Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations gkittelson on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

This is what i get when I ping my router

Status
Not open for further replies.

5jgibbs

IS-IT--Management
Mar 8, 2005
151
US
Why do I get this weird output when I ping my router running rip and NAT?

36 bytes from 172.17.207.200: Redirect Host(New addr: 172.17.207.203)
Vr HL TOS Len ID Flg off TTL Pro cks Src Dst
4 5 00 0054 ee2c 0 0000 3f 01 9479 172.17.207.23 172.17.209.200

36 bytes from 172.17.207.200: Redirect Host(New addr: 172.17.207.203)
Vr HL TOS Len ID Flg off TTL Pro cks Src Dst
4 5 00 0054 424d 0 0000 3f 01 4059 172.17.207.23 172.17.209.200

64 bytes from 172.17.209.200: icmp_seq=2 ttl=254 time=34.245 ms
36 bytes from 172.17.207.200: Redirect Host(New addr: 172.17.207.203)
Vr HL TOS Len ID Flg off TTL Pro cks Src Dst
4 5 00 0054 8c2c 0 0000 3f 01 f679 172.17.207.23 172.17.209.200

64 bytes from 172.17.209.200: icmp_seq=3 ttl=254 time=33.270 ms
36 bytes from 172.17.207.200: Redirect Host(New addr: 172.17.207.203)
Vr HL TOS Len ID Flg off TTL Pro cks Src Dst
4 5 00 0054 746e 0 0000 3f 01 0e38 172.17.207.23 172.17.209.200

64 bytes from 172.17.209.200: icmp_seq=4 ttl=254 time=32.208 ms
36 bytes from 172.17.207.200: Redirect Host(New addr: 172.17.207.203)
Vr HL TOS Len ID Flg off TTL Pro cks Src Dst
4 5 00 0054 8631 0 0000 3f 01 fc74 172.17.207.23 172.17.209.200

64 bytes from 172.17.209.200: icmp_seq=5 ttl=254 time=33.706 ms
36 bytes from 172.17.207.200: Redirect Host(New addr: 172.17.207.203)
Vr HL TOS Len ID Flg off TTL Pro cks Src Dst
4 5 00 0054 d363 0 0000 3f 01 af42 172.17.207.23 172.17.209.200

64 bytes from 172.17.209.200: icmp_seq=6 ttl=254 time=31.947 ms
36 bytes from 172.17.207.200: Redirect Host(New addr: 172.17.207.203)
Vr HL TOS Len ID Flg off TTL Pro cks Src Dst
4 5 00 0054 776f 0 0000 3f 01 0b37 172.17.207.23 172.17.209.200

64 bytes from 172.17.209.200: icmp_seq=7 ttl=254 time=30.010 ms
36 bytes from 172.17.207.200: Redirect Host(New addr: 172.17.207.203)
Vr HL TOS Len ID Flg off TTL Pro cks Src Dst
4 5 00 0054 9d04 0 0000 3f 01 e5a1 172.17.207.23 172.17.209.200

64 bytes from 172.17.209.200: icmp_seq=8 ttl=254 time=202.757 ms
36 bytes from 172.17.207.200: Redirect Host(New addr: 172.17.207.203)
Vr HL TOS Len ID Flg off TTL Pro cks Src Dst
4 5 00 0054 7127 0 0000 3f 01 117f 172.17.207.23 172.17.209.200

64 bytes from 172.17.209.200: icmp_seq=9 ttl=254 time=31.793 ms
36 bytes from 172.17.207.200: Redirect Host(New addr: 172.17.207.203)
Vr HL TOS Len ID Flg off TTL Pro cks Src Dst
4 5 00 0054 7c6d 0 0000 3f 01 0639 172.17.207.23 172.17.209.200

64 bytes from 172.17.209.200: icmp_seq=10 ttl=254 time=31.210 ms
36 bytes from 172.17.207.200: Redirect Host(New addr: 172.17.207.203)
Vr HL TOS Len ID Flg off TTL Pro cks Src Dst
4 5 00 0054 b476 0 0000 3f 01 ce2f 172.17.207.23 172.17.209.200

64 bytes from 172.17.209.200: icmp_seq=11 ttl=254 time=31.806 ms
36 bytes from 172.17.207.200: Redirect Host(New addr: 172.17.207.203)
Vr HL TOS Len ID Flg off TTL Pro cks Src Dst
4 5 00 0054 0800 0 0000 3f 01 7aa6 172.17.207.23 172.17.209.200

