I have been away for a long time.

And I am happy to be back today.

I have found myself in this state many times in the past with RIP Authentication. Sometimes, it works right away, some other times it takes a sometime while other times, it just wouldn’t work!.

When the RIP authentication fails, with RIP debug turned on, you will be seeing that dreaded (invalid authentication) error messages.

What I have found out that may always work, is to follow the step given below to configure RIP authentication;

1. Create the key chain

2. Apply this key to the interface

3. Enable RIP authentication mode md5

4. Create the RIP process with (router rip)

5. If you have created the RIP process prior to step 1, delete it and re-created it in step 4 as shown above.

I have found this to work virtually at all times.

So happy labbing………

In it’s simplest form, assuming you have the topology shown below;

R2 (s1/2) ———————————-  R3 (s1/2)

Question:

Configure the serial link between R1 & R2 with PPP encapsulation

R2 should assign ip address to R1 interface

Answer:

To configure this, we need to configure an ip address to R2  interface with appropriate mask.

Enable R2 to supply ip address to R1 with “peer default ….” command

And finally disable peer neighbor route on both end of the link

R3:

interface Serial1/2
 ip address negotiated
 encapsulation ppp
 end 

R2:

interface Serial1/2
 ip address 160.1.4.2 255.255.255.0
 encapsulation ppp
 peer default ip address 160.1.4.3
 end

Output on R3:

Gateway of last resort is not set

     3.0.0.0/24 is subnetted, 1 subnets
C       3.3.3.0 is directly connected, Loopback0
     160.1.0.0/16 is variably subnetted, 4 subnets, 2 masks
C       160.1.1.0/24 is directly connected, Serial1/0
C       160.1.3.0/24 is directly connected, FastEthernet0/0
C       160.1.4.3/32 is directly connected, Serial1/2
C       160.1.4.2/32 is directly connected, Serial1/2

——–

Serial1/0                  160.1.1.3       YES NVRAM  up                    up     
Serial1/2                  160.1.4.3       YES IPCP   up                    up     
Loopback0                  3.3.3.3         YES NVRAM  up                    up

Output on R2:

Rack1R2#sh ip ro co
     2.0.0.0/24 is subnetted, 1 subnets
C       2.2.2.0 is directly connected, Loopback0
     160.1.0.0/16 is variably subnetted, 5 subnets, 2 masks
C       160.1.1.0/24 is directly connected, Serial1/0
C       160.1.2.0/24 is directly connected, FastEthernet0/0
C       160.1.4.0/24 is directly connected, Serial1/2
C       160.1.4.3/32 is directly connected, Serial1/2

You can see from these outputs that ip address assigned to s1/2 interface on R3 is from IPCP. You also noticed that output from “sh ip route” displayed 2 routes with /32 pointing in the direction of the link.

By default, when PPP link is enabled on a link, PPP creates a host routes for it’s peer on that link in it’s RIB and this is why we have one of the /32 route.  Basically, the router adds it remote peer’s ip address to it’s routing table with a /32 mask (And infact on both end of the links). This is applicable to static ip address assignment or negotiated on a PPP enabled link.

Ok, so why is the assigned ip address for R3 displayed with a mask of /32 in R3 RIB ?

When a PPP client peers assigns ip address to it’s remote peer on the link, it by default assigns the route as a /32 route and this is why we have “160.1.4.3/32″ in R3 RIB.

There are two issues here:

1) How doe we remove this peer route from the router’s routing table since we really do not need it

2) How do we make IPCP assign the remote peer address with the correct mask (instead of /32).

To fix the first issue, we need to add an extra command to the serial links on both end of the link and then shut/no shut. This is shown below

R3:

interface Serial1/2
 ip address negotiated
 encapsulation ppp
 no peer neighbor-route
end 

R2:

interface Serial1/2
 ip address 160.1.4.2 255.255.255.0
 encapsulation ppp
 peer default ip address 160.1.4.3
 no peer neighbor-route
end

One of the Pitfalls to watch out for here is that if the peer neighbor route is not removed, it may cause RIP routes failure if RIP is enabled on this link. The reason for this failure is that when the the 2 routers exchange RIP updates, the router with static /24 address assigned (R2 here) will see the route from R3 as being in a different link since it expects /24 and the updates are being sent from a /32 address. Best Workaround for this RIP issue is to disable source address validation in RIP updates.

