Options
Cant Ping DSL Router.....
i have a cable modem and behind it i have 1751 router.
I can ping the dsl router but when i source the inside network it wont ping. Does anyone know why that is??
site1#ping 192.168.1.5
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.1.5, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/4 ms
site1#ping 192.168.1.5 source fa0/0
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.1.5, timeout is 2 seconds:
Packet sent with a source address of 172.17.13.3
.....
Success rate is 0 percent (0/5)
Heres the config...
version 12.3
service timestamps debug datetime msec localtime
service timestamps log datetime msec localtime
service password-encryption
!
hostname site1
!
boot-start-marker
boot-end-marker
!
logging buffered 4096 debugging
enable secret 5 $4qSa0
!
no aaa new-model
!
resource policy
!
memory-size iomem 15
clock timezone EST -5
clock summer-time EDT recurring 2 Sun Mar 2:00 1 Sun Nov 2:00
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
ip subnet-zero
!
!
no ip dhcp use vrf connected
ip dhcp excluded-address 172.17.13.1 172.17.13.199
!
ip dhcp pool site1
network 172.17.13.0 255.255.255.0
default-router 172.17.13.1
dns-server 172.17.0.77 172.17.0.76
option 150 ip 172.17.100.2 172.17.100.1
domain-name
netbios-name-server 172.17.0.77
netbios-node-type h-node
!
!
ip cef
no ip domain lookup
ip domain name thdg.com
no ip ips deny-action ips-interface
!
no ftp-server write-enable
!
!
!
username netech privilege 15 secret 5cGBtPfW10
username admin secret 5 $fCA3f8/
!
!
no crypto isakmp ccm
!
!
crypto ipsec client ezvpn VPN
connect auto
group s3curehom3 key 23r
mode network-extension
peer 1.2.3.4
username me password me
xauth userid mode local
!
!
!
interface Tunnel13
bandwidth 128
ip address 172.17.253.42 255.255.255.252
ip access-group NOVOIP out
tunnel source 192.168.1.30
tunnel destination
!
interface Loopback0
bandwidth 256
ip address 172.17.255.13 255.255.255.255
!
interface Ethernet0/0
ip address 192.168.1.30 255.255.255.0
ip access-group PROTECT in
ip virtual-reassembly max-reassemblies 64
full-duplex
crypto ipsec client ezvpn VPN
!
interface FastEthernet0/0
ip address 172.17.13.3 255.255.255.0
ip access-group NEWNOVOIP out
ip virtual-reassembly
ip ospf cost 1
no ip mroute-cache
speed auto
full-duplex
standby ip 172.17.13.1
standby priority 90
standby preempt
crypto ipsec client ezvpn VPN inside
!
router ospf 1
log-adjacency-changes
network 172.17.13.3 0.0.0.0 area 0
!
ip default-gateway 172.17.13.1
ip classless
ip route 0.0.0.0 0.0.0.0 1.2.3.4
ip route 1.2.3.4 255.255.255.0 192.168.1.5
ip route 2.2.2.2 255.255.255.0 192.168.1.5
ip route 3.3.3.3 255.255.255.0 192.168.1.5
ip route 172.17.255.0 255.255.255.0 192.168.1.5
no ip http server
no ip http secure-server
!
!
!
!
ip access-list extended GRE
permit gre 172.17.255.0 0.0.0.255 172.17.255.0 0.0.0.255
ip access-list extended NEWNOVOIP
deny ip any host 172.17.100.1
deny ip host 172.17.100.1 any
deny ip any host 172.17.100.2
deny ip host 172.17.100.2 any
permit ip any any
ip access-list extended NOVOIP
deny udp any any range 16384 32767
deny tcp any any eq 1720
deny tcp any any eq 2000
permit ip any any
ip access-list extended PROTECT
<REMOVED>
deny ip any any
logging trap warnings
!
!
control-plane
!
