problem pinging network

[Eric.Biggie]

Hello all,  I'm having a problem pinging a network and would appreciate some help .

I have a router setup with fa0/0: 10.20.30.109 /24.  and fa0/1: 172.16.1.1 /24.  using rip v2.   Any device on the 172.16.1.0 network can ping anything on the 10.20.30.0 network just fine, but vice versa doesn't work? 

here's the show ip route:

Router#show ip route

Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP

       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

       E1 - OSPF external type 1, E2 - OSPF external type 2

       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2

       ia - IS-IS inter area, * - candidate default, U - per-user static route

       o - ODR, P - periodic downloaded static route

Gateway of last resort is 10.20.30.1 to network 0.0.0.0

     172.16.0.0/24 is subnetted, 1 subnets

C       172.16.1.0 is directly connected, FastEthernet0/1

     10.0.0.0/8 is variably subnetted, 2 subnets, 2 masks

C       10.20.30.0/24 is directly connected, FastEthernet0/0

S       10.0.0.0/8 [1/0] via 10.20.30.0

S*   0.0.0.0/0 [1/0] via 10.20.30.1

Router#

any thoughts on why I can't ping the 172.16.1.0 network from the 10.20.30.0 network?  any help is much appreciated..

Thanks,

E.

[Antonio Knox]

Is there an ACL involved?  Either that or an incorrect default gateway configured on the 10.20.30.x network?  Can you post a config?

[Eric.Biggie]

Hello, thanks for your reply .  Here's the show run (less phone numbers, etc..):

Router#show run

Building configuration...

Current configuration : 10084 bytes

!

! Last configuration change at 19:26:03 GERMANY Thu Jul 21 2011

! NVRAM config last updated at 19:20:23 GERMANY Thu Jul 21 2011

!

version 12.4

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

!

hostname Router

!

boot-start-marker

boot-end-marker

!

no logging console

!

no aaa new-model

clock timezone GERMANY 1

no network-clock-participate slot 1

!

!

ip cef

!

!

no ip dhcp use vrf connected

ip dhcp excluded-address 172.16.1.1 172.16.1.25

ip dhcp excluded-address 172.16.1.51 172.16.1.254

!

ip dhcp pool VOICE

   network 172.16.1.0 255.255.255.0

   default-router 172.16.1.1

   dns-server 4.2.2.2

   option 150 ip 172.16.1.1

   domain-name wr

!

!

ip name-server 10.20.30.1

!

multilink bundle-name authenticated

!

voice-card 1

no dspfarm

!

!

!

!

!

!

!

archive

log config

  hidekeys

!

!

!

!

!

!

interface FastEthernet0/0

ip address 10.20.30.109 255.255.255.0

ip nat outside

ip virtual-reassembly

duplex auto

speed auto

!

interface Serial0/0

no ip address

shutdown

clock rate 2000000

!

interface FastEthernet0/1

ip address 172.16.1.1 255.255.255.0

ip nat inside

ip virtual-reassembly

duplex auto

speed auto

!

interface Serial0/1

no ip address

shutdown

clock rate 2000000

!

interface FastEthernet2/0

switchport mode trunk

spanning-tree portfast

!

interface FastEthernet2/1

spanning-tree portfast

!

interface FastEthernet2/2

spanning-tree portfast

!

interface FastEthernet2/3

spanning-tree portfast

!

interface FastEthernet2/4

spanning-tree portfast

!

interface FastEthernet2/5

spanning-tree portfast

!

interface FastEthernet2/6

spanning-tree portfast

!

interface FastEthernet2/7

spanning-tree portfast

!

interface FastEthernet2/8

spanning-tree portfast

!

interface FastEthernet2/9

spanning-tree portfast

!

interface FastEthernet2/10

spanning-tree portfast

!

interface FastEthernet2/11

spanning-tree portfast

!

interface FastEthernet2/12

spanning-tree portfast

!

interface FastEthernet2/13

spanning-tree portfast

!

interface FastEthernet2/14

spanning-tree portfast

!

interface FastEthernet2/15

spanning-tree portfast

!

interface Vlan1

no ip address

!

router rip

version 2

passive-interface FastEthernet0/0

passive-interface FastEthernet0/1

passive-interface Vlan1

network 10.0.0.0

network 172.16.0.0

no auto-summary

!

ip forward-protocol nd

ip route 0.0.0.0 0.0.0.0 10.20.30.1

ip route 10.0.0.0 255.0.0.0 10.20.30.0

!

