Routing issues between sites A & B via MPLS

Unanswered Question
May 22nd, 2012

Hi All,

Hope you can help with this one or certainly point me in the right direction.

  • We have two MPLS circuits managed by two different suppliers, one carries VOICE the other DATA
  • We are to decommision the VOICE MPLS and have increased the bandwith of the DATA MPLS to carry VoIP traffic too.

Current config

  • At both of our sites A & B ,devices connected to the LAN have a default gateway of the VOICE providers Cisco 2600 router , which then goes into the LAN switching. (see diagram)
  • So what I am trying to achieve is toto simply replace these 2600 routers from the VOICE MPLS provider with our own so we dont have to change the default gateways at both sites.

Testing

  • Our Cisco 2600 routes are plugged into each LAN switching environment with two subinterfaces configured, one for voip and the other for data
  • The problem is from the router and respective subinterfaces we can get to the other sites destination without any issue, but if for example a user is at site A with Ip address 10.16.11.12/16 they cant ping the VOIP subnet at site B 10.3.11.0/24. But If a ping is issue from the Site A test router then the 10.3.11.0/24 subnet is reachable but only on the 10.3.12.0/24 configured subinterface.
  • So i guess what Im saying is 10.16.0.0/16 from the LAN needs to be able to get to 10.3.11.0/24
  • Note at site A 10.16.0.0/16 & 10.3.12.0/24 can communicate no problem and at site B 10.207.0.0/16 & 10.3.11.0/24 can communicate no problem.
  • We are using IP routing, should we be using route-maps?

Hope that makes sense!

many Thanks in advance

K

Please see attached configs and test network diagram

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Average Rating: 2.3 (3 ratings)
Sergey Fer Tue, 05/22/2012 - 10:54

It is neccessary to know what routes does your ISP transfers between Cs7206s. As I see. you use static routing and defaults, so ISP also needs to use static and redistribute them into MP-BGP.

Can you show us 7206 config concerning that part of routing?

kamran.khan@3i-... Tue, 05/22/2012 - 14:55

Hi Sergy,

many Thanks for reply

I have attached the show IP  routes for each of the ISPs C7200 routers.

The ISP has added the following routes to the C7200 routers:

               Site B:               10.3.12.0              255.255.255.0         192.168.201.253

                                                 10.3.1.0                255.255.255.0         192.168.201.253

                Site A:      10.3.11.0              255.255.255.0         192.168.40.253

The problem im having is that from a laptop on site A , I cant ping 10.3.11.1. The laptop is having a 10.16.0.0/16 address with default gateway of the test router 10.16.10.145 (see diagram) . Obviously the test routers fa0/1 has two configured subinterfaces, one for voip and one for data. I wonder if the ISPs routers need subinterfaces too?

One thing to note is that data at site A terminates at our firewall which is 192.168.201.254 the test router is 192.168.201.253. Our Data LAN is 10.16.0.0./16. could this be the issue?

from the SITE A test router I can get to site B test routers VOIP interface but to any other host on the subnet it times out:

Site A Router#traceroute 10.3.11.230

Type escape sequence to abort.
Tracing the route to 10.3.11.230

  1 192.168.201.249 4 msec 4 msec 0 msec
  2 172.20.79.253 0 msec 0 msec 4 msec
  3 172.21.124.74 8 msec 8 msec 8 msec
  4 192.168.40.253 8 msec *  8 msec
Site A Router#traceroute 10.3.11.1

Type escape sequence to abort.
Tracing the route to 10.3.11.1

  1 192.168.201.249 0 msec 0 msec 0 msec
  2 172.20.79.253 12 msec 4 msec 0 msec
  3 172.21.124.74 8 msec 20 msec 12 msec
  4 192.168.40.253 8 msec 8 msec 4 msec
  5  *  *  *
  6  *  *  *
  7  *  *  *
  8  *  *  *
  9  *  *  *
10

Anyway let you have a look

thanks for your time

Mahesh Gohil Wed, 05/23/2012 - 00:17

Hi Kamran,

Do one thing..

1/ Note IP of laptop of site-B and site-A

2/ check route of site-B at site-A 7200 router...if not ask provider

3/ check route of site-A at site-B 7200 router..if not ask provider

4/ If route is there for task-2 then check route in test router at site-B

5/ if route is there for task-3 then check route in test router at site-A.

Kindly paste results of all five step here and it will be much more clear to inderstand the problem.

Also provide trace from both end laptop and test router (always use source ip while tracing)

Your outputs will help us to understna details...

Regards # Mahesh

Mahesh Gohil Wed, 05/23/2012 - 00:18

Hi Kamran,

Do one thing..

1/ Note IP of laptop of site-B and site-A

2/ check route of site-B at site-A 7200 router...if not ask provider

3/ check route of site-A at site-B 7200 router..if not ask provider

4/ If route is there for task-2 then check route in test router at site-B

5/ if route is there for task-3 then check route in test router at site-A.

Kindly paste results of all five step here and it will be much more clear to inderstand the problem.

Also provide trace from both end laptop and test router (always use source ip while tracing)

Your outputs will help us to understna details...

Regards # Mahesh

kamran.khan@3i-... Wed, 05/23/2012 - 04:17

Hi Mahesh,

Please see the below:

Note:

Site A Default gateway  for laptop10.16.10.145 (this is subinterface on site A router, also 10.3.12.230/24)

Site B Defualt gateway  for laptop 10.207.40.145 (this is subinteface on Site B router, also 10.3.11.230/24)

Defualt gateway on all our switches and voip equipment at both sites is the 10.3.x.x/24 subinterface for the site routers

