From: Ronnie Higginbotham (ronniepaul@hotmail.com)
Date: Wed Aug 04 2004 - 00:04:05 GMT-3
Trying changing the cat ports connected to R1 and R3 to access mode.
----- Original Message -----
From: "ccie2be" <ccie2be@nyc.rr.com>
To: "Group Study" <ccielab@groupstudy.com>; "Tom Martin" <tig@wiltecinc.com>
Cc: "Brian McGahan" <bmcgahan@internetworkexpert.com>
Sent: Tuesday, August 03, 2004 9:33 PM
Subject: Re: IRB question from IE lab 3 task 1.9
> Hey Tom,
>
> I'm starting to get the feeling that the problem is some stupid little
thing
> I'll be very embarrassed by once this is figured out. But, so far, I
can't
> figure out what's causing this problem. Here's some output from R6:
>
> Rack1R6#p 136.7.136.1
>
> Type escape sequence to abort.
> Sending 5, 100-byte ICMP Echos to 136.7.136.1, timeout is 2 seconds:
> .!!!!
> Success rate is 80 percent (4/5), round-trip min/avg/max = 1/2/4 ms
> Rack1R6#p 136.7.136.3
>
> Type escape sequence to abort.
> Sending 5, 100-byte ICMP Echos to 136.7.136.3, timeout is 2 seconds:
> .!!!!
> Success rate is 80 percent (4/5), round-trip min/avg/max = 1/2/4 ms
> Rack1R6#sh ip arp
> Protocol Address Age (min) Hardware Addr Type Interface
> Internet 136.7.136.6 - 0050.d15f.7420 ARPA BVI1
> Internet 136.7.136.3 0 0002.fd3d.e081 ARPA BVI1
> Internet 136.7.136.1 0 0002.b988.bde0 ARPA BVI1
> Internet 204.12.7.6 - 0050.d15f.7420 ARPA
> FastEthernet1/0/0.6
> 3
> Rack1R6#sh bridge 1 ver
>
> Total of 300 station blocks, 298 free
> Codes: P - permanent, S - self
>
> BG Hash Address Action Interface VC Age RX count TX
> count
>
> 1 5D/0 0002.b988.bde0 forward Fa1/0/0.16 - 0 5
> 4
>
> 1 61/0 0002.fd3d.e081 forward Fa1/0/0.36 - 0 5
> 4
>
>
> Flood ports (BG 1) RX count TX count
> FastEthernet1/0/0.16 0 0
> FastEthernet1/0/0.36 0 0
>
> Rack1R6#sh span 1 sum
> Root bridge for Bridge group 1 is this bridge.
> PortFast BPDU Guard is disabled
>
> Name Blocking Listening Learning Forwarding STP Active
> -------------------- -------- --------- -------- ---------- ----------
> Bridge group 1 0 0 0 2 2
> Rack1R6#sh ip int fa1/0/0
> FastEthernet1/0/0 is up, line protocol is up
> Internet protocol processing disabled
> Rack1R6#sh ip int fa1/0/0.16
> FastEthernet1/0/0.16 is up, line protocol is up
> Internet protocol processing disabled
> Rack1R6#sh ip bvi1
> ^
> % Invalid input detected at '^' marker.
>
> Rack1R6#sh ip int bvi1
> BVI1 is up, line protocol is up
> Internet address is 136.7.136.6/24
> Broadcast address is 255.255.255.255
> Address determined by setup command
> MTU is 1500 bytes
> Helper address is not set
> Directed broadcast forwarding is disabled
> Outgoing access list is not set
> Inbound access list is not set
> Proxy ARP is enabled
> Local Proxy ARP is disabled
> Security level is default
> Split horizon is enabled
>
> *************************************
>
> As you can see, R6 can ping both R1 and R3.
>
> Some things I noticed while comparing outputs. In your show ip arp, the
> interface referenced was fa0/0 while my output referenced BVI 1. Do you
> know why that is? Does it matter in this scenario?
