Dear hullc65203;
In mpls system, ISP has to define default route for MPLS VPN clients. If they didn't anouncing originate route they have to write all CP router. Please inform your ISP about it.
Main Topics
Browse All TopicsI've put in a new MPLS system and it seems to be working internally just fine.
My main office is 10.71.42.0 The MPLS router that goes to my branches is at 10.71.42.142.
All Internet bound traffic is routed to the firewall at 192.168.1.1
I can get to the Internet from 10.71.42.0, but can't from any of my branches (10.71.40.0, 10.71.41.0, 10.71.43.0) coming from 10.71.42.142.
Can someone take a look at my config and see if I'm overlooking something?
Building configuration...
Current configuration : 2419 bytes
!
! Last configuration change at 15:14:02 UTC Mon Sep 8 2008
! NVRAM config last updated at 15:14:38 UTC Mon Sep 8 2008
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname CFB-1750
!
boot-start-marker
boot-end-marker
!
no logging console
enable secret 5 $xxxxxxxxxxxxxxxxxxxxxxxxO
!
memory-size iomem 25
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
no aaa new-model
ip subnet-zero
!
!
!
ip cef
ip inspect name firewall cuseeme
ip inspect name firewall fragment maximum 256 timeout 1
ip inspect name firewall ftp
ip inspect name firewall http java-list 51
ip inspect name firewall realaudio
ip inspect name firewall smtp
ip inspect name firewall sqlnet
ip inspect name firewall streamworks
ip inspect name firewall tftp
ip inspect name firewall vdolive
ip inspect name firewall tcp
ip inspect name firewall udp
ip inspect name firewall h323
ip audit po max-events 100
no ftp-server write-enable
!
!
!
!
!
!
!
interface Ethernet0
description Connected to DMZ
ip address 192.168.1.254 255.255.255.0
ip helper-address 10.71.42.125
ip helper-address 10.71.42.164
half-duplex
no cdp enable
!
interface FastEthernet0
description Connected to Protected
ip address 10.71.42.126 255.255.255.128 secondary
ip address 10.71.42.158 255.255.255.224
ip helper-address 10.71.42.164
ip helper-address 10.71.42.125
no ip redirects
ip route-cache same-interface
speed 100
full-duplex
no cdp enable
!
interface Serial0
no ip address
shutdown
no fair-queue
no cdp enable
!
ip classless
ip route 0.0.0.0 0.0.0.0 192.168.1.1
ip route 10.6.1.0 255.255.255.0 10.71.42.99
ip route 10.71.40.0 255.255.255.0 10.71.42.142
ip route 10.71.41.0 255.255.255.0 10.71.42.142
ip route 10.71.42.160 255.255.255.224 192.168.1.1
ip route 10.71.43.0 255.255.255.0 10.71.42.142
ip route 10.71.44.0 255.255.255.0 10.71.42.142
ip route 10.71.45.0 255.255.255.0 192.168.1.1
ip route 10.73.18.0 255.255.254.0 10.71.42.129
ip route 10.120.168.0 255.255.255.0 10.71.42.99
ip route 192.9.200.0 255.255.255.0 10.71.42.129
no ip http server
no ip http secure-server
!
!
no cdp run
!
!
line con 0
exec-timeout 120 0
login
transport preferred all
transport output all
line aux 0
line vty 0 4
exec-timeout 120 0
password xxxxxxxxxxxxx
login
transport preferred all
transport input all
transport output all
!
!
end
CFB-1750#
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Business Accounts
Answer for Membership
by: hullc65203Posted on 2008-12-19 at 09:45:12ID: 23213953
Can I cancel this question? I've determined it cannot be my Cisco router that's causing the problem.
I disconnected the router at .142 and replaced it with a laptop at the same IP. I can get out to the Internet using the laptop, so the problem must lie with the AT&T router at .142
Thanks!