12-01-2023 10:13 AM - edited 12-01-2023 10:28 AM
Hiii there,
I'm in a beginner networking course, and my group is struggling with our project. We put together 4 small networks, each connected to the first one which is "HQ".
I'm not sure where we're going wrong with setting up the routing. Using the exact same command, it seems some of the routes don't actually go to the "show ip route" table.
Network #3 (labeled in the packet tracer) can ipv4 ping with HQ (Network #1) and vice versa, but nothing else seems to work. All networks can ipv4 and ipv6 ping within their own networks no problem, so I don't think it's an addressing issue?
Hoping someone might be able to help us out.
Sorry, posted the show run and show ip routes below.
Now I do actually see the routes in show run I guess, so I'm not sure why the pings still fail...would posting a tracert help?
12-01-2023 10:14 AM
Oops, it's not letting me upload the packet tracer..haha. Standby.
12-01-2023 10:17 AM
what router device ? what IOS coder running ? You need to post show run and show ip route for the community help you.
as per the issue, this is more of routing issue - if all are connected to HQ - they are using p2p address space ? and Lan side using different address space that is not working ? give us example what is not working ?
My guess high level you can use static routes or introduce IGP (your choice OSPF or Eigrp ) so all the IP learn each other.
12-01-2023 10:26 AM
Sorry!
So all 4 routers are 2811s (project requirement) and switches are 2960s. We are trying to use basic static routing. The issue is that when I enter, say, "ip route 10.20.0.0 255.255.248.0 10.21.9.130" which are the addresses for Site #2 to try to reach Site #1 (HQ), I don't actually get an error, but when I "show ip route" it doesn't show up and the pings fail.
Here is show run for HQ's Router:
Current configuration : 2818 bytes
!
version 15.1
no service timestamps log datetime msec
no service timestamps debug datetime msec
service password-encryption
!
hostname R1-1
!
login block-for 180 attempts 4 within 120
!
!
enable secret 5 $1$mERr$OHRw5WmDMquOzGBEAXKc6.
!
!
!
!
!
!
no ip cef
ipv6 unicast-routing
!
no ipv6 cef
!
!
!
username R1-1 secret 5 $1$mERr$M2119fTo5AuY1m/el/Tzh0
!
!
license udi pid CISCO2811/K9 sn FTX10179DW7-
!
!
!
!
!
!
!
!
!
ip ssh version 1
no ip domain-lookup
ip domain-name Hashbrown.com
!
!
spanning-tree mode pvst
!
!
!
!
!
!
interface FastEthernet0/0
ip address 10.20.0.1 255.255.248.0
duplex auto
speed auto
ipv6 address FE80:20::2 link-local
ipv6 address 2001:DB8:ACAD:20A::2/64
ipv6 enable
!
interface FastEthernet0/1
ip address 10.20.8.1 255.255.254.0
duplex auto
speed auto
ipv6 address FE80:20::3 link-local
ipv6 address 2001:DB8:ACAD:20B::3/64
ipv6 enable
!
interface GigabitEthernet0/0/0
ip address 10.21.9.130 255.255.255.252
!
interface GigabitEthernet0/1/0
ip address 10.22.5.166 255.255.255.252
!
interface GigabitEthernet0/2/0
ip address 10.23.12.66 255.255.255.252
!
interface GigabitEthernet0/3/0
no ip address
shutdown
!
interface FastEthernet1/0
ip address 10.20.10.1 255.255.255.128
duplex auto
speed auto
ipv6 address FE80:20::4 link-local
ipv6 address 2001:DB8:ACAD:20C::4/64
ipv6 enable
!
interface FastEthernet1/1
ip address 10.20.10.129 255.255.255.192
duplex auto
speed auto
ipv6 address FE80:20::5 link-local
ipv6 address 2001:DB8:ACAD:20D::5/64
ipv6 enable
!
interface Vlan1
no ip address
shutdown
!
ip classless
ip route 10.22.0.0 255.255.252.0 10.22.5.165
ip route 10.22.4.0 255.255.255.0 10.22.5.165
ip route 10.22.5.0 255.255.255.128 10.22.5.165
ip route 10.22.5.128 255.255.255.224 10.22.5.165
ip route 10.22.5.164 255.255.255.252 10.22.5.165
ip route 10.23.12.32 255.255.255.224 10.23.12.65
ip route 10.23.8.0 255.255.252.0 10.23.12.65
ip route 10.23.0.0 255.255.248.0 10.23.12.65
ip route 10.23.12.64 255.255.255.252 10.23.12.65
ip route 10.23.12.0 255.255.255.224 10.23.12.65
ip route 10.21.9.120 255.255.255.252 10.21.9.129
ip route 10.21.9.128 255.255.255.252 10.21.9.129
!
ip flow-export version 9
!
ipv6 route 2001:DB8:ACAD:22A::/64 2001:DB8:ACAD:22E::1
ipv6 route 2001:DB8:ACAD:22B::/64 2001:DB8:ACAD:22E::1
ipv6 route 2001:DB8:ACAD:22C::/64 2001:DB8:ACAD:22E::1
ipv6 route 2001:DB8:ACAD:22D::/64 2001:DB8:ACAD:22E::1
!
ip access-list extended sl_def_acl
deny tcp any any eq telnet
deny tcp any any eq www
deny tcp any any eq 22
permit tcp any any eq 22
!
banner motd ^CAuthorized Access Only!^C
!
