RE: Tunnel Config

From: Alexander Belov (abelov@technoserv.ru)
Date: Mon Sep 24 2007 - 11:48:55 ART


1. Lets try to consider each other as polite engineers :-), 'cause
even getting a number doesn't make the one even a pro, You are just passing
the exam - the one possible scenario that was on lab.

And GS is for people sharing their ideas. even if they consist of some
critics with no real relations to the question itself like Shiran did - we
are free to speak here our ideas, but sometime :-) we don't have enough time
to explain. just to give a hint?

2. Wasn't that really obvious what ip addresses are for on tunnel? :-)
Loopback IPs are giving You a little bit of flexibility as you can reach
them instead of fixed interfaces (i.e. physical if) addresses. And p-2-p IPs
on int tunnel may help You understand whether Your tunnelis up/down.

WBR,

Alex

 

 

From: shiran guez [mailto:shiranp3@gmail.com]
Sent: Monday, September 24, 2007 6:32 PM
To: Andris Zarins
Cc: Alexander Belov; Tandou Mohamed; ccielab@groupstudy.com
Subject: Re: Tunnel Config

 

no offence taken but what you just now did is give an explanation, and this
mean that behind this 2 cent advice there is a explanation and not just "do
..." and it will work there is a reason and my guess is that as a
professional you need to know the reason and not just the list of 2 cent
advice.

 

again I all for a quick solution but with understanding that this quick
solution is not from something you saw some where, and you are doing like a
dummy from this day on without knowing why!

 

 

On 9/24/07, Andris Zarins <a.zarins@lattelecom.lv> wrote:

Shiran, I think you are talking bullshit, my friend, no offence. There
are a lot of 'just my 2 cent' advices, and here goes another one.

Either loopbacks, or physical/logical addreses will work just fine.
Final conclusion depends of either you have just one link/route traffic
can flow, or there are several (like backup links and so on) and if
there are some additional issues you have to deal with. One thing (proly
- the most important) you must keep in mind - both tunnel endpoint
addresses (tunnel destination and source) address must be reachable. So
if you arent using directly connected interface addresses, you will need
some static/dynamic routing to make far end address reachable, so I'd
advice to avoid it by using directly connected interface addresses on
both ends.

If you have some backup links, and you want the tunnel to be UP at all
times - interface addresses wont work, as interface might be DOWN at
some moment, in that case - use loopbacks and make sure they are
reachable via primary and backup link at all times. If you dont have to
save address space, or dont have some technical reasons why you have to
use 'unnumbered' on Tunnel interface, dont use 'unnumbered', as it will
ease troubleshooting in case you need it.

Hope it helps,
Andris
#17473

-----Original Message-----
From: nobody@groupstudy.com [mailto: nobody@groupstudy.com
<mailto:nobody@groupstudy.com> ] On Behalf Of
shiran guez
Sent: Monday, September 24, 2007 4:08 PM
To: Alexander Belov
Cc: Tandou Mohamed; ccielab@groupstudy.com
Subject: Re: Tunnel Config

guys although every opinion count here I think that to give this "2 cent
advice" is the worse we can do, if we want to consider our self Experts
then
we need to act like it and understand that there are very few 2 cent
advice
and mostly are focused on tricks like making the status prompt on the
IOS
disappear.

but as far as technology there are no "2 cent advice" it is either you
understand or you do not, and if you do not understand then your "2 cent
advice" will work may be 90% if you lucky but in case you get a question
that need your full understand it will not work and you will not know
why.

I hope that more will agree with me on that view

On 9/24/07, Alexander Belov <abelov@technoserv.ru> wrote:
>
> Hi mate!
>
> I'd say - Loopback IPs for tunnel source/dest and /30 network on
tunnel
> (ip
> address 192.168.x.1/30 vs ip address 192.168.x.2/30)...
>
> My 2 cents
>
> -----Original Message-----
> From: nobody@groupstudy.com <mailto:nobody@groupstudy.com>
[mailto:nobody@groupstudy.com] On Behalf
Of
> Tandou Mohamed
> Sent: Monday, September 24, 2007 4:12 PM
> To: ccielab@groupstudy.com <mailto:ccielab@groupstudy.com>
> Subject: Tunnel Config
>
> GS,
> When configuring a tunnel interface, what is the best option to use
for
> tunnel source and tunnel destination if no direction is given? i
always
> use
> the loopback interface for tunnel source and destination and also for
> tunnel
> ip address using ip unnumbered. Some of the vendor workbooks sometimes
use
> loopback or physical ip addresses. Can someone explain if i am doing
> something wrong ?
>
> Thanks,
>
> TM
>
>
> ---------------------------------
> Moody friends. Drama queens. Your life? Nope! - their life, your
story.
> Play Sims Stories at Yahoo! Games.
>
>



This archive was generated by hypermail 2.1.4 : Sat Oct 06 2007 - 12:01:15 ART