Gateway of Last resort is set but traceroute comes back request timed out

[jaggallagher]

I am trying to configure failover with a gateway of last resort. I have 2 routers and each have there own ISP connection. One is our primary, and the other is our backup that also routes all of our wireless traffic. We have route-maps setup on the core switches to segment the 2 routes. The fail over from router 1 to router 2 works because there is no route-maps. So to get around that I have made router 2's gateway of last resort router 1. When i turn off router 2 outside facing interface the gateway of last resort changes to the connection to router 1 but the traceroute from the computer shows request timed out.

[Julio E. Moisa]

Hi

If the traffic is going from R2 to R1 and you are receiving request time out, it could be:

- Have you configured the R1's interface as NAT inside?  

- Have you verified if R1's is meeting the PC LAN through R2 or through other way.

- If you are using BGP on these routers have you configured next hop self? (Not really sure if you are using BGP hehe)

Hope it is useful

:-)

[jaggallagher]

Router 1 Conf

interface GigabitEthernet0/1
description Link to RT-2
ip address 172.22.253.1 255.255.255.252
no ip proxy-arp
ip nat inside
ip virtual-reassembly in
ip ospf cost 3
duplex auto
speed auto
no cdp enable
no mop enabled
!

Router 2 Conf

interface GigabitEthernet0/1
description Link to RT-1
ip address 172.22.253.2 255.255.255.252
no ip proxy-arp
ip nat inside
ip virtual-reassembly in
ip ospf cost 3
duplex auto
speed auto
no cdp enable
no mop enabled
!

We are using EIGRP for dynamic routing. 

When performing traceroute from a PC it goes from our core to router 2 and then when it should go to router 1 the request just times out. 

[Julio E. Moisa]

Hi,

Thank you, could you please verify how R1 is knowing the PC network, if it is through R2 or if R1 has an entry into the routing table.

[jaggallagher]

R1 has its own entry on the routing table of the PC Network.

[Julio E. Moisa]

Great, is it via R2?

[jaggallagher]

Im sorry i should have made that more clear. No R1 has its own entry in the routing table for PC network from the core switch. The topology is as follows. 2 routers each with there own separate ISP, then each router is connected to a ASA, and then both the ASA connect into the core switch. So each router gets the route for the PC Network directly from the switch.  

[Julio E. Moisa]

Hi

Got it, so it is:                     R1 ---- ISP1

                                        / 

CORE ------------ ASA 

                                        \

                                          R2 ---- IPS2

Is that correct? do you have a ASA cluster?

[jaggallagher]

                 RT 1   --------- ISP1

                /

          ASA

         /

Core

         \

           ASA

                 \

                  RT 2   --------- ISP1

The ASA are not in cluster they cant see each other. They are on different network segments. This is how the network was setup before I was hired so working with it.