Connectivity to Brazil

[isabeldias1 at yahoo.com (isabel dias)]

who are you?




________________________________
From: Steve Danelli <the76posse at gmail.com>
To: "nanog at nanog.org" <nanog at nanog.org>
Sent: Tue, February 1, 2011 1:54:47 PM
Subject: Connectivity to Brazil

Hello all!!!? First post here? 

Some carrier, somewhere between us and the service provider is selectively 
dropping the IKE packets originating from our VPN gateway and destined for our 
Brazil gateway. Other traffic is able to pass, as are the IKE packets coming 
back from Brazil to us. This is effectively preventing us from establishing the 
IPSEC tunnel between our gateways.

Also something else is awry, for two given hosts on the same subnet (x.y.z.52 
and x.y.z.53), they take two wildly divergent paths:


For dest? x.y.x.52

? 16 ms? ? 3 ms? ? 3 ms? xe-2-3-0.cr1.lga5.us.above.net [64.125.31.34]
? 2 ms? ? 2 ms? ? 2 ms? xe-0-1-0.er1.lga5.us.above.net [64.125.27.61]
? 12 ms? ? 3 ms? ? 13 ms? e2-4-10000m.ar9.nyc1.gblx.net [208.178.58.197]
? 117 ms? 118 ms? 118 ms? te3-4-10g.asr1.gru1.gblx.net [67.16.142.238]
? 136 ms? 137 ms? 136 ms? 
ctbc-multimidia-data-net-s-a.gigabitethernet1-2.ar5.gru1.gblx.net 
[207.138.94.102]
? 157 ms? 136 ms? 138 ms? xe-3-2-0-0.core-b.ula001.ctbc.com.br [201.48.44.165]
? 132 ms? 132 ms? 141 ms? ge-3-0-0-0.core-b.spo511.ctbc.com.br [201.48.44.14]
? 135 ms? 133 ms? 134 ms? ae1-0.edge-a.spo511.ctbc.com.br [201.48.44.93]


For dest? x.y.x.53

? 3 ms? ? 2 ms? ? 3 ms? xe-2-3-0.cr1.lga5.us.above.net [64.125.31.34]
? 2 ms? ? 2 ms? ? 2 ms? xe-1-1-0.er1.lga5.us.above.net [64.125.26.162]
? 19 ms? ? 3 ms? ? 12 ms? e2-4-10000m.ar9.nyc1.gblx.net [208.178.58.197]
? 117 ms? 117 ms? 117 ms? te3-4-10g.asr1.gru1.gblx.net [67.16.142.238]
? 117 ms? 117 ms? 118 ms? 64.209.106.170
? 118 ms? 118 ms? 118 ms? ae1-0.edge-a.spo511.ctbc.com.br [201.48.44.93]

Anyone have any insight on to what may be occurring?



Sent from my iPhone