All... I need help...
I've got a 1941W as my edge router and the public facing IP address is off of a BVI tied to the physical interface to the ISP... I also have this same bridge-group associated with an interface with nothing plugged into it...
Problem: When I remove the 'bridge-group 66' from the down/down interface, it's as if it removed the bridge-group entirely and network connectivity to the office goes down... simply adding it back doesn't fix the issue... I've had to either do a 'copy start run' or reload the router to restore office connectivity to the Internet....
Bottom line: I need to remove the current bridge-group and replace it with a new bridge-group....
Problem/Solution: I'd like to do so without causing an outage and or know why it's happening and be able to fix it without having to reapply the old briidge-group to the interface....
config is below... All necessary info should be within this post but if there is any additional info needed, please ask and I will do my best to provide...
Thanks in advance for the assistance... Rod
!
bridge irb
!
!
!
!
!
!
!
interface GigabitEthernet0/1
description " MULTIPLE PAGE FAX TESTING USING ADTRAN "
no ip address
ip flow ingress
ip flow egress
ip virtual-reassembly in
duplex full
speed 1000
bridge-group 66 ----------------------------------------- This is the line I'm trying to either remove or replace with bridge-group 90
!
interface Wlan-GigabitEthernet0/0
description Internal switch interface connecting to the embedded AP
no ip address
!
interface GigabitEthernet0/0/0
description " Microwave Link to L3 "
no ip address
duplex full
speed 1000
bridge-group 90
!
!
interface GigabitEthernet0/1/0
description " DIGICON DIA Circuit ID: 703-621-2105 "
no ip address
ip access-group DENY_SSH in
ip flow ingress
ip flow egress
ip virtual-reassembly in
no cdp enable
bridge-group 66
!
interface Vlan1
no ip address
!
interface Vlan66
no ip address
!
interface Vlan100
description Level3 MPLS
no ip address
!
interface Vlan101
description Level3 DIA
no ip address
!
interface BVI66
description ESCESSA TEST
ip address 66.23.136.140 255.255.255.240
ip nat outside
ip virtual-reassembly in
crypto map CRYPTO-MAP
!
interface BVI90
ip address 192.168.90.1 255.255.255.252
!
interface BVI101
ip address 199.76.29.226 255.255.255.240
!
interface BVI248
ip address 10.0.248.2 255.255.255.0
!
ip forward-protocol nd
!
ip http server
ip http authentication local
ip http secure-server
ip flow-export version 5
!
ip pim bidir-enable
ip nat inside source route-map DigiconDIA interface BVI66 overload
ip nat inside source route-map Level3DIA interface GigabitEthernet0/0/0.101 overload
ip nat inside source static 10.0.224.130 66.23.136.130
ip nat inside source static 10.1.1.3 66.23.136.131
ip route 0.0.0.0 0.0.0.0 66.23.136.129 15
ip route 0.0.0.0 0.0.0.0 199.76.29.225 50
ip route 10.0.224.0 255.255.240.0 10.1.4.2
ip route 10.0.242.0 255.255.255.0 10.1.4.2
ip route 10.1.1.0 255.255.255.0 10.1.4.2
ip route 10.1.1.0 255.255.255.0 10.1.1.1
ip route 10.1.20.0 255.255.255.0 66.23.136.129
ip route 10.1.110.0 255.255.255.0 10.1.4.2
ip route 10.1.111.0 255.255.255.0 10.1.4.2
ip route 10.1.112.0 255.255.255.0 10.1.4.2
ip route 10.2.100.0 255.255.255.0 10.1.4.2
ip route 10.2.101.0 255.255.255.0 10.1.4.2
ip route 10.5.1.0 255.255.255.0 104.219.161.218
ip route 10.230.0.0 255.255.0.0 10.48.2.6
ip route 10.235.0.0 255.255.0.0 10.56.2.6
ip route 66.23.136.0 255.255.255.0 66.23.136.129
ip route 192.168.1.0 255.255.255.0 66.23.136.129
ip route 192.168.2.0 255.255.255.0 66.23.136.129
!
