Hello, I am having a routing problem, everything was working and then something happened.
Thanks ahead of time for anyone attempting to read all this crap
I have 4 networks:
10.0.1.0 in a remote location (router is 10.0.1.253)
10.0.0.0 Here, main lan (router is 10.0.0.253)
192.168.10.0 DMZ, also here.
10.1.1.0/3 for point to point t1 (serial int)
Devices are using the routers as gateways with policies directing traffic to the Internet
or the t1 point to point
I also have 2 firewalls (sonicwalls) one at each location
10.0.0.254 which also hosts the DMZ on 192.168.10.1 int
10.0.1.254 at the remote location
The Sonicwalls have routes added for the remote traffic as follows:
Any 10.0.1.0/24 any 10.0.0.253 X0 (lan int)
Devices on 10.0.1.0 can no longer reach 192.168.10.0
What am I missing? I have a static route on the 10.0.1.253 router:
ip route 192.168.10.0 255.255.255.0 10.1.1.1
I have a static route on the 10.0.0.253 router:
ip route 192.168.10.0 255.255.255.0 FastEthernet0/1 10.0.0.254
This is what I get pinging from host 10.0.1.1 to the DMZ
Pinging 192.168.10.7 with 32 bytes of data:
Reply from 10.0.1.253: TTL expired in transit.
Reply from 10.0.1.253: TTL expired in transit.
Reply from 10.0.1.253: TTL expired in transit.
Reply from 10.0.1.253: TTL expired in transit.
And traceroute:
Tracing route to www.generic.com [192.168.10.7]
over a maximum of 30 hops:
1 1 ms <1 ms <1 ms 10.0.1.253
2 37 ms 1 ms <1 ms 10.0.1.253
3 1 ms 1 ms 1 ms 10.0.1.253
4 2 ms 1 ms 1 ms 10.0.1.253
5 2 ms 1 ms 1 ms 10.0.1.253
ICMP Debug on 10.0.1.253
004674: *Nov 8 09:19:19.685 CST: ICMP: redirect sent to 10.0.1.1 for dest 192.1
68.10.7, use gw 10.0.1.254
004675: *Nov 8 09:19:19.749 CST: ICMP: time exceeded (time to live) sent to 10.
0.1.1 (dest was 192.168.10.7)
004676: *Nov 8 09:19:20.697 CST: ICMP: redirect sent to 10.0.1.1 for dest 192.1
68.10.7, use gw 10.0.1.254
004677: *Nov 8 09:19:20.721 CST: ICMP: time exceeded (time to live) sent to 10.
0.1.1 (dest was 192.168.10.7)
004678: *Nov 8 09:19:21.713 CST: ICMP: redirect sent to 10.0.1.1 for dest 192.1
68.10.7, use gw 10.0.1.254
004679: *Nov 8 09:19:21.737 CST: ICMP: time exceeded (time to live) sent to 10.
0.1.1 (dest was 192.168.10.7)
004680: *Nov 8 09:19:22.725 CST: ICMP: redirect sent to 10.0.1.1 for dest 192.1
68.10.7, use gw 10.0.1.254
004681: *Nov 8 09:19:22.753 CST: ICMP: time exceeded (time to live) sent to 10.
0.1.1 (dest was 192.168.10.7)
show ip route (on 10.0.1.253)
Gateway of last resort is xxx to network 0.0.0.0
XX.0.0.0/30 is subnetted, 1 subnets
C XX.XX.XX.XX is directly connected, Serial0/1/0
S 192.168.10.0/24 [1/0] via 10.1.1.1
10.0.0.0/8 is variably subnetted, 3 subnets, 2 masks
C 10.1.1.0/30 is directly connected, Serial0/0/0.1
D 10.0.0.0/24 [90/3847680] via 10.1.1.1, 1d17h, Serial0/0/0.1
C 10.0.1.0/24 is directly connected, FastEthernet0/1
XX.0.0.0/27 is subnetted, 1 subnets
C XX.XXX.XXX.xXX is directly connected, FastEthernet0/0
S* 0.0.0.0/0 [1/0] via XX.XX.XX.XX
Probably something stupid I am missing, router configs are attached. Any help would be much appreciated
Thanks!
