Buy or Renew
Buy or Renew
Cisco + Splunk: It’s a new day for your data. Learn more.
 
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
8911
Views
5
Helpful
41
Replies

OSPF shows FULL but one route is not picking routes

Go to solution
ed.crawford
Level 1
Level 1

‎03-02-2011 04:06 AM - edited ‎03-06-2019 03:51 PM

I have two 2911 routers and one 2901 router running OSPF between them.

Router 1.1.1.1 is connected to router 2.2.2.2  via G0/1

Router 1.1.1.1 is connected ro router 3.3.3.3 via G0/2

As you can see from the snippets below all the neighbors come up as full and two routers get the routes from the router in the middle (1.1.1.1), however the middle one is not picking up any routes.  Everything else is set to default.  Any ideas as to what is going on here?

Configuration for Router 1.1.1.1

router ospf 1
router-id 1.1.1.1
network 10.10.1.0 0.0.0.255 area 0
network 10.100.1.0 0.0.0.255 area 0
network 128.11.0.0 0.0.255.255 area 0
network 192.168.17.0 0.0.0.3 area 0
network 192.168.17.8 0.0.0.3 area 0

Neighbors for Router 1.1.1.1

Neighbor ID     Pri   State           Dead Time   Address         Interface
3.3.3.3           1   FULL/DR         00:00:39    192.168.17.10   GigabitEtherne
t0/2
2.2.2.2           1   FULL/DR         00:00:34    192.168.17.2    GigabitEtherne
t0/1

Database for 1.1.1.1

           OSPF Router with ID (1.1.1.1) (Process ID 1)

                Router Link States (Area 0)

Link ID         ADV Router      Age         Seq#       Checksum Link count
1.1.1.1         1.1.1.1         1247        0x80000006 0x003837 4
2.2.2.2         2.2.2.2         1253        0x80000061 0x00F4D4 1
3.3.3.3         3.3.3.3         1248        0x8000005C 0x007343 1

                Net Link States (Area 0)

Link ID         ADV Router      Age         Seq#       Checksum
192.168.17.2    2.2.2.2         1248        0x80000050 0x00A7B5
192.168.17.10   3.3.3.3         1243        0x80000052 0x0057F3

Route table for Router 1.1.1.1

    1.0.0.0/32 is subnetted, 1 subnets
C        1.1.1.1 is directly connected, Loopback1
      10.0.0.0/8 is variably subnetted, 8 subnets, 3 masks
C        10.10.1.0/24 is directly connected, GigabitEthernet0/0.10
L        10.10.1.1/32 is directly connected, GigabitEthernet0/0.10
C        10.10.10.0/29 is directly connected, GigabitEthernet0/0
L        10.10.10.1/32 is directly connected, GigabitEthernet0/0
C        10.100.1.0/24 is directly connected, GigabitEthernet0/0.100
L        10.100.1.1/32 is directly connected, GigabitEthernet0/0.100
C        10.200.1.0/24 is directly connected, GigabitEthernet0/0.200
L        10.200.1.1/32 is directly connected, GigabitEthernet0/0.200
      192.68.117.0/24 is variably subnetted, 2 subnets, 2 masks
C        192.68.117.0/24 is directly connected, GigabitEthernet0/0.117
L        192.68.117.1/32 is directly connected, GigabitEthernet0/0.117
      192.168.17.0/24 is variably subnetted, 4 subnets, 2 masks
C        192.168.17.0/30 is directly connected, GigabitEthernet0/1
L        192.168.17.1/32 is directly connected, GigabitEthernet0/1
C        192.168.17.8/30 is directly connected, GigabitEthernet0/2
L        192.168.17.9/32 is directly connected, GigabitEthernet0/2

Configuration for 2.2.2.2

router ospf 1
router-id 2.2.2.2
network 10.10.2.0 0.0.0.255 area 0
network 10.100.2.0 0.0.0.255 area 0
network 192.168.17.0 0.0.0.3 area 0

Neighbors for Router 2.2.2.2

Neighbor ID     Pri   State           Dead Time   Address         Interface
1.1.1.1           1   FULL/BDR        00:00:35    192.168.17.1    GigabitEtherne
t0/1

