 00c0.4f03.29c4 ARPA FastEthernet1/0
Internet 172.24.6.66 47 0002.b90d.44a0 ARPA FastEthernet0/0
Internet 172.24.6.70 220 0002.b90d.44a0 ARPA FastEthernet0/0
Internet 172.24.6.69 48 0002.b90d.44a0 ARPA FastEthernet0/0
RouterA#sh route

RouterA#sh ip route
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
* - candidate default, U - per-user static route, o - ODR
P - periodic downloaded static route

Gateway of last resort is 0.0.0.0 to network 0.0.0.0

C 172.16.0.0/16 is directly connected, FastEthernet0/0
172.24.0.0/24 is subnetted, 2 subnets
C 172.24.5.0 is directly connected, FastEthernet1/0
S 172.24.6.0 is directly connected, FastEthernet0/0
S* 0.0.0.0/0 is directly connected, FastEthernet1/0
RouterA#ping 172.24.6.8

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.24.6.8, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
RouterA#


NOTE - 172.24.6.8 is the address of a Server beyond Router B

ROUTER B
========

RouterB#sh arp
Protocol Address Age (min) Hardware Addr Type Interface
Internet 172.24.6.190 7 00b0.d017.aace ARPA FastEthernet1/0
Internet 172.24.5.162 40 0030.194a.2160 ARPA FastEthernet0/0
Internet 172.24.6.146 6 0050.dab0.6883 ARPA FastEthernet1/0
Internet 172.24.5.145 108 0030.194a.2160 ARPA FastEthernet0/0
Internet 172.24.6.147 6 00c0.4f90.b863 ARPA FastEthernet1/0
Internet 172.24.5.157 209 0030.194a.2160 ARPA FastEthernet0/0
Internet 172.24.6.135 1 00c0.4f61.0933 ARPA FastEthernet1/0
Internet 172.24.6.138 7 0000.865b.ba74 ARPA FastEthernet1/0
Internet 172.24.5.138 19 0030.194a.2160 ARPA FastEthernet0/0
Internet 172.24.6.137 5 0006.5b69.7ae6 ARPA FastEthernet1/0
Internet 172.24.6.143 1 00b0.d03a.9286 ARPA FastEthernet1/0
Internet 172.24.5.142 180 0030.194a.2160 ARPA FastEthernet0/0
Internet 172.24.5.193 56 0030.194a.2160 ARPA FastEthernet0/0
Internet 172.24.5.207 203 0030.194a.2160 ARPA FastEthernet0/0
Internet 172.24.6.205 5 0006.5b2d.8e35 ARPA FastEthernet1/0
Internet 172.24.6.51 5 00e0.8110.d9bc ARPA FastEthernet1/0
Internet 172.24.6.56 0 00c0.4f4e.6ace ARPA FastEthernet1/0
Internet 172.24.5.34 34 0030.194a.2160 ARPA FastEthernet0/0
Internet 172.24.6.19 6 0004.761b.b1f5 ARPA FastEthernet1/0
Internet 172.24.6.17 9 00c0.4f83.0e2b ARPA FastEthernet1/0
Internet 172.24.6.20 5 00b0.d018.333a ARPA FastEthernet1/0
Internet 172.24.6.21 23 00c0.9f13.3cd5 ARPA FastEthernet1/0
Internet 172.24.6.26 4 00c0.4f3d.192e ARPA FastEthernet1/0
Protocol Address Age (min) Hardware Addr Type Interface
Internet 172.24.6.30 209 0010.7bef.7f15 ARPA FastEthernet1/0
Internet 172.24.6.29 1 0050.0431.cd01 ARPA FastEthernet1/0
Internet 172.24.6.3 - 0002.b90d.44b0 ARPA FastEthernet1/0
Internet 172.24.5.3 36 0030.194a.2160 ARPA FastEthernet0/0
Internet 172.24.5.4 33 0030.194a.2160 ARPA FastEthernet0/0
Internet 172.24.6.7 1 0004.76a0.08c1 ARPA FastEthernet1/0
Internet 172.24.6.5 0 00a0.2456.1018 ARPA FastEthernet1/0
Internet 172.24.5.9 33 0030.194a.2160 ARPA FastEthernet0/0
Internet 172.24.6.10 4 0006.5b57.6296 ARPA FastEthernet1/0
Internet 172.24.5.8 9 0030.194a.2160 ARPA FastEthernet0/0
Internet 172.24.6.8 3 00b0.d0f9.5f6e ARPA FastEthernet1/0
Internet 172.24.5.11 204 0030.194a.2160 ARPA FastEthernet0/0
Internet 172.16.1.1 0 0030.194a.2160 ARPA FastEthernet0/0
Internet 172.24.6.14 1 0050.da43.ab5c ARPA FastEthernet1/0
Internet 172.24.6.15 5 0006.5b8e.7555 ARPA FastEthernet1/0
Internet 172.24.6.12 6 0008.0211.cf06 ARPA FastEthernet1/0
Internet 172.16.1.2 - 0002.b90d.44a0 ARPA FastEthernet0/0
Internet 172.24.6.13 2 00b0.d03a.9288 ARPA FastEthernet1/0
Internet 172.24.5.113 32 0030.194a.2160 ARPA FastEthernet0/0
Internet 172.24.5.123 206 0030.194a.2160 ARPA FastEthernet0/0
Internet 172.24.6.110 0 00c0.9f07.2d44 ARPA FastEthernet1/0
Internet 172.24.5.109 148 0030.194a.2160 ARPA FastEthernet0/0
Protocol Address Age (min) Hardware Addr Type Interface
Internet 172.24.5.111 202 0030.194a.2160 ARPA FastEthernet0/0
Internet 172.24.6.66 0 0050.04c9.ae90 ARPA FastEthernet1/0
Internet 172.24.6.70 1 00b0.d03a.9282 ARPA FastEthernet1/0
Internet 172.24.6.69 1 00c0.4fa9.296e ARPA FastEthernet1/0
Internet 172.24.5.72 236 0030.194a.2160 ARPA FastEthernet0/0
RouterB#sh route

