Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Islam Nadim
10-09-2017
Stats
Member since
05-18-2012
66
Posts
5
Helpful
2
Solutions
02-20-2014
08:56 AM
Hello willwetherman, Apologies for the late reply, as per your updated config, will the data traffic pass between the routers, or shall I permit it to the access list? ip access-list extended VPN-TRAFFIC permit ip host 10.1.1.4 host 10.1.1.2
... View more
02-17-2014
02:15 PM
Hello All, I have this topology, where I created a backbone that should work with VRFs. The configuration below related to the backbone routers. I'm using OSPF for the backbone and BGP on the Edge Routers. CorePRouter: interface Serial0/0 ip address 10.10.10.1 255.255.255.252 mpls ip clock rate 2000000 ! interface Serial0/1 ip address 10.10.20.1 255.255.255.252 mpls ip clock rate 2000000 ! router ospf 1 log-adjacency-changes network 10.10.10.0 0.0.0.255 area 0 network 10.10.20.0 0.0.0.255 area 0 ! PERight: ip vrf CustA rd 1:1 route-target export 1:1 route-target import 1:1 ! ip vrf CustB rd 2:2 route-target export 2:2 route-target import 2:2 ! interface Loopback0 description -- BGP SOURCE INTERFACE WITH PERight -- ip address 2.2.2.2 255.255.255.255 ! interface Serial0/0 description -- TO CorePRouter -- ip address 10.10.20.2 255.255.255.252 mpls ip clock rate 2000000 ! interface Serial0/1 description -- TO CustA2 Router$$VRF CustA -- ip vrf forwarding CustA ip address 192.168.2.1 255.255.255.252 clock rate 2000000 ! interface Serial0/2 description -- TO CustB2 Router$$VRF CustB -- ip vrf forwarding CustB ip address 192.168.4.1 255.255.255.252 clock rate 2000000 ! router ospf 1 log-adjacency-changes network 2.2.2.2 0.0.0.0 area 0 network 10.10.20.0 0.0.0.255 area 0 ! router bgp 13879 no bgp default route-target filter bgp log-neighbor-changes neighbor 1.1.1.1 remote-as 13879 neighbor 1.1.1.1 update-source Loopback0 ! address-family ipv4 neighbor 1.1.1.1 activate no auto-summary no synchronization exit-address-family ! address-family ipv4 vrf CustB neighbor 192.168.4.2 remote-as 65003 neighbor 192.168.4.2 activate no synchronization exit-address-family ! address-family ipv4 vrf CustA neighbor 192.168.2.2 remote-as 65001 neighbor 192.168.2.2 activate no synchronization exit-address-family ! PELeft: ip vrf CustA rd 1:1 route-target export 1:1 route-target import 1:1 ! ip vrf CustB rd 2:2 route-target export 2:2 route-target import 2:2 ! interface Loopback0 description -- BGP SOURCE INTERFACE WITH PERight -- ip address 1.1.1.1 255.255.255.255 ! interface Serial0/0 description -- TO CorePRouter -- ip address 10.10.10.2 255.255.255.252 mpls ip clock rate 2000000 ! interface Serial0/1 description -- TO CustA1 Router$$VRF CustA -- ip vrf forwarding CustA ip address 192.168.1.1 255.255.255.252 clock rate 2000000 ! interface Serial0/2 description -- TO CustB1 Router$$VRF CustB -- ip vrf forwarding CustB ip address 192.168.3.1 255.255.255.252 clock rate 2000000 ! router ospf 1 log-adjacency-changes network 1.1.1.1 0.0.0.0 area 0 network 10.10.10.0 0.0.0.255 area 0 ! router bgp 13879 no bgp default route-target filter bgp log-neighbor-changes neighbor 2.2.2.2 remote-as 13879 neighbor 2.2.2.2 update-source Loopback0 ! address-family ipv4 neighbor 2.2.2.2 activate no auto-summary no synchronization exit-address-family ! address-family ipv4 vrf CustB redistribute connected neighbor 192.168.3.2 remote-as 65002 neighbor 192.168.3.2 activate no synchronization exit-address-family ! address-family ipv4 vrf CustA redistribute connected neighbor 192.168.1.2 remote-as 65000 neighbor 192.168.1.2 activate no synchronization exit-address-family ! The problem here, the VRF Routes are not advertised between the PEs, thus the CEs can't see each other. What am I missing here?
