Dear all,
I would like to know if I configure like this
Router <-> Firewall <-> Router or route-switch
Is it Firewall, such as PIX or CheckPoint do not pass routing table
between routers? The better solution is using IOS FireWall?
Thanks
Regards,
mak
_
FAQ, li
Ok folks here is my problem,
I have a server that I can ping from the local router, this
router is advertising the network that this subnet belongs to via eigrp. I go to
a remote router 2 hops away and I cannot ping it. There are no access-lists to
prevent traffic from the loval router or t
I don't really know how the policy routing run.
This is my quetion: i want to apply policy routing according to the source,
but when the set next-hop is not accessible, it should be route as normal
routing process( route according to dest. ip address).
This is the config i do.
int ser 1/0
ip pol
You probably have to tell the server the address of its default router
(gateway).
Priscilla
At 08:20 PM 10/27/00, Raul F. Fernandez wrote:
>Ok folks here is my problem,
>
>I have a server that I can ping from the local router, this router is
>advertising the network that this subnet belongs t
ailto:[EMAIL PROTECTED]]
Sent: Friday, October 27, 2000 7:20 PM
To: [EMAIL PROTECTED]
Subject: Routing question
Ok folks here is my problem,
I have a server that I can ping from the local router, this router is
advertising the network that this subnet belongs to via eigrp. I go to a
remote rou
, 2000 8:20
PM
Subject: Routing question
Ok folks here is my problem,
I have a server that I can ping from the local router, this
router is advertising the network that this subnet belongs to via eigrp. I go
to a remote router 2 hops away and I cannot ping it. There are no access
Page 192 of Caslow: there's a config there that shows the line "dialer map
snapshot 60 2002." My question is, what is this "60" and where did it come
from? The next page shows the output from "show snapshot," and it says "For
dialer address 60," but that doesn't really explain a whole lot. I tr
Hi guys,
I had a problem with IPX and I'm totally lost with it.
Scenario:
My customer change their analogue to digital (64kbps) lease line few days
ago and they were doing bridging
with Microm router. My role there is to change the Microm router to Cisco
1602 routing the IPX traffic to the remot
vtam,
You must specify multiple hops on the "set ip next-hop" line.like:
route-map test permit 10
match ip address 1
set ip next-hop 172.1.1.1 172.1.1.2
if 172.1.1.1 is down, it will use 172.1.1.2
Brian
On Mon, 4 Dec 2000, vtam wrote:
> I don't really know how the policy routin
But the route table is learn through dynamic routing, so i cannot specify
the next_hop. So are there any solution? Thanks.
"Brian" <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
>
> vtam,
>
> You must specify multiple hops on the "set ip next-hop" line.l
On Tue, 5 Dec 2000, vtam wrote:
> But the route table is learn through dynamic routing, so i cannot specify
> the next_hop. So are there any solution? Thanks.
I don't understand. You want to policy route based on source address
right? What address would you like the traffic to be sent to? How
read, and hence a bit more confusing.
Chuck
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of vtam
Sent: Monday, December 04, 2000 5:23 PM
To: [EMAIL PROTECTED]
Subject: Re: Policy routing question
But the route table is learn through dyna
What i want to do is how to backup. It is always have serveral path to a
Network 1, let's said path A,B,C. I want the traffic from 172.16.0.0 to 1
always go path A, but is path A down, i want the traffic go the best path in
routing table to Net1( Maybe B or C, according to the IGP).
So how should
First thing I noticed was that any packet that would match your
access-list 2 would also match access-list 1 in the first sequence ( 10
in this case ) of the route map. So no packets with the first two
octets of 172.16.. would ever make it to sequence 20 of the route map
where access-list 2 is c
60 is active time, for the rouer end to end to exchange routing update
between server and client.
2002 is quiet time, router freeze, until next active period.
""Bradley J. Wilson"" <[EMAIL PROTECTED]> ?
00cd01c0bac3$16b00f80$fd02f7a5@bwilson">news:00cd01c0bac3$16b00f80$fd02f7a5@bwilson...
>
he router in which order to execute the dialer map
statements.
