networking-forum.com
Community Blog • Community Wiki * Register  * Search  * Login
View unanswered posts • View active topics

Board index » Cisco Networking » Cisco Routing and Switching

All times are UTC - 6 hours [ DST ]


Post new topic Reply to topic  Page 1 of 1
  [ 6 posts ] 
  Print view Previous topic | Next topic 
Author Message
mknnoc
PostPosted: Thu Sep 20, 2012 11:36 pm 
Offline
Member
Member

Joined: Sat Jun 27, 2009 2:57 am
Posts: 163
Location: Phnom Penh, Cambodia
Our ESP traffic is passing through multiple nodes and we can not establish the tunnel.
and I want to know which node blocked ESP traffic.

How to trace which node blocked ESP traffic ?
Top
 Profile  
 
mynd
PostPosted: Fri Sep 21, 2012 7:12 am 
Offline
Senior Member
Senior Member
User avatar

Joined: Fri Jul 23, 2010 9:43 am
Posts: 407
Location: Central Ohio
Certs: CCNA, A+, Net+, Sec+, Server+
Have you done debugging on both sides to ensure the originating side *is* indeed sending the ESP packets? And that the peer is or is not receiving the packets?

Also, are you able to reach each peer from the other through ping? Or any other mechanism? This will ensure routing is setup properly

--Richard

_________________
http://justnetworked.wordpress.com
Top
 Profile  
 
mknnoc
PostPosted: Fri Sep 21, 2012 11:24 pm 
Offline
Member
Member

Joined: Sat Jun 27, 2009 2:57 am
Posts: 163
Location: Phnom Penh, Cambodia
ping or traceroute working fine. so, we wonder if ESP is blocked the way.
Top
 Profile  
 
davidrothera
PostPosted: Sat Sep 22, 2012 4:52 pm 
Offline
Ultimate Member
Ultimate Member
User avatar

Joined: Thu Jan 13, 2011 5:10 pm
Posts: 990
Location: Leeds, UK
Certs: CCIE R&S #38338, CCNP, CCIP
Thats not what he asked, have you checked that there are ESP packets leaving each FW?

_________________
---
David
CCIE R&S #38338, CCIP, CCNP

http://networkbroadcast.co.uk - My Blog
http://twitter.com/davidrothera
Top
 Profile  
 
burnyd
PostPosted: Sat Sep 22, 2012 10:53 pm 
Offline
Post Whore
Post Whore
User avatar

Joined: Fri Nov 13, 2009 5:15 pm
Posts: 2039
Location: Pittsburgh
Certs: CCIE R&S,CCIP,JNCIA,VCP510
davidrothera wrote:
Thats not what he asked, have you checked that there are ESP packets leaving each FW?



This.

_________________
"I will prepare and some day my chance will come." - Abraham Lincoln
http://danielhertzberg.wordpress.com - I blog about networks!
Top
 Profile  
 
Dinger
PostPosted: Mon Sep 24, 2012 8:23 am 
Offline
Post Whore
Post Whore
User avatar

Joined: Fri Apr 25, 2008 2:16 pm
Posts: 1374
Location: Jacksonville, FL
Certs: CCNP, CCNA:Sec, MCSE
Unless you have something akin to tcptraceroute, but for ESP traffic, you may have to verify it is leaving your network (and not being recieved by other) and then contact both ISPs. I had to do this recently, and it isn't much fun.

_________________
"A problem well stated is a problem half solved". (Charles Kettering)
Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  Page 1 of 1
  [ 6 posts ] 

Board index » Cisco Networking » Cisco Routing and Switching

All times are UTC - 6 hours [ DST ]

Who is online

Users browsing this forum: Bing [Bot], Google [Bot], Tagnard, totaluser, xp4000, yadhutony and 29 guests

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group