RE: IPX internal network + filtering NLSP routes

From: Treptow, Georg (gxtrept@xxxxxxxxx)
Date: Sun Jun 09 2002 - 22:27:17 GMT-3


   
Accoding to Val and Caslow - NLSP filtering is anything but reliable. You
should not even use it - this is the same for interfaces that have NLSP
enabled on them with SAP, IPX access-lists.

Georg

-----Original Message-----
From: Anthony Pace [mailto:anthonypace@fastmail.fm]
Sent: Sunday, June 09, 2002 8:07 PM
To: Anthony Pace; fradendon@comcast.net
Cc: ccielab@groupstudy.com
Subject: IPX internal network + filtering NLSP routes

I posted this onto the wrong thread:

When will a Netware Server or Cisco router use their internal address
of 0000.0000.0001 and when will they use their MAC address as the node?
Or are the possibilities predictable?

Also : I have only been able to filer NLSP routes during
redistribution. Not comming in/out of a router.Which I think is per
design. I used ACL 12xx. I cannot, however, deny some routes and permit
 "all". (-1). That just seems to toggle them as internal NLSP or
External NLSP. The only way I can make the filter work is to permit all
the routes I want redistributed and then deny all.

I ask this here becaue this was one of the very few IPX threads I have
seen here.

Anthony Pace

>
>
> On Sun, 09 Jun 2002 20:23:18 -0400, "Denise Donohue"
> <fradendon@comcast.net> said:
> > The router IDs are just a number, they don't have to be a route.
> >
> > Also, re your IPX question, Brian's answer is what I thought should
> > work,
> > but couldn't get it to yesterday for some reason. (Hate it when that
> > happens!) My answer was what did work, but I didn't like it, because of
> > the
> > reasons you mentioned. I just tried Brian's way, and it works today,
> > so it
> > would be better to use that.
> >
> > Live and learn! :-)
> >
> > -----Original Message-----
> > From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of
> > Anthony Pace
> > Sent: Sunday, June 09, 2002 6:59 PM
> > To: Lab Candidate; Edward Monk; 'Bauer, Rick'; 'Michael Breen'
> > Cc: ccielab@groupstudy.com
> > Subject: RE: OSPF neighbor problem
> >
> >
> > This might be a dumb question, but does the 3.x.x.x and 5.x.x.x need to
> > be circulated by a routing protocole to give the virtual link IP
> > connectivity; or is that unneeded because the routers learn this via
> > the adjacency formed accross the Etehrnet network?
> >
> > Anthony Pace
> >
> >
> > On Wed, 5 Jun 2002 10:48:18 -0700 (PDT), "Lab Candidate"
> > <labccie@yahoo.com> said:
> > > Thanks all for all the response and good advices. this is what i've
> > > done:
> > > 1. the routers have been rebooted before i posted for help
> > > 2. they are up for over 10 hours now, and still doing the same thing.
> > > 3. they can ping each other over the e0/0 and f0/0.
> > > 4. they are both using ios 12.2(7a), see below show version
> > > 5. both intf's are plugged in Cat3548's f0/4 and f0/7 and vlan'ed in
> > > vlan8:
> > > #show cdp d
> > > r3 Fas 0/4 169 R 2612
Eth
> > > 0/0
> > > r5 Fas 0/7 124 R 2621