1/ Note IP of laptop of site-B and site-A

Site A laptop : 10.16.0.0/16   Site B: 10.207.0.0/16

2/ check route of site-B at site-A 7200 router...if not ask provider

Site A 7200#sh ip route

Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP

       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

       E1 - OSPF external type 1, E2 - OSPF external type 2

       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2

       ia - IS-IS inter area, * - candidate default, U - per-user static route

       o - ODR, P - periodic downloaded static route

Gateway of last resort is 192.168.201.254 to network 0.0.0.0

     192.168.123.0/27 is subnetted, 1 subnets

B       192.168.123.32 [20/0] via 172.20.79.253, 4w4d

B    137.98.0.0/16 [20/0] via 172.20.79.253, 4w4d

     192.168.240.0/32 is subnetted, 1 subnets

B       192.168.240.16 [20/0] via 172.20.79.253, 5w3d

     212.161.122.0/29 is subnetted, 1 subnets

B       212.161.122.96 [20/0] via 172.20.79.253, 5w3d

     80.0.0.0/28 is subnetted, 1 subnets

B       80.1.1.0 [20/0] via 172.20.79.253, 4w4d

B    190.190.0.0/16 [20/0] via 172.20.79.253, 5w3d

     190.1.0.0/24 is subnetted, 2 subnets

B       190.1.200.0 [20/0] via 172.20.79.253, 4w4d

B       190.1.195.0 [20/0] via 172.20.79.253, 4w4d

     192.168.10.0/32 is subnetted, 2 subnets

S       192.168.10.105 [1/0] via 192.168.201.254

S       192.168.10.142 [1/0] via 192.168.201.254

     192.168.40.0/26 is subnetted, 1 subnets

B       192.168.40.192 [20/0] via 172.20.79.253, 4w4d

     172.21.0.0/30 is subnetted, 1 subnets

B       172.21.124.72 [20/0] via 172.20.79.253, 5w3d

     172.20.0.0/30 is subnetted, 3 subnets

B       172.20.32.144 [20/0] via 172.20.79.253, 5w3d

C       172.20.79.252 is directly connected, Serial1/0.102

B       172.20.12.152 [20/0] via 172.20.79.253, 5w3d

S    172.23.0.0/16 [1/0] via 192.168.201.254

B    97.0.0.0/8 [20/0] via 172.20.79.253, 4w4d

     192.168.109.0/32 is subnetted, 1 subnets

B       192.168.109.198 [20/0] via 172.20.79.253, 5w3d

     212.74.74.0/32 is subnetted, 2 subnets

B       212.74.74.96 [20/0] via 172.20.79.253, 5w3d

B       212.74.74.97 [20/0] via 172.20.79.253, 5w3d

     212.74.91.0/32 is subnetted, 1 subnets

B       212.74.91.254 [20/0] via 172.20.79.253, 7w0d

S    192.168.200.0/24 [1/0] via 192.168.201.254

     192.168.201.0/24 is variably subnetted, 3 subnets, 2 masks

B       192.168.201.176/28 [20/0] via 172.20.79.253, 5w3d

S       192.168.201.128/26 [1/0] via 192.168.201.248

C       192.168.201.192/26 is directly connected, FastEthernet0/0

B    192.168.99.0/24 [20/0] via 172.20.79.253, 4w4d

     10.0.0.0/8 is variably subnetted, 30 subnets, 4 masks

B       10.3.11.0/24 [20/0] via 172.20.79.253, 1w5d

S       10.1.8.0/24 [1/0] via 192.168.201.254

S       10.3.12.0/24 [1/0] via 192.168.201.253, FastEthernet0/0

B       10.0.1.14/32 [20/0] via 172.20.79.253, 4w4d

S       10.3.1.0/24 [1/0] via 192.168.201.253, FastEthernet0/0

B       10.0.1.3/32 [20/0] via 172.20.79.253, 4w4d

B       10.250.250.0/28 [20/0] via 172.20.79.253, 4w4d

B       10.200.200.0/28 [20/0] via 172.20.79.253, 4w4d

B       10.2.2.0/24 [20/0] via 172.20.79.253, 4w4d

B       10.1.0.0/16 [20/0] via 172.20.79.253, 4w4d

S       10.0.1.0/24 [1/0] via 192.168.201.254

B       10.1.6.0/24 [20/0] via 172.20.79.253, 4w4d

B       10.27.0.0/16 [20/0] via 172.20.79.253, 4w4d

B       10.30.0.0/16 [20/0] via 172.20.79.253, 4w4d

B       10.82.20.85/32 [20/0] via 172.20.79.253, 2w2d

S       10.16.0.0/16 [1/0] via 192.168.201.254

B       10.2.7.21/32 [20/0] via 172.20.79.253, 4w4d

S       10.20.1.0/24 [1/0] via 192.168.201.254

B       10.0.1.33/32 [20/0] via 172.20.79.253, 4w4d

B       10.3.11.50/32 [20/0] via 172.20.79.253, 5w3d

S       10.82.20.0/24 [1/0] via 172.20.79.253

S       10.82.21.0/24 [1/0] via 172.20.79.253

S       10.82.22.0/24 [1/0] via 172.20.79.253

S       10.82.23.0/24 [1/0] via 172.20.79.253

B       10.0.7.85/32 [20/0] via 172.20.79.253, 4w4d

B       10.86.0.0/24 [20/0] via 172.20.79.253, 4w4d

B       10.85.1.0/24 [20/0] via 172.20.79.253, 5w3d

S       10.145.17.1/32 [1/0] via 192.168.201.254

B       10.207.0.0/16 [20/0] via 172.20.79.253, 4w4d

S       10.216.2.0/24 [1/0] via 192.168.201.254

     192.168.255.0/32 is subnetted, 1 subnets

B       192.168.255.124 [20/0] via 172.20.79.253, 5w3d

     166.12.0.0/32 is subnetted, 1 subnets

B       166.12.236.29 [20/0] via 172.20.79.253, 4w4d

     166.14.0.0/24 is subnetted, 1 subnets

B       166.14.192.0 [20/0] via 172.20.79.253, 4w4d

     193.132.153.0/32 is subnetted, 1 subnets

S       193.132.153.250 [1/0] via 192.168.201.254

     193.132.170.0/32 is subnetted, 2 subnets

S       193.132.170.98 [1/0] via 192.168.201.254

S       193.132.170.113 [1/0] via 192.168.201.254

     206.60.135.0/32 is subnetted, 1 subnets

B       206.60.135.39 [20/0] via 172.20.79.253, 4w4d

     192.168.1.0/24 is variably subnetted, 2 subnets, 2 masks

B       192.168.1.0/24 [20/0] via 172.20.79.253, 5w3d

S       192.168.1.250/32 [1/0] via 192.168.201.254

     199.53.159.0/27 is subnetted, 1 subnets

B       199.53.159.32 [20/0] via 172.20.79.253, 4w4d

     192.168.168.0/27 is subnetted, 1 subnets

B       192.168.168.32 [20/0] via 172.20.79.253, 4w4d

B    195.0.0.0/24 [20/0] via 172.20.79.253, 5w3d

     192.168.222.0/32 is subnetted, 1 subnets

C       192.168.222.29 is directly connected, Loopback0

S*   0.0.0.0/0 [1/0] via 192.168.201.254

3/ check route of site-A at site-B 7200 router..if not ask provider

Site B#sh ip route

Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP

       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

       E1 - OSPF external type 1, E2 - OSPF external type 2

       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2

