Need help on site to site connection with cisco

[mikeleahy]

hi, we have recently gotten a dsl site to site connection from our isp. we bought the cisco 837 routers ourselves and we got the "config" from the is. i just copied and pasted the config into both routers but when i connect to either router i cant ping the router on the other side directly connected via the dsl line. The configs are here, i think i am missing something simple... maybe a route...

dublin config :

Eircom_CE_ibs_cookestown_ind_est_deployed_req6606
!
! Version 12.0: Generated by VPNSC on Tue Jun 7 14:50:28 2005
!
interface ATM0
description Provisioned by VPNSC (BR0160577 4626851)
!
interface ATM0.835 point-to-point
description ATM0.835 atm pvc vpi=8 vci=35 : Provisioned By VPNSC: Service Request Id# = 6606 (BR0160577 4626851)
ip address 83.71.92.194 255.255.255.252
!
pvc 8/35
!
encapsulation aal5snap
!
no shutdown
!
router bgp 65500
neighbor 83.71.92.193 remote-as 5466
!
no auto-summary
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!! Generated by Cisco Template Provision System
!!
!! template = /Eircom/BIP_Reach/Cisco_Ce_BGP
!! datafile = /CE_Side
!!
!! Tue Jun 07 14:50:24 IST 2005
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

!
! Enable OAM on the ATM sub-interface
!
interface ATM0.835
pvc 8/35
oam-pvc manage
oam retry 3 3 5
!
! Redistribute the connected local LAN into RIP,
! for transmission to the eircom PE router.
!
router bgp 65500
redistribute rip
!
!
! The section below only applies if routes other than the connected LAN
! are required.
!
! Only specially tagged static routes will be redistributed to
! the PE. This ensures that the CE router doesnt
! accidentially inject a 0.0.0.0 or other unwanted
! route. The routes must be to null to stop a
! loop. This assumes full IGP internally.
! The static should be for a summarised block of
! the customer internal address space at this site.
! It is statically tied down to Null0 with a distance of 254.
!
! Sample static route:
!
! ip route 192.168.10.0 255.255.255.0 Null0 254 tag 1024
!
route-map cpe-static permit 10
match tag 1024
route-map cpe-static deny 20
!
router rip
redistribute static route-map cpe-static
!


cork config is :

same except the wan ips are different and the internal ip is 192.168.1.7 , any idea on how to get this up and running

 

[Zen37]

I don't see your internal IP configuration in your post, do you have it configured in another way? Can you do a 'sh run' and show the results?

 

[ChrisAC]

Have you verified that you have actually got DSL connectivity?

Chris.

**********************
Chris A.C, CCNA, CCSA
**********************

 

[ChrisAC]

I should have added, do a 'sh ip route' on both routers and post the results. Also do a 'sh ip int brief' and post that.

Chris.

**********************
Chris A.C, CCNA, CCSA
**********************

 

[Jimtron26]

Do you use the DSL for internet access or simply for connecting the different sites?

If internet then where is your Dialer interface. Also you have no NAT configured

 

[lambent]

Sounds like an MPLS service using DSL.

Try to ping from your CE routers to the ISP PE routers.

E.g. in dublin, ping to 83.71.92.193 using source IP 83.71.92.194

Then make sure that either your ISP helps you to advertise the internal routes or you use BGP to advertise.

 

[mikeleahy]

here is the cork config ::::

!
version 12.3
no service pad
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname cisco
!
boot-start
boot-end-marker
!
enable secret 5 $1$RExe$W4rFcwzbsAUBz5/yzLJxu.
!
username cisco password 7 030752180500
no aaa new-model
ip subnet-zero
!
!
!
!
ip ips po max-events 100
no ftp-server write-enable
!
!
!
!
!
!
!
interface Ethernet0
description CRWS Generated text. Please do not delete this:192.168.1.7-255.255.
255.0
ip address 192.168.1.7 255.255.255.0 secondary
ip address 10.10.10.1 255.255.255.0
hold-queue 100 out
!
interface ATM0
description Provisioned by VPNSC (BR0160557 021 4355605)
no ip address
no atm ilmi-
dsl operating-mode auto
!
interface ATM0.835 point-to-point
description ATM0.835 atm pvc vpi=8 vci=35 : Provisioned By VPNSC: Service Reque
st Id# = 6613 (BR0160557 021 4355605)
ip address 83.70.81.78 255.255.255.252
pvc 8/35
oam-pvc manage
oam retry 3 3 5
encapsulation aal5snap
!
!
interface FastEthernet1
no ip address
duplex auto
speed auto
!
interface FastEthernet2
no ip address
duplex auto
speed auto
!
interface FastEthernet3
no ip address
duplex auto
speed auto
!
interface FastEthernet4
no ip a
duplex auto
speed auto
!
router bgp 65500
no synchronization
bgp log-neighbor-changes
redistribute rip
neighbor 83.70.81.77 remote-as 5466
no auto-summary
!
ip classless
ip route 192.168.0.0 255.255.255.0 83.70.81.77 permanent

