offices on MPLS network cannot ping frame-relay site

[penguinroundup]

I am in the process of migrating my remote offices to an MPLS-based network. Each site has 1 router, configured as a CE router. I have 1 site that is still on its old frame-relay connection, connected to my router (see crude drawing below!)

office2
|
(MPLS)
|
|
MyOffice--(frame relay)--Office3
|
(MPLS)
|
|
office1

Office1, Office2 and MyOffice can all connect to each other with no problems, but when Office1 or Office2 try to ping Office3, it fails. Nor can Office3 ping office1 or office2. I need to figure out a way to get O1 & O2 to access O3.

I had to enable BGP on the routers connected to the MPLS network, but not on the router still connected to the frame relay, could this be why the other offices can't see it?? But - since the O1 & O2 have to go through my router to get to O3, and my router can connect to the O3 router, why wouldn't the packets just pass back & forth through me anyway?

thanks for any input, this is confusing to me.

 

[bell1996]

Could you post the routing tables for 4 sites.
I'm suspecting it's a routing issue.

 

[mainstreetexpress]

Definately a routing issue, post the configs

 

[penguinroundup]

Here are my configs(public ip's removed):

Office3 (on the frame relay circuit)
Current configuration : 2742 bytes
!
version 12.2
no service single-slot-reload-enable
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname Office3
!
logging rate-limit console 10 except errors
enable secret 5 $1$JMZE$yBJxqk0b9wZmLV0dVFT0B1
enable password 7 00161C020A5E120D062F4B1C594956
!
ip subnet-zero
!
!
no ip finger
ip name-server **.**.**.**
ip name-server **.**.**.**
!
no ip dhcp-client network-discovery
ip accounting-threshold 5000000
!
!
controller T1 1/0
framing sf
linecode ami
!
controller T1 1/1
framing sf
linecode ami
!
!
interface FastEthernet0/0
description connected to Office3
ip address 192.168.15.221 255.255.255.0
ip helper-address 192.168.14.7
ip helper-address 192.168.13.5
ip helper-address 192.168.14.3
ip helper-address 192.168.13.6
ip helper-address 192.168.14.10
ip helper-address 192.168.16.1
ip helper-address 192.168.16.3
no ip route-cache
no ip mroute-cache
speed auto
half-duplex
!
interface Serial0/0
bandwidth 1536
ip address 10.1.1.2 255.255.255.252
encapsulation ppp
no ip route-cache
no ip mroute-cache
shutdown
service-module t1 remote-alarm-enable
!
interface Serial0/1
description connected to corporate network
bandwidth 1536
no ip address
encapsulation frame-relay
no ip route-cache
no ip mroute-cache
service-module t1 timeslots 1-24
frame-relay lmi-type cisco
!
interface Serial0/1.1 point-to-point
ip address 10.10.10.1 255.255.255.252
ip nat inside
no ip route-cache
no ip mroute-cache
shutdown
frame-relay interface-dlci 105
!
interface Serial0/1.2 point-to-point (connection to MyOffice)
ip address 10.10.10.5 255.255.255.252
no ip route-cache
no ip mroute-cache
frame-relay interface-dlci 110
!
interface FastEthernet1/0
no ip address
shutdown
duplex auto
speed auto
!
interface Serial1/2 (connection to off-site company for ftp traffic)
ip address 114.18.126.54 255.255.255.252
encapsulation ppp
no ip route-cache
no ip mroute-cache
service-module 56k clock rate 64
!
router rip
version 2
network 10.0.0.0
network 12.0.0.0
network 114.0.0.0
network 192.168.15.0
no auto-summary
!
ip classless
ip forward-protocol udp 427
ip forward-protocol udp 2645
ip forward-protocol udp 1433
ip forward-protocol udp 1434
ip route 0.0.0.0 0.0.0.0 192.168.15.6
ip route 12.127.16.68 255.255.255.255 192.168.15.6
ip route 65.0.0.0 255.0.0.0 12.30.177.225
ip route 114.18.0.0 255.255.0.0 114.18.126.53
ip route 159.137.136.250 255.255.255.254 12.30.177.225
ip route 192.168.13.0 255.255.255.0 10.10.10.6
ip route 192.168.14.0 255.255.255.0 Serial0/1.2
ip route 192.168.16.0 255.255.255.0 10.10.10.6
no ip http server
!
dialer-list 1 protocol ip permit
dialer-list 1 protocol ipx permit
!
line con 0
transport input none
line aux 0
line vty 0 4
password 7 045802150C2E1E165B48
login
!
end

