Michael Williams wrote: > > If you have an IP address on the serial interface, you won't be > able to ping it locally. If you configure your link as a > subinterface (using S0.1 instead of S0), then you can ping it. > Don't know why, but we ran into that and were pulling our hair > out until I read somewhere on Cisco's site that this was the > case.
No, that is not true, you can ping it locally but the packet must first bounce off the remote router. So the remote router must be reachable and allowing ICMP traffic. If you are using Frame-Relay then we have a new issue. You must create a PVC to allow the ping to return. Here is an experiment I just performed. 1.1.1.1 is the remote IP address and 1.1.1.2 is the local IP address. --------------------------------------- local#ping 1.1.1.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 1.1.1.1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 32/35/36 ms local#ping 1.1.1.2 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 1.1.1.2, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 68/71/80 ms ---------------------------------------- Now I applied the following access to the inbound side of the remote router (1.1.1.1) access-list 100 deny icmp any any access-list 100 permit ip any any Here are the results: ---------------------------------------- local#ping 1.1.1.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 1.1.1.1, timeout is 2 seconds: U.U.U Success rate is 0 percent (0/5) local#ping 1.1.1.2 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 1.1.1.2, timeout is 2 seconds: U.U.U Success rate is 0 percent (0/5) --------------------------------------- Notice I can now no longer ping the local interface! Cool, huh! Take care, Paul Borghese Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=25077&t=25040 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