!

ip http server

ip http authentication local

no ip http secure-server

ip http path flash:/cme-full-7.0.0.1/GUI

ip nat inside source list 1 interface FastEthernet0/0 overload

!

access-list 1 remark SDM_ACL Category=2

access-list 1 permit 172.16.1.0 0.0.0.255

!

!

!

!

!

tftp-server flash:/cme-full-7.0.0.1/PHONE/7940-7960/P00308000500.bin alias P00308000500.bin

tftp-server flash:/cme-full-7.0.0.1/PHONE/7940-7960/P00308000500.loads alias P00308000500.loads

tftp-server flash:/cme-full-7.0.0.1/PHONE/7940-7960/P00308000500.sb2 alias P00308000500.sb2

tftp-server flash:/cme-full-7.0.0.1/PHONE/7940-7960/P00308000500.sbn alias P00308000500.sbn

tftp-server flash:/cme-full-7.0.0.1/PHONE/7920/cmterm_7920.4.0-03-02.bin alias cmterm_7920.4.0-03-02.bin

tftp-server flash:/cme-full-7.0.0.1/PHONE/7970-7971/apps70.8-3-2-27.sbn alias apps70.8-3-2-27.sbn

tftp-server flash:/cme-full-7.0.0.1/PHONE/7970-7971/cnu70.8-3-2-27.sbn alias cnu70.8-3-2-27.sbn

tftp-server flash:/cme-full-7.0.0.1/PHONE/7970-7971/cvm70sccp.8-3-2-27.sbn alias cvm70sccp.8-3-2-27.sbn

tftp-server flash:/cme-full-7.0.0.1/PHONE/7970-7971/dsp70.8-3-2-27.sbn alias dsp70.8-3-2-27.sbn

tftp-server flash:/cme-full-7.0.0.1/PHONE/7970-7971/jar70sccp.8-3-2-27.sbn alias jar70sccp.8-3-2-27.sbn

tftp-server flash:/cme-full-7.0.0.1/PHONE/7970-7971/SCCP70.8-3-3S.loads alias SCCP70.8-3-3S.loads

tftp-server flash:/cme-full-7.0.0.1/PHONE/7970-7971/term70.default.loads alias term70.default.loads

tftp-server flash:/cme-full-7.0.0.1/PHONE/7970-7971/term71.default.loads alias term71.default.loads

tftp-server flash:/cme-full-7.0.0.1//ringtones/DistinctiveRingList.xml alias DistinctiveRingList.xml

tftp-server flash:/cme-full-7.0.0.1//ringtones/Analog1.raw alias Analog1.raw

tftp-server flash:/cme-full-7.0.0.1//ringtones/Analog2.raw alias Analog2.raw

tftp-server flash:/cme-full-7.0.0.1//ringtones/AreYouThere.raw alias AreYouThere.raw

tftp-server flash:/cme-full-7.0.0.1//ringtones/AreYouThereF.raw alias AreYouThereF.raw

tftp-server flash:/cme-full-7.0.0.1//ringtones/Bass.raw alias Bass.raw

tftp-server flash:/cme-full-7.0.0.1//ringtones/CallBack.raw alias CallBack.raw

tftp-server flash:/cme-full-7.0.0.1//ringtones/Chime.raw alias Chime.raw

tftp-server flash:/cme-full-7.0.0.1//ringtones/Classic1.raw alias Classic1.raw

tftp-server flash:/cme-full-7.0.0.1//ringtones/Classic2.raw alias Classic2.raw

tftp-server flash:/cme-full-7.0.0.1//ringtones/ClockShop.raw alias ClockShop.raw

tftp-server flash:/cme-full-7.0.0.1//ringtones/Drums1.raw alias Drums1.raw

tftp-server flash:/cme-full-7.0.0.1//ringtones/Drums2.raw alias Drums2.raw

tftp-server flash:/cme-full-7.0.0.1//ringtones/FilmScore.raw alias FilmScore.raw

tftp-server flash:/cme-full-7.0.0.1//ringtones/HarpSynth.raw alias HarpSynth.raw

tftp-server flash:/cme-full-7.0.0.1//ringtones/Jamaica.raw alias Jamaica.raw

tftp-server flash:/cme-full-7.0.0.1//ringtones/KotoEffect.raw alias KotoEffect.raw

