Monitoring a BGP route and AS-PATH.
Hello.
I need to receive a SNMP trap when a BGP route, received with a specific AS-PATH, disappears from routing table.
Any ideas?
Thanks.
Andrea
You can use EEM for this. Check out the cisco beyond web site for sample scripts that may help you do this.
A company that I used to work for, www.magnus.net had a mature EEM solution for doing this for large network environments. They took a standalone router and using EEM turned it into a route monitor. It would send out notifications when BGP routes of defined attributes like AS-Path diasappeared from routing tables. It was driven by an excel spreadsheet as inputs. It was written by a super CCIE engineer.
Similar Messages
-
EIGRP vs BGP route path selection scenario
I am looking for a routing solution to the following scenario. It is a fairly simple design.
I have two WAN connections between sites A and B. One is a 20 Meg Metro Ethernet Circuit running EIGRP. The other is a 10 Meg MPLS running BGP. What do I need to do in my configuration to make sure that the 20 Meg connection is the chosen path based off the fact that it has better speed and bandwidth? It appears to me that the MPLS is the preferred path even though it is slower.
See attached Diagram:
Site A Config
interface GigabitEthernet1/0/12
description PADC COX P2P 20 Meg
no switchport
bandwidth 20480
ip address 172.20.1.1 255.255.255.252
interface GigabitEthernet2/0/2
description LEVEL 3 MPLS
no switchport
bandwidth 10240
ip address 172.22.0.2 255.255.255.252
router eigrp 1
network 10.0.1.0 0.0.0.255
network 172.20.1.0 0.0.0.3
network 192.168.76.8 0.0.0.3
redistribute bgp 65003 metric 100 1 255 1 1500 route-map MPLS_NETWORKS
redistribute static route-map DEFAULT_ROUTE
router bgp 65003
bgp log-neighbor-changes
redistribute static
redistribute eigrp 1
neighbor 172.22.0.1 remote-as 1
default-information originate
Site B Config
interface GigabitEthernet0/1
description COX Communications 10 Meg to Venyu
bandwidth 20480
ip address 172.20.1.2 255.255.255.252
duplex auto
speed auto
service-policy output VOIP
interface GigabitEthernet0/2
description Level 3 MPLS
bandwidth 10240
ip address 172.22.1.2 255.255.255.252
duplex full
speed 100
router eigrp 1
network 10.3.1.0 0.0.0.31
network 10.52.1.0 0.0.0.255
network 10.76.6.0 0.0.0.255
network 172.20.1.0 0.0.0.3
network 192.168.63.64 0.0.0.63
network 192.168.76.249 0.0.0.0
passive-interface default
no passive-interface GigabitEthernet0/0
no passive-interface GigabitEthernet0/1
router bgp 65003
bgp log-neighbor-changes
network 10.3.1.0 mask 255.255.255.224
network 10.52.1.0 mask 255.255.255.0
network 10.76.6.0 mask 255.255.255.0
network 192.168.76.249 mask 255.255.255.255
neighbor 172.22.1.1 remote-as 1If each router is receiving advertisements for the same networks/subnet masks from both BGP and EIGRP it will always choose the BGP routes because they have a lower AD ie. 20 vs EIGRP 90.
Doesn't matter what the bandwidth is.
If you want to prefer the 20Mbps links then there are a number of options -
1) if you can summarise each sites subnets then advertise the summary via BGP and the more specific via EIGRP. More specific will be chosen even before AD is taken into account.
2) change the AD of either BGP or EIGRP so EIGRP ends up with the lower AD
3) run BGP on both links although you would still need to manipulate the attributes to make sure the link you want is used.
Jon -
Troubleshooting with IOS BGP and IOS XR BGP - routing table Empty
Hi
actually we tried to make a neigborhood between ASR9000 and Cisco 7600, we have the neigborhood active but on routing tables from ASR only have the networks locals or connected doesn´t learn anything from BGP 7600
the diagram is this:
When try to know the routes on ASR9000 from Cisco 7609 happen the follow
the neighbor is UP from Cisco 7600 and ASR 9000 but the routing table is empty.
the config on cisco 7600 is:
router bgp 2006
neighbor 172.16.14.6 remote-as 64512
address-family ipv4
neighbor 172.16.14.6 activate
the config on cisco ASR9000 is:
router bgp 64512
bgp router-id 172.16.161.1
address-family ipv4 unicast
neighbor 172.16.14.5
remote-as 2006
address-family ipv4 unicast
Help us
Best RegardsAnother important one is the fact that in XR you need to have RPL policies (even if they only have a "pass-all" functionality) to accept inbound/outbound routes in eBGP.
Check the article on the asr9000 unequal cost multipath that has some sample BGP outputs and show command verifications that may help also.
If not the case, get us the XR config from the A9K side.
Also what does the bgp table on teh IOS side look like? as Richard suggests, there doesnt seem to be anything injected by the 7600 itself.
regards
xander
Xander Thuijs
Principal Engineer CCIE#6775, ASR9000 -
SNMP for monitoring BGP routes
Is there any way by which we can find the number of routes and number of received routes using snmpget.
OID - 1.3.6.1.4.1.9.9.187.1.2.4.1.1 gives us information about the routes accepted after appling filters. But is there and OID for received-routes for a neighbour.SNMPv2-SMI::enterprises.9.9.187.1.2.4.1.1.192.168.1.2.1.1 = Counter32: 151
SNMPv2-SMI::enterprises.9.9.187.1.2.4.1.2.192.168.1.2.1.1 = Gauge32: 2521
SNMPv2-SMI::enterprises.9.9.187.1.2.4.1.3.192.168.1.2.1.1 = Gauge32: 0
SNMPv2-SMI::enterprises.9.9.187.1.2.4.1.4.192.168.1.2.1.1 = Gauge32: 0
SNMPv2-SMI::enterprises.9.9.187.1.2.4.1.5.192.168.1.2.1.1 = Gauge32: 0
SNMPv2-SMI::enterprises.9.9.187.1.2.4.1.6.192.168.1.2.1.1 = Gauge32: 2213402
SNMPv2-SMI::enterprises.9.9.187.1.2.4.1.7.192.168.1.2.1.1 = Gauge32: 108514
SNMPv2-SMI::enterprises.9.9.187.1.2.4.1.8.192.168.1.2.1.1 = Gauge32: 986169
sh ip bgp neighbors 192.168.1.2
Sent Rcvd
Prefix activity: ---- ----
Prefixes Current: 55785 151 (Consumes 8424 bytes)
Prefixes Total: 2213421 1822
Implicit Withdraw: 1220931 1649
Explicit Withdraw: 986180 22
Used as bestpath: n/a 34
Used as multipath: n/a 34
Saved (soft-reconfig): n/a 84 (Consumes 4368 bytes) -
Site to Site VPN Problems With 2801 Router and ASA 5505
Hello,
I am having some issue setting up a site to site ipsec VPN between a Cisco 2801 router and a Cisco ASA 5505. I was told there was a vpn previously setup with an old hosting provider, but those connections have been servered. Right now I am trying to get the sites to talk to the 2801. Here ere are my current configs, please let me know if you need anything else. Im stumped on this one. Thanks.
IP scheme at SIte A:
IP 172.19.3.x
sub 255.255.255.128
GW 172.19.3.129
Site A Ciscso 2801 Router
Current configuration : 11858 bytes
version 12.4
service timestamps debug datetime localtime
service timestamps log datetime localtime show-timezone
service password-encryption
hostname router-2801
boot-start-marker
boot-end-marker
logging message-counter syslog
logging buffered 4096
aaa new-model
aaa authentication login userauthen group radius local
aaa authorization network groupauthor local
aaa session-id common
clock timezone est -5
clock summer-time zone recurring last Sun Mar 2:00 1 Sun Nov 2:00
dot11 syslog
ip source-route
ip dhcp excluded-address 172.19.3.129 172.19.3.149
ip dhcp excluded-address 172.19.10.1 172.19.10.253
ip dhcp excluded-address 172.19.3.140
ip dhcp ping timeout 900
ip dhcp pool DHCP
network 172.19.3.128 255.255.255.128
default-router 172.19.3.129
domain-name domain.local
netbios-name-server 172.19.3.7
option 66 ascii 172.19.3.225
dns-server 172.19.3.140 208.67.220.220 208.67.222.222
ip dhcp pool VoiceDHCP
network 172.19.10.0 255.255.255.0
default-router 172.19.10.1
dns-server 208.67.220.220 8.8.8.8
option 66 ascii 172.19.10.2
lease 2
ip cef
ip inspect name SDM_LOW cuseeme
ip inspect name SDM_LOW dns
ip inspect name SDM_LOW ftp
ip inspect name SDM_LOW h323
ip inspect name SDM_LOW https
ip inspect name SDM_LOW icmp
ip inspect name SDM_LOW imap
ip inspect name SDM_LOW pop3
ip inspect name SDM_LOW netshow
ip inspect name SDM_LOW rcmd
ip inspect name SDM_LOW realaudio
ip inspect name SDM_LOW rtsp
ip inspect name SDM_LOW esmtp
ip inspect name SDM_LOW sqlnet
ip inspect name SDM_LOW streamworks
ip inspect name SDM_LOW tftp
ip inspect name SDM_LOW tcp
ip inspect name SDM_LOW udp
ip inspect name SDM_LOW vdolive
no ip domain lookup
ip domain name domain.local
multilink bundle-name authenticated
key chain key1
key 1
key-string 7 06040033484B1B484557
crypto pki trustpoint TP-self-signed-3448656681
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-3448bb6681
revocation-check none
rsakeypair TP-self-signed-344bbb56681
crypto pki certificate chain TP-self-signed-3448656681
certificate self-signed 01
3082024F
quit
username admin privilege 15 password 7 F55
archive
log config
hidekeys
crypto isakmp policy 10
encr 3des
hash md5
authentication pre-share
group 2
crypto isakmp key XXXXX address 209.118.0.1
crypto isakmp key xxxxx address SITE B Public IP
crypto isakmp keepalive 40 5
crypto isakmp nat keepalive 20
crypto isakmp client configuration group IISVPN
key 1nsur3m3
dns 172.19.3.140
wins 172.19.3.140
domain domain.local
pool VPN_Pool
acl 198
crypto isakmp profile IISVPNClient
description VPN clients profile
match identity group IISVPN
client authentication list userauthen
isakmp authorization list groupauthor
client configuration address respond
crypto ipsec transform-set myset esp-3des esp-md5-hmac
crypto dynamic-map Dynamic 5
set transform-set myset
set isakmp-profile IISVPNClient
qos pre-classify
crypto map VPN 10 ipsec-isakmp
set peer 209.118.0.1
set peer SITE B Public IP
set transform-set myset
match address 101
qos pre-classify
crypto map VPN 65535 ipsec-isakmp dynamic Dynamic
track 123 ip sla 1 reachability
delay down 15 up 10
class-map match-any VoiceTraffic
match protocol rtp audio
match protocol h323
match protocol rtcp
match access-group name VOIP
match protocol sip
class-map match-any RDP
match access-group 199
policy-map QOS
class VoiceTraffic
bandwidth 512
class RDP
bandwidth 768
policy-map MainQOS
class class-default
shape average 1500000
service-policy QOS
interface FastEthernet0/0
description $ETH-LAN$$ETH-SW-LAUNCH$$INTF-INFO-FE 0$$FW_INSIDE$
ip address 172.19.3.129 255.255.255.128
ip access-group 100 in
ip inspect SDM_LOW in
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
interface FastEthernet0/0.10
description $ETH-VoiceVLAN$$
encapsulation dot1Q 10
ip address 172.19.10.1 255.255.255.0
ip inspect SDM_LOW in
ip nat inside
ip virtual-reassembly
interface FastEthernet0/1
description "Comcast"
ip address PUB IP 255.255.255.248
ip access-group 102 in
ip inspect SDM_LOW out
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
crypto map VPN
interface Serial0/1/0
description "Verizon LEC Circuit ID: w0w13908 Site ID: U276420-1"
bandwidth 1536
no ip address
encapsulation frame-relay IETF
frame-relay lmi-type ansi
interface Serial0/1/0.1 point-to-point
bandwidth 1536
ip address 152.000.000.18 255.255.255.252
ip access-group 102 in
ip verify unicast reverse-path
ip inspect SDM_LOW out
ip nat outside
ip virtual-reassembly
frame-relay interface-dlci 500 IETF
crypto map VPN
service-policy output MainQOS
interface Serial0/2/0
description "PAETEC 46.HCGS.788446.CV (Verizon ID) / 46.HCGS.3 (PAETEC ID)"
ip address 123.252.123.102 255.255.255.252
ip access-group 102 in
ip inspect SDM_LOW out
ip nat outside
ip virtual-reassembly
encapsulation ppp
crypto map VPN
service-policy output MainQOS
ip local pool VPN_Pool 172.20.3.130 172.20.3.254
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 50.00.000.110 track 123
ip route 0.0.0.0 0.0.0.0 111.252.237.000 254
ip route 122.112.197.20 255.255.255.255 209.252.237.101
ip route 208.67.220.220 255.255.255.255 50.78.233.110
no ip http server
no ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip flow-top-talkers
top 20
sort-by bytes
ip nat inside source route-map COMCAST interface FastEthernet0/1 overload
ip nat inside source route-map PAETEC interface Serial0/2/0 overload
ip nat inside source route-map VERIZON interface Serial0/1/0.1 overload
ip nat inside source static tcp 172.19.3.140 21 PUB IP 21 extendable
ip access-list extended VOIP
permit ip 172.20.3.0 0.0.0.127 host 172.19.3.190
permit ip host 172.19.3.190 172.20.3.0 0.0.0.127
ip radius source-interface FastEthernet0/0
ip sla 1
icmp-echo 000.67.220.220 source-interface FastEthernet0/1
timeout 10000
frequency 15
ip sla schedule 1 life forever start-time now
access-list 23 permit 172.19.3.0 0.0.0.127
access-list 23 permit 172.19.3.128 0.0.0.127
access-list 23 permit 173.189.251.192 0.0.0.63
access-list 23 permit 107.0.197.0 0.0.0.63
access-list 23 permit 173.163.157.32 0.0.0.15
access-list 23 permit 72.55.33.0 0.0.0.255
access-list 23 permit 172.19.5.0 0.0.0.63
access-list 100 remark "Outgoing Traffic"
access-list 100 deny ip 67.128.87.156 0.0.0.3 any
access-list 100 deny ip host 255.255.255.255 any
access-list 100 deny ip 127.0.0.0 0.255.255.255 any
access-list 100 permit tcp host 172.19.3.190 any eq smtp
access-list 100 permit tcp host 172.19.3.137 any eq smtp
access-list 100 permit tcp any host 66.251.35.131 eq smtp
access-list 100 permit tcp any host 173.201.193.101 eq smtp
access-list 100 permit ip any any
access-list 100 permit tcp any any eq ftp
access-list 101 remark "Interesting VPN Traffic"
access-list 101 permit ip 172.19.3.128 0.0.0.127 172.19.3.0 0.0.0.127
access-list 101 permit ip 172.20.3.128 0.0.0.127 172.19.3.0 0.0.0.127
access-list 101 permit ip 172.19.3.128 0.0.0.127 host 172.19.250.10
access-list 101 permit ip 172.19.3.128 0.0.0.127 host 172.19.250.11
access-list 101 permit tcp any any eq ftp
access-list 101 permit tcp any any eq ftp-data
access-list 102 remark "Inbound Access"
access-list 102 permit udp any host 152.179.53.18 eq non500-isakmp
access-list 102 permit udp any host 152.179.53.18 eq isakmp
access-list 102 permit esp any host 152.179.53.18
access-list 102 permit ahp any host 152.179.53.18
