Cisco Switching/Routing :: 6500 / Can't Ping From OSPF Network To HSRP Segment

Aug 21, 2012

We have an OSPF network with four 6500 Distribution Switches.  They are fully meshed and see each other as peers and are sharing routes.  Off of one pair (Border)  there is a setup of 3750G  siwtches that go off to another network and they do not run OSPF.  Between the Border Dist and the 3750G Switches we run HSRP.  The 3750G side uses HSRP GP 192 and the Dist Side uses HSRP 192.There are static routes on the 3750G pointing to the Dist HSRP address to get back to network.Pings fail from the OSPF side to the HSRP address on the 3750G side.If I do a trace from the OSPF side to the HSRP address it hits one border dist switch then the other and fails.If I have static routes on both border dist switches pointing to the HSRP on the 3750side, do we need to change the metric on one dist so that it is preferred over the other or should the router Id take care of that?

View 1 Replies


ADVERTISEMENT

Cisco Switching/Routing :: 6500 - HSRP Design And VSS

Apr 17, 2012

is it possible to run hsrp on two routers (not l3 switch) connected to a l2 switch ? if so does the two routers need a back to back connection ?
 
i know if use two l3 switches (instead of routers) and connect to a LAN switch then we need a back to back connection between the L3 switches
 
also can we use hsrp on vss on 6500?
 
design
 
 
1800 router                                       1800 ROuter
     |                                                        |
     |                                                        |
     |---------- L2 switch-------------------------------|
 
if the above design is acceptable how does the routers know which one is active and which one is standby ? if we need a direct connection between two routers they have to be on a seperate subnet and routers dont allow broadcasts - so how will hsrp work on routers ?
 
L3 switch --------------------------l3 switch
   |                                            |
   |                                            |
   |---------------L2 switch---------------|

View 8 Replies View Related

Cisco Switching/Routing :: 6500 - HSRP Is Instable

Apr 14, 2013

n our datacenter we've implemented HSRP on 2 6500's for redundancy purposes. Both switches are connected via a trunk. When an interface is administratively brought up, HSRP becomes instable. Below some selective logging: 
 
12:58:01.759 CET: %HSRP-5-STATECHANGE: Vlan32 Grp 32 state Standby -> Active12:58:01.919 CET: %HSRP-5-STATECHANGE: Vlan21 Grp 21 state Standby -> Active12:58:02.031 CET: %HSRP-5-STATECHANGE: Vlan42 Grp 42 state Standby -> Active12:58:02.031 CET: %HSRP-5-STATECHANGE: Vlan18 Grp 18 state Standby -> Active12:58:02.223 CET: %HSRP-5-STATECHANGE: Vlan4 Grp 4 state Standby -> Active

Basically what happens, is that both switches becomes active and thus are forwarding traffic. After a few seconds all is back to normal. It seems they are missing each others "hello messages", so the state change is in this case normal outcome. What I can't figure out', is the root cause. Since it is triggered by bringing up an random interface configured as a dot1q trunk, I'm thinking of STP limits. But the limitations I found are 10.000 active STP logical ports and 1800 virtual ports per slot. In my case this is 2591 logical ports and all the virtual ports per slot are below 1800. This suggest the switch is capable of running this set-up without a problem.
 
Some extra information:-Sup 720 10GE-Version 12.2(33)SXH2a-No Vss used-No drops on trunked interfaces between the 2 core switches-83 standby groups (max256)
-R-PVST

View 5 Replies View Related

Cisco Switching/Routing :: 6500 Migrating L2 To L3 With OSPF In LAN

Feb 4, 2013

We have an existing network with a core 6500 as a VSS connecting 4 buildings with 4500 chassis under which number of L2 switches are connected. Currunlty we are using RSTP in ring for redundancy but we want to use OSPF in LAN for faster conversion.All the VLAN's are created on 6500.

