Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About juan-ruiz
03-08-2019
juan-ruiz
Member since
12-11-2007
Beginner
Created by
juan-ruiz
in Application Centric Infrastructure
in Application Centric Infrastructure
03-01-2019
10:11 AM
03-01-2019
10:11 AM
I just resolved it via the CLI. So it turns out that I had removed an ACL from the mgmt tenant inside of a contract which caused me to lose access but fortunately I was able to ssh from another system on the same OOB subnet and fix it.
... View more
Created by
juan-ruiz
in Application Centric Infrastructure
in Application Centric Infrastructure
03-01-2019
08:31 AM
03-01-2019
08:31 AM
I have a basic ACI lab up and running and I was going through and testing out some OOB configurations for my leafs and all of a sudden I lost https://apicIP access to ACI. I have confirmed I can telnet to port 443 but nothing happens it just connects at a TCP level. I can ssh into the box no problem and navigate around. Can anyone provide any direction on steps that I can take to see why the GUI is lost and how to recover it?
Thank you!
... View more
02-05-2019
12:53 PM
Hi Paul,
I'm going to consider this but I'm not sure if we can remove the BPDU filter.
Another thought I had was to enable flex link on the g1/0/1 and use g1/0/2 as the backup port.
Thank you for your reply!
... View more
02-05-2019
09:44 AM
Can I force a port to be in blocking state even if the forwarding port that connects to the layer 2 domain has BPDU filter enabled on it (STP off)?
The current layout:
Switch 1 connects on port g1/0/1 to the layer 2 domain and learns all MAC addresses and has stp off on it with the BPDU filter command applied to it.
Switch 2 connects on port g1/0/1 to the same layer 2 domain as switch 1 and learns all MAC addresses and has stp off on it with the BPDU filter command applied to it.
I now want to connect g1/0/2 on switch 1 and switch 2 to each other but I want to prevent the loop and force this link to be in blocked state.
I know I can increase the port priority and port cost on g1/0/2 but will this configuration take affect if g1/0/1 does not participate in STP due to the BDPU filter applied?
... View more
Labels:
Created by
juan-ruiz
in Automation and Analytics
in Automation and Analytics
10-10-2018
10:19 AM
10-10-2018
10:19 AM
I’m doing some research on differences between automation and orchestration. Can anyone point me to good links for Cisco on comparing automation and orchestration and related use cases for each?
... View more
Labels:
04-04-2018
06:57 AM
Thank you for your efforts. The upstream router has a very simple config. I do not have the power to recreate this in my lab so I use dcloud for my testing NX-OSV.
int g0/0 no shut ! ip address 192.168.1.2 255.255.255.0 ! ! router eigrp 14 no auto-summary network 192.168.1.2 0.0.0.0 ! !
... View more
04-04-2018
06:55 AM
I used dcloud virl lab and I do not have it sorry and thank you for replying
... View more
04-03-2018
05:46 PM
I would like to leak routes from the VRF called production into the global routing table and leak routes from the global routing table to the vrf on NX-OS.
I was able to accomplish the route leaking but I can't ping from the NX-OS device itself to the leaked routes or from an upstream router.
This is a VIRL lab and the setup is pretty easy.
I have an IOSV router running EIGRP and its interface is 192.168.1.2/24
The NX-OS switch is running EIGRP on 192.168.1.1/24 and BGP for the route leaking.
The config for this is applied on the NX-OS and here are the details.
The production routes make it to the IOSV router no problem via the redistribution but I can't communicate to them.
Is there something I'm missing?
Thank you!
<-------------------------------------------------> vrf context Production_VRF address-family ipv4 unicast route-target both 99:1 import vrf default map any export vrf default map any <------------------------------------------------->
!
<-------------------------------------------------> router eigrp Site-A autonomous-system 14 address-family ipv4 unicast router-id 10.3.255.1 passive-interface default metric version 64bit redistribute bgp 99 route-map any <------------------------------------------------->
!