!
!
!
line con 0
password 7 08094D5D011B17180505
login
!
line aux 0
!
line vty 0 4
exec-timeout 6 0
password 7 08094D5D011B17180505
login local
transport input ssh
line vty 5 15
password 7 08094D5D011B17180505
login
!
!
!
end
and show ip route:
Gateway of last resort is not set
10.0.0.0/8 is variably subnetted, 23 subnets, 9 masks
C 10.20.0.0/21 is directly connected, FastEthernet0/0
L 10.20.0.1/32 is directly connected, FastEthernet0/0
C 10.20.8.0/23 is directly connected, FastEthernet0/1
L 10.20.8.1/32 is directly connected, FastEthernet0/1
C 10.20.10.0/25 is directly connected, FastEthernet1/0
L 10.20.10.1/32 is directly connected, FastEthernet1/0
C 10.20.10.128/26 is directly connected, FastEthernet1/1
L 10.20.10.129/32 is directly connected, FastEthernet1/1
S 10.21.9.120/30 [1/0] via 10.21.9.129
C 10.21.9.128/30 is directly connected, GigabitEthernet0/0/0
L 10.21.9.130/32 is directly connected, GigabitEthernet0/0/0
S 10.22.0.0/22 [1/0] via 10.22.5.165
S 10.22.4.0/24 [1/0] via 10.22.5.165
S 10.22.5.0/25 [1/0] via 10.22.5.165
S 10.22.5.128/27 [1/0] via 10.22.5.165
C 10.22.5.164/30 is directly connected, GigabitEthernet0/1/0
L 10.22.5.166/32 is directly connected, GigabitEthernet0/1/0
S 10.23.0.0/21 [1/0] via 10.23.12.65
S 10.23.8.0/22 [1/0] via 10.23.12.65
S 10.23.12.0/27 [1/0] via 10.23.12.65
S 10.23.12.32/27 [1/0] via 10.23.12.65
C 10.23.12.64/30 is directly connected, GigabitEthernet0/2/0
L 10.23.12.66/32 is directly connected, GigabitEthernet0/2/0
Same for Site #2 which cannot ping to any other site:
Current configuration : 3239 bytes
!
version 15.1
no service timestamps log datetime msec
no service timestamps debug datetime msec
service password-encryption
security passwords min-length 10
!
hostname R2-1
!
login block-for 180 attempts 4 within 120
!
!
enable secret 5 $1$mERr$OHRw5WmDMquOzGBEAXKc6.
!
!
!
!
!
!
no ip cef
ipv6 unicast-routing
!
no ipv6 cef
!
!
!
username R2-1 secret 5 $1$mERr$M2119fTo5AuY1m/el/Tzh0
!
!
license udi pid CISCO2811/K9 sn FTX1017V7HP-
!
!
!
!
!
!
!
!
!
!
!
spanning-tree mode pvst
!
!
!
!
!
!
interface FastEthernet0/0
ip address 10.21.8.1 255.255.255.0
duplex auto
speed auto
ipv6 address FE80:21::2 link-local
ipv6 address 2001:DB8:ACAD:21A::2/64
ipv6 address 2001:DB8:ACAD:21A::/64 eui-64
ipv6 address 2001:DB8:ACAD:21E::/64 eui-64
ipv6 address link-local FE80:21::1/64
ipv6 address link-local FE80:21::2/64
ipv6 enable
!
interface FastEthernet0/1
ip address 10.21.9.65 255.255.255.192
duplex auto
speed auto
ipv6 address FE80:21::3 link-local
ipv6 address 2001:DB8:ACAD:21B::3/64
ipv6 address 2001:DB8:ACAD:21B::/64 eui-64
ipv6 address link-local FE80:21::3/64
ipv6 address eui-64 2001:DB8:ACAD:21::3/64
ipv6 enable
!
interface GigabitEthernet0/0/0
ip address 10.21.9.129 255.255.255.252
!
interface GigabitEthernet0/1/0
no ip address
shutdown
!
interface GigabitEthernet0/2/0
no ip address
shutdown
!
interface FastEthernet1/0
ip address 10.21.0.1 255.255.248.0
duplex auto
speed auto
ipv6 address FE80:21::4 link-local
ipv6 address 2001:DB8:ACAD:21C::4/64
ipv6 address 2001:DB8:ACAD:21C::/64 eui-64
ipv6 address eui-64 2001:DB8:ACAD:21::4/64
ipv6 address link-local FE80:21::4/64
ipv6 enable
!
