Archive for January, 2010

BGP Multihoming!

Hello Expert,

Needed a help regarding BGP multi homing case. It seems simple at a glance yet somewhat confusing while explanation

Cisco DHCP Server Support for MPLS VPNs??

Hi group,

Been playing with DHCP and its various configurations today and came up against some pain when trying to implement the configs in “DHCP Relay Agent Support for MPLS VPNs”. The issue I’m having is I can configure the Relay Agent to send the VPN sub-options to the DHCP server, but I can’t get the DHCP server to allocate an IP address from the VPN-specific pool. See topology below:

Please view in a fixed-width font such as Courier.

| 10.1.1.1/24 | +—+ +—+ | +——+R3 | |R1 +——–+ 10.1.1.2/24 10.1.2.2/24| +—+ +—+ | vrf: Global +—+ vrf: RED | +————-+R2 +————+ DHCP Server | +—+ | DHCP Clients Cisco IOS | | DHCP Relay | +—+ Agent +——+R4 | Cisco IOS | +—+

R1 config:

ip dhcp pool NET-2-RED vrf RED network 10.1.2.0 255.255.255.0 default-router 10.1.2.2 dns-server 192.168.100.100 domain-name relay.com

ip vrf RED rd 1:1 route-target export 1:1 route-target import 1:1 !

R2 config:

ip dhcp relay information option

ip vrf RED rd 1:1 vpn id 1:1 route-target export 1:1 route-target import 1:1

interface FastEthernet0/1 ip dhcp relay information option vpn-id ip vrf forwarding RED ip address 10.1.2.2 255.255.255.0 ip helper-address vrf global 10.1.1.1

Now, when R3 or R4 attempts to get an address via DHCP, R2 sends the request to R1 with VPN sub-options:

(R2 debug output) R2#sh debugging DHCP server event debugging is on. DHCPC: DHCP client activity debugging is on (detailed)

*Mar 1 00:56:23.423: DHCPD: htype 1 chaddr c402.0a04.0001 *Mar 1 00:56:23.427: DHCPD: remote id 020a00000a01020201000000 *Mar 1 00:56:23.427: DHCPD: circuit id 00000000 *Mar 1 00:56:23.431: DHCPD: table id 1 = vrf RED *Mar 1 00:56:23.431: DHCPD: VPN id =1:1 *Mar 1 00:56:23.435: DHCPD: Selected subnet=10.1.2.0 *Mar 1 00:56:23.435: DHCPD: Server-id-override=10.1.2.2 *Mar 1 00:56:23.439: DHCPD: giaddr changed to 10.1.1.2 *Mar 1 00:56:56.663: DHCPD: Sending notification of DISCOVER: *Mar 1 00:56:56.663: DHCPD: htype 1 chaddr c402.0a04.0001 *Mar 1 00:56:56.667: DHCPD: remote id 020a00000a01020201000000 *Mar 1 00:56:56.667: DHCPD: circuit id 00000000 *Mar 1 00:56:56.671: DHCPD: table id 1 = vrf RED *Mar 1 00:56:56.671: DHCPD: Seeing if there is an internally specified pool class:

But R1 complains that it doesn’t have an address pool for R2’s address on the 10.1.1.0/24 subnet (i.e. the subnet between R1 & R2)

(R1 debug output) R1#sh debugging DHCP server event debugging is on. DHCPC: DHCP client activity debugging is on (detailed)

*Mar 1 00:58:26.823: DHCPD: Sending notification of DISCOVER: *Mar 1 00:58:26.823: DHCPD: htype 1 chaddr c402.0a04.0001 *Mar 1 00:58:26.827: DHCPD: remote id 020a00000a01010100000000 *Mar 1 00:58:26.827: DHCPD: circuit id 00000000 *Mar 1 00:58:26.831: DHCPD: Seeing if there is an internally specified pool class: *Mar 1 00:58:26.831: DHCPD: htype 1 chaddr c402.0a04.0001 *Mar 1 00:58:26.835: DHCPD: remote id 020a00000a01010100000000 *Mar 1 00:58:26.835: DHCPD: circuit id 00000000 *Mar 1 00:58:26.839: DHCPD: there is no address pool for 10.1.1.2.

This is driving me quite batty at the moment! The only thing I can think of is that IOS can’t act as the DHCP server when using the VPN sub-options. Does anyone have any suggestions/experience with this feature??

Cheers, Gavin

Blogs and organic groups at http://www.ccie.net

_______________________________________________________________________ Subscription information may be found at: http://www.groupstudy.com/list/CCIELab.html

IPexpert Free V-Lecture on ATM

Hi Guys,

Please send me the IPexpert V-Lecture on ATM.