access-list 102 permit udp any host 209.000.000.102 eq non500-isakmp
access-list 102 permit udp any host 209.000.000.102 eq isakmp
access-list 102 permit esp any host 209.000.000.102
access-list 102 permit ahp any host 209.000.000.102
access-list 102 permit udp any host PUB IP eq non500-isakmp
access-list 102 permit udp any host PUB IP eq isakmp
access-list 102 permit esp any host PUB IP
access-list 102 permit ahp any host PUB IP
access-list 102 permit ip 72.55.33.0 0.0.0.255 any
access-list 102 permit ip 107.0.197.0 0.0.0.63 any
access-list 102 deny ip 172.19.3.128 0.0.0.127 any
access-list 102 permit icmp any any echo-reply
access-list 102 permit icmp any any time-exceeded
access-list 102 permit icmp any any unreachable
access-list 102 permit icmp any any
access-list 102 deny ip any any log
access-list 102 permit tcp any host 172.19.3.140 eq ftp
access-list 102 permit tcp any host 172.19.3.140 eq ftp-data established
access-list 102 permit udp any host SITE B Public IP eq non500-isakmp
access-list 102 permit udp any host SITE B Public IP eq isakmp
access-list 102 permit esp any host SITE B Public IP
access-list 102 permit ahp any host SITE B Public IP
access-list 110 remark "Outbound NAT Rule"
access-list 110 remark "Deny VPN Traffic NAT"
access-list 110 deny ip 172.19.3.128 0.0.0.127 172.19.3.0 0.0.0.127
access-list 110 deny ip 172.19.3.128 0.0.0.127 172.19.10.0 0.0.0.255
access-list 110 deny ip 172.19.10.0 0.0.0.255 172.19.3.128 0.0.0.127
access-list 110 deny ip 172.20.3.128 0.0.0.127 172.19.3.0 0.0.0.127
access-list 110 deny ip 172.19.3.128 0.0.0.127 172.20.3.128 0.0.0.127
access-list 110 deny ip 172.19.3.128 0.0.0.127 host 172.19.250.11
access-list 110 deny ip 172.19.3.128 0.0.0.127 host 172.19.250.10
access-list 110 permit ip 172.19.3.128 0.0.0.127 any
access-list 110 permit ip 172.19.10.0 0.0.0.255 any
access-list 198 remark "Networks for IISVPN Client"
access-list 198 permit ip 172.19.3.0 0.0.0.127 172.20.3.128 0.0.0.127
access-list 198 permit ip 172.19.3.128 0.0.0.127 172.20.3.128 0.0.0.127
access-list 199 permit tcp any any eq 3389
route-map PAETEC permit 10
match ip address 110
match interface Serial0/2/0
route-map COMCAST permit 10
match ip address 110
match interface FastEthernet0/1
route-map VERIZON permit 10
match ip address 110
match interface Serial0/1/0.1
snmp-server community 123 RO
radius-server host 172.19.3.7 auth-port 1645 acct-port 1646 key 7 000000000000000
control-plane
line con 0
line aux 0
line vty 0 4
access-class 23 in
privilege level 15
transport input telnet ssh
line vty 5 15
access-class 23 in
privilege level 15
transport input telnet ssh
scheduler allocate 20000 1000
ntp server 128.118.25.3
ntp server 217.150.242.8
end
IP scheme at site B:
ip 172.19.5.x
sub 255.255.255.292
gw 172.19.5.65
Cisco ASA 5505 at Site B
ASA Version 8.2(5)
hostname ASA5505
domain-name domain.com
enable password b04DSH2HQqXwS8wi encrypted
passwd b04DSH2HQqXwS8wi encrypted
names
interface Ethernet0/0
switchport access vlan 2
interface Ethernet0/1
interface Ethernet0/2
interface Ethernet0/3
interface Ethernet0/4
interface Ethernet0/5
interface Ethernet0/6
interface Ethernet0/7
interface Vlan1
nameif inside
security-level 100
ip address 172.19.5.65 255.255.255.192
interface Vlan2
nameif outside
security-level 0
ip address SITE B public IP 255.255.255.224
boot system disk0:/asa825-k8.bin
ftp mode passive
clock timezone est -5
clock summer-time zone recurring last Sun Mar 2:00 last Sun Oct 2:00
dns server-group DefaultDNS
domain-name iis-usa.com
same-security-traffic permit intra-interface
object-group network old hosting provider
network-object 72.55.34.64 255.255.255.192
network-object 72.55.33.0 255.255.255.0
network-object 173.189.251.192 255.255.255.192
network-object 173.163.157.32 255.255.255.240
network-object 66.11.1.64 255.255.255.192
network-object 107.0.197.0 255.255.255.192
object-group network old hosting provider
network-object host 172.19.250.10
network-object host 172.19.250.11
access-list 100 extended permit ip 172.19.5.64 255.255.255.192 object-group old hosting provider
access-list 100 extended permit ip 172.19.5.64 255.255.255.192 172.19.3.128 255.255.255.128
access-list 10 extended deny ip 0.0.0.0 255.0.0.0 any
access-list 10 extended deny ip 127.0.0.0 255.0.0.0 any
access-list 10 extended deny ip 169.254.0.0 255.255.0.0 any
access-list 10 extended deny ip 172.16.0.0 255.255.0.0 any
access-list 10 extended deny ip 224.0.0.0 224.0.0.0 any
access-list 10 extended permit icmp any any echo-reply
access-list 10 extended permit icmp any any time-exceeded
access-list 10 extended permit icmp any any unreachable
access-list 10 extended permit icmp any any traceroute
access-list 10 extended permit icmp any any source-quench
access-list 10 extended permit icmp any any
access-list 10 extended permit tcp object-group old hosting provider any eq 3389
access-list 10 extended permit tcp any any eq https
access-list 10 extended permit tcp any any eq www
access-list 110 extended permit ip 172.19.5.64 255.255.255.192 172.19.3.0 255.255.255.128
access-list 110 extended permit ip 172.19.5.64 255.255.255.192 object-group old hosting provider
pager lines 24
logging enable
logging timestamp
logging console emergencies
logging monitor emergencies
logging buffered warnings
logging trap debugging
logging history debugging
logging asdm informational
mtu inside 1500
mtu outside 1500
ip verify reverse-path interface inside
ip verify reverse-path interface outside
ip audit name jab attack action alarm drop reset
ip audit name probe info action alarm drop reset
ip audit interface outside probe
ip audit interface outside jab
ip audit info action alarm drop reset
ip audit attack action alarm drop reset
ip audit signature 2000 disable
ip audit signature 2001 disable
ip audit signature 2004 disable
ip audit signature 2005 disable
icmp unreachable rate-limit 1 burst-size 1
icmp permit 75.150.169.48 255.255.255.240 outside
icmp permit 72.44.134.16 255.255.255.240 outside
icmp permit 72.55.33.0 255.255.255.0 outside
icmp permit any outside
icmp permit 173.163.157.32 255.255.255.240 outside
icmp permit 107.0.197.0 255.255.255.192 outside
icmp permit 66.11.1.64 255.255.255.192 outside
icmp deny any outside
asdm image disk0:/asdm-645.bin
no asdm history enable
arp timeout 14400
global (outside) 1 interface
nat (inside) 0 access-list 100
nat (inside) 1 0.0.0.0 0.0.0.0
access-group 10 in interface outside
route outside 0.0.0.0 0.0.0.0 174.78.151.225 1
timeout xlate 3:00:00
timeout conn 24:00:00 half-closed 0:10:00 udp 0:10:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 24:00:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
timeout floating-conn 0:00:00
dynamic-access-policy-record DfltAccessPolicy
http 107.0.197.0 255.255.255.192 outside
http 66.11.1.64 255.255.255.192 outside
snmp-server host outside 107.0.197.29 community *****
snmp-server host outside 107.0.197.30 community *****
snmp-server host inside 172.19.250.10 community *****
snmp-server host outside 172.19.250.10 community *****
snmp-server host inside 172.19.250.11 community *****
snmp-server host outside 172.19.250.11 community *****
snmp-server host outside 68.82.122.239 community *****
snmp-server host outside 72.55.33.37 community *****
snmp-server host outside 72.55.33.38 community *****
snmp-server host outside 75.150.169.50 community *****
snmp-server host outside 75.150.169.51 community *****
no snmp-server location
no snmp-server contact
snmp-server community *****
snmp-server enable traps snmp authentication linkup linkdown coldstart
crypto ipsec transform-set ESP-3DES-MD5 esp-3des esp-md5-hmac
crypto ipsec security-association lifetime seconds 28800
crypto ipsec security-association lifetime kilobytes 4608000
crypto map VPNMAP 10 match address 110
crypto map VPNMAP 10 set peer 72.00.00.7 old vpn public ip Site B Public IP
crypto map VPNMAP 10 set transform-set ESP-3DES-MD5
crypto map VPNMAP 10 set security-association lifetime seconds 86400
crypto map VPNMAP 10 set security-association lifetime kilobytes 4608000
crypto map VPNMAP interface outside
crypto isakmp identity address
crypto isakmp enable outside
crypto isakmp policy 20
authentication pre-share
encryption 3des
hash md5
group 2
lifetime 86400
telnet 172.19.5.64 255.255.255.192 inside
telnet 172.19.3.0 255.255.255.128 outside
telnet timeout 60
ssh 0.0.0.0 0.0.0.0 inside
ssh 0.0.0.0 0.0.0.0 outside
ssh timeout 60
console timeout 0
management-access inside
dhcpd dns 172.19.3.140
dhcpd wins 172.19.3.140
dhcpd ping_timeout 750
dhcpd domain iis-usa.com
dhcpd address 172.19.5.80-172.19.5.111 inside
dhcpd enable inside
threat-detection basic-threat
threat-detection scanning-threat shun except object-group old hosting provider
threat-detection statistics
threat-detection statistics tcp-intercept rate-interval 30 burst-rate 400 average-rate 200
ntp server 128.118.25.3 source outside
ntp server 217.150.242.8 source outside
tunnel-group 72.00.00.7 type ipsec-l2l
tunnel-group 72.00.00.7 ipsec-attributes
pre-shared-key *****
tunnel-group old vpn public ip type ipsec-l2l
tunnel-group old vpn public ip ipsec-attributes
pre-shared-key *****
tunnel-group SITE A Public IP type ipsec-l2l
tunnel-group SITE A Public IP ipsec-attributes
pre-shared-key *****
class-map inspection_default
match default-inspection-traffic
policy-map type inspect dns preset_dns_map
parameters
message-length maximum 512
policy-map global_policy
class inspection_default
inspect dns preset_dns_map
inspect ftp
inspect h323 h225
inspect h323 ras
inspect rsh
inspect rtsp
inspect esmtp
inspect sqlnet
inspect skinny
inspect sunrpc
inspect xdmcp
inspect netbios
inspect tftp
inspect pptp
inspect sip
service-policy global_policy global
prompt hostname context
no call-home reporting anonymous
call-home
profile CiscoTAC-1
no active
destination address http https://tools.cisco.com/its/service/oddce/services/DDCEService
destination address email [email protected]
destination transport-method http
subscribe-to-alert-group diagnostic
subscribe-to-alert-group environment
subscribe-to-alert-group inventory periodic monthly
subscribe-to-alert-group configuration periodic monthly
subscribe-to-alert-group telemetry periodic daily
Cryptochecksum:
: endI have removed the old "set peer" and have added:
IOS router:
access-list 101 permit ip 172.19.3.128 0.0.0.127 172.19.5.64 0.0.0.65
ASA fw:
access-list 110 extended permit ip 172.19.5.64 255.255.255.192 172.19.3.128 255.255.255.128
on the router I have also added;
access-list 110 deny ip 172.19.3.128 0.0.0.127 172.19.5.64 0.0.0.63
Here is my acl :
access-list 110 remark "Outbound NAT Rule"
access-list 110 remark "Deny VPN Traffic NAT"
access-list 110 deny ip 172.19.3.128 0.0.0.127 172.19.3.0 0.0.0.127
access-list 110 deny ip 172.19.3.128 0.0.0.127 172.19.10.0 0.0.0.255
access-list 110 deny ip 172.19.10.0 0.0.0.255 172.19.3.128 0.0.0.127
access-list 110 deny ip 172.20.3.128 0.0.0.127 172.19.3.0 0.0.0.127
access-list 110 deny ip 172.19.3.128 0.0.0.127 172.20.3.128 0.0.0.127
access-list 110 deny ip 172.19.3.128 0.0.0.127 host 172.19.250.11
access-list 110 deny ip 172.19.3.128 0.0.0.127 host 172.19.250.10
access-list 110 permit ip 172.19.3.128 0.0.0.127 any
access-list 110 permit ip 172.19.10.0 0.0.0.255 any
access-list 110 deny ip 172.19.3.128 0.0.0.127 172.19.5.64 0.0.0.63
access-list 198 remark "Networks for IISVPN Client"
access-list 198 permit ip 172.19.3.0 0.0.0.127 172.20.3.128 0.0.0.127
access-list 198 permit ip 172.19.3.128 0.0.0.127 172.20.3.128 0.0.0.127
Still no ping tothe other site. -
MPLS BGP routes push to DMVPN spokes
I have an MPLS with BGP. I also have sites that are not connected directly to the MPLS, but have a s2s VPN to hub sites that are connected to the MPLS and that way they access the MPLS resources. I need to communicate the route changes to the MPLS when the DMVPN fails-over to another hub.
Currently this is my config:
Datacenter (MPLS only)
interface GigabitEthernet0/1
description MPLS
ip address 192.168.0.34 255.255.255.252
interface Vlan2
ip address 192.168.96.2 255.255.255.0
router bgp 65511
bgp log-neighbor-changes
network 192.168.96.0
neighbor 192.168.0.33 remote-as 65510
Hub site 1 (MPLS + internet)
interface Tunnel200
ip address 10.99.99.1 255.255.255.0
no ip redirects
ip mtu 1400
ip nhrp authentication auth
ip nhrp map multicast dynamic
ip nhrp network-id 12345
ip nhrp holdtime 600
tunnel source GigabitEthernet0/0
tunnel mode gre multipoint
tunnel key 200
tunnel protection ipsec profile dmvpn
interface GigabitEthernet0/1
description MPLS
ip address 192.168.1.2 255.255.255.0 secondary
ip address 192.168.0.2 255.255.255.252
router bgp 65001
bgp log-neighbor-changes
network 192.168.1.0
network 192.168.21.0
!10.99 clients are DMVPN spokes
neighbor 10.99.99.3 remote-as 99010
neighbor 10.99.99.3 route-reflector-client
neighbor 10.99.99.21 remote-as 99001
neighbor 10.99.99.21 route-reflector-client
!as 65000 is the MPLS PE
neighbor 192.168.0.1 remote-as 65000
Hub Site 2, has the same configuration, except for local ip address and router BGP ID.
Spoke site:
interface Tunnel200
ip address 10.99.99.3 255.255.255.0
no ip redirects
ip mtu 1400
ip nhrp authentication auth
ip nhrp map 10.99.99.1 PUBLIC_IP_HUB_1
ip nhrp map 10.99.99.16 PUBLIC_IP_HUB_2
ip nhrp network-id 12345
ip nhrp holdtime 600
ip nhrp nhs 10.99.99.1 priority 1
ip nhrp nhs 10.99.99.16 priority 5
ip nhrp nhs fallback 60
tunnel source GigabitEthernet0/0
tunnel mode gre multipoint
tunnel key 200
tunnel protection ipsec profile dmvpn
interface GigabitEthernet0/1
description Internal
ip address 192.168.3.1 255.255.255.192
router bgp 99010
bgp log-neighbor-changes
network 192.168.3.0
neighbor 10.99.99.1 remote-as 65001
neighbor 10.99.99.16 remote-as 65013
On this spoke site
#sh ip route
B 192.168.1.0/24 [20/0] via 10.99.99.1, 00:47:01
which is the HUB network, but the rest of the MPLS routes are not "learned".
