Two interfaces of router and EIGRP
Hello - I am curious to know if it's OK/best practices to configure two interfaces on the same router (two circuits PSI) in the same EIGRP?
EIGRP will manage the routes for both interfaces very well? Reading online, I came across this FAQ:
http://www.Cisco.com/c/en/us/support/docs/IP/Enhanced-Interior-Gateway-r...
When he speaks of not having the same interface in two different EIGRP AS, however I try the opposite. Logically, I think it works, however I wanted to discuss this configuration.
TIA
You are right that what you're trying to do is pretty much the opposite of what was talking about this link. In general, this is no problem at all to have two (or more) interfaces of routers in the same case. In fact, it is the most common practice for a router to have a single ACE and activate several interfaces in that ACE.
However, there is a potential problem in what you describe that you should consider. From the point of view of EIGRP, is no problem. But the fact that these are interfaces ISP raises several questions that you should consider:
-the first ISP work EIGRP with you? The second ISP work EIGRP with you?
-If two ISPS run EIGRP with you in the same that so will take you roads you take isps1 and announce it to ISP2?
HTH
Rick
Tags: Cisco Network
Similar Questions
-
Hello
Good evening everyone.
I had a problem in Routing and remote access on windows 2003 server. This server is already configured as a file server, domain server, and application server. Also configured as a router (thanks to access routing & remote) to connect the three different networks with each other. If this server has three NICs installed and each separate NIC network cards represent.
three different networks are - 192.42.160.0/24, 192.42.161.0/24, 192.42.162.0/24
Three cards of the NETWORK adapter installed on the server as with the IP - next
NIC - 1 = 192.42.160.220, Sub - 255.255.255.0, gateway - No.
NIC - 2 = 192.42.161.220, Sub - 255.255.255.0, gateway - 192.161.220.112 (this ip address for internet access then 4 g router IP)
-3 = 192.42.162.220, NETWORK cards, Sub - 255.255.255.0, gateway - No.
Now the question is I can get Internet & (also scathing in router ip 192.42.161.112) one network i.e. - 192.42.161.0/24, BUT when I try to access the internet from another two network (192.42.160.0/24 & 192.42.162.0/24) I can not access and in addition can not ping to internet router ip - 192.42.161.112...
So, how do I access the internet to another two network also?
I was already the configuration of static routing for all three network but I wasn't always successful. I don't really know what exactly static routing this should be done in access routing & remote area so that all three network can reach to the internet?
Here is the result of the current track...
D:\Documents and Settings\Administrateur > route print
IPv4 routing table
===========================================================================
List of the interface
0x1 ........................... MS TCP Loopback interface
0x2... 00 30 05 8f ad 5 c... Broadcom NetXtreme Gigabit Ethernet - Mi Teefer2
niport
0 x 3... 0E 00 c4 f8 a7 0c... Network Intel(r) PRO/1000 GT Desktop Adapter - Teefer2 M
iniport
0 x 4... 0E 00 0c a7 c5 85... Intel (r) PRO/1000 GT Desktop Adapter #2 - Teefer
2 miniport
===========================================================================
===========================================================================
Active routes:
Network Destination gateway metric Interface subnet mask
0.0.0.0 0.0.0.0 192.42.161.112 192.42.161.220 1
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
192.42.160.0 255.255.255.0 192.42.160.220 192.42.160.220 20
192.42.160.220 255.255.255.255 127.0.0.1 127.0.0.1 20
192.42.160.255 255.255.255.255 192.42.160.220 192.42.160.220 20
192.42.161.0 255.255.255.0 192.42.161.220 192.42.161.220 20
192.42.161.220 255.255.255.255 127.0.0.1 127.0.0.1 20
192.42.161.255 255.255.255.255 192.42.161.220 192.42.161.220 20
192.42.162.0 255.255.255.0 192.42.162.220 192.42.162.220 20
192.42.162.220 255.255.255.255 127.0.0.1 127.0.0.1 20
192.42.162.255 255.255.255.255 192.42.162.220 192.42.162.220 20
224.0.0.0 240.0.0.0 192.42.160.220 192.42.160.220 20
224.0.0.0 240.0.0.0 192.42.161.220 192.42.161.220 20
224.0.0.0 240.0.0.0 192.42.162.220 192.42.162.220 20
255.255.255.255 255.255.255.255 192.42.160.220 192.42.160.220 1
255.255.255.255 255.255.255.255 192.42.161.220 192.42.161.220 1
255.255.255.255 255.255.255.255 192.42.162.220 192.42.162.220 1
Default gateway: 192.42.161.112
===========================================================================
Persistent routes:
NoneSorry if I'm not able to explain properly. Please let me know if you have to explain more about it...
