Unable to traceroute using Draytek Vigor 2820

Hi everyone,
I have a problem I was hoping someone can help me with please, we have 2 offices, with a Draytek Vigor 2820 router installed at each office. Each has a static IP Address
I have configured a LAN > LAN connection between the routers. This shows as connected under Connection Management.
The LAN > LAN connection is an IPSec Tunnel with 3DES_SHA1 Auth
Network 1 Router IP is 192.168.1.1
Network 2 Router IP is 10.10.30.1
Staff in both offices can access the Internet Ok,
I can ping internal addresses on both networks from the Draytek ping utility on the router config page but I am unable to trace to any of the addresses, does anyone have any ideas what this could be.
If I even try and trace to the routers own address from the routers config page, I get the following:

traceroute to 10.10.30.1, 30 hops max through WAN1 protocol ICMP
  1 Request timed out.     *
  2 Request timed out.     *
Trace complete.

I am really stuck with this one.

Thanks.
jimboyle1981Asked:
Who is Participating?
 
q2qConnect With a Mentor Commented:
On the trace route page change the protocol  to udp instead of ICMP this will then work fine. We cannot do ICMP trace routes either.
udp-trace.bmp
0
 
RGRodgersCommented:
Tracert uses ICMP Ping across each hop in the path.  Any hop that will not respond times out, as above.  Some hops will not respond to ping, perhaps because of firewall rules.  Any device that you are able to ping should respond to tracert.  But, if there are any hops in the path that won't respond to ping, they will time out.
0
 
jimboyle1981Author Commented:
Thanks for the info, but IP Addresses I can ping Ok I cannot trace to, as you can see below:

Pinging 10.0.1.5 with 64 bytes of Data:
Receive reply from 10.0.1.5, time=100ms
Receive reply from 10.0.1.5, time=100ms
Receive reply from 10.0.1.5, time=120ms
Receive reply from 10.0.1.5, time=100ms
Receive reply from 10.0.1.5, time=100ms
Packets: Sent = 5, Received = 5, Lost = 0 (0% loss)

traceroute to 10.10.30.1, 30 hops max through WAN1 protocol ICMP
  1 Request timed out.     *
  2 Request timed out.     *
Trace complete.

Still struggling with this.

0
 
RGRodgersCommented:
Alright, I don't know your equipment, but would you have tracert blocked at some point?  For example:
access-list 101 deny icmp any any traceroute
Or, in some cases, it might be done through a GUI.
Sorry I can't be more help...
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.