I tried my first IS-IS lab and there's no connection

[hfakoor222]

I want IS-IS connection between B5, C5, A5, P5

I have no ping.

I followed a IS-IS lab guide here 

https://nsrc.org/workshops/2019/mnnog1/riso/networking/routing-security/en/labs/is-is.html

There may be something wrong with the net statement for addressing. I am posting the runs.

For example debug on R5 showing duplicate systemID which i believe means duplicate router-id

*May 29 2022 11:11:26.647 UTC: ISIS-Adj: Rec serial IIH from ca05.1cd0.001d (FastEthernet1/1), cir type L2, cir id 02, length 1496
*May 29 2022 11:11:26.647 UTC: ISIS-Adj: Duplicate system id
B5#
*May 29 2022 11:11:33.031 UTC: ISIS-Adj: Sending serial IIH on FastEthernet1/1, length 1496
B5#
*May 29 2022 11:11:36.063 UTC: ISIS-Adj: Rec serial IIH from ca05.1cd0.001d (FastEthernet1/1), cir type L2, cir id 02, length 1496
*May 29 2022 11:11:36.063 UTC: ISIS-Adj: Duplicate system id
B5#
*May 29 2022 11:11:42.467 UTC: ISIS-Adj: Sending serial IIH on FastEthernet1/1, length 1496
B5#
*May 29 2022 11:11:44.043 UTC: ISIS-Adj: Rec serial IIH from ca05.1cd0.001d (FastEthernet1/1), cir type L2, cir id 02, length 1496
*May 29 2022 11:11:44.043 UTC: ISIS-Adj: Duplicate system id

i used this command on each router

router isis as50
net 49.0001.0005.0002.00
is-type level-2-only
metric-style wide
log-adjacency-changes all
metric 100000

Do I need to change net statement?

P5 Run


hostname B5
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
!
aaa new-model
!
!
!
!
aaa session-id common
no ip source-route
no ip icmp rate-limit unreachable
ip cef
!
!
!
!
no ip domain lookup
ip domain name ws.nsrc.org
ipv6 unicast-routing
no ipv6 source-route
ipv6 cef
!
multilink bundle-name authenticated
!
!
key chain as50-key
key 1
key-string 7 030D481B0A0E23
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
archive
log config
hidekeys
!
!
!
!
!
ip tcp synwait-time 5
ip tcp path-mtu-discovery
!
!
!
!
interface Loopback0
description Loopback on Border
ip address 100.68.5.1 255.255.255.255
ipv6 address 2001:DB8:5::1/128
!
interface Null0
no ip unreachables
no ipv6 unreachables
!
interface FastEthernet0/0
no ip address
shutdown
duplex half
!
interface FastEthernet1/0
no ip address
shutdown
duplex auto
speed auto
ipv6 address 2001:19:0:11::1/127
!
interface FastEthernet1/1
description BackBone link to Core
ip address 100.68.5.17 255.255.255.254
no ip redirects
no ip proxy-arp
ip router isis as50
duplex auto
speed auto
ipv6 address 2001:DB8:5:10::1/127
ipv6 nd prefix default no-advertise
ipv6 nd ra suppress
ipv6 router isis as50
isis network point-to-point
isis metric 2
isis ipv6 metric 2
!
router isis as50
net 49.0001.0005.0002.00
is-type level-2-only
authentication mode md5 level-2
authentication key-chain as30-key level-2
metric-style wide
set-overload-bit on-startup wait-for-bgp
log-adjacency-changes all
metric 100000
!
address-family ipv6
multi-topology
set-overload-bit on-startup wait-for-bgp
metric 100000
exit-address-family
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
!
no cdp log mismatch duplex
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
gatekeeper
shutdown
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
transport preferred none
stopbits 1
line aux 0
exec-timeout 0 0
privilege level 15
logging synchronous
transport preferred none
stopbits 1
line vty 0 4
transport preferred none

























C5 Run


hostname C5
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
!
aaa new-model
!
!
!
!
aaa session-id common
no ip source-route
no ip icmp rate-limit unreachable
ip cef
!
!
!
!
no ip domain lookup
ip domain name ws.nsrc.org
ipv6 unicast-routing
no ipv6 source-route
ipv6 cef
!
multilink bundle-name authenticated
!
!
key chain as50-key
key 1
key-string 7 141E011B000528
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
archive
log config
hidekeys
!
!
!
!
!
ip tcp synwait-time 5
ip tcp path-mtu-discovery
!
!
!
!
interface Loopback0
description Loopback on Border
ip address 100.68.5.2 255.255.255.255
ipv6 address 2001:DB8:5::2/128
!
interface Null0
no ip unreachables
no ipv6 unreachables
!
interface FastEthernet0/0
description BackBone link to Access Router
ip address 100.68.5.20 255.255.255.254
no ip redirects
no ip proxy-arp
ip router isis as50
duplex half
ipv6 address 2001:DB8:5:12::/127
ipv6 nd prefix default no-advertise
ipv6 nd ra suppress
ipv6 router isis as50
isis network point-to-point
isis metric 2
isis ipv6 metric 2
!
interface FastEthernet1/0
description BackBone link to Border Router
ip address 100.68.5.18 255.255.255.254
no ip redirects
no ip proxy-arp
ip router isis as50
duplex auto
speed auto
ipv6 address 2001:DB8:5:11::/127
ipv6 nd ra suppress
ipv6 router isis as50
isis network point-to-point
isis metric 2
isis ipv6 metric 2
!
interface FastEthernet1/1
description BackBone link to Peering Router
ip address 100.68.5.16 255.255.255.254
no ip redirects
no ip proxy-arp
ip router isis as50
duplex auto
speed auto
ipv6 address 2001:DB8:5:10::/127
ipv6 nd ra suppress
ipv6 router isis as50
isis network point-to-point
isis metric 2
isis ipv6 metric 2
!
router isis as50
net 49.0001.0005.0002.00
is-type level-2-only
authentication mode md5 level-2
authentication key-chain as30-key level-2
metric-style wide
set-overload-bit on-startup wait-for-bgp
log-adjacency-changes all
metric 100000
!
address-family ipv6
multi-topology
set-overload-bit on-startup wait-for-bgp
metric 100000
exit-address-family
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
!
no cdp log mismatch duplex
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
gatekeeper
shutdown
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
transport preferred none
stopbits 1
line aux 0
exec-timeout 0 0
privilege level 15
logging synchronous
transport preferred none
stopbits 1
line vty 0 4
transport preferred none
!
end







A5   Run




hostname A5
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
!
aaa new-model
!
!
!
!
aaa session-id common
no ip source-route
no ip icmp rate-limit unreachable
ip cef
!
!
!
!
no ip domain lookup
ip domain name ws.nsrc.org
ipv6 unicast-routing
no ipv6 source-route
ipv6 cef
!
multilink bundle-name authenticated
!
!
key chain as50-key
key 1
key-string 7 030D481B0A0E23
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
archive
log config
hidekeys
!
!
!
!
!
ip tcp synwait-time 5
ip tcp path-mtu-discovery
!
!
!
!
interface Loopback0
description Loopback on Border
ip address 100.68.5.4 255.255.255.255
ipv6 address 2001:DB8:5::4/128
!
interface Null0
no ip unreachables
no ipv6 unreachables
!
interface FastEthernet0/0
description Access link to Core
ip address 100.68.5.21 255.255.255.254
no ip redirects
no ip proxy-arp
ip router isis as50
duplex half
ipv6 address 2001:DB8:5:12::1/127
ipv6 nd prefix default no-advertise
ipv6 nd ra suppress
ipv6 router isis as50
isis network point-to-point
isis metric 2
isis ipv6 metric 2
!
interface FastEthernet1/0
description P2P Ethernet Link to Cust4
ip address 100.68.5.34 255.255.255.254
no ip redirects
no ip proxy-arp
duplex auto
speed auto
ipv6 address 2001:DB8:5:31::/127
ipv6 nd prefix default no-advertise
ipv6 nd ra suppress
!
interface FastEthernet1/1
no ip address
shutdown
duplex auto
speed auto
!
router isis as50
net 49.0001.0005.0002.00
is-type level-2-only
authentication mode md5 level-2
authentication key-chain as30-key level-2
metric-style wide
set-overload-bit on-startup wait-for-bgp
log-adjacency-changes all
metric 100000
!
address-family ipv6
multi-topology
set-overload-bit on-startup wait-for-bgp
metric 100000
exit-address-family
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
!
no cdp log mismatch duplex
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
gatekeeper
shutdown
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
transport preferred none
stopbits 1
line aux 0
exec-timeout 0 0
privilege level 15
logging synchronous
transport preferred none
stopbits 1
line vty 0 4
transport preferred none
!