Dtabase for Router 2.2.2.2

           OSPF Router with ID (2.2.2.2) (Process ID 1)

                Router Link States (Area 0)

Link ID         ADV Router      Age         Seq#       Checksum Link count
1.1.1.1         1.1.1.1         1528        0x80000006 0x003837 4
2.2.2.2         2.2.2.2         1533        0x80000061 0x00F4D4 1
3.3.3.3         3.3.3.3         1528        0x8000005C 0x007343 1

                Net Link States (Area 0)

Link ID         ADV Router      Age         Seq#       Checksum
192.168.17.2    2.2.2.2         1528        0x80000050 0x00A7B5
192.168.17.10   3.3.3.3         1525        0x80000052 0x0057F3

Route Table for Router 2.2.2.2

     2.0.0.0/32 is subnetted, 1 subnets
C        2.2.2.2 is directly connected, Loopback1
      10.0.0.0/24 is subnetted, 2 subnets
O        10.10.1.0 [110/2] via 192.168.17.1, 00:26:37, GigabitEthernet0/1
O        10.100.1.0 [110/2] via 192.168.17.1, 00:26:37, GigabitEthernet0/1
      192.168.17.0/24 is variably subnetted, 3 subnets, 2 masks
C        192.168.17.0/30 is directly connected, GigabitEthernet0/1
L        192.168.17.2/32 is directly connected, GigabitEthernet0/1
O        192.168.17.8/30
           [110/2] via 192.168.17.1, 00:26:27, GigabitEthernet0/1

Configuration for Router 3.3.3.3

router ospf 1
router-id 3.3.3.3
log-adjacency-changes
network 10.100.3.0 0.0.0.255 area 0
network 10.200.3.0 0.0.0.255 area 0
network 192.168.17.8 0.0.0.3 area 0

Neighbors for Router 3.3.3.3

Neighbor ID     Pri   State           Dead Time   Address         Interface
1.1.1.1           1   FULL/BDR        00:00:35    192.168.17.9    GigabitEtherne
t0/1

Database for Router 3.3.3.3

           OSPF Router with ID (3.3.3.3) (Process ID 1)

                Router Link States (Area 0)

Link ID         ADV Router      Age         Seq#       Checksum Link count
1.1.1.1         1.1.1.1         1854        0x80000006 0x003837 4
2.2.2.2         2.2.2.2         1860        0x80000061 0x00F4D4 1
3.3.3.3         3.3.3.3         1853        0x8000005C 0x007343 1

                Net Link States (Area 0)

Link ID         ADV Router      Age         Seq#       Checksum
192.168.17.2    2.2.2.2         1855        0x80000050 0x00A7B5
192.168.17.10   3.3.3.3         1849        0x80000052 0x0057F3

Route Table for Routerr 3.3.3.3


      3.0.0.0/32 is subnetted, 1 subnets
C        3.3.3.33 is directly connected, Loopback1
      10.0.0.0/8 is variably subnetted, 4 subnets, 2 masks
O        10.10.1.0/24 [110/2] via 192.168.17.9, 00:31:29, GigabitEthernet0/1
C        10.10.3.0/24 is directly connected, GigabitEthernet0/0.10
L        10.10.3.1/32 is directly connected, GigabitEthernet0/0.10
O        10.100.1.0/24 [110/2] via 192.168.17.9, 00:31:29, GigabitEthernet0/1
      192.168.17.0/24 is variably subnetted, 3 subnets, 2 masks
O        192.168.17.0/30
           [110/2] via 192.168.17.9, 00:31:29, GigabitEthernet0/1
C        192.168.17.8/30 is directly connected, GigabitEthernet0/1
L        192.168.17.10/32 is directly connected, GigabitEthernet0/1

Labels:
0 Helpful
41 Replies 41

Go to solution
ed.crawford
Level 1
Level 1
In response to IAN WHITMORE

‎03-07-2011 02:19 AM

After configuring these commands I now have routes, however they are comming in as external routes.  But this will work.

