Dear Expert,
There is one network in HK and it is connected to ISP-A. The IP address block 192.168.80.0/21 was obtained. Five IP segments (VLANs) are allocated in HK with ospf 50:
192.168.80.0/24 (VLAN 80)
192.168.81.0/24 (VLAN 81)
192.168.82.0/24 (VLAN 82)
192.168.83.0/24 (VLAN 83)
192.168.87.0/24 (VLAN 87)
The similar infrastructure is installed in TW but only three IP segments (VLANs) are extend with different ospf 20 to be configured.
192.168.80.0/24 (VLAN 80)
192.168.81.0/24 (VLAN 81)
192.168.82.0/24 (VLAN 82)
Detail please refer following "existing configuration" as below.
It seems that VLAN 83 and 87 would be unreachable if R1 was out of order in HK. To minimise service impact and configuration change in TW, extra modification would be carried out in HK only. Grateful if expert would comment on the "extra modification" to see whether it is practical or not.
===== existing configuration ====
!
! ********* R1 **********
!
interface FastEthernet0/0
descrip Connect to ISP-A in HK
ip address 172.16.32.1 255.255.255.252
speed 100
full-duplex
!
interface FastEthernet0/1
descrip Connect to R2
ip address 172.16.70.1 255.255.255.252
speed 100
full-duplex
!
router bgp 50
bgp log-neighbor-changes
network 192.168.80.0 mask 255.255.248.0
neighbor 172.16.32.2 remote-as 100
neighbor 172.16.32.2 version 4
neighbor 172.16.32.2 prefix-list 1 out
no auto-summary
!
access-list 1 permit 192.168.80.0 0.0.7.255
!
router ospf 50
log-adjacency-changes
network 192.168.80.0 0.0.7.255 area 0
!
!
! ********* R2 **********
!
interface FastEthernet0/0
descrip Connect to R1
ip address 172.16.70.2 255.255.255.252
speed 100
full-duplex
!
interface FastEthernet0/1
descrip connect to SW1 FE0/1
no ip address
duplex auto
speed auto
!
interface FastEthernet0/1.80
descrip Connect to VLAN 80
encapsulation dot1Q 80
ip address 192.168.80.1 255.255.255.0
!
interface FastEthernet0/1.81
descrip Connect to VLAN 81
encapsulation dot1Q 81
ip address 192.168.81.1 255.255.255.0
!
interface FastEthernet0/1.82
descrip Connect to VLAN 82
encapsulation dot1Q 82
ip address 192.168.82.1 255.255.255.0
standby 82 ip 192.168.82.10
standby 82 priority 75
!
interface FastEthernet0/1.83
descrip Connect to VLAN 83
encapsulation dot1Q 83
ip address 192.168.83.1 255.255.255.0
!
interface FastEthernet0/1.87
descrip Connect to VLAN 87
encapsulation dot1Q 87
ip address 192.168.87.1 255.255.255.0
!
router ospf 50
log-adjacency-changes
network 192.168.80.0 0.0.7.255 area 0
!
ip route 0.0.0.0 0.0.0.0 172.16.70.1
!
! ********* SW1 **********
!
interface FastEthernet0/1
descri connect to R1 FE0/1
switchport mode trunk
no ip address
!
interface FastEthernet0/2
switchport access VLAN 80
switchport mode access
no ip address
!
interface FastEthernet0/3
switchport access VLAN 81
switchport mode access
no ip address
!
interface FastEthernet0/4
switchport access VLAN 82
switchport mode access
no ip address
!
interface FastEthernet0/5
switchport access VLAN 83
switchport mode access
no ip address
!
interface FastEthernet0/6
switchport access VLAN 87
switchport mode access
no ip address
!
interface FastEthernet0/24
descrip connect to WAN circuit 20M
switchport trunk allowed VLAN 80,81,82
switchport mode trunk
no ip address
!
interface Vlan1
no ip address
no ip route-cache
shutdown
!
interface Vlan10
ip address 192.168.80.254 255.255.255.0
no ip route-cache
!
ip default-gateway 192.168.80.1
no ip http server
!
!
! ********* R11 **********
!
interface FastEthernet0/0
descrip Connect to ISP-A in TW
ip address 172.16.64.1 255.255.255.252
speed 100
full-duplex
!
interface FastEthernet0/1
descrip Connect to R12
ip address 172.16.90.1 255.255.255.252
speed 100
full-duplex
!
!
router bgp 20
bgp log-neighbor-changes
network 192.168.80.0 mask 255.255.248.0
neighbor 172.16.64.2 remote-as 100
neighbor 172.16.64.2 version 4
neighbor 172.16.64.2 prefix-list 1 out
no auto-summary
!
access-list 1 permit 192.168.80.0 0.0.7.255
!
router ospf 20
log-adjacency-changes
network 192.168.80.0 0.0.7.255 area 0
!
!
! ********* R12 **********
!
interface FastEthernet0/0
descrip Connect to R11
ip address 172.16.90.2 255.255.255.252
speed 100
full-duplex
!
interface FastEthernet0/1
descrip connect to SW11 FE0/1
no ip address
duplex auto
speed auto
!
interface FastEthernet0/1.80
descrip Connect to VLAN 80
encapsulation dot1Q 80
ip address 192.168.80.2 255.255.255.0
!
interface FastEthernet0/1.81
descrip Connect to VLAN 81
encapsulation dot1Q 81
ip address 192.168.81.2 255.255.255.0
!
interface FastEthernet0/1.82
descrip Connect to VLAN 82
encapsulation dot1Q 82
ip address 192.168.82.2 255.255.255.0
standby 82 ip 192.168.82.10
standby 82 priority 150
!
!
router ospf 20
log-adjacency-changes
network 192.168.80.0 0.0.7.255 area 0
!
ip route 0.0.0.0 0.0.0.0 172.16.90.1
!
! ********* SW11 **********
!
interface FastEthernet0/1
descri connect to R11 FE0/1
switchport mode trunk
no ip address
!
interface FastEthernet0/2
switchport access VLAN 80
switchport mode access
no ip address
!
interface FastEthernet0/3
switchport access VLAN 81
switchport mode access
no ip address
!
interface FastEthernet0/4
switchport access VLAN 82
switchport mode access
no ip address
!
interface FastEthernet0/24
descrip connect to WAN circuit 20M
switchport trunk allowed VLAN 80,81,82
switchport mode trunk
no ip address
!
interface Vlan1
no ip address
no ip route-cache
shutdown
!
interface Vlan10
ip address 192.168.80.253 255.255.255.0
no ip route-cache
!
ip default-gateway 192.168.80.2
no ip http server
!
====== end of existing config =====
===== extra modification =====
!
! ********* R2 ***********
!
router ospf 50
log-adjacency-changes
network 192.168.80.0 0.0.7.255 area 0
!
router ospf 20
log-adjacency-changes
network 192.168.80.0 0.0.0.255 area 0
!
! ******** SW1 ******
!
interface FastEthernet0/24
descrip connect to WAN circuit 20M
switchport trunk allowed VLAN 80,81,82,83,87
switchport mode trunk
no ip address
!
! ******** SW11 ******
!
interface FastEthernet0/24
descrip connect to WAN circuit 20M
switchport trunk allowed VLAN 80,81,82,83,87
switchport mode trunk
no ip address
!
====== end of extra modification ======
