cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2253
Views
0
Helpful
6
Replies

Router Testing

cyoung1981
Level 1
Level 1

I have been working on the config of an ASR 1002 and an ASA 5585 for a little while now. I think I have everything set up. But I want to test it before going live. I am moving from a 7204 router and after talking to TAC have now set up service instances and BDI interfaces in the ASR to replace the old way. All the config is done on the ASR. I have a 3560 switch set up to do my testing. As soon as I plug in the 3650 my BDI interfaces come up. I then console to the 3750 and configure a couple vlans based off the dot1q tag my ASR is going to be looking for. I then built vlan interfaces with the ip's that will be on the remote network. ( this will be BGP when it goes live). My BDI interfaces are up on the ASR and the vlan interfaces are up on the 3560 but I can't ping between them. I have tried setting the connection between the ASR and 3560 to trunk, I have tried it as an access port, and I have tried it as a routed connection. Nothing works. I really need to be able to test this. Any advice the community could give me would be much appreciated.

1 Accepted Solution

Accepted Solutions

The encapsulation is already under the physical interface.  You should not need it under the bdi.

HTH

View solution in original post

6 Replies 6

Reza Sharifi
Hall of Fame
Hall of Fame

Can you post the config from the ASR and also the 3560?

What ports are using to connect the ASR to the 3560?

Here is the config from the ASR:

=~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2015.11.06 13:52:46 =~=~=~=~=~=~=~=~=~=~=~=

ASR#sh run
Building configuration...

Current configuration : 4995 bytes
!
version 15.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
no platform punt-keepalive disable-kernel-core
!
hostname ASR
!
boot-start-marker
boot-end-marker
!
aqm-register-fnf
!
vrf definition Mgmt-intf
!
address-family ipv4
exit-address-family
!
address-family ipv6
exit-address-family
!
enable secret xxxxxxxx
!
no aaa new-model
clock timezone UTC 3 0
!
!
!
!
!


!
!
!
!
!
!
!
!
!
!
!
multilink bundle-name authenticated
password encryption aes
!
!
!
!
!
!
!
archive
log config
hidekeys
spanning-tree extend system-id
!
!
redundancy
mode none
!
!
!
ip tftp source-interface GigabitEthernet0
!
bridge irb
!
!
!
!
!
!
interface GigabitEthernet0/0/0
no ip address
negotiation auto
service instance 2805 ethernet
encapsulation dot1q 2805
rewrite ingress tag pop 1 symmetric
bridge-domain 2805
!
service instance 2835 ethernet
encapsulation dot1q 2835
rewrite ingress tag pop 1 symmetric
bridge-domain 2835
!
service instance 2905 ethernet
encapsulation dot1q 2905
rewrite ingress tag pop 1 symmetric
bridge-domain 2905
!
service instance 2965 ethernet
encapsulation dot1q 2965
rewrite ingress tag pop 1 symmetric
bridge-domain 2965
!
!
interface GigabitEthernet0/0/1
no ip address
negotiation auto
service instance 1 ethernet
encapsulation dot1q 1
rewrite ingress tag pop 1 symmetric
!
service instance 2965 ethernet
encapsulation dot1q 2965
rewrite ingress tag pop 1 symmetric
bridge-domain 2965
!
!
interface GigabitEthernet0/0/2
no ip address
shutdown
negotiation auto
!
interface GigabitEthernet0/0/3
no ip address
shutdown
negotiation auto
!
interface GigabitEthernet0/0/4
no ip address
shutdown
negotiation auto
!
interface GigabitEthernet0/0/5
no ip address
shutdown
negotiation auto
!
interface TenGigabitEthernet0/1/0
description Connection to ASA
no ip address
no shut
load-interval 30
service instance 1 ethernet
description Internet Traffic
encapsulation dot1q 1
rewrite ingress tag pop 1 symmetric
!
!
interface TenGigabitEthernet0/2/0
ip address x.x.88.146 255.255.255.252
load-interval 30
no shut
!
interface TenGigabitEthernet0/3/0
no ip address
shutdown
!
interface GigabitEthernet0
vrf forwarding Mgmt-intf
no ip address
shutdown
negotiation auto
!
interface BDI1
ip address x.x.144.1 255.255.255.0
encap dot1q 1
no shutdown
!
interface BDI2805
ip address x.x.55.226 255.255.255.252
encap dot1q 2805
no shutdown
!
interface BDI2835
ip address x.x.55.134 255.255.255.252
encap dot1q 2835
no shutdown
!
interface BDI2905
ip address x.x.5.253 255.255.255.252
encap dot1q 2905
no shutdown
!
router bgp xxxxxx
bgp log-neighbor-changes
network x.x.144.0 mask 255.255.240.0
redistribute static
neighbor x.x.88.145 remote-as xxxx
neighbor x.x.88.145 description # xxxxx
neighbor x.x.88.145 prefix-list xxx out
neighbor x.x.55.133 remote-as xxxxx
neighbor x.x.55.133 description # TETN Internet xxxxx
neighbor x.x.55.133 prefix-list xxx out
neighbor x.x.55.225 remote-as xxxxx
neighbor x.x.55.225 description # xxx ASxxxxx
neighbor x.x.55.225 prefix-list xxx out
!
no ip forward-protocol nd
!
no ip http server
ip route x.x.5.16 255.255.255.240 x.x.5.254
ip route x.x.144.0 255.255.248.0 x.x.144.2
!
!
ip prefix-list xxx seq 5 permit x.x.144.0/20 le 24
kron occurrence weekly-backup at 0:05 Sun recurring
policy-list backup
!
kron policy-list backup
cli write memory
cli write memory
!
access-list 11 permit x.x.145.74
access-list 11 permit x.x.145.76
access-list 11 permit x.x.144.0 0.0.0.255
access-list 102 deny tcp any any eq msrpc
access-list 102 deny tcp any any eq 137
access-list 102 deny tcp any any eq 138
access-list 102 deny tcp any any eq 445
access-list 102 deny tcp any any eq 4444
access-list 102 permit ip any any
!
snmp-server engineID local
snmp-server community
snmp-server community
snmp-server packetsize 2048
snmp-server enable traps tty
snmp-server host x.x.62.0 255.255.255.0
snmp-server host x.x.145.74 255.255.255.0
snmp-server host x.x.145.76 255.255.255.0
snmp-server host x.x.144.46 snmp
snmp-server host x.x.144.47 snmp
snmp-server host x.x.144.48 snmp
snmp-server host x.x.145.74 snmp
snmp-server host x.x.145.76 snmp
!
!
control-plane
!
!
!
!
!
!
!
!
!
line con 0
password xxxxxxxxxxx
login
stopbits 1
line aux 0
stopbits 1
line vty 0 4
password xxxxxxxxxx
login
length 0
!
!
end