tftp-server flash:/cme-full-7.0.0.1//ringtones/MusicBox.raw alias MusicBox.raw

tftp-server flash:/cme-full-7.0.0.1//ringtones/Piano1.raw alias Piano1.raw

tftp-server flash:/cme-full-7.0.0.1//ringtones/Piano2.raw alias Piano2.raw

tftp-server flash:/cme-full-7.0.0.1//ringtones/Pop.raw alias Pop.raw

tftp-server flash:/cme-full-7.0.0.1//ringtones/Pulse1.raw alias Pulse1.raw

tftp-server flash:/cme-full-7.0.0.1//ringtones/Ring1.raw alias Ring1.raw

tftp-server flash:/cme-full-7.0.0.1//ringtones/Ring2.raw alias Ring2.raw

tftp-server flash:/cme-full-7.0.0.1//ringtones/Ring3.raw alias Ring3.raw

tftp-server flash:/cme-full-7.0.0.1//ringtones/Ring4.raw alias Ring4.raw

tftp-server flash:/cme-full-7.0.0.1//ringtones/Ring5.raw alias Ring5.raw

tftp-server flash:/cme-full-7.0.0.1//ringtones/Ring6.raw alias Ring6.raw

tftp-server flash:/cme-full-7.0.0.1//ringtones/Ring7.raw alias Ring7.raw

tftp-server flash:/cme-full-7.0.0.1//ringtones/Sax1.raw alias Sax1.raw

tftp-server flash:/cme-full-7.0.0.1//ringtones/Sax2.raw alias Sax2.raw

tftp-server flash:/cme-full-7.0.0.1//ringtones/Vibe.raw alias Vibe.raw

tftp-server flash:/cme-full-7.0.0.1//ringtones/RingList.xml alias RingList.xml

tftp-server flash:/cme-full-7.0.0.1//ringtones/louda1.raw alias louda1.raw

tftp-server flash:/cme-full-7.0.0.1//ringtones/loudc1.raw alias loudc1.raw

tftp-server flash:/cme-full-7.0.0.1//ringtones/loudc2.raw alias loudc2.raw

tftp-server flash:/cme-full-7.0.0.1//ringtones/loudcl1.raw alias loudcl1.raw

tftp-server flash:/cme-full-7.0.0.1//ringtones/loudlaser.raw alias loudlaser.raw

!

control-plane

!

!

!

voice-port 1/0/0

!

voice-port 1/0/1

!

voice-port 1/1/0

supervisory disconnect dualtone mid-call

cptone DE

timeouts call-disconnect 1

timeouts ringing 5

timeouts wait-release 1

connection plar 2820

impedance complex2

caller-id enable

!

voice-port 1/1/1

supervisory disconnect dualtone mid-call

cptone DE

timeouts call-disconnect 1

timeouts ringing 5

timeouts wait-release 1

connection plar 2834

impedance complex2

caller-id enable

!

voice-port 1/1/2

supervisory disconnect dualtone mid-call

cptone DE

timeouts call-disconnect 1

timeouts ringing 5

timeouts wait-release 1

connection plar opx 2023

impedance complex2

caller-id enable

!

voice-port 1/1/3

supervisory disconnect dualtone mid-call

cptone DE

timeouts call-disconnect 1

timeouts ringing 5

timeouts wait-release 1

connection plar opx 821707

impedance complex2

caller-id enable

!

!

!

!

!

dial-peer voice 3301 pots

destination-pattern 3301

port 1/0/0

!

dial-peer voice 100 pots

description outgoing to 2820 line

destination-pattern .T

port 1/1/0

forward-digits all

!

dial-peer voice 101 pots

destination-pattern .T

port 1/1/1

forward-digits all

!

dial-peer voice 102 pots

destination-pattern .T

port 1/1/2

forward-digits all

!

dial-peer voice 103 pots

destination-pattern .T

port 1/1/3

forward-digits all

!

!

!

gatekeeper

shutdown

!

!

telephony-service

load 7960-7940 P00308000500

load 7920 cmterm_7920.4.0-03-02

load 7970 SCCP70.8-3-3S

max-ephones 16

max-dn 32

ip source-address 172.16.1.1 port 2000

service phone backlightIdleTimeout 01:00

timeouts interdigit 3

system message Biggie Telephone Network

url services http://phone-xml.berbee.com/menu.xml

max-conferences 8 gain -6

moh flash:/cme-full-7.0.0.1/music-on-hold.au

web admin system name cisco password cisco

dn-webedit

time-webedit

transfer-system full-consult

directory entry 1 **

directory entry 2 **

directory entry 3 **

directory entry 4 **

directory entry 5 **

create cnf-files version-stamp 7960 Jan 20 2011 19:03:32

!

