External route with Down Bit set by CE router

I have a question regarding the Down Bit. All the documentation I see concentrates on the redistribution of the MP-BGP into OSPF but I want to know more about the OSPF redistribution into MP-BGP. I think the rule is different for Type3 and Type5 LSAs.
Lets say the CE redistributes a RIP route into OSPF, creating an LSA Type 5 route sent to the PE router - with the Down Bit set.
Will this PE router redistribute this route into MP-BGP?
I know that LSA Type 3 summary routes will not be redistributed into MP-BGP if the Down Bit is set but I am wondering about external OSPF routes with the Down Bit set????
I am assuming that redistribution of RIP into OSPF at the CE does infact set this Down Bit before passing on to the PE router?

How can step 2 in the sequence description say that PE2-AS1 receives an OSPF route with the Down Bit already set? This comes from the CE.
I find this all very confusing when I check out these sequences - I thought only the PE router assigns Down Bit to LSA Type 3 routes?
All the other references I see show how PE1-AS1 would normally set the Down Bit as it is redistributed back into OSPF?
Thanks for your help - I feel I am getting closer. It is just this second step that is throwing me!
Cheers
Walter

Similar Messages

  • OSPF down-bit set for a route originated as static?

    If remote PE is redistributing a static route to VRF, local PE will get this route via BGP. Now suppose this local PE and CE is running OSPF and BGP VPNv4 route is redistributed to OSPF, will this PE set down-bit for type 5 LSAs advertised to CE?
    I am bit confused by RFC-4576, it states that "When a type 3, 5, or 7 LSA is sent from a PE to a CE, the DN bit MUST be set", my understanding is that only if the route is originated from OSPF (at remote PE) then PE will set down-bit in LSAs advertised to CE.

    Niranjan,
    IOS also set the tag to the BGP ASN on external routes as a loop avoidance mechanism as described in RFC 4577, section 4.2.5.2. According to the same RFC, this method has to be supported by default by any compliant implementation for backward compatibility purposes.
    RFC4576: Using a Link State Advertisement (LSA) Options Bit to Prevent Looping in BGP/MPLS IP Virtual Private Networks (VPNs)
    http://www.ietf.org/rfc/rfc4576.txt?number=4576
    RFC4577: OSPF as the Provider/Customer Edge Protocol for BGP/MPLS IP Virtual Private Networks (VPNs)
    http://www.ietf.org/rfc/rfc4577.txt?number=4577
    Regards,

  • OSPF LSA with DC bit set

    Hello,
    If an LSA is received by an OSPF router which is not Demand Circuit capable, will that LSA be installed in link state database?
    Thanks         

    How can step 2 in the sequence description say that PE2-AS1 receives an OSPF route with the Down Bit already set? This comes from the CE.
    I find this all very confusing when I check out these sequences - I thought only the PE router assigns Down Bit to LSA Type 3 routes?
    All the other references I see show how PE1-AS1 would normally set the Down Bit as it is redistributed back into OSPF?
    Thanks for your help - I feel I am getting closer. It is just this second step that is throwing me!
    Cheers
    Walter

  • IChat AV 3.1.6 (Mac) with AIM 5.9 (PC) AV Chat external router port setting

    Hello,
    I'm using iChat 3.1.6 on my Mac and want to videoconference (with audio) to PC users having installed AIM 5.9.
    We can't get a videocon started probably due to firewall settings. I opened up my Mac firewalll ports, yet the external router has to be handled as well, as far as I've understood.
    My external router is a FRITZ!Box Fon WLAN 7050 (UI), Firmware-Version 14.04.15. Does anybody know the exact procedure to open the necessary ports on this device? The user interface is somewhat clumsy, and I'm not the most experienced user. Your detailed instructions are much appreciated (c:
    THX
    iMac Intel Core Duo 20" 2 GHz   Mac OS X (10.4.8)  