#redistribute connected subnets

#redistribute static subnets

0 Helpful

Go to solution
IAN WHITMORE
Level 4
Level 4
In response to ed.crawford

‎03-07-2011 05:02 AM

Thats because when you redistribute they will be external. If you don't want this, and what I can see from your config, you need to advertise the networks. You seem to be missing some but I don't know if that is by design / your requirements.

Remeber in OPSF your network commands really just tell the router which interfaces will participate in OSPF and the networks you want to advertise. You only need to "speak" OSPF on those interfaces directly involved in establishing neigbor relationships and so I would add the passive default command. I used GNS3 to make my lab so my interfaces are different to your, but you should get the idea.

For exmaple, if you want full connectivity I would do the following (and this way you don't get external routes).

1.1.1.1

router ospf 1

router-id 1.1.1.1

log-adjacency-changes

network 1.1.1.1 0.0.0.0 area 0                ----> I add this to be able to ping the loopback addresses.

network 10.10.1.0 0.0.0.255 area 0

network 10.100.1.0 0.0.0.255 area 0

network 128.11.0.0 0.0.255.255 area 0

network 192.168.17.0 0.0.0.3 area 0

network 192.168.17.8 0.0.0.3 area 0

network 10.10.10.0 0.0.0.255 area 0       ----> I add this, missing?.

passive-interface default                        -----> Added. I only want to advertise OSPF to my neighbors so I turn off by default on all interfaces

no passive-interface FastEthernet0/0      -----> And tun on again here on this interface 

no passive-interface FastEthernet0/1      -----> And this one.

2.2.2.2
router ospf 1
router-id 2.2.2.2
log-adjacency-changes
network 2.2.2.2 0.0.0.0 area 0                ----> I add this to be able to ping the loopback addresses.
network 10.10.2.0 0.0.0.255 area 0
network 10.100.2.0 0.0.0.255 area 0
network 128.10.0.0 0.0.255.255 area 0    ----> I added this, missing?
network 192.168.17.0 0.0.0.3 area 0
passive-interface default
no passive-interface FastEthernet0/0
3.3.3.3
router ospf 1
router-id 3.3.3.3
log-adjacency-changes
network 3.3.3.3 0.0.0.0 area 0                ----> I add this to be able to ping the loopback addresses.
network 10.10.3.0 0.0.0.255 area 0
network 10.100.3.0 0.0.0.255 area 0
network 10.200.3.0 0.0.0.255 area 0
network 192.168.17.8 0.0.0.3 area 0
passive-interface default
no passive-interface FastEthernet0/0
Doing this I get full routing tables and full connectivity:
R7 - My HUB routers
R7(config-router)#do sh ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route
Gateway of last resort is not set
     1.0.0.0/32 is subnetted, 1 subnets
C       1.1.1.1 is directly connected, Loopback1
     2.0.0.0/32 is subnetted, 1 subnets
O       2.2.2.2 [110/2] via 192.168.17.2, 00:05:38, FastEthernet0/0
     3.0.0.0/32 is subnetted, 1 subnets
O       3.3.3.3 [110/2] via 192.168.17.10, 00:05:38, FastEthernet0/1
O    128.10.0.0/16 [110/2] via 192.168.17.2, 00:05:38, FastEthernet0/0
C    128.11.0.0/16 is directly connected, FastEthernet1/0.200
     10.0.0.0/8 is variably subnetted, 6 subnets, 2 masks
C       10.10.1.0/24 is directly connected, FastEthernet1/0.10
O       10.10.2.0/24 [110/2] via 192.168.17.2, 00:05:38, FastEthernet0/0
O       10.10.3.0/24 [110/2] via 192.168.17.10, 00:05:38, FastEthernet0/1
C       10.10.10.0/29 is directly connected, FastEthernet1/0
O       10.100.2.0/24 [110/2] via 192.168.17.2, 00:05:39, FastEthernet0/0
C       10.100.1.0/24 is directly connected, FastEthernet1/0.100
     192.168.17.0/30 is subnetted, 2 subnets
C       192.168.17.8 is directly connected, FastEthernet0/1
C       192.168.17.0 is directly connected, FastEthernet0/0
C    192.68.117.0/24 is directly connected, FastEthernet1/0.117
So the question is, doing it htis way, what still sin't working for you? It should all work. Maybe you need to redistribute static subnets on one of your routers because you have networks declared in the network statement, but no interfaces in those networks. So you could put a static route in the table and redistribute? But then why are you advertising these networks anyway on router 3.3.3.3? (network 10.100.3.0 & 10.200.3.0). OK I see one is your voice vlan but you have no dot1q interface in this vlan at the momet so it doesn't advertise...
Hope all this is making sense.
Regards,
Ian
0 Helpful