RouterB#hardUK#sh ip route
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
* - candidate default, U - per-user static route, o - ODR
P - periodic downloaded static route

Gateway of last resort is 172.16.1.1 to network 0.0.0.0

C 172.16.0.0/16 is directly connected, FastEthernet0/0
172.24.0.0/16 is variably subnetted, 3 subnets, 2 masks
S 172.24.5.0/24 is directly connected, FastEthernet0/0
C 172.24.6.0/24 is directly connected, FastEthernet1/0
S 172.24.0.0/16 [1/0] via 172.24.6.7
R* 0.0.0.0/0 [120/1] via 172.16.1.1, 00:00:13, FastEthernet0/0
OrchardUK#ping 172.24.5.72

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.24.5.72, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
RouterB#

 
Upvote 0 Downvote
Dave,

It doesn't appear as if RIP is doing you much good in this configuration. Because you are using the 'ip route x.x.x.x y.y.y.y interface permanent' command, the only route that RIP is putting into your routing table is the 0.0.0.0/0 route into Router B. I would suggest that you do a 'show ip route 172.24.5.0' in Router A and insure that it says it is redistributing via RIP. If so, I would remove the static route in Router B pointing to Router A. I would do the same for the LAN address in Router B. If you don't want to remove the statics, I would suggest changing them to floating statics, e.g. 'ip route 172.24.5.0 255.255.255.0 FastEthernet0/0 200' This will put that route into the table if RIP does not inject it.
If this doesn't help, post a traceroute please. Todd Hethmon
thethmon@hethmon.com
 
Upvote 0 Downvote
Thanks,

The problem is still outstanding...