C5   RUN




no ip domain lookup
ip domain name ws.nsrc.org
ipv6 unicast-routing
no ipv6 source-route
ipv6 cef
!
multilink bundle-name authenticated
!
!
key chain as50-key
key 1
key-string 7 141E011B000528
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
archive
log config
hidekeys
!
!
!
!
!
ip tcp synwait-time 5
ip tcp path-mtu-discovery
!
!
!
!
interface Loopback0
description Loopback on Border
ip address 100.68.5.2 255.255.255.255
ipv6 address 2001:DB8:5::2/128
!
interface Null0
no ip unreachables
no ipv6 unreachables
!
interface FastEthernet0/0
description BackBone link to Access Router
ip address 100.68.5.20 255.255.255.254
no ip redirects
no ip proxy-arp
ip router isis as50
duplex half
ipv6 address 2001:DB8:5:12::/127
ipv6 nd prefix default no-advertise
ipv6 nd ra suppress
ipv6 router isis as50
isis network point-to-point
isis metric 2
isis ipv6 metric 2
!
interface FastEthernet1/0
description BackBone link to Border Router
ip address 100.68.5.18 255.255.255.254
no ip redirects
no ip proxy-arp
ip router isis as50
duplex auto
speed auto
ipv6 address 2001:DB8:5:11::/127
ipv6 nd ra suppress
ipv6 router isis as50
isis network point-to-point
isis metric 2
isis ipv6 metric 2
!
interface FastEthernet1/1
description BackBone link to Peering Router
ip address 100.68.5.16 255.255.255.254
no ip redirects
no ip proxy-arp
ip router isis as50
duplex auto
speed auto
ipv6 address 2001:DB8:5:10::/127
ipv6 nd ra suppress
ipv6 router isis as50
isis network point-to-point
isis metric 2
isis ipv6 metric 2
!
router isis as50
net 49.0001.0005.0002.00
is-type level-2-only
authentication mode md5 level-2
authentication key-chain as30-key level-2
metric-style wide
set-overload-bit on-startup wait-for-bgp
log-adjacency-changes all
metric 100000
!
address-family ipv6
multi-topology
set-overload-bit on-startup wait-for-bgp
metric 100000
exit-address-family
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
!
no cdp log mismatch duplex
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
gatekeeper
shutdown
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
transport preferred none
stopbits 1
line aux 0
exec-timeout 0 0
privilege level 15
logging synchronous
transport preferred none
stopbits 1
line vty 0 4
transport preferred none
!

[georgehewittuk1]

Hi,

The net ID has to be unique for each router.

Follow the following format - 

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_isis/configuration/15-mt/irs-15-mt-book/irs-ovrw-cf.html

In the section 'IS Address Assignment' the system ID needs to be unique it is shown what these are. Try making the system ID octet on each router unique 

Regards

George

[hfakoor222]

I changed the router id on each router, I can ping directly connected segments, but not loopbacks

A5


router isis as50
net 49.0001.0005.0004.00
is-type level-2-only
metric-style wide
log-adjacency-changes all
metric 100000
!













C5

router isis as50
net 49.0001.0005.0002.00
is-type level-2-only
metric-style wide
log-adjacency-changes all
metric 100000
!

Router B5


router isis as50
net 49.0001.0005.0001.00
is-type level-2-only
metric-style wide
log-adjacency-changes all
metric 100000




Router p5


router isis as50
net 49.0001.0005.0003.00
is-type level-2-only
metric-style wide
log-adjacency-changes all
metric 100000

however I can only ping directly connected interfaces and I cannot ping loopback

My goal is to be able to ping loopback on each router at this point

any advice?

A5


no ip domain lookup
ip domain name ws.nsrc.org
ipv6 unicast-routing
no ipv6 source-route
ipv6 cef
!
multilink bundle-name authenticated
!
!
key chain as50-key
key 1
key-string 7 030D481B0A0E23
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
archive
log config
hidekeys
!
!
!
!
!
ip tcp synwait-time 5
ip tcp path-mtu-discovery
!
!
!
!
interface Loopback0
description Loopback int
ip address 100.68.5.4 255.255.255.255
ip router isis as50
ipv6 address 2001:DB8:5::4/128
ipv6 router isis as50
isis metric 2
isis ipv6 metric 2
!
interface Null0
no ip unreachables
no ipv6 unreachables
!
interface FastEthernet0/0
description Access link to Core
ip address 100.68.5.21 255.255.255.254
no ip redirects
no ip proxy-arp
duplex half
ipv6 address 2001:DB8:5:12::1/127
ipv6 nd prefix default no-advertise
ipv6 nd ra suppress
!
interface FastEthernet1/0
description P2P Ethernet Link to Cust4
ip address 100.68.5.34 255.255.255.254
no ip redirects
no ip proxy-arp
duplex auto
speed auto
ipv6 address 2001:DB8:5:31::/127
ipv6 nd prefix default no-advertise
ipv6 nd ra suppress
!
interface FastEthernet1/1
no ip address
shutdown
duplex auto
speed auto
!
router isis as50
net 49.0001.0005.0004.00
is-type level-2-only
metric-style wide
log-adjacency-changes all
metric 100000
!
address-family ipv6
multi-topology
metric 100000
exit-address-family
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
!
no cdp log mismatch duplex
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
gatekeeper
shutdown
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
transport preferred none
stopbits 1
line aux 0
exec-timeout 0 0
privilege level 15
logging synchronous
transport preferred none
stopbits 1
line vty 0 4
transport preferred none










