Cisco router purchase
I'm thinking of buying some second-hand Cisco routers. Is there anything that I have to watch out for? Any help would be greatly appreciated. Regards, Hunt Lee IP Solution Analyst Cable and Wireless _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Subnet question
Can anyone please explain to me how to derive the answer of this question? A company has been assigned a subnet of 172.16.176.0/20, and wants the next four available bits to create 14 subents, each containing an equal number of hosts. Which of the following could represent one of these subnets? A) 172.16.255.0/24 B) 172.16.193.0/24 C) 172.16.183.0/24 D) 172.16.16.0/24 E) 172.16.0.0/24 F) 172.16.190.0/24 Answer is C and F Regards, Hunt Lee IP Solution Analyst Cable and Wireless (Sydney) _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
CPU usage question
I got the following question from COLT, but I'm not sure whether it's answer is correct... Which Cisco IOS command identifies the router CPU usage in your network prototype or pilot? A) trace B) show buffers C) show interface D) show processes My answer is D but COLT said it should be C. Any help would be greatly appreciated. Regards, Hunt Lee IP Solution Analyst Cable and Wireless (Sydney) _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
CiscoWorks Blue question
Can anyone please tell me what is CiscoWorks Blue designed to manage? Can source-route bridiging networks and LAN switches managed by it? Any help would be greatly appreciated. Regards, Hunt Lee IP Solution Analyst Cable and Wireless (Sydney) _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Subnet questions
I have three subnet / route summarization questions but I don't understand the answer, any help would be greatly appreciated. Q1) Choose the appropriate classless network address and broadcast address for the IP address 10.6.38.50 with a subnet mask of 255.255.240.0 A) 10.6.38.49 and 10.6.38.62 B) 10.6.32.0 and 10.6.47.255 C) 10.6.38.0 and 10.6.38.255 D) 10.0.0.0 and 10.255.255.255 Answer is B. Q2) Given a classless route summarization of 72.8.0.0 /13. Which IP address fall into this scope? A) 72.15.36.8 B) 72.13.1.1 C) 72.8.20.10 D) 72.7.200.100 E) 72.16.7.4 F) 72.40.1.8 Answer is A, B & C - why isn't E the ansewr as well? Q3) When using classless supernetting, which route best summarizes the following networks? 192.168.9.0 192.168.10.0 192.168.11.0 192.168.12.0 A) 192.168.0.9 / 20 B) 192.168.0.0 / 16 C) 192.168.9.0 / 22 D) 192.168.8.0 / 21 I thought D is the answer, but the answer is C. P.S. Is there anywhere I can get more practice on these type of questions? Regards, Hunt Lee IP Solution Analyst Cable and Wireless (Sydney) _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Cisco Product line
Does anyone knows what extent of Cisco product line knowledge is required for the CCDA exam? For example: the number of ports, the difference between 3620 and 3640 router etc? I know a few like 2524, 1004, 3600 etc... but there are too many to look up. Any help would be greatly appreciated. Regards, Hunt Lee IP Solution Analyst Cable and Wireless (Sydney) _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Proxy services question
I have two questions from COLT that I don't understand. Any help is greatly appreciated. Q1) Why should you implement proxy services on a Cisco Network? A) to provide a basic level of security B) to provide resource discovery on serverless LANs C) to protect the integrity of network data traveling between peers. D) to manage the varying demands applications put on the network. I thought the answer is B, but the answer is A. Q2) Which two types of networks in CiscoWorks Blue designed to manage? A) Small business networks, complex LAN switched networks B) Data link switching networks, advanced peer-to-peer networks C) Remote source-route bridging networks, complex LAN switched networks. D) Complex LAN switched networks, Microsoft Windows NT based networks. I thought the answer is C, but the answer is B. Regards, Hunt Lee IP Solution Analyst Cable and Wireless (Sydney) _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Cisco CCNP books question
I passed my CCDA today. Thanks so much for all your help and support. Does anyone know what is the difference between the CCNP Certification Library and CCNP Preparation Library? Which is better to use for studying the CCNP exams? CCNP Certification Library: CCNP Routing Exam Certification Guide CCNP Switching Exam Certification Guide CCNP Remote Access Exam Certification Guide CCNP Support Exam Certification Guide CCNP Preparation Library: Building Scalable Cisco Networks Building Cisco Multilayer Switched Networks Building Cisco Remote Access Networks Cisco Internetwork Troubleshooting Any help would be greatly appreciated. Regards, Hunt Lee IP Solution Anaylst Cable and Wireless (Sydney) _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Memory question
Hello there, Can anyone please teach me how can I check how much Flash and DRAM on a router? Any help is greatly appreciated. Regards, Hunt Lee IP Solution Analyst Cable and Wireless (Sydney) _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Help for purchasing 2nd hand Cisco euqipment
Does anyone know what sort of switches should I get for practicing for the BCMSN (Switching 2.0) exam? or for the CCIE lab? Any help or advice is greatly appreciated. Regards, Hunt Lee IP Solution Analyst Cable and Wireless (Sydney) _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Questions for Cisco switches
Can anyone please tell me if there are 2 types of Cisco switches? Is it one uses Set commands, while the other is IOS based? Any help is greatly appreciated. Regards, Hunt Lee IP Solution Analyst Cable and Wireless (Sydney) _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
COLT questions
I have some questions that I'm stuck on. . Any tips or help would be greatly appreciated. Q1) For IBGP, which statement about the next-hop attribute is accurate? A) The next-hop is the IP address of the neighbor that sent the update. B) The next-hop is the IP address of the neighbor that is one hop closer to the destination C) The next-hop is the IP address of the neighbor in the adjacent AS that is closer to the destination. D) The next-hop is the IP address of the router that exits this AS. I chose D. But COLT said it's wrong. Or is this for EBGP, or NBMA?? Q2) For EIGRP rotues to be considered for load balancing and inclusion into the routing table, the route must be: A) Local best metric greater than best metric from next-hop router; the variance mulitplier times the local best metric is greater than metric through the same next-hop router. B) Local best metric greater than best metric from next-hop router; the variance mulitplier times the local best metric is greater than current metric on this router. C) Local best metric greater than best metric from next-hop router; the variance mulitplier times any local metric is greater than metric advertised by any next-hop router. D) Local best metric greater than best metric from next-hop router; the variance mulitplier times the local best metric is greater than metric through any next-hop router. I chose D. But COLT said it's wrong. I thought for EIGRP to load balance, the variance mulitplies the successor > next-hop router's feasible distance, and the successor has to be greater than the next-hop router's advertisied distance. Q3) Nonbroadcast mulitaccess mode is usually used in a fully meshed netowrk and simulates a broadcast environment. How do packets get delivered to all remote routers? A) Packet replication is handled by the Service Provider B) The transmitting router sends the packet to its physical neighbor which copy and flood the packet. C) Update packets are sent only once to the mulitcast address 224.0.0.5 D) The transmitting router replicates the packets for each neighbor. I chose A, but COLT said it's wrong. Or is this for point-to-mulitpoint mode? Thanks again for your help in advance. Regards, Hunt Lee IP Solution Analyst Cable and Wireless (Sydney) _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Questions for Next-hop attribute
I'm really confused about the how Next-hop attribute works for IBGP and EBGP. Can somebody please shed some light on this. Any tips or help would be greatly appreciated. Regards, Hunt _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
CCNP certification
Hello everyone, Just a stupid question - I did my CCNA certification (ver1.0) about 2 years ago and I'm currently studying for CCNP. Is it true that I must first re-certify my CCNA before I could take my CCNP exams? Or can I just do my CCNP and don't have to worry about my CCNA. Can somebody please shed some light on this? Regards, Hunt Lee _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
IP Prefix-List
Hello everyone, I'm really confused on the following IP Prefix-List questions. Can somebody please shed some light on this? Q)IP prefix-list permit 10.1.0.0/16 ge 20 le 27 matches routes to which of the following networks? A)10.1.128.0/18 B)10.1.8.192/23 C)10.1.0.0/16 D)10.2.160.0/23 E)10.1.2.0/24 I chose B, but the answer is E. I understand that GE is the minimum mask length of matching routes, and LE is maximum length. But what's wrong with answers B OR D? Q)IP prefix-list permit 172.16.2.0/24 ge 25 le 27 matches routes to which of the following networks? A)172.16.3.128/25 B)172.16.2.128/25 C)172.16.2.0/24 D)172.16.2.192/27 I chose A, but the answer is B and D. Regards, Hunt Lee _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Router config
I don't understand the following routing configs. I understand that redistribute static means it will redistribute static routes into RIP network, but that's all I could see. Can anybody please shed some light on this? interface Serial 0 ip address 192.168.1.1 255.255.255.252 ! interface Serial 1 ip address 192.168.1.5 255.255.255.252 ! interface Serial 2 ip address 192.168.1.9 255.255.255.252 ! interface Serial 3 ip address 192.168.1.13 255.255.255.252 ! interface Serial 4 ip address 192.168.1.17 255.255.255.252 ! router rip network 192.168.1.0 redistribute static ! ip route 192.168.1.0 255.255.255.0 loopback 0 Regards, Hunt Lee _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Questions for Next-hop attribute
Ok. I'm even more confused now. So you guys are saying that IBGP peers will never progragated its route to other IBGP peers by "no synchronization" - if no IGP is running, except by Route Reflectors?? So what's "no synchronization" used for? I have one more question: Is it true that routes injected into BGP within an AS carry a next hop attribute of the BGP router that first advertised the route? Please explain. Regards, Hunt Lee Howard C. Berkowitz wrote: > >No worries John. It was I who mentioned the devious nature of > >classless and synch as well :) > > Always remember that the best ISPs have no class. > > > > >Keep in mind that synch was designed for transit networks that have > >transit providing routers which do not run BGP. Back when the > >internet was smaller I expect some designs had the IGP in an AS > >carry the full table, or parts of it and hence it was relevant to > >make sure your BGP and IGP were synchronized to ensure you didn't > >blackhole routes. > > Precisely. I don't have the document number in front of me, but the > old RFC on BGP/OSPF interaction, which assumed this model, has been > recategorized as Historic (i.e., nobody does this, don't try it, it > was a blind alley) > > >Today, BGP is run fully meshed with all transit providing routers in > >an AS peering with IBGP and hence synch is a complete non issue. > > Full mesh, of course, has its scalability issues, and we deal with > iBGP scalability measures such as route reflectors. There is a trend > to have the main BGP at the edge, and to have principally an IGP in > the provider core. The core is stupid, and is traversed by MPLS > tunnels -- the role of the IGP is to establish reachability for these > LSPs, which run between BGP speakers on the edges. _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Questions for Next-hop attribute
Ok. I'm even more confused now. So you guys are saying that IBGP peers will never progragated its route to other IBGP peers by "no synchronization" - if no IGP is running, except by Route Reflectors?? So what's "no synchronization" used for? I have one more question: Is it true that routes injected into BGP within an AS carry a next hop attribute of the BGP router that first advertised the route? Please explain. Regards, Hunt Lee Howard C. Berkowitz wrote: > >No worries John. It was I who mentioned the devious nature of > >classless and synch as well :) > > Always remember that the best ISPs have no class. > > > > >Keep in mind that synch was designed for transit networks that have > >transit providing routers which do not run BGP. Back when the > >internet was smaller I expect some designs had the IGP in an AS > >carry the full table, or parts of it and hence it was relevant to > >make sure your BGP and IGP were synchronized to ensure you didn't > >blackhole routes. > > Precisely. I don't have the document number in front of me, but the > old RFC on BGP/OSPF interaction, which assumed this model, has been > recategorized as Historic (i.e., nobody does this, don't try it, it > was a blind alley) > > >Today, BGP is run fully meshed with all transit providing routers in > >an AS peering with IBGP and hence synch is a complete non issue. > > Full mesh, of course, has its scalability issues, and we deal with > iBGP scalability measures such as route reflectors. There is a trend > to have the main BGP at the edge, and to have principally an IGP in > the provider core. The core is stupid, and is traversed by MPLS > tunnels -- the role of the IGP is to establish reachability for these > LSPs, which run between BGP speakers on the edges. _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
BGP Mulithoming question [7:121]
I'm really confused for the following terms. I've read the BSCN book on p398 - 402 many many times, but I'm still very lost. Can anyone please tell me what's the difference between: 1)Default Routes from All providers 2)Customer & Default Routes from AS providers 3)Full Routes from All providers Thanks again. Regards, Hunt Lee IP Solution Analyst Cable and Wireless (Sydney) Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=121&t=121 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
BGP Commands [7:708]
Can anyone please explain to me what is the difference between the command "show ip bgp" (or show ip bgp summary) and "show ip route bgp"? I have read the BSCN book between page 348 and 352 many times, but I'm still very confused. The book said "show ip bgp" displays BGP routing table?? But I thought that should be "show ip route bgp". Please help. Regards, Hunt Lee IP Solution Analyst Cable and Wireless Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=708&t=708 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: BGP Commands [7:734]
Thanks for the explanation guys :) Just one more quick question, on the "show ip bgp", are the best routes indicated by an > or an *? Regards, Hunt Lee Howard C. Berkowitz wrote: > >Can anyone please explain to me what is the difference between the > >command "show ip bgp" (or show ip bgp summary) and "show ip route bgp"? > >I have read the BSCN book between page 348 and 352 many times, but I'm > >still very confused. The book said "show ip bgp" displays BGP routing > >table?? But I thought that should be "show ip route bgp". Please help. > > > >Regards, > >Hunt Lee > >IP Solution Analyst > >Cable and Wireless > > You are dealing with two tables, at the very least. Some are > conceptual or stored as part of other tables. Let me work through > the flow. > > Incoming BGP updates, before filtering, go into the Adj-RIB-In > > After filtering, which is primarily on a per-peer basis, the > remaining updates go into a BGP-only table called the Loc-RIB. This > table contains all the BGP potential routes that passed acceptance > filtering, and is router-wide. It also indicates which are the > "best" BGP routes to a given destingation. > > "show ip bgp" displays the Loc-RIB. > > Next, all "best" routes from the Loc-RIB are sent to the main IP > routing table, where they compete with potential routes from all > other sources. "show ip route" shows the active routes to all > destinations. "show ip route bgp" shows the subset of those routes > that was learned from BGP. > > An example: > > BGP has two routes to 172.16.1.0/24 and to 172.16.2.0/24. > It picks a best route to each. Let's say that has a next hop of > 192.168.1.1 > Show ip bgp would show all four, with an asterisk on the two best. > > The two 172.16.1.0/24 and 172.16.2.0/24 routes, with a next hop of > 192.168.1.1, > are sent to the main routing table installation process. > > Assume that the router also has a static route with administrative > distance 1 to 172.16.2.0/24. That has equal specificity to the second > BGP route, but the administrative distance is more preferred. > > When you do a "show ip route", you will see routes to both > destination, but with a static source to 172.16.2.0 and a BGP source > for 172.16.1.0. > > If you do a "show ip route bgp", you will only see the route to > 172.16.1.0, because that is the only active route with a BGP source. > FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=734&t=734 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Next-hop attribute question [7:849]
I have the following question regarding Next-hop attribute that I'm still a little bit confused. Assuming router A is in AS 1, and router B and C are in AS 2. Routers A and B are EBGP peers. Which of following are true? A) When router B advertises to router A a route to router C, it will in all circumstances list itself as the next-hop. B) If router B advertises to router A a route that can be more directly reached through router C, it will list router C as the next-hop if A, B and C are all on the same boradcast medium (e.g. Ethernet). C) If router B advertises to router A a route that can be more directly reached through router C, it will list router B as the next-hop if A, B, and C are all on the same NBMA medium (e.g. Frame Relay) because router A and C might not have direct connectivity. D) If router B advertises a route to router A that can be more directlyreached through router C, it will list router C as the next-hop if A, B and C are all on the same NBMA medium (e.g. Frame Relay) regardless of whether router A and C have connectivity. I understand that D is correct - as on a NBMA medium (with both Router A and Router B are EBGP), that when router B tries to advertise a router to Router A (EBGP) of route to Router C, Router B will automatically list Router C as next-hop, regardless of whether Router A can see Router C. But I also choose A. Following your explanations, when EBGP neighbor forwards routing info. to another EBGP neighbor, it will change the next-hop to itself, which means Router B will list itself as next-hop, but the answer is B and D, why?? Thanks again so much for your help. Regards, Hunt Lee Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=849&t=849 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Switch command questions [7:2477]
