Cisco 1760 Router config - HELP PLEASE!

[Macvault]

I'm working on a Cisco 1760 Router and I'M PULLING OUT MY HAIR! I hope someone can help me. I have a pretty basic setup. I work at a bank. We're opening a new branch. We've setup this same router at other branches but this one just isn't working.

Here's the network layout:

BankMainOfficeRouter <--> FrameRelay <--> NewBranchCisco1760Router(PROBLEMROUTER) <--> CiscoCatalystSwitch <--> LAN

What's really strange is that I can ping and telnet out over the WAN from within the 1760 Router itself (when I'm telneted or serial terminaled into it), so it seems to see the outside world, and the LAN side can see it, but the LAN side refuses to see any further than the router. Is there some kind of bridging or routing that I should check?

I know the config file would help, but I don't have it with me. ANY HELP AT ALL WOULD BE GREAT! THANKS!

 

[lui3]

check to make sure that the main office nows about the network on the lan side of the new branch office and has a route to reach it.

please post configuration from both routers if possible. thanks.

Lui3
CCNP,CCDA,A+/Net+
Cisco Wireless Specialization

 

[Macvault]

This isn't the exact config but it is what I could remember of it. I made it up real quick in Cisco's ConfigMaker. Is it really likely that it's the MAIN Router's config that's messed up????

! ******************************************************************
! BranchCisco1760.cfg - Cisco router configuration file
! Automatically created by Cisco ConfigMaker v2.6 Build 6
! Wednesday, July 21, 2004, 09:47:40 PM
!
! Hostname: BranchCisco1760
! Model: 1760
! ******************************************************************
!
service timestamps debug uptime
service timestamps log uptime
service password-encryption
no service tcp-small-servers
no service udp-small-servers
!
hostname BranchCisco1760
!
enable password 12345
!
no ip name-server
!
ip subnet-zero
no ip domain-lookup
ip routing
!
interface FastEthernet 0/0
no shutdown
description connected to EthernetLAN
ip address 198.212.92.1 255.255.255.0
keepalive 10
!
interface Serial 0/0
no shutdown
no description
no ip address
encapsulation frame-relay
frame-relay lmi-type ansi
!
interface Serial 0/0.1 point-to-point
no shutdown
description connected to MAINCisco1760
ip address 198.212.99.18 255.255.255.252
frame-relay interface-dlci 16
!
router rip
version 2
network 198.212.92.0
network 198.212.99.0
no auto-summary
!
!
ip classless
no ip http server
snmp-server community public RO
no snmp-server location
no snmp-server contact
!
line console 0
exec-timeout 0 0
password 1234
login
!
line vty 0 4
password 1234
login
!
end

 

[bierhunter]

What's really strange is that I can ping and telnet out over the WAN from within the 1760 Router itself (when I'm telneted or serial terminaled into it), so it seems to see the outside world, and the LAN side can see it, but the LAN side refuses to see any further than the router.

Sorry, but that confused me a bit as to which router you are talking about.

Are you saying you can ping/telnet from the branch router to the outside world or the main site router? Also, are you saying that the LAN side at the branch office cannot see past the branch router or cannot see past the main router?

I agree with Lui3. Check to make sure you have a return path from the main router, and make sure you have routes in your route table in the branch router to get to the main router (expecially defaults).

I noticed you're using public addressing. Is there any NAT involved? If there is, does the NAT recognize the new branch site subnet?

On a side note, I would recommend working out a plan to migrate off the public subnet and onto a private subnet if you haven't already planned that.

BierHunter
CNE, MCSE, CCNP

 

[Macvault]

Bierhunter: Yea, I just started working at this bank and they told me they just found out that their numbers belong to harley davidson So I'm gonna help them migrate to new numbers.

Anyway, back to the issue witht the routing... Here's the problem:

The LAN at the branch can ping and telnet to the (LAN)FastEthernet0/0 port on the Cisco 1760 router at the branch. I can also ping and telnet to the (WAN)Serial0/0.16 port on the router at the branch office from the LAN side. I cannot, however, ping or telnet or http or anything for that matter, beyond the Cisco 1760 Router at the branch.

What I CAN do is log into the Cisco 1760 Router at the branch, via telnet (on the LAN side) or serial connection, and telnet from this router to the MAIN router at our main office, and to other routers on our network.

I can also telnet back to the branch router (to it's outside IP) from the MAIN office router, or other routers on the network.

What I cannot seem to figure out is why nothing seems to be getting from the LAN side of the Cisco 1760 Router at the branch, through the same router and out to the main network, or to the outside world.

Can anyone tel me what my routing commands/tables should look like on the MAIN Router as well as on the BRANCH Router? Is it likely that this is the problem?

I hope you can understand what I'm talking about Thanks in advance for any help!