Hey Adam,
Cool stuff. I do not have time tonight but I am going to lab this up based on your config to get a better look. (but this is cool) Your right about WINS/NBT Node Type - Nothing was said that it was for RB but was required to be kept. What I was trying to do was make you think of what options may be available and include some irrelevant configuration that may stray you down a path wasting some of your valuable time. (better to learn that here than in a lab) Thanks Adam! From: Adam Booth [mailto:[email protected]] Sent: October-19-10 10:06 PM To: Jason Maynard Cc: Di Bias, Steve; [email protected] Subject: [Bulk] Re: [Bulk] Re: [OSL | CCIE_RS] Troubleshooting #2 Hi Jason, In my proposed solution IPCP was not used to propogate this info at all - the first bit of config bits with "ppp ipcp xxx" were my initial musings that wouldn't have picked up things like the default route using the secondary IP on RA, lease time and so on - those lines weren't meant to be part of my submitted response, sorry for any confusion there - it was mainly to support my reasoning as to why bridging appeared to be a valid choice. The default route came via DHCP (bridged over the PPP link) which has the default route as 172.16.18.252 in the pool 0 definition - if you see the last part of the debug trace starting from "*Mar 1 01:50:24.347" you can see where this occurs. I'm more than happy to see a simpler answer that meets the objectives "RB should have a default route to serial 1/0 (172.16.18.252) on RA. Domain name, DNS, netbios, netbios type, and lease is required" my understanding is that some of those parameters cant be transmitted via IPCP specifically lease or netbious type and thus DHCP appears to be the only way to go. That said, DHCP option 46 (WINS/NBT Node Type) doesn't appear to be asked for by the RB anyway - probably because it cant do anything with it... Cheers, Adam On Wed, Oct 20, 2010 at 11:41 AM, Jason Maynard <[email protected]> wrote: Well I can see what happens when you do not include enough restrictions. Adam - if there was a hard way to do it I believe you found it (that's awesome but I would need some time to digest) Out of curiosity how did you get the default route to 252 With this config ip address 172.16.18.252 255.255.0.0 secondary ip address 172.16.18.253 255.255.0.0 Gateway of last resort is 172.16.18.252 to network 0.0.0.0 C 172.16.0.0/16 is directly connected, BVI1 S* 0.0.0.0/0 [254/0] via 172.16.18.252 wouldn't you get 253 as "ppp ipcp route default" will grab the primary - at least it did when I was testing From: Adam Booth [mailto:[email protected]] Sent: October-19-10 9:11 PM To: Di Bias, Steve Cc: Jason Maynard; [email protected] Subject: [Bulk] Re: [OSL | CCIE_RS] Troubleshooting #2 Here's my attempt at an answer: Most of this data could be pulled through IPCP Put this on RA S0/0 ppp ipcp dns 172.16.1.250 172.16.2.251 ppp ipcp wins 172.16.1.18 And add this onto RB S0/0 ppp ipcp dns request accept ppp ipcp wins request ppp ipcp route default However where it seems to fall down though is that netbios type and lease duration information needs to be propogated as well, which suggests the need for DHCP rather than IPCP which may mean we need to look at bridging over PPP using BCP. So lets change RB to support bridging bridge irb bridge 1 protocol ieee bridge 1 route ip interface Serial0/1 no ip address encapsulation ppp no fair-queue serial restart-delay 0 ppp bridge ip bridge-group 1 ! interface BVI1 ip address dhcp ! On RA if we just move