Unable to ping ip

[sannithi]

I am unable to ping my wan ip (172.35.7.246) from remote end. But when I perform trace,telnet,ssh etc it is working fine.
No access lists on ISP end or on my router.
Below is the config at my end...

Bhandari#sh run
Building configuration...

Current configuration : 2229 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname Bhandari
!
boot-start-marker
boot-end-marker
!
logging buffered 4096
enable secret 5 $1$rZXL$Fmkkzh6InR3pHQYsl5QyC0
enable password 7 045802150C2E
!
no aaa new-model
clock timezone IST 5 30
no ip cef
!
!
!
!
no ip domain lookup
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
interface Loopback0
ip address 172.35.12.246 255.255.255.255
!
interface FastEthernet0/0
ip address 192.168.0.250 255.255.255.0
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
!
interface FastEthernet0/1
bandwidth 256
ip address 172.35.7.246 255.255.255.252
ip accounting output-packets
ip nat outside
ip virtual-reassembly
load-interval 30
speed 100
full-duplex
!
interface Serial0/0/0
no ip address
shutdown
!
interface BRI0/1/0
no ip address
encapsulation hdlc
shutdown
!
ip route 0.0.0.0 0.0.0.0 172.35.7.245
!
!
no ip http server
no ip http secure-server
ip nat inside source list 1 interface Loopback0 overload
!
access-list 1 deny 172.35.12.246
access-list 1 deny 172.35.7.246
access-list 1 permit any
access-list 77 permit 206.120.167.147
access-list 77 permit 206.120.167.146
access-list 77 permit 206.120.167.148
access-list 77 permit 206.120.167.153
access-list 98 permit 202.92.239.0 0.0.0.255
access-list 98 permit 202.92.238.0 0.0.0.255
snmp-server community mul@03wn#1 RO 35
snmp-server community MUL#c1sw0r@wn RW 36
snmp-server community enocmulx RO 98
snmp-server community mpha#10@msil RO 77
snmp-server ifindex persist
snmp-server trap-source Loopback0
snmp-server enable traps snmp linkdown linkup
snmp-server enable traps tty
snmp-server host 206.120.167.146 version 2c mpha#10@msil
snmp-server host 206.120.167.147 version 2c mpha#10@msil
snmp-server host 206.120.167.148 version 2c mpha#10@msil
snmp-server host 206.120.167.153 version 2c mpha#10@msil
!
!
control-plane
!
!
line con 0
password 7 14141B180F0B
line aux 0
password 7 14141B180F0B
line vty 0 4
password 7 094F471A1A0A
login local
!
scheduler allocate 20000 1000
end


Can someone please guide me how to trblshoot the issue...

 

[SweetRevelation]

You said "I am unable to ping my wan ip (172.35.7.246) from remote end."

Can you clarify this statement? What is the remote end? Where are you initating your ping? More detail would be helpful.

 

[angmachete]

ip nat inside source list 1 interface Loopback0 overload
!
access-list 1 deny 172.35.12.246
access-list 1 deny 172.35.7.246 <== pls remove this and try again
access-list 1 permit any

 

[sannithi]

Hi Angmachete,

Thanks for reply.. I have nearly 500 locations with this type of configuration. Everything got same config and running fine. Only 1 or 2 locations have this problem.

If this is the NAT problem it should occur at every location.

Any reply would be appreciated....

 

[angmachete]

I am not sure why theres a deny statement for that ip. Anyway, if the config works for most of your sites. You can perform a traceroute and ping each hops and see where ping is being blocked.

 

[sannithi]

Hi,

If i perform trace I am able to reach my router's wan interface.
In ping test I am able to ping interface of ISP facing my router.

 

[SweetRevelation]

In ping test I am able to ping interface of ISP facing my router."

Where are you pinging from? What is the source of the ICMP packets? We need a bit more information to be able to properly assist.

 

[angmachete]

i am still keen on possible Natting issue. If you would remove your NAT, are you able to ping it?

if you have solved it already, i would like to hear what was the solution. thanks.