Why doesn't the second ethernet interface work for logging in to CentOS?

Question

linux

CentOS release 5.10 (Final)

ifconfig -a
eth0      Link encap:Ethernet  HWaddr 00:19:B9:2D:EE:17  
          inet addr:external.ip.adress  Bcast:external.broadcast.adress  Mask:255.255.255.248
          inet6 addr: fe80::219:b9ff:fe2d:ee17/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:4061 errors:0 dropped:0 overruns:0 frame:0
          TX packets:3912 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:549855 (536.9 KiB)  TX bytes:1518119 (1.4 MiB)
          Interrupt:169 Memory:dfbf0000-dfc00000 

eth1      Link encap:Ethernet  HWaddr C4:6E:1F:01:5B:96  
          inet addr:192.168.16.248  Bcast:192.168.16.255  Mask:255.255.255.0
          inet6 addr: fe80::c66e:1fff:fe01:5b96/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:3331 errors:0 dropped:0 overruns:0 frame:0
          TX packets:110 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:519199 (507.0 KiB)  TX bytes:8069 (7.8 KiB)
          Interrupt:169 Base address:0x4f00 

lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:1048 errors:0 dropped:0 overruns:0 frame:0
          TX packets:1048 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:771062 (752.9 KiB)  TX bytes:771062 (752.9 KiB)

sit0      Link encap:IPv6-in-IPv4  
          NOARP  MTU:1480  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:0 (0.0 b)  TX bytes:0 (0.0 b)

eth0 - connected directly to the Internet
eth1 - connected to the local network
The problem is that I can not reach 192.168.16.248 from the local network. Ping not working, SSH not working. None of the services are running. All services are available from the Internet.
If you ping the local network from the server, say 192.168.16.100, then everything works. That is, the eth1 card works.

iptables -L -v
Chain INPUT (policy ACCEPT 7822 packets, 1812K bytes)
 pkts bytes target     prot opt in     out     source               destination         
  182  113K fail2ban-asterisk-udp  udp  --  any    any     anywhere             anywhere            multiport dports sip,sip-tls 
  886 63472 fail2ban-SSH  tcp  --  any    any     anywhere             anywhere            tcp dpt:ssh 

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain OUTPUT (policy ACCEPT 5652 packets, 2686K bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain fail2ban-SSH (1 references)
 pkts bytes target     prot opt in     out     source               destination         
  246 15076 REJECT     all  --  any    any     117.34.78.168        anywhere            reject-with icmp-port-unreachable 
  640 48396 RETURN     all  --  any    any     anywhere             anywhere            

Chain fail2ban-asterisk-udp (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 REJECT     all  --  any    any     external.ip.adress2         anywhere            reject-with icmp-port-unreachable 
  182  113K RETURN     all  --  any    any     anywhere             anywhere

route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
external.ip.adress3    0.0.0.0         255.255.255.248 U     0      0        0 eth0
192.168.16.0    0.0.0.0         255.255.255.0   U     0      0        0 eth1
169.254.0.0     0.0.0.0         255.255.0.0     U     0      0        0 eth0
0.0.0.0         external.ip.adress4    0.0.0.0         UG    0      0        0 eth0

Why does the server not allow incoming traffic from the local network?
UPD:
The problem is partially identified. Joining subnet 16 with VPN. The virtual adapter is assigned an address, say 192.168.16.202. I'm trying to ping 192.168.16.248. The server is not responding. I try to ping 192.168.200 and other others - everything works. I tried to ping while connected to the network directly, without a VPN. Everything works too. The conclusion is the following. VPN server does not work correctly with 248 ips. That's just why it's not clear ... Simple pptp VPN is up on Cisco rv 042.

Answer 1

or you can also list a ping from 192.168.16.100 and back
arp tables from both systems
and a list of open ports on 192.168.16.0 (for example, using nmap -sT 192.168.16.0 )