Can't Ping From Router

What is the LAN/WAN addresses of the remote side? What does show ip route show on both routers. What is the exact source and destination of your pings & traceroutes (please provide both, and working and non- working) and the results for each.

On Dec 4, 3:35 pm, Trendkill wrote:

I was wrong in my first post. If I do a "ping external_IP source

Current configuration : 1478 bytes ! ! Last configuration change at 15:51:35 UTC Thu Nov 29 2007 ! version 12.2 service timestamps debug uptime service timestamps log uptime service password-encryption ! hostname EngSeal-RTR ! enable secret 5 ############## ! ip subnet-zero ! ! ip domain-name esp-seals.com ip name-server 192.168.10.2 ip name-server 192.168.10.3 ! ! ! ! interface FastEthernet0/0 ip address 221.21.21.100 255.255.255.0 no ip redirects duplex auto speed auto ! interface Serial0/0 description PtP connection to Plymouth ip address 192.168.0.1 255.255.255.252 no fair-queue ! interface FastEthernet0/1 no ip address no ip redirects shutdown duplex auto speed auto ! interface Serial0/1 description PtP connection to Lawrense ip address 192.168.0.5 255.255.255.252 ! interface Serial0/2 ip address 192.168.0.9 255.255.255.252 ! ip classless ip route 0.0.0.0 0.0.0.0 221.21.21.1 ip route 192.168.10.0 255.255.255.224 221.21.21.1 ip route 221.21.21.0 255.255.255.0 221.21.21.1 ip route 221.22.22.0 255.255.255.0 192.168.0.2 ip route 221.23.23.0 255.255.255.0 192.168.0.6 ip route 221.24.24.0 255.255.255.0 192.168.0.10 no ip http server ! logging trap debugging logging facility local2 logging 192.168.10.10 snmp-server community 3spint RO snmp-server enable traps tty ! line con 0 password 7 ############## login line aux 0 password 7 ############## login line vty 0 4 password 7 ############## login ! ntp server 192.168.10.2 ntp server 192.168.10.3

The ip route on the router I am having troubles with (ESP_South) is:

Gateway of last resort is 0.0.0.0 to network 0.0.0.0

S 221.21.21.0/24 [1/0] via 192.168.0.9 192.168.10.0/27 is subnetted, 1 subnets S 192.168.10.0 is directly connected, Serial0/0/0 S 221.23.23.0/24 [1/0] via 192.168.0.9 S 221.22.22.0/24 [1/0] via 192.168.0.9 C 221.24.24.0/24 is directly connected, FastEthernet0/0 192.168.0.0/30 is subnetted, 1 subnets C 192.168.0.8 is directly connected, Serial0/0/0 12.0.0.0/8 is variably subnetted, 2 subnets, 2 masks S 12.207.234.13/32 [254/0] via 12.214.124.1, FastEthernet0/1 C 12.214.124.0/24 is directly connected, FastEthernet0/1 S* 0.0.0.0/0 is directly connected, Serial0/0/0

On the other router (EngSeal-RTR) the ip route is:

Gateway of last resort is 221.21.21.1 to network 0.0.0.0

C 221.21.21.0/24 is directly connected, FastEthernet0/0 192.168.10.0/27 is subnetted, 1 subnets S 192.168.10.0 [1/0] via 221.21.21.1 S 221.22.22.0/24 [1/0] via 192.168.0.2 S 221.24.24.0/24 [1/0] via 192.168.0.10 192.168.0.0/30 is subnetted, 2 subnets C 192.168.0.8 is directly connected, Serial0/2 C 192.168.0.0 is directly connected, Serial0/0 S* 0.0.0.0/0 [1/0] via 221.21.21.1

Here are the ping results:

ESP_South#ping 64.233.167.147 source FastEthernet0/0

Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 64.233.167.147, timeout is 2 seconds: Packet sent with a source address of 221.24.24.100 !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 72/72/76 ms ESP_South#ping 64.233.167.147 source FastEthernet0/1

Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 64.233.167.147, timeout is 2 seconds: Packet sent with a source address of cable_internet_ip ..... Success rate is 0 percent (0/5) ESP_South#ping 64.233.167.147 source Serial0/0/0

Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 64.233.167.147, timeout is 2 seconds: Packet sent with a source address of 192.168.0.10 ..... Success rate is 0 percent (0/5)

On the other router (EngSeal_RTR) everything is routing correctly and I can ping external from the correct interface.

The traceroute on ESP_South:

ESP_South# traceroute 64.233.167.147 source FastEthernet0/0

Type escape sequence to abort. Tracing the route to 64.233.167.147

ESP_South#traceroute 64.233.167.147 source FastEthernet0/1

Type escape sequence to abort. Tracing the route to 64.233.167.147

ESP_South#traceroute 64.233.167.147 source Serial0/0/0

Type escape sequence to abort. Tracing the route to 64.233.167.147

Let me know if you need anything else.

