Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About David Lagace
10-12-2017
Stats
Member since
07-27-2012
14
Posts
5
Helpful
0
Solutions
06-09-2016
06:36 AM
I did! Sorry for not posting sooner.
Ended up that we had some Palo Alto Networks firewalls in between the provider router and ours. It was dropping asymmetric traffic with a rule rejecting non-SYN TCP traffic. Once the rule was removed everything worked fine.
--Dave
... View more
11-17-2014
07:28 AM
For the 3750-12S From http://www.cisco.com/c/en/us/products/collateral/switches/catalyst-3750-x-series-switches/data_sheet_c78-584733.html 194,224 hours For the GLC-T and MM From http://www.staples.com/Cisco-GLC-T-1000BASE-T-SFP-Gigabit-Interface-Converter/product_IM1C01843 MTBF: 1,000,000 hours --Dave
... View more
01-20-2014
06:59 AM
Hi Jon, It should according to what I can see: From the backup link looking-glass: When I have the Primary ISP on only (This would be the way I'd want it to look like) BGP routing table entry for xxx.xxx.xxx.xxx/24
Paths: (1 available, best #1 , table Default-IP-Routing-Table)
Not advertised to any peer
3356 zzzz yyyy
64.230.195.161 from 64.230.193.109 (64.230.195.161)
Origin IGP, metric 0, localpref 105, valid, internal, best
Community: 577:55 577:5504 577:10200 577:21216
Originator: 64.230.195.161, Cluster list: 64.230.193.109 64.230.193.187
Last update: Sun Jan 19 14:48:26 2014 When I have both the primary and (prospective) backup link on: BGP routing table entry for xxx.xxx.xxx.xxx/24
Paths: (1 available, best #1 , table Default-IP-Routing-Table)
Not advertised to any peer
yyyy yyyy yyyy yyyy
64.230.194.193 from 64.230.193.109 (64.230.194.193)
Origin IGP, metric 0, localpref 140, valid, internal, best
Community: 577:10232 577:21216 577:62004
Originator: 64.230.194.193, Cluster list: 64.230.193.109 64.230.193.186 64.230.193.16
Last update: Sun Jan 19 23:55:48 2014 Thanks, --Dave
... View more
01-20-2014
06:28 AM
Hi Jon, Thanks for your reply, The upstream provider I have for the backup link is advertising to its network that it can reach me through its link. While on my side i've only got the one default route as active from my other provider. I've tried adding as path prepending to the link but even so through their looking-glass I see my AS number repeated 5 times still as the best route in that network (and its direct peers) which should be the backup. Any ideas appreciated as to what may be going on? Thanks David
... View more
01-17-2014
12:29 PM
Hello, I've got some smaller routers that can't handle a full routing table. I was wondering how a router handles dual default routes over BGP all things being equal? In this case i'd want to set it up so that one would be the primary and if it failed the 2nd would take over. Would I need to set any attributes to acheive this? Thanks for your help, David
... View more
Labels:
01-16-2014
06:09 AM
Hello, Apologies in advance if this has been answered somewhere but I'm seeing an issue where I have multiple independant sites running BGP off my ASN with different advertised IP blocks and different ISPs. Site 1 ASN XXXXX Route Advertised: yyy.yyy.62.0/24 Site 2 ASN XXXXX Route Advertised: yyy.yyy.63.0/24 Site 3 ASN XXXXX Route Advertised: yyy.yyy.56.0/23 If I check the routing table from site 1 to see the routes from site 3, I don't see the route at all. I'm guessing this is normal. Is there a way to bypass this behaviour to get it to advertise inside the same AS? If not, is there someway to get all 3 sites to see each other? Thanks for your help David
... View more
Labels:
01-14-2014
03:50 AM
Hello All, I have a very perplexing issue. I am trying to get to a dual-homed configuration. Both my ISPs are working with BGP on separate routers. If I use only one or the other uniquely, the internet works, everything is good. When I activate both at once I see issues getting to certain websites, people attempting to login to our VPN can't seem to get to our VPN concentrator. Here's my config in a nutshell Full BGP tables from both providers (no default route) 1 block PI space 1 block ISP assigned but have permission to origin from my AS (Slowly IP renumbering to our PI space) Both IP spaces have HSRP configured on their router interfaces (x.x.x.254 x.x.x.253 HSRP=x.x.x.1) (y.y.y.253, y.y.y.254 HSRP=y.y.y.1) The tests I've been running are 3 fold From my PI space (x.x.x.x) to www.as577.net From my ISP assigned space (y.y.y.y) to www.as577.net From my LAN behind a firewall NAT'd to an ISP assigned space (z.z.z.z) to www.as577.net When using 1 ISP All three of these work. When activating both ISPs and getting the tables and waiting a requisite amount of time (5 mins) to make sure everything converges I seem to have issues getting to some sites and not others. IE www.google.com works, but the site above does not. I've tried wireshark from the client machines and I see the requests go out but not come back. DNS seems ok as I've tried to do nslookup on the site in question and am using the google public DNS and it's responding back with IPs. Just wondering if anyone might have any pointers as to other things I could check. Is there a reliable way to check if networks in my upstream are accepting my ISP assigned space from my AS? Thanks for your help --Dave
... View more
Labels:
12-20-2013
10:44 AM
Hi Harold, I was looking for a load sharing scenario where some traffic would go one way and others would go the other. I just wasn't sure on the details. The previous replies have set me straight as to what to expect. I'm just having trouble reaching some sites with both feeds running compared to when I just have one. I will work with my ISPs to figure out what might be going on when trying to reach these problematic sites. Thanks again, David
... View more
12-20-2013
10:41 AM
Hi Jon, That is what your routers have done. They have exchanged the routes learnt from the ISPs via IBGP but IBGP will not modify the AS path so it depends entirely on the AS path received from the ISPs. I think this is the crux of my misunderstanding. For equal AS path routes it hits the path out on the local router and that's fine. I would need to test a bit more with my providers as to why when I activate both ISPs I seem to not be able to reach certain sites that I was able to reach with only one ISP. I'm just wondering as well in regards to the show bgp summ why there's such a discrepancy in the amount of prefixes received on both routers iBGP peers. IE: Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd b.b.b.b 4 eee 79431 37 49039360 0 0 00:29:31 475485 192.168.50.10 4 fff 676380 432984 49039450 0 0 5d05h 450035 and a.a.a.a 4 ccc 81320 30 5250229 0 0 00:21:36 470446 192.168.50.20 4 fff 432991 676380 5250230 0 0 5d05h 227807 Thanks again for your replies, --David
... View more
12-20-2013
06:30 AM
Hello Harold, This is normal behavior since each BGP router will select the ebgp learnt prefixes if the as paths are equal on either side. Ok, should I put the HSRP master for both interfaces on the same router to make sure they go over the same link? It's just weird that when I have both links going in this configuration I'm able to get to some sites and others not so much. I was hoping to get some kind of routing table "magic" where the routers would receive the BGP prefixes from the ISPs, merge the two into some global route list and then the routers would send the 'LAN' traffic to the shortest AS-PATH to the Internet at large regardless that it's internal or external. I'm now seeing that's not the case. Have I got this right? Thanks again for your help David
... View more
12-20-2013
06:00 AM
Hi Jon, I'm not sure. I always assumed BGP would give the best route no matter on which router it was. If it just default routes (for the most part) to the local router where the interface is... doesn't it defeat the purpose of having it multi-router? May as well just have a default route out. Please correct me if i'm wrong, but wouldn't the routing tables converge and chose the best route between the two routers and always send traffic to the best route independent of what router the egress is? Thanks David
... View more
12-20-2013
05:14 AM
Hello, I'm having an issue where we want to implement a 2 router in two site configuration with one BGP peer in each site. While we move off our provider space, they've agreed to allow their IP space to be originated from our new AS. We've also added a wrinkle where we're doing HSRP for both our old provider space and our new IP space on different routers in case of LAN issues. If I run 1 ISP everything works as it's going to the 1 ISP. If I activate both, Traffic local to the HSRP master will go out the directly connected ISP (for the most part). Just wondering what maybe going on. Configs and testing below. A little background Site 1 Router interfaces gi0/0 v.v.v.v/30 connection to provider 1 gi0/1 w.w.w.253/23 New PI space for our AS HSRP STANDBY gi0/2 192.168.50.10/24 iBGP interface gi0/3 x.x.x.253/24 old provider space HSRP MASTER x.x.x.1 router bgp fff bgp log-neighbor-changes network w.w.w.0 mask 255.255.254.0 network x.x.x.0 neighbor a.a.a.a remote-as ccc neighbor a.a.a.a ebgp-multihop 255 neighbor a.a.a.a prefix-list OUT out neighbor 192.168.50.20 remote-as fff neighbor 192.168.50.20 next-hop-self ip prefix-list OUT seq 5 permit w.w.w.0/23 ip prefix-list OUT seq 10 permit x.x.x.0/24 Site 2 Router interfaces gi0/0 y.y.y.y/30 connection to provider 2 gi0/1 w.w.w.254/23 New PI space for our AS HSRP MASTER w.w.w.1 gi0/2 192.168.50.20/24 iBGP interface gi0/3 x.x.x.254/24 old provider space HSRP STANDBY router bgp fff bgp log-neighbor-changes network w.w.w.0 mask 255.255.254.0 network x.x.x.0 neighbor b.b.b.b remote-as eee neighbor b.b.b.b prefix-list OUT out neighbor 192.168.50.10 remote-as fff neighbor 192.168.50.10 next-hop-self ip prefix-list OUT seq 5 permit w.w.w.0/23 ip prefix-list OUT seq 10 permit x.x.x.0/24 When running 1 ISP everything works swimmingly When making both ISPs active the following occurs: If my source IP is w.w.w.200/23 I seem to go through provider2 connected to Site2 unless the network is directly connected to provider1 (Ie their website) If my source IP is x.x.x.x.2/24 I go through provider1 connected to Site1 unless the network is directly connected to provider2. Sh bgp summ from both routers: Site 2 BGP table version is 49039450, main routing table version 49039450 476858 network entries using 70574984 bytes of memory 925522 path entries using 59233408 bytes of memory 148030/75445 BGP path/bestpath attribute entries using 20132080 bytes of memory 133842 BGP AS-PATH entries using 5494338 bytes of memory 0 BGP route-map cache entries using 0 bytes of memory 0 BGP filter-list cache entries using 0 bytes of memory BGP using 155434810 total bytes of memory BGP activity 7731420/7254550 prefixes, 16909007/15983485 paths, scan interval 60 secs Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd b.b.b.b 4 eee 79431 37 49039360 0 0 00:29:31 475485 192.168.50.10 4 fff 676380 432984 49039450 0 0 5d05h 450035 Site1 BGP table version is 5290586, main routing table version 5290586 470195 network entries using 69588860 bytes of memory 470197 path entries using 30092608 bytes of memory 75405/75391 BGP path/bestpath attribute entries using 10255080 bytes of memory 68490 BGP AS-PATH entries using 2764238 bytes of memory 0 BGP route-map cache entries using 0 bytes of memory 0 BGP filter-list cache entries using 0 bytes of memory BGP using 112700786 total bytes of memory BGP activity 6293079/5822878 prefixes, 13887691/13417494 paths, scan interval 60 secs a.a.a.a 4 ccc 81320 30 5250229 0 0 00:21:36 470446 192.168.50.20 4 fff 432991 676380 5250230 0 0 5d05h 227807 Here's what I see when I do a show IP bgp from both routers to say 8.8.8.8 (which both ISPs peer with) Site 2 show ip bgp 8.8.8.8 BGP routing table entry for 8.8.8.0/24, version 48394969 Paths: (2 available, best #2, table default) Advertised to update-groups: 31 Refresh Epoch 1 fff 15169 192.168.50.10 from 192.168.50.10 (x.x.x.253) Origin IGP, metric 0, localpref 100, valid, internal Refresh Epoch 1 eee 15169 y.y.y.y from y.y.y.y (64.235.192.12) Origin IGP, localpref 100, valid, external, best Site 1 show ip bgp 8.8.8.8 BGP routing table entry for 8.8.8.0/24, version 4817315 Paths: (2 available, best #1, table default) Advertised to update-groups: 17 Refresh Epoch 1 fff 15169 a.a.a.a from a.a.a.a (68.67.63.67) Origin IGP, metric 0, localpref 100, valid, external, best Refresh Epoch 1 eee 15169 192.168.50.20 from 192.168.50.20 (x.x.x.254) Origin IGP, metric 0, localpref 100, valid, internal Is there something I'm missing? If I do sh ip bgp I see routes on both routers showing origins on both provider ASes. Just confused as to what could be going on. The end game for me would be to have both table smeshed so that traffic flows to both ISPs based on AS PATH. Is this too good to be true? Is there anything I should be doing to force traffic through certain ISPs? Thank you for any insight, David
... View more
Labels:
07-27-2012
10:35 AM
Hi Rick, Thanks for your reply. In this case the MPLS PE speaks EIGRP with the core and remote switches but between PEs is redistributed through BGP. I'll try seeing what can be done with an offset list and get back with results. Thanks --Dave
... View more
07-27-2012
07:00 AM
Hello All, A bit a of sticky problem. I have a remote site with 2 WAN links. Link 1 MPLS with telecom provider managing the PE and advertising EIGRP routes to my switch(3750-E stack). Link 2 Directly connected to core site switch (4506) and advertising EIGRP routes. It looks like this: -------- Provider MPLS Cloud ------- GI2/0/1Remote Site (3750-E Stack) Core Site Switch(4506)---- gi4/2------------------------------------------------ GI1/0/1Remote Site (3750-E Stack) When both links are up MPLS is disrupted from other sites (that have MPLS only) to the core site. I was unable to get a route list to see what exactly was going on before shutting the directly connected link down. What i'd like to have is: Use MPLS as my primary link as it is fully meshed with all my remote sites (and not just the core) and have the directly connected link as my failover in case of issues with the primary. I assumed putting a delay 1000 on the directly connected link at the remote site would have been enough but it looks like both were active and leaking routes all over the place Is there a way to set this up that the MPLS link is favoured and if it loses routes to that specific remote site it would failover to the directly connected link? Here is my current configuration for EIGRP on the remote and Core sites: Remote 3750-E router eigrp 100 redistribute connected redistribute static passive-interface default no passive-interface GigabitEthernet1/0/1 no passive-interface GigabitEthernet2/0/1 no auto-summary network 10.0.0.0 Core 4506 router eigrp 100 redistribute static passive-interface default no passive-interface Vlan100 no passive-interface Vlan400 no passive-interface GigabitEthernet4/1 no passive-interface GigabitEthernet4/48 distribute-list DENY_LOOPBACK out no auto-summary eigrp router-id 10.80.252.202 network 10.0.0.0 Standard IP access list DENY_LOOPBACK 10 deny 10.52.0.69 20 permit any (113249 matches) Thanks for any light you can shed on the issue Thanks --Dave
... View more
Labels:
06-09-2016
I did! Sorry for not posting sooner. Ended up that we had some Palo Alto
Networks firewalls in betwe...
11-17-2014
For the
3750-12SFromhttp://www.cisco.com/c/en/us/products/collateral/switches/catalyst-3750-x-series...
01-20-2014
Hi Jon,It should according to what I can see:From the backup link
looking-glass:When I have the Prim...
01-20-2014
Hi Jon,Thanks for your reply,The upstream provider I have for the backup
link is advertising to its ...
01-17-2014
Hello,I've got some smaller routers that can't handle a full routing
table. I was wondering how a ro...
Created by
David Lagace
in Routing
01-16-2014
01-16-2014
Hello,Apologies in advance if this has been answered somewhere but I'm
seeing an issue where I have ...
01-14-2014
Hello All,I have a very perplexing issue. I am trying to get to a
dual-homed configuration. Both my ...
Created by
David Lagace
in Routing
12-20-2013
12-20-2013
Hi Harold,I was looking for a load sharing scenario where some traffic
would go one way and others w...
Created by
David Lagace
in Routing
12-20-2013
12-20-2013
Hi Jon,That is what your routers have done. They have exchanged the
routes learnt from the ISPs via ...
Created by
David Lagace
in Routing
12-20-2013
12-20-2013
Hello Harold,This is normal behavior since each BGP router will select
the ebgp learnt prefixes if t...
Created by
David Lagace
in Routing
12-20-2013
12-20-2013
Hi Jon,I'm not sure. I always assumed BGP would give the best route no
matter on which router it was...
Created by
David Lagace
in Routing
12-20-2013
12-20-2013
Hello,I'm having an issue where we want to implement a 2 router in two
site configuration with one B...
07-27-2012
Hi Rick,Thanks for your reply.In this case the MPLS PE speaks EIGRP with
the core and remote switche...
Public Statistics
| Date Registered | 07-27-2012 06:30 AM |
| Date Last Visited | 10-12-2017 02:40 PM |
| Total Messages Posted | 14 |
| Total Helpful Votes Received | 5 |
