Quantcast
Channel: IEOC - INE's Online Community
Viewing all 10672 articles
Browse latest View live

Method to Navigate Cisco Docs Changed?

$
0
0

In the ATCv5 R&S videos, when Brian shows where things are documented, he consistenty follows the same procedure for accessing the documention. This method worked fine until recently.

Now, when I follow his procedure step-by-step, it leads to an End-Of-Life notice for IOS 15.3T.  When I try to follow the links for the other IOS versions, they all lead to similiar End-Of-Life notices.

Is anyone else experiencing this and has have figured out another way to navigate the documention correctly?

 

Thanks,

Brady


Can't setup DVTI with PKI setup....

$
0
0

I tried everything but couldn't setup a DVTI setup. Please help me out

This is my setup. I have successfully imported certificates for both R2 and R3

R3#sh crypto pki certificates CA
Certificate
  Status: Available
  Certificate Serial Number: 03
  Certificate Usage: General Purpose
  Issuer:
    cn=R1
    ou=CCIE
    o=Networxx.in
    c=IN
    l=Delhi
  Subject:
    Name: R3.networxx.in
    hostname=R3.networxx.in
    cn=R3
    ou=CCIE
    o=Networxx.in
    c=IN
    l=Kolkata
  Validity Date:
    start date: 12:21:58 IST Oct 21 2014
    end   date: 12:21:58 IST Oct 21 2015
  Associated Trustpoints: CA

CA Certificate
  Status: Available
  Certificate Serial Number: 01
  Certificate Usage: Signature
  Issuer:
    cn=R1
    ou=CCIE
    o=Networxx.in
    c=IN
    l=Delhi
  Subject:
    cn=R1
    ou=CCIE
    o=Networxx.in
    c=IN
    l=Delhi
  Validity Date:
    start date: 12:16:25 IST Oct 21 2014
    end   date: 12:16:25 IST Oct 20 2017
  Associated Trustpoints: CA

R2#sh crypto pki certificates
Certificate
  Status: Available
  Certificate Serial Number: 02
  Certificate Usage: General Purpose
  Issuer:
    cn=R1
    ou=CCIE
    o=Networxx.in
    c=IN
    l=Delhi
  Subject:
    Name: R2.networxx.in
    hostname=R2.networxx.in
    cn=R2
    ou=CCIE
    o=Networxx.in
    c=IN
    l=Ahmedabad
  Validity Date:
    start date: 12:20:48 IST Oct 21 2014
    end   date: 12:20:48 IST Oct 21 2015
  Associated Trustpoints: CA

CA Certificate
  Status: Available
  Certificate Serial Number: 01
  Certificate Usage: Signature
  Issuer:
    cn=R1
    ou=CCIE
    o=Networxx.in
    c=IN
    l=Delhi
  Subject:
    cn=R1
    ou=CCIE
    o=Networxx.in
    c=IN
    l=Delhi
  Validity Date:
    start date: 12:16:25 IST Oct 21 2014
    end   date: 12:16:25 IST Oct 20 2017
  Associated Trustpoints: CA

Also I can't make a static route from hub pointing to virtual interface....

So the default EIGRP is pointing towards the FastEthernet0/0 in the HUB.

For the spoke it points to tunnel.

R2 config:

R2#sh run
Building configuration...

Current configuration : 5513 bytes
!
! Last configuration change at 12:31:15 IST Tue Oct 21 2014
!
version 12.4
!Omitted for brevity
!
crypto pki trustpoint CA
 enrollment url http://10.0.12.1:80
 fqdn R2.networxx.in
 subject-name CN=R2,OU=CCIE,O=Networxx.in,C=IN,L=Ahmedabad
 revocation-check none
!
!
crypto pki certificate chain CA
 
!Omitted for brevity
!
crypto isakmp policy 1
 encr aes
 hash md5
 group 5
!   
crypto ipsec transform-set TSET esp-aes esp-md5-hmac
!
crypto ipsec profile IPROF
 set transform-set TSET
!
interface Loopback0
 ip address 2.2.2.2 255.255.255.0
!
interface Tunnel1
 bandwidth 10000000
 ip unnumbered FastEthernet0/0
 delay 1
 tunnel source FastEthernet0/0
 tunnel destination 10.0.12.3
 tunnel protection ipsec profile IPROF
!
interface FastEthernet0/0
 ip address 10.0.12.2 255.255.255.0
 duplex auto
 speed auto

!

router eigrp 100
 network 1.0.0.0
 network 2.0.0.0
 network 10.0.0.0
 no auto-summary
!Omitted for brevity

!
ntp server 10.0.12.1
!
end

R3 config:

R3#sh run
Building configuration...

