Hi All,

I am not able to configure nhrp redirect command. Can you please help me?

R1(config-if)#ip nhrp redirect
% NHRP-WARNING: 'ip nhrp redirect' failed to initialise
R1(config-if)#

Hi Friends,

Can you please tell me the difference between backup interface and floating static route (two static route, one with higher AD). I can only found that we can configure the delay for the backup to be activated in the case of backup interface feature 

Thanks,

Arun Mohan

Hi chaps,

Has anyone managed to get an eBGP session using link-local addresses up and running on IOS XR? The peers send their Open messages and get stuck in the OpenSent state. I am using IOS XRv 5.1.1 and the configs are shown below. The inbound route-policy is redundant but I added it later on just to see if it makes any difference. A pass-all route policy makes no difference. This setup works fine on regular IOS.

XR1:

router bgp 519
 address-family ipv6 unicast
  !
 !
 neighbor fe80::201:ff:fefe:104
  remote-as 20
  update-source GigabitEthernet0/0/0/4
  address-family ipv6 unicast
   route-policy IN in
   route-policy OUT out

route-policy IN
  set next-hop 2001:1920::19
end-policy
!
route-policy OUT
  set next-hop 2001:1920::19
end-policy

RP/0/0/CPU0:XR1#sh ipv6 int gig0/0/0/4 br
Sun Nov 23 16:46:46.395 UTC
GigabitEthernet0/0/0/4 [Up/Up]
    fe80::201:ff:feff:104                        
    2001:1920::19

XR2:

router bgp 20
 address-family ipv6 unicast
  network 2001:20:20:20::20/128
 !
 neighbor fe80::201:ff:feff:104
  remote-as 519
  update-source GigabitEthernet0/0/0/4
  address-family ipv6 unicast
   route-policy IN in
   route-policy OUT out
  !

route-policy IN
  set next-hop 2001:1920::20
end-policy
!
route-policy OUT
  set next-hop 2001:1920::20
end-policy

RP/0/0/CPU0:XR2#sh ipv6 int gig0/0/0/4 br
Sun Nov 23 16:47:34.022 UTC
GigabitEthernet0/0/0/4 [Up/Up]
    fe80::201:ff:fefe:104                        
    2001:1920::20 

RP/0/0/CPU0:XR1#ping fe80::201:ff:fefe:104 source fe80::201:ff:feff:104
Sun Nov 23 16:50:06.672 UTC
Output Interface: GigabitEthernet0/0/0/4
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to fe80::201:ff:fefe:104, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/3/9 ms
RP/0/0/CPU0:XR1#

RP/0/0/CPU0:XR2#sh bgp ipv6 un su
Sun Nov 23 16:50:30.300 UTC
BGP router identifier 20.20.20.20, local AS number 20
BGP generic scan interval 60 secs
BGP table state: Active
Table ID: 0xe0800000   RD version: 2
BGP main routing table version 2
BGP scan interval 60 secs

BGP is operating in STANDALONE mode.


Process       RcvTblVer   bRIB/RIB   LabelVer  ImportVer  SendTblVer  StandbyVer
Speaker               2          1          2          0           1           2

Neighbor        Spk    AS MsgRcvd MsgSent   TblVer  InQ OutQ  Up/Down  St/PfxRcd
fe80::201:ff:feff:104
                  0   519       0      16        0    0    0 00:00:00 OpenSent

Cheers,

Pavel

Has anyone else had issues with the IPv6 Multicast Initial config files?  I've had some issues with the tunnel interfaces not being created due to the fact that "ipv6 multicast-routing" is configured first in the config file so there is a conflict in the interface names...  I'm using the CSR1000's.

I've changed these config files to use tunnel10 as the interface name to avoid the issue.  Anybody else run into issues like this?

I just fired up two csrs and created one sub interface on each with same vlan and sub-interface numbers.

However they cannot ping each other though they both connect to same vswitch. Is there anything special I need to do on the vswitch?

if I assign the ip the physical interface it works fine so this looks like some trunking issue on the vswitch. I tried setting the vlan number on the vswitch but it did not help.