I tried to practice some switching commands on the BCMSN book with my switch (2924XL), but I found I lot of commands is completely different from the BCMSN book. BCMSN My switch e.g.1. To assign ports to a VLAN: interface ethernet 0/1 interface ethernet 0/3 vlan-membership static 3switchport access vlan 3 e.g.2 To enable PortFastspantree start-forwardingspantree portfast Is this because of the different IOS version? Or what do I have to do so that I can make my switch to use the same commands as the BCMSN book. Can anyone please shed some light on this? Regards, Hunt Lee IP Solution Analyst Cable and Wireless Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=2477&t=2477 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Cisco 2610 serial interfaces [7:3370]
Can anyone please shed some light on this - what is the 2 Serial(sync/async) network interface(s) built-in on the Cisco 2610? They look much smaller than the normal Cisco 2500 Serials. What kind of cables do they need? Is it expensive? Thanks. Regards, Hunt Lee IP Solution Analyst Cable and Wireless Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=3370&t=3370 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
STP commands [7:6871]
Can someone please shed some light on this? I have read many times (on p153-158) on Cisco BCMSN book but still very confused between on the following 4 commands: And I don't understand when do you have to use them, since I thought root port is determined by the lowest path cost. If equal, it goes for the lowest Bridge ID. And if it still equals, it goes for the lowest port ID. 1) set spantree portpri 2/3 [vlans] VS 2) set spantree portvlanpri 2/3 [vlans] And 3) set spantree portcost 2/3 VS 4) set spantree portvlancost 2/3 cost [vlan] Thanks! Regards, Hunt Lee IP Solution Analyst Cable and Wireless Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=6871&t=6871 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
MLS and InterVLAN routing question [7:7498]
I have three (stupid) questions in regards to MLS and Inter-VLAN routing - sorry :) thanks so much for your help in advance. I understand that in order for MLS to work, one will need: For Cat 5000 or 5500: Either i) RSM (for internal MLS-RP) or ii) with a NetFlow Feature card and directly connected to an external Cisco 7200, 7500 or 4700 router for (external MLS-RP) And for Cat 6000 or 6500: i) MSM (for internal MLS-RP) Now, my question is: Q1) For Cat 5000 or 5500: when do you have to use a Route Switch Feature Card? Is it the same as a RSM? Q2) For Cat 6000 or 6500: what is a MulitLayer Switch Feature Card? Is it the same as a MSM? Q3) As for MLS and Inter-VLAN routing, if an external router is used, does the router need to be attached to the switch using mulitple Ethernet connections or by a FastEthernet connection using ISL, in both cases of MLS and Inter-VLAN routing? Regards, Hunt Lee Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=7498&t=7498 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
PIM multicast question [7:7943]
I have the following question, but I don't understand on the answer: When is a dense mode PIM interface added to the mulitcast routing table for a specific group? A)The interface connects a Catalyst switch. Both the router interface and the Catalyst are running CGMP B)The interface is added to the mroute table if DVMRP is heard C)A host has used ICMP to join the group and the router is a designated router D)There are PIM neighbors but the group has been pruned. The answer is B & C. But I thought dense-mode PIM interface is always added to the multicast routing table. Please help. Regards, Hunt Lee IP Solution Analyst Cable and Wireless Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=7943&t=7943 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Help!!! [7:9311]
[ The following text is in the "x-user-defined" character set. ] [ Your display is set for the "US-ASCII" character set. ] [ Some characters may be displayed incorrectly. ] I have just bought a Cisco 2503 router from Ebay. However, after I boot up the router, I only see the following 2 interfaces: Router>show ip int brief InterfaceIP-Address OK? MethodStatus Protocol BRI0 unassigned YES not set administratively down down Ethernet0unassigned YES not set administratively down down Router> But I can't find the Serial interfaces. I tried swapping out the DRAM and Flash, but the same thing happen. Please help. Another thing I noticed when the router boots up: F3: 3343908+79112+202788 at 0x360 show flash System flash directory: File Length Name/status 1 3423052 igs-g-l.110-9 [3423116 bytes used, 771188 available, 4194304 total] 4096K bytes of processor board System flash (Read ONLY) And when i do show ver, it's not even showing up?? Processor board ID 02996147, with hardware revision Bridging software. Basic Rate ISDN software, Version 1.0. 1 Ethernet/IEEE 802.3 interface. 1 ISDN Basic Rate interface. 32K bytes of non-volatile configuration memory. 4096K bytes of processor board System flash (Read ONLY) Configuration register is 0x2102 Regards, Hunt Lee Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=9311&t=9311 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Frame type question [7:9900]
On the Frame type, what's the difference between Ethernet 802.3 nad 802.2? and the network number, 1 from 0? Thanks again. Regards, Hunt Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=9900&t=9900 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
IOS question [7:10773]
Does anyone know where I can download the 12.2 T version of the IOS the Train release for the 2514 router? I current have a 2514 running IOS 12.1.5 IP Plus feature set require the T release since I need the DHCP support on the ethernet interface. Regards, Hunt Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=10773&t=10773 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
IOS [7:34281]
Can anyone please point me in the right direction for this :) Before I download an IOS from CCO Software Centre, is there a way if I can find that particular IOS has been deferred or had bugs with it (so I could avoid it??). I only know to lookup the switch model (e.g. 3500XL) via Bug Toolkit, but is there any other way? Thanks again. Best Regards, Hunt Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=34281&t=34281 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Route-map question [7:34431]
I have a Route-Map question that I'm very confused about: The scenario is from Caslow (p840), it is as follows: Company A has a full T3 connection to the Internet thru the ISP AAA-101.NET. Company B has a T1 connection to the Internet thru the ISP BBB-202.Net. Company A acquires Company B, but Company A wants to keep both Internet connections, with the exception of packets originating from the AS of BBB-202.Net (BBB-202.Net's AS is 202). All traffic originating from AS 202 will use the T1 Internet connection. Caslow states in order to do this, the following configs should be used on RouterB router bgp 1000 neighbor 10.1.1.1 remote-as 1000 neighbor 172.16.1.100 remote-as 202 neighbor 172.16.1.100 route-map AS-200-IN in no ip classless ip as-path access-list 1 permit _300$ route-map AS-200-IN permit 10 match as-path 1 set local-preference 200 route-map AS-200-IN permit 20 What I don't understand is: With the "set local-preference 200" statement, it directs the traffic (routes coming from AS 202 / neighbor 172.16.1.100) to go out via Router B. However, what makes the router not passing any other routes (not from AS 200)? Wouldn't they still be able to go out thru Router B as well? In consideration that the local preference has not been changed on the router. Any help will be greatly appreciated. Best Regards, Hunt Lee System Engineer WebCentral Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=34431&t=34431 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Route-map question [7:34431]
Thanks so much for your helpful explanation Tom :) Hunt ""Tom Martin"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hunt, > > You are correct, there is nothing filtering the routes entering from > Router B, without local preference set higher on 10.1.1.1 (Router A?) for > the routes, nothing will prevent AS 202 from being used for other > destinations as well. > > More confusing to me is the configuration. > > I read the question as if Router B should only be used for packets > _originating_ from AS 202, which should use the T1 connection. In this > case an outbound filter would be appropriate, along with a community tag > of no-export. > > Even if this the reverse is true (which the configuration seems to > indicate), the as-path access-list is only setting local preference for > the AS 300 destination! It seems like the following access-list should > have been used: > > ip as-path access-list 1 permit ^202$ > > Then again, perhaps I have just totally misunderstood the question. Either > way, I hope that this helps. > > - Tom > > > On Mon, 04 Feb 2002 23:43:41 -0500, Hunt Lee wrote: > > > I have a Route-Map question that I'm very confused about: > > > > The scenario is from Caslow (p840), it is as follows: > > > > Company A has a full T3 connection to the Internet thru the ISP > > AAA-101.NET. Company B has a T1 connection to the Internet thru the ISP > > BBB-202.Net. Company A acquires Company B, but Company A wants to keep > > both Internet connections, with the exception of packets originating > > from the AS of BBB-202.Net (BBB-202.Net's AS is 202). All traffic > > originating from AS 202 will use the T1 Internet connection. > > > > Caslow states in order to do this, the following configs should be used > > on RouterB > > > > router bgp 1000 > > neighbor 10.1.1.1 remote-as 1000 > > neighbor 172.16.1.100 remote-as 202 > > neighbor 172.16.1.100 route-map AS-200-IN in > > > > no ip classless > > ip as-path access-list 1 permit _300$ > > > > route-map AS-200-IN permit 10 > > match as-path 1 > > set local-preference 200 > > > > route-map AS-200-IN permit 20 > > > > What I don't understand is: > > > > With the "set local-preference 200" statement, it directs the traffic > > (routes coming from AS 202 / neighbor 172.16.1.100) to go out via Router > > B. However, what makes the router not passing any other routes (not from > > AS 200)? Wouldn't they still be able to go out thru Router B as well? In > > consideration that the local preference has not been changed on the > > router. > > > > Any help will be greatly appreciated. > > > > Best Regards, > > Hunt Lee > > System Engineer > > WebCentral > > misconduct and Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=34703&t=34431 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Halabi's Internet Routing Architecture book [7:35165]
I have heard very high regards for Internet Routing Architectures (from Sam Halabi). However, all of my local book stores said they have all ran out of stock a year ago (as they claimed the book is more than a year old) The ISBN i found is:- 157870233X, or is there a newer version of this book under a different title? Any help will be greatly appreciated. Best Regards, Hunt Lee System Engineer WebCentral Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=35165&t=35165 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: set community no-export V.S. set community local-as [7:35355]
John, So isn't that Local-AS means can only send routes within the local AS, while no-export means only advertised to IBGP peers (which means advertised to only local AS).. so aren't they the same thing - I'm still very confused. Best Regards, Hunt Lee WebCentral ""John Neiberger"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > From reading an FAQ on CCO: > > Community Description > > Local-AS: Use in confederation scenarios to prevent sending > packets outside the local autonomous system (AS). > > no-export: Do not advertise to external BGP (eBGP) peers. Keep > this route within an AS. > > no-advertise: Do not advertise this route to any peer, internal > or external. > > none: Apply no community attribute when you want to clear the > communities associated with a route. > > internet: Advertise this route to the internet community, and > any router that belongs to it. > > HTH, > John > > > > Get your own "800" number > Voicemail, fax, email, and a lot more > http://www.ureach.com/reg/tag > > > On Sun, 10 Feb 2002, Cebuano ([EMAIL PROTECTED]) wrote: > > > Aren't these two acvhieving the same purpose? Please tell me > what i'm > > missing. > > Thanks. > > > > Elmer > > > > In the following example, routes that pass the autonomous > system path > > access > > list 1 have the community set to 109. > > Routes that pass the autonomous system path access list 2 > have the > > community > > set to no-export (these routes > > will not be advertised to any external BGP [eBGP] peers). > > > > route-map set_community 10 permit > > match as-path 1 > > set community 109 > > > > route-map set_community 20 permit > > match as-path 2 > > set community no-export > > > > > > In the following similar example, routes that pass the > autonomous system > > path > > access list 1 have the community > > set to 109. Routes that pass the autonomous system path > access list 2 > > have > > the > > community set to local-as > > (the router will not advertise this route to an eBGP peer > outside the > > local > > autonomous system. > > > > route-map set_community 10 permit > > match as-path 1 > > set community 109 > > > > route-map set_community 20 permit > > match as-path 2 > > set community local-as > [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=35355&t=35355 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Route-map question [7:34431]
Tom, Can you please elaborate how the outbound filter with the community tag of no-export would help... as I'm still not too clear what it will achieve. And sorry for the stupid question... Thanks again. Best Regards, Hunt Lee ""Tom Martin"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > I read the question as if Router B should only be used for packets > _originating_ from AS 202, which should use the T1 connection. In this > case an outbound filter would be appropriate, along with a community tag > of no-export. > On Mon, 04 Feb 2002 23:43:41 -0500, Hunt Lee wrote: > > > I have a Route-Map question that I'm very confused about: > > > > The scenario is from Caslow (p840), it is as follows: > > > > Company A has a full T3 connection to the Internet thru the ISP > > AAA-101.NET. Company B has a T1 connection to the Internet thru the ISP > > BBB-202.Net. Company A acquires Company B, but Company A wants to keep > > both Internet connections, with the exception of packets originating > > from the AS of BBB-202.Net (BBB-202.Net's AS is 202). All traffic > > originating from AS 202 will use the T1 Internet connection. > > > > Caslow states in order to do this, the following configs should be used > > on RouterB > > > > router bgp 1000 > > neighbor 10.1.1.1 remote-as 1000 > > neighbor 172.16.1.100 remote-as 202 > > neighbor 172.16.1.100 route-map AS-200-IN in > > > > no ip classless > > ip as-path access-list 1 permit _300$ > > > > route-map AS-200-IN permit 10 > > match as-path 1 > > set local-preference 200 > > > > route-map AS-200-IN permit 20 > > > > What I don't understand is: > > > > With the "set local-preference 200" statement, it directs the traffic > > (routes coming from AS 202 / neighbor 172.16.1.100) to go out via Router > > B. However, what makes the router not passing any other routes (not from > > AS 200)? Wouldn't they still be able to go out thru Router B as well? In > > consideration that the local preference has not been changed on the > > router. > > > > Any help will be greatly appreciated. > > > > Best Regards, > > Hunt Lee > > System Engineer > > WebCentral > > misconduct and Nondisclosure violations to [EMAIL PROTECTED] Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=35358&t=34431 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Route-map question [7:34431]
Tom, Can you please elaborate how the outbound filter with the community tag of no-export would help... as I'm still not too clear what it will achieve. And sorry for the stupid question... Thanks again. Best Regards, Hunt Lee WebCentral ""Tom Martin"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Hunt, You are correct, there is nothing filtering the routes entering from Router B, without local preference set higher on 10.1.1.1 (Router A?) for the routes, nothing will prevent AS 202 from being used for other destinations as well. More confusing to me is the configuration. I read the question as if Router B should only be used for packets _originating_ from AS 202, which should use the T1 connection. In this case an outbound filter would be appropriate, along with a community tag of no-export. Even if this the reverse is true (which the configuration seems to indicate), the as-path access-list is only setting local preference for the AS 300 destination! It seems like the following access-list should have been used: ip as-path access-list 1 permit ^202$ Then again, perhaps I have just totally misunderstood the question. Either way, I hope that this helps. - Tom Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=35374&t=34431 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
BGP question [7:35459]
Tom, Can you please elaborate how the outbound filter with the community tag of no-export would help... as I'm still not too clear what it will achieve. And sorry for the stupid question... Thanks again. Best Regards, Hunt Lee WebCentral ""Tom Martin"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Hunt, You are correct, there is nothing filtering the routes entering from Router B, without local preference set higher on 10.1.1.1 (Router A?) for the routes, nothing will prevent AS 202 from being used for other destinations as well. More confusing to me is the configuration. I read the question as if Router B should only be used for packets _originating_ from AS 202, which should use the T1 connection. In this case an outbound filter would be appropriate, along with a community tag of no-export. Even if this the reverse is true (which the configuration seems to indicate), the as-path access-list is only setting local preference for the AS 300 destination! It seems like the following access-list should have been used: ip as-path access-list 1 permit ^202$ Then again, perhaps I have just totally misunderstood the question. Either way, I hope that this helps. - Tom Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=35459&t=35459 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
