Re: Load Balancing using BGP challenge problem [7:19339]
What is the real address, I understand if your reticent to provide it but is it part of a larger CIDR block from the other provider? If so and the satellite provider is announcing a more specific /24 then all traffic will come over the satellite link. there is much info missing to really help you in any meaningful way. Dave suaveguru wrote: Most of the traffic is arriving via the provider your doing BGP with and is via this one block of ip with a /24 e.g 1.1.1.0/24 I am seeing almost 100% utilisation via the satellite down-link (1st provider running BGP) and very minimum traffic at the second provider( terrestrial) running default route Because the customer does not have their own AS so a private AS is used regards, suaveguru --- MADMAN wrote: A prepend will surely influence the inbound traffic. Is most of your traffic currently arriving via the provider your doing BGP with? What exactly are you seeing?? Why are you even doing BGP with a private AS that is incoming only?? With the info you provided it's hard to give a good answer. dave suaveguru wrote: do you think having them change private AS to public AS number then do AS-PREPEND will be able to do some kind of influencing? regards, suaveguru --- MADMAN wrote: You have no way of influencing via BGP the inbound routes since your using a private AS on one link and default on the other. You need to work with your providers if you wish to have incoming traffic to your network influenced one way or the other. suaveguru wrote: hi all I have been cracking my head with this load-balancing issue but still no answer . It goes as such Customer A has two providers to Internet The first provider runs BGP with Customer A and is only a Receive-Only Inbound link over Satellite The second provider is a terrestrial link full-duplex but the customer does not run BGP with them but purely a default route Question is how can I use BGP to balance the traffic between the two providers for the Inbound traffic to the customer. I have been contemplating on using AS-PATH prepend but was not so ready to use it because the customer does not have their own AS-NUMBER and is using private AS number provided by the first satellite provider and the first provider simply strip private AS-Numbers at their router Any form of input will be greatly appreciated __ Do You Yahoo!? Get email alerts NEW webcam video instant messaging with Yahoo! Messenger http://im.yahoo.com to [EMAIL PROTECTED] -- David Madland Sr. Network Engineer CCIE# 2016 Qwest Communications Int. Inc. [EMAIL PROTECTED] 612-664-3367 Emotion should reflect reason not guide it __ Do You Yahoo!? Get email alerts NEW webcam video instant messaging with Yahoo! Messenger http://im.yahoo.com -- David Madland Sr. Network Engineer CCIE# 2016 Qwest Communications Int. Inc. [EMAIL PROTECTED] 612-664-3367 Emotion should reflect reason not guide it __ Do You Yahoo!? Get email alerts NEW webcam video instant messaging with Yahoo! Messenger http://im.yahoo.com -- David Madland Sr. Network Engineer CCIE# 2016 Qwest Communications Int. Inc. [EMAIL PROTECTED] 612-664-3367 Emotion should reflect reason not guide it Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=19571t=19339 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Load Balancing using BGP challenge problem [7:19339]
You have no way of influencing via BGP the inbound routes since your using a private AS on one link and default on the other. You need to work with your providers if you wish to have incoming traffic to your network influenced one way or the other. suaveguru wrote: hi all I have been cracking my head with this load-balancing issue but still no answer . It goes as such Customer A has two providers to Internet The first provider runs BGP with Customer A and is only a Receive-Only Inbound link over Satellite The second provider is a terrestrial link full-duplex but the customer does not run BGP with them but purely a default route Question is how can I use BGP to balance the traffic between the two providers for the Inbound traffic to the customer. I have been contemplating on using AS-PATH prepend but was not so ready to use it because the customer does not have their own AS-NUMBER and is using private AS number provided by the first satellite provider and the first provider simply strip private AS-Numbers at their router Any form of input will be greatly appreciated __ Do You Yahoo!? Get email alerts NEW webcam video instant messaging with Yahoo! Messenger http://im.yahoo.com -- David Madland Sr. Network Engineer CCIE# 2016 Qwest Communications Int. Inc. [EMAIL PROTECTED] 612-664-3367 Emotion should reflect reason not guide it Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=19413t=19339 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Load Balancing using BGP challenge problem [7:19339]
what do you mean by this? --- Brian wrote: Troll Alert - Original Message - From: Farhan Ahmed To: Sent: Monday, September 10, 2001 9:30 PM Subject: RE: Load Balancing using BGP challenge problem [7:19339] then u should think abt running 2 static routes and forget abt bgp cuz its really doesnt exsist -Original Message- From: suaveguru [mailto:[EMAIL PROTECTED]] Sent: Tuesday, September 11, 2001 4:53 AM To: [EMAIL PROTECTED] Subject: Load Balancing using BGP challenge problem [7:19339] hi all I have been cracking my head with this load-balancing issue but still no answer . It goes as such Customer A has two providers to Internet The first provider runs BGP with Customer A and is only a Receive-Only Inbound link over Satellite The second provider is a terrestrial link full-duplex but the customer does not run BGP with them but purely a default route Question is how can I use BGP to balance the traffic between the two providers for the Inbound traffic to the customer. I have been contemplating on using AS-PATH prepend but was not so ready to use it because the customer does not have their own AS-NUMBER and is using private AS number provided by the first satellite provider and the first provider simply strip private AS-Numbers at their router Any form of input will be greatly appreciated __ Do You Yahoo!? Get email alerts NEW webcam video instant messaging with Yahoo! Messenger http://im.yahoo.com [EMAIL PROTECTED] __ Do You Yahoo!? Get email alerts NEW webcam video instant messaging with Yahoo! Messenger http://im.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=19418t=19339 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Load Balancing using BGP challenge problem [7:19339]
do you think having them change private AS to public AS number then do AS-PREPEND will be able to do some kind of influencing? regards, suaveguru --- MADMAN wrote: You have no way of influencing via BGP the inbound routes since your using a private AS on one link and default on the other. You need to work with your providers if you wish to have incoming traffic to your network influenced one way or the other. suaveguru wrote: hi all I have been cracking my head with this load-balancing issue but still no answer . It goes as such Customer A has two providers to Internet The first provider runs BGP with Customer A and is only a Receive-Only Inbound link over Satellite The second provider is a terrestrial link full-duplex but the customer does not run BGP with them but purely a default route Question is how can I use BGP to balance the traffic between the two providers for the Inbound traffic to the customer. I have been contemplating on using AS-PATH prepend but was not so ready to use it because the customer does not have their own AS-NUMBER and is using private AS number provided by the first satellite provider and the first provider simply strip private AS-Numbers at their router Any form of input will be greatly appreciated __ Do You Yahoo!? Get email alerts NEW webcam video instant messaging with Yahoo! Messenger http://im.yahoo.com [EMAIL PROTECTED] -- David Madland Sr. Network Engineer CCIE# 2016 Qwest Communications Int. Inc. [EMAIL PROTECTED] 612-664-3367 Emotion should reflect reason not guide it __ Do You Yahoo!? Get email alerts NEW webcam video instant messaging with Yahoo! Messenger http://im.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=19415t=19339 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Load Balancing using BGP challenge problem [7:19339]
A prepend will surely influence the inbound traffic. Is most of your traffic currently arriving via the provider your doing BGP with? What exactly are you seeing?? Why are you even doing BGP with a private AS that is incoming only?? With the info you provided it's hard to give a good answer. dave suaveguru wrote: do you think having them change private AS to public AS number then do AS-PREPEND will be able to do some kind of influencing? regards, suaveguru --- MADMAN wrote: You have no way of influencing via BGP the inbound routes since your using a private AS on one link and default on the other. You need to work with your providers if you wish to have incoming traffic to your network influenced one way or the other. suaveguru wrote: hi all I have been cracking my head with this load-balancing issue but still no answer . It goes as such Customer A has two providers to Internet The first provider runs BGP with Customer A and is only a Receive-Only Inbound link over Satellite The second provider is a terrestrial link full-duplex but the customer does not run BGP with them but purely a default route Question is how can I use BGP to balance the traffic between the two providers for the Inbound traffic to the customer. I have been contemplating on using AS-PATH prepend but was not so ready to use it because the customer does not have their own AS-NUMBER and is using private AS number provided by the first satellite provider and the first provider simply strip private AS-Numbers at their router Any form of input will be greatly appreciated __ Do You Yahoo!? Get email alerts NEW webcam video instant messaging with Yahoo! Messenger http://im.yahoo.com [EMAIL PROTECTED] -- David Madland Sr. Network Engineer CCIE# 2016 Qwest Communications Int. Inc. [EMAIL PROTECTED] 612-664-3367 Emotion should reflect reason not guide it __ Do You Yahoo!? Get email alerts NEW webcam video instant messaging with Yahoo! Messenger http://im.yahoo.com -- David Madland Sr. Network Engineer CCIE# 2016 Qwest Communications Int. Inc. [EMAIL PROTECTED] 612-664-3367 Emotion should reflect reason not guide it Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=19421t=19339 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Load Balancing using BGP challenge problem [7:19339]
I think what he means is since they are not using a registered AS the AS that they are using is striped at the provider and your network is seen as originating from your provider not from your private AS. Dave suaveguru wrote: what do you mean by this? --- Brian wrote: Troll Alert - Original Message - From: Farhan Ahmed To: Sent: Monday, September 10, 2001 9:30 PM Subject: RE: Load Balancing using BGP challenge problem [7:19339] then u should think abt running 2 static routes and forget abt bgp cuz its really doesnt exsist -Original Message- From: suaveguru [mailto:[EMAIL PROTECTED]] Sent: Tuesday, September 11, 2001 4:53 AM To: [EMAIL PROTECTED] Subject: Load Balancing using BGP challenge problem [7:19339] hi all I have been cracking my head with this load-balancing issue but still no answer . It goes as such Customer A has two providers to Internet The first provider runs BGP with Customer A and is only a Receive-Only Inbound link over Satellite The second provider is a terrestrial link full-duplex but the customer does not run BGP with them but purely a default route Question is how can I use BGP to balance the traffic between the two providers for the Inbound traffic to the customer. I have been contemplating on using AS-PATH prepend but was not so ready to use it because the customer does not have their own AS-NUMBER and is using private AS number provided by the first satellite provider and the first provider simply strip private AS-Numbers at their router Any form of input will be greatly appreciated __ Do You Yahoo!? Get email alerts NEW webcam video instant messaging with Yahoo! Messenger http://im.yahoo.com [EMAIL PROTECTED] __ Do You Yahoo!? Get email alerts NEW webcam video instant messaging with Yahoo! Messenger http://im.yahoo.com -- David Madland Sr. Network Engineer CCIE# 2016 Qwest Communications Int. Inc. [EMAIL PROTECTED] 612-664-3367 Emotion should reflect reason not guide it Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=19426t=19339 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Load Balancing using BGP challenge problem [7:19339]
Most of the traffic is arriving via the provider your doing BGP with and is via this one block of ip with a /24 e.g 1.1.1.0/24 I am seeing almost 100% utilisation via the satellite down-link (1st provider running BGP) and very minimum traffic at the second provider( terrestrial) running default route Because the customer does not have their own AS so a private AS is used regards, suaveguru --- MADMAN wrote: A prepend will surely influence the inbound traffic. Is most of your traffic currently arriving via the provider your doing BGP with? What exactly are you seeing?? Why are you even doing BGP with a private AS that is incoming only?? With the info you provided it's hard to give a good answer. dave suaveguru wrote: do you think having them change private AS to public AS number then do AS-PREPEND will be able to do some kind of influencing? regards, suaveguru --- MADMAN wrote: You have no way of influencing via BGP the inbound routes since your using a private AS on one link and default on the other. You need to work with your providers if you wish to have incoming traffic to your network influenced one way or the other. suaveguru wrote: hi all I have been cracking my head with this load-balancing issue but still no answer . It goes as such Customer A has two providers to Internet The first provider runs BGP with Customer A and is only a Receive-Only Inbound link over Satellite The second provider is a terrestrial link full-duplex but the customer does not run BGP with them but purely a default route Question is how can I use BGP to balance the traffic between the two providers for the Inbound traffic to the customer. I have been contemplating on using AS-PATH prepend but was not so ready to use it because the customer does not have their own AS-NUMBER and is using private AS number provided by the first satellite provider and the first provider simply strip private AS-Numbers at their router Any form of input will be greatly appreciated __ Do You Yahoo!? Get email alerts NEW webcam video instant messaging with Yahoo! Messenger http://im.yahoo.com to [EMAIL PROTECTED] -- David Madland Sr. Network Engineer CCIE# 2016 Qwest Communications Int. Inc. [EMAIL PROTECTED] 612-664-3367 Emotion should reflect reason not guide it __ Do You Yahoo!? Get email alerts NEW webcam video instant messaging with Yahoo! Messenger http://im.yahoo.com -- David Madland Sr. Network Engineer CCIE# 2016 Qwest Communications Int. Inc. [EMAIL PROTECTED] 612-664-3367 Emotion should reflect reason not guide it __ Do You Yahoo!? Get email alerts NEW webcam video instant messaging with Yahoo! Messenger http://im.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=19531t=19339 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Load Balancing using BGP challenge problem [7:19339]
hi all I have been cracking my head with this load-balancing issue but still no answer . It goes as such Customer A has two providers to Internet The first provider runs BGP with Customer A and is only a Receive-Only Inbound link over Satellite The second provider is a terrestrial link full-duplex but the customer does not run BGP with them but purely a default route Question is how can I use BGP to balance the traffic between the two providers for the Inbound traffic to the customer. I have been contemplating on using AS-PATH prepend but was not so ready to use it because the customer does not have their own AS-NUMBER and is using private AS number provided by the first satellite provider and the first provider simply strip private AS-Numbers at their router Any form of input will be greatly appreciated __ Do You Yahoo!? Get email alerts NEW webcam video instant messaging with Yahoo! Messenger http://im.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=19339t=19339 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Load Balancing using BGP challenge problem [7:19339]
then u should think abt running 2 static routes and forget abt bgp cuz its really doesnt exsist -Original Message- From: suaveguru [mailto:[EMAIL PROTECTED]] Sent: Tuesday, September 11, 2001 4:53 AM To: [EMAIL PROTECTED] Subject: Load Balancing using BGP challenge problem [7:19339] hi all I have been cracking my head with this load-balancing issue but still no answer . It goes as such Customer A has two providers to Internet The first provider runs BGP with Customer A and is only a Receive-Only Inbound link over Satellite The second provider is a terrestrial link full-duplex but the customer does not run BGP with them but purely a default route Question is how can I use BGP to balance the traffic between the two providers for the Inbound traffic to the customer. I have been contemplating on using AS-PATH prepend but was not so ready to use it because the customer does not have their own AS-NUMBER and is using private AS number provided by the first satellite provider and the first provider simply strip private AS-Numbers at their router Any form of input will be greatly appreciated __ Do You Yahoo!? Get email alerts NEW webcam video instant messaging with Yahoo! Messenger http://im.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=19371t=19339 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: Load Balancing using BGP challenge problem [7:19339]
