Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About burhan.agir
Stats
Member since
04-03-2018
20
Posts
0
Helpful
0
Solutions
05-14-2019
07:35 AM
We have two ASA 5512 firewalls and there is a master backup redundancy between each other. Also, I configured FW-2 as primary and FW-1 as secondary. When I power on devices at the same time, sometimes FW-1 become master or sometimes FW-2 become master after power on. When FW-2 become master, the multicast packet could not pass into the inside (YKI) network. I get the Wireshark outputs from inside (YKI) and outside (YSHA) way when the problem occurred. You can find in attachment. Also, you can find topology. Also, I solved this situation in this way. Firstly power off the FW-2. After that FW-1 become master and multicast packets pass into the inside. After that, I power on FW-2 and power off FW-1 and FW-2 become master. I checked the situation but I observed there is no multicast problem. Power off FW-2 and power on again solved this situation but I did not understand what is the problem?
... View more
03-15-2019
04:37 AM
Hi, The monitored interface was added. YKI and YSHA. All interfaces are up. I do not need preempt. Thanks,
... View more
03-13-2019
10:52 PM
Hi, I added the standby IP address on Po1 and Po2 but the situation was the same. And I could not see any configuration example in documents given standby IP is necessary. This is must? Also, I have another HA devices without standby IP addresses but I did not see any problem on some of them. Also when I check the Po2 configuration (from console) I can see the IP address under port but I could not see on command output. I do not understand why it is. I did some test about boot time. I power on FW2 and FW1 on same time when I did this always FW1 become master. But firstly I power on FW2 and after 10 seconds about later power on FW1, FW2 become master. This situation could be about boot time? Thanks,
... View more
03-11-2019
06:59 AM
Hi Sheraz, Thank you for your reply. I can ping each other. Yes, there is a switch and I changed the cable. Also, I did tdr test with command on a switch but there was no error. I have back to back connection between FW's for failover. FW's switch connections are LAN and WAN connection. I checked all of them but I could not see any problem about cable or SFP's. I do not use context. Thanks,
... View more
03-11-2019
06:53 AM
Hi, Thanks for your answer. I added the failover interface configuration below. I do not know there is preempt or not. But I think there is no "preempt" setting. I check the link that you posted also I did not see about that. ! interface GigabitEthernet0/2 description LAN Failover Interface ! Thanks,
... View more
03-10-2019
07:55 AM
Hi, I have two 5512 ASA's. I did configuration that FW-2 become Active and FW-1 become Standby. But when I power on the devices always FW-1 become Active. I checked the "show failover state" command I saw that "Ifc Failure" reason. But I check the monitored interfaces there is no problem about that. What is the real mean "Ifc Failure" reason? It is related just interface up/down status? By the way, I tried a lot of time that power off and on again. Firstly power on FW-2 after FW-1 but results are always the same. I add the config output and failover config from console each other. Thanks,
... View more
Labels:
10-10-2018
01:46 AM
By the way the interface configuration B3 and O3 is below. ! interface GigabitEthernet0/0 ip address 10.51.100.1 255.255.255.0 ip pim sparse-mode ip igmp join-group 226.1.1.1 ip igmp join-group 225.1.1.1 media-type gbic speed 1000 duplex full negotiation auto !
... View more
10-10-2018
01:44 AM
Hello, Static mroute is ok. All edge routers learned RP and BSR IP address. Thank you for your suggestion but I could not use IGP and pim-redundancy command under HSRP interface in my topology due to some reason :) When I implement the static mroute commands to edge routers, all routers learned. But when I ping from A3 to 225.1.1.1 O3 and B3 could not get this multicast ping packet. Just A4 get this packets. Although edge routers know the RP address why this packet not seen on the other edge routers?
... View more
10-09-2018
06:26 AM
Hello, It's done! But this IP address is physical. When the router 1 goes down I could not reach this IP address. Should I write another static route with a higher preference for router2 physical IP address? A3# A3#sh run | i route ip mroute 0.0.0.0 0.0.0.0 10.52.100.52 ip route 0.0.0.0 0.0.0.0 10.52.100.51 A3# A3# A3#sh ip pim ne PIM Neighbor Table Mode: B - Bidir Capable, DR - Designated Router, N - Default DR Priority, P - Proxy Capable, S - State Refresh Capable, G - GenID Capable Neighbor Interface Uptime/Expires Ver DR Address Prio/Mode 10.52.100.2 GigabitEthernet0/0 00:09:51/00:01:42 v2 1 / S P G 10.52.100.52 GigabitEthernet0/0 00:09:53/00:01:20 v2 1 / S P G 10.52.100.53 GigabitEthernet0/0 00:09:54/00:01:18 v2 1 / DR S P G A3# A3#sh ip pim rp ma PIM Group-to-RP Mappings Group(s) 224.0.0.0/4 RP 1.1.1.2 (?), v2 Info source: 1.1.1.1 (?), via bootstrap, priority 10, holdtime 150 Uptime: 00:06:41, expires: 00:01:17 RP 1.1.1.1 (?), v2 Info source: 1.1.1.1 (?), via bootstrap, priority 20, holdtime 150 Uptime: 00:06:41, expires: 00:01:15 A3# A3# A3#sh ip pim bsr PIMv2 Bootstrap information BSR address: 1.1.1.1 (?) Uptime: 00:06:45, BSR Priority: 20, Hash mask length: 1 Expires: 00:00:55 A3# A3#
... View more
10-09-2018
01:34 AM
Hello,
When I did the test with Gi0/0 all outputs are ok. But RP and BSR IP address still not learned.
