So I have two APs running 3.30 that are now refusing to allow ICMP/traceroute to work a few particular Internet addresses from stations, one in particular I can easily test against. The AP itself can ping/traceroute to the IP, 207.166.102.101, but a station nor station-pseudobridge machine can. They worked up until very very recently, I have rebooted and updated all the firmware I can think of, but the problem remains.

How do I diagnose why traceroutes to above IP work from AP, but not from a station behind it? I have other links that are just fine, it's only from these two units that I am suddenly having troubles I can't explain. I'm looking to debug the problem, and can oblige with whatever data needed. I run a SRCNAT network, nothing too fancy with my network really. Adtran Router->RB450G->RB411/5GHZ AP Bridge->RB153/5GHZ Station->RB750->RB411/2.4 AP Bridge->RB192/2.4 Station-pseudobridge. Every host up to the station works fine. Then, poof....

Please help me diagnose. TTLs so far don't look low (116), and packet size/MTU is 1500 pinging from the AP itself to that IP. Traceroute fails at the final hop from the station on one AP, and from the station-pseudobridge on the other AP.

Thanks

Please assist, I am running out of ideas...

I have added a network diagram so you can see all the links in the chain here.

http://adinanet.com/images/adina-simple.JPG

Here's images of a symptom.

http://adinanet.com/images/failedtrace.JPG
http://adinanet.com/images/failedtrace2.JPG
http://adinanet.com/images/failedtrace3.JPG

10.1.1.10/30 is on ether1, 10.1.1.17/28 is on ether2/switch ports. Facebook and other sites are causing issues, I'm sure there is a transport error but I am having a VERY hard time tracking it down. 10.1.0.162 simply cannot ping 207.166.102.101, it can ping several others like 64.5.53.250 and most more I expect. But some hosts are just simply consistently not responding back. I am completely out of ideas almost. I don't want to dream of resetting any of this gear...

Thanks!