Troll Alert - Original Message - From: Farhan Ahmed To: Sent: Monday, September 10, 2001 9:30 PM Subject: RE: Load Balancing using BGP challenge problem [7:19339] then u should think abt running 2 static routes and forget abt bgp cuz its really doesnt exsist -Original Message- From: suaveguru [mailto:[EMAIL PROTECTED]] Sent: Tuesday, September 11, 2001 4:53 AM To: [EMAIL PROTECTED] Subject: Load Balancing using BGP challenge problem [7:19339] hi all I have been cracking my head with this load-balancing issue but still no answer . It goes as such Customer A has two providers to Internet The first provider runs BGP with Customer A and is only a Receive-Only Inbound link over Satellite The second provider is a terrestrial link full-duplex but the customer does not run BGP with them but purely a default route Question is how can I use BGP to balance the traffic between the two providers for the Inbound traffic to the customer. I have been contemplating on using AS-PATH prepend but was not so ready to use it because the customer does not have their own AS-NUMBER and is using private AS number provided by the first satellite provider and the first provider simply strip private AS-Numbers at their router Any form of input will be greatly appreciated __ Do You Yahoo!? Get email alerts NEW webcam video instant messaging with Yahoo! Messenger http://im.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=19372t=19339 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: Load Balancing using BGP challenge problem [7:19339]
I can't put static routes because one provider is down-link only and the other is two-way regards, suaveguru --- Farhan Ahmed wrote: then u should think abt running 2 static routes and forget abt bgp cuz its really doesnt exsist -Original Message- From: suaveguru [mailto:[EMAIL PROTECTED]] Sent: Tuesday, September 11, 2001 4:53 AM To: [EMAIL PROTECTED] Subject: Load Balancing using BGP challenge problem [7:19339] hi all I have been cracking my head with this load-balancing issue but still no answer . It goes as such Customer A has two providers to Internet The first provider runs BGP with Customer A and is only a Receive-Only Inbound link over Satellite The second provider is a terrestrial link full-duplex but the customer does not run BGP with them but purely a default route Question is how can I use BGP to balance the traffic between the two providers for the Inbound traffic to the customer. I have been contemplating on using AS-PATH prepend but was not so ready to use it because the customer does not have their own AS-NUMBER and is using private AS number provided by the first satellite provider and the first provider simply strip private AS-Numbers at their router Any form of input will be greatly appreciated __ Do You Yahoo!? Get email alerts NEW webcam video instant messaging with Yahoo! Messenger http://im.yahoo.com [EMAIL PROTECTED] __ Do You Yahoo!? Get email alerts NEW webcam video instant messaging with Yahoo! Messenger http://im.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=19377t=19339 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
IPSEC Challenge Problem [7:17844]
Guys, The objective of the problem I m going to explain you is to encrypt ONLY TELNET traffic b/w these two routers. THe main problem I m facing is that IM not able to do this by implementing specific host lists that permits only telnet traffic from one to another host..Like access-list 101 permit tcp host A host B eq telnet. The only way I can run this is by using normal list allowing complete traffic b/w these two hosts.Please have a look and let me know if u find any problem in my config. Thanks. ISDN1#sh crypto engine connections ac ISDN1#sh crypto engine connections active ID Interface IP-Address State Algorithm Encrypt Decrypt 1 setHMAC_MD5+DES_56_CB0 0 2 setHMAC_MD5+DES_56_CB0 0 2000 Serial0/0 135.25.11.1 setHMAC_MD5+DES_56_CB0 54 2001 Serial0/0 135.25.11.1 setHMAC_MD5+DES_56_CB 40 0 ISDN1#sh run Building configuration... Current configuration: ! version 12.0 service timestamps debug uptime service timestamps log uptime no service password-encryption ! hostname ISDN1 ! enable password cisco ! ! ! ! ! memory-size iomem 7 ip subnet-zero ip telnet source-interface Loopback0 no ip domain-lookup ! isdn voice-call-failure 0 cns event-service server ! ! ! ! crypto isakmp policy 10 hash md5 authentication pre-share crypto isakmp key hello address 135.25.11.2 255.255.255.255 crypto isakmp key hello address 135.25.3.1 255.255.255.255 ! ! crypto ipsec transform-set cisco esp-des esp-md5-hmac ! ! crypto map CCIE local-address Loopback0 crypto map CCIE 10 ipsec-isakmp set peer 135.25.11.2 set peer 135.25.3.1 set transform-set cisco match address 101 ! ! ! ! interface Loopback0 ip address 135.25.4.1 255.255.255.255 no ip directed-broadcast ! interface FastEthernet0/0 no ip address no ip directed-broadcast shutdown duplex auto speed auto ! interface Serial0/0 ip address 135.25.11.1 255.255.255.0 no ip directed-broadcast no ip mroute-cache no fair-queue crypto map CCIE ! interface BRI0/0 no ip address no ip directed-broadcast shutdown isdn guard-timer 0 on-expiry accept ! interface FastEthernet0/1 no ip address no ip directed-broadcast shutdown duplex auto speed auto ! ip classless ip route 0.0.0.0 0.0.0.0 135.25.11.2 no ip http server ! access-list 101 permit ip host 135.25.4.1 host 135.25.3.1 ! ! voice-port 1/0/0 ! voice-port 1/0/1 ! voice-port 1/1/0 ! voice-port 1/1/1 ! ! ! line con 0 password cisco transport input none line aux 0 line vty 0 4 password cisco login ! hostname ISDN2 ! enable password cisco ! ! ! ! ! ip subnet-zero ip telnet source-interface Loopback0 no ip domain-lookup ! isdn voice-call-failure 0 cns event-service server ! ! crypto isakmp policy 10 hash md5 authentication pre-share crypto isakmp key hello address 135.25.11.1 crypto isakmp key hello address 135.25.4.1 ! ! crypto ipsec transform-set cisco esp-des esp-md5-hmac ! ! crypto map CCIE local-address Loopback0 crypto map CCIE 10 ipsec-isakmp set peer 135.25.11.1 set peer 135.25.4.1 set transform-set cisco match address 101 partition flash 2 16 8 ! ! ! ! ! ! ! interface Loopback0 ip address 135.25.3.1 255.255.255.255 no ip directed-broadcast ! interface Ethernet0/0 no ip address no ip directed-broadcast shutdown ! interface Serial0/0 no ip address no ip directed-broadcast shutdown ! interface BRI0/0 no ip address no ip directed-broadcast shutdown isdn guard-timer 0 on-expiry accept ! interface Ethernet0/1 no ip address no ip directed-broadcast shutdown ! interface Serial1/0 no ip address no ip directed-broadcast shutdown ! interface Serial1/1 ip address 135.25.11.2 255.255.255.0 no ip directed-broadcast clockrate 64000 crypto map CCIE ! interface Serial1/2 no ip address no ip directed-broadcast shutdown ! interface Serial1/3 no ip address no ip directed-broadcast shutdown ! interface Serial1/4 ip address 135.25.12.1 255.255.255.0 no ip directed-broadcast ! interface Serial1/5 no ip address no ip directed-broadcast shutdown ! interface Serial1/6 no ip address no ip directed-broadcast shutdown ! interface Serial1/7 no ip address no ip directed-broadcast shutdown ! ip classless ip route 0.0.0.0 0.0.0.0 135.25.11.1 no ip http server ! access-list 101 permit ip host 135.25.3.1 host 135.25.4.1 ! ! line con 0 exec-timeout 0 0 password cisco transport input none line aux 0 line vty 0 4 password cisco login ! end ISDN2# _ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=17844t=17844 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: IPSEC Challenge Problem [7:17844]
The problem is most likely your access-lists. You need to create an acl that allows telnet traffic from A to B and the return traffic from B to A: For telnet from A to B: on A: access-list 101 permit host A gt 1023 host B eq 23 on B: access-list 101 permit host B eq 23 host A gt 1023 (create reverse images of these entries for telnet from B to A) Note that the acl's on B and A are mirror images of each other, as stated in the Cisco docs. You need to remember that the source port for a client initiating telnet is a randomly chosen port above 1023. You don't _have_ to list the 'gt 1023', but when using acl's for IPSec I like to specify both src and dst ports if possible for consistency. HTH, Kent -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Cisco Lover Sent: Thursday, August 30, 2001 4:21 AM To: [EMAIL PROTECTED] Subject: IPSEC Challenge Problem [7:17844] Guys, The objective of the problem I m going to explain you is to encrypt ONLY TELNET traffic b/w these two routers. THe main problem I m facing is that IM not able to do this by implementing specific host lists that permits only telnet traffic from one to another host..Like access-list 101 permit tcp host A host B eq telnet. The only way I can run this is by using normal list allowing complete traffic b/w these two hosts.Please have a look and let me know if u find any problem in my config. Thanks. ISDN1#sh crypto engine connections ac ISDN1#sh crypto engine connections active ID Interface IP-Address State Algorithm Encrypt Decrypt 1 setHMAC_MD5+DES_56_CB0 0 2 setHMAC_MD5+DES_56_CB0 0 2000 Serial0/0 135.25.11.1 setHMAC_MD5+DES_56_CB0 54 2001 Serial0/0 135.25.11.1 setHMAC_MD5+DES_56_CB 40 0 ISDN1#sh run Building configuration... Current configuration: ! version 12.0 service timestamps debug uptime service timestamps log uptime no service password-encryption ! hostname ISDN1 ! enable password cisco ! ! ! ! ! memory-size iomem 7 ip subnet-zero ip telnet source-interface Loopback0 no ip domain-lookup ! isdn voice-call-failure 0 cns event-service server ! ! ! ! crypto isakmp policy 10 hash md5 authentication pre-share crypto isakmp key hello address 135.25.11.2 255.255.255.255 crypto isakmp key hello address 135.25.3.1 255.255.255.255 ! ! crypto ipsec transform-set cisco esp-des esp-md5-hmac ! ! crypto map CCIE local-address Loopback0 crypto map CCIE 10 ipsec-isakmp set peer 135.25.11.2 set peer 135.25.3.1 set transform-set cisco match address 101 ! ! ! ! interface Loopback0 ip address 135.25.4.1 255.255.255.255 no ip directed-broadcast ! interface FastEthernet0/0 no ip address no ip directed-broadcast shutdown duplex auto speed auto ! interface Serial0/0 ip address 135.25.11.1 255.255.255.0 no ip directed-broadcast no ip mroute-cache no fair-queue crypto map CCIE ! interface BRI0/0 no ip address no ip directed-broadcast shutdown isdn guard-timer 0 on-expiry accept ! interface FastEthernet0/1 no ip address no ip directed-broadcast shutdown duplex auto speed auto ! ip classless ip route 0.0.0.0 0.0.0.0 135.25.11.2 no ip http server ! access-list 101 permit ip host 135.25.4.1 host 135.25.3.1 ! ! voice-port 1/0/0 ! voice-port 1/0/1 ! voice-port 1/1/0 ! voice-port 1/1/1 ! ! ! line con 0 password cisco transport input none line aux 0 line vty 0 4 password cisco login ! hostname ISDN2 ! enable password cisco ! ! ! ! ! ip subnet-zero ip telnet source-interface Loopback0 no ip domain-lookup ! isdn voice-call-failure 0 cns event-service server ! ! crypto isakmp policy 10 hash md5 authentication pre-share crypto isakmp key hello address 135.25.11.1 crypto isakmp key hello address 135.25.4.1 ! ! crypto ipsec transform-set cisco esp-des esp-md5-hmac ! ! crypto map CCIE local-address Loopback0 crypto map CCIE 10 ipsec-isakmp set peer 135.25.11.1 set peer 135.25.4.1 set transform-set cisco match address 101 partition flash 2 16 8 ! ! ! ! ! ! ! interface Loopback0 ip address 135.25.3.1 255.255.255.255 no ip directed-broadcast ! interface Ethernet0/0 no ip address no ip directed-broadcast shutdown ! interface Serial0/0 no ip address no ip directed-broadcast shutdown ! interface BRI0/0 no ip address no ip directed-broadcast shutdown isdn guard-timer 0 on-expiry accept ! interface Ethernet0/1 no ip address no ip directed-broadcast shutdown ! interface Serial1/0 no ip address no ip directed-broadcast shutdown ! interface Serial1/1 ip address 135.25.11.2 255.255.255.0 no ip directed-broadcast clockrate 64000 crypto map CCIE ! interface Serial1/2 no ip address no ip directed-broadcast shutdown ! interface Serial1/3 no ip address no ip directed-broadcast shutdown ! interface Serial1/4 ip address 135.25.12.1 255.255.255.0 no ip directed-broadcast ! interface Serial1/5 no ip address no ip directed-broadcast shutdown ! interface Serial1/6 no ip address no ip
RE: IPSEC Challenge Problem [7:17844]
Wonderfull!!! GREA Kent U solved my problem.. Thanks a lot!!! From: Kent Hundley Reply-To: Kent Hundley To: [EMAIL PROTECTED] Subject: RE: IPSEC Challenge Problem [7:17844] Date: Thu, 30 Aug 2001 17:03:25 -0400 The problem is most likely your access-lists. You need to create an acl that allows telnet traffic from A to B and the return traffic from B to A: For telnet from A to B: on A: access-list 101 permit host A gt 1023 host B eq 23 on B: access-list 101 permit host B eq 23 host A gt 1023 (create reverse images of these entries for telnet from B to A) Note that the acl's on B and A are mirror images of each other, as stated in the Cisco docs. You need to remember that the source port for a client initiating telnet is a randomly chosen port above 1023. You don't _have_ to list the 'gt 1023', but when using acl's for IPSec I like to specify both src and dst ports if possible for consistency. HTH, Kent -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Cisco Lover Sent: Thursday, August 30, 2001 4:21 AM To: [EMAIL PROTECTED] Subject: IPSEC Challenge Problem [7:17844] Guys, The objective of the problem I m going to explain you is to encrypt ONLY TELNET traffic b/w these two routers. THe main problem I m facing is that IM not able to do this by implementing specific host lists that permits only telnet traffic from one to another host..Like access-list 101 permit tcp host A host B eq telnet. The only way I can run this is by using normal list allowing complete traffic b/w these two hosts.Please have a look and let me know if u find any problem in my config. Thanks. ISDN1#sh crypto engine connections ac ISDN1#sh crypto engine connections active ID Interface IP-Address State Algorithm Encrypt Decrypt 1 setHMAC_MD5+DES_56_CB0 0 2 setHMAC_MD5+DES_56_CB0 0 2000 Serial0/0 135.25.11.1 setHMAC_MD5+DES_56_CB0 54 2001 Serial0/0 135.25.11.1 setHMAC_MD5+DES_56_CB 40 0 ISDN1#sh run Building configuration... Current configuration: ! version 12.0 service timestamps debug uptime service timestamps log uptime no service password-encryption ! hostname ISDN1 ! enable password cisco ! ! ! ! ! memory-size iomem 7 ip subnet-zero ip telnet source-interface Loopback0 no ip domain-lookup ! isdn voice-call-failure 0 cns event-service server ! ! ! ! crypto isakmp policy 10 hash md5 authentication pre-share crypto isakmp key hello address 135.25.11.2 255.255.255.255 crypto isakmp key hello address 135.25.3.1 255.255.255.255 ! ! crypto ipsec transform-set cisco esp-des esp-md5-hmac ! ! crypto map CCIE local-address Loopback0 crypto map CCIE 10 ipsec-isakmp set peer 135.25.11.2 set peer 135.25.3.1 set transform-set cisco match address 101 ! ! ! ! interface Loopback0 ip address 135.25.4.1 255.255.255.255 no ip directed-broadcast ! interface FastEthernet0/0 no ip address no ip directed-broadcast shutdown duplex auto speed auto ! interface Serial0/0 ip address 135.25.11.1 255.255.255.0 no ip directed-broadcast no ip mroute-cache no fair-queue crypto map CCIE ! interface BRI0/0 no ip address no ip directed-broadcast shutdown isdn guard-timer 0 on-expiry accept ! interface FastEthernet0/1 no ip address no ip directed-broadcast shutdown duplex auto speed auto ! ip classless ip route 0.0.0.0 0.0.0.0 135.25.11.2 no ip http server ! access-list 101 permit ip host 135.25.4.1 host 135.25.3.1 ! ! voice-port 1/0/0 ! voice-port 1/0/1 ! voice-port 1/1/0 ! voice-port 1/1/1 ! ! ! line con 0 password cisco transport input none line aux 0 line vty 0 4 password cisco login ! hostname ISDN2 ! enable password cisco ! ! ! ! ! ip subnet-zero ip telnet source-interface Loopback0 no ip domain-lookup ! isdn voice-call-failure 0 cns event-service server ! ! crypto isakmp policy 10 hash md5 authentication pre-share crypto isakmp key hello address 135.25.11.1 crypto isakmp key hello address 135.25.4.1 ! ! crypto ipsec transform-set cisco esp-des esp-md5-hmac ! ! crypto map CCIE local-address Loopback0 crypto map CCIE 10 ipsec-isakmp set peer 135.25.11.1 set peer 135.25.4.1 set transform-set cisco match address 101 partition flash 2 16 8 ! ! ! ! ! ! ! interface Loopback0 ip address 135.25.3.1 255.255.255.255 no ip directed-broadcast ! interface Ethernet0/0 no ip address no ip directed-broadcast shutdown ! interface Serial0/0 no ip address no ip directed-broadcast shutdown ! interface BRI0/0 no ip address no ip directed-broadcast shutdown isdn guard-timer 0 on-expiry accept ! interface Ethernet0/1 no ip address no ip directed-broadcast shutdown ! interface Serial1/0 no ip address no ip directed-broadcast shutdown ! interface Serial1/1 ip address 135.25.11.2 255.255.255.0 no ip directed-broadcast clockrate 64000 crypto map CCIE ! interface Serial1/2 no ip address no ip directed-broadcast shutdown ! interface Serial1/3 no ip
RE: CHALLENGE PROBLEM (now herrings and lemmings) [7:17112]