    Dave, Ralph,
    thanks to both of you for your helpful answers - I have tried port forwarding on my AVM Fritz!Box, and opening the indicated ports for TCP and for UDP works - except for port 5060 (UDP), where I get an error message "FEHLER: Eintrag kollidiert mit interner Regel." - the router won't accept the port number entry since it violates an internal rule.
    I have tried to get support both from my ISP (1&1) and from AVM, the Fritz!Box manufacturer 3 days ago. AVM hasn't answered yet, I just got a ticket number from them so it seems they are working on it. 1&1, my ISP, claim they don't block any ports with their VoIP service, especially not port 5060.
    Admittedly, being only one step away from a working solution, I'm somewhat clueless now.
    Any more suggestions? It seems to be a specific AVM Fritz!Box problem (unless 1&1 admit otherwise)?
    Thanx
    Wolfgang

  • Issues with "Higher performance" setting on Macbook Pro with external monitor

    Hi all,
    I rarely used the "Higher performance" setting in the Energy Saver pane of System Preferences.
    I use my MB connected with an external monitor, with its own screen closed. I tried to switch that setting on and the external monitor seems to repeatedly turn off and on. This strange behaviour vanishes if I open the MB's screen, using it in a double monitor configuration.
    Did anyone hear about some similar problem?
    p.s.: I don't know if this is the exact location for this thread, any suggestions is welcome

    It was set to 1080p, 1920x1080 did not show up as an option (even when holding the option key). 1080p should be equivlant. As as experiment I grabbed another monitor that was not being used. It is a 22 inch LG with a maximum display of 1920x1080, and its currently set to 1920x1080. The issue is a little different, was not detected as a TV this time, but the screen still looks blurry. There may be some improvement but not much.

  • I have a lion server set up to host storage for time machine backups. Is there a limit to how many different computers can back up to the single server to back up. I am only backing up the users folders . The backup drive is an external Drobo with 6 TB.

    I have a lion server set up to host storage for time machine backups. Is there a limit to how many different computers can back up to the single server to back up. I am only backing up the users folders . The backup drive is an external Drobo with 6 TB. Right now it seems to back up my users all day long. I set their time machine interval to every 5 hours but it still runs all day long and is very slow. Server is on a new Mac Server mini.

    AFAIK, there is no user limit.. it is simply a question of the network load. AFP is a fairly clean protocol.. but TM is not.. it does a lot of testing of the backup.. infact your setting of 5hour gap could well make it worse.
    I would sort out the clients that are doing 100GB backups to a different backup location.. no matter how fast your network.. 100GB takes time to backup.. and over wireless forever.. it will never end.
    I guess some of these clients are on wireless?? I would separate the TM of wireless to those that are wired. No more than 4 or 5 wireless clients to a target device. Otherwise you are saturating your network with backup data. And use 5ghz.. so close by.. it is much faster than 2.4ghz and you will get much better transfer rates.

  • I have an external hard drive, can I set a password on this? The drive is already populated with data

    I have an external hard drive, can I set a password on this? The drive is already populated with data

    ITs an old Iomega 100gb external HD that has about 90gb of music on it. The Macbook has a 500gb HD. I would like to put the iTunes library on the internal HD so I have room to expand.
    Phil0124 wrote:
    You can copy it to the internal hard drive as long as it fits on it. How big is your library, and how big is your internal HD?
    The only thing you do not want to do is over-stuff the internal hard drive. The OS needs some space to operate correctly, so if your iTunes library uses up more than say 80 to 85% of the internal HD's available space it may not be a good idea to transfer it over.
    With that said, the internal HD will provide slightly faster access to the library than the external would, but other than that, you can point iTunes to the external drive just fine.

  • Had to wipe my drive so I could do a clean install of snow leopard Now I look every where on how to move bookmarks, address book and I cal settings.  I have them back up on a external drive with Time machine but can not move, copy or restore my old sett d

    Had to wipe my drive so I could do a clean install of snow leopard.   Now I have look every where on how to move bookmarks, address book and I cal settings.  I have them back up on a external drive with Time machine but can not move, copy or restore my old settings.  The instructions I have found or no help or needs more clarafication on what to do.

    Use migration assistant to move your files.  http://support.apple.com/kb/HT4889

  • External Display with Lid Down?

