12-16-2021 04:21 AM - edited 12-17-2021 02:20 PM
Hi everyone,
I've got small LAN, two routers 2600 series one and 1700 series one and laptop computer connected to the 2600 one.
Pings both ways get through fine.
C:\Users\witek>ping 192.168.2.1
Pinging 192.168.2.1 with 32 bytes of data:
Reply from 192.168.2.1: bytes=32 time=1ms TTL=254
Reply from 192.168.2.1: bytes=32 time=1ms TTL=254
Reply from 192.168.2.1: bytes=32 time=1ms TTL=254
Reply from 192.168.2.1: bytes=32 time=1ms TTL=254
Ping statistics for 192.168.2.1:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 1ms, Maximum = 1ms, Average = 1ms
adam2#ping 192.168.1.100
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.1.100, timeout is 2 seconds:
.!!!!
Success rate is 80 percent (4/5), round-trip min/avg/max = 1/2/4 ms
Tracert command produces traceroute from the laptop via 2600 router to 1700 router just fine but when I try to traceroute from 1700 router through 2600 router to laptop it only gets to 2600 router and then I get the stars.
C:\Users\witek>tracert 192.168.2.1
Tracing route to 192.168.2.1 over a maximum of 30 hops
1 1 ms 1 ms 1 ms 192.168.1.1
2 1 ms 1 ms 2 ms 192.168.2.1
Trace complete.
adam2#traceroute 192.168.1.100
Type escape sequence to abort.
Tracing the route to 192.168.1.100
1 192.168.2.2 0 msec 0 msec 4 msec
2 * * *
3 * * *
and the stars till no. 30
With a help of members of this community(thanks a lot) I discovered that tarceroute on cisco routers sends UDP packets and I did another inbound rule for incoming UDP packets allowing them on all ports (before I had to do one for ICMP Echo Request to be able to allow pings). I even turn the windows firewall completely off but so far had no luck with getting the traceroute command through to laptop. Here is a startup-config on 2600 router, maybe that will help?
bartek#show startup-config
Using 1137 out of 29688 bytes
!
version 12.2
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname bartek
!
enable secret 5 $1$e3y1$mP5ucOkByHS6hutqhD.BA/
enable password 7 0316541E120A331E
!
ip subnet-zero
!
!
!
!
!
!
!
interface Ethernet0/0
description siec lokalna 192.168.1.0
ip address 192.168.1.1 255.255.255.0
no ip mroute-cache
half-duplex
no mop enabled
!
interface BRI0/0
no ip address
no ip mroute-cache
shutdown
!
interface Serial0/0
no ip address
no ip mroute-cache
shutdown
no fair-queue
!
interface Ethernet0/1
description SIEC LOKALNA 192.168.2.0
ip address 192.168.2.2 255.255.255.0
no ip mroute-cache
half-duplex
!
ip classless
ip http server
!
!
banner exec ^C
JESTEM BANNER exec POJAWIAM SIE PRZED LOGOWANIEM DO TRYBU UPRZYWILEJOWANEGO ^C
banner login ^C
WITAM JESTEM BANNER login I POJAWIAM SIE PO motd LECZ PRZED LOGOWANIEM ^C
banner motd ^C
Uwaga!!!
Logujsz sie na router. Wszystkie czynnosci sa rejestrowane. ^C
!
line con 0
exec-timeout 60 0
password 7 01120205563405002F
logging synchronous
login
line aux 0
line vty 0 4
password 7 111B16100317195F
login
!
!
end
Any ideas why doesn't traceroute get through greatly appreciated.
12-21-2021 12:23 AM
Hello
@witek77 wrote:
tarceroute on cisco routers sends UDP packets and I did another inbound rule for incoming UDP packets allowing them on all ports (before I had to do one for ICMP Echo Request to
Sounds you have an access list being applied , if so need to make sure both icmp/udp is being allowed, in fact i would rewove all ACL's and test again, if that work you know its as a result of your acl, Also suggest you make all interfaces FULL DUPLEX
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide