Hot answers tagged

23

The MX platform does not have the general concept of a "VLAN" that is present on the whole platform. The MX only "sees" VLAN tags on incoming packets and can then act on these tags. What you want is to bridge packets from two ports that have the same VLAN-ID in the L2 header and then add a L3 interface to that bridge. On the MX platform you have two ways of ...


8

You need to add a statement to explicitly allow those prefixes after denying the default-route, so the final prefix-list becomes: ip prefix-list no-default-route seq 5 deny 0.0.0.0/0 ip prefix-list no-default-route seq 10 permit 0.0.0.0/0 le 32


7

Could someone please tell me the community string indexing for switches other than Cisco? Edit: This is how to poll Q-BRIDGE-MIB for mac-addresses from the only non-Cisco I have, a DLink DGS-3200. I'm not using [community@vlan] for non-Cisco switches. You're correct that this indexing only applies to Ciscos. I expect any non-Cisco switch, which supports ...


7

This is the logical view of what you're trying to achieve: Configure the router priorities for both VRRP 'a' and VRRP 'b' as follows: Router 1: 110 (master) Router 2: 100 (backup) The configure interface tracking as follows: Router 1 VRRP a: track interface R1b with a track priority of 90 Router 1 VRRP b: track interface R1a with a track priority of 90 ...


6

Many types of fiber connections, including 1000base-LH/LX, use two strands of fiber. However the strands are actually used individually as dedicated TX and RX on each and the traffic on each strand is entirely unidirectional. So when you are connecting two such devices, you need to cross the strands at some point so that TX on one side matches up with RX ...


6

BGP graceful-restart is the mechanism that you are looking for. Graceful-restart maintains forwarding for the routes that have been received from a BGP neighbor while the connection is being restarted. When the neighbor drops, the routes will be marked Stale (S) in the BGP table and will still be available for route selection. There are two timers that are ...


5

You are really looking for the Brocade Track Ports and Track Priority features. With these features configured, when the red connection fails, it will lower the priority of the green connection. This should then allow the blue connection to take over as master in the group. Personally, I would also add a direct link between the two L3 switches as well. ...


5

have you read this? How to setup trunk and access ports in an MX80? - J-Net Community It explains quickly how to set a bridge domain for your L3 interface, and add ports as either access or trunk. irb.200 would be your ve 200


5

The way I did it was with a "fabric recovery" tool. But this requires you to have a second switch with a known password. It erases the configuration (and passwords) from the entire fabric. (yes, a rather dangerous tool) There's also the (nearly undocumented) root and factory accounts. WARNING: root access drops you to an os shell (vxWorks) from which you ...


5

interface ve 10 ip address x.x.x.140 255.255.255.248 ip dhcp-server pool noc network 10.10.10.0 255.255.255.0 It doesn't work because ve 10 (the L3 interface) isn't within the noc dhcp pool (10.10.10.0/24) Your updated ve 20 is, but unless you have something upstream of here doing NAT, there won't be any internet access.


5

One way of doing this kind of thing with pure routing is to have the "service" IP addresses be secondaries on all the servers, and have routes as appropriate. Consider this straightforward network where the clients AC and BC go through a router to get to the servers A1, A2, B1, B2. Everything has default gateway aimed at their network's .1. RA and RB ...


4

If you are unable to stabilize your bgp sessions with longer timeouts or similar, here is a hack I have been forced to use on a few occations: If there are only a limited number of routes, and you have a stable environment without too many regular changes, you could insert static routes with higher preference/cost than the bgp routes. When the bgp sessions ...


4

No, that won't work that way. Your switch will select one of those two as default, most likely the one with the lowest IP address. One way to solve this is of course buy a real router capable of handling two full feeds, but there are other solutions which may work. You could ask both your transit providers to announce the default route as two /1's or four /2'...


4

This was due to the ACLSORT option in the RANCID config.


3

If you have no need to divide the traffic on all (and it does have to be all) the old hardware, then just make sure the switch connection from the old Cisco equipment connects to a VLAN 10 only port on your Brocade. Don't configure for trunking, tagging, or any management protocol on either side of that one link - Cisco will only tag if the port is ...