Oct 21 08:38:07.741: %SYS-5-CONFIG_I: Configured from console by console
Current configuration : 5354 bytes
!
! Last configuration change at 14:08:07 IST Tue Oct 21 2014
!
version 12.4
!Omitted for brevity
!
crypto pki trustpoint CA
 enrollment url http://10.0.12.1:80
 fqdn R3.networxx.in
 subject-name CN=R3,OU=CCIE,O=Networxx.in,C=IN,L=Kolkata
 revocation-check none
!
!
crypto pki certificate chain CA
!Omitted for brevity!
crypto isakmp policy 1
 encr aes
 hash md5
 group 5
crypto isakmp profile ISAK_PROF
   match identity address 10.0.12.2 255.255.255.255
!
!
crypto ipsec transform-set TSET esp-aes esp-md5-hmac
!
crypto ipsec profile IPROF
 set transform-set TSET
!
!
!
!
interface Loopback0
 ip address 3.3.3.3 255.255.255.0
!
interface FastEthernet0/0
 ip address 10.0.12.3 255.255.255.0
 duplex auto
 speed auto

!
interface Virtual-Template1 type tunnel
 ip unnumbered FastEthernet0/0
 tunnel source FastEthernet0/0
 tunnel protection ipsec profile IPROF
!
!Omitted for brevity!
!
router eigrp 100
 network 3.0.0.0
 network 10.0.0.0
 no auto-summary
!
!Omitted for brevity!
!
ntp server 10.0.12.1
!
end

6.3 MP-BGP - IPv6

$
0
0

Hi everyone,

 

I'm working on BGP for IPv6 routing with the ISP and have run into an issue. Does this seem to be a gns3 issue?

 

TASK

The ISP at AS 65123 is now offering IPv6 Internet connectivity and has been pre-configured to peer with R6 via IPv6 BGP.

  • Configure the network using BGP AS 65006 as follows:
    • Configure R6 to peer with the ISP over IPv6. The ISP’s edge router is using an IPv6 address of 2001:202:4:60::1.
    • The ISP is expecting the EBGP peering to come from AS 65600. Ensure that AS 65006 does not appear on routes sent to or received from the ISP.

 

router bgp 65006

 bgp log-neighbor-changes

 no bgp default ipv4-unicast

 neighbor IPV6_PEER peer-group

 neighbor IPV6_PEER remote-as 65006

 neighbor IPV6_PEER update-source Loopback0

 neighbor ::192:122:3:3 peer-group IPV6_PEER

 neighbor ::192:122:3:4 peer-group IPV6_PEER

 neighbor ::192:122:3:5 peer-group IPV6_PEER

 neighbor 2001:202:4:60::1 remote-as 65123

 neighbor 2001:202:4:60::1 local-as 65000 no-prepend replace-as

 neighbor 2001:202:4:60::1 shutdown

 neighbor 202.4.60.1 remote-as 65123

 !

 address-family ipv4

  network 89.211.116.0 mask 255.255.255.128

  network 89.211.117.0 mask 255.255.255.128

  neighbor 202.4.60.1 activate

 exit-address-family

 !

 address-family ipv6

  network ::192:122:3:6/128

  neighbor IPV6_PEER route-reflector-client

  neighbor IPV6_PEER next-hop-self

  neighbor ::192:122:3:3 activate

  neighbor ::192:122:3:4 activate

  neighbor ::192:122:3:5 activate

  neighbor 2001:202:4:60::1 activate

 exit-address-family

R6(config-router)#

R6(config-router)#

R6(config-router)#no  neighbor 2001:202:4:60::1 shutdown

R6(config-router)#

*Oct 22 00:58:05.507: %BGP-3-NOTIFICATION: received from neighbor 2001:202:4:60::1 active 2/2 (peer in wrong AS) 2 bytes FDE8

