Cisco Switching/Routing :: 3660 - ASA OSPF Filtering Inbound Routes?

Feb 11, 2013

How filter inbound routes in Cisco ASA OSPF? Because Cisco ASA has no "distibute-list" command for OSFP process configuration, I try to use "filter-list" command in area definition. So, I try to use next configuration:
 
R1 (Cisco 3660):
 
skip 
!
router ospf 1

[Code].....

View 2 Replies


ADVERTISEMENT

Cisco WAN :: Filtering Outbound Routes In OSPF (Catalyst 4500 IOS XR)

May 5, 2013

We are redistributing routes from BGP to OSPF and we want to filter out some of this routes from the OSPF proccess to be announced to neightbours.We want to announce some networks from ASR#1 to Catalyst. We are redistributing them from BGP to OSPF Area 0. Then, to prevent loops in the topology, these routes have to be filtered out from been redistributed from Area 0 to Area 1 in the Catalyst, so Enterasys appliances don't install those routes through OSPF but to point them out through default route to ASR#2.Is it possible with only one OSPF proccess or we have to separate OSPF in two proccess to redistribute between them?

View 8 Replies View Related

Cisco Switching/Routing :: 4507 Pb To Propagate Ospf Routes To Another Router On

Nov 15, 2011

On a 4507 v12.2(20)EW, the connected subnets which are declared in the ospf instance are not propagated to the MPLS carrier router.Only the static routes which are redistributed in the ospf instance are propagated to the MPLS carrier router.

View 1 Replies View Related

Cisco Switching/Routing :: 6500 OSPF External Routes Churn

Oct 7, 2012

I am observing some strange behaviour related to the routing table, almost all external routes and some inter-area routes are getting refreshed every 10 seconds.
 
I am getting more than 1000 entries after running 'sh ip route | i 00:00:0', these external routes are being advertised by a neighbor 6500 which redistributing these static routes.
 
Platform is 6500 with SUP-720

View 3 Replies View Related

Protocols / Routing :: How To Make Sure R11 Is Able To Get OSPF Routes Of All Areas

Oct 19, 2012

How can I make sure R11 is able to get the OSPF routes of all the areas. Make sure area-278 does not receive any ospf routes from other areas as well as from ASBR routes from other areas. At the same tim, area-278 should be able send successfully RIP routes that we receive from R2 to backbone area.

View 1 Replies View Related

Cisco WAN :: Filtering Routes In Ospfv3 Ipv6?

Apr 7, 2013

i been filterin LSA type 3 and the table route localy routes en ospf v2 ipv4 whit the commands distribute-list , area filter-list route-maps ACL and prefix-lis ¿but how can i do the same filterin in ipv6 whith OSPFv3?

View 2 Replies View Related

Cisco WAN :: AS 300 Why Redistribution From OSPF To BGP Didn't Advertise O E2 Routes

Jan 9, 2012

I am facing two issues in BGP both the topology and Config files.Because the link between Vail and Telluride runs iBGP, both routers will learn about the networks in AS 300 and AS 400 through native BGP only and both AS's do reach each other. Both routers are also running OSPF with Aspen and BGP routes are redistributed into OSPF domain. Now, Aspen knows about the networks in AS 300 and AS 400. Now suppose the link between Vail and Telluride fails, both AS 300 and AS 400 can't reach each other anymore. The only solution to this is to redistribute OSPF routes to BGP on Vail and Telluride. But when i did this, only routes with "O" learned by Tahoe and Alta. In other words, Tahoe sees only 192.168.1.220, 192.168.1.196 and Alta sees only the same routes. Why the redistribution from OSPF to BGP didn't advertise the O E2 routes?
 
This actually was discussed before but i still can't get it. It is not an actual issue.It is about "Syncronization". I know that we've said many times to turn on Sync. when we do redistribution from BGP to an IGP to make sure that the routes are installed correctly in the IGP routing table. However, as you notice in the configuration, i didn't enable Sync. on Vail and Telluride for a long time and redistribution still works fine.