!
ip http server
no ip http secure-server
!
!
access-list 23 permit 192.168.1.0 0.0.0.255
access-list 23 permit 10.10.10.0 0.0.0.255
!
route-map cpe-static permit 10
match tag 1024
!
route-map cpe-static deny 20
!
!
control-plane
!
!
line con 0
exec-timeout 120 0
no modem enable
transport preferred all
transport output all
stopbits 1
line aux 0
transport preferred all
transport output all
line vty 0 4
access-class 23 in
exec-timeout 120 0
login local
length 0
transport preferred all
transport input all
transport output all
!
scheduler max-task-time 5000
end


sh ip int brief gives me :


Interface IP-Address OK? Method Status Prot
ocol
ATM0 unassigned YES NVRAM up up

ATM0.835 83.70.81.78 YES NVRAM up up

Ethernet0 10.10.10.1 YES NVRAM up up

FastEthernet1 unassigned YES unset up up

FastEthernet2 unassigned YES unset down down

FastEthernet3 unassigned YES unset down down

FastEthernet4 unassigned YES unset down down

sh ip route :

Gateway of last resort is not set

83.0.0.0/30 is subnetted, 4 subnets
C 83.70.81.76 is directly connected, ATM0.835
B 83.70.209.220 [20/0] via 83.70.81.77, 3d22h
B 83.71.92.192 [20/0] via 83.70.81.77, 22:52:54
B 83.70.81.160 [20/0] via 83.70.81.77, 3d22h
159.134.0.0/16 is variably subnetted, 2 subnets, 2 masks
B 159.134.242.64/26 [20/0] via 83.70.81.77, 3d22h
B 159.134.242.60/30 [20/0] via 83.70.81.77, 3d22h
10.0.0.0/24 is subnetted, 1 subnets
C 10.10.10.0 is directly connected, Ethernet0
B 192.168.0.0/24 [20/0] via 83.70.81.77, 3d21h
C 192.168.1.0/24 is directly connected, Ethernet0



The actual dublin config is :


cisco#show start
Using 1777 out of 131072 bytes
!
version 12.3
no service pad
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname cisco
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$mY/z$Uy1Xnc656TLFGoHJW16fx0
!
username cisco password 7 02050D480809
no aaa new-model
ip subnet-zero
!
!
!
!
ip ips po max-events 100
no ftp-server write-enable
!
!
!
!
!
!
!
interface Ethernet0
description CRWS Generated text. Please do not delete this:192.168.0.111-255.25
5.255.0
ip address 192.168.0.111 255.255.255.0 secondary
ip address 10.10.10.1 255.255.255.0
hold-queue 100 out
!
interface ATM0
no ip address
no atm ilmi-keepalive
dsl operating-mode auto
!
interface ATM0.835 point-to-point
description atm0 .835 atm pvc vpi=8 vci=35
ip address 83.71.92.194 255.255.255.252
pvc 8/35
oam-pvc manage
oam ret
encapsulation aal5snap
!
!
interface FastEthernet1
no ip address
duplex auto
speed auto
!
interface FastEthernet2
no ip address
duplex auto
speed auto
!
interface FastEthernet3
no ip address
duplex auto
speed auto
!
interface FastEthernet4
no ip address
duplex auto
speed auto
!
router bgp 65500
no synchronization
bgp log-neighbor-changes
redistribute rip
neighbor 83.71.92.193 remote-as 5466
no auto-summary
!
ip classless
!
ip http server
no ip http secure-server
!
!
access-list 23 permit 192.168.0.0 0.0.0
access-list 23 permit 10.10.10.0 0.0.0.255and.

For a menu of valid
!m
!
!
line con 0
exec-timeout 120 0
no modem enable
transport preferred all
transport output all
stopbits 1
line aux 0
transport preferred all
transport output all
line vty 0 4
access-class 23 in
exec-timeout 120 0
login local
length 0
transport preferred all
transport input all
transport output all
!
scheduler max-task-time 5000
end

cisco#

there is no internet connectivity on these routers, just connectivity between sites. i can ping the neighbour routers on either router ??? i dont know what u meant ping using source ip 83.71.92.194 . i can ping both routers from the lan but cant ping from the routers to other pcs on the conncected lan. cork is in the 192.168.1.x subnet and dublin is in the 192.168.0.x .

ip of cork router is 192.168.1.7
dublin is 192.168.0.111

according to the isp everything on their end should be fine.

