Question:
Short version:Cisco 3925E Has anyone ever seen the installation of a WIC card in an 1841 render the router inoperable? (No SYS PWR led or fan?)
Long version:
Our company recently decided to upgrade our existing T1 connections to remote offices by upgrading to dual T1 links using PPP multilink.
I had tested a setup in my office with a pair of 1841s, and got it working with a pair of VWIC2-2MFT-T1/E1 cards. Sweet!
The routers currently have a single 1DSU-T1 V2 WIC card. Our plan is to install the new VWIC2 cards alongside the existing T1 serial card so I can configure everything from the home office, then cut over everything in one day by simply moving cables over to the new VWIC2 card.
We sent out the new VWIC2 card to our most remote office and sent instructions for how to remove the blank faceplate and install the second WIC module. The next day our man onsite powers down the router, installs the card, and powers up the router, but no connection is made. I drive out there and see that the router is completely dead. No 'SYS PWR' led, or fan. Even after removing the offending WIC and all WIC cards. Hmmm. Let's just set this aside for now.
I brought a back up 1841 configured for the site, so I plug it in and get the network back up. I'm able to ping the central office, and get a nagios confirmation that our site is back up. Yay!
Now the whole point of this exercise was to install the VWIC2 card for the upgrade, so I power down the router, install the VWIC2 card, and flip the power switch back on. NOTHING! No 'SYS PWR' led or fan. Just like the first router that died. I didn't think to bring a second known good router with me, so I get to do the whole drive again. The next day I bring one of the routers I tested in my office with the VWIC2 already installed, and it works perfectly.
The day after I swapped out the power supply in the broken routers with a known good power supply and both routers were still completely dead. I imagine it must be something on the motherboard that is fried.
Has anyone ever seen anything like this before?
Answer:
I wouldn't put it into another router See if you can get a different one. This isn't a normal occurence... Cisco3925E
For more info, http://site4807539.edit.build.angelfire.lycos.com/index/
2013年8月30日星期五
2013年8月29日星期四
EIGRP issue using VRF on 3750
Question:
I am in the WS-C3750X-24P-S Lab playing with VRF, got it to work when the switchport itself is a no switchport with IP address, however if I stick the Wan connecting interface into a vlan EIGRP wont create a Neighborship though I can ping it under that VRF.
interface FastEthernet1/0/1
description WAN interconnection
switchport access vlan 5
router eigrp 90
address-family ipv4 vrf NHSS
network 10.202.128.0 0.0.31.255
passive-interface default
no passive-interface FastEthernet1/0/1
autonomous-system 90
exit-address-family
interface Vlan5
ip vrf forwarding NHSS
ip address 10.202.128.200 255.255.255.0
switch-x#ping vrf NHSS 10.202.128.12
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.202.128.12, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/8 ms
switch-x#
switch-x#sh ip eigrp vrf NHSS ne
EIGRP-IPv4 Neighbors for AS(90) VRF(NHSS)
switch-x#
So does anyone know why I cant neighbour 10.202.128.12 now that f1/0/1 is a switchport and in a vlan?
Config:-
!
!
interface GigabitEthernet0/25
description LARGE_GLOBAL_CARRIER_CIRCUIT_NAME_HERE
no switchport
ip address 172.21.67.18 255.255.255.252 secondary
ip address PUBLIC_IP 255.255.255.252
load-interval 30
end
!
!
router ospf 1
router-id 172.21.67.1
log-adjacency-changes
passive-interface default
no passive-interface Vlan200
network xxx.xxx.xxx.xxx 0.0.0.255 area 0
network xxx.xxx.xxx.xxx 0.0.0.255 area 0
network xxx.xxx.xxx.xxx 0.0.0.255 area 0
network 172.21.67.16 0.0.0.3 area 0
!
Any ideas?
Many thanks in advance,
Answer:
This starts to look like an IOS bug. Can you perhaps try to totally remove the entire EIGRP configuration and configure it completely anew? Avoid configuring the passive interfaces at this point. In addition, can you assign the "global" EIGRP process a different AS number than the ASN 90 for the NHSS VRF EIGRP?
I assume that interface Vlan5 reports as "up, line protocol up" - a silly question considering the fact that you can ping the other party but nevertheless - let's check it. WS-C3750V2-24PS-S
For more info, http://lilirouter.angelfire.com/
I am in the WS-C3750X-24P-S Lab playing with VRF, got it to work when the switchport itself is a no switchport with IP address, however if I stick the Wan connecting interface into a vlan EIGRP wont create a Neighborship though I can ping it under that VRF.
interface FastEthernet1/0/1
description WAN interconnection
switchport access vlan 5
router eigrp 90
address-family ipv4 vrf NHSS
network 10.202.128.0 0.0.31.255
passive-interface default
no passive-interface FastEthernet1/0/1
autonomous-system 90
exit-address-family
interface Vlan5
ip vrf forwarding NHSS
ip address 10.202.128.200 255.255.255.0
switch-x#ping vrf NHSS 10.202.128.12
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.202.128.12, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/8 ms
switch-x#
switch-x#sh ip eigrp vrf NHSS ne
EIGRP-IPv4 Neighbors for AS(90) VRF(NHSS)
switch-x#
So does anyone know why I cant neighbour 10.202.128.12 now that f1/0/1 is a switchport and in a vlan?