Sir, although I have never had the privilege of meeting you face to face, I have, after two years on this newsgroup and a great number of hours reading your books and papers, developed quite a detailed imaginary picture of your appearance. I'm now thinking maybe I should add 30-40 pounds to that picture. :- -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Howard C. Berkowitz Sent: Friday, August 24, 2001 6:24 AM To: [EMAIL PROTECTED] Subject: RE: CHALLENGE PROBLEM (now herrings and lemmings) [7:17112] Brian, I just wanted to say publicly that this was an outstanding test question. outstanding because of all the red herrings it contained, as we saw from the wild guess responses. Sir, after several trips to Scandinavia, I find it hard to believe that any sensible tester would use more than one red (presumably tomato-sauced) herring. There are wide range of herring to pick from, including the basic wine-pickled, mustard, sour cream, etc., to say nothing of the cooked dishes containing herring. It is also important not to confuse herrings with lemmings, which are excellent simulators either for marketingdroids or those led by marketingdroids. Perhaps they have even more simulation capabilities; I find many of the attempts to coerce things into a concept of the OSI model that is long obsolete, or insist that one or another term is correct because a review book says so in contradiction of the actual standards. Howard so everyone knows, my own private reply was incorrect as well. doh! thanks for this - these kinds of challenges are what make groupstudy worthwhile to me at least. Chuck -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Brian Sent: Tuesday, August 21, 2001 7:51 AM To: [EMAIL PROTECTED] Subject: CHALLENGE PROBLEM (was Re: For FR Grus [7:16635]) [7:16659] On Tue, 21 Aug 2001, Cisco Lover wrote: Hi Guys.. Come with some New Queston.. hmm, ok, so your looking for some challenging questions? Ok, I will post one, its got FR in it. First I'll post the problem, followed by the config: THE PROBLEM === Users on DLCI's 200, 224, 201, 225 cannot communicate to eachother. They can talk just fine to the rest of the network, but no packets can pass between them. Later discovery reveals that so long as they are on different layer 3 network addressing, communcation can occur, but if they are on the same network, such as 192.168.3.0, then they cannot communicate What is the problem? I will reply to let everyone know who got the correct answer. Below is the configuration: ! version 11.3 ! interface Ethernet2/0 ip address 192.168.1.242 255.255.255.0 ! interface Serial4/0 no ip address encapsulation frame-relay IETF keepalive 15 frame-relay map bridge 200 broadcast IETF frame-relay map bridge 224 broadcast IETF frame-relay map bridge 201 broadcast IETF frame-relay map bridge 225 broadcast IETF frame-relay lmi-type ansi bridge-group 1 ! interface BVI1 ip address 192.168.3.242 255.255.255.0 secondary ip address 192.168.2.242 255.255.255.0 ! router igrp 1 network 192.1.0.0 network 192.2.0.0 network 193.3.0.0 ! ip classless ! bridge irb bridge 1 protocol ieee bridge 1 route ip ! For eg, our FR switch is setup for Full mesh,But out network is setup as Hub Spoke FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] --- I'm buying / selling used CISCO gear!! email me for a quote Brian Feeny, CCIE #8036 Scarlett Parria [EMAIL PROTECTED] [EMAIL PROTECTED] 318-213-4709 318-213-4701 Netjam, LLC http://www.netjam.net 333 Texas St.VISA/MC/AMEX/COD Suite 1401 30 day warranty Shreveport, LA 71101 Cisco Channel Partner toll free: 866-2NETJAM phone:318-212-0245 fax: 318-212-0246 Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=18033t=17112 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: CHALLENGE PROBLEM (now herrings and lemmings) [7:17112]
Brian, I just wanted to say publicly that this was an outstanding test question. outstanding because of all the red herrings it contained, as we saw from the wild guess responses. Sir, after several trips to Scandinavia, I find it hard to believe that any sensible tester would use more than one red (presumably tomato-sauced) herring. There are wide range of herring to pick from, including the basic wine-pickled, mustard, sour cream, etc., to say nothing of the cooked dishes containing herring. It is also important not to confuse herrings with lemmings, which are excellent simulators either for marketingdroids or those led by marketingdroids. Perhaps they have even more simulation capabilities; I find many of the attempts to coerce things into a concept of the OSI model that is long obsolete, or insist that one or another term is correct because a review book says so in contradiction of the actual standards. Howard so everyone knows, my own private reply was incorrect as well. doh! thanks for this - these kinds of challenges are what make groupstudy worthwhile to me at least. Chuck -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Brian Sent: Tuesday, August 21, 2001 7:51 AM To: [EMAIL PROTECTED] Subject: CHALLENGE PROBLEM (was Re: For FR Grus [7:16635]) [7:16659] On Tue, 21 Aug 2001, Cisco Lover wrote: Hi Guys.. Come with some New Queston.. hmm, ok, so your looking for some challenging questions? Ok, I will post one, its got FR in it. First I'll post the problem, followed by the config: THE PROBLEM === Users on DLCI's 200, 224, 201, 225 cannot communicate to eachother. They can talk just fine to the rest of the network, but no packets can pass between them. Later discovery reveals that so long as they are on different layer 3 network addressing, communcation can occur, but if they are on the same network, such as 192.168.3.0, then they cannot communicate What is the problem? I will reply to let everyone know who got the correct answer. Below is the configuration: ! version 11.3 ! interface Ethernet2/0 ip address 192.168.1.242 255.255.255.0 ! interface Serial4/0 no ip address encapsulation frame-relay IETF keepalive 15 frame-relay map bridge 200 broadcast IETF frame-relay map bridge 224 broadcast IETF frame-relay map bridge 201 broadcast IETF frame-relay map bridge 225 broadcast IETF frame-relay lmi-type ansi bridge-group 1 ! interface BVI1 ip address 192.168.3.242 255.255.255.0 secondary ip address 192.168.2.242 255.255.255.0 ! router igrp 1 network 192.1.0.0 network 192.2.0.0 network 193.3.0.0 ! ip classless ! bridge irb bridge 1 protocol ieee bridge 1 route ip ! For eg, our FR switch is setup for Full mesh,But out network is setup as Hub Spoke FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] --- I'm buying / selling used CISCO gear!! email me for a quote Brian Feeny, CCIE #8036 Scarlett Parria [EMAIL PROTECTED] [EMAIL PROTECTED] 318-213-4709 318-213-4701 Netjam, LLC http://www.netjam.net 333 Texas St.VISA/MC/AMEX/COD Suite 1401 30 day warranty Shreveport, LA 71101 Cisco Channel Partner toll free: 866-2NETJAM phone:318-212-0245 fax: 318-212-0246 Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=17112t=17112 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: CHALLENGE PROBLEM (now herrings and lemmings) [7:17112]
Howard, you should try the Herrings in Curry Sauce the next time you're in Scandinavia (Denmark especially). Another good fish-out-of-a-can thing you should try, is the Macrel in tomato sause on an open faced sandwich with mayo on top - YUMMI!!! P.S. Don't forget that fish has to swim, so you'll have to swing down one or two small shots of Danish Akvavit. Ole (who's missing the Danish food now and then...) ~~~ Ole Drews Jensen Systems Network Manager CCNA, MCSE, MCP+I RWR Enterprises, Inc. [EMAIL PROTECTED] ~~~ http://www.RouterChief.com ~~~ NEED A JOB ??? http://www.oledrews.com/job ~~~ -Original Message- From: Howard C. Berkowitz [mailto:[EMAIL PROTECTED]] Sent: Friday, August 24, 2001 8:24 AM To: [EMAIL PROTECTED] Subject: RE: CHALLENGE PROBLEM (now herrings and lemmings) [7:17112] Brian, I just wanted to say publicly that this was an outstanding test question. outstanding because of all the red herrings it contained, as we saw from the wild guess responses. Sir, after several trips to Scandinavia, I find it hard to believe that any sensible tester would use more than one red (presumably tomato-sauced) herring. There are wide range of herring to pick from, including the basic wine-pickled, mustard, sour cream, etc., to say nothing of the cooked dishes containing herring. It is also important not to confuse herrings with lemmings, which are excellent simulators either for marketingdroids or those led by marketingdroids. Perhaps they have even more simulation capabilities; I find many of the attempts to coerce things into a concept of the OSI model that is long obsolete, or insist that one or another term is correct because a review book says so in contradiction of the actual standards. Howard so everyone knows, my own private reply was incorrect as well. doh! thanks for this - these kinds of challenges are what make groupstudy worthwhile to me at least. Chuck -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Brian Sent: Tuesday, August 21, 2001 7:51 AM To: [EMAIL PROTECTED] Subject: CHALLENGE PROBLEM (was Re: For FR Grus [7:16635]) [7:16659] On Tue, 21 Aug 2001, Cisco Lover wrote: Hi Guys.. Come with some New Queston.. hmm, ok, so your looking for some challenging questions? Ok, I will post one, its got FR in it. First I'll post the problem, followed by the config: THE PROBLEM === Users on DLCI's 200, 224, 201, 225 cannot communicate to eachother. They can talk just fine to the rest of the network, but no packets can pass between them. Later discovery reveals that so long as they are on different layer 3 network addressing, communcation can occur, but if they are on the same network, such as 192.168.3.0, then they cannot communicate What is the problem? I will reply to let everyone know who got the correct answer. Below is the configuration: ! version 11.3 ! interface Ethernet2/0 ip address 192.168.1.242 255.255.255.0 ! interface Serial4/0 no ip address encapsulation frame-relay IETF keepalive 15 frame-relay map bridge 200 broadcast IETF frame-relay map bridge 224 broadcast IETF frame-relay map bridge 201 broadcast IETF frame-relay map bridge 225 broadcast IETF frame-relay lmi-type ansi bridge-group 1 ! interface BVI1 ip address 192.168.3.242 255.255.255.0 secondary ip address 192.168.2.242 255.255.255.0 ! router igrp 1 network 192.1.0.0 network 192.2.0.0 network 193.3.0.0 ! ip classless ! bridge irb bridge 1 protocol ieee bridge 1 route ip ! For eg, our FR switch is setup for Full mesh,But out network is setup as Hub Spoke FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] --- I'm buying / selling used CISCO gear!! email me for a quote Brian Feeny, CCIE #8036 Scarlett Parria [EMAIL PROTECTED] [EMAIL PROTECTED] 318-213-4709 318-213-4701 Netjam, LLC http://www.netjam.net 333 Texas St.VISA/MC/AMEX/COD Suite 1401 30 day warranty Shreveport, LA 71101 Cisco Channel Partner toll free: 866-2NETJAM phone:318-212-0245 fax: 318-212-0246 Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=17114t=17112 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: CHALLENGE PROBLEM (was Re: For FR Grus.... [7:16635]) [7:17089]
Brian, I just wanted to say publicly that this was an outstanding test question. outstanding because of all the red herrings it contained, as we saw from the wild guess responses. so everyone knows, my own private reply was incorrect as well. doh! thanks for this - these kinds of challenges are what make groupstudy worthwhile to me at least. Chuck -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Brian Sent: Tuesday, August 21, 2001 7:51 AM To: [EMAIL PROTECTED] Subject: CHALLENGE PROBLEM (was Re: For FR Grus [7:16635]) [7:16659] On Tue, 21 Aug 2001, Cisco Lover wrote: Hi Guys.. Come with some New Queston.. hmm, ok, so your looking for some challenging questions? Ok, I will post one, its got FR in it. First I'll post the problem, followed by the config: THE PROBLEM === Users on DLCI's 200, 224, 201, 225 cannot communicate to eachother. They can talk just fine to the rest of the network, but no packets can pass between them. Later discovery reveals that so long as they are on different layer 3 network addressing, communcation can occur, but if they are on the same network, such as 192.168.3.0, then they cannot communicate What is the problem? I will reply to let everyone know who got the correct answer. Below is the configuration: ! version 11.3 ! interface Ethernet2/0 ip address 192.168.1.242 255.255.255.0 ! interface Serial4/0 no ip address encapsulation frame-relay IETF keepalive 15 frame-relay map bridge 200 broadcast IETF frame-relay map bridge 224 broadcast IETF frame-relay map bridge 201 broadcast IETF frame-relay map bridge 225 broadcast IETF frame-relay lmi-type ansi bridge-group 1 ! interface BVI1 ip address 192.168.3.242 255.255.255.0 secondary ip address 192.168.2.242 255.255.255.0 ! router igrp 1 network 192.1.0.0 network 192.2.0.0 network 193.3.0.0 ! ip classless ! bridge irb bridge 1 protocol ieee bridge 1 route ip ! For eg, our FR switch is setup for Full mesh,But out network is setup as Hub Spoke FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] --- I'm buying / selling used CISCO gear!! email me for a quote Brian Feeny, CCIE #8036 Scarlett Parria [EMAIL PROTECTED] [EMAIL PROTECTED] 318-213-4709 318-213-4701 Netjam, LLC http://www.netjam.net 333 Texas St. VISA/MC/AMEX/COD Suite 140130 day warranty Shreveport, LA 71101 Cisco Channel Partner toll free: 866-2NETJAM phone: 318-212-0245 fax: 318-212-0246 Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=17089t=17089 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
CHALLENGE PROBLEM (was Re: For FR Grus.... [7:16635]) [7:16659]
On Tue, 21 Aug 2001, Cisco Lover wrote: Hi Guys.. Come with some New Queston.. hmm, ok, so your looking for some challenging questions? Ok, I will post one, its got FR in it. First I'll post the problem, followed by the config: THE PROBLEM === Users on DLCI's 200, 224, 201, 225 cannot communicate to eachother. They can talk just fine to the rest of the network, but no packets can pass between them. Later discovery reveals that so long as they are on different layer 3 network addressing, communcation can occur, but if they are on the same network, such as 192.168.3.0, then they cannot communicate What is the problem? I will reply to let everyone know who got the correct answer. Below is the configuration: ! version 11.3 ! interface Ethernet2/0 ip address 192.168.1.242 255.255.255.0 ! interface Serial4/0 no ip address encapsulation frame-relay IETF keepalive 15 frame-relay map bridge 200 broadcast IETF frame-relay map bridge 224 broadcast IETF frame-relay map bridge 201 broadcast IETF frame-relay map bridge 225 broadcast IETF frame-relay lmi-type ansi bridge-group 1 ! interface BVI1 ip address 192.168.3.242 255.255.255.0 secondary ip address 192.168.2.242 255.255.255.0 ! router igrp 1 network 192.1.0.0 network 192.2.0.0 network 193.3.0.0 ! ip classless ! bridge irb bridge 1 protocol ieee bridge 1 route ip ! For eg, our FR switch is setup for Full mesh,But out network is setup as Hub Spoke FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] --- I'm buying / selling used CISCO gear!! email me for a quote Brian Feeny, CCIE #8036 Scarlett Parria [EMAIL PROTECTED] [EMAIL PROTECTED] 318-213-4709 318-213-4701 Netjam, LLC http://www.netjam.net 333 Texas St. VISA/MC/AMEX/COD Suite 140130 day warranty Shreveport, LA 71101 Cisco Channel Partner toll free: 866-2NETJAM phone: 318-212-0245 fax: 318-212-0246 Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=16659t=16659 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: CHALLENGE PROBLEM (was Re: For FR Grus.... [7:16635]) [7:16681]
I don't think bridge will work on this network because of split horizon. - Original Message - From: Brian To: Sent: Tuesday, August 21, 2001 7:51 AM Subject: CHALLENGE PROBLEM (was Re: For FR Grus [7:16635]) [7:16659] On Tue, 21 Aug 2001, Cisco Lover wrote: Hi Guys.. Come with some New Queston.. hmm, ok, so your looking for some challenging questions? Ok, I will post one, its got FR in it. First I'll post the problem, followed by the config: THE PROBLEM === Users on DLCI's 200, 224, 201, 225 cannot communicate to eachother. They can talk just fine to the rest of the network, but no packets can pass between them. Later discovery reveals that so long as they are on different layer 3 network addressing, communcation can occur, but if they are on the same network, such as 192.168.3.0, then they cannot communicate What is the problem? I will reply to let everyone know who got the correct answer. Below is the configuration: ! version 11.3 ! interface Ethernet2/0 ip address 192.168.1.242 255.255.255.0 ! interface Serial4/0 no ip address encapsulation frame-relay IETF keepalive 15 frame-relay map bridge 200 broadcast IETF frame-relay map bridge 224 broadcast IETF frame-relay map bridge 201 broadcast IETF frame-relay map bridge 225 broadcast IETF frame-relay lmi-type ansi bridge-group 1 ! interface BVI1 ip address 192.168.3.242 255.255.255.0 secondary ip address 192.168.2.242 255.255.255.0 ! router igrp 1 network 192.1.0.0 network 192.2.0.0 network 193.3.0.0 ! ip classless ! bridge irb bridge 1 protocol ieee bridge 1 route ip ! For eg, our FR switch is setup for Full mesh,But out network is setup as Hub Spoke FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] --- I'm buying / selling used CISCO gear!! email me for a quote Brian Feeny, CCIE #8036 Scarlett Parria [EMAIL PROTECTED] [EMAIL PROTECTED] 318-213-4709 318-213-4701 Netjam, LLC http://www.netjam.net 333 Texas St.VISA/MC/AMEX/COD Suite 1401 30 day warranty Shreveport, LA 71101 Cisco Channel Partner toll free: 866-2NETJAM phone:318-212-0245 fax:318-212-0246 Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=16681t=16681 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: CHALLENGE PROBLEM (was Re: For FR Grus.... [7:16635]) [7:16687]
On Tue, 21 Aug 2001, Donald B Johnson jr wrote: I don't think bridge will work on this network because of split horizon. Can you be more clear about your answer? Brian - Original Message - From: Brian To: Sent: Tuesday, August 21, 2001 7:51 AM Subject: CHALLENGE PROBLEM (was Re: For FR Grus [7:16635]) [7:16659] On Tue, 21 Aug 2001, Cisco Lover wrote: Hi Guys.. Come with some New Queston.. hmm, ok, so your looking for some challenging questions? Ok, I will post one, its got FR in it. First I'll post the problem, followed by the config: THE PROBLEM === Users on DLCI's 200, 224, 201, 225 cannot communicate to eachother. They can talk just fine to the rest of the network, but no packets can pass between them. Later discovery reveals that so long as they are on different layer 3 network addressing, communcation can occur, but if they are on the same network, such as 192.168.3.0, then they cannot communicate What is the problem? I will reply to let everyone know who got the correct answer. Below is the configuration: ! version 11.3 ! interface Ethernet2/0 ip address 192.168.1.242 255.255.255.0 ! interface Serial4/0 no ip address encapsulation frame-relay IETF keepalive 15 frame-relay map bridge 200 broadcast IETF frame-relay map bridge 224 broadcast IETF frame-relay map bridge 201 broadcast IETF frame-relay map bridge 225 broadcast IETF frame-relay lmi-type ansi bridge-group 1 ! interface BVI1 ip address 192.168.3.242 255.255.255.0 secondary ip address 192.168.2.242 255.255.255.0 ! router igrp 1 network 192.1.0.0 network 192.2.0.0 network 193.3.0.0 ! ip classless ! bridge irb bridge 1 protocol ieee bridge 1 route ip ! For eg, our FR switch is setup for Full mesh,But out network is setup as Hub Spoke FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] --- I'm buying / selling used CISCO gear!! email me for a quote Brian Feeny, CCIE #8036 Scarlett Parria [EMAIL PROTECTED] [EMAIL PROTECTED] 318-213-4709 318-213-4701 Netjam, LLC http://www.netjam.net 333 Texas St.VISA/MC/AMEX/COD Suite 1401 30 day warranty Shreveport, LA 71101 Cisco Channel Partner toll free: 866-2NETJAM phone:318-212-0245 fax:318-212-0246 I'm buying / selling used CISCO gear!! email me for a quote Brian Feeny, CCIE #8036 Scarlett Parria [EMAIL PROTECTED] [EMAIL PROTECTED] 318-213-4709 318-213-4701 Netjam, LLC http://www.netjam.net 333 Texas St. VISA/MC/AMEX/COD Suite 140130 day warranty Shreveport, LA 71101 Cisco Channel Partner toll free: 866-2NETJAM phone: 318-212-0245 fax: 318-212-0246 Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=16687t=16687 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: CHALLENGE PROBLEM (was Re: For FR Grus.... [7:16635]) [7:16690]