       ia - IS-IS inter area, * - candidate default, U - per-user static route

       o - ODR, P - periodic downloaded static route

Gateway of last resort is 172.21.124.73 to network 0.0.0.0

     192.168.123.0/27 is subnetted, 1 subnets

S       192.168.123.32 [1/0] via 192.168.40.254, GigabitEthernet0/0

S    137.98.0.0/16 [1/0] via 192.168.40.254, GigabitEthernet0/0

     212.161.122.0/29 is subnetted, 1 subnets

B       212.161.122.96 [20/0] via 172.21.124.73, 7w0d

     80.0.0.0/28 is subnetted, 1 subnets

S       80.1.1.0 [1/0] via 192.168.40.254, GigabitEthernet0/0

     190.1.0.0/24 is subnetted, 2 subnets

S       190.1.200.0 [1/0] via 192.168.40.254, GigabitEthernet0/0

S       190.1.195.0 [1/0] via 192.168.40.254, GigabitEthernet0/0

     192.168.10.0/32 is subnetted, 2 subnets

S       192.168.10.105 [1/0] via 192.168.40.254, GigabitEthernet0/0

B       192.168.10.142 [20/0] via 172.21.124.73, 7w0d

     192.168.40.0/26 is subnetted, 1 subnets

C       192.168.40.192 is directly connected, GigabitEthernet0/0

    172.21.0.0/30 is subnetted, 1 subnets

C       172.21.124.72 is directly connected, GigabitEthernet0/1.124

     172.20.0.0/30 is subnetted, 1 subnets

B       172.20.79.252 [20/0] via 172.21.124.73, 7w0d

B    172.23.0.0/16 [20/0] via 172.21.124.73, 7w0d

S    97.0.0.0/8 [1/0] via 192.168.40.254, GigabitEthernet0/0

     192.168.109.0/32 is subnetted, 1 subnets

C       192.168.109.198 is directly connected, Loopback0

     212.74.74.0/32 is subnetted, 2 subnets

B       212.74.74.96 [20/0] via 172.21.124.73, 7w0d

B       212.74.74.97 [20/0] via 172.21.124.73, 7w0d

     212.74.91.0/32 is subnetted, 1 subnets

B       212.74.91.254 [20/0] via 172.21.124.73, 7w0d

B    192.168.200.0/24 [20/0] via 172.21.124.73, 7w0d

     192.168.201.0/24 is variably subnetted, 3 subnets, 2 masks

B       192.168.201.176/28 [20/0] via 172.21.124.73, 7w0d

B       192.168.201.128/26 [20/0] via 172.21.124.73, 7w0d

B       192.168.201.192/26 [20/0] via 172.21.124.73, 7w0d

S    192.168.99.0/24 [1/0] via 192.168.40.254, GigabitEthernet0/0

     10.0.0.0/8 is variably subnetted, 29 subnets, 4 masks

S       10.3.11.0/24 [1/0] via 192.168.40.253, GigabitEthernet0/0

S       10.1.8.0/24 [1/0] via 192.168.40.254, GigabitEthernet0/0

B       10.3.12.0/24 [20/0] via 172.21.124.73, 1w5d

S       10.0.1.14/32 [1/0] via 192.168.40.254, GigabitEthernet0/0

B       10.3.1.0/24 [20/0] via 172.21.124.73, 1w5d

S       10.0.1.3/32 [1/0] via 192.168.40.254, GigabitEthernet0/0

S       10.250.250.0/28 [1/0] via 192.168.40.254, GigabitEthernet0/0

S       10.200.200.0/28 [1/0] via 192.168.40.254, GigabitEthernet0/0

S       10.2.2.0/24 [1/0] via 192.168.40.254, GigabitEthernet0/0

S       10.1.0.0/16 [1/0] via 192.168.40.254, GigabitEthernet0/0

B       10.0.1.0/24 [20/0] via 172.21.124.73, 7w0d

S       10.1.6.0/24 [1/0] via 192.168.40.254, GigabitEthernet0/0

S       10.27.0.0/16 [1/0] via 192.168.40.254, GigabitEthernet0/0

S       10.30.0.0/16 [1/0] via 192.168.40.254, GigabitEthernet0/0

B       10.82.20.85/32 [20/0] via 172.21.124.73, 2w2d

B       10.16.0.0/16 [20/0] via 172.21.124.73, 7w0d

S       10.2.7.21/32 [1/0] via 192.168.40.254, GigabitEthernet0/0

B       10.20.1.0/24 [20/0] via 172.21.124.73, 7w0d

S       10.0.1.33/32 [1/0] via 192.168.40.254, GigabitEthernet0/0

C       10.3.11.50/32 is directly connected, Loopback50

S       10.82.20.0/24 [1/0] via 172.21.124.73

S       10.82.21.0/24 [1/0] via 172.21.124.73

S       10.82.22.0/24 [1/0] via 172.21.124.73

S       10.82.23.0/24 [1/0] via 172.21.124.73

S       10.0.7.85/32 [1/0] via 192.168.40.254, GigabitEthernet0/0

S       10.86.0.0/24 [1/0] via 192.168.40.254, GigabitEthernet0/0

B       10.145.17.1/32 [20/0] via 172.21.124.73, 7w0d

S       10.207.0.0/16 [1/0] via 192.168.40.254, GigabitEthernet0/0

B       10.216.2.0/24 [20/0] via 172.21.124.73, 7w0d

     166.12.0.0/32 is subnetted, 1 subnets

S       166.12.236.29 [1/0] via 192.168.40.254, GigabitEthernet0/0

     166.14.0.0/24 is subnetted, 1 subnets

S       166.14.192.0 [1/0] via 192.168.40.254, GigabitEthernet0/0

     193.132.153.0/32 is subnetted, 1 subnets

B       193.132.153.250 [20/0] via 172.21.124.73, 7w0d

     193.132.170.0/32 is subnetted, 2 subnets

B       193.132.170.98 [20/0] via 172.21.124.73, 7w0d

B       193.132.170.113 [20/0] via 172.21.124.73, 7w0d

     206.60.135.0/32 is subnetted, 1 subnets

S       206.60.135.39 [1/0] via 192.168.40.254, GigabitEthernet0/0

     192.168.1.0/32 is subnetted, 1 subnets

B       192.168.1.250 [20/0] via 172.21.124.73, 7w0d

     199.53.159.0/27 is subnetted, 1 subnets

S       199.53.159.32 [1/0] via 192.168.40.254, GigabitEthernet0/0

     192.168.168.0/27 is subnetted, 1 subnets

S       192.168.168.32 [1/0] via 192.168.40.254, GigabitEthernet0/0

     192.168.222.0/32 is subnetted, 1 subnets

B       192.168.222.29 [20/0] via 172.21.124.73, 7w0d

B*   0.0.0.0/0 [20/0] via 172.21.124.73, 7w0d

4/ If route is there for task-2 then check route in test router at site-B

See above

5/ if route is there for task-3 then check route in test router at site-A.

see above.

Also the diagram is useful. All the eouter configs and show IPs are in th attachemnts!

Hope you can help.

many Thanks

Mahesh Gohil Fri, 05/25/2012 - 02:31

Hi,

If issue is still not resolved can you provide output of sh ip route from both end test router.

Regards # mahesh

kamran.khan@3i-... Fri, 05/25/2012 - 06:18

Hi Mahesh,

Please see sh ip route & show ip arp fro  both test routers. Note 10.3.11.0/24 is the VoIP network in SiteB , 10.3.12.0/24 is VoIP network in Site A.

Both 10.3.11.0/24 and 10.3.12.0/24 can communication via  VLAN  fa0/0.20.

But I try to ping 10.3.11.1/24 from 10.16.0.0/24 laptop from site A I can not

Also If I try to ping 10.3.12.1 /24 from 10.207.0.0/24 laptop from site B I can not.