Thank you all.
Mahesh
Hello Manu,
Please post this question in the forums TechNet for Windows Server 2003. They will be able to guide you further.
http://social.technet.Microsoft.com/forums/WindowsServer/en-us/home
-
Redistribution of Routes between OSPF and EIGRP
We have a network of test with the topology below. We have two networks connected to a L3 switch. Both networks have an ASA firewall with a tunnel from site to site between them. They also have a connection in conjunction with each other. We want to implement a scenerio where the concert connection is the main route but if that route fails, then it switches to the routethat is above the tunnel from site to site. We have eigrp running on two basic switches so that the roads on the concert connection function properly. However Networking cannot be learned on the second road that goes over the vpn tunnel. We have running ospf on the asa and we are redistrubuting routes in eigrp. Which apparently correct? Look like the SAA they learn on ospf routes correctly however when we go to basic switches and show ip eigrp topology we do not see the routes possible successor. Any ideas on how to make this work?
Hello
The initial Setup looks that you have summarized automatic enabled on core switches, also to the asa eigrp process your redistribution measures doesn't look right about the delay/load/reliability-whats the reasoning behind this? Could you try the following:
Switch main 1 & 2
Router eigrp 100
No Auto-resume
ASA 1 & 2
Router eigrp 100
Redistribute ospf 1 100000 1 255 1 1500 metric
Could you also post the out-of - show ip eigrp topology all-links
RES
Paul
Please do not forget to note all messages that have been useful.
Thank you.
-
EIGRP running between the router and ASA by switch
Hello
Is that possible I can running an EIGRP between router and ASA by switch?
Router and ASA connected to the switch with static route.
Hi Tommy Chin.
It is possible, we must advertise to the route between the router and ASA.
Please provide your connectivity diagram to better explain.
For example...
interface GigabitEthernet0/0
Description links to WAN router
nameif OUTSIDE
security-level 50
IP 10.1.1.1 255.255.255.192 ensures 10.1.1.2
Summary-address eigrp 100 10.1.0.0 255.255.0.0 1
!
Confiuration Protocol EIGRP
standard access list eigrpACL_FR allow a
!
Router eigrp 100
eigrpACL_FR distribute-list in the interface outside
neighbor 10.1.1.3 OUTSIDE interface
neighbor 10.1.1.2 OUTSIDE interface
Network 10.1.1.0 255.255.255.192
redistribute connected
redistribute static
!
Kind regards
Srinivas.
Note: if it solves your problem it mark it as resolved.
-
My scenario is My PIX to 5 five interface. Interface E0 connect "Main router" Interface E1 connect "Partner router" Interface E3 connect 'Server Zone' Interface E4 connect 'Client area '.
My problem is 'Partner of router' care network 172.16.1.0/24 and they have used 10.0.1.0/24 service behind "Main router" and I configure default route of 'Router Partner' for PIX as same as "main router.
I have config road for PIX
"" main route 10.0.1.0 255.255.255.0 main router ""
"partner of route 172.16.1.0 255.255.255.0 router partner."
I can do? PIX can route?
What you have listed above should be fine. The PIX you can route packets. However, the usual rules still apply to allow packets pass between 2 interfaces on the PIX. You should always create the xlates and access control so that the packets to pass. I hope this helps.
Scott
-
map does not show the routes and directions
This feature is not yet supported in India.
http://www.Apple.com/in/iOS/feature-availability/#maps-directions
In addition, your phone may be overheating for a number of reasons. The most common of which is low service area.
Your attributes from battery to the majority of the production of heat, then adjust settings to put less load on the farm in general will help some.
-
Two interfaces WAN ISP in the same network
Hello world
I am faced with a really simple but delicate scenario. My ISP gives me IP addresses public 2, both in the same network. They also gave me the default gateway which is of course in the same network too.
I need two fully operational ip addresses, but I realized that I can't have two interfaces (routed interfaces) in the same network segment. I have just a single router (Cisco 2911). A friend told me that I might be able to set this up using VRF, but as far as I have read, there is no way to use VRF to achieve this.