<-------------------------------------------------> router bgp 99 address-family ipv4 unicast network 10.3.12.0/23 network 192.168.1.0/24 vrf Production_VRF address-family ipv4 unicast network 10.1.9.0/24 <------------------------------------------------->
Show commands on the NX-OS to show the leaked routes
STA-Spine-201# sh ip route bgp IP Route Table for VRF "default" '*' denotes best ucast next-hop '**' denotes best mcast next-hop '[x/y]' denotes [preference/metric] '%<string>' in via output denotes VRF <string> 10.1.9.0/24, ubest/mbest: 1/0, attached *via 10.1.9.2%Production_VRF, Vlan9, [20/0], 00:10:38, bgp-99, external, tag 99, ! ! STA-Spine-201# show ip route vrf production_VRF bgp IP Route Table for VRF "Production_VRF" '*' denotes best ucast next-hop '**' denotes best mcast next-hop '[x/y]' denotes [preference/metric] '%<string>' in via output denotes VRF <string> 10.3.12.0/23, ubest/mbest: 1/0, attached *via 10.3.12.2%default, Vlan1012, [20/0], 00:15:18, bgp-99, external, tag 99 , 192.168.1.0/24, ubest/mbest: 1/0, attached *via 192.168.1.1%default, Eth2/1, [20/0], 00:07:43, bgp-99, external, tag 99
... View more
Labels:
12-07-2017
05:32 AM
Hi,
If you are learning the same routes via DMVPN (EIGRP) and MPLS (EBGP) on the same router you should not need to do any redistribute of any protocols since all needed routes are on both routing domains and this is only a spoke.
Here is a sample config
Spoke#show run | sec router eigrp router eigrp 1 network 172.25.56.52 0.0.0.0 passive-interface default no passive-interface Tunnel56 Spoke# Spoke# Spoke#show run | sec router bgp router bgp 65000 bgp log-neighbor-changes network 65.65.65.0 mask 255.255.255.252 timers bgp 15 30 neighbor 65.65.65.5 remote-as 2
... View more
12-06-2017
06:56 AM
First I suggest you install the Paramiko ssh library and its name is Netmiko.
So if you have python installed with root or admin privileges execute the command pip install netmiko.
Once installed take a look at this great link with a lot of good examples.
https://pynet.twb-tech.com/blog/automation/netmiko.html.
Let me know if this helps.
Also if you are looking to do this command across many devices that support SSH then from a script perspective I suggest you store all of your routers IP addresses on a text file and create your script with the following structure.
Create your required netmiko variables
create a variable to read a text file
Load the text file for reading
execute a for loop against the text file
Pass the IP of the router to the netmiko and required credentials.
Pass your commands and store output to a text file. This can be done from the command line with simple redirection or you can create another file object variable for writing and write to it.
access each of the router IP address
Let us know how far you get.
... View more
12-06-2017
06:40 AM
Hi ittechk4u1,
Normally you as the client has some say on how the router is going to be configured that sits on the customer edge network/ location. With that said I would still run EBGP with your DMVPN router and the service provider router that is sitting on your network on your LAN. If that is not an option then you might want to consider static routing with an IP SLA and object tracking. The IP SLA will be used to monitor a remote IP on the WAN for example via the service provider router and the object tracking will be used to tie it to the static route. Since you already are running EIGRP that route will get used if the tracked object is not available.
... View more
12-05-2017
07:12 AM
Here is also a quick view of what the routing could look like if you are terminating the MPLS and DMVPN on the remote router. (I made up some networks to represent wan connections so this might not apply but I focused on the 172.24.50.0/29 to route this network over EIGRP and EBGP) As you can see the end result is the route is learned via EBGP but the route made it via EIGRP. I ran a debug and shutdown the interface on MPLS and the route then was learned via EIGRP.