What am I missing?
Thanks!Hi Jon, I've ommited the configuration of the MPLS provider routers in between. The DC is connected to a router that has the AS 65510.
DC:CPE---PE:{MPLS}PE---CPE:HUB---{internet}---Spoke
The DC is ok getting the network information via BGP:
#sh ip route
B 192.168.3.0/24 [20/0] via 192.168.0.33, 3d05h
B 192.168.21.0/24 [20/0] via 192.168.0.33, 3d05h
#sh ip bgp 192.168.21.0
BGP routing table entry for 192.168.21.0/24, version 559
Paths: (1 available, best #1, table default)
Not advertised to any peer
Refresh Epoch 1
65510 3549 6140 3549 65000
192.168.0.33 from 192.168.0.33 (###.###.###.###)
Origin IGP, localpref 100, valid, external, best
#sh ip route 192.168.21.0
Routing entry for 192.168.21.0/24
Known via "bgp 65511", distance 20, metric 0
Tag 65510, type external
Last update from 192.168.0.33 3d05h ago
Routing Descriptor Blocks:
* 192.168.0.33, from 192.168.0.33, 3d05h ago
Route metric is 0, traffic share count is 1
AS Hops 5
Route tag 65510
MPLS label: none
Spoke:
#sh ip bgp
BGP table version is 494, local router ID is 192.168.21.1
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter,
x best-external, a additional-path, c RIB-compressed,
Origin codes: i - IGP, e - EGP, ? - incomplete
RPKI validation codes: V valid, I invalid, N Not found
Network Next Hop Metric LocPrf Weight Path
*> 10.0.129.32/27 10.99.99.16 0 65013 65012 3549 ?
*> 192.168.96.0 10.99.99.16 0 65013 65012 3549 6745 65510 ?
#sh ip route 192.168.96.0
Routing entry for 192.168.96.0/24
Known via "bgp 99001", distance 20, metric 0
Tag 65013, type external
Last update from 10.99.99.16 00:02:11 ago
Routing Descriptor Blocks:
* 10.99.99.16, from 10.99.99.16, 00:02:11 ago
Route metric is 0, traffic share count is 1
AS Hops 5
Route tag 65013
MPLS label: none
#sh ip bgp 192.168.96.0
BGP routing table entry for 192.168.96.0/24, version 465
Paths: (1 available, best #1, table default)
Not advertised to any peer
Refresh Epoch 2
65013 65012 3549 6745 65510
10.99.99.16 from 10.99.99.16 (10.2.16.1)
Origin incomplete, localpref 100, valid, external, best
The route is not being updated to the rest of the routers, and the 192.168.21.0 network is still announced via the old route.
(from spoke)
ping 192.168.96.2
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.96.2, timeout is 2 seconds:
Success rate is 0 percent (0/5)
From DC
#traceroute 192.168.21.1
Type escape sequence to abort.
Tracing the route to 192.168.21.1
VRF info: (vrf in name/id, vrf out name/id)
1 192.168.0.33 [AS 65510] 0 msec 0 msec 0 msec
2 172.50.1.33 [AS 65510] 56 msec 36 msec 36 msec
3 10.80.1.1 [AS 3549] 44 msec 44 msec 44 msec
4 10.80.1.2 [AS 3549] 172 msec 172 msec 168 msec
5 172.50.1.1 [AS 3549] 168 msec 168 msec 172 msec
6 172.50.1.2 [AS 3549] 180 msec 180 msec 176 msec
7 192.168.0.2 [AS 65000] 172 msec 172 msec 168 msec <- old route, should be 192.168.0.9
8 192.168.0.2 [AS 65000] !H * !H -
Query on BGP route distribution
Hello Everyone
In the below scenario (GNS3), IBGP peering enabled between R1-R2, R1-R3, R2-R3 and EBGP peering enabled between R2-R4,R3-R5,R4-R6,R5-R7. OSPF enabled as IGP. Scenario attached for reference.
The problem I've observed in R1 is not getting entire BGP routing table for destinations 30.x.x.x/40.x.x.x.
I'm able to see only best routes in R1 BGP routing table, but alternate valid routes are not visible in its topology table.
R1#sh ip bgp
BGP table version is 81, local router ID is 100.100.2.1
*>i30.30.1.0/24 10.10.1.2 0 100 0 200 300 ?
*>i30.30.2.0/24 10.10.1.2 0 100 0 200 300 ?
*>i40.40.1.0/24 10.10.2.2 0 100 0 200 400 i
*>i40.40.2.0/24 10.10.2.2 0 100 0 200 400 i
*> 100.100.1.0/24 0.0.0.0 0 32768 i
*> 100.100.2.0/24 0.0.0.0 0 32768 i
More confusing part to me is when I disable IBGP peering between R2-R3 or shutdown interface between R2-R3 or else if I disable ospf in R1,R2 & R3 routers , I'm able to see both best route and alternate valid route in BGP topology table.
R1#sh ip bgpHi Milin & Renan,
Thanks for your replies. To narrow down the problem, I’ve shut down the 40.40.x.x network.
Now between R2-R3, R3 is not advertising 30.30.X.X network to R2, but whereas R2 is advertising 30.30.X.X network to R3. Why R3 is not advertising 30.30.X.X (route via 200 400 300) to R2.
R2#sh ip bgp ( No alternate route)
Network Next Hop Metric LocPrf Weight Path
*> 30.30.1.0/24 10.10.4.2 0 200 300 ?
*> 30.30.2.0/24 10.10.4.2 0 200 300 ?
*>i100.100.1.0/24 10.10.1.1 0 100 0 i
*>i100.100.2.0/24 10.10.1.1 0 100 0 i
R2#sh ip bgp summary
Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd
10.10.1.1 4 100 96 98 5 0 0 01:05:50 2
10.10.3.2 4 100 98 100 5 0 0 01:05:54 0
10.10.4.2 4 200 100 98 5 0 0 01:05:39 2
R3#sh ip bgp ( only in R3 we can see both best route & alternate route)
Network Next Hop Metric LocPrf Weight Path
*>i30.30.1.0/24 10.10.3.1 0 100 0 200 300 ?
* 10.10.5.2 0 200 400 300 ?
*>i30.30.2.0/24 10.10.3.1 0 100 0 200 300 ?
* 10.10.5.2 0 200 400 300 ?
*>i100.100.1.0/24 10.10.2.1 0 100 0 i
*>i100.100.2.0/24 10.10.2.1 0 100 0 i
R3#sh ip bgp summary
Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd
10.10.2.1 4 100 54 57 19 0 0 00:50:17 2
10.10.3.1 4 100 62 60 19 0 0 00:27:22 2
10.10.5.2 4 200 58 58 19 0 0 00:50:08 2 -
Hello,
i have this bgp topology all router running bgp and no igp is running. Now, the problem is R2 and R3 are route reflector, R1 and R4 are Rclient.
R3 has learn route from R4 (4.4.4.4) from its R client and it advertise to R2 but R2 not advertise (4.4.4.4) route to its client (R1).
R1#sh ip bgp
BGP table version is 5, local router ID is 192.168.12.1
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete
Network Next Hop Metric LocPrf Weight Path
*> 1.1.1.1/32 0.0.0.0 0 32768 i
*>i2.2.2.2/32 192.168.12.2 0 100 0 i
* i3.3.3.3/32 192.168.23.3 0 100 0 i
R2#sh ip bgp
BGP table version is 8, local router ID is 192.168.12.2
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete
Network Next Hop Metric LocPrf Weight Path
*>i1.1.1.1/32 192.168.12.1 0 100 0 i
*> 2.2.2.2/32 0.0.0.0 0 32768 i
*>i3.3.3.3/32 192.168.23.3 0 100 0 i
* i4.4.4.4/32 192.168.34.4 0 100 0 iR3#sh ip bgp
BGP table version is 8, local router ID is 192.168.23.3
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete
Network Next Hop Metric LocPrf Weight Path
* i1.1.1.1/32 192.168.12.1 0 100 0 i
*>i2.2.2.2/32 192.168.23.2 0 100 0 i
*> 3.3.3.3/32 0.0.0.0 0 32768 i
*>i4.4.4.4/32 192.168.34.4 0 100 0
R3#sh run | se router bgp
router bgp 1
no synchronization
bgp log-neighbor-changes
network 3.3.3.3 mask 255.255.255.255
neighbor 192.168.23.2 remote-as 1
neighbor 192.168.23.2 next-hop-self
neighbor 192.168.34.4 remote-as 1
neighbor 192.168.34.4 route-reflector-client
no auto-summary -
Hello Guys,
My scenario is:
2 Sites interconnected by 2 MPLS Links and BGP between the routers.
I need some help to force some traffic to be routed using one Link based on Protocol or TCP Port.
But if the link goes down, I need the traffic to be send using another link.
I want to do a PBR using track that validates a specific BGP Route or BGP Neighbor.
Can someone tell me some tips for this case?
Best Regards.
Heleno FagundesHi,
For your two concerns.
**2 Sites interconnected by 2 MPLS Links and BGP between the routers
Do you have some sort of network diagram ????
**I want to do a PBR using track that validates a specific BGP Route or BGP Neighbor.
We can always apply a track and an IP sla monitoring an IP address which the router is receiving from its BGP peer which you wish to monitor.
I am sure if you provide me sample diagram/config i'll be able to give some more descriptive answer.
Regards,
HK -
What do we need to do if BGP Router contribute high process in CPU?
CPU utilization for five seconds: 97%/43%; one minute: 99%; five minutes: 92%
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
44 36270732 35464661 1022 25.03% 15.21% 14.43% 0 BGP Router
325 7703860203228294256 0 10.47% 5.58% 5.24% 0 IP Input
455 7596596 28244228 268 5.59% 1.60% 0.82% 0 BGP I/O
543 13576608 8569950 1584 3.83% 18.94% 9.57% 0 BGP Task
9 152474380 15201602 10030 2.07% 0.27% 0.57% 0 Check heaps
376 16372652 7777145 2105 1.83% 13.93% 13.76% 0 IP RIB Update
358 56785192 14452691 3929 0.95% 0.44% 0.52% 0 CEF: IPv4 proces
23 55656604 116191071 479 0.71% 0.51% 0.50% 0 ARP Input
348 5736736 7812055 734 0.63% 4.19% 5.03% 0 XDR mcast
546 36531108 132425650 275 0.63% 0.37% 0.28% 0 Port manager per
35 56337684 306101724 184 0.23% 0.42% 0.30% 0 IPC Seat Manager
330 287962916 871459868 330 0.23% 0.39% 1.61% 0 SNMP ENGINE
286 7682841067821917 0 0.15% 0.07% 0.07% 0 Ethernet Msec Ti
626 354112 825565 428 0.15% 0.11% 0.09% 0 IPv6 Input
3 754316 523105917 1 0.15% 0.10% 0.09% 0 HSRP Common
385 2182508 14151135 154 0.15% 0.10% 0.14% 0 L3 Manager
317 44655884 658073408 67 0.07% 0.04% 0.21% 0 PDU DISPATCHER
395 4363480 4661440 936 0.07% 0.04% 0.05% 0 HIDDEN VLAN Proc
323 1161648 134374319 8 0.07% 0.04% 0.05% 0 VRRS Main thread
56 2269676 9230664 245 0.07% 0.08% 0.07% 0 Per-Second Jobs
240 1449416 1870109 775 0.07% 0.04% 0.05% 0 Compute load avg
243 1488814081309230003 113 0.07% 0.13% 0.76% 0 IP SNMP
CPU utilization for five seconds: 97%/43%; one minute: 99%; five minutes: 92%
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
44 36270732 35464661 1022 25.03% 15.21% 14.43% 0 BGP Router
325 7703860203228294256 0 10.47% 5.58% 5.24% 0 IP Input
455 7596596 28244228 268 5.59% 1.60% 0.82% 0 BGP I/O
543 13576608 8569950 1584 3.83% 18.94% 9.57% 0 BGP Task
9 152474380 15201602 10030 2.07% 0.27% 0.57% 0 Check heaps
376 16372652 7777145 2105 1.83% 13.93% 13.76% 0 IP RIB Update
358 56785192 14452691 3929 0.95% 0.44% 0.52% 0 CEF: IPv4 proces
23 55656604 116191071 479 0.71% 0.51% 0.50% 0 ARP Input
348 5736736 7812055 734 0.63% 4.19% 5.03% 0 XDR mcast
546 36531108 132425650 275 0.63% 0.37% 0.28% 0 Port manager per
35 56337684 306101724 184 0.23% 0.42% 0.30% 0 IPC Seat Manager
330 287962916 871459868 330 0.23% 0.39% 1.61% 0 SNMP ENGINE
286 7682841067821917 0 0.15% 0.07% 0.07% 0 Ethernet Msec Ti
626 354112 825565 428 0.15% 0.11% 0.09% 0 IPv6 Input
3 754316 523105917 1 0.15% 0.10% 0.09% 0 HSRP Common
385 2182508 14151135 154 0.15% 0.10% 0.14% 0 L3 Manager
317 44655884 658073408 67 0.07% 0.04% 0.21% 0 PDU DISPATCHER
395 4363480 4661440 936 0.07% 0.04% 0.05% 0 HIDDEN VLAN Proc
323 1161648 134374319 8 0.07% 0.04% 0.05% 0 VRRS Main thread
56 2269676 9230664 245 0.07% 0.08% 0.07% 0 Per-Second Jobs
240 1449416 1870109 775 0.07% 0.04% 0.05% 0 Compute load avg
243 1488814081309230003 113 0.07% 0.13% 0.76% 0 IP SNMPHi,
BGP Router process is in charge to determine the best path and processes any route "churn". It also sends and receives routes, establishes peers, and interacts with the routing information base (RIB).
(http://www.cisco.com/c/en/us/support/docs/ip/border-gateway-protocol-bgp/107615-highcpu-bgp.html)
So I suggest to check what make this process working hard. Depending on that you can choose what to do: bgp dampening (if you have many changes in advertisement received form a neighbor), tuning timer (if neighbor is flapping), using peer-group / update-groups to reduce the amount of job your BGP process has to do to process updates etc...
Have a look here: https://supportforums.cisco.com/discussion/11604471/high-cpu-usage-bgp-router-process
Bye,
enrico
PS please rate if useful -
Dual homed bgp route perference help
Good Morning, sir
I have a question regarding bgp route preference.
We have multi-homed BGP on remote site.
Let's call this site , site_a has verizon and at&t MPLS connection using bgp.
Currently, at&t route is preferred using as path prepend method.
We have addition AS number prepended on link to Verizon to prefer at&t route.
At this time, verizon is idle and not being used.
We would like to utilize this network to pass backup traffic.
We have source and destination address that we would like to pass through Verizon (out backup) link.
Any idea how I can do this?
I created the source/destination with ACL and created route-map matching that ACL and tweaked the local preference.
and since only major route is listed under 'show ip bgp' and not the specific route which I would like to influence,
I didn't see the tweaked route on routing table.
Any idea, anyone?
ThanksGetting the specific route into the routing depends on what is there ie. -
if there is already a route with same prefix and subnet mask in your IP routing table then you are fine.
If there isn't and your routing table does not have even more specific routes covering the whole subnet you want to advertise then you could use a static route either pointing to the next hop IP or the interface on the router used to get to that subnet.
Then you can use a "network ..." statement under your BGP configuration to advertise it and use a route map to only advertise it down the backup link.
Jon -
BGP Route Policy for transit AS
Hello,
Can anyone could tell me how route policy in (RPL) should look like - some best practice .
Simple situation. I have two ISP's, one Client ( I am transit AS for Client).
