Re: SMTP 25 Problem

wasiimcisco · ‎06-06-2011

Hi,

I have Ciso 1841 on branch side which is connected through the MPLS cloud (GRE with OSPF) with head office. Users are able to work (oracle, email, Internet etc) through the head office DataCenter.

But from the branch I am not able to do the telnet on exchange server on port 25.

This is requirement of Scanner which require port 25 to be open for email sending.

I am running GRE Tunnel between head office and branch. Attached is the configuration of Branch and head office.

There is no firewall between Branch and head office exchange.

Branch -----------WAN Colud-------->Head office ------------------->Core switch-------------------->Access switch------------------> Exchange server (192.168.200.147)

Interesting I can do the telnet from the user side and router which are located on the another branch. I have similar setup and similar configuration on that branch as well.

Please let me know why SMTP 25 is not working whereas other applications Internet etc is working fine.

Please help me out how to make this possible.

Giuseppe Larosa · ‎06-06-2011

Hello Wasiim,

if there isn't any firewall on the path between the branch and the exchange server, I would look at the server configuration it might have a list of trusted IP subnets or a white list.

Another aspect to check could be the MTU, but that would cause problems for e-mails with attachments versus small messages.

you say you are not able to open a session on TCP 25 and this leads to a firewall or server configuration.

Hope to help

Giuseppe

wasiimcisco · ‎06-06-2011

Hi,

I have checked with system team. They are saying they dont have any white list or trusted IP subnets configured in exchange. They have configured only relay in exchange. And also one more thing for troubleshooting we insalled the outlook express on the remote branch where we are facing problem. Outlook express is working fine and we are able to receive and send emails.

Secondly we are sometimes getting outlook disconnection message on windows machines. Trying to connect outlook, connnection to outlook restore etc.

our outlook configured as RPC over HTTP.

How we can figure it out that this could be problem of MTU. Because we dont have firewall in the WAN or LAN side or in ServerFarm.

One thing Branch was earlier connected through the lease line and same scanner was working fine. Now we have migrated to IPVPN (MPLS) and after that they complained about this scanner issue.

How to verify that MTU is creating problem and how to fix it. We have standard MTU size configuration on All the IPVPN branches.

Waiting for your input.

cadet alain · ‎06-07-2011

Hi,

The only thing that could create MTU problem here is GRE not the MPLS VPN as CE-PE communications don't use MPLS. just try to change the tunnel interface mtu with the ip mtu 1524 interface config command.

show interface tunnel will show you the configured MTU.

Regards.

Alain.

Don't forget to rate helpful posts.

wasiimcisco · ‎06-07-2011

Thanks for the reply

But how i will ensure that MTU is creating problem and by increasing MTU will fix it

Sent from Cisco Technical Support iPhone App

wasiimcisco · ‎06-07-2011

Hi,

The current status of Head office Router Tunnel interface is mention below. I can see the output packet drop.

ENOCDC_R03#show interfaces tunnel 546

Tunnel546 is up, line protocol is up

Hardware is Tunnel

Description: connected to the EPPCO Training Center

Internet address is 172.27.5.61/30

MTU 17916 bytes, BW 1024000 Kbit/sec, DLY 50000 usec,

reliability 255/255, txload 1/255, rxload 1/255

Encapsulation TUNNEL, loopback not set

Keepalive set (5 sec), retries 3

Tunnel source 192.168.253.37 (GigabitEthernet0/0), destination 192.168.253.89

Tunnel protocol/transport GRE/IP

Key disabled, sequencing disabled

Checksumming of packets disabled

Tunnel TTL 255

Fast tunneling enabled

Tunnel transport MTU 1476 bytes

Tunnel transmit bandwidth 8000 (kbps)

Tunnel receive bandwidth 8000 (kbps)

Last input 00:00:05, output 00:00:03, output hang never

Last clearing of "show interface" counters 6w2d

Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 89717

Queueing strategy: fifo

Output queue: 0/0 (size/max)