Configs for test site routers , ISP C700 and network diagram is attached

many Thanks

Test Router A#sh ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route

Gateway of last resort is 10.16.99.254 to network 0.0.0.0

S    192.168.40.0/24 [1/0] via 192.168.201.249
     192.168.201.0/26 is subnetted, 1 subnets
C       192.168.201.192 is directly connected, FastEthernet0/1
     10.0.0.0/8 is variably subnetted, 4 subnets, 2 masks
S       10.3.11.0/24 [1/0] via 192.168.201.249
C       10.3.12.0/24 is directly connected, FastEthernet0/0.20
S       10.3.1.0/24 [1/0] via 10.16.99.254
C       10.16.0.0/16 is directly connected, FastEthernet0/0.10
S*   0.0.0.0/0 [1/0] via 10.16.99.254
Test router A#
Test Router A#show ip arp
Protocol  Address          Age (min)  Hardware Addr   Type   Interface
Internet  10.3.12.5              45   0023.7de9.683a  ARPA   FastEthernet0/0.20
Internet  10.16.10.19             0   0050.56b4.65d4  ARPA   FastEthernet0/0.10
Internet  10.3.12.1               0   0800.0f47.1842  ARPA   FastEthernet0/0.20
Internet  10.16.10.4             28   0800.0322.551d  ARPA   FastEthernet0/0.10
Internet  10.16.10.10             0   0014.221b.1f3b  ARPA   FastEthernet0/0.10
Internet  10.16.10.12             0   0050.56b4.0928  ARPA   FastEthernet0/0.10
Internet  10.16.10.14             0   000f.1f04.6cc3  ARPA   FastEthernet0/0.10
Internet  10.16.10.34             0   0013.7258.0584  ARPA   FastEthernet0/0.10
Internet  10.16.200.144           3   0012.3f07.fb1f  ARPA   FastEthernet0/0.10
Internet  192.168.201.249        33   0014.a846.fd08  ARPA   FastEthernet0/1
Internet  192.168.201.253         -   0012.7fbe.8e01  ARPA   FastEthernet0/1
Internet  10.16.21.101            0   0018.8b2f.729d  ARPA   FastEthernet0/0.10
Internet  10.16.200.160          12   0018.8bc0.8835  ARPA   FastEthernet0/0.10
Internet  10.16.11.100           12   000c.298a.f0ce  ARPA   FastEthernet0/0.10
Internet  10.16.10.111            0   0024.8126.8185  ARPA   FastEthernet0/0.10
Internet  10.16.10.145            -   0012.7fbe.8e00  ARPA   FastEthernet0/0.10
Internet  10.16.99.253            0   0026.88f5.a880  ARPA   FastEthernet0/0.10
Internet  10.16.99.254          154   0026.88f5.a880  ARPA   FastEthernet0/0.10
Internet  10.16.200.88            6   0013.726b.4c4b  ARPA   FastEthernet0/0.10
Internet  10.16.200.71            6   001c.230e.4e80  ARPA   FastEthernet0/0.10
Internet  10.16.200.117           0   0018.8bbe.ee91  ARPA   FastEthernet0/0.10
Internet  10.16.200.96            0   0800.7bb1.f090  ARPA   FastEthernet0/0.10
Internet  10.16.200.97            0   001c.2306.8269  ARPA   FastEthernet0/0.10
Internet  10.16.200.109           6   0018.8bc0.88b4  ARPA   FastEthernet0/0.10
Internet  10.16.99.198            0   001b.783b.13b0  ARPA   FastEthernet0/0.10
Internet  10.16.200.2             4   001c.230f.90b7  ARPA   FastEthernet0/0.10
Internet  10.16.200.3           127   000f.1ffe.70d2  ARPA   FastEthernet0/0.10
Internet  10.16.200.1             2   0021.706b.271a  ARPA   FastEthernet0/0.10
Internet  10.16.200.50            3   0021.7092.b4c3  ARPA   FastEthernet0/0.10
Internet  10.3.12.230             -   0012.7fbe.8e00  ARPA   FastEthernet0/0.20
Internet  10.16.10.229            5   0050.56b4.33fa  ARPA   FastEthernet0/0.10
Internet  10.3.12.253             0   000a.4135.7bc0  ARPA   FastEthernet0/0.20
Internet  10.3.12.254            81   0014.69b0.c0a1  ARPA   FastEthernet0/0.20
Test Router A#

Test Router Site B#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route

Gateway of last resort is 10.207.1.254 to network 0.0.0.0

     192.168.40.0/26 is subnetted, 1 subnets
C       192.168.40.192 is directly connected, FastEthernet0/1
S    192.168.201.0/24 [1/0] via 192.168.40.249
     10.0.0.0/8 is variably subnetted, 4 subnets, 2 masks
C       10.3.11.0/24 is directly connected, FastEthernet0/0.20
S       10.3.12.0/24 [1/0] via 192.168.40.249
S       10.3.1.0/24 [1/0] via 192.168.40.249
C       10.207.0.0/16 is directly connected, FastEthernet0/0.10
S*   0.0.0.0/0 [1/0] via 10.207.1.254
Test Router Site B#


