Routing Brain Fryer - The Nun's Revenge - 99% there but not quite.

[pcmanusa]

Preface: I'm a CCNA which means I don't know *&$&*#$& about routing and this weekend I proved it by taking the longest to get two routers to work - Guiness Book called me to confirm. While I *$&%&#$*&@ away the most beautiful weekend in the Northeast to setup routers in a convent.

I'm so vexed by the current predicament that I gave up, slid my gun into a drawer other than the usual and hid all the pills. My Blood pressure will more likely kill me than downing the entire bottle of pills.

Here is the setup.

Office Bldg - end of line - ROUTER B - T1
MAIN NOC - 1721 - other end of T1

The worlds worst NOC - and to top it off they had 1 million gallons spill into the building and almost top off the NOC - That's what you get when you bust a main.

I needed to setup two 1721 routers one on either end of a T1 to another building so they can house the displaced Sisters flooded out of their office building and home.

Router A - NOC 1721
FastEth - 192.168.10.5 255.255.255.0
Serial0 - WIC1DSU IP unnumbered to FastEth

Router B - Office 1721
FastEth - 192.168.11.1 255.255.255.0
Serial0 - WIC1DSU IP Unnumbered to FastEth

NOC PIX 515E - NOC Gateway to DMZ
Interface0 - DMZ Router 1721 - To Internet T1
Interface1 - Ethernet 192.168.5.1

NOC Novell Server on 192.168.10.18
NOC Laptop 192.168.10.60

NOC Switch -

Location and what's hooked to what.

10.0 net - Switch has - Pix - Router A - laptop - Novell Server

Pix gets IP from 1721 DMZ router directly connected to T1 and is GW

11.0 net In the other office Building is 1721 and a switch.


Here what works:

In office building Router B - It is handing out DHCP to 11.0.
I can ping and telnet to:

Router A 192.168.10.5 In NOC
GW - Pix 192.168.10.1 In NOC
I'm getting IP from Net and can browse.

I cannot ping my novell server (in NOC) on 192.168.10.18 nor can I ping or telnet to anything other than the internet, my GW (Pix)in NOC 192.168.10.1 and of course my Router A (NOC) 192.168.10.5.

Here is the config for Router B:


version 12.3
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname RouterB
!
boot-start-marker
boot-end-marker
!
enable secret 5 xxxxxxxxxxxxxxxxxxxxxx
enable password xxxxxxxxxxxxxxxxxxxxxx
!
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
no aaa new-model
no ip subnet-zero
no ip cef

no ip dhcp conflict logging
ip dhcp excluded-address 192.168.11.1 192.168.11.49
!
ip dhcp pool xxxxxxx
network 192.168.11.0 255.255.255.0
domain-name ******.org
dns-server 207.106.xx.x
default-router 192.168.11.1
netbios-node-type h-node

!
!
!
no ftp-server write-enable
!
!
!
!
interface FastEthernet0
ip address 192.168.11.1 255.255.255.0
no ip mroute-cache
speed auto
full-duplex
!
interface Serial0
ip unnumbered FastEthernet0
no fair-queue
!
router rip
network 192.168.11.0
distribute-list static out
distribute-list static in
!
ip classless
ip route 0.0.0.0 0.0.0.0 Serial0
ip route 192.168.10.0 255.255.255.0 Serial0
ip http server
!
ip access-list standard static
!
dialer-list 1 protocol ip permit
!
line con 0
password xxxxxx
login
line aux 0
line vty 0 4
password xxxxx
login
!
!
end

Router A

Router A sees everything. Net, Novell, Pix, Router B - the whole enchilada. Router A connects to switch where Pix and Novell Server are all plugged into.

A laptop 192.168.10.60 connected to switch in NOC sees Novell Server 192.168.10.18 sees also Net, Pix 192.168.10.1 GW.

IT DOES NOT SEE Router B

Here is Router A Config

version 12.3
service config
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname RouterA
!
boot-start-marker
boot-end-marker
!
enable secret 5 **********
enable password ********
!
no aaa new-model
ip subnet-zero
!
!
!
ip cef
!
!
!
!
interface FastEthernet0
ip address 192.168.10.5 255.255.255.0
speed auto
full-duplex
!
interface Serial0
ip unnumbered FastEthernet0
!
router rip
network 192.168.10.0
distribute-list static out
distribute-list static in
!
ip classless
ip route 192.168.11.0 255.255.255.0 Serial0 no ip http server !
!
ip access-list standard static
dialer-list 1 protocol ip permit
!
line con 0
line aux 0
line vty 0 4
password *********
login
!
end

Some more info:

I enabled Rip on everything - Router A and B - PIX and since I haven't slept in days and I've made a note to go out to buy better bullets tomorrow - I forgot to get a copy of the Show IP Route's and even though I have given my sole cable modem access through the Pix I forgot to write down the outside interface IP number.

All the routing tables looked right - Gateway of last resort on Router A was the GW 192.168.10.1 and it knew that anything bound for the 192.168.10.0 was to out the ethernet interface.

I know what I've done wrong is so simple that when somone tells me I'll be sure and use one of the new bullets I'm putting on my todo list to buy.

Will a kind soul help me out without pushing me further towards blowing what little of my brains are left?

 

[BuckWeet]

The problem is everything on the 10.x subnet is using the PIX as its default gateway. The PIX cannot route, so when there is a request coming from the 10.x devices to the 11.x its hitting the PIX and getting dropped, since the PIX doesn't route.. Put the router as .1 then the pix as .5 or something, then it'll work.. Adjust your static routes as well though..


BuckWeet

 

[pcmanusa]

BuckWeet is right on the money. Changing the servers and dchp to change the gateway from the pix to the new 1721 on 10.5 solved the problem.

THanks!