Cisco-juniper issue

mahesh-gohil · ‎04-14-2009

Dear all,

I am facing problem with cisco to juniper connectivity

Please refer diagram attached

I have enabled isis as IGP on all three routers. But from cisco2 I am not able to reach Juniper wan/loopback or vice-versa

Few output

Juniper:

Juniper> show isis route

IS-IS routing table Current version: L1: 565 L2: 697

IPv4/IPv6 Routes

----------------

Prefix L Version Metric Type Interface Via

10.7.104.0/25 2 697 30 int ge-3/1/1.0 Cisco1

10.7.104.128/30 2 697 1010 int ge-3/1/1.0 Cisco1

10.7.104.132/30 2 697 20 int ge-3/1/1.0 Cisco1

10.7.104.136/30 2 697 30 int ge-3/1/1.0 Cisco1

10.7.104.160/30 2 697 20 int ge-3/1/1.0 Cisco1

10.7.104.180/32 2 697 20 int ge-3/1/1.0 Cisco1 cisco 1 loopback

10.7.104.181/32 2 697 30 int ge-3/1/1.0 Cisco1

10.7.104.182/32 2 697 40 int ge-3/1/1.0 Cisco1 Cisco 2 loopback

10.7.104.183/32 2 697 30 int ge-3/1/1.0 Cisco1

Cisco1

Cisco1#sh ip route isis

10.0.0.0/8 is variably subnetted, 12 subnets, 3 masks

i L2 10.7.104.181/32 [115/20] via 10.7.104.162, Ethernet0.155

i L2 10.7.104.183/32 [115/20] via 10.7.104.134, Ethernet0.151

i L2 10.7.104.182/32 [115/30] via 10.7.104.134, Ethernet0.151

i L2 10.7.104.184/32 [115/10] via 10.7.104.190, GigabitEthernet3/0/2

i L2 10.7.104.136/30 [115/20] via 10.7.104.134, Ethernet0.151

Cisco2

Cisco2#

Gateway of last resort is 10.7.104.129 to network 0.0.0.0

10.0.0.0/8 is variably subnetted, 13 subnets, 3 masks

i L2 10.7.104.0/25 [115/40] via 10.7.104.138, GigabitEthernet3/2

i L2 10.7.104.132/30 [115/20] via 10.7.104.138, GigabitEthernet3/2

i L2 10.7.104.160/30 [115/30] via 10.7.104.138, GigabitEthernet3/2

i L2 10.7.104.180/32 [115/30] via 10.7.104.138, GigabitEthernet3/2

i L2 10.7.104.181/32 [115/40] via 10.7.104.138, GigabitEthernet3/2

i L2 10.7.104.183/32 [115/20] via 10.7.104.138, GigabitEthernet3/2

i L2 10.7.104.184/32 [115/30] via 10.7.104.138, GigabitEthernet3/2

i L2 10.7.104.188/30 [115/30] via 10.7.104.138, GigabitEthernet3/2

Cisco2#ping 10.7.104.189

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.7.104.189, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 4/4/4 ms

Cisco2#ping 10.7.104.190

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.7.104.190, timeout is 2 seconds:

.....

Success rate is 0 percent (0/5)

Please let me know if any more out put is required

Thanks & Regards

mahesh

Giuseppe Larosa · ‎04-14-2009

Hello Mahesh,

can you ping 10.7.104.190 from Cisco1 ?

isis routing looks like ok

Verify also the ARP tables and if there is any ACL applied to the juniper.

Hope to help

Giuseppe

mahesh-gohil · ‎04-14-2009

Yes

from juniper to cisco1 every IP is reachable.

But not beyond that

and no acl is there yet

Regards

Harold Ritter · ‎04-15-2009

Mahesh,

According to your diagram, the subnet between Cisco2 and Cisco1 is 10.7.104.128/30 but Cisco2 uses 10.7.104.138 (subnet 10.7.104.136/30) to reach Cisco1 (10.7.104.180) and Juniper (10.7.104.184).

10.7.104.136/30 is not connected to Cisco1 as Cisco1 sees this subnet as an ISIS route.

Also the return path from Cisco1 to Cisco2 (10.7.104.182) is through 10.7.104.134, which is also different from what shown on the diagram. This subnet 10.7.104.132/30 is no connected to Cisco2 either.

There seems to be an additional box between Cisco1 and Cisco2. Could you please update the diagram.

Regards

Harold Ritter
Sr Technical Leader
CCIE 4168 (R&S, SP)
harold@cisco.com
México móvil: +52 1 55 8312 4915
Cisco México
Paseo de la Reforma 222
Piso 19
Cuauhtémoc, Juárez
Ciudad de México, 06600
México

mahesh-gohil · ‎04-15-2009

OK

now i have corrected that path

now it is

cisco1#sh ip route isis

10.0.0.0/8 is variably subnetted, 12 subnets, 3 masks

i L2 10.7.104.181/32 [115/20] via 10.7.104.162, Ethernet0.155

i L2 10.7.104.183/32 [115/20] via 10.7.104.134, Ethernet0.151

i L2 10.7.104.182/32 [115/20] via 10.7.104.130, Ethernet0.152

i L2 10.7.104.184/32 [115/10] via 10.7.104.190, GigabitEthernet3/0/2

i L2 10.7.104.136/30 [115/20] via 10.7.104.134, Ethernet0.151

cisco2#sh ip route isis

Gateway of last resort is not set

10.0.0.0/8 is variably subnetted, 13 subnets, 3 masks

i L2 10.7.104.0/25 [115/30] via 10.7.104.129, GigabitEthernet3/1

i L2 10.7.104.132/30 [115/20] via 10.7.104.129, GigabitEthernet3/1

i L2 10.7.104.160/30 [115/20] via 10.7.104.129, GigabitEthernet3/1

i L2 10.7.104.180/32 [115/20] via 10.7.104.129, GigabitEthernet3/1

i L2 10.7.104.181/32 [115/30] via 10.7.104.129, GigabitEthernet3/1

i L2 10.7.104.183/32 [115/30] via 10.7.104.129, GigabitEthernet3/1

i L2 10.7.104.184/32 [115/20] via 10.7.104.129, GigabitEthernet3/1

i L2 10.7.104.188/30 [115/20] via 10.7.104.129, GigabitEthernet3/1

But yet I am not able to reach juniper from cisco2

cisco2#ping 10.7.104.190

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.7.104.190, timeout is 2 seconds:

.....

Success rate is 0 percent (0/5)

cisco2#ping 10.7.104.184

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.7.104.184, timeout is 2 seconds:

.....

Success rate is 0 percent (0/5)

Regards

Harold Ritter · ‎04-20-2009

Mahesh,

Have you tried pinging the Juniper box from Cisco1 instead just to verify that the Juniper will respond.

Regards

Harold Ritter
Sr Technical Leader
CCIE 4168 (R&S, SP)
harold@cisco.com
México móvil: +52 1 55 8312 4915
Cisco México
Paseo de la Reforma 222
Piso 19
Cuauhtémoc, Juárez
Ciudad de México, 06600
México