MyOffice (connected to frame-relay and MPLS network)
Current configuration : 6020 bytes
!
version 12.3
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
!
hostname MyOffice
!
boot-start-marker
boot system flash c2800nm-entservicesk9-mz.123-8.t9.bin
boot-end-marker
!
logging buffered 51200 warnings
enable secret 5 $1$kL7O$YsNG3a6UjWXecC2ewVtFs.
enable password 7 021507541F120D245846
!
no network-clock-participate wic 0
no network-clock-participate wic 1
no network-clock-participate aim 0
no network-clock-participate aim 1
no aaa new-model
ip subnet-zero
!
!
ip cef
!
!
ip domain name hce.org
ip name-server **.**.**.**
no ftp-server write-enable

!
username administrator privilege 15 secret 5 $1$7NhF$4m89zqmNKDawwZ4Vb6eBZ/
!
!
controller T1 0/0/0
framing esf
clock source internal
linecode b8zs
channel-group 0 timeslots 1-24 speed 64
!
controller T1 0/0/1
framing esf
linecode b8zs
channel-group 0 timeslots 1-24 speed 64
!
controller T1 0/1/0
framing esf
linecode b8zs
channel-group 0 timeslots 1-24 speed 64
!
controller T1 0/1/1
framing esf
linecode b8zs
channel-group 0 timeslots 1-24 speed 64
--More-- !
!
!
interface GigabitEthernet0/0
description $ETH-LAN$$ETH-SW-LAUNCH$$INTF-INFO-GE 0/0$
bandwidth 10000
ip address **.**.**.** 255.255.255.240 secondary
ip address 172.16.60.2 255.255.255.0 secondary
ip address 192.168.14.10 255.255.255.0
ip helper-address 192.168.15.5
ip helper-address 192.168.13.6
ip helper-address 192.168.16.1
ip nat inside
no ip route-cache cef
no ip route-cache
no ip mroute-cache
duplex auto
speed auto
no cdp enable
!
interface GigabitEthernet0/1
no ip address
shutdown
--More-- duplex auto
speed auto
no cdp enable
!
interface Serial0/0/0:0
description connection to EDS
bandwidth 1536
ip address *************
ip broadcast-address **.**.**.***
no fair-queue
no cdp enable
!
interface Serial0/0/1:0
description connection to ISP
bandwidth 1536
ip address **.**.**.** 255.255.255.252
ip nat outside
encapsulation ppp
no ip route-cache cef
no ip route-cache
!
interface Serial0/1/0:0
no ip address
encapsulation frame-relay IETF
no ip route-cache cef
no ip route-cache
fair-queue 1536 64 0
!
interface Serial0/1/0:0.1 point-to-point
description connected to Office3
ip address 10.10.10.6 255.255.255.252
no ip route-cache
no cdp enable
frame-relay interface-dlci 100
!
interface Serial0/1/0:0.2 point-to-point
description connected to JC - DLCI MUST BE CHANGED PRIOR TO NO SHUT
ip address 10.10.10.14 255.255.255.252
no ip route-cache
shutdown
no cdp enable
frame-relay interface-dlci 105
!
interface Serial0/1/1:0 (this is the MPLS circuit)
description AT&T circuit ID DHEC.567445..ATI
ip address 12.112.191.94 255.255.255.252
encapsulation ppp
no cdp enable
!
router rip
version 2
network 10.0.0.0
network 172.16.0.0
network 192.168.13.0