interface FastEthernet1/1
ip address 10.21.9.1 255.255.255.252
duplex auto
speed auto
ipv6 address FE80:21::5 link-local
ipv6 address 2001:DB8:ACAD:21D::5/64
ipv6 address 2001:DB8:ACAD:21D::/64 eui-64
ipv6 address eui-64 2001:DB8:ACAD:21::5/64
ipv6 address link-local FE80:21::5/64
ipv6 enable
!
interface Vlan1
no ip address
shutdown
!
ip classless
ip route 10.20.0.0 255.255.248.0 10.21.9.130
ip route 10.20.8.0 255.255.254.0 10.21.9.130
ip route 10.20.10.0 255.255.255.128 10.21.9.130
ip route 10.20.10.128 255.255.255.192 10.21.9.130
ip route 10.20.10.192 255.255.255.248 10.21.9.130
ip route 10.22.0.0 255.255.252.0 10.22.5.166
ip route 10.22.4.0 255.255.255.0 10.22.5.166
ip route 10.22.5.0 255.255.255.128 10.22.5.166
ip route 10.22.5.128 255.255.255.224 10.22.5.166
ip route 10.22.5.164 255.255.255.252 10.22.5.166
ip route 10.23.12.32 255.255.255.224 10.23.12.66
ip route 10.23.12.0 255.255.252.0 10.23.12.66
ip route 10.23.8.0 255.255.248.0 10.23.12.66
ip route 10.23.0.0 255.255.255.252 10.23.12.66
ip route 10.20.10.192 255.255.255.248 10.29.9.130
ip route 10.22.0.0 255.255.252.0 10.21.9.130
ip route 10.22.0.0 255.255.255.0 10.22.5.166
ip route 10.22.4.0 255.255.255.0 10.22.5.165
!
ip flow-export version 9
!
!
ip access-list extended sl_def_acl
deny tcp any any eq telnet
deny tcp any any eq www
deny tcp any any eq 22
permit tcp any any eq 22
!
banner motd ^CAuthorized Access Only!^C
!
!
!
!
line con 0
password 7 08094D5D011B171805054D
login
!
line aux 0
!
line vty 0 4
exec-timeout 6 0
login local
transport input ssh
line vty 5 15
login
!
!
!
end
Gateway of last resort is not set
10.0.0.0/8 is variably subnetted, 16 subnets, 9 masks
S 10.20.0.0/21 [1/0] via 10.21.9.130
S 10.20.8.0/23 [1/0] via 10.21.9.130
S 10.20.10.0/25 [1/0] via 10.21.9.130
S 10.20.10.128/26 [1/0] via 10.21.9.130
S 10.20.10.192/29 [1/0] via 10.21.9.130
C 10.21.0.0/21 is directly connected, FastEthernet1/0
L 10.21.0.1/32 is directly connected, FastEthernet1/0
C 10.21.8.0/24 is directly connected, FastEthernet0/0
L 10.21.8.1/32 is directly connected, FastEthernet0/0
C 10.21.9.0/30 is directly connected, FastEthernet1/1
L 10.21.9.1/32 is directly connected, FastEthernet1/1
C 10.21.9.64/26 is directly connected, FastEthernet0/1
L 10.21.9.65/32 is directly connected, FastEthernet0/1
C 10.21.9.128/30 is directly connected, GigabitEthernet0/0/0
L 10.21.9.129/32 is directly connected, GigabitEthernet0/0/0
S 10.22.0.0/22 [1/0] via 10.21.9.130
12-01-2023 10:50 AM - edited 12-01-2023 10:51 AM
Lets do simple test :
From R1 are you able to ping below IP address :
10.21.9.129
10.21.8.1
10.21.9.65
From R2 are you able to ping below IP address :
10.21.9.130
10.20.0.1
I see command no ip cef - is this intention - make sure ip cef enable.
Some simulator do need to add ip routing work as expected
go add global command ip routing
check show cdp neighbour - they are connected to right interface each other.
12-01-2023 11:10 AM
From R1 are you able to ping below IP address :
10.21.9.129 - YES
10.21.8.1 - NO
10.21.9.65 - NO
From R2 are you able to ping below IP address :
10.21.9.130 - YES
10.20.0.1 - NO
I do not think the no ip cef is intentional. I'm not too familiar with that one, to be honest. I went into both routers and entered "ip cef" and "ip routing". Did another quick testing across sites without luck.
cdp neighbours does appear to be corrects
If it makes a difference, when I try to ping from Site #2 to Site #1, I get "request time out". When I try to ping from Site #1 to Site #2, I get "destination host unreachable".
12-01-2023 01:43 PM - edited 12-01-2023 01:44 PM
Looks for me the IP you pinging belong to the interfaces and interfaces not up as it looks like for now.
can you post from both the routers
#show ip interface brief
Some more test on the same device :
From R1 are you able to ping all the local configured interfaces ?
same case with R2 ?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide