From: Abdul Waheed Ghaffar (a_w_ghaffar@hotmail.com)
Date: Wed Aug 04 2004 - 06:54:20 GMT-3
Please paste R3 & SW1 configuration.
>From: "Sam Joseph" <samjoseph747@hotmail.com>
>Reply-To: "Sam Joseph" <samjoseph747@hotmail.com>
>To: ronniepaul@hotmail.com, ccie2be@nyc.rr.com, ccielab@groupstudy.com,
>tig@wiltecinc.com
>CC: bmcgahan@internetworkexpert.com
>Subject: Re: IRB question from IE lab 3 task 1.9
>Date: Tue, 03 Aug 2004 23:31:59 -0400
>
>Will dot1q tunnel be of any help here?.
>
>Sam.
>
>
>>From: "Ronnie Higginbotham" <ronniepaul@hotmail.com>
>>Reply-To: "Ronnie Higginbotham" <ronniepaul@hotmail.com>
>>To: "ccie2be" <ccie2be@nyc.rr.com>, "Group Study"
>><ccielab@groupstudy.com>, "Tom Martin" <tig@wiltecinc.com>
>>CC: "Brian McGahan" <bmcgahan@internetworkexpert.com>
>>Subject: Re: IRB question from IE lab 3 task 1.9
>>Date: Tue, 3 Aug 2004 22:04:05 -0500
>>
>>Trying changing the cat ports connected to R1 and R3 to access mode.
>>
>>
>>----- Original Message -----
>>From: "ccie2be" <ccie2be@nyc.rr.com>
>>To: "Group Study" <ccielab@groupstudy.com>; "Tom Martin"
>><tig@wiltecinc.com>
>>Cc: "Brian McGahan" <bmcgahan@internetworkexpert.com>
>>Sent: Tuesday, August 03, 2004 9:33 PM
>>Subject: Re: IRB question from IE lab 3 task 1.9
>>
>>
>> > Hey Tom,
>> >
>> > I'm starting to get the feeling that the problem is some stupid little
>>thing
>> > I'll be very embarrassed by once this is figured out. But, so far, I
>>can't
>> > figure out what's causing this problem. Here's some output from R6:
>> >
>> > Rack1R6#p 136.7.136.1
>> >
>> > Type escape sequence to abort.
>> > Sending 5, 100-byte ICMP Echos to 136.7.136.1, timeout is 2 seconds:
>> > .!!!!
>> > Success rate is 80 percent (4/5), round-trip min/avg/max = 1/2/4 ms
>> > Rack1R6#p 136.7.136.3
>> >
>> > Type escape sequence to abort.
>> > Sending 5, 100-byte ICMP Echos to 136.7.136.3, timeout is 2 seconds:
>> > .!!!!
>> > Success rate is 80 percent (4/5), round-trip min/avg/max = 1/2/4 ms
>> > Rack1R6#sh ip arp
>> > Protocol Address Age (min) Hardware Addr Type Interface
>> > Internet 136.7.136.6 - 0050.d15f.7420 ARPA BVI1
>> > Internet 136.7.136.3 0 0002.fd3d.e081 ARPA BVI1
>> > Internet 136.7.136.1 0 0002.b988.bde0 ARPA BVI1
>> > Internet 204.12.7.6 - 0050.d15f.7420 ARPA
>> > FastEthernet1/0/0.6
>> > 3
>> > Rack1R6#sh bridge 1 ver
>> >
>> > Total of 300 station blocks, 298 free
>> > Codes: P - permanent, S - self
>> >
>> > BG Hash Address Action Interface VC Age RX count
>>TX
>> > count
>> >
>> > 1 5D/0 0002.b988.bde0 forward Fa1/0/0.16 - 0 5
>> > 4
>> >
>> > 1 61/0 0002.fd3d.e081 forward Fa1/0/0.36 - 0 5
>> > 4
>> >
>> >
>> > Flood ports (BG 1) RX count TX count
>> > FastEthernet1/0/0.16 0 0
>> > FastEthernet1/0/0.36 0 0
>> >
>> > Rack1R6#sh span 1 sum
>> > Root bridge for Bridge group 1 is this bridge.
>> > PortFast BPDU Guard is disabled
>> >
>> > Name Blocking Listening Learning Forwarding STP Active
>> > -------------------- -------- --------- -------- ---------- ----------
>> > Bridge group 1 0 0 0 2 2
>> > Rack1R6#sh ip int fa1/0/0
>> > FastEthernet1/0/0 is up, line protocol is up
>> > Internet protocol processing disabled
>> > Rack1R6#sh ip int fa1/0/0.16
>> > FastEthernet1/0/0.16 is up, line protocol is up
>> > Internet protocol processing disabled
>> > Rack1R6#sh ip bvi1
>> > ^
>> > % Invalid input detected at '^' marker.
>> >
>> > Rack1R6#sh ip int bvi1
>> > BVI1 is up, line protocol is up
>> > Internet address is 136.7.136.6/24
>> > Broadcast address is 255.255.255.255
>> > Address determined by setup command
>> > MTU is 1500 bytes
>> > Helper address is not set
>> > Directed broadcast forwarding is disabled
>> > Outgoing access list is not set
>> > Inbound access list is not set
>> > Proxy ARP is enabled
>> > Local Proxy ARP is disabled
>> > Security level is default
>> > Split horizon is enabled
>> >
>> > *************************************
>> >
>> > As you can see, R6 can ping both R1 and R3.
>> >
>> > Some things I noticed while comparing outputs. In your show ip arp,
>>the
>> > interface referenced was fa0/0 while my output referenced BVI 1. Do
>>you
>> > know why that is? Does it matter in this scenario?
>> >
>> > Here's some config file snippets & output from some show commands from
>>sw1:
>> >
>> > Rack1SW1#sh int tru
>> >
>> > Port Mode Encapsulation Status Native vlan
>> > Fa0/6 on 802.1q trunking 1
>> > Fa0/13 on 802.1q trunking 36
>> > Fa0/14 on 802.1q trunking 36
>> > Fa0/15 on 802.1q trunking 36
>> >
>> > Port Vlans allowed on trunk
>> > Fa0/6 16,36,63,1002-1005
>> > Fa0/13 1-4094
>> > Fa0/14 1-4094
>> > Fa0/15 1-4094
>> >
>> > ----------------------------------------
>> > interface FastEthernet0/6 <------------- Connected to R6
>> > switchport trunk encapsulation dot1q
>> > switchport trunk allowed vlan 16,36,63,1002-1005
>> > switchport mode trunk
>> > no ip address
>> > duplex half
>> > speed 100
>> > --------------------------
>> >
>> > interface FastEthernet0/1 <------------- Connected to
>>R1
>> > switchport access vlan 16
>> > switchport mode dynamic desirable
>> > no ip address
>> > -----------------------------------
>> >
>> > There's a trunk between sw1 and sw2 and sw2 is physically connected to
>>R3:
>> >
>> > interface FastEthernet0/3
>> > switchport access vlan 36
>> > switchport mode dynamic desirable
>> > no ip address
>> > _____________________________________________________________
>> >
>> > Here's R6's complete config file. As you can see, I didn't change
>>anything
>> > funky.
>> >
>> > Current configuration : 1683 bytes
>> > !
>> > version 12.2
>> > service timestamps debug datetime msec
>> > service timestamps log datetime msec
>> > no service password-encryption
>> > no service single-slot-reload-enable
>> > !
>> > hostname Rack1R6
>> > !
>> > enable password cisco
>> > !
>> > ip subnet-zero
>> > !
>> > !
>> > ip tcp synwait-time 5
>> > no ip domain lookup
>> > !
>> > ip cef
>> > ip audit notify log
>> > ip audit po max-events 100
>> > !
>> > voice call carrier capacity active
>> > !
>> > bridge irb
>> > !
>> > !
>> > interface Loopback0
>> > ip address 150.7.6.6 255.255.255.0
>> > !
>> > interface ATM0/0/0
>> > ip address 54.7.3.6 255.255.255.0
>> > !
>> > !
>> > interface FastEthernet1/0/0
>> > no ip address
>> > half-duplex
>> > !
>> > interface FastEthernet1/0/0.16
>> > encapsulation dot1Q 16
>> > bridge-group 1
>> > !
>> > interface FastEthernet1/0/0.36
>> > encapsulation dot1Q 36
>> > bridge-group 1
>> > !
>> > interface FastEthernet1/0/0.63
>> > encapsulation dot1Q 63
>> > ip address 204.12.7.6 255.255.255.0
>> > !
>> > interface BVI1
>> > ip address 136.7.136.6 255.255.255.0
>> > !
>> > ip classless
>> > no ip http server
>> > !
>> > !
>> > bridge 1 protocol ieee
>> > bridge 1 route ip
>> > call rsvp-sync
>> > !
>> > line con 0
>> > exec-timeout 0 0
>> > privilege level 15
>> > logging synchronous
>> > line aux 0
>> > exec-timeout 0 0
>> > privilege level 15
>> > line vty 0 4
>> > password cisco
>> > login
>> > !
>> > !
>> > end
>> >
>> > Rack1R6#
>> > ---------------------------------------
>> >
>> > But, still R1 can't ping R3 & vice versa:
>> >
>> > Rack1R3#p 136.7.136.1
>> >
>> > Type escape sequence to abort.
>> > Sending 5, 100-byte ICMP Echos to 136.7.136.1, timeout is 2 seconds:
>> > .....
>> > Success rate is 0 percent (0/5)
>> >
>> > Rack1R1#p 136.7.136.3
>> >
>> > Type escape sequence to abort.
>> > Sending 5, 100-byte ICMP Echos to 136.7.136.3, timeout is 2 seconds:
>> > .....
>> > Success rate is 0 percent (0/5)
>> >
>> > -----------------------------------
>> >
>> > So, I don't see any differences between what you have and what I have
>>except
>> > that your config works and mine doesn't.
>> >
>> > Maybe your eyes or mind work better than mine, but I'm going nuts with
>>this.
>> >
>> > Any ideas?
>> >
>> > Tim
>> >
>> >
>> >
>> >
>> >
>> > ----- Original Message -----
>> > From: "Tom Martin" <tig@wiltecinc.com>
>> > To: "ccie2be" <ccie2be@nyc.rr.com>; "Group Study"
>><ccielab@groupstudy.com>
>> > Sent: Tuesday, August 03, 2004 9:33 PM
>> > Subject: RE: IRB question
>> >
>> >
>> > Tim,
>> >
>> > I've just recreated your scenario without problem. Here is the config
>>from
>> > my lab:
>> >
>> > R6
>> > --
>> > bridge irb
>> > interface Ethernet1/0
>> > no ip address
>> > half-duplex
>> > !
>> > interface Ethernet1/0.16
>> > encapsulation dot1Q 16
>> > bridge-group 1
>> > !
>> > interface Ethernet1/0.36
>> > encapsulation dot1Q 36
>> > bridge-group 1
>> > !
>> > interface BVI1
>> > ip address 136.7.136.6 255.255.255.0
>> > !
>> > bridge 1 protocol ieee
>> > bridge 1 route ip
>> >
>> > R1
>> > --
>> > interface FastEthernet0
>> > ip address 136.7.136.1 255.255.255.0
>> > speed auto
>> > !
>> >
>> > R3
>> > --
>> > interface FastEthernet0/0
>> > ip address 136.7.136.3 255.255.255.0
>> > duplex auto
>> > speed auto
>> > !
>> >
>> > Other output to help troubleshoot your setup:
>> > ---------------------------------------------
>> > r3#ping 136.7.136.1
>> > Type escape sequence to abort.
>> > Sending 5, 100-byte ICMP Echos to 136.7.136.1, timeout is 2 seconds:
>> > !!!!!
>> > Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms
>> >
>> > r3#show ip arp
>> > Protocol Address Age (min) Hardware Addr Type Interface
>> > Internet 136.7.136.6 0 0006.2821.3971 ARPA
>>FastEthernet0/0
>> > Internet 136.7.136.3 - 0004.ddb8.ecc0 ARPA
>>FastEthernet0/0
>> > Internet 136.7.136.1 0 0009.4391.0740 ARPA
>>FastEthernet0/0
>> >
>> > r6#show bridge 1 verbose
>> > Total of 300 station blocks, 298 free
>> > Codes: P - permanent, S - self
>> >
>> > BG Hash Address Action Interface VC Age RX count
>>TX
>> > count
>> > 1 2C/0 0004.ddb8.ecc0 forward Et1/0.36 - 1 63
>> > 53
>> > 1 47/0 0009.4391.0740 forward Et1/0.16 - 1 88
>> > 80
>> >
>> > Flood ports (BG 1) RX count TX count
>> > Ethernet1/0.16 1 3
>> > Ethernet1/0.36 3 1
>> >
>> > r6#show spanning-tree 1 summary
>> > Root bridge for Bridge group 1 is this bridge.
>> > PortFast BPDU Guard is disabled
>> >
>> > Name Blocking Listening Learning Forwarding STP Active
>> > -------------------- -------- --------- -------- ---------- ----------
>> > Bridge group 1 0 0 0 2 2
>> >
>> >
>> > - What does your ARP cache look like, is the ARP process completing
>> > successfully?
>> > - Is it possible that you have "no bridge 1 bridge ip" configured?
>> >
>> > -- Tom
>> >
>> > -----Original Message-----
>> > From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of
>> > ccie2be
>> > Sent: Tuesday, August 03, 2004 2:20 PM
>> > To: Group Study
>> > Subject: IRB question
>> >
>> >
>> > Hi guys,
>> >
>> > Here's the scenario.
>> >
>> > R1 <--> R6 <-->R3
>> >
>> > R6 has a BVI 1 configured and R6's fa1/0/0 is trunking. Here's the
>>config:
>> >
>> > bridge irb
>> >
>> > interface FastEthernet1/0/0
>> > no ip address
>> > half-duplex
>> > !
>> > interface FastEthernet1/0/0.16
>> > encapsulation dot1Q 16
>> > bridge-group 1
>> > !
>> > interface FastEthernet1/0/0.36
>> > encapsulation dot1Q 36
>> > bridge-group 1
>> >
>> >
>> > interface BVI1
>> > ip address 136.7.136.6 255.255.255.0
>> >
>> > bridge 1 protocol ieee
>> > bridge 1 route ip
>> >
>> > R6 can ping both R1 and R3, but R1 can't ping R3. There are no acl's
>>or
>>any
>> > other obvious (at least to me) reasons for this. I assume R1 should be
>>able
>> > to
>> > ping R3. Can someone help me out?
>> >
>> > Thanks in advanced, Tim
>> >
>> > _______________________________________________________________________
>> > Please help support GroupStudy by purchasing your study materials from:
>> > http://shop.groupstudy.com
>> >
>> > Subscription information may be found at:
>> > http://www.groupstudy.com/list/CCIELab.html
>> >
>> > _______________________________________________________________________
>> > Please help support GroupStudy by purchasing your study materials from:
>> > http://shop.groupstudy.com
>> >
>> > Subscription information may be found at:
>> > http://www.groupstudy.com/list/CCIELab.html
>>
>>_______________________________________________________________________
>>Please help support GroupStudy by purchasing your study materials from:
>>http://shop.groupstudy.com
>>
>>Subscription information may be found at:
>>http://www.groupstudy.com/list/CCIELab.html
>
>_________________________________________________________________
>Overwhelmed by debt? Find out how to Dig Yourself Out of Debt from MSN
>Money. http://special.msn.com/money/0407debt.armx
>
>_______________________________________________________________________
>Please help support GroupStudy by purchasing your study materials from:
>http://shop.groupstudy.com
>
>Subscription information may be found at:
>http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Fri Sep 03 2004 - 07:02:32 GMT-3