So, to the second issue raised above, the way to go about this is by configuring R2 to send /24 mask to R3 during IPCP negotiation. I will test this out and update this post later with the result.

I noticed that while trying to access this new link on my Linux Box, the site seem to only be accessible to someone with a CCO account. But when I tried on my Windows Laptop later, it seem to go straight to the documentations without requesting for CCO Account info

Windows Users may not experience this or maybe, Cisco only ask for the CCO info once and bind this on their database. I am still trying to establish all these sequence of events.

But one thing is certain, DocCD is “relocated”

- globally with “snmp-server enable trap <trap_name>

- per-host with “snmp-server host <ip_address> trap <trap_name>

I am assuming you know by default that if you issue the 2 commands mentioned above without the trap options for both of them, router will enable all traps and send all trap notifications to the snmp-server.

Things to note

snmp trap is enabled (by default) for tty & bgp

Host setting will always override the global config. Host setting implies that only accept notifications from these traps. Hence other traps not enabled will be blocked from that host.

Here is an example;

snmp-server host 192.168.1.100 trap hsrp syslog

The command above implies that the snmp host should only accept hsrp & syslog trap notifications.

- Some traps (e.g snmp linkdown) can only be enabled on global level

- All snmp inform is enabled by default (unlike traps).

- Same inform notification will be sent to snmp host for any trap enabled.

-  If you do not want a particular host to accept notifications from all traps you have enabled, ensure you configure the trap using per-host option with trap set to tty (since tty trap is enabled by default).

from Brian Dennis CCIE#2210

This is an important redistribution write-ups from Brian Dennis of IE to read. He provided a different way to look at the problem that needs to be solved and I find it very very useful.

Enjoy Reading………………..

Question:

4.11. IGP Redistribution (from IEWB-RSv4.1 Lab2 task 4.11)
• Redistribute between RIP and OSPF on SW1.
• Redistribute between OSPF and EIGRP on R2, R3, and R4.
• Ensure that full reachability is maintained throughout the IGP domain when the Frame Relay circuit between R3 and R5 is down.

3 Points

Answer:

First off this task is only worth 3 points but will take most people 45 minutes to 1 hour to complete due to the fact the requirements create a routing loop. This means that it’s really not worth 3 points in the real lab due to the fact you’re giving away 1 hour of your 8 hours for just 3 points. In the real lab most people would be better off just getting full IP reachability and moving on. Think about it like this. If you could give up 3 points in every lab and implement you own solution to obtain full IP reachability would you be better off?

When you run across a redistribution task in a lab your first goal is to determine what is the minimum redistribution needed to achieve full reachability. This is your “safety net” in the event you are not able to complete the task as required or do not have the time to fully complete the task as required. You can pass the lab without getting these 3 points but you can’t really expect to pass the lab without having full IP reachability.

Since our first goal is just to determine what is needed to obtain full IP reachability lets look at this network and determine where we need to perform redistribution to achieve this. Obviously we must redistribute between RIP and OSPF on SW1 to provide reachability between the OSPF and RIP domains. Since this will be a single point of redistribution between RIP and OSPF and these protocols are only both run on one router (SW1) we will not have any problems. This means we can just redistribute RIP into OSPF, then OSPF into RIP and finally verify our redistribution by viewing the routing tables and doing some basic pinging. No tagging, filtering, distribute-list, etc is needed on SW1.

Once the RIP and OSPF redistribution is finished and verified we should then move onto the EIGRP and OSPF redistribution. Do not make the mistake of moving onto the EIGRP and OSPF redistribution without first verifying your RIP and OSPF redistribution. You must verify each stage of the network as it’s built. If you wait until the end of the IGP section to test for full IP reachability it will be much harder to determine what the cause of the problems are. Think about it like this. If I gave you a network and told you to find 10 errors in it would it be easier to find the 10 errors after I’ve applied all of the configuration or would it be easier to check for the errors as I apply each part of the configuration? If you didn’t answer the latter I would hope you never have aspirations on becoming an airline engine inspector

First off we need to determine what are the minimum points of redistribution needed between OSPF and EIGRP to obtain full IP reachability. Normally this is easy to determine but in this network we have a backup link being used. In the real lab we don’t need to worry about redundancy or sub-optimal routing unless specified directly or indirectly. In this case we need to take redundancy into consideration since full IP reachability will need to be obtained when the network is in two different states. The first state is when the backup link is in the standby mode. The second state is when the backup interface is active due to the fact the primary link is down. In this case the backup link is the serial between R4 and R5 and the primary link is the Frame Relay connection between R3 and R5.

