Cisco Routing problem

[easthope31]

Hi All just got a little routing problem from one ip range to another

I cannot ping 192.168.6.10 from the switch below, but i can ping the 2nd switch.

Router 1

version 12.1
no service pad
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname
!
enable secret 5 $1$czy0$GIewA.bfI5V6vOTglFViz/
!
ip subnet-zero
ip routing
no ip domain-lookup
ip host Donc 192.168.203.2
ip host Barn 192.168.202.2
ip host Shef 192.168.201.2
ip host rtr 192.168.204.1
!
mls qos map ip-prec-dscp 0 8 16 26 32 46 48 56
mls qos min-reserve 5 170
mls qos min-reserve 6 10
mls qos min-reserve 7 65
mls qos min-reserve 8 26
mls qos
!
class-map match-all Voice
match access-group 10
!
!
policy-map Voice
class Voice
set ip dscp 46
!
!
spanning-tree mode pvst
spanning-tree extend system-id
!
!
interface Loopback0
ip address 192.168.204.2 255.255.255.255
!
interface FastEthernet0/1
description ** connection to 2610 Router **
no switchport
bandwidth 10000
ip address 192.168.204.6 255.255.255.252
duplex full
speed 10
service-policy input Voice
priority-queue out
!
interface FastEthernet0/2
description ** connection to Sheffield **
no switchport
bandwidth 10000
ip address 192.168.201.9 255.255.255.252
duplex full
speed 10
mls qos trust dscp
priority-queue out
!
interface FastEthernet0/3
description ** connection to Barnsley **
no switchport
bandwidth 10000
ip address 192.168.202.9 255.255.255.252
duplex full
speed 10
mls qos trust dscp
priority-queue out
!
interface FastEthernet0/4
description ** connection to Doncaster **
no switchport
bandwidth 10000
ip address 192.168.203.9 255.255.255.252
duplex full
speed 10
mls qos trust dscp
priority-queue out
!
interface FastEthernet0/5
no ip address
!
interface FastEthernet0/6
no ip address
!
interface FastEthernet0/7
no ip address
!
interface FastEthernet0/8
no ip address
!
interface FastEthernet0/9
no ip address
!
interface FastEthernet0/10
no ip address
!
interface FastEthernet0/11
no ip address
!
interface FastEthernet0/12
no ip address
!
interface FastEthernet0/13
no ip address
!
interface FastEthernet0/14
no ip address
!
interface FastEthernet0/15
no ip address
!
interface FastEthernet0/16
no ip address
!
interface FastEthernet0/17
no ip address
!
interface FastEthernet0/18
no ip address
!
interface FastEthernet0/19
no ip address
!
interface FastEthernet0/20
no ip address
!
interface FastEthernet0/21
no ip address
!
interface FastEthernet0/22
no ip address
!
interface FastEthernet0/23
no ip address
!
interface FastEthernet0/24
description ** connection to local Dat
no ip address
arp timeout 3600
!
interface GigabitEthernet0/1
no ip address
!
interface GigabitEthernet0/2
no ip address
!
interface Vlan1
description ** local Data LAN **
bandwidth 10000
ip address 172.18.16.16 255.255.240.0
arp timeout 3600
!
ip classless
ip route 0.0.0.0 0.0.0.0 192.168.203.10
ip route 10.60.30.0 255.255.255.0 192.168.203.10
ip route 172.18.32.0 255.255.240.0 192.168.203.10
ip route 172.18.32.0 255.255.255.0 172.18.33.250
ip route 172.18.48.0 255.255.240.0 192.168.202.10
ip route 172.18.64.0 255.255.240.0 192.168.201.10
ip route 192.168.6.0 255.255.255.0 192.168.203.10
ip route 192.168.6.0 255.255.255.0 172.18.32.16
ip route 192.168.201.0 255.255.255.0 192.168.201.10
ip route 192.168.202.0 255.255.255.0 192.168.202.10
ip route 192.168.203.0 255.255.255.0 192.168.203.10
ip route 192.168.204.1 255.255.255.255 FastEthernet0/1
no ip http server
!
!
access-list 10 permit 192.168.204.5
snmp-server community public RO
banner motd ^CC
************************************
* *
* Secure router *
* *
* *
* UNAUTHORISED ACCESS PROHIBITED *
* *
* *
************************************^C
!
line con 0
exec-timeout 5 0
password 7 045802150C2E5E411D11
logging synchronous
login