Go to solution
ed.crawford
Level 1
Level 1
In response to IAN WHITMORE

‎03-07-2011 06:18 AM

That has done the trick Ian.  Thanks alot for your help.

0 Helpful

Go to solution
IAN WHITMORE
Level 4
Level 4
In response to ed.crawford

‎03-07-2011 07:48 AM

Your welcome Ed. If it is now working, can you resolve the post and rate the useful ones.

Glad to have helped.

Many thanks,

Ian

0 Helpful

Go to solution
ed.crawford
Level 1
Level 1
In response to IAN WHITMORE

‎03-07-2011 01:45 AM

Here it iss Ian:

1.1.1.1

Building configuration...


Current configuration : 5173 bytes
!
! Last configuration change at 17:15:56 UTC Wed Mar 2 2011
!
version 15.1
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname NGHA-RH-RTR-01
!
boot-start-marker
boot-end-marker
!
!
logging buffered 4096
enable secret 5 $1$YwZs$sMpU8rk.4qx3SYfJuy13D1
!
no aaa new-model
clock summer-time BST recurring last Sun Mar 1:00 last Sun Oct 1:00
!
no ipv6 cef
ip source-route
ip cef
!
!
!
!
!
multilink bundle-name authenticated
!
!
!
!
!
crypto pki token default removal timeout 0
!
crypto pki trustpoint TP-self-signed-97093935
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-97093935
revocation-check none
!
!
crypto pki certificate chain TP-self-signed-97093935
certificate self-signed 01
  30820227 30820190 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
  2F312D30 2B060355 04031324 494F532D 53656C66 2D536967 6E65642D 43657274
  69666963 6174652D 39373039 33393335 301E170D 31313033 30323134 31353036
  5A170D32 30303130 31303030 3030305A 302F312D 302B0603 55040313 24494F53
  2D53656C 662D5369 676E6564 2D436572 74696669 63617465 2D393730 39333933
  3530819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281 8100E8DF
  2952E6FE 0E7F4B75 ABCCF656 89E194E7 D0C6431D 0FB7E818 91193B9F 04DC9042
  A4429447 E34B6E82 EE0BEF20 34DFC5BB 4EC65F40 0FFB9E33 14C5A141 6B735C5B
  2FB07B87 54734F9E EEBAF56B 0B6CE98D DF355904 1F9AFE3E D50265FD 6BF84FB1
  3DEA001C FF4B3B26 BEDEC29C D58C1A17 3546BFB1 A3AAA62E 0FF97C7D 716B0203
  010001A3 53305130 0F060355 1D130101 FF040530 030101FF 301F0603 551D2304
  18301680 14492C4D F15C5EB8 1DBFE6BD A83B251C 1304972D C8301D06 03551D0E