!

ephone-dn  1  dual-line

number 2820 secondary **

!

!

ephone-dn  2  dual-line

number 2834 secondary **

!

!

ephone-dn  3  dual-line

number 2023 secondary **

!

!

ephone-dn  4  dual-line

number 2847 secondary **

!

ephone-dn  5  dual-line

number 821707 secondary **

!

!

ephone  1

device-security-mode none

description 7960 phone

mac-address 0003.E3B9.****

button  1:1

!

!

!

ephone  2

device-security-mode none

description 7970 phone

mac-address 0018.18D7.****

button  1:1 2:2 3:3 4:4

button  5:5

!

!

!

ephone  3

device-security-mode none

mac-address 0014.6AB7.****

button  1:3 2f5

!

!

!

ephone  4

device-security-mode none

mac-address 0014.A998.****

button  1:1 2f3

!

!

!

ephone  5

device-security-mode none

mac-address 0014.A8A7.****

button  1:5

!

!

!

line con 0

exec-timeout 0 0

logging synchronous

line aux 0

line vty 0 4

login

!

ntp clock-period 17180814

ntp master

ntp server 131.188.3.220

!

end

Router#

[Antonio Knox]

Is there a router connected to Fa0/0?  If so, this may be a problem:

router rip

passive-interface FastEthernet0/0

If there's a router connected to Fa0/0, he won't know about how to get to 172.16.1.0/24 since Fa0/0 isn't sending him route information telling him "Hey I'm the next hop to 172.16.1.0/24!!!".

Message was edited by: Antonio Knox

[Eric.Biggie]

Hi Antonio,  I removed passive-interface FastEthernet0/0 and I still can't ping 172.16.1.1 from a pc on the 10.20.30.1 network.

Yes there is a router connected to fa0/0.  It's my home DSL router, a Cisco RV110W.  I have a small switch and a few pc's connected to the RV110W.

I have fa0/1 port configured for 172.16.1.1 and I have that directly connected to a NM-16esw w/PoE supporting IP phones, wireless, etc..  All the phones, etc. are working and register with CME. There's no problem on the Voice support. 

In the past I never needed to connect to the 172.16.1.0 network, but now I want to VPN a tunnel to another CME router. Hence, why I found out I can't ping the 172.16.1.1 from my next hop?

V/r,

Eric

[Jon Marshall]

Eric

What is the default-gateway set to on the 10.20.30.x clients ?

I suspect the issue is because you are natting your 172.16.1.x clients to the fa0/0 ip address of 10.20.30.109 so the ping works that way because clients in 10.20.30.x simply send packets back to the router.

But when you ping from 10.20.30.x the clients send their packets to their default-gateway which is another L3 device which doesn't have a route to the 172.16.1.0/24 network.

Jon

[Antonio Knox]

Are you running a routing protocol on the RV110W or does he just have a default route?

[Eric.Biggie]

Hello Jon,

the 10.20.30.x router is a Cisco RV110W.  It's just a small home router with HTML interface setup, etc.  In the networking tab it has an option to pick "gateway" or "router".  It's set for gateway right now but has RIPv2 enabled automatically. I'll have to check if I can add 172.16... in the route table manually.

It looks like this is most likely the problem. Before I change anything on the RV110W, I'll setup another spare router, but a 2600 or something and see if I can route to the 172 network that way first. Then I'll definately know if it's the RV110W.

Thanks, and I'll post back the results.

V/r,

Eric

Here's a diagram of the network:

[Eric.Biggie]

Ok, I couldn't get the extra lab router to work correctly either.   I did however figure out how to add entries in the RV110W routing table.  I eventually added a loopback interface 172.16.2.100 on the 3725 CME voice router, and added networks 172.16.2.0 and 172.16.1.0 in the RV110W routing table.  I was then able to ping the 172.16.2.. loopback, but still nothing on the voice network 172.16.1..   So then I started removing services and found out that when NAT is disabled, I can successfully ping 172.16.1.1.  All I have to do is remove "access-list 1 permit 172.16.2.0 0.0.0.255" from the running config.

However this obviously causes another problem.  Any thoughts on how I can remedy this?

A big Thank you in advance,

Eric