Our ISP wont really help us with the cisco config as we bought the routers ourselves.

the route 83.71.92.192 is going via 83.70.81.77(corks neighbour as per the config).

can anyone see anything thats wrong , i presume its to do with the routes. but why cant the routers ping ips on the connected lan etc?? please help

from the cork router i can also ping 192.168.0.11 (server in dublin) but not the router?? why not?? from dublin i cant ping anything in the cork office

 

[mikeleahy]

sorry , i presume i can ping the server as the server has a gateway of 192.168.0.1 which is another dsl connection to our office so i think the replies are being sent back down over this link. im kinda lost here guys, any help would be great

 

[lambent]

One thing that is really weird to me is that your primary IP address on ethernet interface on both routers is the same one...I don't understand why you need to do this.

Another thing that I noticed is that you're using a static route for 192.168.0.0/24 on cork router but your "sh ip route" output shows that the route was learnt from BGP...

Also please show the "show ip route" and "show ip inter brief" on dublin router.

 

[lambent]

......what is that 192.168.0.1? Do you mind giving us a complete view of your network infrastructure?

 

[mikeleahy]

192.168.0.1 is the ip address of another router in dublin that is connected to another wan connection to cork. we use that one for data and we want to use the new one for voice, all i need to do is to get them to ping. our voice people will do the rest. my primary ethernet address in cork is 192.168.1.7 and in dublin is 192.168.0.111 . they are not the same!!!

sh ip route on the dublin one shows

c - 83.71.92.192 direct
c- 192.168.0.0/24 direct

it dosent show any bgp routes. any idea why this would be, also in sh ip int brief shows the ip of the atm interface and it shows the same as the cork one for the other interfaces.

infrastructure is as follows

in cork the internet firewall gateway is 192.168.1.253 . 192.168.1.1 is a netopia managed router that connects to 192.168.0.1 in dublin. there is a route on the 192.168.1.253 that sends alltraffic to 192.168.0.0 to 192.168.1.1 . everyones gateway in dublin is 192.168.0.1.

why would the dublin router not pick up the routes??

 

[mikeleahy]

from the cork router i can ping dublins 83.71.92.192 and also the neighbour ip on the dublin router, but cant ping the wan ip of the dublin router, the router in dublin is not showing up any bgp routes, i presume this is the problem as when it receives a ping it dosent know where to send its reply back to. how do i force it to recieve the bgp routes

 

[mikeleahy]

10.10.10.1 seems to have installed itself as the primary and seconday ethernet ip on both routers, how can i get rid of this, it keeps saying to me must delete secondary before primary etc

 

[mikeleahy]

lambent , sorry about all this. got rid of the 10.10.10.1 reference and now the internal pinging is ok, any idea about the bgp though????

 

[lambent]

router bgp 65500
no synchronization
bgp log-neighbor-changes
redistribute rip
neighbor 83.70.81.77 remote-as 5466
no auto-summary

It said you're redistributing RIP routes into BGP but I don't see any RIP configuration.

If you're not using RIP then you should use the "network" statement to advertise your subnets via BGP.

For Dublin:
!
router bgp 65500
no synchronization
bgp log-neighbor-changes
neighbor 83.70.81.77 remote-as 5466
network 192.168.0.0 mask 255.255.255.0
no auto-summary
!

For Cork:

!
no ip route 192.168.0.0 255.255.255.0 83.70.81.77 permanent
!
router bgp 65500
no synchronization
bgp log-neighbor-changes
neighbor 83.70.81.77 remote-as 5466
network 192.168.1.0 mask 255.255.255.0
no auto-summary
!

If you don't want to use BGP, then you need to ask your ISP to help you to advertise your subnets within the MPLS cloud and in this case you'll use static routes or default route.

 

[mikeleahy]

you have the neighbor as the same address in both configs. is that correct?? accoring to my config i dont think so. if i was to use rip how would i configure it???

 

[lambent]

oops just a copy-and-paste mistake
just use this in Dublin:

neighbor 83.71.92.193 remote-as 5466

 

[mikeleahy]

changed the configs to use rip : cork is

!
router rip
version 2
network 192.168.1.0
no auto-summary
!
router bgp 65500
no synchronization
bgp log-neighbor-changes
redistribute rip
neighbor 83.70.81.77 remote-as 5466
no auto-summary

dublin is done the same for their subnet. but still no routes going into the dublin router. they are in the cork one. any idea why???

 

[mikeleahy]

our isp sent me the following :

Hi Michael,

We have looked into this further. BGP is configured on this circuit and the session is dropping due to lack of routing info. In your config it is setup to re distribute via rip. Can you change this to re distribute using BGP?

Regards,
Mike

is this a load of rubbish as the redistribute rip is only redistributing the local lan ?? what do you think

 

[lambent]

show ip bgp nei" in dublin and see check the BGP neighbour status.

Also do a "show ip bgp