Mohammed Riyazuddin wants to share approved contacts on Boxbe

Cisco, I use Boxbe to manage my inbox. I think Boxbe can help you, too!

Here’s the link: https://www.boxbe.com/register?tc=1477611353_458724542

-Mohammed

Please do not reply directly to this email. This message was sent at the request of casim1980@gmail.com. Boxbe will not use your email address for any other purpose. Click the link below if you would prefer not to receive any further invitations from Boxbe members: https://www.boxbe.com/unsubscribe?email=ccielab@groupstudy.com&tc=1477611353_458724542

Boxbe integrates with Yahoo!, Gmail, Google Apps, and AOL. Get Boxbe today!

Boxbe, Inc. | 2390 Chestnut Street #201 | San Francisco, CA 94123

Blogs and organic groups at http://www.ccie.net

_______________________________________________________________________ Subscription information may be found at: http://www.groupstudy.com/list/CCIELab.html

VSS Strange Problem

Dear Gents,

I am new to VSS however I am facing a strange problem. I configured the 2 Core switches to be running in VSS mode. When using the show switch virtual role both switches show with one of the switches as ACTIVE and the other as Standby. However on the standby switch the fiber Gigabit module displays ORANGE LED, thus no ports on the STANDBY switch are operating except the TenGig ports which are used for the VSL Link. One more thing that makes the problem look even more strange is that when I shutdown the primary switch the STANDBY switch module goes active (GREEN) and operates properly. When the primary switch comes UP again, both switches appear as ACTIVE ACTIVE. The configuration I used is relatively sample:

SW1

switch virtual domain 10 switch 1 priority 200 switch 2 priority 100 switch 1 mac-address use virtual exit

int port-channel 1 switch virtual link 1 no sh exit

int range tengig5/4-5 channel-group 1 mode on no sh exit

switch convert mode virtual

SW2 switch virtual domain 10 switch 1 priority 200 switch 2 priority 100 switch 2 mac-address use virtual

int port-channel 2 switch virtual link 2 no sh exit

int range tengig5/4-5 channel-group 2 mode on no sh exit

switch convert mode virtual

Live From The Field

http://sites.google.com/site/ebbyu56tg/nipj1d _________________________________________________________________ Your E-mail and More On-the-Go. Get Windows Live Hotmail Free. https://signup.live.com/signup.aspx?id=60969

Blogs and organic groups at http://www.ccie.net

_______________________________________________________________________ Subscription information may be found at: http://www.groupstudy.com/list/CCIELab.html

Interface speed of Serial Link

Dear experts,

Then I trying to change the Physical serial interface speed. I know “bandwidth” is not the command. Whether it is correct to use “clock rate” command or it is in the control of my ISP. Is there any possibility to set the serial interface bandwidth matching to the line speed??

thanks in advance

sairam

Blogs and organic groups at http://www.ccie.net

_______________________________________________________________________ Subscription information may be found at: http://www.groupstudy.com/list/CCIELab.html

SIP softphone register with CME without username/password

Hi, all,

I set up a SIP-SIP gateway on a C2821, this C2821 routes all outbound calls from CUCM to an ITSP (both over SIP trunk), C2821 itself does not act a CME, i.e, there are no SCCP or SIP clients registered to it, in fact I do not have any configuration that would allow a SCCP/SIP phone to register/authenticate, however, I found that a software SIP phone that has IP connectivity to this C2821 can register to it and therefore make outbound phone calls. I am puzzled, did I miss anything obvious?

Thanks, Jian

Blogs and organic groups at http://www.ccie.net

_______________________________________________________________________ Subscription information may be found at: http://www.groupstudy.com/list/CCIELab.html

Need some FR help.

Hi, As per my understanding, putting command no inveArp will stop that interface from sending/initiating ARP message, but if there is a request from an other router then there is no way to stop respond to that request.

But in CCIE routing and switching 4th edition,page 193, it states like this,

“Interestingly, the no frame-relay inverse-arp command not only tells the router to stop sending InARP messages, but also tells the router to ignore received InARP messages.”

Any thoughts will help a lot

Blogs and organic groups at http://www.ccie.net

_______________________________________________________________________ Subscription information may be found at: http://www.groupstudy.com/list/CCIELab.html

Tools available in the CCIE lab?

What tools are available in the lab?

1) notepad? 2) calculator?

Howz the new interface? Can i open each device in a different telnet window.?

Blogs and organic groups at http://www.ccie.net

_______________________________________________________________________ Subscription information may be found at: http://www.groupstudy.com/list/CCIELab.html