R6(config-router)#

*Oct 22 00:58:05.507: %BGP-5-NBR_RESET: Neighbor 2001:202:4:60::1 active reset (BGP Notification received)

*Oct 22 00:58:05.507: %BGP-5-ADJCHANGE: neighbor 2001:202:4:60::1 active Down BGP Notification received

*Oct 22 00:58:05.507: %BGP_SESSION-5-ADJCHANGE: neighbor 2001:202:4:60::1 IPv6 Unicast topology base removed from session  BGP Notification received

*Oct 22 00:58:06.253: %BGP-3-NOTIFICATION: received from neighbor 2001:202:4:60::1 passive 2/2 (peer in wrong AS) 2 bytes FDE8

R6(config-router)#

*Oct 22 00:58:06.253: %BGP-5-NBR_RESET: Neighbor 2001:202:4:60::1 passive reset (BGP Notification received)

*Oct 22 00:58:06.255: %BGP-5-ADJCHANGE: neighbor 2001:202:4:60::1 passive Down BGP Notification received

*Oct 22 00:58:06.255: %BGP_SESSION-5-ADJCHANGE: neighbor 2001:202:4:60::1 IPv6 Unicast topology base removed from session  BGP Notification received

R6(config-router)#

*Oct 22 00:58:15.801: %BGP-3-NOTIFICATION: received from neighbor 2001:202:4:60::1 active 2/2 (peer in wrong AS) 2 bytes FDE8

R6(config-router)#

*Oct 22 00:58:15.801: %BGP-5-NBR_RESET: Neighbor 2001:202:4:60::1 active reset (BGP Notification received)

*Oct 22 00:58:15.801: %BGP-5-ADJCHANGE: neighbor 2001:202:4:60::1 active Down BGP Notification received

*Oct 22 00:58:15.801: %BGP_SESSION-5-ADJCHANGE: neighbor 2001:202:4:60::1 IPv6 Unicast topology base removed from session  BGP Notification received

R6(config-router)#

Unequal Cost Load-balance Verification

$
0
0

After completing the lab and ensuring the configs are correct I ran through the verfifiction process but the pings do not result in a 5:1 ratio.  The routing entry on R6 shows the 5:1, but the ACLs on R1/R7 do not seem to agree.  I used TCL to ping the first 12 hosts in 155.1.9.0/24 sourced from R6 Loop0 interface.  Is that an issue with CEF or perhaps something specific to the CSR?

R6#sh ip route 155.1.9.0

Routing entry for 155.1.9.0/24

  Known via "eigrp 100", distance 90, metric 6912, type internal

  Redistributing via eigrp 100

  Last update from 155.1.146.1 on GigabitEthernet1.146, 16:26:47 ago

  Routing Descriptor Blocks:

    155.1.146.1, from 155.1.146.1, 16:26:47 ago, via GigabitEthernet1.146

      Route metric is 34560, traffic share count is 1

      Total delay is 1350 microseconds, minimum bandwidth is 1000000 Kbit

      Reliability 255/255, minimum MTU 1500 bytes

      Loading 1/255, Hops 4

  * 155.1.67.7, from 155.1.67.7, 16:26:47 ago, via GigabitEthernet1.67

      Route metric is 6912, traffic share count is 5

      Total delay is 270 microseconds, minimum bandwidth is 1000000 Kbit

      Reliability 255/255, minimum MTU 1500 bytes

      Loading 1/255, Hops 2

 

R7#sh ip access-list         

Extended IP access list EIGRP

    10 permit icmp any 155.1.9.0 0.0.0.255 (11 matches)

 

R1#sh ip access-list         

Extended IP access list EIGRP

    10 permit icmp any 155.1.9.0 0.0.0.255 (1 match)

Directly connected PE routers? Is it possible?

$
0
0

So putting together a lab with the tiniest of MPLS cores: 2 PE routers.

Routes are advertised, but there seems to be something wrong with the data plane.  This typically tells me something is wrong with my LSP.  

I hop over to R1 (peers with R2 via the /32 loopback) and I do a traceroute to R2's loopback: 2.2.2.2

 

R1# sh ip cef 2.2.2.2

2.2.2.2/32

  nexthop 10.10.46.6 GigabitEthernet1.46

I know that normally you'd see the transport label, but obviously we aren't seeing anything here.  

R1#sh mpls forwarding-table 

16         Pop Label  2.2.2.2/32       0             Gi1.46     10.10.46.6  

 

 

R4#sh mpls ldp bindings 

  lib entry: 1.1.1.1/32, rev 2

        local binding:  label: imp-null

        remote binding: lsr: 2.2.2.2:0, label: 16

  lib entry: 2.2.2.2/32, rev 4

        local binding:  label: 16

        remote binding: lsr: 2.2.2.2:0, label: imp-null

 

Does this look like a PHP issue?  Is it being popped prematurely? 

Redistribute connected generating Type 5 LSA

$
0
0

When I issue the redistribute connect command under the OSPF process, is the router generating Type 5 LSAs for connectedlinks that are already running OSPF? The reason that I ask is because I have a router (R4) that is redistributing connected but this router only has a loopback and one link and both are already running OSPF. If I look at the OSPF database for this area I do not see the Type 5 LSA; however, the ABR is generating a Type 4 LSA for the ASBR R4. 

 

If R4 is not generating a Type 5 LSA for his connected links, then how does the ABR know to generate a Type 4 LSA? If R4 is generating a Type 5 LSA, shouldn't I see this LSA in the database even if it is not being used because there is a "better" LSA that describes this prefix?

 

Thanks!

 

Drew

CCIE Recertification Question

$
0
0

I have a question about CCIE recertification. I recently passed in Jan 2014 my R/S. I am pursueing the SP track now but have not taken the written.

My question is, if I take the SP wrttien today will it count as a recert and give me +2 years? Or do I have to wait until Jan 2015 for it to count.

VMWare NPIV and Cisco UCS

$
0
0

Hello Team,

 

I have one UCS Blade Running ESXi and I was trying to enable NPIV on a Virtual Machine in order to see the VM Flogi on the Fabric.

 

But I’m getting this error on the vmkernel every time I power up the VM:

 

~ # more /var/log/vmkernel.log | grep NPIV

2014-10-17T14:19:32.020Z cpu2:1239292)ScsiNpiv: 1149: NPIV vport rescan complete, [14:0] (0x4100060e96c0) [0x410012804260] status=0xbad0003

2014-10-17T16:26:05.647Z cpu14:1244751)ScsiNpiv: 1149: NPIV vport rescan complete, [14:0] (0x4100060e96c0) [0x410012804260] status=0xbad0003

2014-10-17T16:49:21.933Z cpu10:1245748)ScsiNpiv: 1149: NPIV vport rescan complete, [14:0] (0x4100060e96c0) [0x410012804260] status=0xbad0003

~ #

 

I found this document about the subject:

 

http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2008780

 

But I have the zoning correctly configured.

 

Is this supported ? I have the CNA M71KR-Q.

 

I see the FI and the EXSi Flogis on the Fabric.

 

 

Thanks.

 

Regards,

 

Antonio Soares, CCIE #18473 (RS/SP)
amsoares@netcabo.pt

http://www.ccie18473.net

 


Traffic Engineering w/Stub Areas

$
0
0

I'm following along in the Traffic Engineering w/Stub Areas ATC video, and when I change the cost of the default route originated from R6 into Area 2, I am not seeing the output in the show ip ospf database of "Routing Bit Set on this LSA...." on the LSA from R3

If you look at the video, at 10:51, you see this in the top of the command line after Brian runs "show ip ospf database 0.0.0.0"

My output is below:

R7#show ip ospf data sum 0.0.0.0

 

            OSPF Router with ID (150.1.7.7) (Process ID 1)

 

                Summary Net Link States (Area 2)

 

  LS age: 705

  Options: (No TOS-capability, DC, Upward)

  LS Type: Summary Links(Network)

  Link State ID: 0.0.0.0 (summary Network Number)

  Advertising Router: 150.1.3.3

  LS Seq Number: 80000001

  Checksum: 0x3769

  Length: 28

  Network Mask: /0

        MTID: 0         Metric: 1 

 

  LS age: 153

  Options: (No TOS-capability, DC, Upward)

  LS Type: Summary Links(Network)

  Link State ID: 0.0.0.0 (summary Network Number)

  Advertising Router: 150.1.6.6

  LS Seq Number: 80000002

  Checksum: 0x645F

  Length: 28

  Network Mask: /0

        MTID: 0         Metric: 1234 

----------------------------------
What am I missing?