the IP addresses from S0/1 to BVI1 we would end up using "pool 1" (which has all the IP addresses in that 172.16.18.0/24 network blocked and doesn't have any of the parameters we are expected to pass over) so we will use the same IP addresses from S0/1 for BVI1 but change the netmask to be /16 so we are now using pool 0 bridge irb bridge 1 protocol ieee bridge 1 route ip interface Serial0/1 no ip address encapsulation ppp no peer default ip address no fair-queue serial restart-delay 0 ppp bridge ip bridge-group 1 ! interface BVI1 ip address 172.16.18.252 255.255.0.0 secondary ip address 172.16.18.253 255.255.0.0 ! Verify on RB debug ppp neg debug dhcp detail *Mar 1 01:49:34.463: %LINK-3-UPDOWN: Interface Serial0/1, changed state to up *Mar 1 01:49:34.463: Se0/1 PPP: Using default call direction *Mar 1 01:49:34.463: Se0/1 PPP: Treating connection as a dedicated line *Mar 1 01:49:34.463: Se0/1 PPP: Session handle[B7000014] Session id[22] *Mar 1 01:49:34.463: Se0/1 PPP: Phase is ESTABLISHING, Active Open *Mar 1 01:49:34.463: Se0/1 LCP: O CONFREQ [Closed] id 31 len 10 *Mar 1 01:49:34.467: Se0/1 LCP: MagicNumber 0x006BA6BC (0x0506006BA6BC) *Mar 1 01:49:34.483: Se0/1 LCP: I CONFREQ [REQsent] id 33 len 10 *Mar 1 01:49:34.483: Se0/1 LCP: MagicNumber 0x016BA59F (0x0506016BA59F) *Mar 1 01:49:34.483: Se0/1 LCP: O CONFACK [REQsent] id 33 len 10 *Mar 1 01:49:34.483: Se0/1 LCP: MagicNumber 0x016BA59F (0x0506016BA59F) *Mar 1 01:49:34.483: Se0/1 LCP: I CONFACK [ACKsent] id 31 len 10 *Mar 1 01:49:34.487: Se0/1 LCP: MagicNumber 0x006BA6BC (0x0506006BA6BC) *Mar 1 01:49:34.487: Se0/1 LCP: State is Open *Mar 1 01:49:34.487: Se0/1 PPP: Phase is FORWARDING, Attempting Forward *Mar 1 01:49:34.487: Se0/1 PPP: Queue BCP code[1] id[1] *Mar 1 01:49:34.487: Se0/1 PPP: Discarded CDPCP code[1] id[1] *Mar 1 01:49:34.487: Se0/1 PPP: Phase is ESTABLISHING, Finish LCP *Mar 1 01:49:34.491: Se0/1 PPP: Phase is UP *Mar 1 01:49:34.491: Se0/1 BCP: O CONFREQ [Closed] id 1 len 11 *Mar 1 01:49:34.491: Se0/1 BCP: IEEE802TaggedFrame enabled (0x080301) *Mar 1 01:49:34.491: Se0/1 BCP: ManagementInline (0x0902) *Mar 1 01:49:34.491: Se0/1 BCP: BridgeControlPacketIndicator (0x0A02) *Mar 1 01:49:34.491: Se0/1 PPP: Process pending ncp packets *Mar 1 01:49:34.491: Se0/1 BCP: Redirect packet to Se0/1 *Mar 1 01:49:34.491: Se0/1 BCP: I CONFREQ [REQsent] id 1 len 11 *Mar 1 01:49:34.491: Se0/1 BCP: IEEE802TaggedFrame enabled (0x080301) *Mar 1 01:49:34.491: Se0/1 BCP: ManagementInline (0x0902) *Mar 1 01:49:34.491: Se0/1 BCP: BridgeControlPacketIndicator (0x0A02) *Mar 1 01:49:34.491: Se0/1 BCP: O CONFACK [REQsent] id 1 len 11 *Mar 1 01:49:34.491: Se0/1 BCP: IEEE802TaggedFrame enabled (0x080301) *Mar 1 01:49:34.491: Se0/1 BCP: ManagementInline (0x0902) *Mar 1 01:49:34.491: Se0/1 BCP: BridgeControlPacketIndicator (0x0A02) *Mar 1 01:49:34.491: Se0/1 BCP: I CONFACK [ACKsent] id 1 len 11 *Mar 1 01:49:34.491: Se0/1 BCP: IEEE802TaggedFrame enabled (0x080301) *Mar 1 01:49:34.491: Se0/1 BCP: ManagementInline (0x0902) *Mar 1 01:49:34.491: Se0/1 BCP: BridgeControlPacketIndicator (0x0A02) *Mar 1 01:49:34.491: Se0/1 BCP: State is Open *Mar 1 01:49:34.491: Se0/1 BCP: Reached the OPEN state *Mar 1 01:49:34.491: Se0/1 BCP: go->neg_tagged *Mar 1 01:49:34.491: Se0/1 BCP: tagged state = 1 *Mar 1 01:49:34.491: Se0/1 BCP: ho->neg_tagged *Mar 1 01:49:34.491: Se0/1 BCP: tagged state = 1 *Mar 1 01:49:34.491: Se0/1 BCP: go->neg_mgmt_inline *Mar 1 01:49:34.491: Se0/1 BCP: ho->neg_mgmt_inline *Mar 1 01:49:34.491: Se0/1 BCP: go->neg_bpdu_indicator *Mar 1 01:49:34.491: Se0/1 BCP: ho->neg_bpdu_indicator *Mar 1 01:50:21.287: DHCP: new entry. add to queue, interface BVI1 *Mar 1 01:50:21.287: DHCP: SDiscover attempt # 1 for entry: *Mar 1 01:50:21.287: Temp IP addr: 0.0.0.0 for peer on Interface: BVI1 *Mar 1 01:50:21.287: Temp sub net mask: 0.0.0.0 *Mar 1 01:50:21.287: DHCP Lease server: 0.0.0.0, state: 3 Selecting *Mar 1 01:50:21.287: DHCP transaction id: 1EFC *Mar 1 01:50:21.287: Lease: 0 secs, Renewal: 0 secs, Rebind: 0 secs *Mar 1 01:50:21.287: Next timer fires after: 00:00:04 *Mar 1 01:50:21.287: Retry count: 1 Client-ID: cisco-0000.0ceb.1b90-BV1 *Mar 1 01:50:21.287: Client-ID hex dump: 636973636F2D303030302E306365622E *Mar 1 01:50:21.287: 316239302D425631 *Mar 1 01:50:21.291: Hostname: RB *Mar 1 01:50:21.291: DHCP: SDiscover: sending 289 byte length DHCP packet *Mar 1 01:50:21.291: DHCP: SDiscover 289 bytes *Mar 1 01:50:21.291: B'cast on BVI1 interface from 0.0.0.0 *Mar 1 01:50:21.311: DHCP: Received a BOOTREP pkt *Mar 1 01:50:21.311: DHCP: Scan: Message type: DHCP Offer *Mar 1 01:50:21.311: DHCP: Scan: Server ID Option: 172.16.18.253 = AC1012FD *Mar 1 01:50:21.311: DHCP: Scan: Lease Time: 2590802 *Mar 1 01:50:21.311: DHCP: Scan: Renewal time: 1295401 *Mar 1 01:50:21.311: DHCP: Scan: Rebind time: 2266951 *Mar 1 01:50:21.311: DHCP: Scan: Subnet Address Option: 255.255.0.0 *Mar 1 01:50:21.311: DHCP: Scan: Domain Name: packetsanalyzed.com *Mar 1 01:50:21.311: DHCP: Scan: DNS Name Server Option: 172.16.1.250, 172.16.2.251 *Mar 1 01:50:21.311: DHCP: Scan: NBNS Name Server Option: 172.16.1.18 *Mar 1 01:50:21.311: DHCP: Scan: Router Option: 172.16.18.252, 172.16.18.253 *Mar 1 01:50:21.311: DHCP: rcvd pkt source: 172.16.18.253, destination: 255.255.255.255 *Mar 1 01:50:21.311: UDP sport: 43, dport: 44, length: 329 *Mar 1 01:50:21.311: DHCP op: 2, htype: 1, hlen: 6, hops: 0 *Mar 1 01:50:21.311: DHCP server identifier: 172.16.18.253 *Mar 1 01:50:21.311: xid: 1EFC, secs: 0, flags: 8000 *Mar 1 01:50:21.311: client: 0.0.0.0, your: 172.16.0.15 *Mar 1 01:50:21.311: srvr: 0.0.0.0, gw: 0.0.0.0 *Mar 1 01:50:21.311: options block length: 81 *Mar 1 01:50:21.311: DHCP Offer Message Offered Address: 172.16.0.15 *Mar 1 01:50:21.311: DHCP: Lease Seconds: 2590802 Renewal secs: 1295401 Rebind secs: 2266951 *Mar 1 01:50:21.311: DHCP: Server ID Option: 172.16.18.253 *Mar 1 01:50:21.311: DHCP: offer received from 172.16.18.253 *Mar 1 01:50:21.315: DHCP: SRequest attempt # 1 for entry: *Mar 1 01:50:21.315: Temp IP addr: 172.16.0.15 for peer on Interface: BVI1 *Mar 1 01:50:21.315: Temp sub net mask: 255.255.0.0 *Mar 1 01:50:21.315: DHCP Lease server: 172.16.18.253, state: 4 Requesting *Mar 1 01:50:21.315: DHCP transaction id: 1EFC *Mar 1 01:50:21.315: Lease: 2590802 secs, Renewal: 0 secs, Rebind: 0 secs *Mar 1 01:50:21.315: Next timer fires after: 00:00:03 *Mar 1 01:50:21.315: Retry count: 1 Client-ID: cisco-0000.0ceb.1b90-BV1 *Mar 1 01:50:21.315: Client-ID hex dump: 636973636F2D303030302E306365622E *Mar 1 01:50:21.315: 316239302D425631 *Mar 1 01:50:21.315: Hostname: RB *Mar 1 01:50:21.315: DHCP: SRequest- Server ID option: 172.16.18.253 *Mar 1 01:50:21.315: DHCP: SRequest- Requested IP addr option: 172.16.0.15 *Mar 1 01:50:21.315: DHCP: SRequest placed lease len option: 2590802 *Mar 1 01:50:21.315: DHCP: SRequest: 307 bytes *Mar 1 01:50:21.315: DHCP: SRequest: 307 bytes *Mar 1 01:50:21.315: B'cast on BVI1 interface from 0.0.0.0 *Mar 1 01:50:21.319: DHCP: Received a BOOTREP pkt *Mar 1 01:50:21.319: DHCP: Scan: Message type: DHCP Ack *Mar 1 01:50:21.319: DHCP: Scan: Server ID Option: 172.16.18.253 = AC1012FD *Mar 1 01:50:21.319: DHCP: Scan: Lease Time: 2592000 *Mar 1 01:50:21.319: DHCP: Scan: Renewal time: 1296000 *Mar 1 01:50:21.319: DHCP: Scan: Rebind time: 2268000 *Mar 1 01:50:21.319: DHCP: Scan: Subnet Address Option: 255.255.0.0 *Mar 1 01:50:21.319: DHCP: Scan: Domain Name: packetsanalyzed.com *Mar 1 01:50:21.319: DHCP: Scan: DNS Name Server Option: 172.16.1.250, 172.16.2.251 *Mar 1 01:50:21.319: DHCP: Scan: NBNS Name Server Option: 172.16.1.18 *Mar 1 01:50:21.319: DHCP: Scan: Router Option: 172.16.18.252, 172.16.18.253 *Mar 1 01:50:21.319: DHCP: rcvd pkt source: 172.16.18.253, destination: 255.255.255.255 *Mar 1 01:50:21.319: UDP sport: 43, dport: 44, length: 329 *Mar 1 01:50:21.319: DHCP op: 2, htype: 1, hlen: 6, hops: 0 *Mar 1 01:50:21.319: DHCP server identifier: 172.16.18.253 *Mar 1 01:50:21.319: xid: 1EFC, secs: 0, flags: 8000 *Mar 1 01:50:21.319: client: 0.0.0.0, your: 172.16.0.15 *Mar 1 01:50:21.319: srvr: 0.0.0.0, gw: 0.0.0.0 *Mar 1 01:50:21.319: options block length: 81 *Mar 1 01:50:21.319: DHCP Ack Message *Mar 1 01:50:21.319: DHCP: Lease Seconds: 2592000 Renewal secs: 1296000 Rebind secs: 2268000 *Mar 1 01:50:21.319: DHCP: Server ID Option: 172.16.18.253 *Mar 1 01:50:24.343: DHCP: Releasing ipl options: *Mar 1 01:50:24.347: DHCP: Applying DHCP options: *Mar 1 01:50:24.347: Setting default_gateway to 172.16.18.252 *Mar 1 01:50:24.351: Adding default route 172.16.18.252 *Mar 1 01:50:25.351: Adding DNS server address 172.16.1.250 *Mar 1 01:50:25.351: Adding DNS server address 172.16.2.251 *Mar 1 01:50:25.351: Setting default domain to packetsanalyzed.com *Mar 1 01:50:25.355: DHCP Client Pooling: ***Allocated IP address: 172.16.0.15 *Mar 1 01:50:25.395: Allocated IP address = 172.16.0.15 255.255.0.0 *Mar 1 01:50:25.399: %DHCP-6-ADDRESS_ASSIGN: Interface BVI1 assigned DHCP address 172.16.0.15, mask 255.255.0.0, hostname RB RB#sh ip route Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2 i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2 ia - IS-IS inter area, * - candidate default, U - per-user static route o - ODR, P - periodic downloaded static route Gateway of last resort is 172.16.18.252 to network 0.0.0.0 C 172.16.0.0/16 is directly connected, BVI1 S* 0.0.0.0/0 [254/0] via 172.16.18.252 RB#ping 172.16.18.252 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 172.16.18.252, timeout is 2 seconds: .!!!! Success rate is 80 percent (4/5), round-trip min/avg/max = 1/4/8 ms Cheers, Adam On Wed, Oct 20, 2010 at 9:14 AM, Di Bias, Steve <[email protected]> wrote: What are the restrictions? _____ From: [email protected] [mailto:[email protected]] On Behalf Of Jason Maynard Sent: Tuesday, October 19, 2010 3:50 PM To: [email protected] Subject: [OSL | CCIE_RS] Troubleshooting #2 Since the first one seem to create some good dialog I thought I would try it again RB should have a default route to serial 1/0 (172.16.18.252) on RA. Domain name, DNS, netbios, netbios type, and lease is required. Lab it up if required. The configuration can be found here http://packetsanalyzed.blogspot.com/2010/10/troubleshooting-2.html UHS Confidentiality Notice: This e-mail message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution of this information is prohibited, and may be punishable by law. If this was sent to you in error, please notify the sender by reply e-mail and destroy all copies of the original message. _______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
