Thanks Victor but why applying the filter on all routers except DIS solves the problem ? is there any explainsion
best regards --Ibrahim On Tue, Sep 8, 2009 at 3:56 PM, Victor Cappuccio <[email protected]> wrote: > Hi, > > Did you tried the same command but not on the DIS?? On a LAN, one of the > routers elects itself the DIS, based on interface priority (the default is > 64). If all interface priorities are the same, the router with the highest > subnetwork point of attachment (SNPA) is selected > > I did your same configuration, but now I applied the filter to all the > router but the DIS. > > R2 in this case is the DIS! > > R2#show run int f0/0 > Building configuration... > > Current configuration : 132 bytes > ! > interface FastEthernet0/0 > ip address 10.10.123.2 255.255.255.0 > ip router isis > duplex auto > speed auto > isis priority 127 > end > > R2#show clns neigh > > System Id Interface SNPA State Holdtime Type > Protocol > R3 Fa0/0 c003.163c.0000 Up 25 L1 IS-IS > R1 Fa0/0 c001.163c.0000 Up 29 L1 IS-IS > R2#show clns is- > > System Id Interface State Type Priority Circuit Id Format > R3 Fa0/0 Up L1 64 R2.01 Phase V > R1 Fa0/0 Up L1 64 R2.01 Phase V > R2# > > R2#show ip route isis > 10.0.0.0/8 is variably subnetted, 4 subnets, 2 masks > i L1 10.10.3.3/32 [115/10] via 10.10.123.3, FastEthernet0/0 > i L1 10.10.1.1/32 [115/10] via 10.10.123.1, FastEthernet0/0 > > > --- > > R1#show run int f0/0 > Building configuration... > > Current configuration : 140 bytes > ! > interface FastEthernet0/0 > ip address 10.10.123.1 255.255.255.0 > ip router isis > duplex auto > speed auto > isis adjacency-filter R2 > end > > R1#show run | in clns filter > clns filter-set R2 permit 49.0001.0000.0000.0002.00 > R1#show isis neigh > > System Id Type Interface IP Address State Holdtime Circuit Id > R2 L1 Fa0/0 10.10.123.2 UP 9 R2.01 > R1#show ip route isis > 10.0.0.0/8 is variably subnetted, 3 subnets, 2 masks > i L1 10.10.2.2/32 [115/10] via 10.10.123.2, FastEthernet0/0 > R1# > > ---- > > > R3#show run int f0/0 > Building configuration... > > Current configuration : 140 bytes > ! > interface FastEthernet0/0 > ip address 10.10.123.3 255.255.255.0 > ip router isis > duplex auto > speed auto > isis adjacency-filter R2 > end > > R3#show run | in clns filter > clns filter-set R2 permit 49.0001.0000.0000.0002.00 > R3#show clns neigh > > System Id Interface SNPA State Holdtime Type > Protocol > R2 Fa0/0 c002.163c.0000 Up 7 L1 IS-IS > R3# > R3#show clns is-neighbors > > System Id Interface State Type Priority Circuit Id Format > R2 Fa0/0 Up L1 127 R2.01 Phase V > R3#show ip route isis > 10.0.0.0/8 is variably subnetted, 3 subnets, 2 masks > i L1 10.10.2.2/32 [115/10] via 10.10.123.2, FastEthernet0/0 > R3# > > > Thanks, > > Victor Cappuccio.- > [email protected] > CCIE(R/S) #20657 > STAC Support Engineer > Cisco Small Business Support. > > > > -----Original Message----- > From: [email protected] > [mailto:[email protected]] On Behalf Of Dave Kruger > Sent: martes, 08 de septiembre de 2009 15:04 > To: Ibrahim Abo Zaid > Cc: cisco_nsp > Subject: Re: [c-nsp] ISIS Adj-filter problem > > Hi there > > have u managed to figure out what was causing that? > > Did you see that your clns filter references > > 49.0001.0000.0000.0100.00 > > > where as your R1 router's Sys ID is > > 49.0001.0000.0000.0001.00 > > > Regards, > Dave > > Ibrahim Abo Zaid wrote: > > Hi All > > > > I was testing ISIS Adj-filter option , R1,R2 and R3 are connected over > > ethernet switch (using dynamips) with the below configuration > > > > the configuration works for adj point and both R2 and R3 have ADJ with R1 > > only , the problem is R2 is droping R1 and R3 LSPs and debug shows it is > > dropped due to invalid adj . can you help to resolve that ? > > > > Configuration > > > > R1 > > interface Loopback0 > > ip address 10.10.1.1 255.255.255.255 > > ! > > interface FastEthernet0/0 > > ip address 10.10.123.1 255.255.255.0 > > ip router isis > > > > router isis > > net > > > > > is-type level-1 > > passive-interface Loopback0 > > > > R2 > > interface Loopback0 > > ip address 10.10.2.2 255.255.255.255 > > ! > > interface FastEthernet0/0 > > ip address 10.10.123.2 255.255.255.0 > > ip router isis > > isis adjacency-filter A1 > > ! > > router isis > > net 49.0001.0000.0000.0002.00 > > is-type level-1 > > passive-interface Loopback0 > > > > clns filter-set A1 permit 49.0001.0000.0000.0100.00 > > > > R3 > > > > interface Loopback0 > > ip address 10.10.3.3 255.255.255.255 > > ! > > interface FastEthernet0/0 > > ip address 10.10.123.3 255.255.255.0 > > ip router isis > > isis adjacency-filter A1 > > > > > > router isis > > net 49.0001.0000.0000.0003.00 > > is-type level-1 > > passive-interface Loopback0 > > > > clns filter-set A1 permit 49.0001.0000.0000.0100.00 > > > > > > verification > > > > > > R1#sh clns neighbors > > System Id Interface SNPA State Holdtime Type > > Protocol > > R2 Fa0/0 c201.0544.0000 Up 8 L1 > IS-IS > > R3 Fa0/0 c202.0544.0000 Up 7 L1 > IS-IS > > > > R1 has R2 and R3 LSPs > > > > R1#sh isis database > > IS-IS Level-1 Link State Database: > > LSPID LSP Seq Num LSP Checksum LSP Holdtime > ATT/P/OL > > R1.00-00 * 0x00000010 0x2D88 849 0/0/0 > > R2.00-00 0x00000009 0x8037 1036 0/0/0 > > R2.01-00 0x00000003 0x78D8 1036 0/0/0 > > R3.00-00 0x00000005 0x4470 552 0/0/0 > > R3.01-00 0x00000006 0x78D3 1091 0/0/0 > > > > but has R3-Lo0 route ONLY !! > > > > R1#sh ip route isis > > 10.0.0.0/8 is variably subnetted, 3 subnets, 2 masks > > i L1 10.10.3.3/32 [115/10] via 10.10.123.3, FastEthernet0/0 > > > > R2#sh clns neighbors > > System Id Interface SNPA State Holdtime Type > > Protocol > > R1 Fa0/0 c200.0544.0000 Up 21 L1 > IS-IS > > > > R2 don't have R1 and R3 LSPs !!! > > > > > > R2#sh isis database > > IS-IS Level-1 Link State Database: > > LSPID LSP Seq Num LSP Checksum LSP Holdtime > ATT/P/OL > > R2.00-00 * 0x00000009 0x8037 985 0/0/0 > > R2.01-00 * 0x00000003 0x78D8 986 0/0/0 > > > > NO ISIS Route , it normal no LSP :) > > R2#sh ip route isis > > R2# > > > > R3 > > > > R3#sh clns neighbors > > System Id Interface SNPA State Holdtime Type > > Protocol > > R1 Fa0/0 c200.0544.0000 Up 26 L1 > IS-IS > > > > R3#sh isis database > > IS-IS Level-1 Link State Database: > > LSPID LSP Seq Num LSP Checksum LSP Holdtime > ATT/P/OL > > R1.00-00 0x00000013 0x278B 1181 0/0/0 > > R2.00-00 0x00000009 0x8037 845 0/0/0 > > R2.01-00 0x00000003 0x78D8 846 0/0/0 > > R3.00-00 * 0x00000006 0x4271 1186 0/0/0 > > R3.01-00 * 0x00000007 0x76D4 1185 0/0/0 > > > > route to R1-Lo0 only !! > > > > R3#sh ip route isis > > 10.0.0.0/8 is variably subnetted, 3 subnets, 2 masks > > i L1 10.10.1.1/32 [115/10] via 10.10.123.1, FastEthernet0/0 > > > > debug isis update-packets shows update is dropped due to invalid ADJ > > > > > > *Mar 1 00:30:16.751: ISIS-Upd: Invalid adjacency > > *Mar 1 00:30:26.619: ISIS-Upd: Invalid adjacency > > *Mar 1 00:30:34.151: ISIS-Upd: Invalid adjacency > > > > any ideas > > > > best regards > > --Ibrahim > > _______________________________________________ > > cisco-nsp mailing list [email protected] > > https://puck.nether.net/mailman/listinfo/cisco-nsp > > archive at http://puck.nether.net/pipermail/cisco-nsp/ > > > > _______________________________________________ > cisco-nsp mailing list [email protected] > https://puck.nether.net/mailman/listinfo/cisco-nsp > archive at http://puck.nether.net/pipermail/cisco-nsp/ > > _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