    I'm figuring out how to get an external display connected to my MacBook
    So far, so good. I'm sitting at a big 20" wide-screen display as I type this.
    Now, I want to be able to close the lid on the MacBook when I'm working on this big display... But, as currently configured, when I close the lid, the display on the MacBook goes dark and takes the external display with it.
    Probably an easy solution... but damned if I know what it is...
    Thanks,
    --PS

    When you close the screen, the MacBook will go to sleep. That's as designed and there's no way to prevent it that I know of. But you should be able to just press a key on your external keyboard and wake the system back up again.
    That's working. Is the screen "on" when the lid is closed this way and I'm working from an external monitor? Seems to me that might not be such good thing.
    Now, here's the only remaining problem: getting audio out of my Mac and into my stereo receiver?
    The only audio out on the Mac is the earphone jack; the only inputs on my stereo are standard stereo line-in inputs.
    I can connect them that way, but there's an impedance mismatch which = hum. Is there an adapter or something that can overcome that?
    Thanks for the help,
    --PS

  • OSPF external route selection problem

    Hello. I have a situation where I got two paths to get to a destination. Router A can get to subnet C either through my Telco's onsite router (Router A->telco router->Router C)or through a secondary link that travels from Router A-> Router B->diffenent Telco router->Router C.
    The link between Router A and the telco router is area 0. The link between Router A->B->Telco router is also area 0.
    Normally I want traffic to go directly through the onsite telco router...and only go through the longer route if the onsite router goes down.
    For some reason I'm going through the suboptimal path. Here's what the OSPF database is telling me:
    Routing Bit Set on this LSA
    LS age: 1267
    Options: (No TOS-capability, DC)
    LS Type: AS External Link
    Link State ID: 192.168.33.0 (External Network Number )
    Advertising Router: 192.168.50.14
    LS Seq Number: 80000084
    Checksum: 0x4B8B
    Length: 36
    Network Mask: /24
    Metric Type: 1 (Comparable directly to link state metric)
    TOS: 0
    Metric: 100
    Forward Address: 0.0.0.0
    External Route Tag: 66
    LS age: 262
    Options: (No TOS-capability, DC)
    LS Type: AS External Link
    Link State ID: 192.168.33.0 (External Network Number )
    Advertising Router: 192.168.50.94
    LS Seq Number: 800003B8
    Checksum: 0xF757
    Length: 36
    Network Mask: /24
    Metric Type: 1 (Comparable directly to link state metric)
    TOS: 0
    Metric: 100
    Forward Address: 0.0.0.0
    External Route Tag: 66
    Both telco routers advertise this route as an extern type 1 with a metric of 100. Can anyone shed some light as to why my router is picking the path via 50.14 instead of 50.94? 50.94 is a locally connected network. 50.14 is a couple of hops away.
    Thanks,
    Mike

