Monday, 4 January 2016

MPLS Ticket 8 Tshoot

aTS02_R7#show ip bgp 172.16.0.0/16
BGP routing table entry for 172.16.0.0/16, version 64
Paths: (3 available, best #1, table default)
  Advertised to update-groups:
     1          2          3        
  Refresh Epoch 1
  Local
    0.0.0.0 from 0.0.0.0 (172.7.7.7)
      Origin incomplete, metric 10, localpref 101, weight 32768, valid, sourced, best
      rx pathid: 0, tx pathid: 0x0
  Refresh Epoch 2
  Local, (aggregated by 65100 172.8.8.8)
    172.8.8.8 (metric 11) from 172.8.8.8 (172.8.8.8)
      Origin IGP, metric 0, localpref 100, valid, internal, atomic-aggregate
      rx pathid: 0, tx pathid: 0
  Refresh Epoch 1
  Local, (aggregated by 65100 172.7.7.7)
    0.0.0.0 from 0.0.0.0 (172.7.7.7)
      Origin IGP, localpref 101, weight 32768, valid, aggregated, local, atomic-aggregate
      rx pathid: 0, tx pathid: 0
aTS02_R7#
aTS02_R7#
aTS02_R7#
aTS02_R7#show run | sec ospf
 ip ospf priority 0
router ospf 1
 router-id 172.7.7.7
 area 0 range 172.16.0.0 255.255.0.0
 redistribute bgp 65100 subnets
 network 172.247.247.1 0.0.0.0 area 3
 network 172.0.0.0 0.255.255.255 area 0
 default-information originate
  redistribute ospf 1
aTS02_R7#

R7:
===


CPS_TSB8_BUYER_R7#show running-config
Building configuration...

Current configuration : 6161 bytes
!
! Last configuration change at 23:28:26 CET Mon Jan 4 2016
!
version 15.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname CPS_TSB8_BUYER_R7
!
boot-start-marker
boot-end-marker
!
aqm-register-fnf
!
enable password cps
!
no aaa new-model
clock timezone CET 1 0
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
!
!
!
!
!
!
!
!


