05-29-2022
04:15 AM
- last edited on
05-29-2022
09:58 PM
by
Translator
I want IS-IS connection between B5, C5, A5, P5
I have no ping.
I followed a IS-IS lab guide here
https://nsrc.org/workshops/2019/mnnog1/riso/networking/routing-security/en/labs/is-is.html
There may be something wrong with the net statement for addressing. I am posting the runs.
For example debug on R5 showing duplicate systemID which i believe means duplicate router-id
*May 29 2022 11:11:26.647 UTC: ISIS-Adj: Rec serial IIH from ca05.1cd0.001d (FastEthernet1/1), cir type L2, cir id 02, length 1496
*May 29 2022 11:11:26.647 UTC: ISIS-Adj: Duplicate system id
B5#
*May 29 2022 11:11:33.031 UTC: ISIS-Adj: Sending serial IIH on FastEthernet1/1, length 1496
B5#
*May 29 2022 11:11:36.063 UTC: ISIS-Adj: Rec serial IIH from ca05.1cd0.001d (FastEthernet1/1), cir type L2, cir id 02, length 1496
*May 29 2022 11:11:36.063 UTC: ISIS-Adj: Duplicate system id
B5#
*May 29 2022 11:11:42.467 UTC: ISIS-Adj: Sending serial IIH on FastEthernet1/1, length 1496
B5#
*May 29 2022 11:11:44.043 UTC: ISIS-Adj: Rec serial IIH from ca05.1cd0.001d (FastEthernet1/1), cir type L2, cir id 02, length 1496
*May 29 2022 11:11:44.043 UTC: ISIS-Adj: Duplicate system id
i used this command on each router
router isis as50
net 49.0001.0005.0002.00
is-type level-2-only
metric-style wide
log-adjacency-changes all
metric 100000
Do I need to change net statement?
P5 Run
hostname B5
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
!
aaa new-model
!
!
!
!
aaa session-id common
no ip source-route
no ip icmp rate-limit unreachable
ip cef
!
!
!
!
no ip domain lookup
ip domain name ws.nsrc.org
ipv6 unicast-routing
no ipv6 source-route
ipv6 cef
!
multilink bundle-name authenticated
!
!
key chain as50-key
key 1
key-string 7 030D481B0A0E23
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
archive
log config
hidekeys
!
!
!
!
!
ip tcp synwait-time 5
ip tcp path-mtu-discovery
!
!
!
!
interface Loopback0
description Loopback on Border
ip address 100.68.5.1 255.255.255.255
ipv6 address 2001:DB8:5::1/128
!
interface Null0
no ip unreachables
no ipv6 unreachables
!
interface FastEthernet0/0
no ip address
shutdown
duplex half
!
interface FastEthernet1/0
no ip address
shutdown
duplex auto
speed auto
ipv6 address 2001:19:0:11::1/127
!
interface FastEthernet1/1
description BackBone link to Core
ip address 100.68.5.17 255.255.255.254
no ip redirects
no ip proxy-arp
ip router isis as50
duplex auto
speed auto
ipv6 address 2001:DB8:5:10::1/127
ipv6 nd prefix default no-advertise
ipv6 nd ra suppress
ipv6 router isis as50
isis network point-to-point
isis metric 2
isis ipv6 metric 2
!
router isis as50
net 49.0001.0005.0002.00
is-type level-2-only
authentication mode md5 level-2
authentication key-chain as30-key level-2
metric-style wide
set-overload-bit on-startup wait-for-bgp
log-adjacency-changes all
metric 100000
!
address-family ipv6
multi-topology
set-overload-bit on-startup wait-for-bgp
metric 100000
exit-address-family
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
!
no cdp log mismatch duplex
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
gatekeeper
shutdown
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
transport preferred none
stopbits 1
line aux 0
exec-timeout 0 0
privilege level 15
logging synchronous
transport preferred none
stopbits 1
line vty 0 4
transport preferred none
C5 Run
hostname C5
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
!
aaa new-model
!
