IP-VPN

[waelelgaebery]

I have a problem in the network of the project I am working in and I hope I can find the solution here

As I am not expert in Cisco systems I will explain the situation as I can see:

First we have more than 20 sites on the highways equipped with –IP-CCTV cameras and one control center that’s why we decided to link all sites with the control center by IP-VPN using the network of Mobile service provider that recommended using Cisco881 routers at each site and Cisco 3925 at the control center. The problem is:

All the routers can communicate with each other on the network (192.168.x.x 255.255.255.252) provided by the service provider but the devices on sites with IP (1.1.x.x 255.0.0.0) are not reachable through the router in the control center Cisco 3925 port0/1 that configured 1.1.111.1 255.0.0.0, although the routers Cisco881 ports are configured to be in the network 1.1.x.x 255.0.0.0

So we cannot receive any data from the devices on sites. Please I need the help to solve this problem

Thanks

[Jon Marshall]

So the IPs used to connect to MPLS network are 192.168.x.x addresses ?

And the actual subnets used in each site are using 1.1.x.x addressing ?

If so how are you advertising the 1.1.x.x subnets per sites across the MPLS network to the central site ?

Note also you seem to be suggesting the central site router uses 1.1.111.1 to connect to the MPLS network. Is this correct or are you using 192.168.x.x to actually connect the central site router to the MPLS network.

It sounds like the subnets are not being advertised across the MPLS network but a few more details would help.

Jon

[waelelgaebery]

Dear Mr.Jon

Thank you for reply,for your questions

So the IPs used to connect to MPLS network are 192.168.x.x addresses ?  yes and no broblem with this network(MPLS)

And the actual subnets used in each site are using 1.1.x.x addressing ?  yes and arenot reachable through the MPLS

for the central site router it is connected to the MPLS network using 192.168.x.x(port GE0/0) but already connected to the network of the central site with devices and servers using the network port on the router(GE0/1) with IP 1.1.111.1

It sounds like the subnets are not being advertised across the MPLS network  exactly this is the problem

some body advised me to unblock the ICMP. is that correct?

Wael

[Jon Marshall]

Wael

How are you advertising the routes at present ?

Can you post the config of the central site router and one of the remote sites where you are not able to communicate between the subnets ?

Jon