VLSM Question [7:35827]
As for VLSM, I found an example in Jeff Doyle (TCP/IP Vol 1) on p290 that I don't understand. 192.168.50.0 /25, and it states that the reason it has /25 is because it needs to have 100 hosts => so 2^7-2=126 hosts (as 2^6 would be too zmall), so it makes sense. What confuses me is that since 192.168.50.0 /25 is a Class C, it uses up /24 for subnet bits: And if /25 - /24 = /1 But isn't the way the calculate the number of subnet: 2^n-2, and in this case, 2^1-2 = 0, so does it mean it has no subnet? Also, as for host address, how can I derive Jeff's answer as the host range is 192.168.50.1-192.168.50.126? Thanks so much for your help in advance. Best Regards, Hunt Lee System Engineer WebCentral Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=35827&t=35827 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
EIGRP Successor [7:36044]
I have an EIGRP question that I'm a bit confused: Firstly, let me try to see if I understand the terms: (for EIGRP) Successor - A neighoring router used for packet forwarding that has a least cost path to a destination. Feasible Successor - Next-hop router for the backup path. If this is the case, on TCP / IP Vol 1 (by Doyle) at p342 Fig 8.8 It shows the following EIGRP topology table:- (for Router Chanute) Chanute# show ip eigrp topology P10.1.6.0 /24, 1 successors, FD is 768 via 10.1.2.1 (768 / 512), Ethernet0 First number (768) is the Feasible Dist of this local router (Chanute), while the second number is the Advertised Dist from the neighbor router (at 10.1.2.1) Since the first number equals the FD, this 10.1.2.1 is a successor for subnet 10.1.6.0 /24. However, Jeff said "the route to 10.1.6.0 has an FD of 768 (which I agree so far), and Wright (at 10.1.2.1) is the only feasible successor. ??? But isn't 10.1.2.1 the successor rather than the feasible successor? As another example: (for another router called Langley) Langley# show ip eigrp topology P10.1.2.0 /24, 1 successors, FD is 768 via 10.1.3.1 (768 / 256), Serial 0 via 10.1.5.2 (1280 / 256), Serial 1 In this case, since the route via 10.1.3.1 has FD have 768, it will be the successor, and the route via 10.1.5.2 has FD have 1280 (which is > 768) - so it is a feasible successor Am I on the right track? Time to go home Thanks for any help in advance, Best Regards, Hunt Lee System Engineer WebCentral Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=36044&t=36044 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
OSPF Question [7:36352]
I believe someone might have mentioned this already but since I'm studying it right now I thought I'd ask again... It would be greatly appreciated if someone can shed some light on this. For OSPF Point-to-MulitPoint Network type, does the OSPF packets use multicast or unicast? My understanding is that Point-to-Multipoint Network type is a special config of NBMA network in which the network are treated as a collection of Point-to-Point links. And since Point-to-Point links always use multicast (to ALLSPFRouter address 224.0.0.5), I thought Multicast will hence use Multicast too... however... the TCP / IP Vol1 by Jeff Doyle says Point-to-Point links' Updates as well as Hello packets use unicast Please help... Best Regards, Hunt Lee Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=36352&t=36352 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: VLSM Question [7:35827]
So does it mean on the first subent -> the host range is 192.168.50.1 - 192.168.50.126, and the second subnet host range is 192.168.50.129 - 192.168.50.254? Best Regards, Hunt Lee ""G Z"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > The 25 bit can be 0 or 1. It looks like the book chose 0. The CCNA books use > 2^n - 2 for both hosts and subnets. But you also can use the > zero and one subnet so that would add 2. Then you would have 2^n for > subnets. So, 192.168.50.0 is one, and 192.168.50.128 is another subnet. > Using the first subnet: 192.168.50.0 network > 192.168.50.0001 first host > 192.168.50.0110 last host > 192.168.50. broadcast > > I hope this helps and also that it's right. I just got my NA recently. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=36354&t=35827 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: LLQ Configuration [7:36272]
Steve, I'm not sure if there is a typo on your config, please see in-line... Lee ""Steve Manuel"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > To Group: > > I am working with a client who is having problems with Video Conference > using Polycom Equipment. The problem is jitter and audio drops. > > The solution that has been suggested to us by Cisco Low Latency Queueing > (LLQ) > over Frame Relay. > > I'm not sure the release but I was told this is a new feature for Frame > Relay. > We were instructed to upgrade to 12.2.6a IP Plus Feature Set... > > We did this.. > > This particular client has one DLCI on the physical interface, the port > speed of the interface > is 768kb. This is the same for both sites that have the video equipment. > > Here's the configuration I put together. > > > access-list 101 permit tcp any any range 3230 3231 > access-list 101 permit udp any any range 3230 3235 > > > class-map match-all video > match access-group 101 > You create a Class-map here called "match-all video" > > Policy-map video-police > class video > priority 540 > class class-default > fair-queue 64 Yet you apply a class-map called video here, should you be using "match-all video"?? > > > map-class frame-relay video-data > no frame-relay adaptive-shaping > frame-relay cir 768000 > frame-relay bc 7680 > frame-relay be 0 > service-policy out video-police > frame-relay fragment 1280 > > Applied to these two commands to physical interface. > > frame-relay traffic-shaping > frame-relay class video-data > > Here's the error we are getting. > > I/f Serial0/0 DLCI 400 class video requested bandwidth 540 (kbps) > Not Available > Removing service policy from map-class > > We even tried this on a router not connected to the network at all. When you > do a show > run after the error the service-policy statement is removed from the > map-class configuration. > > Does anyone have experience with LLQ or have any suggestions. > > Stephen Manuel Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=36592&t=36272 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
EIGRP Question [7:36770]
Hi all, I have an EIGRP question. It would be greatly appreciated if someone can shed some light on this. I found the following Routing Table from TCP / IP Vol1 by Jeff Doyle. But I don't understand why a summary route would be pointing to Null0? Jeff explains it as "this route helps to prevent potential black holes when default and summary routes are used"... which confuses me even more :( Show ip route D192.168.16.0/24 [90/3219456] via 172.20.15.5, 00:41:41, Serial 0 C192.168.17.0/24 is directly connected, Ethernet 0 C192.168.18.0/24 is variably subnetted, 2 subnets, 2 masks D EX 172.25.0.0/16 [170/2221056] via 172.20.15.5, 00:41:48, Serial 0 172.20.0.0/16 is variably subnetted, 2 subnets, 2 masks D172.20.10.0/24 [90/2195456] via 172.20.15.5, 00:41:48, Serial 0 C172.20.15.4/30 is directly connected, Serial 0 D172.20.15.0/30 [90/2681856] via 172.20.15.5, 00:41:48, Serial 0 D172.20.0.0/16 is a summary, 00:00:09, Null0 Please help... Best Regards, Hunt Lee Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=36770&t=36770 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
PIX questions [7:37129]
Hi all, I have two questions about PIX 501, it would be great if someone can shed some light on this: 1)Currently, I'm using a software called RANCID to monitor and save configs for my works' routers.I know that RANCID uses a Clogin to get into the router, it then do a show running-config command to veiw the configs, and then backs it up. My question is, would PIX 501 supports Clogin? 2)Also, I know one can use "conduit permit icmp any any" to allow the PING packets to get thru the PIX. Would I be able to use a similar command which will allow me to telnet from "outside network" into the PIX? Please help... Best Regards, Hunt Lee Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=37129&t=37129 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: OSPF Network Types [7:37205]
John, For Frame-Relay PVCs, you would use: ip ospf network point-to-multipoint But for Frame-Relay SVCs or ATM SVCs, you would use: ip ospf network point-to-multipoint non-broadcast Best Regards, Hunt Lee ""John Neiberger"" wrote in message news:[EMAIL PROTECTED].; > I've been reading the CCO configuration guides and I now have a > question. What is the difference between the following: > > ip ospf network point-to-multipoint > > and > > ip ospf network point-to-multipoint non-broadcast > > ?? > > More specifically, I really want to know when you would use the latter > command. The example given on CCO is if we have excluded the broadcast > keyword from a frame relay map. I don't think I've ever seen anyone > configure a frame map without that keyword so I don't know why you'd > ever want to do that. > > Any thoughts here? > > Thanks, > John Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=37227&t=37205 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
OSPF Question [7:37228]
I believe someone might have mentioned this already but since I'm studying it right now I thought I'd ask again... It would be greatly appreciated if someone can shed some light on this. For OSPF, I understand that a "flapping" subnet will cause LSAs to be flooded throughout the internetwork at each state transition. However, my question is: TCP / IP Vol1 by Jeff Doyle says if a subnet is summarized by a summary address, the subnet's instability will no longer be advertised. But if this is the case, then what happens if:- e.g. Router A advertised a summary route (advertising subnet 172.20.10.0 /24 to Router B. Now if a host in that subnet (say 172.20.10.1 is bouncing) - if this instability is hidden by the summary route, does it mean that Router B wouldn't realized that 172.20.10.1 is flapping, and continues to forward packets to it? Please help... Best Regards, Hunt Lee Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=37228&t=37228 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: EIGRP Question [7:36770]
Kelly, Thanks so much for getting back to me. However, I still have a few areas that I'm a bit confused about. Please see comments in-line. Thanks so much again :-) Best Regards, Hunt Lee ""Kelly Cobean"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hunt, > The purpose of routing the summary route to Null0 is because it is a > "shortest match" representation of all of the summarized networks, and > therefore is not an actual network that is assigned to an interface. Let's > use the example you gave, where the following subnets: > > 172.20.10.0/24 > 172.20.15.0/30 > 172.20.15.4/30 > > are summarized using the route 172.20.0.0/16. > In the routing table: D172.20.0.0/16 is a summary, 00:00:09, Null0 Does this summary route to the Null0 interface get automatically created when one uses "ip summary-address eigrp 10 172.20.0.0 25.255.0.0" command? Or do I have to create one manually with: ip route 172.20.0.0 255.255.0.0 null0 > Jeff should really have written his explanation this way: > "this route helps to prevent potential black holes when default AND summary > routes are used." (Note the capital AND, indicating that you are using both > a default route AND summary routes, not either/or.) > > The summary 172.20.0.0/16 includes lots of potential subnets that aren't > being summarized. If the routers routing table didn't include a route for > the summary, then when receiving a packet destined for, let's say > 172.20.55.5 (just a random address that isn't within the range of one of the > 3 routes above, but still within the 172.20.0.0/16 summary), it would look > in the routing table and select the default route (0/0) because there is no > more specific match for the destination address. This is a waste of time > because by advertising the summary network to all of the other routers, you > are telling your EIGRP network that all routes that fall within the bounds > of 172.20.0.0/16 are downstream from this router. Because you are doing > this, there can't possibly be a host 172.20.55.5 upstream (i.e. toward the > default route) from this router. Therefore, any packet addressed to a > destination that isn't specifically addressed by one of the networks being > summarized (i.e. a more specific route), you want to discard it (Null0) > because there is no network or host matching the Destination IP. Let's look > at what would happen to a packet destined for 172.20.55.5 without this route > to Null 0. > > Step 1 - routerA receives a packet destined for 172.20.55.5 > Step 2 - routerA looks in the routing table for the longest match network to > route the packet to. > Step 3 - There is no specific route to the dest. network, so it sends the > packet to the default route with a next hop of routerB Assuming the RouterB interface to RouterA is 172.10.10.1/24 Unlike OSPF & RIP, I know that both IGRP & EIGRP don't understand the "ip route 0.0.0.0 0.0.0.0 172.10.10.1" command, IGRP & EIGRP needs to use "ip default-network" command. However, how do you set a Next-hop IP / or Exit Interface with this command - to point it to the next hop of RouterB? > Step 4 - routerB receives the packet destined for 172.20.55.5 > Step 5 - routerB looks in it's routing table and finds a matching network, > which is the summary advertised by routerA For these following 3 routes, if one summarized them with a more specific summary route, e.g. 172.20.8.0 /21, the IP address 172.20.55.5 will no longer be summarized by the summary route, so wouldn't this fix the problem? 172.20.10.0/24 172.20.15.0/30 172.20.15.4/30 > Step 6 - routerB sends the packet to the next-hop router for the > summary-route 172.20.0.0/16, which is (routerA) > Step 7 - See step 1 > !!! Routing Loop !!! The packet will bounce back and forth until the TTL > is exceeded, then get dropped. > > Let's look at the same packet with the route to Null0 for the summary on the > router that is advertising it (routerA) > > Step 1 - routerA receives a packet destined for 172.20.55.5 > Step 2 - routerA looks in the routing table for the longest match network to > route the packet to. > Step 3 - routerA finds a longest-match in the routing table - 172.20.0.0/16 > Next-hop - Null0 > Step 4 - routerA discards the packet. > > > Does this all make sense? You could get away without this route to null0 on > the advertising router if your routes being summarized covered every address > in the summary range, but as this is not always the case, they include the > route to Null0 to protect valuable resources on the router from being > consumed routing packets that have no destinatio
Re: Q on FR spoke configuration. [7:36293]
Hello Rajesh, The "Frame-relay interface dlci" statement shouldn't be needed for (a) - Physical interface, since the command is used to associate a DLCI to a point-to-point / multipoint "sub-interface" ONLY. Best Regards, Hunt ""Rajesh Kumar"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hi all, > > Can somebody clarify me the following : > > 1. In a Hub-Spoke configuration of FR network, what is the appropriate > configuration on the spoke side when it is a > > (a) Physical Interface : FR map statements / > Interface-dlci > > (b) Point-Point interface :I am pretty sure it is > Interface-dlci config. > > (c)Multipoint interface :FR map / Interface-dlci > ( I know it doesn't mean much by making a spoke to be a > multipoint > interface, but lets keep for argument sake..) > > > Thanks, > Rajesh Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=37837&t=36293 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
OSPF Question [7:37936]
To ALL, I have 2 OSPF questions, it would be greatly appreciated if someone can shed some light on this. 1) Does an OSPF Stub Area blocks Type 5 LSAs & Type 4 LSAs, or do they just block Type 5 LSAs? 2) I know that when an OSPF "Stub Area" is attached to an ABR, the ABR will automatically advertise a default route into the area with Type 3 LSAs (Network Summary LSA). My question is:- Will an ABR (which is attached to a NSSA) also advertise such a default route with Type 3 LSA? Any help will be greatly appreciated. Best Regards, Hunt Lee Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=37936&t=37936 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Multiple routes Q [7:38353]
Could someone help me get a clear understanding about this: I understand that when multiple routes exist in a routing table, the route with the "longest match" will be chosen. Administrative Distance will only breaks a tie between two routes of equal length. So, what is the "metric" for? When will a router uses "metric" to select a route e.g. to select a route via Router A since it is metrically closer than Router B to Router C. Thanks Everyone in advance. Best Regards, Hunt Lee System Engineer WebCentral Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=38353&t=38353 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Default-informatin originate always [7:33729]