Config:-
!
!
interface GigabitEthernet0/25
description LARGE_GLOBAL_CARRIER_CIRCUIT_NAME_HERE
no switchport
ip address 172.21.67.18 255.255.255.252 secondary
ip address PUBLIC_IP 255.255.255.252
load-interval 30
end
!
!
router ospf 1
router-id 172.21.67.1
log-adjacency-changes
passive-interface default
no passive-interface Vlan200
network xxx.xxx.xxx.xxx 0.0.0.255 area 0
network xxx.xxx.xxx.xxx 0.0.0.255 area 0
network xxx.xxx.xxx.xxx 0.0.0.255 area 0
network 172.21.67.16 0.0.0.3 area 0
!
Any ideas?
Many thanks in advance,
Answer:
This starts to look like an IOS bug. Can you perhaps try to totally remove the entire EIGRP configuration and configure it completely anew? Avoid configuring the passive interfaces at this point. In addition, can you assign the "global" EIGRP process a different AS number than the ASN 90 for the NHSS VRF EIGRP?
I assume that interface Vlan5 reports as "up, line protocol up" - a silly question considering the fact that you can ping the other party but nevertheless - let's check it. WS-C3750V2-24PS-S
For more info, http://lilirouter.angelfire.com/
2013年8月28日星期三
Inconsistent Address & Mask P2P T1
Question:
I have a P2P T1 between WS-C3560V2-24PS-S locations, each router have two ethernet interfaces, one interface is configured for communitcations between locations for our phone system. What I am trying to achive here is to use the second interface on each router for data traffic. I have for the phones interface configured with IP's 10.x.x.x with static routes set which works without issue, now when I configure the second interface with IP's 172.x.x.x and attempt to create a static route from one side to the other i receive the following error "inconsistent address & mask" I have even attempted to change the subnet mask to another value without success.
Answer:
This looks like a typo in your ip route command. What exact network address and netmask are WS-C3560V2-48PS-S Price you using?
I have a P2P T1 between WS-C3560V2-24PS-S locations, each router have two ethernet interfaces, one interface is configured for communitcations between locations for our phone system. What I am trying to achive here is to use the second interface on each router for data traffic. I have for the phones interface configured with IP's 10.x.x.x with static routes set which works without issue, now when I configure the second interface with IP's 172.x.x.x and attempt to create a static route from one side to the other i receive the following error "inconsistent address & mask" I have even attempted to change the subnet mask to another value without success.
Answer:
This looks like a typo in your ip route command. What exact network address and netmask are WS-C3560V2-48PS-S Price you using?
2013年8月15日星期四
c3560 switch is not allowing telnet or SSH
Question:
I have got my WS-C3750X-24S-S ccna voice lab configured and is up and running, my switch is configured with 2 differents Vlans (Data & Voice) and the fa 0/1 is configured as trunk port connecting to the CME router. I can telnet or ssh to all the devices on the network but only the switch in not accepting the request the only message I am getting is "request timeout".
Please could someone help me with the correct set up procedure.
Answer:
Are you connecting your computer directly to this switch and trying to telnet? The problem I believe is that all of your switchports (at least from what I see) are configured for vlan 10. There isn't a vlan 10 interface to route between vlan 10 and vlan 1.
Try this:
On one port that you'll connect your PC to, make that an access port to vlan 1. Then change your address on your pc to 192.168.1.10 255.255.255.0 Gateway 192.168.1.7.
Then see if you can ping and telnet into the switch. If so, and you're wanting your pc to be on vlan 10, you'll need to create a L3 svi for it:
int vlan 10
ip address x.x.x.x 255.255.255.0
Then you should be able to route between everything. WS-C3750X-48P-L Price
For more info, please refer to http://www.pereza.info/es/blog/named-extended-access-list-7200
I have got my WS-C3750X-24S-S ccna voice lab configured and is up and running, my switch is configured with 2 differents Vlans (Data & Voice) and the fa 0/1 is configured as trunk port connecting to the CME router. I can telnet or ssh to all the devices on the network but only the switch in not accepting the request the only message I am getting is "request timeout".
Please could someone help me with the correct set up procedure.
