Posted: Thu Feb 22, 2018 14:59 Post subject: Problem with Static Routes
I recently purchased an R7800 and there are a couple of routers (Cisco) connected to it. I can ping the R7800 from the next router (a C2821) but not from subnets unknown to the R7800 (on a Catalyst 3750 connected to the C2821).
I added static routes to the R7800 and have EIGRP running on the Cisco boxes.
There's a static default route on the C2821 pointing to the R7800 and that static route is redistributed into EIGRP so the Catalyst 3750 knows about the default route.
All testing indicated that traffic from subnets on the 3750 is getting to the R800 but none coming back.
On the R7800 CLI, the "route" command indicates that all of the static routes are in the route table.
Can anyone suggest why traffic is not coming back from the R7800.
I have added the following commands to the R7800:
iptables -l FORWARD -s 192.168.3.0/24
iptables -l FORWARD -s 192.168.11.0/24
iptables -l FORWARD -s 192.168.12.0/24
iptables -l FORWARD -s 192.168.13.0/24
iptables -l FORWARD -s 192.168.14.0/24
iptables -l FORWARD -s 192.168.16.0/24
iptables -l FORWARD -s 192.168.17.0/24
iptables -l FORWARD -s 192.168.20.0/24
iptables -t nat -I POSTROUTING -o 'get_wanface' -j SNAT --to 'nvram get wan-ipaddr'
The subnets above all exist on the 3750. The link between the R7800 and the C2821 is 192.168.6.0/24
I can PING from 192.168.6.2 on the C2821 to 192.168.6.1 on the R7800.
I'm guessing that the firewall on the R7800 is preventing routing of traffic from any subnet other than the attached one.
Anyone know how to make this work?