Extended ACL seems not working?

$
0
0

Please let me know what is the problem with my ACL since I do not know anymore if the concept in my head is wrong or right.  Any inputs is greatly appreciated.  I do not know what else to do in GNS3, I have shutdown and rebooted it number of times and still same result...

 

Requirement is that all hosts can do anything to the FINANCIAL_WEB_SERVER except web access.  only host C can web access it.

 

Corp1#sh run int f0/1
Building configuration...

Current configuration : 125 bytes
!
interface FastEthernet0/1
ip address 172.22.242.30 255.255.255.240
ip access-group 100 out
duplex auto
speed auto
end


Corp1#sh run | s access-list
access-list 100 permit tcp host 192.168.33.3 host 172.22.242.23 eq www
access-list 100 deny   tcp any host 172.22.242.23 eq www
access-list 100 permit ip any any

 

L2VPN no Layer 2 connectivity

$
0
0

Hi,

I have no problem connecting to INE both the crypto and xconnect are up.  I am also able to see on my switch via cdp at the INE switch CO-EoR-L2TP-SW.  However that is as far as I get!!! I do not see any mac addresses coming from the trunk port on my switch from INE and on the INE switch I do not see my switch via CDP or any mac addresses.  

Here is the configuration for my switch which is currnently connected to corack1:

PLEASE I am dying to start doing labs!!

SWITCH

version 12.2

no service pad

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

!

hostname CCIE-VOICE

!

boot-start-marker

boot-end-marker

!

!

!

username cisco privilege 15 password 0 cisco

no aaa new-model

system mtu routing 1504

vtp mode transparent

!

!

!

!

!

crypto pki trustpoint TP-self-signed-633617792

 enrollment selfsigned

 subject-name cn=IOS-Self-Signed-Certificate-633617792

 revocation-check none

 rsakeypair TP-self-signed-633617792

!

!

crypto pki certificate chain TP-self-signed-633617792

 certificate self-signed 01

  30820240 308201A9 A0030201 02020101 300D0609 2A864886 F70D0101 04050030 

  30312E30 2C060355 04031325 494F532D 53656C66 2D536967 6E65642D 43657274 

  69666963 6174652D 36333336 31373739 32301E17 0D393330 33303130 30303134 

  315A170D 32303031 30313030 30303030 5A303031 2E302C06 03550403 1325494F 

  532D5365 6C662D53 69676E65 642D4365 72746966 69636174 652D3633 33363137 

  37393230 819F300D 06092A86 4886F70D 01010105 0003818D 00308189 02818100 

  ABA4DE08 DD221466 DA03FB99 C48F7BDE 36C3C64E 23C2C16E C7F0228B F467DB54 

  7B7F48F7 17371752 AB4EB405 42C9A802 BCB0E5A4 32CA5332 B2AAE2CF F42F764F 

  4B27F9F2 FC3BBB6E 262DC416 58856DFC D9869EC1 17FDEAB8 214B2A38 7649B13D 

  E93C4637 F8C004A5 E2C127D7 DE3C0F94 7E69ED48 00F4B6FC 1AC806CC D428AD39 

  02030100 01A36A30 68300F06 03551D13 0101FF04 05300301 01FF3015 0603551D 

  11040E30 0C820A43 4349452D 564F4943 45301F06 03551D23 04183016 80145CD1 

  31B16FD5 8C9A9C54 C3D3F4ED 81954DE7 0104301D 0603551D 0E041604 145CD131 

  B16FD58C 9A9C54C3 D3F4ED81 954DE701 04300D06 092A8648 86F70D01 01040500 

  03818100 2405752B AA876BCF EFB6ABA7 CC3020C8 D122EC71 3549B194 4A5945BD 

  CF864580 570992BB 2CD599EE 21076D9A 713F3145 01CECDCE 2A367796 EEF2A673 

  836EB0C0 4C086FED FF628C4D 0002756F 1B4C80BB D1A30263 93D6E780 6FEA1864 

  D2E4992F 47DD1295 4B4D33AE D15FECB8 01CA2B3E F919429C 105FF8B8 0164565D 6E57077C

  quit

!