Also does anyone how to access the wireshark PC in INEs lab? Is there an IP address we can rdp to from the Internet?

I have a VMware Workstation 9 setup with aroung 6 VMs.

Vmware workstation 9 is installed on the windows 7 host 

I want to provide internet connectivity to my VMs using CSR 1000V. CSR 1000V will be installed as Workstation VM.

My internet connection is 3g USB Modem.

How should i configure my CSR 1000V as well as other configurations for internet connectivity to my VMs using my 3g USB Modem

Hi All,

Any suggestion to recover from this issue.

I have builded a CCIEv5 Lab with CSR1000v followed the same set up process and it is working fine, except this ARP issue.

For example, I couldn't able to ping the connected interface, if you take any CCIEv5 workbook exercise. Each time, I have to reboot all the CSR1000v to make this work, after a reboot it will work without any issues on that day. Next day, same issue will be there, again I have to restart all the Routers.

So far, I have tried reboot all the VM and hard rebooted ESX 5.1 server, but still no luck on it.

Anybody, came across on this issue??? I am not that expect in VMware to further troubleshoot or even I don't know, where could be the problem.

How can I recover htc text messages?

HI All

Can can one share their ideas whether this is possible in any of the cisco versions, Cisco allows 4 byte asn support for RT in extended communities. But my requirement is like setting a community attributes as this 

route-map 4BYTE permit 10

set community 1.1:100 

or 

set extcommunity 1.1:100 

Please share you thoughts. Thanks in Advance for your help

For following task

Configure the designated IGMP querier on VLAN 146 so that failed multicast traffic receivers are detected and removed within 20 seconds.

The answer states “ip igmp query-interval 20”

But I thought IGMP timeout period would be two times the configured query-interval.

(Refer to:http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipmulti/command/imc-cr-book/imc_i1.html#wp4034771958)

So I assumed in order to detect failure within 20 sec, then I must configure query-interval to “10”.

guys, 

I have set up a Remote access VPN on my ASA 8.2.

I can connect using vpn client normally, get an ip address in the range of my address-pool......but I can not SSH into the ASA once connected in to the VPN.

I create remote access which should allow me to ssh back to the firewall as well as asdm for maintenance purposes.

Follow below my config, can you check if i'm missing something ?

Thanks

access-list Split_Tunnel standard permit 172.16.250.0 255.255.255.0

!

ip local pool Pool 172.16.250.1-172.16.250.5 mask 255.255.255.0

!

username Admin password cisco privilege 15

username Admin attributes

 vpn-group-policy VPN_RA_Group_Policy

 service-type admin

tunnel-group Remote_Access type remote-access

tunnel-group Remote_Access general-attributes

 address-pool Pool

 default-group-policy VPN_RA_Group_Policy

tunnel-group Remote_Access ipsec-attributes

 ikev1 pre-shared-key CISCO123

group-policy VPN_RA_Group_Policy internal

group-policy VPN_RA_Group_Policy attributes

 dns-server value 8.8.8.8 8.8.4.4 

 vpn-tunnel-protocol ipsec

 split-tunnel-policy tunnelspecified

 split-tunnel-policy value Split_Tunnel

I also have permited myself to ssh into the inside interface but Im not sure if it's right way to do it, I thought once I'm service type admin user I should be ok to get into the device.

ssh permit 172.16.250.0 255.255.255.0 inside

When placing a call from an HQ phone through CUBE on r1 to a SB phone the call fails when redirected to voicemail.

A transcoder is configured on the HQ CUCM on R1, and SB CUCM on R1. The SIP trunks on HQ and SB are only permitted to use codecs <= iLBC.  The dial-peers on CUBE are configured for codec transparent to allow HQ and SB to negotiate their codecs without CUBE.

CUC is integrated with SCCP on SB, and forced to use iLBC from SB phones to the SCCP ports on CUC.  Calls to voicemail at SB work correctly from SB and SC.