ISP1 AS 100 ------
---------- MY AS 300 ( I am BGP transit for client) ------------ My BGP CLIENT AS 400
ISP2 AS 200 ------
What I configured already are 4 route-policy ( two for isp's in/out and two for client in/out)
route-policy client-in
route-policy client-out
route-policy isp-in
route-policy isp-out
as-path-set aspath_Other
ios-regex '.*'
end-set
as-path-set aspath_Local_plus_Client
ios-regex '^$',
ios-regex '^400'
end-set
as-path-set aspath_Client
ios-regex '^400'
end-set
route-policy isp-in
pass
end-policy
route-policy isp-out
if (as-path in aspath_Local_plus_Client) then
pass
elseif (as-path in aspath_Other) then
drop
endif
end-policy
route-policy client-out
pass
end-policy
route-policy client-in
if (as-path in aspath_Client) then
pass
elseif (as-path in aspath_Other) then
drop
endif
end-policy
I am not sure about route-policy client-in ( should I use aspath like above or e.g prefix-list .. )?
regards,Hi,
you may find this reference useful that talks about inline vs named lists when it comes to RPL.
named lists are easier to edit and preferred when the lists are long, but inline sets are faster to process.
When stating faster, you should think in usec improvements.
One improvement I see is that you can change this:
route-policy client-in
if (as-path in aspath_Client) then
pass
elseif (as-path in aspath_Other) then
drop
endif
end-policy
to this:
route-policy client-in
if (as-path in aspath_Client) then
pass
else
drop
endif
end-policy
Considering the aspath other is a catch all it is a waste of cycles to invoke regex to make sure that it is matches any.
On the topic of using prefix sets vs AS paths there are probably different opinions about it.
If your client originates prefixes that are not theirs your policy still accepts them and will result in rogue routing and hijacking of prefixes.
So with that I would recomment using a prefix set to accept prefixes from my client, just to make sure that we accept legimate prefixes. You dont want to be the guy that sourced rogue prefixes because of a client misconfiguration.
regards
xander -
Trouble getting BGP route to be primary
We have an MPLS network between locations using BGP. Several locations have a VPN connection as a backup and use OSPF for those routes.
When an MPLS link goes down, the traffic switches over to the VPN connection just fine. But when the MPLS link comes back up, the OSPF route is still overriding the BGP route. I've changed the weights for both BGP & OSPF but still can't get the BGP route to override the OSPF route.
Any ideas as to what I'm missing?
Main router, MPLS link active at remote site:
nbrtr2#sh ip bgp
BGP table version is 6837, local router ID is 216.149.85.242
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete
Network Next Hop Metric LocPrf Weight Path
*> 172.16.104.0/24 216.149.85.241 300 2828 3549 2828 i
nbrtr2#sh ip bgp 172.16.104.0
BGP routing table entry for 172.16.104.0/24, version 6839
Paths: (1 available, best #1, table Default-IP-Routing-Table)
Flag: 0x820
Not advertised to any peer
2828 3549 2828
216.149.85.241 from 216.149.85.241 (216.149.85.241)
Origin IGP, localpref 100, weight 300, valid, external, best
After shutting down the remote interface, traffic switches to the VPN link.
nbrtr2#sh ip bgp
BGP table version is 6842, local router ID is 216.149.85.242
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete
Network Next Hop Metric LocPrf Weight Path
*> 172.16.104.0/24 172.16.196.4 123 100 ?
nbrtr2#sh ip bgp 172.16.104.0
BGP routing table entry for 172.16.104.0/24, version 6842
Paths: (1 available, best #1, table Default-IP-Routing-Table)
Flag: 0x820
Advertised to update-groups:
1
Local
172.16.196.4 from 0.0.0.0 (216.149.85.242)
Origin incomplete, metric 123, localpref 100, weight 100, valid, sourced,
best
Bringing up the remote interface, the traffic stays on the VPN.
nbrtr2#sh ip bgp
BGP table version is 6843, local router ID is 216.149.85.242
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete
Network Next Hop Metric LocPrf Weight Path
*> 172.16.104.0/24 172.16.196.4 123 100 ?
nbrtr2#sh ip bgp 172.16.104.0
BGP routing table entry for 172.16.104.0/24, version 6842
Paths: (1 available, best #1, table Default-IP-Routing-Table)
Advertised to update-groups:
1
Local
172.16.196.4 from 0.0.0.0 (216.149.85.242)
Origin incomplete, metric 123, localpref 100, weight 100, valid, sourced,
best
Finally, terminating the site-site VPN tunnel restores the MPLS route:
nbrtr2#sh ip bgp
BGP table version is 6845, local router ID is 216.149.85.242
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete
Network Next Hop Metric LocPrf Weight Path
*> 172.16.104.0/24 216.149.85.241 300 2828 3549 2828 i
nbrtr2#sh ip bgp 172.16.104.0
BGP routing table entry for 172.16.104.0/24, version 6845
Paths: (1 available, best #1, table Default-IP-Routing-Table)
Flag: 0x820
Not advertised to any peer
2828 3549 2828
216.149.85.241 from 216.149.85.241 (216.149.85.241)
Origin IGP, localpref 100, weight 300, valid, external, best
Config details:
router ospf 100
log-adjacency-changes
redistribute static subnets
redistribute bgp 36166 metric 20 subnets
network 172.16.196.0 0.0.0.255 area 0
network 172.16.224.0 0.0.3.255 area 0
router bgp 36166
network 172.16.210.0 mask 255.255.255.0
network 172.16.211.0 mask 255.255.255.0
redistribute ospf 100 route-map Redist-OSPF
neighbor 216.149.85.241 remote-as 2828
neighbor 216.149.85.241 weight 300
default-information originate
access-list 11 remark Define OSPF routes for redistribution
access-list 11 permit 172.16.11.0 0.0.0.255
access-list 11 permit 172.16.16.0 0.0.1.255
access-list 11 permit 172.16.196.0 0.0.1.255
access-list 11 permit 172.16.198.0 0.0.0.255
access-list 12 remark Define VPN routes for redistribution
access-list 12 permit 172.16.104.0 0.0.0.255
access-list 12 permit 192.168.1.0 0.0.0.255
access-list 12 permit 192.168.3.0 0.0.0.255
access-list 12 permit 192.168.4.0 0.0.0.255
access-list 12 permit 192.168.8.0 0.0.0.255
route-map Redist-OSPF permit 10
match ip address 11
set weight 500
route-map Redist-OSPF permit 20
match ip address 12
set weight 100
route-map Redist-OSPF permit 30Hi,
IMHO, you should use the same Weight for both the BGP prefix redistributed from OSPF and received from the BGP neighbor.
And set other attribute (Local Preference, e.g.) to make the prefix received from the BGP neighbor to win when the MPLS interface goes Up again.
Another issue might be though:
When the MPLS interface is Down, you get the OSPF prefix redistributed to your BGP table, And when the MPLS interface goes Up again, you might be advertising this prefix to the backbone. And it can beat the prefix advertised from the remote site. If it's your case, I'd also try to prepend your AS number several times to the prefix advertised from your router to make it less preferred within the backbone comparing to the original BGP prefix.
Best regards,
Milan. -
/*! flamingo 6.4.0 2013-06-18 */
function AppListView(){this.allBooks=[],this.recentBooks=[],this.$dom=$("<div>",{"class" :"app-list"}),this._loadBooks(),this._createView(),setTimeout($.proxy(this._prel oadIcons,this),1e3)}function Beacon(e,a){location.protocol.match(/^http/)&&e.enable_tracking&&e.product&&e.p latform&&e.version&&(this.title=e.title.toLowerCase(),this.product=e.product.toL owerCase(),this.platform=e.platform.toLowerCase(),this.version=e.version.toLower Case(),this.locale=a.isoCodes[0],this.loaded=$.getScript(App.resourcePath+"sc.js ",$.proxy(this.init,this)),$(e).on("navigate",$.proxy(this.navigate,this)),$(e). on("search",$.proxy(this.search,this)),$(e).on("searchresults",$.proxy(this.sear chResultSelected,this)),$(e).on("feedback",$.proxy(this.feedback,this)),$(e).on( "mediastart",$.proxy(this.mediaStart,this)))}function Book(e){if($.extend(this,e),this.name=this.title,$.each(this.topics,$.proxy(fun ction(e,a){this.topics[e]=new Topic(e,a,this)},this)),$.each(this.sections,$.proxy(function(e,a){this.section s[e]=new Section(e,a,this)},this)),$.each(this.toc,$.proxy(function(e,a){this.toc[e]=thi s.topics[a]||this.sections[a]||a},this)),$.each(this.sections,$.proxy(function(e ,a){var t=a.children;$.each(t,$.proxy(function(e,i){t[e]=this.topics[i]||this.sections[ i]||i,t[e].parent=a},this))},this)),this.landing=this.topics[this.landing]||"",t his.copyright=this.topics[this.copyright]||"",!this.landing){for(var a=this.toc[0];a instanceof Section;)a=a.children[0];this.landing=a}this.unknown_topic=new Topic("unknown",{name:"TOPIC_UNAVAILABLE".loc(),href:""},this)}function ContentView(e,a){this.name=e,this.$dom=$("<div>",{id:e,"class":"contentView"}). addClass(e),this.topic=null,a&&this.showTopic(a)}function DebugPanel(e){this.$dom=$("<dl>",{"class":"debug-info"}),$("<dt>",{text:"flamin go"}).appendTo(this.$dom),$("<dd>",{text:e.version}).appendTo(this.$dom),$.each( ["build_id","title","design","enable_tracking","product","platform","version","l ocale","collect_feedback","framework","source_schema"],$.proxy(function(a,t){$(" <dt>",{text:t}).appendTo(this.$dom),$("<dd>",{text:e.book[t]||"[ undefined ]"}).toggleClass("undefined",!e.book[t]).appendTo(this.$dom)},this))}function Design(e){this.name=e||"default";var a=Design.namedSkins[this.name];this.cssClass="",this.isLayeredStyle=!1,this.hel pviewerWindowSize={height:520,width:815},this.dismissSearchLabel="Cancel",this.p reloadList=["lightbox-close.png","[email protected]","lightbox-close-hover.p ng","[email protected]","disclosure-open.png","[email protected]" ],a&&(a.preloadList&&(this.preloadList.concat(a.preloadList),delete a.preloadList),$.extend(this,a))}function HelpViewerBook(e){this.id=e.bookID(),this.title=e.title(),this.link="help:openb ook='"+this.id+"'",this.iconHref=("x-help-icon://"+encodeURIComponent(this.id)). replace(/\.help$/,""),this.apple=this.id.match(/^com\.apple\./)?!0:!1}function LandingView(e,a){this.book=e,this.bundle=a,this.contentView=new ContentView("landing",e.landing),this.$dom=this.contentView.$dom,this.isHelpCen ter="HelpViewer"in window&&!HelpViewer.currentScope(),this.isHelpCenter?this._addMarquee():this._l ayoutLanding()}function LightboxView(e){this._$previous_focus=$(),this.visible=!1,this.$dom=$("<div>",{ id:e,"class":e,"aria-hidden":"true",role:"alertdialog",tabindex:"-1"}).hide(),$( "<div>",{"class":"background"}).appendTo(this.$dom);var a=$("<div>",{id:"lightboxOuterWrapper"}).appendTo(this.$dom),t=$("<div>",{id:"l ightboxInnerWrapper"}).appendTo(a),i=$("<div>",{id:"lightboxContentWrapper"}).ap pendTo(t);this.contentView=new ContentView("lightbox-content"),i.append(this.contentView.$dom);var n=$("<img>",{src:App.resourcePath+"images/[email protected]",alt:"Close".lo c(),role:"button"});$("<a>",{"class":"closeButton"}).append(n).appendTo(a).click ($.proxy(function(){App.navigation.popPrevious(),this.hide()},this)).hover(funct ion(){n.attr("src",App.resourcePath+"images/[email protected]")},funct ion(){n.attr("src",App.resourcePath+"images/[email protected]")})}function NavController(e){this._book=e,this._linearTOC=[],this._currentItem=null,this._p ushedItem=null,this._addItems(e.toc),App.design.isLayeredStyle||this._linearTOC. unshift(e.landing),this._checkHash();var a=$.proxy(this._checkHash,this);"onhashchange"in window?$(window).bind("hashchange",a):setTimeout(function(){setInterval(a,100)} ,500)}function Section(e,a,t){this.id=e,this.book=t,$.extend(this,a)}function TOC(e,a,t){this.book=e,this._contentPath=t,this._$liByID={},this.$dom=this._$ul ForNavList(this.book.toc,0).addClass("toc");var i=$("<li>",{role:"treeitem","class":"home"}).prependTo(this.$dom),n=$("<a>",{hr ef:"#"+this.book.landing.id}).appendTo(i);$("<img>",{src:a+"images/tangerine/hom [email protected]"}).appendTo(n),$("<span>",{"class":"name",text:"Home".loc()}).appendTo( n),this._$liByID[e.landing.id]=i,this.$dom.on("click","a",$.proxy(this._toggleSe ctions,this))}function Topic(e,a,t){this.id=e,this.book=t,this.categories=[],$.extend(this,a),this.ful l_name=this.name,this._content_loaded=!1,this.$content=$("<div>",{id:e}),this.is _landing=$.inArray("landing",this.categories)>-1,this.is_glossary=$.inArray("glo ssary",this.categories)>-1,this.is_external=!!this.href.match(/^\w+:/),this.is_h ash=!!this.href.match(/^#/)}function TermMatch(e,a,t){this.term=e,this.topic=App.book.topicForID(a),this.weight=t}fu nction WeightedTopic(e){this.topic=e.topic,this.weight=e.weight}function SearchResult(e,a,t){this.query=e,this.matchingTerms=a,this.topics=[];var i={};$.each(t,function(e,a){var t=a.topic.id,n=i[t];n?n.addMatch(a):i[t]=new WeightedTopic(a)});var n=$.map(i,function(e){return e}),o=n.sort(function(e,a){return a.weight-e.weight});this.topics=$.map(o,function(e){return e.topic})}function SearchIndex(e){this._keywordStemRegex="",this._matchesByTerm={};var a,t,i,n,o=[];i=function(e,t){return new TermMatch(a,t,e)},n=function(e,a,t){return"\\b"+a+(t?t.replace(/(.)/g,"$1?"):"" )+"\\b"};for(var s in e)a=s,t=e[a],this._matchesByTerm[a]=$.map(t,i),a=a.replace(/(\.|\*|\+|\?|\{|\}| \||\[|\]|\(|\)|\-|\^|\$)/g,"\\$1"),a=a.replace(/^(..)(.+)$/,n),o.push(a);o.sort( function(e,a){return a.length-e.length}),this._keywordStemRegex=RegExp(o.join("|"),"gi")}window.App= {version:"6.4.0",env:"production"},location.search.match(/%23/)&&location.replac e(location.href.replace("%23","#")),$.ajaxSetup({crossDomain:!1}),window.APD={}, $.extend(window.App,{book:null,bundle:null,design:null,navigation:null,searchInd ex:null,resourcePath:"",queryParams:{},views:{}}),String.prototype.loc=function( ){return App.bundle?App.bundle.translate(this):this},function(){if("console"in window||(window.console={},$.each(["assert","count","debug","dir","dirxml","err or","group","groupCollapsed","groupEnd","info","log","markTimeline","profile","p rofileEnd","time","timeEnd","trace","warn"],function(){window.console[this]=$.no op})),location.search&&$.each(location.search.substring(1).split("&"),function() {var e=this.split("=");App.queryParams[decodeURIComponent(e[0])]=decodeURIComponent( e[1])}),App.queryParams.topic){var e=App.queryParams.topic,a=location.pathname;return delete App.queryParams.topic,a+=$.param(App.queryParams)?"?"+$.param(App.queryParams): "",a+="#"+e,location.replace(a),void 0}App.queryParams.localePath&&App.queryParams.localePath.match(/^http/)&&delete App.queryParams.localePath,navigator.userAgent.match(/Help Viewer/)&&($.browser.helpviewer=!0),$(document).ready(function(){function e(){clearTimeout(i),t.hide().remove()}function a(){e(),console.error("Could not load navigation.json file."),$("html").addClass("nocontent")}$("#javascriptDisabled").remove(),App.r esourcePath=$("script[src$='flamingo.js']").attr("src").replace(/flamingo\.js$/, ""),(new Image).src=App.resourcePath+"images/[email protected]";var t=$("<div>",{id:"updating"}).hide().appendTo("body").append($("<img>",{src:App. resourcePath+"images/[email protected]"})),i=setTimeout(function(){t.show()},500);A pp._loadBundle().pipe(function(){return $.getJSON(App.bundle.URL()+"navigation.json",function(e,a,t){App._addServerType (t),App.book=new Book(e),App.beacon=new Beacon(App.book,App.bundle.current)})}).fail(a).then(e).then(App.init).then(App .showInterface).then(function(){return $.getJSON(App.bundle.URL()+"search.json",function(e){App.searchIndex=new SearchIndex(e)})}).fail(function(){console.error("Could not load search.json file.")})}),App._loadBundle=function(){var e=$.Deferred(),a=App.queryParams.localePath||App.queryParams.lang||window.local ePath;return App.bundle=new APD.Bundle("",a,function(){$("body").attr("dir",this.current["text-direction"]) ,$("<div>",{"class":"localizedUpdateText",text:"Loading latest help...".loc()}).appendTo("#updating"),$("html").attr("lang",this.current.isoCo des[0]),e.resolve()}),e},App._addServerType=function(e){var a=e.getResponseHeader("x-server-type");"development"!==this.env&&a&&a.match(/re view|staging/)&&(this.env=a),$("html").addClass(this.env)},App.setTitle=function (e){var a=App.book.title,t=e&&(e.full_name||e.name);t!==a&&(a+=": "+$("<textarea>",{html:t}).text()),document.title=a},App.init=function(){var e=$("html");if($.each($.browser,function(a){"version"!==a&&e.addClass(a)}),e.ha sClass("nocontent")||$("#contentUnavailable").remove(),window.devicePixelRatio>1 &&void 0!==document.body.style.backgroundSize&&e.addClass("bgsize"),App.design=new Design(App.book.design),$.browser.helpviewer&&Design.helpviewerWindowSize){var a=Design.helpviewerWindowSize,t=Math.max(a.width,top.outerWidth),i=Math.max(a.h eight,top.outerHeight);top.resizeTo(t,i)}if(navigator.userAgent.match(/(iphone|i pad)/i)){"-webkit-overflow-scrolling"in document.body.style||e.addClass("nooverflow");var n=720;App.design.helpviewerWindowSize&&(n=App.design.helpviewerWindowSize.width ),$("<meta>",{name:"viewport",content:"maximum-scale=3.0,width="+n}).prependTo(" head")}},App.showInterface=function(){App.createViews(),App.design.preloadImages (),App.navigation=new NavController(App.book)},App.createViews=function(){var e=$("body"),a=$("<div>",{id:"container","class":"container"}),t=$("<div>",{id:" menu","class":"menu"}).appendTo(a),i=$("<div>",{id:"front-matter","class":"front -matter"}).appendTo(a),n=$("<div>",{id:"navigation","class":"navigation",role:"n avigation"}).appendTo(i);App.views.landing=new LandingView(App.book,App.bundle),App.views.toc=new TOC(App.book,App.resourcePath,App.bundle.URL()),App.views.topic=new ContentView("topic"),App.views.debug=new DebugPanel(App),App.views.lightbox=new LightboxView("lightbox"),$.browser.helpviewer&&!HelpViewer.currentScope()&&(App .views.appList=new AppListView),a.add(App.views.lightbox.$dom).addClass(App.design.name).addClass( App.design.cssClass),e.prepend(a),e.append(App.views.debug.$dom),i.prepend(App.v iews.landing.$dom),a.append(App.views.topic.$dom.hide()),searchController.addInt erfaceElements(n),n.append(App.views.toc.$dom),e.append(App.views.lightbox.$dom) ,App.views.appList&&e.append(App.views.appList.$dom),$("<h1>",{"class":"book-tit le"}).append($("<a>",{href:"#",text:App.book.title})).appendTo(t),$(App.book).on ("navigate",$.proxy(App.views.toc.updateSelection,App.views.toc)),$(App.book).on ("navigate",$.proxy(App.toggleViews,App)),$("body").on("orientationchange",App.r esetOverflow)},App.resetOverflow=function(){var e,a=App.views,t=$(".toc").add(a.landing.$dom).add(a.topic.$dom);t.css("overflow ","visible"),e=t.css("overflow"),t.css("overflow","")},App.toggleViews=function( e,a,t){var i=$(".front-matter"),n=i.find("#landing");App.setTitle(a),t===App.views.appList ?(App.views.topic.hide(),i.hide(),App.views.appList.show()):(App.views.appList&& App.views.appList.hide(),i.show()),t===App.views.landing&&App.views.topic.hide() ,App.design.isLayeredStyle?t===App.views.landing||t===App.views.toc?(i.attr({"ar ia-hidden":!1,tabindex:-1}).show().focus(),App.views.topic.hide()):t===App.views .topic&&i.attr({"aria-hidden":!0,tabindex:-1}).hide():t===App.views.landing||t== =App.views.toc?n.show():t===App.views.topic&&n.hide(),$("#container").attr("aria -hidden",t===App.views.lightbox),t!==App.views.lightbox&&App.views.lightbox.hide ();var o="HelpViewer"in window&&"currentScope"in HelpViewer,s="HelpViewer"in window&&"setBreadcrumbBookTitleWithAnchor"in HelpViewer;o&&s&&"com.apple.machelp"===HelpViewer.currentScope()&&HelpViewer.se tBreadcrumbBookTitleWithAnchor("",null),$("body").prop("scrollTop",0),$("html"). is(".nooverflow")&&window.scrollTo(0,1)},$(document).on("keydown",function(e){!( e.ctrlKey||e.metaKey||e.shiftKey||App.views.lightbox.visible)&&"querySelectorAll "in document&&(37===e.which?App.navigation.previous():39===e.which&&App.navigation. next())}),$(document).on("keypress",function(e){e.ctrlKey&&e.metaKey&&2===e.keyC ode&&App.views.debug.$dom.toggle()}),$("#localizations select").live("change",function(){delete App.queryParams.localePath,App.queryParams.lang=$(this).val(),location.href="?" +$.param(App.queryParams)})}(),AppListView.prototype.show=function(){this.$dom.s how()},AppListView.prototype.hide=function(){this.$dom.hide()},AppListView.proto type._loadBooks=function(){var e=this;"HelpViewer"in window&&HelpViewer.availableBooks&&HelpViewer.recentApplicationList&&($.each(He lpViewer.availableBooks(),function(a,t){e.allBooks.push(new HelpViewerBook(t))}),$.each(HelpViewer.recentApplicationList(),function(a,t){va r i=RegExp(t,"i");$.each(e.allBooks,function(a,t){t.id.match(i)&&e.recentBooks.pu sh(t)})}))},AppListView.prototype._createView=function(){var e=5,a="Show all".loc(),t="Show less".loc(),i=function(){var e=$(this).parents(".app-group"),i=e.hasClass("closed")?t:a;e.toggleClass("close d").find(".showHide").text(i)};if(this.allBooks.length){var n,o,s;n=$("<div>",{"class":"app-group closed"}).appendTo(this.$dom),$("<div>",{"class":"title"}).appendTo(n),$("<a>", {"class":"showHide",text:a,click:i}).appendTo(n),$("<div>",{"class":"clear"}).ap pendTo(n),$("<div>",{"class":"initial-set"}).appendTo(n),$("<div>",{"class":"add itional-set"}).appendTo(n),o=n.clone(!0,!0).appendTo(this.$dom),s=n.clone(!0,!0) .appendTo(this.$dom),$(".title",n).text("Recent applications".loc()),$(".title",o).text("Apple applications".loc()),$(".title",s).text("Other applications".loc()),$.each(this.recentBooks,function(a,t){e>a&&t.$iconLink().a ppendTo(n)}),$.each(this.allBooks,function(a,t){if("com.apple.HelpCenter.help"!= =t.id&&"com.apple.machelp"!==t.id){var i=t.apple?o:s,n=2*e>i.children(".initial-set").children().length?i.children(".i nitial-set"):i.children(".additional-set");t.$iconLink().appendTo(n)}}),$([n,o,s ]).each(function(){if(0===$(".additional-set",this).children().length&&$(".showH ide",this).remove(),0===$(".book",this).length)return $(this).remove(),void 0;for(var a=$(".book:last",this),t=a.parent();0!==t.find(".book").length%e;)$("<a>",{"cla ss":"book"}).appendTo(t)})}},AppListView.prototype._preloadIcons=function(){var e=this;setTimeout(function(){$.each(e.allBooks,function(e,a){setTimeout(functio n(){a.preloadIcon()},20*e)})},1e3)},function(e){var a={events:"",channel:"",pageName:"",eVar1:null,eVar16:null,eVar17:null,eVar18:n ull,eVar20:null,eVar21:null,eVar28:null};e.init=function(){this.setAccount(),thi s.setConstants()},e.setAccount=function(){var e="aaplpdglobaldev";"production"===App.env&&(e="aaplpdglobal"),this.sc=s_gi(e), this.sc.server=this.title,this.sc.trackDownloadLinks=!1,this.sc.trackExternalLin ks=!1,this.sc.trackInlineStats=!1,this.sc.useForcedLinkTracking=!1,this.sc.linkD ownloadFileTypes="exe,zip,wav,mp3,mov,mpg,avi,wmv,pdf,doc,docx,xls,xlsx,ppt,pptx ",this.sc.linkInternalFilters="help.apple.com",this.sc.linkLeaveQueryString=!1,t his.sc.linkTrackVars="eVar1,prop1,eVar2,prop2,eVar3,prop3,eVar4,prop4,eVar5,prop 5,eVar6,prop6,eVar7,prop7,eVar8,prop8,eVar9,prop9,eVar10,prop10,eVar11,prop11,eV ar12,prop12,eVar13,prop13,eVar14,prop14,eVar16,prop16,eVar17,prop17,eVar28,prop2 8,events",this.sc.linkTrackEvents="event1,event2,event3,event4",this.sc.usePlugi ns=!1,this.sc.doPlugins=$.noop,this.sc.visitorNamespace="appleproductdocumentati on",this.sc.trackingServer="metrics.apple.com",this.sc.trackingServerSecure="sec uremetrics.apple.com"},e.setConstants=function(){var e="unknown",a="unknown",t="unknown",i="help:"+this.product,n=i+":"+this.platfor m,o=n+":"+this.version;$.each(["helpviewer","safari","webkit","opera","mozilla", "msie"],function(){return this in $.browser?(e=this,!1):void 0}),$.each([/Mac OS X ([_\.\d]+)/,/iPhone OS ([_\.\d]+)/,/CPU OS ([_\.\d]+)/,/Windows NT ([_\.\d]+)/],function(){var e=navigator.userAgent.match(this);return e?(a=e[0].replace(this,"$1").replace(/_/g,"."),!1):void 0}),$.each([/Version\/([_\.\d]+)/,/Chrome\/([_\.\d]+)/,/MSIE ([_\.\d]+)/,/Firefox\/([_\.\d]+)/],function(){var e=navigator.userAgent.match(this);return e?(t=e[0].replace(this,"$1").replace(/_/g,"."),!1):void 0}),$.extend(this.sc,{eVar2:navigator.userAgent,eVar3:e+":"+t,eVar4:a,eVar5:e+" :"+a,eVar6:App.version,eVar7:i,eVar8:n,eVar9:o,eVar10:this.product,eVar11:this.p latform,eVar12:this.version,eVar13:(navigator.browserLanguage||navigator.systemL anguage||navigator.userLanguage||navigator.language).substr(0,2),eVar14:this.loc ale,eVar15:navigator.language})},e._track=function(e,t){this.loaded.then($.proxy (function(){$.extend(this.sc,a,t),this._resetProps(),this.sc.t(!0,"o",e)},this)) },e._resetProps=function(){var e,a,t={};for(e in this.sc)e.match(/prop\d+/)&&(this.sc[e]=null),e.match(/eVar\d+/)&&this.sc[e]&&( a=e.replace(/eVar(\d+)/,"$1"),t["prop"+a]="D=v"+a);$.extend(this.sc,t)},e.naviga te=function(e,a){var t=this.title+":"+a.name.toLowerCase();this._track("view",{events:"event1",chann el:t,pageName:t,eVar1:(a.is_glossary?"glossary:":"")+a.name,eVar28:a.id})},e.sea rch=function(e,a,t){if(a){var i=this.title+":search",n=t.length?"search":"search: no results";this._track(n,{events:t.length?"event2":"event3",channel:i,pageName:i, eVar1:n,eVar16:a})}},e.searchResultSelected=function(e,a,t){var i=this.title+":search",n="search: result click-through";this._track("name",{events:"event4",channel:i,pageName:i,eVar1:n ,eVar16:a,eVar17:t.name,eVar18:t.id})},e.feedback=function(e,a){var t=this.title+":"+a.name.toLowerCase();this._track("feedback",{events:"event5",c hannel:t,pageName:t,eVar1:a.name,eVar21:"false",eVar28:a.id})},e.mediaStart=func tion(e,a){var t=this.title+":media",i=App.navigation._currentItem;this._track("media: start",{events:"event7",channel:t,pageName:t,eVar1:i.name,eVar18:a,eVar20:"vide o",eVar28:i.id})}}(Beacon.prototype),Book.prototype.topicForID=function(e){retur n e?this.topics[e]:this.landing},Book.prototype.topicForURL=function(e){var a;return $.each(this.topics,function(){return this.href===e?(a=this,!1):void 0}),a},Book.prototype.sectionForID=function(e){return this.sections[e]},Book.prototype.itemForID=function(e){var a=this.topicForID(e)||this.sectionForID(e);return(!a||a instanceof String)&&(a=this.unknown_topic),a},function(){function e(e){return e?e.match(/[^\/]$/)?e+="/":e:""}function a(){var e=[navigator.browserLanguage||navigator.systemLanguage||navigator.userLanguage| |navigator.language];if("HelpViewer"in window&&"preferredLanguages"in HelpViewer)try{e=HelpViewer.preferredLanguages().concat(e)}catch(a){}if("iTunes "in window)try{e=$.map(iTunes.acceptedLanguages.split(","),function(e){return e.replace(/\+?