Now that we know what items to take into consideration for the EIGRP and OSPF redistribution we can determine that at a minimum EIGRP and OSPF will need to be redistributed on R4 and either R2 or R3. R4 is selected for redistribution because when the backup link is active it will need to provide connectivity between R5 and the rest of the network.

Where we start having problems is with the redistribution on R2 or R3 so lets look at what the problem is. OSPF routes going into EIGRP will not present a problem because once the OSPF routes are in EIGRP they will have a higher AD. Remember that the problems with redistribution occur when we take a higher AD protocol and then redistribute it into a lower AD protocol and finally attempt to redistribute it back into the original higher AD protocol (Higher->Lower->Higher). In this case the OSPF routes will have an AD of 170 when redistributed into EIGRP. Since the AD of EIGRP external is 170 these routes will not overtake the original OSPF routes. So lower AD protocol to higher AD protocol isn’t a problem. For those who have always wondered why the external distance of EIGRP is 170 now you know

Now that we know we shouldn’t have any problems with the OSPF routes going into EIGRP we next need to consider if we’ll have any problems with EIGRP routes going into OSPF. By default EIGRP internal routes have an AD of 90 and an AD of 170 for external routes. This being the case we’ll need to consider the higher->lower->higher problem for both types of routes (internal and external). For the internal EIGRP routes there won’t be a problem since we will be going from a lower AD protocol to higher AD protocol. It’s the external EIGRP routes that weren’t originally OSPF routes. In this lab a previous task asked for the Ethernet segments (E0/0 and E0/1) on R5 to be redistributed into EIGRP. These are the routes which we will see that create the routing loop problem.

We should now be able to see what the problem is. It’s the external EIGRP routes being redistributed into OSPF and then possibly back into EIGRP. This is because we have the higher->lower->higher situation. The higher (external EIGRP) going into a lower (OSPF) and finally back into a higher (external EIGRP).

To illustrate the problem I have mutual redistribution configured between EIGRP and OSPF on both R2 and R3. We can see from the output below that R2 and R3 can not reach R5’s E0/0 interface but they can reach R5’s Loopback0 interface. The only difference is the Loopback is an internal EIGRP route while the Ethernet is an external EIGRP route. This is exactly what we expected to happen.

Rack1R2#traceroute 132.1.5.5 ttl 1 10

Type escape sequence to abort.
Tracing the route to 132.1.5.5

  1 132.1.23.3 16 msec 17 msec 16 msec
  2 132.1.0.2 36 msec 32 msec 36 msec
  3 132.1.23.3 32 msec 32 msec 32 msec
  4 132.1.0.2 52 msec 56 msec 52 msec
  5 132.1.23.3 48 msec 48 msec 48 msec
  6 132.1.0.2 68 msec 68 msec 68 msec
  7 132.1.23.3 64 msec 68 msec 64 msec
  8 132.1.0.2 88 msec 88 msec 84 msec
  9 132.1.23.3 105 msec 96 msec 96 msec
 10 132.1.0.2 120 msec 104 msec 101 msec
Rack1R2#
Rack1R2#traceroute 150.1.5.5 ttl 1 10

Type escape sequence to abort.
Tracing the route to 150.1.5.5

  1 132.1.23.3 16 msec 16 msec 16 msec
  2 132.1.35.5 44 msec *  44 msec
Rack1R2#

Rack1R3#traceroute 132.1.5.5 ttl 1 10

Type escape sequence to abort.
Tracing the route to 132.1.5.5

  1 132.1.0.2 28 msec 32 msec 28 msec
  2  *  *  *
  3 132.1.0.2 44 msec 48 msec 44 msec
  4  *  *  *
  5 132.1.0.2 60 msec 64 msec 64 msec
  6  *  *  *
  7 132.1.0.2 76 msec 84 msec 81 msec
  8  *  *  *
  9 132.1.0.2 269 msec 128 msec *
 10  *  *  *
Rack1R3#
Rack1R3#traceroute 150.1.5.5 ttl 1 10

Type escape sequence to abort.
Tracing the route to 150.1.5.5

  1 132.1.35.5 32 msec *  28 msec
Rack1R3#

Now that we know what the problem is we need to consider all of the possible solutions and implement the simplest solution. First off we could break this potential routing loop by just removing redistribution from R2. The output below shows the traceroutes from R2 and R3 to R5 when redistribution has been removed from R2.