    No problem.
    Here's the output...
    show ip ospf border-routers
    OSPF Process 2 internal Routing Table
    Codes: i - Intra-area route, I - Inter-area route
    OSPF Process 1 internal Routing Table
    Codes: i - Intra-area route, I - Inter-area route
    i 10.0.22.3 [2] via 192.168.19.14, Vlan168, ABR/ASBR, Area 0, SPF 42
    i 10.0.22.2 [2] via 192.168.19.2, Vlan168, ABR/ASBR, Area 0, SPF 42
    i 192.168.30.5 [501] via 192.168.19.15, Vlan168, ASBR, Area 0, SPF 42
    i 192.168.30.5 [501] via 192.168.19.14, Vlan168, ASBR, Area 0, SPF 42
    i 172.29.50.1 [1] via 192.168.19.11, Vlan168, ASBR, Area 0, SPF 42
    i 172.18.1.2 [3] via 192.168.19.15, Vlan168, ABR/ASBR, Area 0, SPF 42
    i 172.18.1.3 [2] via 192.168.19.15, Vlan168, ABR/ASBR, Area 0, SPF 42
    i 192.168.1.5 [1] via 192.168.19.8, Vlan168, ASBR, Area 0, SPF 42
    i 10.0.32.2 [2] via 192.168.19.15, Vlan168, ABR/ASBR, Area 0, SPF 42
    i 10.0.32.3 [2] via 192.168.19.3, Vlan168, ABR/ASBR, Area 0, SPF 42
    i 172.27.95.1 [2] via 192.168.19.16, Vlan168, ABR/ASBR, Area 0, SPF 42
    i 172.19.1.3 [1] via 192.168.19.15, Vlan168, ABR/ASBR, Area 0, SPF 42
    i 172.19.1.2 [1] via 192.168.19.14, Vlan168, ABR/ASBR, Area 0, SPF 42
    i 10.0.24.2 [1] via 192.168.19.22, Vlan168, ABR/ASBR, Area 0, SPF 42
    i 10.0.24.3 [1] via 192.168.19.23, Vlan168, ABR/ASBR, Area 0, SPF 42
    i 192.168.19.4 [1] via 192.168.19.4, Vlan168, ASBR, Area 0, SPF 42
    i 172.27.87.1 [1] via 192.168.19.12, Vlan168, ASBR, Area 0, SPF 42
    i 192.168.19.19 [1] via 192.168.19.19, Vlan168, ASBR, Area 0, SPF 42
    i 172.20.1.2 [3] via 192.168.19.3, Vlan168, ASBR, Area 0, SPF 42
    i 172.20.1.3 [2] via 192.168.19.3, Vlan168, ASBR, Area 0, SPF 42
    I 10.0.16.11 [2] via 192.168.19.3, Vlan168, ASBR, Area 0, SPF 42
    I 10.0.16.11 [3] via 192.168.19.2, Vlan168, ASBR, Area 0, SPF 42
    I 10.0.16.10 [2] via 192.168.19.2, Vlan168, ASBR, Area 0, SPF 42
    I 192.168.50.14 [2] via 192.168.19.14, Vlan168, ASBR, Area 0, SPF 42
    i 192.168.50.94 [100] via 192.168.50.94, Vlan162, ASBR, Area 0, SPF 42
    i 172.21.1.2 [1] via 192.168.19.16, Vlan168, ASBR, Area 0, SPF 42
    i 10.0.229.2 [1] via 192.168.19.24, Vlan168, ABR/ASBR, Area 0, SPF 42
    i 10.0.17.2 [2] via 192.168.19.2, Vlan168, ABR/ASBR, Area 0, SPF 42
    i 10.0.17.3 [2] via 192.168.19.3, Vlan168, ABR/ASBR, Area 0, SPF 42
    i 192.168.8.1 [1] via 192.168.19.28, Vlan168, ASBR, Area 0, SPF 42
    i 192.168.16.173 [565] via 192.168.19.14, Vlan168, ABR/ASBR, Area 0, SPF 42
    i 192.168.16.173 [565] via 192.168.19.15, Vlan168, ABR/ASBR, Area 0, SPF 42
    i 172.27.193.2 [1] via 192.168.19.20, Vlan168, ASBR, Area 0, SPF 42
    i 172.16.1.2 [1] via 192.168.19.2, Vlan168, ABR/ASBR, Area 0, SPF 42
    i 172.16.1.3 [1] via 192.168.19.3, Vlan168, ABR/ASBR, Area 0, SPF 42

  • External Router and Firewall

    I have just been informed by Apple Care that my entire implementation for my Xserve is off base. We only got to this problem when Kerberos wouldn't work. I had judiciously followed the manual and had my Ether1 and 2 ports set up to do external (1) internal (2), provide DHCP, NAT, VPN the whole nine yards. Ran gateway assistant, got my FQDN, promoted to open directory. And now I am told by my Apple Care guy that this is not at all the way to go; that I need to have an external router with firewall and assign the static IP to it and then run the server interally only. Let me just say I took the 4 day server essentials class and that was noticably lacking in the discussion. So I guess what I am asking today is what an ideal router/firewall product would be suggested. I'd prefer it be rack mounted. I also need a product that the company is going to support. So suggestions are greatly appreciated.
    I guess I am back to square one on this. Full reinstall. Sigh.

