cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
794
Views
5
Helpful
2
Replies

Traceroute not working in One Dierection

grew00028
Level 1
Level 1

Hi,

 

My trace is not working in one direction.

 

Ping for Site A to Site B and vice versa works (PING's are from CE TO CE and CPE)

 

SITEA#ping vrf DDDDD-DDDD x.x.228.57 source x.x.228.65
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to x.x.228.57, timeout is 2 seconds:
Packet sent with a source address of x.x.228.65
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 8/8/8 ms


SITEA#ping vrf DDDDD-DDDD x.x.228.58 source x.x.228.65
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to x.x.228.58, timeout is 2 seconds:
Packet sent with a source address of x.x.228.65
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 8/8/8 m

=====================================================================================

 

SITEB#ping vrf DDDDD-DDDD x.x.228.65 source x.x.228.57
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to x.x.228.65, timeout is 2 seconds:
Packet sent with a source address of x.x.228.57
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 7/7/8 ms


SITEB#ping vrf DDDDD-DDDD x.x.228.66 source x.x.228.57
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to x.x.228.66, timeout is 2 seconds:
Packet sent with a source address of x.x.228.57
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 6/6/7 ms

========================================================================================

 

Trace works from SITE A to SITE B (FROM CE to CE and CPE)

 

SITEA#trace vrf DDDDD-DDDD x.x..228.57 source x.x.228.65
Type escape sequence to abort.
Tracing the route to 172.25.228.57
VRF info: (vrf in name/id, vrf out name/id)
1 x.x.54.198 4 msec 0 msec 0 msec
2 x.x.43.150 4 msec 4 msec 4 msec
3 x.x.43.149 8 msec * 8 msec

 

SITEA#trace vrf DDDDD-DDDD x.x..228.58 source x.x.228.65
Type escape sequence to abort.
Tracing the route to 172.25.228.58
VRF info: (vrf in name/id, vrf out name/id)
1 x.x.54.198 4 msec 0 msec 0 msec
2 x.x.43.150 4 msec 4 msec 4 msec
3 x.x.43.149 8 msec 8 msec 8 msec
4 x.x.228.58 8 msec * 8 msec

=====================================================================

 

Trace from SITEB to SITEA only works till CE interface (.228.65) but does work for CPE (.228.66)

 

SITEB#trace vrf DDDDD-DDDD x.x.228.65 source x.x.228.57
Type escape sequence to abort.
Tracing the route to x.x.228.65
VRF info: (vrf in name/id, vrf out name/id)
1 x.x.43.150 3 msec 3 msec 2 msec
2 x.x.54.198 6 msec 7 msec 6 msec
3 x.x.54.197 7 msec * 7 msec

 

SITEB#trace vrf DDDDD-DDDD x.x.228.66 source x.x.228.57

Type escape sequence to abort.
Tracing the route to x.x.228.66
VRF info: (vrf in name/id, vrf out name/id)
1 x.x.43.150 3 msec 3 msec 3 msec
2 x.x.54.198 5 msec 6 msec 6 msec
3 x.x.54.197 7 msec 7 msec 7 msec
4 * * *

5 * * *

(edited OUTPUT)

29 * * *
30 * * *

Topology.png

 

2 Replies 2

Harold Ritter
Level 12
Level 12

Ping works from x.x.228.57 to x.x.228.66, but traceroute from x.x.228.57 to x.x.228.66 don't. So it looks like routing is fine.

 

ping uses ICMP and traceroute uses UDP, so It could be due to an ACL on Site A CPE that does not allow UDP traffic in or out.

 

Regards,

Harold Ritter
Sr Technical Leader
CCIE 4168 (R&S, SP)
harold@cisco.com
México móvil: +52 1 55 8312 4915
Cisco México
Paseo de la Reforma 222
Piso 19
Cuauhtémoc, Juárez
Ciudad de México, 06600
México

I double checked all the CE's and CPE's. There are no ACL's for UDP.

Review Cisco Networking for a $25 gift card