Rack1R2#traceroute 150.1.5.5 ttl 1 10

Type escape sequence to abort.
Tracing the route to 150.1.5.5

  1 132.1.23.3 16 msec 16 msec 16 msec
  2 132.1.35.5 44 msec *  60 msec
Rack1R2#traceroute 132.1.5.5 ttl 1 10

Type escape sequence to abort.
Tracing the route to 132.1.5.5

  1 132.1.0.3 28 msec 32 msec 28 msec
  2 132.1.35.5 56 msec *  56 msec
Rack1R2#

Rack1R3#traceroute 150.1.5.5 ttl 1 10

Type escape sequence to abort.
Tracing the route to 150.1.5.5

  1 132.1.35.5 28 msec *  28 msec
Rack1R3#traceroute 132.1.5.5 ttl 1 10

Type escape sequence to abort.
Tracing the route to 132.1.5.5

  1 132.1.35.5 32 msec *  28 msec
Rack1R3#

It may seem like everything is working now but there is actually another problem that we need to resolve. R6 is not getting the external EIGRP routes originated by R5’s.

Rack1R6#show ip route 132.1.5.0
% Subnet not in table
Rack1R6#show ip route 150.1.5.0
Routing entry for 150.1.5.0/24
  Known via "eigrp 10", distance 90, metric 21154560, type internal
  Redistributing via eigrp 10
  Last update from 132.1.26.2 on FastEthernet0/0.26, 00:14:03 ago
  Routing Descriptor Blocks:
  * 132.1.26.2, from 132.1.26.2, 00:14:03 ago, via FastEthernet0/0.26
      Route metric is 21154560, traffic share count is 1
      Total delay is 45100 microseconds, minimum bandwidth is 128 Kbit
      Reliability 255/255, minimum MTU 1500 bytes
      Loading 5/255, Hops 3

Rack1R6#

So lets look back at the first router who should be receiving them and view it’s routing table.

Rack1R3#show ip route 132.1.5.0
Routing entry for 132.1.5.0/24
  Known via "eigrp 10", distance 170, metric 2560512256, type external
  Redistributing via ospf 1, eigrp 10
  Advertised by ospf 1 subnets
  Last update from 132.1.35.5 on Serial1/1.1, 00:43:58 ago
  Routing Descriptor Blocks:
  * 132.1.35.5, from 132.1.35.5, 00:43:58 ago, via Serial1/1.1
      Route metric is 2560512256, traffic share count is 1
      Total delay is 20010 microseconds, minimum bandwidth is 1 Kbit
      Reliability 1/255, minimum MTU 1 bytes
      Loading 1/255, Hops 1

Rack1R3#show ip route 150.1.5.0
Routing entry for 150.1.5.0/24
  Known via "eigrp 10", distance 90, metric 20640000, type internal
  Redistributing via ospf 1, eigrp 10
  Advertised by ospf 1 subnets
  Last update from 132.1.35.5 on Serial1/1.1, 20:48:19 ago
  Routing Descriptor Blocks:
  * 132.1.35.5, from 132.1.35.5, 20:48:19 ago, via Serial1/1.1
      Route metric is 20640000, traffic share count is 1
      Total delay is 25000 microseconds, minimum bandwidth is 128 Kbit
      Reliability 255/255, minimum MTU 1500 bytes
      Loading 5/255, Hops 1

Rack1R3#

So R3 has them. Next lets go to R2 and view it’s routing table.

Rack1R2#show ip route 132.1.5.0
Routing entry for 132.1.5.0/24
  Known via "ospf 1", distance 110, metric 20, type extern 2, forward metric 64
  Last update from 132.1.0.3 on Serial0/0, 00:02:36 ago
  Routing Descriptor Blocks:
  * 132.1.0.3, from 150.1.3.3, 00:02:36 ago, via Serial0/0
      Route metric is 20, traffic share count is 1

Rack1R2#show ip route 150.1.5.0
Routing entry for 150.1.5.0/24
  Known via "eigrp 10", distance 90, metric 21152000, type internal
  Redistributing via eigrp 10
  Last update from 132.1.23.3 on Serial0/1, 21:14:51 ago
  Routing Descriptor Blocks:
  * 132.1.23.3, from 132.1.23.3, 21:14:51 ago, via Serial0/1
      Route metric is 21152000, traffic share count is 1
      Total delay is 45000 microseconds, minimum bandwidth is 128 Kbit
      Reliability 255/255, minimum MTU 1500 bytes
      Loading 5/255, Hops 2

