We have a MPLS (3MB) multilink circuit coming into our corporate office. When trying to access the Internet, DNS resolves fine, but the packet is dropped on the next hop on the MPLS network. In this case 172.31.255.25 (MPLS router). Private IP addressing on the 192.168.1.0 / 24 network work fine, it's just public IPs that are dropped. I have contacted the service provider and they are indicating it is something on our network not allowing public IPs thru. When doing a traceroute to yahoo.com I get:
Success rate is 100 percent (5/5), round-trip min/avg/max = 44/44/44 ms
Fort_Collins_CO#ping
www.yahoo.com Translating "
www.yahoo.com"...domain server (192.168.1.100) [OK]
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 209.191.93.52, timeout is 2 seconds:
UUUUU
Success rate is 0 percent (0/5)
Fort_Collins_CO#traceroute
209.191.93.52
Type escape sequence to abort.
Tracing the route to
www.yahoo-ht3.akadns.net (209.191.93.52)
1 172.31.255.25 !N !N !N
Here is the remote end config:
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Fort_Collins_CO
!
boot-start-marker
boot-end-marker
!
logging buffered 51200 warnings
!
clock timezone MST -7
clock summer-time MST recurring
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
no aaa new-model
ip subnet-zero
ip cef
!
!
ip domain name dxpe.com
ip name-server 192.168.1.100
ip name-server 192.168.1.101
!
interface FastEthernet0/0
ip address 192.168.133.1 255.255.255.0
ip helper-address 192.168.1.100
ip helper-address 192.168.1.101
duplex auto
speed auto
!
interface FastEthernet0/1
no ip address
duplex auto
speed auto
!
interface Serial0/1/0
description <<Link to Level3 MPLS Network>>
ip address 172.31.255.26 255.255.255.252
encapsulation ppp
service-module t1 timeslots 1-24
!
router eigrp 1
network 192.168.133.0
no auto-summary
!
router ospf 1
log-adjacency-changes
network 172.31.255.24 0.0.0.3 area 0
network 192.168.133.0 0.0.0.255 area 0
!
ip classless
no ip forward-protocol udp tftp
no ip forward-protocol udp domain
no ip forward-protocol udp time
no ip forward-protocol udp netbios-ns
no ip forward-protocol udp netbios-dgm
no ip forward-protocol udp tacacs
ip forward-protocol udp 1604
ip route 0.0.0.0 0.0.0.0 172.31.255.25
!
ip flow-export version 5
ip flow-export destination 192.168.4.44 2055
!
no ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
==========================
==========
==========
==========
=
Our WAN core config:
version 12.4
service timestamps debug datetime msec
service timestamps log datetime localtime
no service password-encryption
!
hostname HostRouter7
!
boot-start-marker
boot-end-marker
!
logging buffered 51200 informational
logging console informational
!
aaa new-model
!
!
aaa authentication login default local
!
aaa session-id common
!
resource policy
!
clock timezone CST -6
clock summer-time CST recurring
no network-clock-participate wic 3
ip subnet-zero
!
!
ip cef
!
!
ip flow-cache timeout active 1
ip domain name dxpe.com
ip name-server 192.168.1.100
ip name-server 192.168.1.101
!
!
!
username admin password 0 2nome2
!
!
controller T1 0/3/0
framing esf
linecode b8zs
channel-group 0 timeslots 1-24
description <<inbound T1 MPLS 0/3/0>>
!
controller T1 0/3/1
framing esf
linecode b8zs
channel-group 0 timeslots 1-24
description <<inbound T1 MPLS 0/3/1>>
!
class-map match-any voice-signaling
match access-group 102
class-map match-any voice-stream
match access-group 101
!
!
policy-map MPLS
class voice-stream
priority percent 50
set ip dscp af21
class voice-signaling
bandwidth percent 5
class class-default
fair-queue
policy-map voice-T1
class voice-stream
priority 960
class voice-signaling
bandwidth 16
class class-default
fair-queue
!
!
!
!
interface Multilink1
description <Multilink1>
ip address 172.31.255.14 255.255.255.252
ppp multilink
ppp multilink group 1
!
interface FastEthernet0/0
ip address 192.168.1.60 255.255.255.0
ip route-cache flow
duplex auto
speed auto
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/3/0:0
description <<1st T1 MPLS in from L3>>
no ip address
encapsulation ppp
ppp multilink group 1
!
interface Serial0/3/1:0
description <<2nd T1 MPLS in from L3>>
no ip address
encapsulation ppp
ppp multilink group 1
!
router eigrp 1
redistribute static
redistribute ospf 1 metric 1000 100 250 1 1500
network 192.168.1.0
network 192.168.129.0
network 192.168.131.0
network 192.168.132.0
network 192.168.133.0
network 192.168.135.0
network 192.168.136.0
network 192.168.251.0
network 192.168.253.0
no auto-summary
!
router ospf 1
log-adjacency-changes
redistribute eigrp 1 subnets
network 172.31.255.12 0.0.0.3 area 0
!
ip classless
no ip forward-protocol udp netbios-ns
no ip forward-protocol udp netbios-dgm
ip flow-export version 5
ip flow-export destination 192.168.4.44 2055
!
ip http server
ip http authentication local
no ip http secure-server
!
access-list 101 permit ip any any dscp ef
access-list 102 permit ip any any dscp af41
access-list 102 permit ip host 192.168.1.14 any
access-list 102 permit ip any host 192.168.1.14
access-list 102 permit ip host 192.168.1.17 any
access-list 102 permit ip any host 192.168.1.17
access-list 102 permit ip host 192.168.1.31 any
access-list 102 permit ip any host 192.168.1.31
access-list 102 permit ip host 192.168.1.32 any
access-list 102 permit ip any host 192.168.1.32
snmp-server community Trinity3n1 RO
snmp-server community redrum RW
snmp-server enable traps tty
!
Start Free Trial