!

!

spanning-tree mode pvst

spanning-tree extend system-id

!

vlan internal allocation policy ascending

!

vlan 10,2011-2016,2021-2022 

!         

interface GigabitEthernet0/1

 switchport access vlan 2011

 switchport mode dot1q-tunnel

 l2protocol-tunnel cdp

 l2protocol-tunnel stp

 l2protocol-tunnel vtp

 no cdp enable

!

interface GigabitEthernet0/2

 switchport access vlan 2012

 switchport mode dot1q-tunnel

 l2protocol-tunnel cdp

 l2protocol-tunnel stp

 l2protocol-tunnel vtp

 no cdp enable

!

interface GigabitEthernet0/3

 switchport access vlan 2013

 switchport mode dot1q-tunnel

 l2protocol-tunnel cdp

 l2protocol-tunnel stp

 l2protocol-tunnel vtp

 no cdp enable

!

interface GigabitEthernet0/4

 switchport access vlan 2014

 switchport mode dot1q-tunnel

 l2protocol-tunnel cdp

 l2protocol-tunnel stp

 l2protocol-tunnel vtp

 no cdp enable

!

interface GigabitEthernet0/5

 switchport access vlan 2015

 switchport mode dot1q-tunnel

 l2protocol-tunnel cdp

 l2protocol-tunnel stp

 l2protocol-tunnel vtp

 no cdp enable

!

interface GigabitEthernet0/6

 switchport access vlan 2016

 switchport mode dot1q-tunnel

 l2protocol-tunnel cdp

 l2protocol-tunnel stp

 l2protocol-tunnel vtp

 no cdp enable

!

interface GigabitEthernet0/7

!         

interface GigabitEthernet0/8

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 2999

 switchport trunk allowed vlan 2000-2999

!

interface GigabitEthernet0/9

!

interface GigabitEthernet0/10

!

interface GigabitEthernet0/11

!

interface GigabitEthernet0/12

!

interface GigabitEthernet0/13

!

interface GigabitEthernet0/14

!

interface GigabitEthernet0/15

!

interface GigabitEthernet0/16

!

interface GigabitEthernet0/17

!

interface GigabitEthernet0/18

!

interface GigabitEthernet0/19

!

interface GigabitEthernet0/20

!

interface GigabitEthernet0/21

!

interface GigabitEthernet0/22

!

interface GigabitEthernet0/23

 switchport access vlan 10

!

interface GigabitEthernet0/24

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 2999

 switchport trunk allowed vlan 2000-2999

!

interface GigabitEthernet0/25

!

interface GigabitEthernet0/26

!

interface GigabitEthernet0/27

!

interface GigabitEthernet0/28

!

interface Vlan1

 no ip address

!

interface Vlan10

 ip address 192.168.200.143 255.255.255.0

!

ip http server

ip http secure-server

 

!

logging esm config

!

line con 0

line vty 0 4

 login local

line vty 5 15

 login

!         

end 

 

Router

pseudowire-class L2VPN
encapsulation l2tpv3
ip local interface Loopback0
ip pmtu max 1400

crypto ipsec client ezvpn INEVORACK
connect auto
group corack1 key XXXXXX
mode network-extension
peer 75.140.41.126
xauth userid mode interactive

interface Loopback0
description L2VPN
ip address 11.11.11.253 255.255.255.255
crypto ipsec client ezvpn INEVORACK inside

interface Vlan1
description LAN
ip address 192.168.200.254 255.255.255.0
ip flow ingress
ip flow egress
ip nat inside
ip virtual-reassembly
ip tcp adjust-mss 1412
crypto ipsec client ezvpn INEVORACK inside

interface Dialer1
description To-ISP
ip ddns update no-ip
ip address negotiated
no ip redirects
no ip unreachables
ip mtu 1452
ip nat outside
ip virtual-reassembly
encapsulation ppp
dialer pool 1
dialer-group 1
ppp authentication pap callin
ppp pap sent-username greglynn@INetvision password 0 XXXXXXX
ppp ipcp dns request
no cdp enable
crypto ipsec client ezvpn INEVORACK

 