Rack1R2#

R2 has the external EIGRP route (R5’s Ethernet0/0) as an OSPF route and the internal EIGRP route (R5’s Loopback0) still as an internal EIGRP route. This is what we expect to happen since the OSPF route has an AD of 110 and the external EIGRP route has an AD of 170. But why doesn’t R6 get the 132.1.5.0/24 route? R6 doesn’t get the route because EIGRP is not sending it due to the fact the route isn’t in the routing table as an EIGRP route. This is important to understand so let me repeat it. When EIGRP goes to send an update to it’s neighbors it selects the routes from the IP routing table and not the EIGRP topology table. This is the same behavior as RIP in that the route must be in the routing table as a RIP route or a connected route advertised by RIP before it can be sent. So what routes is EIGRP sending? It’s going to send the directly connected routes that EIGRP is advertising from the network statement under the routing process and the dynamically learned EIGRP routes in the routing table. Of course it will not send the EIGRP routes from the routing table back out the same interface they were learned on due to split horizon. So this is why the 132.1.5.0/24 route does not get advertised onto R6 even though EIGRP has the route from R3 in it’s topology table.

Rack1R2#show ip eigrp topology 132.1.5.0/24
IP-EIGRP (AS 10): Topology entry for 132.1.5.0/24
  State is Passive, Query origin flag is 1, 0 Successor(s), FD is 4294967295
  Routing Descriptor Blocks:
  132.1.23.3 (Serial0/1), from 132.1.23.3, Send flag is 0x0
      Composite metric is (2561024256/2560512256), Route is External
      Vector metric:
        Minimum bandwidth is 1 Kbit
        Total delay is 40010 microseconds
        Reliability is 1/255
        Load is 1/255
        Minimum MTU is 1
        Hop count is 2
      External data:
        Originating router is 150.1.5.5
        AS number of route is 0
        External protocol is Connected, external metric is 0
        Administrator tag is 0 (0x00000000)
Rack1R2#

The goal of any solution to this problem is to ensure that the 132.1.5.0/24 route is installed into R2’s routing table as an EIGRP route. Basically there are a few standard methods we could use to achieve this goal so lets list them out:

1) Administrative distance
2) Filtering
3) Summarization

Using administrative distance there are multiple ways to resolve the problem. Below I’ve listed a few of them.

1) Change the administrative distance of the external EIGRP routes to be lower than the OSPF routes on R2.
2) Change the administrative distance of the external OSPF routes to be higher than the external EIGRP routes on R2.
3) Change the administrative distance for all of the OSPF routes to be higher than the external EIGRP routes on R2.
4) Change the administrative distance of just the OSPF routes originated by R3 on R2.
5) Change the administrative distance of just the 132.1.5.0/24 OSPF route on R2.
6) Change the administrative distance of just the 132.1.5.0/24 OSPF route originated by R3 on R2.

As we can see there are a lot of options using AD to ensure the 132.1.5.0/24 gets installed into R2’s routing table as an EIGRP route. If we were to select one of the options, option 6 would be the best. The reason 6 would be the best option is because it’s the most specific option. We normally want to select the most specific solution as we don’t want to implement a solution that could effect other routes. There are actually a couple schools of thought on this and both could be considered correct. The other way of looking at it would be to select the simplest solution regardless of what other routes it effects. Personally I prefer to select the most precise solution assuming that it’s not overly complicated.

Let’s look at what option 6 applied to R2:

Rack1R2(config)#ip access-list standard OSPF_AD
Rack1R2(config-std-nacl)#permit 132.1.5.0
Rack1R2(config-std-nacl)#router ospf 1
Rack1R2(config-router)# distance 171 150.1.3.3 0.0.0.0 OSPF_AD
Rack1R2(config-router)#^Z
Rack1R2#
Rack1R2#show ip route 132.1.5.0
Routing entry for 132.1.5.0/24
  Known via "eigrp 10", distance 170, metric 2561024256, type external
  Redistributing via eigrp 10
  Last update from 132.1.23.3 on Serial0/1, 00:01:24 ago
  Routing Descriptor Blocks:
  * 132.1.23.3, from 132.1.23.3, 00:01:24 ago, via Serial0/1
      Route metric is 2561024256, traffic share count is 1
      Total delay is 40010 microseconds, minimum bandwidth is 1 Kbit
      Reliability 1/255, minimum MTU 1 bytes
      Loading 1/255, Hops 2

