1 IP500, 2 Subnets can't connect with 2nd

[JesusMC]

I have an IP500 system with 5610SW phones.

I have a Watchguard Firebox with 4 ports. One set for external and the 3 internal are set for different subnets. (10.1.xxx.xxx, 10.2.xxx.xxx, 10.3.xxx.xxx)

The IP500 is statically set to 10.1.42.1/255.0.0.0 on the primary subnet. The voicemail server is at 10.1.42.2 and the POE switches start at 10.1.42.3.

On the secondary subnet, I can ping the voicemail server and POE switches, but I can't ping the IP500.

Is this a routing issue or is the IP500 not allowing itself to be seen by another subnet?

Jesus*MC*

 

[HairySupportMonkey]

what is your route in the IPO?

might want to set one:

IP - 0.0.0.0 mask 0.0.0.0 gw - watchguard

 

[JesusMC]

I have one route set like this:
IP address - 0.0.0.0
IP Mask - 0.0.0.0
Gateway - 10.1.10.1
Destination - LAN1
Metric - 0

Jesus*MC*

 

[tlpeter]

It is routing and nothing else

ACS - Implement IP Office
ACA - Implement IP Telephony -- ACA - Design IP Telephony
ACA - Voice Services Management
______________
Women and cats can do as they please and men and dogs should relax and get used to the idea!

 

[Mortigan]

Tlpeter is correct. Seems to me that the IPO has no way to reply to your pings. Try setting the default route in the IPO to point to the switch interface of that subnet (10.1.42.3 maybe)

When the IPO receives your ping it tries to respond by sending traffic through 10.1.10.1, which is not on the same collision domain as the IPO so it won't ever find its way back to the PC you're pinging from. If you direct the default route to the switch port ON THE 10.1.42.x subnet it should work fine.

 

[JesusMC]

I changed the default route's gateway to 10.1.42.3 but I still can't ping the IPO on 10.1.42.1 from 10.2.10.144.

When I do ping, I get the 2 following messages repeated:

Reply from 10.2.10.1: Destination host unreachable.
Request timed out.

Also, not sure if this matters, RIP is set to None on LAN1.

Jesus*MC*

 

[tlpeter]

Why do you ping 10.2 ?
Your ipo is on 10.1

I think you need to setup your network a little better !

I can understand why you need those ipadres ranges
Your router needs to know how to find those ranges
Every range needs routing, that is where you need gateway ipaddresses

ACS - Implement IP Office
ACA - Implement IP Telephony -- ACA - Design IP Telephony
ACA - Voice Services Management
______________
Women and cats can do as they please and men and dogs should relax and get used to the idea!

 

[amriddle01]

What's with the crazy addressing and wacky subnets going on here? No offence but do you know networking well?

ACS - IP Office Implement

"I'm just off to Hartlepool to buy some exploding trousers

 

[JesusMC]

I have 2 subnets: 10.1.xxx.xxx/16 and 10.2.xxx.xxx/16

The 10.1.xxx.xxx is the main network while 10.2.xxx.xxx is another department that I want to keep out of the primary network. I only have one IPO which is on the primary.

So, with that said, I'm trying to ping the IPO (which is set to 10.1.42.1) from an XP box (who's IP is 10.2.10.144) . I can ping the switches (10.1.42.3 - 10.1.42.5) just not the IPO.

Are you both saying I should make the secondary network more unique and go with 192.168.xxx.xxx/16?

Jesus*MC*

 

[amriddle01]

It doesn't matter what you change it to, as long as you have configured your router correctly it will reply just fine, as an example my test IP offices are on the 192.168.6.0 network which link to a Definity on 192.168.2.0 network and my laptop is on the 192.168.1.0 netork and they can all talk no problem with only the 0.0.0.0, 0.0.0.0 IP route in my IP Office. Basically your problem is outside the IP ofice

ACS - IP Office Implement

"I'm just off to Hartlepool to buy some exploding trousers

 

[Bas1234]

On the PC do a route add,

open a dos box;

route add 10.2.0.0 mask 255.255.0.0 10.1.42.1 -p

and

route add 10.3.0.0 mask 255.255.0.0 10.1.42.1 -p

the -p is to set it permanent.

