Which route?

[mrn]

Don't know if there is an easy answer to this.

From a unix platform I can telnet to an external address (10.209.209.209) through the default route on the server lets say 1.166.166.1 (our cisco router) (but cant ping / traceroute)

When I jump on the router I can't telnet to the external server and can't see any route or access list relating to the external address. (Cant ping or traceroute)

I can however traceroute from the external interface.

Is there anyway for me to tell what route or access list it could be using?

Regards Mike

Mike

"A foolproof method for sculpting an elephant: first, get a huge block of marble, then you chip away everything that doesn't look like an elephant."

http://www.airport-parking-site.co.uk/

 

[KiscoKid]

Hi Mike

If you've issued a 'show ip route' command on the Cisco router and cannot see the destination subnet as you've outlined, perhaps you have a default route instead. For instance do you see something like 'Gateway of last resort is x.x.x.x to network 0.0.0.0' listed above all your ip routes in the routing table? If so, this is likely the route being used to exit your network.

Regarding which access-list is blocking you, best thing to do is to examine if any access-lists have been placed on either the interface that is the default gateway for the local unix server or on the interface connected to the Internet. Try the 'show running' command and look for references to an 'ip access-group' under these interfaces. If any are there, these will be the access-lists you will need to examine to determine why you are being blocked.