2nd switch

This switch can ping 192.168.6.10 the first switch cannot

version 12.1
no service pad
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname
!
enable secret 5 $1$MAjX$oWMI/y0PQeWIcvJ0UJRRK1
!
ip subnet-zero
ip routing
no ip domain-lookup
ip host rtr 192.168.203.1
ip host Shef 192.168.201.2
ip host Roth 192.168.204.2
ip host Barn 192.168.202.2
!
mls qos map ip-prec-dscp 0 8 16 26 32 46 48 56
mls qos min-reserve 5 170
mls qos min-reserve 6 10
mls qos min-reserve 7 65
mls qos min-reserve 8 26
mls qos
!
class-map match-all Voice
match access-group 10
!
!
policy-map Voice
class Voice
set ip dscp 46
!
!
spanning-tree mode pvst
spanning-tree extend system-id
!
!
interface Loopback0
ip address 192.168.203.2 255.255.255.255
!
interface FastEthernet0/1
description ** connection to 2610 router **
no switchport
bandwidth 10000
ip address 192.168.203.6 255.255.255.252
duplex full
speed 10
service-policy input Voice
priority-queue out
!
interface FastEthernet0/2
description ** connection to Rotherham **
no switchport
bandwidth 10000
ip address 192.168.203.10 255.255.255.252
duplex full
speed 10
mls qos trust dscp
priority-queue out
!
interface FastEthernet0/3
no ip address
!
interface FastEthernet0/4
no ip address
!
interface FastEthernet0/5
no ip address
!
interface FastEthernet0/6
no ip address
!
interface FastEthernet0/7
no ip address
!
interface FastEthernet0/8
no ip address
!
interface FastEthernet0/9
no ip address
!
interface FastEthernet0/10
no ip address
!
interface FastEthernet0/11
no ip address
!
interface FastEthernet0/12
no ip address
!
interface FastEthernet0/13
no ip address
!
interface FastEthernet0/14
no ip address
!
interface FastEthernet0/15
no ip address
!
interface FastEthernet0/16
no ip address
!
interface FastEthernet0/17
no ip address
!
interface FastEthernet0/18
no ip address
!
interface FastEthernet0/19
no ip address
!
interface FastEthernet0/20
no ip address
!
interface FastEthernet0/21
no ip address
!
interface FastEthernet0/22
no ip address
!
interface FastEthernet0/23
description *** Data Server ***
no ip address
duplex full
speed 100
!
interface FastEthernet0/24
description ** connection to local Data LAN **
no ip address
duplex full
speed 100
!
interface GigabitEthernet0/1
no ip address
!
interface GigabitEthernet0/2
no ip address
!
interface Vlan1
description ** local Data LAN **
ip address 172.18.32.16 255.255.240.0
!
ip classless
ip route 0.0.0.0 0.0.0.0 172.18.33.250
ip route 10.60.30.0 255.255.255.0 172.18.32.100
ip route 172.18.0.0 255.255.0.0 192.168.0.0
ip route 172.18.16.0 255.255.240.0 192.168.203.9
ip route 192.168.6.0 255.255.255.0 172.18.33.250
ip route 192.168.6.0 255.255.255.0 172.18.16.16
ip route 192.168.203.1 255.255.255.255 FastEthernet0/1
no ip http server
!
!
access-list 10 permit 192.168.203.5
snmp-server community public RO
banner motd ^CCC

************************************

* *

* Router 2 *

* *

* *

* UNAUTHORISED ACCESS PROHIBITED *

* *

* *

************************************^C
!
line con 0
exec-timeout 5 0
password 7 045802150C2E
logging synchronous
login
line vty 0 4
exec-timeout 3 0
password 7 060506324F41
logging synchronous
login
length 0
line vty 5 15
exec-timeout 3 0
password 7 070C285F4D06
logging synchronous


Thx in advance any help would be really helpfull

 

[baddos]

You have some strange routing setup on those l3 switches. Need some more information. Can you post a "show ip route" on both switches?

Also it looks like switch 1 has different routes for that network:

Switch 1 -

ip route 192.168.6.0 255.255.255.0 192.168.203.10
ip route 192.168.6.0 255.255.255.0 172.18.32.16

Switch 2 -

ip route 192.168.6.0 255.255.255.0 172.18.33.250
ip route 192.168.6.0 255.255.255.0 172.18.16.16

 

[easthope31]

Thanks for your reply

Switch 1

Sh IP route

172.18.0.0/16 is variably subnetted, 3 subnets, 2 masks
S 172.18.32.0/24 [1/0] via 172.18.33.250
S 172.18.32.0/20 [1/0] via 192.168.203.10
C 172.18.16.0/20 is directly connected, Vlan1
10.0.0.0/24 is subnetted, 1 subnets
S 10.60.30.0 [1/0] via 192.168.203.10
S 192.168.6.0/24 [1/0] via 192.168.203.10
[1/0] via 172.18.32.16
192.168.203.0/24 is variably subnetted, 2 subnets, 2 masks
S 192.168.203.0/24 [1/0] via 192.168.203.10
C 192.168.203.8/30 is directly connected, FastEthernet0/4
192.168.204.0/24 is variably subnetted, 3 subnets, 2 masks
C 192.168.204.4/30 is directly connected, FastEthernet0/1
S 192.168.204.1/32 is directly connected, FastEthernet0/1
C 192.168.204.2/32 is directly connected, Loopback0
S* 0.0.0.0/0 [1/0] via 192.168.203.10

Switch 2

Sh ip route

172.18.0.0/20 is subnetted, 2 subnets
C 172.18.32.0 is directly connected, Vlan1
S 172.18.16.0 [1/0] via 192.168.203.9
10.0.0.0/24 is subnetted, 1 subnets
S 10.60.30.0 [1/0] via 172.18.32.100
S 192.168.6.0/24 [1/0] via 172.18.33.250
[1/0] via 172.18.16.16
192.168.203.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.203.2/32 is directly connected, Loopback0
C 192.168.203.8/30 is directly connected, FastEthernet0/2
S* 0.0.0.0/0 [1/0] via 172.18.33.250

 

[baddos]

Make sure router "172.18.32.16" can ping that address. Could be something wrong there.

 

[Glitchen]

My first thought is why do you have two static routes pointing to the same network on switch one.
ip route 192.168.6.0 255.255.255.0 192.168.203.10
ip route 192.168.6.0 255.255.255.0 172.18.32.16

and another two static routes for switch 2
ip route 192.168.6.0 255.255.255.0 172.18.33.250
ip route 192.168.6.0 255.255.255.0 172.18.16.16

Do you have metrics on these?

If not remove the bad route and try to ping again, Make sure you can ping the nexthop for that 192.168.6.0/24 network.
Since you are using static routes make sure whatever is routing the 192.168.60.0/24 network knows a route back to switch one's network 172.18.16.16 255.255.240.0

oh and traceroute is really you friend