you can correct me here if I am wrong but split horizon is only used in distance vector protocols NO??? The problem here without giving the answer is that a router is expected to pass a packet out of an interface which is on its own subnet !! Doesn't compute! What is the routing protocol being used to route ip?? This is where the answer will lye -Original Message- From: Donald B Johnson jr [mailto:[EMAIL PROTECTED]] Sent: 21 August 2001 17:06 To: [EMAIL PROTECTED] Subject: Re: CHALLENGE PROBLEM (was Re: For FR Grus [7:16635]) [7:16681] I don't think bridge will work on this network because of split horizon. - Original Message - From: Brian To: Sent: Tuesday, August 21, 2001 7:51 AM Subject: CHALLENGE PROBLEM (was Re: For FR Grus [7:16635]) [7:16659] On Tue, 21 Aug 2001, Cisco Lover wrote: Hi Guys.. Come with some New Queston.. hmm, ok, so your looking for some challenging questions? Ok, I will post one, its got FR in it. First I'll post the problem, followed by the config: THE PROBLEM === Users on DLCI's 200, 224, 201, 225 cannot communicate to eachother. They can talk just fine to the rest of the network, but no packets can pass between them. Later discovery reveals that so long as they are on different layer 3 network addressing, communcation can occur, but if they are on the same network, such as 192.168.3.0, then they cannot communicate What is the problem? I will reply to let everyone know who got the correct answer. Below is the configuration: ! version 11.3 ! interface Ethernet2/0 ip address 192.168.1.242 255.255.255.0 ! interface Serial4/0 no ip address encapsulation frame-relay IETF keepalive 15 frame-relay map bridge 200 broadcast IETF frame-relay map bridge 224 broadcast IETF frame-relay map bridge 201 broadcast IETF frame-relay map bridge 225 broadcast IETF frame-relay lmi-type ansi bridge-group 1 ! interface BVI1 ip address 192.168.3.242 255.255.255.0 secondary ip address 192.168.2.242 255.255.255.0 ! router igrp 1 network 192.1.0.0 network 192.2.0.0 network 193.3.0.0 ! ip classless ! bridge irb bridge 1 protocol ieee bridge 1 route ip ! For eg, our FR switch is setup for Full mesh,But out network is setup as Hub Spoke FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] --- I'm buying / selling used CISCO gear!! email me for a quote Brian Feeny, CCIE #8036 Scarlett Parria [EMAIL PROTECTED] [EMAIL PROTECTED] 318-213-4709 318-213-4701 Netjam, LLC http://www.netjam.net 333 Texas St.VISA/MC/AMEX/COD Suite 1401 30 day warranty Shreveport, LA 71101 Cisco Channel Partner toll free: 866-2NETJAM phone:318-212-0245 fax:318-212-0246 Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=16690t=16690 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: CHALLENGE PROBLEM (was Re: For FR Grus.... [7:16635]) [7:16695]
yeah but he is using irb with a bvi and igrp it is probably a split h issue it creating a loopa - Original Message - From: McCallum, Robert To: 'Donald B Johnson jr' ; Sent: Tuesday, August 21, 2001 9:26 AM Subject: RE: CHALLENGE PROBLEM (was Re: For FR Grus [7:16635]) [7:16681] you can correct me here if I am wrong but split horizon is only used in distance vector protocols NO??? The problem here without giving the answer is that a router is expected to pass a packet out of an interface which is on its own subnet !! Doesn't compute! What is the routing protocol being used to route ip?? This is where the answer will lye -Original Message- From: Donald B Johnson jr [mailto:[EMAIL PROTECTED]] Sent: 21 August 2001 17:06 To: [EMAIL PROTECTED] Subject: Re: CHALLENGE PROBLEM (was Re: For FR Grus [7:16635]) [7:16681] I don't think bridge will work on this network because of split horizon. - Original Message - From: Brian To: Sent: Tuesday, August 21, 2001 7:51 AM Subject: CHALLENGE PROBLEM (was Re: For FR Grus [7:16635]) [7:16659] On Tue, 21 Aug 2001, Cisco Lover wrote: Hi Guys.. Come with some New Queston.. hmm, ok, so your looking for some challenging questions? Ok, I will post one, its got FR in it. First I'll post the problem, followed by the config: THE PROBLEM === Users on DLCI's 200, 224, 201, 225 cannot communicate to eachother. They can talk just fine to the rest of the network, but no packets can pass between them. Later discovery reveals that so long as they are on different layer 3 network addressing, communcation can occur, but if they are on the same network, such as 192.168.3.0, then they cannot communicate What is the problem? I will reply to let everyone know who got the correct answer. Below is the configuration: ! version 11.3 ! interface Ethernet2/0 ip address 192.168.1.242 255.255.255.0 ! interface Serial4/0 no ip address encapsulation frame-relay IETF keepalive 15 frame-relay map bridge 200 broadcast IETF frame-relay map bridge 224 broadcast IETF frame-relay map bridge 201 broadcast IETF frame-relay map bridge 225 broadcast IETF frame-relay lmi-type ansi bridge-group 1 ! interface BVI1 ip address 192.168.3.242 255.255.255.0 secondary ip address 192.168.2.242 255.255.255.0 ! router igrp 1 network 192.1.0.0 network 192.2.0.0 network 193.3.0.0 ! ip classless ! bridge irb bridge 1 protocol ieee bridge 1 route ip ! For eg, our FR switch is setup for Full mesh,But out network is setup as Hub Spoke FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] --- I'm buying / selling used CISCO gear!! email me for a quote Brian Feeny, CCIE #8036 Scarlett Parria [EMAIL PROTECTED] [EMAIL PROTECTED] 318-213-4709 318-213-4701 Netjam, LLC http://www.netjam.net 333 Texas St.VISA/MC/AMEX/COD Suite 1401 30 day warranty Shreveport, LA 71101 Cisco Channel Partner toll free: 866-2NETJAM phone:318-212-0245 fax:318-212-0246 Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=16695t=16695 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: CHALLENGE PROBLEM (was Re: For FR Grus.... [7:16635]) [7:16694]
First of all, I believe you have a typo: router igrp 1 network 192.1.0.0 network 192.2.0.0 network 193.3.0.0 should have been router igrp 1 network 192.168.1.0 network 192.168.2.0 network 193.168.3.0 I have not an answer to your question yet. Ole ~~~ Ole Drews Jensen Systems Network Manager CCNA, MCSE, MCP+I RWR Enterprises, Inc. [EMAIL PROTECTED] ~~~ http://www.RouterChief.com ~~~ NEED A JOB ??? http://www.oledrews.com/job ~~~ -Original Message- From: Brian [mailto:[EMAIL PROTECTED]] Sent: Tuesday, August 21, 2001 9:51 AM To: [EMAIL PROTECTED] Subject: CHALLENGE PROBLEM (was Re: For FR Grus [7:16635]) [7:16659] On Tue, 21 Aug 2001, Cisco Lover wrote: Hi Guys.. Come with some New Queston.. hmm, ok, so your looking for some challenging questions? Ok, I will post one, its got FR in it. First I'll post the problem, followed by the config: THE PROBLEM === Users on DLCI's 200, 224, 201, 225 cannot communicate to eachother. They can talk just fine to the rest of the network, but no packets can pass between them. Later discovery reveals that so long as they are on different layer 3 network addressing, communcation can occur, but if they are on the same network, such as 192.168.3.0, then they cannot communicate What is the problem? I will reply to let everyone know who got the correct answer. Below is the configuration: ! version 11.3 ! interface Ethernet2/0 ip address 192.168.1.242 255.255.255.0 ! interface Serial4/0 no ip address encapsulation frame-relay IETF keepalive 15 frame-relay map bridge 200 broadcast IETF frame-relay map bridge 224 broadcast IETF frame-relay map bridge 201 broadcast IETF frame-relay map bridge 225 broadcast IETF frame-relay lmi-type ansi bridge-group 1 ! interface BVI1 ip address 192.168.3.242 255.255.255.0 secondary ip address 192.168.2.242 255.255.255.0 ! router igrp 1 network 192.1.0.0 network 192.2.0.0 network 193.3.0.0 ! ip classless ! bridge irb bridge 1 protocol ieee bridge 1 route ip ! For eg, our FR switch is setup for Full mesh,But out network is setup as Hub Spoke FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] --- I'm buying / selling used CISCO gear!! email me for a quote Brian Feeny, CCIE #8036 Scarlett Parria [EMAIL PROTECTED] [EMAIL PROTECTED] 318-213-4709 318-213-4701 Netjam, LLC http://www.netjam.net 333 Texas St. VISA/MC/AMEX/COD Suite 140130 day warranty Shreveport, LA 71101 Cisco Channel Partner toll free: 866-2NETJAM phone: 318-212-0245 fax: 318-212-0246 Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=16694t=16694 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: CHALLENGE PROBLEM (was Re: For FR Grus.... [7:16635]) [7:16702]
To me this looks very similar to bridging with DSL. Since you cannot receive the ARP the router must proxy this. At 09:52 AM 8/21/2001, McCallum, Robert wrote: you can correct me here if I am wrong but split horizon is only used in distance vector protocols NO??? The problem here without giving the answer is that a router is expected to pass a packet out of an interface which is on its own subnet !! Doesn't compute! What is the routing protocol being used to route ip?? This is where the answer will lye -Original Message- From: Donald B Johnson jr [mailto:[EMAIL PROTECTED]] Sent: 21 August 2001 17:06 To: [EMAIL PROTECTED] Subject: Re: CHALLENGE PROBLEM (was Re: For FR Grus [7:16635]) [7:16681] I don't think bridge will work on this network because of split horizon. - Original Message - From: Brian To: Sent: Tuesday, August 21, 2001 7:51 AM Subject: CHALLENGE PROBLEM (was Re: For FR Grus [7:16635]) [7:16659] On Tue, 21 Aug 2001, Cisco Lover wrote: Hi Guys.. Come with some New Queston.. hmm, ok, so your looking for some challenging questions? Ok, I will post one, its got FR in it. First I'll post the problem, followed by the config: THE PROBLEM === Users on DLCI's 200, 224, 201, 225 cannot communicate to eachother. They can talk just fine to the rest of the network, but no packets can pass between them. Later discovery reveals that so long as they are on different layer 3 network addressing, communcation can occur, but if they are on the same network, such as 192.168.3.0, then they cannot communicate What is the problem? I will reply to let everyone know who got the correct answer. Below is the configuration: ! version 11.3 ! interface Ethernet2/0 ip address 192.168.1.242 255.255.255.0 ! interface Serial4/0 no ip address encapsulation frame-relay IETF keepalive 15 frame-relay map bridge 200 broadcast IETF frame-relay map bridge 224 broadcast IETF frame-relay map bridge 201 broadcast IETF frame-relay map bridge 225 broadcast IETF frame-relay lmi-type ansi bridge-group 1 ! interface BVI1 ip address 192.168.3.242 255.255.255.0 secondary ip address 192.168.2.242 255.255.255.0 ! router igrp 1 network 192.1.0.0 network 192.2.0.0 network 193.3.0.0 ! ip classless ! bridge irb bridge 1 protocol ieee bridge 1 route ip ! For eg, our FR switch is setup for Full mesh,But out network is setup as Hub Spoke FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] --- I'm buying / selling used CISCO gear!! email me for a quote Brian Feeny, CCIE #8036 Scarlett Parria [EMAIL PROTECTED] [EMAIL PROTECTED] 318-213-4709 318-213-4701 Netjam, LLC http://www.netjam.net 333 Texas St.VISA/MC/AMEX/COD Suite 1401 30 day warranty Shreveport, LA 71101 Cisco Channel Partner toll free: 866-2NETJAM phone:318-212-0245 fax:318-212-0246 Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=16702t=16702 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: CHALLENGE PROBLEM (was Re: For FR Grus.... [7:16635]) [7:16701]
yeah you got irb and bvi and igrp on same interface you are creating loops because SH is disabled - Original Message - From: Brian To: Sent: Tuesday, August 21, 2001 9:35 AM Subject: Re: CHALLENGE PROBLEM (was Re: For FR Grus [7:16635]) [7:16687] On Tue, 21 Aug 2001, Donald B Johnson jr wrote: I don't think bridge will work on this network because of split horizon. Can you be more clear about your answer? Brian - Original Message - From: Brian To: Sent: Tuesday, August 21, 2001 7:51 AM Subject: CHALLENGE PROBLEM (was Re: For FR Grus [7:16635]) [7:16659] On Tue, 21 Aug 2001, Cisco Lover wrote: Hi Guys.. Come with some New Queston.. hmm, ok, so your looking for some challenging questions? Ok, I will post one, its got FR in it. First I'll post the problem, followed by the config: THE PROBLEM === Users on DLCI's 200, 224, 201, 225 cannot communicate to eachother. They can talk just fine to the rest of the network, but no packets can pass between them. Later discovery reveals that so long as they are on different layer 3 network addressing, communcation can occur, but if they are on the same network, such as 192.168.3.0, then they cannot communicate What is the problem? I will reply to let everyone know who got the correct answer. Below is the configuration: ! version 11.3 ! interface Ethernet2/0 ip address 192.168.1.242 255.255.255.0 ! interface Serial4/0 no ip address encapsulation frame-relay IETF keepalive 15 frame-relay map bridge 200 broadcast IETF frame-relay map bridge 224 broadcast IETF frame-relay map bridge 201 broadcast IETF frame-relay map bridge 225 broadcast IETF frame-relay lmi-type ansi bridge-group 1 ! interface BVI1 ip address 192.168.3.242 255.255.255.0 secondary ip address 192.168.2.242 255.255.255.0 ! router igrp 1 network 192.1.0.0 network 192.2.0.0 network 193.3.0.0 ! ip classless ! bridge irb bridge 1 protocol ieee bridge 1 route ip ! For eg, our FR switch is setup for Full mesh,But out network is setup as Hub Spoke FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] --- I'm buying / selling used CISCO gear!! email me for a quote Brian Feeny, CCIE #8036 Scarlett Parria [EMAIL PROTECTED] [EMAIL PROTECTED] 318-213-4709 318-213-4701 Netjam, LLC http://www.netjam.net 333 Texas St.VISA/MC/AMEX/COD Suite 1401 30 day warranty Shreveport, LA 71101 Cisco Channel Partner toll free: 866-2NETJAM phone:318-212-0245 fax:318-212-0246 I'm buying / selling used CISCO gear!! email me for a quote Brian Feeny, CCIE #8036 Scarlett Parria [EMAIL PROTECTED] [EMAIL PROTECTED] 318-213-4709 318-213-4701 Netjam, LLC http://www.netjam.net 333 Texas St.VISA/MC/AMEX/COD Suite 1401 30 day warranty Shreveport, LA 71101 Cisco Channel Partner toll free: 866-2NETJAM phone:318-212-0245 fax:318-212-0246 Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=16701t=16701 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: CHALLENGE PROBLEM (was Re: For FR Grus.... [7:16635]) [7:16707]
Putting static routes on the remote routers pointing back to the hub router would work. Assuming the hub router has routes in it's routing table to all the remote routers. Darrin Gibson -Original Message- From: Wayne Wenthin [mailto:[EMAIL PROTECTED]] Sent: Tuesday, August 21, 2001 12:29 PM To: [EMAIL PROTECTED] Subject: RE: CHALLENGE PROBLEM (was Re: For FR Grus [7:16635]) [7:16702] To me this looks very similar to bridging with DSL. Since you cannot receive the ARP the router must proxy this. At 09:52 AM 8/21/2001, McCallum, Robert wrote: you can correct me here if I am wrong but split horizon is only used in distance vector protocols NO??? The problem here without giving the answer is that a router is expected to pass a packet out of an interface which is on its own subnet !! Doesn't compute! What is the routing protocol being used to route ip?? This is where the answer will lye -Original Message- From: Donald B Johnson jr [mailto:[EMAIL PROTECTED]] Sent: 21 August 2001 17:06 To: [EMAIL PROTECTED] Subject: Re: CHALLENGE PROBLEM (was Re: For FR Grus [7:16635]) [7:16681] I don't think bridge will work on this network because of split horizon. - Original Message - From: Brian To: Sent: Tuesday, August 21, 2001 7:51 AM Subject: CHALLENGE PROBLEM (was Re: For FR Grus [7:16635]) [7:16659] On Tue, 21 Aug 2001, Cisco Lover wrote: Hi Guys.. Come with some New Queston.. hmm, ok, so your looking for some challenging questions? Ok, I will post one, its got FR in it. First I'll post the problem, followed by the config: THE PROBLEM === Users on DLCI's 200, 224, 201, 225 cannot communicate to eachother. They can talk just fine to the rest of the network, but no packets can pass between them. Later discovery reveals that so long as they are on different layer 3 network addressing, communcation can occur, but if they are on the same network, such as 192.168.3.0, then they cannot communicate What is the problem? I will reply to let everyone know who got the correct answer. Below is the configuration: ! version 11.3 ! interface Ethernet2/0 ip address 192.168.1.242 255.255.255.0 ! interface Serial4/0 no ip address encapsulation frame-relay IETF keepalive 15 frame-relay map bridge 200 broadcast IETF frame-relay map bridge 224 broadcast IETF frame-relay map bridge 201 broadcast IETF frame-relay map bridge 225 broadcast IETF frame-relay lmi-type ansi bridge-group 1 ! interface BVI1 ip address 192.168.3.242 255.255.255.0 secondary ip address 192.168.2.242 255.255.255.0 ! router igrp 1 network 192.1.0.0 network 192.2.0.0 network 193.3.0.0 ! ip classless ! bridge irb bridge 1 protocol ieee bridge 1 route ip ! For eg, our FR switch is setup for Full mesh,But out network is setup as Hub Spoke FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] --- I'm buying / selling used CISCO gear!! email me for a quote Brian Feeny, CCIE #8036 Scarlett Parria [EMAIL PROTECTED] [EMAIL PROTECTED] 318-213-4709 318-213-4701 Netjam, LLC http://www.netjam.net 333 Texas St.VISA/MC/AMEX/COD Suite 1401 30 day warranty Shreveport, LA 71101 Cisco Channel Partner toll free: 866-2NETJAM phone:318-212-0245 fax:318-212-0246 Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=16707t=16707 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: CHALLENGE PROBLEM (was Re: For FR Grus.... [7:16635]) [7:16711]