5 minute input rate 8000 bits/sec, 7 packets/sec

5 minute output rate 3000 bits/sec, 4 packets/sec

31497035 packets input, 1903180758 bytes, 0 no buffer

Received 0 broadcasts, 0 runts, 0 giants, 0 throttles

0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort

26403100 packets output, 427569241 bytes, 0 underruns

0 output errors, 0 collisions, 0 interface resets

0 unknown protocol drops

0 output buffer failures, 0 output buffers swapped out

EPPCO_TRAIN_R01#show inter

EPPCO_TRAIN_R01#show interfaces tun

EPPCO_TRAIN_R01#show interfaces tunnel 546

Tunnel546 is up, line protocol is up

Hardware is Tunnel

Description: connected to the ENOC-R03

Internet address is 172.27.5.62/30

MTU 17916 bytes, BW 2048 Kbit/sec, DLY 50000 usec,

reliability 255/255, txload 1/255, rxload 1/255

Encapsulation TUNNEL, loopback not set

Keepalive set (5 sec), retries 3

Tunnel source 192.168.253.89 (FastEthernet0/1), destination 192.168.253.37

Tunnel protocol/transport GRE/IP

Key disabled, sequencing disabled

Checksumming of packets disabled

Tunnel TTL 255

Fast tunneling enabled

Tunnel transport MTU 1476 bytes

Tunnel transmit bandwidth 8000 (kbps)

Tunnel receive bandwidth 8000 (kbps)

Last input 00:00:00, output 00:00:00, output hang never

Last clearing of "show interface" counters never

Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 15881

Queueing strategy: fifo

Output queue: 0/0 (size/max)

5 minute input rate 4000 bits/sec, 3 packets/sec

5 minute output rate 6000 bits/sec, 7 packets/sec

13531596 packets input, 2904596082 bytes, 0 no buffer

Received 0 broadcasts, 0 runts, 0 giants, 0 throttles

0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort

15819656 packets output, 3308176409 bytes, 0 underruns

0 output errors, 0 collisions, 0 interface resets

0 unknown protocol drops

0 output buffer failures, 0 output buffers swapped out

ENOCDC_R03#show interfaces tunnel 546

Tunnel546 is up, line protocol is up

Hardware is Tunnel

Description: connected to the EPPCO Training Center

Internet address is 172.27.5.61/30

MTU 17916 bytes, BW 1024000 Kbit/sec, DLY 50000 usec,

reliability 255/255, txload 1/255, rxload 1/255

Encapsulation TUNNEL, loopback not set

Keepalive set (5 sec), retries 3

Tunnel source 192.168.253.37 (GigabitEthernet0/0), destination 192.168.253.89

Tunnel protocol/transport GRE/IP

Key disabled, sequencing disabled

Checksumming of packets disabled

Tunnel TTL 255

Fast tunneling enabled

Tunnel transport MTU 1476 bytes

Tunnel transmit bandwidth 8000 (kbps)

Tunnel receive bandwidth 8000 (kbps)

Last input 00:00:05, output 00:00:03, output hang never

Last clearing of "show interface" counters 6w2d

Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 89717

Queueing strategy: fifo

Output queue: 0/0 (size/max)