3

Here is what I had to do to get it to work: I had to disable 802.1w on the trunk ports specifically (2/1 and 2/2) under the default vlan on both brocade switches. So spanning-tree is enabled for the actual vlan 510 and the default vlan 50 is disabled on the two ports that go to the cisco switch. Then everything started to work fine. So now I have this in ...


3

I think it can be done in this way. First select the traffic to mark: sw0(config)# ip access-list extended acl1 sw0(conf-ipacl-ext)# permit ip any any vlan 100 Then link the ACL with a class-map: sw0(config)# class-map class1 sw0(config-classmap)# match access-group acl1 Then assign the CoS value: sw0(config)# policy-map policy1 sw0(config-policymap)#...


3

The documentation says: "NOTE: If a port is configured as a mirror port, all traffic sent from that port will retain the encapsulation of the port being monitored and not add the encapsulation of the Egress port.". So it's a 1:1 packet copy, any tagging is preserved.


3

Disclaimer : I'm not familiar with current version of Vyatta, since I used it when it was still open source, prior to buyover by Brocade, and I now use VyOs (the open source fork), but I guess this didn't change much... So for Vyatta 6.5 and VyOs, the answer is yes, there's a feature called "Wan load balancing" that monitor an external IP address, using ...


3

RSTP is an IEEE STP that works on the port level only and is unaware of VLANs. For VLANs to form different spanning trees you require MSTP and an appropriate configuration using multiple instances (MSTI). Each of these instances forms its own spanning tree and you use those instances to group your VLANs and distribute their over your redundant links. Cisco'...


3

I notice you have configured cluster-id 1. You should configure a unique cluster-id for each router in your topology, because you do not appear to have elected one or more centrally-located RRs. In the following topology, router N will not learn routes from router S if N, E, and W all share the same cluster ID. See RFC 4456 § 8 for the reasoning. N ...


2

I think this is normal behavoir. After the reboot you router has to learn the neigbor-routes. The upper and lower left circle in my picture are around the values representing the known active-used routes of your router. The upper right circle shows that there are stimm routes to learn. This is the Reason for the high Send-value. In the end both routers have ...


2

Is there another existing routing protocol, default route, or static-route that would begin to take precedence once the less explicit route entry is removed? Does placing a static-route that is correct (valid next-hop) allow pings to flow again?


2

Maybe it is just that gateway gives most CPU cycles to traffic forwarding as it should and less to admin part. This way denial of service attacks on IP of the gateway itself would be less visible,


2

You would need to create an ACL to filter the ICMP traffic (edit: referring to ping here - it's generally not advisable to filter all ICMP), and apply it to the desired interfaces, including the management interface. You would specify host addresses that match your router's management interface, as well as any addresses of routed interfaces. ip access-list ...


2

Here is the brocade documentation. Brocade doc The ports will follow 802.3af and at standards on brocade when the inline power command is used . These standards will monitor and adjust power as necessary based on its capability and based on the end device requirements. Quote from reference ... Increased electrical power - POE Plus nearly doubles the ...


2

N-port is a node port, actually it's HBA on a server or a port on a storage array. It is used to connect a node to a Fibre Channel switch. On Brocade switch you would usually have F-port, which is "Fabric port" used to connect with node port. In rare situations you can get L- or FL- port on the switch when you have to deal with mostly deprecated FC-Loop ...


2

You will need to check your switch's manual or compatibility list. Not all switches (and firmware versions) are compatible with AOC cables. Additionally, 10 Gb cables are not guaranteed to work with 16 Gb although they usually do. If your supplier guarantees the cables to work with your switch he probably knows what he's talking about though.


2

Most routers by default don't accept a route from an eBGP peer where the originator is their own AS number. You need to configure the router to accept it's local AS, then the route will be installed in the forwarding table. I don't know the specific command for a brocade router, it is usually something along allowas-in.


2

A true oob port will have hardware and software changes that separate the traffic from the regular ports. However I have seen some oob ports that don't respect this and connect up the traffic as if they were regular ports. If you're expecting the oob port to not share the cpu and therefore be accessible during problems, then you're generally paying extra for ...


Only top voted, non community-wiki answers of a minimum length are eligible