No one has gotten this problem yet. Remeber, making it so the clients are on differnt layer 3 networks works, but when they are on the same it doesn't. What mechanics are involved in how the packet will be treated different if on the same network vs. different networks. I'll still leave the answer open, someone will get this. Brian On Tue, 21 Aug 2001, Wayne Wenthin wrote: To me this looks very similar to bridging with DSL. Since you cannot receive the ARP the router must proxy this. At 09:52 AM 8/21/2001, McCallum, Robert wrote: you can correct me here if I am wrong but split horizon is only used in distance vector protocols NO??? The problem here without giving the answer is that a router is expected to pass a packet out of an interface which is on its own subnet !! Doesn't compute! What is the routing protocol being used to route ip?? This is where the answer will lye -Original Message- From: Donald B Johnson jr [mailto:[EMAIL PROTECTED]] Sent: 21 August 2001 17:06 To: [EMAIL PROTECTED] Subject: Re: CHALLENGE PROBLEM (was Re: For FR Grus [7:16635]) [7:16681] I don't think bridge will work on this network because of split horizon. - Original Message - From: Brian To: Sent: Tuesday, August 21, 2001 7:51 AM Subject: CHALLENGE PROBLEM (was Re: For FR Grus [7:16635]) [7:16659] On Tue, 21 Aug 2001, Cisco Lover wrote: Hi Guys.. Come with some New Queston.. hmm, ok, so your looking for some challenging questions? Ok, I will post one, its got FR in it. First I'll post the problem, followed by the config: THE PROBLEM === Users on DLCI's 200, 224, 201, 225 cannot communicate to eachother. They can talk just fine to the rest of the network, but no packets can pass between them. Later discovery reveals that so long as they are on different layer 3 network addressing, communcation can occur, but if they are on the same network, such as 192.168.3.0, then they cannot communicate What is the problem? I will reply to let everyone know who got the correct answer. Below is the configuration: ! version 11.3 ! interface Ethernet2/0 ip address 192.168.1.242 255.255.255.0 ! interface Serial4/0 no ip address encapsulation frame-relay IETF keepalive 15 frame-relay map bridge 200 broadcast IETF frame-relay map bridge 224 broadcast IETF frame-relay map bridge 201 broadcast IETF frame-relay map bridge 225 broadcast IETF frame-relay lmi-type ansi bridge-group 1 ! interface BVI1 ip address 192.168.3.242 255.255.255.0 secondary ip address 192.168.2.242 255.255.255.0 ! router igrp 1 network 192.1.0.0 network 192.2.0.0 network 193.3.0.0 ! ip classless ! bridge irb bridge 1 protocol ieee bridge 1 route ip ! For eg, our FR switch is setup for Full mesh,But out network is setup as Hub Spoke FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] --- I'm buying / selling used CISCO gear!! email me for a quote Brian Feeny, CCIE #8036 Scarlett Parria [EMAIL PROTECTED] [EMAIL PROTECTED] 318-213-4709 318-213-4701 Netjam, LLC http://www.netjam.net 333 Texas St.VISA/MC/AMEX/COD Suite 1401 30 day warranty Shreveport, LA 71101 Cisco Channel Partner toll free: 866-2NETJAM phone:318-212-0245 fax:318-212-0246 I'm buying / selling used CISCO gear!! email me for a quote Brian Feeny, CCIE #8036 Scarlett Parria [EMAIL PROTECTED] [EMAIL PROTECTED] 318-213-4709 318-213-4701 Netjam, LLC http://www.netjam.net 333 Texas St. VISA/MC/AMEX/COD Suite 140130 day warranty Shreveport, LA 71101 Cisco Channel Partner toll free: 866-2NETJAM phone: 318-212-0245 fax: 318-212-0246 Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=16711t=16711 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: CHALLENGE PROBLEM (was Re: For FR Grus.... [7:16635]) [7:16709]
yes that was a typo, but had nothing to do with the problem, good catch On Tue, 21 Aug 2001, Ole Drews Jensen wrote: First of all, I believe you have a typo: router igrp 1 network 192.1.0.0 network 192.2.0.0 network 193.3.0.0 should have been router igrp 1 network 192.168.1.0 network 192.168.2.0 network 193.168.3.0 I have not an answer to your question yet. Ole ~~~ Ole Drews Jensen Systems Network Manager CCNA, MCSE, MCP+I RWR Enterprises, Inc. [EMAIL PROTECTED] ~~~ http://www.RouterChief.com ~~~ NEED A JOB ??? http://www.oledrews.com/job ~~~ -Original Message- From: Brian [mailto:[EMAIL PROTECTED]] Sent: Tuesday, August 21, 2001 9:51 AM To: [EMAIL PROTECTED] Subject: CHALLENGE PROBLEM (was Re: For FR Grus [7:16635]) [7:16659] On Tue, 21 Aug 2001, Cisco Lover wrote: Hi Guys.. Come with some New Queston.. hmm, ok, so your looking for some challenging questions? Ok, I will post one, its got FR in it. First I'll post the problem, followed by the config: THE PROBLEM === Users on DLCI's 200, 224, 201, 225 cannot communicate to eachother. They can talk just fine to the rest of the network, but no packets can pass between them. Later discovery reveals that so long as they are on different layer 3 network addressing, communcation can occur, but if they are on the same network, such as 192.168.3.0, then they cannot communicate What is the problem? I will reply to let everyone know who got the correct answer. Below is the configuration: ! version 11.3 ! interface Ethernet2/0 ip address 192.168.1.242 255.255.255.0 ! interface Serial4/0 no ip address encapsulation frame-relay IETF keepalive 15 frame-relay map bridge 200 broadcast IETF frame-relay map bridge 224 broadcast IETF frame-relay map bridge 201 broadcast IETF frame-relay map bridge 225 broadcast IETF frame-relay lmi-type ansi bridge-group 1 ! interface BVI1 ip address 192.168.3.242 255.255.255.0 secondary ip address 192.168.2.242 255.255.255.0 ! router igrp 1 network 192.1.0.0 network 192.2.0.0 network 193.3.0.0 ! ip classless ! bridge irb bridge 1 protocol ieee bridge 1 route ip ! For eg, our FR switch is setup for Full mesh,But out network is setup as Hub Spoke FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] --- I'm buying / selling used CISCO gear!! email me for a quote Brian Feeny, CCIE #8036 Scarlett Parria [EMAIL PROTECTED] [EMAIL PROTECTED] 318-213-4709 318-213-4701 Netjam, LLC http://www.netjam.net 333 Texas St. VISA/MC/AMEX/COD Suite 1401 30 day warranty Shreveport, LA 71101Cisco Channel Partner toll free: 866-2NETJAM phone: 318-212-0245 fax: 318-212-0246 I'm buying / selling used CISCO gear!! email me for a quote Brian Feeny, CCIE #8036 Scarlett Parria [EMAIL PROTECTED] [EMAIL PROTECTED] 318-213-4709 318-213-4701 Netjam, LLC http://www.netjam.net 333 Texas St. VISA/MC/AMEX/COD Suite 140130 day warranty Shreveport, LA 71101 Cisco Channel Partner toll free: 866-2NETJAM phone: 318-212-0245 fax: 318-212-0246 Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=16709t=16709 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: CHALLENGE PROBLEM (was Re: For FR Grus.... [7:16635]) [7:16710]
no thats not the problem On Tue, 21 Aug 2001, Donald B Johnson jr wrote: yeah you got irb and bvi and igrp on same interface you are creating loops because SH is disabled - Original Message - From: Brian To: Sent: Tuesday, August 21, 2001 9:35 AM Subject: Re: CHALLENGE PROBLEM (was Re: For FR Grus [7:16635]) [7:16687] On Tue, 21 Aug 2001, Donald B Johnson jr wrote: I don't think bridge will work on this network because of split horizon. Can you be more clear about your answer? Brian - Original Message - From: Brian To: Sent: Tuesday, August 21, 2001 7:51 AM Subject: CHALLENGE PROBLEM (was Re: For FR Grus [7:16635]) [7:16659] On Tue, 21 Aug 2001, Cisco Lover wrote: Hi Guys.. Come with some New Queston.. hmm, ok, so your looking for some challenging questions? Ok, I will post one, its got FR in it. First I'll post the problem, followed by the config: THE PROBLEM === Users on DLCI's 200, 224, 201, 225 cannot communicate to eachother. They can talk just fine to the rest of the network, but no packets can pass between them. Later discovery reveals that so long as they are on different layer 3 network addressing, communcation can occur, but if they are on the same network, such as 192.168.3.0, then they cannot communicate What is the problem? I will reply to let everyone know who got the correct answer. Below is the configuration: ! version 11.3 ! interface Ethernet2/0 ip address 192.168.1.242 255.255.255.0 ! interface Serial4/0 no ip address encapsulation frame-relay IETF keepalive 15 frame-relay map bridge 200 broadcast IETF frame-relay map bridge 224 broadcast IETF frame-relay map bridge 201 broadcast IETF frame-relay map bridge 225 broadcast IETF frame-relay lmi-type ansi bridge-group 1 ! interface BVI1 ip address 192.168.3.242 255.255.255.0 secondary ip address 192.168.2.242 255.255.255.0 ! router igrp 1 network 192.1.0.0 network 192.2.0.0 network 193.3.0.0 ! ip classless ! bridge irb bridge 1 protocol ieee bridge 1 route ip ! For eg, our FR switch is setup for Full mesh,But out network is setup as Hub Spoke FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] --- I'm buying / selling used CISCO gear!! email me for a quote Brian Feeny, CCIE #8036 Scarlett Parria [EMAIL PROTECTED] [EMAIL PROTECTED] 318-213-4709 318-213-4701 Netjam, LLC http://www.netjam.net 333 Texas St.VISA/MC/AMEX/COD Suite 1401 30 day warranty Shreveport, LA 71101 Cisco Channel Partner toll free: 866-2NETJAM phone:318-212-0245 fax:318-212-0246 I'm buying / selling used CISCO gear!! email me for a quote Brian Feeny, CCIE #8036 Scarlett Parria [EMAIL PROTECTED] [EMAIL PROTECTED] 318-213-4709 318-213-4701 Netjam, LLC http://www.netjam.net 333 Texas St.VISA/MC/AMEX/COD Suite 1401 30 day warranty Shreveport, LA 71101 Cisco Channel Partner toll free: 866-2NETJAM phone:318-212-0245 fax:318-212-0246 I'm buying / selling used CISCO gear!! email me for a quote Brian Feeny, CCIE #8036 Scarlett Parria [EMAIL PROTECTED] [EMAIL PROTECTED] 318-213-4709 318-213-4701 Netjam, LLC http://www.netjam.net 333 Texas St. VISA/MC/AMEX/COD Suite 140130 day warranty Shreveport, LA 71101 Cisco Channel Partner toll free: 866-2NETJAM phone: 318-212-0245 fax: 318-212-0246 Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=16710t=16710 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: CHALLENGE PROBLEM (was Re: For FR Grus.... [7:16635]) [7:16714]
I can think of two reason why it wouldn't work. 1. Because you're using bridging on the frame relay links, it must adhere to the spanning tree rules. This means that you cannot send traffic out the same interface you receive it on. In this configuration it would mean that information received on a DLCI it would not be able to be forwarded out any of the other DLCIs because they are on the same physical interface 2. You're using frame map bridge statements which disables inverse arp. You have to add static frame map ip statements for all the layer 3 addresses. This wouldn't explain why it works when the DLCIs are on different layer 3 networks though. Rob Brian @groupstudy.com on 08/21/2001 02:10:42 PM Please respond to Brian Sent by: [EMAIL PROTECTED] To: [EMAIL PROTECTED] cc: Subject: RE: CHALLENGE PROBLEM (was Re: For FR Grus [7:16635]) [7:16711] No one has gotten this problem yet. Remeber, making it so the clients are on differnt layer 3 networks works, but when they are on the same it doesn't. What mechanics are involved in how the packet will be treated different if on the same network vs. different networks. I'll still leave the answer open, someone will get this. Brian On Tue, 21 Aug 2001, Wayne Wenthin wrote: To me this looks very similar to bridging with DSL. Since you cannot receive the ARP the router must proxy this. At 09:52 AM 8/21/2001, McCallum, Robert wrote: you can correct me here if I am wrong but split horizon is only used in distance vector protocols NO??? The problem here without giving the answer is that a router is expected to pass a packet out of an interface which is on its own subnet !! Doesn't compute! What is the routing protocol being used to route ip?? This is where the answer will lye -Original Message- From: Donald B Johnson jr [mailto:[EMAIL PROTECTED]] Sent: 21 August 2001 17:06 To: [EMAIL PROTECTED] Subject: Re: CHALLENGE PROBLEM (was Re: For FR Grus [7:16635]) [7:16681] I don't think bridge will work on this network because of split horizon. - Original Message - From: Brian To: Sent: Tuesday, August 21, 2001 7:51 AM Subject: CHALLENGE PROBLEM (was Re: For FR Grus [7:16635]) [7:16659] On Tue, 21 Aug 2001, Cisco Lover wrote: Hi Guys.. Come with some New Queston.. hmm, ok, so your looking for some challenging questions? Ok, I will post one, its got FR in it. First I'll post the problem, followed by the config: THE PROBLEM === Users on DLCI's 200, 224, 201, 225 cannot communicate to eachother. They can talk just fine to the rest of the network, but no packets can pass between them. Later discovery reveals that so long as they are on different layer 3 network addressing, communcation can occur, but if they are on the same network, such as 192.168.3.0, then they cannot communicate What is the problem? I will reply to let everyone know who got the correct answer. Below is the configuration: ! version 11.3 ! interface Ethernet2/0 ip address 192.168.1.242 255.255.255.0 ! interface Serial4/0 no ip address encapsulation frame-relay IETF keepalive 15 frame-relay map bridge 200 broadcast IETF frame-relay map bridge 224 broadcast IETF frame-relay map bridge 201 broadcast IETF frame-relay map bridge 225 broadcast IETF frame-relay lmi-type ansi bridge-group 1 ! interface BVI1 ip address 192.168.3.242 255.255.255.0 secondary ip address 192.168.2.242 255.255.255.0 ! router igrp 1 network 192.1.0.0 network 192.2.0.0 network 193.3.0.0 ! ip classless ! bridge irb bridge 1 protocol ieee bridge 1 route ip ! For eg, our FR switch is setup for Full mesh,But out network is setup as Hub Spoke FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] --- I'm buying / selling used CISCO gear!! email me for a quote Brian Feeny, CCIE #8036 Scarlett Parria [EMAIL PROTECTED] [EMAIL PROTECTED] 318-213-4709 318-213-4701 Netjam, LLC http://www.netjam.net 333 Texas St.VISA/MC/AMEX/COD Suite 1401 30 day warranty Shreveport, LA 71101 Cisco Channel Partner toll free: 866-2NETJAM phone:318-212-0245 fax:318-212-0246 I'm buying / selling used CISCO gear!! email me for a quote Brian Feeny, CCIE #8036 Scarlett Parria [EMAIL PROTECTED] [EMAIL PROTECTED] 318-213-4709 318-213-4701 Netjam, LLC http://www.netjam.net 333 Texas St. VISA/MC/AMEX/COD Suite 140130 day warranty Shreveport, LA 71101 Cisco Channel Partner toll free: 866-2NETJAM phone
Re: CHALLENGE PROBLEM (was Re: For FR Grus.... [7:16635]) [7:16716]
On Tue, 21 Aug 2001, Sasha wrote: He is doing transparent bridging between pvc's, hence routing issues are irrelevant. The problem here is that a packet that comes into a physical interface is not transmitted back through the same physical interface (although on another pvc), and bridging will not work (you may call it split horizon, but I wouldn't). YES! You got it correct! One must remember that when bridging on a router, its just like a real bridge/switch. Interfaces are like ports on a bridge, and a packet entering a port will never go back out that same port. Using sub interfaces fixes it. Now why does it work when you put them on 2 different layer3 networks? Because this forces packets to tag the BVI, and thus get routed (BVI must be setup with secondary addressing). And routing can go out the port, tag the BVI, and go back down the port, but bridging will not work! (This limitation is intended to avoid bridging loops, I think, because STP will treat physical interface as a single bridge port.) The common solution is the use of p2p subinterfaces. Yes The config may be modified in one of two ways: * put pvc's on separate point-to-point subinterfaces: int ser4/0.200 point-to-point frame interface-dlci 200 bridge-group 1 int ser4/0.224 point-to-point frame interface-dlci 224 bridge-group 1 ... * use point-to-multipoint interface: int ser4/0.200 multipoint frame map bridge 200 broadcast bridge-group 1 int ser4/0.224 multi frame map bridge 224 broadcast bridge-group 1 Yes, or use different layer 3 networks, you can put numerous secondaries on the BVI, although ugly looking. Great job, I know this is not an obvious problem when first looked at. Brian --- I'm buying / selling used CISCO gear!! email me for a quote Brian Feeny, CCIE #8036 Scarlett Parria [EMAIL PROTECTED] [EMAIL PROTECTED] 318-213-4709 318-213-4701 Netjam, LLC http://www.netjam.net 333 Texas St. VISA/MC/AMEX/COD Suite 140130 day warranty Shreveport, LA 71101 Cisco Channel Partner toll free: 866-2NETJAM phone: 318-212-0245 fax: 318-212-0246 Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=16716t=16716 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: CHALLENGE PROBLEM (was Re: For FR Grus.... [7:16635]) [7:16717]
