Issue at router

[Robert Briggs]

Hello All,

I am currently having some issues with my network that I could use some assistance with.

The Issue:
I can ping through out my entire intranet however I can not ping anything out side of that including another segment in the WAN that is basically a copy I can ping from the current portion of the network however I can not ping from the new network extension.

The Goal:
My end all be all goal is to add a secondary IP range to extend my network.

The Equipment:
1 CISCO 3825 Router
3 CISCO 3560 Switches
1 CISCO 5510 ASA

Network Range: (Modified for Security)
Current:   165.125.129.62/26 On VLAN 54
Extention: 165.125.125.158/26 on VLAN 56

What I am able to Ping:
I am able to ping from Computer '165.125.125.155' to Default Gateway '165.125.125.158'
I am able to ping from Computer '165.125.125.155' on VLAN '56' to Computer '165.125.125.156' on VLAN '56'
I am able to ping from Computer '165.125.125.155' on VLAN '56' to Computer '165.125.129.42' on VLAN '54'
I am able to ping from Computer '165.125.125.155' to Default Gateway '165.125.129.62'

Configs Relevant:
router ospf 21
log-adjacency-changes
passive-interface GigabitEthernet2/0.60
passive-interface GigabitEthernet2/0.61
passive-interface GigabitEthernet2/0.475
network 165.125.129.0 0.0.0.63 area 1
network 165.125.125.0 0.0.0.63 area 1
network 165.125.125.112 0.0.0.15 area 1
network 165.125.125.247 0.0.0.0 area 1
network 172.28.0.0 0.0.255.255 area 1

interface GigabitEthernet2/0.60
     description Vlan for Data 1
encapsulation dot1Q 54
ip address 165.125.129.62 255.255.255.192
no ip proxy-arp

interface GigabitEthernet2/0.61
description vlan for Data 1 Extended
encapsulation dot1Q 56
ip address 165.125.125.158 255.255.255.192
no ip proxy-arp

There is a very extensive ACL also that I can not post.

If you need any more information please let me know.

[Mahesh Gohil]

Hello Robert,

Can you please provide

> sh ip route

> Extended Trace with source IP

> Reverce trace from destination

Regards

Mahesh

[Ganesh Hariharan]

Hello All,
I am currently having some issues with my network that I could use some assistance with.
The Issue:
I
can ping through out my entire intranet however I can not ping anything
out side of that including another segment in the WAN that is basically
a copy I can ping from the current portion of the network however I can
not ping from the new network extension.
The Goal:
 My end all be all goal is to add a secondary IP range to extend my network.
The Equipment:
 1 CISCO 3825 Router
 3 CISCO 3560 Switches
 1 CISCO 5510 ASA
 
Network Range: (Modified for Security)
 Current:   165.125.129.62/26 On VLAN 54
 Extention: 165.125.125.158/26 on VLAN 56
What I am able to Ping:
 I am able to ping from Computer '165.125.125.155' to Default Gateway '165.125.125.158'
 I am able to ping from Computer '165.125.125.155' on VLAN '56' to Computer '165.125.125.156' on VLAN '56'
 I am able to ping from Computer '165.125.125.155' on VLAN '56' to Computer '165.125.129.42' on VLAN '54'
 I am able to ping from Computer '165.125.125.155' to Default Gateway '165.125.129.62'
Configs Relevant:
 router ospf 21
 log-adjacency-changes
 passive-interface GigabitEthernet2/0.60
 passive-interface GigabitEthernet2/0.61
 passive-interface GigabitEthernet2/0.475
 network 165.125.129.0 0.0.0.63 area 1
 network 165.125.125.0 0.0.0.63 area 1
 network 165.125.125.112 0.0.0.15 area 1
 network 165.125.125.247 0.0.0.0 area 1
 network 172.28.0.0 0.0.255.255 area 1
interface GigabitEthernet2/0.60
      description Vlan for Data 1
 encapsulation dot1Q 54
 ip address 165.125.129.62 255.255.255.192
 no ip proxy-arp
interface GigabitEthernet2/0.61
 description vlan for Data 1 Extended
 encapsulation dot1Q 56
 ip address 165.125.125.158 255.255.255.192
 no ip proxy-arp
 
 There is a very extensive ACL also that I can not post.
If you need any more information please let me know.

Hi ,

What is the traceroute ip address it used to get from both the sides,where it get struck ??

Ganesh.H

[Robert Briggs]

Doing a little more research I have found that it gets stuck at

Interface GigabitEthernet2/0

as a side note i have rewritten some of the code to simplify it after

getting authorization I have added the new code onto the already existing

VLAN the new version of the code is as follows (Modified for Security)

interface GigabitEthernet2/0.60

description Vlan for Data 1 and Extended

encapsulation dot1Q 54

ip address 165.125.129.62 255.255.255.192

ip address 165.125.125.158 255.255.255.192 Secondary

no ip proxy-arp

no changes have been made to the routing statement.

On Sun, 12 Dec 2010 17:27:21 +0430, ganeshh.iyer