Howard, Thanks for the explanation too. However, I still have 2 questions regarding default-information originate command. > If there's more than one default router, you definitely don't want the always keyword. Why? Wouldn't the ASBR still be able to advertise it's default route to other routers? > AFAIK, if the router was default-free, you couldn't use > default-information originate without always, because the router > would never have a local default to meet the ALWAYS condition. In > that case, you'd have to have BGP or a static route specify it, and > redistribute that route into OSPF. If the ASBR was default-free (who hasn't got a default route), wouldn't it be true if you can ONLY use the default-information originate (without the "Always" keyword")? Thanks in advance. Best Regards, Hunt Lee ""Howard C. Berkowitz"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > >Regarding this command... > >"Default-information originate [always]" > >this is documented as saying... > >this generates the default route into OSPF even if the path to the default > >route goes down... > >and... > >even when the router has no default route, with the magic keyword "always" > it > >will create a "default route"...pointing to where?? > >Q: What's the point of advertising a route if it is indeed DOWN? Isn't this > >like saying i know that Exit5 is closed but I'm gona keep directing all > >motorists to go to Exit 5 anyway? > > > >Please clarify this for me. > > > >Elmer > > Imagine you have a fairly large OSPF area. If the default route goes > down, all the topological databases have to be updated and > propagated. While if JUST the default route were involved, the > Dijkstra computation will not have to be run, there still will be > bandwidth and processor utilization. > > If there is only one router generating default, and it goes down, the > traffic is going to fail anyway. To take your traffic analogy, > default-information always is indeed like directing the traffic > LEAVING THE AREA to Exit 5, but not otherwise disturbing those cars > that don't care about Exit 5. > > If there's more than one default router, you definitely don't want > the always keyword. > > Now--as far as where it points: "it depends". All it points to is > the router generating default. That router may or may not have a > default route of its own -- it might be a default-free BGP router as > well as an ASBR. It could have a default route of its own that points > somewhere outside the AS or area. > > AFAIK, if the router was default-free, you couldn't use > default-information originate without always, because the router > would never have a local default to meet the ALWAYS condition. In > that case, you'd have to have BGP or a static route specify it, and > redistribute that route into OSPF. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=38627&t=33729 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Default-information originate [7:38757]
Hi, Regarding the command "default-information originate", I understand that it will cause the router to advertise the default route into OSPF / IS-IS domain. Without this, by default, OSPF / IS-IS will not advertise the default route to the other routers. As for the [always] keyword for the "default-information originate" command, I know that it only works for OSPF, but not IS-IS. Is this the only difference? Is there anything else that I may be missing? I read up in Jeff Doyle (TCP/IP Vol 1), but it confuses me even more... Jeff states that "if there's more than one default router, you definitely don't want the [always] keyword..... but why? Best Regards, Hunt Lee System Engineer WebCentral Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=38757&t=38757 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Default-information originate [7:38757]
Thanks guys!!! so, if the ASBR is default-free (hasn't got a default), does it mean that one should only use "default-information originate" without the [always] keyword, because the ASBR doesn't have a local default to meet the [always] condition? Thanks again. Best Regards, Hunt Lee System Engineer WebCentral ""Steven A. Ridder"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > because the always keyword will make the router advertise the default route > even if the link is down. giving false info to rest of network. It be > better to let the good router handle default traffic. > > -- > > RFC 1149 Compliant. > Get in my head: > http://sar.dynu.com > > > ""Hunt Lee"" wrote in message > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > Hi, > > > > Regarding the command "default-information originate", I understand that > it > > will cause the router to advertise the default route into OSPF / IS-IS > > domain. Without this, by default, OSPF / IS-IS will not advertise the > > default route to the other routers. > > > > As for the [always] keyword for the "default-information originate" > command, > > I know that it only works for OSPF, but not IS-IS. Is this the only > > difference? Is there anything else that I may be missing? > > > > I read up in Jeff Doyle (TCP/IP Vol 1), but it confuses me even more... > > > > Jeff states that "if there's more than one default router, you definitely > > don't want the [always] keyword. but why? > > > > Best Regards, > > Hunt Lee > > System Engineer > > WebCentral Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=39012&t=38757 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
BGP Next-Hop [7:39704]
Team, I found an example of BGP "next-hop" Attribute from Internet Routing Arch (by Halabi) - Any explanation will be appreciate. Router A, B & C are all in the same AS, while Router D is in a separate AS. Not the best diagram :) Basically:-Router A & Router B are running IBGP Router B & Router D are running EBGP Router B is attached to a stub network (192.212.1.0 /24) Router D is attached to a stub network (128.213.1.0 /24) Router B is learning route 128.213.1.0 /24 from Router D Router B is also injecting route 192.212.1.0 /24 into BGP IBGP EBGP 2.2.2.2 1.1.1.1 A B --D -|128.213.1.0 /24 Serial 0 \ / | \ / | \ / | \/ | \ / 3.3.3.3.\/ 192.212.1.0 /24 C I understand that in BGP table of Router A, it would have 2 entries:- Destination 192.212.1.0 /24Next-hop: 2.2.2.2 (Next-hop is 2.2.2.2 since for IBGP sessions, the Next-hop will be the IP of the IBGP neighbor who advertised the route, which is Router B) Destination 128.213.1.0 /24Next-hop: 1.1.1.1 (Next hop is 1.1.1.1 since for routes coming into an AS via EBGP, the next hop learned from EBGP is carried unchanged into IBGP - in this case, it's Router D). What I am confused it's the Routing Table of Router A, Destination 192.212.1.0 /24Next-hop 2.2.2.2(Best Route inserted from BGP table) - cool Destination 128.213.1.0 /24Next-hop: 1.1.1.1 (Best Route inserted from BGP table) - cool Destination 3.3.3.0 /24Next-hop: Directly Connected via Serial 0 - cool Destination 2.2.2.0 /24 Next-hop: 3.3.3.3(why?? isn't this directly connected via IBGP, shouldn't it be directly connected?) Destination 1.1.1.0 /24Next-hop: 3.3.3.3(why?? shouldn't this have 2 routes, one via 3.3.3.3, and the other via 2.2.2.2?) Also, I thought that in such a scenario, one would want to make sure that every BGP Next-Hop can be reached via either IGP or static routes - However, Halabi says it's only needed for IBGP Next-hop, is it correct? Thanks, Hunt Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=39704&t=39704 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: OSPF NSSA [7:38881]
Steve, I think on p540 of Jeff Doyle, the reason that it has N1 metric type is because the RIP routes are redistributed into OSPF with "metric type 1". Lee ""Steven A. Ridder"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > According to the example in Doyle's Vol 1. book, using the command "no > redis" instead of default-metric creates the N1 stuff. It's on page 540, > footnote 27. > > -- > > RFC 1149 Compliant. > Get in my head: > http://sar.dynu.com > > > ""Chee Kin"" wrote in message > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > Hi, > > > > Has anyone tried this command? > > > > area 1 nssa default-information-originate metric-type 1 > > > > This is the effect on one of the routers in the NSSA. > > > > O*N2 0.0.0.0/0 [110/1] via 192.168.2.66, 00:27:33, TokenRing0 > > > > I was expecting to see O*N1. Is the above output correct? > > > > Thanks. > > > > > > cheekin Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=39707&t=38881 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
BGP Question [7:40128]
I found an example of BGP "next-hop" Attribute from Internet Routing Arch (by Halabi) - Any explanation will be appreciate. Router A, B & C are all in the same AS, while Router D is in a separate AS. Not the best diagram :) Basically:-Router A & Router B are running IBGP Router B & Router D are running EBGP Router B is attached to a stub network (192.212.1.0 /24) Router D is attached to a stub network (128.213.1.0 /24) Router B is learning route 128.213.1.0 /24 from Router D Router B is also injecting route 192.212.1.0 /24 into BGP IBGP EBGP 2.2.2.2 1.1.1.1 A B --D -|128.213.1.0 /24 Serial 0 \ / | \ / | \ / | \/ | \ / 3.3.3.3.\/ 192.212.1.0 /24 C I understand that in BGP table of Router A, it would have 2 entries:- Destination 192.212.1.0 /24Next-hop: 2.2.2.2 (Next-hop is 2.2.2.2 since for IBGP sessions, the Next-hop will be the IP of the IBGP neighbor who advertised the route, which is Router B) Destination 128.213.1.0 /24Next-hop: 1.1.1.1 (Next hop is 1.1.1.1 since for routes coming into an AS via EBGP, the next hop learned from EBGP is carried unchanged into IBGP - in this case, it's Router D). What I am confused it's the Routing Table of Router A, Destination 192.212.1.0 /24Next-hop 2.2.2.2(Best Route inserted from BGP table) - cool Destination 128.213.1.0 /24Next-hop: 1.1.1.1 (Best Route inserted from BGP table) - cool Destination 3.3.3.0 /24Next-hop: Directly Connected via Serial 0 - cool Destination 2.2.2.0 /24 Next-hop: 3.3.3.3(why?? isn't this directly connected via IBGP, shouldn't it be directly connected?) Destination 1.1.1.0 /24Next-hop: 3.3.3.3(why?? shouldn't this have 2 routes, one via 3.3.3.3, and the other via 2.2.2.2?) Also, I thought that in such a scenario, one would want to make sure that every BGP Next-Hop can be reached via either IGP or static routes - However, Halabi says it's only needed for IBGP Next-hop, is it correct? Thanks, Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=40128&t=40128 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Default Route set by BGP Local_Pref [7:40144]
Can a default route (0/0) learned from another AS be assigned a BGP Local_Preference? My understanding is that a default route can be assigned an "Admin Dist" to setup a preference between multiple default routes, but not by Local_Pref. I tried to look on Internet Routing Arch (by Halabi) but Halabi seems to say that Local_Pref works also... Any ideas? >From Halabi on p229:- "The default route AS2 is learning from AS3 should not need to be set at a lower Local_Pref than the full routing AS2 learns from the provider" Thanks, Hunt Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=40144&t=40144 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Queuing and Modem [7:14103]
It would be very great if someone can shed some light on this. It's a little bit off topic but thanks :) Firstly, when should one implement queuing technologies? I have read from various source saying that only do so if it is a bursty WAN links with T1/E1 speed or lower that experience temporary congestion? Is this true? Secondly, what AT commands should I use to set my modem back to default settings? Thanks again. Regards, Hunt Lee IP Solution Analyst Cable and Wireless Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=14103&t=14103 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Novell Encapsulations and Cat 5000 [7:17233]
It would be very great if someone can shed some light on this. It's a little bit off topic but thanks :) Firstly, what is the difference between the following Novell encapsulation types - Arpa, Sap, Novell-Ether and Snap? Do they have different fields in them (for instance, if analyzed with a Protocol Analyzer), and are they all for Ethernet? Secondly, whereabout can I find out more troubleshooting info. on a Cat 5000 - in particular, the LEDs (the green, orange and red lights). Thanks again. Regards, Hunt Lee IP Solution Analyst Cable and Wireless Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=17233&t=17233 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RSA question? [7:26937]
Can anyone please help me on this? For IKE Authentication, I understand that one can use either: pre-shared keys => crypto isakmp policy 100 authentication pre-share or RSA. => (more scalable than Pre-shared key) crypto isakmp policy 100 authentication rsa-sig However, on RSA, what is the difference between RSA encrypted nonces and RSA Signatures? Thanks in advance. Best Regards, Hunt Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=26937&t=26937 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
MCNS Question [7:27064]
It would be greatly appreciated if anyone could give me a hand on this. I have read the MCNS Ciscopress several times (in particular between Chapter 15 to 18), yet I am still very confused about this: For IKE Authentication, I understand that one can use either: pre-shared keys => crypto isakmp policy 100 authentication pre-share or RSA. => (more scalable than Pre-shared key) crypto isakmp policy 100 authentication rsa-sig However, on RSA, what is the difference between RSA encrypted nonces and RSA Signatures? Thanks in advance. Best Regards, Hunt Lee IP Solution Analyst Cable and Wireless Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=27064&t=27064 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Redistribution [7:27406]
I have the following topology, yet I don't understand how to get it working? /25 /24 Router A - Router B Router C OSPF Area 1IGRP AS 100 (AS 100) So on Router B: router ospf 100 network x.x.x.x mask y.y.y.y redistribute igrp 100 default-metric router igrp 100 network x.x.x.x redistribute ospf 100 subnets OR redistribute connected default-metric Any help would be greatly appreciated. Best Regards, Hunt Lee Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=27406&t=27406 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: RSA question? [7:26937]
Thanks for your explanation :) However, can you briefly explain what commands do I need to use for RSA Signature / RSA Encryption nounce? THanks in advance. Hunt ""Matthew Crane"" wrote in message news:[EMAIL PROTECTED]... > There are basically 2 differences and I am going to assume that you > understand what CA & public/private keys are and how they work. > > a. RSA Signatures use a CA and provide non-repudiation i.e. you can prove to > a 3rd party that peerA did indeed have an encrypted conversation with the > peerB, because they both consulted the CA to allow the conversation to take > place. > > b. RSA Encryption or nonce does not use a CA and therefore provides for > repudiation or plausible deniability. However both peers must have the > others public key so they must either have these public keys manually > configured or have used a valid CA in the past. > > Is that what you were after or do you need more ? > > Hunt Lee wrote: > > > > It would be greatly appreciated if anyone could give me a hand > > on this. I > > have read the MCNS Ciscopress several times (in particular > > between Chapter > > 15 to 18), yet I am still very confused about this: > > > > For IKE Authentication, I understand that one can use either: > > > > pre-shared keys => > > > > crypto isakmp policy 100 > > authentication pre-share > > > > or RSA. => (more scalable than Pre-shared key) > > > > crypto isakmp policy 100 > > authentication rsa-sig > > > > > > However, on RSA, what is the difference between RSA encrypted > > nonces and RSA > > Signatures? > > > > Thanks in advance. > > > > Best Regards, > > Hunt Lee > > IP Solution Analyst > > Cable and Wireless Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=27418&t=26937 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
CBAC question [7:27751]
I have read the MCNS (Cisco Press) book several times, expecially on Chapter 8, however, I'm still very confused about the following question: The book states that when configuring CBAC on an external interface, 1)The Outbound Access-List can be standard or extended 2)The Inbound Access-List MUST be extended And when configuring CBAC on an external interface, 1)The Inbound Access-List at the internal interface or Outbound Access-List can be either standard or extended 2)The Outbound Access-List at internal interface or Inbound Access-List at external interface MUST be extended. It also states that for CBAC to create a temporary opening in an access-list, the access-list Must be extended? Any help is greatly appreciated. Best Regards, Hunt Lee Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=27751&t=27751 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Crypto Map Question [7:27909]
I am very confused with the following Crypto Map question: In the MCNS book (by Cisco Press), it said that if a static crypto map entry sees outbound IP traffic that should be protected and the crypto map specifies the use of IKE, then a Security Assoication is negotiated with the remote peer according to the paramenters included in the crypto map entry ( => I understand this, as that's what IKE is for) However, the book also said that if a dynamic crypto map entry sees outbound traffic that should be protected and NO Security Association exists, then the packet will be dropped - why? I thought the pre-requsitite for dynamic crypto map is to use IKE. And if IKE is used, wouldn't it be able to negotiate a Security Association like the first scenario? Any help will be greatly appreciated. Best Regards, Hunt Lee IP Solution Analyst Cable & Wireless Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=27909&t=27909 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Diffle-Hellman Exchange Question [7:27952]
I have a question regarding DES key: >From the MCNS (Cisco Press) book, it states that the DES key is generated by Diffle-Hellman. From what I understand, Diffle-Hellman only exchanges the IPSec peers public key during the shared secret key generation process, and each peer combines the other peer's public key (with their respective private key) to create the shared secret key. However, the generated shared secret key is never transmitted over the network (the insecure channel - i.e. Internet). However, I also read from the CCO site that RSA actually sent the DES key across the network? Any help will be greatly appreciated. Best Regards, Hunt Lee IP Solution Analyst Cable & Wireless Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=27952&t=27952 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Diffle-Hellman Exchange Question [7:27952]