!
!
!
aaa session-id common
no ip source-route
no ip icmp rate-limit unreachable
ip cef
!
!
!
!
no ip domain lookup
ip domain name ws.nsrc.org
ipv6 unicast-routing
no ipv6 source-route
ipv6 cef
!
multilink bundle-name authenticated
!
!
key chain as50-key
key 1
key-string 7 141E011B000528
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
archive
log config
hidekeys
!
!
!
!
!
ip tcp synwait-time 5
ip tcp path-mtu-discovery
!
!
!
!
interface Loopback0
description Loopback on Border
ip address 100.68.5.2 255.255.255.255
ipv6 address 2001:DB8:5::2/128
!
interface Null0
no ip unreachables
no ipv6 unreachables
!
interface FastEthernet0/0
description BackBone link to Access Router
ip address 100.68.5.20 255.255.255.254
no ip redirects
no ip proxy-arp
ip router isis as50
duplex half
ipv6 address 2001:DB8:5:12::/127
ipv6 nd prefix default no-advertise
ipv6 nd ra suppress
ipv6 router isis as50
isis network point-to-point
isis metric 2
isis ipv6 metric 2
!
interface FastEthernet1/0
description BackBone link to Border Router
ip address 100.68.5.18 255.255.255.254
no ip redirects
no ip proxy-arp
ip router isis as50
duplex auto
speed auto
ipv6 address 2001:DB8:5:11::/127
ipv6 nd ra suppress
ipv6 router isis as50
isis network point-to-point
isis metric 2
isis ipv6 metric 2
!
interface FastEthernet1/1
description BackBone link to Peering Router
ip address 100.68.5.16 255.255.255.254
no ip redirects
no ip proxy-arp
ip router isis as50
duplex auto
speed auto
ipv6 address 2001:DB8:5:10::/127
ipv6 nd ra suppress
ipv6 router isis as50
isis network point-to-point
isis metric 2
isis ipv6 metric 2
!
router isis as50
net 49.0001.0005.0002.00
is-type level-2-only
authentication mode md5 level-2
authentication key-chain as30-key level-2
metric-style wide
set-overload-bit on-startup wait-for-bgp
log-adjacency-changes all
metric 100000
!
address-family ipv6
multi-topology
set-overload-bit on-startup wait-for-bgp
metric 100000
exit-address-family
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
!
no cdp log mismatch duplex
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
gatekeeper
shutdown
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
transport preferred none
stopbits 1
line aux 0
exec-timeout 0 0
privilege level 15
logging synchronous
transport preferred none
stopbits 1
line vty 0 4
transport preferred none
!
end
A5 Run
hostname A5
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
!
aaa new-model
!
!
!
!
aaa session-id common
no ip source-route
no ip icmp rate-limit unreachable
ip cef
!
!
!
!
no ip domain lookup
ip domain name ws.nsrc.org
ipv6 unicast-routing
no ipv6 source-route
ipv6 cef
!
multilink bundle-name authenticated
!
!
key chain as50-key
key 1
key-string 7 030D481B0A0E23
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
archive
log config
hidekeys
!
!
!
!
!
ip tcp synwait-time 5
ip tcp path-mtu-discovery
!
!
!
!
interface Loopback0
description Loopback on Border
ip address 100.68.5.4 255.255.255.255
ipv6 address 2001:DB8:5::4/128
!
interface Null0
no ip unreachables
no ipv6 unreachables
!
interface FastEthernet0/0
description Access link to Core
ip address 100.68.5.21 255.255.255.254
no ip redirects
no ip proxy-arp
ip router isis as50
duplex half
ipv6 address 2001:DB8:5:12::1/127
ipv6 nd prefix default no-advertise
ipv6 nd ra suppress
ipv6 router isis as50
isis network point-to-point
isis metric 2
isis ipv6 metric 2
!