Why does this fail, and what is the proper way to handle calls from HQ to SB in this scenario?

One of the three cause codes returned is 47, but both sides have transcoding resources.  I even added a transcoder to CUBE and get the same result.

dial-peer voice 3000 voip (From R1)

 destination-pattern 3...

 session protocol sipv2

 session target ipv4:11.100.65.11

 incoming called-number 3...

 voice-class sip options-keepalive

 voice-class sip pass-thru content sdp

 dtmf-relay rtp-ntecodec transparent

!

debug ccsip messages on R1

Nov 23 22:45:22.546: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:

Received:

INVITE sip:3001@11.102.64.254:5060 SIP/2.0

Via: SIP/2.0/TCP 11.100.64.12:5060;branch=z9hG4bK19d5ac049bf

From: "hq phone2" <sip:2002@11.100.64.12>;tag=2028~4218dece-2701-4bbd-82cd-e5d5d0cd21eb-46653316

To: <sip:3001@11.102.64.254>

Date: Sun, 23 Nov 2014 22:45:22 GMT

Call-ID: 66f93280-47216382-92-c40640b@11.100.64.12

Supported: timer,resource-priority,replaces

Min-SE:  1800

User-Agent: Cisco-CUCM9.1

Allow: INVITE, OPTIONS, INFO, BYE, CANCEL, ACK, PRACK, UPDATE, REFER, SUBSCRIBE, NOTIFY

CSeq: 101 INVITE

Expires: 180

Allow-Events: presence, kpml

Supported: X-cisco-srtp-fallback,X-cisco-original-called

Call-Info: <sip:11.100.64.12:5060>;method="NOTIFY;Event=telephone-event;Duration=500"

Cisco-Guid: 1727607424-0000065536-0000000039-0205546507

Session-Expires:  1800

P-Asserted-Identity: "hq phone2" <sip:2002@11.100.64.12>

Remote-Party-ID: "hq phone2" <sip:2002@11.100.64.12>;party=calling;screen=yes;privacy=off

Contact: <sip:2002@11.100.64.12:5060;transport=tcp>;video;audio

Max-Forwards: 69

Content-Length: 0

Nov 23 22:45:22.550: //206/66F932800000/SIP/Msg/ccsipDisplayMsg:

Sent:

INVITE sip:3001@11.100.65.11:5060 SIP/2.0

Via: SIP/2.0/UDP 11.102.64.254:5060;branch=z9hG4bKC5268D

Remote-Party-ID: "hq phone2" <sip:2002@11.102.64.254>;party=calling;screen=yes;privacy=off

From: "hq phone2" <sip:2002@11.102.64.254>;tag=114A44-44F

To: <sip:3001@11.100.65.11>

Date: Sun, 23 Nov 2014 22:45:22 GMT

Call-ID: 3E1B6F08-729911E4-80FBA48D-B8D5192D@11.102.64.254

Supported: timer,resource-priority,replaces,sdp-anat

Min-SE:  1800

Cisco-Guid: 1727607424-0000065536-0000000039-0205546507

User-Agent: Cisco-SIPGateway/IOS-15.2.4.M5

Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, UPDATE, REFER, SUBSCRIBE, NOTIFY, INFO, REGISTER

CSeq: 101 INVITE

Timestamp: 1416782722

Contact: <sip:2002@11.102.64.254:5060>

Expires: 180

Allow-Events: telephone-event

Max-Forwards: 68

Session-Expires:  1800

Content-Length: 0

Nov 23 22:45:22.554: //205/66F932800000/SIP/Msg/ccsipDisplayMsg:

Sent:

SIP/2.0 100 Trying

Via: SIP/2.0/TCP 11.100.64.12:5060;branch=z9hG4bK19d5ac049bf

From: "hq phone2" <sip:2002@11.100.64.12>;tag=2028~4218dece-2701-4bbd-82cd-e5d5d0cd21eb-46653316