Answer:
Are you connecting your computer directly to this switch and trying to telnet? The problem I believe is that all of your switchports (at least from what I see) are configured for vlan 10. There isn't a vlan 10 interface to route between vlan 10 and vlan 1.
Try this:
On one port that you'll connect your PC to, make that an access port to vlan 1. Then change your address on your pc to 192.168.1.10 255.255.255.0 Gateway 192.168.1.7.
Then see if you can ping and telnet into the switch. If so, and you're wanting your pc to be on vlan 10, you'll need to create a L3 svi for it:
int vlan 10
ip address x.x.x.x 255.255.255.0
Then you should be able to route between everything. WS-C3750X-48P-L Price
For more info, please refer to http://www.pereza.info/es/blog/named-extended-access-list-7200
2013年8月14日星期三
Cisco 2911 + HWIC-3G-HSPA
Question:
I'm trying to C2911-VSEC configure this module first
time in my life, and ran into an issue.
When I do, 'show cellular x/x/x security'
it keeps reporting my SIM status as removed. I've reseated it few times now,
and now i'm starting to think that micro SIM may not be supported by this
module.
Does anyone know about this? It's hard to
find it on google, spent last few hour researching it. I could only find this
from Cisco document:
SIM card socket; compliant with ISO-7816-2
(SIM mechanical)
And some sample configuration would be much
appreciated.
Thanks in advance,
Answer:
Are you using a proper micro-sim adapter ? For futher information, please refer to http://www.3anetwork.com/cisco-c2901-vsec/k9-price_p249.html
BGP Load Balancing Scenario
Question:
I am looking WS-C3560X-48PF-L for some guidance with the
following. I have a feeling I am missing something or that there is a better
way
I have the following setup, eBGP to the
same ISP, iBGP inside the AS between the routers and 6509s
I would like to do the following, lets say
I have 1.1.1 .0.... 1.1.6.0
These are advertised by my 6509s through
BGP. I would like to balance the traffic across both of the links, so
inbound/outbound traffic would be
I was thinking I should be able to do this
using route maps
on the 3925
access-list 1 permit 1.1.1 .0
access-list 1 permit 1.1.3 .0
access-list 1 permit 1.1.5 .0
access-list 2 permit 1.1.2 .0
access-list 2 permit 1.1.4 .0
access-list 2 permit 1.1.6 .0
route-map subnet permit 10
match ip address 1
set as-path prepend 65401 65401
route-map subnet permit 20
match ip address 2
router bgp x.x.x.x
neighbor <core1> route-map subnet in
neighbor <core2> route-map subnet in
3825
access-list 1 permit 1.1.1 .0
access-list 1 permit 1.1.3 .0
access-list 1 permit 1.1.5 .0
access-list 2 permit 1.1.2 .0
access-list 2 permit 1.1.4 .0
access-list 2 permit 1.1.6 .0
route-map subnet permit 10
match ip address 2
set as-path prepend 65401 65401
route-map subnet permit 20
match ip address 1
router bgp x.x.x.x
neighbor <core1> route-map subnet in
neighbor <core2> route-map subnet in
Any help would be much appreciated
Answer:
if you are doing eBGP to the same AS ISP
you can use MED outbound to influence how traffic is routed to your network and
so setting a lower or higher metric is enough.
In any case the route-map should be applied
outbound to the eBGP neighbor and not inbound to the iBGP sessions.
This is the usual practice.
route-map toISP-NA permit 10
match ip address 1
set metric 1000
route-map toISP-NA permit 20
match ip address 2
set metric 500
router bgp x.x.x.x
neigh <e-bgp-neigh> route-map
toISP-NA out
on second border router
route-map toISP-NB permit 10
match ip address 1
set metric 500
route-map toISP-NB permit 20
match ip address 2
set metric 1000
router bgp x.x.x.x
neigh <e-bgp-neigh> route-map
toISP-NB out
For futher information, please refer to http://www.3anetwork.com/cisco-ws-c3560x-48pf-s-price_p61.html
2013年8月11日星期日
BGP maximum paths
Question:
I am hoping one WS-C3560V2-24TS-S of you can help me with a
problem I am having relating to BGP and load balancing. I have a network configured as
per the diagram with maximum-paths ibgp 2
configured on each of my core switches all routes are learned via R3 and R4 and
have
no manipulation from our routers. All routers and switches are connected and
established via IBGP.
The problem is that I should have two
routes to each destination in the core switches yet I only have a single route,
and from
what I can see this is because our telco is
injecting a metric into our AS, however, I only see this metric on the core
switches
not on the routers and I would have thought
I would see it on the router?
