6
votes
Accepted
Why would Type-5 AS External OSPF Route not install in routing table?
capability vrf-lite is missing under router ospf
This article has a good explanation. Essentially, the command tells OSPF to ignore the DN bit and use the LSA in the SPF calculations.
https://...
- 76
4
votes
ASR920 and output drops - surprisingly, IPTV seem to work okay
As pointed out in the comments while the drop count looks high, when compared to the total traffic it is actually quite low. The output drop rate is 2.4e-5 or 0.0024% so if the drops occur at regular ...
- 27.4k
4
votes
Accepted
how to factory reset ASR 1001-X
There is no actual factory reset like there is on a consumer-grade router. You must perform a password recovery, then you can erase the startup configuration and reload.
See the detailed instruction ...
- 101k
4
votes
Accepted
Many ways of configuring MPLS pseudowires, and choosing only one
vlan 50 method of configuration consolidates all related statements onto the PE-CE logical interface. This is the easiest to understand if you are configuring manually or doing any kind of ...
- 5,605
4
votes
Finding the right BFD timers between Juniper QFX5110 and Cisco ASR1000
I strongly recommend you look at upgrading your IOS to something a lot more recent as IOS XE 3.16 is no longer in support for Security Vulnerabilities as of August 2016. For your reference, I have an ...
- 1,317
3
votes
Accepted
Trigger a syslog message on ASR9k
The above requirement worked for me using the below command on ASR9k
logmsg [your message]
- 905
3
votes
Accepted
SSH V2 on ASR-9K
You configured the SSH server to be active in the default vrf:
ssh server vrf default
So changing the vrf should help:
ssh server vrf mgmt
If that doesn't help, please consider adding more ...
- 17.4k
3
votes
Accepted
ASR-9K (vrf route and mgmt)
You have a typo in your route:
0.0.0.0/8 10.7.0.1
should be
0.0.0.0/0 10.7.0.1
- 9,565
3
votes
Why would Type-5 AS External OSPF Route not install in routing table?
The issue is right here in your database output:
Options: (No TOS-capability, DC, Downward)
At the point of redistribution the Down bit is being set as a loop prevention mechanism. By itself this ...
- 6,152
2
votes
Multiple IPSEC tunnels between 2 Cisco Routers
You could build this quite simply using VTIs (GRE tunnels with IPSec protection). As the two tunnels have the same source, destination IP pairs, you will need to make sure you use a unique (per tunnel)...
2
votes
Method to rename the existing BGP peer group
Create the new neighbor peer group with all desired configuration.
Remove the existing neighbor from the old peer group.
Add the neighbor to the new peer group.
Remove the old peer group once ...
- 2,594
2
votes
Accepted
Match cos is not supported for this interface in the output direction
i find a success method to policy a traffic of Specify ip's or else on CISCO ASR 903 IOS XE 3.18S
for example i have ip's
74.0.0.0/8 for some serivce (Like google)
1-subnet a full range from 1.0.0....
- 331
2
votes
Provide L3 gateways in a multi-tenant VXLAN environment with ASR9K and N9K
I'm trying to decode what you're doing, but I think I'm reading something like the following-
You're using VXLAN-EVPN on the N9K's and the ASR9K's. The Nexus boxes are acting as standard VTEP's ...
- 6,152
2
votes
Cisco ASR1006 QoS on pppoe session: Police percent not supported - no bandwidth for percent calculation
What works for us (ASR 1001X) is the following concept (paraphrased config, syntax might be slightly different).
The idea is to have a shaper in the parent class, so the child classes have a reference ...
- 8,896
2
votes
how to limit or block broadcast traffic on ASR920 service instance EVC
Storm Control is done on the interface on the 920, not the service instance. Take the following command for example:
storm-control broadcast level 5 5
storm-control action trap
This would filter ...
- 21
1
vote
Logging discriminator to omit specific log message in Cisco
I updated my config again in the original post with the working config. I must have done something wrong yesterday, but it is working today. I have two logging hosts. One is a dedicated syslog server ...
- 157
1
vote
Accepted
OSPFv3 Authentication IPSEC SPI/Logging issues - Can you filter out logs?
I posted about this on Cisco Community as well. A Cisco technician was able to replicate my issue and has recommended that it should be filed as a bug.
- 157
1
vote
Accepted
implementing broadcast traffic restriction
You can't simply drop broadcast traffic. You need to locate the source(s) first, then you can filter appropriately - ideally close to the source. Better yet, identify the problem causing the ...
- 88.1k
1
vote
Trigger a syslog message on ASR9k
The send command is used to send messages between users logged into the same router.
send
- To send messages to one or all terminal lines, use the send EXEC command.
send {line-number | * | ...
- 101k
1
vote
ASR-901 shows static route but not MAC address table and ping does not respond
You have a problem with this command:
ip route 192.198.3.64 255.255.255.252 GigabitEthernet0/3
That interface has no IP configuration:
interface GigabitEthernet0/3
mtu 1500
no ip address
...
- 101k
1
vote
how to Prevent hosts to traceroute their G.W ?
Yeah, to hide Cisco router itself from traceroute output, create extended ACL that denies time-exceeded ICMP requests.
(config)# ip access-list extended 111
(config-ext-nacl)# deny icmp any host <...
- 21
1
vote
Accepted
how to Prevent hosts to traceroute their G.W ?
you can create an ACL in order to deny icmp time-exceeded (deny icmp any any time-exceeded), and apply it on the interfaces.
EDIT : to understand why you should block time-exceeded you can enjoy ...
- 36
1
vote
Accepted
ASR1002 - bootflash
You can set the config register, then reset to boot up with the image on the device, ignoring the startup-config:
rommon 1 > confreg 0x2142
rommon 2 > reset
Once you have it booted up, you ...
- 101k
Only top scored, non community-wiki answers of a minimum length are eligible