Anyone else have any concurring or dissenting opinions or experiences? :-)
- Original Message -
From: Vincent
Newsgroups: groupstudy.cisco
To: [EMAIL PROTECTED]
Sent: Sunday, April 01, 2001 12:17 PM
Subject: Re: Snapshot Routing Ques
-
From: <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Sunday, August 06, 2000 6:21 PM
Subject: IPX routing question.
> Hi guys,
>
> I had a problem with IPX and I'm totally lost with it.
>
> Scenario:
&g
42 AM
To: [EMAIL PROTECTED]
Subject: Re: IPX routing question.
I guess your problem is that now the computers on one network cannot see
those on opposite network right? Anyhow, Novell 3.X and 4.X require the
same identical EXTERNAL network numbers. By the looks of what you have
given us you ne
Scenario 1
==
---int0-(R1)-int1 int0-(R2)-int1 ---
Router 1
Int 0: 192.168.1.1
Int 1: 192.168.2.1
Router 2
Int 0: 192.168.2.2
Int 1: 192.168.3.1
Scenario 2
==
---int0-(R1)-int1 int0-(R2)-int1 ---
Router 1
Int 0: 192.168.1.1
Int 1: 192.168.2.1
Router 2
Int 0:
Hello Group Study!
Currently, I have a Cisco router 7513 speaking BGP4 routing protocol with 2
providers. I need to route all the national traficc for provider 1 and all
the International traficc for provider 2. How can I configure that in the
router. Can I do that based in source and destinat
Hi all,
I have two 2600 series routers setup with 2 serials connections to each
other for redundancy. It means when one serial connection failed, the other
one still connected. However, I can't get that to work. Below are the
router1 and router2 configuration:
router1
fa0/0 = ip address 10.10.
Hi all,
I have a question about routing issue. Let's say I have two routers
interconnected with serial cables. Router1's s0/0 connected to Router2's
s0/0 and Router1's s0/1 connected to Router2's s0/1. It is for redundancy
purpose. MachineA at Router1 would be able to communicate to MachineB at
R
7204 connected via Faste to another layer 3 device.
IP on 7204: 64.114.57.2
IP on other device: 64.114.57.1
Subnet mask: 255.255.255.248
One static route on 7204:
ip route 0.0.0.0 0.0.0.0 64.114.57.1
7204 is working and fine and reachable.
7204 has an ATM interface (oc3) to a 6260 DSlam.
ATM
e it over the other site.
Dave: Thanks for the reminder.
Glad to be in this group.
Ryan
-- Forwarded by Ryan Ngai Hon Kong/GHL Technologies/MY
on 08-08-2000 09:27 AM ---
To: Ryan Ngai Hon Kong/GHL Technologies/MY
cc:
Subject: Re: IPX routing q
Of
Kent Browning
Sent: Sunday, April 07, 2002 2:17 PM
To: [EMAIL PROTECTED]
Subject: Routing Question [7:40766]
Scenario 1
==
---int0-(R1)-int1 int0-(R2)-int1 ---
Router 1
Int 0: 192.168.1.1
Int 1: 192.168.2.1
Router 2
Int 0: 192.168.2.2
Int 1: 192.168.3.1
Scenario 2
What is Router 1 and Router 2 were 2 different companies? They would have to
have different subnet IDs?
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=40770&t=40766
--
FAQ, list archives, and subscription info: http://www.groups
>> In Scenario 2, how many segments are there?
>> Is there anything wrong with routing router 1 to router 2 and not
using a
>> common segment?
I just won't work, unless you'll use secondary ip addresses.
-- Lidiya White
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=40772&t
then you would use redistribution or static routes.
Larry Letterman
Cisco Systems
[EMAIL PROTECTED]
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Kent Browning
Sent: Sunday, April 07, 2002 3:08 PM
To: [EMAIL PROTECTED]
Subject: RE: Routing Question
How many bits are defining network IDs and how many are defining node IDs?
(that is, what's the subnet mask?)
With some subnet masks, you have 3 segments in Scenario 2. With other
subnet masks, you have a broken network (the routers can't talk to each
other across the middle).
