Unable to traceroute using Draytek Vigor 2820

Hi everyone,
I have a problem I was hoping someone can help me with please, we have 2 offices, with a Draytek Vigor 2820 router installed at each office. Each has a static IP Address
I have configured a LAN > LAN connection between the routers. This shows as connected under Connection Management.
The LAN > LAN connection is an IPSec Tunnel with 3DES_SHA1 Auth
Network 1 Router IP is 192.168.1.1
Network 2 Router IP is 10.10.30.1
Staff in both offices can access the Internet Ok,
I can ping internal addresses on both networks from the Draytek ping utility on the router config page but I am unable to trace to any of the addresses, does anyone have any ideas what this could be.
If I even try and trace to the routers own address from the routers config page, I get the following:

traceroute to 10.10.30.1, 30 hops max through WAN1 protocol ICMP
  1 Request timed out.     *
  2 Request timed out.     *
Trace complete.

I am really stuck with this one.

Thanks.
jimboyle1981Asked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

RGRodgersCommented:
Tracert uses ICMP Ping across each hop in the path.  Any hop that will not respond times out, as above.  Some hops will not respond to ping, perhaps because of firewall rules.  Any device that you are able to ping should respond to tracert.  But, if there are any hops in the path that won't respond to ping, they will time out.
0
jimboyle1981Author Commented:
Thanks for the info, but IP Addresses I can ping Ok I cannot trace to, as you can see below:

Pinging 10.0.1.5 with 64 bytes of Data:
Receive reply from 10.0.1.5, time=100ms
Receive reply from 10.0.1.5, time=100ms
Receive reply from 10.0.1.5, time=120ms
Receive reply from 10.0.1.5, time=100ms
Receive reply from 10.0.1.5, time=100ms
Packets: Sent = 5, Received = 5, Lost = 0 (0% loss)

traceroute to 10.10.30.1, 30 hops max through WAN1 protocol ICMP
  1 Request timed out.     *
  2 Request timed out.     *
Trace complete.

Still struggling with this.

0
RGRodgersCommented:
Alright, I don't know your equipment, but would you have tracert blocked at some point?  For example:
access-list 101 deny icmp any any traceroute
Or, in some cases, it might be done through a GUI.
Sorry I can't be more help...
0
q2qCommented:
On the trace route page change the protocol  to udp instead of ICMP this will then work fine. We cannot do ICMP trace routes either.
udp-trace.bmp
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Internet Protocol Security

From novice to tech pro — start learning today.