[nsp] Cisco/Foundry/802.1q scenerio

From: Brian (signal@shreve.net)
Date: Fri Sep 29 2000 - 12:21:57 EDT


I am battling a scenerio which involves a few Cisco
routers and a Foundry Fastiron II switch.

If anyone could shed some light on what they think might
be going on, I would appreciate it. I know the design
looks a little kludgy below, but I promise it is an
intermediate step in the transition of a more complete
design. I am just trying to "test" the vlan's to make sure
it will work, starting with just one vlan at first.

I am trying to figure out why R2, once the VLAN is enabled,
no longer wants to take traffic from R1 to use its WAN links.
Any help on whats "Broken" with below would be great.

Brian

                Internet
____________________________________________
   | |
   | |
   | |
   R1 R2
    \ /
     \ /
      \ /
       \ /
    ____\__________________________/____
   | |
   | |----Workstation
   |___________________________________|
           Foundry Fastiron II
                 Switch

Note 1: Routers R1 and R2 run eBGP to different providers.
Routers R1 and R2 have iBGP to eachother.

Note 2: Routers R1 and R2 can ping eachother and Workstation.
Routers R1 and R2 establish complete OSPF adjacencies and
exchange full BGP routes successfully.

Note 3: With dot1q encapsulation turned off on port 2 on the
switch, and on Router 2 (ip address moved to main interface)
everything works fine. Workstation can default to R1, and then
route over to R2 and use one of its WAN links (for an iBGP learned
route).

Note 4: With encapsulation enabled and Port 2 tagged on the
switch, a packet from R1 destined to use R2's WAN link (via iBGP
route) will get to R2, but go no further.

Foundry Fastiron II
-------------------
Default VLAN 1
VLAN 2: Port 1 Router1 208.206.76.1/24 UNTAGGED
        Port 2 Router2 208.206.76.254/24 TAGGED
        Port 3 Workstation 208.206.76.49/24 UNTAGGED

Workstation
-----------
IP: 208.206.76.49/24
GW: 208.206.76.1

Router 1
--------
int FastEthernet 0/0
 ip address 208.206.76.1 255.255.255.0
 no ip redirects
 no ip directed-broadcast
 no ip mroute-cache
 speed 100
 duplex full

Router 2
--------
int FastEthernet 0/0
 no ip address
 no ip redirects
 no ip mroute-cache
 no ip directed-broadcast
 duplex full
 speed 100
!
int FastEthernet 0/0.2
 encapsulation dot1q 2
 ip address 208.206.76.254 255.255.255.0
 no ip redirects
 no ip directed-broadcast
 no ip mroute-cache

-----------------------------------------------
Brian Feeny, CCNP, CCDA signal@shreve.net
Network Administrator
ShreveNet Inc. (ASN 11881)



This archive was generated by hypermail 2b29 : Sun Aug 04 2002 - 04:12:18 EDT