([^;]+);.*/,"$1")}).concat(e)}catch(a){}return e=$.map(e,function(e){return e?(e=e.toLowerCase(),2>=e.length?e:[e,e.substr(0,2)]):null})}function t(e){return i||(i={},$.each(APD.translations,function(e,a){$.each(a.meta.isoCodes,function( e,t){i[t]=a})})),i[e]}var i,n={name:"English",isoName:"English",isoCodes:["en"],folder:"en.lproj","text-d irection":"ltr"};APD.Bundle=function(a,t,i){this.path=e(a),this.current=$.extend ({},n),t&&t.match(/^.*\.lproj$/)&&(this.current.folder=t),this.locales=[],this._ uiStrings={};var o=this;this._loadList().done(function(){var e=o._lookupLocale(t)||o._browserLocale();e&&(o.current=e)}).always(function(){o ._loadStrings()}).always(function(){i&&i.call&&i.call(o,o)})};var o=APD.Bundle.prototype;o._loadList=function(){var e=this,a=$.Deferred();return $.getJSON(this.path+"locale-list.json").done(function(t){e.locales=t,a.resolve( )}).fail(function(){return console.warn("Unable to load language list, loading content from "+e.current.folder),$.getJSON(e.URL()+"locale-info.json").done(function(t){t.me ta.folder=e.current.folder,e.locales.push(t.meta),a.resolve()}).fail(function(){ a.reject()})}),a},o._loadStrings=function(){var e=this,a=e.current.isoCodes;a.push("en"),$.each(a,function(a,i){var n=t(i);return n?(e._uiStrings=n.ui||{},e.cssClass=n.meta.cssClass||"",!1):void 0})},o._lookupLocale=function(e){if(!e)return null;var a=null;return $.each(this.locales,function(t,i){var n=i.isoCodes.concat([i.folder,i.name,i.isoName]);return $.inArray(e,n)>-1?(a=i,!1):void 0}),a},o._browserLocale=function(){var e=null,t=this.locales;return $.each(a(),function(a,i){return $.each(t,function(a,t){return $.inArray(i,t.isoCodes)>-1?(e=t,!1):void 0}),e?!1:void 0}),e},o.list=function(){if(2>this.locales.length)return[];if("iTunes"in window)return[];if("HelpViewer"in window)return[];var e=$.map(this.locales,function(e){return{name:e.name,isoCode:e.isoCodes[0]}});re turn e.sort(function(e,a){return e.name.localeCompare(a.name)}),e},o.translate=function(e){return this._uiStrings[e]||e},o.URL=function(){return this.path+e(this.current.folder)}}(),ContentView.prototype.showTopic=function(e ){e!==this.topic&&(this.topic=e,this.$dom.empty().prop("scrollTop",0).append(e.l oadContent()),"HelpViewer"in window&&"mtContentAccessed"in HelpViewer&&HelpViewer.mtContentAccessed(e.id+" "+e.name,e.book.title)),this.$dom.attr("aria-hidden",!1).show().trigger("conten tLoaded")},ContentView.prototype.hide=function(){this.$dom.attr("aria-hidden",!0 ).hide()},function(){$(".contentView a[href*='.html']").live("click",function(e){var a=$(this).attr("href"),t=a.match(/#/)?a.replace(/^.*\.html(#?.*)/,"$1"):"",i=a. replace(/^(.*\.html)#?.*/,"$1"),n=App.book.topicForURL(i)||App.book.topicForID(t );a.match(/^http/)||a.match(/\//)||(e.preventDefault(),n&&n.navigateTo())}),$(". contentView .Task h2, .contentView .task h2, .showTaskBody, .hideTaskBody").live("click",function(){var e=$(this).parent(".Task, .task").filter(":first"),a=e.toggleClass("closed").hasClass("closed");e.find("[ aria-expanded]").attr("aria-expanded",!a),e.find("[aria-hidden]").attr("aria-hid den",a)}),$(".contentView .LinkAppleWebMovie a, .contentView .movie a").live("click",function(e){if(!("HelpViewer"in window&&HelpViewer.availableBooks)){e.preventDefault();var a=$(this).attr("href");movieLightboxController.showLightboxWithURL(a)}})}(),Des ign.prototype.preloadImages=function(){$.each(this.preloadList,function(e,a){(ne w Image).src=App.resourcePath+"images/"+a})},Design.namedSkins={magenta:{helpview erWindowSize:null,cssClass:"layered",isLayeredStyle:!0},red:{helpviewerWindowSiz e:null,cssClass:"layered",isLayeredStyle:!0},tangerine:{dismissSearchLabel:"Clos e",preloadList:["tangerine/[email protected]","tangerine/disclosure-open.pn g","tangerine/[email protected]","tangerine/home.png","tangerine/[email protected] g","tangerine/menu-background.png"]}},HelpViewerBook.prototype.preloadIcon=funct ion(){(new Image).src=this.iconHref},HelpViewerBook.prototype.$iconLink=function(){return $("<a>",{href:this.link,"class":"book"}).append($("<img>",{src:this.iconHref})) .append($("<div>",{text:this.title}))},function(){var e=LandingView.prototype;e.showTopic=function(e){this.contentView.showTopic(e)}, e._layoutLanding=function(){if(!App.design.isLayeredStyle){var e=this.$dom.wrapInner("<div class='row' />").wrapInner("<div class='center' />").find(".center"),a=$("<div class='row' />").appendTo(e);$.browser.helpviewer||a.append(this._$languageMenu()),$("<div> ",{"class":"copyrightTagline",text:this.book.copyright_text}).appendTo(a)}},e._a ddMarquee=function(e){var a=$(".marquee",e),t=$("img",a).remove().attr("src"),i=$(".title",a).remove().te xt(),n="url("+t+") 0 0 no-repeat, -webkit-gradient(linear, 0 0, 0 100%, from(#ebebeb), to(#fff))";a.length&&e.addClass("hasMarquee"),$("<p>",{text:i}).appendTo(a),$(" <p>",{"class":"spacer"}).prependTo(a).clone().appendTo(a),a.css("background",n)} ,e._$languageMenu=function(){var e=this.bundle.list();if(0!==e.length){var a=$("<div>",{id:"localizations"}),t=$("<select>").appendTo(a);return $("<option>",{text:"Change Language".loc()}).appendTo(t),$.each(e,function(e,a){$("<option>",{val:a.isoCod e,text:a.name}).appendTo(t)}),a}}}(),LightboxView.prototype.showTopic=function(e ){this._$previous_focus=$(":focus"),this.visible=!0,this.contentView.showTopic(e ),this.$dom.show().attr("aria-hidden","false").attr("tabindex","0"),(!$.browser. msie||$.browser.version>=8)&&this.$dom.focus()},LightboxView.prototype.hide=func tion(){(!$.browser.msie||$.browser.version>=8)&&(this.$dom.blur(),this._$previou s_focus.focus()),this.$dom.hide().attr("aria-hidden","true").attr("tabindex","-1 "),this._$previous_focus$previous_focus=$(),this.visible=!1},function(){var e=NavController.prototype,a="showHelpViewerApplicationList";e._addItems=functio n(e){var a=this;$.each(e,function(e,t){t instanceof Section&&(App.design.isLayeredStyle&&!t.parent&&a._linearTOC.push(t),a._addItem s(t.children)),t instanceof Topic&&a._linearTOC.push(t)})},e.hash=function(){return location.hash.replace(/[^\-_a-z0-9]/gi,"")},e._checkHash=function(){this._goToI D(this.hash())},e._goToID=function(e){if(!this._currentItem||this._currentItem.i d!==e){searchController.navigateToItemWithID(e);var t,i=App.book.itemForID(e);i||(i=this._book.landing),e===a?t=App.views.appList:i instanceof Section?t=App.views.toc:i instanceof Topic&&(1>=App.book.toc.length&&App.book.toc[0]instanceof Topic&&i.is_landing?t=App.views.topic:i.is_landing?t=App.views.landing:i.is_glo ssary?(this._pushedItem=this._currentItem,t=App.views.lightbox):t=App.views.topi c,t.showTopic(i)),this._currentItem=i,$(this._book).trigger("navigate",[i,t])}}, e._goToItem=function(e){location.hash=e.id},e._goToPageOffset=function(e){for(va r a=0,t=0;this._linearTOC.length>t;t++)if(this._currentItem===this._linearTOC[t]) {a=t;break}a+=e,0>a?a=this._linearTOC.length+a:a>=this._linearTOC.length&&(a-=th is._linearTOC.length),this._goToItem(this._linearTOC[a])},e.previous=function(){ this._goToPageOffset(-1)},e.next=function(){this._goToPageOffset(1)},e.popPrevio us=function(){this._pushedItem?(this._goToItem(this._pushedItem),this._pushedIte m=null):this._goToItem(this._book.landing)}}(),Section.prototype.navPath=functio n(){return(this.parent?this.parent.navPath():[]).concat(this)},Section.prototype .linkHref=function(){return"#"+this.id},function(){var e=TOC.prototype;e._$ulForNavList=function(e,a){var t=$("<ul>",{role:a?"group":"tree"}).append($.map(e,$.proxy(function(e){return this._$liForNavItem(e,a)},this)));return t},e._$liForNavItem=function(e,a){if("string"==typeof e)return console.log("Unresolved TOC item:",e),void 0;var t=$("<li>",{role:"treeitem"}),i=$("<a>",{href:e.linkHref()}).appendTo(t);return this._$liByID[e.id]=t,t.add(i).data("item",e),e.categories&&t.addClass(e.catego ries.join(" ")),e.icon&&$("<img>",{src:this._contentPath+e.icon,alt:""}).prependTo(i),$("<s pan>",{"class":"name",html:e.name}).appendTo(i),e instanceof Section&&(t.addClass("closed hasChildren").attr("aria-expanded","false"),this._$ulForNavList(e.children,a+1) .appendTo(t)),t},e.updateSelection=function(e,a){this.$dom.find("li").removeClas s("selected").attr("aria-selected",!1);var t=this._$liByID[a.id],i=this.$dom.children("li"),n=!1;if(App.design.isLayeredSt yle&&(n=!0,t&&a.id!==this.book.landing.id||!this.book.toc.length||(a=this.book.t oc[0],t=this._$liByID[a.id]),a instanceof Section&&(i.addClass("closed").attr("aria-expanded",!1),i.is(t)))){var o=t.children("ul:first").height();o&&(this.$dom.css("overflow","hidden"),this.$ dom.css("min-height",o),this.$dom.css("overflow",null))}t&&t.addClass("selected" ).attr("aria-selected",!0).parents("li").add(n?t:null).removeClass("closed").att r("aria-expanded",!0)},e._toggleSections=function(e){var a=$(e.currentTarget).parents("li:first"),t=a.data("item"),i=a.hasClass("closed" );t instanceof Section&&(App.design.isLayeredStyle?a.removeClass("closed").attr("aria-expanded ",!0):(a.toggleClass("closed",!i).attr("aria-expanded",i),e.preventDefault())),t instanceof Topic&&"HelpViewer"in window&&"mtStatisticsIncrement"in HelpViewer&&HelpViewer.mtStatisticsIncrement(0,0,1,0)}}(),function(){var e=Topic.prototype,a=!1;flamingoQTDetect=!1,function(){return navigator.userAgent.match(/applewebkit/i)?(a=!0,void 0):"execScript"in window?(execScript('on error resume next: flamingoQTDetect = IsObject(CreateObject("QuickTimeCheckObject.QuickTimeCheck.1"))',"VBScript"),a= flamingoQTDetect,void 0):($.each($.makeArray(navigator.plugins),function(){return this.name.match(/quicktime/i)?(a=!0,!1):void 0}),void 0)}(),e.navPath=function(){return(this.parent?this.parent.navPath():[]).concat( this)},e.breadcrumbHTML=function(){var e=this.navPath(),a="rtl"===$("body").attr("dir")?"◀":"►",t=" <span class='breadcrumbArrow'>"+a+"</span> ";return e.pop(),$.map(e,function(e){return e.name}).join(t)},e.linkHref=function(){return this.is_external||this.is_hash?this.href:"#"+this.id},e.navigateTo=function(){l ocation.href=this.linkHref()},e.loadContent=function(){if(!this._content_loaded) {var e=App.bundle.URL(),a=this,t="";a.href&&$.ajax({async:!1,url:e+a.href,dataType:" html"}).done(function(a){t=a.replace(/.*<body/,"<div").replace(/\/body>.*/,"/div >"),t=t.replace(/src="/g,'src="'+e)}),t?(this.$content=$(t).addClass("apd-topic" ),this.$content.find("a[href^='http']").attr("target","_blank"),this.full_name=t his.$content.find("h1:first").text(),this.$content.attr("data-apdid",this.id).re moveAttr("id").find("a[name="+this.id+"]").remove(),this._removeSectionLinks(),t his._collapseTasks(),this._formatMovieLinks(),this._addFeedbackLink(),this._addC opyrightText(),this._content_loaded=!0):(this.$content=this._contentUnavailable( ),this._content_loaded=!1)}return this.$content},e._removeSectionLinks=function(){var e=this;this.$content.find("a:not([href^=http])").each(function(){var a,t=$(this),i=t.attr("href")||"";i.match(/^(\w+).html$/)&&(a=e.book.topicForURL (i),a||t.contents().unwrap())})},e._collapseTasks=function(){var e=this.$content.find(".Task, .task"),a=1===e.length;e.each(function(){$(this).addClass(a?"":"closed").find(" [aria-expanded]").attr("aria-expanded",a).end().find("[aria-hidden]").attr("aria -hidden",!a).end()}),$("<span>",{"class":"hideTaskBody",role:"button",text:"Hide ".loc(),"aria-label":"Hide".loc()}).prependTo(e),$("<span>",{"class":"showTaskBo dy",role:"button",text:"Show".loc(),"aria-label":"Show".loc()}).prependTo(e)},e. _addFeedbackLink=function(){if(this.book.collect_feedback){var e=$("<div>",{"class":"Feedback"}).appendTo(this.$content),a=$.param({bookID:thi s.book.title,topicTitle:this.name,appVersion:this.book.version||"",build:this.bo ok.build_id||"",source:$.browser.helpviewer?"helpviewer":"browser"});$("<span>", {"class":"LinkFeedback",text:"Was this page helpful?".loc()}).appendTo(e),$("<a>",{text:"Send feedback.".loc(),href:"http://help.apple.com/feedbackR1/English/pgs/fdbck_form.php?"+a,target:"_blank"}).click($.proxy(function(){$(this.book).trigger("feedback", this)},this)).appendTo(e)}},e._formatMovieLinks=function(){var e=this;this.$content.find(".LinkAppleWebMovie, .movie").each(function(){var t=$(this),i=t.find("a:first"),n=i.attr("href"),o=i.text(),s=e._getMovieURLFromU RLParam(n);a&&s?(i.parent().is("p")||i.wrap("<p class='p'>"),$("<a>",{title:o}).prependTo(t),t.find("a").attr({href:s,target:"h v_overlay_small"})):t.remove()})},e._getMovieURLFromURLParam=function(e){var a=null;if(e.match(/.*\?movie=/)){e=e.replace(/.*\?movie=/,"");var t=App.bundle.URL()+"movies/"+e+".json";a=this._getMovieURLFromJSONFileAtURL(t)} return a},e._getMovieURLFromJSONFileAtURL=function(e){var a=null;return $.browser.msie&&navigator.userAgent.match(/x64/i)?a:(navigator.onLine&&$.ajax({ async:!1,dataType:"json",url:e,success:function(e){a=e.length?e[0].url:e.url},er ror:function(){console.log(e+" could not be loaded")}}),a)},e._addCopyrightText=function(){if(this.book.copyright_text){var e=$("<div>",{"class":"copyrightTagline",html:this.book.copyright_text}),a=this. $content.find(".contentCell:last");
