Comments on: Troubleshooting Lab #3

By: Colby

Colby — Thu, 18 Mar 2010 14:04:17 +0000

Haha, sorry. I’ve been slammed at work and haven’t really had the energy to put anything together. I’ll try to get a lab or OEQ up today.

By: willroute4food

willroute4food — Thu, 18 Mar 2010 14:02:29 +0000

Ah, you’ve stopped posting labs! What am I supposed to do at work on a slow day now?!? lol

By: Colby

Colby — Fri, 12 Mar 2010 18:59:57 +0000

You guys are too good. I’ll need to make these a lot harder, lol.

@Smail: I don’t know what is causing that issue.

By: Smail

Smail — Fri, 12 Mar 2010 12:21:22 +0000

Hi again.

I loged in your lab.

The problem is on the R2 router.

An incoming update filter (access-list 15) is denying the two routes (192.168.30.0 and .40.0).

R2>sh ip protocols
Routing Protocol is “ospf 10″
Incoming update filter list for all interfaces is 15

Standard IP access list 15
10 permit 1.1.1.1 (2 matches)
20 deny 192.168.14.0, wildcard bits 0.0.0.255 (2 matches)
30 permit 192.168.31.0, wildcard bits 0.0.0.255
40 permit 192.168.15.0, wildcard bits 0.0.0.255 (2 matches)
50 permit 192.168.11.0, wildcard bits 0.0.0.255 (2 matches)
60 permit 192.168.33.0, wildcard bits 0.0.0.255
70 deny 192.168.10.0, wildcard bits 0.0.0.255 (2 matches)
80 permit 192.168.12.0, wildcard bits 0.0.0.255 (2 matches)
90 permit 192.168.13.0, wildcard bits 0.0.0.255 (2 matches)
100 permit 192.168.32.0, wildcard bits 0.0.0.255
110 deny 192.168.40.0, wildcard bits 0.0.0.255
120 deny 192.168.8.0, wildcard bits 0.0.0.255

By: Smail

Smail — Fri, 12 Mar 2010 12:00:51 +0000

Hi,

the .net file is not working for me. I changed the paths, IOS file is extracting etc

This is the error:

http://img31.imageshack.us/img31/2692/80270729.png

By: JamesK

JamesK — Fri, 12 Mar 2010 06:31:38 +0000

R3 is filtering the VLAN 40 network from being redistributed to EIGRP
[access-list 10 deny 192.168.30.0 0.0.0.255]

R2 is filtering the VLAN 40 network from being redistributed to OSPF
[access-list 10 deny 192.168.40.0 0.0.0.255]

R2 is filtering the VLAN 30 network from being inserted into RIB from R1
list 15 – implicit deny, end of acl

By: willroute4food

willroute4food — Thu, 11 Mar 2010 22:19:45 +0000

OK, I did this pretty quick…I used these commands (swear that I did not look at running configs):
sh ip protocols
sh ip access-l
sh ip route
sh route-map

I *think* these are the problems
R2′s distribute list 15 *in* the ospf process is stopping the 192.168.30.x route with the implicit deny

R3′s route-map is killing the 192.168.40.x route…

thats my shot

By: Andy

Andy — Thu, 11 Mar 2010 21:33:14 +0000

192.168.30.0/24 is denied by the inbound OSPF distribute list on R2. 192.168.40.0/24 is denied by the redistribution route-map from RIP to EIGRP on R3.

Solution:
add “access-list 15 permit 192.168.30.0 0.0.0.255″ on R2

and “access-list 10 permit 192.168.40.0 0.0.0.255″ on R3

By: Jared

Jared — Thu, 11 Mar 2010 16:00:53 +0000

Upon rereading my answer, and talking to Colby, I realized that the bit in my first post about the 10.1.1.6 network is really irrelevant as it’s a path TO the 192.168.40.0 network, so even if it was filtered it wouldn’t matter much as long as R1 and R2 knew to send traffic destined for 192.168.40.0 network to R3.

R3 is directly connected to the 10.1.1.6 network and knows the .40.0 network is beyond R4, so it would forward the traffic across the link, and voila! You’ve reached VLAN 40!

By: Jared

Jared — Thu, 11 Mar 2010 15:31:38 +0000

I’ll take a stab at this one (redistribution is still something I’m working on)…

The first thing that catches my eye is that on R3 there is a route-map applied to the EIGRP process, which uses ACL 10 to match IPs. However the 10.1.1.6/31 network is not permitted in that ACL, which means (I think) it will get caught by the implicit deny at the end of the ACL, which is why we don’t see that network on the upstream routers.

This situation also applies to the 192.168.40.0/24 network as well, it is being filtered under the EIGRP process and not being passed upstream to R2.

Hopefully that’s somewhat on the right path!