Connectivity to Brazil

Tue Feb 1 14:10:38 UTC 2011

who are you?

________________________________
From: Steve Danelli <the76posse at gmail.com>
To: "nanog at nanog.org" <nanog at nanog.org>
Sent: Tue, February 1, 2011 1:54:47 PM
Subject: Connectivity to Brazil

Hello all!!!  First post here  

Some carrier, somewhere between us and the service provider is selectively 
dropping the IKE packets originating from our VPN gateway and destined for our 
Brazil gateway. Other traffic is able to pass, as are the IKE packets coming 
back from Brazil to us. This is effectively preventing us from establishing the 
IPSEC tunnel between our gateways.

Also something else is awry, for two given hosts on the same subnet (x.y.z.52 
and x.y.z.53), they take two wildly divergent paths:

For dest  x.y.x.52

  16 ms    3 ms    3 ms  xe-2-3-0.cr1.lga5.us.above.net [64.125.31.34]
  2 ms    2 ms    2 ms  xe-0-1-0.er1.lga5.us.above.net [64.125.27.61]
  12 ms    3 ms    13 ms  e2-4-10000m.ar9.nyc1.gblx.net [208.178.58.197]
  117 ms  118 ms  118 ms  te3-4-10g.asr1.gru1.gblx.net [67.16.142.238]
  136 ms  137 ms  136 ms  
ctbc-multimidia-data-net-s-a.gigabitethernet1-2.ar5.gru1.gblx.net 
[207.138.94.102]
  157 ms  136 ms  138 ms  xe-3-2-0-0.core-b.ula001.ctbc.com.br [201.48.44.165]
  132 ms  132 ms  141 ms  ge-3-0-0-0.core-b.spo511.ctbc.com.br [201.48.44.14]
  135 ms  133 ms  134 ms  ae1-0.edge-a.spo511.ctbc.com.br [201.48.44.93]

For dest  x.y.x.53

  3 ms    2 ms    3 ms  xe-2-3-0.cr1.lga5.us.above.net [64.125.31.34]
  2 ms    2 ms    2 ms  xe-1-1-0.er1.lga5.us.above.net [64.125.26.162]
  19 ms    3 ms    12 ms  e2-4-10000m.ar9.nyc1.gblx.net [208.178.58.197]
  117 ms  117 ms  117 ms  te3-4-10g.asr1.gru1.gblx.net [67.16.142.238]
  117 ms  117 ms  118 ms  64.209.106.170
  118 ms  118 ms  118 ms  ae1-0.edge-a.spo511.ctbc.com.br [201.48.44.93]

Anyone have any insight on to what may be occurring?

Sent from my iPhone