Routing loops with ibgp and ospf running Backbones

2001-02-22 Thread A Mateen

Hi !

I have the following network setup running ospf, ibgp within the Domain and ebgp 
beween AS.

GW: Gateway router BB: Backbone Router






Note: BB and GW router is connected directly (cross-connect) and the Area0 is extended 
from BB to GW router.

Pre-requisite: LAN on Area 11 shud able to access both the routers for redundancy.

Implementation : Implemented HSRP between BB and GW and extended the Area 0 using 
cross ethernet back to back cable between BB and GW.

Route-reflectors are confgured on IBGP routers and EBGP on GW routers. Both the GW 
routers are connected to the same ISP.

Preoblem : sometimes I am getting routing loop between BB and GW routers when trying 
from Area 11 LAN( default Gateway for all the machines is GW).

Action taken: Checked the ip route and gound that the defualt gateway on GW is 
pointing to Internet interface and for BB it is pointing to GW. The looping occured 
between the back to back connected interface.

Can any body suggests the way to troubleshoot the problem





_
Chat with your friends as soon as they come online. Get Rediff Bol at
http://bol.rediff.com



_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Traffic Shaping and Access control

2001-02-09 Thread A Mateen

Hi !

I have the following scenario 

 -- R2  LAN2
LAN1---R1
 -- R3 - LAN3


Note: R1 is the end customer 
  R2 is ISP1 edge router
  R3 is ISP2 edge router 
DEFAULT IP ROUTE IS POINTING TO BOTH R2 AND R3. (MUST)

Any traffic comes from LAN1 with www request to go on R3
and rest of the traffic shud be routed via R2 only.

How do I limit this acess.. Apprecite the update on this

_
Chat with your friends as soon as they come online. Get Rediff Bol at
http://bol.rediff.com




_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Re: IP Tunneling - Typical requirement

2001-02-02 Thread A Mateen


The customer is running the Checkpoint firewall which is registered with IP address of 
the other ISP ( the existing one). Now they are going to take a DS0 connection from 
our network. 
For them to change the IP or add IPs at firewall they require to minimun of 30 
days.Meanwhile, they want to use both the lease lines from us and from the other ISP.
The customers total network and Servers are behind the firewall. Hence they have the 
only exit pont from firewall which inturn pointing to the ethernet interface ( 
configured with the other ISPs) as the firewall Gateway. Now, if they take my link 
with another serial port then how do i serve their LAN (inside the checkpoint FW). 
They want to go in only with this firewall.Security between the links is not of 
concern.
- xyz ISP
LAN  FW --- Router
- my ISP

The FW/dns /web server r configured with the xyz network 
and they need min. 30 days to change the ips to my ISP.But they want to use the 
services to both meantime.
How do I accomplish this. What I thought is like this.
1. Ask the xyz to allow the adv of their part of the 
   network with us. ( This is ruled out as they are not  
   accepting)
2. Create a tunnel of IP over IP on the my ISP serail inface. Convert the other IPs 
request into my ISP IPs and route their request via my network, 
How can I do this with out using any additional SW ( ie only using cisco routers ).

UR reply is appreciated


- Original Message --
Paul Carco [EMAIL PROTECTED] wrote:
To:A Mateen [EMAIL PROTECTED],
 "[EMAIL PROTECTED]" [EMAIL PROTECTED]
From:Paul Carco [EMAIL PROTECTED]
Date:Thu, 1 Feb 2001 09:19:45 -0800 (PST)
Subject: Re: IP Tunneling - Typical requirement

If I understand your requirements correctly, what you
need to do is configure and IPSEC tunnel between your
network and the customer network. Many companies that
are doing business via the internet use IPSEC to
create secure encrypted access into their intranets or
extranets.  If you not concerned about security of
clear text traffic between your companie and your
partners then just simply open up your router/firewall
to permit this connection.
--- A  Mateen [EMAIL PROTECTED] wrote:
 Hi !
 
 I have a typical requirement as follows
 1. I have a public network
 2. One of the customers is having the public IP from
 other service provider.
 3. my requirement is that I want to route the IP
 packets of the other ISP network via my routing
 policies and my IP network.
 4. I was planning to put a tunnel ip over ip and
 convert the other ISP IPs into my registered public
 IPs at  interface with both the routers.
 5. I am looking for such configuration
 
 Pls guide me to do so
 

_
 Chat with your friends as soon as they come online.
 Get Rediff Bol at
 http://bol.rediff.com
 
 
 
 
 _
 FAQ, list archives, and subscription info:
 http://www.groupstudy.com/list/cisco.html
 Report misconduct and Nondisclosure violations to
[EMAIL PROTECTED]


__
Get personalized email addresses from Yahoo! Mail - only $35 
a year!  http://personal.mail.yahoo.com/

_
Chat with your friends as soon as they come online. Get Rediff Bol at
http://bol.rediff.com




_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



IP Tunneling - Typical requirement

2001-01-31 Thread A Mateen

Hi !

I have a typical requirement as follows
1. I have a public network
2. One of the customers is having the public IP from other service provider.
3. my requirement is that I want to route the IP packets of the other ISP network via 
my routing policies and my IP network.
4. I was planning to put a tunnel ip over ip and convert the other ISP IPs into my 
registered public IPs at  interface with both the routers.
5. I am looking for such configuration

Pls guide me to do so

_
Chat with your friends as soon as they come online. Get Rediff Bol at
http://bol.rediff.com




_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Ospf process re-initialising

2001-01-05 Thread A Mateen

Hi ~

Once I canged the loopback ip add, how do i reset the 
ospf session with my neighbours to make this changes in effect.
I tried clear ip ospf process ID but it is not working.

Awaiting an early reply

_
Chat with your friends as soon as they come online. Get Rediff Bol at
http://bol.rediff.com




_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Subcription for the groupstudy

2000-11-26 Thread A Mateen



_
Chat with your friends as soon as they come online. Get Rediff Bol at
http://bol.rediff.com

Participate in crazy auctions at http://auctions.rediff.com/auctions/



_
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]