To: <sip:3001@11.102.64.254>

Date: Sun, 23 Nov 2014 22:45:22 GMT

Call-ID: 66f93280-47216382-92-c40640b@11.100.64.12

CSeq: 101 INVITE

Allow-Events: telephone-event

Server: Cisco-SIPGateway/IOS-15.2.4.M5

Content-Length: 0

Nov 23 22:45:22.554: //206/66F932800000/SIP/Msg/ccsipDisplayMsg:

Received:

SIP/2.0 100 Trying

Via: SIP/2.0/UDP 11.102.64.254:5060;branch=z9hG4bKC5268D

From: "hq phone2" <sip:2002@11.102.64.254>;tag=114A44-44F

To: <sip:3001@11.100.65.11>

Date: Sun, 23 Nov 2014 22:45:22 GMT

Call-ID: 3E1B6F08-729911E4-80FBA48D-B8D5192D@11.102.64.254

CSeq: 101 INVITE

Allow-Events: presence

Content-Length: 0

Nov 23 22:45:22.562: //206/66F932800000/SIP/Msg/ccsipDisplayMsg:

Received:

SIP/2.0 180 Ringing

Via: SIP/2.0/UDP 11.102.64.254:5060;branch=z9hG4bKC5268D

From: "hq phone2" <sip:2002@11.102.64.254>;tag=114A44-44F

To: <sip:3001@11.100.65.11>;tag=753~366f4dc4-f5e5-43a8-a67a-458e2ea92270-29949289

Date: Sun, 23 Nov 2014 22:45:22 GMT

Call-ID: 3E1B6F08-729911E4-80FBA48D-B8D5192D@11.102.64.254

CSeq: 101 INVITE

Allow: INVITE, OPTIONS, INFO, BYE, CANCEL, ACK, PRACK, UPDATE, REFER, SUBSCRIBE, NOTIFY

Allow-Events: presence

Supported: X-cisco-srtp-fallback

Supported: Geolocation

P-Asserted-Identity: <sip:3220@11.100.65.11>

Remote-Party-ID: <sip:3220@11.100.65.11>;party=called;screen=yes;privacy=off

Contact: <sip:3001@11.100.65.11:5060>

Content-Length: 0

Nov 23 22:45:22.566: //205/66F932800000/SIP/Msg/ccsipDisplayMsg:

Sent:

SIP/2.0 180 Ringing

Via: SIP/2.0/TCP 11.100.64.12:5060;branch=z9hG4bK19d5ac049bf

From: "hq phone2" <sip:2002@11.100.64.12>;tag=2028~4218dece-2701-4bbd-82cd-e5d5d0cd21eb-46653316

To: <sip:3001@11.102.64.254>;tag=114A54-23C0

Date: Sun, 23 Nov 2014 22:45:22 GMT

Call-ID: 66f93280-47216382-92-c40640b@11.100.64.12

CSeq: 101 INVITE

Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, UPDATE, REFER, SUBSCRIBE, NOTIFY, INFO, REGISTER

Allow-Events: telephone-event

Remote-Party-ID: <sip:3220@11.102.64.254>;party=called;screen=yes;privacy=off

Contact: <sip:3001@11.102.64.254:5060;transport=tcp>

Server: Cisco-SIPGateway/IOS-15.2.4.M5

Content-Length: 0

Nov 23 22:45:22.650: //206/66F932800000/SIP/Msg/ccsipDisplayMsg:

Received:

SIP/2.0 200 OK

Via: SIP/2.0/UDP 11.102.64.254:5060;branch=z9hG4bKC5268D

From: "hq phone2" <sip:2002@11.102.64.254>;tag=114A44-44F

To: <sip:3001@11.100.65.11>;tag=753~366f4dc4-f5e5-43a8-a67a-458e2ea92270-29949289

