Cisco ppp over T1

[slick007]

Hello anyone,
I have a remote site that I was told had to join to our network, so we got ourselves a dedicated T1 Point-to-point and a couple of cisco 1841 with wic T1 TSU. I can ping each router and I can ping eth0 interface but if I try and ping a server (32.72.46.96) no luck.
Thanks for any help.

Here's the routers config.
--------------------------------------------------------
Router A-Corpt.Network
eth0 32.72.46.108 255.255.254.0
serial0/0/0 192.168.251.1
rip 32.0.0.0, 192.168.251.0
--------------------------------------------------------
Router B Offsite- headache
eth0 192.168.1.1
serial0/0/0 192.168.251.1
rip 192.168.1.0, 192.168.251.0
---------------------------------------------------------

 

[rudeboy]

Both serial interfaces have the same IP (192.168.251.1)?
You can ping Router B from Router A and vice-versa?
Are you only running RIP on the ethernet interfaces?
What is your server using as a default gateway?

It would be helpful to post your configs also.

 

[slick007]

Thanks for the reply,
Both serial interfaces have the same IP (192.168.251.1)?=yes
You can ping Router B from Router A and vice-versa?=yes
Are you only running RIP on the ethernet interfaces?yes
What is your server using as a default gateway?A=32.72.46.108 B=192.168.1.1

Here's my config
!This is the running config of the router: 32.72.46.108
!----------------------------------------------------------------------------
!version 12.4
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service sequence-numbers
!
hostname jckhosprouter
!
boot-start-marker
boot-end-marker
!
security authentication failure rate 3 log
security passwords min-length 6
logging buffered 51200 debugging
logging console critical
enable secret 5 $3$G.yP$nY9/kq8UcoU.lX$cTvmi0.
!
no aaa new-model
!
resource policy
!
clock timezone PCTime -8
clock summer-time PCTime date Apr 6 2003 2:00 Oct 26 2003 2:00
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
ip subnet-zero
no ip source-route
ip cef
!
!
ip tcp synwait-time 10
no ip dhcp use vrf connected
!
!
no ip bootp server
ip name-server 32.72.47.99
!
username admin privilege 15 secret 5 $1u$CzN!Bnui7u3MnBTAzJImh5jvW0
!
!
!
interface FastEthernet0/0
description $ETH-LAN$$ETH-SW-LAUNCH$$INTF-INFO-FE 0$$ES_LAN$$FW_INSIDE$
ip address 32.72.46.108 255.255.254.0
no ip redirects
no ip unreachables
no ip proxy-arp
ip route-cache flow
duplex auto
speed auto
no mop enabled
!
interface FastEthernet0/1
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
ip route-cache flow
shutdown
duplex auto
speed auto
no mop enabled
!
interface Serial0/0/0
ip address 192.168.251.2 255.255.255.0
encapsulation ppp
!
router rip
network 32.0.0.0
network 192.168.251.0
no auto-summary
!
ip classless
ip route 0.0.0.0 0.0.0.0 Serial0/0/0 2 permanent
!
ip http server
ip http authentication local
ip http timeout-policy idle 600 life 86400 requests 10000
!
logging trap debugging
no cdp run
!
control-plane
!
banner login ^CAuthorized access only!
Disconnect IMMEDIATELY if you are not an authorized user!^C
!
line con 0
login local
transport output telnet
line aux 0
login local
transport output telnet
line vty 0 4
privilege level 15
login local
transport input telnet
line vty 5 15
privilege level 15
login local
transport input telnet
!
scheduler allocate 4000 1000
end


Thanks for the help

 

[JOAMON]

can you post config from the other router as well?

 

[JOAMON]

Just an observation....
I would put the following in your rip statement on both routers:
version 2

 

[plshlpme]

if both serial interfaces have the same ip address then essentially you are pinging your own wan interface when you try to ping the remote router ?

what is your output of sho ip route?

 

[slick007]

I can ping from 32.72.46.0 side to the 192.168.1.0 side
jckhosprouter#ping 192.168.1.100
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.1.100, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 4/4/4 ms
But not from there side
BOROUTER#ping 32.72.46.96

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 32.72.46.1, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5
-----------------------------------------------------------
here's my routes
jckhosprouter#sh ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route

Gateway of last resort is 0.0.0.0 to network 0.0.0.0

32.0.0.0/23 is subnetted, 1 subnets
C 32.72.46.0 is directly connected, FastEthernet0/0
192.168.251.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.251.1/32 is directly connected, Serial0/0/0
C 192.168.251.0/24 is directly connected, Serial0/0/0
R 192.168.1.0/24 [120/1] via 192.168.251.1, 00:00:04, Serial0/0/0
S* 0.0.0.0/0 is directly connected, Serial0/0/0
-----------------------------------------------------------