  04160414 492C4DF1 5C5EB81D BFE6BDA8 3B251C13 04972DC8 300D0609 2A864886
  F70D0101 04050003 8181003D 6CA55235 47E41DDB DDA5653F 316410E2 C8798E3B
  30D3767F 87F7A4A9 73C6F3CB 3E939741 FB202B25 F5A0E394 120B3AB3 C4D268FE
  E2926FC3 E53567FE 366B9705 B5A82537 8B87D062 91D25456 32EB9826 E3A5B041
  82D3E592 FDBA2B6B 09AA5DD0 26FE3B08 FE679823 D32CF2FB BC1BC9C9 694931C3
  8EB51516 EF599FA7 E402A7
   quit
voice-card 0
!
!
!
!
!
!
!
license udi pid CISCO2911/K9 sn FCZ1504276K
hw-module pvdm 0/0
!
!
!
username Administrator password 0 1pt4ngha priv 15
!
redundancy
!
!
!
!
!
!
interface Loopback1
ip address 1.1.1.1 255.255.255.255
!
interface GigabitEthernet0/0
description NGHA-RH-SW-01
ip address 10.10.10.1 255.255.255.248
duplex full
speed 1000
!
interface GigabitEthernet0/0.10
description MANAGEMENT VLAN
encapsulation dot1Q 10
ip address 10.10.1.1 255.255.255.0
!
interface GigabitEthernet0/0.100
description VOICE VLAN
encapsulation dot1Q 100
ip address 10.100.1.1 255.255.255.0
!
interface GigabitEthernet0/0.117
encapsulation dot1Q 117
ip address 192.68.117.1 255.255.255.0
!
interface GigabitEthernet0/0.200
encapsulation dot1Q 200
ip address 128.11.1.1 255.255.0.0
!
interface GigabitEthernet0/1
description Link to Bardowie
ip address 192.168.17.1 255.255.255.252
duplex auto
speed auto
!
interface GigabitEthernet0/2
description Link to Vulcan Street
ip address 192.168.17.9 255.255.255.252
duplex auto
speed auto
!
router ospf 1
router-id 1.1.1.1
network 10.10.1.0 0.0.0.255 area 0
network 10.100.1.0 0.0.0.255 area 0
network 128.11.0.0 0.0.255.255 area 0
network 192.168.17.0 0.0.0.3 area 0
network 192.168.17.8 0.0.0.3 area 0
!
ip forward-protocol nd
!
ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
!
!
!
snmp-server community ttsnmp RW
snmp-server system-shutdown
snmp-server enable traps tty
snmp-server enable traps isdn call-information
snmp-server enable traps isdn layer2
snmp-server enable traps config
snmp-server enable traps entity
snmp-server enable traps rsvp
snmp-server enable traps ipsla
snmp-server host 10.100.3.21 icdt
!
control-plane
!
!
!
!
mgcp profile default
!
!
!
!
!
gatekeeper
shutdown
!
!
banner motd ^CC *******************************************************************************

