I have a customer who have had a point to point leased line (wires Only) between 2 sites installed but I am having issues configuring the routers. Each router is at the latest software release and both are 2830
Each site have a separate subnet
Site A = 172.16.0.0/24 mask 255.255.255.0
Site B = 172.16.1.0/24 mask 255.255.255.0
The link has been tested by connecting Site A to a Netgear router with DHCP enabled and just plugging in a laptop in to site B where it gets an IP address and can access the internet so the link between sites is working.

I have searched for any information regarding this configuration without any luck.

I have attempted various configurations outlined below

Site A router configuration.
LAN IP address = 172.16.0.1 Mask 255.255.255.0 DHCP enabled with a pool count of 50 starting from 172.16.0.10
WAN 2 Static/Dynamic IP 10.0.0.2 (Site B) Mask 255.255.255.0 Gateway 10.0.0.1(Also tried with the address to be in the same subnet as the LAN)
LAN Static Route 172.16.1.0 Mask 255.255.255.0 Gateway address 10.0.0.1 WAN 2

Site B Router configuration
LAN IP address = 172.16.1.1 Mask 255.255.255.0 DHCP enabled with a pool count of 50 starting at 172.16.1.10
WAN 2 Static/Dynamic IP 10.0.0.1(Site A) Mask 255.255.255.0 Gateway 10.0.0.2 Also tried this with an IP address in the local subnet
LAN Static Route 172.16.0.0 Mask 255.255.255.0 Gateway address 10.0.0.2

I have the 2 routers currently connected next to each other and Tried with a Straight Ethernet cable and a Crossover Cable (not using the lease line I guess when they can communicate locally using what is effectively a longer patch lead will not be an issue.

My thought process on the above configuration
LAN straight forward.
WAN 2 10.0.0.1 or 2 respectively this is the destination IP address configured at the opposite WAN and the Gateway is the local address configured on each WAN 10.0.0.1 or 2 respectively locally
Static routes to get to the subnet 172.16.0.0/24 (or 172.16.1.0/24 )go via the WAN 2 port on 10.0.0.1 or 2 respectively

My first thoughts for tracking the problem down would be: -

• What do the routing tables say?


• What does a trace route report from one router to the other or from a client to remote router?


• Also is WAN 2 reporting as up on each router (status)?


• Telnet "port status" command?

Either cable should work because all the ethernet ports are fully auto negotiating.

Thanks for the reply Below is what I have tried on the routers

Site A (172.16.0.0/24) WAN 10.0.0.1)
WAN 2 is reported as Connected With TX and RX packets sent and received There are more packets sent 5144 at the same rate of 3Bps If I disconnect the cable the connection drops
Routing Tables
* 0.0.0.0/ 0.0.0.0 Via 10.0.0.1 WAN2
C 10.0.0.0/ 255.255.255.0 Directly Connected WAN 2
C~172.16.0.0/ 255.255.255.0 Directly connected LAN 1
S 172.16.1.0/ 255.255.255.0 Via 10.0.0.1 WAN 2


Trace Route Unspecified ICMP to 172.16.1.1
1 10.0.0.1 10MS
2 Request Timed out
3 Request Timed Out

Port Status WAN2 Link Up Speed 1000 MPBS Duplex Full Flow Control ON
WAN status Static IP up Time 22:50:30
IP=10.0.0.2 GW 10.0.0.1
TX Packets 834 TX Rate Bps=3 RX Packets=5145 RX Rate (Bps) =3

Site B (LAN 172.16.1.0/24) (WAN 10.0.0.2)
WAN 2 is reported as connected with TX/RX packets sent and received although received is low 90 in total at a rate of 3bps) If I disconnect the cable the connection drops
Routing Tables
* 0.0.0.0/ 0.0.0.0 Via 10.0.0.2 WAN2
C 10.0.0.0/ 255.255.255.0 Directly connected WAN 2
S 172.16.0.0/ 255.255.255.0 Via 10.0.0.2 WAN 2
C~ 172.16.1.0/ 255.255.255.0 Directly connected LAN 1

Trace Route Unspecified ICMP to 172.16.0.1
1 10.0.0.2 10MS
2 Request Timed out
3 Request Timed Out

Port Status WAN2 Link Up Speed 1000 MPBS Duplex Full Flow Control ON
WAN status Static IP up Time 22:50:30
IP=10.0.0.1 GW 10.0.0.2
TX Packets 5345 TX Rate Bps=158 RX Packets=972 RX Rate (Bps) =3

Please note I have tried to change the GW on each WAN connection to be either its self 10.0.0.1/2 respectively and also 172.16.0.1 / 172.16.1.1 respectively

(Ok, full disclosure, I've not actually done this exact setup! But I do know how it should work in principal. Also I'm on 2860 but still should be about the same)

The config look correct to me as do the routing tables.

Now, not exactly tackling the big picture here but do you have "Disable PING from the Internet" checked in System Maintenance >> Management? Because that would stop trace route working on the 2nd hop. This will not fix the problem of course but might help with diagnosis.

Another thing, there is a checkbox that should be checked in Firewall >> General Setup, Accept routing packet from WAN: IPv4 because without that it'll be doing NAT only over the WAN ports and blocking any routed packets. Actually, now I come to think, I a bit fuzzy on how to stop it doing NAT, I think the static route sorts that out though. Not certain if the firewall filters need to be on of off.

Thanks again for your reply and appreciate any help and tests to try

I have disabled the Firewall and the call filter/dater filter on both routers for testing but still no connection
I have enabled Ping from the internet on both routers
The check box Firewall>> General setup Block Routing packet from WAN IPV4 is unchecked on both routers
I still get the same trace route response
Router A
Trace Route Unspecified ICMP to 172.16.0.1
1 10.0.1.1 10MS
2 Request Timed out
3 Request Timed Out

Router B
Trace Route Unspecified ICMP to 172.16.1.1
1 10.0.0.1 10MS
2 Request Timed out
3 Request Timed Out

Well, I admit it, I'm kind of out of ideas here.