1. I have replaced the static Route 172.24.5.0 on Router B to floating as suggested.
2. I am unable to delete the Static Route 172.24.0.0 255.255.0.0 172.24.6.7 on RouterB(See below)

ROUTERB
=======
interface FastEthernet0/0
description Connected to LES10 circuit
ip address 172.16.1.2 255.255.0.0
no ip directed-broadcast
speed 10
full-duplex
!
interface FastEthernet1/0
description Connected to OF LAN switch
ip address 172.24.6.3 255.255.255.0
no ip directed-broadcast
duplex auto
speed auto
!
router rip
version 2
network 172.16.0.0
network 172.24.0.0
no auto-summary
!
ip classless
ip route 172.24.0.0 255.255.0.0 172.24.6.7
ip route 172.24.5.0 255.255.255.0 FastEthernet0/0 200
no ip http server
!

RouterB#config t
Enter configuration commands, one per line. End with CNTL/Z.
RouterB(config)##no ip route 172.24.0.0 255.255.0.0 172.24.6.7
%No matching route to delete
RouterB(config)#no ip route 172.24.0.0 255.255.0.0
%No matching route to delete
RouterB(config)#^Z
RouterB#sh ip route
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
* - candidate default, U - per-user static route, o - ODR
P - periodic downloaded static route

Gateway of last resort is 172.16.1.1 to network 0.0.0.0

C 172.16.0.0/16 is directly connected, FastEthernet0/0
172.24.0.0/16 is variably subnetted, 3 subnets, 2 masks
R 172.24.5.0/24 [120/1] via 172.16.1.1, 00:00:05, FastEthernet0/0
C 172.24.6.0/24 is directly connected, FastEthernet1/0
S 172.24.0.0/16 [1/0] via 172.24.6.7
R* 0.0.0.0/0 [120/1] via 172.16.1.1, 00:00:05, FastEthernet0/0
RouterB#

ROUTERA#

RouterA#sh ip route 172.24.5.0
Routing entry for 172.24.5.0/24
Known via "connected", distance 0, metric 0 (connected, via interface)
Redistributing via rip
Advertised by rip
Routing Descriptor Blocks:
* directly connected, via FastEthernet1/0
Route metric is 0, traffic share count is 1

RouterA#ping 172.24.6.8

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.24.6.8, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)



The Traceroute command from Router A to 172.24.6.8 (Server on LAN B) doesn't work.

RouterA#traceroute 172.24.6.8
Type escape sequence to abort.
Tracing the route to 172.24.6.8
1 172.16.1.2 0 msec 0 msec 0 msec
2 * * *
3 * * *

However if I run the command from a DOS prompt on LAN A I get the following...

Tracing Route to OF_PROXYSRV 172.24.6.8
1 172.24.5.34
2 172.16.1.2
3 172.24.6.8

After running this command I can then ping the address, before running the command I cannot ping the address. Note that I still cannot ping the address from Router A.

Any further suggestions?

Regards

Dave
 
Upvote 0 Downvote
It doesn't appear as if RIP is doing you much good in this configuration. Because you are using the 'ip route x.x.x.x y.y.y.y interface permanent' command, the only route that RIP is putting into your routing table is the 0.0.0.0/0 route into Router B. I would suggest that you do a 'show ip route 172.24.5.0' in Router A and insure that it says it is redistributing via RIP. If so, I would remove the static route in Router B pointing to Router A. I would do the same for the LAN address in Router B. If you don't want to remove the statics, I would suggest changing them to floating statics, e.g. 'ip route 172.24.5.0 255.255.255.0 FastEthernet0/0 200' This will put that route into the table if RIP does not inject it.
If this doesn't help, post a traceroute please. Todd Hethmon
thethmon@hethmon.com
 
Upvote 0 Downvote
I have made the changes you suggested on both Routers but still having probs. Find the updated config and ip routing table below. Note that they don't have a Gateway of last resort, if setting this would help please advise. To me it seems like the Router aren't building Routing tables, I don't understand why cos when you run show arp it clearly shows the IP to MAC addresses of network devices.

Regards

Dave

RouterA#sh ru
Building configuration...