View 4 Replies View Related

Cisco Switching/Routing :: ACL Behaviour On HSRP 6500 Standby SVI

Jan 19, 2012

I have been reading several posts in this forum to try to understand ACL  behaviour on a standby HSRP 6500, I would be glad to get this cleared.I have two 6509 running HSRP for all Vlans...I created VLAN 100 with standby ip address 192.168.1.129 255.255.255.128
 
Active 6509 (SW01) ip is 192.168.1.130/25, priority 120
Standby 6509 (SW02) ip is 192.168.1.131/25
 
I have created a DHCP server on the standby 6509 only on the same VLAN 100 with a defaul router of 192.168.1.129 (i.e. the hsrp vip). I connected a pc directly to the ethernet port on the standby 6509 and put it under VLAN 100 and it obtained its ip 192.168.1.200 from the ios dhcp.Now I want to restrict this PC (and any other on its subnet) to access only a remote server 172.168.10.10 and nothing else. I have created the following access list, allowing traffic to the remote server, ospf and hsrp updates,ios dhcp...
 
Extended IP access list SWRES
10 permit ospf any any log (172 matches)
20 permit ip any host 172.168.10.10
30 permit ip any host 224.0.0.2
40 permit udp any host 255.255.255.255 eq bootpc
50 deny ip any any log (52 matches)
 
I have applied this ACL on both the 6509s under interface VLAN 100 ip access-group SWRES in  
 
1. When I ping different subnets on the 6509s from the PC, I still receive icmp replies although I expected the acl to pass traffic destined for the remote server only. I do get deny log messages on the Active 6509, but not on the standby 6509 where the PC is connected.
  
2. Is permitting bootpc in the acl enough for IOS  DHCP server and client operation? Do i need to explicitly permit access to the defaul-router configured in the DHCP, which happens to be the VLAN 100 gateway ip and hsrp vip as well (192.168.1.129)
  
3. I do get deny logs on both the 6509s from the PC trying to access the local VLAN 100 broadcast address on ports 137, 138.
 
 %SEC-6-IPACCESSLOGP: list SWRES denied udp 192.168.1.200(137) -> 192.168.1.255(137)

View 7 Replies View Related

Cisco Switching/Routing :: 6500 - Campus OSPF Configuration

Aug 26, 2012

I manage a small/medium sized campus network consisting of 4 Cisco 6500 series chassis (each with SUP720's) and a couple hundred Cisco 3550/3560/2960 edge switches. We recently completed a new leg of fiber that will make a completed loop between all of the 6500's .... before I make the pyhsical connection I need to figure out my OSPF entries on each 6500 switch.

View 4 Replies View Related

Cisco Switching/Routing :: 6500 / Nexus OSPF Process Limit?

Jan 11, 2012

We are cutting over from 6500 IOS to Nexus 7000 and have hit "Maximum ospf feature instance limit reached." as we configured up the 7 existing ospf processes - the limit is 4. These existing processes are for various vrf contexts we have. I see you can run multiple vrf contexts under one process - but how does that work in a mixed environment where the ospf neighbours are still ios 6500s? They still expect to see different ospf process id per vrf.

View 2 Replies View Related

Cisco Switching/Routing :: 6500 OSPF External Routes Churn

Oct 7, 2012

I am observing some strange behaviour related to the routing table, almost all external routes and some inter-area routes are getting refreshed every 10 seconds.
 
I am getting more than 1000 entries after running 'sh ip route | i 00:00:0', these external routes are being advertised by a neighbor 6500 which redistributing these static routes.
 
Platform is 6500 with SUP-720

View 3 Replies View Related

Cisco Switching/Routing :: 1921 / HSRP - Cannot Ping Any Of VLANS

Jul 13, 2012

I have configured HSRP with InterVlan routing. All communication is flowing properly between the vlan's on Router A but when I test failover to Router B I cant ping ANYWHERE. I cannot ping any of the VLANS.

Also, From the primary router I cannot ping any of the interfaces on the secondary router.

I have 2 Cisco 1921 Routers configured for HSRP. Both the G0/1 ports plug into a Cisco 2960S 48 port POE switch (STACKED) (port 1 and port 2 which are trunked and allowing all vlans to pass through. And both of the G0/0 ports are plugged into a Cisco ASA5510.

I have attached a diagram of the setup and the interface configs of the routers.

