Hello @ulrickfr2001 wrote: I think the issue is related to the Administrative distance.    Both routers redistribute the rip routes into ospf. Then both routers avertise theses routes to R4 and the Link States are propagated to R1 and R2. So the first router between R1 and R2 which will receive the routes redistributed from RP into his ospf database will compare the AD of RIP (120) vs AD of OSPF external (90) and then choose OSPF routes over RIP routes. i don’t think using a single or multiple redistribution points matter the ospf routes won’t show up with a tagged value in rip  ... View more

Hello As per my understanding in essence yes - I think its to do with some internal mismatch values of rip as to eigrp or ospf - as you have stated your tagged route from rip into ospf work and you see them in the lsdb but your ospf to rip tagging you don’t see in rip? if you were to perform this between eigrp and ospf then you should see tagged routes in either routing database  ... View more

Hello What you are doing is basically preventing routing loop between rip/opsf areas because you are not only performing mutual redistribution but also in two redistribution points.   Also I am on the understanding  route tags in rip mean nothing its only down to hop count, administrative and metrics, Now if you want to manipulate path preference in rip advertise ospf in to rip at R2 with an higher metric then that of R1 or vice versa. ... View more

Hello I notice you have decreased instead of increased the delay values on the eigrp tunnels (R1,2,3). Was this to try and manipulate the routing path? ... View more

Hello The physical interface of the tunnel will be the endpoint (specified tunnel source) However note that if this interface goes down it will ONLY shutdown the tunnel interface its related to locally not the far side of the tunnel interface unless keepalive is enabled on both tunnels then as I said if one tunnel interface goes down then its opposite will also.     ... View more

Hello @Nasos Ergot wrote: Hi Paul,   Thanks for your response.   We are getting 2 x 3560CX-8TC-S, as far as i can these are not stackable?   Currently the LAN and ASA Inside interfaces are all in the same subnet. - Isn't the ASA inside interfaces assigned to a vlan related to a routed svi on the L3 switch? In which case, do you think i can get away with configuring the ASA Inside interfaces on a separate subnet, configuring the switch ports as routed and enabling HSRP for LAN nodes so i can use the switches as the network's default gateway? I can then point to the firewalls with a static route and point back from the firewalls with another static route? Now with this approach and the asa's in an HA active/standby mode, the Fws need to have the same primary/standby addressing on each monitored interface so with HRSP in the mix you will need to point both fws towards the single VIP of the HRSP L3 svi switch as such I would say HRSP is indeed applicable. edit: alternatively i could use the firewalls as the network's default gateway (they are in an active/standby config) and simply use the switches for L2 switching with STP for failover. I just don't think it feels right to use the firewalls as the default gateway. -  dont see why this would be a problem depending how may L3 vlans , as really you don't want the FW's doing to much intervlan routing?       ... View more

Hello Just like to add to Josephs comments:- You could possibly look into using an elegant kind of route filtering inline with your ISP in a away that not only it results in you not receiving certain prefixes but it also saves router resource. These prefixes wont even been sent to your router in the first place unlike normal route filtering in which the prefixes are received by your router then filtering takes place thus still taking up unnecessary resource. This kind of route filtering is called Outbound Route Filtering (ORF) but as I have stated you eed to work with you ISP to see if this is indeed applicable. example ORF: your router ip prefix-list ORF deny 10.0.0.0/16 ip prefix-list ORF permit 0.0.0.0/0 le 32 router bgp x neighbor (ISP) prefix-list ORF in neighbor (ISP) capability orf prefix-list ORF send ISP router bgp x neighbor (your rtr) capability orf prefix-list receive     ... View more

Hello @omc79 wrote: By design, GRE tunnels are completely stateless. Each tunnel endpoint does not keep any information about the state of the remote tunnel endpoint. By default, the local tunnel endpoint router does not have the ability to bring the line protocol of the GRE Tunnel interface down if the remote end of the tunnel is unreachable.  However this can be easily negated by enabling keepalive on each tunnel so if either was to go down the opposite would also transition into a down state.         ... View more

Hello the sla destination should not be reachable when the track is down so it seems more than likely that the  destination is reachable via an alternative path    Possibly suggest to change your source address to the primary physical interface  toward this destination however with out seeing you current configuration or topology cannot be for sure! ... View more

Hello Joseph  MY understanding pfr (oer as I know it) is stil in all purposes a intelligent LB feature it doesn’t  actually bind two different ISP circuits into one? ... View more

Hello you don’t really need to use hrsp depending switch type you can just use say  two stackable 2960x for example in a stack with a default route pointing to the asa HA    I am assuming the Asa’s are HA failover and as such just have each individual asa inside interfaces (and outside if applicable -in different L2 vlan access ports) attach to either one of the physical switches in this stack - HA failover will do the rest.     ... View more

Hello if you perform the interface count along the rpf if the mc traffic then if for some reason a particular I interface  isn’t allowing mc for a certain group then you should be able to identify so   ... View more

Hello Also check each m/c interface between scr/dest sh ip pim interface count  -  this should tell if something is/isnt getting through ... View more

Duplicate post this - please close one of them   ... View more

Hello On the interface source of the MC.   sh ip igmp interface x/x sh ip igmp  groups | ex 224.0.1.40 sh ip mroute ... View more