Date: Sun, 23 Nov 2014 22:45:22 GMT

Call-ID: 3E1B6F08-729911E4-80FBA48D-B8D5192D@11.102.64.254

CSeq: 101 INVITE

Allow: INVITE, OPTIONS, INFO, BYE, CANCEL, ACK, PRACK, UPDATE, REFER, SUBSCRIBE, NOTIFY

Allow-Events: presence, kpml

Supported: replaces

Supported: X-cisco-srtp-fallback

Supported: Geolocation

Session-Expires:  1800;refresher=uas

Require:  timer

P-Asserted-Identity: "VoiceMail" <sip:3220@11.100.65.11>

Remote-Party-ID: "VoiceMail" <sip:3220@11.100.65.11>;party=called;screen=yes;privacy=off

Contact: <sip:3001@11.100.65.11:5060>;isFocus

Content-Type: application/sdp

Content-Length: 245

v=0

o=CiscoSystemsCCM-SIP 753 1 IN IP4 11.100.65.11

s=SIP Call

c=IN IP4 11.100.64.13

b=TIAS:64000

b=AS:64

t=0 0

m=audio 4000 RTP/AVP 0 101

a=rtpmap:0 PCMU/8000

a=ptime:20

a=sendonly

a=rtpmap:101 telephone-event/8000

a=fmtp:101 0-15

Nov 23 22:45:22.654: //205/66F932800000/SIP/Msg/ccsipDisplayMsg:

Sent:

SIP/2.0 200 OK

Via: SIP/2.0/TCP 11.100.64.12:5060;branch=z9hG4bK19d5ac049bf

From: "hq phone2" <sip:2002@11.100.64.12>;tag=2028~4218dece-2701-4bbd-82cd-e5d5d0cd21eb-46653316

To: <sip:3001@11.102.64.254>;tag=114A54-23C0

Date: Sun, 23 Nov 2014 22:45:22 GMT

Call-ID: 66f93280-47216382-92-c40640b@11.100.64.12

CSeq: 101 INVITE

Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, UPDATE, REFER, SUBSCRIBE, NOTIFY, INFO, REGISTER

Allow-Events: telephone-event

Remote-Party-ID: "VoiceMail" <sip:3220@11.102.64.254>;party=called;screen=yes;privacy=off

Contact: <sip:3001@11.102.64.254:5060;transport=tcp>

Supported: replaces

Supported: sdp-anat

Server: Cisco-SIPGateway/IOS-15.2.4.M5

Session-Expires:  1800;refresher=uas

Require: timer

Supported: timer

Content-Type: application/sdp

Content-Disposition: session;handling=required

Content-Length: 247

v=0

o=CiscoSystemsCCM-SIP 753 1 IN IP4 11.100.65.11

s=SIP Call

c=IN IP4 11.102.64.254

b=TIAS:64000

b=AS:64

t=0 0

m=audio 16430 RTP/AVP 0 101

a=rtpmap:0 PCMU/8000

a=ptime:20

a=sendonly

a=rtpmap:101 telephone-event/8000

a=fmtp:101 0-15

Nov 23 22:45:22.662: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:

Received:

ACK sip:3001@11.102.64.254:5060;transport=tcp SIP/2.0

Via: SIP/2.0/TCP 11.100.64.12:5060;branch=z9hG4bK19e3de7dadf

From: "hq phone2" <sip:2002@11.100.64.12>;tag=2028~4218dece-2701-4bbd-82cd-e5d5d0cd21eb-46653316

To: <sip:3001@11.102.64.254>;tag=114A54-23C0

Date: Sun, 23 Nov 2014 22:45:22 GMT

Call-ID: 66f93280-47216382-92-c40640b@11.100.64.12

Max-Forwards: 70

CSeq: 101 ACK

Allow-Events: presence, kpml

Content-Length: 0

Nov 23 22:45:22.662: %VOICE_IEC-3-GW: SIP: Internal Error (ACK, dest sdp null): IEC=1.1.96.7.25.0 on callID 205 GUID=66F9328000010000000000270C40640B

Nov 23 22:45:22.666: //205/66F932800000/SIP/Msg/ccsipDisplayMsg:

Sent:

