About Jon Marshall

Jon Marshall · ‎10-23-2019

Is there anyone who is familiar with using RIPE and the relevant inetnum and route objects etc. I need to switch one of our providers and they are requesting us to create additional objects and I need to know how to do it and understand the implications in terms of existing providers and I don't have a lot of experience with this. Cheers Jon

Jon Marshall · ‎10-18-2019

switch(config-if)#interface gigabitethernet1/1 switch(config-if)# no switchport switch(config-if)#ip address 100.100.100.10 255.255.255.192 Jon

Jon Marshall · ‎10-18-2019

If they are equal cost routes then they should be both be in the routing table so there is no convergence. You may lose a packet but that should be it. Jon

Jon Marshall · ‎10-16-2019

Just to add to Paul's answer. If the DC has given you a default gateway of 24.24.24.209 with the second subnet that suggests they are using secondary IPs. Just ask them to route the entire subnet to 68.68.68.50, remove the secondary IP address (.210) from your router's interface and then as Paul says, just create static NATs and it will all work. Make sure proxy arp is enabled on the router interface. Jon

Jon Marshall · ‎10-05-2019

To answer your specific question, I think the VP is just talking about advertising ISP1's address range to ISP2 so if ISP1 goes down traffic can route to you via ISP2 although bear in mind ISPs are not always willing to do this. The whole thing is a lot easier if you own the addressing yourself so you can then advertise the same IPs to both ISPs. By the way putting both ISPs onto the same firewall creates a single point of failure. Jon

Jon Marshall · ‎10-05-2019

You are over complicating this. Routers forward packets between subnets or to put it another way they forward packets between interfaces. So there is fundamentally no difference between forwarding between what you call "regular" networks and "vlan" networks although as others have pointed out a vlan is a L2 concept not a L3 one ie. it is all just networks. If you want to route packets to a remote destination then as long as your router has a route to that destination either a specific route or a default then it will work . Jon

Jon Marshall · ‎10-02-2019

You should not need to use a default route. Normally EBGP peers are directly connected so no need for a route at all but if the peers are multiple L3 hops away from each other then on your peer you would need a static route for the peer IP address and a valid next hop IP so your BGP router knows how to reach the peer IP address. Jon

Jon Marshall · ‎10-01-2019

Yes that should work fine. Jon

Jon Marshall · ‎10-01-2019

Okay I was assuming you were applying it to L3 interfaces. Just checked the documentation and if you are applying to L2 interfaces you cannot use the log keyword in your acls although it says the acl should still be applied. Are you getting an error message or is the command just not available ? Jon

Jon Marshall · ‎10-01-2019

Are you applying these to L2 or L3 interfaces ? Jon

Jon Marshall · ‎10-01-2019

The only traffic that will be affected will be traffic going through the interfaces you have applied the acls to. You are also logging the traffic so be aware that this means the logging is handled by default on the RP, in other words in software and if there is a lot of traffic this could increase your CPU usage. If this is a concern then you can use OAL - https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-4SY/config_guide/sup2T/15_4_sy_swcg_2T/ios_acl_support.html#71949 Jon

Jon Marshall · ‎10-01-2019

Just to add, as Paul says it will work, but you need to modify your next hops ie. you cannot have a static route on switch B pointing to the firewall IP, it needs to point to switch A's IP and then switch A has a route to the firewall and the same for routes from the firewall back. Unless of course you are using EIGRP in the VRF as well in which case it will work. Jon

Jon Marshall · ‎09-30-2019

Yes and that applies to any redistributed routes not just static routes. Jon

Jon Marshall · ‎09-30-2019

What do you mean by weight ? If you mean AD (which is not weight) then what is happening is when you modify the AD to 200 on R3 then R3 will now use the AD 170 advertised from R2 because of the lower AD. When you shut R1 then R2 no longer receives the route from R1 and so does not advertise it to R3 which means R3 can now use it's static route with AD 200 which it then advertises to R2. Jon

Jon Marshall · ‎09-27-2019

Not clear what you mean by inbound and outbound ? Traffic will be sent to the active HSRP router but return traffic may not be. Perhaps you can clarify with a quick diagram ? Jon

Jon Marshall · 10-23-2019

Is there anyone who is familiar with using RIPE and the relevant inetnum and route objects etc. I ne...

Jon Marshall · 10-18-2019

switch(config-if)#interface gigabitethernet1/1switch(config-if)# no switchport switch(config-if)#ip ...

Jon Marshall · 10-18-2019

If they are equal cost routes then they should be both be in the routing table so there is no conver...

Jon Marshall · 10-16-2019

Just to add to Paul's answer. If the DC has given you a default gateway of 24.24.24.209 with the sec...

Jon Marshall · 10-05-2019

To answer your specific question, I think the VP is just talking about advertising ISP1's address ra...

Jon Marshall · 10-05-2019

You are over complicating this. Routers forward packets between subnets or to put it another way the...

Jon Marshall · 10-02-2019

You should not need to use a default route. Normally EBGP peers are directly connected so no need fo...

Jon Marshall · 10-01-2019

Yes that should work fine. Jon

Jon Marshall · 10-01-2019

Okay I was assuming you were applying it to L3 interfaces. Just checked the documentation and if you...

Jon Marshall · 10-01-2019

Are you applying these to L2 or L3 interfaces ? Jon

Jon Marshall · 10-01-2019

The only traffic that will be affected will be traffic going through the interfaces you have applied...

Jon Marshall · 10-01-2019

Just to add, as Paul says it will work, but you need to modify your next hops ie. you cannot have a ...

Jon Marshall · 09-30-2019

Yes and that applies to any redistributed routes not just static routes. Jon

Jon Marshall · 09-30-2019

What do you mean by weight ? If you mean AD (which is not weight) then what is happening is when you...

Jon Marshall · 09-27-2019

Not clear what you mean by inbound and outbound ? Traffic will be sent to the active HSRP router but...

Date Registered	‎09-22-2003 11:19 PM
Date Last Visited	‎10-23-2019 12:14 AM
Total Messages Posted	25,604
Total Helpful Votes Received	18166

RIPE inetnum and route objects etc.

Re: IE2000 - How to set the GigabitEthe...

Re: Ospf Convergence between two equal ...

Re: How to manage routing & NAT for "se...

Re: Using BGP as an Alternate Path to a...

Re: How will the router forward the pac...

Re: Basic EBGP Question

Re: Routing To Firewall

Re: Access control lists on Cisco 6800

Re: Access control lists on Cisco 6800

Re: Access control lists on Cisco 6800

Re: Routing To Firewall

Re: Redistribute Static into EIGRP

Re: Redistribute Static into EIGRP

Re: HSRP - only inbound reroute to stan...

RIPE inetnum and route objects etc.

Re: IE2000 - How to set the GigabitEthernet IP

Re: Ospf Convergence between two equal cost routes

Re: How to manage routing & NAT for "secondary" ip address subnet

Re: Using BGP as an Alternate Path to a failed Circuit's Subnet

Re: How will the router forward the packets from the vlan networks towards other regular network

Re: Basic EBGP Question

Re: Routing To Firewall

Re: Access control lists on Cisco 6800

Re: Access control lists on Cisco 6800

Re: Access control lists on Cisco 6800

Re: Routing To Firewall

Re: Redistribute Static into EIGRP

Re: Redistribute Static into EIGRP

Re: HSRP - only inbound reroute to standby router