Test Router Site B#show ip arp
Protocol  Address          Age (min)  Hardware Addr   Type   Interface
Internet  10.3.11.2              18   0800.0f49.4fbc  ARPA   FastEthernet0/0.20
Internet  10.3.11.3               7   0017.a4a9.016a  ARPA   FastEthernet0/0.20
Internet  10.3.11.1               4   0800.0f47.1836  ARPA   FastEthernet0/0.20
Internet  10.3.11.4              36   0800.0f47.37b9  ARPA   FastEthernet0/0.20
Internet  10.207.70.137           0   0050.56a7.002a  ARPA   FastEthernet0/0.10
Internet  10.207.70.142           2   0012.3ffa.3f32  ARPA   FastEthernet0/0.10
Internet  10.207.70.141           9   001c.2347.3cd3  ARPA   FastEthernet0/0.10
Internet  10.207.70.146           9   0021.70d6.81c2  ARPA   FastEthernet0/0.10
Internet  10.207.70.158           0   0050.56a7.0024  ARPA   FastEthernet0/0.10
Internet  10.207.70.157           2   0050.56a7.0014  ARPA   FastEthernet0/0.10
Internet  10.207.70.156           2   0050.56a7.0002  ARPA   FastEthernet0/0.10
Internet  10.207.70.169           0   0021.7092.b4b4  ARPA   FastEthernet0/0.10
Internet  10.207.70.175           2   0021.70dc.da04  ARPA   FastEthernet0/0.10
Internet  10.207.10.227           0   0014.221b.1fb0  ARPA   FastEthernet0/0.10
Internet  10.207.70.182           9   0018.8bcf.71dc  ARPA   FastEthernet0/0.10
Internet  10.3.11.55              8   0800.0f13.74b8  ARPA   FastEthernet0/0.20
Internet  10.207.1.253            0   001d.b57b.f280  ARPA   FastEthernet0/0.10
Internet  10.207.1.254           35   001d.b57b.f280  ARPA   FastEthernet0/0.10
Internet  10.3.11.66             11   0800.0f19.90cf  ARPA   FastEthernet0/0.20
Internet  10.207.70.197           3   000b.db48.b110  ARPA   FastEthernet0/0.10
Internet  10.207.70.202           0   0050.56a7.0015  ARPA   FastEthernet0/0.10
Internet  10.207.70.205           0   0050.56a7.0018  ARPA   FastEthernet0/0.10
Internet  10.207.70.208           0   0050.56a7.001b  ARPA   FastEthernet0/0.10
Internet  10.207.70.230          10   0050.56a7.0028  ARPA   FastEthernet0/0.10
Internet  10.207.40.145           -   0012.7fbe.8a80  ARPA   FastEthernet0/0.10
Internet  10.207.40.100           0   0023.04c4.c4ea  ARPA   FastEthernet0/0.10
Internet  10.207.80.31           11   0000.74d9.94a9  ARPA   FastEthernet0/0.10
Internet  10.207.70.22            3   0050.56a7.0006  ARPA   FastEthernet0/0.10
Internet  10.207.100.1           12   0050.563f.0021  ARPA   FastEthernet0/0.10
Internet  10.207.1.100            0   00e0.db0c.43eb  ARPA   FastEthernet0/0.10
Internet  10.207.10.105           0   001e.c9fe.1382  ARPA   FastEthernet0/0.10
Internet  10.207.10.103           0   00c0.9f22.6588  ARPA   FastEthernet0/0.10
Internet  10.207.70.51            5   0015.c554.e6ab  ARPA   FastEthernet0/0.10
Internet  10.207.70.50            2   0021.9b39.8103  ARPA   FastEthernet0/0.10
Internet  10.207.80.32           10   78ac.c08d.7acd  ARPA   FastEthernet0/0.10
Internet  10.207.70.59            0   0050.56a7.0001  ARPA   FastEthernet0/0.10
Internet  192.168.40.249        214   b414.892e.5890  ARPA   FastEthernet0/1
Internet  192.168.40.253          -   0012.7fbe.8a81  ARPA   FastEthernet0/1
Internet  10.207.10.15            3   0050.56a7.0025  ARPA   FastEthernet0/0.10
Internet  10.207.10.5             0   0014.2212.68be  ARPA   FastEthernet0/0.10
Internet  10.207.10.2             0   0030.4827.f84f  ARPA   FastEthernet0/0.10
Internet  10.207.1.10             0   0013.726f.a600  ARPA   FastEthernet0/0.10
Internet  10.207.10.1             0   0030.482c.0ed9  ARPA   FastEthernet0/0.10
Internet  10.207.70.77            2   0021.9b88.327b  ARPA   FastEthernet0/0.10
Internet  10.207.70.76            0   0050.56a7.002c  ARPA   FastEthernet0/0.10
Internet  10.207.70.83            2   0021.9b43.ca84  ARPA   FastEthernet0/0.10
Internet  10.207.30.10            0   0050.56a7.000f  ARPA   FastEthernet0/0.10
Internet  10.207.70.85            1   0050.56a7.0029  ARPA   FastEthernet0/0.10
Internet  10.207.20.7             2   000d.56da.14a9  ARPA   FastEthernet0/0.10
Internet  10.207.70.90            1   001c.234a.853f  ARPA   FastEthernet0/0.10
Internet  10.207.50.44            4   000b.db48.b144  ARPA   FastEthernet0/0.10
Internet  10.207.70.95            1   0050.56a7.0027  ARPA   FastEthernet0/0.10
Internet  10.207.70.94            1   0050.56a7.0016  ARPA   FastEthernet0/0.10
Internet  10.207.70.92            0   0050.56a7.001d  ARPA   FastEthernet0/0.10
Internet  10.207.70.98            1   0050.56a7.001a  ARPA   FastEthernet0/0.10
Internet  10.207.70.97            2   0050.56a7.0019  ARPA   FastEthernet0/0.10
Internet  10.207.70.96            0   0050.56a7.0012  ARPA   FastEthernet0/0.10
Internet  10.3.11.230             -   0012.7fbe.8a80  ARPA   FastEthernet0/0.20
Internet  10.207.70.102           0   0050.56a7.001e  ARPA   FastEthernet0/0.10
Internet  10.207.70.100           0   0050.56a7.001c  ARPA   FastEthernet0/0.10
Internet  10.207.70.105           0   0050.56a7.002e  ARPA   FastEthernet0/0.10
Internet  10.207.70.109           6   0800.7bb1.3fb3  ARPA   FastEthernet0/0.10
Internet  10.207.70.115           0   001c.232b.ebd9  ARPA   FastEthernet0/0.10
Internet  10.207.70.123           3   0050.56a7.002f  ARPA   FastEthernet0/0.10
Internet  10.207.70.121           0   0050.56a7.3d62  ARPA   FastEthernet0/0.10
Internet  10.207.70.120          43   0013.726b.83a9  ARPA   FastEthernet0/0.10
Internet  10.3.11.249            37   081f.f3ff.a141  ARPA   FastEthernet0/0.20
Internet  10.3.11.254           131   0023.04c4.c4ea  ARPA   FastEthernet0/0.20
Internet  10.3.11.252            37   000a.4135.9200  ARPA   FastEthernet0/0.20
Internet  10.207.70.124           0   0050.56a7.3d63  ARPA   FastEthernet0/0.10
Test Router Site B#

kishore.chennupati Fri, 05/25/2012 - 06:00

hi ,

can you please post "sh ip arp" " sh ip route" and also the config of test router on site-B

whats  10.3.11.1?

Cheers, Kishore

kamran.khan@3i-... Fri, 05/25/2012 - 06:19

Hi Kishore,

Please see sh ip route & show ip arp fro both test routers. Note 10.3.11.0/24 is the VoIP network in SiteB , 10.3.12.0/24 is VoIP network in Site A.

Both 10.3.11.0/24 and 10.3.12.0/24 can communication via VLAN fa0/0.20.

But I try to ping 10.3.11.1/24 from 10.16.0.0/24 laptop from site A I can not

Also If I try to ping 10.3.12.1 /24 from 10.207.0.0/24 laptop from site B I can not.

