Quantcast
Channel: IEOC - INE's Online Community
Viewing all 10672 articles
Browse latest View live

Test environment ?

$
0
0

I have question about test environment:

a. Is there puttyConnection manager ?

b. Is the PC running Win7 or Win XP ?

    Prefer Win7 since it has "highlight" feature which will compansate lack of puttyConnection Manager.

c. Do we get few regular papers or 1 whiteboard paper ?

Andi


ospf commands

$
0
0

Hello ,

guys whats the difference between these two commands

    ip ospf flood-reduction
    ip ospf demand circuit

I thinks both have the approximatly the same effect and they are completable with eac other

Thanks

 

Redistributing Loopbacks into EIGRP

$
0
0

Hi guys,

I am trying to redistribute some routes from OSPF into EIGRP. Please see the next example:



http://postimg.org/image/pc1cztm0z/

Description:
I am trying to Redistribute Loopbacks 0 and 1 from R3 and R4 (OSPF) into EIGRP. All of the other loopbacks are being filtered with a route-map before being redistribute. Notice that they are loopbacks with /24 and as I understand OSPF advertise them as /32 routes.


Issues:
1 - When looking the routing table in R2, I can see 2 routes for 10.1.4.0 and 2 more routes for 10.1.5.0. 

I am trying to understand why am I receiving these 2 extra /24 routes for these loopbacks?. Should not I receive just one /32 route for each Loopback as it is the case for the routes originated by R3?



2 - Additionally I cannot see and Type 1 LSA being generated in OSPF for those Loopbacks. I can see type 5 instead for some of the routes which makes me think it might be an issue with these loopbacks being redistributed back into OSPF.



http://postimg.org/image/ahp10i19z/14035d83/

Thanks in advance for your comments to shed some light on this.

Spanning-tree Root Bridge

$
0
0

How does a frame get foward locally? From one server to another. Does the frame have to be switch thru root bridge first?

F-Port Trunking with NPV and FCoE

$
0
0

Hi, I'm having trouble getting F-Port trunking to work with NPV and FCoE for multiple VSANs and hoping someone can shed some light.  My topology is very straightforward, I have N5K1 set up as an fcoe switch with npiv enabled, my second switch is N5K2 with fcoe-npv enabled.  Int e1/1 is my link.  Now, when I setup my interfaces (ethernet and vfc), I have absolutely no problem with a single VSAN (VSAN10).  Below are the salient pieces of code and the output (you will note I have provisioned vlans 20 and 30 also and respective vsan config, but not yet using them):

N5K1:

feature fcoe
feature npiv

vlan 10
  fcoe vsan 10
vlan 20
  fcoe vsan 20
vlan 30
  fcoe vsan 30
vsan database
  vsan 10 name "fcoe-vsan10"
  vsan 20 name "fcoe-vsan20"
  vsan 30 name "fcoe-vsan30"

interface Ethernet1/1
  switchport mode trunk
  switchport trunk allowed vlan 10,20,30
  spanning-tree port type edge trunk

interface vfc1
  bind interface ethernet 1/1
  switchport mode f
  switchport trunk allowed vsan 10
  no shutdown

N5K2:

feature fcoe-npv
feature lacp
feature lldp

vlan 10
  fcoe vsan 10
vlan 20
  fcoe vsan 20
vlan 30
  fcoe vsan 30
vsan database
  vsan 10 name "fcoe-vsan10"
  vsan 20 name "fcoe-vsan20"
  vsan 30 name "fcoe-vsan30"

interface Ethernet1/9
  switchport mode trunk
  switchport trunk allowed vlan 10,20,30
  spanning-tree port type edge trunk

interface vfc1
  bind interface ethernet 1/1
  switchport mode NP
  switchport trunk allowed vsan 10
  no shutdown

N5K1 Outputs:

N5K1(config-if)# sh int vfc1
vfc1 is trunking
    Bound interface is ethernet 1/1
    Hardware is Ethernet
    Port WWN is 20:00:54:7f:ee:3c:85:ff
    Admin port mode is F, trunk mode is on
    snmp link state traps are enabled
    Port mode isTF
    Port vsan is 1
    Trunk vsans (admin allowed and active) (10)
    Trunk vsans (up)                       (10)
    Trunk vsans (isolated)                 ()
    Trunk vsans (initializing)             ()
    1 minute input rate 0 bits/sec, 0 bytes/sec, 0 frames/sec
    1 minute output rate 0 bits/sec, 0 bytes/sec, 0 frames/sec
      603 frames input, 68788 bytes
        0 discards, 0 errors
      701 frames output, 96936 bytes
        0 discards, 0 errors
    last clearing of "show interface" counters never
    Interface last changed at Mon Aug 12 09:07:02 2013


N5K1(config-if)# sh vsan 10
vsan 10 information
         name:fcoe-vsan10  state:active
         interoperability mode:default
         loadbalancing:src-id/dst-id/oxid
         operational state:up

N5K2 Outputs:

N5K2(config)# sh int vfc1
vfc1 is trunking
    Bound interface is ethernet 1/1
    Hardware is Ethernet
    Port WWN is 20:00:54:7f:ee:21:3f:ff
    Admin port mode is NP, trunk mode is on
    snmp link state traps are enabled
    Port mode is TNP
    Port vsan is 1
    Trunk vsans (admin allowed and active) (10)
    Trunk vsans (up)                       (10)
    Trunk vsans (isolated)                 ()
    Trunk vsans (initializing)             ()

    1 minute input rate 0 bits/sec, 0 bytes/sec, 0 frames/sec
    1 minute output rate 0 bits/sec, 0 bytes/sec, 0 frames/sec
      164 frames input, 26088 bytes
        0 discards, 0 errors
      92 frames output, 13160 bytes
        0 discards, 0 errors
    last clearing of "show interface" counters never
    Interface last changed at Mon Aug 12 09:17:33 2013


N5K2(config)# sh vsan 10
vsan 10 information
         name:fcoe-vsan10  state:active
         interoperability mode:default
         loadbalancing:src-id/dst-id/oxid
         operational state:up

Okay, so we're good for VSAN 10.

Now, when I add VSANs 20 and 30 to each of the VFC interfaces on N5K1 and N5K2, such that my config now looks like this:

interface vfc1
  bind interface ethernet 1/1
  switchport trunk allowed vsan 10
  switchport trunk allowed vsan add 20
  switchport trunk allowed vsan add 30
  no shutdown

I get the following (on both switches):

N5K1(config)# sh int vfc1
vfc1 is trunking
    Bound interface is ethernet 1/1
    Hardware is Ethernet
    Port WWN is 20:00:54:7f:ee:3c:85:ff
    Admin port mode is F, trunk mode is on
    snmp link state traps are enabled
    Port mode is TF
    Port vsan is 10
    Trunk vsans (admin allowed and active) (10,20,30)
    Trunk vsans (up)                       (30)
    Trunk vsans (isolated)                 ()
    Trunk vsans (initializing)             (10,20)
    1 minute input rate 0 bits/sec, 0 bytes/sec, 0 frames/sec
    1 minute output rate 0 bits/sec, 0 bytes/sec, 0 frames/sec
      625 frames input, 71556 bytes
        0 discards, 0 errors
      743 frames output, 104668 bytes
        0 discards, 0 errors
    last clearing of "show interface" counters never
    Interface last changed at Mon Aug 12 09:17:21 2013


N5K-p3-1(config)# sh vsan 10
vsan 10 information
         name:fcoe-vsan10  state:active
         interoperability mode:default
         loadbalancing:src-id/dst-id/oxid
         operational state:down

N5K-p3-1(config)# sh vsan 20
vsan 20 information
         name:fcoe-vsan20  state:active
         interoperability mode:default
         loadbalancing:src-id/dst-id/oxid
         operational state:down

N5K-p3-1(config)# sh vsan 30
vsan 30 information
         name:fcoe-vsan30  state:active
         interoperability mode:default
         loadbalancing:src-id/dst-id/oxid
         operational state:up

I can't get all VSANs in the UP state, and for some reason, VSAN 30 has gone into 'UP' but VSAN 10 (which was previously UP) is now 'DOWN' and VSANs 10 and 20 just say 'initialising'.