P5





hostname P5
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
!
no aaa new-model
ip source-route
no ip icmp rate-limit unreachable
ip cef
!
!
!
!
no ip domain lookup
ipv6 unicast-routing
ipv6 cef
!
multilink bundle-name authenticated
!
!
key chain as50-key
key 1
key-string isplab
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
archive
log config
hidekeys
!
!
!
!
!
ip tcp synwait-time 5
!
!
!
!
interface Loopback0
description Loopback int
ip address 100.68.5.3 255.255.255.255
ip router isis as50
ipv6 address 2001:DB8:5::3/128
ipv6 router isis as50
isis metric 2
isis ipv6 metric 2
!
interface Null0
no ip unreachables
no ipv6 unreachables
!
interface FastEthernet0/0
no ip address
shutdown
duplex half
!
interface FastEthernet1/0
description BackBone link to Core
ip address 100.68.5.19 255.255.255.254
no ip redirects
no ip proxy-arp
duplex auto
speed auto
ipv6 address 2001:DB8:5:11::1/127
ipv6 nd prefix default no-advertise
ipv6 nd ra suppress
!
interface FastEthernet1/1
no ip address
shutdown
duplex auto
speed auto
!
router isis as50
net 49.0001.0005.0003.00
is-type level-2-only
metric-style wide
log-adjacency-changes all
metric 100000
!
address-family ipv6
multi-topology
metric 100000
exit-address-family
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
!
no cdp log mismatch duplex
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
gatekeeper
shutdown
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
stopbits 1
line aux 0
exec-timeout 0 0
privilege level 15
logging synchronous
stopbits 1
line vty 0 4
login
!






















C5


Current configuration : 2328 bytes
!
upgrade fpd auto
version 12.4
service timestamps debug datetime msec localtime show-timezone year
service timestamps log datetime msec localtime show-timezone year
service password-encryption
!
hostname C5
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
!
aaa new-model
!
!
!
!
aaa session-id common
no ip source-route
no ip icmp rate-limit unreachable
ip cef
!
!
!
!
no ip domain lookup
ip domain name ws.nsrc.org
ipv6 unicast-routing
no ipv6 source-route
ipv6 cef
!
multilink bundle-name authenticated
!
!
key chain as50-key
key 1
key-string 7 141E011B000528
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
archive
log config
hidekeys
!
!
!
!
!
ip tcp synwait-time 5
ip tcp path-mtu-discovery
!
!
!
!
interface Loopback0
description BackBone link to Access Router
ip address 100.68.5.2 255.255.255.255
ip router isis as50
ipv6 address 2001:DB8:5::2/128
ipv6 router isis as50
isis metric 2
isis ipv6 metric 2
!
interface Null0
no ip unreachables
no ipv6 unreachables
!
interface FastEthernet0/0
description BackBone link to Access Router
ip address 100.68.5.20 255.255.255.254
no ip redirects
no ip proxy-arp
duplex half
ipv6 address 2001:DB8:5:12::/127
ipv6 nd prefix default no-advertise
ipv6 nd ra suppress
!
interface FastEthernet1/0
description BackBone link to Border Router
ip address 100.68.5.18 255.255.255.254
no ip redirects
no ip proxy-arp
duplex auto
speed auto
ipv6 address 2001:DB8:5:11::/127
ipv6 nd ra suppress
!
interface FastEthernet1/1
description BackBone link to Peering Router
ip address 100.68.5.16 255.255.255.254
no ip redirects
no ip proxy-arp
duplex auto
speed auto
ipv6 address 2001:DB8:5:10::/127
ipv6 nd ra suppress
!
router isis as50
net 49.0001.0005.0002.00
is-type level-2-only
metric-style wide
log-adjacency-changes all
metric 100000
!
address-family ipv6
multi-topology
metric 100000
exit-address-family
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
!
no cdp log mismatch duplex
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
gatekeeper
shutdown
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
transport preferred none
stopbits 1
line aux 0
exec-timeout 0 0
privilege level 15
logging synchronous
transport preferred none
stopbits 1
line vty 0 4
transport preferred none
!

[Harold Ritter · Accepted solution]

Hi @hfakoor222 ,

You need to configure

ip router isis as50 and ipv6 router isis as50

on all interfaces that you want include in ISIS.

Also, do a

show isis neighbor

to validate the adjacencies are up between neighbor routers.

Regards,

[hfakoor222]

I configured it on per interface abd it is working perfect. Interestingly enough it's peering across routers too, across more than 1 hop I can ping

[hfakoor222]

I have reachability between the routers now, however I do not have reachability to the loopback addresses.  Does anyone have suggestion for me to be able to ping loopback addresses?

[Harold Ritter]

Hi @hfakoor222 ,

Can you post the

show isis data verbose

output for one of the devices.

Regards,

[hfakoor222]

I will make sure to do this when I get back and start the lab up later tonight