*******************************************************************************
**                                                                                 **
**        Access to North Glasgow Housing Association Systems is for authorised users only        **
**   Unauthorised access contravenes the Computer Misuse Act 1990 and may         **
**         incur criminal or civil penalties including damages                     **
**                                                                                   **
**      Please log out immediately if you are not an authorised user             **
**                                                                               **
*******************************************************************************

*******************************************************************************
^C
!
line con 0
line aux 0
line vty 0 4
login
transport input all
line vty 5 15
access-class 23 in
privilege level 15
login local
transport input telnet ssh
!
scheduler allocate 20000 1000
ntp server 131.107.1.10
ntp peer 132.163.4.101
ntp server 132.163.4.102
ntp server 132.163.4.103
end

2.2.2.2

Building configuration...


Current configuration : 5945 bytes
!
! Last configuration change at 09:33:18 UTC Mon Mar 7 2011
!
version 15.1
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname NGHA-BD-RTR-01
!
boot-start-marker
boot-end-marker
!
!
logging buffered 4096
no logging console
enable secret 5 $1$4HVb$YOp7FrBNAkt7y2ubWQmb61
!
no aaa new-model
clock summer-time BST recurring last Sun Mar 1:00 last Sun Oct 1:00
!
no ipv6 cef
ip source-route
ip cef
!
!
!
ip dhcp excluded-address 10.100.2.1 151.100.2.254
ip dhcp excluded-address 10.100.2.1 10.100.2.50
!
ip dhcp pool VOICE
   network 10.100.2.0 255.255.255.0
   option 150 ip 10.100.1.20
   dns-server 128.11.7.100 128.11.7.101
   default-router 10.100.2.1
!
!
ip domain name yourdomain.com
multilink bundle-name authenticated
!
!
!
!
!
crypto pki token default removal timeout 0
!
crypto pki trustpoint TP-self-signed-2894120566
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-2894120566
revocation-check none
!
!
crypto pki certificate chain TP-self-signed-2894120566
certificate self-signed 01
  3082022B 30820194 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
  31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
  69666963 6174652D 32383934 31323035 3636301E 170D3131 30333032 31343134
  33355A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
  4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D32 38393431
  32303536 3630819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
  8100AADE F594306C 578B8177 D901CCCA 458327DF BA1D8B7E B7068154 328D274D
  C5922825 A03648E6 F0A892AF 2F5244A9 7AF677F6 BF2CBA84 FF73DF47 6DE63BD1
  291D491D 139D5331 40BF9369 A08A51F7 98AF1066 0DFB9C1B 0389EF9E AA47458E
  9015B61D BF748955 A042ED2E 7337103D 25326463 FA3652CF B1F65BB5 0D190005
  E7030203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF 301F0603
  551D2304 18301680 14F6E963 90E6B7C2 0678B84A D7C26D26 BB31E0B4 96301D06
  03551D0E 04160414 F6E96390 E6B7C206 78B84AD7 C26D26BB 31E0B496 300D0609
  2A864886 F70D0101 04050003 81810056 18D733F2 B93ADD98 6F3CC724 84E59FEF
  1DFCD3A8 82925308 88712E63 52EE20CC 1E8264F8 45BC8841 B7B1D145 E76EF552
  A0522B0E C86A3B38 3342E3E1 7D5ECAC5 28DA332E 166A30D1 B18F260B 38B0A3A7
  9030D75A 72D40594 EC0D68C4 D9668FA5 3ED32E11 5CA15276 B26A9755 E18437A0
  7B00B9FA 0991394D DFAE3277 A8A16E
   quit
voice-card 0
!
!
!
!
!
!
!
license udi pid CISCO2911/K9 sn FCZ15042745
hw-module pvdm 0/0
!
!
!
!
redundancy
!
!
!
!
!
!
interface Loopback1
ip address 2.2.2.2 255.255.255.255
!
interface GigabitEthernet0/0
description NGHA-BD-SW-01
no ip address
duplex full
speed 1000
!
interface GigabitEthernet0/0.10
description MANAGEMENT VLAN
encapsulation dot1Q 10
ip address 10.10.2.1 255.255.255.0
!
interface GigabitEthernet0/0.100
description VOICE VLAN
encapsulation dot1Q 100
ip address 10.100.2.1 255.255.255.0
!
interface GigabitEthernet0/0.200
description DATA VLAN
encapsulation dot1Q 200
ip address 128.10.1.1 255.255.0.0
!
interface GigabitEthernet0/1
description Link to Reidhouse
ip address 192.168.17.2 255.255.255.252
ip ospf priority 0
duplex auto
speed auto
!
interface GigabitEthernet0/2
no ip address
shutdown
duplex auto
speed auto
!
router ospf 1
router-id 2.2.2.2
priority 0
redistribute connected subnets
redistribute static subnets
network 10.10.2.0 0.0.0.255 area 0
network 10.100.2.0 0.0.0.255 area 0
network 192.168.17.0 0.0.0.3 area 0
!
ip forward-protocol nd
!
ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
!
!
!
!
control-plane
!
!
!
!
mgcp profile default
!
!
!
!
!
gatekeeper
shutdown
!
!
banner exec ^C
% Password expiration warning.
-----------------------------------------------------------------------

Cisco Configuration Professional (Cisco CP) is installed on this device
and it provides the default username "cisco" for  one-time use. If you have
already used the username "cisco" to login to the router and your IOS image
supports the "one-time" user option, then this username has already expired.
You will not be able to login to the router with this username after you exit
this session.

It is strongly suggested that you create a new username with a privilege level
of 15 using the following command.

username privilege 15 secret 0

Replace and with the username and password you want to
use.

