Current situation: Nexus 93180YC-EX is a core switch with connections to the rest of the network. Nexus 5548 has a connection to the Nexus 93180YC-EX. Nexus 5548 has only the Wireless Controller connected to it. Traffic across the Nexus 5548 consists of: a) Wireless AP tunnels terminating on the Wireless Controller b) Wireless client traffic Have replaced SFP+, certified fiber jumpers, SFP-H10GB-C jumpers to both problem interfaces, no change. Suspect it is a particular type of traffic as opposed to physical layer problems. ... View more

Question: How best to steer particular 192.168.X.0 /24 subnet traffic out through the new firewall to the Internet? Internal network uses OSPF to include inside interface of ASA 5585X firewall. The ASA has a static route 0.0.0.0 /0 pointing to the edge router which is also redistributed into OSPF. The edge router has a static route 192.168.0.0 /22 pointing to the ASA. A new firewall has been installed in the network with it's inside interface participating in OSPF. On the edge router a more specific route, 192.168.X.0 /24, can be added that points to the new firewall. On the new firewall a static route 0.0.0.0 /0 can be added that points to the edge router and NOT redistributed into OSPF. ... View more

Internal network uses OSPF to include inside interface of ASA 5585X firewall. The ASA has a static route 0.0.0.0 /0 pointing to the edge router which is also redistributed into OSPF. The edge router has a static route 192.168.0.0 /22 pointing to the ASA. A new firewall has been installed in the network with it's inside interface participating in OSPF. On the edge router a more specific route, 192.168.X.0 /24, can be added that points to the new firewall. On the new firewall a static route 0.0.0.0 /0 can be added that points to the edge router and NOT redistributed into OSPF. Question: How best to steer particular 192.168.X.0 /24 subnet traffic out through the new firewall to the Internet? ... View more

How to track BGP session instead of "ip routing"? As documented below when the "ip routing" goes down on interface Vlan20 the vrrp #1 decrements by 80 due to object tracking #3.  Now a problem has occurred where the BGP session for interface Vlan20 has gone down but "ip routing" staid up.  Any suggestions on how to track the BGP session instead of "ip routing" on interface Vlan20? ************************************************************************************************** track 3 interface Vlan420 ip routing interface TenGigabitEthernet1/2  description REMOTE_CONNECTIONS  switchport trunk allowed vlan 20,21,22  switchport mode trunk ! interface TenGigabitEthernet1/8  description LOCAL_CONNECTION  switchport access vlan 13  switchport mode access   interface Vlan13  description LOCAL_CONNECTION  ip address 10.13.1.2 255.255.255.0  vrrp 1 ip 10.13.1.1  vrrp 1 priority 120  vrrp 1 track 3 decrement 80 ! interface Vlan20  description COMMODITY  ip address 10.20.1.3 255.255.255.252 ! interface Vlan21  description INTERNET2  ip address 10.21.1.3 255.255.255.252 ! interface Vlan22  description PRIVATE_CONNECTION  ip address 10.22.1.3 255.255.255.252 ! router bgp *****  neighbor 10.20.1.2 description COMMODITY  neighbor 10.21.1.2 description INTERNET2  neighbor 10.22.1.2 description PRIVATE_CONNECTION     ... View more

How to make the default-route advertised out interface TenGigabitEthernet (SECONDARY_CORE) to be less desirable than the default-route advertised out interface TenGigabitEthernet (PRIMARY_CORE)? interface TenGigabitEthernet0/6  nameif PRIMARY_CORE  security-level 90  ip address 10.100.100.254 255.255.255.0   ospf priority 0  ospf message-digest-key 1 md5 *****  ospf authentication message-digest !              interface TenGigabitEthernet0/8  nameif SECONDARY_CORE  security-level 90  ip address 192.168.12.254 255.255.255.0   ospf priority 0  ospf message-digest-key 1 md5 *****  ospf authentication message-digest !                router ospf 100  router-id 10.100.100.254  network 10.100.100.0 255.255.255.0 area 0  network 192.168.12.0 255.255.255.0 area 0  area 0 authentication message-digest  log-adj-changes  default-information originate   ... View more

  What is the second, third, etc. next-hop address in the route-map set command for? route-map TEST_PBR permit 10 match match ip address 101 router(config-route-map)#set ip next-hop 1.1.1.1 ? A.B.C.D IP address of next hop ... View more

Questions: 1) How to get the second PBR_DEFAULT_GATEWAY address 10.20.20.3 into the policy-based routing for redundancy? 2) Any optimizations as more and more traffic (policy-based routed and otherwise) goes through interface Gi1/0/1? Address range A.B.0.0/16 represents assigned Internet-routable addresses. Network also uses 10.0.0.0/8, 172.16.0.0/20, 192.168.0.0/16. DEFAULT_GATEWAY router participates in OSPF and injects the default routes 0.0.0.0/0 10.10.10.1 and 0.0.0.0/0 10.20.20.1 into OSPF. PBR_DEFAULT_GATEWAY router participates in OSPF but filters out default routes injected by DEFAULT_GATEWAY router. ROUTER_A participates in OSPF and receives default routes injected by DEFAULT_GATEWAY router. ROUTER_A contains the attached policy-routing configuration that allows the subnet A.B.30.0/24 to route anywhere on the network and uses PBR_DEFAULT_GATEWAY as the way out. ​   ... View more

How to shutdown an interface or drop a BGP session on that same interface if a second interface goes down or loses IP routing? Looking at the attached jpeg the problem is if interface Te1/1 goes down or loses ip routing then shutdown interface Te1/2 or drop the BGP session between Te1/2 ip address 10.0.0.1 and the BGP neighbor 10.0.0.2. I suspect this is something that might be done by: a) object-tracking line protocol on the second interface b) object-tracking ip routing on the second interface   Order of preference would be: 1) dropping BGP session 2) shutting down interface   ... View more

This is the current setup between two edge routers and an ASA 5580.  The edge routers carry approximately 9200 BGP routes with ISP A also supplying the default route.  Is there a good, i.e. has been successfully implemented, dynamic routing situation between the edge routers and ASA such that the ASA can send traffic to the particular edge router that carries the best specific route? ... View more

Receiving duplicate ping replies from servers using HSRP virtual address 10.0.1.224 as gateway. Servers using specific IP address of one of the Vlan11 interfaces as a gateway DO NOT produce duplicate ping replies. Pinging the virtual HSRP address of 10.0.1.224 DOES NOT produce duplicate ping replies. **** Nexus5548-A **** interface Vlan11   ip address 10.0.1.223/24   ip ospf authentication message-digest   ip ospf message-digest-key 1   ip ospf priority 225   ip router ospf 100 area 0.0.0.0   hsrp 1     ip 10.0.1.224 **** Nexus5548-B **** interface Vlan11   ip address 10.0.1.225/24   ip ospf authentication message-digest   ip ospf message-digest-key 1   ip ospf priority 225   ip router ospf 100 area 0.0.0.0   hsrp 1     preempt     priority 110     ip 10.0.1.224 ... View more