Rack1R2#show ip ospf database external 132.1.5.0

            OSPF Router with ID (150.1.2.2) (Process ID 1)

		Type-5 AS External Link States

  Routing Bit Set on this LSA
  LS age: 1513
  Options: (No TOS-capability, DC)
  LS Type: AS External Link
  Link State ID: 132.1.5.0 (External Network Number )
  Advertising Router: 150.1.3.3
  LS Seq Number: 80000001
  Checksum: 0x6F09
  Length: 36
  Network Mask: /24
	Metric Type: 2 (Larger than any link state path)
	TOS: 0
	Metric: 20
	Forward Address: 0.0.0.0
	External Route Tag: 0

Rack1R2#

Now the route is in R2’s routing table as an EIGRP route R6 should have learned it from R2. R6 should also now be able to reach R5 E0/0.

Rack1R6#show ip route 132.1.5.0
Routing entry for 132.1.5.0/24
  Known via "eigrp 10", distance 170, metric 2561026816, type external
  Redistributing via eigrp 10
  Last update from 132.1.26.2 on FastEthernet0/0.26, 00:02:08 ago
  Routing Descriptor Blocks:
  * 132.1.26.2, from 132.1.26.2, 00:02:08 ago, via FastEthernet0/0.26
      Route metric is 2561026816, traffic share count is 1
      Total delay is 40110 microseconds, minimum bandwidth is 1 Kbit
      Reliability 1/255, minimum MTU 1 bytes
      Loading 1/255, Hops 3

Rack1R6#traceroute 132.1.5.5   

Type escape sequence to abort.
Tracing the route to 132.1.5.5

  1 132.1.26.2 0 msec 4 msec 4 msec
  2 132.1.23.3 16 msec 20 msec 16 msec
  3 132.1.35.5 48 msec *  44 msec
Rack1R6#

We can see that the administrative distance solution works. Now lets look at the filtering option and remove the administrative distance solution. The simplest filtering option would be to not allow R2 to install the 132.1.5.0/24 OSPF route into it’s routing table.

Rack1R2(config)#ip access-list standard OSPF_FILTER
Rack1R2(config-std-nacl)#deny 132.1.5.0
Rack1R2(config-std-nacl)#permit any
Rack1R2(config-std-nacl)#router ospf 1
Rack1R2(config-router)#distribute-list OSPF_FILTER in
Rack1R2(config-router)#^Z
Rack1R2#show ip route 132.1.5.0
Routing entry for 132.1.5.0/24
  Known via "eigrp 10", distance 170, metric 2561024256, type external
  Redistributing via eigrp 10
  Last update from 132.1.23.3 on Serial0/1, 00:00:06 ago
  Routing Descriptor Blocks:
  * 132.1.23.3, from 132.1.23.3, 00:00:06 ago, via Serial0/1
      Route metric is 2561024256, traffic share count is 1
      Total delay is 40010 microseconds, minimum bandwidth is 1 Kbit
      Reliability 1/255, minimum MTU 1 bytes
      Loading 1/255, Hops 2

Rack1R2#

The next option we listed was to use summarization. Before we do that I’ll remove the distribute list and then summarize the 132.1.5.0/24 route to 132.1.4.0/23 when it’s advertised by OSPF on R3. By doing this R2 will receive the 132.1.5.0/24 via external EIGRP from R3 over the serial and the 132.1.4.0/23 via OSPF from R3 over the Frame Relay link. Since the external EIGRP route is more specific R2 will use it to reach R5’s E0/0 interface and in turn advertise the route onto R6.

