setup p2p T1 with 2 Cisco 2501 and Adtran tsu120 1

[tamaro]

About a year ago I inherited this setup, was working fine but now I need to make some changes to accommodate IP phones, guess what? I need some help... i will give as much as i know withch is not much and see if someone can helpme.
There is 2 sites connected thru a P2P T1 I assume those routers can be wide open since is P2P, right? Well the problem is I can’t ping a public IP address from remote site.

Here is the setup
********************************************************
Site A (main site)

Pc’s 192.1.1.1 - 254
Watchguard firebox 192.1.1.49 to internet
Router 192.1.1.250/24
csu/dsu 192.2.1.250/30

Current configuration
!
version 11.0
service udp-small-servers
service tcp-small-servers
!
hostname My Router
!
enable secret 5 <removed>
enable password <removed>
!
!
interface Ethernet0
ip address 192.1.1.250 255.255.255.0
!
interface Serial0
ip address 192.2.1.250 255.255.255.252
bandwidth 768
!
interface Serial1
no ip address
shutdown
!
router igrp 1
network 192.1.1.0
network 192.2.1.0
!
ip route 192.3.1.0 255.255.255.0 192.2.1.249
!
line con 0
line aux 0
transport input all
line vty 0 4
password <removed>
login
!
end
******************************************
site B

pc's 192.3.1.1 - 254
router 192.3.1.249/24
csu/dsu 192.2.1.249/30

Current configuration:
!
version 11.0
service udp-small-servers
service tcp-small-servers
!
hostname REMOTE SITE
!
enable secret 5 <removed>
enable password <removed>
!
!
interface Ethernet0
ip address 192.3.1.249 255.255.255.0
!
interface Serial0
ip address 192.2.1.249 255.255.255.252
!
interface Serial1
no ip address
shutdown
!
router igrp 1
network 192.3.1.0
network 192.2.1.0
!
ip route 192.1.1.0 255.255.255.0 192.2.1.250
!
line con 0
line aux 0
transport input all
line vty 0 4
password <removed>
login
!
end

Is something not set right? Thank you in advance for your help.

 

[KiscoKid]

There's not a lot wrong with that configuration. It's not related to your question but IOS 11.0 will not support the kind of quality of service you will require for IP Phones. I'd consider an IOS upgrade if these 2 routers are going to be passing IP Telephony traffic between them.

Anyway, I digress. Can the remote PCs access the Internet in any form whatsoever, i.e. can they web browse, play Counterstrike etc. Also do you know if the Watchguard firewall is NAT'ing your remote LAN PCs' IP addresses for use with the Internet? Also do you have a copy of a traceroute from one of the remote PCs that cannot access the Internet?

Regards

 

[tamaro]

this is the tracing:

Tracing route to

http://www.l.google.com

[64.233.161.104]
over a maximum of 30 hops:

1 1 ms 2 ms 1 ms 192.3.1.249
2 192.1.1.249 Reports: Destination Host Unreachable

this is only when I tried to go outside of the network. the internet is okay I can go anywhere.

 

[dloz]

There is no default route on your remote router so it does not know how to get out to the internet.

 

[tamaro]

isn't this the IP Route

!
ip route 192.1.1.0 255.255.255.0 192.2.1.250
!

if is not how does it supposed to look?

thank you for your help.

 

[KiscoKid]

Tamaro

Can you confirm what 192.1.1.249 is? Is this your Internet gateway?

If it is, configure both routers with a default route as follows:


REMOTE SITE#conf t
REMOTE SITE(config)#ip route 0.0.0.0 0.0.0.0 s0
REMOTE SITE(config)#exit
REMOTE SITE#wr mem



My Router#conf t
My Router(config)#ip route 0.0.0.0 0.0.0.0 192.1.1.249
My Router(config)#exit
My Router#wr mem



Note this change should ensure that pings and traceroutes to the Internet route properly (assuming the firewall allows the protocol through). However it may not be required for the PCs for web browsing if they're all configured with a proxy server. If you're using a proxy server, you only need a route to the proxy server. Can you confirm if you are using a proxy server?

 

[tamaro]

I made the changes, to 192.1.1.49 wich is the internet gateway, now the route trace stops at 192.1.1.49 I will look at the firewall setings maybe that is the problem now. the pc's on the other side were using an old proxy server. thanks for all the help.

 

[tamaro]

Great, everything works great now, thanks all for your help.