Spunea candva un clasic in viata…ca IT-ul nu e o stiinta exacta. Azi am invatat pe propria piele ca MARE dreptate avea clasicul…si ca nu numai ca nu e o stiinta exacta, dar atunci cand vine vorba de device-uri e mai cu toane decat o femeie in _acea_ perioada.
A se vedea una bucata Cisco 6500 SPA. Acum o saptamana mergea snur, am backup de la configul running. Totul ok, aceeasi imagine, aceleasi setari. Azi nu mai raspundea la isakmp_init. Buun…s-o fi stricat ceva in ipsec. Nup, configul era asa cum il lasasem. Eh, poate mi-au scos cablurile colegii glumeti. Hmm…nup – interfetele sunt toate up.
Dau si eu ca omul ping de la un alt 6500 direct conectat cu cel in cauza. Pauza. Niciun raspuns. Ma duc in lab, ma uit la cabluri – cablu tras direct intre ele. Ma uit in tabela de rutare – directly connected, ruta exista.
Dau ping si debug, “encapsulation failed”…
Ma uit si in tabela arp:
Internet 170.2.0.1 0 Incomplete ARPA
Internet 170.2.0.2 0 Incomplete ARPA
Internet 170.2.0.2 0 Incomplete ARPA
Nu’s nici pe departe Cisco guru si am si ceva oboseala la bord, dar nu stiu ce are …
interface GigabitEthernet3/3
switchport
switchport access vlan 111
switchport mode access
!
interface GigabitEthernet3/4
ip address 171.253.253.4 255.255.255.0
!
interface GigabitEthernet8/1/1
switchport
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 1,100,102,110,1002-1005
switchport mode trunk
mtu 9216
flowcontrol receive on
flowcontrol send off
spanning-tree portfast edge trunk
!
interface GigabitEthernet8/1/2
switchport
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 1,101,111,1002-1005
switchport mode trunk
mtu 9216
flowcontrol receive on
flowcontrol send off
spanning-tree portfast edge trunk
!
interface Vlan110
ip address 170.2.0.6 255.255.255.0
no mop enabled
crypto map general_map
crypto engine slot 8/1
!
interface Vlan111
no ip address
crypto connect vlan 110
Tags: draci, passion, techie