I have two routers connected via a T1 line linking two networks. Traffic
between these two networks ( A and B ) is fine. I have a third network (
C ) connected via a VPN on network A.

I can ping C from A, but can't ping C from B. B has a static route that
says for network C go down T1 line.

Why does it seem as though Router A won't forward that traffic out its
ethernet port to hit the VPN router? By itself Router A works fine.

Router B:
ip route C subnet Serial 0

Router A
ip route all subnet Firewall

AJ

In article <10fqrhlnbjo0vcf@corp.supernews.com>,
"Andrew Jones" <ajones@kvmhc.org> wrote:

> I have two routers connected via a T1 line linking two networks. Traffic
> between these two networks ( A and B ) is fine. I have a third network (
> C ) connected via a VPN on network A.
>
> I can ping C from A, but can't ping C from B. B has a static route that
> says for network C go down T1 line.

Does C have a route saying to use the VPN tunnel to get to B?

Do traceroutes from each end and see where they each fail.

--
Barry Margolin, barmar@alum.mit.edu
Arlington, MA
*** PLEASE post questions in newsgroups, not directly to me ***

Barry Margolin wrote:

> In article <10fqrhlnbjo0vcf@corp.supernews.com>,
> "Andrew Jones" <ajones@kvmhc.org> wrote:
>
>
>>I have two routers connected via a T1 line linking two networks. Traffic
>>between these two networks ( A and B ) is fine. I have a third network (
>>C ) connected via a VPN on network A.
>>
>>I can ping C from A, but can't ping C from B. B has a static route that
>>says for network C go down T1 line.
>
>
> Does C have a route saying to use the VPN tunnel to get to B?
>
> Do traceroutes from each end and see where they each fail.
>
Are you using any form of route advertising, e.q. RIP, EIGRP, OSPF??

The communication between A and B can be fine depending on the
configurations, but is there is no dynamic routing protocol or manually
updated static routing table, it sounds very logical to me that you
can't ping network C from network B, if it's connecting to network A....

Check your route table on de routers of all networks.

As Barry suggests, a traceroute can be quite helpfull here...