Problem with IP routing

[Gemna888]

Hiii there,
I'm in a beginner networking course, and my group is struggling with our project. We put together 4 small networks, each connected to the first one which is "HQ".
I'm not sure where we're going wrong with setting up the routing. Using the exact same command, it seems some of the routes don't actually go to the "show ip route" table.
Network #3 (labeled in the packet tracer) can ipv4 ping with HQ (Network #1) and vice versa, but nothing else seems to work. All networks can ipv4 and ipv6 ping within their own networks no problem, so I don't think it's an addressing issue?
Hoping someone might be able to help us out.

Sorry, posted the show run and show ip routes below.
Now I do actually see the routes in show run I guess, so I'm not sure why the pings still fail...would posting a tracert help?

[Gemna888]

Oops, it's not letting me upload the packet tracer..haha. Standby.

[balaji.bandi]

what router device ? what IOS coder running ? You need to post show run and show ip route for the community help you.

as per the issue, this is more of routing issue - if all are connected to HQ - they are using p2p address space ? and Lan side using different address space that is not working ? give us example what is not working ?

My guess high level you can use static routes or introduce IGP (your choice OSPF or Eigrp ) so all the IP learn each other.

[Gemna888]

Sorry!
So all 4 routers are 2811s (project requirement) and switches are 2960s. We are trying to use basic static routing. The issue is that when I enter, say, "ip route 10.20.0.0 255.255.248.0 10.21.9.130" which are the addresses for Site #2 to try to reach Site #1 (HQ), I don't actually get an error, but when I "show ip route" it doesn't show up and the pings fail.

Here is show run for HQ's Router:

Current configuration : 2818 bytes

!

version 15.1

no service timestamps log datetime msec

no service timestamps debug datetime msec

service password-encryption

!

hostname R1-1

!

login block-for 180 attempts 4 within 120

!

!

enable secret 5 $1$mERr$OHRw5WmDMquOzGBEAXKc6.

!

!

!

!

!

!

no ip cef

ipv6 unicast-routing

!

no ipv6 cef

!

!

!

username R1-1 secret 5 $1$mERr$M2119fTo5AuY1m/el/Tzh0

!

!

license udi pid CISCO2811/K9 sn FTX10179DW7-

!

!

!

!

!

!

!

!

!

ip ssh version 1

no ip domain-lookup

ip domain-name Hashbrown.com

!

!

spanning-tree mode pvst

!

!

!

!

!

!

interface FastEthernet0/0

ip address 10.20.0.1 255.255.248.0

duplex auto

speed auto

ipv6 address FE80:20::2 link-local

ipv6 address 2001:DB8:ACAD:20A::2/64

ipv6 enable

!

interface FastEthernet0/1

ip address 10.20.8.1 255.255.254.0

duplex auto

speed auto

ipv6 address FE80:20::3 link-local

ipv6 address 2001:DB8:ACAD:20B::3/64

ipv6 enable

!

interface GigabitEthernet0/0/0

ip address 10.21.9.130 255.255.255.252

!

interface GigabitEthernet0/1/0

ip address 10.22.5.166 255.255.255.252

!

interface GigabitEthernet0/2/0

ip address 10.23.12.66 255.255.255.252

!

interface GigabitEthernet0/3/0

no ip address

shutdown

!

interface FastEthernet1/0

ip address 10.20.10.1 255.255.255.128

duplex auto

speed auto

ipv6 address FE80:20::4 link-local

ipv6 address 2001:DB8:ACAD:20C::4/64

ipv6 enable

!

interface FastEthernet1/1

ip address 10.20.10.129 255.255.255.192

duplex auto

speed auto

ipv6 address FE80:20::5 link-local

ipv6 address 2001:DB8:ACAD:20D::5/64

ipv6 enable

!

interface Vlan1

no ip address

shutdown

!

ip classless

ip route 10.22.0.0 255.255.252.0 10.22.5.165

ip route 10.22.4.0 255.255.255.0 10.22.5.165

ip route 10.22.5.0 255.255.255.128 10.22.5.165

ip route 10.22.5.128 255.255.255.224 10.22.5.165

ip route 10.22.5.164 255.255.255.252 10.22.5.165

ip route 10.23.12.32 255.255.255.224 10.23.12.65

ip route 10.23.8.0 255.255.252.0 10.23.12.65

ip route 10.23.0.0 255.255.248.0 10.23.12.65

ip route 10.23.12.64 255.255.255.252 10.23.12.65

ip route 10.23.12.0 255.255.255.224 10.23.12.65

ip route 10.21.9.120 255.255.255.252 10.21.9.129

ip route 10.21.9.128 255.255.255.252 10.21.9.129

!

ip flow-export version 9

!

ipv6 route 2001:DB8:ACAD:22A::/64 2001:DB8:ACAD:22E::1

ipv6 route 2001:DB8:ACAD:22B::/64 2001:DB8:ACAD:22E::1

ipv6 route 2001:DB8:ACAD:22C::/64 2001:DB8:ACAD:22E::1

ipv6 route 2001:DB8:ACAD:22D::/64 2001:DB8:ACAD:22E::1

!

ip access-list extended sl_def_acl

deny tcp any any eq telnet

deny tcp any any eq www

deny tcp any any eq 22

permit tcp any any eq 22

!

banner motd ^CAuthorized Access Only!^C

!