!
ip dhcp excluded-address 172.16.200.1
ip dhcp excluded-address 172.16.100.1
!
ip dhcp pool BancoBank_VLAN200
 default-router 172.16.200.1
 domain-name bancobank.org
 dns-server 172.7.7.7
!
ip dhcp pool BancoBank_VLAN100
 network 172.16.0.0 255.255.0.0
 default-router 172.16.100.1
 domain-name bancobank.org
 dns-server 172.7.7.7
!
ip dhcp pool BancoBank_VLAN200_Server1
 host 172.16.200.200 255.255.255.0
 client-identifier 01aa.bbcc.0064.00
 default-router 172.16.200.1
 domain-name bancobank.org
 dns-server 172.7.7.7
!
!
!
ip domain name bancobank.org
ip host remote2user1.bancobank.org 172.16.201.100
ip host Server1.bancobank.org 172.16.200.200
ip host User1.bancobank.org 172.16.100.200
ip host SW1.bancobank.org 172.1.1.1
ip host SW2.bancobank.org 172.2.2.2
ip host R7.bancobank.org 172.7.7.7
ip host R8.bancobank.org 172.8.8.8
ip host HomeUser.bancobank.org 10.23.45.100
ip host test 172.7.7.7
ip host remote1user1.bancobank.org 172.16.101.100
ip host remote1user2.bancobank.org 172.16.102.200
ip host remote2user2.bancobank.org 172.16.202.200
ip name-server 172.7.7.7
ip cef
no ipv6 cef
!
multilink bundle-name authenticated
mpls label protocol ldp
!
!
!
!
!
!
!
!
!
redundancy
!
!
track 21 ip sla 21
!
!      
!
!
!
!
crypto isakmp policy 1
 encr aes
 authentication pre-share
 group 2
crypto isakmp key cisco address 0.0.0.0      
!
!
crypto ipsec transform-set bancobank_TS esp-aes esp-sha-hmac
 mode transport
!
crypto ipsec profile bancobank_prof
 set transform-set bancobank_TS
!
!
!
!
!
!
!      
interface Loopback0
 ip address 172.7.7.7 255.255.255.255
!
interface Tunnel10
 description GRE to HomeOffice
 bandwidth 1000
 ip address 172.247.247.1 255.255.255.252
 no ip redirects
 ip mtu 1400
 ip nhrp authentication banco
 ip nhrp map multicast dynamic
 ip nhrp network-id 172
 ip nhrp holdtime 300
 ip tcp adjust-mss 1360
 delay 1000
 tunnel source Ethernet0/0.125
 tunnel mode gre multipoint
 tunnel key 100000
 tunnel protection ipsec profile bancobank_prof
!
interface Ethernet0/0
 no ip address
!      
interface Ethernet0/0.123
 encapsulation dot1Q 123
 ip address 123.45.67.22 255.255.255.252
 no ip redirects
 no ip proxy-arp
 ip nat inside
 ip virtual-reassembly in
!
interface Ethernet0/0.124
 encapsulation dot1Q 124
 ip address 124.45.67.22 255.255.255.252
 no ip redirects
 no ip proxy-arp
 ip nat inside
 ip virtual-reassembly in
!
interface Ethernet0/0.125
 encapsulation dot1Q 125
 ip address 125.45.67.22 255.255.255.252
 ip nat outside
 ip virtual-reassembly in
!
interface Ethernet0/1
 ip address 172.16.0.1 255.255.255.252
 ip nat inside
 ip virtual-reassembly in
 ip ospf priority 0
!
interface Ethernet0/2
 ip address 172.16.0.5 255.255.255.252
 ip nat inside
 ip virtual-reassembly in
!
interface Ethernet0/3
 ip address 172.16.0.9 255.255.255.252
 ip nat inside
 ip virtual-reassembly in
!
interface Ethernet1/0
 no ip address
!
interface Ethernet1/1
 no ip address
!
interface Ethernet1/2
 no ip address
!
interface Ethernet1/3
 no ip address
!
interface Ethernet2/0
 no ip address
!
interface Ethernet2/1
 no ip address
!
interface Ethernet2/2
 no ip address
!
interface Ethernet2/3
 no ip address
!
interface Ethernet3/0
 no ip address
 shutdown
!
interface Ethernet3/1
 no ip address
 shutdown
!
interface Ethernet3/2
 no ip address
 shutdown
!
interface Ethernet3/3
 no ip address
 shutdown
!
interface Serial4/0
 no ip address
 serial restart-delay 0
!
interface Serial4/1
 no ip address
 serial restart-delay 0
!
interface Serial4/2
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial4/3
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial5/0
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial5/1
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial5/2
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial5/3
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial6/0
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial6/1
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial6/2
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial6/3
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial7/0
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial7/1
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial7/2
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial7/3
 no ip address
 shutdown
 serial restart-delay 0
!
router ospf 1
 router-id 172.7.7.7
 redistribute bgp 65100 metric 10 subnets
 network 172.247.247.1 0.0.0.0 area 3
 network 172.0.0.0 0.255.255.255 area 0
 default-information originate
!
router bgp 65100
 bgp router-id 172.7.7.7
 bgp log-neighbor-changes
 no bgp default ipv4-unicast
 bgp default local-preference 102
 neighbor 123.45.67.21 remote-as 12345
 neighbor 124.45.67.21 remote-as 12345
 neighbor 172.8.8.8 remote-as 65100
 neighbor 172.8.8.8 update-source Loopback0
 !
 address-family ipv4
  aggregate-address 172.16.0.0 255.255.0.0 summary-only
  redistribute connected
  redistribute static
  redistribute ospf 1
  neighbor 123.45.67.21 activate
  neighbor 123.45.67.21 default-originate
  neighbor 124.45.67.21 activate
  neighbor 172.8.8.8 activate
  neighbor 172.8.8.8 next-hop-self
 exit-address-family
!
ip forward-protocol nd
!
!
no ip http server
no ip http secure-server
ip dns server
ip nat inside source list 172 interface Ethernet0/0.125 overload
ip route 0.0.0.0 0.0.0.0 125.45.67.21
!
!
!
access-list 172 permit ip any any
!
control-plane
!
!
!
!
!
!
!
!      
line con 0
 exec-timeout 0 0
 privilege level 15
 password cps
 logging synchronous
line aux 0
line vty 0
 password cps
 login
 transport input none
line vty 1 4
 login
 transport input none
!
!
end

R8:
===

CPS_TSB8_BUYER_R8#show running-config
Building configuration...

Current configuration : 5519 bytes
!
! Last configuration change at 23:23:35 CET Mon Jan 4 2016
!
version 15.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname CPS_TSB8_BUYER_R8
!
boot-start-marker
boot-end-marker
!
aqm-register-fnf
!
enable password cps
!
no aaa new-model
clock timezone CET 1 0
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
!
!
!
!
!
!
!
!