64 bytes from 172.17.209.200: icmp_seq=12 ttl=254 time=30.709 ms
36 bytes from 172.17.207.200: Redirect Host(New addr: 172.17.207.203)
Vr HL TOS Len ID Flg off TTL Pro cks Src Dst
4 5 00 0054 0422 0 0000 3f 01 7e84 172.17.207.23 172.17.209.200
 
Also.. one more thing.. when I run the command..

ip nat inside source list NAT_ADDRESSES interface FastEthernet4 overload

I get the error

%Dynamic mapping in use, cannot change

No idea why.. Here is my config



Current configuration : 3501 bytes
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname JeremyRouter1
!
boot-start-marker
boot-end-marker
!
logging buffered 51200 warnings
!
no aaa new-model
!
crypto pki trustpoint TP-self-signed-274333901
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-274333901
revocation-check none
rsakeypair TP-self-signed-274333901
!
!
crypto pki certificate chain TP-self-signed-274333901
certificate self-signed 01
3082024D 308201B6 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
30312E30 2C060355 04031325 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 32373433 33333930 31301E17 0D303230 33303631 31333532
305A170D 32303031 30313030 30303030 5A303031 2E302C06 03550403 1325494F
532D5365 6C662D53 69676E65 642D4365 72746966 69636174 652D3237 34333333
39303130 819F300D 06092A86 4886F70D 01010105 0003818D 00308189 02818100
F21F66EE 5A3034C0 79AC857A 6B7D5D72 56F482A8 4248C001 868BB9B7 B8269587
F1076EF7 A66857F0 5EE4D1FD 6EC4C99F 9F0E889E 0F43CE75 C9233D75 1829C04E
ED011572 41B6BED4 D7A6FBC1 8C17FD32 F9064577 F4230A77 818B5EA7 52AFF612
57C0DC3E 404529DE 35BE312A E21BFCC7 30214914 1A1D5E80 83685168 0590FCD1
02030100 01A37730 75300F06 03551D13 0101FF04 05300301 01FF3022 0603551D
11041B30 19821779 6F75726E 616D652E 796F7572 646F6D61 696E2E63 6F6D301F
0603551D 23041830 168014FC A75FF6E5 274628FA 7ED9F72F B3FF0125 9552EA30
1D060355 1D0E0416 0414FCA7 5FF6E527 4628FA7E D9F72FB3 FF012595 52EA300D
06092A86 4886F70D 01010405 00038181 0096B5DA 28988F33 B5BF664F 7EBB91A5
569E7BE9 1D91C63D C082F0CF CE9D7060 D69524E7 7B43F558 6C3C31DA 42C6ECCA
A207FE02 5CCE7576 0532487D E5F91728 22A0B101 CE30E7EC FB4907B1 00AEC300
63BB32EB 25301984 ADF479AF 23E4888C 259E02CD 4F21189E 00A6C92A 30DD1509
AD345725 04C83F5D A897DE90 E51A8C7A 80
quit
dot11 syslog
!
!
ip cef
no ip domain lookup
ip domain name asus.local
!
!
!
username gibbsj privilege 15 secret 5 $1$CTTl$vstukZ/RTWqzqqYb35G5W0
!
!
archive
log config
hidekeys
!
!
!
!
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface FastEthernet4
description Outside World
ip address dhcp
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
!
interface Vlan1
description Inside World
ip address 172.17.207.200 255.255.255.0
ip nat inside
ip virtual-reassembly
ip tcp adjust-mss 1452
!
router rip
version 2
network 74.0.0.0
network 172.17.0.0
no auto-summary
!
ip default-gateway 172.17.207.200
ip forward-protocol nd
!
ip http server
ip http access-class 23
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip nat inside source list NAT_ADDRESSES interface FastEthernet4 overload
ip nat inside source static tcp 172.17.207.121 22 interface FastEthernet4 22
ip nat inside source static tcp 172.17.207.121 80 interface FastEthernet4 80
ip nat inside source static tcp 172.17.207.14 5900 interface FastEthernet4 5900
!
ip access-list standard NAT_ADDRESSES
permit 172.17.0.0 0.0.255.255
!
snmp-server community public RO
no cdp run
!
control-plane
!
!
line con 0
logging synchronous
login local
no modem enable
line aux 0
logging synchronous
login local
line vty 0 4
access-class 23 in
exec-timeout 40 0
privilege level 15
logging synchronous
login local
transport input telnet ssh
!
scheduler max-task-time 5000
end




Thanks
 
It's an 851 so yeah.. similar.
 
