Network Lab's: November 2011

GLBP Issue

• The GLBP will not work in this scenario, if the firewall having route traffic toward switch
• Firewall having Mac address issue in this scenario.
• Use HSRP for pass traffic to gateway and routers.
• If you use HSRP in switch again one more issue occur. The both MPLS Link will not work parallel or active & active. You have to create dynamic routing between switch and Router. The other second option is to use Two default static route toward routers.

This scenario is tested on Cisco ASA and its not work.

The Same scenario was working on Netscreen Firewalls. Different algorithms.

BGP Remote Site Router Config

***** Configuration Base On Diagram -5 & 6 *****
Diagram Link
http://cisconetlabs.blogspot.in/2011/11/network-diagram-topology-5.html
and
http://cisconetlabs.blogspot.in/2011/11/network-diagram-topology-6.html

-----------Branch Site Configuration-----------

router bgp 65200
no synchronization
bgp log-neighbor-changes
network 3.x.x.x mask 255.255.255.255 // Local Network Advertisednetwork 172.31.1.0 mask 255.255.255.0 // Local Network Advertisednetwork 172.31.2.0 mask 255.255.255.0 // Local Network Advertised
neighbor 200.10.x.x remote-as 10333 //EBGP Neighbor Routerneighbor 200.10.x.x description ISP-2 MPLS PE router
neighbor 200.10.x.x allowas-in
neighbor 172.31.1. 5 remote-as 65200 //IBGP Neighbor Router
neighbor 172.31.1. 5 description Neighbour IBGP Peer
neighbor 172.31.1. 5 next-hop-self
neighbor 172.31.1. 5 allowas-in
no auto-summary

ip route 172.31.1.0 255.255.255.0 172.31.1. 254 name Vlan1 /// Static Route coming from LAN
ip route 172.31.2.0 255.255.255.0 172.31.1. 254 name VLAN2 /// Static Route coming from LAN

BGP Core Router Config

****Configuration Base On Diagram -5 & 6 ****

Diagram Link
http://cisconetlabs.blogspot.in/2011/11/network-diagram-topology-5.html
and
http://cisconetlabs.blogspot.in/2011/11/network-diagram-topology-6.html
-----------------------------Core Router Config Hub site---------------------
router bgp 65200
no synchronization
bgp log-neighbor-changes
network 0.0.0.0 //Default Network route
network 10.x.x.x mask 255.255.255.0 // Local Network Advertised
network 172.x.x.x mask 255.255.255.0 // Local Network Advertised
redistribute static // Local Network Advertised Static Route
neighbor 10.X.X.X remote-as 65200 //IBGP Neighbor Router
neighbor 10.X.X.X description IBGP_Router 2
neighbor 10.X.X.X next-hop-self
neighbor 200.X.X.X remote-as 10333 //EBGP Neighbor Router
neighbor 200.X.X.X description ISP-2 MPLS PE router
neighbor 200.X.X.X default-originate
neighbor 200.X.X.X allowas-in // Optional command depend on scenario
no auto-summary

ip route 0.0.0.0 0.0.0.0 10.x.x.x
ip route 172.X.X.0 255.255.255.0 10.0.0.X

Data Centre Diagram Topology -7

Network Diagram Topology -6

---------------------------Core Router Config Hub site---------------------
router bgp 65200
no synchronization
bgp log-neighbor-changes
network 0.0.0.0 //Default Network route
network 10.x.x.x mask 255.255.255.0 // Local Network Advertised
network 172.x.x.x mask 255.255.255.0 // Local Network Advertised
redistribute static // Local Network Advertised Static Route
neighbor 10.X.X.X remote-as 65200 //IBGP Neighbor Router
neighbor 10.X.X.X description IBGP_Router 2
neighbor 10.X.X.X next-hop-self
neighbor 200.X.X.X remote-as 10333 //EBGP Neighbor Router
neighbor 200.X.X.X description ISP-2 MPLS PE router
neighbor 200.X.X.X default-originate
neighbor 200.X.X.X allowas-in // Optional command depend on scenario
no auto-summary

ip route 0.0.0.0 0.0.0.0 10.x.x.x
ip route 172.X.X.0 255.255.255.0 10.0.0.X

-------------------------------------

-----------Branch Site Configuration-----------

router bgp 65200
no synchronization
bgp log-neighbor-changes
network 3.x.x.x mask 255.255.255.255 // Local Network Advertisednetwork 172.31.1.0 mask 255.255.255.0 // Local Network Advertisednetwork 172.31.2.0 mask 255.255.255.0 // Local Network Advertised
neighbor 200.10.x.x remote-as 10333 //EBGP Neighbor Routerneighbor 200.10.x.x description ISP-2 MPLS PE router
neighbor 200.10.x.x allowas-in
neighbor 172.31.1. 5 remote-as 65200 //IBGP Neighbor Router
neighbor 172.31.1. 5 description Neighbour IBGP Peer
neighbor 172.31.1. 5 next-hop-self
neighbor 172.31.1. 5 allowas-in
no auto-summary

ip route 172.31.1.0 255.255.255.0 172.31.1. 254 name Vlan1 /// Static Route coming from LAN
ip route 172.31.2.0 255.255.255.0 172.31.1. 254 name VLAN2 /// Static Route coming from LAN