I don't know. Maybe I am missing something here. If I remember SHAM links
correctly, you should be referencing the actual ip address of that
FastEthernet that is in the VRF as the source. I never used the actual
physical interface....interesting. I always used a loopback. I assumed it
had to be a /32. Looks like I have something to lab up to brush up my memory
memory.:-)
Thanks!!!
Paul
-- Paul Negron CCIE# 14856 CCSI# 22752 Senior Technical Instructor > From: marc edwards <renorider_at_gmail.com> > Reply-To: marc edwards <renorider_at_gmail.com> > Date: Sun, 7 Aug 2011 20:16:47 -0700 > To: Cisco certification <ccielab_at_groupstudy.com> > Subject: Damn Sham! ***P1*** Help Please > > Hello experts! I hope you are having (had) a great weekend. > > I am getting down to the final hour so working on the MPLS stuff. Glad to > see that my MPLS L3 VPN is working and I understand the concepts well > (Thanks Keith Barker & Scott Morris Cisco Live! Presentation). I can enable > this and feeling very comfortable with all the components. I am onto > figuring out this sham link thing. I understand the theory ( I think). So > after getting my L3 VPN up and running through my PE's to CE's R1 and R6, I > introduced the back door on the Fa 0/0 interface. Unfortunately something is > wrong with my config because I can't seem to get the CE's to prefer the MPLS > cloud any more. See my topo and I will initially provide sh run of my PE's. > Any thoughts? This is my last session before test day Tuesday. I am kicked > off the rack at 3AM PST UTC -8. No rush or anything but I need help fast > Please! > > R1 (fa0/0)--->R2 (PE)--> {MPLS CLOUD} <-- R5<-- (fa 0/0) R6 > (fa0/1) > (fa0/1) > | > | > > |-------------------------------------------VLAN3----------------------------- > ----| > > > R2 > > ! > hostname R2 > ! > boot-start-marker > boot-end-marker > ! > no logging console > ! > no aaa new-model > dot11 syslog > ip cef > ! > ! > ! > ! > ip vrf acme > rd 100:100 > route-target export 10.2.2.2:20 > route-target import 10.5.5.5:20 > ! > no ip domain lookup > ! > multilink bundle-name authenticated > ! > ! > ! > ! > archive > log config > hidekeys > ! > ! > ! > ! > ! > ! > ! > interface Loopback0 > ip address 10.2.2.2 255.255.255.0 > ip ospf network point-to-point > ! > interface Loopback1 > ip address 10.22.2.2 255.255.255.0 > ! > interface FastEthernet0/0 > ip vrf forwarding acme > ip address 1.1.2.2 255.255.255.0 > duplex auto > speed auto > ! > interface FastEthernet0/1 > no ip address > shutdown > duplex auto > speed auto > ! > interface Serial0/0/0 > no ip address > encapsulation frame-relay > no frame-relay inverse-arp > ! > interface Serial0/0/0.203 point-to-point > ip address 10.0.203.2 255.255.255.254 > snmp trap link-status > mpls ip > frame-relay interface-dlci 203 > ! > interface Serial0/0/0.204 point-to-point > ip address 10.0.204.2 255.255.255.254 > snmp trap link-status > mpls ip > frame-relay interface-dlci 204 > ! > interface Serial0/0/1 > no ip address > shutdown > ! > router eigrp 1 > auto-summary > ! > address-family ipv4 vrf acme > redistribute bgp 25 metric 10000 10 255 1 1500 > network 0.0.0.0 > no auto-summary > autonomous-system 8 > exit-address-family > ! > router ospf 2 vrf acme > router-id 10.22.2.2 > domain-id 0.0.0.0 > domain-tag 2222 > log-adjacency-changes > area 0 sham-link 1.1.2.1 6.6.5.5 > redistribute bgp 25 subnets > network 0.0.0.0 255.255.255.255 area 0 > ! > router ospf 1 > router-id 10.2.2.2 > log-adjacency-changes > network 10.0.0.0 0.255.255.255 area 0 > ! > router bgp 25 > bgp log-neighbor-changes > neighbor 10.5.5.5 remote-as 25 > neighbor 10.5.5.5 update-source Loopback0 > ! > address-family