Priscilla
At 0
At 06:08 PM 4/7/02, Kent Browning wrote:
>What is Router 1 and Router 2 were 2 different companies? They would have to
>have different subnet IDs?
No, the router interfaces on the shared link should be on the same subnet.
Logically they share the link between themselves. It's sort of a no-mans
Thanks a lot Priscilla. This is what I was looking for.
I suppose my part 2 to the previous question would make more sense if I used
live IPs like Scenario 3
Scenario 3
==
---int0-(R1)-int1 int0-(R2)-int1 ---
Router 1
Int 0: 192.168.1.1
Int 1: 200.100.2.1
Router 2
Int 0:
This is why we love Priscilla. :-)
Here we were making the ASSumption that we were using a classfull subnet
mask.
Thank you, Priscilla, for once again letting us know we aren't really
worthy! :-)
--Tim
Priscilla Oppenheimer wrote:
>
> How many bits are defining network IDs and how many are
PROTECTED]
Subject: RE: Routing Question [7:40766]
Thanks a lot Priscilla. This is what I was looking for.
I suppose my part 2 to the previous question would make more sense if I
used
live IPs like Scenario 3
Scenario 3
==
---int0-(R1)-int1 int0-(R2)-int1 ---
Router 1
Int 0
See comments below.
At 11:19 PM 4/7/02, Kent Browning wrote:
>Thanks a lot Priscilla. This is what I was looking for.
>
>I suppose my part 2 to the previous question would make more sense if I used
>live IPs like Scenario 3
>
>Scenario 3
>==
>
>---int0-(R1)-int1 int0-(R2)-int1 ---
R u planning for both uplnk and dnlnk?
Kiran
>From: "Jose Tomas Pinal Salvador"
>Reply-To: "Jose Tomas Pinal Salvador"
>To: [EMAIL PROTECTED]
>Subject: Routing Question. [7:56639]
>Date: Thu, 31 Oct 2002 22:59:00 GMT
>
>Hello Group Study!
>
>
Yes for both uplink and downlink, maybe for uplink is easier than downlink
(making statics routes) but by the moment I don4t know how to make that in
both direction.
Thanks.
>From: "Kirankumar Patel"
>To: [EMAIL PROTECTED], [EMAIL PROTECTED]
>Subject: Re: Routing Questi
You can route based on source address if you use Policy based routing. I'm
not sure of the exact syntax, but you can look it up on CCO (www.cisco.com)
Its something like this
1. Create an access-list that matches the source address
2. route-map national permit 10
match ip address 101
Your machine B address is the same as your Router 2 f0/0 address. Give it a
valid address in that subnet and you should get better results.
--
Johnny Routin
""Chan, Ricky"" wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Hi all,
>
> I have a question about routing issue. Let'
You are saying that this configuration doesn't work? Nothing seems amiss.
Are you sure the interfaces are up and working? Clockrate and all. Are the
routes not getting in the routing table? A show ip route would help.
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=50438&t=
EMAIL PROTECTED]
Subject: routing question [7:50434]
Hi all,
I have a question about routing issue. Let's say I have two routers
interconnected with serial cables. Router1's s0/0 connected to Router2's
s0/0 and Router1's s0/1 connected to Router2's s0/1. It is for redundanc
ce.
Ricky
-Original Message-
From: Roberts, Larry [mailto:[EMAIL PROTECTED]]
Sent: Thursday, August 01, 2002 3:59 PM
To: Chan, Ricky; [EMAIL PROTECTED]
Subject: RE: routing question [7:50434]
Do the machines have a default gateway? Do the remote routers show each
others LAN's in
-Original Message-
From: Chan, Ricky
Sent: Thursday, August 01, 2002 3:30 PM
To: [EMAIL PROTECTED]
Subject: routing question [7:50434]
Hi all,
I have a question about routing issue. Let's say I have two routers
interconnected with serial cables. Router1's s0/0 connected to
Machine B has the same address the router2's fa0/0 interface!!!
