[Re: [nsp] stupid question]

Joshua Smith joshua.ej.smith at usa.net
Wed Apr 2 19:11:19 EST 2003 

192.168.5.254 is the fas0/0 interface to the firewall - my current
arus01-int.ftl1#sho ip route
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
       i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, * - candidate
default
       U - per-user static route, o - ODR, P - periodic downloaded static
route
       T - traffic engineered route

Gateway of last resort is 192.168.5.253 to network 0.0.0.0

     172.16.0.0/21 is subnetted, 1 subnets
B       172.16.16.0 [20/0] via 10.1.7.2
     192.168.5.0/30 is subnetted, 1 subnets
C       192.168.5.252 is directly connected, FastEthernet0/0
     10.0.0.0/8 is variably subnetted, 6 subnets, 3 masks
B       10.10.10.0/24 [20/0] via 10.1.7.2
S       10.0.0.0/8 [1/0] via 10.1.7.2, Serial0/0
C       10.1.7.0/24 is directly connected, Serial0/0
C       10.1.7.2/32 is directly connected, Serial0/0

S       10.75.1.0/24 [1/0] via 10.1.7.2, Serial0/0 - i added this static

C       10.254.1.1/32 is directly connected, Loopback0
C    192.168.2.0/24 is directly connected, FastEthernet0/1
C    192.168.3.0/24 is directly connected, FastEthernet0/1
S*   0.0.0.0/0 [1/0] via 192.168.5.253, FastEthernet0/0
S    172.16.0.0/12 [1/0] via 10.1.7.2, Serial0/0
arus01-int.ftl1#

Michael Loftis <mloftis at wgops.com> wrote:
> show ip route from 2600A
> 
> Sounds like it's getting some other routing info.   192.168.5.254 is the 
> 2600A correct?
> 
> --On Wednesday, April 02, 2003 6:26 PM -0500 Joshua Smith 
> <joshua.ej.smith at usa.net> wrote:
> 
> > ok, this seems to me to be a very stupid question, but it caused me
> > to take down part of my network today.  network looks like this:
> >
> > 192.168.2.0/24 lan--2600A---t1---2600B--10.0.0.0/8 lan--2924--10.75.1.50
> >
> > i removed some bgp configs that my predecessor had been experimenting
> > with, and i could no longer reach 10.75.1.50 in the 10/8 lan.  on 2600A,
i
> > have these static routes
> > ip route 10.0.0.0 255.0.0.0 se0/0 10.1.7.2
> > ip route 0.0.0.0 0.0.0.0 fas0/0 192.168.5.253 (my firewall)
> >
> > on the 2600B router, i have these routes
> > ip route 192.168.2.0 255.255.255.0 se0/0 10.1.7.1
> > ip route 0.0.0.0 0.0.0.0 se0/0 10.1.7.1
> >
> > a traceroute during the 'outage' showed that 2600A was trying to dump
> > the packet out to the firewall, which obviously didn't know what to do
> > with it...
> >
> > [ntranc3d at cr4sh ntranc3d]$ lft 10.75.1.50
> >
> > Tracing ____________________________________________________________
> >
> > TTL  LFT trace to 10.75.1.50:80/tcp
> >  1   192.168.2.1 2.2ms
> >  2   192.168.5.253 0.7ms
> >  3   192.168.5.254 1.7ms
> >  4   192.168.5.253 0.9ms
> >  5   192.168.5.254 1.6ms
> >  6   192.168.5.253 1.3ms
> >  7   192.168.5.254 4.3ms
> >  8   192.168.5.253 1.4ms
> >  9   192.168.5.254 70.8ms
> > 10   192.168.5.253 1.7ms
> > [etc]
> >
> > so here is my question - what am i missing?  shouldn't a route to 10/8 on
> > 2600A pointing to 2600B be enough?
> >
> > thanks
> >
> > 2600B
> > router bgp 65010
> >  no synchronization
> >  bgp always-compare-med
> >  bgp log-neighbor-changes
> >  network 10.10.10.0 mask 255.255.255.0
> >  aggregate-address 10.0.0.0 255.0.0.0 as-set
> >  neighbor 10.1.7.1 remote-as 65030
> >  neighbor 10.1.7.1 description Ft. Lauderdale Office
> >  neighbor 10.1.7.1 weight 500
> >  neighbor 10.1.7.1 send-community
> >  neighbor 10.1.7.1 soft-reconfiguration inbound
> > !
> >  router eigrp 101
> >  network 10.0.0.0
> >  distance eigrp 1 1
> >  eigrp log-neighbor-changes
> >
> >
> > 2600A
> > router eigrp 101
> >  passive-interface Serial0/0
> >  network 10.0.0.0
> >  network 192.168.2.0
> >  network 192.168.3.0
> >  network 0.0.0.0
> >  eigrp log-neighbor-changes
> > !
> > router bgp 65030
> >  bgp always-compare-med
> >  bgp dampening
> >  network 192.168.2.0
> >  neighbor 10.1.7.2 remote-as 65010
> >  neighbor 10.1.7.2 description New York
> >  neighbor 10.1.7.2 send-community
> >  neighbor 10.1.7.2 soft-reconfiguration inbound
> >
> >
> > "Walk with me through the Universe,
> >  And along the way see how all of us are Connected.
> >  Feast the eyes of your Soul,
> >  On the Love that abounds.
> >  In all places at once, seemingly endless,
> >  Like your own existence."
> >      - Stephen Hawking -
> >
> >
> > _______________________________________________
> > cisco-nsp mailing list  cisco-nsp at puck.nether.net
> > http://puck.nether.net/mailman/listinfo/cisco-nsp
> > archive at http://puck.nether.net/pipermail/cisco-nsp/
> 
> 
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> http://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/



"Walk with me through the Universe,
 And along the way see how all of us are Connected.
 Feast the eyes of your Soul,
 On the Love that abounds.
 In all places at once, seemingly endless,
 Like your own existence."
     - Stephen Hawking -

More information about the cisco-nsp mailing list