ip access-list extended DENVERMX104-VPN
ip access-list extended DENY_SSH
permit tcp 66.23.136.128 0.0.0.15 any eq 22
permit tcp 10.10.10.0 0.0.0.255 any eq 22
permit tcp 10.1.20.0 0.0.0.255 any eq 22
permit tcp 10.0.224.0 0.0.7.255 any eq 22
permit tcp 10.240.0.0 0.0.0.255 any eq 22
permit tcp 10.240.1.0 0.0.0.255 any eq 22
deny tcp any any eq 22
permit ip any any
ip access-list extended DON-Home-vpn
permit ip 10.0.224.0 0.0.15.255 172.16.99.0 0.0.0.255
ip access-list extended Dallas-mSIP-vpn
permit ip 10.0.224.0 0.0.15.255 10.96.0.0 0.0.255.255
ip access-list extended Denver-mSIP-vpn
permit ip 10.0.224.0 0.0.15.255 10.48.96.0 0.0.0.255
permit ip 10.0.224.0 0.0.15.255 10.48.192.0 0.0.0.255
permit ip 10.0.224.0 0.0.15.255 10.48.224.0 0.0.0.255
permit ip 10.0.224.0 0.0.15.255 10.48.226.0 0.0.0.255
ip access-list extended Denver-vpn
permit ip 10.1.110.0 0.0.0.255 10.151.1.0 0.0.0.255
permit ip 10.1.110.0 0.0.0.255 10.151.3.0 0.0.0.255
permit ip 10.1.110.0 0.0.0.255 10.151.254.0 0.0.0.255
permit ip 10.2.100.0 0.0.0.255 10.151.1.0 0.0.0.255
permit ip 10.2.100.0 0.0.0.255 10.151.3.0 0.0.0.255
permit ip 10.2.100.0 0.0.0.255 10.151.254.0 0.0.0.255
permit ip 10.0.224.0 0.0.15.255 10.151.1.0 0.0.0.255
permit ip 10.0.224.0 0.0.15.255 10.151.3.0 0.0.0.255
permit ip 10.0.224.0 0.0.15.255 10.151.254.0 0.0.0.255
permit ip 10.1.110.0 0.0.0.255 10.230.0.0 0.0.255.255
permit ip 10.1.110.0 0.0.0.255 10.10.10.0 0.0.0.255
permit ip 10.0.224.0 0.0.15.255 10.48.1.0 0.0.0.255
permit ip 10.0.224.0 0.0.15.255 10.48.2.0 0.0.0.255
permit ip 10.0.224.0 0.0.15.255 10.230.0.0 0.0.255.255
permit ip 10.0.224.0 0.0.15.255 10.10.10.0 0.0.0.255
permit ip 10.0.224.0 0.0.15.255 10.240.0.0 0.0.0.255
permit ip 10.1.110.0 0.0.0.255 10.240.0.0 0.0.0.255
ip access-list extended Denver_CQ-vpn
ip access-list extended Digicon-vpn
permit ip 10.1.110.0 0.0.0.255 192.168.1.0 0.0.0.255
permit ip 10.1.110.0 0.0.0.255 192.168.2.0 0.0.0.255
permit ip 10.1.110.0 0.0.0.255 10.1.20.0 0.0.0.255
permit ip 10.2.100.0 0.0.0.255 192.168.1.0 0.0.0.255
permit ip 10.2.100.0 0.0.0.255 192.168.2.0 0.0.0.255
permit ip 10.2.100.0 0.0.0.255 10.1.20.0 0.0.0.255