I don't think it's something I have misconfigured, more that perhaps I'm missing something?  Either that, or F-Port trunking (TF) is different to what I'm thinking, and that only a single VSAN can go between the switches?

Probably me and something very simple :-)

Thanks

Dominic

 

Default gateway control at network level?

$
0
0

 

 I have a bit of a weird one. I want to change the default gateway for all endpoints on one specific VLAN. I don't have access to the endpoints (otherwise I'd use my handy-dandy script). Is there a way I can re-direct all the traffic for this VLAN to another address without blowing up my network?

 

Thanks!

QoS strange behavior (in lab)

$
0
0

lab set

 

On R1 shaper activated - 256k

Let's start ftp traffic: FLOW1 (XP1-XP3) and FLOW2 (XP2-XP4)

Link is now fully utilized in proportion - 50/50.

 

I want to prioritize traffic flow from XP2 to XP4 (priority 192k):

 

R1(config)#do sh policy-map

  Policy Map MARK_XP2_XP4

    Class XP2_XP4

      set dscp ef

 

  Policy Map SHAPER256

    Class class-default

      Average Rate Traffic Shaping

      cir 256000 (bps)

      service-policy Prior_XP2_XP4

 

  Policy Map Prior_XP2_XP4

    Class XP2_XP4

      priority 192 (kbps)

And in this case the QoS behavior is reverse of that i expected:
FLOW1 (Class class-default) is now 192kbps
and FLOW2 (Class XP2_XP4) is take  remaining 64kbps
If i change 
 Policy Map Prior_XP2_XP4
    Class XP2_XP4
      priority 192 (kbps)
to
 Policy Map Prior_XP2_XP4
    Class XP2_XP4
      bandwidth 192 (kbps)
Then QoS works fine. FLOW2 take its 192kbps.

1000 tokens for 400$

$
0
0

Hi,

I am selling 1000 tokens for 400 USD, if interested  PM me

Regards


question about prefix-list

$
0
0

hi everyone 

i have small question:-

what`s the difference between packet filter and route filter ?

route is same like packet ? wright or wrong

 

CUCME phones forwarded to CUC Express

$
0
0

Hello everyone,

 

I have a problem with an scenario, I hope someone can help me with it.

I configured a SIP trunk on a CUCM with G.729 on the region. The dial-peer on CUCME has codec transparent configured and calls between phones registered to CUCM and phones registered to CUCME work fine.

 

The problem is when CUCME phones became forwarded to CUC express embedded module on the CUCME. I configure the dial-peer to access to CUC Express with G.711u codec and no VAD and, eventhough I configure transcoding resources on the CUCME, they don't get invoked.

As far as I know the XCOD resources to be used should be the ones on the CUCME and not the ones registered to CUCM (I already configured them but didn't solve the problem) , right?

 

I'm pretty sure it's a xcoding problem because if I changed the region on CUCM to G.711u both normal and forwarded calls work fine.

Am I missing anything? Thanks,

 

Best regards.

 

José Manuel.

 

strange issue with VTP pruning !

$
0
0

hi,

 

I got very strange issue like:

 

SW2#show int fas 0/19 pru

Port                Vlans pruned for lack of request by neighbor

Fa0/19              11-29,31-34,36-99

Port                Vlan traffic requested of neighbor

Fa0/19              1,20,22,58

SW2#

 

when I do something like:

 

SW2#config t

Enter configuration commands, one per line.  End with CNTL/Z.

SW2(config)#int fas 0/19

SW2(config-if)#sw tru pru vlan 10

SW2(config-if)#

 

then

 

SW2#show int fas 0/19 pru

Port                Vlans pruned for lack of request by neighbor

Fa0/19              none

Port                Vlan traffic requested of neighbor

Fa0/19              1,11-100

SW2#

 

 

the result is completly changed, I was only expecting Vlan 10 will be added to the list of "pruned for lack of request by neighbor"

but worest, even "Vlan traffic requested of neighbor" was changed,

is there somthing to consider in this command before apply it ??

IOS DNS Spoofing

$
0
0

Hi all

 

I have a problem in the IOS DNS Spoofing section.

