5400zl routing issue

[1999FLHRCI]

I have a network as the diagram shows. We are trying to get VoIP to work at the remote location. Although the signaling portion of the call works from my VoIP phone("Me" on the diagram), there is never any audio. The VPN routers are mostly the default config. Of course, we do have the tunnels up. I do not understand the ping failure as described on my diagram. I tried changing the link from the HP to the VPN router to a trunk, with no success. I now have the 3rd floor switch routing, which allows me to now ping the remote network from the CLI of that switch. Any help would be appreciated.

[paulgear]

Is the 3rd floor switch the default gateway for your VoIP phone? If so, please post its IP addresses and routing table ('show ip' and 'show ip route').

[1999FLHRCI]

Thank you for your response. I apologize for the delay due to my recent vacation.

Yes, my phone is using the 3rd floor switch as the default gateway. Here is the information you requested:

3rdFloor# show ip

 Internet (IP) Service

  IP Routing : Enabled

  Default TTL     : 64

  Arp Age         : 20

  Domain Suffix   :

  DNS server      :

  VLAN                 | IP Config  IP Address      Subnet Mask     Proxy ARP

  -------------------- + ---------- --------------- --------------- ---------

  Management     | Manual     172.16.216.133  255.255.255.0   No   No

  1st-Floor-PCs    | Disabled

  3rd-Floor-PCs    | Manual     172.16.219.3    255.255.255.0     No   No

  APs                    | Disabled

  Guest                 | Disabled

  SRHD                 | Disabled

  Printers-All-Floors  | Disabled

  Server-Farm       | Manual     172.16.222.239  255.255.255.0   No   No

  Web-Servers      | Disabled

  County-WIC       | Disabled

  WIC-Outside-Offices  | Disabled

3rdFloor# show ip route

                                IP Route Entries

  Destination        Gateway               VLAN     Type                      Metric     Dist.

  ------------------      ---------------            --------     ----------                  ----------   -----

127.0.0.0/8           reject                                    static                     0             0

127.0.0.1/32         lo0                                        connected            1             0

172.16.216.0/24  Management       1             connected            1             0

172.16.219.0/24  3rd-Floor-PCs     33           connected            1             0

172.16.222.0/24  Server-Farm        100         connected            1             0

192.168.7.0/24    172.16.222.229   100         static                     1             1

[paulgear]

That looks fine, so the issue must be with the routes on the other end. What do the routing tables on the two VPN routers look like? One of them is probably lacking a route to 172.16.219.0/24.

It's situations like these that make it a good idea to run a routing protocol like OSPF or RIP - then the routes propagate automatically when you add new subnets.