Dave
"Chan, Ricky" wrote:
>
> Hi all,
>
> I have a question about routing issue. Let's say I have two routers
> interconnected with serial cables. Router1's s0/0 connected to Router2's
> s0/0 and Router1's s0/1 connected to Rout
ubject: RE: routing question [7:50434]
Each machines have the default gateway.
MachineA ip address 10.10.10.2/24 and gateway 10.10.10.245
MachineB ip address 10.10.100.59/29 and gateway 10.10.100.58
Routers can ping it's and other serial interfaces. However, machines can't
ping across t
Please be sure that no auto-summary is configured under the Eigrp processes.
Winston
-Original Message-
From: Chan, Ricky [mailto:[EMAIL PROTECTED]]
Sent: Thursday, August 01, 2002 3:11 PM
To: [EMAIL PROTECTED]
Subject: Routing Question [7:50431]
Hi all,
I have two 2600 series
: Thursday, August 01, 2002 4:30 PM
To: Chan, Ricky; [EMAIL PROTECTED]
Subject: RE: Routing Question [7:50431]
Please be sure that no auto-summary is configured under the Eigrp processes.
Winston
-Original Message-
From: Chan, Ricky [mailto:[EMAIL PROTECTED]]
Sent: Thursday, August 01, 2002 3
t; command. Thanks
Ricky
-Original Message-
From: Winston Shaw [mailto:[EMAIL PROTECTED]]
Sent: Thursday, August 01, 2002 4:30 PM
To: Chan, Ricky; [EMAIL PROTECTED]
Subject: RE: Routing Question [7:50431]
Please be sure that no auto-summary is configured under the Eigrp processes.
Winston
Disable EIGRP auto-summary on both routers:
router eigrp 100
no auto-summary
I assume that the "duplicate address" that other group members noticed, was
just a typo.
Art Mishurov
Network Engineer
Enterprise Access Group
AT&T Solutions
ph. 614.244.4555
fax 614.244.1901
[EMAIL PROTECTED]
Messa
t;
> Larry
>
>
> -Original Message-
> From: Chan, Ricky [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, August 01, 2002 2:30 PM
> To: [EMAIL PROTECTED]
> Subject: routing question [7:50434]
>
> Hi all,
>
> I have a question about routing issue. Let's say
icky
>
> -Original Message-
> From: Winston Shaw [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, August 01, 2002 4:30 PM
> To: Chan, Ricky; [EMAIL PROTECTED]
> Subject: RE: Routing Question [7:50431]
>
> Please be sure that no auto-summary is configured under the Eigrp
p
rts, Larry [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, August 01, 2002 3:59 PM
> To: Chan, Ricky; [EMAIL PROTECTED]
> Subject: RE: routing question [7:50434]
>
>
> Do the machines have a default gateway? Do the remote routers
> show each
> others LAN's in their da
Hi Ricky,
Try changing the IP of MachineB first. It's the same as Fa0/0 on R2.
Mark.
-Original Message-
From: Chan, Ricky [mailto:[EMAIL PROTECTED]]
Sent: Friday, 2 August 2002 05:30
To: [EMAIL PROTECTED]
Subject: routing question [7:50434]
Hi all,
I have a question about ro
Mishurov Art wrote:
>
> Disable EIGRP auto-summary on both routers:
>
> router eigrp 100
> no auto-summary
Oh, I bet that's it! I wish I had thought of that. :-) I just noticed that
network 10.10.10.0 is reachable via Router 1 and Router 2. I bet Router 1
does not add the 10.10.10.56/29 to its
aking sure VLSM
goes into effect.
Of course you have to make sure the IP addressing is correct.
Winston.
-Original Message-
From: Chan, Ricky [mailto:[EMAIL PROTECTED]]
Sent: Thursday, August 01, 2002 4:49 PM
To: 'Winston Shaw'; [EMAIL PROTECTED]
Subject: RE: Routing Question [7:5
4:54 PM
To: 'Winston Shaw'; [EMAIL PROTECTED]
Subject: RE: Routing Question [7:50431]
One last question, is it necessary to put the "bandwidth" command and "clock
rate" command in all the serial interfaces? So far, I only specified them at
router1 both serial interfa
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
I've been reading the Cisco CCNP Cert Guide in partial preparation for
the BSCI exan and I've come across a bit in the Policy Routing section
that I just don't understand.