a.length?a.append(e):this.$content.append(e)}},e._contentUnavailable=function(){ var e=$("<div>",{id:this.id,"class":"apd-topic"});if($("<img>",{"class":"topicIcon" ,src:App.resourcePath+"images/[email protected]"}).appendTo(e),$("<h1>",{text:"TOPIC _UNAVAILABLE".loc()}).appendTo(e),$.browser.helpviewer&&location.protocol.match( /file/)){var a=$("<div>",{"class":"body conbody"}).appendTo(e);a.append($.map("CONNECT_TO_INTERNET".loc().split("\n"),f unction(e){return $("<p>",{"class":"p",text:e})})),"mtStatisticsIncrement"in HelpViewer&&HelpViewer.mtStatisticsIncrement(1,0,0,0)}return e}}(),APD.translations=[{meta:{isoCodes:["ar"],isoName:"Arabic",name:"Ø§Ù„Ø¹Ø±Ø ¨ÙŠØ©"},ui:{TOPIC_UNAVAILABLE:"الموضوع المØدد غير متوفر Øاليًا.",CONNECT_TO_INTERNET:'تأكد من الاتصال بالإنترنت. للØصول على مساعدة، اختر قائمة Apple > تفضيلات النظام، وانقر على الشبكة، ثم انقر على "ساعدني".\nإذا كنت متصلاً بالإنترنت، ولا يظهر المØتوى بعد، فØاول مرة أخرى لاØقًا.',"%@ Search Results":"%@ نتيجة (نتائج) بØØ«","Apple applications":"تطبيقات Apple",Cancel:"إلغاء","Change Language":"تغيير اللغة",Close:"إغلاق","Featured application help":"تعليمات تطبيقات مميّزة","Go to the homepage":"الانتقال إلى الصفØØ© الرئيسية","Help for:":"تعليمات لـ:",Hide:"إخفاء",Home:"الشاشة الرئيسية","Loading latest help...":"يتم الآن تØميل Ø£Øدث التعليمات…","Other applications":"تطبيقات أخرى","Recent applications":"Ø£Øدث التطبيقات",Search:"بØØ«","Send feedback.":"أرسل تغذية مرتدّة.","Show all":"إظهار الكل","Show less":"إظهار أقل","Show the previous page":"إظهار الصفØØ© السابقة","Show the next page":"إظهار الصفØØ© التالية",Show:"إظهار","Was this page helpful?":"هل كانت هذه الصفØØ© مفيدة؟"}},{meta:{isoCodes:["ca"],isoName:"Catalan",name:"Català "},ui:{TOPIC_UNAVAILABLE:"El tema seleccionat no està disponible ara",CONNECT_TO_INTERNET:"Comproveu que teniu connexió a Internet. Per obtenir ajuda sobre com establir connexió, seleccioneu el menú Apple > Preferències del Sistema i feu clic a Xarxa i, després, a Assistent.\nSi esteu connectat a Internet però el contingut no apareix, proveu-ho de nou més endavant.","%@ Search Results":"%@ resultats","Apple applications":"Aplicacions d'Apple",Cancel:"Cancel·lar","Change Language":"Canviar idioma",Close:"Tancar","Featured application help":"Ajuda de l'aplicació destacada","Go to the homepage":"Vés a la pà gina inicial","Help for:":"Ajuda de:",Hide:"Ocultar",Home:"Inici","Loading latest help...":"Carregant l'ajuda més actualitzada…","Other applications":"Altres aplicacions","Recent applications":"Aplicacions recents",Search:"Buscar","Send feedback.":"Enviar opinió.","Show all":"Mostrar-ho tot","Show less":"Mostrar menys","Show the previous page":"Mostra la pà gina anterior","Show the next page":"Mostra la pà gina següent",Show:"Mostrar","Was this page helpful?":"Us ha resultat útil aquesta pà gina?"}},{meta:{isoCodes:["cs"],isoName:"Czech",name:"ÄŒeÅ¡tina"},ui:{TOPIC_UNA VAILABLE:"Vybrané téma nenà k dispozici",CONNECT_TO_INTERNET:"UjistÄ›te se, že jste pÅ™ipojeni k Internetu. Chcete-li nápovÄ›du pro pÅ™ipojenÃ, použijte pÅ™Ãkaz PÅ™edvolby systému z nabÃdky Apple, kliknÄ›te na SÃÅ¥ a poté na „Průvodce“.\nJste-li pÅ™ipojeni k Internetu, avÅ¡ak obsah se pÅ™esto nezobrazuje, zkuste to znovu pozdÄ›ji.","%@ Search Results":"Výsledky hledánÃ: %@","Apple applications":"Aplikace Apple",Cancel:"ZruÅ¡it","Change Language":"ZmÄ›nit jazyk",Close:"ZavÅ™Ãt","Featured application help":"NápovÄ›da pro doporučené aplikace","Go to the homepage":"OtevÅ™Ãt domovskou stránku","Help for:":"NápovÄ›da pro:",Hide:"Skrýt",Home:"Plocha","Loading latest help...":"NačÃtánà nejnovÄ›jÅ¡Ã nápovÄ›dy…","Other applications":"Jiné aplikace","Recent applications":"Poslednà aplikace",Search:"Hledat","Send feedback.":"SdÄ›lte nám svůj názor.","Show all":"Zobrazit vÅ¡e","Show less":"Zobrazit ménÄ›","Show the previous page":"Zobrazit pÅ™edchozà stránku","Show the next page":"Zobrazit dalÅ¡Ã stránku",Show:"Zobrazit","Was this page helpful?":"Pomohla vám tato stránka?"}},{meta:{isoCodes:["da"],isoName:"Danish",name:"Dansk"},ui:{TOPIC_UN AVAILABLE:"Det valgte emne er utilgængeligt",CONNECT_TO_INTERNET:"Sørg for, at der er oprettet forbindelse til internettet. Vælg Apple > Systemindstillinger, klik pÃ¥ Netværk, og klik derefter pÃ¥ “Hjælp mig” for at fÃ¥ hjælp med at oprette forbindelse.\nHvis der er forbindelse til internettet, og indholdet stadig ikke vises, kan du prøve igen senere.","%@ Search Results":"%@ søgeresultater","Apple applications":"Apple-programmer",Cancel:"Annuller","Change Language":"Skift sprog",Close:"Luk","Featured application help":"Viste program","Go to the homepage":"GÃ¥ til hjemmesiden","Help for:":"Hjælp til:",Hide:"Skjul",Home:"Hjem","Loading latest help...":"Indlæser den nyeste hjælp…","Other applications":"Andre programmer","Recent applications":"Seneste programmer",Search:"Søg","Send feedback.":"Send feedback.","Show all":"Vis alle","Show less":"Vis færre","Show the previous page":"Vis forrige side","Show the next page":"Vis næste side",Show:"Vis","Was this page helpful?":"Var denne side nyttig?"}},{meta:{isoCodes:["de"],isoName:"German",name:"Deutsch"},ui:{TOPIC_UN AVAILABLE:"Das gewählte Thema ist derzeit nicht verfügbar",CONNECT_TO_INTERNET:"Vergewissern Sie sich, dass eine Verbindung zum Internet besteht. Wählen Sie „Apple“ > „Systemeinstellungen“, klicken Sie auf „Netzwerk“ und dann auf „Assistent“, wenn Sie Hilfe benötigen.\nWenn Sie mit dem Internet verbunden sind, den Inhalt aber dennoch nicht sehen können, versuchen Sie es zu einem späteren Zeitpunkt erneut.","%@ Search Results":"%@ Suchergebnisse","Apple applications":"Apple-Programme",Cancel:"Abbrechen","Change Language":"Sprache wechseln",Close:"Schließen","Featured application help":"Empfohlenes Programm-Hilfe","Go to the homepage":"Zur Homepage","Help for:":"Hilfe für:",Hide:"Ausblenden",Home:"Startseite","Loading latest help...":"Die neuste Hilfe wird geladen ...","Other applications":"Andere Programme","Recent applications":"Benutzte Programme",Search:"Suchen","Send feedback.":"Feedback senden.","Show all":"Alle einblenden","Show less":"Weniger einblenden","Show the previous page":"Nächste Seite einblenden","Show the next page":"Vorherige Seite einblenden",Show:"Einblenden","Was this page helpful?":"War diese Seite nützlich?"}},{meta:{isoCodes:["el"],isoName:"Greek",name:"Ελληνικά"},u i:{TOPIC_UNAVAILABLE:"Αυτήν τη στιγμή, το επιλεγμÎνο θÎμα δεν είναι διαθÎσιμο",CONNECT_TO_INTERNET:"Βεβαιωθείτε ότι είστε συνδεδεμÎνοι στο Διαδίκτυο. Για βοήθεια με τη σύνδεση, επιλÎξτε το μενού Apple > «Προτιμήσεις συστήματος», κάντε κλικ στο «Δίκτυο» και μετά στο «ΘÎλω βοήθεια».\nΕάν συνδεθείτε στο Διαδίκτυο και το περιεχόμενο δεν εμφανίζεται ακόμη, δοκιμάστε ξανά αργότερα.","%@ Search Results":"%@ αποτελÎσματα αναζήτησης","Apple applications":"ΕφαρμογÎÏ‚ Apple",Cancel:"Ακύρωση","Change Language":"Αλλαγή γλώσσας",Close:"Κλείσιμο","Featured application help":"Βοήθεια προτεινόμενων εφαρμογών","Go to the homepage":"Μετάβαση στην αρχική σελίδα","Help for:":"Βοήθεια για:",Hide:"Απόκρυψη",Home:"Αφετηρία","Loading latest help...":"Γίνεται φόρτωση της πιο πρόσφατης Βοήθειας…","Other applications":"Άλλες εφαρμογÎÏ‚","Recent applications":"Πρόσφατη εφαρμογή",Search:"Αναζήτηση","Send feedback.":"Στείλετε σχόλια.","Show all":"Εμφάνιση όλων","Show less":"Εμφάνιση λιγότερων","Show the previous page":"Εμφάνιση της προηγούμενης σελίδας","Show the next page":"Εμφάνιση της επόμενης σελίδας",Show:"Εμφάνιση","Was this page helpful?":"Ήταν χρήσιμη αυτή η σελίδα;"}},{meta:{isoCodes:["en-us","en-gb","en-ca","en-ie","en"],isoName :"English",name:"English"},ui:{TOPIC_UNAVAILABLE:"The selected topic is currently unavailable",CONNECT_TO_INTERNET:"Make sure you’re connected to the Internet. For help connecting, choose Apple menu > System Preferences, click Network, and click “Assist me.”\nIf you’re connected to the Internet, and the content still doesn’t appear, try again later.","%@ Search Results":"%@ Search Results","Apple applications":"Apple applications",Cancel:"Cancel","Change Language":"Change Language",Close:"Close","Featured application help":"Featured application help","Go to the homepage":"Go to the homepage","Help for:":"Help for:",Hide:"Hide",Home:"Home","Loading latest help...":"Loading latest help...","Other applications":"Other applications","Recent applications":"Recent applications",Search:"Search","Send feedback.":"Send feedback.","Show all":"Show all","Show less":"Show less","Show the previous page":"Show the previous page","Show the next page":"Show the next page",Show:"Show","Was this page helpful?":"Was this page helpful?"}},{meta:{isoCodes:["es"],isoName:"Spanish",name:"Español"},ui:{TOPIC _UNAVAILABLE:"El tema seleccionado no está disponible en estos momentos",CONNECT_TO_INTERNET:"Asegúrese de que está conectado a Internet. Si necesita ayuda para conectarse, seleccione menú Apple > Preferencias del Sistema, haga clic en Red y, a continuación, haga clic en Asistente.\nSi ya está conectado a Internet pero no se muestra el contenido del tema, inténtelo de nuevo más tarde.","%@ Search Results":"%@ resultados","Apple applications":"Aplicaciones de Apple",Cancel:"Cancelar","Change Language":"Cambiar idioma",Close:"Cerrar","Featured application help":"Ayuda de la aplicación destacada","Go to the homepage":"Ir a la página de inicio","Help for:":"Ayuda de:",Hide:"Ocultar",Home:"Inicio","Loading latest help...":"Cargando la ayuda más reciente…","Other applications":"Otras aplicaciones","Recent applications":"Aplicaciones recientes",Search:"Buscar","Send feedback.":"Enviar opinión.","Show all":"Mostrar todo","Show less":"Mostrar menos","Show the previous page":"Mostrar la página anterior","Show the next page":"Mostrar la página siguiente",Show:"Mostrar","Was this page helpful?":"¿Le ha resultado útil esta página?"}},{meta:{isoCodes:["fi"],isoName:"Finnish",name:"Suomi"},ui:{TOPIC_UN AVAILABLE:"Valittu aihe ei ole tällä hetkellä käytettävissä",CONNECT_TO_INTERNET:"Varmista, että olet yhteydessä internetiin. Jos tarvitset apua yhteyden muodostamisessa, valitse Omenavalikko > Järjestelmäasetukset, osoita Verkko ja osoita Avusta.\nJos olet yhteydessä internetiin, mutta sisältö ei silti tule näkyviin, yritä myöhemmin uudelleen.","%@ Search Results":"%@ - hakutulokset","Apple applications":"Applen ohjelmat",Cancel:"Kumoa","Change Language":"Vaihda kieltä",Close:"Sulje","Featured application help":"Esittelyssä olevan ohjelman ohje","Go to the homepage":"Siirry kotisivulle","Help for:":"Ohje:",Hide:"Kätke",Home:"Koti","Loading latest help...":"Ladataan uusinta ohjetta…","Other applications":"Muut ohjelmat","Recent applications":"Äskeiset ohjelmat",Search:"Etsi","Send feedback.":"Lähetä palautetta.","Show all":"Näytä kaikki","Show less":"Näytä vähemmän","Show the previous page":"Näytä edellinen sivu","Show the next page":"Näytä seuraava sivu",Show:"Näytä","Was this page helpful?":"Oliko tästä sivusta apua?"}},{meta:{isoCodes:["fr"],isoName:"French",name:"Français"},ui:{TOPIC_UN AVAILABLE:"La rubrique sélectionnée est actuellement indisponible.",CONNECT_TO_INTERNET:"Assurez-vous d’être connecté à Internet. Pour obtenir de l’aide pour vous connecter, choisissez le menu Pomme > Préférences Système, cliquez sur Réseau puis sur Assistant.\nSi vous êtes connecté à Internet, mais que le contenu ne s’affiche toujours pas, réessayez ultérieurement.","%@ Search Results":"%@ résultats","Apple applications":"Applications Apple",Cancel:"Annuler","Change Language":"Changer de langue",Close:"Fermer","Featured application help":"Aide de l’application actuelle","Go to the homepage":"Aller à la page d'accueil","Help for:":"Aide pour :",Hide:"Masquer",Home:"Accueil","Loading latest help...":"Chargement de l’Aide la plus récente… ","Other applications":"Autres applications","Recent applications":"Applications récentes",Search:"Rechercher","Send feedback.":"Envoyer des commentaires.","Show all":"Affichage total","Show less":"Affichage partiel","Show the previous page":"Afficher la page précédente","Show the next page":"Afficher la page suivante",Show:"Afficher","Was this page helpful?":"Avez-vous trouvé cette page utile ?"}},{meta:{isoCodes:["he"],isoName:"Hebrew",name:"עברית"},ui:{TOPIC_UNAVA ILABLE:"×”× ×•×©× ×©× ×‘×—×¨ ××™× ×• זמין כעת.",CONNECT_TO_INTERNET:"ודא/×™ ×©×”×™× ×š מחובר/ת ×œ××™× ×˜×¨× ×˜. לעזרה ×‘× ×•×©× התחברות, בחר/×™ תפריט Apple > ״העדפות המערכת״, לחץ/×™ על ״רשת״ ובחרי ״עזור לי״.\nאם ×”×™× ×š מחובר/ת ×œ××™× ×˜×¨× ×˜, ובכל זאת התוכן ××™× ×• מופיע, × ×¡×”/×™ שוב מאוחר יותר.","%@ Search Results":"%@ תוצאות","Apple applications":"יישומי Apple",Cancel:"ביטול","Change Language":"החלף/×™ שפה",Close:"סגור","Featured application help":"עזרה ×‘× ×•×©× היישומים המומלצים","Go to the homepage":"עבור אל דף הבית","Help for:":"עזרה ×‘× ×•×©×:",Hide:"הסתר",Home:"בית","Loading latest help...":"טוען את קבצי העזרה החדשים ביותר…","Other applications":"יישומים אחרים","Recent applications":"יישומים ××—×¨×•× ×™×",Search:"חיפוש","Send feedback.":"שלח/×™ משוב.","Show all":"הצג הכול","Show less":"הצג פחות","Show the previous page":"הצג את העמוד הקודם","Show the next page":"הצג את העמוד הבא",Show:"הצג","Was this page helpful?":"האם עמוד ×–×” עזר לך?"