Routing problems

[18121999]

Hi guys,

I've got a really weird problem here, Our router has two fast ethernet interfaces. Each interface has an ip assigned and also has a secondary ip address on another subnet e.g 128.10.17.0/24 as main internet ip address and 128.10.25.0/24 as secondary address (please ignore the fact that these are public ip address for now!!). The problem is that pc's on the 128.10.25.0 network cannot ping some machines on the .17 network and inparticular cannot connect to machines at a remote site. The connection to the remote site is via a vpn tunnel and routing policies have been set up on both firewalls for access to and from both networks. Users at the remote site can connect to pc's on both networks. I apologise for rambling on but i hope I have given a proper insight into the problem. Any help would be greatly appreciated.
Thanks.

 

[gconnect]

if you are not allowing 'redirects' on that router (or router interface) then it may not let traffic leave out the same router interface that it came in on.

i.e. - trying to ping from the 128.10.17 to the 128.10.25 subnet (these are at least 24 bit masks, right?)

the icmp echo request hits the default gateway interface and the router says yes that destination is right back out that interface but since redirects are prohibited i cannot send that for you.

redirects are not something that should usually be enabled because of security issues, but you may need to enable them until your network is situated.