View 1 Replies View Related

Cisco Switching/Routing :: Nexus 5k Running Hsrp Cannot Ping Between All Vlans

Feb 26, 2012

I am at a client that I upgrade from running a single 4507 to two Nexus 5548UP switches with two Nexus 2224 fex's connected.  The other access layer switches are 2960S switches.  I implemented hsrp on the nexus 5k's for redudancy.  The issue they are having is that some networks cannot communicate with each other.  All user vlans can communicate with the server vlan, but it is not running hsrp on the vlan interface (there is a reason for that, but it not relavent for this issue).  The phone vlan, which is running hsrp, can communicate with all networks.
 
When I am connected to either 5k, they can communicate with all devices on all networks.  However, I am on vlan 10, which is a user vlan.  I can communicate fine with the server vlan (vlan 101 - not running hsrp) and the phone vlan (vlan 60 - running hsrp).  I cannot communicate with vlan 30 or 40, which are both running hsrp.  This makes absolutely no sense at all to me.  I checked out trunk ports to be sure that vlans are allowed across the networks as well.  There are no firewalls between the vlans or ACL's.

View 1 Replies View Related

Cisco Switching/Routing :: 3550 - Unable To Ping Internet From HSRP Standby Switch

Nov 16, 2011

I have router connected to 2  3550 switches  directly. 3550A  and B  switches are running HSRP. OSPF is running between Router and 2 switches.
 
From Switch B  i can ping the Router Wan interface but not the internet sites. from Switch A  i can ping any sites?
  
Switch B 
3550SMIB#                          sh ip routeCodes: C - connected, S - static, R - RIP, M - mobile, B - BGP       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area       N1

[Code]......

View 7 Replies View Related

Cisco Switching/Routing :: 2691 / 6500 - Unable To Ping IP Of IBGP Nei Loop Back

Apr 6, 2012

Here is my Lab Setup: 2691 is BGP nei to R4 router and they are not directly connected. 2691 and R4 are in same AS  6500. 2691 Config---router ospf 1 network 3.3.3.3 0.0.0.0 area 0 . Its advertising its loop back IP to OSPF domain. 
 
router bgp 6500
no synchronization
bgp log-neighbor-changes
neighbor 6.6.6.6 remote-as 6500
neighbor 6.6.6.6 update-source Loopback3
[code]...
 
R4 Router  
router ospf 11
log-adjacency-changes
network 6.6.6.6 0.0.0.0 area 0
[ code]..... 
 
We can see that 2691 and R4 are BGP neis and 2691 has 200.1.x.x routes in its route table. My question is why from 2691 router i am unable to ping any route learned by BGP from R4?
 
2691Router# ping 50.1.1.0 Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 50.1.1.0, timeout is 2 seconds:.....Success rate is 0 percent (0/5)2691Router#ping 200.1.2.0 [ code]...

View 12 Replies View Related

Cisco Switching/Routing :: How To Segment The Ports On SF-300 Switch

Jul 13, 2012

The default Gateway and DHCP server is connected to port 1 of the switch.  I have various other devices on the network plugged into other ports on the switch.I want port 1 to communicate with every port on the switch, but don't want the other ports to be able to see eachother unless I specifically allow them to. For example, port 5 should see port 1, and 7, but nothing else.Everything needs to be in the same subnet.  With the older Dlink switches I am used to this feature is called "Port Segmentation" but I see no such option in this switch.   I have been playing with the VLAN settings but so far I have not been able to achieve this.

View 7 Replies View Related

Cisco Switching/Routing :: 6500 Ping Packet Drop From Core-Switch To Directly Connected Server

Oct 24, 2011

I have an Cisco 6500 CS and there is a Cisco Unified Communication Manger Server connected directly to the Core Switch.I tried to change duplex and speed ( fix and auto ) for both sides, but the same problem.

View 9 Replies View Related

Cisco Switching/Routing :: 2821 / Segment Shuts Down When Switch Plugged In

Mar 23, 2013

WAN link plugs into a 2821 Router with an switch module in it. About 8 clients are plugged in to the 2821.2821 connects to super cheap netgear switch (I'm 99% sure it's stripping dot1q headers) via one of the ports in the switch module. About 4 people are connected to the netgear.Now, I sent a catalyst 3560g to the branch because they wanted to extend into a new building. Someone decided to run a single cable from the netgear to the 3560. On the 3560, I have about 5 clients and a couple of APs.
 