    1. Run OD and AFP on the fixed IP Master. This should
    be your strongest, fastest server and must have a
    real fixed IP address, not allocated by DHCP. You
    need an FQDN for this IP address entereted in your
    internal DNS.
    WES: I believe I am hearing you say that the VPN/Firewall server (the weaker one) would now carry the static IP address on ethernet1; and have say 192.168.2.1 as it's manualy set internal IP on ethernet2; say 192.168.3.1. The better server would have it's IP manually set to, say 192.168.3.1.
    2. Run internal DHCP and DNS services on the Master
    also.
    WES: I am not sure why one would run DHCP and DNS here though? I figured that was a simplier process to accompish off the weaker server.
    3. On your firewall machine (the Replica, maybe
    running Tiger Server 10-user) run your webpages &
    VPN.
    WES: But as I understood it, one had to run this off of the machine with the FQDN. Same as mail. More below....
    4. Put Mail on a completely separate box in your
    DMZ.
    WES: I'm not sure I follow you here. I am out of boxes. Actually I'll have to buy another one if I got this route at all. I don't have nearly a large enough operation to justify three servers -- maybe not two -- except for this problem.
    One advantage of using a Tiger Server Master/Replica
    over a cheap firewall box is that you have redundancy
    available for all your Tiger Server apps (DHCP, DNS,
    etc). You also have an automatic backup of all user
    accounts/passwords and you don't need to configure
    separate VPN accounts/profiles for your users.
    WES: Yes that makes sense.
    Plus, if you're serious about VPN, 'proper' routers
    start to get real expensive if you need concurrent
    connections.
    WES: There is another issue that I am a bit uncertain about. Where I got into trouble here was trying to get Kerberos to work. However, I am not sure that in the end that's a service I'm going to need. If VPN encrypts all traffic over the internet is Kerberos necesssary. I DON'T need it in house as there isn't an internal security issue of any kind. Maybe I am shooting for something I don't need...which brings us to...I am still confused about the Apple Care guy's comment that with the set up as it is, he could essentially raid my OD. He rattled off a lot of cool talk that made me think he was right but I have never found any reference to this. Can anyone explain to me -- one box acting in this capacity for a small office with a public IP -- being that open to a security risk. Puzzles me.

  • How do I format an external HD with Recovery Disk Assistant on?

    Hi,
    I have seen a couple of threads on this, but I'm still not "Compos Mentis" with how to format an external drive with the Recovery Disk Assistant on.
    I have a 320GB which has my recovery disk assistant on - "Don't ask!" - Anyway it goes without saying that I want it all back, but I'll be damned if I can get there. I have managed to view (after a lot of faffing) what I thought was the External Drive, but now realise that it's not...this is what I am now seeing - are these removable via partition (disk0s1 & Recovery HD) as I have been merrily trying to erase them in he belief that they were the external HD and as far as I can see nothing has changed...only my annoyance!
    Anyway in short, I need this
    A) view the external drive and
    B) Format it back to 320GB
    Can anyone spoon feed me a way out?
    Thanks

    I don't understand what you mean by, "how to format an external drive with the Recovery Disk Assistant on."
    You don't need to use the Recovery HD to format an external drive. Just use Disk Utility:
    Drive Preparation
    1. Open Disk Utility in your Utilities folder.
    2. After DU loads select your hard drive (this is the entry with the mfgr.'s ID and size) from the left side list. Click on the Partition tab in the DU main window.
    3. Under the Volume Scheme heading set the number of partitions from the drop down menu to one. Click on the Options button, set the partition scheme to GUID then click on the OK button. Set the format type to Mac OS Extended (Journaled.) Click on the Partition button and wait until the process has completed.
    4. Select the volume you just created (this is the sub-entry under the drive entry) from the left side list. Click on the Erase tab in the DU main window.
    5. Set the format type to Mac OS Extended (Journaled.) Click on the Security button, check the button for Zero Data and click on OK to return to the Erase window.
    6. Click on the Erase button. The format process can take up to several hours depending upon the drive size.
    Steps 4-6 are optional but should be used on a drive that has never been formatted before, if the format type is not Mac OS Extended, if the partition scheme has been changed, or if a different operating system (not OS X) has been installed on the drive.