!
ip dhcp excluded-address 172.16.200.1
ip dhcp excluded-address 172.16.100.1
!
ip dhcp pool BancoBank_VLAN200
 network 172.16.200.0 255.255.255.0
 default-router 172.16.200.1
 domain-name bancobank.org
 dns-server 172.8.8.8
!
ip dhcp pool BancoBank_VLAN100_Host1
 host 172.16.100.100 255.255.255.0
 client-identifier 01aa.bbcc.0065.00
 domain-name bancobank.org
 default-router 172.16.100.1
 dns-server 172.8.8.8
!
ip dhcp pool BancoBank_VLAN100
 network 172.16.0.0 255.255.0.0
 domain-name bancobank.org
 dns-server 172.8.8.8
 default-router 172.16.100.100
!
!
!
ip domain name bancobank.org
ip host Host1.bancobank.org 172.16.100.200
ip host Server1.bancobank.org 172.16.200.200
ip host User1.bancobank.org 172.16.100.200
ip host SW1.bancobank.org 172.1.1.1
ip host SW2.bancobank.org 172.2.2.2
ip host R7.bancobank.org 172.7.7.7
ip host R8.bancobank.org 172.8.8.8
ip host HomeUser.bancobank.org 10.23.45.100
ip host Office1Server.bancobank.org 172.16.101.200
ip host Office2Server.bancobank.org 172.16.201.100
ip name-server 172.7.7.7
ip cef
no ipv6 cef
!
multilink bundle-name authenticated
mpls label protocol ldp
!
!
!
!
!
!
!
!
!
redundancy
!
!
!
!
!
!      
!
!
!
!
!
!
!
!
!
interface Loopback0
 ip address 172.8.8.8 255.255.255.255
!
interface Tunnel10
 no ip address
 tunnel source Ethernet0/0.124
!
interface Ethernet0/0
 no ip address
!
interface Ethernet0/0.123
 encapsulation dot1Q 123
 ip address 123.45.67.26 255.255.255.252
 no ip redirects
 no ip proxy-arp
 ip nat inside
 ip virtual-reassembly in
!
interface Ethernet0/0.124
 encapsulation dot1Q 124
 ip address 124.45.67.26 255.255.255.252
 no ip redirects
 no ip proxy-arp
 ip nat inside
 ip virtual-reassembly in
!
interface Ethernet0/0.125
 encapsulation dot1Q 125
 ip address 125.45.67.26 255.255.255.252
 ip nat outside
 ip virtual-reassembly in
!
interface Ethernet0/1
 ip address 172.16.0.17 255.255.255.252
 ip virtual-reassembly in
!
interface Ethernet0/2
 ip address 172.16.0.6 255.255.255.252
 ip nat inside
 ip virtual-reassembly in
!
interface Ethernet0/3
 ip address 172.16.0.13 255.255.255.252
 ip nat inside
 ip virtual-reassembly in
!
interface Ethernet1/0
 no ip address
!
interface Ethernet1/1
 no ip address
!
interface Ethernet1/2
 no ip address
!
interface Ethernet1/3
 no ip address
!
interface Ethernet2/0
 no ip address
!
interface Ethernet2/1
 no ip address
!
interface Ethernet2/2
 no ip address
!
interface Ethernet2/3
 no ip address
!
interface Ethernet3/0
 no ip address
 shutdown
!
interface Ethernet3/1
 no ip address
 shutdown
!
interface Ethernet3/2
 no ip address
 shutdown
!
interface Ethernet3/3
 no ip address
 shutdown
!
interface Serial4/0
 no ip address
 serial restart-delay 0
!
interface Serial4/1
 no ip address
 serial restart-delay 0
!
interface Serial4/2
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial4/3
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial5/0
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial5/1
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial5/2
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial5/3
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial6/0
 no ip address
 shutdown
 serial restart-delay 0
!      
interface Serial6/1
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial6/2
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial6/3
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial7/0
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial7/1
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial7/2
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial7/3
 no ip address
 shutdown
 serial restart-delay 0
!
router ospf 1
 router-id 172.8.8.8
 area 0 range 172.16.0.0 255.255.0.0
 redistribute bgp 65100 subnets
 network 172.0.0.0 0.255.255.255 area 0
 default-information originate
!
router bgp 65100
 bgp router-id 172.8.8.8
 bgp log-neighbor-changes
 no bgp default ipv4-unicast
 bgp default local-preference 101
 neighbor 123.45.67.25 remote-as 12345
 neighbor 124.45.67.25 remote-as 12345
 neighbor 172.7.7.7 remote-as 65100
 neighbor 172.7.7.7 update-source Loopback0
 !
 address-family ipv4
  aggregate-address 172.16.0.0 255.255.0.0 summary-only
  redistribute static
  neighbor 123.45.67.25 activate
  neighbor 123.45.67.25 default-originate route-map MED
  neighbor 123.45.67.25 route-map MED out
  neighbor 124.45.67.25 activate
  neighbor 172.7.7.7 activate
  neighbor 172.7.7.7 next-hop-self
 exit-address-family
!
ip forward-protocol nd
!
!
no ip http server
no ip http secure-server
ip dns server
ip nat inside source list 172 interface Ethernet0/0.125 overload
ip route 0.0.0.0 0.0.0.0 125.45.67.25
!
!
route-map MED permit 10
 set metric 100
 set origin incomplete
!
!
access-list 172 permit ip any any
!
control-plane
!
!
!
!
!
!
!
!
line con 0
 exec-timeout 0 0
 privilege level 15
 password cps
 logging synchronous
line aux 0
line vty 0
 password cps
 login
 transport input none
line vty 1 4
 login
 transport input none
!
!
end

No comments:

Post a Comment