Unless I'm missing something, your issue is that you are not natting, therefore the remote end does not know how to get back to the internal addressing. F0/1 has no address and is shut down, so that will fail regardless, and your serial is addressed internally and therefore the remote side can't reply back to an address it knows how to get to. You need to NAT going outbound so whatever traffic goes out, knows how to get back. Unless of course you are saying that you are NATing on the internet router already, in which case that router does not have an internal route back to your 192.168.0 networks for your WAN links. Either way, make sure you look at every communication flow from both directions (request and response), and you should be able to trace out where your issues are.

The second config I sent was from the router that was working, and Fa0/1 is shutdown, but on the first one, that one is up and has an IP that is assigned by DHCP and it's a reserved address. I will take a look at the NATing though.

It looks like the DHCP learned address shows up in the routing table as a static route

I suspect that none of the other routers know about this subnet as it was obtain dynamically and could of course change over time

Do yourself a favour and run a dynamic routing protocol like EIGRP and migrate away from manually configured static routes

On the router ESP_South redistribute static routes into EIGRP so the rest of the network knows how to reach the interface which get its IP address via DHCP obtained address

router eigrp 1 network 0.0.0.0 no auto summary redistribute static exit

As an interim measure add a floating static route on your head office router

ip route 12.207.234.13 255.255.255.255 192.168.0.10 250

I'm a little confused here. The ip address of the interface is a DHCP reserved ip. Where is it getting that static route. Also, if I wanted to start using EIGRP (Which I was trying to plan for) Can I run both static and EIGRP at the same time?

I am confused at the NAT issue also. I'm not really familiar with CISCO, but I do know my way around. on another router, where the internet is from a DSL modem that's connected to the ethernet port of the router, I tried setting the router with the cable modem the same way, and it's not working. I noticed there was a route-map, and it was ip nat outside on the interface. I don't know what the difference is between "ip nat inside" or "ip nat outside" I have been trying to read up on it, but I'm lacking the time. I'm not sure how to test the line from the cable modem so I can make sure it works. I'm assuming it works because of it getting the correct reserved DHCP address, but other than that I am at a loss.

Yes you can use both EIGRP and static at the same time.

Each routing protocol has something referred to as administrative distance (admin for short):

Route type Admin Connected 0 Static 1 EIGRP internal 90 EIGRP external 170 external means the route has been redistributed into EIGRP - for example a static

you can also have "floating" static routes that you assing an admin distance of you choicing

one way of converting from static routing to dynamic routing is to float all the statics and if a dynamiclly learned route is not availble the floating static will be inserted into the routing table (RIB).

What do you mean by DHCP reserved ???

I would have expected that a router interface IP address via DHCP would show as a connected route

Please post output of show ip route dhcp

My IP requires me to use DHCP, but they reserve an IP address by using the MAC address. This way it is like a static address, but it is still DHCP. If I ever change to a different device (MAC address) I would then need to call my ISP and have them change the MAC address they have registered.

It comes back with no results.

ESP_South#sh ip route dhcp

ESP_South#

try show dhcp lease

The behaviour with IOS 12.3(23) is to install a DHCP acquired interface address as a directly connected route.

I see you have 12.4, so perhaps Cisco changed the behaviour in 12.4 or its a bug.

Thus I would also add redistribute connected to the EIGRP routing process, in case Cisco changes it back ...

router eigrp 1 network 0.0.0.0 no auto summary redistribute static ! advertise DHCP learned address if installed as static redistribute connected ! advertise DHCP learned address if installed as directly connected exit

Temp IP addr: 12.214.124.4 for peer on Interface: FastEthernet0/1 Temp sub net mask: 255.255.255.0 DHCP Lease server: 12.207.234.13, state: 3 Bound DHCP transaction id: 158 Lease: 254664 secs, Renewal: 127332 secs, Rebind: 222831 secs Temp default-gateway addr: 12.214.124.1 Next timer fires after: 19:38:18 Retry count: 0 Client-ID: cisco-0019.aa7e.b2ef-Fa0/1 Client-ID hex dump: 636973636F2D303031392E616137652E 623265662D4661302F31 Hostname: ESP_South

I've seen "router eigrp 100" does it matter what number as long as all routers use that number that are participating in eigrp?

Also the "network 0.0.0.0" what does that do? I thought I would have to do:

router eigrp 100 network 221.21.21.0 network 221.22.22.0 network 221.23.23.0 network 221.24.24.0 network 192.168.10.0 (do I have to have the subnet mask since I'm using CIDR)

If I understand the next four lines its just telling it to give out the static address on the router to all the other routers in addition to the dynamic ones right? Do I need to include the ! part is does that denote a comment?

from my computer here, I can ping 12.214.124.1, but doing a "ping

I appreciate you helping me with this. This helps a lot.