!

!

!

line con 0

password 7 08094D5D011B17180505

login

!

line aux 0

!

line vty 0 4

exec-timeout 6 0

password 7 08094D5D011B17180505

login local

transport input ssh

line vty 5 15

password 7 08094D5D011B17180505

login

!

!

!

end

and show ip route:

Gateway of last resort is not set

10.0.0.0/8 is variably subnetted, 23 subnets, 9 masks

C 10.20.0.0/21 is directly connected, FastEthernet0/0

L 10.20.0.1/32 is directly connected, FastEthernet0/0

C 10.20.8.0/23 is directly connected, FastEthernet0/1

L 10.20.8.1/32 is directly connected, FastEthernet0/1

C 10.20.10.0/25 is directly connected, FastEthernet1/0

L 10.20.10.1/32 is directly connected, FastEthernet1/0

C 10.20.10.128/26 is directly connected, FastEthernet1/1

L 10.20.10.129/32 is directly connected, FastEthernet1/1

S 10.21.9.120/30 [1/0] via 10.21.9.129

C 10.21.9.128/30 is directly connected, GigabitEthernet0/0/0

L 10.21.9.130/32 is directly connected, GigabitEthernet0/0/0

S 10.22.0.0/22 [1/0] via 10.22.5.165

S 10.22.4.0/24 [1/0] via 10.22.5.165

S 10.22.5.0/25 [1/0] via 10.22.5.165

S 10.22.5.128/27 [1/0] via 10.22.5.165

C 10.22.5.164/30 is directly connected, GigabitEthernet0/1/0

L 10.22.5.166/32 is directly connected, GigabitEthernet0/1/0

S 10.23.0.0/21 [1/0] via 10.23.12.65

S 10.23.8.0/22 [1/0] via 10.23.12.65

S 10.23.12.0/27 [1/0] via 10.23.12.65

S 10.23.12.32/27 [1/0] via 10.23.12.65

C 10.23.12.64/30 is directly connected, GigabitEthernet0/2/0

L 10.23.12.66/32 is directly connected, GigabitEthernet0/2/0


Same for Site #2 which cannot ping to any other site:

Current configuration : 3239 bytes

!

version 15.1

no service timestamps log datetime msec

no service timestamps debug datetime msec

service password-encryption

security passwords min-length 10

!

hostname R2-1

!

login block-for 180 attempts 4 within 120

!

!

enable secret 5 $1$mERr$OHRw5WmDMquOzGBEAXKc6.

!

!

!

!

!

!

no ip cef

ipv6 unicast-routing

!

no ipv6 cef

!

!

!

username R2-1 secret 5 $1$mERr$M2119fTo5AuY1m/el/Tzh0

!

!

license udi pid CISCO2811/K9 sn FTX1017V7HP-

!

!

!

!

!

!

!

!

!

!

!

spanning-tree mode pvst

!

!

!

!

!

!

interface FastEthernet0/0

ip address 10.21.8.1 255.255.255.0

duplex auto

speed auto

ipv6 address FE80:21::2 link-local

ipv6 address 2001:DB8:ACAD:21A::2/64

ipv6 address 2001:DB8:ACAD:21A::/64 eui-64

ipv6 address 2001:DB8:ACAD:21E::/64 eui-64

ipv6 address link-local FE80:21::1/64

ipv6 address link-local FE80:21::2/64

ipv6 enable

!

interface FastEthernet0/1

ip address 10.21.9.65 255.255.255.192

duplex auto

speed auto

ipv6 address FE80:21::3 link-local

ipv6 address 2001:DB8:ACAD:21B::3/64

ipv6 address 2001:DB8:ACAD:21B::/64 eui-64

ipv6 address link-local FE80:21::3/64

ipv6 address eui-64 2001:DB8:ACAD:21::3/64

ipv6 enable

!

interface GigabitEthernet0/0/0

ip address 10.21.9.129 255.255.255.252

!

interface GigabitEthernet0/1/0

no ip address

shutdown

!

interface GigabitEthernet0/2/0

no ip address

shutdown

!

interface FastEthernet1/0

ip address 10.21.0.1 255.255.248.0

duplex auto

speed auto

ipv6 address FE80:21::4 link-local

ipv6 address 2001:DB8:ACAD:21C::4/64

ipv6 address 2001:DB8:ACAD:21C::/64 eui-64

ipv6 address eui-64 2001:DB8:ACAD:21::4/64

ipv6 address link-local FE80:21::4/64

ipv6 enable

!