Cisco IOS Software, C850 Software (C850-ADVSECURITYK9-M), Version 12.4(15)T7, RELEASE SOFTWARE (fc3)
Technical Support: Copyright (c) 1986-2008 by Cisco Systems, Inc.
Compiled Thu 14-Aug-08 07:18 by prod_rel_team

ROM: System Bootstrap, Version 12.3(8r)YI4, RELEASE SOFTWARE

JeremyRouter1 uptime is 20 hours, 10 minutes
System returned to ROM by reload
System image file is "flash:c850-advsecurityk9-mz.124-15.T7.bin"


This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:

If you require further assistance please contact us by sending email to
export@cisco.com.

Cisco 851 (MPC8272) processor (revision 0x300) with 59392K/6144K bytes of memory.
Processor board ID FHK124422PM
MPC8272 CPU Rev: Part Number 0xC, Mask Number 0x10
5 FastEthernet interfaces
128K bytes of non-volatile configuration memory.
20480K bytes of processor board System flash (Intel Strataflash)

Configuration register is 0x2102
 
Could that error be happening because its already been set?
Its showing up in the running config..

ip nat inside source list NAT_ADDRESSES interface FastEthernet4 overload
 
Yes, already set.

router#clear ip nat trans *

Than try.

Burt
 
gibbsj@server:~$ ping 172.17.208.200
PING 172.17.208.200 (172.17.208.200) 56(84) bytes of data.
From 172.17.207.200: icmp_seq=1 Redirect Host(New nexthop: 172.17.207.203)
64 bytes from 172.17.208.200: icmp_seq=1 ttl=255 time=2.22 ms
From 172.17.207.200: icmp_seq=2 Redirect Host(New nexthop: 172.17.207.203)
64 bytes from 172.17.208.200: icmp_seq=2 ttl=255 time=2.21 ms
From 172.17.207.200: icmp_seq=3 Redirect Host(New nexthop: 172.17.207.203)
64 bytes from 172.17.208.200: icmp_seq=3 ttl=255 time=2.27 ms


Thats what I get pinging my other router.



Here is that routers running config




gibbsrouter2#show run
Building configuration...

Current configuration : 1110 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname gibbsrouter2
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
ip cef
!
!
!
!
!
!
!
username gibbsj privilege 15 secret 5 $1$Xc9J$VE2W95Y4hR0wjd/0IkGAd/
!
!
!
interface FastEthernet0/0
no ip address
duplex auto
speed auto
!
interface Serial0/0
ip address 172.17.208.200 255.255.255.0
!
interface FastEthernet0/1
ip address 172.17.207.203 255.255.255.0
duplex auto
speed auto
!
router rip

gibbsrouter2#show run
Building configuration...

Current configuration : 1110 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname gibbsrouter2
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
ip cef
!
!
!
!
!
!
!
username gibbsj privilege 15 secret 5 12345678910:)blahnopassword
!
!
!
interface FastEthernet0/0
no ip address
duplex auto
speed auto
!
interface Serial0/0
ip address 172.17.208.200 255.255.255.0
!
interface FastEthernet0/1
ip address 172.17.207.203 255.255.255.0
duplex auto
speed auto
!
router rip
version 2
network 172.17.0.0
!
ip default-gateway 172.17.207.200
!
no ip http server
no ip http secure-server
!
!
control-plane
!
banner motd ^C
********************************************
If you are not authorized to login to this
device, then do not attempt to login!
********************************************
^C
alias exec s show ip interface brief
!
line con 0
exec-timeout 50 0
logging synchronous
login local
line aux 0
line vty 0 4
exec-timeout 40 0
logging synchronous
login local
line vty 5 15
exec-timeout 40 0
logging synchronous
login local
!
!
end
 
Are you wondering why this part is listed in the output??
...Redirect Host(New nexthop: 172.17.207.203)

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)
 
yes.. I am wondering why I am getting this output

Thanks
 
You are seeing ICMP Redirects. Directly from Cisco, ICMP Redirects happen when:
- The interface on which the packet comes into the router is the same interface on which the packet gets routed out.

- The subnet or network of the source IP address is on the same subnet or network of the next-hop IP address of the routed packet.

- The datagram is not source-routed .

- The kernel is configured to send redirects.
You can disable ICMP redirects by going under interface config mode and issuing no ip redirects and you won't see that anymore.

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)
 
 http://www.box.net/shared/br4k4xbvgv
If you have the RIP listener service on the PC, then it is receiving RIPv2 updates from a directly connected interface (fa0/1). The pc knows about this already by virtue of it being directly connected.

Burt
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top