View 2 Replies View Related

Cisco WAN :: How Many OSPF Routes Does Catalyst 3750 Support

Aug 16, 2012

I just want to know how many ospf routes a catalyst 3740 support ?The cisco doc or datasheets doesn't answer this clearly. Because there is only a statement "unicast routes"!? Does this means all unicast routes (eigrp, ospf....static)If so, there is a statement for about 10k routes ?

View 3 Replies View Related

Cisco Switching/Routing :: WRT54G / 3660 For Home Cable Broadband Use?

May 26, 2013

I have a good working knowledge of TCP/IP networking. I have a Cisco 3660 router I'm wanting to use in place of a WRT54G router with my Charter cable internet service. I saw a youtube video where a guy demonstrated how to use a Cisco 2600 series router with home broadband service. I followed the video to setup my 3660 router. I can ping the LAN side (192.168.1.1) with no problem, the DHCP functions as it should. I can see activity on the on the WAN port indicator but no internet access. I have attached .doc file that shows the "sho run" info. My network will be setup as follows Charter Cable Motorola Surf Modem - ethernet to MM fiber converter - MM fiber over to Sun Microsystems cabinet fiber closet - MM fiber card (on Cisco 3660 router FA6/0 WAN interface) - LAN interface FA0/0 - Cisco 3524 managed switch. One of the gigabit MM fiber ports on the Cisco 3524 feeds a 3Com Superstack 12 port gigabit fiber managed switch. My two Dell 2950 servers will be on the Superstack gigabit fiber backbone. The Cisco 3524 10/100 ports will have a Cisco access point, two IP addressible battery backup units, two Dell Desktops, and a LG Blu Ray player.

View 21 Replies View Related

Cisco Switching/Routing :: Command To Show Physical Connection In 3660

Jun 19, 2012

I am using cisco c3660 to act as Terminal Server for the communication of production machines in my company, recently there is a communication lost issue happen and its due to physical cable unplug from the machine. to troubleshoot for this issues i have to physically go inside my production area to check on it,  as i understand from vendor we can check on the physical machine to see whether the LED light on the module is green or not, but in case of need to troubleshoot at night time, its time consuming as i need to travel back to company. is there any command that i can issue in the router c3660 to check on the physical connection between c3660 router and the production machine? the IOS version is IOS (tm) 3600 Software (C3660-I-M), Version 12.1(4)

View 3 Replies View Related

Cisco WAN :: 2620XM OSPF Routes Are Not Populating In Ip Route Display

Nov 19, 2011

I have a Cisco 2620XM Router, running ver. 12.2 (7r). I have OSPF connected, however the OSPF routes are not populating in the sh ip route display. The  neighbor relationship is established. The sh ip ospf database does display the other routers running ospf, however only connected (C) and static (S) routes appear.

View 3 Replies View Related

Cisco WAN :: ME3400 / Injecting Two Default Routes Via Ospf Into Service Provider MPLS?

Jan 24, 2011

We have multiple sites that are linked via MPLS (L3) circuits. We have good size circuits for Internet at two main sites (HQ and QC) and smaller sites come to HQ site to go to internet. We are running ospf (Cisco L3 switches) with service provider (ME3400) at these two main sites and service provider then redistributes routes back into MPLS via BGP and then smaller sites ME3400 learn these routes. i am injecting default routes from HQ and QC, but Telco is only redistributing default from HQ. So large pipe Internet at QC is not being used effeciently. Also if MPLS at HQ fails, then we are told, we need to call Telco and they will make change in their network to now start distributing default from QC.it was my understanding that telco can use BGP communities and advertize one default as prefered and second with higher cost, so that failover can occur automatically. And that they can also set up so that west cost sites use HQ and east cost sites can use QC for going to internet, but they say it is not possible.it the least, can I do something like this at my end for failover for internet, in case MPLS at HQ goes down (soon we will be setting up a point to point VPN tunnel between HQ and QC so that MPLS failure at HQ will trigger advertisement of HQ routes over tunnel via QC into MPLS, so other sites can then come to HQ thru QC over this tunnel. At QC Cisco router (to detect loss of default route from HQ and then start advertizing default from QC) 
 
router ospf 1
 default-information originate always route-map From_HQ
 exit
 ip access-list standard From_HQ

[code]....