network 192.168.14.0
network 192.168.15.0
distribute-list 20 in
no auto-summary
!
router bgp 65123
no synchronization
bgp log-neighbor-changes
bgp dampening
network 192.168.14.0
neighbor 12.112.191.93 remote-as 7018
no auto-summary
!
ip classless
ip forward-protocol udp 427
--More-- ip forward-protocol udp 2645
ip forward-protocol udp 2999
ip route 0.0.0.0 0.0.0.0 Serial0/0/1:0
ip route 10.10.10.0 255.255.255.252 10.10.10.5
ip route 165.139.145.0 255.255.255.0 Serial0/0/0:0
ip route 172.16.60.0 255.255.255.0 GigabitEthernet0/0
ip route 192.168.13.0 255.255.255.0 12.112.191.93
ip route 192.168.15.0 255.255.255.0 10.10.10.5
ip route 192.168.16.0 255.255.255.0 12.112.191.93 (this is the address of the access router on the ISP side)
ip route 192.168.17.0 255.255.255.0 12.112.191.93
ip route 192.168.18.0 255.255.255.0 12.112.191.93
ip route 192.168.62.0 255.255.255.0 172.16.60.1
ip route 192.168.85.0 255.255.255.0 172.16.60.1
ip route 192.168.202.0 255.255.255.0 172.16.60.1
ip route 198.132.49.0 255.255.255.0 Serial0/0/0:0
ip route 199.42.136.0 255.255.255.0 Serial0/0/0:0
ip route 199.42.137.0 255.255.255.0 Serial0/0/0:0
ip route 204.230.8.0 255.255.255.0 Serial0/0/0:0
ip route 204.230.9.0 255.255.255.0 Serial0/0/0:0
ip route 222.64.6.0 255.255.255.0 Serial0/0/0:0
!
ip http server
ip http authentication local
no ip http secure-server
ip nat inside source list 101 interface Serial0/0/1:0 overload
!
!
logging trap debugging
logging 192.168.14.2
access-list 10 deny 12.0.0.0 0.255.255.255
access-list 10 permit any
access-list 20 deny 12.124.133.232 0.0.0.3
access-list 101 deny ip any 192.168.15.0 0.0.0.255
access-list 101 deny ip any 192.168.13.0 0.0.0.255
access-list 101 deny ip host **.*.**.** any
access-list 101 deny ip host **.**.**.***any
access-list 101 permit ip any any
access-list 110 permit ip 198.132.49.0 0.0.0.255 any
access-list 110 permit ip any 198.132.49.0 0.0.0.255
no cdp run
!
!
!
control-plane
!
!
--More-- !
!
!
!
!
banner login ^C (removed to save space)
!
line con 0
login local
line aux 0
line vty 0 4
privilege level 0
password 7 094F471A1A0A454A595D
login
transport input telnet
line vty 5 15
privilege level 15
no login
transport input telnet
!
no scheduler allocate
!
end

And OFfice1 (another office on the MPLS network):
Current configuration : 2943 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname OFfice1
!
boot-start-marker
boot system flash c2800nm-entservicesk9-mz.123-8.t9.bin
boot-end-marker
!
logging buffered 51200 warnings
enable secret 5 $1$j8GO$rlULJQYL8ddqEdddVfFDb.
enable password 7 060E0E22474B1B5F4453
!
no network-clock-participate wic 0
no network-clock-participate aim 0
no network-clock-participate aim 1
no aaa new-model
ip subnet-zero
--More-- !
!
ip cef
!
!
ip domain name hce.org
no ftp-server write-enable