So it goes  2821 -> Netgear -> 3560. All of these are single connections.When the 3560 gets plugged in, all clients on the netgear lose their connection, and nothing on the 3560 works. It happens almost instantly. I can't figure out why connections are dropping. The APs have about 4 VLANs onn them, and the PCs are on their own VLAN (the native VLAN).

View 3 Replies View Related

Cisco Switching/Routing :: 6500 Lose Network Connectivity Every 5-6 Day

Mar 21, 2012

I am running those modules in my Cisco 6500 chassis and having lot of connectivity issues.  I lose network connectivity every 5-6 day at around the same time.  I have (2) C7000 Chassis with HP VC-Flex 10 Modules connected via 20Gb LAB to each Cisco Cisco 6513 Switches.  However, the OA Modules on C7000 are connected via 1Gb uplink to either 6548 and 6148 modules.  I beleive this is causing the netwok connectivity issues.What modules would be recommended to replace 6548 and 6148 who only meant to be used for 1Gb desktop connectivity, and not for Server Farm.
 
When you use either the WS-X6548-GE-TX or WS-X6148-GE-TX modules, there is a possibility that individual port utilization can lead to connectivity problems or packet loss on the surrounding interfaces. Especially when you use EtherChannel and Remote Switched Port Analyzer (RSPAN) in these line cards, you can potentially see the slow response due to packet loss. These line cards are oversubscription cards that are designed to extend gigabit to the desktop and might not be ideal for server farm connectivity. On these modules there is a single 1-Gigabit Ethernet uplink from the port ASIC that supports eight ports. These cards share a 1 Mb buffer between a group of ports (1-8, 9-16, 17-24, 25-32, 33-40, and 41-48) since each block of eight ports is 8:1 oversubscribed. The aggregate throughput of each block of eight ports cannot exceed 1 Gbps. Table 4 in the Cisco Catalyst 6500 Series 10/100- & 10/100/1000-Mbps Ethernet Interface Modules shows the different types of Ethernet interface modules and the supported buffer size per port.Over subscription happens due to multiple ports combined into a single Pinnacle ASIC. The Pinnacle ASIC is a direct memory access (DMA) engine that transfers packets between back plane switching bus and the network ports. If any port in this range receives or transmits traffic at a rate that exceeds its bandwidth or utilizes a large amount of buffers to handle bursts of traffic, the other ports in the same range can potentially experience packet loss. The buffer assignment on these modules is documented in Buffers, Queues & Thresholds on Catalyst 6500 Ethernet Modules.A SPAN destination is a very common cause since it is not uncommon to copy traffic from an entire VLAN or multiple ports to a single interface. On a card with individual interface buffers, the packets that exceed the bandwidth of the destination port are silently dropped and no other ports are affected. With a shared buffer, this causes connectivity problems for the other ports on this range. In most scenarios, shared buffers do not result in any problems. Even with eight gigabit attached workstations, it is rare that the provided bandwidth is exceeded.

The switch can experience degradation in services when you configure local SPAN in a switch, especially if it monitors a large amount of source ports.

This problem remains if it monitors certain VLANs and if a large number or ports is assigned to any of these VLANs.Even though SPAN is done in hardware, there is a performance impact since now the switch carries twice as much traffic. Since each linecard replicates the traffic at ingress, whenever a port is monitored, all ingress traffic is doubled when it hits the fabric. The capture of traffic from a large number of busy ports on a linecard can fill up the fabric connection, especially with the WS-6548-GE-TX cards, which only have an 8 Gigabit fabric connection.The WS-X6548-GE-TX, WS-X6548V-GE-TX, WS-X6148-GE-TX, and WS-X6148V-GE-TX modules have a limitation with EtherChannel. For EtherChannel, the data from all links in a bundle goes to the port ASIC, even though the data is destined for another link. This data consumes bandwidth in the 1-Gigabit Ethernet link. For these modules, the sum total of all data on an EtherChannel cannot exceed 1 Gigabit.

View 5 Replies View Related

Cisco Switching/Routing :: Upgrade 6500 Non Modular IOS To Normal 6500?

Dec 21, 2011

how can we upgrade 6500 non modular ios to normal 6500 ios?

