Cisco IP Tunneling

It sorta paints a picture, but I'm a little confused on the network layout of this example.  the address that you are tuneling to, the 1.100.200.100, is that a router on the inside of the central site's ethernet side, or is that a workstation?  Also, I assume that the link between 20.21.79.6 and 10.11.1.1 is an internet connection (since the addresses lie on different networks) I drew your description out on paper, but I'm not really sure where everything goes, hence I'm having trouble applying it to my situation.  Any more ip descriptions of the interfaces you could give me would be greatly helpful.  I'm sure it will clear up if we hammer at it.

I tried to set up an example here similar using this information, and I just can't seem to make it work.  The tunnels are configured and the routes entered, and when i try and ping the other side of the tunnel (using the private 192.168.x address) a traceroute shows that the data only makes it to my gateway address (one hop past my router).  It does this both ways.  This is making me think that I'm doing something wrong, or I'm assuming something that I should not be assuming.  Where do I go from here?  

Oh - one more question.  in my configuration I'm telling it

tunnel mode ipip

I didn't see that on yours. do I need to have that or do I want to NOT have that?

Thanks!

I got an email from ee saying that someone posted a proposed answer to this question, but I don't see it here :)  If you did, please try again.

Hi Kittlej,

Sorry, my answer didn't quite make it to the webpage. First time here ..... grin

I run a tunnel from the Newspaper to our ISP and also had endless hassles initially.

Basically, the tunnel needs two ends, from both sides, not just from one.

First and foremost, what version code are u running on your routers? Perhaps there is a code problem (seen it before)

12.x code Each router is slightly different and I've tried it on several. Here's what I'm not sure if I can do ... On one LAN the equipment has 192.168.1.x addresses, and on the other LAN the equipment has 192.168.7.x addresses.  Going through this tunnel , via the internet, how can I make the internal networks (running private IP's) talk via the routers (which both have public addresses on the serial and ethernet sides).  Right now both routers are programmed w/ public addresses on both interfaces. Do I need to put 192.168.1.1 on the inside of the one and 192.168.7.254 on the inside of the other? The documentation is just very poor on doing this.

Public numbers is fine, I use them as well.

To have a successfull tunnel, try this.

Ok, it gets a bit complicated, so please bear with me, if I explain it not so good, just let me know, and I'll try to do it a bit better, ok? :)

Now add a ip route like this:
Lets say your loopback IP is 192.168.1.5
ip route 192.168.1.6 255.255.255.255 (now lets say the one interface Serial1 is IP 192.168.1.10) 192.168.1.9 200 (it's weight)
We are going to be using the loopback later ....

Make sense?

Basically, what we are doing, is creating an IP route per interface from the one router to the other, but only the interfaces that are connected to one another. This is so OSPF can learn new addresses.
The weight of 200 just means that whatever traffic you want to have travel will do so smoothly.
All this is under IP CLASSLESS.

Ok, do this first and let me know, ok?

let me ponder this a while and I'll get back to you :) (I have some more routers coming and I'm going to set this up on the table and do it here in a lab setup rather than across the world.  

Wise choice.
All the best.

Ok I have been thinking about this more and more, and even having dreams about cisco routers :) I think it's time I figure this out.  To avoid all confusion and start "fresh" which is what I think I need, I'm going to dummy down and start from the beginning and re-explain what I am trying to do. That way maybe any assumptions that I or anyone else have made can be not assumed. Here goes.. I'm telling you everything.
  I have a Cisco 2620 Router @ our NOC and Cisco 1720 routers across the US in various locations.  The WAN ports on all of these devices are configured with globally accesible internet ip addresses.  I have been assigned a pool of globally accessible IP addresses for use on the LAN side of these routers.  Lets assume for a minute that I have not programmed the LAN side of these routers.
  At our NOC we run a 192.168.1.0 network with 192.168.1.1 through 192.168.1.254 as valid addresses.  At our remote locations we run a 192.168.X.0 network (192.168.3.X, 192.168.4.X, etc.) Each of these networks have 192.168.X.1 through 192.168.X.254 as valid addresses.  So far this is pretty straight forward and I'm not doing any weird subnetting here.  
  What I want to do is simple.  Using the Cisco routers, I wish to connect these LAN's into a VPN using IP in IP (or IP GRE - I'm not sure which is appropriate) tunneling.  Here are my questions - at least round 1

1)  On the various routers, for the LAN side address, do I want to assign them a globally unique IP address out of my assigned range, or do I want to assign them an address on my LAN?

2) To connect these routers to the internet I currently run RIP. Do I want to leave my RIP configuration alone and just add static routes to configure the tunnels?

Keep in mind that security is not very important (well, I'm not transmitting the secret recipie to CocaCola or anything over these links. They will simply be used to monitor the ICMP status and SNMP status of equipment on each LAN from our NOC.
 Oh and by the way (note to all):  Please do not think that I am just asking this question without researching it myself. I have spent many hours looking through Cisco books @ Barnes & Noble as well as many hours searching for turorials on the internet on how to do exactily what I want.  I have set an emulated environment up on a table here and toyed with it too. Please do not think that I'm just asking what may be "dumb questions" as I've really tried to find the answers.  I'm no CCNA (yet) and I just don't have enough time and experience with these routers to do this on my own. (I tried to RTFM first!)  

I believe that I have given enough information that someone can draw this on paper and see just what it is that I'm trying to do. I want any device (ie 192.168.7.11) to be able to talk to any other device (ie 192.168.1.22) via the tunnel over the internet.

Any assistance would be appreciated and help relieve the headaches I'm having with this project.  Thanks in advance!

Hi Kittlej,
Sorry I've been away for so long. Editorial hassles that have my hair turnjing grey :)

First off, can you change to OSPF and run static routes?

Do I have to? (whimper, whimper)   What would the requirements be for me to change to OSPF. I'm semi-familiar with the basic concept of OSPF routing, never actually implemented it.  Since these routers are essentially internet access routers, would my provider (QWEST) have to support OSPF, or can I run whatever I want since they are my routers?  I don't have any objections to it, I just want to get all the info first :)
 

The heat is being turned up. Please help!

Kittlej,
   okay, just a question or two for you, but I;m pretty sure I can help.  I will try to do so with what you have said so far.  I am assuming that your tunnel interfaces have been set up already.  These tunnel interface can have an IP address from a private range.  This is usually how I set them up.  Then, you need to configure the tunnel source and tunnel destination parameters on that interface.  These will be the globally accessible addresses that you have configured on your WAN links.  Also, to answer your questions from above:
1) You should assign an address from your LAN, for example 192.168.2.1
2) Your RIP configuration should be fine.  From there you can either configure static routes or another routing protocol.
I hope this helps, with a little more information, I'm sure we can get it fixed.  If you would like, I can post a sample config for you to base it off of...just let me know.

-Lamfada

Actually last night I made an all-nighter at work, pulled out the cots and all.  I was able to get the tunneling working.  Thanks for everyone's attempts to help, but I figured it out.  Note to E.E. moderator: you may want to save this information for possible future access by other users.. maybe it will help them out.