!
username administrator privilege 15 secret 5 $1$v.o5$MXz4gaEPCQhdexD4y6UNK0
!
--More-- !
controller T1 0/0/0
framing esf
linecode b8zs
channel-group 0 timeslots 1-24 speed 64
!
controller T1 0/0/1
framing esf
linecode b8zs
channel-group 0 timeslots 1-24 speed 64
!
!
!
interface GigabitEthernet0/0
description $ETH-LAN$$ETH-SW-LAUNCH$$INTF-INFO-GE 0/0$
ip address 192.168.16.1 255.255.255.0 secondary
ip address 192.168.16.3 255.255.255.0
ip helper-address 192.168.13.5
ip helper-address 192.168.14.10
ip helper-address 192.168.15.5
ip helper-address 192.168.13.7
ip helper-address 192.168.15.29
duplex auto
--More-- speed auto
!
interface GigabitEthernet0/1
ip address 192.168.18.1 255.255.255.0
shutdown
duplex auto
speed auto
!
interface Serial0/0/0:0
description AT&T Circuit ID DHEC.314683..ATI
ip address 12.112.186.62 255.255.255.252
encapsulation ppp
!
interface Serial0/0/1:0
no ip address
!
router rip
version 2
network 12.0.0.0
network 192.168.16.0
no auto-summary
!
router bgp 65123
--More-- no synchronization
bgp log-neighbor-changes
bgp dampening
network 192.168.16.0
neighbor 12.112.186.61 remote-as 7018
no auto-summary
!
ip classless
ip route 0.0.0.0 0.0.0.0 12.112.186.61
ip route 192.168.14.0 255.255.255.0 12.112.186.61
ip route 192.168.15.0 255.255.255.0 12.112.186.61
!
ip http server
ip http authentication local
no ip http secure-server
ip http timeout-policy idle 600 life 86400 requests 10000
!
!
!
!
!
control-plane
!
--More-- !
!
!
!
!
!
line con 0
--More-- login local
line aux 0
line vty 0 4
privilege level 0
password 7 045802150C2E1E165B48
login
transport input telnet
line vty 5 15
privilege level 15
login local
transport input telnet
!
scheduler allocate 20000 1000
!
end

IF I do a trace from Office3 to Office1, or vice versa, the routers shove the packets out the correct port, but then they get lost. IF I do a trace on my router to Office1, and specify the 10.10.10.6 port as the source port, the packets get dropped... so it's something on my router that's not passing the packets through.

 

[bell1996]

The configs do help alot, but a show ip route from all routers would be more helpful. I'll continue to examine the configs.

 

[valarian]

Hello...
The problem is, that the Router in Office3 does not know about the IP networks from the other offices except from location MyOffice. Office3 learns routes via RIPv2 from MyOffice, but MyOffice does not redistribute the BGP-learned routes from the other (MPLS-based) offices into RIP, so the routes never arrive at Office3. When you ping or traceroute to Office3 from a source IP Office3 has no route to, it will send the return packets along it's default route to 192.168.15.6.
Solution:
1) configure redistribution between RIP and BGP
2) set up static routes for the IP ranges of the MPLS offices on Office pointing to MyOffice

If you need example configs, please let me know.

Mike

 

[penguinroundup]

Here are the routing tables from my routers:

Office3 (on the frame link):
S 192.168.13.0/24 [1/0] via 10.10.10.6
S 192.168.14.0/24 is directly connected, Serial0/1.2
C 192.168.15.0/24 is directly connected, FastEthernet0/0
S 65.0.0.0/8 [1/0] via 12.30.177.225
114.0.0.0/8 is variably subnetted, 3 subnets, 3 masks
C 114.18.126.52/30 is directly connected, Serial1/2
C 114.18.126.53/32 is directly connected, Serial1/2
S 114.18.0.0/16 [1/0] via 114.18.126.53
159.137.0.0/31 is subnetted, 1 subnets
S 159.137.136.250 [1/0] via 12.30.177.225
172.16.0.0/24 is subnetted, 1 subnets
R 172.16.60.0 [120/1] via 10.10.10.6, 00:00:08, Serial0/1.2
10.0.0.0/30 is subnetted, 1 subnets
C 10.10.10.4 is directly connected, Serial0/1.2
12.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
R 12.0.0.0/8 [120/1] via 192.168.15.6, 00:00:00, FastEthernet0/0
S 12.127.16.68/32 [1/0] via 192.168.15.6
S 192.168.16.0/24 is directly connected, Serial0/1.2
S* 0.0.0.0/0 [1/0] via 192.168.15.6