Home-Router#sh xconnect all 

Legend:    XC ST=Xconnect State  S1=Segment1 State  S2=Segment2 State

  UP=Up       DN=Down            AD=Admin Down      IA=Inactive

  SB=Standby  RV=Recovering      NH=No Hardware

 

XC ST  Segment 1                         S1 Segment 2                         S2

------+---------------------------------+--+---------------------------------+--

 

UP     ac   Fa2(Ethernet)                UP l2tp 11.11.11.254:123             UP

 

Home-Router#sh l2tun session 

 

L2TP Session Information Total tunnels 1 sessions 1

 

LocID      RemID      TunID      Username, Intf/      State  Last Chg Uniq ID   

                                 Vcid, Circuit                                  

 

3003870272 25082      3446184502 123, Fa2             est    01:41:18 1 

 

 

ripv2 offlist in workbook v5

$
0
0

please would to help me any one for rRip v2 offlist ......

workbook R&S exa num8

Visio alternative for MAC

$
0
0

I'm currently busy with my study of CCIE R&S and switched over from Windows to OS-X. I used to use Visio on Windows, but Visio is not availble for mac. Does anyone know a good alternative to Visio for MAC?

ASA Route Distribution Task

$
0
0

Dears,
In the task ASA Route Distribution in technologies workbook, why did we configure prefix-list on ASA? Couldn't we only add the following:

router eigrp 1
 redistribute connected

router ospf 1
 redistribute connected subnets

Please advise.

L2VPN not working tonight on corack1

$
0
0

Hi guys,

 

I booked a 2-hour lab this evening but I was not able to do anything. The ezVPN is up & running and I can ping Clus1-UCM-Pub from my 1841. Unfortunately, I don't see my home phones as CDP neighbors on Sw1, R2 & R3.

"sh l2tun" keeps saying that:

 

Router#sh l2tun

%No active L2F tunnels

L2TP Tunnel and Session Information Total tunnels 1 sessions 1

LocID RemID Remote Name   State  Remote Address  Port  Sessions L2TP Class/
                                                                VPDN Group
58465 0                   wt-ctl 11.11.11.254    0     1        l2tp_default_cl

LocID      RemID      TunID      Username, Intf/      State  Last Chg Uniq ID
                                 Vcid, Circuit
57833      0          58465      123, Fa0/1           wt-tnl 00:00:06 1

-----

and then:

 

Router#sh l2tun

%No active L2F tunnels

L2TP Tunnel and Session Information Total tunnels 1 sessions 0

LocID RemID Remote Name   State  Remote Address  Port  Sessions L2TP Class/
                                                                VPDN Group
58465 0                   shutdn 11.11.11.254    0     0        l2tp_default_cl

%No active PPTP tunnels

------------------------------

 

I'm sure that my VLANs are OK. They match the rack number I've been assigned to.

How could we tshoot this kind of issue ?

 

Thank you all,

 

 

 

Rémi


CUE License

$
0
0

I am trying to check which license is installed in the Unity Express. When i issue the command below i get this following

se-11-102-66-253# show software licenses
This command is deprecated.  Please use "show license status application" instead.

But by trying that command, i have following :

se-11-102-66-253# show license status application
voicemail enabled: 32 ports, 32 sessions, 500 mailboxes
ivr disabled, ivr session activation count has been set to zero
se-11-102-66-253#

How to check if i am using CCM or CME license?

 

Redistribution diagram

$
0
0

Hello all,

I am wondering how to do good diagrams when I need to do redistribution. I know the INE way (routing protocols in circles, then arrows between them with the routers which are doing the redistribution), but the problem with this is: how can I mark the redistribute connected routes? If you can share a diagram which you drawed, it is helpful. 

 

Thanks in advance!

Building INE's RSv5 topology on IOU/IOL on GNS3

GNS3 version 1 is out now!!!

$
0
0

still free; with option to run IOU locally, no need for vmware gns3 server thing;

https://community.gns3.com/login.jspa?referer=https://community.gns3.com/community/software/download

Network Diagrams...

$
0
0

Not sure where to post this ... Please move it as needed :)

I just curious what kind of application INE uses to create those diagrams used in training and lab? I saw most of instructors uses Mac in video. So unlikly to be MS Visio, right?

Viewing all 10672 articles
Browse latest View live