ipv4 > no neighbor 10.5.5.5 activate > no auto-summary > no synchronization > exit-address-family > ! > address-family vpnv4 > neighbor 10.5.5.5 activate > neighbor 10.5.5.5 send-community extended > exit-address-family > ! > address-family ipv4 vrf acme > redistribute ospf 2 vrf acme match internal external 1 external 2 > no synchronization > exit-address-family > ! > ip forward-protocol nd > ! > ! > no ip http server > no ip http secure-server > ! > ! > ! > ! > ! > ! > ! > control-plane > ! > ! > ! > line con 0 > exec-timeout 0 0 > privilege level 15 > logging synchronous > line aux 0 > line vty 0 4 > login > ! > scheduler allocate 20000 1000 > end > > R5 > > ! > hostname R5 > ! > boot-start-marker > boot-end-marker > ! > no logging console > ! > no aaa new-model > memory-size iomem 20 > ! > ! > ip cef > ! > ! > ip vrf acme > rd 100:100 > route-target export 10.5.5.5:20 > route-target import 10.2.2.2:20 > ! > no ip domain lookup > ! > multilink bundle-name authenticated > ! > ! > voice-card 0 > no dspfarm > ! > ! > ! > ! > ! > ! > ! > ! > ! > ! > ! > ! > ! > ! > ! > ! > ! > ! > ! > ! > ! > ! > archive > log config > hidekeys > ! > ! > ! > ! > ! > ! > interface Loopback0 > ip address 10.5.5.5 255.255.255.0 > ip ospf network point-to-point > ! > interface Loopback1 > ip address 10.55.5.5 255.255.255.0 > ! > interface FastEthernet0/0 > ip vrf forwarding acme > ip address 6.6.5.5 255.255.255.0 > duplex auto > speed auto > ! > interface FastEthernet0/1 > no ip address > shutdown > duplex auto > speed auto > ! > interface Serial0/0/0 > no ip address > encapsulation frame-relay > no frame-relay inverse-arp > ! > interface Serial0/0/0.503 point-to-point > ip address 10.0.35.2 255.255.255.254 > mpls ip > frame-relay interface-dlci 503 > ! > interface Serial0/0/0.504 point-to-point > ip address 10.0.45.5 255.255.255.254 > mpls ip > frame-relay interface-dlci 504 > ! > interface Serial0/0/1 > no ip address > shutdown > ! > interface Serial0/1/0 > no ip address > shutdown > clock rate 2000000 > ! > router eigrp 1 > auto-summary > ! > address-family ipv4 vrf acme > redistribute bgp 25 metric 10000 10 255 1 1500 > network 0.0.0.0 > no auto-summary > autonomous-system 8 > exit-address-family > ! > router ospf 2 vrf acme > router-id 10.55.5.5 > domain-id 0.0.0.0 > domain-tag 2222 > log-adjacency-changes > area 0 sham-link 6.6.5.6 1.1.2.2 > redistribute bgp 25 subnets > network 0.0.0.0 255.255.255.255 area 0 > ! > router ospf 1 > router-id 10.5.5.5 > log-adjacency-changes > network 10.0.0.0 0.255.255.255 area 0 > ! > router bgp 25 > no synchronization > bgp log-neighbor-changes > neighbor 10.2.2.2 remote-as 25 > neighbor 10.2.2.2 update-source Loopback0 > no auto-summary > ! > address-family vpnv4 > neighbor 10.2.2.2 activate > neighbor 10.2.2.2 send-community both > exit-address-family > ! > address-family ipv4 vrf acme > redistribute ospf 2 vrf acme match internal external 1 external 2 > no synchronization > exit-address-family > ! > ! > ! > no ip http server > no ip http secure-server > ! > ! > ! > ! > ! > ! > ! > control-plane > ! > ! > ! > ! > ! > ! > ! > ! > ! > ! > line con 0 > exec-timeout 0 0 > privilege level 15 > logging synchronous > line aux 0 > line vty 0 4 > login > ! > scheduler allocate 20000 1000 > > ! > webvpn cef > ! > end > > > Blogs and organic groups at http://www.ccie.net > > _______________________________________________________________________ > Subscription information may be found at: > http://www.groupstudy.com/list/CCIELab.html Blogs and organic groups at http://www.ccie.netReceived on Sun Aug 07 2011 - 21:34:12 ART
This archive was generated by hypermail 2.2.0 : Thu Sep 01 2011 - 06:05:56 ART