View 5 Replies View Related

Cisco Switching/Routing :: 6500 Configure VLAN To Be Propagated Over RIP Network

Jan 29, 2012

We have Nexus 7k running as my core with a 6500 manageing my server farm and IP services servers (call manager, IPTV ...)My edge switch are 4500s. We currently have RIP2 running between and the switchs and each 4500 is managing its own VLANs.The IPTV uses IGMP snooping and multicasting to broadcast the video feed. The problem that came up is that the we cannot configure a gatewar for the setup boxs for the IPTV system. They will only work on a single VLAN and they are spread all over the network.Can we configure only this VLAN to be propagated over our RIP network???

View 2 Replies View Related

Cisco Switching/Routing :: 6500 - Commands To Get Input For Network Documentation?

Sep 15, 2012

What are recommended commands to get input for network documentation (for disaster recovery)?
 
I've got 6500 with these modules: WS-SVC-FWM-1,
WS-SVC-IDSM-2, VS-S720-10G, WS-X6704-10GE, WS-X6748-SFP and dozens of WS-C3750E-48TD in couple of buildings.
 
So far I have these commands: Code...

View 3 Replies View Related

Cisco WAN :: 6500 / Inter / Intra VLan ACL - OSPF?

Dec 11, 2011

Core: DC  : 2- 6500 (PO Trunked) Configured L3 vlan interfaces with HSRP.
Vlans:
Servers - 192.168.5.0/24
PCs: 192.168.10.0/24
Phones : 192.168.20.0/24
Replica-exchange: 192.168.30.0/24
 
DR- One Core SW:
 
Vlans:
Servers vlan - 10.10.5.0/24
PCs: 10.10.10.0/24
Phones : 10.10.20.0/24
Replica-exchange: 10.10.30.0/24
 
OSPF is the routing protocol. Everything works fine.New requirement (exchange 2010 MAPI & DAG subnets)
 
192.168.5.0 <--> 192.168.30.0 & 10.10.30.0 : Communication should fail
 10.10.5.0/24<--> 192.168.30.0 & 10.10.30.0 : Fail
 Replica@DC <--> Replica@DC: work
 Replicas --> Rest of the nw- not that of an issue.
 
Iam thinking of adding a Extended ACLs on Replica-Exchange (DC & DR) and servers Vlan interfaces to block bidirectional communication.
 
 CORE1 &2:

access-list 101 deny ip 192.168.5.0 0.0.0.255 192.168.30.0 0.0.0.255access-list 101 deny ip 10.10.5.0 0.0.0.255 192.168.30.0 0.0.0.255access-list 101 permit ip any any
!access-list 102 deny ip 192.168.30.0 0.0.0.255 192.168.5.0 0.0.0.255

[code]....
 
Similar to the same on DR as well. I wanted to see if ACL is the way to go or any other suggested methods with OSPF being the routing protocol.

View 2 Replies View Related

Cisco Switching/Routing :: 7609 For Switching / Based On LAN (VRRP / HSRP) Feature

Oct 18, 2011

I am facing an isssues with 7609 for LAN switching , based on  LAN (VRRP/HSRP) feature.Actually  we are having ES+ cards (on 7609) and we are using multiple groups(say  350 vrrp groups) running on the router . the routers are connected as router 1>>> mux(which is working as switches)>>> router2

my questing are

1.  does their will be "multicast packets" (for VRRP/HSRP group) "from backup  router to Master router", when in stable state( ie when Master and  backup are already chosen) , or the packet from backup to master should  be unicast.I know for sure, the packet from master to back is multicast packets denstination to Multicast IP packet and To MAC address.I am not sure but I think from backup to master it should be multicast
 
2. what is frequency of these packets( from backup to master)
 
3.  As i have multiper group on a single interface ( we are using q-in-q),  when the connectivity from router's is broken, then does all the groups  will muticast their active roll in the lan sengment "at once" or it will  be in a groups say 100 groups at once, and after few ms few 100's and  sone ( as is on OSPF or RIP)
 
we are in between troubleshooting I hope we get the ans( Actul problem we are seeing in the router's that we have 2 ports on active routers and 2 ports on standby router , but we are not seeing muticast on 1 port on standby router where as all other 3 ports are seeing multicast packets) [code]

View 5 Replies View Related

Cisco Switching/Routing :: 2951 - HSRP Backup Taking Two Minutes When Switching Off Primary Router

Oct 7, 2012

I configure HSRP on Router 2951 as a primary router, and Router 2811 as backup router. But when I am switching off my Primary router the backup router is  taking 2 mins to take over form primary router. 
 
