VTP between two routers
PC1 ----- SW1 ------ R1------SERIAL------R2------SW2------PC2
My SW1 VTP domain and i created 2 VLANs on it. Then on R1 i created sub interface for VLANs
vlan1 0/0.10 192.168.10.1
vlan2 0/0.20 192.168.20.1
I want to do my sw2 client of sw1 domain. How can i do it ?
You can't really and there would be no point if you have subinterfaces on the router because the IP subnets used for each vlan would be different in each site.
If you wanted to extend the vlans across the serial link you could look at L2TPv3 to do that and then have the same vlans/IP subnets in each site but even then with two switches I would just use VTP transparent and create the vlans on each switch.
Jon
Similar Messages
-
Hello.
I have wi-fi bridge between two routers TP-LINK WR841ND.
The name of this technology - WDS.
HP Laser JET 1536 dnf MFP connect to one of this routers (copper).
Second device (my NETBOOK) connect to second router (WiFi).
I have good communication between NETBOOK and HP Laser JET 1536 dnf MFP via WiFI-bridge.
In usual case NETBOOK can find (and can Ping) network printer and make a print some files.
But my Ipad or Iphone can't find HP Laser JET 1536 dnf MFP (using Eprint). Ipad and iphone connect
to router across WiFi.
Please, help!Are you using the ePrint Mobile App, the ePrint Printer Control App, or just trying to send an email to the printer's ePrint email address?
Does AirPrint work?
-------------How do I give Kudos? | How do I mark a post as Solved? -------------------------------------------------------- -
Load balancing between two routers
I have two routers connected through the LAN connection. The first one is using as routing protocol EIGRP, the other one is part of the managed service and I do not have access to it. I would like to make a load balancing between the two of them by redistributing the static routes in EIGRP. When I tried this, I am loosing the EIGRP entry for this route in the routing table. I would like to have both of them , so we could have traffic sharing. I appreciate if you give me any hints.
Raju,
you have two choices as far as I can see. If you want to use static routing over the WAN to your branch, you could duplicate your static routes to the branch and point them to the secondary router. You will have two identical sets of static routes in the primary router, one set pointing to the WAN interface and the other one pointing to the secondary router.
ip route x.x.x.x "WAN-interface"
ip route x.x.x.x "secondary router"
ip route y.y.y.y "WAN-interface"
ip route y.y.y.y "secondary router"
etc.
As a result the primary router will have two routes to the branch and will load-balance. If one next-hop fails (either the WAN interface or the secondary router), only the other will be used. If the next-hop comes back up, load-balancing will resume.
The other choice would be to use EIGRP over the WAN, and make sure the two routers become EIGRP neighbors. Then you can use the "variance" command to achieve unequal cost load-balancing between the two routers. Let me know if you need more information about this, but i think static routes will be sufficient in your situation.
HTH, Thomas -
Dot1q between two routers connected via 2950
Hi,
I have two 7200's connected to a 2950 (FE 22 + FE 24 - Both configured as trunks).
On the 7200's, I have the following:
7200-A
interface FastEthernet0/0.23
encapsulation dot1Q 23
ip address 192.168.1.1 255.255.255.252
no snmp trap link-status
7200-B
interface FastEthernet0/0.23
encapsulation dot1Q 23
ip address 192.168.1.2 255.255.255.252
no snmp trap link-status
2950:
interface FastEthernet0/22
switchport mode trunk
no ip address
duplex full
speed 100
interface FastEthernet0/24
switchport mode trunk
no ip address
duplex full
speed 100
But I cannot ping between the two routers?7200-A has dot1q ints for servers connected to the 2950 (Access Ports)....these are all currently successfully trunked down FE24
I want to connect 7200-B to 7200-A, and have dot1q Ints on both routers(As /30's) that can communicate (They will be used on 7200-B as Internet gateways for VRF's (With IP Nat enabled)....I was hoping that by having 7200-B connected to 2950 FE22, and configuring that port as a trunk also, that the dot1q ints on both routers could talk.
vlan 23 does exist on 2950, and is being trunked on both FE 22 + FE 24
I dont have any spare FE ports on 7200-A, hence the reason for me connecting 7200-B to the 2950. -
Connection between two routers
Can´t ping from pc10 to pc15. It get's stuck on router4, because the communication between router4 and router2 is failling.