BYE sip:2002@11.100.64.12:5060;transport=tcp SIP/2.0

Via: SIP/2.0/TCP 11.102.64.254:5060;branch=z9hG4bKC61783

From: <sip:3001@11.102.64.254>;tag=114A54-23C0

To: "hq phone2" <sip:2002@11.100.64.12>;tag=2028~4218dece-2701-4bbd-82cd-e5d5d0cd21eb-46653316

Date: Sun, 23 Nov 2014 22:45:22 GMT

Call-ID: 66f93280-47216382-92-c40640b@11.100.64.12

User-Agent: Cisco-SIPGateway/IOS-15.2.4.M5

Max-Forwards: 70

Timestamp: 1416782722

CSeq: 101 BYE

Reason: Q.850;cause=86

P-RTP-Stat: PS=0,OS=0,PR=0,OR=0,PL=0,JI=0,LA=0,DU=0

Content-Length: 0

Nov 23 22:45:22.666: //206/66F932800000/SIP/Msg/ccsipDisplayMsg:

Sent:

ACK sip:3001@11.100.65.11:5060 SIP/2.0

Via: SIP/2.0/UDP 11.102.64.254:5060;branch=z9hG4bKC711FF

From: "hq phone2" <sip:2002@11.102.64.254>;tag=114A44-44F

To: <sip:3001@11.100.65.11>;tag=753~366f4dc4-f5e5-43a8-a67a-458e2ea92270-29949289

Date: Sun, 23 Nov 2014 22:45:22 GMT

Call-ID: 3E1B6F08-729911E4-80FBA48D-B8D5192D@11.102.64.254

Max-Forwards: 70

CSeq: 101 ACK

Allow-Events: telephone-event

Reason: Q.850;cause=96

Content-Length: 0

Nov 23 22:45:22.666: //206/66F932800000/SIP/Msg/ccsipDisplayMsg:

Sent:

BYE sip:3001@11.100.65.11:5060 SIP/2.0

Via: SIP/2.0/UDP 11.102.64.254:5060;branch=z9hG4bKC822A5

From: "hq phone2" <sip:2002@11.102.64.254>;tag=114A44-44F

To: <sip:3001@11.100.65.11>;tag=753~366f4dc4-f5e5-43a8-a67a-458e2ea92270-29949289

Date: Sun, 23 Nov 2014 22:45:22 GMT

Call-ID: 3E1B6F08-729911E4-80FBA48D-B8D5192D@11.102.64.254

User-Agent: Cisco-SIPGateway/IOS-15.2.4.M5

Max-Forwards: 70

Timestamp: 1416782722

CSeq: 102 BYE

Reason: Q.850;cause=96

P-RTP-Stat: PS=0,OS=0,PR=0,OR=0,PL=0,JI=0,LA=0,DU=0

Content-Length: 0

Nov 23 22:45:22.666: //205/66F932800000/SIP/Msg/ccsipDisplayMsg:

Received:

SIP/2.0 200 OK

Via: SIP/2.0/TCP 11.102.64.254:5060;branch=z9hG4bKC61783

From: <sip:3001@11.102.64.254>;tag=114A54-23C0

To: "hq phone2" <sip:2002@11.100.64.12>;tag=2028~4218dece-2701-4bbd-82cd-e5d5d0cd21eb-46653316

Date: Sun, 23 Nov 2014 22:45:22 GMT

Call-ID: 66f93280-47216382-92-c40640b@11.100.64.12

CSeq: 101 BYE

Content-Length: 0

Nov 23 22:45:22.670: //206/66F932800000/SIP/Msg/ccsipDisplayMsg:

Received:

SIP/2.0 200 OK

Via: SIP/2.0/UDP 11.102.64.254:5060;branch=z9hG4bKC822A5

From: "hq phone2" <sip:2002@11.102.64.254>;tag=114A44-44F

To: <sip:3001@11.100.65.11>;tag=753~366f4dc4-f5e5-43a8-a67a-458e2ea92270-29949289

Date: Sun, 23 Nov 2014 22:45:22 GMT

Call-ID: 3E1B6F08-729911E4-80FBA48D-B8D5192D@11.102.64.254

CSeq: 102 BYE

Content-Length: 0

Nov 23 22:45:22.862: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:

Received:

BYE sip:3001@11.102.64.254:5060;transport=tcp SIP/2.0

Via: SIP/2.0/TCP 11.100.64.12:5060;branch=z9hG4bK19f97fd40e

From: "hq phone2" <sip:

R1#2002@11.100.64.12>;tag=2028~4218dece-2701-4bbd-82cd-e5d5d0cd21eb-46653316

To: <sip:3001@11.102.64.254>;tag=114A54-23C0

Date: Sun, 23 Nov 2014 22:45:22 GMT

Call-ID: 66f93280-47216382-92-c40640b@11.100.64.12

User-Agent: Cisco-CUCM9.1

Max-Forwards: 70

P-Asserted-Identity: "hq phone2" <sip:2002@11.100.64.12>

CSeq: 102 BYE

Reason: Q.850;cause=47

Content-Length: 0a

Nov 23 22:45:22.862: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:

Sent:

SIP/2.0 481 Call Leg/Transaction Does Not Exist

Via: SIP/2.0/TCP 11.100.64.12:5060;branch=z9hG4bK19f97fd40e

From: "hq phone2" <sip:2002@11.100.64.12>;tag=2028~4218dece-2701-4bbd-82cd-e5d5d0cd21eb-46653316

To: <sip:3001@11.102.64.254>;tag=114A54-23C0

Call-ID: 66f93280-47216382-92-c40640b@11.100.64.12

CSeq: 102 BYE

Content-Length: 0

Hello,

First of all, I want to share my topology:

All metrics are 10.

Now, I have configured a TE tunnel between PE1 (Lo0 10.10.10.10) and P2 (Lo0 2.2.2.2) which is taking the path (PE1->P3->P4->P2) with an auto-route announce, so the loopback of P2 which is 2.2.2.2 is now learnt through TE tunnel with a metric of 20.

PE1 is having another IGP which is PE1-P1-P2 with metric of 20.

The problem is that MPLS fundamental book have stated that there can be a load-balance between an IGP/LDP tunnel and RSVP one if the metric is equal, which is supposed to be here. But no luck!

Here is the show routes for the P2 and PE2 loopbacks.

PE1#sh ip route 2.2.2.2
Routing entry for 2.2.2.2/32
  Known via "isis", distance 115, metric 20, type level-2
  Redistributing via isis
  Last update from 2.2.2.2 on Tunnel102, 02:21:39 ago
  Routing Descriptor Blocks:
  * 2.2.2.2, from 2.2.2.2, 02:21:39 ago, via Tunnel102
      Route metric is 20, traffic share count is 1

PE1#sh isis topology P2
Translating "P2"

IS-IS 0 level-2 path to P2
System Id            Metric     Next-Hop             Interface   SNPA
P2                   20         P2                   Tu102       *MPLS TE-Tunnel

PE1#sh ip route 20.20.20.20
Routing entry for 20.20.20.20/32
  Known via "isis", distance 115, metric 30, type level-2
  Redistributing via isis
  Last update from 2.2.2.2 on Tunnel102, 00:18:34 ago
  Routing Descriptor Blocks:
  * 2.2.2.2, from 20.20.20.20, 00:18:34 ago, via Tunnel102
      Route metric is 30, traffic share count is 1

PE1#sh isis topology PE2
Translating "PE2"

IS-IS 0 level-2 path to PE2
System Id            Metric     Next-Hop             Interface   SNPA
PE2                  30         P2                   Tu102       *MPLS TE-Tunnel

PE1 is only prefering the tunnel, and no load-balancing is achieved.

Is there anything I have done wrong?

hi all

if IP source guard is enabled on the Local network switches,

how the switches will treat ip packets coming from the internet !? since those IPs are not identified by the local DHCP server !?

thanks,

I am hoping that someone can shed some light on what I am overlooking... 