Thanks for the URL. However, why does Cisco says: With the Diffie-Hellman exchange, the DES key never crosses the network (not even in encrypted form), "which is not the case with the RSA encrypt and sign technique." - so what about RSA encrypt and sign technique? I'm very confused... Thanks again. Hunt wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Alex, your are 100% correct. > > Whitfield & Martin (using modular arithmetic) found a beautiful > algorithm in which partners agree in a same key exchanging part of > his/her initial secret key. Never the key will be exchanged in the > public network. As the key is the same for both partners, it is good > for symetric encryption (fast) like DES. > > > -Original Message- > From: Alex Lei [mailto:[EMAIL PROTECTED]] > Sent: segunda-feira, 3 de dezembro de 2001 16:12 > To: [EMAIL PROTECTED] > Subject: RE: Diffle-Hellman Exchange Question [7:27952] > > > Hello Hunt, > > In my understanding the shared key never go across the network. Each > peer > computes it out separately. Where did you see in CCO saying that the > DES key > is sent across the internet? > > Alex Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28051&t=27952 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
CCIE Written Question [7:28259]
I want to start studying for the CCIE written exam, just wondering what books should I buy / read for this? Any help will be greatly appreciated. Best Regards, Hunt Lee IP Solution Analyst Cable & Wireless Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28259&t=28259 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Redistribution Question [7:28374]
I need some help on a Redistribution question: I have setup 4 routers: Router A - Router B - Router C - Router D A, B & C are running OSPF, and C & D are running IGRP - I'm trying to redistribute between OSPF & IGRP routes: A is connected to B with 10.1.1.100 / 24 - Serial 0 B is connected to A with 10.1.1.1 / 24 - Serial 0 B is connected to C with 192.168.1.17 /28 - Serial 1 C is connected to B with 192.168.1.18 / 28 - Serial 0 C is connected to D with 192.168.2.49 / 28 - Serial 1 D is connected to C with 192.168.2.50 / 28 - Serial 0 However, I could only ping from D to A (& vice versa), but I couldn't ping from B to D, or D to B N.B: D to C (and vice versa) is fine as they are directly connected Any help will be greatly appreciated. Thanks in advance, Hunt Lee Below are the configs for the routers: Router A version 11.0 service udp-small-servers service tcp-small-servers ! hostname RouterA ! ! no ip domain-lookup ! interface Ethernet0 no ip address shutdown ! interface Serial0 no ip address no fair-queue clockrate 64000 ! interface Serial1 ip address 10.1.1.100 255.255.255.0 clockrate 64000 ! router ospf 100 network 10.1.1.100 0.0.0.0 area 1 ! ip host RouterB 10.1.1.1 ip host RouterC 192.168.1.18 ip host RouterD 192.168.2.50 ! line con 0 line aux 0 transport input all line vty 0 4 login ! end Router B version 11.0 service udp-small-servers service tcp-small-servers ! hostname RouterB ! no ip domain-lookup ! interface Ethernet0 no ip address shutdown ! interface Serial0 ip address 192.168.1.17 255.255.255.240 no fair-queue ! interface Serial1 ip address 10.1.1.1 255.255.255.0 ! router ospf 100 network 192.168.1.17 0.0.0.0 area 0 network 10.1.1.1 0.0.0.0 area 1 ! ip host RouterA 10.1.1.100 ip host RouterC 192.168.1.18 ip host RouterD 192.168.2.50 ! line con 0 line aux 0 transport input all line vty 0 4 login ! end Router C version 12.0 service timestamps debug uptime service timestamps log uptime no service password-encryption ! hostname RouterC ! ! ip subnet-zero no ip domain-lookup ip host RouterA 10.1.1.100 ip host RouterB 192.168.1.17 ip host RouterD 192.168.2.50 ! interface Ethernet0 no ip address no ip directed-broadcast shutdown ! interface Serial0 ip address 192.168.1.18 255.255.255.240 no ip directed-broadcast no ip mroute-cache no fair-queue clockrate 64000 ! interface Serial1 ip address 192.168.2.49 255.255.255.240 no ip directed-broadcast clockrate 64000 ! interface BRI0 no ip address no ip directed-broadcast shutdown ! router ospf 100 redistribute igrp 200 metric-type 1 subnets network 192.168.1.18 0.0.0.0 area 0 default-metric 10 ! router igrp 200 redistribute ospf 100 network 192.168.2.0 default-metric 1 100 255 1 1500 ! ip classless ip route 192.168.1.0 255.255.255.0 Null0 ! line con 0 transport input none line aux 0 line vty 0 4 login ! end Router D version 12.1 service timestamps debug uptime service timestamps log uptime no service password-encryption ! hostname RouterD !! ip subnet-zero no ip finger no ip domain-lookup ip host RouterC 192.168.1.49 ip host RouterB 192.168.1.17 ip host RouterA 10.1.1.100 ! interface Ethernet0 no ip address shutdown ! interface Serial0 ip address 192.168.2.50 255.255.255.240 no fair-queue ! interface Serial1 no ip address shutdown ! router igrp 200 network 192.168.2.0 ! ip classless ip http server ! line con 0 exec-timeout 0 0 transport input none line 1 16 line aux 0 line vty 0 4 login ! end Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=28374&t=28374 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Redistribution Question [7:28374]
68.2.498640x8002 0x38CC 2 Summary Net Link States (Area 0) Link ID ADV Router AgeSeq# Checksum 10.1.1.0192.168.1.178690x8005 0xD2BE Router Link States (Area 1) Link ID ADV Router AgeSeq# Checksum Link count 10.1.1.100 10.1.1.100 9280x8004 0x4E42 192.168.1.17192.168.1.178700x800F 0xEE46 2 Summary Net Link States (Area 1) Link ID ADV Router AgeSeq# Checksum 192.168.1.16192.168.1.178600x8001 0xBC79 Summary ASB Link States (Area 1) Link ID ADV Router AgeSeq# Checksum 192.168.2.49192.168.1.178510x8001 0xB251 AS External Link States Link ID ADV Router AgeSeq# Checksum Tag 192.168.2.48192.168.1.491239 0x8002 0xA7CF 0 192.168.2.48192.168.2.498760x8001 0xA2D4 0 RouterB# RouterA#trace 192.168.2.50 Type escape sequence to abort. Tracing the route to RouterD (192.168.2.50) 1 10.1.1.1 16 msec 16 msec 16 msec 2 RouterC (192.168.1.18) 32 msec 28 msec 32 msec 3 RouterD (192.168.2.50) 44 msec * 40 msec RouterA# RouterB#trace 192.168.2.50 Type escape sequence to abort. Tracing the route to RouterD (192.168.2.50) 1 RouterC (192.168.1.18) 16 msec 12 msec 16 msec 2 * * * 3 * * * 4 RouterB# ""Stefan Dozier"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Well since I need the redistribution practice, figured > I'd plug your config into my pod and see if I could figure > out what gives! > > First thing I noticed...and it may just be a typo or dyslexia > (it's an affliction I experience often (smile))if you didn't > cut and paste your configs. > From your post... > > A is connected to B with 10.1.1.100 / 24 - Serial 0 > > B is connected to A with 10.1.1.1 / 24 - Serial 0 > B is connected to C with 192.168.1.17 /28 - Serial 1 > > doesn't coincide with your posted configs > > hostname RouterA > ! > interface Serial1 > ip address 10.1.1.100 255.255.255.0 > clockrate 64000 > > hostname RouterB > ! > interface Serial0 > ip address 192.168.1.17 255.255.255.240 > no fair-queue > ! > interface Serial1 > ip address 10.1.1.1 255.255.255.0 > > Second...Here's my plugged in config and all devices have > connectivity to all other devices as expected. > > Caveat: only the necessary portions of the config are listed > for brevity and I changed some DTE/DCE interfaces and increased > the clockrate (personal preferrence)! > > hostname RouterA > ! > interface Serial0 > ip address 10.1.1.100 255.255.255.0 > no fair-queue > ! > router ospf 100 > network 10.1.1.100 0.0.0.0 area 1 > ! > end > ! > hostname RouterB > ! > interface Serial0 > ip address 10.1.1.1 255.255.255.0 > no fair-queue > clockrate 400 > ! > interface Serial1 > ip address 192.168.1.17 255.255.255.240 > ! > router ospf 100 > network 192.168.1.17 0.0.0.0 area 0 > network 10.1.1.1 0.0.0.0 area 1 > ! > end > ! > hostname RouterC > ! > interface Serial0 > ip address 192.168.1.18 255.255.255.240 > no fair-queue > clockrate 400 > ! > interface Serial1 > ip address 192.168.2.49 255.255.255.240 > clockrate 400 > ! > router ospf 100 > redistribute igrp 200 metric-type 1 subnets > network 192.168.1.18 0.0.0.0 area 0 > default-metric 10 > ! > router igrp 200 > redistribute ospf 100 > network 192.168.2.0 > default-metric 1 100 255 1 1500 > ! > ip route 192.168.1.0 255.255.255.0 Null0 > ! > end > ! > hostname RouterD > ! > interface Serial0 > ip address 192.168.2.50 255.255.255.240 > no fair-queue > ! > router igrp 200 > network 192.168.2.0 > ! > end > > HTH > > Stefan > > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of > Hunt Lee > Sent: Friday, December 07, 2001 2:35 AM > To: [EMAIL PROTECTED] > Subject: Redistribution Question [7:28374] > > > I need some help on a Redistribution question: > > I have setup 4 routers: > > Router A - Router B - Router C - Router D > > A, B & C are running OSPF, and C & D are running IGRP - I'm trying to > redistribute between OSPF & IGRP routes: > > A is connected to B with 10.1.1.100 / 24 - Serial 0 > > B is connected to A with 10.1.1.1 / 24 - Serial 0 > B is connected to C with 192.168.1.17 /28 - Serial 1 > > C is connected to B with 192.168.1.18 / 28 - Serial 0 > C is connected to D with 192.168.2.49 / 28 - Serial 1 > > D is connected to C with
Re: Redistribution Question [7:28374]
And from Router D, I can ping back to A, but not to B: RouterD#ping 10.1.1.100 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.1.1.100, timeout is 2 seconds: ! Success rate is 100 percent (5/5), round-trip min/avg/max = 84/86/88 ms RouterD#ping 192.168.1.17 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.1.17, timeout is 2 seconds: . Success rate is 0 percent (0/5) RouterD# ""Hunt Lee"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > I already had the default-metric statment on the ASBR (Router C for IGRP > process), I tried to add this to Router D (IGRP process), with no help. > These are the routing table outputs and trace routes outputs from the > routers: > > Any ideas?? > > Thanks. > Hunt > > > RouterA#show ip route > Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP >D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area >E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP >i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, * - candidate > default > > Gateway of last resort is not set > > 10.0.0.0 255.255.255.0 is subnetted, 1 subnets > C 10.1.1.0 is directly connected, Serial1 > 192.168.1.0 255.255.255.240 is subnetted, 1 subnets > O IA192.168.1.16 [110/128] via 10.1.1.1, 00:07:03, Serial1 > 192.168.2.0 255.255.255.240 is subnetted, 1 subnets > O E2192.168.2.48 [110/20] via 10.1.1.1, 00:07:03, Serial1 > RouterA# > > > RouterB#show ip route > Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP >D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area >E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP >i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, * - candidate > default > > Gateway of last resort is not set > > 10.0.0.0 255.255.255.0 is subnetted, 1 subnets > C 10.1.1.0 is directly connected, Serial1 > 192.168.1.0 255.255.255.240 is subnetted, 1 subnets > C 192.168.1.16 is directly connected, Serial0 > 192.168.2.0 255.255.255.240 is subnetted, 1 subnets > O E2192.168.2.48 [110/20] via 192.168.1.18, 00:07:45, Serial0 > RouterB# > > > RouterC#show ip route > Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP >D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area >N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 >E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP >i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, * - candidate > default >U - per-user static route, o - ODR > > Gateway of last resort is not set > > 10.0.0.0/24 is subnetted, 1 subnets > O IA10.1.1.0 [110/128] via 192.168.1.17, 00:09:58, Serial0 > 192.168.1.0/24 is variably subnetted, 2 subnets, 2 masks > S 192.168.1.0/24 is directly connected, Null0 > C 192.168.1.16/28 is directly connected, Serial0 > 192.168.2.0/28 is subnetted, 1 subnets > C 192.168.2.48 is directly connected, Serial1 > RouterC# > > RouterD#show ip route > Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP >D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area >N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 >E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP >i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter > area >* - candidate default, U - per-user static route, o - ODR >P - periodic downloaded static route > > Gateway of last resort is not set > > I10.0.0.0/8 [100/8576] via 192.168.2.49, 00:00:58, Serial0 > 192.168.2.0/28 is subnetted, 1 subnets > C 192.168.2.48 is directly connected, Serial0 > RouterD# > > > And when I ping from Router A to D, it works.. but it doesn't work from B to > D (& vice versa) > > RouterA#ping 192.168.2.50 > Type escape sequence to abort. > Sending 5, 100-byte ICMP Echos to 192.168.2.50, timeout is 2 seconds: > ! > Success rate is 100 percent (5/5), round-trip min/avg/max = 84/86/88 ms > RouterA# > > RouterB#ping 192.168.2.50 > Type escape sequence to abort. > Sending 5, 100-byte ICMP Echos to 192.168.2.50, timeout is 2 seconds: > . > Success rate is 0 percent (0/5) > RouterB# > > > And here's what I got from OSPF topology table: > > RouterA#show ip ospf database > >OSPF Router with ID (10.1.1.100) (Process ID 100) > > > Router Link States (Area 1) > > Link ID ADV Router AgeSe
Re: Redistribution Question [7:28374]
Ok - on Router C (the redistribution router - I changed the network statement from network 192.168.1.18 0.0.0.0 area 0 to network 192.168.1.0 0.0.0.255 area 0 and everything works straight away :) However, the more puzzling thing is that without any Ip route and Summary-address from Router C (to summarize the OPSF routes before redistributing them into IGRP), how come Router D can still see the routes from OSPF? I thought that it shouldn't be able to see any OSPF routes as they are from /28 subnets. - apart from the Router A since it is /24. Help!!! Hunt ""Chuck Larrieu"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Like Stefan Dozier, I too recreated this on my pod, and I am unable to > duplicate your problem. I was wrong - IGRP will see the 192.168.1.0/24 > subnet come in. As you can see from my Router D table, all the routes are > there. I am able to ping from all routers to al other routers. > > I10.0.0.0/8 [100/8976] via 192.168.2.49, 00:00:44, Serial1 > I192.168.1.0/24 [100/8726] via 192.168.2.49, 00:00:44, Serial1 > 192.168.2.0/28 is subnetted, 1 subnets > C 192.168.2.48 is directly connected, Serial1 > R5# router D > > The only other thing that comes to mind, seeing as you have a number of > different IOS versions on your various routers, and the way you are doing > your network statements, is a bug I heard about on the CCIE list a while > back - something about redistribution problems when using the 0.0.0.0 mask > in the OSPF process when assigning interfaces. I did a bit of searching, but > I am unable to locate any further information. > > Chuck > > > -----Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of > Hunt Lee > Sent: Thursday, December 06, 2001 11:35 PM > To: [EMAIL PROTECTED] > Subject: Redistribution Question [7:28374] > > > I need some help on a Redistribution question: > > I have setup 4 routers: > > Router A - Router B - Router C - Router D > > A, B & C are running OSPF, and C & D are running IGRP - I'm trying to > redistribute between OSPF & IGRP routes: > > A is connected to B with 10.1.1.100 / 24 - Serial 0 > > B is connected to A with 10.1.1.1 / 24 - Serial 0 > B is connected to C with 192.168.1.17 /28 - Serial 1 > > C is connected to B with 192.168.1.18 / 28 - Serial 0 > C is connected to D with 192.168.2.49 / 28 - Serial 1 > > D is connected to C with 192.168.2.50 / 28 - Serial 0 > > However, I could only ping from D to A (& vice versa), but I couldn't ping > from B to D, or D to B > N.B: D to C (and vice versa) is fine as they are directly connected > > Any help will be greatly appreciated. > > Thanks in advance, > > Hunt Lee > > > Below are the configs for the routers: > > Router A > version 11.0 > > service udp-small-servers > > service tcp-small-servers > > ! > > hostname RouterA > > ! > > ! > > no ip domain-lookup > > ! > > interface Ethernet0 > > no ip address > > shutdown > > ! > > interface Serial0 > > no ip address > > no fair-queue > > clockrate 64000 > > ! > > interface Serial1 > > ip address 10.1.1.100 255.255.255.0 > > clockrate 64000 > > ! > > router ospf 100 > > network 10.1.1.100 0.0.0.0 area 1 > > ! > > ip host RouterB 10.1.1.1 > > ip host RouterC 192.168.1.18 > > ip host RouterD 192.168.2.50 > > ! > > line con 0 > > line aux 0 > > transport input all > > line vty 0 4 > > login > > ! > > end > > > Router B > version 11.0 > > service udp-small-servers > > service tcp-small-servers > > ! > > hostname RouterB > > ! > > no ip domain-lookup > > ! > > interface Ethernet0 > > no ip address > > shutdown > > ! > > interface Serial0 > > ip address 192.168.1.17 255.255.255.240 > > no fair-queue > > ! > > interface Serial1 > > ip address 10.1.1.1 255.255.255.0 > > ! > > router ospf 100 > > network 192.168.1.17 0.0.0.0 area 0 > > network 10.1.1.1 0.0.0.0 area 1 > > ! > > ip host RouterA 10.1.1.100 > > ip host RouterC 192.168.1.18 > > ip host RouterD 192.168.2.50 > > ! > > line con 0 > > line aux 0 > > transport input all > > line vty 0 4 > > login > > ! > > end > > > > Router C > > version 12.0 > > service timestamps debug uptime > > service timestamps log uptime > > no service password-encryption > > ! > > hostname RouterC > > ! > > ! > > ip sub
IP Default-network [7:29895]
Can someone please explain to me what's the difference between a static route & ip default-network? I have always been thinking that default-network is similar to static routes - gateway of last resort. That is, when the router doesn't know how to forward the route, it will send it to "default network" (as compared to a single destination specified by static route). I read up the Ip default-network on Caslow (on p352 - about configuring default routes for IGRP), it states that whatever network you reference with "ip default-network" statement must be in the routing table of the router that is sourcing the default-network or must be advertised by the originating router as a classful prefix. Which makes me even more confused Any help is greatly appreciated. Hunt Lee IP Solution Analyst Cable & Wireless Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=29895&t=29895 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Redistribute connected with RIP ? [7:29667]