interface FastEthernet1/0
description P2P Ethernet Link to Cust4
ip address 100.68.5.34 255.255.255.254
no ip redirects
no ip proxy-arp
duplex auto
speed auto
ipv6 address 2001:DB8:5:31::/127
ipv6 nd prefix default no-advertise
ipv6 nd ra suppress
!
interface FastEthernet1/1
no ip address
shutdown
duplex auto
speed auto
!
router isis as50
net 49.0001.0005.0002.00
is-type level-2-only
authentication mode md5 level-2
authentication key-chain as30-key level-2
metric-style wide
set-overload-bit on-startup wait-for-bgp
log-adjacency-changes all
metric 100000
!
address-family ipv6
multi-topology
set-overload-bit on-startup wait-for-bgp
metric 100000
exit-address-family
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
!
no cdp log mismatch duplex
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
gatekeeper
shutdown
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
transport preferred none
stopbits 1
line aux 0
exec-timeout 0 0
privilege level 15
logging synchronous
transport preferred none
stopbits 1
line vty 0 4
transport preferred none
!
C5 RUN
no ip domain lookup
ip domain name ws.nsrc.org
ipv6 unicast-routing
no ipv6 source-route
ipv6 cef
!
multilink bundle-name authenticated
!
!
key chain as50-key
key 1
key-string 7 141E011B000528
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
archive
log config
hidekeys
!
!
!
!
!
ip tcp synwait-time 5
ip tcp path-mtu-discovery
!
!
!
!
interface Loopback0
description Loopback on Border
ip address 100.68.5.2 255.255.255.255
ipv6 address 2001:DB8:5::2/128
!
interface Null0
no ip unreachables
no ipv6 unreachables
!
interface FastEthernet0/0
description BackBone link to Access Router
ip address 100.68.5.20 255.255.255.254
no ip redirects
no ip proxy-arp
ip router isis as50
duplex half
ipv6 address 2001:DB8:5:12::/127
ipv6 nd prefix default no-advertise
ipv6 nd ra suppress
ipv6 router isis as50
isis network point-to-point
isis metric 2
isis ipv6 metric 2
!
interface FastEthernet1/0
description BackBone link to Border Router
ip address 100.68.5.18 255.255.255.254
no ip redirects
no ip proxy-arp
ip router isis as50
duplex auto
speed auto
ipv6 address 2001:DB8:5:11::/127
ipv6 nd ra suppress
ipv6 router isis as50
isis network point-to-point
isis metric 2
isis ipv6 metric 2
!
interface FastEthernet1/1
description BackBone link to Peering Router
ip address 100.68.5.16 255.255.255.254
no ip redirects
no ip proxy-arp
ip router isis as50
duplex auto
speed auto
ipv6 address 2001:DB8:5:10::/127
ipv6 nd ra suppress
ipv6 router isis as50
isis network point-to-point
isis metric 2
isis ipv6 metric 2
!
router isis as50
net 49.0001.0005.0002.00
is-type level-2-only
authentication mode md5 level-2
authentication key-chain as30-key level-2
metric-style wide
set-overload-bit on-startup wait-for-bgp
log-adjacency-changes all
metric 100000
!
address-family ipv6
multi-topology
set-overload-bit on-startup wait-for-bgp
metric 100000
exit-address-family
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
!
no cdp log mismatch duplex
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
gatekeeper
shutdown
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
transport preferred none
stopbits 1
line aux 0
exec-timeout 0 0
privilege level 15
logging synchronous
transport preferred none
stopbits 1
line vty 0 4
transport preferred none
!
Solved! Go to Solution.
05-29-2022
08:17 AM
- last edited on
05-29-2022
09:53 PM
by
Translator
Hi @hfakoor222 ,
You need to configure
ip router isis as50 and ipv6 router isis as50
on all interfaces that you want include in ISIS.
Also, do a
show isis neighbor
to validate the adjacencies are up between neighbor routers.
Regards,
05-29-2022 04:29 AM
Hi,
The net ID has to be unique for each router.