permit ip 10.1.4.0 0.0.0.255 10.1.20.0 0.0.0.255
permit ip 10.0.224.0 0.0.15.255 192.168.1.0 0.0.0.255
permit ip 10.0.224.0 0.0.15.255 192.168.2.0 0.0.0.255
permit ip 10.0.224.0 0.0.15.255 10.1.20.0 0.0.0.255
ip access-list extended GrandRapids-vpn
permit ip 10.1.110.0 0.0.0.255 10.1.120.0 0.0.0.255
permit ip 10.1.110.0 0.0.0.255 10.1.123.0 0.0.0.255
permit ip 10.1.110.0 0.0.0.255 10.1.125.0 0.0.0.255
permit ip 10.1.110.0 0.0.0.255 10.1.126.0 0.0.0.255
permit ip 10.2.100.0 0.0.0.255 10.1.120.0 0.0.0.255
permit ip 10.2.100.0 0.0.0.255 10.1.123.0 0.0.0.255
permit ip 10.2.100.0 0.0.0.255 10.1.125.0 0.0.0.255
permit ip 10.2.100.0 0.0.0.255 10.1.126.0 0.0.0.255
permit ip 10.0.224.0 0.0.15.255 10.1.120.0 0.0.0.255
permit ip 10.0.224.0 0.0.15.255 10.1.123.0 0.0.0.255
permit ip 10.0.224.0 0.0.15.255 10.1.125.0 0.0.0.255
permit ip 10.0.224.0 0.0.15.255 10.1.126.0 0.0.0.255
permit ip 10.0.224.0 0.0.15.255 10.1.121.0 0.0.0.255
permit ip 10.0.224.0 0.0.15.255 10.1.124.0 0.0.0.255
permit ip 10.0.224.0 0.0.15.255 10.64.224.0 0.0.31.255 log
ip access-list extended ILOAK-vpn
permit ip 10.0.224.0 0.0.15.255 10.112.224.0 0.0.15.255
ip access-list extended RDC-mSIP-vpn
permit ip 10.0.224.0 0.0.15.255 10.16.0.0 0.0.255.255
ip access-list extended RDC-vpn
permit ip 10.0.224.0 0.0.15.255 10.152.1.0 0.0.0.255
permit ip 10.0.224.0 0.0.15.255 10.56.1.0 0.0.0.255
permit ip 10.0.224.0 0.0.15.255 10.56.2.0 0.0.0.255
permit ip 10.0.224.0 0.0.15.255 10.152.2.0 0.0.0.255
permit ip 10.0.224.0 0.0.15.255 10.152.254.0 0.0.0.255
permit ip 10.0.224.0 0.0.15.255 10.235.0.0 0.0.255.255
permit ip 10.1.4.0 0.0.0.255 10.152.1.0 0.0.0.255
permit ip 10.1.4.0 0.0.0.255 10.56.1.0 0.0.0.255
permit ip 10.1.4.0 0.0.0.255 10.56.2.0 0.0.0.255
permit ip 10.1.4.0 0.0.0.255 10.152.2.0 0.0.0.255
permit ip 10.0.224.0 0.0.15.255 10.240.1.0 0.0.0.255
permit ip 10.1.110.0 0.0.0.255 10.240.1.0 0.0.0.255
ip access-list extended RDC_153-vpn
permit ip 10.1.110.0 0.0.0.255 10.153.1.0 0.0.0.255
permit ip 10.2.100.0 0.0.0.255 10.153.1.0 0.0.0.255
permit ip 10.0.224.0 0.0.15.255 10.153.1.0 0.0.0.255
ip access-list extended VAASHMX104-VPN
!