Configs for test site routers , ISP C700 and network diagram is attached

many Thanks

Test Router A#sh ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route

Gateway of last resort is 10.16.99.254 to network 0.0.0.0

S 192.168.40.0/24 [1/0] via 192.168.201.249
192.168.201.0/26 is subnetted, 1 subnets
C 192.168.201.192 is directly connected, FastEthernet0/1
10.0.0.0/8 is variably subnetted, 4 subnets, 2 masks
S 10.3.11.0/24 [1/0] via 192.168.201.249
C 10.3.12.0/24 is directly connected, FastEthernet0/0.20
S 10.3.1.0/24 [1/0] via 10.16.99.254
C 10.16.0.0/16 is directly connected, FastEthernet0/0.10
S* 0.0.0.0/0 [1/0] via 10.16.99.254
Test router A#
Test Router A#show ip arp
Protocol Address Age (min) Hardware Addr Type Interface
Internet 10.3.12.5 45 0023.7de9.683a ARPA FastEthernet0/0.20
Internet 10.16.10.19 0 0050.56b4.65d4 ARPA FastEthernet0/0.10
Internet 10.3.12.1 0 0800.0f47.1842 ARPA FastEthernet0/0.20
Internet 10.16.10.4 28 0800.0322.551d ARPA FastEthernet0/0.10
Internet 10.16.10.10 0 0014.221b.1f3b ARPA FastEthernet0/0.10
Internet 10.16.10.12 0 0050.56b4.0928 ARPA FastEthernet0/0.10
Internet 10.16.10.14 0 000f.1f04.6cc3 ARPA FastEthernet0/0.10
Internet 10.16.10.34 0 0013.7258.0584 ARPA FastEthernet0/0.10
Internet 10.16.200.144 3 0012.3f07.fb1f ARPA FastEthernet0/0.10
Internet 192.168.201.249 33 0014.a846.fd08 ARPA FastEthernet0/1
Internet 192.168.201.253 - 0012.7fbe.8e01 ARPA FastEthernet0/1
Internet 10.16.21.101 0 0018.8b2f.729d ARPA FastEthernet0/0.10
Internet 10.16.200.160 12 0018.8bc0.8835 ARPA FastEthernet0/0.10
Internet 10.16.11.100 12 000c.298a.f0ce ARPA FastEthernet0/0.10
Internet 10.16.10.111 0 0024.8126.8185 ARPA FastEthernet0/0.10
Internet 10.16.10.145 - 0012.7fbe.8e00 ARPA FastEthernet0/0.10
Internet 10.16.99.253 0 0026.88f5.a880 ARPA FastEthernet0/0.10
Internet 10.16.99.254 154 0026.88f5.a880 ARPA FastEthernet0/0.10
Internet 10.16.200.88 6 0013.726b.4c4b ARPA FastEthernet0/0.10
Internet 10.16.200.71 6 001c.230e.4e80 ARPA FastEthernet0/0.10
Internet 10.16.200.117 0 0018.8bbe.ee91 ARPA FastEthernet0/0.10
Internet 10.16.200.96 0 0800.7bb1.f090 ARPA FastEthernet0/0.10
Internet 10.16.200.97 0 001c.2306.8269 ARPA FastEthernet0/0.10
Internet 10.16.200.109 6 0018.8bc0.88b4 ARPA FastEthernet0/0.10
Internet 10.16.99.198 0 001b.783b.13b0 ARPA FastEthernet0/0.10
Internet 10.16.200.2 4 001c.230f.90b7 ARPA FastEthernet0/0.10
Internet 10.16.200.3 127 000f.1ffe.70d2 ARPA FastEthernet0/0.10
Internet 10.16.200.1 2 0021.706b.271a ARPA FastEthernet0/0.10
Internet 10.16.200.50 3 0021.7092.b4c3 ARPA FastEthernet0/0.10
Internet 10.3.12.230 - 0012.7fbe.8e00 ARPA FastEthernet0/0.20
Internet 10.16.10.229 5 0050.56b4.33fa ARPA FastEthernet0/0.10
Internet 10.3.12.253 0 000a.4135.7bc0 ARPA FastEthernet0/0.20
Internet 10.3.12.254 81 0014.69b0.c0a1 ARPA FastEthernet0/0.20
Test Router A#

Test Router Site B#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route

Gateway of last resort is 10.207.1.254 to network 0.0.0.0

192.168.40.0/26 is subnetted, 1 subnets
C 192.168.40.192 is directly connected, FastEthernet0/1
S 192.168.201.0/24 [1/0] via 192.168.40.249
10.0.0.0/8 is variably subnetted, 4 subnets, 2 masks
C 10.3.11.0/24 is directly connected, FastEthernet0/0.20
S 10.3.12.0/24 [1/0] via 192.168.40.249
S 10.3.1.0/24 [1/0] via 192.168.40.249
C 10.207.0.0/16 is directly connected, FastEthernet0/0.10
S* 0.0.0.0/0 [1/0] via 10.207.1.254
Test Router Site B#


Test Router Site B#show ip arp
Protocol Address Age (min) Hardware Addr Type Interface
Internet 10.3.11.2 18 0800.0f49.4fbc ARPA FastEthernet0/0.20
Internet 10.3.11.3 7 0017.a4a9.016a ARPA FastEthernet0/0.20
Internet 10.3.11.1 4 0800.0f47.1836 ARPA FastEthernet0/0.20
Internet 10.3.11.4 36 0800.0f47.37b9 ARPA FastEthernet0/0.20
Internet 10.207.70.137 0 0050.56a7.002a ARPA FastEthernet0/0.10
Internet 10.207.70.142 2 0012.3ffa.3f32 ARPA FastEthernet0/0.10
Internet 10.207.70.141 9 001c.2347.3cd3 ARPA FastEthernet0/0.10
Internet 10.207.70.146 9 0021.70d6.81c2 ARPA FastEthernet0/0.10
Internet 10.207.70.158 0 0050.56a7.0024 ARPA FastEthernet0/0.10
Internet 10.207.70.157 2 0050.56a7.0014 ARPA FastEthernet0/0.10
Internet 10.207.70.156 2 0050.56a7.0002 ARPA FastEthernet0/0.10
Internet 10.207.70.169 0 0021.7092.b4b4 ARPA FastEthernet0/0.10
Internet 10.207.70.175 2 0021.70dc.da04 ARPA FastEthernet0/0.10
Internet 10.207.10.227 0 0014.221b.1fb0 ARPA FastEthernet0/0.10
Internet 10.207.70.182 9 0018.8bcf.71dc ARPA FastEthernet0/0.10
Internet 10.3.11.55 8 0800.0f13.74b8 ARPA FastEthernet0/0.20
Internet 10.207.1.253 0 001d.b57b.f280 ARPA FastEthernet0/0.10
Internet 10.207.1.254 35 001d.b57b.f280 ARPA FastEthernet0/0.10
Internet 10.3.11.66 11 0800.0f19.90cf ARPA FastEthernet0/0.20
Internet 10.207.70.197 3 000b.db48.b110 ARPA FastEthernet0/0.10
Internet 10.207.70.202 0 0050.56a7.0015 ARPA FastEthernet0/0.10
Internet 10.207.70.205 0 0050.56a7.0018 ARPA FastEthernet0/0.10
Internet 10.207.70.208 0 0050.56a7.001b ARPA FastEthernet0/0.10
Internet 10.207.70.230 10 0050.56a7.0028 ARPA FastEthernet0/0.10
Internet 10.207.40.145 - 0012.7fbe.8a80 ARPA FastEthernet0/0.10
Internet 10.207.40.100 0 0023.04c4.c4ea ARPA FastEthernet0/0.10
Internet 10.207.80.31 11 0000.74d9.94a9 ARPA FastEthernet0/0.10
Internet 10.207.70.22 3 0050.56a7.0006 ARPA FastEthernet0/0.10
Internet 10.207.100.1 12 0050.563f.0021 ARPA FastEthernet0/0.10
Internet 10.207.1.100 0 00e0.db0c.43eb ARPA FastEthernet0/0.10
Internet 10.207.10.105 0 001e.c9fe.1382 ARPA FastEthernet0/0.10
Internet 10.207.10.103 0 00c0.9f22.6588 ARPA FastEthernet0/0.10
Internet 10.207.70.51 5 0015.c554.e6ab ARPA FastEthernet0/0.10
Internet 10.207.70.50 2 0021.9b39.8103 ARPA FastEthernet0/0.10
Internet 10.207.80.32 10 78ac.c08d.7acd ARPA FastEthernet0/0.10
Internet 10.207.70.59 0 0050.56a7.0001 ARPA FastEthernet0/0.10
Internet 192.168.40.249 214 b414.892e.5890 ARPA FastEthernet0/1
Internet 192.168.40.253 - 0012.7fbe.8a81 ARPA FastEthernet0/1
Internet 10.207.10.15 3 0050.56a7.0025 ARPA FastEthernet0/0.10
Internet 10.207.10.5 0 0014.2212.68be ARPA FastEthernet0/0.10
Internet 10.207.10.2 0 0030.4827.f84f ARPA FastEthernet0/0.10
Internet 10.207.1.10 0 0013.726f.a600 ARPA FastEthernet0/0.10
Internet 10.207.10.1 0 0030.482c.0ed9 ARPA FastEthernet0/0.10
Internet 10.207.70.77 2 0021.9b88.327b ARPA FastEthernet0/0.10
Internet 10.207.70.76 0 0050.56a7.002c ARPA FastEthernet0/0.10
Internet 10.207.70.83 2 0021.9b43.ca84 ARPA FastEthernet0/0.10
Internet 10.207.30.10 0 0050.56a7.000f ARPA FastEthernet0/0.10
Internet 10.207.70.85 1 0050.56a7.0029 ARPA FastEthernet0/0.10
Internet 10.207.20.7 2 000d.56da.14a9 ARPA FastEthernet0/0.10
Internet 10.207.70.90 1 001c.234a.853f ARPA FastEthernet0/0.10
Internet 10.207.50.44 4 000b.db48.b144 ARPA FastEthernet0/0.10
Internet 10.207.70.95 1 0050.56a7.0027 ARPA FastEthernet0/0.10
Internet 10.207.70.94 1 0050.56a7.0016 ARPA FastEthernet0/0.10
Internet 10.207.70.92 0 0050.56a7.001d ARPA FastEthernet0/0.10
Internet 10.207.70.98 1 0050.56a7.001a ARPA FastEthernet0/0.10
Internet 10.207.70.97 2 0050.56a7.0019 ARPA FastEthernet0/0.10
Internet 10.207.70.96 0 0050.56a7.0012 ARPA FastEthernet0/0.10
Internet 10.3.11.230 - 0012.7fbe.8a80 ARPA FastEthernet0/0.20
Internet 10.207.70.102 0 0050.56a7.001e ARPA FastEthernet0/0.10
Internet 10.207.70.100 0 0050.56a7.001c ARPA FastEthernet0/0.10
Internet 10.207.70.105 0 0050.56a7.002e ARPA FastEthernet0/0.10
Internet 10.207.70.109 6 0800.7bb1.3fb3 ARPA FastEthernet0/0.10
Internet 10.207.70.115 0 001c.232b.ebd9 ARPA FastEthernet0/0.10
Internet 10.207.70.123 3 0050.56a7.002f ARPA FastEthernet0/0.10
Internet 10.207.70.121 0 0050.56a7.3d62 ARPA FastEthernet0/0.10
Internet 10.207.70.120 43 0013.726b.83a9 ARPA FastEthernet0/0.10
Internet 10.3.11.249 37 081f.f3ff.a141 ARPA FastEthernet0/0.20
Internet 10.3.11.254 131 0023.04c4.c4ea ARPA FastEthernet0/0.20
Internet 10.3.11.252 37 000a.4135.9200 ARPA FastEthernet0/0.20
Internet 10.207.70.124 0 0050.56a7.3d63 ARPA FastEthernet0/0.10
Test Router Site B#