On Tue, 21 Aug 2001 [EMAIL PROTECTED] wrote: I can think of two reason why it wouldn't work. 1. Because you're using bridging on the frame relay links, it must adhere to the spanning tree rules. This means that you cannot send traffic out the same interface you receive it on. In this configuration it would mean that information received on a DLCI it would not be able to be forwarded out any of the other DLCIs because they are on the same physical interface Yes the above is correct! 2. You're using frame map bridge statements which disables inverse arp. You have to add static frame map ip statements for all the layer 3 addresses. This wouldn't explain why it works when the DLCIs are on different layer 3 networks though. The above is not really a problem in whats below. You can just put the DLCI's on differnt layer3 networks and it will work as is below. Rob Brian @groupstudy.com on 08/21/2001 02:10:42 PM Please respond to Brian Sent by: [EMAIL PROTECTED] To: [EMAIL PROTECTED] cc: Subject: RE: CHALLENGE PROBLEM (was Re: For FR Grus [7:16635]) [7:16711] No one has gotten this problem yet. Remeber, making it so the clients are on differnt layer 3 networks works, but when they are on the same it doesn't. What mechanics are involved in how the packet will be treated different if on the same network vs. different networks. I'll still leave the answer open, someone will get this. Brian On Tue, 21 Aug 2001, Wayne Wenthin wrote: To me this looks very similar to bridging with DSL. Since you cannot receive the ARP the router must proxy this. At 09:52 AM 8/21/2001, McCallum, Robert wrote: you can correct me here if I am wrong but split horizon is only used in distance vector protocols NO??? The problem here without giving the answer is that a router is expected to pass a packet out of an interface which is on its own subnet !! Doesn't compute! What is the routing protocol being used to route ip?? This is where the answer will lye -Original Message- From: Donald B Johnson jr [mailto:[EMAIL PROTECTED]] Sent: 21 August 2001 17:06 To: [EMAIL PROTECTED] Subject: Re: CHALLENGE PROBLEM (was Re: For FR Grus [7:16635]) [7:16681] I don't think bridge will work on this network because of split horizon. - Original Message - From: Brian To: Sent: Tuesday, August 21, 2001 7:51 AM Subject: CHALLENGE PROBLEM (was Re: For FR Grus [7:16635]) [7:16659] On Tue, 21 Aug 2001, Cisco Lover wrote: Hi Guys.. Come with some New Queston.. hmm, ok, so your looking for some challenging questions? Ok, I will post one, its got FR in it. First I'll post the problem, followed by the config: THE PROBLEM === Users on DLCI's 200, 224, 201, 225 cannot communicate to eachother. They can talk just fine to the rest of the network, but no packets can pass between them. Later discovery reveals that so long as they are on different layer 3 network addressing, communcation can occur, but if they are on the same network, such as 192.168.3.0, then they cannot communicate What is the problem? I will reply to let everyone know who got the correct answer. Below is the configuration: ! version 11.3 ! interface Ethernet2/0 ip address 192.168.1.242 255.255.255.0 ! interface Serial4/0 no ip address encapsulation frame-relay IETF keepalive 15 frame-relay map bridge 200 broadcast IETF frame-relay map bridge 224 broadcast IETF frame-relay map bridge 201 broadcast IETF frame-relay map bridge 225 broadcast IETF frame-relay lmi-type ansi bridge-group 1 ! interface BVI1 ip address 192.168.3.242 255.255.255.0 secondary ip address 192.168.2.242 255.255.255.0 ! router igrp 1 network 192.1.0.0 network 192.2.0.0 network 193.3.0.0 ! ip classless ! bridge irb bridge 1 protocol ieee bridge 1 route ip ! For eg, our FR switch is setup for Full mesh,But out network is setup as Hub Spoke FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] --- I'm buying / selling used CISCO gear!! email me for a quote Brian Feeny, CCIE #8036 Scarlett Parria [EMAIL PROTECTED] [EMAIL PROTECTED] 318-213-4709 318-213-4701 Netjam, LLC http://www.netjam.net 333 Texas St.VISA/MC/AMEX/COD Suite 1401 30 day warranty Shreveport, LA 71101 Cisco Channel Partner toll free: 866-2NETJAM phone:318-212-0245 fax:318-212-0246 I'm buying / selling used CISCO gear
RE: CHALLENGE PROBLEM (was Re: For FR Grus.... [7:16635]) [7:16718]
On Tue, 21 Aug 2001, Gibson, Darrin wrote: Putting static routes on the remote routers pointing back to the hub router would work. Assuming the hub router has routes in it's routing table to all the remote routers. that would not work. There is something fundementally wrong with the below config that prevents them from communicating. Darrin Gibson -Original Message- From: Wayne Wenthin [mailto:[EMAIL PROTECTED]] Sent: Tuesday, August 21, 2001 12:29 PM To: [EMAIL PROTECTED] Subject: RE: CHALLENGE PROBLEM (was Re: For FR Grus [7:16635]) [7:16702] To me this looks very similar to bridging with DSL. Since you cannot receive the ARP the router must proxy this. At 09:52 AM 8/21/2001, McCallum, Robert wrote: you can correct me here if I am wrong but split horizon is only used in distance vector protocols NO??? The problem here without giving the answer is that a router is expected to pass a packet out of an interface which is on its own subnet !! Doesn't compute! What is the routing protocol being used to route ip?? This is where the answer will lye -Original Message- From: Donald B Johnson jr [mailto:[EMAIL PROTECTED]] Sent: 21 August 2001 17:06 To: [EMAIL PROTECTED] Subject: Re: CHALLENGE PROBLEM (was Re: For FR Grus [7:16635]) [7:16681] I don't think bridge will work on this network because of split horizon. - Original Message - From: Brian To: Sent: Tuesday, August 21, 2001 7:51 AM Subject: CHALLENGE PROBLEM (was Re: For FR Grus [7:16635]) [7:16659] On Tue, 21 Aug 2001, Cisco Lover wrote: Hi Guys.. Come with some New Queston.. hmm, ok, so your looking for some challenging questions? Ok, I will post one, its got FR in it. First I'll post the problem, followed by the config: THE PROBLEM === Users on DLCI's 200, 224, 201, 225 cannot communicate to eachother. They can talk just fine to the rest of the network, but no packets can pass between them. Later discovery reveals that so long as they are on different layer 3 network addressing, communcation can occur, but if they are on the same network, such as 192.168.3.0, then they cannot communicate What is the problem? I will reply to let everyone know who got the correct answer. Below is the configuration: ! version 11.3 ! interface Ethernet2/0 ip address 192.168.1.242 255.255.255.0 ! interface Serial4/0 no ip address encapsulation frame-relay IETF keepalive 15 frame-relay map bridge 200 broadcast IETF frame-relay map bridge 224 broadcast IETF frame-relay map bridge 201 broadcast IETF frame-relay map bridge 225 broadcast IETF frame-relay lmi-type ansi bridge-group 1 ! interface BVI1 ip address 192.168.3.242 255.255.255.0 secondary ip address 192.168.2.242 255.255.255.0 ! router igrp 1 network 192.1.0.0 network 192.2.0.0 network 193.3.0.0 ! ip classless ! bridge irb bridge 1 protocol ieee bridge 1 route ip ! For eg, our FR switch is setup for Full mesh,But out network is setup as Hub Spoke FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] --- I'm buying / selling used CISCO gear!! email me for a quote Brian Feeny, CCIE #8036 Scarlett Parria [EMAIL PROTECTED] [EMAIL PROTECTED] 318-213-4709 318-213-4701 Netjam, LLC http://www.netjam.net 333 Texas St.VISA/MC/AMEX/COD Suite 1401 30 day warranty Shreveport, LA 71101 Cisco Channel Partner toll free: 866-2NETJAM phone:318-212-0245 fax:318-212-0246 I'm buying / selling used CISCO gear!! email me for a quote Brian Feeny, CCIE #8036 Scarlett Parria [EMAIL PROTECTED] [EMAIL PROTECTED] 318-213-4709 318-213-4701 Netjam, LLC http://www.netjam.net 333 Texas St. VISA/MC/AMEX/COD Suite 140130 day warranty Shreveport, LA 71101 Cisco Channel Partner toll free: 866-2NETJAM phone: 318-212-0245 fax: 318-212-0246 Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=16718t=16718 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: CHALLENGE PROBLEM (was Re: For FR Grus.... [7:16635]) [7:16719]
If the clients are on different layer 3 network, then that should be configured as point to point network. If they are on same network then they can use point to multipoint. I think in the given senerio, it should be configured as point to point network. Arun --- Brian wrote: No one has gotten this problem yet. Remeber, making it so the clients are on differnt layer 3 networks works, but when they are on the same it doesn't. What mechanics are involved in how the packet will be treated different if on the same network vs. different networks. I'll still leave the answer open, someone will get this. Brian On Tue, 21 Aug 2001, Wayne Wenthin wrote: To me this looks very similar to bridging with DSL. Since you cannot receive the ARP the router must proxy this. At 09:52 AM 8/21/2001, McCallum, Robert wrote: you can correct me here if I am wrong but split horizon is only used in distance vector protocols NO??? The problem here without giving the answer is that a router is expected to pass a packet out of an interface which is on its own subnet !! Doesn't compute! What is the routing protocol being used to route ip?? This is where the answer will lye -Original Message- From: Donald B Johnson jr [mailto:[EMAIL PROTECTED]] Sent: 21 August 2001 17:06 To: [EMAIL PROTECTED] Subject: Re: CHALLENGE PROBLEM (was Re: For FR Grus [7:16635]) [7:16681] I don't think bridge will work on this network because of split horizon. - Original Message - From: Brian To: Sent: Tuesday, August 21, 2001 7:51 AM Subject: CHALLENGE PROBLEM (was Re: For FR Grus [7:16635]) [7:16659] On Tue, 21 Aug 2001, Cisco Lover wrote: Hi Guys.. Come with some New Queston.. hmm, ok, so your looking for some challenging questions? Ok, I will post one, its got FR in it. First I'll post the problem, followed by the config: THE PROBLEM === Users on DLCI's 200, 224, 201, 225 cannot communicate to eachother. They can talk just fine to the rest of the network, but no packets can pass between them. Later discovery reveals that so long as they are on different layer 3 network addressing, communcation can occur, but if they are on the same network, such as 192.168.3.0, then they cannot communicate What is the problem? I will reply to let everyone know who got the correct answer. Below is the configuration: ! version 11.3 ! interface Ethernet2/0 ip address 192.168.1.242 255.255.255.0 ! interface Serial4/0 no ip address encapsulation frame-relay IETF keepalive 15 frame-relay map bridge 200 broadcast IETF frame-relay map bridge 224 broadcast IETF frame-relay map bridge 201 broadcast IETF frame-relay map bridge 225 broadcast IETF frame-relay lmi-type ansi bridge-group 1 ! interface BVI1 ip address 192.168.3.242 255.255.255.0 secondary ip address 192.168.2.242 255.255.255.0 ! router igrp 1 network 192.1.0.0 network 192.2.0.0 network 193.3.0.0 ! ip classless ! bridge irb bridge 1 protocol ieee bridge 1 route ip ! For eg, our FR switch is setup for Full mesh,But out network is setup as Hub Spoke FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] --- I'm buying / selling used CISCO gear!! email me for a quote Brian Feeny, CCIE #8036 Scarlett Parria [EMAIL PROTECTED] [EMAIL PROTECTED] 318-213-4709 318-213-4701 Netjam, LLC http://www.netjam.net 333 Texas St.VISA/MC/AMEX/COD Suite 1401 30 day warranty Shreveport, LA 71101 Cisco Channel Partner toll free: 866-2NETJAM phone:318-212-0245 fax:318-212-0246 I'm buying / selling used CISCO gear!! email me for a quote Brian Feeny, CCIE #8036 Scarlett Parria [EMAIL PROTECTED] [EMAIL PROTECTED] 318-213-4709 318-213-4701 Netjam, LLC http://www.netjam.net 333 Texas St. VISA/MC/AMEX/COD Suite 1401 30 day warranty Shreveport, LA 71101Cisco Channel Partner toll free: 866-2NETJAM phone: 318-212-0245 fax: 318-212-0246 [EMAIL PROTECTED] = Arun Upadhyay SE Engineering MCSE CCNA CNA __ Do You Yahoo!? Get personalized email addresses from Yahoo! Mail http://personal.mail.yahoo.com/ Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=16719t=16719 -- FAQ, list archives, and subscription info
RE: CHALLENGE PROBLEM (was Re: For FR Grus.... [7:16635]) [7:16722]
How about get rid of igrp and configure ospf in nbma mode? :) -Patrick Brian 08/21/01 02:10PM No one has gotten this problem yet. Remeber, making it so the clients are on differnt layer 3 networks works, but when they are on the same it doesn't. What mechanics are involved in how the packet will be treated different if on the same network vs. different networks. I'll still leave the answer open, someone will get this. Brian On Tue, 21 Aug 2001, Wayne Wenthin wrote: To me this looks very similar to bridging with DSL. Since you cannot receive the ARP the router must proxy this. At 09:52 AM 8/21/2001, McCallum, Robert wrote: you can correct me here if I am wrong but split horizon is only used in distance vector protocols NO??? The problem here without giving the answer is that a router is expected to pass a packet out of an interface which is on its own subnet !! Doesn't compute! What is the routing protocol being used to route ip?? This is where the answer will lye -Original Message- From: Donald B Johnson jr [mailto:[EMAIL PROTECTED]] Sent: 21 August 2001 17:06 To: [EMAIL PROTECTED] Subject: Re: CHALLENGE PROBLEM (was Re: For FR Grus [7:16635]) [7:16681] I don't think bridge will work on this network because of split horizon. - Original Message - From: Brian To: Sent: Tuesday, August 21, 2001 7:51 AM Subject: CHALLENGE PROBLEM (was Re: For FR Grus [7:16635]) [7:16659] On Tue, 21 Aug 2001, Cisco Lover wrote: Hi Guys.. Come with some New Queston.. hmm, ok, so your looking for some challenging questions? Ok, I will post one, its got FR in it. First I'll post the problem, followed by the config: THE PROBLEM === Users on DLCI's 200, 224, 201, 225 cannot communicate to eachother. They can talk just fine to the rest of the network, but no packets can pass between them. Later discovery reveals that so long as they are on different layer 3 network addressing, communcation can occur, but if they are on the same network, such as 192.168.3.0, then they cannot communicate What is the problem? I will reply to let everyone know who got the correct answer. Below is the configuration: ! version 11.3 ! interface Ethernet2/0 ip address 192.168.1.242 255.255.255.0 ! interface Serial4/0 no ip address encapsulation frame-relay IETF keepalive 15 frame-relay map bridge 200 broadcast IETF frame-relay map bridge 224 broadcast IETF frame-relay map bridge 201 broadcast IETF frame-relay map bridge 225 broadcast IETF frame-relay lmi-type ansi bridge-group 1 ! interface BVI1 ip address 192.168.3.242 255.255.255.0 secondary ip address 192.168.2.242 255.255.255.0 ! router igrp 1 network 192.1.0.0 network 192.2.0.0 network 193.3.0.0 ! ip classless ! bridge irb bridge 1 protocol ieee bridge 1 route ip ! For eg, our FR switch is setup for Full mesh,But out network is setup as Hub Spoke FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] --- I'm buying / selling used CISCO gear!! email me for a quote Brian Feeny, CCIE #8036 Scarlett Parria [EMAIL PROTECTED] [EMAIL PROTECTED] 318-213-4709 318-213-4701 Netjam, LLC http://www.netjam.net 333 Texas St.VISA/MC/AMEX/COD Suite 1401 30 day warranty Shreveport, LA 71101 Cisco Channel Partner toll free: 866-2NETJAM phone:318-212-0245 fax:318-212-0246 I'm buying / selling used CISCO gear!! email me for a quote Brian Feeny, CCIE #8036 Scarlett Parria [EMAIL PROTECTED] [EMAIL PROTECTED] 318-213-4709 318-213-4701 Netjam, LLC http://www.netjam.net 333 Texas St. VISA/MC/AMEX/COD Suite 140130 day warranty Shreveport, LA 71101 Cisco Channel Partner toll free: 866-2NETJAM phone: 318-212-0245 fax: 318-212-0246 Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=16722t=16722 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: CHALLENGE PROBLEM (was Re: For FR Grus.... [7:16635]) [7:16727]
On Tue, 21 Aug 2001, Patrick Ramsey wrote: How about get rid of igrp and configure ospf in nbma mode? :) the igrp has nothing to do with the problem though, its a bridging problem, someone had posted the solution. Brian -Patrick Brian 08/21/01 02:10PM No one has gotten this problem yet. Remeber, making it so the clients are on differnt layer 3 networks works, but when they are on the same it doesn't. What mechanics are involved in how the packet will be treated different if on the same network vs. different networks. I'll still leave the answer open, someone will get this. Brian On Tue, 21 Aug 2001, Wayne Wenthin wrote: To me this looks very similar to bridging with DSL. Since you cannot receive the ARP the router must proxy this. At 09:52 AM 8/21/2001, McCallum, Robert wrote: you can correct me here if I am wrong but split horizon is only used in distance vector protocols NO??? The problem here without giving the answer is that a router is expected to pass a packet out of an interface which is on its own subnet !! Doesn't compute! What is the routing protocol being used to route ip?? This is where the answer will lye -Original Message- From: Donald B Johnson jr [mailto:[EMAIL PROTECTED]] Sent: 21 August 2001 17:06 To: [EMAIL PROTECTED] Subject: Re: CHALLENGE PROBLEM (was Re: For FR Grus [7:16635]) [7:16681] I don't think bridge will work on this network because of split horizon. - Original Message - From: Brian To: Sent: Tuesday, August 21, 2001 7:51 AM Subject: CHALLENGE PROBLEM (was Re: For FR Grus [7:16635]) [7:16659] On Tue, 21 Aug 2001, Cisco Lover wrote: Hi Guys.. Come with some New Queston.. hmm, ok, so your looking for some challenging questions? Ok, I will post one, its got FR in it. First I'll post the problem, followed by the config: THE PROBLEM === Users on DLCI's 200, 224, 201, 225 cannot communicate to eachother. They can talk just fine to the rest of the network, but no packets can pass between them. Later discovery reveals that so long as they are on different layer 3 network addressing, communcation can occur, but if they are on the same network, such as 192.168.3.0, then they cannot communicate What is the problem? I will reply to let everyone know who got the correct answer. Below is the configuration: ! version 11.3 ! interface Ethernet2/0 ip address 192.168.1.242 255.255.255.0 ! interface Serial4/0 no ip address encapsulation frame-relay IETF keepalive 15 frame-relay map bridge 200 broadcast IETF frame-relay map bridge 224 broadcast IETF frame-relay map bridge 201 broadcast IETF frame-relay map bridge 225 broadcast IETF frame-relay lmi-type ansi bridge-group 1 ! interface BVI1 ip address 192.168.3.242 255.255.255.0 secondary ip address 192.168.2.242 255.255.255.0 ! router igrp 1 network 192.1.0.0 network 192.2.0.0 network 193.3.0.0 ! ip classless ! bridge irb bridge 1 protocol ieee bridge 1 route ip ! For eg, our FR switch is setup for Full mesh,But out network is setup as Hub Spoke FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] --- I'm buying / selling used CISCO gear!! email me for a quote Brian Feeny, CCIE #8036 Scarlett Parria [EMAIL PROTECTED] [EMAIL PROTECTED] 318-213-4709 318-213-4701 Netjam, LLC http://www.netjam.net 333 Texas St.VISA/MC/AMEX/COD Suite 1401 30 day warranty Shreveport, LA 71101 Cisco Channel Partner toll free: 866-2NETJAM phone:318-212-0245 fax:318-212-0246 I'm buying / selling used CISCO gear!! email me for a quote Brian Feeny, CCIE #8036 Scarlett Parria [EMAIL PROTECTED] [EMAIL PROTECTED] 318-213-4709 318-213-4701 Netjam, LLC http://www.netjam.net 333 Texas St. VISA/MC/AMEX/COD Suite 1401 30 day warranty Shreveport, LA 71101Cisco Channel Partner toll free: 866-2NETJAM phone: 318-212-0245 fax: 318-212-0246 I'm buying / selling used CISCO gear!! email me for a quote Brian Feeny, CCIE #8036 Scarlett Parria [EMAIL PROTECTED] [EMAIL PROTECTED] 318-213-4709 318-213-4701 Netjam, LLC http://www.netjam.net 333 Texas St. VISA/MC/AMEX/COD Suite 140130 day warranty Shreveport, LA 71101 Cisco Channel Partner toll free: 866-2NETJAM phone: 318-212-0245 fax