Is it possible to use two (or more) ip addresses to redirect traffic to the same default gateway in the same router?
Thank you!
Miguel
Hi Miguel,.
If you want just your 2911 have set up two public IP addresses, you can set one of them as secondary IP address. Suppose that 192.0.2.1/29 is your default gateway, and 192.0.2.2/29 and 192.0.2.3/29 are your IP addresses. So to have both configured, you'd:
interface Gigabit0/0/0 ip address 192.0.2.2 255.255.255.248 ip address 192.0.2.3 255.255.255.248 secondary
And voila - that should do the trick :) Best regards, Peter -
ASA 5510 - possible to fill the 2 interfaces in routed mode
Cisco ASA 5510 with security more license, version 9.1 (5) running in routed mode.
I want to fill two interfaces for example: eth0/2 and 3/eth0 and configure an IP address / network while leaving the ASA 5510 in routed mode. I know that this is possible in transparent mode, but I need to keep this in routed mode. I know I could configure a single interface and connect a switch but my client does not want to do.
Otherwise, my only thought would be to configure each interface eth0/2 and eth0/3 as a network traffic and the route of subnet separate between the two.
Any help would be appreciated!
Thank you
Andrew
Andrew
That would help us answer you better if we understood more about what your client and you want to accomplish. But to answer the specific question you asked, I don't think it is possible in an ASA5510 in routed mode configuration Eth2 and Eth3 to share a single IP address.
Linking to Eth2 and linking to Eth3 Are they really the same subnet?
HTH
Rick
-
VPN between 878 router and ASA 5505
Hello world
I struggled for a few days now to get a VPN connection works.
The situation
Two offices needs to be connected to eachother with a VPN. The two parties have a WAN connection.
The tunnel between locations rises very well but the communication fails in almost any way.
The host cannot ping each other and also the inside of the router and ASA pings fail.
The only ping works is from inside Site2 to the inside interface of the router side 1 (192.168.1.100 to 192.168.0.250)
NAT works very well on both sites behind the router / asa.
I think I'm doing something wrong with the roads or access lists but after 7 days, many refills, restores, driving from one end of the State to the other to reset stupid moves break and resolder my cable from the console and things completely with default start for 10 times, I'm through, I honestly don't know where to look for more...
Tech Specs:
Site1: has a cable modem that gives a WAN IP with DHCP address
This modem connects to the Cisco 878 (Fastethernet0) router
The router acts as a DHCP server and NAT gateway for the office and offers vpn connectivity to the other office
Site2: has a cable-modem/router (Cisco 3925), which made the NAT, this modem/router gives an IP private class-C (192.168.178.x)
This modem/router connects to a Cisco ASA 5505 (Fastethernet0)
The ASA also server as a DHCP server and NAT gateway for the office and offers vpn connectivity to the other office.
Online, it looks like this:
Office 1--> Cisco878--> WAN Cloud<---cablemodemrouter>---cablemodemrouter><--- asa5505="">---><--- office="">--->
IP address ranges:
Office 1
Network 192.168.0.0
Subnet mask 255.255.255.0
Gateway 192.168.0.250
IP WAN XXXX
Office 2
Network 192.168.1.0
Subnetmak 255.255.255.0
Gateway 192.168.1.1
IP WAN XXXX
On the location of office 2, there is a NAT between ASA and WAN router. between 192.168.178.x 255.255.255.0
The modemrouter is a Cisco 3925, on which IPSEC passthrough is enabled.
Configs:
Site 1:
CISCO 878 router
Site 2
ASA 5505
I hope someone has a chance to look through my config and tell me what I did wrong this week
Even if you can not help me but still read here: Thank YOU!
(As my problem has been resolved, I removed the configs of this post. If for any reason, you want to work for these devices configuration, please send me a PM)
Post edited by: taaa lijf - reason: problem solved, removed configs and stuff private for obvious reasons ;)
Hello
Ping client customer site 1 site2 and make sh crypto isakmp his and sh crypto ipsec his on the router.
If sh crypto isakmp gives QM_Idle and ping fails and you have no package in the HS cypto ipsec his and then do a debug crypto ipsec
If sh crypto isakmp gives MM_NoState can do a debug crypto isakmp
One note however, you should have ip addresses static at least on the side, initiating the tunnel, otherwise it will not work when ip address changes.
Kind regards.
Alain.