I would appreciate if somebody could help me!
Thanks in advance.I dont have Packet tracer...
What is the ip address of the pc's?
Do you have route for both subnets in all routers?
Thanks,
Madhu. -
Wireless Connection between two routers
Ok. I own two houses seperated by a driveway going to both garages. I have cable internet access linked to a Netgear WNDR3300. That router is sending a signal to a wireless PC, 2 Laptops, and my Mini when needed. My signal in the 2nd house is REALLY weak.
I have a WRT54GS v4.0 sitting around and it to connect to the netgear and then resend a wireless signal to the wireless laptops around the 2nd house. can I do this? if so. HOW?Is your Linksys Router is connected hardwired to the Netgear Router ?
If your both trhe router is connveted via cable...you can get the wireless signal from both the router.However your purpose will not get resolved because you want to repeat or extend the signal.In my opinion you may get a wireless Range Expander to resolve your Problem. -
Is it possible to add a firewall between two mpls peers (P-PE)
Hi, I was wandering if there is a way between two routers that 'speak' MPLS to introduce a firewall (i.e. pix firewall). I know by default is not possible but perhaps through tunneling etc?
Ragards.Hi,
No, it is not possible at least for today. The packets between P and PE router are not IP packet but MPLS packets (it protocol type is different). One exception to that is penultimate hop poping. If P-H-P is placed and there is no other label stack (ex : no vpn ) the packet is pure IP packet.
Also one of the main idea of MPLS is that P router doesn't know anything except label binding information.
If you want to use firewall somewhere , use it on the CE side not between P-PE,P-P or PE-PE.
Best Regards -
Help picking between 2 routers
So I'm between two routers. I plan on flashing the router with dd-wrt immediately. Just want some advise please.
Between
Netgear R7000 Nighthawk AC1900 Smart WiFi Router ‑ 4‑Port Switch
And the
ASUS RT‑AC87U Wireless router ‑ 4‑port switch ac2400
The asus one is the newer one with better hardware, but I'm not sure which will work out better for me in the long run.
My current situation: house with three floors, 6 regular users, and roughly 7-10 devices concurrently.
Right now I have a 57 Mbps connection using a net gear router with ddwrt.
One issue I'm currently running into is every so often the wifi only will crash while the wired connection stays live. I've tried trouble shooting for past several months No resolution. I am considering a speed upgrade soon, but not until I can sustain a stable connection with the current setup.
Most common use is gaming and streaming via Netflix, along with general browsing.
What I'm looking for is stable hardware that will keep me future proof for a bit longer, that is why im erring towards the asus since it is the new hardware, but they are also the less tested company in terms of routers.
I'll appearciate any advise.
Currently. Can get asus for $258, and netgear for $171
I am hoping to upgrade to a 500 Mbps connection down the road.Thank you for your help, re-instating the DHCP did the trick (after a power cycle).
Just in case anyone else needs to do this, here is my final config;
WAG160N is set to 192.168.1.1 with DHCP enabled.
BEFW11S4 is set to 192.168.2.1 with DHCP enabled and auto select IP address.
Thanks for all the suggestions everyone - just need a Wireless N ADSL router (to replace the two I've got hooked up) that can log all internet traffic now -
VSM with NAT Between two ASR routers
We are new to the ASR platform and IOS XR. We have two new ASR 9006's with the VSM module. These two routers are not yet in production so we can play around with them. We will be moving the NAT functionality from our firewalls to these two routers. Is it possible for these two routers to share NAT translations? It is entirely possible that outbound traffic could be NAT'ed out one of these ASR's and the return traffic come through the other ASR. In this scenario how is the NAT translation handled? I've not had much luck finding documentation on this specific topic.
Thanks,
MarcHi,
To my understanding its not possible to connect to an ASA interface through interface other than the interface where the IP address is located.
In other words you are not able to connect from behind "inside" to the IP address of "mgmt" interface
I will try to find you a link to some Cisco documentation stating this. (I have never really had to find it though)
- Jouni -
How to secure IPv6 P2P Link between two distinguished Routers using ospfv3
I have two Routers - one Catalyst 6500 Sup720 and one Nexus 7009 SUP2-E - connected
via ospfv3 P2P Link using /64 IPv6 Networkaddresses. What must be configured in order to secure this P2P Link against possible security attacks ! Any example configuration available ?