!
ip prefix-list rfc1918 seq 10 deny 10.0.0.0/8 le 32
ip prefix-list rfc1918 seq 15 deny 127.0.0.0/8 le 32
ip prefix-list rfc1918 seq 20 deny 169.254.0.0/16 le 32
ip prefix-list rfc1918 seq 25 deny 172.16.0.0/12 le 32
ip prefix-list rfc1918 seq 30 deny 192.168.0.0/16 le 32
ip prefix-list rfc1918 seq 35 deny 192.0.0.0/24 le 32
ip prefix-list rfc1918 seq 40 deny 192.0.2.0/24 le 32
ip prefix-list rfc1918 seq 45 deny 198.18.0.0/15
ip prefix-list rfc1918 seq 50 deny 198.51.100.0/24
ip prefix-list rfc1918 seq 55 deny 203.0.113.0/24
ip prefix-list rfc1918 seq 60 deny 224.0.0.0/3 le 32
ip prefix-list rfc1918 seq 61 permit 10.96.0.0/11 le 32
ip prefix-list rfc1918 seq 65 permit 0.0.0.0/0 le 32
!
route-map DigiconDIA permit 10
match ip address 102
!
route-map Level3DIA permit 10
match ip address 102
!
!
access-list 102 deny ip any 10.1.20.0 0.0.0.255
access-list 102 deny ip any 10.1.120.0 0.0.0.255
access-list 102 deny ip any 10.1.121.0 0.0.0.255
access-list 102 deny ip any 10.1.123.0 0.0.0.255
access-list 102 deny ip any 10.1.124.0 0.0.0.255
access-list 102 deny ip any 10.1.125.0 0.0.0.255
access-list 102 deny ip any 10.1.126.0 0.0.0.255
access-list 102 deny ip any 10.10.3.0 0.0.0.255
access-list 102 deny ip any 10.10.10.0 0.0.0.255
access-list 102 deny ip any 10.16.0.0 0.0.255.255
access-list 102 deny ip any 10.48.1.0 0.0.0.255
access-list 102 deny ip any 10.48.2.0 0.0.0.255
access-list 102 deny ip any 10.48.96.0 0.0.0.255
access-list 102 deny ip any 10.48.192.0 0.0.0.255
access-list 102 deny ip any 10.48.224.0 0.0.0.255
access-list 102 deny ip any 10.48.226.0 0.0.0.255
access-list 102 deny ip any 10.56.1.0 0.0.0.255
access-list 102 deny ip any 10.56.2.0 0.0.0.255
access-list 102 deny ip any 10.64.224.0 0.0.0.255
access-list 102 deny ip any 10.64.226.0 0.0.0.255
access-list 102 deny ip any 10.64.232.0 0.0.0.255
access-list 102 deny ip any 10.64.234.0 0.0.0.255
access-list 102 deny ip any 10.64.238.0 0.0.0.255
access-list 102 deny ip any 10.96.0.0 0.0.255.255
access-list 102 deny ip any 10.112.224.0 0.0.15.255
access-list 102 deny ip any 10.151.1.0 0.0.0.255
access-list 102 deny ip any 10.151.3.0 0.0.0.255
access-list 102 deny ip any 10.151.254.0 0.0.0.255
access-list 102 deny ip any 10.152.1.0 0.0.0.255
access-list 102 deny ip any 10.152.2.0 0.0.0.255
access-list 102 deny ip any 10.152.254.0 0.0.0.255
access-list 102 deny ip any 10.153.1.0 0.0.0.255
access-list 102 deny ip any 10.230.0.0 0.0.255.255
access-list 102 deny ip any 10.235.0.0 0.0.255.255
access-list 102 deny ip any 10.240.0.0 0.0.0.255
access-list 102 deny ip any 10.240.1.0 0.0.0.255
access-list 102 deny ip any 172.16.99.0 0.0.0.255
access-list 102 deny ip any 192.168.1.0 0.0.0.255
access-list 102 deny ip any 192.168.2.0 0.0.0.255
access-list 102 deny ip any 192.168.134.0 0.0.0.255
access-list 102 permit ip any any
!
!
!
control-plane
!
bridge 66 protocol ieee
bridge 66 route ip
bridge 90 protocol ieee
bridge 90 route ip
bridge 101 protocol ieee
bridge 101 route ip
bridge 248 protocol ieee
bridge 248 route ip
!
