John Fraizer | 1 Aug 2002 02:33

[zebra 14918] Re: ip access list


Note to the original poster: Defining an access list will not, by itself
do ANYTHING.  You have to APPLY that access list to something.  You
haven't told us EXACTLY what you are trying to achieve and haven't given
us enough of your config to tell us anything beyond the fact that you
defined an access list.

If you are trying to apply your access to limit access to the VTY, you
need to add the following:

conf t
line vty
access-class test

---
John Fraizer              | High-Security Datacenter Services |
EnterZone, Inc            | Dedicated circuits 64k - 155M OC3 |
http://www.enterzone.net/ | Virtual, Dedicated, Colocation    |

On Thu, 1 Aug 2002, K R wrote:

> Maybe one line likethis is neede:
> access-class test
> 
> Kejv
>  
> ----- Original Message ----- 
> From: "adrian kok" <adriankok2000 <at> yahoo.com.hk>
> To: <zebra <at> zebra.org>
> Sent: Wednesday, July 31, 2002 9:20 PM
(Continue reading)

adrian kok | 1 Aug 2002 03:57
Picon
Favicon

[zebra 14919] Re: ip access list

Dear Nipper

Thank you for your mail

What is my mistake?
apply for eth0?

how do I apply it?

Thank you

--- "Nipper, Arnold" <arnold <at> nipper.de> wrote: > Where
did you applied the access list to? That's not
> obvious from your
> posting ...
> 
> Arnold
> 
> 
> ----- Original Message -----
> From: "adrian kok" <adriankok2000 <at> yahoo.com.hk>
> To: <zebra <at> zebra.org>
> Sent: Wednesday, July 31, 2002 9:20 PM
> Subject: [zebra 14914] ip access list
> 
> 
> > Dear all
> >
> > I tried the access list as follows
> > but doesn't work. and the route is still accessed
(Continue reading)

Michael Wood | 1 Aug 2002 08:44
Picon
Picon

[zebra 14920] Re: secondary ip address on the same interface

On Mon, Jul 29, 2002 at 08:25:16PM -0400, John Fraizer wrote:
> 
> ip address A.B.C.D/M secondary

Unfortunately, according to the NEWS file, this is "only supported on
GNU/Linux with netlink interface."

> There is a real neat command in the zebra CLI interfaces that folks
> don't seem to be using.
> 
> list
> 
> It will tell you all of the commands available in the current mode.

Ahhh, but if you're not running Zebra on Linux, you're not going to see
the above syntax:

zebra(config-if)# list
  bandwidth <1-10000000>
  description .LINE
  end
  exit
  help
  ip address A.B.C.D/M
  ip tunnel IP_address IP_address
  ipv6 address X:X::X:X/M
[...]

--

-- 
Michael Wood <mwood <at> its.uct.ac.za>
(Continue reading)

TANDEL Sebastien | 1 Aug 2002 09:55
Picon
Favicon

[zebra 14921] automated modification of configuration ?

Hi all,

  is there a way to do an automated modification of the BGPd configuration
(while it's running of course) with the 'at' command (or like 'at')?

Thanks...

Seb.

Frank Kuempel | 1 Aug 2002 11:20

[zebra 14922] redistribute external route into ospf

Hello again ,

I posted this yesterday, but got no answer ... 

I have some difficulties to proper configure zebra's OSPFD
Here is my topology:

      |                                 |
-------------                     ------------     BGP-Router CORE1&2
|   CORE1   |                     |  CORE2   |  
-------------                     ------------
      |                                 |
-------------                     ------------     BGP-ZEBRA ISBB1 & HEBB1
|   ISBB1   |                     |   HEBB1  |     OSPF-ZEBRA ISBB1 & HEBB1
-------------                     ------------
      |  32.126                 48.126  |
      |  32.125                 48.125  |
-------------                     -------------
|   ISBB2   |---------------------|   HEBB2   |    OSPF-ZEBRA ISBB2 & HEBB2
-------------       AREA 0        -------------

The routers CORE1/2 announcing their routes to ISBB1 and ISBB2 using BGP.
ISBB1 and HEBB2 do the same to CORE1/2 by using BGP.

ISBB1 and ISBB2 with their internal interfaces (32.126 / 32.125) are in AREA 1 and HEBB1 and HEBB2 (48.126 / 48.126)
are in AREA 2.

ISBB1 and HEBB2 do a redistribute BGP. My Problem now is that on ISBB2(HEBB2) are no external routes are
reflected, especially the default route which comes from the upper Core-router via BGP.

(Continue reading)

John Fraizer | 1 Aug 2002 11:20

[zebra 14923] Re: automated modification of configuration ?


Yes.  If you really want to work at it.