-----------------------------------------------------------------------
^C
banner login ^C
-----------------------------------------------------------------------
Cisco Configuration Professional (Cisco CP) is installed on this device.
This feature requires the one-time use of the username "cisco" with the
password "cisco". These default credentials have a privilege level of 15.

YOU MUST USE CISCO CP or the CISCO IOS CLI TO CHANGE THESE  PUBLICLY-KNOWN
CREDENTIALS

Here are the Cisco IOS commands.

username   privilege 15 secret 0
no username cisco

Replace and with the username and password you want
to use.

IF YOU DO NOT CHANGE THE PUBLICLY-KNOWN CREDENTIALS, YOU WILL NOT BE ABLE
TO LOG INTO THE DEVICE AGAIN AFTER YOU HAVE LOGGED OFF.

For more information about Cisco CP please follow the instructions in the
QUICK START GUIDE for your router or go to http://www.cisco.com/go/ciscocp
-----------------------------------------------------------------------
^C
!
line con 0
privilege level 15
password 1pt4ngha
login
line aux 0
line vty 0 4
access-class 23 in
privilege level 15
password 1pt4ngha
login
length 0
transport input telnet ssh
line vty 5 15
access-class 23 in
privilege level 15
login local
transport input telnet ssh
!
scheduler allocate 20000 1000
ntp server 131.107.1.10
ntp peer 132.163.4.101
ntp server 132.163.4.102
ntp server 132.163.4.103
end

3.3.3.3

Building configuration...

Current configuration : 4727 bytes
!
! Last configuration change at 09:40:46 UTC Mon Mar 7 2011
!
version 15.0
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname NGHA-VS-RTR-01
!
boot-start-marker
boot-end-marker
!
logging buffered 51200 warnings
enable secret 5 $1$sBe2$oHFEx5Tfg/KrRtLpbTMrk/
!
no aaa new-model
clock summer-time BST recurring last Sun Mar 1:00 last Sun Oct 1:00
!
no ipv6 cef
ip source-route
ip cef
!
!
ip dhcp excluded-address 10.100.3.1 10.100.3.50
ip dhcp excluded-address 10.100.3.151 10.100.3.254
!
ip dhcp pool VOICE
   network 10.100.3.0 255.255.255.0
   default-router 10.100.3.1
   dns-server 128.11.7.100 128.11.7.101
   option 150 ip 10.100.1.20
!
!
ip domain name yourdomain.com
multilink bundle-name authenticated
!
!
!
crypto pki trustpoint TP-self-signed-2804730937
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-2804730937
revocation-check none
rsakeypair TP-self-signed-2804730937
!
!
crypto pki certificate chain TP-self-signed-2804730937
certificate self-signed 01
  30820255 308201BE A0030201 02020101 300D0609 2A864886 F70D0101 04050030
  31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
  69666963 6174652D 32383034 37333039 3337301E 170D3131 30333032 31333030
  31325A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
  4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D32 38303437
  33303933 3730819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
  8100D8DA 61776F38 AF2B01F9 7AB45A9C 25EBB81D A32B0986 A43345A6 B9F4EB68
  07BA78C2 40C8C6C7 B8214DB3 CD92E2BB 9BFB883F 83F3EA1D 60025A5D 48DFB03B
  046C874B 9141C151 F04CB8DA 3550CC0D 144E0FEE 16B52E8E 522D669C 282761F3
  973852C8 81CCE435 25C4F797 531B2DF7 89BFAF33 DE23C67B 45B498B7 5B6383F6
  6A0D0203 010001A3 7D307B30 0F060355 1D130101 FF040530 030101FF 30280603
  551D1104 21301F82 1D4E4748 412D5653 2D525452 2D30312E 796F7572 646F6D61
  696E2E63 6F6D301F 0603551D 23041830 168014CD E0AAF2F0 98018712 9249FA74
  69539694 4F3E5530 1D060355 1D0E0416 0414CDE0 AAF2F098 01871292 49FA7469
  5396944F 3E55300D 06092A86 4886F70D 01010405 00038181 0012177C 493D8563
  20306C6F FA4CBF44 550C0AE7 F70967FF E5F62BB0 2233FF44 39299A8B 744291AF
  24A4E209 766C8658 0CF58FFE 339CBFEB 7D218841 D9D0FE3C DD485C8E 1057E035
  7645D1C4 1F9E02E0 3B358FEF 72A06519 B6B20FD1 CF35261C 38263159 F372C0BE
  38BF72E8 1B49148E 7ACFEBDF 236F140A 9FF10CCA 439EC56D 59
   quit
license udi pid CISCO2901/K9 sn FCZ1446C0DH
!
!
!
!
!
!
!
!
interface Loopback1
ip address 3.3.3.33 255.255.255.255
!
interface GigabitEthernet0/0
description NGHA-VS-SW-01
no ip address
duplex full
speed 100
!
interface GigabitEthernet0/0.10
description MANAGEMENT VLAN
encapsulation dot1Q 10
ip address 10.10.3.1 255.255.255.0
!
interface GigabitEthernet0/1
description Link to Reidhouse
ip address 192.168.17.10 255.255.255.252
ip ospf priority 0
duplex auto
speed auto
!
router ospf 1
router-id 3.3.3.3
priority 0
log-adjacency-changes
redistribute connected subnets
redistribute static subnets
network 10.100.3.0 0.0.0.255 area 0
network 10.200.3.0 0.0.0.255 area 0
network 192.168.17.8 0.0.0.3 area 0
!
ip forward-protocol nd
!
ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
!
!
!
!
!
control-plane
!
banner motd ^C
*******************************************************************************