interface FastEthernet1/1

ip address 10.21.9.1 255.255.255.252

duplex auto

speed auto

ipv6 address FE80:21::5 link-local

ipv6 address 2001:DB8:ACAD:21D::5/64

ipv6 address 2001:DB8:ACAD:21D::/64 eui-64

ipv6 address eui-64 2001:DB8:ACAD:21::5/64

ipv6 address link-local FE80:21::5/64

ipv6 enable

!

interface Vlan1

no ip address

shutdown

!

ip classless

ip route 10.20.0.0 255.255.248.0 10.21.9.130

ip route 10.20.8.0 255.255.254.0 10.21.9.130

ip route 10.20.10.0 255.255.255.128 10.21.9.130

ip route 10.20.10.128 255.255.255.192 10.21.9.130

ip route 10.20.10.192 255.255.255.248 10.21.9.130

ip route 10.22.0.0 255.255.252.0 10.22.5.166

ip route 10.22.4.0 255.255.255.0 10.22.5.166

ip route 10.22.5.0 255.255.255.128 10.22.5.166

ip route 10.22.5.128 255.255.255.224 10.22.5.166

ip route 10.22.5.164 255.255.255.252 10.22.5.166

ip route 10.23.12.32 255.255.255.224 10.23.12.66

ip route 10.23.12.0 255.255.252.0 10.23.12.66

ip route 10.23.8.0 255.255.248.0 10.23.12.66

ip route 10.23.0.0 255.255.255.252 10.23.12.66

ip route 10.20.10.192 255.255.255.248 10.29.9.130

ip route 10.22.0.0 255.255.252.0 10.21.9.130

ip route 10.22.0.0 255.255.255.0 10.22.5.166

ip route 10.22.4.0 255.255.255.0 10.22.5.165

!

ip flow-export version 9

!

!

ip access-list extended sl_def_acl

deny tcp any any eq telnet

deny tcp any any eq www

deny tcp any any eq 22

permit tcp any any eq 22

!

banner motd ^CAuthorized Access Only!^C

!

!

!

!

line con 0

password 7 08094D5D011B171805054D

login

!

line aux 0

!

line vty 0 4

exec-timeout 6 0

login local

transport input ssh

line vty 5 15

login

!

!

!

end

Gateway of last resort is not set

10.0.0.0/8 is variably subnetted, 16 subnets, 9 masks

S 10.20.0.0/21 [1/0] via 10.21.9.130

S 10.20.8.0/23 [1/0] via 10.21.9.130

S 10.20.10.0/25 [1/0] via 10.21.9.130

S 10.20.10.128/26 [1/0] via 10.21.9.130

S 10.20.10.192/29 [1/0] via 10.21.9.130

C 10.21.0.0/21 is directly connected, FastEthernet1/0

L 10.21.0.1/32 is directly connected, FastEthernet1/0

C 10.21.8.0/24 is directly connected, FastEthernet0/0

L 10.21.8.1/32 is directly connected, FastEthernet0/0

C 10.21.9.0/30 is directly connected, FastEthernet1/1

L 10.21.9.1/32 is directly connected, FastEthernet1/1

C 10.21.9.64/26 is directly connected, FastEthernet0/1

L 10.21.9.65/32 is directly connected, FastEthernet0/1

C 10.21.9.128/30 is directly connected, GigabitEthernet0/0/0

L 10.21.9.129/32 is directly connected, GigabitEthernet0/0/0

S 10.22.0.0/22 [1/0] via 10.21.9.130

[balaji.bandi]

Lets do simple test :

From R1  are you able to ping below IP address :

10.21.9.129

10.21.8.1

10.21.9.65

From R2 are you able to ping below IP address :

10.21.9.130

10.20.0.1

I see command no ip cef - is this intention - make sure ip cef enable.

Some simulator do need to add ip routing work as expected

go add global command  ip routing

check show cdp neighbour - they are connected to right interface each other.

[Gemna888]

From R1 are you able to ping below IP address :

10.21.9.129 - YES

10.21.8.1 - NO

10.21.9.65 - NO

From R2 are you able to ping below IP address :

10.21.9.130 - YES

10.20.0.1 - NO

I do not think the no ip cef is intentional. I'm not too familiar with that one, to be honest. I went into both routers and entered "ip cef" and "ip routing". Did another quick testing across sites without luck.

cdp neighbours does appear to be corrects

If it makes a difference, when I try to ping from Site #2 to Site #1, I get "request time out". When I try to ping from Site #1 to Site #2, I get "destination host unreachable".

[balaji.bandi]

Looks for me the IP you pinging belong to the interfaces and interfaces not up as it looks like for now.

can you post from both the routers 

#show ip interface brief

Some more test on the same device :

From R1 are you able to ping all the local configured interfaces ?

same case with R2 ?