-
Difference between Routed and Transperant mode on firewall
Hello
Can someone explain how Routed and transperant on Cisco ASA in simple words...
The main difference is transparent and works routed layer 3 to layer 2.
When the ASA is in routed mode, the networks connected to the ASA on two interfaces must be on different subnets. While in transparent mode, the subnets can be the same.
Mode routed, as its name suggests, the packets are routed between the interfaces. In transparent mode, interfaces are bridged so the package is transferred instead of routed (although the inspection and control of the ACL still take place).
--
Please do not forget to rate and choose a good answer -
Director of the laboratory - routing and VLAN
Hey,.
So we are currently setting up Lab Manager in our environment, the environment in which we are setting up is a replica of our production environment. In the LABORATORY, we use 13 VIRTUAL networks.
I use Vyatta to route between the VLANS right now, but we are running into a problem now, 13 VLAN... 3 more that it has configurable s NIC on a virtual machine.
Aside from trying to convince everyone that we don't need of 13 VIRTUAL networks in a lab environment, are there other possible solutions or have you guys seen or been around something like this configuration before?
(I've been throwing around the idea of setting up two VM running Vyatta and creation of a separate network who share the two interfaces on one VLAN from the 14th and then distribute the network load between two virtual machines but it's even more work that manually configure an instance of Vyatta in LM whenever someone wants a new workspace to test.)
What do you think guys?
I would say that you need to trim more work for yourself in the long term. If you want a "real" picture of your lab and prod, you can see either plan b of your presentation above and buy physical passes capable of vlan trunking. Not much, we can hope for until Vmware gets beyond the limit of 10 - nic that seems more promising with all support for 10gbe cards now. Some department stores I've seen can pull off a true mirror of their production environment as they can in their laboratory. With virtualization, it makes it much easier to achieve. I hope one day, we can be their one day ;-).
See you soon,.
Chad King
VCP-410. Server +.
Twitter: http://twitter.com/cwjking
If you find this or any other answer useful please consider awarding points marking the answer correct or useful
-
Unable to connect after you change a new router and created a homegroup
I myself locked up on one of my two computers while changing to a new router and creating a home group. I apply my finger to fingerprint logon and I get a checkmark succeed. After that the screen changes and it asks for a password. I have a password for this unit, Dell XPS M1530, but it failed, I tried the password to the new host group and it failed. The only thing on the screen after that failure is a bit and that is; "XPSM1530 index password". Below, please sse list attempts;
Fingerprints succeeded
Original password of my journal, has no
Password assigned to group living unit by me, has no
Don't have a password for collective housing by the software,
I even tried the password of the router, doesn't have to
Should I call to Microsoft @ $99 per event or Dell $$? It is not unclear to me as to who I should contact. If anyone out there not a remedy which the company should I go to?
Harry
Software Windows 7
Original title: lockout
Thanks, I used the disk and it worked, I don't know why, but he did. I have to find a way to remove the need for a password. The computer never leaves the House and I have insurance to cover. I found what I believe is the removal of password, but I think it's to administer it, me! Kinda got cold feet.
H'
-
I tried for two days now to restore my internet connection.
I tried for two days now to restore my internet connection.
192.168.1.1 is probably access your router's IP address and it could be a Linksys.
If you reset your router, we help can'r you. You will need to access the router and configuring PPPoE username and password.
Call your service provider.
Why in the world would you reset your router if you didn't know how to put in place a new or know what to do then? It's like taking something apart and not knowing how to wind again.
-
two questions of routing VLAN fast
Let's say that I have spend a routing 4 L3 VLAN
VLAN 1 192.168.10.0/24, virtual interface of the switch is 192.168.10.254 inside this vlan
VLAN 2 is 192.168.20.0/24, the virtual interface of the switch is 192.168.20.254 inside this vlan
VLAN 3 is 192.168.30.0/24, the virtual interface of the switch is 192.168.30.254 inside this vlan
VLAN 4 192.168.40.0/24, virtual interface of the switch is 192.168.40.254 inside this vlanThere is that a single router out of this switch at the net, and lets say that it is in VLAN 1 and its address is 192.168.10.1
first question - inside the L3 switch I need to add a default route 0.0.0.0 0.0.0.0 192.168.10.1
to ensure that all traffic not matching only a 192.168.x.x address not know where to go to the net, correct?