}},{meta:{isoCodes:["hr"],isoName:"Croatian",name:"Hrvatski"},ui:{TOPIC_U NAVAILABLE:"Odabrana tema trenutno nije dostupna",CONNECT_TO_INTERNET:'Provjerite jeste li spojeni na internet. Za pomoć pri spajanju odaberite Apple izbornik > Postavke sustava, kliknite na Mreža i zatim na "Pomoć".\nAko ste spojeni na internet i sadržaj se svejedno ne pojavljuje, pokuÅ¡ajte ponovno kasnije.',"%@ Search Results":"Rezultata pretraživanja: %@","Apple applications":"Appleove aplikacije",Cancel:"Odustani","Change Language":"Promijeni jezik",Close:"Zatvori","Featured application help":"Pomoć za ponuÄ‘ene aplikacije","Go to the homepage":"Prijelaz na početnu stranicu","Help for:":"Pomoć za:",Hide:"Sakrij",Home:"Početna stranica","Loading latest help...":"Učitavanje najnovijih datoteka pomoći…","Other applications":"Ostale aplikacije","Recent applications":"Novije aplikacije",Search:"Pretraži","Send feedback.":"PoÅ¡alji povratne informacije.","Show all":"Prikaži sve","Show less":"Prikaži manje","Show the previous page":"Prikaži prethodnu stranicu","Show the next page":"Prikaži sljedeću stranicu",Show:"Prikaži","Was this page helpful?":"Je li vam ova stranica pomogla?"}},{meta:{isoCodes:["hu"],isoName:"Hungarian",name:"Magyar"},ui:{TOPIC _UNAVAILABLE:"A kijelölt témakör jelenleg nem érhetÅ‘ el.",CONNECT_TO_INTERNET:"GyÅ‘zÅ‘djön meg róla, hogy csatlakozik az internethez. Ha segÃtségre van szüksége, válassza az Apple menü > RendszerbeállÃtások menüpontot, kattintson a Hálózat, majd a „SegÃtség kérése” elemre.\nHa csatlakozik az internethez, és a tartalom továbbra sem jelenik meg, próbálja meg késÅ‘bb.","%@ Search Results":"%@ keresési eredmény","Apple applications":"Apple alkalmazások",Cancel:"Mégsem","Change Language":"Nyelv módosÃtása",Close:"Bezárás","Featured application help":"Kiemelt alkalmazássúgó","Go to the homepage":"Ugrás a kezÅ‘dlapra","Help for:":"Súgó a következÅ‘höz:",Hide:"Elrejtés",Home:"FÅ‘gomb","Loading latest help...":"Legújabb súgó betöltése…","Other applications":"Egyéb alkalmazások","Recent applications":"Legutóbbi alkalmazások",Search:"Keresés","Send feedback.":"Visszajelzés küldése","Show all":"Az összes megjelenÃtése","Show less":"Kevesebb megjelenÃtése","Show the previous page":"ElÅ‘zÅ‘ oldal megjelenÃtése","Show the next page":"KövetkezÅ‘ oldal megjelenÃtése",Show:"MegjelenÃtés","Was this page helpful?":"Hasznosnak találta ezt az oldalt?"}},{meta:{isoCodes:["id"],isoName:"Indonesian",name:"Bahasa Indonesia"},ui:{TOPIC_UNAVAILABLE:"Topik yang dipilih saat ini tidak tersedia",CONNECT_TO_INTERNET:"Pastikan Anda terhubung ke Internet. Untuk bantuan dalam menghubungkan, pilih menu Apple > Preferensi Sistem, klik Jaringan, dan klik “Bantu saya.”\nJika Anda terhubung ke Internet, dan konten masih tidak muncul, coba lagi nanti.","%@ Search Results":"%@ Hasil Pencarian","Apple applications":"Aplikasi Apple",Cancel:"Batal","Change Language":"Ubah Bahasa",Close:"Tutup","Featured application help":"Fitur bantuan aplikasi","Go to the homepage":"Kunjungi halaman rumah","Help for:":"Bantuan untuk:",Hide:"Sembunyikan",Home:"Rumah","Loading latest help...":"Memuat bantuan terbaru…","Other applications":"Aplikasi lain","Recent applications":"Aplikasi terbaru",Search:"Cari","Send feedback.":"Kirim umpan balik.","Show all":"Tampilkan semua","Show less":"Tampilkan sebagian","Show the previous page":"Tampilkan halaman sebelumnya","Show the next page":"Tampilkan halaman berikutnya",Show:"Tampilkan","Was this page helpful?":"Apakah halaman ini membantu?"}},{meta:{isoCodes:["it"],isoName:"Italian",name:"Italiano"},ui:{TOPI C_UNAVAILABLE:"L'argomento selezionato non è al momento disponibile.",CONNECT_TO_INTERNET:"Assicurati di essere connesso a Internet. Per assistenza su come configurare la connessione a Internet, scegli menu Apple > Preferenze di Sistema, fai clic su Network, quindi su “Aiutami”.\nSe sei connesso a Internet, ma non puoi visualizzare il contenuto, riprova più tardi.","%@ Search Results":"%@ risultati di ricerca","Apple applications":"Applicazioni Apple",Cancel:"Annulla","Change Language":"Cambia lingua",Close:"Chiudi","Featured application help":"Aiuto applicazione in primo piano","Go to the homepage":"Vai alla pagina iniziale","Help for:":"Aiuto per:",Hide:"Nascondi",Home:"Inizio","Loading latest help...":"Carico argomento dell'aiuto più recente…","Other applications":"Altre applicazioni","Recent applications":"Applicazioni recenti",Search:"Cerca","Send feedback.":"Invia commenti.","Show all":"Mostra tutto","Show less":"Mostra meno","Show the previous page":"Mostra pagina precedente","Show the next page":"Mostra pagina successiva",Show:"Mostra","Was this page helpful?":"Hai trovato utile questa pagina?"}},{meta:{isoCodes:["ja"],isoName:"Japanese",name:"日本語"},ui:{TOPI C_UNAVAILABLE:"選択したトピックは現在利用㠁§ãã¾ã›ã‚“",CONNECT_TO_INTERNET:"インターム1;ットに接続していることを確認㠁—てください。接続について調べたã&# 129;„ときは、アップルメニュー＞「シスム†ãƒ 環境è¨å®šã€ã¨é¸æŠžã—、「ネットワー㠂¯ã€ã‚’クリックしてから「アシスタント」 ;をクリックします。\nã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã«æ Ž¥ç¶šã—ているのにコンテンツが表示ã&# 129;•ã‚Œãªã„å ´åˆã¯ã€å¾Œã§ã‚„ã‚Šç›´ã—ã¦ãã 9; さい。","%@ Search Results":"%@ 件の検索結果","Apple applications":"Apple アプリケーション",Cancel:"ã‚ャンセル","Change Language":"言語を変更",Close:"閉じる","Featured application help":"お勧めのアプリケーションヘルプ","Go to the homepage":"ホームページに移動","Help for:":"表示ä¸ã®ãƒ˜ãƒ«ãƒ—：",Hide:"éš ã™",Home:"ホーム","Loading latest help...":"最新のヘルプをèªã¿è¾¼ã¿ä¸...","Other applications":"ほかのアプリケーション","Recent applications":"最近使ったアプリケーション",Search:"æ¤œç´ ¢","Send feedback.":"フィードバックを送信","Show all":"すべてを表示","Show less":"一部を表示","Show the previous page":"前のページを表示","Show the next page":"次のページを表示",Show:"表示","Was this page helpful?":"このページは役立ちましã 9;Ÿã‹ï¼Ÿ"}},{meta:{isoCodes:["ko"],isoName:"Korean",name:"한글"},ui:{TOP IC_UNAVAILABLE:"ì„ íƒí•œ ì£¼ì œëŠ” 현재 ì‚¬ìš©í• ìˆ˜ 없습니다.",CONNECT_TO_INTERNET:"인터넷에 연결되어 있는지 확인하ì‹ì‹œì˜¤. 연결에 대한 도움말은 Apple 메뉴 > 시스템 í™˜ê²½ì„¤ì •ì„ ì„ íƒí•˜ê³ ë„¤íŠ¸ì›Œí¬ë¥¼ 클ë¦í•œ 다음 “도와주세요”를 클ë¦í•˜ì‹ì‹œì˜¤.\n인터넷에 연결되어 있지만 해당 ì½˜í…ì¸ ê°€ ì—¬ì „ížˆ 나타나지 않는 경우 나중에 다시 시도해보ì‹ì‹œì˜¤.","%@ Search Results":"%@개의 검색 ê²°ê³¼","Apple applications":"Apple 응용 프로그램",Cancel:"취소","Change Language":"언어 변경",Close:"닫기","Featured application help":"추천 응용 프로그램 도움말","Go to the homepage":"홈페이지로 이동","Help for:":"도움말:",Hide:"가리기",Home:"홈","Loading latest help...":"ìµœì‹ ë„ì›€ë§ 불러오는 중...","Other applications":"기타 응용 프로그램","Recent applications":"최근 사용 응용 프로그램",Search:"검색","Send feedback.":"피드백 보내기.","Show all":"모두 보기","Show less":"간단히 보기",Show:"보기","Show the previous page":"ì´ì „ 페이지 보기","Show the next page":"다음 페이지 보기","Was this page helpful?":"이 페이지가 도움이 되셨습니까?"}},{meta:{isoCodes:["ms"],isoName:"Malaysian",name:"Bahas a Malaysia"},ui:{TOPIC_UNAVAILABLE:"Topik yang dipilih tidak tersedia sekarang",CONNECT_TO_INTERNET:"Pastikan anda disambungkan ke Internet. Untuk bantuan sambungan, pilih menu Apple > Keutamaan Sistem, klik Rangkaian, dan klik “Bantu saya.”\nJika anda disambungkan ke Internet, dan kandungan masih tidak muncul, cuba lagi nanti.","%@ Search Results":"%@ Hasil Carian","Apple applications":"Aplikasi Apple",Cancel:"Batal","Change Language":"Tukar Bahasa",Close:"Tutup","Featured application help":"Bantuan untuk aplikasi yang ditampilkan","Go to the homepage":"Pergi ke laman utama","Help for:":"Bantuan untuk:",Hide:"Sembunyikan",Home:"Utama","Loading latest help...":"Memuatkan bantuan terbaru...","Other applications":"Aplikasi lain","Recent applications":"Aplikasi terbaru",Search:"Cari","Send feedback.":"Hantar maklum balas.","Show all":"Tunjukkan semua","Show less":"Tunjukkan sedikit","Show the previous page":"Tunjukkan halaman sebelumnya","Show the next page":"Tunjukkan halaman seterusnya",Show:"Tunjukkan","Was this page helpful?":"Adakah halaman ini membantu?"}},{meta:{isoCodes:["nl"],isoName:"Dutch",name:"Nederlands"},ui:{TOPI C_UNAVAILABLE:"Het geselecteerde onderwerp is momenteel niet beschikbaar",CONNECT_TO_INTERNET:"Controleer of er verbinding is met het internet. Als u hulp nodig hebt, kiest u Apple-menu > 'Systeemvoorkeuren' en klikt u vervolgens op 'Netwerk' en 'Assistentie'.\nAls u verbinding hebt met het internet en de inhoud nog steeds niet wordt weergegeven, probeert u het later nogHi Mac Attack,
My computer will not disconnect from the internet. It seems to find a clone router and continues even when I shut down and unplug my my own home iy
Your main question was 'chopped' in the title. Please reply in the body of a reply box with the full question and anything you have tried. And no, the long report was not helpful .
If the same website is opening each time you launch a browser (Safari?) hold down the shift key as you launch to prevent previous pages from opening.
Have a look at your settings in Safari > Preferences. Especially General and Privacy.
Reset Safari to remove cookies and other stored data.
System Preferences > General
Have a look at your settings in System Preferences > Security & Privacy.
Call back with more questions.
Regards,
Ian -
Default static route and Null 0
Hi Everyone,
Need to clear some doubts for below setup
Switch 3550A is connected to Internet Router and has OSPF nei relationship with it.
3550A# sh run int fa0/11
Building configuration...
Current configuration : 272 bytes
interface FastEthernet0/11
description OSPF LAN Connection to 2691 Router Interface Fas 0/1
no switchport
ip address 192.168.5.2 255.255.255.254
sh ip route shows
3550A#sh ip route
Gateway of last resort is 192.168.5.3 to network 0.0.0.0
O*E2 0.0.0.0/0 [110/1] via 192.168.5.3, 20:39:56, FastEthernet0/11
3550A#
All is working fine.
For testing purposes i config below static route on 3550A
ip default-network 192.168.1.0
ip route 192.168.1.0 255.255.255.0 Null0
After above change
3550A# sh ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route
Gateway of last resort is not set
S* 192.168.1.0/24 is directly connected, Null0
O*E2 0.0.0.0/0 [110/1] via 192.168.5.3, 20:38:38, FastEthernet0/11
Now i can not ping to internet as below
3550A#ping 4.2.2.2
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 4.2.2.2, timeout is 2 seconds:
Success rate is 0 percent (0/5)
When we ping from Switch then source IP is always the Outside interface IP right?
So in this case Switch is using which IP as source?
Ping to internet is not working as default network is set to 192.168.1.0 and all request goes to this IP and then it goes to
Null interface right?
Extended ping works fine as below
3550A#ping
Protocol [ip]:
Target IP address: 4.2.2.2
Repeat count [5]:
Datagram size [100]:
Timeout in seconds [2]:
Extended commands [n]: y
Source address or interface: 192.168.5.2
Type of service [0]:
Set DF bit in IP header? [no]:
Validate reply data? [no]:
Data pattern [0xABCD]:
Loose, Strict, Record, Timestamp, Verbose[none]:
Sweep range of sizes [n]:
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 4.2.2.2, timeout is 2 seconds:
Packet sent with a source address of 192.168.5.2
Success rate is 100 percent (5/5), round-trip min/avg/max = 76/79/80 ms
Second thing to confirm is this ping works because 192.168.5.2 is directly connected to Internet Router interface?
Regards
MAheshHi Mahesh,
When we ping from Switch then source IP is always the Outside interface IP right?
That is correct. By default it is always the outgoing interface on the device unless you specify it differently.
Ping to internet is not working as default network is set to 192.168.1.0 and all request goes to this IP and then it goes to
Null interface right?
That is correct. Null0 can't be used as next-hop.
Second thing to confirm is this ping works because 192.168.5.2 is directly connected to Internet Router interface?
No, that is because 192.168.5.0/30 is NATed. Remember 192.168.x.x address is a private segment and cannot access the Internet unless NAT is used.
HTH
Reza
Maybe you are looking for
-
Data load from variable file names
I have multiple files that I want to load into a cube, each starting with the same 5 characters but ending differently. EG GM1010104 GM1010204 What's the best option for MAXL script to automate this data load ? Can you use a wildcard name in the scri
-
No of maximun users in oracle 10g express edition
what is the maximum number of concurrent users (session) in oracle 10g express edition. coz right now, we have one server with oracle 10g express edition, and a front end application of asp.net (.net 1.1)
-
Does anyone know if keynote would work on windows?
Hey guys, I have a mac but I need to do some presentations for school and they only have windows there. Do you know if there's some way to make it work on windows? Or maybe to connect a 13" 2012 macbook pro to a smartboard?
-
i bought a few songs from itunes and they play fine on my computer but they wont play at all on my ipod nano, what am i doing wrong???
-
Hi All ! When I am trying to import oracle.forms.webutil.file.FileFunctions class in my forms its giving an error message.... Importing Class oracle.forms.webutil.file.FileFunctions... Exception occurred: java.lang.NoClassDefFoundError: oracle/forms/