Fas
> > > 0/0
> > > #show vlan
> > > 8 VLAN0008 active Fa0/4, Fa0/6, Fa0/7,
> > > Fa0/9
> > >
> > > 6. i don't think it's hardware problem, and routers, intf's, cat3548
> > > have been working fine.
> > > 7. as to Guy Lupi's advice, I used half-duplex before and changed it
to
> > > full, to no joy.
> > >
> > > now what? ;-)
> > >
> > > r3#sh ver
> > > Cisco Internetwork Operating System Software
> > > IOS (tm) C2600 Software (C2600-JK9O3S-M), Version 12.2(7a), RELEASE
> > > SOFTWARE (fc
> > > 2)
> > > Copyright (c) 1986-2002 by cisco Systems, Inc.
> > > Compiled Thu 21-Feb-02 03:48 by pwade
> > > Image text-base: 0x80008088, data-base: 0x8153F5D0
> > >
> > > ROM: System Bootstrap, Version 11.3(2)XA4, RELEASE SOFTWARE (fc1)
> > >
> > > r3 uptime is 10 hours, 14 minutes
> > > System returned to ROM by reload
> > > System image file is "flash:c2600-jk9o3s-mz.122-7a.bin"
> > >
> > > cisco 2612 (MPC860) processor (revision 0x300) with 61440K/4096K bytes
> > > of memory
> > > .
> > > Processor board ID JAD05500CQ6 (2044823788)
> > > M860 processor: part number 0, mask 49
> > > Bridging software.
> > > X.25 software, Version 3.0.0.
> > > SuperLAT software (copyright 1990 by Meridian Technology Corp).
> > > TN3270 Emulation software.
> > > Basic Rate ISDN software, Version 1.1.
> > > 1 Ethernet/IEEE 802.3 interface(s)
> > > 1 Token Ring/IEEE 802.5 interface(s)
> > > 2 Serial(sync/async) network interface(s)
> > > 1 ISDN Basic Rate interface(s)
> > > 32K bytes of non-volatile configuration memory.
> > > 16384K bytes of processor board System flash (Read/Write)
> > >
> > > Configuration register is 0x2102
> > >
> > > r3#
> > > 10:15:32: %OSPF-5-ADJCHG: Process 9, Nbr 5.5.5.5 on Ethernet0/0 from
> > > EXSTART to
> > > DOWN, Neighbor Down: Too many retransmitions
> > > r3#
> > > 10:16:32: %OSPF-5-ADJCHG: Process 9, Nbr 5.5.5.5 on Ethernet0/0 from
> > > DOWN to DOW
> > > N, Neighbor Down: Ignore timer expired
> > > r3#
> > > 10:17:52: %OSPF-5-ADJCHG: Process 9, Nbr 5.5.5.5 on Ethernet0/0 from
> > > EXSTART to
> > > DOWN, Neighbor Down: Too many retransmitions
> > > r3#
> > > 10:18:52: %OSPF-5-ADJCHG: Process 9, Nbr 5.5.5.5 on Ethernet0/0 from
> > > DOWN to DOW
> > > N, Neighbor Down: Ignore timer expired
> > > r3#
> > >
> > > r5#sh ver
> > > Cisco Internetwork Operating System Software
> > > IOS (tm) C2600 Software (C2600-JK9O3S-M), Version 12.2(7a), RELEASE
> > > SOFTWARE (fc
> > > 2)
> > > Copyright (c) 1986-2002 by cisco Systems, Inc.
> > > Compiled Thu 21-Feb-02 03:48 by pwade
> > > Image text-base: 0x80008088, data-base: 0x8153F5D0
> > >
> > > ROM: System Bootstrap, Version 12.1(3r)T2, RELEASE SOFTWARE (fc1)
> > >
> > > r5 uptime is 10 hours, 15 minutes
> > > System returned to ROM by reload
> > > System image file is "flash:c2600-jk9o3s-mz.122-7a.bin"
> > >
> > > cisco 2621 (MPC860) processor (revision 0x600) with 60416K/5120K bytes
> > > of memory
> > > .
> > > Processor board ID JAD06020LLA (3147233752)
> > > M860 processor: part number 0, mask 49
> > > Bridging software.