Second - when this router, is there a difference if I use the following static route:
192.168.20.0 255.255.255.0 192.168.10.254
Instead of
192.168.20.0 255.255.255.0 192.168.20.254
?
Whatever happens, the package comes to switch L3, but in one case, what happened to it through the interface VLAN 1 VLAN and in the other case, he gets there through the interface VLAN VLAN for which traffic is intended anyway. is what im trying to figure out, this will make a difference at all? especially with regard to broadcast packets?
If it makes no difference, then it is safe to say that the following static route would be optimal?
192.168.0.0 255.255.0.0 192.168.10.254
Re "of all". Fix. The L3 switch will route traffic based on its routing table. By default, he knows all IP subnets, it is directly connected to, i.e. all subnets VLAN. If you must add a route by default manually or not depends on the exact implementation. It would be nice if the L3 switch will use the no default for routing gateway that you use for the switch IP parameters itself (if there is an option in the web interface to set a default gateway). If you cannot define a default gateway on the L3 switch, you might have to manually add a static route. The easiest way would be to check the current routing table and see if there is a default or not gateway.
Re "then." A router can only transfer the packets to the next hop router. The next hop router must be connected to this router. The route "192.168.20.0 255.255.255.0 192.168.10.254" is correct for a router with IP address 192.168.10.1 and 255.255.255.0 as 192.168.10.254 subnet mask is connected to the router. "192.168.20.0 255.255.255.0 192.168.20.254" is not correct. The router cannot learn the path to a subnet specific 192.168.20.0/255.255.255.0 using a gateway on that subnet. It is not correct to use this kind of a route and do not use it even if it might work even (because the router is a simple query ARP to find the MAC address of the 192.168.20.254 and your L3 switch will respond to the ARP request, even if it's on the internet of 192.168.10.254). At the same time that another router between 10 and 20 subnets it would work no more...
Re your conclusion: I recommend to keep four static routes to subnets existing on the L3 switch instead of put in a single subnet more great which includes a lot of addresses that are not connected here. Technically, this works if you only use working IP addresses. But you will see some loops if you send something to 192.168.55.50 or similar. The gateway router it will send to the L3 switch that will return to the catwalk. They should understand it's a loop, but still, I would not recommend this type of installation... Add routes for each of the L3 switch subnet...
-
Router and Modem terms as device NAT Double - Solutions?
Two questions I have about DSL/PPPoE
(1) look in these forums, it is said that if you have a DSL modem, then you need to change your IP 192.168.2.1 could someone tell me why just for my own knowledge?
(2) another question I have is what I use PPPoE if I have a DSL modem? Changing automatic DHCP to PPPoE willl solve my problem with my xbox not finding online games?
(3) what I need to change my router in Bridge mode and is the same thing as mixed? If not how can I change due to bridge mode I've read that my router and modem are could act as a double NAT that could cause problems for the xbox?
Any help would be welcome because I don't have any idea how to solve this
Problem solved! Combination of mode Bridge and address static ip assigned to the xbox. Thank you guys
Maybe you are looking for
-
In Windows XP stops to be a message window saying "unprotected".
Since a few days ago, Windows starts correctly but one small window is displayed (accompanied by a beep). The window has the symbol # in the top bar, a letter 'i' in a dialogue bubble, the words "Unprotected!" and an OK"" button. I closed the window
-
Original title: connect/disconnect sounds in the background I had to replace/upgrade to update my wifi router after purchase/adding a 'Smart' to my network TV and now have a noise to connect/disconnect running in the background, on something, every f
-
Is #7210 while a printer compatible with Vista?
I'm considering the purchase of a new PC with Vista and I would like to continue using my printer #7210 age of 4 years with the new PC? Is this feasible? Thank you, DEERJOHN DEERJOHN
-
Deployment to JAR classpath in MANIFEST lack. MF
Hi allSince I moved to jdeveloper of Netbeans, I have a problem creating the executable JAR, as in java-jar-myapp.jarWhen you deploy a jar in Netbeans, it creates a MANIFEST. MF which includes the followingClass-Path: lib/eclipselink.jar lib/javax.pe
-
MAF: Addition of the Cordova.Dialogue Plugin "CDVNotifications".
Hello Oracle Community:If I understand the MAF sta ck is no longer ships with the Cordova.Dialogues plugin called "CDVNotistories" (see previous Discussion Forum Thread HERE) That is why any programmatic attempt to popup a message using the container