A3# A3#mtrace 10.52.100.1 1.1.1.1 Type escape sequence to abort. Mtrace from 10.52.100.1 to 1.1.1.1 via RPF From source (?) to destination (?) Querying full reverse path... 0 1.1.1.1 -1 2.2.2.1 ==> 2.2.2.1 PIM/Static [10.52.0.0/16] -2 2.2.2.2 ==> 10.52.100.52 PIM_MT [10.52.100.0/24] -3 10.52.100.1 A3# *Oct 9 11:24:57.311: PIM-BSR(0): bootstrap (1.1.1.1) on non-RPF path GigabitEthernet0/0 or from non-RPF neighbor 10.52.100.51 discarded A3#
A3# A3#mtrace 10.52.100.1 1.1.1.2 Type escape sequence to abort. Mtrace from 10.52.100.1 to 1.1.1.2 via RPF From source (?) to destination (?) Querying full reverse path... 0 1.1.1.2 -1 1.1.1.9 ==> 1.1.1.9 PIM/Static [10.52.0.0/16] -2 1.1.1.10 ==> 10.52.100.52 PIM_MT [10.52.100.0/24] -3 10.52.100.1 A3#
A3# A3#traceroute 1.1.1.1 source gi 0/0 Type escape sequence to abort. Tracing the route to 1.1.1.1 VRF info: (vrf in name/id, vrf out name/id) 1 10.52.100.52 64 msec 28 msec 28 msec 2 2.2.2.1 80 msec 108 msec 92 msec A3#
A3# A3#traceroute 1.1.1.2 source gi 0/0 Type escape sequence to abort. Tracing the route to 1.1.1.2 VRF info: (vrf in name/id, vrf out name/id) 1 10.52.100.52 20 msec 28 msec 28 msec 2 1.1.1.9 88 msec 92 msec 88 msec A3#
... View more
10-08-2018
10:59 PM
Hello,
Backside routers have no pim neighbor with WAN router.
Yes, they can reach (ping) RP and BSR router.
I took outputs from A3 router. You can find in attachment. At the moment RP and BSR IP address on the system is below.
B1# B1#sh ip pim rp ma PIM Group-to-RP Mappings This system is a candidate RP (v2) This system is the Bootstrap Router (v2)
Group(s) 224.0.0.0/4 RP 1.1.1.2 (?), v2 Info source: 1.1.1.2 (?), via bootstrap, priority 10, holdtime 150 Uptime: 00:26:34, expires: 00:01:53 RP 1.1.1.1 (?), v2 Info source: 1.1.1.1 (?), via bootstrap, priority 20, holdtime 150 Uptime: 00:26:42, expires: 00:01:46 B1#
B1# B1#sh ip pim bsr PIMv2 Bootstrap information This system is the Bootstrap Router (BSR) BSR address: 1.1.1.1 (?) Uptime: 00:26:46, BSR Priority: 20, Hash mask length: 1 Next bootstrap message in 00:00:21 Candidate RP: 1.1.1.1(Loopback0) Holdtime 150 seconds Advertisement interval 60 seconds Next advertisement in 00:00:14 Candidate RP priority : 20 B1#
Thanks,
... View more
10-08-2018
12:48 PM
Hello, Yes, it is. I want to use the first router as the active router. When the first router goes down, the second router takes the position as active. Is it block the learn RP IP address, you think? Actually, the second router can learn or not the RP IP address is not important this step. I think the problem is that backside router could not learn the RP. Thanks,
... View more
10-08-2018
12:01 PM
Hello,
All HSRP configuration is between first and second routers for LAN and WAN redundancy. For example O1-O2, B1-B2, A1-A2.
I added the whole configuration about devices except switches.
Thanks,
... View more
Created by
burhan.agir
in Firewalls
05-14-2019
05-14-2019
We have two ASA 5512 firewalls and there is a master backup redundancy
between each other. Also, I c...
03-15-2019
Hi,The monitored interface was added. YKI and YSHA.All interfaces are
up.I do not need preempt.Thank...
03-13-2019
Hi, I added the standby IP address on Po1 and Po2 but the situation was
the same. And I could not se...
03-11-2019
Hi Sheraz, Thank you for your reply. I can ping each other.Yes, there is
a switch and I changed the ...
03-11-2019
Hi,Thanks for your answer. I added the failover interface configuration
below.I do not know there is...
03-10-2019
Hi, I have two 5512 ASA's. I did configuration that FW-2 become Active
and FW-1 become Standby. But ...
10-10-2018
By the way the interface configuration B3 and O3 is below.!interface
GigabitEthernet0/0 ip address 1...
10-10-2018
Hello,Static mroute is ok. All edge routers learned RP and BSR IP
address. Thank you for your sugges...
10-09-2018
Hello,It's done! But this IP address is physical. When the router 1 goes
down I could not reach this...
10-09-2018
Hello, When I did the test with Gi0/0 all outputs are ok. But RP and BSR
IP address still not learne...
10-08-2018
Hello, Backside routers have no pim neighbor with WAN router. Yes, they
can reach (ping) RP and BSR ...
10-08-2018
Hello,Yes, it is. I want to use the first router as the active router.
When the first router goes do...
Public Statistics
| Date Registered | 04-03-2018 12:21 AM |
| Date Last Visited | 07-25-2019 04:46 AM |
| Total Messages Posted | 20 |