Rack1R3(config)#router ospf 1
Rack1R3(config-router)#summary-address 132.1.4.0 255.255.254.0

Rack1R2#show ip route 132.1.5.0
Routing entry for 132.1.5.0/24
  Known via "eigrp 10", distance 170, metric 2561024256, type external
  Redistributing via eigrp 10
  Last update from 132.1.23.3 on Serial0/1, 00:00:21 ago
  Routing Descriptor Blocks:
  * 132.1.23.3, from 132.1.23.3, 00:00:21 ago, via Serial0/1
      Route metric is 2561024256, traffic share count is 1
      Total delay is 40010 microseconds, minimum bandwidth is 1 Kbit
      Reliability 1/255, minimum MTU 1 bytes
      Loading 1/255, Hops 2

Rack1R2#show ip route 132.1.4.0
Routing entry for 132.1.4.0/23
  Known via "ospf 1", distance 110, metric 20, type extern 2, forward metric 64
  Last update from 132.1.0.3 on Serial0/0, 00:00:26 ago
  Routing Descriptor Blocks:
  * 132.1.0.3, from 150.1.3.3, 00:00:26 ago, via Serial0/0
      Route metric is 20, traffic share count is 1

Rack1R2#

Rack1R6#show ip route 132.1.5.0
Routing entry for 132.1.5.0/24
  Known via "eigrp 10", distance 170, metric 2561026816, type external
  Redistributing via eigrp 10
  Last update from 132.1.26.2 on FastEthernet0/0.26, 00:00:39 ago
  Routing Descriptor Blocks:
  * 132.1.26.2, from 132.1.26.2, 00:00:39 ago, via FastEthernet0/0.26
      Route metric is 2561026816, traffic share count is 1
      Total delay is 40110 microseconds, minimum bandwidth is 1 Kbit
      Reliability 1/255, minimum MTU 1 bytes
      Loading 1/255, Hops 3

Rack1R6#traceroute 132.1.5.5   

Type escape sequence to abort.
Tracing the route to 132.1.5.5

  1 132.1.26.2 0 msec 4 msec 0 msec
  2 132.1.23.3 16 msec 16 msec 16 msec
  3 132.1.35.5 48 msec *  44 msec
Rack1R6#

Technically we could have not allowed the 132.1.5.0/24 route from being redistributed into OSPF on R3 by filtering it with a route-map. Additionally we could have also used the “not-advertise” option on the summary command to summarize the route but not advertise. This is basically just a different way of filtering since the not-advertise option summarizes the routes but doesn’t advertise the summary.

To this point we have achieve full IP reachability but we have not met the requirements of the task. The task stated that redistribution should be done on both R2 and R3. We’ve only done it on R3. Now we need to perform redistribution on R2. We will need to implement whatever solution we used on R3 on R2.

Rack1R2(config)#router ospf 1
Rack1R2(config-router)#redistribute eigrp 10 subnets
Rack1R2(config-router)#summary-address 132.1.4.0 255.255.254.0
Rack1R2(config-router)#
Rack1R2(config-router)#router eigrp 1
Rack1R2(config-router)#redistribute ospf 1 metric 1 1 1 1 1
Rack1R2(config-router)#

We can now verify that we still have reachability from R6:

Rack1R6#show ip route 132.1.5.0
Routing entry for 132.1.5.0/24
  Known via "eigrp 10", distance 170, metric 2561026816, type external
  Redistributing via eigrp 10
  Last update from 132.1.26.2 on FastEthernet0/0.26, 00:00:04 ago
  Routing Descriptor Blocks:
  * 132.1.26.2, from 132.1.26.2, 00:00:04 ago, via FastEthernet0/0.26
      Route metric is 2561026816, traffic share count is 1
      Total delay is 40110 microseconds, minimum bandwidth is 1 Kbit
      Reliability 1/255, minimum MTU 1 bytes
      Loading 1/255, Hops 3

Rack1R6#traceroute 132.1.5.5   

Type escape sequence to abort.
Tracing the route to 132.1.5.5

  1 132.1.26.2 4 msec 0 msec 4 msec
  2 132.1.23.3 16 msec 16 msec 20 msec
  3 132.1.35.5 48 msec *  44 msec
Rack1R6#

We can now do a full reachabilty test to ensure everything is reachable. We will also need to do another reachabilty test when the backup link is active. Before we do that we should implement the same solution we used to stop the routing loop on R2 and R3 on R4. We do this because when the Frame Relay link between R3 and R5 is down the 132.1.5.0/24 route will be redistributed into OSPF on R4.