5 minute input rate 8000 bits/sec, 7 packets/sec

5 minute output rate 3000 bits/sec, 4 packets/sec

31497035 packets input, 1903180758 bytes, 0 no buffer

Received 0 broadcasts, 0 runts, 0 giants, 0 throttles

0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort

26403100 packets output, 427569241 bytes, 0 underruns

0 output errors, 0 collisions, 0 interface resets

0 unknown protocol drops

0 output buffer failures, 0 output buffers swapped out

================================================================

BRANCH

EPPCO_TRAIN_R01#show inter
EPPCO_TRAIN_R01#show interfaces tun
EPPCO_TRAIN_R01#show interfaces tunnel 546
Tunnel546 is up, line protocol is up
Hardware is Tunnel
Description: connected to the ENOC-R03
Internet address is 172.27.5.62/30
MTU 17916 bytes, BW 2048 Kbit/sec, DLY 50000 usec,
     reliability 255/255, txload 1/255, rxload 1/255
Encapsulation TUNNEL, loopback not set
Keepalive set (5 sec), retries 3
Tunnel source 192.168.253.89 (FastEthernet0/1), destination 192.168.253.37
Tunnel protocol/transport GRE/IP
    Key disabled, sequencing disabled
    Checksumming of packets disabled
Tunnel TTL 255
Fast tunneling enabled
Tunnel transport MTU 1476 bytes
Tunnel transmit bandwidth 8000 (kbps)
Tunnel receive bandwidth 8000 (kbps)
Last input 00:00:00, output 00:00:00, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 15881
Queueing strategy: fifo
Output queue: 0/0 (size/max)
5 minute input rate 4000 bits/sec, 3 packets/sec
5 minute output rate 6000 bits/sec, 7 packets/sec
     13531596 packets input, 2904596082 bytes, 0 no buffer
     Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
     15819656 packets output, 3308176409 bytes, 0 underruns
     0 output errors, 0 collisions, 0 interface resets
     0 unknown protocol drops
     0 unknown protocol drops
     0 output buffer failures, 0 output buffers swapped out

===========================================================================

Please let me know the reason of output packet drops is because of MTU.

Secondly above 1500 packet, router will start the fragmentation. So if i will change the MTU 1524 plus 24 GRE 1524+24=1548

What we will achieve by doing this.

I will apply the changes as well in off production hours and let u know about the status.

wasiimcisco · ‎06-08-2011

Can i get assistance on this

Sent from Cisco Technical Support iPhone App

wasiimcisco · ‎06-08-2011

Hi,

I have applied the required changes for MTU both on the Head office Router as well as the branch.

==========================================================================

Head office Router configuration

NOCDC_R03#sh running-config interface tunnel 546
Building configuration...

Current configuration : 283 bytes
!
interface Tunnel546
description connected to the EPPCO Training Center
bandwidth 1024000
ip address 172.27.5.61 255.255.255.252
ip mtu 1524
ip ospf network point-to-point
ip ospf cost 1
keepalive 5 3
tunnel source GigabitEthernet0/0
tunnel destination 192.168.253.89
end

ENOCDC_R03#show interfaces tunnel 546

Tunnel546 is up, line protocol is up

Hardware is Tunnel

Description: connected to the EPPCO Training Center

Internet address is 172.27.5.61/30

MTU 17916 bytes, BW 1024000 Kbit/sec, DLY 50000 usec,

reliability 255/255, txload 1/255, rxload 1/255

Encapsulation TUNNEL, loopback not set

Keepalive set (5 sec), retries 3

Tunnel source 192.168.253.37 (GigabitEthernet0/0), destination 192.168.253.89

Tunnel protocol/transport GRE/IP

Key disabled, sequencing disabled

Checksumming of packets disabled

Tunnel TTL 255

Fast tunneling enabled

Tunnel transport MTU 1476 bytes

Tunnel transmit bandwidth 8000 (kbps)

Tunnel receive bandwidth 8000 (kbps)

Last input 00:00:08, output 00:00:00, output hang never

Last clearing of "show interface" counters 00:00:04

Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0

Queueing strategy: fifo

Output queue: 0/0 (size/max)

5 minute input rate 3000 bits/sec, 5 packets/sec

5 minute output rate 1000 bits/sec, 3 packets/sec

31 packets input, 2815 bytes, 0 no buffer

Received 0 broadcasts, 0 runts, 0 giants, 0 throttles

0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort

18 packets output, 1545 bytes, 0 underruns

0 output errors, 0 collisions, 0 interface resets

0 unknown protocol drops

     0 output buffer failures, 0 output buffers swapped out     0 output buffer failures, 0 output buffers swapped out
ENOCDC_R03#show interfaces tunnel 546
Tunnel546 is up, line protocol is up
Hardware is Tunnel
Description: connected to the EPPCO Training Center
Internet address is 172.27.5.61/30
MTU 17916 bytes, BW 1024000 Kbit/sec, DLY 50000 usec,
     reliability 255/255, txload 1/255, rxload 1/255
Encapsulation TUNNEL, loopback not set
Keepalive set (5 sec), retries 3
Tunnel source 192.168.253.37 (GigabitEthernet0/0), destination 192.168.253.89
Tunnel protocol/transport GRE/IP
    Key disabled, sequencing disabled
    Checksumming of packets disabled
Tunnel TTL 255
Fast tunneling enabled
Tunnel transport MTU 1476 bytes
Tunnel transmit bandwidth 8000 (kbps)
Tunnel receive bandwidth 8000 (kbps)
Last input 00:00:08, output 00:00:00, output hang never
Last clearing of "show interface" counters 00:00:04
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/0 (size/max)
5 minute input rate 3000 bits/sec, 5 packets/sec
5 minute output rate 1000 bits/sec, 3 packets/sec
     31 packets input, 2815 bytes, 0 no buffer
     Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
     18 packets output, 1545 bytes, 0 underruns
     0 output errors, 0 collisions, 0 interface resets
     0 unknown protocol drops
     0 output buffer failures, 0 output buffers swapped out