BOROUTER#sh ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route

Gateway of last resort is 0.0.0.0 to network 0.0.0.0

R 32.0.0.0/8 [120/1] via 192.168.251.2, 00:00:22, Serial0/0/0
192.168.251.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.251.2/32 is directly connected, Serial0/0/0
C 192.168.251.0/24 is directly connected, Serial0/0/0
C 192.168.1.0/24 is directly connected, FastEthernet0/0
S* 0.0.0.0/0 is directly connected, Serial0/0/0
-----------------------------------------------------------
Secound router config
!This is the running config of the router: 192.168.1.1
!----------------------------------------------------------------------------
!version 12.3
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service sequence-numbers
!
hostname BOROUTER
!
boot-start-marker
boot-end-marker
!
security authentication failure rate 3 log
security passwords min-length 6
logging buffered 51200 debugging
logging console critical
enable secret 5 $1$sJJn$tc2sW04LpMMv2kaJ7Opb10
!
username admin privilege 15 secret 5 $1!ryQe$donAkXeml/.LcCPoB8j1J1
clock timezone PCTime -8
clock summer-time PCTime date Apr 6 2003 2:00 Oct 26 2003 2:00
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
no aaa new-model
ip subnet-zero
no ip source-route
ip cef
!
!
ip tcp synwait-time 10
!
!
no ip bootp server
no ftp-server write-enable
!
!
!
!
interface FastEthernet0/0
description $ETH-SW-LAUNCH$$INTF-INFO-FE 0$$ES_LAN$$FW_INSIDE$$ETH-LAN$
ip address 192.168.1.1 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
ip route-cache flow
duplex auto
speed auto
no cdp enable
no mop enabled
!
interface FastEthernet0/1
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
ip route-cache flow
shutdown
duplex auto
speed auto
no cdp enable
no mop enabled
!
interface Serial0/0/0
ip address 192.168.251.1 255.255.255.0
no ip redirects
no ip unreachables
encapsulation ppp
no cdp enable
!
router rip
network 192.168.1.0
network 192.168.251.0
!
ip classless
ip route 0.0.0.0 0.0.0.0 Serial0/0/0 2
ip http server
ip http authentication local
ip http timeout-policy idle 600 life 86400 requests 10000
!
!
logging trap debugging
no cdp run
!
control-plane
!
banner login ^CAuthorized access only!
Disconnect IMMEDIATELY if you are not an authorized user!^C
!
line con 0
login local
transport output telnet
line aux 0
login local
transport output telnet
line vty 0 4
privilege level 15
login local
transport input telnet
line vty 5 15
privilege level 15
login local
transport input telnet
!
scheduler allocate 4000 1000
end

thanks

 

[plshlpme]

so both serial interfaces do not have the same up address.
1 is .1 and one is .2

and i notice in your ping that doesn't work:

BOROUTER#ping 32.72.46.96

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 32.72.46.1

what device is 32.72.46.1 ??? why is the router pinging that address?

 

[JOAMON]

Another observation.
You have a T1 PTP circuit for which you must provide the clock source on one of your routers for timing.
on one router serial put in the following:
service-module t1 clock source internal

This probably not related to your problem but needs fixing.

 

[slick007]

right, router A has an ip of 192.168.251.2 and router B 192.168.251.1, A can ping no problem to addresses behind router B, it's just router B can't see anything behind router A.
I set both routers to rip ver2 and added the clock speed to router A.
Do you think it could have something to do the route 32.0.0.0, do I need be more speific with the route?

 

[slick007]

Question? I'm thinking of just changing all the computers over there to our subnet( there's only about 20)32.72.46.0 255.255.254.0. Is this possible snice it's the same subnet or am I better off leaving it and find out what wrong with the way it's setup now?

 

[plshlpme]

from router B are you good if you ping 32.72.46.108 (lan int on routerA)

 

[jneiberger]

You absolutely should NOT put the same subnet in two different locations.

As someone else pointed out, in the output from your ping commands you ping 32.72.46.96 but the output shows that you're actually pinging 32.72.46.1. Was this a copy-and-paste error or is this actually what was showing up on the router?

You do not need to be more specific with your 32/8 route. The presence of the "ip classless" command will assure proper route lookups.

 

[slick007]

I changed router A serial0/0/0 to 192.168.251.1 255.255.255.0, no change it status.
32.72.46.96 was a typeo should have been 32.72.46.1
I can ping 32.72.46.108 from router B,I did a traceroute to 32.72.46.1 and receivied
1 192.168.251.1 4msec 4msec 4msec
2 * * *
3 * * *

 

[plshlpme]

so do both routers now have
version 2
and no auto summary in their rip configs?

 

[slick007]

both are running version 2 and both have no auto summary

 

[plshlpme]

to me if we go back to the original scenario.. you can ping to the ethernet port of the router but cannot ping the server then the default gateway of the server must be wrong.

 

[slick007]

doubled checked that, besides the laptop I'm using 32.72.46.12, 255.255.254.0 gateway 32.72.46.108 can telnet into the router 192.168.1.1 and the server 192.168.1.100, but router B(192.168.1.1) cannot even pin the laptop I'm using. Side A can see every thing on side B but side B can't see anything from side A it just stop's at router A's serail interface

 

[jneiberger]

That doesn't make any sense. If you can Telnet from 32.72.46.12 to 192.168.1.1 then that proves this is not a routing problem. Telnet is a two-way TCP connection and it would fail miserably if 192.168.1.1 really could not reach 32.72.46.12.

This behaves like an access list problem but you don't show any ACLs on your interfaces.

 

[JOAMON]

Did you enable clocking on the T1 circuit? One router serial must have clock source internal. Not your problem but need to fix it to avoid packet loss due to timing problems.