  • I have connected my new Macbook Air to my existing Samsung large external monitor with a VGA adaptor but I can't get the full mac desktop to display. No icons but then websites are coming up. Help!

    I have connected my new Macbook Air to my existing Samsung large external monitor with a VGA adaptor but I can't get the full mac desktop to display. No icons but then websites are coming up. Help!  Further info:  I am a complete newbie to Mac.  Had three macs prior to 2000 then four PCs.  Just come back and struggling a bit with the unfamiliarity. On my old PC laptop I could simply switch from the laptop screen to the large external monitor (and back)  with the F4 function key.  While I can get the background image from my MBA to display, that's it.  Until I noticed on the far left of the external monitor, the very edge of one of the web pages I was on.  So Idragged it over to display in the centre.  But that's all that's there.  And now I have gone out of those web pages but they are still displaying on the monitor.  There is some wierd disconnect.  I'm sure it is just a setting thing.  Will keep searching for answer but any advice welcome!

    Your dsplay is getting extended onto the external monitor. Chcnage the setting to duplicate it or only display on the external monitor and you should be fine,
    Let me know if this worked for you.

  • Yet ANOTHER New Problem - Can No Longer Upload an Image with 64 Bit IE9

    I've been uploading images as part of forum posts successfully for weeks using IE9 64 bit, set for Compatibility View.
    Suddenly, starting yesterday, using the little camera icon with IE9 64 bit, when I hit the [Browse] button, the entire IE window just disappears, losing the response in progress!
    Doing the exact same thing in IE9 32 bit works, and brings up the dialog with which to select a file.  So now the workaround is that I must use the 32 bit IE to access this site.
    Nothing is changing on this end.  No new Add-ons, no config changes.  Cache has been cleared to no avail.  Nothing appears in the Windows event logs.
    Can you folks please try a little harder to settle this forum software down?  It's getting rather frustrating to have features just keep dropping out like this.
    -Noel

    Jochem van Dieten wrote:
    That is a browser preference, not a preference set by some site through HTML. If you are unable to get this configured properly you need to ask in a Microsoft IE forum.
    Thank you for your thoughts.
    Your answer sounds authoritative, but just what preference would you say governs this behavior?  I don't believe there is one, at least not one that directly sets the IE default open folder behavior.  And I don't have my browser delete its cache or anything on the way out.
    Your answer would seem reasonable but for the fact that the behavior I'm observing changed here recently - in the past week or so - without my having changed browser preferences.  Could a Windows Update have changed IE9?  Possibly, but I don't recall there being one specifically that coincided with this observed change.
    No disrespect intended, but there's no reason to think the script driving the File Open dialog can't request a specific starting folder.  That's what I think has been changed here.
    Captiv8r wrote:
    For me, the dialog simply opens to the last place I elected to open from. It stays that way until I choose to change it again.
    What browser/version are you running?  Just curious.  And have you cleared your cache and checked with the current forum software?
    -Noel

  • Help needed with Mac Server set up

    Hi
    I have purchased a mini mac server, that i want to use as a replacement for my windows home server, for basic back ups & to run a website with possible remote access.
    At the initial configuration screen where if you manually configure your connection via ethernet, after putting the desired internal ip, sub net, router and DNS, it should find my domain on the next page where the server would be named. this does not happen, ( this is where i need the help )
    I have a domain name
    fixed external ip with my it pointing to my domain name
    and a RDNS setup with my ISP
    Any help?
    you can email me directly : [email protected]
    many thanks

    If you're running NAT, well, you have some choices on how you might choose to [set up DNS services|http://labs.hoffmanlabs.com/node/1436]. Once you get that sorted, there's a link there to the set-up for the public-facing (outside your external firewall) network configuration, too.

Maybe you are looking for