Current configuration:
!
version 12.0
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname BrindleyUK
!
enable secret 5 $1$CLoz$iODXpQAYPvsKG46BHG3eR.
!
!
!
!
!
ip subnet-zero
no ip domain-lookup
!
!
!
process-max-time 200
!
interface FastEthernet0/0
description Connected to LES10 circuit
ip address 172.16.1.1 255.255.0.0
no ip directed-broadcast
speed 10
full-duplex
!
interface FastEthernet1/0
description Connected to BH switch
ip address 172.24.5.34 255.255.255.0
no ip directed-broadcast
!
router rip
version 2
network 172.16.0.0
network 172.24.0.0
no auto-summary
!
ip classless
ip route 172.24.6.0 255.255.255.0 FastEthernet0/0 200
no ip http server
!
banner motd ^Cf you have accessed this router without authorisation from PBMS UK
, please leave ^C
!
line con 0
exec-timeout 0 0
password 7 082244470A120019
logging synchronous
login
transport input none
line aux 0
line vty 0 4
exec-timeout 0 0
password 7 110A110C14190E02
logging synchronous
login
!
no scheduler allocate
end

RouterA#sh ip route
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
* - candidate default, U - per-user static route, o - ODR
P - periodic downloaded static route

Gateway of last resort is not set

C 172.16.0.0/16 is directly connected, FastEthernet0/0
172.24.0.0/24 is subnetted, 2 subnets
C 172.24.5.0 is directly connected, FastEthernet1/0
R 172.24.6.0 [120/1] via 172.16.1.2, 00:00:10, FastEthernet0/0
RouterA#ping 172.24.6.3

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.24.6.3, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms
RouterA#ping 172.24.6.7

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.24.6.7, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
RouterA#

ROUTER B
==========

RouterB#sh ru
Building configuration...

Current configuration:
!
version 12.0
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname OrchardUK
!
enable secret 5 $1$4X32$FriFOYnhjo6g1OklxsMy50
!
!
!
!
!
ip subnet-zero
no ip domain-lookup
!
!
!
!
interface FastEthernet0/0
description Connected to LES10 circuit
ip address 172.16.1.2 255.255.0.0
no ip directed-broadcast
speed 10
full-duplex
!
interface FastEthernet1/0
description Connected to OF LAN switch
ip address 172.24.6.3 255.255.255.0
no ip directed-broadcast
duplex auto
speed auto
!
router rip
version 2
network 172.16.0.0
network 172.24.0.0
no auto-summary
!
ip default-gateway 172.24.6.7
ip classless
ip route 172.24.5.0 255.255.255.0 FastEthernet0/0 200
no ip http server
!
banner motd ^Cf you have accessed this router without authorisation from PBMS UK
, please leave ^C
!
line con 0
exec-timeout 0 0
password 7 110A110C14190E02
logging synchronous
login
transport input none
line aux 0
line vty 0 4
exec-timeout 0 0
password 7 121A0D1E1100090A
logging synchronous
login
!
no scheduler allocate
end

RouterB#ping 172.24.6.8

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.24.6.8, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/4 ms
RouterB#sh ip route
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
* - candidate default, U - per-user static route, o - ODR
P - periodic downloaded static route

Gateway of last resort is not set

C 172.16.0.0/16 is directly connected, FastEthernet0/0
172.24.0.0/24 is subnetted, 2 subnets
R 172.24.5.0 [120/1] via 172.16.1.1, 00:00:02, FastEthernet0/0
C 172.24.6.0 is directly connected, FastEthernet1/0
RouterB#ping 172.24.5.138

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.24.5.138, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
RouterB#
 
Upvote 0 Downvote
OK to sum up the problem.

I have corrected some of the configuration problems (see configs at the end).

LAN A----------Router A---------Router B---------LAN B
172.24.5.0 LES10 172.24.6.0

1. I can ping the LAN B Router Interface from Router A
2. I can ping the LAN A Router Interface from Router B
3. I can tracert (from workstation) only a handful of IP addresses on each network, this what doesn't make sense to me, surely if on LAN A I can ping 172.24.6.7, I should be able to ping 172.24.6.8. My gut feeling is that Cisco Routers don't fail in this sort way. Is it worth upgrading the firmware? I think it's on 11.x. I have tried pointing workstation gateway directly to the router IP address with no effect, I do suspect it could be something on the LAN or Firewall.

