[c-nsp] ISIS Adj-filter problem
Ibrahim Abo Zaid
ibrahim.abozaid at gmail.com
Tue Sep 8 17:21:14 EDT 2009
Thanks Victor
but why applying the filter on all routers except DIS solves the problem ?
is there any explainsion
best regards
--Ibrahim
On Tue, Sep 8, 2009 at 3:56 PM, Victor Cappuccio <vcappucc at cisco.com> wrote:
> Hi,
>
> Did you tried the same command but not on the DIS?? On a LAN, one of the
> routers elects itself the DIS, based on interface priority (the default is
> 64). If all interface priorities are the same, the router with the highest
> subnetwork point of attachment (SNPA) is selected
>
> I did your same configuration, but now I applied the filter to all the
> router but the DIS.
>
> R2 in this case is the DIS!
>
> R2#show run int f0/0
> Building configuration...
>
> Current configuration : 132 bytes
> !
> interface FastEthernet0/0
> ip address 10.10.123.2 255.255.255.0
> ip router isis
> duplex auto
> speed auto
> isis priority 127
> end
>
> R2#show clns neigh
>
> System Id Interface SNPA State Holdtime Type
> Protocol
> R3 Fa0/0 c003.163c.0000 Up 25 L1 IS-IS
> R1 Fa0/0 c001.163c.0000 Up 29 L1 IS-IS
> R2#show clns is-
>
> System Id Interface State Type Priority Circuit Id Format
> R3 Fa0/0 Up L1 64 R2.01 Phase V
> R1 Fa0/0 Up L1 64 R2.01 Phase V
> R2#
>
> R2#show ip route isis
> 10.0.0.0/8 is variably subnetted, 4 subnets, 2 masks
> i L1 10.10.3.3/32 [115/10] via 10.10.123.3, FastEthernet0/0
> i L1 10.10.1.1/32 [115/10] via 10.10.123.1, FastEthernet0/0
>
>
> ---
>
> R1#show run int f0/0
> Building configuration...
>
> Current configuration : 140 bytes
> !
> interface FastEthernet0/0
> ip address 10.10.123.1 255.255.255.0
> ip router isis
> duplex auto
> speed auto
> isis adjacency-filter R2
> end
>
> R1#show run | in clns filter
> clns filter-set R2 permit 49.0001.0000.0000.0002.00
> R1#show isis neigh
>
> System Id Type Interface IP Address State Holdtime Circuit Id
> R2 L1 Fa0/0 10.10.123.2 UP 9 R2.01
> R1#show ip route isis
> 10.0.0.0/8 is variably subnetted, 3 subnets, 2 masks
> i L1 10.10.2.2/32 [115/10] via 10.10.123.2, FastEthernet0/0
> R1#
>
> ----
>
>
> R3#show run int f0/0
> Building configuration...
>
> Current configuration : 140 bytes
> !
> interface FastEthernet0/0
> ip address 10.10.123.3 255.255.255.0
> ip router isis
> duplex auto
> speed auto
> isis adjacency-filter R2
> end
>
> R3#show run | in clns filter
> clns filter-set R2 permit 49.0001.0000.0000.0002.00
> R3#show clns neigh
>
> System Id Interface SNPA State Holdtime Type
> Protocol
> R2 Fa0/0 c002.163c.0000 Up 7 L1 IS-IS
> R3#
> R3#show clns is-neighbors
>
> System Id Interface State Type Priority Circuit Id Format
> R2 Fa0/0 Up L1 127 R2.01 Phase V
> R3#show ip route isis
> 10.0.0.0/8 is variably subnetted, 3 subnets, 2 masks
> i L1 10.10.2.2/32 [115/10] via 10.10.123.2, FastEthernet0/0
> R3#
>
>
> Thanks,
>
> Victor Cappuccio.-
> vcappucc at cisco.com
> CCIE(R/S) #20657
> STAC Support Engineer
> Cisco Small Business Support.
>
>
>
> -----Original Message-----
> From: cisco-nsp-bounces at puck.nether.net
> [mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Dave Kruger
> Sent: martes, 08 de septiembre de 2009 15:04
> To: Ibrahim Abo Zaid
> Cc: cisco_nsp
> Subject: Re: [c-nsp] ISIS Adj-filter problem
>
> Hi there
>
> have u managed to figure out what was causing that?
>
> Did you see that your clns filter references
>
> 49.0001.0000.0000.0100.00
>
>
> where as your R1 router's Sys ID is
>
> 49.0001.0000.0000.0001.00
>
>
> Regards,
> Dave
>
> Ibrahim Abo Zaid wrote:
> > Hi All
> >
> > I was testing ISIS Adj-filter option , R1,R2 and R3 are connected over
> > ethernet switch (using dynamips) with the below configuration
> >
> > the configuration works for adj point and both R2 and R3 have ADJ with R1
> > only , the problem is R2 is droping R1 and R3 LSPs and debug shows it is
> > dropped due to invalid adj . can you help to resolve that ?