... View more
Labels:
02-08-2014
12:15 PM
Hello All, I'm trying to configure a Backbone running MPLS and BGP .. I've been able to establish MPLS between the routers. The PELeft and PERight will be connected to end routers where the end routers will be in separate VRFs (2 to be exact). I have reachability between all the routers. I'm running OSPF in the Backbone between the 3 Routers, and BGP between PELeft and PERight. Here are the configuration of the 3 Routers: PELeft: interface Loopback0 ip address 1.1.1.1 255.255.255.255 ! interface Serial0/0 ip address 10.10.10.2 255.255.255.0 mpls ip clock rate 2000000 ! router ospf 1 log-adjacency-changes network 1.1.1.1 0.0.0.0 area 0 network 10.10.10.0 0.0.0.255 area 0 ! router bgp 13879 bgp log-neighbor-changes neighbor 2.2.2.2 remote-as 13879 ! address-family ipv4 neighbor 2.2.2.2 activate no auto-summary no synchronization exit-address-family CorePRouter: interface Serial0/0 ip address 10.10.10.1 255.255.255.0 mpls ip clock rate 2000000 ! router ospf 1 log-adjacency-changes network 10.10.10.0 0.0.0.255 area 0 network 10.10.20.0 0.0.0.255 area 0 PERight: interface Loopback0 ip address 2.2.2.2 255.255.255.255 ! interface Serial0/0 ip address 10.10.20.2 255.255.255.0 mpls ip clock rate 2000000 ! router ospf 1 log-adjacency-changes network 2.2.2.2 0.0.0.0 area 0 network 10.10.20.0 0.0.0.255 area 0 ! router bgp 13879 bgp log-neighbor-changes neighbor 1.1.1.1 remote-as 13879 ! address-family ipv4 neighbor 1.1.1.1 activate no auto-summary no synchronization exit-address-family And for the reachability: PERight#ping 1.1.1.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 1.1.1.1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/25/76 ms CorePRouter#sh mpls ldp n Peer LDP Ident: 10.10.10.2:0; Local LDP Ident 10.10.20.1:0 TCP connection: 10.10.10.2.646 - 10.10.20.1.50623 State: Oper; Msgs sent/rcvd: 48/50; Downstream Up time: 00:31:06 LDP discovery sources: Serial0/0, Src IP addr: 10.10.10.2 Addresses bound to peer LDP Ident: 10.10.10.2 1.1.1.1 Peer LDP Ident: 10.10.20.2:0; Local LDP Ident 10.10.20.1:0 TCP connection: 10.10.20.2.12741 - 10.10.20.1.646 State: Oper; Msgs sent/rcvd: 47/47; Downstream Up time: 00:31:03 LDP discovery sources: Serial0/1, Src IP addr: 10.10.20.2 Addresses bound to peer LDP Ident: 10.10.20.2 2.2.2.2 Routes on All Routers: CorePRouter: CorePRouter#sh ip route Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2 i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2 ia - IS-IS inter area, * - candidate default, U - per-user static route o - ODR, P - periodic downloaded static route Gateway of last resort is not set 1.0.0.0/32 is subnetted, 1 subnets O 1.1.1.1 [110/65] via 10.10.10.2, 00:30:12, Serial0/0 2.0.0.0/32 is subnetted, 1 subnets O 2.2.2.2 [110/65] via 10.10.20.2, 00:30:02, Serial0/1 10.0.0.0/24 is subnetted, 2 subnets C 10.10.10.0 is directly connected, Serial0/0 C 10.10.20.0 is directly connected, Serial0/1 PERight: PERight#sh ip route Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2 i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2 ia - IS-IS inter area, * - candidate default, U - per-user static route o - ODR, P - periodic downloaded static route Gateway of last resort is not set 1.0.0.0/32 is subnetted, 1 subnets O 1.1.1.1 [110/129] via 10.10.20.1, 00:27:28, Serial0/0 2.0.0.0/32 is subnetted, 1 subnets C 2.2.2.2 is directly connected, Loopback0 10.0.0.0/24 is subnetted, 2 subnets O 10.10.10.0 [110/128] via 10.10.20.1, 00:27:28, Serial0/0 C 10.10.20.0 is directly connected, Serial0/0 PELeft: PELeft#sh ip route Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2 i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2 ia - IS-IS inter area, * - candidate default, U - per-user static route o - ODR, P - periodic downloaded static route Gateway of last resort is not set 1.0.0.0/32 is subnetted, 1 subnets C 1.1.1.1 is directly connected, Loopback0 2.0.0.0/32 is subnetted, 1 subnets O 2.2.2.2 [110/129] via 10.10.10.1, 00:27:53, Serial0/0 10.0.0.0/24 is subnetted, 2 subnets C 10.10.10.0 is directly connected, Serial0/0 O 10.10.20.0 [110/128] via 10.10.10.1, 00:27:53, Serial0/0 But the BGP between the PERight and PELeft is not coming up PERight#sh ip bgp summ | b N Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd 1.1.1.1 4 13879 0 0 0 0 0 never Active PELeft#sh ip bgp summ | b N Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd 2.2.2.2 4 13879 0 0 0 0 0 never Active What am I missing here?