>
> Here's some config file snippets & output from some show commands from
sw1:
>
> Rack1SW1#sh int tru
>
> Port Mode Encapsulation Status Native vlan
> Fa0/6 on 802.1q trunking 1
> Fa0/13 on 802.1q trunking 36
> Fa0/14 on 802.1q trunking 36
> Fa0/15 on 802.1q trunking 36
>
> Port Vlans allowed on trunk
> Fa0/6 16,36,63,1002-1005
> Fa0/13 1-4094
> Fa0/14 1-4094
> Fa0/15 1-4094
>
> ----------------------------------------
> interface FastEthernet0/6 <------------- Connected to R6
> switchport trunk encapsulation dot1q
> switchport trunk allowed vlan 16,36,63,1002-1005
> switchport mode trunk
> no ip address
> duplex half
> speed 100
> --------------------------
>
> interface FastEthernet0/1 <------------- Connected to R1
> switchport access vlan 16
> switchport mode dynamic desirable
> no ip address
> -----------------------------------
>
> There's a trunk between sw1 and sw2 and sw2 is physically connected to R3:
>
> interface FastEthernet0/3
> switchport access vlan 36
> switchport mode dynamic desirable
> no ip address
> _____________________________________________________________
>
> Here's R6's complete config file. As you can see, I didn't change
anything
> funky.
>
> Current configuration : 1683 bytes
> !
> version 12.2
> service timestamps debug datetime msec
> service timestamps log datetime msec
> no service password-encryption
> no service single-slot-reload-enable
> !
> hostname Rack1R6
> !
> enable password cisco
> !
> ip subnet-zero
> !
> !
> ip tcp synwait-time 5
> no ip domain lookup
> !
> ip cef
> ip audit notify log
> ip audit po max-events 100
> !
> voice call carrier capacity active
> !
> bridge irb
> !
> !
> interface Loopback0
> ip address 150.7.6.6 255.255.255.0
> !
> interface ATM0/0/0
> ip address 54.7.3.6 255.255.255.0
> !
> !
> interface FastEthernet1/0/0
> no ip address
> half-duplex
> !
> interface FastEthernet1/0/0.16
> encapsulation dot1Q 16
> bridge-group 1
> !
> interface FastEthernet1/0/0.36
> encapsulation dot1Q 36
> bridge-group 1
> !
> interface FastEthernet1/0/0.63
> encapsulation dot1Q 63
> ip address 204.12.7.6 255.255.255.0
> !
> interface BVI1
> ip address 136.7.136.6 255.255.255.0
> !
> ip classless
> no ip http server
> !
> !
> bridge 1 protocol ieee
> bridge 1 route ip
> call rsvp-sync
> !
> line con 0
> exec-timeout 0 0
> privilege level 15
> logging synchronous
> line aux 0
> exec-timeout 0 0
> privilege level 15
> line vty 0 4
> password cisco
> login
> !
> !
> end
>
> Rack1R6#
> ---------------------------------------
>
> But, still R1 can't ping R3 & vice versa:
>
> Rack1R3#p 136.7.136.1
>
> Type escape sequence to abort.
> Sending 5, 100-byte ICMP Echos to 136.7.136.1, timeout is 2 seconds:
> .....
> Success rate is 0 percent (0/5)
>
> Rack1R1#p 136.7.136.3
>
> Type escape sequence to abort.
> Sending 5, 100-byte ICMP Echos to 136.7.136.3, timeout is 2 seconds:
> .....
> Success rate is 0 percent (0/5)
>
> -----------------------------------
>
> So, I don't see any differences between what you have and what I have
except
> that your config works and mine doesn't.
>
> Maybe your eyes or mind work better than mine, but I'm going nuts with
this.
>
> Any ideas?
>
> Tim
>
>
>
>
>
> ----- Original Message -----
> From: "Tom Martin" <tig@wiltecinc.com>
> To: "ccie2be" <ccie2be@nyc.rr.com>; "Group Study" <ccielab@groupstudy.com>
> Sent: Tuesday, August 03, 2004 9:33 PM
> Subject: RE: IRB question
>
>
> Tim,
>
> I've just recreated your scenario without problem. Here is the config from
> my lab:
>
> R6
> --
> bridge irb
> interface Ethernet1/0
> no ip address
> half-duplex
> !
> interface Ethernet1/0.16
> encapsulation dot1Q 16
> bridge-group 1
> !
> interface Ethernet1/0.36
> encapsulation dot1Q 36
> bridge-group 1
> !
> interface BVI1
> ip address 136.7.136.6 255.255.255.0
> !
> bridge 1 protocol ieee
> bridge 1 route ip
>
> R1
> --
> interface FastEthernet0
> ip address 136.7.136.1 255.255.255.0
> speed auto
> !
>
> R3
> --
> interface FastEthernet0/0
> ip address 136.7.136.3 255.255.255.0
> duplex auto
> speed auto
> !
>
> Other output to help troubleshoot your setup:
> ---------------------------------------------
> r3#ping 136.7.136.1
> Type escape sequence to abort.
> Sending 5, 100-byte ICMP Echos to 136.7.136.1, timeout is 2 seconds:
> !!!!!
> Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms
>
> r3#show ip arp
> Protocol Address Age (min) Hardware Addr Type Interface
> Internet 136.7.136.6 0 0006.2821.3971 ARPA
FastEthernet0/0
> Internet 136.7.136.3 - 0004.ddb8.ecc0 ARPA
FastEthernet0/0
> Internet 136.7.136.1 0 0009.4391.0740 ARPA
FastEthernet0/0
>
> r6#show bridge 1 verbose
> Total of 300 station blocks, 298 free
> Codes: P - permanent, S - self
>
> BG Hash Address Action Interface VC Age RX count TX
> count
> 1 2C/0 0004.ddb8.ecc0 forward Et1/0.36 - 1 63
> 53
> 1 47/0 0009.4391.0740 forward Et1/0.16 - 1 88
> 80
>
> Flood ports (BG 1) RX count TX count
> Ethernet1/0.16 1 3
> Ethernet1/0.36 3 1
>
> r6#show spanning-tree 1 summary
> Root bridge for Bridge group 1 is this bridge.
> PortFast BPDU Guard is disabled
>
> Name Blocking Listening Learning Forwarding STP Active
> -------------------- -------- --------- -------- ---------- ----------
> Bridge group 1 0 0 0 2 2
>
>
> - What does your ARP cache look like, is the ARP process completing
> successfully?
> - Is it possible that you have "no bridge 1 bridge ip" configured?
>
> -- Tom
>
> -----Original Message-----
> From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of
> ccie2be
> Sent: Tuesday, August 03, 2004 2:20 PM
> To: Group Study
> Subject: IRB question
>
>
> Hi guys,
>
> Here's the scenario.
>
> R1 <--> R6 <-->R3
>
> R6 has a BVI 1 configured and R6's fa1/0/0 is trunking. Here's the
config:
>
> bridge irb
>
> interface FastEthernet1/0/0
> no ip address
> half-duplex
> !
> interface FastEthernet1/0/0.16
> encapsulation dot1Q 16
> bridge-group 1
> !
> interface FastEthernet1/0/0.36
> encapsulation dot1Q 36
> bridge-group 1
>
>
> interface BVI1
> ip address 136.7.136.6 255.255.255.0
>
> bridge 1 protocol ieee
> bridge 1 route ip
>
> R6 can ping both R1 and R3, but R1 can't ping R3. There are no acl's or
any
> other obvious (at least to me) reasons for this. I assume R1 should be
able
> to
> ping R3. Can someone help me out?
>
> Thanks in advanced, Tim
>
> _______________________________________________________________________
> Please help support GroupStudy by purchasing your study materials from:
> http://shop.groupstudy.com
>
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
> _______________________________________________________________________
> Please help support GroupStudy by purchasing your study materials from:
> http://shop.groupstudy.com
>
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Fri Sep 03 2004 - 07:02:32 GMT-3