Rack1R4(config)#router ospf 1
Rack1R4(config-router)#redistribute eigrp 10 subnets
Rack1R4(config-router)#summary-address 132.1.4.0 255.255.254.0
Rack1R4(config-router)#
Rack1R4(config-router)#router eigrp 1
Rack1R4(config-router)#redistribute ospf 1 metric 1 1 1 1 1
Rack1R4(config-router)#

I need to add that for simplicity I only discussed the solution in regards to the 132.1.5.0/24 network but in the full solution we would need to consider the other network that is being redistributed into EIGRP on R5 (192.10.1.0/24). Also you may have noticed that the routing loop problem only occurred because a previous task asked us to redistributed the connected Ethernet interfaces into EIGRP on R5. If we would have just solved that 2 point task by advertising it natively using network statements we wouldn’t have had any routing loop problems and only lost the 2 points

Lastly you will find similar in-depth discussions added to the new IEWB-RS Volume II version 5 in regards to route redistribution. It’s important that everyone understands not only the solution we chose but what problems the solution is resolving along with any other possible solutions

The route is installed in R1 quite alright but I don’t know why I cannot ping this route from R1.

As shown below, I have no problem pinging this route on R3 even though the route came from R5 but both R3 & R5 are eigrp neighbors.

See the info below

R1
RSRack1R1#sh ip ro 192.10.1.5
Routing entry for 192.10.1.0/24
Known via “ospf 1″, distance 110, metric 20, type extern 2, forward metric 64
Last update from 132.1.0.2 on Serial1/0, 00:08:41 ago
Routing Descriptor Blocks:
* 132.1.0.2, from 150.1.2.2, 00:08:41 ago, via Serial1/0
Route metric is 20, traffic share count is 1

RSRack1R1#ping 192.10.1.5

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.10.1.5, timeout is 2 seconds:
…..
Success rate is 0 percent (0/5)

Pinging work on this route from R3:
Rack1R3#sh ip ro 192.10.1.5
Routing entry for 192.10.1.0/24
Known via “eigrp 10″, distance 170, metric 2195456, type external
Redistributing via eigrp 10, ospf 1
Advertised by ospf 1 metric 30 subnets
Last update from 132.1.35.5 on Serial1/1.1, 00:26:33 ago
Routing Descriptor Blocks:
* 132.1.35.5, from 132.1.35.5, 00:26:33 ago, via Serial1/1.1
Route metric is 2195456, traffic share count is 1
Total delay is 21000 microseconds, minimum bandwidth is 1544 Kbit
Reliability 255/255, minimum MTU 1500 bytes
Loading 1/255, Hops 1

Rack1R3#ping 192.10.1.5

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.10.1.5, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 32/44/56 ms

Also traceroute always get to R3 serial intf. and stops

Rack1R3#traceroute 192.10.1.5

Type escape sequence to abort
Tracing the route to 192.10.1.5

1 132.1.0.2 24 msec 52 msec 44 msec
2 132.1.23.3 64 msec 92 msec 68 msec
3 * * *
4 * * *
5 * * *

The Solution:

AFter wasting some good minutes on this wondering why ? I had to start “thinking” as a router to figure out what was wrong here……

First I narrowed the problem down to communication down to R3 as shown by traceroute, the routes hits R3 serial intf. so why is R3 not routing it towards R5 or routing the icmp backk to R1.

Finally I found out that I FORGOT to redistribute ospf into eigrp on R3, hence R5 does not really have the ip address of R1 in its routing table, hence when it receives packets from R1, it drops it!!

This is probably one of those kinds of silly mistakes that everyone talks about.

This scholarship gives you every resources at their disposal free of charge to pass CCIE lab.

Application for this will close by June 13, 2008 (new deadline now is June 20) and winner will be annouced sometimes in July.

To learn more, please follow this link.. IE Scholarship

I think this might be very useful to those still preparing for the CCIE Written exams (or any other CIsco examinations).

Please note that both the first & the retake attempts must both take place within the promotional dates.

To learn more, please click this link.   more….

This is a highly welcomed development as the Vol. I really needs some re-work.  And for IE to ask for comments before final version is released is a good thing.  One major thing that is missing in this workbook is that there is not enough Side Notes to explain some of the technologies in detail. And another nice to have, as part of the Notes, is giving other ways of configuring a feature apart from the one they have used.

As I was “labbing up” chapter 1 of this ver. 5 Beta release last night, I came across some interesting topics and I think I like the organisation of the workbook, but it is not really too different from older version.

The chapter 1 covers most of the common bridging/switching topics like VTP, Trunking, Etherchannel, STP, MSTP, SPAN/RSPAN, Private VLANs, L2 tunneling.  One topic that I will like to cover on this blog is the l2 tunneling and Fallback bridging.

You can read comments from reviewer of this vol. 5 at IE Workbookvol.1 ver. 5