3750 Routing issue

[jpullo]

Home office:

3750 switch - 10.0.0.1 / 255.0.0.0

default gateway for the 10.0.0.0 network

(2) Vlans, 30 for IP phones and 110 for workstations.

Pix 515E firewall - 10.0.0.10 / 255.0.0.0

Remote office:

Pix 506 firewall - 10.20.1.1 / 255.255.255.0

There is a vpn setup between the two Pix firewalls. I can ping from the home office 3750/Pix to the remote Pix 506 and vica versa.

I can ping from a host on the 10.20.1.0 network to the Pix 515/3750 switch, but not to any hosts on the 10.0.0.0 network. I also cannot ping from any host on the 10.0.0.0 network to the 10.20.1.0 network.

If I add a static route to a host on the 10.0.0.0 network pointing to either the Pix 515 or 3750 as the next hop for the 10.20.1.0 network, that host can then ping the Pix 506.

It seems like I'm missing something right in front of me.

The switch config is attached.

[smothuku]

Hi ,

Ip helper-address is configured under vlan30.i.e

interface Vlan30

ip address 10.0.0.1 255.0.0.0

ip helper-address 10.0.0.10

no ip route-cache

no ip mroute-cache

Do you have DHCP server in network.

Thanks,

satish

[jpullo]

Yes, 10.0.0.2 is the dhcp server on that net. I'm not sure why there is a helper address in the config. I just inherited this environment, so I'm still getting familiar with it.

The more I look at this, I have a feeling it has something to do with both locations using the 10.x.x.x range, even though they have different masks.

[smothuku]

Hi ,

Accroding to the following document ip helper-address should be DHCP server ip.

Check the below link.

http://www.cisco.com/en/US/customer/products/sw/iosswrel/ps1831/products_command_reference_chapter09186a00800ca693.html#wp1018606

One common application that requires helper addresses is Dynamic Host Configuration Protocol (DHCP), which is defined in RFC 1531. DHCP protocol information is carried inside of BOOTP packets. To enable BOOTP broadcast forwarding for a set of clients, configure a helper address on the router interface closest to the client. The helper address should specify the address of the DHCP server.

Hope it helps you.

Thanks,

satish

[jpullo]

I'm not having any issues with dhcp, but I did correct that entry to reflect the proper ip of the dhcp server.

This also did not have any affect on my issue.

[glen.grant]

I don't see any layer 2 vlans defined . If you do a "show vlan" do both vlans 30 and 110 show active with ports assigned to them ?

[mahmoodmkl]

Hi

In which vlan does u r PIX connected on 3750.

Thanks

Mahmood

[ace-cco]

Hi,

Your Homeoffice IP range 10.0.0.0/8 includes your remote network 10.x.y.0/25.

Your have a routing issue. change the homeoffice mask to /16 or /24

regards

Robert