> > > X.25 software, Version 3.0.0.
> > > SuperLAT software (copyright 1990 by Meridian Technology Corp).
> > > TN3270 Emulation software.
> > > 2 FastEthernet/IEEE 802.3 interface(s)
> > > 2 Serial(sync/async) network interface(s)
> > > --More--
> > > *Mar 1 10:16:16.221: %OSPF-5-ADJCHG: Process 9, Nbr 3.3.3.3 on
> > > FastEthernet0/0
> > > from EXSTART to DOWN, Neighbor Down: Too many retransmitions
> > > 2 Voice FXS interface(s)
> > > 32K bytes of non-volatile configuration memory.
> > > 16384K bytes of processor board System flash (Read/Write)
> > >
> > > Configuration register is 0x2102
> > >
> > > r5#
> > > *Mar 1 10:17:16.221: %OSPF-5-ADJCHG: Process 9, Nbr 3.3.3.3 on
> > > FastEthernet0/0
> > > from DOWN to DOWN, Neighbor Down: Ignore timer expired
> > > r5#
> > > *Mar 1 10:18:36.221: %OSPF-5-ADJCHG: Process 9, Nbr 3.3.3.3 on
> > > FastEthernet0/0
> > > from EXSTART to DOWN, Neighbor Down: Too many retransmitions
> > > r5#
> > > *Mar 1 10:19:36.221: %OSPF-5-ADJCHG: Process 9, Nbr 3.3.3.3 on
> > > FastEthernet0/0
> > > from DOWN to DOWN, Neighbor Down: Ignore timer expired
> > > r5#
> > > *Mar 1 10:20:56.221: %OSPF-5-ADJCHG: Process 9, Nbr 3.3.3.3 on
> > > FastEthernet0/0
> > > from EXSTART to DOWN, Neighbor Down: Too many retransmitions
> > > r5#
> > >
> > > --- Edward Monk <emonk@att.net> wrote:
> > > > I had a similar issue between my 2620 and a 2501 a few months back.
What
> > > > I found was that everything was correct. How hard is establishing a
> > > > neighbor relationship in a broadcast type media anyway? I had no bad
> > > > hardware and all configurations were correct. I even tried setting
my
> > > > OSPF to non-broadcast type and putting in neighbor commands. As I
recall
> > > > it wouldn't work either.
> > > >
> > > > What I found was it was the IOS version in my 2501. It was a 12.0
> > > > version but I can't recall which one. I have since changed my IOS
> > > > versions all to 12.1.x and have never seen a repeat of the problem.
> > > >
> > > > Hopefully this helps.
> > > >
> > > > -----Original Message-----
> > > > From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf
Of
> > > > Bauer, Rick
> > > > Sent: Wednesday, June 05, 2002 6:22 AM
> > > > To: 'Michael Breen'; Lab Candidate
> > > > Cc: ccielab@groupstudy.com
> > > > Subject: RE: OSPF neighbor problem
> > > >
> > > > So....Router-id would be the tie breaker. It is something else.
> > > >
> > > > -----Original Message-----
> > > > From: Michael Breen [mailto:mbreen@cisco.com]
> > > > Sent: Wednesday, June 05, 2002 8:26 AM
> > > > To: Lab Candidate
> > > > Cc: ccielab@groupstudy.com
> > > > Subject: RE: OSPF neighbor problem
> > > >
> > > >
> > > > Both routers have a priority of 1......
> > > >
> > > >
> > > > --MB
> > > >
> > > > -----Original Message-----
> > > > From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf
Of
> > > > Lab Candidate
> > > > Sent: Wednesday, June 05, 2002 2:24 AM
> > > > To: li jian hua
> > > > Cc: ccielab@groupstudy.com
> > > > Subject: Re: OSPF neighbor problem
> > > >