When I configure SW4 with BPDUfilter Default globally with portfast under the interface, when I do a show span int g1/0/20 detail, I see that the interface has BPDUfilter enabled by default and the port is in portfast mode, which is expected.

Here's my issue... Whenever I convert SW2 from a routed to switch port, SW's 4 interface g1/0/20 is no longer BPDUfilter enabled as designed, but it doesn't drop being portfast enabled.

I have read in a previous post that different VLANs on each end could possibley be the cause, so I verified that both interfaces are access for VLAN 10 and I have also tried appying portfast globally and interface level and still no dice. Any ideas?

Before SW2 sends BPDUs to SW4:

SW4#sh run int g1/0/20

Building configuration...

Current configuration : 114 bytes

!

interface GigabitEthernet1/0/20

 switchport access vlan 10

 switchport mode access

 spanning-tree portfast

SW4#sh span summ

Switch is in pvst mode

Root bridge for: none

EtherChannel misconfig guard is enabled

Extended system ID           is enabled

Portfast Default             is disabled

PortFast BPDU Guard Default  is disabled

Portfast BPDU Filter Default is enabled

Loopguard Default            is disabled

UplinkFast                   is disabled

BackboneFast                 is disabled

Configured Pathcost method used is short

SW4#sh span int g1/0/20 portfast

VLAN0010            enabled

SW4#sh span int g1/0/20 detail

 Port 20 (GigabitEthernet1/0/20) of VLAN0010 is designated forwarding

   Port path cost 4, Port priority 128, Port Identifier 128.20.

   Designated root has priority 10, address 649e.f3c4.2d00

   Designated bridge has priority 32778, address 649e.f3a4.fd80

   Designated port id is 128.20, designated path cost 23

   Timers: message age 0, forward delay 0, hold 0

   Number of transitions to forwarding state: 1

   The port is in the portfast mode

   Link type is point-to-point by default

   Bpdu filter is enabled by default

   BPDU: sent 6, received 0

After SW2 starts sending BPDUs:

SW4#sh span int g1/0/20 detail

 Port 20 (GigabitEthernet1/0/20) of VLAN0010 is alternate blocking

   Port path cost 4, Port priority 128, Port Identifier 128.20.

   Designated root has priority 10, address 649e.f3c4.2d00

   Designated bridge has priority 32778, address e8b7.48e3.1200

   Designated port id is 128.20, designated path cost 19

   Timers: message age 4, forward delay 0, hold 0

   Number of transitions to forwarding state: 1

   The port is in the portfast mode

   Link type is point-to-point by default

   BPDU: sent 1, received 12

SW4#sh span int g1/0/20 portfast

VLAN0010            enabled

Hello,

What would be the difference between using a ACL with permit IP and permit GRE.

Regards,

Dear All,

I have purchased the VMware course Bundle and it includes the following. I have no idea about VMware and completely new to this technology. 

I need to know what order should I follow to understand the Basics and scale up to expert or decent level. 

VMware Course Bundle Includes:

VMware: Managing ESXi Storage Using vCenter Server Course
VMware: Managing ESXi Networking Using vCenter Server Course
VMware: Managing Virtual Machines Using vCenter Server Course

Feedback on ATC Session7:

IKEv2 L2L Between IOS Routers with DVTI and PKI


After I start the tunnel, I get this message:

R1: %CRYPTO-6-IKMP_NO_ID_CERT_FQDN_MATCH: ID of R2.dvti.inelab.local (type 2) and certificate fqdn with R2.ine.com

R2:%CRYPTO-6-IKMP_NO_ID_CERT_FQDN_MATCH: ID of R1.dvti.inelab.local (type 2) and certificate fqdn with R1.ine.com


To not get this type of msg you need to add the FQDN on the certificate. (The VPN still got up even with the error, this was odd.)

R1
crypto pki trustpoint R1_CLIENT
 enrollment url http://150.1.1.1:80
 fqdn R1.dvti.inelab.local
R2
crypto pki trustpoint R1_CLIENT
 enrollment url http://150.1.1.1:80
 fqdn R2.dvti.inelab.local

Regards