Greetings ManfredHi Manfred,
You should configure authentication on both of the P2P interfaces/ SVIs:
int te1/0/1
desc 6500 uplink
ipv6 ospf authentication ipsec spi 500 sha1 <40_bit_hash>
int te1/0/1
desc 7009 uplink
ipv6 ospf authentication ipsec spi 500 sha1 <40_bit_hash>
...ensure that either end of the link have same spi index value and obviously hash value too.
cheers,
Seb. -
Can I share files between two different networks at same location?
Until TWC can offer DOCSIS 3.0 later this year or next...
- In my home I have a closet where all my audio, video and network come together.
- I have two cable modems from Time Warner
- Modem A goes to a WRT320N; 192.168.0.1
-- This router connects all my "heavy" downloads, ie. DirecTV receivers, Netflix, home server w/videos, gaming, etc.
- Modem B goes to a E2000; 192.168.1.1
-- This router connects my everyday use computers so they don't suffer poor speeds from all the traffic on Modem A
My question is, how or can I somehow share files between these two routers without the need for hitting the modems? Obviously I can just push files over the Internet but I am doing it at a much slower speed due to upload restrictions on the modem.
Thank you for any help on this!The easiest way would be to assign LAN IP 192.168.1.2 to the WRT320N and disable the DHCP server. Then assign static IP addresses in 192.168.1.* to all devices connected to the WRT at the moment, e.g. 192.168.1.10, 255.255.255.0, gateway 192.168.1.2, DNS 192.168.1.2 (or DNS servers of your ISP).
Now you can connect a LAN port of the WRT to a LAN port of the E2000. All DHCP clients get the IP address from the E2000 which will assign the E2000 as gateway, i.e. they use the E2000 for internet. All other devices will have static IP addresses and use the WRT as gateway. -
Cannot get Telnet to work between two servers on same subnet
I need to test if communication is open on port 8444 between two servers.
I installed telnet client on a Server 2008 R2 server and telnet server on a Server 2008 SP2 server. I also manually started the Telnet service that was set to disabled on the SP2 server. I disabled the Windows firewall on both servers. They
are both on the same subnet so they don't need to go through any routers and I can ping successfully.
When I try to telnet to the remote server by typing telnet "ip address" 8444, I get an error that says "Could not open connection to host, on port 8444: Connection failed.
I tried other ports like port 80 and got the same error.
What else is needed to get this to work?VMs have nothing to do with it, as long as there's network communication between the servers.
As I said, there must be a service or application listening on that port for it to respond. For example, try this:
C:\> telnet
When the telnet prompt opens, type in:
open mail.messaging.microsoft.com 25
If it works, you should see this:
220 CH1EHSMHS035.bigfish.com Microsoft ESMTP MAIL Service ready at Thu, 7 Feb 2013 00:57:33 +0000
That means that Microsoft's mail servers are LISTENING on port 25 and it responded. And note, telnetting to port 25 is a non-default telnet port, because port 23 is the default telnet port. When you type in a space and then a port number, you're telling
the telnet client to use that port.
That is the SAME THING if some sort of application or service is listening on port 8444 on that other server you're trying to telnet to. If there is no app or service listening, it will just time out.
And no, installing the TELNET service on that sercver will NOT answer to any port other than 23. The telnet service by default, uses TCP 23, unless you specify otherwise.
So once again, what service or app on that server is supposed to be listening on 8444?
Ace Fekay
MVP, MCT, MCITP/EA, MCTS Windows 2008/R2 & Exchange 2007, Exchange 2010 EA, MCSE & MCSA 2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
Microsoft MVP - Directory Services
Technical Blogs & Videos: http://www.delawarecountycomputerconsulting.com/
This post is provided AS-IS with no warranties or guarantees and confers no rights. -
Connecting two routers to create a home network and have access to the net "wired"
How do i set up a network between two linksys routers that can access the internet and computers set up on both routers. I noticed I cannot browse our home network computers that are behind the other router. currently i have a net connection going to router 1 and a cable from that router going to the wan port on router two. I cannont access router 1 computers from router 2. thank you for your help!
See here.
