Help with T1 routing 1

[blubomber]

I am working on configuring my first point to point T1 connection. I am using two cisco 2811 routers with a WIC in both routers. I have the routers configured for each network and they both can connect with each other over the T1. I am having a problem routing the traffice from each network to see the other network. My main office network IP setup is 192.168.0.0-255.255.0.0, the remote network is 10.1.37.0-255.255.255.0. I have the WIC cards setup as serial but no IP address asigned to them.

How would i go about getting the two networks talking. Do i need to assign a static IP to each WIC card?

Thank you for any help in this matter.

 

[chieftan999]

You need to set up a couple of things here:-

First assign an IP address to each interface (WIC), normal approach to this would be to assign a /30 subnet mask as shown:-

WIC - 192.168.24.1 255.255.255.252
WIC - 192.168.24.2 255.255.255.252

Ensure that you write this to NVRAM after configuring.

Next you need to set up the route to the network and the route back. This can be accomplished by setting a static route or Dynamic (I will stipulate static here).

Enter global configuration mode as shown:-

router> en
router# conf t
router(config)#ip route A.B.C.D (destination network/host) A.B.C.D (mask) A.B.C.D (next hop)

in the case shown above and using the stipulated IP addresses you and I have mentioned the configuration line for the static route will read as follows:-

ip route 192.168.0.0 255.255.0.0 192.168.24.2

You will need to add a route back on the other router so add in:-

ip route 10.1.37.0 255.255.255.0 192.168.24.1

Remember you have to add the route back on each router.


Reamin positive. The affect on those around you will amaze.

 

[blubomber]

Thank you for your help. Sorry for the delayed response but i had problems with the T1 lines.

i applied the changes you suggested and i am getting communications accross the T1. My only problem now is that it is very slow. I am using Cisco's SDM to do some real time monitoring and when i transfer a file, 1.5MB for example, the bandwidth usage never goes above around 2%.

For testing i used a laptop with just the T1s internal IP address as the default gateway.

Any further assistance would be greatly appreciated.

 

[chieftan999]

Default gateway should be set to the first hop or the Interface ton the router that your LAN attaches to (this is normally the Ethernet interface).

As you are getting communication across the links I see no reason why the T1 link should be slow.

Can you post you configs here and I will take a look.



Reamin positive. The affect on those around you will amaze.

 

[blubomber]

i appologize for the delay in response. Here is my running config on the 2811 at the main office.

version 12.3
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service sequence-numbers
!
hostname RemoteT1
!
boot-start-marker
boot-end-marker
!
security authentication failure rate 3 log
security passwords min-length 6
logging buffered 51200 debugging
logging console critical
enable secret 5 $1$B1n/$YBdPgWS1AeHChwmPCWtEC0
!

no network-clock-participate aim 0
no network-clock-participate aim 1
no aaa new-model
ip subnet-zero
no ip source-route
ip tcp synwait-time 10
!
!
ip cef
!
!
no ip bootp server
ip domain name company.com
ip name-server 192.168.100.2
ip name-server 192.168.100.6
ip name-server 10.1.37.5
no ftp-server write-enable
!
!
!
!
interface FastEthernet0/0
description $FW_INSIDE$$ETH-LAN$$INTF-INFO-FE 0/0$
ip address 192.168.100.253 255.255.0.0
no ip redirects
no ip unreachables
no ip proxy-arp
ip route-cache flow
duplex auto
speed auto
no mop enabled
!
interface FastEthernet0/1
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
ip route-cache flow
shutdown
duplex auto
speed auto
no mop enabled
!
interface Serial0/0/0
description $FW_INSIDE$
ip address 172.16.10.1 255.255.255.252
no ip redirects
no ip unreachables
no ip proxy-arp
ip route-cache flow
service-module t1 remote-alarm-enable
!
ip classless
ip route 10.1.37.0 255.255.255.0 172.16.10.2 permanent
ip http server
ip http authentication local
!
!
logging trap debugging
access-list 100 remark VTY Access-class list
access-list 100 remark SDM_ACL Category=1
access-list 100 permit ip 172.16.10.0 0.0.0.3 any
access-list 100 permit ip 192.168.0.0 0.0.255.255 any
access-list 100 deny ip any any
no cdp run
!
control-plane
!
banner login ^CAuthorized access only!
Disconnect IMMEDIATELY if you are not an authorized user!^C
!
line con 0
login local
transport output telnet
line aux 0
login local
transport output telnet
line vty 0 4
access-class 100 in
privilege level 15
login local
transport input telnet
line vty 5 15
access-class 100 in
privilege level 15
login local
transport input telnet
!
scheduler allocate 20000 1000
!
end

PS. I did the serial interfaces with a 172.16.10.1 because when i used what you had suggested, the router told me i could not do that because it would overlap the ethernet IP. Any more assistance would be great.

 

[chieftan999]

Thats okay. I was only using the 192.168 addresses as an example of how to complete the task.

Having looked at the config I can see no reason why this should be slowing down.

When you reset the counters on the interface and then send information through the interface, what are the packet statistics?

Just use the clear counters command as follows:-

router(config)#clear counters (T1 interface)

Then use the

router#sh int (T1 Interface)

and the

router#sh int (T1 Interface) summ

commands.

You may need to sniff the network traffic to see what is happening. Ethereal should give the required results.
From the config shown above I can see nothing wrong.


Reamin positive. The affect on those around you will amaze.

 

[blubomber]

chieftan999, thank you for your help on this.

It appears to be working good today. I believe what the problem was is that one of the DNS servers at the remote propertie was flooding the connection with DNS data. There was a program running on it that was not supposed to be there that i got rid of. I am not sure how it got there. All seems good.

Just one last quick question. i now have two gateways on each propertie. one is for internet connection via DSL and the other is the T1. What would be a good method for getting the traffic routed correctly? Should i have an entry in the DNS servers on both properties?

Thanks again for your assistance.

 

[chieftan999]

From the configuration you have posted I can only see the Internal FA0/0 interface to the LAN and the T1 Serial Interface.

As far as I can see the FA0/1 interface appears to not be active in any way at all.

Where is the DSL connected?





Reamin positive. The affect on those around you will amaze.

 

[blubomber]

the DSL is coming in through a Watchguard Firebox 700 and from there into the LAN.

Here is what i was thinking, which may be the direction you are going, is have the my firewall setup the way it is now but put the cisco router between the firewall and dsl connection. then, i can have just one gateway and let the router setup to make the T1 and internet connections for the network.

Something like that. Maybe you can give me a better setup.

 

[chieftan999]

You can use either method that you have suggested. The better option would be the secondary using the Cisco equipment.

Your choice though. If you need any more help then please let me know.

Reamin positive. The affect on those around you will amaze.