Mahesh Gohil Sat, 05/26/2012 - 01:31

Hi Kamran,

Not sure but i was expecting route of site-B (10.207.0.0/16) in output of 'sh ip route' @ test router-siteA

same as reverse also for ip (10.16.0.0/16) in output of ''sh ip route" @test router site-B if these ip's are not treated under default. I see you have default route pointing to some ip but i didnot find that ip belong to which device.

Can you put above specific static route in respective site (static route of 10.207.0.0/16 at site-A test router pointing towards 7200 same way static route of 10.16.0.0/16 at site-B test router pointing towards 7200)

Regards # Mahesh

kamran.khan@3i-... Mon, 05/28/2012 - 08:07

Hi Mahesh & Kishore,

Many Thanks for helping your continued support; it is encouraging me to look at this further.

Now, I added the routes as suggested and now we have the following on the test routers:

Test Router Site A

ip route 0.0.0.0 0.0.0.0 10.16.99.254

ip route 10.3.1.0 255.255.255.0 10.16.99.254

ip route 10.3.11.0 255.255.255.0 192.168.201.249

ip route 10.207.0.0 255.255.0.0 192.168.201.249

ip route 192.168.40.0 255.255.255.0 192.168.201.249

Test Router Site B

ip route 0.0.0.0 0.0.0.0 10.207.1.254

ip route 10.3.1.0 255.255.255.0 192.168.40.249

ip route 10.3.12.0 255.255.255.0 192.168.40.249

ip route 10.16.0.0 255.255.0.0 192.168.40.249

ip route 192.168.201.0 255.255.255.0 192.168.40.249

But still no success.

From site A, with laptop 10.16.0.0/16 (Default gateway Test router A 10.16.10.145) I cant ping or reach any of the 10.3.11.0/24 on site B

And From site B, with laptop 10.207.0.0/16 (Default gateway Test router A 10.207.40.145) I cant ping or reach any of the 10.3.12.0/24 or 10.3.1.1/24 on site A

One key observation is that on the ISP MPLS C7200 all of our Data is pointed towards our firewalls as default so the endpoint termination is different.

For VoIP subnet

What I’m saying is 10.3.12.0/24 & 10.3.1.0/24 terminate at 192.168.201.253 and 10.3.11.0/24 terminates at 192.168.40.253. No other subnets have the 192.168.201.253 or 192.168.40.253 termination.

For Data Network

Whereas on the same ISP MPLS C7200 all of our data ie. 10.16.0.0/16 and 10.207.0.0/16 terminate at 192.168.201.254 & 192.168.40.254 .

So I think the problem may be that over the test routers the 10.16.0.0/24 and 10.207.0.0/24 networks get take another route!

What do you think?!

See my initial diagram. I’ll do another one for the routers and put up too.

Many Thanks for all your help and guidance; I will learn how to leave some feedback.

Kam

kishore.chennupati Sat, 05/26/2012 - 03:53

Hi Kamran,

I have checked your configs and the reason why you see such behaviour is because of the following. Let me address your problems one by one.

1. The problem is from the router and respective subinterfaces we can get to the other sites destination without any issue, but if for example a user is at site A with Ip address 10.16.11.12/16 they cant ping the VOIP subnet at site B 10.3.11.0/24. But If a ping is issue from the Site A test router then the 10.3.11.0/24 subnet is reachable but only on the 10.3.12.0/24 configured subinterface.

A. Now, on the test router at Site-B, you dont have a static route for 10.16.0.0/16 pointing towards 192.168.40.249. Once you put that your issue should be resolved.

2.  Traceroute


Site A Router#traceroute 10.3.11.230

Type escape sequence to abort.
Tracing the route to 10.3.11.230

  1 192.168.201.249 4 msec 4 msec 0 msec
  2 172.20.79.253 0 msec 0 msec 4 msec
  3 172.21.124.74 8 msec 8 msec 8 msec
  4 192.168.40.253 8 msec *  8 msec

A. when you traceroute, you are using the ip address of the physical interface which is 192.168.201.253/26 and on the test router you do have a static route back to it via 192.168.40.249 that is why you are able to get from Site A test router to Site B test router.

ip route 192.168.201.0 255.255.255.0 192.168.40.249

Do you see what I am saying here?