Follow the following format -
In the section 'IS Address Assignment' the system ID needs to be unique it is shown what these are. Try making the system ID octet on each router unique
Regards
George
05-29-2022
05:01 AM
- last edited on
05-29-2022
09:51 PM
by
Translator
I changed the router id on each router, I can ping directly connected segments, but not loopbacks
A5
router isis as50
net 49.0001.0005.0004.00
is-type level-2-only
metric-style wide
log-adjacency-changes all
metric 100000
!
C5
router isis as50
net 49.0001.0005.0002.00
is-type level-2-only
metric-style wide
log-adjacency-changes all
metric 100000
!
Router B5
router isis as50
net 49.0001.0005.0001.00
is-type level-2-only
metric-style wide
log-adjacency-changes all
metric 100000
Router p5
router isis as50
net 49.0001.0005.0003.00
is-type level-2-only
metric-style wide
log-adjacency-changes all
metric 100000
however I can only ping directly connected interfaces and I cannot ping loopback
My goal is to be able to ping loopback on each router at this point
any advice?
A5
no ip domain lookup
ip domain name ws.nsrc.org
ipv6 unicast-routing
no ipv6 source-route
ipv6 cef
!
multilink bundle-name authenticated
!
!
key chain as50-key
key 1
key-string 7 030D481B0A0E23
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
archive
log config
hidekeys
!
!
!
!
!
ip tcp synwait-time 5
ip tcp path-mtu-discovery
!
!
!
!
interface Loopback0
description Loopback int
ip address 100.68.5.4 255.255.255.255
ip router isis as50
ipv6 address 2001:DB8:5::4/128
ipv6 router isis as50
isis metric 2
isis ipv6 metric 2
!
interface Null0
no ip unreachables
no ipv6 unreachables
!
interface FastEthernet0/0
description Access link to Core
ip address 100.68.5.21 255.255.255.254
no ip redirects
no ip proxy-arp
duplex half
ipv6 address 2001:DB8:5:12::1/127
ipv6 nd prefix default no-advertise
ipv6 nd ra suppress
!
interface FastEthernet1/0
description P2P Ethernet Link to Cust4
ip address 100.68.5.34 255.255.255.254
no ip redirects
no ip proxy-arp
duplex auto
speed auto
ipv6 address 2001:DB8:5:31::/127
ipv6 nd prefix default no-advertise
ipv6 nd ra suppress
!
interface FastEthernet1/1
no ip address
shutdown
duplex auto
speed auto
!
router isis as50
net 49.0001.0005.0004.00
is-type level-2-only
metric-style wide
log-adjacency-changes all
metric 100000
!
address-family ipv6
multi-topology
metric 100000
exit-address-family
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
!
no cdp log mismatch duplex
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
gatekeeper
shutdown
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
transport preferred none
stopbits 1
line aux 0
exec-timeout 0 0
privilege level 15
logging synchronous
transport preferred none
stopbits 1
line vty 0 4
transport preferred none
P5
hostname P5
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
!
no aaa new-model
ip source-route
no ip icmp rate-limit unreachable
ip cef
!
!
!
!
no ip domain lookup
ipv6 unicast-routing
ipv6 cef
!
multilink bundle-name authenticated
!
!
key chain as50-key
key 1
key-string isplab
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
archive
log config
hidekeys
!
!
!
!
!
ip tcp synwait-time 5
!
!
!
!
interface Loopback0
description Loopback int
ip address 100.68.5.3 255.255.255.255
ip router isis as50
ipv6 address 2001:DB8:5::3/128
ipv6 router isis as50
isis metric 2
isis ipv6 metric 2
!
interface Null0
no ip unreachables
no ipv6 unreachables
!
interface FastEthernet0/0
no ip address
shutdown
duplex half
!
interface FastEthernet1/0
description BackBone link to Core
ip address 100.68.5.19 255.255.255.254
no ip redirects
no ip proxy-arp
duplex auto
speed auto
ipv6 address 2001:DB8:5:11::1/127
ipv6 nd prefix default no-advertise
ipv6 nd ra suppress
!
interface FastEthernet1/1
no ip address
shutdown
duplex auto
speed auto
!
router isis as50
net 49.0001.0005.0003.00
is-type level-2-only
metric-style wide
log-adjacency-changes all
metric 100000
!
address-family ipv6
multi-topology
metric 100000
exit-address-family
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
!
no cdp log mismatch duplex
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
gatekeeper
shutdown
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
stopbits 1
line aux 0
exec-timeout 0 0
privilege level 15
logging synchronous
stopbits 1
line vty 0 4
login
!