The two command is recognaized invalid and can not congigure

■ip dns spoofing 150.1.5.5
■ip dns server

I want to know why.

 

Thanks in Advance.

 

NetFlow on Nexus 7K

$
0
0

Hi,

How do you config NetFlow on Nexus 7K?

Thanks!

Static RP over BSR-RP?

$
0
0

Hello All,

 

If a router has both, a static RP and a BSR-RP entry, what will the router use first?

Assuming both RPs are configured for the same groups. 

 

Mario

UCS FC Trunking enable but why I can select only 1 vsan ??

$
0
0

In UCS, we can enable FC Trunking on Port Channel interface. Trunking means allowing multiple vsan but why on drop down, i can only select 1 vsan ???

.

Is this known limitation of UCS ?

 

 


Basic: device provisoning

$
0
0

Hi;

 

I have one Cisco 7821 Auto-registered device with assigned auto-prefix to it. but the phone displays "Login" page and push me to enter UserID and PIN to provision the device. I repeatedly press Exit buttom but the message appears again and again. I enters the username and password for the local user that I've created before on the CUCM but the "Error Processing the Request" message is shown everytime. the settings are as follows:

 

1- Self Provisoning > Require Authentication For Users Only

2- User Settings > User Profile > Standard (Factory Default) User Profile > all of the field are set to "Auto-Registeration Template" and the Self-Provisoning is Enabled option is checked. 

3. A local user named "LUSER1" is created on CUCM which is member of Standard CCM Und User" group. also I associated the auto-registered 7821 device to this user on CUCM and have assigned a password and PIN to it. 

 

So why I cannot login despite that I entered the credentials correctly? I also can login to the CCMuser web page with the same credentials and can see the prefix and phone that have been associated with the mentioned user?

Inter-AS MPLS Option C Scenario

$
0
0

Dears 

 

i need your support, i stuck in Option C configuration, i'm using INE Advanced Technology topology and follow the same structure of logical topology in ATC video as following:

- R3 and XR3 are ASBR routers 

- eBGP + send label is established between R3 and XR3

- ASBRs advertise R1 and XR1 loopback addresses and redistributed into IGP to enable RR establish VPNv4 session 

- R1 is VPNv4 RR for AS 123 while XR1 is VPNv4 RR for AS 11.1213

- VPNv4 peering is established between R1 and XR1

- i didn't configure next-hop-unchanged to see the traffic flow.

now when CE in AS 123 advertise the route, R1 will reflect that route to ASBR R3, R3 will advertise that route to neighboring AS ASBR XR3, XR3 send it to XR1. so far everything fine. the issue comes when i test the data plane connectivity i found it broken. when i digged more i found out that for some reason XR1 is setting outgoing label implicit null label to R1 loopback address, even though XR2 is generating local label with value  for R1 loopback. i don't know why XR1 receive the pop label and not the actual label of XR2. 

 

i will post here the show commands (following the video flow)

R10 (CE router in AS 123)

----------------

R10#show ip route eigrp 

      8.0.0.0/32 is subnetted, 1 subnets

D        8.8.8.8 [90/16000] via 10.2.10.2, 06:11:29, GigabitEthernet1.210

      10.0.0.0/8 is variably subnetted, 7 subnets, 2 masks

D        10.8.9.0/24 [90/20480] via 10.2.10.2, 06:11:29, GigabitEthernet1.210

D        10.8.11.0/24 [90/15360] via 10.2.10.2, 06:11:29, GigabitEthernet1.210

 

R2 ( PE router in AS 123)

-------------------------------

R2#show bgp vpnv4 unicast rd 2:2 8.8.8.8

BGP routing table entry for 2:2:8.8.8.8/32, version 156

Paths: (1 available, best #1, table B)

  Not advertised to any peer

  Refresh Epoch 1

  722109

    11.11.11.11 (metric 10) (via default) from 1.1.1.1 (1.1.1.1)

      Origin incomplete, metric 10880, localpref 100, valid, internal, best

      Extended Community: RT:200:200 0x8800:32768:0 0x8801:1:288 

        0x8802:65281:2560 0x8803:1:1500 0x8806:0:134744072

      mpls labels in/out nolabel/24006

      rx pathid: 0, tx pathid: 0x0

 