View 3 Replies View Related

Cisco Switching/Routing :: 1941 / Policy Based Routing With Two Default Routes

Jun 24, 2012

I have a 1941 router configured for Policy based routing with two ISPs.Two static default routes configured to point the gateways of respoective ISPs with same metric.But the problem is, packets are going throug the one ISP only while doing traceroute.
 
N/W connectivity:
 
ISP1----->                <----------------------> LAN1   
               |  Router |
ISP------->                <----------------------> LAN 2
 
Below is my configuration :
 
Current configuration : 5958 bytes
!
! Last configuration change at 05:18:56 UTC Mon Jun 25 2012
!
version 15.0
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption

[code]....

View 26 Replies View Related

Cisco Switching/Routing :: Inbound Traffic On 7606?

Jan 17, 2013

I have two Cisco 7606 routers using BGP to connect our customers to the internet.  Recently we added a new 1G circuit in addition to an existing 1G circuit and all traffic inbound is now on this new 1G circuit.  We would like to shift some of the inbound traffic over to the other 7606.  Our Tier provider has the same AS number for both paths.  One path goes directly to New York and the other goes to Boston then New York. 

View 1 Replies View Related

Cisco Switching/Routing :: Inbound Qos On 6509 Not Working

Jul 22, 2012

6509 - Not working
 
1    6  Firewall Module                     
2    8  Intrusion Detection System          
3    1  Application Control Engine Module 

[Code].....
 
The Policy applied to the interface is just completely ignoring the configuration.
 
I am sure it is related to the 6500 architecture in some way. Same config is fine on the switch with the higher version on the sup card.

View 3 Replies View Related

Cisco Switching/Routing :: Switch 6500 Policy Map Inbound

Jun 9, 2013

ON switch 6500 i have configured an interface vlan x and applied policies on inboud and outbound directions as per below: [code] But the problem i am facing is that the policy outbound works ok , but the policy inbound doesnt work at all. specifically it doesnt match anything. [code]

View 1 Replies View Related

Cisco Switching/Routing :: Poor Inbound Speed On 2960?

Feb 12, 2013

I have 5x Cisco 2960 and 1x Cisco 2960G. All of them are using IOS Version c2960-lanbasek9-mz.122-55.SE6.bin I'm having poor inbound speed with ALL of the Cisco 2960 (except 2960G) although the outbound speed is normal. The port is 100Mbps Full-Duplex, but the max inbound speed on a single connection is around 35Mbps. With the 2960G, I can get max 1Gbps inbound speed on a single connection.

I checked everything and still not know why the 2960 switches can't get max 100Mbps inbound.

View 5 Replies View Related

Cisco Switching/Routing :: 3750 Port Forwarding Inbound

Dec 15, 2011

I have a non-cisco router with a public WAN address. This is conencted to a 3750 switch internally. The switch is the default gateway for all VLANs, and the gateway router has static routes back to the 3750. The Router provides NAT, no NAT is done on the switch.My requirement is to port forward port 29 000 so that I can access a server on VLAN4 via this port.

So, I have: Router: Port 29000 map to 192.168.4.1 (Switch VLAN4 address)
 
The question is, how do I route port 29000 from the 3750 to the server on 192.168.4.42 ? what exactly I should add in order to port forward port 29000 incoming form my router, to my server on 192.168.4.42.

View 17 Replies View Related

Cisco Switching/Routing :: 3750x Inbound Port Policing?