Use "at" or cron to run a perl script that incorporates
Net::Telnet.  Examples can be found in my MRLG code (enough to get you
going is included in teh Zebra tarball).

Note: While it is POSSIBLE, I really would NOT recommend
"automated" changes to the config.  

---
John Fraizer              | High-Security Datacenter Services |
EnterZone, Inc            | Dedicated circuits 64k - 155M OC3 |
http://www.enterzone.net/ | Virtual, Dedicated, Colocation    |

On Thu, 1 Aug 2002, TANDEL Sebastien wrote:

> Hi all,
> 
>   is there a way to do an automated modification of the BGPd configuration
> (while it's running of course) with the 'at' command (or like 'at')?
> 
> Thanks...
> 
> Seb.
> 

John Fraizer | 1 Aug 2002 14:53

[zebra 14924] Re: redistribute external route into ospf


OK.  Lets find out a few more things before we start any speculation on
your problem.

Are all of these routers in the same ASN or are there eBGP sessions going
on?

Why are your redistributing BGP into OSPF instead of simply running an
iBGP session to those routers?

---
John Fraizer              | High-Security Datacenter Services |
EnterZone, Inc            | Dedicated circuits 64k - 155M OC3 |
http://www.enterzone.net/ | Virtual, Dedicated, Colocation    |

On Thu, 1 Aug 2002, Frank Kuempel wrote:

> Hello again ,
> 
> I posted this yesterday, but got no answer ... 
> 
> I have some difficulties to proper configure zebra's OSPFD
> Here is my topology:
> 
> 
>       |                                 |
> -------------                     ------------     BGP-Router CORE1&2
> |   CORE1   |                     |  CORE2   |  
> -------------                     ------------
>       |                                 |
(Continue reading)

Christian Delez | 1 Aug 2002 14:59
Picon
Favicon

[zebra 14925] Re: A scripted way to make a config (add a route) ? vtysh -e option ?

On Wed, Jul 31, 2002 at 18.28PM, Iain Young wrote:
 >On Wed, Jul 31, 2002 at 04:08:19PM +0200, Christian Delez wrote:
 >
 >> There is no vtysh option like -f for script file. People says they are
 >> doing a new user with vtysh as default shell and then telnet to this 
user.
 >
 >vtysh <my_script_file worked for me when I wanted to delete and
 >re-add a default static route via a ppp interface, and that included
 >an 'enable'
 >
 >Best Regards
 >Iain

Hi Iain,
I've tryed 
 # vtysh <zebraconf>
 # vtysh zebraconf
None work. I don't find script file option for vtysh.

Do you remember which version of zebra you where using ?
Regards,
Christian.

Christian Delez | 1 Aug 2002 15:00
Picon
Favicon

[zebra 14926] Re: A scripted way to make a config (add a route) ? vtysh -e option ?

On Wed, Jul 31, 2002 at 18.28PM, Iain Young wrote:
 >On Wed, Jul 31, 2002 at 04:08:19PM +0200, Christian Delez wrote:
 >
 >> There is no vtysh option like -f for script file. People says they are
 >> doing a new user with vtysh as default shell and then telnet to this 
user.
 >
 >vtysh <my_script_file worked for me when I wanted to delete and
 >re-add a default static route via a ppp interface, and that included
 >an 'enable'
 >
 >Best Regards
 >Iain

Hi Iain,
I've tryed 
 # vtysh <zebraconf>
 # vtysh zebraconf
None work. I don't find script file option for vtysh.

Do you remember which version of zebra you where using ?
Regards,
Christian Delez.

Frank Kuempel | 1 Aug 2002 15:52

[zebra 14927] Re: redistribute external route into ospf

Hi John ,

first of all thank you for your reply.

here some additional facts. The installation I`m working on is a testbed for migrating our existing network.
The version of zebra I currently have in use is 0.93a, configured and compiled under freeBSD 4.6 with --disable-ipv6.

The upper two core-routers will be connected by a E1/E3 WAN-uplink and have their own AS8391 (Upstream-provider).
The link ISBB2 and HEBB2 will be a WAN-Link (T1/E1) and there are some additional routing equipment in the
two branches in real life. My testbed reflects only the necessary core components needed for the entire routing.

In my testlab the whole equipment is currently connected via ethernet. 
The main goal for the installation is to have a dynamic and redundant architecture in case of  faulty WAN-links.

here is the CORE-router config

!
! Zebra configuration saved from vty
!   2002/07/30 19:51:56
!
hostname CORE-BGP
password zebra
log stdout
!
router bgp 8391
 redistribute static
 neighbor 195.179.85.2 remote-as 25000
 neighbor 213.244.44.2 remote-as 25000
!
line vty
(Continue reading)


Gmane