MYOffice (connected to the frame and MPLS circuits):
S 192.168.62.0/24 [1/0] via 172.16.60.1
S 192.168.13.0/24 [1/0] via 12.112.191.93
C 192.168.14.0/24 is directly connected, GigabitEthernet0/0
S 192.168.15.0/24 [1/0] via 10.10.10.5
222.64.6.0/24 is variably subnetted, 2 subnets, 2 masks
C 222.64.6.16/30 is directly connected, Serial0/0/0:0
S 222.64.6.0/24 is directly connected, Serial0/0/0:0
172.16.0.0/24 is subnetted, 1 subnets
C 172.16.60.0 is directly connected, GigabitEthernet0/0
S 204.230.8.0/24 is directly connected, Serial0/0/0:0
S 198.132.49.0/24 is directly connected, Serial0/0/0:0
S 204.230.9.0/24 is directly connected, Serial0/0/0:0
S 192.168.202.0/24 [1/0] via 172.16.60.1
10.0.0.0/30 is subnetted, 2 subnets
S 10.10.10.0 [1/0] via 10.10.10.5
C 10.10.10.4 is directly connected, Serial0/1/0:0.1
S 199.42.137.0/24 is directly connected, Serial0/0/0:0
S 199.42.136.0/24 is directly connected, Serial0/0/0:0
S 192.168.17.0/24 [1/0] via 12.112.191.93
12.0.0.0/8 is variably subnetted, 9 subnets, 4 masks
C 12.126.225.193/32 is directly connected, Serial0/0/1:0
C 12.126.225.192/30 is directly connected, Serial0/0/1:0
B 12.38.168.0/24 [20/0] via 12.112.191.93, 1w5d
C 12.33.192.112/28 is directly connected, GigabitEthernet0/0
C 12.112.191.93/32 is directly connected, Serial0/1/1:0
C 12.112.191.92/30 is directly connected, Serial0/1/1:0
B 12.112.191.100/30 [20/0] via 12.112.191.93, 1w5d
B 12.112.153.8/30 [20/0] via 12.112.191.93, 1w2d
B 12.112.186.60/30 [20/0] via 12.112.191.93, 3d20h
S 192.168.85.0/24 [1/0] via 172.16.60.1
S 192.168.16.0/24 [1/0] via 12.112.191.93
S 192.168.18.0/24 [1/0] via 12.112.191.93
165.139.0.0/24 is subnetted, 1 subnets
S 165.139.145.0 is directly connected, Serial0/0/0:0
S* 0.0.0.0/0 is directly connected, Serial0/0/1:0

Office1 (connected to me via the MPLS circuit):

B 192.168.13.0/24 [20/0] via 12.112.186.61, 3d20h
S 192.168.14.0/24 [1/0] via 12.112.186.61
S 192.168.15.0/24 [1/0] via 12.112.186.61
B 192.168.17.0/24 [20/0] via 12.112.186.61, 3d20h
12.0.0.0/8 is variably subnetted, 6 subnets, 3 masks
B 12.38.168.0/24 [20/0] via 12.112.186.61, 3d20h
B 12.112.191.92/30 [20/0] via 12.112.186.61, 3d20h
B 12.112.191.100/30 [20/0] via 12.112.186.61, 3d20h
B 12.112.153.8/30 [20/0] via 12.112.186.61, 3d20h
C 12.112.186.60/30 is directly connected, Serial0/0/0:0
C 12.112.186.61/32 is directly connected, Serial0/0/0:0
C 192.168.16.0/24 is directly connected, GigabitEthernet0/0
S* 0.0.0.0/0 [1/0] via 12.112.186.61

one thing I noticed that was odd, is that the OFfice3 router said that the 192.168.16.0/24 was directly connected; I changed the ip route statement to point to the next-hop interface instead of the name of the interface, but still no joy. Unless I'm mistaken, I already have static routes for the MPLS offices pointing to the MyOffice router.

I think I need to redistribute the BGP routes into RIP, so any config examples would be helpful.

thanks!!