Show IP BGP and show IP routes
R3>sh ip bgp 29.12.0.0
BGP routing table entry for 29.12.0.0/21,
version 859691
Paths: (4 available, best #3, table
Default-IP-Routing-Table)
Advertised to peer-groups:
peer1
2856 2856 2856 34140, (aggregated by 34140 29.12.7.68)
Origin IGP, localpref 100, valid, external, atomic-aggregate
Community: 34140:222
2856 34140, (aggregated by 34140 29.12.7.68), (received-only)
Origin IGP, localpref 100, valid, external, atomic-aggregate
Community: 34140:222
2856 34140, (aggregated by 34140 29.12.7.67), (received & used)
Origin IGP, localpref 100, valid, external, atomic-aggregate, best
Community: 34140:111
2856 34140, (aggregated by 34140 29.12.7.67), (received & used)
161.163.164.249 (metric 156416) from 161.163.164.249 (161.163.164.249)
Origin IGP, metric 0, localpref 100, valid, internal, atomic-aggregate
Community: 34140:111
Core-1>sh ip bgp 29.12.0.0
BGP routing table entry for 29.12.0.0/21,
version 396742
Paths: (2 available, best #1, table
Default-IP-Routing-Table)
Multipath: iBGP
Advertised to update-groups:
1
2856 34140, (aggregated by 34140 29.12.7.67), (received & used)
161.163.164.247 (metric 153856) from 161.163.164.247 (161.163.164.247)
Origin IGP, metric 0, localpref 100, valid, internal, atomic-aggregate,
best
Community: 2237399151
2856 34140, (aggregated by 34140 29.12.7.67), (received & used)
161.163.164.249 (metric 154112) from 161.163.164.249 (161.163.164.249)
Origin IGP, metric 0, localpref 100, valid, internal, atomic-aggregate
Community: 2237399151
Core-1>sh ip ro 29.12.0.0
Routing entry for 29.12.0.0/21
Known via "bgp 65356", distance 200, metric 0
Tag
2856, type internal
Last update from 161.163.164.247 7w0d ago
Routing Descriptor Blocks:
*
161.163.164.247, from 161.163.164.247, 7w0d ago
Route metric is 0, traffic share count is 1
AS Hops 2
Route tag 2856
======================
Core 2
R4#sh ip bgp 29.12.0.0
BGP routing table entry for 29.12.0.0/21,
version 422102
Paths: (4 available, best #4, table
Default-IP-Routing-Table)
Advertised to peer-groups:
peer1
2856 2856 2856 34140, (aggregated by 34140 29.12.7.68)
Origin IGP, localpref 100, valid, external, atomic-aggregate
Community: 34140:222
2856 34140, (aggregated by 34140 29.12.7.68), (received-only)
Origin IGP, localpref 100, valid, external, atomic-aggregate
Community: 34140:222
2856 34140, (aggregated by 34140 29.12.7.67), (received & used)
161.163.164.247 (metric 156416) from 161.163.164.247 (161.163.164.247)
Origin IGP, metric 0, localpref 100, valid, internal, atomic-aggregate
Community: 34140:111
2856 34140, (aggregated by 34140 29.12.7.67), (received & used)
Origin IGP, localpref 100, valid, external, atomic-aggregate, best
Community: 34140:111
Core-2>sh ip bgp 29.12.0.0
BGP routing table entry for 29.12.0.0/21,
version 180821
Paths: (2 available, best #2, table
Default-IP-Routing-Table)
Multipath: iBGP
Advertised to update-groups:
2
2856 34140, (aggregated by 34140 29.12.7.67), (received & used)
161.163.164.247 (metric 154112) from 161.163.164.247 (161.163.164.247)
Origin IGP, metric 0, localpref 100, valid, internal, atomic-aggregate
Community: 2237399151
2856 34140, (aggregated by 34140 29.12.7.67), (received & used)
161.163.164.249 (metric 153856) from 161.163.164.249 (161.163.164.249)
Origin IGP, metric 0, localpref 100, valid, internal, atomic-aggregate,
best
Community: 2237399151
Core-2>sh ip ro 29.12.0.0
Routing entry for 29.12.0.0/21
Known via "bgp 65356", distance 200, metric 0
Tag
2856, type internal
Last update from 161.163.164.249 7w0d ago
Routing Descriptor Blocks:
*
161.163.164.249, from 161.163.164.249, 7w0d ago
Route metric is 0, traffic share count is 1
AS Hops 2
Route tag 2856
Answer:
2856 34140, (aggregated by 34140
29.12.7.67), (received & used)
161.163.164.249 (metric 153856) from
161.163.164.249 (161.163.164.249)
Origin IGP, metric 0, localpref 100, valid,
internal, atomic-aggregate, best
I believe MED=0 here, metric 153856 is WS-C3560V2-48TS-S Price the
IGP metric to the BGP next-hop router?
订阅：
博文 (Atom)