The Routing tables shows RIP & (Floating) static Route to each network as expected. I have tried a total static route configuration with no RIP, same results.
SH ARP shows expected network addresses on each Router.

There is Checkpoint Firewall operating on both Networks. Note that the Routers do not connect directly into a firewall interface but a switch. I have tried plugging the Router into the firewall directly and altering the config but it seem to have created further problems.

I think the Routers are doing the job and it's possibly something on the LANs causing the problem, possibly Checkpoint Firewall, as upon examining the Checkpoint configuration it looked over complicated for it does. I'm going to try switching the Firewalls off to see if that makes a difference, any other suggestions would be apprehiated.


ROUTER A
version 12.0
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname RouterA
!
enable secret 5 $1$CLoz$iODXpQAYPvsKG46BHG3eR.
!
!
ip subnet-zero
no ip domain-lookup
!
!
process-max-time 200
!
interface FastEthernet0/0
description Connected to LES10 circuit
ip address 172.16.1.1 255.255.255.252
no ip directed-broadcast
speed 10
full-duplex
!
interface FastEthernet1/0
description Connected to BH switch
ip address 172.24.5.34 255.255.255.0
no ip directed-broadcast
!
router rip
version 2
network 172.16.0.0
network 172.24.0.0
no auto-summary
!
ip classless
ip route 0.0.0.0 0.0.0.0 FastEthernet1/0 permanent
ip route 172.24.6.0 255.255.255.0 FastEthernet0/0 200
no ip http server
!
line con 0
exec-timeout 0 0
password 7 082244470A120019
logging synchronous
login
transport input none
line aux 0
line vty 0 4
exec-timeout 0 0
password 7 110A110C14190E02
logging synchronous
login
!
end


ROUTER B
version 12.0
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname RouterB
!
enable secret 5 $1$4X32$FriFOYnhjo6g1OklxsMy50
!
!
ip subnet-zero
no ip domain-lookup
!
interface FastEthernet0/0
description Connected to LES10 circuit
ip address 172.16.1.2 255.255.255.252
no ip directed-broadcast
speed 10
full-duplex
!
interface FastEthernet1/0
description Connected to OF LAN switch
ip address 172.24.6.3 255.255.255.0
no ip directed-broadcast
duplex auto
speed auto
!
router rip
version 2
network 172.16.0.0
network 172.24.0.0
no auto-summary
!
ip classless
ip route 172.24.5.0 255.255.255.0 FastEthernet0/0 200
no ip http server
!
line con 0
exec-timeout 0 0
password 7 110A110C14190E02
logging synchronous
login
transport input none
line aux 0
line vty 0 4
exec-timeout 0 0
password 7 121A0D1E1100090A
logging synchronous
login
!
end
 
Upvote 0 Downvote
Dave,
You are correct in that without any ACL's on the routers, you will not see the response from some IP's and not others. I do suspect that it is rules in the firewall that are causing your problems. You state that the routers are plugged into switches which also have the firewalls. Is there anything else on the switches? Another test is to do extended pings from Router A to devices on LAN A. Source the request from Router A's LAN IP. If you get some responses correctly, but others you miss, then it is something on the firewall or LAN at A and you cna rule out the LES10 circuit and Router configuration. Todd Hethmon
thethmon@hethmon.com
 
Upvote 0 Downvote
Status
Not open for further replies.

Similar threads

inlsp05
  • Locked
  • Question
2811&2960 48 volts wiring diagram
Replies
1
Views
132
BOKA
BOKA
DTGMI
  • Locked
  • Question
Moving from Juniper SRX-240 to Cisco ??
Replies
0
Views
118
DTGMI
DTGMI
NavinNet
  • Locked
  • Question
Why 2 different mac addresses of a server are being shown of CISCO 6509E Layer-3 Switch ?
Replies
0
Views
71
NavinNet
NavinNet
Baze72
  • Locked
  • Question
Cisco 2800 Series can't login
Replies
7
Views
150
burtsbees
burtsbees
mikey789
  • Locked
  • Question
Can 4000-M Routing VLANs ?
Replies
0
Views
71
mikey789
mikey789

Part and Inventory Search

Sponsor

Back
Top