> > > >
> > > > Jason, thanks for your advice. I have checked all the items, and
even
> > > > applied the ip ospf
> > > > mtu-ignore command, but sitll not working. here's the output for two
> > > > adjacent interfaces:
> > > >
> > > > r3#sh ip os int e0/0
> > > > Ethernet0/0 is up, line protocol is up
> > > > Internet Address 170.10.54.1/24, Area 2
> > > > Process ID 9, Router ID 3.3.3.3, Network Type BROADCAST, Cost: 10
> > > > Transmit Delay is 1 sec, State BDR, Priority 1
> > > > Designated Router (ID) 5.5.5.5, Interface address 170.10.54.2
> > > > Backup Designated router (ID) 3.3.3.3, Interface address
170.10.54.1
> > > > Flush timer for old DR LSA due in 00:02:36
> > > > Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit
5
> > > > Hello due in 00:00:02
> > > > Index 2/3, flood queue length 0
> > > > Next 0x0(0)/0x0(0)
> > > > Last flood scan length is 0, maximum is 0
> > > > Last flood scan time is 0 msec, maximum is 0 msec
> > > > Neighbor Count is 1, Adjacent neighbor count is 0
> > > > Suppress hello for 0 neighbor(s)
> > > > r3#
> > > >
> > > > r5#sh ip os int f0/0
> > > > FastEthernet0/0 is up, line protocol is up
> > > > Internet Address 170.10.54.2/24, Area 2
> > > > Process ID 9, Router ID 5.5.5.5, Network Type BROADCAST, Cost: 1
> > > > Transmit Delay is 1 sec, State DR, Priority 1
> > > > Designated Router (ID) 5.5.5.5, Interface address 170.10.54.2
> > > > Backup Designated router (ID) 3.3.3.3, Interface address
170.10.54.1
> > > > Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit
5
> > > > Hello due in 00:00:02
> > > > Index 1/3, flood queue length 0
> > > > Next 0x0(0)/0x0(0)
> > > > Last flood scan length is 0, maximum is 0
> > > > Last flood scan time is 0 msec, maximum is 0 msec
> > > > Neighbor Count is 1, Adjacent neighbor count is 0
> > > > Suppress hello for 0 neighbor(s)
> > > > r5#
> > > >
> > > > --- li jian hua <jasonli@cisco.com> wrote:
> > > > > Please check mtu,network mask,network type,interface timer
> > > > > parameter,authentication-type etc between two ethernet
interface.They
> > > > > should be the same.
> > > > > Cisco has a book named by Troubleshooting IP Routing Protocols
(CCIE
> > > > > Professional Development Series).
> > > > >
> > > >
http://www.ciscopress.com/catalog/product.asp?product_id={17F54ECB-821D-
> > > > 488F
> > > >
-B906-E022F53FE5FA}&session_id={6BDB75D0-3B65-4699-8BB5-D2940D662D86}
> > > > > please read it.
> > > > > rgds
> > > > > jason
> > > > > At 00:44 2002-6-5 -0700, Lab Candidate wrote:
> > > > > >two routers r3 and r5 won't form ospf neighbors over ethernet
intf's.
> > > > > >it's stuck in exstart state. could anyone please help with any
> > > > advice?
> > > > > >
> > > > > >
> > > > > >r3-e0/0----------f0/0-r5
> > > > > >
> > > > > >
> > > > > >r3:
> > > > > >
> > > > > >interface Ethernet0/0
> > > > > > ip address 170.10.54.1 255.255.255.0
> > > > > > full-duplex
> > > > > >!
> > > > > >router ospf 9
> > > > > > router-id 3.3.3.3
> > > > > > log-adjacency-changes
> > > > > > area 2 virtual-link 5.5.5.5