R2#show mpls forwarding-table 11.11.11.11

Local      Outgoing   Prefix           Bytes Label   Outgoing   Next Hop    

Label      Label      or Tunnel Id     Switched      interface              

23         20         11.11.11.11/32   298413        Gi1.23     10.2.3.3  

 

R3 (ASBR router in AS123)

----------------

R3#show bgp vpnv4 unicast rd 2:2 8.8.8.8

BGP routing table entry for 2:2:8.8.8.8/32, version 70

Paths: (1 available, best #1, no table)

  Not advertised to any peer

  Refresh Epoch 2

  11.1213

    11.11.11.11 (via default) from 1.1.1.1 (1.1.1.1)

      Origin incomplete, metric 10880, localpref 100, valid, internal, best

      Extended Community: RT:200:200 0x8800:32768:0 0x8801:1:288 

        0x8802:65281:2560 0x8803:1:1500 0x8806:0:134744072

      mpls labels in/out nolabel/24006

      rx pathid: 0, tx pathid: 0x0

 

R3#show mpls forwarding-table 11.11.11.11

Local      Outgoing   Prefix           Bytes Label   Outgoing   Next Hop    

Label      Label      or Tunnel Id     Switched      interface              

20         24002      11.11.11.11/32   301300        Gi1.313    10.3.13.13  

 

XR3

--------------

RP/0/0/CPU0:XR3# show bgp vpnv4 unicast rd 2:2 8.8.8.8

BGP routing table entry for 8.8.8.8/32, Route Distinguisher: 2:2

Versions:

  Process           bRIB/RIB  SendTblVer

  Speaker                  9           9

Last Modified: Apr 20 22:01:34.169 for 00:00:26

Paths: (1 available, best #1)

  Not advertised to any peer

  Path #1: Received by speaker 0

  Not advertised to any peer

  Local

    11.11.11.11 (metric 20) from 11.11.11.11 (11.11.11.11)

      Received Label 24006

      Origin incomplete, metric 10880, localpref 100, valid, internal, best, group-best, import-candidate, not-in-vrf

      Received Path ID 0, Local Path ID 1, version 9

      Extended community: COST:128:128:10880 EIGRP route-info:0x8000:0 EIGRP AD:1:288 EIGRP RHB:255:1:2560 EIGRP LM:0x0:1:1500 EIGRP VRR:0x0:8.8.8.8 RT:200:200 

 

RP/0/0/CPU0:XR3#show mpls forwarding prefix 11.11.11.11/32

Wed Apr 20 22:03:03.174 UTC

Local  Outgoing    Prefix             Outgoing     Next Hop        Bytes       

Label  Label       or ID              Interface                    Switched    

------ ----------- ------------------ ------------ --------------- ------------

24002  24002       11.11.11.11/32     Gi0/0/0/0.1213 10.12.13.12     367568  

 

RP/0/0/CPU0:XR3# show bgp vpnv4 unicast rd 2:2 10.10.10.10

Wed Apr 20 22:03:36.242 UTC

BGP routing table entry for 10.10.10.10/32, Route Distinguisher: 2:2

Versions:

  Process           bRIB/RIB  SendTblVer

  Speaker                 11          11

Last Modified: Apr 20 22:01:34.169 for 00:02:02

Paths: (1 available, best #1)

  Not advertised to any peer

  Path #1: Received by speaker 0

  Not advertised to any peer

  123

    1.1.1.1 (metric 20) from 11.11.11.11 (11.11.11.11)

      Received Label 25

      Origin incomplete, localpref 100, valid, internal, best, group-best, import-candidate, not-in-vrf

      Received Path ID 0, Local Path ID 1, version 11

      Extended community: EIGRP route-info:0x8000:0 EIGRP AD:1:288 EIGRP RHB:255:1:2560 EIGRP LM:0xff:1:1500 EIGRP VRR:0x0:10.10.10.10 RT:200:200 

 

 

