[c-nsp] Problem interface

Skeeve Stevens skeeve at skeeve.org
Sun Aug 28 19:07:05 EDT 2005


Hey guys,

	I have a new client for whom I manage their border and BGP.  The
router is a 7206vxr.  The router was badly setup before.. And I have
re-written 90% of the router already.  But their network is badly setup, but
I need some more reasons why I can pressure them to change.

	The key issue is that they run all their server - a couple of
hundred - in layer 2 with all the servers landing on a dot1q trunk on the
7206vxr.

interface FastEthernet1/0.200
 encapsulation dot1Q 200
 ip address x.x.103.1 255.255.255.0 secondary
 ip address x.x.104.1 255.255.255.0 secondary
 ip address x.x.96.1 255.255.255.0 secondary
 ip address x.x.100.1 255.255.255.0 secondary
 ip address x.x.101.1 255.255.255.0 secondary
 ip address x.x.102.1 255.255.255.0 secondary
 ip address x.x.105.1 255.255.255.0 secondary
 ip address x.x.97.1 255.255.255.0
 no ip proxy-arp
 no ip mroute-cache
 no snmp trap link-status
 no cdp enable

So essentially every server, a couple of hundred land on the router here
with one of the above addresses being the servers default gateway.

I would like some advice from you guys in how many ways this is bad so I can
hit them with it all and convince them to a layer 2/3 switched environment.


_______________________________________________________
Skeeve Stevens, RHCE     Email: skeeve at skeeve.org
Website: www.skeeve.org  - Telephone: (0414) 753 383
Address: P.O Box 1035, Epping, NSW, 1710, Australia

eIntellego - skeeve at eintellego.net - www.eintellego.net
_______________________________________________________
I'm a groove licked love child king of the verse
Si vis pacem, para bellum





More information about the cisco-nsp mailing list