Dec 11, 2012

dont seem to be able to get policing working inbound on a port 3750X v 15.0(2)
 
Config is below:
 
ip access-list extended SMB
permit tcp host 192.168.1.14 host 172.16.1.30
permit tcp host 192.168.1.14 host 172.16.1.31

[Code]....

View 6 Replies View Related

Cisco Switching/Routing :: ASA 5510 Securing Inbound Traffic On VPN Using ACL

Nov 1, 2012

I have a VPN on my ASA 5510 between (A)192.168.255.0/24 and (B)172.20.2.0./24. The purpose of the tunnel is to send kerberos tickets from our domian controller on the A side, across to a server at B, and receive a respose. I want to lock down inbound traffic to the A network, but not sure of best method.
 
I initially tried using an ACL filtering on ports, but soon realised the incoming traffic uses a wide range of ports so this is not really possible.Seeing as the A side will always be initiating the conversation, I was wondering if I could use the 'established' option on the inbound ACL for the ASA at A side, so that it would block any flows that are not initiated by the A side.

View 3 Replies View Related

Cisco WAN :: 3660 IP Routing Configuration

Sep 9, 2011

I am wanting to take my cable internet connect and give it to the other to networks and be able to communicate between the two networks.  I believe this can be accomplished by IP routing, but have no clue on how to do it.  What I would need to input into the 3660 to make it work?  Right now the 3660 has the factory default setup, I haven't configured anything on that yet.

View 3 Replies View Related

Cisco Switching/Routing :: Switch 3750 / Policy Inbound Traffic Per IP?

Mar 2, 2012

We are using Cisco 3750 switches in our environment as distribution switches.We currently use to police inbound traffic, but we need to find a solution to limit inbound traffic per IP.Something like this “Inbound traffic for each IP can be maximum 1 Mbps” This can be done having, one ACL and one class-map for each IP, but in my situation is not a practical solution, because we have more than 500 IP’s on that site.
 
Is any way to accomplish this without writing 500 ACLs and 500 class-map?

View 2 Replies View Related

Cisco Switching/Routing :: Default Routes In Nexus 5k

Apr 29, 2013

I have a pair of N5K's, down stream from them are from Fabric Interconnects and a UCS chassis.  Upstream is a stack of 3750's then ASA5510's. 
 
I am trying to backup the config to our TFTP server and I am getting 'no route to host'.. I tried to add a route, and found that N5K uses VRF's for routing?? .. After some looking I see there are two base VRF's 'management' and 'default'.. the management VRF has a default gateway entry and a single interface member (mgmt0).. when I look at the default VRF .. there are no interface members or routing entries.. Ok, I can handle that just add some interfaces and add a default gateway.  Then I get lost:
 
I'm able to access the UCS manager..... so how the heck is that even possible if there's no gateway defined anywhere (or maybe I'm missing something?).  My theory was: add all other ports but mgmt0 to the default VRF, and have the default gateway point out of the uplinks (a vPC).. but wasn't sure how that would affect anything and mainly just wanted to know how I was able to access the UCS manager in light of the fact that there is no default gateway anywhere that I could see...

View 7 Replies View Related

Cisco Switching/Routing :: Track IP Routes On 6509?

Jul 2, 2012

We have a need to track specifc subnets on our two 6509s, running IOS version 12.2(18)SXF16. Basically, we want to do this:
 
track 1 192.168.0.0 255.255.255.252 reachability
track 2 192.168.1.0 255.255.255.252 reachability
 
However, the 6509 IOS only provides the option to track an interface. Is this a feature that's available in later IOS versions?
 
Is there another way to track these routes? The subnets are used for WAN links at a HQ and DR site and we are doing a specific PBR (sending all http/https traffic) using these subnets. If that WAN link goes down, we want to be able to utilize a backup WAN link to support that traffic.

View 2 Replies View Related

Cisco Switching/Routing :: 871 IP Routes Based On Domains

Apr 9, 2012

I would like to configure few routings on my Cisco router 871 in order to allow my employees to have access only to specific websites.However, since some websites have dynamic IPs propably the route that I will create will not work.
 