Spoke(config-if)#do sh ip bgp BGP table version is 14, local router ID is 75.75.75.6 Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter, x best-external, a additional-path, c RIB-compressed, Origin codes: i - IGP, e - EGP, ? - incomplete RPKI validation codes: V valid, I invalid, N Not found Network Next Hop Metric LocPrf Weight Path *> 65.65.65.0/30 65.65.65.5 0 0 2 i r> 65.65.65.4/30 65.65.65.5 0 0 2 i *> 172.24.50.0/29 65.65.65.5 0 2 1 i
Spoke(config-if)#do sh ip ei top EIGRP-IPv4 Topology Table for AS(1)/ID(172.25.56.52) Codes: P - Passive, A - Active, U - Update, Q - Query, R - Reply, r - reply Status, s - sia Status P 172.24.50.0/29, 0 successors, FD is Infinity via 172.25.56.56 (27008000/128256), Tunnel56 P 172.25.56.0/24, 1 successors, FD is 26880000 via Connected, Tunnel56 via 172.25.56.56 (27136000/25856000), Tunnel56 Spoke(config-if)#do sh ip route | in 172.24.50 B 172.24.50.0 [20/0] via 65.65.65.5, 00:01:07
<------------------------------------------------->
Spoke(config-if)#int g0/0 Spoke(config-if)#shut *Dec 5 10:06:28.315: RT: del 172.24.50.0 via 65.65.65.5, bgp metric [20/0] *Dec 5 10:06:28.319: RT: delete subnet route to 172.24.50.0/29 *Dec 5 10:06:28.355: RT: updating eigrp 172.24.50.0/29 (0x0): via 172.25.56.56 Tu56 1048578 *Dec 5 10:06:28.359: RT: add 172.24.50.0/29 via 172.25.56.56, eigrp metric [90/27008000]
Spoke(config-if)#do sh ip route | in 172.24.50 D 172.24.50.0 [90/27008000] via 172.25.56.56, 00:01:55, Tunnel56
... View more
12-05-2017
06:23 AM
My suggestion is to use EBGP for your MPLS at the remote sites and at the HUB.
If you use EIGRP over DMVPN that distance is 90 and if you use EBGP with the PE (provider edge) on the MPLS that distance is 20.
If the router has both routes via DMVPN and MPLS the BGP routes will be in the routing table and the EIGRP will be in the topology but not in the routing table until the EBGP route have gone missing.
... View more
12-04-2017
09:12 AM
That's a good idea and I have not tried that. The only possible issue is other subnets that I do not want to advertise might fall in the range but that is something I need to check.
... View more
12-04-2017
09:07 AM
it looks like your acl permit 10 the first octet might be wrong. I think it should be 172
10 permit ip host 127.29.40.10 10.125.0.0 0.0.255.255
... View more
Created by
juan-ruiz
in Application Centric Infrastructure
03-01-2019 10:11 AM
03-01-2019 10:11 AM
I just resolved it via the CLI. So it turns out that I had removed an
ACL from the mgmt tenant insid...
Created by
juan-ruiz
in Application Centric Infrastructure
03-01-2019 08:31 AM
03-01-2019 08:31 AM
I have a basic ACI lab up and running and I was going through and
testing out some OOB configuration...
10-10-2018 10:19 AM
I’m doing some research on differences between automation and
orchestration. Can anyone point me to ...
12-07-2017 05:32 AM
Hi, If you are learning the same routes via DMVPN (EIGRP) and MPLS
(EBGP) on the same router you sho...
12-06-2017 06:56 AM
First I suggest you install the Paramiko ssh library and its name is
Netmiko. So if you have python ...
12-06-2017 06:40 AM
Hi ittechk4u1, Normally you as the client has some say on how the router
is going to be configured t...
12-05-2017 07:12 AM
Here is also a quick view of what the routing could look like if you are
terminating the MPLS and DM...
12-05-2017 06:23 AM
My suggestion is to use EBGP for your MPLS at the remote sites and at
the HUB. If you use EIGRP over...
Public Statistics
| Date Registered | 12-11-2007 10:24 AM |
| Date Last Visited | 03-08-2019 08:58 AM |
| Total Messages Posted | 150 |
| Total Helpful Votes Received | 41 |
Helpful Votes Given To
.jpg "VIP Advisor"){kind=icon}
.jpg "Hall of Fame Guru"){kind=icon}
Helpful Votes From
| User | Helpful Count |
|---|---|
| 5 | |
| 5 | |
| 5 | |
| 5 | |
| 5 |