... View more
Labels:
02-06-2014
10:20 PM
Thank you! I totally forgot about the GRE Tunnels .. I forgot how it was configured. Can you guide me? This is my current configuration: VPN Router: crypto isakmp policy 1 encr 3des hash md5 authentication pre-share group 2 crypto isakmp key address ! crypto ipsec transform-set TS esp-3des esp-md5-hmac ! crypto map CMAP 10 ipsec-isakmp set peer set transform-set TS match address VPN-TRAFFIC ! interface FastEthernet0/0 ip address 10.10.2.1 255.255.255.0 duplex auto speed auto ! interface FastEthernet0/1 ip address 192.168.1.250 255.255.255.0 duplex auto speed auto crypto map CMAP ! router eigrp 50 network 10.10.2.0 0.0.0.255 network 192.168.1.0 no auto-summary ! ip forward-protocol nd ip route 0.0.0.0 0.0.0.0 192.168.1.1 ip route 10.10.4.0 255.255.255.0 ! This is done to overcome the routing issue ! ! ip access-list extended VPN-TRAFFIC permit ip 10.10.2.0 0.0.0.255 10.10.4.0 0.0.0.255 permit ip 10.10.0.0 0.0.255.255 any ! access-list 25 permit 10.10.0.0 0.0.255.255 ! line vty 0 4 access-class 25 in login local LAN Router: interface FastEthernet0/0 ip address 10.10.2.2 255.255.255.0 duplex auto speed auto ! interface FastEthernet0/1 no ip address shutdown duplex auto speed auto ! router eigrp 50 network 10.10.2.0 0.0.0.255 no auto-summary ! ip route 0.0.0.0 0.0.0.0 10.10.2.1 ! access-list 25 permit 10.10.0.0 0.0.255.255 ! line vty 0 4 login local Best Regards, Islam M. Nadim.
... View more
02-06-2014
01:20 PM
Hello All, I have a network built on GNS3 where I have a router that acts as a Crypto Gateway that connects to another router on a different remote network. This is one portion of the network. I have EIGRP Running on both, the VPN and LAN Routers. I have the same on the other side. The other side exists on a physical remote network and the VPN Routers on both ends communicate with the public IPs. I can reach LAN-to-LAN. BUT, I have to create a default route on the LAN routers which I don't want to. I want the EIGRP Routes to traverse between the two VPN routers. Or at least, the VPN router sends a default route to the LAN Router. I actually prefer if it is possible to traverse the EIGRP Routes.
... View more
- Tags:
- eigrp
Labels:
02-03-2014
10:33 PM
So my config should look like this? conf t interface FastEthernet0/1 ip address 192.168.1.250 255.255.255.0 description -- WAN INTERFACE -- ip nat outside exit interface FastEthernet0/0 ip address 10.10.2.1 255.255.255.0 description -- LAN INTERFACE -- ip nat inside exit access-list 101 deny ip 10.10.2.0 0.0.0.255 192.168.1.0 0.0.0.255 access-list 101 permit ip 10.10.2.0 0.0.0.255 any ip nat inside source list 101 interface FastEthernet0/1 overload And if I add another networks behind 10.10.2.0/24, should I add them to the ACL 101 ?
... View more
02-03-2014
10:33 PM
So my config should look like this? conf t interface FastEthernet0/1 ip address 192.168.1.250 255.255.255.0 description -- WAN INTERFACE -- ip nat outside exit interface FastEthernet0/0 ip address 10.10.2.1 255.255.255.0 description -- LAN INTERFACE -- ip nat inside exit access-list 101 deny ip 10.10.2.0 0.0.0.255 192.168.1.0 0.0.0.255 access-list 101 permit ip 10.10.2.0 0.0.0.255 any ip nat inside source list 101 interface FastEthernet0/1 overload And if I add another networks behind 10.10.2.0/24, should I add them to the ACL 101 ?