I know this may be a stupid question, but how does the BGP network statement operates? H ""John Neiberger"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > In RIP, you must specify which interfaces participate in the routing > protocol. With no network statement, you have no interfaces > participating so what's the point in that?? :-) > > Let's say you have 10 interfaces, one of which is in the 172.16.0.0/16 > major net and the rest are in some other major net. If you configure > the following: > > router rip > network 172.16.0.0 > redistribute connected metric 1 > > This will cause that single interface to participate in RIP routing > *and* it will advertise your connected networks without the need to add > them via networks statements. > > You're misunderstanding the way the network statement operates in RIP. > You're thinking that it works in RIP the same way that in works with > BGP, and it doesn't. > > HTH, > John > > >>> Phil Barker 12/19/01 11:22:12 AM >>> > No, I still don't get it !!! > > If I have to type in all the directly connected > networks via the network statement then what does > redistribute connected actually do ? > > Regs, > > Phil. > > --- John Neiberger > wrote: > The network statement in RIP does not specify > which > > networks to > > advertise, it specifies which interfaces participate > > in RIP. If you > > don't have a network statement, no networks will be > > advertised because > > no interfaces are running RIP. > > > > HTH, > > John > > > > >>> "Phil Barker" 12/19/01 12:01:40 PM > > >>> > > Hi all, > >Just set up a simple RIP network and am trying to > > redistribute connected networks without directly > > advertising a network through the network statement. > > > > The router won't allow me ? If I advertise a network > > with redistribute connected and then take the > > network > > out of the advertisements then the 'router rip', > > 'redistribute connected' is still in the config but > > it > > doesn't do anything i.e 'debug ip rip' shows no > > updates. > > > > Does anyone know why this is ? > > > > Regards, > > > > Phil. > > > > > > __ > > Do You Yahoo!? > > Everything you'll ever need on one web page > > from News and Sport to Email and Music Charts > > http://uk.my.yahoo.com > [EMAIL PROTECTED] > > __ > Do You Yahoo!? > Everything you'll ever need on one web page > from News and Sport to Email and Music Charts > http://uk.my.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=29940&t=29667 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
BGP example in Caslow [7:29942]
are connected via Ethernet) Loopback0: 5.5.5.5/24 Loopback0: 4.4.4.4/24 e1 10.1.5.5/24e1 10.1.5.4/24 Router A Router B AS5000 AS4000 Router A config: Router bgp 5000 neighbor 10.1.5.4 remote-as 4000 Int e1 ip address 10.1.5.5 255.255.255.0 int Loopback 0 ip address 5.5.5.5 255.255.255.0 Router B config: Router bgp 4000 neighbor 10.1.5.5 remote-as 5000 int e1 ip address 10.1.5.4 255.255.255.0 int Loopback 0 ip address 4.4.4.4 255.255.255.0 I understand that EBGP connection has to be directly connected, so in this case, this example is absolutely correct. But I also read on the book which states BGP speaker will not advertise any routes unless IGP (or static route) can reach BGP's next hop. So in this example, how come there is no IGP or static running? Or are they not necessary if there isn't any third or fourth router attached to router A or B? Thanks for your help in advance. Best Regards, Hunt Lee IP Solution Analyst Cable & Wireless Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=29942&t=29942 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
IP classless command [7:30056]
Can anyone please explain to me what is "ip classless" used for? I looked it up on the Caslow book, and it states that by enabling IP classless, it allows one to override the contiguous subnet rule and allow the router to look for the longest match beyond the listed subnets. But I still don't understand what it means? Can anyone give me some examples? Thanks in advance. Best Regards, Hunt Lee IP Solution Analyst Cable & Wireless Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=30056&t=30056 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: IP classless command [7:30056]
Hello Mike. thanks so much for your detailed explanation. However, I'm still confused about how the ip classless works. I understand that "classful" rules (if no ip classless is configured), with the 10.1.1.0/24 static route, it would forward anything from 10.1.1.1 to 10.1.1.254, but why would it worked for 11.x.x.x? Also, with the "ip classless", will it just forward anything like 10.x.x.x? Thanks again. Hunt ""Mike"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > The best way to explain IP classless is to explain how a router works with > "no ip classless". Suppose you have a router with a static route configured > to 10.1.1.0/24 out some interface and you also have a default gateway > configured. Again, ip classless is disabled, "no ip classless". > > A packet comes into the router destined for 10.1.1.2, the router looks at > the routing table, sees the static route and forwards as expected. > > A packet comes into the router destined for 11.x.x.x, the router looks at > the routing table, sees the default gateway and forwards as expected. > > A packet comes into the router destined for 10.10.10.1, you would expect the > router to forward the packet via the default gateway. However, because the > router is operting in "classful mode", the router drops the packet rather > then using the default gateway. This is because the router is in the same > classful network as the 10.1.1.0/24 network used for the static route. > > If the "ip classless" command was used, the dropped packet would actually be > forwarded via the default gateway. There really is no reason not to use "ip > classless" on all router configurations. > > Mike > > > > ""Hunt Lee"" wrote in message > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > Can anyone please explain to me what is "ip classless" used for? I looked > > it up on the Caslow book, and it states that by enabling IP classless, it > > allows one to override the contiguous subnet rule and allow the router to > > look for the longest match beyond the listed subnets. > > > > But I still don't understand what it means? Can anyone give me some > > examples? > > > > Thanks in advance. > > > > Best Regards, > > Hunt Lee > > IP Solution Analyst > > Cable & Wireless Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=30089&t=30056 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
IRB Question [7:30574]
I'm a bit confused on the the following IRB commands: In Caslow (p612), it gives the following IRB config example: (Config)# bridge irb (Config)# interface bvi 1 (Config)# bridge 1 bridge ipx But I thought the whole purpose of BVI is to route packets from the Bridge group to the BVI itself, and then the BVI will forward the packet to the outbound routed interface, so shouldn't the last command be: (Config)# bridge 1 route ipx Any help will be greatly appreciated. Best Regards, Hunt Lee IP Solution Analyst Cable & Wireless Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=30574&t=30574 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Access-List questions [7:31001]
Hello there, I need some help on Access-Lists: Say if I want to permit network access to only 10.10.10.1 - 10.10.10.254 I know you can simply use: Access-list 10 permit 10.10.10.0 0.0.0.255 However, if I want to only permit the range of 10.10.10.40 to 10.10.10.49 (inclusive), then what should I do? Any help is greatly appreciated. Best Regards, Hunt Lee IP Solution Analyst Cable & Wireless Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=31001&t=31001 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Access-List questions [7:31001]
Thanks for the response guys :) But can anyone explain to me how do you guys derive: 10.10.10.40 0.0.0.7 & 10.10.10.48 0.0.0.1 And also, for the second statement, how do you know 48 has to be placed in the fourth octet? I'm still very confused, but thanks for your help in advance. Best Regards, Hunt Lee ""Gaz"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > You're not wrong, spotted the previous mistake, you just missed off an > address. That's a nice way of putting it eh? > > Changing your second line to Permit 10.10.10.48 0.0.0.1 will do the trick > because it allows 48 and 49 through. > > Regards, > > Gaz > > > ""Shengtao"" wrote in message > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > I think "Permit 10.10.10.40 0.0.0.7" will allow 40-47, and you need > another > > statement " Permit 10.10.10.48 0.0.0.0" to allow 48 to get through. > > > > Am I worng? > > > > > > ""Godswill HO"" wrote in message > > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > > Hi, > > > > > > Try the following: > > > > > > IP access-list standard allowed > > > Permit 10.10.10.40 0.0.0.7 > > > Permit 10.10.10.49 0.0.0.0 > > > > > > The first permit statement allow addresses n.n.n.40 to n.n.n.48, while > the > > > last one allow address n.n.n.49. There is no way you can deny whole > range > > > without affecting other addresses with one single statement. > > > > > > When appliying it to your interface say: > > > > > > Router(config-if)#IP access-group allowed in > > > > > > Regards. > > > Oletu > > > > > > - Original Message - > > > From: Hunt Lee > > > To: > > > Sent: Friday, January 04, 2002 9:29 PM > > > Subject: Access-List questions [7:31001] > > > > > > > > > > Hello there, > > > > > > > > I need some help on Access-Lists: > > > > > > > > Say if I want to permit network access to only 10.10.10.1 - > 10.10.10.254 > > > > > > > > I know you can simply use: > > > > > > > > Access-list 10 permit 10.10.10.0 0.0.0.255 > > > > > > > > However, if I want to only permit the range of 10.10.10.40 to > > 10.10.10.49 > > > > (inclusive), then what should I do? > > > > > > > > Any help is greatly appreciated. > > > > > > > > Best Regards, > > > > Hunt Lee > > > > IP Solution Analyst > > > > Cable & Wireless > > > _ > > > Do You Yahoo!? > > > Get your free @yahoo.com address at http://mail.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=31030&t=31001 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Access-List questions [7:31001]
Ok - here's what I understand so far: to permit range only 10.10.10.40 - 10.10.10.49 128 64 32 16 8 4 2 1 1 1 40 1 1 1 41 1 1 1 0 42 1 1 1 1 43 1 1 1 0 0 44 1 1 1 0 1 45 1 1 1 1 0 46 1 1 1 1 1 47 1 10 0 0 0 48 1 10 0 0 1 49 .. .. 1 11 1 1 1 63 Until I draw this out, I realize if I use 10.10.10.40 0.0.0.31 (16+8+4+2+1=31, the last 5 bits unchecked), it would include addresses all the way to 10.10.10.63 So then, I split off the first part 128 64 32 16 8 4 2 1 1 1 40 1 1 1 41 1 1 1 0 42 1 1 1 1 43 1 1 1 0 0 44 1 1 1 0 1 45 1 1 1 1 0 46 1 1 1 1 1 47 getting => 10.10.10.40 0.0.0.7 (4+2+1=7, the last 3 bits unchecked) - and since this includes the range of 10.10.10.40 to 10.10.10.47, the next range will start with 10.10.10.48: 128 64 32 16 8 4 2 1 1 10 0 0 0 48 1 10 0 0 1 49 getting => 10.10.10.48 0.0.0.1 (the last 1 bit unchecked) - hence getting the range of 10.10.10.48 to 10.10.10.49 Am I on the right track? - and I'm very sorry for the long message (I just want you guys to check whether my processes are correct or not) And if I'm correct, is there any faster way than this? Thanks again. Hunt ""D. J. Jones"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Think of it in the same terms as you would a normal subnet mask Lee. > > You want to permit address 10.10.10.40 thru 10.10.10.49. > 10.10.10.40 255.255.255.248 is equal to 10.10.10.40 0.0.0.7 and > includes the addresses 10.10.10.40 thru 10.10.10.47. Furthermore, > 10.10.10.48 255.255.255.254 is equal to 10.10.10.48 0.0.0.1 and > includes the addresses 10.10.10.48 thru 10.10.10.49. > > Try to always think binary. In this case the first range falls on an 8 bit > boundary with the range 0 1 2 3 4 5 6 7. The second ranges starts > on an 8 bit boundary with the range 0 1. You should now be able to see > that as 0.0.0.7 and 0.0.0.1. Hope this helps. > ""Hunt Lee"" wrote in message > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > Thanks for the response guys :) But can anyone explain to me how do you > > guys derive: > > > > 10.10.10.40 0.0.0.7 & 10.10.10.48 0.0.0.1 > > > > And also, for the second statement, how do you know 48 has to be placed in > > the fourth octet? > > > > I'm still very confused, but thanks for your help in advance. > > > > Best Regards, > > Hunt Lee > > > > > > ""Gaz"" wrote in message > > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > > You're not wrong, spotted the previous mistake, you just missed off an > > > address. That's a nice way of putting it eh? > > > > > > Changing your second line to Permit 10.10.10.48 0.0.0.1 will do the > trick > > > because it allows 48 and 49 through. > > > > > > Regards, > > > > > > Gaz > > > > > > > > > ""Shengtao"" wrote in message > > > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > > > I think "Permit 10.10.10.40 0.0.0.7" will allow 40-47, and you need > > > another > > > > statement " Permit 10.10.10.48 0.0.0.0" to allow 48 to get through. > > > > > > > > Am I worng? > > > > > > > > > > > > ""Godswill HO"" wrote in message > > > > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > > > > Hi, > > > > > > > > > > Try the following: > > > > > > > > > > IP access-list standard allowed > > > > > Permit 10.10.10.40 0.0.0.7 > > > > > Permit 10.10.10.49 0.0.0.0 > > > > > > > > > > The first permit statement allow addresses n.n.n
Re: Access-List questions - am I right? [7:31123]
Thanks for your responses, everyone :) Anyway, here's what I understand so far: to permit range only 10.10.10.40 - 10.10.10.49 128 64 32 16 8 4 2 1 1 1 40 1 1 1 41 1 1 1 0 42 1 1 1 1 43 1 1 1 0 0 44 1 1 1 0 1 45 1 1 1 1 0 46 1 1 1 1 1 47 1 10 0 0 0 48 1 10 0 0 1 49 .. .. 1 11 1 1 1 63 Until I draw this out, I realize if I use 10.10.10.40 0.0.0.31 (16+8+4+2+1=31, the last 5 bits unchecked), it would include addresses all the way to 10.10.10.63 So then, I split off the first part 128 64 32 16 8 4 2 1 1 1 40 1 1 1 41 1 1 1 0 42 1 1 1 1 43 1 1 1 0 0 44 1 1 1 0 1 45 1 1 1 1 0 46 1 1 1 1 1 47 getting => 10.10.10.40 0.0.0.7 (4+2+1=7, the last 3 bits unchecked) - and since this includes the range of 10.10.10.40 to 10.10.10.47, the next range will start with 10.10.10.48: 128 64 32 16 8 4 2 1 1 10 0 0 0 48 1 10 0 0 1 49 getting => 10.10.10.48 0.0.0.1 (the last 1 bit unchecked) - hence getting the range of 10.10.10.48 to 10.10.10.49 Am I on the right track? - and I'm very sorry for the long message (I just want you guys to check whether my processes are correct or not) And if I'm correct, is there any faster way than this? Thanks again. Hunt ""Tom Lisa"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Priscilla, > > You MUST have been in a hurry, 0 means match this bit position and 1 > means > don't care. Definately can't argue with your second paragraph though. > > Prof. Tom Lisa, CCAI > Community College of Southern Nevada > Cisco Regional Networking Academy > > Priscilla Oppenheimer wrote: > > Have you put the addresses and masks in binary and tried to work it > out for > yourself? In the mask, 0 means "don't care" and 1 means "must match." > > This is a quick answer due to a shortage of time and because I think > you > will learn best if you do it yourself. > > Priscilla > > At 05:38 PM 1/5/02, Hunt Lee wrote: > >Thanks for the response guys :) But can anyone explain to me how > do you > >guys derive: > > > >10.10.10.40 0.0.0.7 & 10.10.10.48 0.0.0.1 > > > >And also, for the second statement, how do you know 48 has to be > placed in > >the fourth octet? > > > >I'm still very confused, but thanks for your help in advance. > > > >Best Regards, > >Hunt Lee > > > > > >""Gaz"" wrote in message > >[EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > > You're not wrong, spotted the previous mistake, you just missed > off an > > > address. That's a nice way of putting it eh? > > > > > > Changing your second line to Permit 10.10.10.48 0.0.0.1 will do > the trick > > > because it allows 48 and 49 through. > > > > > > Regards, > > > > > > Gaz > > > > > > > > > ""Shengtao"" wrote in message > > > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > > > I think "Permit 10.10.10.40 0.0.0.7" will allow 40-47, and you > need > > > another > > > > statement " Permit 10.10.10.48 0.0.0.0" to allow 48 to get > through. > > > > > > > > Am I worng? > > > > > > > > > > > > ""Godswill HO"" wrote in message > > > > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > > > > Hi, > > > > > > > > > > Try the following: > > > > > > > > > > IP access-list standard allowed > > > > > Permit 10.10.10.40 0.0.0.7 > > > > > Permit 10.10.10.49 0.0.0.0 >
Source-Route Bridge Question [7:31150]
I am confused on the following issue: For Source-Route Bridging, I understand that the Source-Route bridge will examine the Routing Info. Indicator in each Token frame to determine whether it should forward the frame or not. If the value is zero, it will not forward the frame. But if the value is one, it will forward the frame (am I right so far?) My question is that is this Routing Info. Indicator located on the first byte of Token-Ring source address (Caslow on p629), or first bit of Token Ring source address? (Caslow p592) Coz I don't have a token network to play with (and a sniffer), I can't tell which one is correct. Any help will be greatly appreciated. Best Regards, Hunt Lee IP Solution Analyst Cable & Wireless Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=31150&t=31150 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
EIGRP Summary Question [7:31256]
When using EIGRP Summary: On the router that performs the summarization, it's routing table will have entry listed as Null0 for the summary routes And on the downstream routers, their routing table will only have the summaries - no reference to Null 0. However, the following paragraph is what I'm confused about:- By applying the longest match rule, the downstream routers will forward all destination prefixes using the summary address. Eventually, these routers will be forwarded to the router performing the summarization. The summarizing router will match the destination prefixes with their longer matching subnets. If any of the destination prefixes match the summary address only, the summarizing router will forward these packets to the null interface, and they will be discarded. But why / when would the destination prefixes match the summary address only?? Any help will be greatly appreciated. Best Regards, Hunt Lee IP Solution Analyst Cable & Wireless Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=31256&t=31256 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Please help!!! [7:41002]
I need some help for a Access Server setup.
I am trying to setup a modem (netcomm 56.6k) to connect to a 2511. The
modem is currently connected to the AUX port. However, no matter what I
tried from my PC, everytime I make a connection, it comes up with a whole
bunch of garbage.
OK
OK
OK
CARRIER 31200
PROTOCOL: NONE
CONNECT 31200
__sSM~ErX9D`?ro"x`?@!S,@@`# B
#o `@DZG?@"Z(S(?|p?