> > > > > > network 170.10.50.0 0.0.0.255 area 2
> > > > > > network 170.10.54.0 0.0.0.255 area 2
> > > > > > network 170.10.80.0 0.0.0.255 area 0
> > > > > > neighbor 170.10.80.4
> > > > > > neighbor 170.10.80.2
> > > > > >!
> > > > > >r3#sh ip os n
> > > > > >
> > > > > >Neighbor ID Pri State Dead Time Address
> > > > Interface
> > > > > >170.10.30.1 0 FULL/DROTHER 00:01:38 170.10.80.4
> > > > Serial0/1
> > > > > >198.133.219.25 0 FULL/DROTHER 00:01:45 170.10.80.2
> > > > Serial0/1
> > > > > >5.5.5.5 1 EXSTART/DR 00:00:37 170.10.54.2
> > > > Ethernet0/0
> > > > > >r3#
> > > > > >
> > > > > >
> > > > > >r5:
> > > > > >
> > > > > >interface FastEthernet0/0
> > > > > > ip address 170.10.54.2 255.255.255.0
> > > > > > duplex auto
> > > > > > speed auto
> > > > > >
> > > > > >router ospf 9
> > > > > > router-id 5.5.5.5
> > > > > > log-adjacency-changes
> > > > > > area 2 virtual-link 3.3.3.3
> > > > > > network 170.10.40.0 0.0.0.255 area 3
> > > > > > network 170.10.54.0 0.0.0.255 area 2
> > > > > >!
> > > > > >
> > > > > >r5#sh ip os n
> > > > > >
> > > > > >Neighbor ID Pri State Dead Time Address
> > > > Interface
> > > > > >3.3.3.3 1 EXSTART/BDR 00:00:35 170.10.54.1
> > > > > >FastEthernet0/0
> > > > > >r5#
> > > > > >
> > > > > >
> > > > > >==============debug=================
> > > > > >
> > > > > >r3#
> > > > > >
> > > > > >00:22:38: OSPF: Send DBD to 5.5.5.5 on Ethernet0/0 seq 0xDE7 opt
0x42
> > > > flag
> > > > > >0x7 l
> > > > > >en 32
> > > > > >00:22:38: OSPF: Retransmitting DBD to 5.5.5.5 on Ethernet0/0 [4]
> > > > > >00:22:38: OSPF: rcv. v:2 t:1 l:48 rid:5.5.5.5
> > > > > > aid:0.0.0.2 chk:2C70 aut:0 auk: from Ethernet0/0
> > > > > >00:22:38: OSPF: Rcv hello from 5.5.5.5 area 2 from Ethernet0/0
> > > > 170.10.54.2
> > > > > >00:22:38: OSPF: End of hello processing
> > > > > >r3#
> > > > > >00:22:39: OSPF: Input packet while OSPF disabled on Serial0/0
> > > > > >r3#
> > > > > >00:22:43: OSPF: Send DBD to 5.5.5.5 on Ethernet0/0 seq 0xDE7 opt
0x42
> > > > flag
> > > > > >0x7 l
> > > > > >en 32
> > > > > >00:22:43: OSPF: Retransmitting DBD to 5.5.5.5 on Ethernet0/0 [5]
> > > > > >r3#
> > > > > >00:22:44: OSPF: Input packet while OSPF disabled on Serial0/0
> > > > > >r3#
> > > > > >00:22:48: OSPF: Send DBD to 5.5.5.5 on Ethernet0/0 seq 0xDE7 opt
0x42
> > > > flag
> > > > > >0x7 l
> > > > > >en 32
> > > > > >00:22:48: OSPF: Retransmitting DBD to 5.5.5.5 on Ethernet0/0 [6]
> > > > > >00:22:48: OSPF: rcv. v:2 t:1 l:48 rid:5.5.5.5
> > > > > > aid:0.0.0.2 chk:2C70 aut:0 auk: from Ethernet0/0
> > > > > >00:22:48: OSPF: Rcv hello from 5.5.5.5 area 2 from Ethernet0/0
> > > > 170.10.54.2
> > > > > >00:22:48: OSPF: End of hello processing
> > > > > >r3#
> > > > > >00:22:49: OSPF: Input packet while OSPF disabled on Serial0/0
> > > > > >r3#
> > > > > >00:22:53: OSPF: Send DBD to 5.5.5.5 on Ethernet0/0 seq 0xDE7 opt
0x42
> > > > flag
> > > > > >0x7 l
> > > >
> > > === message truncated ===
> > >
> > >



This archive was generated by hypermail 2.1.4 : Tue Jul 02 2002 - 08:12:30 GMT-3