-
Trying to understand problems that occur when redistributing between two OSPF processes
Hi all, I'm currently brushing up on my OSPF and trying to understand the problems that can occur when redistributing between two OSPF processes. I have read and understand (I think!) the issues caused by the fact that the same route submitted by two different OSPF processes may not necessarily follow the OSPF rules that one would expect - for example, OSPF preferring intra-area routes to inter-area routes to external routes, but only within the same process. So, if the same route is submitted from two different processes, that rule goes out the window.
But I'm having some difficulty getting my head around the idea of setting the administrative distance lower in one OSPF process to prefer one domain over the other. I just can't quite follow the example described in this document:
http://www.cisco.com/c/en/us/support/docs/ip/open-shortest-path-first-ospf/4170-ospfprocesses.html#twored
Specifically, in figure 4 where two external networks - external network "N" originating in OSPF domain 1, and external network "M" originating in OSPF domain 2 - are redistributed via two ASBRs. The explanation states:
This sequence of events could occur occur:
Router A (Router B) redistributes M into Domain 1, and external M will reach Router B (Router A).
Because the administrative distance of Domain 1 is lower than Domain 2, Router A (Router B) will install M through Domain 1 and will set to maxage its previous originated LSA (event 1) into Domain 1.
Because M has been set to maxage in Domain 2, Router A (Router B) will install M though Domain 2 and, therefore, will redistribute M into Domain 2.
Same as event 1.
I can't quite work my way through this. I guess it must have something to do with the redistribution of "M" from domain 2 into domain 1 being learned by both ASBRs due to the lower administrative distance assigned to external routes in domain 1, and the original routes through domain 2 being deleted, but then I can't follow the rest of the description. And I can't understand why this would be a problem for network "M" in OSPF domain 2, but NOT for network "N" in OSPF domain 1.
Any explanation gratefully received!
Thanks, GrahamHello.
You are right - whenever A and B learns about "M" from Domain 2, they craft LSA for domain 1 and inject it simultaneously. They learn each other's LSAs simultaneously and withdraw (set timer to 3600) for previous LSAs. And it might flap infinitely.
If they don't learn LSA simultaneously (let's say that A is much faster then B), then there will be no flaps, but B would learn all Domain 2 routes (not just redistributed) via Domain 1.
And later you will observe routing loop (when you stop advertising M from D): A knows "M" from Domain 2 and injects into Domain 1, B knows from A via Domain 1 and injects into Domain 2... so "M" stays in the routing tables due to mutual redistribution.
You don't have similar (flap) issue with network "N", because admin distance is lower for Domain 1, so both routers would never prefer OSPF via Domain 2! But having no issue with route flaps, you still will observe routing loop if you stop advertising "N" from C. -
ACE 4710 transparent LB with two Caches and two routers.
Hello,
I have ACE 4710 that load balance two cach flows (bluecoat), i am doing pbr on the routers to send the traffic destined to port 80 to ACE then Cach farm. After that the Cach flow will get the page from the internet via two routers. The return traffic will match another pbr on the routers with source port 80 that will send it to the ACE then CachFlow again .....then to the users.
I am not using ip-spoofing on the CachFlow for now. In the figure attached i created a VIP 0.0.0.0 0.0.0.0 port 80 on the interface on the ACE facing the routers, but the question is do i have to create another VIP 0.0.0.0 0.0.0.0 port 80 on the interface on ACE facing the Cach Flow? or just forward the traffic on the default route? What might be the default route since i have to use two routers and i cannot use hsrp?