It is connected to the 3560 on gi0/0/0

Here is the last 3560 config I tried:

Switch#sh run
Building configuration...

Current configuration : 1509 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Switch
!
!
no aaa new-model
system mtu routing 1500
vtp mode transparent
ip subnet-zero
!
!
!
!
no file verify auto
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
vlan 100,2805
!
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet0/3
!
interface GigabitEthernet0/4
!
interface GigabitEthernet0/5
!
interface GigabitEthernet0/6
!
interface GigabitEthernet0/7
!
interface GigabitEthernet0/8
!
interface GigabitEthernet0/9
!
interface GigabitEthernet0/10
!
interface GigabitEthernet0/11
!
interface GigabitEthernet0/12
!
interface GigabitEthernet0/13
!
interface GigabitEthernet0/14
!
interface GigabitEthernet0/15
!
interface GigabitEthernet0/16
!
interface GigabitEthernet0/17
!
interface GigabitEthernet0/18
!
interface GigabitEthernet0/19
!
interface GigabitEthernet0/20
!
interface GigabitEthernet0/21
!
interface GigabitEthernet0/22
!
interface GigabitEthernet0/23
!
interface GigabitEthernet0/24
!
interface GigabitEthernet0/25
!
interface GigabitEthernet0/26
!
interface GigabitEthernet0/27
!
interface GigabitEthernet0/28
!
interface Vlan1
no ip address
shutdown
!
interface Vlan2805
ip address x.x.55.225 255.255.255.252
!
ip classless
ip http server
!
!
!
control-plane
!
!
line con 0
line vty 5 15
!
end

See my output here from sh int for the 2805 interface:

Switch#sh int vlan2805
Vlan2805 is up, line protocol is up
Hardware is EtherSVI, address is 0023.ab7d.c141 (bia 0023.ab7d.c141)
Internet address is x.x.55.225/30
MTU 1500 bytes, BW 1000000 Kbit, DLY 10 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:00, output 00:01:46, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
9 packets input, 558 bytes, 0 no buffer
Received 0 broadcasts (0 IP multicasts)
0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
2 packets output, 128 bytes, 0 underruns
0 output errors, 0 interface resets
0 output buffer failures, 0 output buffers swapped out

It is up/up

Yet the other side is not reachable. Even if i force vlan 2805:

Switch#ping x.x.55.226

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to x.x.55.226, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
Switch#ping x.x.55.226 source vlan2805

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to x.x.55.226, timeout is 2 seconds:
Packet sent with a source address of x.x.55.225
.....
Success rate is 0 percent (0/5)

Have you tried the BDI interface without dot1q and test with ping?

interface BDI2805
ip address x.x.55.226 255.255.255.252
no shutdown

hmm. ok. it works with the encapsulation off. what do i do then? TAC told me I needed to have that on the bdi interface or it wouldn't work.

The encapsulation is already under the physical interface.  You should not need it under the bdi.

HTH

The encapsulation is already under the physical interface.  You should not need it under the bdi.

HTH

Review Cisco Networking for a $25 gift card