!
line con 0
line aux 0
line vty 0 4
exec-timeout 180 0
password 7 10413
login local
line vty 5 15
login local
!
ntp clock-period 17179914
ntp server 192.5.41.40
ntp server 172.17.0.11
ntp server 172.17.0.77 prefer
end
I can ping the dsl router but when i source the inside network it wont ping. Does anyone know why that is??
site1#ping 192.168.1.5
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.1.5, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/4 ms
site1#ping 192.168.1.5 source fa0/0
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.1.5, timeout is 2 seconds:
Packet sent with a source address of 172.17.13.3
.....
Success rate is 0 percent (0/5)
Heres the config...
version 12.3
service timestamps debug datetime msec localtime
service timestamps log datetime msec localtime
service password-encryption
!
hostname site1
!
boot-start-marker
boot-end-marker
!
logging buffered 4096 debugging
enable secret 5 $4qSa0
!
no aaa new-model
!
resource policy
!
memory-size iomem 15
clock timezone EST -5
clock summer-time EDT recurring 2 Sun Mar 2:00 1 Sun Nov 2:00
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
ip subnet-zero
!
!
no ip dhcp use vrf connected
ip dhcp excluded-address 172.17.13.1 172.17.13.199
!
ip dhcp pool site1
network 172.17.13.0 255.255.255.0
default-router 172.17.13.1
dns-server 172.17.0.77 172.17.0.76
option 150 ip 172.17.100.2 172.17.100.1
domain-name
netbios-name-server 172.17.0.77
netbios-node-type h-node
!
!
ip cef
no ip domain lookup
ip domain name thdg.com
no ip ips deny-action ips-interface
!
no ftp-server write-enable
!
!
!
username netech privilege 15 secret 5cGBtPfW10
username admin secret 5 $fCA3f8/
!
!
no crypto isakmp ccm
!
!
crypto ipsec client ezvpn VPN
connect auto
group s3curehom3 key 23r
mode network-extension
peer 1.2.3.4
username me password me
xauth userid mode local
!
!
!
interface Tunnel13
bandwidth 128
ip address 172.17.253.42 255.255.255.252
ip access-group NOVOIP out
tunnel source 192.168.1.30
tunnel destination
!
interface Loopback0
bandwidth 256
ip address 172.17.255.13 255.255.255.255
!
interface Ethernet0/0
ip address 192.168.1.30 255.255.255.0
ip access-group PROTECT in
ip virtual-reassembly max-reassemblies 64
full-duplex
crypto ipsec client ezvpn VPN
!
interface FastEthernet0/0
ip address 172.17.13.3 255.255.255.0
ip access-group NEWNOVOIP out
ip virtual-reassembly
ip ospf cost 1
no ip mroute-cache
speed auto
full-duplex
standby ip 172.17.13.1
standby priority 90
standby preempt
crypto ipsec client ezvpn VPN inside
!
router ospf 1
log-adjacency-changes
network 172.17.13.3 0.0.0.0 area 0
!
ip default-gateway 172.17.13.1
ip classless
ip route 0.0.0.0 0.0.0.0 1.2.3.4
ip route 1.2.3.4 255.255.255.0 192.168.1.5
ip route 2.2.2.2 255.255.255.0 192.168.1.5
ip route 3.3.3.3 255.255.255.0 192.168.1.5
ip route 172.17.255.0 255.255.255.0 192.168.1.5
no ip http server
no ip http secure-server
!
!
!
!
ip access-list extended GRE
permit gre 172.17.255.0 0.0.0.255 172.17.255.0 0.0.0.255
ip access-list extended NEWNOVOIP
deny ip any host 172.17.100.1
deny ip host 172.17.100.1 any
deny ip any host 172.17.100.2
deny ip host 172.17.100.2 any
permit ip any any
ip access-list extended NOVOIP
deny udp any any range 16384 32767
deny tcp any any eq 1720
deny tcp any any eq 2000
permit ip any any
ip access-list extended PROTECT
<REMOVED>
deny ip any any
logging trap warnings
!
!
control-plane
!
!
line con 0
line aux 0
line vty 0 4
exec-timeout 180 0
password 7 10413
login local
line vty 5 15
login local
!
ntp clock-period 17179914
ntp server 192.5.41.40
ntp server 172.17.0.11
ntp server 172.17.0.77 prefer
end