My question is, can I configure a route or is there any other way to configure this permission based on the hostname/domain? For example, if I want to permit access to this website www.surveymonkey.com (75.98.93.51) instead of configuring:
 
ip route 75.98.93.51 255.255.255.255 192.168.10.250
 
is there any way to configure based on the url.. in order to be able to recognise this host correctly??

View 2 Replies View Related

Cisco Switching/Routing :: Dynamic Routes With 1711

Jan 23, 2012

Im new to cisco routes, Im traing to configure a 1711 routes with a dsl 2wire routes, my problem is that Im able to ping anywhere in the routes, but when Im on my computer I can only ping the interfaces on the router but no the 2wire route that gives me access to the internet.
 
                                                              Cisco 1711                                                                       2wire                                                        
                          f0 192.168.200.1(Inside NAT)          e0 192.168.1.76( 2wire Nat)              192.168.1.254      (Internet)
 
My computer is getting ip addres 192.168.200.100 when I ping th 192.168.1.76 is fine, but when I try to ping the 192.168.1.254 does not work, Im assuming the cisco has activated a dinamic route from .76 to .254, but it is not working, why?

Here is the router configuration
 
Router#show runBuilding configuration...
Current configuration : 1183 bytes!version 12.3service timestamps debug datetime msecservice timestamps log datetime msecno service password-encryption!hostname Router!boot-start-markerboot-end-marker!!no aaa new-model!resource policy!memory-size iomem 25ip subnet-zero!!no ip dhcp [Code]....

View 2 Replies View Related

Cisco Switching/Routing :: Layer 3 Switching And ASA 5505 With OSPF?

Jun 15, 2012

We are setting up a test lab in our DMZ.  The path to the internet is basically like this.  Anything past the firewall is irrelevant. For this lab lets assume it is vlan 300.
 
LAB SW ---> DMZ-SW ---> ASA FW ---> INTERNET
LAB IP Range = 172.16.300.0 /24
GW = 172.16.300.1 (On FW int)
Trunked all the way through.
 
I have an int vlan set up on the LAB SW.  It is being trunked to DMZ SW.   DMZ trunks it to ASA FW where there is a failover with a redundant switch.On the ASA the interface 0/2 is a subinterface 0/2.300 being used as the default gateway. 
 
I have DHCP running in a specific range on the LAB SW and do get an ip address when plugged in.  I cannot ping the default gateway on the ASA FW.The GW is defined using default-router command for 172.16.300.1 i.e.  default-router 172.16.300.1?
 
We are running ospf on the firewall.  There appears to be a pattern with ospf and a similar subnet setup elsewhere.  I was wondering based off of this info would configuring ospf for 172.16.300.0/24 allow me to ping the GW from a client on the LAB SW.Secondly.  I trunked 300 on the DMZ SW but I didnt add the vlan  to the configuration. i.e.  conf t <enter> vlan 300 <enter>  Does this really matter?  Or is having the vlan in the configuration only pertain to access mode on interfaces?

View 1 Replies View Related

Cisco Switching/Routing :: 4506 Resilient Routing Design With OSPF

Aug 27, 2012

We have 2 sites, each with 2 x 4506 switches which will be connected togther using an etherchannel. The switches will provide access ports for client devices and will be configured with HSRP to provide gateway redundancy. SW1 will be HSRP active.2 metro ethernet links will be installed in each site which will connect back to our HQ sites. OSPF will be used over the backbone to provide resiliency and to allow shortest path routing to each HQ and to prevent traffic over the HQ to HQ link.

The 4506 will be trunked togther with an SVI for providing OSFP adjacency.For the traffic flow from SW2 to HQ2, traffic will hit SW1 and then route back to SW2 and then to HQ2. Is this the best way to do this? Should a second link be connected between switches just for routing or should something like GLBP be used?