RE: CHALLENGE PROBLEM (was Re: For FR Grus.... [7:16635]) [7:16728]
On Tue, 21 Aug 2001, Arun Upadhyay wrote: If the clients are on different layer 3 network, then that should be configured as point to point network. If they are on same network then they can use point to multipoint. Well, not really. In practice its fine to put bridged customers on a single multipoint and use different layer3 networks. Why would you do this? Well, in early DSL rollouts, things on Cisco routers like IDB's, BVI's, etc were limited resources..some routers could only do 300 even. So you would lump many DSL customers in on one multipoint interface. I think in the given senerio, it should be configured as point to point network. Yes, ideally, but its sort of like a typical Cisco or CCIE type problem, where the configuration is valid, but doesn't necessarly make sense or would be the best way to do it. Its just to demonstrate the issue or port blocking on a bridge. Arun --- Brian wrote: No one has gotten this problem yet. Remeber, making it so the clients are on differnt layer 3 networks works, but when they are on the same it doesn't. What mechanics are involved in how the packet will be treated different if on the same network vs. different networks. I'll still leave the answer open, someone will get this. Brian On Tue, 21 Aug 2001, Wayne Wenthin wrote: To me this looks very similar to bridging with DSL. Since you cannot receive the ARP the router must proxy this. At 09:52 AM 8/21/2001, McCallum, Robert wrote: you can correct me here if I am wrong but split horizon is only used in distance vector protocols NO??? The problem here without giving the answer is that a router is expected to pass a packet out of an interface which is on its own subnet !! Doesn't compute! What is the routing protocol being used to route ip?? This is where the answer will lye -Original Message- From: Donald B Johnson jr [mailto:[EMAIL PROTECTED]] Sent: 21 August 2001 17:06 To: [EMAIL PROTECTED] Subject: Re: CHALLENGE PROBLEM (was Re: For FR Grus [7:16635]) [7:16681] I don't think bridge will work on this network because of split horizon. - Original Message - From: Brian To: Sent: Tuesday, August 21, 2001 7:51 AM Subject: CHALLENGE PROBLEM (was Re: For FR Grus [7:16635]) [7:16659] On Tue, 21 Aug 2001, Cisco Lover wrote: Hi Guys.. Come with some New Queston.. hmm, ok, so your looking for some challenging questions? Ok, I will post one, its got FR in it. First I'll post the problem, followed by the config: THE PROBLEM === Users on DLCI's 200, 224, 201, 225 cannot communicate to eachother. They can talk just fine to the rest of the network, but no packets can pass between them. Later discovery reveals that so long as they are on different layer 3 network addressing, communcation can occur, but if they are on the same network, such as 192.168.3.0, then they cannot communicate What is the problem? I will reply to let everyone know who got the correct answer. Below is the configuration: ! version 11.3 ! interface Ethernet2/0 ip address 192.168.1.242 255.255.255.0 ! interface Serial4/0 no ip address encapsulation frame-relay IETF keepalive 15 frame-relay map bridge 200 broadcast IETF frame-relay map bridge 224 broadcast IETF frame-relay map bridge 201 broadcast IETF frame-relay map bridge 225 broadcast IETF frame-relay lmi-type ansi bridge-group 1 ! interface BVI1 ip address 192.168.3.242 255.255.255.0 secondary ip address 192.168.2.242 255.255.255.0 ! router igrp 1 network 192.1.0.0 network 192.2.0.0 network 193.3.0.0 ! ip classless ! bridge irb bridge 1 protocol ieee bridge 1 route ip ! For eg, our FR switch is setup for Full mesh,But out network is setup as Hub Spoke FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] --- I'm buying / selling used CISCO gear!! email me for a quote Brian Feeny, CCIE #8036 Scarlett Parria [EMAIL PROTECTED] [EMAIL PROTECTED] 318-213-4709 318-213-4701 Netjam, LLC http://www.netjam.net 333 Texas St.VISA/MC/AMEX/COD Suite 1401 30 day warranty Shreveport, LA 71101 Cisco Channel Partner toll free: 866-2NETJAM phone:318-212-0245 fax:318-212-0246 I'm buying / selling used CISCO gear
RE: CHALLENGE PROBLEM (was Re: For FR Grus.... [7:16635]) [7:16755]
is it something to do with using classless rather than classful routing protocols? regards, suaveguru --- Patrick Ramsey wrote: How about get rid of igrp and configure ospf in nbma mode? :) -Patrick Brian 08/21/01 02:10PM No one has gotten this problem yet. Remeber, making it so the clients are on differnt layer 3 networks works, but when they are on the same it doesn't. What mechanics are involved in how the packet will be treated different if on the same network vs. different networks. I'll still leave the answer open, someone will get this. Brian On Tue, 21 Aug 2001, Wayne Wenthin wrote: To me this looks very similar to bridging with DSL. Since you cannot receive the ARP the router must proxy this. At 09:52 AM 8/21/2001, McCallum, Robert wrote: you can correct me here if I am wrong but split horizon is only used in distance vector protocols NO??? The problem here without giving the answer is that a router is expected to pass a packet out of an interface which is on its own subnet !! Doesn't compute! What is the routing protocol being used to route ip?? This is where the answer will lye -Original Message- From: Donald B Johnson jr [mailto:[EMAIL PROTECTED]] Sent: 21 August 2001 17:06 To: [EMAIL PROTECTED] Subject: Re: CHALLENGE PROBLEM (was Re: For FR Grus [7:16635]) [7:16681] I don't think bridge will work on this network because of split horizon. - Original Message - From: Brian To: Sent: Tuesday, August 21, 2001 7:51 AM Subject: CHALLENGE PROBLEM (was Re: For FR Grus [7:16635]) [7:16659] On Tue, 21 Aug 2001, Cisco Lover wrote: Hi Guys.. Come with some New Queston.. hmm, ok, so your looking for some challenging questions? Ok, I will post one, its got FR in it. First I'll post the problem, followed by the config: THE PROBLEM === Users on DLCI's 200, 224, 201, 225 cannot communicate to eachother. They can talk just fine to the rest of the network, but no packets can pass between them. Later discovery reveals that so long as they are on different layer 3 network addressing, communcation can occur, but if they are on the same network, such as 192.168.3.0, then they cannot communicate What is the problem? I will reply to let everyone know who got the correct answer. Below is the configuration: ! version 11.3 ! interface Ethernet2/0 ip address 192.168.1.242 255.255.255.0 ! interface Serial4/0 no ip address encapsulation frame-relay IETF keepalive 15 frame-relay map bridge 200 broadcast IETF frame-relay map bridge 224 broadcast IETF frame-relay map bridge 201 broadcast IETF frame-relay map bridge 225 broadcast IETF frame-relay lmi-type ansi bridge-group 1 ! interface BVI1 ip address 192.168.3.242 255.255.255.0 secondary ip address 192.168.2.242 255.255.255.0 ! router igrp 1 network 192.1.0.0 network 192.2.0.0 network 193.3.0.0 ! ip classless ! bridge irb bridge 1 protocol ieee bridge 1 route ip ! For eg, our FR switch is setup for Full mesh,But out network is setup as Hub Spoke FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] --- I'm buying / selling used CISCO gear!! email me for a quote Brian Feeny, CCIE #8036 Scarlett Parria [EMAIL PROTECTED] [EMAIL PROTECTED] 318-213-4709 318-213-4701 Netjam, LLC http://www.netjam.net 333 Texas St.VISA/MC/AMEX/COD Suite 1401 30 day warranty Shreveport, LA 71101 Cisco Channel Partner toll free: 866-2NETJAM phone:318-212-0245 fax:318-212-0246 I'm buying / selling used CISCO gear!! email me for a quote Brian Feeny, CCIE #8036 Scarlett Parria [EMAIL PROTECTED] [EMAIL PROTECTED] 318-213-4709 318-213-4701 Netjam, LLC http://www.netjam.net 333 Texas St. VISA/MC/AMEX/COD Suite 1401 30 day warranty Shreveport, LA 71101Cisco Channel Partner toll free: 866-2NETJAM phone: 318-212-0245 fax: 318-212-0246 [EMAIL PROTECTED] __ Do You Yahoo!? Make international calls for as low as $.04/minute with Yahoo! Messenger http://phonecard.yahoo.com/ Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=16755t=16755 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct
RE: CHALLENGE PROBLEM (was Re: For FR Grus.... [7:16635]) [7:16767]
On Tue, 21 Aug 2001, suaveguru wrote: is it something to do with using classless rather than classful routing protocols? no, it was answered already. It has to do with bridges blocking on ports data is sourced from. Brian --- I'm buying / selling used CISCO gear!! email me for a quote Brian Feeny, CCIE #8036 Scarlett Parria [EMAIL PROTECTED] [EMAIL PROTECTED] 318-213-4709 318-213-4701 Netjam, LLC http://www.netjam.net 333 Texas St. VISA/MC/AMEX/COD Suite 140130 day warranty Shreveport, LA 71101 Cisco Channel Partner toll free: 866-2NETJAM phone: 318-212-0245 fax: 318-212-0246 Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=16767t=16767 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: CHALLENGE PROBLEM (was Re: For FR Grus.... [7:16635]) [7:16768]
Sounds like Spanning tree is screwing it up. Since this is a multipoint interface. It think spanning tree will consider it as one port. Any packet that comes in the router and is destined for the same subnet doesn't hit the BVI and is bridged. 1st rule of bridge forwarding : If the destination MAC address is unknown, forward out all ports except the ingress port. Since all the packets come in the same port as far a spanning tree is concerned, unknown or ANY packets for that matter, will not be set out the same port. Packets on different subnets hit the BVI and are routed and so will bypass the bridging rule. A bridge will NEVER forward a frame out the same port in came it. Solution: Set up P to P subinterfaces. These should be treated by bridge as different ports and frames will get forwarded. IGRP and split horizon have nothing to do with it. At least I think this is the problem :) Tony M #6172 - Original Message - From: suaveguru To: Sent: Tuesday, August 21, 2001 7:55 PM Subject: RE: CHALLENGE PROBLEM (was Re: For FR Grus [7:16635]) [7:16755] is it something to do with using classless rather than classful routing protocols? regards, suaveguru --- Patrick Ramsey wrote: How about get rid of igrp and configure ospf in nbma mode? :) -Patrick Brian 08/21/01 02:10PM No one has gotten this problem yet. Remeber, making it so the clients are on differnt layer 3 networks works, but when they are on the same it doesn't. What mechanics are involved in how the packet will be treated different if on the same network vs. different networks. I'll still leave the answer open, someone will get this. Brian On Tue, 21 Aug 2001, Wayne Wenthin wrote: To me this looks very similar to bridging with DSL. Since you cannot receive the ARP the router must proxy this. At 09:52 AM 8/21/2001, McCallum, Robert wrote: you can correct me here if I am wrong but split horizon is only used in distance vector protocols NO??? The problem here without giving the answer is that a router is expected to pass a packet out of an interface which is on its own subnet !! Doesn't compute! What is the routing protocol being used to route ip?? This is where the answer will lye -Original Message- From: Donald B Johnson jr [mailto:[EMAIL PROTECTED]] Sent: 21 August 2001 17:06 To: [EMAIL PROTECTED] Subject: Re: CHALLENGE PROBLEM (was Re: For FR Grus [7:16635]) [7:16681] I don't think bridge will work on this network because of split horizon. - Original Message - From: Brian To: Sent: Tuesday, August 21, 2001 7:51 AM Subject: CHALLENGE PROBLEM (was Re: For FR Grus [7:16635]) [7:16659] On Tue, 21 Aug 2001, Cisco Lover wrote: Hi Guys.. Come with some New Queston.. hmm, ok, so your looking for some challenging questions? Ok, I will post one, its got FR in it. First I'll post the problem, followed by the config: THE PROBLEM === Users on DLCI's 200, 224, 201, 225 cannot communicate to eachother. They can talk just fine to the rest of the network, but no packets can pass between them. Later discovery reveals that so long as they are on different layer 3 network addressing, communcation can occur, but if they are on the same network, such as 192.168.3.0, then they cannot communicate What is the problem? I will reply to let everyone know who got the correct answer. Below is the configuration: ! version 11.3 ! interface Ethernet2/0 ip address 192.168.1.242 255.255.255.0 ! interface Serial4/0 no ip address encapsulation frame-relay IETF keepalive 15 frame-relay map bridge 200 broadcast IETF frame-relay map bridge 224 broadcast IETF frame-relay map bridge 201 broadcast IETF frame-relay map bridge 225 broadcast IETF frame-relay lmi-type ansi bridge-group 1 ! interface BVI1 ip address 192.168.3.242 255.255.255.0 secondary ip address 192.168.2.242 255.255.255.0 ! router igrp 1 network 192.1.0.0 network 192.2.0.0 network 193.3.0.0 ! ip classless ! bridge irb bridge 1 protocol ieee bridge 1 route ip ! For eg, our FR switch is setup for Full mesh,But out network is setup as Hub Spoke FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] --- I'm buying / selling used CISCO gear!! email me for a quote Brian Feeny, CCIE #8036 Scarlett Parria
Re: CHALLENGE PROBLEM (was Re: For FR Grus.... [7:16635]) [7:16771]
yes tony thats it :) On Wed, 22 Aug 2001, Tony Medeiros wrote: Sounds like Spanning tree is screwing it up. Since this is a multipoint interface. It think spanning tree will consider it as one port. Any packet that comes in the router and is destined for the same subnet doesn't hit the BVI and is bridged. 1st rule of bridge forwarding : If the destination MAC address is unknown, forward out all ports except the ingress port. Since all the packets come in the same port as far a spanning tree is concerned, unknown or ANY packets for that matter, will not be set out the same port. Packets on different subnets hit the BVI and are routed and so will bypass the bridging rule. A bridge will NEVER forward a frame out the same port in came it. Solution: Set up P to P subinterfaces. These should be treated by bridge as different ports and frames will get forwarded. IGRP and split horizon have nothing to do with it. At least I think this is the problem :) Tony M #6172 - Original Message - From: suaveguru To: Sent: Tuesday, August 21, 2001 7:55 PM Subject: RE: CHALLENGE PROBLEM (was Re: For FR Grus [7:16635]) [7:16755] is it something to do with using classless rather than classful routing protocols? regards, suaveguru --- Patrick Ramsey wrote: How about get rid of igrp and configure ospf in nbma mode? :) -Patrick Brian 08/21/01 02:10PM No one has gotten this problem yet. Remeber, making it so the clients are on differnt layer 3 networks works, but when they are on the same it doesn't. What mechanics are involved in how the packet will be treated different if on the same network vs. different networks. I'll still leave the answer open, someone will get this. Brian On Tue, 21 Aug 2001, Wayne Wenthin wrote: To me this looks very similar to bridging with DSL. Since you cannot receive the ARP the router must proxy this. At 09:52 AM 8/21/2001, McCallum, Robert wrote: you can correct me here if I am wrong but split horizon is only used in distance vector protocols NO??? The problem here without giving the answer is that a router is expected to pass a packet out of an interface which is on its own subnet !! Doesn't compute! What is the routing protocol being used to route ip?? This is where the answer will lye -Original Message- From: Donald B Johnson jr [mailto:[EMAIL PROTECTED]] Sent: 21 August 2001 17:06 To: [EMAIL PROTECTED] Subject: Re: CHALLENGE PROBLEM (was Re: For FR Grus [7:16635]) [7:16681] I don't think bridge will work on this network because of split horizon. - Original Message - From: Brian To: Sent: Tuesday, August 21, 2001 7:51 AM Subject: CHALLENGE PROBLEM (was Re: For FR Grus [7:16635]) [7:16659] On Tue, 21 Aug 2001, Cisco Lover wrote: Hi Guys.. Come with some New Queston.. hmm, ok, so your looking for some challenging questions? Ok, I will post one, its got FR in it. First I'll post the problem, followed by the config: THE PROBLEM === Users on DLCI's 200, 224, 201, 225 cannot communicate to eachother. They can talk just fine to the rest of the network, but no packets can pass between them. Later discovery reveals that so long as they are on different layer 3 network addressing, communcation can occur, but if they are on the same network, such as 192.168.3.0, then they cannot communicate What is the problem? I will reply to let everyone know who got the correct answer. Below is the configuration: ! version 11.3 ! interface Ethernet2/0 ip address 192.168.1.242 255.255.255.0 ! interface Serial4/0 no ip address encapsulation frame-relay IETF keepalive 15 frame-relay map bridge 200 broadcast IETF frame-relay map bridge 224 broadcast IETF frame-relay map bridge 201 broadcast IETF frame-relay map bridge 225 broadcast IETF frame-relay lmi-type ansi bridge-group 1 ! interface BVI1 ip address 192.168.3.242 255.255.255.0 secondary ip address 192.168.2.242 255.255.255.0 ! router igrp 1 network 192.1.0.0 network 192.2.0.0 network 193.3.0.0 ! ip classless ! bridge irb bridge 1 protocol ieee bridge 1 route ip ! For eg, our FR switch is setup for Full mesh,But out network is setup as Hub Spoke FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure
Re: challenge problem
