Connectivity to Brazil

Tue Feb 1 13:54:47 UTC 2011

Hello all!!!  First post here   

Some carrier, somewhere between us and the service provider is selectively dropping the IKE packets originating from our VPN gateway and destined for our Brazil gateway. Other traffic is able to pass, as are the IKE packets coming back from Brazil to us. This is effectively preventing us from establishing the IPSEC tunnel between our gateways.

Also something else is awry, for two given hosts on the same subnet (x.y.z.52 and x.y.z.53), they take two wildly divergent paths:

For dest  x.y.x.52

  16 ms     3 ms     3 ms  xe-2-3-0.cr1.lga5.us.above.net [64.125.31.34]
  2 ms     2 ms     2 ms  xe-0-1-0.er1.lga5.us.above.net [64.125.27.61]
  12 ms     3 ms    13 ms  e2-4-10000m.ar9.nyc1.gblx.net [208.178.58.197]
  117 ms   118 ms   118 ms  te3-4-10g.asr1.gru1.gblx.net [67.16.142.238]
  136 ms   137 ms   136 ms  ctbc-multimidia-data-net-s-a.gigabitethernet1-2.ar5.gru1.gblx.net [207.138.94.102]
  157 ms   136 ms   138 ms  xe-3-2-0-0.core-b.ula001.ctbc.com.br [201.48.44.165]
  132 ms   132 ms   141 ms  ge-3-0-0-0.core-b.spo511.ctbc.com.br [201.48.44.14]
  135 ms   133 ms   134 ms  ae1-0.edge-a.spo511.ctbc.com.br [201.48.44.93]

For dest  x.y.x.53

  3 ms     2 ms     3 ms  xe-2-3-0.cr1.lga5.us.above.net [64.125.31.34]
  2 ms     2 ms     2 ms  xe-1-1-0.er1.lga5.us.above.net [64.125.26.162]
  19 ms     3 ms    12 ms  e2-4-10000m.ar9.nyc1.gblx.net [208.178.58.197]
  117 ms   117 ms   117 ms  te3-4-10g.asr1.gru1.gblx.net [67.16.142.238]
  117 ms   117 ms   118 ms  64.209.106.170
  118 ms   118 ms   118 ms  ae1-0.edge-a.spo511.ctbc.com.br [201.48.44.93]

Anyone have any insight on to what may be occurring?

Sent from my iPhone