RP/0/0/CPU0:XR3#show mpls forwarding prefix 1.1.1.1/32

Wed Apr 20 22:09:58.436 UTC

Local  Outgoing    Prefix             Outgoing     Next Hop        Bytes       

Label  Label       or ID              Interface                    Switched    

------ ----------- ------------------ ------------ --------------- ------------

24005  16          1.1.1.1/32         Gi0/0/0/0.313 10.3.13.3       220686  

 

XR1

-------------

RP/0/0/CPU0:XR1#show bgp vpnv4 uni rd 2:2 8.8.8.8 

Wed Apr 20 22:11:22.625 UTC

BGP routing table entry for 8.8.8.8/32, Route Distinguisher: 2:2

Versions:

  Process           bRIB/RIB  SendTblVer

  Speaker                 15          15

    Local Label: 24006

Last Modified: Apr 19 22:54:32.448 for 23:16:50

Paths: (1 available, best #1)

  Advertised to peers (in unique update groups):

    1.1.1.1         13.13.13.13     

  Path #1: Received by speaker 0

  Advertised to peers (in unique update groups):

    1.1.1.1         13.13.13.13     

  Local

    10.8.11.8 from 0.0.0.0 (11.11.11.11)

      Origin incomplete, metric 10880, localpref 100, weight 32768, valid, redistributed, best, group-best, import-candidate

      Received Path ID 0, Local Path ID 1, version 15

      Extended community: COST:128:128:10880 EIGRP route-info:0x8000:0 EIGRP AD:1:288 EIGRP RHB:255:1:2560 EIGRP LM:0x0:1:1500 EIGRP VRR:0x0:8.8.8.8 RT:200:200 

 

RP/0/0/CPU0:XR1#show bgp vpnv4 unicast rd 2:2 10.10.10.10

Wed Apr 20 22:13:25.126 UTC

BGP routing table entry for 10.10.10.10/32, Route Distinguisher: 2:2

Versions:

  Process           bRIB/RIB  SendTblVer

  Speaker                161         161

    Local Label: 24014

Last Modified: Apr 20 21:02:17.448 for 01:11:07

Paths: (1 available, best #1)

  Advertised to peers (in unique update groups):

    13.13.13.13     

  Path #1: Received by speaker 0

  Advertised to peers (in unique update groups):

    13.13.13.13     

  123

    1.1.1.1 (metric 20) from 1.1.1.1 (1.1.1.1)

      Received Label 25

      Origin incomplete, localpref 100, valid, external, best, group-best, import-candidate, imported

      Received Path ID 0, Local Path ID 1, version 161

      Extended community: EIGRP route-info:0x8000:0 EIGRP AD:1:288 EIGRP RHB:255:1:2560 EIGRP LM:0xff:1:1500 EIGRP VRR:0x0:10.10.10.10 RT:200:200 

      Source VRF: B, Source Route Distinguisher: 2:2

 

RP/0/0/CPU0:XR1#show mpls forwarding prefix 1.1.1.1/32

Wed Apr 20 22:15:27.658 UTC

Local  Outgoing    Prefix             Outgoing     Next Hop        Bytes       

Label  Label       or ID              Interface                    Switched    

------ ----------- ------------------ ------------ --------------- ------------

24003  Pop         1.1.1.1/32         Gi0/0/0/0.1112 10.11.12.12     7589     -========> this is the issue

Lab-1 Ticket 5 diagram

$
0
0

Hello guys,

It seems INE has pasted the wrong copy of the diagram clip for the ticket 5. It should be from IPv6 diagram. The one from IPv4 is confusing due to RIP etc or I am reading it wrong?

Thanks

 

Route selection for particular type of traffic

$
0
0

Let's think i want some type of traffic (ACL, DSCP or something else) to flow with alternative route (not the best route).

How can achieve this with:

- static;

- OSPF;

- EIGRP;

?

 

 

Pen and Paper in v5 Lab Exam

$
0
0

Hi Everyone,

 

I read somewhere that the exam is now provided in electronically and there are two screens and possibly pen and paper to draw out things is not available for the candidate? For some specific tasks I do like to draw out parts of the topology  on a piece of paper just to visualize. If pen and paper is not available at all I will have to get used to doing it without.

 

Anyone got any non NDA breaking info on that?

 

Best regards,

Tim

Viewing all 10672 articles
Browse latest View live