Cisco 2620 - cannot ping gateway from 2nd router

rbtg
rbtg used Ask the Experts™
on
I have CCNA lab with 2 Cisco 2620s connected by 2 WIC-1DSU T1 cards and each with connected FastEthernet ports. The ports are as followed

Router 1:
FA0/0: 72.43.231.245 /24
S0/0: 10.10.20.1 /29

Router 2:
FA0/0: 192.168.25.1 /24
S0/0: 10.10.20.2 /29

The connection between the 2 routers is working  (I can ping all ports from inside each router, and I can ping all ports from my PC) however I am not able to ping the gateway or any external IP address from the PC, 2nd router, or using the serial port on the first router using extended ping. Any Help would be greatly appreciated

Here are the run configs

Router 1:

R-Main#sho run
Building configuration...

Current configuration : 1097 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R-Main
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
ip cef
!
!
!
!
ip name-server 8.8.8.8
!
!
!
!
!
!
!
interface Loopback0
 ip address 172.16.1.1 255.255.0.0
!
interface Loopback1
 ip address 172.20.1.1 255.255.0.0
!
interface FastEthernet0/0
 ip address 72.43.231.245 255.255.255.0
 ip nat outside
 duplex auto
 speed auto
!
interface Serial0/0
 ip address 10.10.20.1 255.255.255.248
 ip nat inside
 encapsulation ppp
 service-module t1 clock source internal
 service-module t1 timeslots 1-24
!
interface Serial0/1
 no ip address
 shutdown
!
router eigrp 20
 network 10.0.0.0
 network 72.0.0.0
 network 172.16.0.0
 network 172.20.0.0
 no auto-summary
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 FastEthernet0/0 72.43.231.1
!
no ip http server
no ip http secure-server
!
!
control-plane
!
!


Router 2:

R-Sub1#sho run
*Mar 10 23:00:17.547: %SYS-5-CONFIG_I: Configured from console by console
Building configuration...

Current configuration : 1251 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R-Sub1
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
ip cef
!
!
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.25.1 192.168.25.100
!
ip dhcp pool POOL1
   network 192.168.25.0 255.255.255.0
   dns-server 8.8.8.8
   default-router 192.168.25.1
   domain-name CISCO-LAB
   lease 3
!
!
ip name-server 8.8.8.8
!
!
!
!
!
!
!
interface Loopback0
 ip address 172.30.1.1 255.255.0.0
!
interface Loopback1
 ip address 172.31.1.1 255.255.0.0
!
interface FastEthernet0/0
 ip address 192.168.25.1 255.255.255.0
 duplex auto
 speed auto
!
interface Serial0/0
 ip address 10.10.20.2 255.255.255.248
 ip nat inside
 encapsulation ppp
 service-module t1 timeslots 1-24
!
router eigrp 20
 network 10.0.0.0
 network 172.30.0.0
 network 172.31.0.0
 network 192.168.25.0
 no auto-summary
!
ip default-gateway 10.10.20.1
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 Serial0/0 10.10.20.1
!
no ip http server
no ip http secure-server
!
!
control-plane
!
!
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
RafaelArchitect - Network Engineer - Instructor

Commented:
On Router 2

Change ip route 0.0.0.0 0.0.0.0 Serial0/0 10.10.20.1 to
ip route 0.0.0.0 0.0.0.0 Serial0/0

Author

Commented:
Thank you for the answer. I was able to determine the issue - "deny any" was set as first on my access-list. It is working correctly now.
Architect - Network Engineer - Instructor
Commented:
ok. On a side note I would add in the below on your Ethernet's if possible.

 no ip redirects
 no ip unreachables
 no ip proxy-arp
 duplex auto
 speed auto


Hope everything goes well.

-Rafael

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial