Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About David_Che
Stats
Member since
04-24-2014
91
Posts
48
Helpful
9
Solutions
09-08-2016
09:38 PM
Thanks for the detailed clarification, I draw the topology according to your description in the attachment.
As I have said, I suspect that there are 2 LSP path in the mpls network.
When ping from remote site to Nexus VLAN, mpls network chose one ECMP LSP per session hash ( source ip / destination ip), and this LSP path show no packet loss.
However, when ping 8.8.8.8 from remote site, mpls network chose another ECMP LSP by session hash, and this LSP path show packet loss caused by intermittent congestion.
... View more
09-08-2016
04:44 AM
There maybe more than one LSP in the mpls core network, when the remote site access nexus 192.168.30.1 on one LSP path which did no lose packet. And it lost packet on the other LSP path when access public Internet.
... View more
09-08-2016
12:34 AM
To narrow down the issue scope, I advise that one loopback interface be created on Nexus with IP like 192.168.10.x/32 (not used by any host ). Then ping 8.8.8.8 source loopback on Nexus to see if any packet loss.
... View more
07-04-2016
06:31 AM
If you configure LFA feature, OSPF will be immediate to switch-over to the backup route.
... View more
06-30-2016
05:02 PM
Thank Richard very much for the comments.
It is no doubt that OSPF works on top of IP layer as its IP protocol type 89. But all OSPF packets are limited to only local link as its TTL=1. When LSA update need flooding to the whole area, LSA update are advertised to directly connected neighbor. After the directly connected neighbors receive the LSA update, they extract the LSA and repacket the LSA, then advertised to their directly neighbors until all the OSPF routers in this area get this LSA update.
... View more
06-30-2016
03:22 AM
All OSPF packet's TTL is 1 whatever it is hello packet or LSA exchange packet. Hello packet use multicast address 225.0.0.5/6 to discovery neighbor and keep track of them. However LSA exchange use unicast IP to exchange LSA update.
OSPF working as routing protocol, its primary and only task is to build routing table independently. In other words, OSPF can generate routing table without any help of any other routing protocol. This means OSPF must work on the local link. If OSPF can traverse beyond the local link, OSPF need the routing table to help routing OSPF packet. This is totally not acceptable.
... View more
06-25-2016
06:17 PM
Even R2 redistribute static route into RIPv2, R3 and R4 will still prefer route 172.16.0.0/16 from R1 as its HOP=0 rather than from R2 with HOP=3.
Configuring this static route on R2 can not perform route backup for R2, R3, R4. Wether R1's 10.255.0.1 or 172.16.0.0/16 is disconnected, R2/R3/R4 will lose connection with 172.16.0.0/16.
... View more
06-24-2016
02:03 AM
The solution you think about is feasible as below. In ASK1K eyes, the difference between GLOBAL VRF and Internal VRF is different VLAN. ASR1K OTV ED just extended these two different VLANs into the other OTV ED.
6500 |--VRF1--------VLANx-----| ASR1K ===OTV=== ASR1K |--VLANx--------VRF1-----| 6500
|- -VRF2--------VLANy-----| |- -VLANy--------VRF2-----|
Two years ago, We need manually filter FHRP mac out to make sure each site can have its own Primary / Secondary FHRP router. I am not sure ASK1K can automatically filter FHRP mac out now.
... View more
06-19-2016
10:47 PM
Filter out VRRP group virtual-MAC address in each access port that belong to same vlan.
... View more
06-19-2016
10:30 PM
You need configure zone-pair security between LAN and Internet explicitly. You should configure all internal interface as zone LAN, and configure zone-pair between them explicitly.
... View more
06-01-2016
08:57 AM
Does "IP Proxy-ARP " accomplish your goal rather than twice NAT? I am curious really.
... View more
05-28-2016
08:47 AM
I guess that you would want to setup dot.1q mode(QinQ) in this interface, do you? If yes, you can configure this interface like the below:
interface GigabitEthernet1/0/19
description daisy-chain Connection to switch BF-TL-SW03
switchport access vlan 20
switchport mode dot1q-tunnel
storm-control broadcast level 2.00 1.00
storm-control action trap And you also need configure interface connected to G1/0/19 ON BF-TL-SW03
interface GigabitEthernet x/x/x
switchport mode trunk
switchport trunk allowed vlan 10,11,15,20,25,30,100
HTH
David
... View more
05-27-2016
09:08 AM
Under interface configuration you need to permit bgp session like the below:
ip extended access-list PERMIT_BGP
permit tcp host x.x.x.x host y.y.y.y eq BGP
permit tcp host y.y.y.y host x.x.x.x eq BGP
This ACL can make it possible for BGP established BGP session.
Then you need to create IP prefix access-list to permit PREFIX to enter local BGP table.
then applied it into route-map under BGP configuration like
router bgp xxxx
neighbor xx.xx.xx.xx route-map PERMIT-PREFIX.
HTH
... View more
05-27-2016
01:30 AM
Under interface configuration access-group was used to filter data-plane traffic, including any kind of IP packet, of course, BGP packet is due to be filtered as BGP is one kind of IP packet. In toher words, it only permit some IP packet into this interface, and deny other IP packet from entering into this interface.
Route-policy under BGP process configuration was used to filter control-plane traffic , in this case, that is filter IP ROUTE PREFIX in BGP route advertisement. In other words, it only permit some IP prefix enter into local BGP table, and deny other IP prefix from enter into local BGP table.
HTH
... View more
09-08-2016
Thanks for the detailed clarification, I draw the topology according to
your description in the atta...
09-08-2016
There maybe more than one LSP in the mpls core network, when the remote
site access nexus 192.168.30...
09-08-2016
To narrow down the issue scope, I advise that one loopback interface be
created on Nexus with IP lik...
06-30-2016
Thank Richard very much for the comments. It is no doubt that OSPF works
on top of IP layer as its I...
06-30-2016
All OSPF packet's TTL is 1 whatever it is hello packet or LSA exchange
packet. Hello packet use mult...
06-25-2016
Even R2 redistribute static route into RIPv2, R3 and R4 will still
prefer route 172.16.0.0/16 from R...
06-24-2016
The solution you think about is feasible as below. In ASK1K eyes, the
difference between GLOBAL VRF ...
06-19-2016
You need configure zone-pair security between LAN and Internet
explicitly. You should configure all ...
05-28-2016
I guess that you would want to setup dot.1q mode(QinQ) in this
interface, do you? If yes, you can co...
05-27-2016
Under interface configuration you need to permit bgp session like the
below: ip extended access-list...
Public Statistics
| Date Registered | 04-24-2014 02:03 AM |
| Date Last Visited | 04-03-2018 04:29 AM |
| Total Messages Posted | 91 |
| Total Helpful Votes Received | 48 |
Helpful Votes Given To
Helpful Votes From
| User | Helpful Count |
|---|---|
| 5 | |
| 5 | |
| 10 | |
| 5 | |
| 5 |
.jpg "VIP Expert"){kind=icon}