cF42EmXUj"hYLh8[$ DD<>>06#"\(sqOKobt^U"Bt08
S,,R '! P kfh(?L^H
&E`jeDL?ez^P}}N\NAs-)
^al8b.ZTa!('P"Q-7sE-aOP> qGU!'!8"d/^erK? Oni`Stn!ma}8.e"j? zCg_$!hG"3gO?P
g77 (FE. FpO]%?XB^P
S.TS&eT8'
1gciz$F~?*@yV
-=Thttp://www.groupstudy.com/form/read.php?f=7&i=41002&t=41002
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Default Route set by BGP Local_Pref [7:40144]
Thanks for getting back to me. So u are saying that any routes that is originated from AS 300 will be assigned with a BGP Local_Pref of 400, while all other traffic will be given a Local_Pref of 150? But wouldn't this set all inbound routes from AS 300 to have a Local_pref of 400, instead of just the default route (0/0)? Thanks in advance. Best Regards, Hunt Lee ""pankaj kulkarni"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > You could use a route map along with the neighbour command to set the local > preferance.The configuration should be similar to that below. > > > RTD# > router bgp 256 > neighbor 3.3.3.4 remote-as 300 > neighbor 3.3.3.4 route-map setlocalin in > > ... > ip as-path access-list 7 permit ^300$ > .. > route-map setlocalin permit 10 > match as-path 7 > set local-preference 400 > route-map setlocalin permit 20 > set local-preference 150 > > > > "Hunt Lee" wrote: > > > > Can a default route (0/0) learned from another AS be assigned a BGP > Local_Preference? My understanding is that a default route can be assigned > an "Admin Dist" to setup a preference between multiple default routes, but > not by Local_Pref. I tried to look on Internet Routing Arch (by Halabi) but > Halabi seems to say that Local_Pref works also... Any ideas? > > From Halabi on p229:- "The default route AS2 is learning from AS3 should not > need to be set at a lower Local_Pref than the full routing AS2 learns from > the provider" > > Thanks, > > Hunt > Get Your Private, Free E-mail from Indiatimes at http://email.indiatimes.com > > Buy Music, Video, CD-ROM, Audio-Books and Music Accessories from > http://www.planetm.co.in Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41004&t=40144 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Access-List Question [7:41126]
Hi group , I found the following Access-List from a router's config, what does it do? Why is there a "host 255.255.0.0" at the end of the access-list statement? router bgp 3 aggregate-address 172.16.0.0 255.255.0.0 neighbor 192.168.10.1 send community neighbor 192.168.10.1 route-map SetCommunity out access-list 101 permit ip 172.16.0.0 0.0.255.255 host 255.255.0.0 access-list 101 permit ip 10.0.0.0 0.255.255.255 0.0.0.0 0.0.0.0 route-map SetCommunity permit 10 match ip address 101 route-map SetCommunity permit 20 set community no-export Thanx Hunt Lee Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41126&t=41126 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
BGP Aggregate Routes [7:41269]
Hi all, I have a question about BGP Aggregate Routes, it would be great if someone can shed some light on this: I understand that in "3840 703 2764 4648, (aggregated by 4648 202.37.247.45)", 4648 is where the AS Number that originates this aggregate route (219.88.0.0), while 202.37.247.45 is the Router_ID who creates this aggregate. But what does the front bit say - 3840 703 2764 4648??? br1.bne#sh ip bgp 219.88.0.0 BGP routing table entry for 219.88.0.0/16, version 376147 Paths: (4 available, best #1) Not advertised to any peer 3840 703 2764 4648, (aggregated by 4648 202.37.247.45) 203.147.255.131 (metric 3) from 203.147.255.131 (203.147.255.131) Origin IGP, metric 5, localpref 100, valid, internal, atomic-aggregate, best Community: 703:1020 1221 2764 4648, (aggregated by 4648 202.37.247.45) 203.147.255.130 (metric 3) from 203.147.255.130 (203.147.255.130) Origin IGP, localpref 80, valid, internal, atomic-aggregate 1221 2764 4648, (aggregated by 4648 202.37.247.45) 139.130.64.85 from 139.130.64.85 (203.14.8.12) Origin IGP, localpref 80, valid, external, atomic-aggregate 1221 2764 4648, (aggregated by 4648 202.37.247.45), (received-only) 139.130.64.85 from 139.130.64.85 (203.14.8.12) Origin IGP, localpref 100, valid, external, atomic-aggregate Please help... Best Regards, Hunt Lee Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41269&t=41269 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: BGP Aggregate Routes [7:41269]
Ok, now I'm even more confused:- When I do a show ip bgp summary, it clearly shows that my AS is 7496 (I've confirmed this with show run). Also, my only EBGP neighbor is from AS 1221 (all the others are IBBP neighbors), which does not match any of the values in 3840 703 2764 4648. It would be greatly appreciated if someone can shed some light on this. Best Regards, Hunt Lee System Engineer WebCentral br1.bne#sh ip bgp summary BGP router identifier 203.X.X.X, local AS number 7496 BGP table version is 405452, main routing table version 405452 7650 network entries and 23974 paths using 1701010 bytes of memory 1822 BGP path attribute entries using 109320 bytes of memory 1034 BGP AS-PATH entries using 27252 bytes of memory 1 BGP community entries using 24 bytes of memory 528 BGP route-map cache entries using 8448 bytes of memory 6 BGP filter-list cache entries using 72 bytes of memory 6037 received paths for inbound soft reconfiguration BGP activity 96332/491991 prefixes, 389268/365294 paths, scan interval 15 secs NeighborVAS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd 139.130.64.85 4 1221 117111 76236 4054520 0 7w3d 5939 203.X.X.X 4 7496 122386 122542 40545200 7w3d 5948 203.X.X.X 4 7496 274338 123297 40545200 4w6d 6033 203.X.X.X 4 7496 0 00 0 0 neverActive 203.X.X.X 4 7496 73359 118408 4054520 0 6w2d6 203.X.X.X 4 7496 76221 122542 4054520 0 7w3d6 br1.bne# ""J ACH"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > This is AS path. The router br1.bne is in AS 3840. > > Hope this helps > Jana. ""Hunt Lee"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hi all, > > I have a question about BGP Aggregate Routes, it would be great if someone > can shed some light on this: > > I understand that in "3840 703 2764 4648, (aggregated by 4648 > 202.37.247.45)", 4648 is where the AS Number that originates this aggregate > route (219.88.0.0), while 202.37.247.45 is the Router_ID who creates this > aggregate. > > But what does the front bit say - 3840 703 2764 4648??? > > > br1.bne#sh ip bgp 219.88.0.0 > BGP routing table entry for 219.88.0.0/16, version 376147 > Paths: (4 available, best #1) > Not advertised to any peer > 3840 703 2764 4648, (aggregated by 4648 202.37.247.45) > 203.147.255.131 (metric 3) from 203.147.255.131 (203.147.255.131) > Origin IGP, metric 5, localpref 100, valid, internal, > atomic-aggregate, best > Community: 703:1020 > 1221 2764 4648, (aggregated by 4648 202.37.247.45) > 203.147.255.130 (metric 3) from 203.147.255.130 (203.147.255.130) > Origin IGP, localpref 80, valid, internal, atomic-aggregate > 1221 2764 4648, (aggregated by 4648 202.37.247.45) > 139.130.64.85 from 139.130.64.85 (203.14.8.12) > Origin IGP, localpref 80, valid, external, atomic-aggregate > 1221 2764 4648, (aggregated by 4648 202.37.247.45), (received-only) > 139.130.64.85 from 139.130.64.85 (203.14.8.12) > Origin IGP, localpref 100, valid, external, atomic-aggregate > > > Please help... > > Best Regards, > Hunt Lee Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41453&t=41269 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
BGP route info Question [7:41454]
Ok, now I'm even more confused:- When I do a show ip bgp summary, it clearly shows that my AS is 7496 (I've confirmed this with show run). Also, my only EBGP neighbor is from AS 1221 (all the others are IBBP neighbors), which does not match any of the values in 3840 703 2764 4648. It would be greatly appreciated if someone can shed some light on this. Best Regards, Hunt Lee System Engineer WebCentral br1.bne#sh ip bgp summary BGP router identifier 203.X.X.X, local AS number 7496 BGP table version is 405452, main routing table version 405452 7650 network entries and 23974 paths using 1701010 bytes of memory 1822 BGP path attribute entries using 109320 bytes of memory 1034 BGP AS-PATH entries using 27252 bytes of memory 1 BGP community entries using 24 bytes of memory 528 BGP route-map cache entries using 8448 bytes of memory 6 BGP filter-list cache entries using 72 bytes of memory 6037 received paths for inbound soft reconfiguration BGP activity 96332/491991 prefixes, 389268/365294 paths, scan interval 15 secs NeighborVAS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd 139.130.64.85 4 1221 117111 76236 4054520 0 7w3d 5939 203.X.X.X 4 7496 122386 122542 40545200 7w3d 5948 203.X.X.X 4 7496 274338 123297 40545200 4w6d 6033 203.X.X.X 4 7496 0 00 0 0 neverActive 203.X.X.X 4 7496 73359 118408 4054520 0 6w2d6 203.X.X.X 4 7496 76221 122542 4054520 0 7w3d6 br1.bne# ""J ACH"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > This is AS path. The router br1.bne is in AS 3840. > > Hope this helps > Jana. ""Hunt Lee"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > Hi all, > > I have a question about BGP Aggregate Routes, it would be great if someone > can shed some light on this: > > I understand that in "3840 703 2764 4648, (aggregated by 4648 > 202.37.247.45)", 4648 is where the AS Number that originates this aggregate > route (219.88.0.0), while 202.37.247.45 is the Router_ID who creates this > aggregate. > > But what does the front bit say - 3840 703 2764 4648??? > > > br1.bne#sh ip bgp 219.88.0.0 > BGP routing table entry for 219.88.0.0/16, version 376147 > Paths: (4 available, best #1) > Not advertised to any peer > 3840 703 2764 4648, (aggregated by 4648 202.37.247.45) > 203.147.255.131 (metric 3) from 203.147.255.131 (203.147.255.131) > Origin IGP, metric 5, localpref 100, valid, internal, > atomic-aggregate, best > Community: 703:1020 > 1221 2764 4648, (aggregated by 4648 202.37.247.45) > 203.147.255.130 (metric 3) from 203.147.255.130 (203.147.255.130) > Origin IGP, localpref 80, valid, internal, atomic-aggregate > 1221 2764 4648, (aggregated by 4648 202.37.247.45) > 139.130.64.85 from 139.130.64.85 (203.14.8.12) > Origin IGP, localpref 80, valid, external, atomic-aggregate > 1221 2764 4648, (aggregated by 4648 202.37.247.45), (received-only) > 139.130.64.85 from 139.130.64.85 (203.14.8.12) > Origin IGP, localpref 100, valid, external, atomic-aggregate > > > Please help... > > Best Regards, > Hunt Lee Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41454&t=41454 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Redistribute static Question [7:42298]
202.139.236.2) 4 msec 4 msec 4 msec 6 fa0-1.gw1.bne.webcentral.com.au (202.139.236.254) 4 msec 4 msec 0 msec 7 fa0-0.gw2.bne.webcentral.com.au (202.139.236.2) 4 msec 4 msec 0 msec 8 fa0-1.gw1.bne.webcentral.com.au (202.139.236.254) 4 msec 4 msec 4 msec 9 fa0-0.gw2.bne.webcentral.com.au (202.139.236.2) 4 msec 4 msec 4 msec 10 fa0-1.gw1.bne.webcentral.com.au (202.139.236.254) 4 msec 4 msec 4 msec 11 fa0-0.gw2.bne.webcentral.com.au (202.139.236.2) 4 msec 4 msec 4 msec 12 fa0-1.gw1.bne.webcentral.com.au (202.139.236.254) 4 msec 4 msec 4 msec 13 fa0-0.gw2.bne.webcentral.com.au (202.139.236.2) 4 msec 4 msec 4 msec 14 fa0-1.gw1.bne.webcentral.com.au (202.139.236.254) 4 msec 8 msec 4 msec 15 fa0-0.gw2.bne.webcentral.com.au (202.139.236.2) 4 msec 8 msec 4 msec 16 fa0-1.gw1.bne.webcentral.com.au (202.139.236.254) 4 msec 4 msec 8 msec 17 fa0-0.gw2.bne.webcentral.com.au (202.139.236.2) 4 msec 4 msec 4 msec 18 fa0-1.gw1.bne.webcentral.com.au (202.139.236.254) 8 msec 8 msec 4 msec 19 fa0-0.gw2.bne.webcentral.com.au (202.139.236.2) 8 msec 8 msec 4 msec 20 fa0-1.gw1.bne.webcentral.com.au (202.139.236.254) 4 msec 4 msec 8 msec 21 fa0-0.gw2.bne.webcentral.com.au (202.139.236.2) 12 msec 4 msec 4 msec 22 fa0-1.gw1.bne.webcentral.com.au (202.139.236.254) 4 msec 8 msec 8 msec 23 fa0-0.gw2.bne.webcentral.com.au (202.139.236.2) 8 msec 8 msec 8 msec 24 fa0-1.gw1.bne.webcentral.com.au (202.139.236.254) 4 msec 8 msec 8 msec 25 fa0-0.gw2.bne.webcentral.com.au (202.139.236.2) 4 msec 8 msec 12 msec 26 fa0-1.gw1.bne.webcentral.com.au (202.139.236.254) 12 msec 8 msec 8 msec 27 fa0-0.gw2.bne.webcentral.com.au (202.139.236.2) 8 msec 4 msec 8 msec 28 fa0-1.gw1.bne.webcentral.com.au (202.139.236.254) 8 msec 8 msec 8 msec 29 fa0-0.gw2.bne.webcentral.com.au (202.139.236.2) 8 msec 8 msec 8 msec 30 fa0-1.gw1.bne.webcentral.com.au (202.139.236.254) 8 msec 8 msec 8 msec gw1.bne# Also, I have attached the config for Gw2.bne (Middle Router):- controller E1 0/0 channel-group 0 timeslots 1-31 ! ! interface Loopback0 description Management ip address 10.1.1.6 255.255.0.0 ! interface FastEthernet0/0 ip address 202.139.236.2 255.255.255.0 ip ospf message-digest-key 1 md5 7 0205534119541C14644F speed 100 full-duplex random-detect ! interface Serial0/0:0 description N7065870L to Lvl5 Wickham St ip address 203.147.255.185 255.255.255.252 ip nbar protocol-discovery ip route-cache flow service-policy output guaranteed ! router ospf 7496 log-adjacency-changes area 0 authentication message-digest network 202.139.236.0 0.0.0.255 area 0 network 203.147.255.184 0.0.0.3 area 203.147.188.0 ! ip flow-export source Loopback0 ip flow-export version 5 ip flow-export destination 203.147.190.7 9992 ip classless ip route 0.0.0.0 0.0.0.0 202.139.236.254 ip route 203.32.10.0 255.255.255.0 203.147.255.186 ip route 203.147.188.0 255.255.255.0 203.147.255.186 no ip http server So why would Gw2.bne (the middle router) passed the Redistributed Routes to Gw1.bne while itself (Gw2.bne) is using the supernet?? Thanks a lot Best Regards, Hunt Lee Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=42298&t=42298 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Please help!!! [7:42411]
webcentral.com.au (202.139.236.2) 4 msec 4 msec 4 msec 6 fa0-1.gw1.bne.webcentral.com.au (202.139.236.254) 4 msec 4 msec 0 msec 7 fa0-0.gw2.bne.webcentral.com.au (202.139.236.2) 4 msec 4 msec 0 msec 8 fa0-1.gw1.bne.webcentral.com.au (202.139.236.254) 4 msec 4 msec 4 msec 9 fa0-0.gw2.bne.webcentral.com.au (202.139.236.2) 4 msec 4 msec 4 msec 10 fa0-1.gw1.bne.webcentral.com.au (202.139.236.254) 4 msec 4 msec 4 msec 11 fa0-0.gw2.bne.webcentral.com.au (202.139.236.2) 4 msec 4 msec 4 msec 12 fa0-1.gw1.bne.webcentral.com.au (202.139.236.254) 4 msec 4 msec 4 msec 13 fa0-0.gw2.bne.webcentral.com.au (202.139.236.2) 4 msec 4 msec 4 msec 14 fa0-1.gw1.bne.webcentral.com.au (202.139.236.254) 4 msec 8 msec 4 msec 15 fa0-0.gw2.bne.webcentral.com.au (202.139.236.2) 4 msec 8 msec 4 msec 16 fa0-1.gw1.bne.webcentral.com.au (202.139.236.254) 4 msec 4 msec 8 msec 17 fa0-0.gw2.bne.webcentral.com.au (202.139.236.2) 4 msec 4 msec 4 msec 18 fa0-1.gw1.bne.webcentral.com.au (202.139.236.254) 8 msec 8 msec 4 msec 19 fa0-0.gw2.bne.webcentral.com.au (202.139.236.2) 8 msec 8 msec 4 msec 20 fa0-1.gw1.bne.webcentral.com.au (202.139.236.254) 4 msec 4 msec 8 msec 21 fa0-0.gw2.bne.webcentral.com.au (202.139.236.2) 12 msec 4 msec 4 msec 22 fa0-1.gw1.bne.webcentral.com.au (202.139.236.254) 4 msec 8 msec 8 msec 23 fa0-0.gw2.bne.webcentral.com.au (202.139.236.2) 8 msec 8 msec 8 msec 24 fa0-1.gw1.bne.webcentral.com.au (202.139.236.254) 4 msec 8 msec 8 msec 25 fa0-0.gw2.bne.webcentral.com.au (202.139.236.2) 4 msec 8 msec 12 msec 26 fa0-1.gw1.bne.webcentral.com.au (202.139.236.254) 12 msec 8 msec 8 msec 27 fa0-0.gw2.bne.webcentral.com.au (202.139.236.2) 8 msec 4 msec 8 msec 28 fa0-1.gw1.bne.webcentral.com.au (202.139.236.254) 8 msec 8 msec 8 msec 29 fa0-0.gw2.bne.webcentral.com.au (202.139.236.2) 8 msec 8 msec 8 msec 30 fa0-1.gw1.bne.webcentral.com.au (202.139.236.254) 8 msec 8 msec 8 msec gw1.bne# Also, I have attached the config for Gw2.bne (Middle Router):- controller E1 0/0 channel-group 0 timeslots 1-31 ! ! interface Loopback0 description Management ip address 10.1.1.6 255.255.0.0 ! interface FastEthernet0/0 ip address 202.139.236.2 255.255.255.0 ip ospf message-digest-key 1 md5 7 0205534119541C14644F speed 100 full-duplex random-detect ! interface Serial0/0:0 description N7065870L to Lvl5 Wickham St ip address 203.147.255.185 255.255.255.252 ip nbar protocol-discovery ip route-cache flow service-policy output guaranteed ! router ospf 7496 log-adjacency-changes area 0 authentication message-digest network 202.139.236.0 0.0.0.255 area 0 network 203.147.255.184 0.0.0.3 area 203.147.188.0 ! ip flow-export source Loopback0 ip flow-export version 5 ip flow-export destination 203.147.190.7 9992 ip classless ip route 0.0.0.0 0.0.0.0 202.139.236.254 ip route 203.32.10.0 255.255.255.0 203.147.255.186 ip route 203.147.188.0 255.255.255.0 203.147.255.186 no ip http server So why would Gw2.bne (the middle router) passed the Redistributed Routes to Gw1.bne while itself (Gw2.bne) is using the supernet?? Thanks a lot Best Regards, Hunt Lee Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=42411&t=42411 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Please help!!! [7:42411]
