04-14-2009 09:16 PM
Dear all,
I am facing problem with cisco to juniper connectivity
Please refer diagram attached
I have enabled isis as IGP on all three routers. But from cisco2 I am not able to reach Juniper wan/loopback or vice-versa
Few output
Juniper:
Juniper> show isis route
IS-IS routing table Current version: L1: 565 L2: 697
IPv4/IPv6 Routes
----------------
Prefix L Version Metric Type Interface Via
10.7.104.0/25 2 697 30 int ge-3/1/1.0 Cisco1
10.7.104.128/30 2 697 1010 int ge-3/1/1.0 Cisco1
10.7.104.132/30 2 697 20 int ge-3/1/1.0 Cisco1
10.7.104.136/30 2 697 30 int ge-3/1/1.0 Cisco1
10.7.104.160/30 2 697 20 int ge-3/1/1.0 Cisco1
10.7.104.180/32 2 697 20 int ge-3/1/1.0 Cisco1 cisco 1 loopback
10.7.104.181/32 2 697 30 int ge-3/1/1.0 Cisco1
10.7.104.182/32 2 697 40 int ge-3/1/1.0 Cisco1 Cisco 2 loopback
10.7.104.183/32 2 697 30 int ge-3/1/1.0 Cisco1
Cisco1
Cisco1#sh ip route isis
10.0.0.0/8 is variably subnetted, 12 subnets, 3 masks
i L2 10.7.104.181/32 [115/20] via 10.7.104.162, Ethernet0.155
i L2 10.7.104.183/32 [115/20] via 10.7.104.134, Ethernet0.151
i L2 10.7.104.182/32 [115/30] via 10.7.104.134, Ethernet0.151
i L2 10.7.104.184/32 [115/10] via 10.7.104.190, GigabitEthernet3/0/2
i L2 10.7.104.136/30 [115/20] via 10.7.104.134, Ethernet0.151
Cisco2
Cisco2#
Gateway of last resort is 10.7.104.129 to network 0.0.0.0
10.0.0.0/8 is variably subnetted, 13 subnets, 3 masks
i L2 10.7.104.0/25 [115/40] via 10.7.104.138, GigabitEthernet3/2
i L2 10.7.104.132/30 [115/20] via 10.7.104.138, GigabitEthernet3/2
i L2 10.7.104.160/30 [115/30] via 10.7.104.138, GigabitEthernet3/2
i L2 10.7.104.180/32 [115/30] via 10.7.104.138, GigabitEthernet3/2
i L2 10.7.104.181/32 [115/40] via 10.7.104.138, GigabitEthernet3/2
i L2 10.7.104.183/32 [115/20] via 10.7.104.138, GigabitEthernet3/2
i L2 10.7.104.184/32 [115/30] via 10.7.104.138, GigabitEthernet3/2
i L2 10.7.104.188/30 [115/30] via 10.7.104.138, GigabitEthernet3/2
Cisco2#ping 10.7.104.189
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.7.104.189, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 4/4/4 ms
Cisco2#ping 10.7.104.190
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.7.104.190, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
Please let me know if any more out put is required
Thanks & Regards
mahesh
04-14-2009 09:59 PM
Hello Mahesh,
can you ping 10.7.104.190 from Cisco1 ?
isis routing looks like ok
Verify also the ARP tables and if there is any ACL applied to the juniper.
Hope to help
Giuseppe
04-14-2009 10:10 PM
Yes
from juniper to cisco1 every IP is reachable.
But not beyond that
and no acl is there yet
Regards
04-15-2009 06:30 AM
Mahesh,
According to your diagram, the subnet between Cisco2 and Cisco1 is 10.7.104.128/30 but Cisco2 uses 10.7.104.138 (subnet 10.7.104.136/30) to reach Cisco1 (10.7.104.180) and Juniper (10.7.104.184).
10.7.104.136/30 is not connected to Cisco1 as Cisco1 sees this subnet as an ISIS route.
Also the return path from Cisco1 to Cisco2 (10.7.104.182) is through 10.7.104.134, which is also different from what shown on the diagram. This subnet 10.7.104.132/30 is no connected to Cisco2 either.
There seems to be an additional box between Cisco1 and Cisco2. Could you please update the diagram.
Regards
04-15-2009 08:19 PM
OK
now i have corrected that path
now it is
cisco1#sh ip route isis
10.0.0.0/8 is variably subnetted, 12 subnets, 3 masks
i L2 10.7.104.181/32 [115/20] via 10.7.104.162, Ethernet0.155
i L2 10.7.104.183/32 [115/20] via 10.7.104.134, Ethernet0.151
i L2 10.7.104.182/32 [115/20] via 10.7.104.130, Ethernet0.152
i L2 10.7.104.184/32 [115/10] via 10.7.104.190, GigabitEthernet3/0/2
i L2 10.7.104.136/30 [115/20] via 10.7.104.134, Ethernet0.151
cisco2#sh ip route isis
Gateway of last resort is not set
10.0.0.0/8 is variably subnetted, 13 subnets, 3 masks
i L2 10.7.104.0/25 [115/30] via 10.7.104.129, GigabitEthernet3/1
i L2 10.7.104.132/30 [115/20] via 10.7.104.129, GigabitEthernet3/1
i L2 10.7.104.160/30 [115/20] via 10.7.104.129, GigabitEthernet3/1
i L2 10.7.104.180/32 [115/20] via 10.7.104.129, GigabitEthernet3/1
i L2 10.7.104.181/32 [115/30] via 10.7.104.129, GigabitEthernet3/1
i L2 10.7.104.183/32 [115/30] via 10.7.104.129, GigabitEthernet3/1
i L2 10.7.104.184/32 [115/20] via 10.7.104.129, GigabitEthernet3/1
i L2 10.7.104.188/30 [115/20] via 10.7.104.129, GigabitEthernet3/1
But yet I am not able to reach juniper from cisco2
cisco2#ping 10.7.104.190
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.7.104.190, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
cisco2#ping 10.7.104.184
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.7.104.184, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
Regards
04-20-2009 04:38 AM
Mahesh,
Have you tried pinging the Juniper box from Cisco1 instead just to verify that the Juniper will respond.
Regards
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: