cannot ping from subnet A to subnet B for a specific host

From my point of view there is nothing strange...

Alex.

From my point of view there is nothing strange... Try to enable "deb ip nat" and see if the router do the NAT. Be aware that such a debugging might overload the router depending on how much traffic you have

Alex.

traffic you have

Hi Alex How do I see the output of the command "deb ip nat"?

Thanks

that enables the debugging of NAT translation. If you are connected to the router via telnet just type "term mon" and "term no mon" to disable it.

Be prepared to a lot of garbage.

Otherwise if you are in console the router should already display the translations.

Alex.

router via telnet just type "term mon" and

I don't see any output.

Here is the network diagram Wave2WaveRouter | | Office firewall (192.168.5.1) | | office router |------------------------------------------------------------------- | |

192.168.5.0 192.168.11.0 192.168.5.10 192.168.11.65 192.168.5.149

I can ping 192.168.5.10 from 192.168.11.65. But I cannot ping

192.168.5.149 from 192.168.11.65.

oops...the diagram didn't post as I typed. The host 192.168.11.65 was meant to be under 192.168.11.0

Thanks

Here is the network diagram Wave2WaveRouter | | Office firewall (192.168.5.1) | | office router |------------------------------------------------------------------- | |

192.168.5.0 192.168.11.0

192.168.5.10

192.168.11.65 192.168.5.149

I can ping 192.168.5.10 from 192.168.11.65 but not 192.168.5.149

Wasn't there already another thread on this problem? Why did you start a new one instead of continuing that one?

Have you done a ping while monitoring?

Alex.

On your office router, do you have 192.168.5.x set up as a /24 network or do you break it out further?

Do a sh ip ro 192.168.5.10 and a sh ip ro 192.168.5.149 and put the output from each back in a reply.

Traceroute from 192.168.11.65 to the two 192.168.5.x IPs.

The diagram makes it look like the firewall and the router are two different devices. Is that right?

Grog

192.168.5.x is set up as a /24 network

Corp-WAN>sh ip ro 192.168.5.10 Routing entry for 192.168.5.0/24 Known via "connected", distance 0, metric 0 (connected, via interface) Routing Descriptor Blocks: * directly connected, via FastEthernet0/1 Route metric is 0, traffic share count is 1

Corp-WAN>sh ip ro 192.168.5.149 Routing entry for 192.168.5.0/24 Known via "connected", distance 0, metric 0 (connected, via interface) Routing Descriptor Blocks: * directly connected, via FastEthernet0/1 Route metric is 0, traffic share count is 1

Traceroute from 192.168.11.65 to 192.168.5.149 Primary DNS: 192.168.5.10 Failed to resolve Hop#1 [DNS Servers Reports Query Name Error] Time out! Failed to resolve Hop#50[DNS Server Reports Query Name Error] Timeout!

Traceroute from 192.168.11.65 to 192.168.5.10 Primary DNS: 192.168.5.10 Failed to resolve Hop#1 [DNS Servers Reports Query Name Error] Failed to resolve Hop#50[DNS Server Reports Query Name Error] Finished Trace for 192.168.5.10

BTW, I'm using Trellian Traceroute program.

Yes. The outside ip of the firewall is 209.178.198.242 and the inside ip is 192.168.5.1

Thanks

Yes!

Regarding traceroute for 192.168.5.149 this is how it looks in the main window of Trellian software

192.168.11.253 0.0.0.0

Traceroute for 192.168.5.10 looks like

192.168.11.253 192.168.5.10

I guess the traceroute for 192.168.5.149 has failed

Regards

I set the gateway on 192.168.5.149 to 192.168.5.2 (router's FastEthernet interface) and everything worked fine!

Many thanks for your help.