 [code]....

View 4 Replies View Related

Cisco Switching/Routing :: 3560E - HSRP Gateway Failover And Routing Table

Nov 12, 2012

We have two Cisco 3560E layer 3 switches at the core of our network. The switches are configured as an HSRP pair and the clients on our network point to the HSRP address as their default gateway. So if CORE-A dies, then CORE-B will pick up the address and the default route for the clients will continue to be available.We also need to specify a few static routes on the core switch to allow us to get to specific networks. Is there a way to do this so that the routes failover in the same way that the default gateway does?

View 2 Replies View Related

Cisco Switching/Routing :: C3560 Swap Out Not Ping Across Network

Jun 17, 2012

Had a switch die over the weekend, a c3560, per our normal procedure I pulled the hardware put a very basic config on it(vlans, portchannel, uplink ports, ip of management vlan, con and vty security, snmp, enable secret, and hostname).  Then I use solarwinds orion to upload a copy of the old config to bring the switch back to the same state as the one that failed.  Its a system that has worked for us 3 or 4 times in the past.  But this time when the base config was on the box it couldnt ping across the network.I have tried clearing the arp cache and the dynamic mac tables, i verified the routing tables and even removed the 10.1.185.128/27 route and re-added it, saw the routing update go across to the other 65k, tried bouncing the edge switch(i cant bounce the 65k's), took down the po between the edge and 65k.

View 2 Replies View Related

Network Segment Using Ethernet Router?

Aug 4, 2012

I have a standard switch with a server two routers one for data one for VoIP Server is dhcp and dns, all clients are auto configured from the server - all is good.I want to share my internet with anouther business - in the same building I have added a Ethernet router with a different ip range and this router is their dhcp server with its own private LAN This router has been connected to our LAN via the the Ethernet router wan port Works fine, but all clients on the new private lan can ping and see the LAN behind the wan port of the Ethernet router and can ping them, in some cases certain files can be seen?

View 1 Replies View Related

Cisco Switching/Routing :: Layer 3 Switching And ASA 5505 With OSPF?

Jun 15, 2012

We are setting up a test lab in our DMZ.  The path to the internet is basically like this.  Anything past the firewall is irrelevant. For this lab lets assume it is vlan 300.
 
LAB SW ---> DMZ-SW ---> ASA FW ---> INTERNET
LAB IP Range = 172.16.300.0 /24
GW = 172.16.300.1 (On FW int)
Trunked all the way through.
 
I have an int vlan set up on the LAB SW.  It is being trunked to DMZ SW.   DMZ trunks it to ASA FW where there is a failover with a redundant switch.On the ASA the interface 0/2 is a subinterface 0/2.300 being used as the default gateway. 
 
I have DHCP running in a specific range on the LAB SW and do get an ip address when plugged in.  I cannot ping the default gateway on the ASA FW.The GW is defined using default-router command for 172.16.300.1 i.e.  default-router 172.16.300.1?
 
We are running ospf on the firewall.  There appears to be a pattern with ospf and a similar subnet setup elsewhere.  I was wondering based off of this info would configuring ospf for 172.16.300.0/24 allow me to ping the GW from a client on the LAB SW.Secondly.  I trunked 300 on the DMZ SW but I didnt add the vlan  to the configuration. i.e.  conf t <enter> vlan 300 <enter>  Does this really matter?  Or is having the vlan in the configuration only pertain to access mode on interfaces?

View 1 Replies View Related

Cisco Switching/Routing :: 4506 Resilient Routing Design With OSPF

Aug 27, 2012

We have 2 sites, each with 2 x 4506 switches which will be connected togther using an etherchannel. The switches will provide access ports for client devices and will be configured with HSRP to provide gateway redundancy. SW1 will be HSRP active.2 metro ethernet links will be installed in each site which will connect back to our HQ sites. OSPF will be used over the backbone to provide resiliency and to allow shortest path routing to each HQ and to prevent traffic over the HQ to HQ link.

The 4506 will be trunked togther with an SVI for providing OSFP adjacency.For the traffic flow from SW2 to HQ2, traffic will hit SW1 and then route back to SW2 and then to HQ2. Is this the best way to do this? Should a second link be connected between switches just for routing or should something like GLBP be used?