> >
> > Configuration
> >
> > R1
> > interface Loopback0
> > ip address 10.10.1.1 255.255.255.255
> > !
> > interface FastEthernet0/0
> > ip address 10.10.123.1 255.255.255.0
> > ip router isis
> >
> > router isis
> > net
> >
>
> > is-type level-1
> > passive-interface Loopback0
> >
> > R2
> > interface Loopback0
> > ip address 10.10.2.2 255.255.255.255
> > !
> > interface FastEthernet0/0
> > ip address 10.10.123.2 255.255.255.0
> > ip router isis
> > isis adjacency-filter A1
> > !
> > router isis
> > net 49.0001.0000.0000.0002.00
> > is-type level-1
> > passive-interface Loopback0
> >
> > clns filter-set A1 permit 49.0001.0000.0000.0100.00
> >
> > R3
> >
> > interface Loopback0
> > ip address 10.10.3.3 255.255.255.255
> > !
> > interface FastEthernet0/0
> > ip address 10.10.123.3 255.255.255.0
> > ip router isis
> > isis adjacency-filter A1
> >
> >
> > router isis
> > net 49.0001.0000.0000.0003.00
> > is-type level-1
> > passive-interface Loopback0
> >
> > clns filter-set A1 permit 49.0001.0000.0000.0100.00
> >
> >
> > verification
> >
> >
> > R1#sh clns neighbors
> > System Id Interface SNPA State Holdtime Type
> > Protocol
> > R2 Fa0/0 c201.0544.0000 Up 8 L1
> IS-IS
> > R3 Fa0/0 c202.0544.0000 Up 7 L1
> IS-IS
> >
> > R1 has R2 and R3 LSPs
> >
> > R1#sh isis database
> > IS-IS Level-1 Link State Database:
> > LSPID LSP Seq Num LSP Checksum LSP Holdtime
> ATT/P/OL
> > R1.00-00 * 0x00000010 0x2D88 849 0/0/0
> > R2.00-00 0x00000009 0x8037 1036 0/0/0
> > R2.01-00 0x00000003 0x78D8 1036 0/0/0
> > R3.00-00 0x00000005 0x4470 552 0/0/0
> > R3.01-00 0x00000006 0x78D3 1091 0/0/0
> >
> > but has R3-Lo0 route ONLY !!
> >
> > R1#sh ip route isis
> > 10.0.0.0/8 is variably subnetted, 3 subnets, 2 masks
> > i L1 10.10.3.3/32 [115/10] via 10.10.123.3, FastEthernet0/0
> >
> > R2#sh clns neighbors
> > System Id Interface SNPA State Holdtime Type
> > Protocol
> > R1 Fa0/0 c200.0544.0000 Up 21 L1
> IS-IS
> >
> > R2 don't have R1 and R3 LSPs !!!
> >
> >
> > R2#sh isis database
> > IS-IS Level-1 Link State Database:
> > LSPID LSP Seq Num LSP Checksum LSP Holdtime
> ATT/P/OL
> > R2.00-00 * 0x00000009 0x8037 985 0/0/0
> > R2.01-00 * 0x00000003 0x78D8 986 0/0/0
> >
> > NO ISIS Route , it normal no LSP :)
> > R2#sh ip route isis
> > R2#
> >
> > R3
> >
> > R3#sh clns neighbors
> > System Id Interface SNPA State Holdtime Type
> > Protocol
> > R1 Fa0/0 c200.0544.0000 Up 26 L1
> IS-IS
> >
> > R3#sh isis database
> > IS-IS Level-1 Link State Database:
> > LSPID LSP Seq Num LSP Checksum LSP Holdtime
> ATT/P/OL
> > R1.00-00 0x00000013 0x278B 1181 0/0/0
> > R2.00-00 0x00000009 0x8037 845 0/0/0
> > R2.01-00 0x00000003 0x78D8 846 0/0/0
> > R3.00-00 * 0x00000006 0x4271 1186 0/0/0
> > R3.01-00 * 0x00000007 0x76D4 1185 0/0/0
> >
> > route to R1-Lo0 only !!
> >
> > R3#sh ip route isis
> > 10.0.0.0/8 is variably subnetted, 3 subnets, 2 masks
> > i L1 10.10.1.1/32 [115/10] via 10.10.123.1, FastEthernet0/0
> >
> > debug isis update-packets shows update is dropped due to invalid ADJ
> >
> >
> > *Mar 1 00:30:16.751: ISIS-Upd: Invalid adjacency
> > *Mar 1 00:30:26.619: ISIS-Upd: Invalid adjacency
> > *Mar 1 00:30:34.151: ISIS-Upd: Invalid adjacency
> >
> > any ideas
> >
> > best regards
> > --Ibrahim
> > _______________________________________________
> > cisco-nsp mailing list cisco-nsp at puck.nether.net
> > https://puck.nether.net/mailman/listinfo/cisco-nsp
> > archive at http://puck.nether.net/pipermail/cisco-nsp/
> >
>
> _______________________________________________
> cisco-nsp mailing list cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>
>
More information about the cisco-nsp
mailing list