... View more
02-03-2014
12:17 PM
Unfortunately I have removed all the NAT configuration. My Local Subnet is 10.10.2.0/24
... View more
02-03-2014
11:30 AM
Hello All, I have this topology below: When I use the VPN router to ping any IP Address on the WAN side, it works since I have a default route IslamVPN#sh run | i ip route ip route 0.0.0.0 0.0.0.0 192.168.1.1 on the LAN Router, I can only ping the 192.168.1.0/24 subnet. IslamLAN#ping 192.168.1.250 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.1.250, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 16/24/40 ms IslamLAN#ping 192.168.1.6 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.1.6, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 20/41/84 ms Other than that, I can't ping anything: IslamLAN#ping 4.2.2.2 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 4.2.2.2, timeout is 2 seconds: ..... Success rate is 0 percent (0/5) I tried to apply NAT on the VPN router, but can't figure out the correct way to achieve this The VPN router will connect to a remote VPN router on a different REAL Network on a PC that belongs to a friend of mine, where we have already enabled ports 50 and 500 on our routers (LinkSys and DLink if this help) .. All I need for now is to create a NAT Rule that translates anything, except the VPN traffic, from the LAN Router going through the VPN router to the Internet. How can I achieve this? NOTE: I already tried ip nat inside and ip nat outside on the LAN/WAN interfaces of VPN Router and used ip nat overload, but didn't work! The NAT table is always empty!
... View more
- Tags:
- cisco_router
- nat
Labels:
01-30-2014
04:08 AM
I've been using 3CDaemon. It has "TFTP Server", "FTP Server", "SysLog Server" and "TFTP Client". You can get it from http://www.firewall.cx/downloads/doc_download/16-1-3cdaemon-server-a-client.html
... View more
11-15-2013
11:09 AM
Hello Saurav Lodth, Thank you for your response, can I make the CPI send the alerts and the clearing of them to an application? Not just an email? Best Regards, Islam M. Nadim
... View more
11-14-2013
09:53 AM
Hello Mohammad, As we checked during the live session, just use interface GigabitEthernet8 as your uplink interface .. It can be configured with an IP Address directly .. Also, don't forget to save the configuration by issuing the command "write" (Without the quotes) from the enable mode not the config mode. Best Regards, Islam M. Nadim
... View more
11-14-2013
09:33 AM
Hello cadet alain, I beg to differ, since it is stated that the device is a router, then you can assign an IP to the port, but you have to inform the router to change it to a layer 3 then configure an IP Address .. However, it should be enabled by default.
... View more
02-20-2014
Hello willwetherman, Apologies for the late reply, as per your updated
config, will the data traffic...
02-17-2014
Hello All, I have this topology, where I created a backbone that should
work with VRFs. The configur...
02-08-2014
Hello All,I'm trying to configure a Backbone running MPLS and BGP ..
I've been able to establish MPL...
02-06-2014
Thank you! I totally forgot about the GRE Tunnels .. I forgot how it was
configured. Can you guide m...
02-06-2014
Hello All,I have a network built on GNS3 where I have a router that acts
as a Crypto Gateway that co...
02-03-2014
So my config should look like this?conf tinterface FastEthernet0/1ip
address 192.168.1.250 255.255.2...
02-03-2014
So my config should look like this?conf tinterface FastEthernet0/1ip
address 192.168.1.250 255.255.2...
02-03-2014
Hello All,I have this topology below:When I use the VPN router to ping
any IP Address on the WAN sid...
01-30-2014
I've been using 3CDaemon. It has "TFTP Server", "FTP Server", "SysLog
Server" and "TFTP Client".You ...
11-15-2013
Hello Saurav Lodth,Thank you for your response, can I make the CPI send
the alerts and the clearing ...
11-14-2013
Hello Mohammad, As we checked during the live session, just use
interface GigabitEthernet8 as your u...
Public Statistics
| Date Registered | 05-18-2012 01:55 AM |
| Date Last Visited | 10-09-2017 11:57 AM |
| Total Messages Posted | 66 |
| Total Helpful Votes Received | 5 |
Helpful Votes Given To
| User | Helpful Count |
|---|---|
| 5 | |
| 5 | |
| 5 | |
| 6 | |
| 5 |
.jpg "VIP Expert"){kind=icon}