The text states:
"Policy routing does not allow traffic sent into another au
This document explains how to channel interfaces on the 6500 with MSM
cards, which means channeling 4 gigabit interfaces between the Switch and
the router module, however you can easily extrapolate the examples to any
other Catalyst/Router combo.
http://www.cisco.com/univercd/cc/td/doc/product/la
It looks as if the device configured with the 64.114.57.1/29 address has no
route back to the 64.114.57.8/29 network.
If it were my problem, I'd check to see if a ping from 64.114.57.10 reaches
the 64.114.57.1 device and what that device does with it.
Good Luck
Mike Taylor
""Keith Woodworth""
Keith,
I agree with Mike: can you check if there is a route from 64.114.57.1 back
to 64.114.57.9 ? I would add a route on the device with address 64.114.57.1
that would look like this:
ip route 64.114.57.8 255.255.248.0 64.114.57.2
Good luck.
Regards,
Georg
Message Posted at:
http://www.gro
Your layer-3 device doesn't have a route back to the 64.114.57.8 /29 network
to return traffic back to IP adddress 64.114.57.10.
Also, when you troubleshoot what looks easy I always turn on ip classless so
you don't deal those issues. I think 12.0 IOS and up has it on by default
now.
Marc Russ
ance
(a DoH/DMR Consulting Alliance)
* Phone: (+61) 8 9318 6257
* Fax: (+61) 8 9318 6390
* Mobile: (+61) 41 731 0578
* mailto:[EMAIL PROTECTED]
-Original Message-
From: John Matney [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, 20 August 2002 9:46 AM
To: [EMAIL PROTECTED]
Subject: Policy Routing Qu
you pretty much understand how it works. You might be muddying the waters a
bit by bringing BGP into the picture
comment below:
""John Matney"" wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
>
>
> I've been reading the Cisco CCN
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Thanks for the through reply and the verifying that I have a decent grip
on policy routing. I'm less concerned that i'm not following the
author's train of thought than I am the the concept in general.
I agree that I muddied the waters by bringing bg
I have three (stupid) questions in regards to MLS and Inter-VLAN routing
- sorry :) thanks so much for your help in advance.
I understand that in order for MLS to work, one will need:
For Cat 5000 or 5500: Either i) RSM (for internal MLS-RP)
or ii) with a NetFlow Feature card and directly conn
Is ther a way that I can stop all eigrp traffic from passing on the ISDN
when it is down and then to pass when the ISDN comes up? I have an access
list that denies eigrp on the BRI and the interface is set as passive in the
eigrp config. But I am having routing problems when I lose my serial lin
o: [EMAIL PROTECTED]
>Subject: MLS and InterVLAN routing question [7:7498]
>Date: Thu, 7 Jun 2001 05:08:28 -0400
>
>I have three (stupid) questions in regards to MLS and Inter-VLAN routing
>- sorry :) thanks so much for your help in advance.
>
>I understand that in order for M
ssage-
From: Bob Perez [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, December 05, 2001 1:09 PM
To: [EMAIL PROTECTED]
Subject: eigrp and isdn routing question? [7:28219]
Is ther a way that I can stop all eigrp traffic from passing on the ISDN
when it is down and then to pass when the ISDN comes up? I
I'm guessing you want EIGRP routing to occur over this link when it is
up but you do not want to define EIGRP as interesting. Get rid of the
passive and add something like:
interface BRI0/0
dialer-group 1
!
access-list 101 deny eigrp any any
access-list 101 permit ip any any
!
dialer-list 1 prot
Dave,
I see how you setup your ACL to make EIGRP traffic "uninteresting" which
will keep the ISDN from dialing. I understand that, but what would keep the
interesting traffic (which is everything besides EIGRP) from dialing and
keeping the ISDN dialed all the time? i.e. if this ISDN was only to
69 matches
Mail list logo