View 6 Replies View Related

Cisco Switching/Routing :: Filter A Specific Host(s) From OSPF Routing Table On A ASA 5550 (ABR)?

May 22, 2013

I am attempting to filter a specific host(s) from my OSPF routiing table on a ASA 5550 (ABR) using LSA prefix lists.  However, when I look at the other routers in that area, I notice that ALL LSA type-3's are being removed (10 hosts are now missing from the routing table). I have verified the filter is working on the ABR, but I can't figure why ALL hosts/routes that were coming into the area are now being filtered instead of the specific one that I want to filter out.
 
Here is the config on the ABR:
 
prefix-list pdm_pl_000 seq 10 permit 206.253.180.137/32
!
!            
router ospf 1
network 10.0.0.0 255.255.255.0 area 0
network 10.150.10.0 255.255.255.0 area 10
network 10.150.252.0 255.255.255.224 area 10

[code]....
 
The 206.253.180.137 host is actually coming from Area '3'.  Am I doing something that is removing all type-3 LSA's?

View 3 Replies View Related

Cisco Switching/Routing :: Inbound And Outbound Per Port Bandwidth Limitation 3560

Feb 21, 2013

I'm intending to purchase a switch for work,and I need to limit the bandwidth of one of the ports to 25 Mbit upload and 25 Mbit download (we have 100/100 Mbit connection and the customer is only paying for 25). I been trying to find information on how this could be "properly" done and what kind of switch I need to buy. As far as I have understood, most L2+ switches support outbound rate limiting, but not inbound, and as I only want the customer to have 25 mbit up and down, I need both.
 
I been looking at a Cisco Catalyst 3560 switch, and I'm first and foremost wondering if I can limit the inbound AND outbound bandwidth on this switch? Perhaps it can even be done on a simpler, cheaper, switch - as I rather not spend more money then necessary?
 
Lastly, how to do it, limit the inbound and outbound bandwidth on a single port (perhaps on the above mentioned switch, if possible), to 25 Mbit?

View 3 Replies View Related

Cisco Switching/Routing :: 6500 Two Default Routes Not Working

Oct 15, 2012

6500 - version (s72033_rp-ENTSERVICESK9_WAN-M), Version 12.2(18)SXF17a.I have two ISP's. I have created two defaults as follow & secondary route does not work. [code] After disabling the interface to ISP1, backup routes does not work. [code]

View 2 Replies View Related

Cisco Switching / Routing :: 6500 / VSS - Share / Leak Routes Between VRF And GRT

Dec 13, 2012

I have a scenario which is fairly common - certain servers are accessed from the internet via a Load Balancer, and since seeing true client IP is a requirement, the return traffic path must go back through the load balancer.  However, I do not want to route all traffic via the load balancer for obvious performance reasons.  Internal traffic should be routed directly by the Layer 3 switch, which has a default route of a Firewall. 
 
My plan is to use a VRF for the load balancer and any applicable servers, which works fine.  But now I need to join the VRF's routing table with the switch's GRT (global routing table) so that internal traffic works.  What is the best way to do this?  For scalability reasons I'd like to avoid static routes and I see many examples  using BGP, but in this case it seems overkill since everything is on a single logical switch.  Can I use OSPF instead?  Or a different method?  The Supervisors will be 2Ts, so IOS 15.0 will likely be running.

View 2 Replies View Related

Cisco Switching/Routing :: Nexus 7010 / 5510 - Run OSPF As Layer 3 Routing Protocol Between VPC Peer Links

Mar 25, 2012

I have an environment where i have two nexus 7010 switches, along with 2 nexus 5510's. I need to run OSPF as a layer 3 routing protocol between the vpc peer links.  I have 1 link being used as a keep alive link, and 3 other links being used as a VpC link.
 
1) Is it best to configure a separate Vpc VLAN i.e 1010

2) Is it best to configure a vrf context keep-alive

3) just have the management address as the peer ip's.

View 2 Replies View Related







Copyrights 2005-15 www.BigResource.com, All rights reserved