Cisco-juniper issue

Unanswered Question
Apr 14th, 2009
User Badges:

Dear all,


I am facing problem with cisco to juniper connectivity


Please refer diagram attached


I have enabled isis as IGP on all three routers. But from cisco2 I am not able to reach Juniper wan/loopback or vice-versa


Few output


Juniper:


Juniper> show isis route

IS-IS routing table Current version: L1: 565 L2: 697

IPv4/IPv6 Routes

----------------

Prefix L Version Metric Type Interface Via

10.7.104.0/25 2 697 30 int ge-3/1/1.0 Cisco1

10.7.104.128/30 2 697 1010 int ge-3/1/1.0 Cisco1

10.7.104.132/30 2 697 20 int ge-3/1/1.0 Cisco1

10.7.104.136/30 2 697 30 int ge-3/1/1.0 Cisco1

10.7.104.160/30 2 697 20 int ge-3/1/1.0 Cisco1

10.7.104.180/32 2 697 20 int ge-3/1/1.0 Cisco1 cisco 1 loopback

10.7.104.181/32 2 697 30 int ge-3/1/1.0 Cisco1

10.7.104.182/32 2 697 40 int ge-3/1/1.0 Cisco1 Cisco 2 loopback

10.7.104.183/32 2 697 30 int ge-3/1/1.0 Cisco1


Cisco1


Cisco1#sh ip route isis

10.0.0.0/8 is variably subnetted, 12 subnets, 3 masks

i L2 10.7.104.181/32 [115/20] via 10.7.104.162, Ethernet0.155

i L2 10.7.104.183/32 [115/20] via 10.7.104.134, Ethernet0.151

i L2 10.7.104.182/32 [115/30] via 10.7.104.134, Ethernet0.151

i L2 10.7.104.184/32 [115/10] via 10.7.104.190, GigabitEthernet3/0/2

i L2 10.7.104.136/30 [115/20] via 10.7.104.134, Ethernet0.151


Cisco2


Cisco2#

Gateway of last resort is 10.7.104.129 to network 0.0.0.0


10.0.0.0/8 is variably subnetted, 13 subnets, 3 masks

i L2 10.7.104.0/25 [115/40] via 10.7.104.138, GigabitEthernet3/2

i L2 10.7.104.132/30 [115/20] via 10.7.104.138, GigabitEthernet3/2

i L2 10.7.104.160/30 [115/30] via 10.7.104.138, GigabitEthernet3/2

i L2 10.7.104.180/32 [115/30] via 10.7.104.138, GigabitEthernet3/2

i L2 10.7.104.181/32 [115/40] via 10.7.104.138, GigabitEthernet3/2

i L2 10.7.104.183/32 [115/20] via 10.7.104.138, GigabitEthernet3/2

i L2 10.7.104.184/32 [115/30] via 10.7.104.138, GigabitEthernet3/2

i L2 10.7.104.188/30 [115/30] via 10.7.104.138, GigabitEthernet3/2




Cisco2#ping 10.7.104.189


Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.7.104.189, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 4/4/4 ms


Cisco2#ping 10.7.104.190


Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.7.104.190, timeout is 2 seconds:

.....

Success rate is 0 percent (0/5)


Please let me know if any more out put is required


Thanks & Regards


mahesh




Attachment: 
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Giuseppe Larosa Tue, 04/14/2009 - 21:59
User Badges:
  • Super Silver, 17500 points or more
  • Hall of Fame,

    Founding Member

Hello Mahesh,

can you ping 10.7.104.190 from Cisco1 ?


isis routing looks like ok


Verify also the ARP tables and if there is any ACL applied to the juniper.



Hope to help

Giuseppe


mahesh-gohil Tue, 04/14/2009 - 22:10
User Badges:

Yes


from juniper to cisco1 every IP is reachable.


But not beyond that


and no acl is there yet


Regards

Harold Ritter Wed, 04/15/2009 - 06:30
User Badges:
  • Cisco Employee,

Mahesh,


According to your diagram, the subnet between Cisco2 and Cisco1 is 10.7.104.128/30 but Cisco2 uses 10.7.104.138 (subnet 10.7.104.136/30) to reach Cisco1 (10.7.104.180) and Juniper (10.7.104.184).


10.7.104.136/30 is not connected to Cisco1 as Cisco1 sees this subnet as an ISIS route.


Also the return path from Cisco1 to Cisco2 (10.7.104.182) is through 10.7.104.134, which is also different from what shown on the diagram. This subnet 10.7.104.132/30 is no connected to Cisco2 either.


There seems to be an additional box between Cisco1 and Cisco2. Could you please update the diagram.


Regards

mahesh-gohil Wed, 04/15/2009 - 20:19
User Badges:

OK


now i have corrected that path


now it is


cisco1#sh ip route isis

10.0.0.0/8 is variably subnetted, 12 subnets, 3 masks

i L2 10.7.104.181/32 [115/20] via 10.7.104.162, Ethernet0.155

i L2 10.7.104.183/32 [115/20] via 10.7.104.134, Ethernet0.151

i L2 10.7.104.182/32 [115/20] via 10.7.104.130, Ethernet0.152

i L2 10.7.104.184/32 [115/10] via 10.7.104.190, GigabitEthernet3/0/2

i L2 10.7.104.136/30 [115/20] via 10.7.104.134, Ethernet0.151


cisco2#sh ip route isis

Gateway of last resort is not set


10.0.0.0/8 is variably subnetted, 13 subnets, 3 masks

i L2 10.7.104.0/25 [115/30] via 10.7.104.129, GigabitEthernet3/1

i L2 10.7.104.132/30 [115/20] via 10.7.104.129, GigabitEthernet3/1

i L2 10.7.104.160/30 [115/20] via 10.7.104.129, GigabitEthernet3/1

i L2 10.7.104.180/32 [115/20] via 10.7.104.129, GigabitEthernet3/1

i L2 10.7.104.181/32 [115/30] via 10.7.104.129, GigabitEthernet3/1

i L2 10.7.104.183/32 [115/30] via 10.7.104.129, GigabitEthernet3/1

i L2 10.7.104.184/32 [115/20] via 10.7.104.129, GigabitEthernet3/1

i L2 10.7.104.188/30 [115/20] via 10.7.104.129, GigabitEthernet3/1


But yet I am not able to reach juniper from cisco2


cisco2#ping 10.7.104.190


Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.7.104.190, timeout is 2 seconds:

.....

Success rate is 0 percent (0/5)

cisco2#ping 10.7.104.184


Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.7.104.184, timeout is 2 seconds:

.....

Success rate is 0 percent (0/5)



Regards

Harold Ritter Mon, 04/20/2009 - 04:38
User Badges:
  • Cisco Employee,

Mahesh,


Have you tried pinging the Juniper box from Cisco1 instead just to verify that the Juniper will respond.


Regards

Actions

This Discussion