I have 2 887's on ADSL lines with a site2site VPN link
I cannot successfully ping from either router to the network behind the other router (or the other router).
I can ping from behind one router to the other - although if a tracert is done then neither router show up in the trace.
I think it's the cause of my problems with IP phones behind router2 going to the PBX behind router1 - I can hear them, they cannot hear me.
Help?
TIA
Router1 Config:
Router#show run
Building configuration...
Current configuration : 3868 bytes
!
version 15.0
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
no logging console
enable secret 5 <pwd>
!
no aaa new-model
memory-size iomem 10
!
crypto pki trustpoint TP-self-signed-2685432797
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-2685432797
revocation-check none
rsakeypair TP-self-signed-2685432797
!
!
crypto pki certificate chain TP-self-signed-2685432797
certificate self-signed 01
3082023E 308201A7 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 32363835 34333237 3938301E 170D3131 30343134 30383539
31395A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D32 36383534
33323739 3830819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100EA5A 1BB4E765 B4C12181 732AF3FD 884D0BA6 7FAF98B5 8A5B8687 22B9F66C
25D174BD 72B9A39B 8E0FB423 3BA2E28B AA8676E6 672A6202 DBCD29EF 1A0297BD
A92EF133 F7267F75 322695BC D98039E6 62D9854A 1DAF89C3 306AC471 F962E85A
7EA67238 B6243F3C C6E45011 B4953229 806D2894 6B49BAB2 F77B151C 2EBFFE6C
DAF70203 010001A3 66306430 0F060355 1D130101 FF040530 030101FF 30110603
551D1104 0A300882 06526F75 74657230 1F060355 1D230418 30168014 4B9BAB69
F9058B9E E8AFBC2E 685B234B 96B2E84F 301D0603 551D0E04 1604144B 9BAB69F9
058B9EE8 AFBC2E68 5B234B96 B2E84F30 0D06092A 864886F7 0D010104 05000381
81009233 CE9CEF0B D71CEC62 77A4887E 550662C3 2D8E3CE1 E3D891D1 A5603AC1
7E790D88 049904DD 92CFE5BA 8F79D8C4 65991279 C6328D83 318BCDD0 19C4BC1C
3FAB027B EDFB454D 07DA6FF0 ABBD290F 762349B5 E2C1310E 60A8BF36 AABE75E5
2912B145 3ADCEEB7 285F2AA7 C9C01B07 D04CB801 D18A924F 61F7393F 43A799CA F7C9
quit
ip source-route
!
!
ip dhcp excluded-address 10.10.10.1
!
ip dhcp pool dhcppool
network 10.10.10.0 255.255.255.0
default-router 10.10.10.1
dns-server 62.6.40.178
!
!
ip cef
ip name-server 62.6.40.178
no ipv6 cef
!
!
license udi pid CISCO887M-K9 sn FCZ1447C1UT
!
!
username admin privilege 15 password 0 <pwd>
username administrator privilege 15 password 0 <pwd>
!
!
!
!
crypto isakmp policy 9
hash md5
authentication pre-share
crypto isakmp key <key> address <Router2publicIP>
!
crypto ipsec security-association lifetime seconds 86400
!
crypto ipsec transform-set SIPTRAN esp-3des esp-md5-hmac
!
crypto map SIPMAP 10 ipsec-isakmp
set peer <router2publicip>
set transform-set SIPTRAN
match address 100
!
!
!
!
!
interface BRI0
no ip address
encapsulation hdlc
shutdown
isdn termination multidrop
!
interface ATM0
no ip address
no atm ilmi-keepalive
pvc 0/38
encapsulation aal5mux ppp dialer
dialer pool-member 1
!
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface Vlan1
ip address 10.10.10.1 255.255.255.0
ip nat inside
ip virtual-reassembly
!
interface Dialer1
ip address negotiated
ip nat outside
ip virtual-reassembly
encapsulation ppp
dialer pool 1
<ppp settings>
crypto map SIPMAP
!
ip forward-protocol nd
ip http server
ip http secure-server
!
ip nat inside source list 101 interface Dialer1 overload
ip route 0.0.0.0 0.0.0.0 Dialer1
!
access-list 100 permit ip 10.10.10.0 0.0.0.255 192.168.50.0 0.0.0.255
access-list 101 deny ip 10.10.10.0 0.0.0.255 192.168.50.0 0.0.0.255
access-list 101 permit ip 10.10.10.0 0.0.0.255 any
!
!
!
!
!
control-plane
!
!
line con 0
no modem enable
line aux 0
line vty 0 4
password <pwd>
login
!
scheduler max-task-time 5000
end
Router#
Router2 Config:
Router#show run
Building configuration...
Current configuration : 3915 bytes
!
! Last configuration change at 09:53:01 UTC Thu Apr 14 2011
!
version 15.1
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
no logging buffered
no logging console
enable password <pwd>
!
no aaa new-model
memory-size iomem 10
!
crypto pki trustpoint TP-self-signed-1771011129
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-1771011129
revocation-check none
rsakeypair TP-self-signed-1771011129
!
!
crypto pki certificate chain TP-self-signed-1771011129
certificate self-signed 01
3082023E 308201A7 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 31373731 30313131 3230301E 170D3131 30343134 30393334
31365A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D31 37373130
31313132 3030819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
81008EEC EB576A88 7F336550 4077E24C C114B534 D8616753 8E6E5AFC 98CE4FCF
5E6E2A95 A77AD164 28683F81 2B75E666 4D694388 F87087EC 8CF1C6C2 A45D8DFF
9EC097A2 418E9488 DF49D862 49F9BA4D 2A5FBD02 3D3402C2 69839F87 4160B865
BEF48FA2 B6169CF2 EDE981B7 E5C0C7C7 BCE44F95 BD52406F 657D5B9C 01B83A12
240B0203 010001A3 66306430 0F060355 1D130101 FF040530 030101FF 30110603
551D1104 0A300882 06526F75 74657230 1F060355 1D230418 30168014 1DF5B56B
BB7657FB 52711C44 7D14E4E5 D221FAD4 301D0603 551D0E04 1604141D F5B56BBB
7657FB52 711C447D 14E4E5D2 21FAD430 0D06092A 864886F7 0D010104 05000381
81003DFC BF2B41DB 0B452765 F40412CA 23A31916 6F8389E7 C1D5A220 71A82FC6
E38CC70B DF60AE83 BC02ACB7 7DFE7F2D D9F307BB F32294CF C12821D2 79C1DC52
7A27AA7C 0ED1472A 11373EFA 1375BA99 4FB59CA0 68D946BA 834FB3B9 EEE30A0C
C5AAD34C 9119F259 6D1BBB2A 1CB7E4AB 586EE7ED 26EAC9F8 D54D6A55 5CE2997D 2020
quit
ip source-route
!
!
ip dhcp excluded-address 192.168.50.252
!
!
ip cef
ip name-server 62.6.40.178
no ipv6 cef
!
!
license udi pid CISCO887M-K9 sn FCZ150290QY
!
!
username admin privilege 15 password 0 <pwd>
username administrator privilege 15 password 0 <pwd>
!
!
!
!
!
!
crypto isakmp policy 9
hash md5
authentication pre-share
crypto isakmp key <key> address <router1publicip>
!
crypto ipsec security-association lifetime seconds 86400
!
crypto ipsec transform-set SIPTRAN esp-3des esp-md5-hmac
!
crypto map SIPMAP 10 ipsec-isakmp
set peer <router1publicip>
set transform-set SIPTRAN
match address 100
!
!
!
!
!
interface BRI0
no ip address
encapsulation hdlc
shutdown
isdn termination multidrop
!
interface ATM0
no ip address
no atm ilmi-keepalive
pvc 0/38
encapsulation aal5mux ppp dialer
dialer pool-member 1
!
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface Vlan1
ip address 192.168.50.252 255.255.255.0
ip nat inside
ip virtual-reassembly
!
interface Dialer1
ip address negotiated
ip nat outside
ip virtual-reassembly
encapsulation ppp
dialer pool 1
<ppp settings>
crypto map SIPMAP
!
ip forward-protocol nd
ip http server
ip http secure-server
!
ip dns server
ip nat inside source list 101 interface Dialer1 overload
ip route 0.0.0.0 0.0.0.0 Dialer1
!
access-list 100 permit ip 192.168.50.0 0.0.0.255 10.10.10.0 0.0.0.255
access-list 101 deny ip 192.168.50.0 0.0.0.255 10.10.10.0 0.0.0.255
access-list 101 permit ip 192.168.50.0 0.0.0.255 any
!
!
!
!
!
control-plane
!
!
line con 0
no modem enable
line aux 0
line vty 0 4
password <pwd>
login
transport input all
!
scheduler max-task-time 5000
end
Router#