3. Also If I try to ping 10.3.12.1 /24 from 10.207.0.0/24 laptop from site B I can not.

A. On Site-A router you need to have a static route to 10.207.0.0/24 with next hop 192.168.201.249

Please add that as well.

Let us knw if this helps and fixes your issue.

HTH

Kishore

pls rate helpful posts

kamran.khan@3i-... Mon, 05/28/2012 - 08:08

Hi Kishore & Mahesh,

Many Thanks for helping your continued support; it is encouraging me to look at this further.

Now, I added the routes as suggested and now we have the following on the test routers:

Test Router Site A

ip route 0.0.0.0 0.0.0.0 10.16.99.254

ip route 10.3.1.0 255.255.255.0 10.16.99.254

ip route 10.3.11.0 255.255.255.0 192.168.201.249

ip route 10.207.0.0 255.255.0.0 192.168.201.249

ip route 192.168.40.0 255.255.255.0 192.168.201.249

Test Router Site B

ip route 0.0.0.0 0.0.0.0 10.207.1.254

ip route 10.3.1.0 255.255.255.0 192.168.40.249

ip route 10.3.12.0 255.255.255.0 192.168.40.249

ip route 10.16.0.0 255.255.0.0 192.168.40.249

ip route 192.168.201.0 255.255.255.0 192.168.40.249

But still no success.

From site A, with laptop 10.16.0.0/16 (Default gateway Test router A 10.16.10.145) I cant ping or reach any of the 10.3.11.0/24 on site B

And From site B, with laptop 10.207.0.0/16 (Default gateway Test router A 10.207.40.145) I cant ping or reach any of the 10.3.12.0/24 or 10.3.1.1/24 on site A

One key observation is that on the ISP MPLS C7200 all of our Data is pointed towards our firewalls as default so the endpoint termination is different.

For VoIP subnet

What I’m saying is 10.3.12.0/24 & 10.3.1.0/24 terminate at 192.168.201.253 and 10.3.11.0/24 terminates at 192.168.40.253. No other subnets have the 192.168.201.253 or 192.168.40.253 termination.

For Data Network

Whereas on the same ISP MPLS C7200 all of our data ie. 10.16.0.0/16 and 10.207.0.0/16 terminate at 192.168.201.254 & 192.168.40.254 .

So I think the problem may be that over the test routers the 10.16.0.0/24 and 10.207.0.0/24 networks get take another route!

What do you think?!

See my initial diagram. I’ll do another one for the routers and put up too.

Many Thanks for all your help and guidance; I will learn how to leave some feedback.

P.S Kishore I tried t chage the feedback stars but couldnt, didnt mean to give you one. All your stuff has been useful so far. many thanks

Kam

kishore.chennupati Tue, 05/29/2012 - 04:40

Hi Kam,

dont worry about the stars too much. If we can fix your issue that itself is 10 stars.

Now, when you do a traceroute from your laptop to 10.3.11.1 where does it stop. Also you can do a traceroute from the test router as well on site A using the FastEthernet0/0.10 as the source. so the command would be "traceroute 10.3.11.1 source FastEthernet0/0.10".  see where does the trace end. If the traceroute ends at 192.168.40.254 or stops after  40.249 and shows stars then you are correct that the MPLS router is doing PBR(policy based routing) meaning directing the traffic to different next-hops.

can you please provide the output of the traceroute result please?

HTH

Kishore

kamran.khan@3i-... Tue, 05/29/2012 - 09:50

Hi Kishore,

please see the results requested:

From laptop (dg 10.16.10.145) to 10.3.11.230 (subinterface on Test rouber site B)

^C
C:\Documents and Settings\kam.khan>tracert 10.3.11.230

Tracing route to 10.3.11.230 over a maximum of 30 hops

  1    21 ms     1 ms     1 ms  10.16.10.145
  2     *        *        *     Request timed out.
  3     *        *        *     Request timed out.
  4     *        *        *     Request timed out.
  5     *        *        *     Request timed out.
  6     *        *        *     Request timed out.
  7     *     ^C

From laptop (dg 10.16.10.145) to 10.3.11.1 (VoIP serverr on site B)

:\Documents and Settings\kam.khan>tracert 10.3.11.1

racing route to 10.3.11.1 over a maximum of 30 hops

1    23 ms     1 ms     1 ms  10.16.10.145
2     *        *        *     Request timed out.
3     *        *        *     Request timed out.
4     *        *        *     Request timed out.
5     *        *        *     Request timed out.

From Test Router A (Subinterface10.16.10.145, 10.3.12.230) to 10.3.11.1 (VoIP server site B)

Test router SiteA#traceroute
Protocol [ip]:
Target IP address: 10.3.11.1
Source address: 10.3.12.230
Numeric display [n]:
Timeout in seconds [3]:
Probe count [3]:
Minimum Time to Live [1]:
Maximum Time to Live [30]:
Port Number [33434]:
Loose, Strict, Record, Timestamp, Verbose[none]:
Type escape sequence to abort.
Tracing the route to 10.3.11.1

  1 192.168.201.249 4 msec 4 msec 0 msec
  2 172.20.79.253 0 msec 4 msec 4 msec
  3 172.21.124.74 8 msec 12 msec 8 msec
  4 192.168.40.253 12 msec 8 msec 8 msec
  5 10.3.11.1 8 msec 8 msec 12 msec
Test router SiteA#

From Test Router A (Subinterface10.16.10.145) to 10.3.11.1 (VoiP server site B)

Test routerSiteA#traceroute
Protocol [ip]:
Target IP address: 10.3.11.1
Source address: 10.16.10.145
Numeric display [n]:
Timeout in seconds [3]:
Probe count [3]:
Minimum Time to Live [1]:
Maximum Time to Live [30]:
Port Number [33434]:
Loose, Strict, Record, Timestamp, Verbose[none]:
Type escape sequence to abort.
Tracing the route to 10.3.11.1

  1  *  *  *
  2  *  *  *
  3  *  *  *
  4  *  *  *
Test routerSiteA#


So it seems pretty obvious that the source address of 10.16.0.0/24 is not being allowed across the 19.168.201.253/192.168.40.253 path.

Just to compare in our production network and our production router whihc Im trying to replace I get the following from my laptop when trying to get to 10.3.11.1:

C:\Documents and Settings\kam.khan>tracert 10.3.11.1

Tracing route to 10.3.11.1 over a maximum of 30 hops

  1    76 ms     1 ms     1 ms  10.16.10.236
  2     8 ms     7 ms     7 ms  10.0.3.193
  3     8 ms     8 ms     8 ms  10.3.11.1

Trace complete.

C:\Documents and Settings\kam.khan>

So all traffic hits this router and im assuming the 10.16.10.236 has access lists on it with PBR allowing it to route all 10.16.0.0./16 traffic for 10.3.11.0/24  down its MPLS (of whihc 10.3.193 is its first hop). I want 10.16.10.145 to do this! But the problem is 10.16.0.0/16 goes another route!

Arhh!

what do you think?!

may be I need to get the ISP for the MPLS to do some source filtering...

Much thanks agian

kam

Actions

Login or Register to take actions

Related Content

Discussions Leaderboard

Rank Username Points
1 15,007
2 8,155
3 7,745
4 7,088
5 6,742
Rank Username Points
140
80
78
69
40