===========================================================================

Branch Router configuration

PPCO_TRAIN_R01#sh running-config interface tun
EPPCO_TRAIN_R01#sh running-config interface tunnel 546
Building configuration...

Current configuration : 264 bytes
!
interface Tunnel546
description connected to the ENOC-R03
bandwidth 2048
ip address 172.27.5.62 255.255.255.252
ip mtu 1524
ip ospf network point-to-point
ip ospf cost 1
keepalive 5 3
tunnel source FastEthernet0/1
tunnel destination 192.168.253.37
end

EPPCO_TRAIN_R01# show interfaces tunnel 546

Tunnel546 is up, line protocol is up

Hardware is Tunnel

Description: connected to the ENOC-R03

Internet address is 172.27.5.62/30

MTU 17916 bytes, BW 2048 Kbit/sec, DLY 50000 usec,

reliability 255/255, txload 1/255, rxload 1/255

Encapsulation TUNNEL, loopback not set

Keepalive set (5 sec), retries 3

Tunnel source 192.168.253.89 (FastEthernet0/1), destination 192.168.253.37

Tunnel protocol/transport GRE/IP

Key disabled, sequencing disabled

Checksumming of packets disabled

Tunnel TTL 255

Fast tunneling enabled

Tunnel transport MTU 1476 bytes

Tunnel transmit bandwidth 8000 (kbps)

Tunnel receive bandwidth 8000 (kbps)

Last input 00:00:00, output 00:00:00, output hang never

Last clearing of "show interface" counters 00:07:28

Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0

Queueing strategy: fifo

Output queue: 0/0 (size/max)

5 minute input rate 2000 bits/sec, 3 packets/sec

5 minute output rate 2000 bits/sec, 4 packets/sec

3528 packets input, 364666 bytes, 0 no buffer

Received 0 broadcasts, 0 runts, 0 giants, 0 throttles

0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort

4272 packets output, 557456 bytes, 0 underruns

0 output errors, 0 collisions, 0 interface resets

0 unknown protocol drops

0 output buffer failures, 0 output buffers swapped out

===============================================================================

I am getting the same MTU 17916 bytes both on the branch and Head office as well. Still I cant telnet on exchange on port 25. There is no firewall, no rules on exchange etc.

Please let me know how to proceed further.

Giuseppe Larosa · ‎06-08-2011

Hello Wasiim,

MTU tests can be perfomed using an extended ping you should try to reach the exchange server from internal LAN in Branch site with packet size 1500 bytes and DF set emulating the worst possible condition.

verify also pinging from router to GRE tunnel destination using GRE tunnel source

notice that the transport MTU is still 1476

>> Tunnel transport MTU 1476 bytes

you said that outlook express can connect to the server and this confirms IP connectivity from Branch site to exchange server is fine.

Hope to help

Giuseppe

wasiimcisco · ‎06-08-2011

Hi,

I did the extended ping with 1500 bytes and normal ping below are the results.

EPPCO_TRAIN_R01#ping

Protocol [ip]:

Target IP address: 192.168.200.147

Repeat count [5]: 1000

Datagram size [100]: 1500

Timeout in seconds [2]:

Extended commands [n]: y

Source address or interface: FastEthernet0/0.1

Type of service [0]:

Set DF bit in IP header? [no]:

Validate reply data? [no]:

Data pattern [0xABCD]:

Loose, Strict, Record, Timestamp, Verbose[none]:

Sweep range of sizes [n]:

Type escape sequence to abort.