nal Link States > > > > 203.147.154.0 203.147.255.186 867 0x8002 0xAC01 0 > > 203.147.154.128 203.147.255.186 867 0x8002 0xA40D 0 > > 203.147.154.136 203.147.255.186 867 0x8002 0x6246 0 > > 203.147.154.144 203.147.255.186 867 0x8002 0xFF9F 0 > > 203.147.154.148 203.147.255.186 867 0x8002 0xE5B4 0 > > > > gw1.bne#sh ip route 203.147.154.136 > > Routing entry for 203.147.154.136/29 > > Known via "ospf 7496", distance 110, metric 20, type extern 2, forward > > metric 52 > > Redistributing via ospf 7496 > > Last update from 202.139.236.2 on FastEthernet0/1, 00:49:30 ago > >Routing Descriptor Blocks: > > * 202.139.236.2, from 203.147.255.186, 00:49:30 ago, via FastEthernet0/1 > > Route metric is 20, traffic share count is 1 > > > > As a result, when I do a trace from Gw1.bne (the rightmost router), it > > points it to Gw2.bne, but Gw2.bne points it back - Routing Loop :( > > > > gw1.bne#trace 203.147.154.136 > > > > Type escape sequence to abort. > > Tracing the route to 203.147.154.136 > > > > 1 fa0-0.gw2.bne.webcentral.com.au (202.139.236.2) 0 msec 4 msec 0 msec > > 2 fa0-1.gw1.bne.webcentral.com.au (202.139.236.254) 4 msec 4 msec 0 msec > > 3 fa0-0.gw2.bne.webcentral.com.au (202.139.236.2) 0 msec 4 msec 4 msec > > 4 fa0-1.gw1.bne.webcentral.com.au (202.139.236.254) 4 msec 4 msec 4 msec > > 5 fa0-0.gw2.bne.webcentral.com.au (202.139.236.2) 4 msec 4 msec 4 msec > > 6 fa0-1.gw1.bne.webcentral.com.au (202.139.236.254) 4 msec 4 msec 0 msec > > 7 fa0-0.gw2.bne.webcentral.com.au (202.139.236.2) 4 msec 4 msec 0 msec > > 8 fa0-1.gw1.bne.webcentral.com.au (202.139.236.254) 4 msec 4 msec 4 msec > > 9 fa0-0.gw2.bne.webcentral.com.au (202.139.236.2) 4 msec 4 msec 4 msec > > 10 fa0-1.gw1.bne.webcentral.com.au (202.139.236.254) 4 msec 4 msec 4 msec > > 11 fa0-0.gw2.bne.webcentral.com.au (202.139.236.2) 4 msec 4 msec 4 msec > > 12 fa0-1.gw1.bne.webcentral.com.au (202.139.236.254) 4 msec 4 msec 4 msec > > 13 fa0-0.gw2.bne.webcentral.com.au (202.139.236.2) 4 msec 4 msec 4 msec > > 14 fa0-1.gw1.bne.webcentral.com.au (202.139.236.254) 4 msec 8 msec 4 msec > > 15 fa0-0.gw2.bne.webcentral.com.au (202.139.236.2) 4 msec 8 msec 4 msec > > 16 fa0-1.gw1.bne.webcentral.com.au (202.139.236.254) 4 msec 4 msec 8 msec > > 17 fa0-0.gw2.bne.webcentral.com.au (202.139.236.2) 4 msec 4 msec 4 msec > > 18 fa0-1.gw1.bne.webcentral.com.au (202.139.236.254) 8 msec 8 msec 4 msec > > 19 fa0-0.gw2.bne.webcentral.com.au (202.139.236.2) 8 msec 8 msec 4 msec > > 20 fa0-1.gw1.bne.webcentral.com.au (202.139.236.254) 4 msec 4 msec 8 msec > > 21 fa0-0.gw2.bne.webcentral.com.au (202.139.236.2) 12 msec 4 msec 4 msec > > 22 fa0-1.gw1.bne.webcentral.com.au (202.139.236.254) 4 msec 8 msec 8 msec > > 23 fa0-0.gw2.bne.webcentral.com.au (202.139.236.2) 8 msec 8 msec 8 msec > > 24 fa0-1.gw1.bne.webcentral.com.au (202.139.236.254) 4 msec 8 msec 8 msec > > 25 fa0-0.gw2.bne.webcentral.com.au (202.139.236.2) 4 msec 8 msec 12 msec > > 26 fa0-1.gw1.bne.webcentral.com.au (202.139.236.254) 12 msec 8 msec 8 msec > > 27 fa0-0.gw2.bne.webcentral.com.au (202.139.236.2) 8 msec 4 msec 8 msec > > 28 fa0-1.gw1.bne.webcentral.com.au (202.139.236.254) 8 msec 8 msec 8 msec > > 29 fa0-0.gw2.bne.webcentral.com.au (202.139.236.2) 8 msec 8 msec 8 msec > > 30 fa0-1.gw1.bne.webcentral.com.au (202.139.236.254) 8 msec 8 msec 8 msec > > gw1.bne# > > > > Also, I have attached the config for Gw2.bne (Middle Router):- > > > > controller E1 0/0 > > channel-group 0 timeslots 1-31 > > ! > > ! > > interface Loopback0 > > description Management > > ip address 10.1.1.6 255.255.0.0 > > ! > > interface FastEthernet0/0 > > ip address 202.139.236.2 255.255.255.0 > > ip ospf message-digest-key 1 md5 7 0205534119541C14644F > > speed 100 > > full-duplex > > random-detect > > ! > > interface Serial0/0:0 > > description N7065870L to Lvl5 Wickham St > > ip address 203.147.255.185 255.255.255.252 > > ip nbar protocol-discovery > > ip route-cache flow > > service-policy output guaranteed > > ! > > router ospf 7496 > > log-adjacency-changes > > area 0 authentication message-digest > > network 202.139.236.0 0.0.0.255 area 0 > > network 203.147.255.184 0.0.0.3 area 203.147.188.0 > > ! > > ip flow-export source Loopback0 > > ip flow-export version 5 > > ip flow-export destination 203.147.190.7 9992 > > ip classless >
Re: Please help!!! [7:42411]
4) 12 msec 8 msec 8 msec > > 27 fa0-0.gw2.bne.webcentral.com.au (202.139.236.2) 8 msec 4 msec 8 msec > > 28 fa0-1.gw1.bne.webcentral.com.au (202.139.236.254) 8 msec 8 msec 8 msec > > 29 fa0-0.gw2.bne.webcentral.com.au (202.139.236.2) 8 msec 8 msec 8 msec > > 30 fa0-1.gw1.bne.webcentral.com.au (202.139.236.254) 8 msec 8 msec 8 msec > > gw1.bne# > > > > Also, I have attached the config for Gw2.bne (Middle Router):- > > > > controller E1 0/0 > > channel-group 0 timeslots 1-31 > > ! > > ! > > interface Loopback0 > > description Management > > ip address 10.1.1.6 255.255.0.0 > > ! > > interface FastEthernet0/0 > > ip address 202.139.236.2 255.255.255.0 > > ip ospf message-digest-key 1 md5 7 0205534119541C14644F > > speed 100 > > full-duplex > > random-detect > > ! > > interface Serial0/0:0 > > description N7065870L to Lvl5 Wickham St > > ip address 203.147.255.185 255.255.255.252 > > ip nbar protocol-discovery > > ip route-cache flow > > service-policy output guaranteed > > ! > > router ospf 7496 > > log-adjacency-changes > > area 0 authentication message-digest > > network 202.139.236.0 0.0.0.255 area 0 > > network 203.147.255.184 0.0.0.3 area 203.147.188.0 > > ! > > ip flow-export source Loopback0 > > ip flow-export version 5 > > ip flow-export destination 203.147.190.7 9992 > > ip classless > > ip route 0.0.0.0 0.0.0.0 202.139.236.254 > > ip route 203.32.10.0 255.255.255.0 203.147.255.186 > > ip route 203.147.188.0 255.255.255.0 203.147.255.186 > > no ip http server > > > > So why would Gw2.bne (the middle router) passed the Redistributed Routes to > > Gw1.bne while itself (Gw2.bne) is using the supernet?? > > > > Thanks a lot > > > > Best Regards, > > Hunt Lee > Hunt Lee wrote: > > > I have an OSPF connectivity problem. I have 3 routers as follows: > > > > OSPF Area 203.147.188.0 OSPF Area 0 > > Gw1.bne2 Gw2.bne ---Gw1.bne > > > > Gw1.bne2 is connecting to Gw2.bne with Serial 0/0:0 (203.147.255.186 /30) > > Gw2.bne is connecting back to Gw1.bne2 with Serial 0/0:0 (203.147.255.185 > > /30) > > > > Gw2.bne is also connected to Gw1.bne with FastEth 0/0 (202.139.236.2 /24) > > Gw1.bne is connecting back to Gw2.bne with FastEth 0/1 (202.139.236.254 > /24) > > > > Now I have 5 static routes at Gw1.bne2 (the left most Router) that I want > to > > redistributed into OSPF. > > > > ip route 203.147.154.0 255.255.255.128 203.147.188.65 > > ip route 203.147.154.128 255.255.255.248 203.147.188.68 > > ip route 203.147.154.136 255.255.255.248 203.147.188.69 > > ip route 203.147.154.144 255.255.255.252 203.147.188.66 > > ip route 203.147.154.148 255.255.255.252 203.147.188.67 > > > > controller E1 0/0 > > channel-group 0 timeslots 1-31 > > ! > > ! > > interface Tunnel0 > > description BNE2->Avior > > ip address 10.255.255.2 255.255.255.252 > > no ip route-cache cef > > tunnel source 203.147.255.186 > > tunnel destination 203.147.190.4 > > ! > > interface FastEthernet0/0 > > no ip address > > ip route-cache flow > > speed 100 > > full-duplex > > ! > > interface FastEthernet0/0.5 > > encapsulation dot1Q 5 > > ! > > interface FastEthernet0/0.10 > > encapsulation dot1Q 10 > > ip address 10.15.15.254 255.255.255.0 secondary > > ip address 203.147.188.254 255.255.255.0 > > ip access-group pfilter in > > ip accounting access-violations > > ip nbar protocol-discovery > > ! > > interface FastEthernet0/0.999 > > encapsulation dot1Q 999 > > ip address 10.2.101.1 255.255.0.0 > > ! > > interface Serial0/0:0 > > description N7065870L to 96 Lytton Rd > > ip address 203.147.255.186 255.255.255.252 > > ip nbar protocol-discovery > > ip route-cache flow > > load-interval 30 > > service-policy output voippol > > ! > > router ospf 7496 > > log-adjacency-changes > > redistribute connected > > redistribute static subnets > > passive-interface FastEthernet0/0.999 > > network 203.147.188.0 0.0.0.255 area 203.147.188.0 > > network 203.147.255.184 0.0.0.3 area 203.147.188.0 > > > > At Gw1.bne2, it shows the subnets are learned via "statics" > > > > gw1.bne2#sh ip route 203.147.154.136 > > Routing entry for 203.147.154.136/29 > > Known via "stat
CCIE Written Question [7:44578]
I was just wondering if anybody knows a way to translate Ethernet MAC (Cananical) to Token MAC (non-Cananical) & vice versa?? I know how to do the simple ones: e.g. 1078.xsxx. HexDec SwapDecHex 10 = 16=> 0001 => 1000 = 8 = 08 Or any other ones like DecHex 101 202 303 404 505 606 707 808 909 10 0A 11 0B 12 0C 13 0D 14 0E 15 0F 16 10 17 11 18 12 19 13 20 14 21 15 22 16 23 17 24 18 25 19 But I don't know how to do it if they give me a large one e.g. Hex of 78, or AC etc?? Thanks. Best Regards, Hunt Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=44578&t=44578 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
CCIE Lab Reading [7:45486]
Hi All, I just started preparing for the CCIE Lab. I have already read Caslow, TCP/IP Vol 1 (by Jeff Doyle), Internet Routing Arch (by Halabi), as well as LAN Switching (by Clark). I'm just wondering what books I should get in additional to these to prepare for the lab?? Please help... Thanks! Hunt Lee Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=45486&t=45486 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
CCIE Lab Question [7:45815]
All, I want to start practising on how to search / use the Cisco's Documentation CD for the CCIE Lab. I have 2 CDs called Cisco Product Documentation (Oct 2001). Are they the ones?? If not, how about can I order the Cisco's Documentation CD from Cisco? Thanks, Hunt Lee Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=45815&t=45815 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
BGP scenario (a bit lenghty - sorry) [7:46131]
Hi group, RotuerC - RouterA RouterB On p9 of BGP 4 Command & Configuration Handbook (by Parkhurst), I follow the exercise on Aggregating the BGP Learning Routes, everything seems well except I can't ping from Router C to any of the 4 Loopback Interfaces I created on Router B, even though I can see the routes fine on both Router C's BGP table and Routing Table: RouterC>sh ip bgp BGP table version is 6, local router ID is 172.17.1.2 Status codes: s suppressed, d damped, h history, * valid, > best, i - internal Origin codes: i - IGP, e - EGP, ? - incomplete Network Next Hop Metric LocPrf Weight Path *> 172.16.0.0/24172.17.1.1 0 1 2 i *> 172.16.0.0/22172.17.1.1 0 1 i *> 172.16.1.0/24172.17.1.1 0 1 2 i *> 172.16.2.0/24172.17.1.1 0 1 2 i *> 172.16.3.0/24172.17.1.1 0 1 2 i RouterC> RouterC>sh ip route Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, * - candidate default U - per-user static route Gateway of last resort is not set 172.16.0.0/16 is variably subnetted, 5 subnets, 2 masks B 172.16.0.0/22 [20/0] via 172.17.1.1, 00:00:55 B 172.16.0.0/24 [20/0] via 172.17.1.1, 02:19:56 B 172.16.1.0/24 [20/0] via 172.17.1.1, 02:19:56 B 172.16.2.0/24 [20/0] via 172.17.1.1, 02:19:56 B 172.16.3.0/24 [20/0] via 172.17.1.1, 02:19:56 172.17.0.0/24 is subnetted, 1 subnets C 172.17.1.0 is directly connected, Serial0 RouterC> When I tried to do a trace to say 172.16.0.1 (which is one of the loopback interface created on Router B), the packets was stuck on Router A RouterC>trace 172.16.0.1 Type escape sequence to abort. Tracing the route to 172.16.0.1 1 RouterA (172.17.1.1) 16 msec 16 msec 20 msec 2 * * * 3 However, on Router A, I can ping fine to all 4 loopback interfaces advertised by Router B:- RouterA#ping 172.16.0.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 172.16.0.1, timeout is 2 seconds: ! Success rate is 100 percent (5/5), round-trip min/avg/max = 32/32/32 ms RouterA#ping 172.16.1.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 172.16.1.1, timeout is 2 seconds: ! Success rate is 100 percent (5/5), round-trip min/avg/max = 32/32/32 ms RouterA#ping 172.16.2.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 172.16.2.1, timeout is 2 seconds: ! Success rate is 100 percent (5/5), round-trip min/avg/max = 28/54/148 ms RouterA# So if Router A can get to the Loopback interfaces advertised by Router B, and Router C have got the routes in the Routing Table, why can't Router C trace or ping to Router B's Loopback interfaces?? Please find attached a copy of the configs for the 3 routers:- RouterC#sh run Building configuration... Current configuration: ! version 11.1 service timestamps debug datetime msec show-timezone service timestamps log datetime msec show-timezone service udp-small-servers service tcp-small-servers ! hostname RouterC ! enable secret 5 $1$R1vV$Ld5F0ueggoSyb4z/goBGF. ! ! interface Ethernet0 no ip address ! interface Serial0 ip address 172.17.1.2 255.255.255.0 ! interface Serial1 no ip address ! router bgp 65530 neighbor 172.17.1.1 remote-as 1 ! ip host RouterA 172.17.1.1 ip classless logging buffered ! line con 0 line aux 0 line vty 0 4 password cisco login ! end RouterC# - RouterA#sh run Building configuration... Current configuration : 907 bytes ! version 12.2 no service single-slot-reload-enable service timestamps debug uptime service timestamps log uptime no service password-encryption ! hostname RouterA ! logging rate-limit console 10 except errors enable secret 5 $1$hCDv$aQ/xa.CZ7YloCaNRpAaI90 ! ip subnet-zero no ip finger no ip domain-lookup ip host RouterC 172.17.1.2 ip host RouterB 10.1.1.2 ! no ip dhcp-client network-discovery ! ! ! ! interface Ethernet0 no ip address ! interface Serial0 ip address 172.17.1.1 255.255.255.0 clockrate 64000 ! interface Serial1 ip address 10.1.1.1 255.255.255.252 clockrate 64000 ! router bgp 1 bgp log-neighbor-changes aggregate-address 172.16.0.0 255.255.252.0 neighbor 10.1.1.2 remote-as 2 neighbor 172.17.1.2 remote-as 65530 ! ip kerberos source-interface any ip classless ip http server ! ! ! line con 0 transport input none line 1 16 line aux 0 line vty 0 4 password cisco login ! end RouterA# --- RouterB#sh run Build
CCIE Lab Mailing List problem!!! [7:46235]
To all, It would be greatly appreciated if someone can shed some light on this :) I subscribed to the CCIE R&S Lab Mailing List with my Hotmail account about a month ago (or maybe longer). I can receive messages fine, but I can't post message to the board (i.e. Everytime I sent a message to [EMAIL PROTECTED], when I checked my email a few days later, my message never come up on the mailing list. I tried to lookup for the WebMaster email address, but I can't find it anywhere on the GroupStudy website. Any ideas?? Thanks in advance, Best Regards, Hunt Lee Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=46235&t=46235 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