*******************************************************************************
**                                                                           **
**        Access to North Glasgow Housing Association Systems is for authorised users only        **
**   Unauthorised access contravenes the Computer Misuse Act 1990 and may       **
**         incur criminal or civil penalties including damages                  **
**                                                                             **
**      Please log out immediately if you are not an authorised user          **
**                                                                         **
*******************************************************************************

*******************************************************************************
^C
!
line con 0
privilege level 15
password 1pt4ngha
login
line aux 0
line vty 0 4
access-class 23 in
privilege level 15
password 1pt4ngha
login
length 0
transport input telnet ssh
line vty 5 15
access-class 23 in
privilege level 15
login local
transport input telnet ssh
!
scheduler allocate 20000 1000
ntp server 131.107.1.10
ntp peer 132.163.4.101
ntp server 132.163.4.102
ntp server 132.163.4.103
end

0 Helpful

Go to solution
ed.crawford
Level 1
Level 1
In response to IAN WHITMORE

‎03-03-2011 12:50 AM

Correct, they do.

0 Helpful

Go to solution
IAN WHITMORE
Level 4
Level 4
In response to ed.crawford

‎03-03-2011 01:14 AM

Yep. You should be already to go now...finally.

Regards,

Ian

0 Helpful

Go to solution
post
Level 1
Level 1
In response to IAN WHITMORE

‎03-03-2011 03:30 AM

Was this resolved? What was the problem? redist connect/static on R2 and R3?

0 Helpful

Go to solution
ed.crawford
Level 1
Level 1
In response to post

‎03-03-2011 04:03 AM

Not yet.  I won't be able to test until Monday.

0 Helpful

Go to solution
ed.crawford
Level 1
Level 1
In response to ed.crawford

‎03-03-2011 04:10 AM

Guys:

I'm looking at my past configurations on other installs that have worked, and are working fine.  The only difference that I can see is that I have a bandwidth statement on the interfaces passing OSPF.  Could this make a difference?  I would think that this would only effect the metric value.

0 Helpful

Go to solution
post
Level 1
Level 1
In response to ed.crawford

‎03-03-2011 04:25 AM

I dont think thats relevant here, since both R1 and R2 are stubs.

have you done any ospf debugging? try shut/no shut on of the local interface while debugging OSPF.

0 Helpful

Go to solution
ed.crawford
Level 1
Level 1
In response to post

‎03-03-2011 04:45 AM

yes I have.  You see the traffic that you would expect, neighbor negotiation, and helo packets after it is established.  Strange.

0 Helpful
Customers Also Viewed These Support Documents
Review Cisco Networking products for a $25 gift card