___________________________________________
It works! Now if only I could remember what I did...
___________________________________________

 

[jamie77]

Correct me if I'm wrong but 10.1.x.x/255.0.0.0, 10.2.x.x/255.0.0.0 ans 10.3.x.x/255.0.0.0 are in the same network subnet 10.0.0.0????

When routing, it's the base network address used to identify each segment and each segment here has the same network address???

Do you really need 255.0.0.0 masks. Doesn't that give the possibility of samething like 16 million hosts?!?!?!

How many devices are needed in each segment?? If less than 254 then use something like the following for each segment:

192.168.10.x/255.255.255.0 (n/w: 192.168.10.0)
192.168.20.x/255.255.255.0 (n/w: 192.168.20.0)
192.168.30.x/255.255.255.0 (n/w: 192.168.30.0)

Then make sure ip routes are setup on all routers (IPO included) to send traffic down the correct roads.

Jamie Green

ACA:Implement - IP Office
ACS:Implement - IP Office

Football is not a matter of life and death-It is far more important!!!!

 

[amriddle01]

Hence the crazy addressing comment

ACS - IP Office Implement

"I'm just off to Hartlepool to buy some exploding trousers

 

[JesusMC]

I inherited the network with it just as you laid out 10.1.xxx.xxx / 255.255.0.0.

But since I've been here, I purchased a new firewall. When I put it in I kept everything the same. But there are 4 ports on this UTM. Eth0 is the external and Eth1 is the 10.1.xxx.xxx network. For the new department, I'm trying to put them on Eth2. I tried setting them up to be 10.1.20.xxx but the device wouldn't let me. It won't let 2 ports be on the same subnet. Hence the reason I'm trying to put the new department on 10.2.xxx.xxx.

Jesus*MC*

 

[jamie77]

Now you have changed your mind about the subnet then they are different!!!

Is 10.1.10.1 your router???



Jamie Green

ACA:Implement - IP Office
ACS:Implement - IP Office

Football is not a matter of life and death-It is far more important!!!!

 

[JesusMC]

OK, I guess I don't know my network terminology very well. I should have made my topic "1 IPO and 2 Networks"

Yes, my router is at 10.1.10.1 for my primary network. I'd like to have a second network (not subnet) use the IPO. Is that possible?

Jesus*MC*

 

[jamie77]

Set up on the router:
10.1.x.x/16 to go down Eth1
10.2.x.x/16 to go down Eth2
All other traffic to go down Eth0

On the IPO have:
IP: 0.0.0.0/Net: 0.0.0.0/Gateway:10.1.10.1/Detination: LAN 1

I am assuming the IPO is plugged into 10.1.x.x on it's LAN 1 port not WAN/LAN2.

Then all traffic hitting the IPO that isn't on it's own network (10.1.0.0) will be send all other traffic to 10.1.10.1 for that to decide where to go.

Jamie Green

ACA:Implement - IP Office
ACS:Implement - IP Office

Football is not a matter of life and death-It is far more important!!!!

 

[JesusMC]

Yes, the IPO is at 10.1.42.1 and is on LAN 1 not WAN/LAN2.

The router is setup as you have listed. The IPO was setup as you listed when it was installed and is still set that way. But with that setup, the phones on the secondary network cannot find the IPO. They can find the voicemail server which has all the scr's and such.

Jesus*MC*

 

[jamie77]

What subnet mask is assigned to the IP Office??? Look in the System tab

Jamie Green

ACA:Implement - IP Office
ACS:Implement - IP Office

Football is not a matter of life and death-It is far more important!!!!

 

[JesusMC]

It was originally 255.255.0.0 but I recently changed it to 255.0.0.0 to try to make it work.

Jesus*MC*