Kindly I need some assistance
Thank you and regards,
George
access-list PERMIT_ALL line 8 extended permit ip any any
access-list CFLOW line 8 extended permit ip any any
ip name-server 8.8.8.8
ip name-server 4.2.2.2
##################################Config for Cache Cache Servers###################
probe http CISCO_WWW_PROBE
ip address 72.163.4.161
interval 2
faildetect 2
passdetect interval 2
passdetect count 5
request method head url /index.html
expect status 200 200
exit
probe http YAHOO_WWW_PROBE
ip address 87.248.112.181
interval 2
faildetect 2
passdetect interval 2
passdetect count 5
request method head url /index.html
expect status 200 200
exit
serverfarm host TRANSPARENT_PROXY_SF
description Transparent Proxy Farm
transparent
predictor hash url
probe CISCO_WWW_PROBE
probe YAHOO_WWW_PROBE
rserver CFLOW01
inservice
rserver CFLOW02
inservice
exit
exit
############################################# Router Cache Farm ############################
probe icmp ICMP_PROBE
description *** Probe for icmp health monitoring ***
interval 5
faildetect 2
passdetect interval 60
passdetect count 2
exit
rserver host Router01
description Connection to Sodetel Router
ip address 192.168.14.4
probe ICMP_PROBE
inservice
rserver host Router02
description Connection to IDM Router
ip address 192.168.14.5
probe ICMP_PROBE
inservice
serverfarm host Routers
description Transparent Proxy Farm
transparent
predictor hash url
probe ICMP_PROBE
rserver Router01
inservice
rserver Router02
inservice
exit
exit
################################# Management################################
class-map type management match-any REMOTE_MGMT
description Allow Remote management for below protocols
8 match protocol icmp any
9 match protocol ssh source-address 172.31.13.31 255.255.255.255
10 match protocol ssh source-address 172.31.31.21 255.255.255.255
policy-map type management first-match REMOTE_MGMT_ALLOW_POLICY
class REMOTE_MGMT
permit
class-map match-all CFLO2Internet
2 match virtual-address 0.0.0.0 0.0.0.0 any
class-map match-all TRANSPARENT_VIP_CM
2 match virtual-address 0.0.0.0 0.0.0.0 tcp eq www
policy-map type loadbalance first-match TRANSPARENT_LB_PM
class class-default
serverfarm TRANSPARENT_PROXY_SF backup Routers
policy-map type loadbalance first-match CFLO2Internet_LB
class class-default
serverfarm Routers
policy-map multi-match CFLO2Internet_PM
class CFLO2Internet
loadbalance vip inservice
loadbalance policy CFLO2Internet_LB
loadbalance vip icmp-reply active
connection advanced-options TCP
policy-map multi-match L3L4_PM
class TRANSPARENT_VIP_CM
loadbalance vip inservice
loadbalance policy TRANSPARENT_LB_PM
loadbalance vip icmp-reply active
connection advanced-options TCP
====Interfaces======
interface vlan 11
description Interface between Routers and ACE
ip address 192.168.14.2 255.255.255.224
alias 192.168.14.1 255.255.255.224
peer ip address 192.168.14.3 255.255.255.224
no icmp-guard
access-group input PERMIT_ALL
service-policy input REMOTE_MGMT_ALLOW_POLICY
service-policy input L3L4_PM
no shutdown
interface vlan 21
description Connection to CFlow ServerFarm
ip address 192.168.12.2 255.255.255.224
alias 192.168.12.1 255.255.255.224
peer ip address 192.168.12.3 255.255.255.224
no icmp-guard
access-group input CFLOW
service-policy input CFLO2Internet_PM ------>>>> Is this necessary???
no shutdownHi George,
In the topology you described, only the service-policy in the interface towards the routers is necessary. For the traffic from the caches, the ACE will just forward to the default gateway.
The only problem is, as you mentioned, that you cannot use HSRP. In that case, you can still configure two default gateways, but there is no way to predict which one the ACE will use at a given time (the way it does to select the one it will use is sending an ARP request to both gateways and using the one that replies first until the ARP entry expires)
If you need to load-balance the traffic between both routers, then yes, you would need to configure a new VIP on the cache side and load-balanced to a transparent serverfarm composed of both routers.
Regards
Daniel
Maybe you are looking for
-
How to get peoplepicker multiple value in text box?
Hi All, How to get multiple selection people-picker value into text box while using InfoPath? Thanks in advance!
-
Building jars using ant and eclipse
Note: If this post could be in a more appropriate forum category could someone please tell me which one is better. Vexing issue: I am using ANT so that it will take care of which classes have been modified and therefore which jars need to be updated.
-
Email using Adobe Organizer 11
How can I get Abobe Organizer 11 to show Vista Windows Mail as an option for sending photos by email?
-
[SOLVED]Gnome+udisks/devicekit+CD/DVD Drive Problem
Hello everyone, long time lurker, first time poster here! I've been having a problem with my CD/DVD drives for some time now. When I issue the eject command via shell or if I press the eject button the trey will only open for an instant and then clos
-
Currency Drop- down Box is missing
Hi everyone, In obiee 11g Go to-My Account-Preference tab ,There currency Drp -Down Box is missing.How to make it visible in obiee 11.1.1.5.Please suugest to sort out this problem. Thanks in advance Regards, Ashish