C5
Current configuration : 2328 bytes
!
upgrade fpd auto
version 12.4
service timestamps debug datetime msec localtime show-timezone year
service timestamps log datetime msec localtime show-timezone year
service password-encryption
!
hostname C5
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
!
aaa new-model
!
!
!
!
aaa session-id common
no ip source-route
no ip icmp rate-limit unreachable
ip cef
!
!
!
!
no ip domain lookup
ip domain name ws.nsrc.org
ipv6 unicast-routing
no ipv6 source-route
ipv6 cef
!
multilink bundle-name authenticated
!
!
key chain as50-key
key 1
key-string 7 141E011B000528
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
archive
log config
hidekeys
!
!
!
!
!
ip tcp synwait-time 5
ip tcp path-mtu-discovery
!
!
!
!
interface Loopback0
description BackBone link to Access Router
ip address 100.68.5.2 255.255.255.255
ip router isis as50
ipv6 address 2001:DB8:5::2/128
ipv6 router isis as50
isis metric 2
isis ipv6 metric 2
!
interface Null0
no ip unreachables
no ipv6 unreachables
!
interface FastEthernet0/0
description BackBone link to Access Router
ip address 100.68.5.20 255.255.255.254
no ip redirects
no ip proxy-arp
duplex half
ipv6 address 2001:DB8:5:12::/127
ipv6 nd prefix default no-advertise
ipv6 nd ra suppress
!
interface FastEthernet1/0
description BackBone link to Border Router
ip address 100.68.5.18 255.255.255.254
no ip redirects
no ip proxy-arp
duplex auto
speed auto
ipv6 address 2001:DB8:5:11::/127
ipv6 nd ra suppress
!
interface FastEthernet1/1
description BackBone link to Peering Router
ip address 100.68.5.16 255.255.255.254
no ip redirects
no ip proxy-arp
duplex auto
speed auto
ipv6 address 2001:DB8:5:10::/127
ipv6 nd ra suppress
!
router isis as50
net 49.0001.0005.0002.00
is-type level-2-only
metric-style wide
log-adjacency-changes all
metric 100000
!
address-family ipv6
multi-topology
metric 100000
exit-address-family
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
!
no cdp log mismatch duplex
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
gatekeeper
shutdown
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
transport preferred none
stopbits 1
line aux 0
exec-timeout 0 0
privilege level 15
logging synchronous
transport preferred none
stopbits 1
line vty 0 4
transport preferred none
!
05-29-2022
08:17 AM
- last edited on
05-29-2022
09:53 PM
by
Translator
Hi @hfakoor222 ,
You need to configure
ip router isis as50 and ipv6 router isis as50
on all interfaces that you want include in ISIS.
Also, do a
show isis neighbor
to validate the adjacencies are up between neighbor routers.
Regards,
05-29-2022 07:10 PM
I configured it on per interface abd it is working perfect. Interestingly enough it's peering across routers too, across more than 1 hop I can ping
05-29-2022 10:08 AM
I have reachability between the routers now, however I do not have reachability to the loopback addresses. Does anyone have suggestion for me to be able to ping loopback addresses?
05-29-2022
10:33 AM
- last edited on
05-29-2022
09:54 PM
by
Translator
Hi @hfakoor222 ,
Can you post the
show isis data verbose
output for one of the devices.
Regards,
05-31-2022 06:47 AM
I will make sure to do this when I get back and start the lab up later tonight
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide