Routing Problem

[jcetoute]

Both sides of a wan connection between our headquaters and a remote office show link up and pvc status active. But I am unable to ping any other nodes on either side except for the subinterfaces.

Both locations are equipped with a cisco 2600 series router, 3 3Com switches, a hub and a firewall. Please look at each router's configuration for any suggestions.

Headquaters:
interface Ethernet0/0
ip address X.X.X.153 255.255.255.248
no ip directed-broadcast

interface Serial0/0
no ip address
no ip directed-broadcast
encapsulation frame-relay IETF
frame-relay lmi-type ansi
!
interface Serial0/0.1 point-to-point
description Frame PVC DLCI 16 to PST
bandwidth 1544
ip address 192.168.100.62 255.255.255.252
no ip directed-broadcast
frame-relay interface-dlci 16
!
interface Serial0/0.2 point-to-point
description Frame Relay to Daytona
bandwidth 768
ip address 192.168.3.1 255.255.255.0
no ip directed-broadcast
frame-relay interface-dlci 122
!
interface Ethernet0/1
ip address 192.168.1.1 255.255.255.0
no ip directed-broadcast
!
interface Serial0/1
no ip address
no ip directed-broadcast
shutdown
!
interface Ethernet1/0
bandwidth 768
ip address 192.168.32.1 255.255.255.0
no ip directed-broadcast
shutdown
no fair-queue
!
ip classless
ip route 0.0.0.0 0.0.0.0 192.168.100.60
ip route 0.0.0.0 0.0.0.0 X.X.X.1
ip route 192.168.2.0 255.255.255.0 192.168.3.2
ip route 192.168.100.60 255.255.255.252 X.X.X.1
ip route X.X.X.152 255.255.255.248 192.168.100.60
no ip http server

Remote office:
interface FastEthernet0/0
description connected to Internal Network
ip address X.X.X.129 255.255.255.240
no ip directed-broadcast
no ip mroute-cache
no keepalive
speed 10
!
interface Serial0/0
no ip address
no ip directed-broadcast
encapsulation frame-relay IETF
no ip mroute-cache
service-module t1 remote-alarm-enable
cdp enable
frame-relay lmi-type ansi
!
interface Serial0/0.1 point-to-point
description connected to Frame Relay to PST DLSI 16
bandwidth 1544
ip address 192.168.100.70 255.255.255.252
no ip directed-broadcast
no ip mroute-cache
frame-relay interface-dlci 16
!
interface Serial0/0.2 point-to-point
description Frame Relay to WPB
ip address 192.168.3.2 255.255.255.0
no ip directed-broadcast
no ip mroute-cache
frame-relay interface-dlci 114
!
interface FastEthernet0/1
description connected to Internal IP Phones
no ip address
no ip directed-broadcast
no ip mroute-cache
shutdown
!
interface Ethernet1/0
ip address 192.168.2.1 255.255.255.0
no ip directed-broadcast
no ip mroute-cache
!
ip classless
ip route 0.0.0.0 0.0.0.0 X.X.X.1
ip route 0.0.0.0 0.0.0.0 192.168.100.68
ip route 192.168.3.0 255.255.255.0 192.168.3.1
ip route 192.168.100.68 255.255.255.252 X.X.X.1
ip route X.X.X.128 255.255.255.240 192.168.100.68
ip http server
!

Thank you.

 

[SF18C]

First question I have is what are the Firewalls doing? Possibly blocking ICMP echo? Second, what IP ranges are you pinging, I have a funny feeling about your routing set up also, but I can't put my finger on it! It's late I look at it again in the morning.

Good Luck

SF18C
CCNP, MCSE, A+, N+ & HPCC
Tis better to die on your feet than live on your knees!

 

[RichardHuang]

Your static routes configuration has problem.

ip route 0.0.0.0 0.0.0.0 192.168.100.60
ip route 0.0.0.0 0.0.0.0 X.X.X.1
For default route, you should keep only one of them.

Also, the remote office doesn't have the route back to the main office. Maybe you can add a line like this:
ip route 192.168.1.0 255.255.255.0 192.168.3.1

 

[jcetoute]

The firewalls are doing as you've guessed blocking ports but also work as DHCP for their respective locations.

I will also try to add that route to the remote site.

I appreciate all your help gentlemen and please send me any other suggestions you may have.