Ok, I'll take a stab at it. First a question. Have there been any BERT tests end to end (NID to frame switch interface)? If so, was an all zero's test done? Very simply, I suspect that one of the circuit's repeaters is misconfigured ESF, AMI. Everything works fine until the 1's density isn't high enough to keep zero suppression from kicking in. Then one of the bits is being set to 1, causing the CRC. Why would telnet show a problem? Easy, IP packets are 64 bytes minimum. Telnet sends a packet for each character, the rest of the data block has to be padded with something. Some telnet clients padd with zeros, hence the CRC errors when zero suppression kicks in when these packets traverse the link. Other telnet clients pad with all 1's or ctrl-Z or ctrl-D, and won't cause the zero suppression, therefore no CRC's. There's only two ways out of this, the carrier tracks down the misconfigured repeater, or you have them reconfigure for 56K channels. Let me know if I'm right and about that job. :)) Rodgers Moore, CCDP, CCNP-Security ""Fred Flinstone"" [EMAIL PROTECTED] wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... ok here it goes we have a customer we manage that is incurring CRC'c, input errors etc on there serial interface. 1. stress tested the circuit many times from the frame cloud through the csu as good 2. tries verious cables 3. there are no interface modules i believe its a 2500 something router but i can check 4. the only times crc's cross the link (verified by a protocol analyzer) is when we telnet from our management platform to the site...even if i just enter one character in the telnet session crc's increment 5. if you telnet from a neighboring router or dial in this produces no crc's what so ever. - we have 3rd level engineers looking at this i bet if you find an answer I could get you a nice paying job...:) (well maybe) - any help would be appreiciated - thanks...kyle _ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com. Share information about yourself, create your own public profile at http://profiles.msn.com. **NOTE: New CCNA/CCDA List has been formed. For more information go to http://www.groupstudy.com/list/Associates.html _ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] **NOTE: New CCNA/CCDA List has been formed. For more information go to http://www.groupstudy.com/list/Associates.html _ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: challenge problem
very impressive Mr Rodgers! -Original Message- From: Rodgers Moore [mailto:[EMAIL PROTECTED]] Sent: 11 October 2000 07:31 To: [EMAIL PROTECTED] Subject: Re: challenge problem Ok, I'll take a stab at it. First a question. Have there been any BERT tests end to end (NID to frame switch interface)? If so, was an all zero's test done? Very simply, I suspect that one of the circuit's repeaters is misconfigured ESF, AMI. Everything works fine until the 1's density isn't high enough to keep zero suppression from kicking in. Then one of the bits is being set to 1, causing the CRC. Why would telnet show a problem? Easy, IP packets are 64 bytes minimum. Telnet sends a packet for each character, the rest of the data block has to be padded with something. Some telnet clients padd with zeros, hence the CRC errors when zero suppression kicks in when these packets traverse the link. Other telnet clients pad with all 1's or ctrl-Z or ctrl-D, and won't cause the zero suppression, therefore no CRC's. There's only two ways out of this, the carrier tracks down the misconfigured repeater, or you have them reconfigure for 56K channels. Let me know if I'm right and about that job. :)) Rodgers Moore, CCDP, CCNP-Security ""Fred Flinstone"" [EMAIL PROTECTED] wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... ok here it goes we have a customer we manage that is incurring CRC'c, input errors etc on there serial interface. 1. stress tested the circuit many times from the frame cloud through the csu as good 2. tries verious cables 3. there are no interface modules i believe its a 2500 something router but i can check 4. the only times crc's cross the link (verified by a protocol analyzer) is when we telnet from our management platform to the site...even if i just enter one character in the telnet session crc's increment 5. if you telnet from a neighboring router or dial in this produces no crc's what so ever. - we have 3rd level engineers looking at this i bet if you find an answer I could get you a nice paying job...:) (well maybe) - any help would be appreiciated - thanks...kyle _ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com. Share information about yourself, create your own public profile at http://profiles.msn.com. **NOTE: New CCNA/CCDA List has been formed. For more information go to http://www.groupstudy.com/list/Associates.html _ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] **NOTE: New CCNA/CCDA List has been formed. For more information go to http://www.groupstudy.com/list/Associates.html _ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] **NOTE: New CCNA/CCDA List has been formed. For more information go to http://www.groupstudy.com/list/Associates.html _ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: challenge problem
Title: RE: challenge problem One thing you might try is using extended ping and use different data patterns. Try 0x, 0x, 0x, 0x0810, 0x4040. I've discovered problems where certain data streams would cause problems even after the LEC says they tested. If you uncover something you'll have to tell the LEC how to test the link to find it. Jim -Original Message- From: Fred Flinstone [SMTP:[EMAIL PROTECTED]] Sent: Tuesday, October 10, 2000 9:32 PM To: [EMAIL PROTECTED] Subject: challenge problem ok here it goes we have a customer we manage that is incurring CRC'c, input errors etc on there serial interface. 1. stress tested the circuit many times from the frame cloud through the csu as good 2. tries verious cables 3. there are no interface modules i believe its a 2500 something router but i can check 4. the only times crc's cross the link (verified by a protocol analyzer) is when we telnet from our management platform to the site...even if i just enter one character in the telnet session crc's increment 5. if you telnet from a neighboring router or dial in this produces no crc's what so ever. - we have 3rd level engineers looking at this i bet if you find an answer I could get you a nice paying job...:) (well maybe) - any help would be appreiciated - thanks...kyle _ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com. Share information about yourself, create your own public profile at http://profiles.msn.com. **NOTE: New CCNA/CCDA List has been formed. For more information go to http://www.groupstudy.com/list/Associates.html _ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] *** WARNING: All e-mail sent to and from this address will be received or otherwise recorded by the A.G. Edwards corporate e-mail system and is subject to archival, monitoring or review by, and/or disclosure to, someone other than the recipient. ***
RE: challenge problem
Title: RE: challenge problem Jim, I'm sure you meant to use 0x for the all 1's test. Just clarifying. -Original Message-From: Rampley, Jim [mailto:[EMAIL PROTECTED]]Sent: Wednesday, October 11, 2000 10:35 AMTo: 'Fred Flinstone'; [EMAIL PROTECTED]Subject: RE: challenge problem One thing you might try is using extended ping and use different data patterns. Try 0x, 0x, 0x, 0x0810, 0x4040. I've discovered problems where certain data streams would cause problems even after the LEC says they tested. If you uncover something you'll have to tell the LEC "how" to test the link to find it. Jim -Original Message- From: Fred Flinstone [SMTP:[EMAIL PROTECTED]] Sent: Tuesday, October 10, 2000 9:32 PM To: [EMAIL PROTECTED] Subject: challenge problem ok here it goes we have a customer we manage that is incurring CRC'c, input errors etc on there serial interface. 1. stress tested the circuit many times from the frame cloud through the csu as good 2. tries verious cables 3. there are no interface modules i believe its a 2500 something router but i can check 4. the only times crc's cross the link (verified by a protocol analyzer) is when we telnet from our management platform to the site...even if i just enter one character in the telnet session crc's increment 5. if you telnet from a neighboring router or dial in this produces no crc's what so ever. - we have 3rd level engineers looking at this i bet if you find an answer I could get you a nice paying job...:) (well maybe) - any help would be appreiciated - thanks...kyle _ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com. Share information about yourself, create your own public profile at http://profiles.msn.com. **NOTE: New CCNA/CCDA List has been formed. For more information go to http://www.groupstudy.com/list/Associates.html _ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] ***WARNING: All e-mail sent to and from this address will be received orotherwise recorded by the A.G. Edwards corporate e-mail system and issubject to archival, monitoring or review by, and/or disclosure to,someone other than the recipient.***
Re: challenge problem
Another thing to look at is how they are testing. If you have a full T1 then you can have them run a 'round robin with multi pattern' stress test. This will break any marginal component. Some telco's will tell you that you can't test that way on a frame circuit, but that is only if you are not running all 24 cahnnels. Also, are they doing head to head testing, this will force the LEC to actually plug into the smartjack and test from there. But there is charges to this one if they don't find a problem. --- Fred Flinstone [EMAIL PROTECTED] wrote: ok here it goes we have a customer we manage that is incurring CRC'c, input errors etc on there serial interface. 1. stress tested the circuit many times from the frame cloud through the csu as good 2. tries verious cables 3. there are no interface modules i believe its a 2500 something router but i can check 4. the only times crc's cross the link (verified by a protocol analyzer) is when we telnet from our management platform to the site...even if i just enter one character in the telnet session crc's increment 5. if you telnet from a neighboring router or dial in this produces no crc's what so ever. - we have 3rd level engineers looking at this i bet if you find an answer I could get you a nice paying job...:) (well maybe) - any help would be appreiciated - thanks...kyle _ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com. Share information about yourself, create your own public profile at http://profiles.msn.com. **NOTE: New CCNA/CCDA List has been formed. For more information go to http://www.groupstudy.com/list/Associates.html _ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] __ Do You Yahoo!? Get Yahoo! Mail - Free email you can access from anywhere! http://mail.yahoo.com/ _ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
challenge problem
ok here it goes we have a customer we manage that is incurring CRC'c, input errors etc on there serial interface. 1. stress tested the circuit many times from the frame cloud through the csu as good 2. tries verious cables 3. there are no interface modules i believe its a 2500 something router but i can check 4. the only times crc's cross the link (verified by a protocol analyzer) is when we telnet from our management platform to the site...even if i just enter one character in the telnet session crc's increment 5. if you telnet from a neighboring router or dial in this produces no crc's what so ever. - we have 3rd level engineers looking at this i bet if you find an answer I could get you a nice paying job...:) (well maybe) - any help would be appreiciated - thanks...kyle _ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com. Share information about yourself, create your own public profile at http://profiles.msn.com. **NOTE: New CCNA/CCDA List has been formed. For more information go to http://www.groupstudy.com/list/Associates.html _ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: challenge problem
On Tue, 10 Oct 2000, Fred Flinstone wrote: ok here it goes we have a customer we manage that is incurring CRC'c, input errors etc on there serial interface. new install or working install? 1. stress tested the circuit many times from the frame cloud through the csu as good What type of loopbacks did you do? (different loopbacks only go thru different parts of circuitry in a csu) 2. tries verious cables 3. there are no interface modules i believe its a 2500 something router but i can check if its a 2500, and you suspect possible serial port problem you can always try the other serial port for good measure, although hardware failure is probably low on the list I would say. 4. the only times crc's cross the link (verified by a protocol analyzer) is when we telnet from our management platform to the site...even if i just enter one character in the telnet session crc's increment Are you seeing carrier transitions on one end and interface resets on the other? 5. if you telnet from a neighboring router or dial in this produces no crc's what so ever. - we have 3rd level engineers looking at this i bet if you find an answer I could get you a nice paying job...:) (well maybe) - any help would be appreiciated Brian - thanks...kyle _ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com. Share information about yourself, create your own public profile at http://profiles.msn.com. **NOTE: New CCNA/CCDA List has been formed. For more information go to http://www.groupstudy.com/list/Associates.html _ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] --- Brian Feeny, CCNP, CCDP [EMAIL PROTECTED] Network Administrator ShreveNet Inc. (ASN 11881) **NOTE: New CCNA/CCDA List has been formed. For more information go to http://www.groupstudy.com/list/Associates.html _ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: challenge problem
Have you tried putting a hard-loop on the output of the CSU (that is, disconnecting the CSU from the Router and putting a looping plug into the port that the Router had been jacked into)? Bill -Original Message- From: Fred Flinstone [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 10, 2000 7:32 PM To: [EMAIL PROTECTED] Subject: challenge problem ok here it goes we have a customer we manage that is incurring CRC'c, input errors etc on there serial interface. 1. stress tested the circuit many times from the frame cloud through the csu as good 2. tries verious cables 3. there are no interface modules i believe its a 2500 something router but i can check 4. the only times crc's cross the link (verified by a protocol analyzer) is when we telnet from our management platform to the site...even if i just enter one character in the telnet session crc's increment 5. if you telnet from a neighboring router or dial in this produces no crc's what so ever. - we have 3rd level engineers looking at this i bet if you find an answer I could get you a nice paying job...:) (well maybe) - any help would be appreiciated - thanks...kyle _ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com. Share information about yourself, create your own public profile at http://profiles.msn.com. **NOTE: New CCNA/CCDA List has been formed. For more information go to http://www.groupstudy.com/list/Associates.html _ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] **NOTE: New CCNA/CCDA List has been formed. For more information go to http://www.groupstudy.com/list/Associates.html _ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: challenge problem
Have you checked for clocking issues between the Router and the DSU? (garbage-in garbage-out) I have seen that issue many times. Check the DSU's config vs a known good config. Are the errors also being seen on the carrier's frame-switch interface? The guys who test the circuit do not ussually have access to that info They just test from their test point to your csu... Good Luck Dave Brian wrote: On Tue, 10 Oct 2000, Fred Flinstone wrote: ok here it goes we have a customer we manage that is incurring CRC'c, input errors etc on there serial interface. new install or working install? 1. stress tested the circuit many times from the frame cloud through the csu as good What type of loopbacks did you do? (different loopbacks only go thru different parts of circuitry in a csu) 2. tries verious cables 3. there are no interface modules i believe its a 2500 something router but i can check if its a 2500, and you suspect possible serial port problem you can always try the other serial port for good measure, although hardware failure is probably low on the list I would say. 4. the only times crc's cross the link (verified by a protocol analyzer) is when we telnet from our management platform to the site...even if i just enter one character in the telnet session crc's increment Are you seeing carrier transitions on one end and interface resets on the other? 5. if you telnet from a neighboring router or dial in this produces no crc's what so ever. - we have 3rd level engineers looking at this i bet if you find an answer I could get you a nice paying job...:) (well maybe) - any help would be appreiciated Brian - thanks...kyle _ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com. Share information about yourself, create your own public profile at http://profiles.msn.com. **NOTE: New CCNA/CCDA List has been formed. For more information go to http://www.groupstudy.com/list/Associates.html _ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] --- Brian Feeny, CCNP, CCDP [EMAIL PROTECTED] Network Administrator ShreveNet Inc. (ASN 11881) **NOTE: New CCNA/CCDA List has been formed. For more information go to http://www.groupstudy.com/list/Associates.html _ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED] **NOTE: New CCNA/CCDA List has been formed. For more information go to http://www.groupstudy.com/list/Associates.html _ UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html FAQ, list archives, and subscription info: http://www.groupstudy.com Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