View 6 Replies View Related

Cisco Switching/Routing :: Filter A Specific Host(s) From OSPF Routing Table On A ASA 5550 (ABR)?

May 22, 2013

I am attempting to filter a specific host(s) from my OSPF routiing table on a ASA 5550 (ABR) using LSA prefix lists.  However, when I look at the other routers in that area, I notice that ALL LSA type-3's are being removed (10 hosts are now missing from the routing table). I have verified the filter is working on the ABR, but I can't figure why ALL hosts/routes that were coming into the area are now being filtered instead of the specific one that I want to filter out.
 
Here is the config on the ABR:
 
prefix-list pdm_pl_000 seq 10 permit 206.253.180.137/32
!
!            
router ospf 1
network 10.0.0.0 255.255.255.0 area 0
network 10.150.10.0 255.255.255.0 area 10
network 10.150.252.0 255.255.255.224 area 10

[code]....
 
The 206.253.180.137 host is actually coming from Area '3'.  Am I doing something that is removing all type-3 LSA's?

View 3 Replies View Related

Cisco Firewall :: ASA 5505 To Allow 2nd Network Segment Through Mpls

May 31, 2013

I have been having a heck of a time trying to configure my 5505 to allow the second segment on my network to use the internet. Office 1 has a fiber internet connection, and all traffic flows fine. Office 2 had gotten it's internet from AT&T, via a network based firewall injecting a default route into the mpls cloud. both offices connunicate to each other through the mpls.
 
When we added the fiber to office 1, we had the mpls people change the default internet route to the inside address of the 5505 and things worked fine. when AT&T attempted to remove the NBF defaut route, and inject the 5505's address as default, things didn't go so well.
 
AT&T claims that it is within my nat cmmands on the 5505, but won't tell me anything else.  I assume that they are correct, and I assume that I am not good enough with the 5505 ASDM to tell it what to do.
 
Office 1 uses 10.10.30.xx addresses and Office 2 uses 10.10.10.xx - the 5505 inside interface is 10.10.30.2 the internal interfaces of the mpls are 10.10.30.1 and 10.10.10.1

View 21 Replies View Related

Cisco Switching/Routing :: Nexus 7010 / 5510 - Run OSPF As Layer 3 Routing Protocol Between VPC Peer Links

Mar 25, 2012

I have an environment where i have two nexus 7010 switches, along with 2 nexus 5510's. I need to run OSPF as a layer 3 routing protocol between the vpc peer links.  I have 1 link being used as a keep alive link, and 3 other links being used as a VpC link.
 
1) Is it best to configure a separate Vpc VLAN i.e 1010

2) Is it best to configure a vrf context keep-alive

3) just have the management address as the peer ip's.

View 2 Replies View Related

Cisco Switching/Routing :: HSRP Between Three 6509 Switches?

Jan 8, 2012

I want to setup HSRP between three 6509 switches with a single virtual ip for all the three switches.
 
know if its possible and share any site or config.

View 1 Replies View Related

Cisco Switching/Routing :: IPv6 HSRP Implementation On IOS-XR 4.2.1

Nov 11, 2012

I'm looking to try and implement ipv6 HSRP on a series of IOS-XR Routers running 4.2.1 following on from successfully setting up IPv6 HSRP on a few cat6509s on VLAN Interfaces in other parts of the network. I have entered the "router hsrp" configuration menu and gone into the interface in question that I'm looking to setup with IPv6 HSRP. Unfortunately, there version 2 or address-family ipv6 commands are not available.

View 2 Replies View Related

Cisco Switching/Routing :: 4900 HSRP For LAN Fail-over

Jan 23, 2012

Planning to implement HSRP in layer 3 switch.

We have two numbers of Cisco 4900 ME Switches. Basically want LAN failover from these devices. There are about 400 users in our network. I have attached rough network topology for your reference(I am not good at Microsoft Visio). Need to know implementation of the HSRP in these switches. Two distribution switches(Cisco 4900 ME Switches) are connected to 4 Access switches and these are connected to the LAN.

View 2 Replies View Related







Copyrights 2005-15 www.BigResource.com, All rights reserved