Sending 1000, 1500-byte ICMP Echos to 192.168.200.147, timeout is 2 seconds:

Packet sent with a source address of 192.168.16.1

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!

!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

!!!!!!!!!!!!.!!!!!!!!!!.!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!

!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!.!!!!!!

!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!

!!!!!!!!!!!!!!!!!!!!

Success rate is 97 percent (978/1000), round-trip min/avg/max = 8/23/100 ms

EPPCO_TRAIN_R01#ping

Protocol [ip]:

Target IP address: 192.168.200.147

Repeat count [5]: 1000

Datagram size [100]:

Timeout in seconds [2]:

Extended commands [n]: y

Source address or interface: FastEthernet0/0.1

Type of service [0]:

Set DF bit in IP header? [no]:

Validate reply data? [no]:

Data pattern [0xABCD]:

Loose, Strict, Record, Timestamp, Verbose[none]:

Sweep range of sizes [n]:

Type escape sequence to abort.

Sending 1000, 100-byte ICMP Echos to 192.168.200.147, timeout is 2 seconds:

Packet sent with a source address of 192.168.16.1

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

!!!!!!!!!!!!!!!!!!!!

Success rate is 99 percent (998/1000), round-trip min/avg/max = 1/3/20 ms

EPPCO_TRAIN_R01#

EPPCO_TRAIN_R01#ping

Protocol [ip]:

Target IP address: 192.168.253.37

Repeat count [5]: 1000

Datagram size [100]: 1500

Timeout in seconds [2]:

Extended commands [n]: y

Source address or interface: FastEthernet0/1

Type of service [0]:

Set DF bit in IP header? [no]:

Validate reply data? [no]:

Data pattern [0xABCD]:

Loose, Strict, Record, Timestamp, Verbose[none]:

Sweep range of sizes [n]:

Type escape sequence to abort.

Sending 1000, 1500-byte ICMP Echos to 192.168.253.37, timeout is 2 seconds:

Packet sent with a source address of 192.168.253.89

!!!!!!!!!!!!!!!!!!!!!!!!.!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!.!!!!!!!!!!!!!!!!!!!!!!.!!!!!!

!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!.!!.

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!

!!!!!!!!!!!!!!!!.!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

!!!!!!!!!!!!...!!!!!!..!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!.!!!

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

!!!!!!!!!!!!!!!!!!!..!!!!!!!!!!!!!!!!.!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!

!!!!!!!!!!!!!!!!!!!!

Success rate is 96 percent (966/1000), round-trip min/avg/max = 8/11/44 ms

EPPCO_TRAIN_R01#ping

Protocol [ip]:

Target IP address: 192.168.253.37

Repeat count [5]: 1000

Datagram size [100]:

Timeout in seconds [2]:

Extended commands [n]: y

Source address or interface: FastEthernet0/1

Type of service [0]:

Set DF bit in IP header? [no]:

Validate reply data? [no]:

Data pattern [0xABCD]:

Loose, Strict, Record, Timestamp, Verbose[none]:

Sweep range of sizes [n]:

Type escape sequence to abort.

Sending 1000, 100-byte ICMP Echos to 192.168.253.37, timeout is 2 seconds:

Packet sent with a source address of 192.168.253.89

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

!!!!!!!!!!!!!!!!!!!!

Success rate is 99 percent (997/1000), round-trip min/avg/max = 1/3/16 ms

EPPCO_TRAIN_R01#

EPPCO_TRAIN_R01#ping
Protocol [ip]:
Target IP address: 192.168.200.147
Repeat count [5]: 1000
Datagram size [100]: 1500
Timeout in seconds [2]:
Extended commands [n]: y
Source address or interface: FastEthernet0/0.1
Type of service [0]:
Set DF bit in IP header? [no]:
Validate reply data? [no]:
Data pattern [0xABCD]:
Loose, Strict, Record, Timestamp, Verbose[none]:
Sweep range of sizes [n]:
Type escape sequence to abort.
Sending 1000, 1500-byte ICMP Echos to 192.168.200.147, timeout is 2 seconds:
Packet sent with a source address of 192.168.16.1
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!
!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!.!!!!!!!!!!.!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!.!!!!!!
!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!
!!!!!!!!!!!!!!!!!!!!
Success rate is 97 percent (978/1000), round-trip min/avg/max = 8/23/100 ms
EPPCO_TRAIN_R01#ping
Protocol [ip]:
Target IP address: 192.168.200.147
Repeat count [5]: 1000
Datagram size [100]:
Timeout in seconds [2]:
Extended commands [n]: y
Source address or interface: FastEthernet0/0.1
Type of service [0]:
Set DF bit in IP header? [no]:
Validate reply data? [no]:
Data pattern [0xABCD]:
Loose, Strict, Record, Timestamp, Verbose[none]:
Sweep range of sizes [n]:
Type escape sequence to abort.
Sending 1000, 100-byte ICMP Echos to 192.168.200.147, timeout is 2 seconds:
Packet sent with a source address of 192.168.16.1
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!
Success rate is 99 percent (998/1000), round-trip min/avg/max = 1/3/20 ms
===============================================================================

GRE Tunnel sourcce ping result

EPPCO_TRAIN_R01#ping
Protocol [ip]:
Target IP address: 192.168.253.37
Repeat count [5]: 1000
Datagram size [100]: 1500
Timeout in seconds [2]:
Extended commands [n]: y
Source address or interface: FastEthernet0/1
Type of service [0]:
Set DF bit in IP header? [no]:
Validate reply data? [no]:
Data pattern [0xABCD]:
Loose, Strict, Record, Timestamp, Verbose[none]:
Sweep range of sizes [n]:
Type escape sequence to abort.
Sending 1000, 1500-byte ICMP Echos to 192.168.253.37, timeout is 2 seconds:
Packet sent with a source address of 192.168.253.89
!!!!!!!!!!!!!!!!!!!!!!!!.!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!.!!!!!!!!!!!!!!!!!!!!!!.!!!!!!
!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!.!!.
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!.!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!...!!!!!!..!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!.!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!..!!!!!!!!!!!!!!!!.!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!
!!!!!!!!!!!!!!!!!!!!
Success rate is 96 percent (966/1000), round-trip min/avg/max = 8/11/44 ms
EPPCO_TRAIN_R01#ping
Protocol [ip]:
Target IP address: 192.168.253.37
Repeat count [5]: 1000
Datagram size [100]:
Timeout in seconds [2]:
Extended commands [n]: y
Source address or interface: FastEthernet0/1
Type of service [0]:
Set DF bit in IP header? [no]:
Validate reply data? [no]:
Data pattern [0xABCD]:
Loose, Strict, Record, Timestamp, Verbose[none]:
Sweep range of sizes [n]:
Type escape sequence to abort.
Sending 1000, 100-byte ICMP Echos to 192.168.253.37, timeout is 2 seconds:
Packet sent with a source address of 192.168.253.89
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!
Success rate is 99 percent (997/1000), round-trip min/avg/max = 1/3/16 ms
EPPCO_TRAIN_R01#

==================================================================================

There is no problem in the connectivity Branch can access Internet, Oracle, Email fine only the scanner which sends email is not working.

Same scanner was working fine while this branch was on lease line after the migration of IPVPN scanner stoped working. Same scanner when we connected in the LAN of head office where the exchange is also located works perfectly fine.

Kindly advise

Giuseppe Larosa · ‎06-09-2011

Hello Wassiim,

repeat the test with size 1500 bytes setting DF bit

Set DF bit in IP header? [no]:

enter y

Hope to help

Giuseppe

wasiimcisco · ‎06-10-2011

Hi,

We have tested the Scanner with tunnel size 1524 and it is working fine. Now we will take this printer back to the origial location and we will apply the same changes on the Tunnel 1524 and then we will test it out.

I have few queries.

1. router will fragments the packet that has more than 1500 bytes. ???

2. If yes then why we are using 1524 bytes ??????

3. What is problem in 1476 bytes and how the scanner is working by change the 1524.

4. Difference between transport MTU and tunnel MTU.

5 Do I need to change on both the Head office or only on the branch side it will be enough. Currently i have done it on both side.

If ping and routing and reachablity is there why by change the MTU 1524 we are able to receive email.