Question

EIGRP setup with NAT & Several IP Blocks from ISP

Asked by: N_W_O

Hello and thank you for taking the time to read this question.

Please check if my understanding of EIGRP is correct.  Below is an example of my environment and I will be expanding on this example to general practice once confirmed Im have a good understanding.  I will use similar IP addressing to allow for the most accurate description, all the subnets are the same but the numbers themselves I have altered.  I use Metro Ethernet for my transport with 3640 routers at all my remote sites, a 2821 at my co-lo and 3550-EMI switches everything in my network.

My understanding is that with EIGRP, I can simply configure the network with a /24 of the relative network and it will only announce the actual configured network on the router, correct?  Should I use my own summarization and if so, where.  I have read about redistribution, do I need it in this setup?  Should I use EIGRP on my switches only because they can or is there a benefit to doing so?

Assigned to me by my carrier (I have others but not used in this example):
52.117.99.30/30
45.101.128.0/22
52.117.13.0/24
52.117.89.0/24
52.117.18.128/25
52.117.46.128/25

R1 (colo):
interface GigabitEthernet0/0
description UPLINK to ISP
ip address 52.117.99.30 255.255.255.252
!
interface GigabitEthernet0/1
description UPLINK to ME network
ip address 45.117.128.1 255.255.255.192
ip address 45.117.128.192 255.255.255.224 secondary (for local devices at my local)
ip address 45.117.128.192.255.255.255.224 secondary (for local devices at my local)
!
ip default-gateway 52.117.99.29
ip route 0.0.0.0 0.0.0.0 52.117.99.29
!
router eigrp 1
network 45.101.128.0 0.0.0.255
no auto-summary
 
R2 (Remote site 1):
 
ip dhcp excluded-address 192.168.1.2 192.168.1.10
!
ip dhcp pool vlan3
   network 192.168.1.0 255.255.255.0
   dns-server 4.2.2.2 4.2.2.3 
   default-router 192.168.1.1
!
interface FastEthernet0/0
description UPLINK to ME
ip address 45.117.128.20 255.255.255.192
ip nat outside
!
interface FastEthernet0/1
No ip address
!
interface FastEthernet0/1.1
description UPLINK to LAN (onsite switches)
encapsulation dot1Q 1 native
ip address 45.101.129.65 255.255.255.248
!
interface FastEthernet0/1.2
description UPLINK to Client A
encapsulation dot1Q 75
ip address 52.117.13.1 255.255.255.252
! 
interface FastEthernet0/1.3
description UPLINK to Client B
encapsulation dot1Q 80
ip address 192.168.1.1 255.255.255.0
!
ip default-gateway 45.117.128.1
ip route 0.0.0.0 0.0.0.0 45.117.128.1
!
router eigrp 1
network 45.101.128.0 0.0.0.255
network 45.101.129.0 0.0.0.255
network 52.117.13.0 0.0.0.255
network 52.117.18.0 0.0.0.255
no auto-summary
!
ip nat pool vlan3 52.117.18.141 64.135.18.141 prefix-length 29
ip nat inside source list 3 pool vlan3 overload
!
access-list 3 permit 192.168.1.0 0.0.0.255
 
R3 (Remote site 2):
 
ip dhcp excluded-address 192.168.50.2 192.168.50.10
!
ip dhcp pool vlan3
   network 192.168.50.0 255.255.255.0
   dns-server 4.2.2.2 4.2.2.3 
   default-router 192.168.50.1
!
interface FastEthernet0/0
description UPLINK to ME
ip address 45.117.128.21 255.255.255.192
ip nat outside
!
interface FastEthernet0/1
No ip address
!
interface FastEthernet0/1.1
description UPLINK to LAN (onsite switches)
encapsulation dot1Q 1 native
ip address 45.101.129.74 255.255.255.248
!
interface FastEthernet0/1.2
description UPLINK to Client C
encapsulation dot1Q 2
ip address 52.117.46.129 255.255.255.252
! 
interface FastEthernet0/1.3
description UPLINK to Client D
encapsulation dot1Q 3
ip address 192.168.50.1 255.255.255.0
!
ip default-gateway 45.117.128.21
ip route 0.0.0.0 0.0.0.0 45.117.128.21
!
router eigrp 1
network 45.101.128.0 0.0.0.255
network 45.101.129.0 0.0.0.255
network 52.117.46.0 0.0.0.255
network 52.117.89.0 0.0.0.255
no auto-summary
!
ip nat pool vlan3 52.117.89.141 52.117.89.141 prefix-length 29
ip nat inside source list 3 pool vlan3 overload
!
access-list 3 permit 192.168.1.0 0.0.0.255

                                  
1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25:
26:
27:
28:
29:
30:
31:
32:
33:
34:
35:
36:
37:
38:
39:
40:
41:
42:
43:
44:
45:
46:
47:
48:
49:
50:
51:
52:
53:
54:
55:
56:
57:
58:
59:
60:
61:
62:
63:
64:
65:
66:
67:
68:
69:
70:
71:
72:
73:
74:
75:
76:
77:
78:
79:
80:
81:
82:
83:
84:
85:
86:
87:
88:
89:
90:
91:
92:
93:
94:
95:
96:
97:
98:
99:
100:
101:
102:
103:
104:
105:
106:
107:
108:
109:
110:
111:

Select allOpen in new window

This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.

Subscribe now for full access to Experts Exchange and get

Instant Access to this Solution

  • Plus...
  • 30 Day FREE access, no risk, no obligation
  • Collaborate with the world's top tech experts
  • Unlimited access to our exclusive solution database
  • Never be left without tech help again

Subscribe Now

Asked On
2009-08-13 at 16:28:47ID24651582
Tags

EIGRP

,

routing protocals

,

switching

Topics

Network Design & Methodology

,

Network Routers

,

Network Switches & Hubs

Participating Experts
2
Points
500
Comments
8

Trusted by hundreds of thousands everyday for fast, accurate and reliable tech support.

  • "The time we save is the biggest benefit of Experts Exchange to Warner Bros. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange." Mike Kapnisakis, Warner Bros.
  • "Our team likes having a resource that is more secure than just using Google and most experts using this service really know their stuff. It's nice to look here first versus using Google." Dayna Sellner, Lockheed Martin
  • "Anytime that I've been stumped with a problem, 9 out of 10 times Experts Exchange has either the accepted solution or an open discussion of the potential solution to the problem." Kenny Red, eBay Inc.

See what Experts Exchange can do for you.

Got a question?

We've got the answer.

Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.

Screenshot of Experts Exchange Knowledgebase

Need individual assistance?

Our experts are ready to help.

If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.

Screenshot of Experts Exchange Knowledgebase

Want to learn from the best?

Read articles from industry experts.

Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.

Screenshot of an Article

Working on a long term project?

Store your work and research.

Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.

Screenshot of Experts Exchange Knowledgebase

Access the answers to your technology questions today.

Subscribe Now

30-day free trial. Register in 60 seconds.

What Makes Experts Exchange Unique?

Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Trusted by the world's most respected brands.

image of each brand's logo

Faithfully serving IT professionals since 1996.

Experts Exchange Logo

Try it out and discover for yourself.

Subscribe Now

30-day free trial. Register in 60 seconds.

Related Solutions

  1. EIGRP summary question
    I switched my internal routing protocol from IGRP, to EIGRP. When I do a sh ip pro, I notice that there are some lines that say "summarization." I'm assuming this is the route summarization I read about? Is there an easier way to understand what this means..in l...
  2. EIGRP Summarization
    Gurus! I'd like to know more about EIGRP route summarization. When should it be used? When should it not be used? What is the benefit of using it? At the moment, we use auto-summary for every router we configure. For example, in our environment, we have a 3750G switch/route...
  3. Cisco EIGRP
    Hello, I've configure EIGRP on some 3750-E LAB Switches. It's working OK but I just want to clear something up. I've noticed that if I turn EIGRP on but don't add a network the switch does not recieve announcements from its neighbours - as soon as I add a network it does. Do...

Free Tech Articles

  1. WARNING: 5 Reasons why you should NEVER fix a computer for free.
    It is in our nature to love the puzzle. We are obsessed. The lot of us. We love puzzles. We love the challenge. We thrive on finding the answer. We hate disarray. It bothers us deep in our soul. W...
  2. SCCM OSD Basic troubleshooting
    SCCM 2007 OSD is a fantastic way to deploy operating systems, however, like most things SCCM issues can sometimes be difficult to resolve due to the sheer volume of logs to sift through and the dispe...
  3. Migrate Small Business Server 2003 to Exchange 2010 and Windows 2008 R2
    This guide is intended to provide step by step instructions on how to migrate from Small Business Server 2003 to Windows 2008 R2 with Exchange 2010. For this migration to work you will need the fo...
  4. Create a Win7 Gadget
    This article shows you how to create a simple "Gadget" -- a sort of mini-application supported by Windows 7 and Vista. Gadgets can be dropped anywhere on the desktop to provide instant information, ...
  5. Outlook continually prompting for username and password
    There have been a lot of questions recently regarding Outlook prompting for a username and password whilst using Exchange 2007. There are a few reasons why this would happen and I will try to cover t...
  6. Backup Exchange 2010 Information Store using Windows Backup
    There seems to be quite a lot of confusion around the ability to backup Exchange 2010 using the built in Windows Backup feature. This stems from the omission of this feature prior to Exchange 2007 s...

Cloud Class Webinars

  1. Avoiding Bugs in Microsoft Access
    Alison Balter takes and in-depth look at avoiding bugs in Access. In this webinar you will learn about using the immediate window to debug your applications, invoking the debugger, using breakpoints to troubleshoot, stepping through code, setting the next statement to execute, ...
  2. Top 10 Best New Features in Visio 2010
    Scott Helmers gives live demonstrations of the top 10 new features in Visio 2010. This webinar will teach you how to create compelling diagrams by adding shapes to the page with a single click, linking the shapes in a diagram to data in Excel (or SQL Server, or SharePoint), ...
  3. IT Consultant Business Secrets Revealed
    Michael Munger, Experts Exchange tech pro and IT consultant, pulls back the curtain on his very successful businesses and answers question on every IT consultant and business owner should know about. He shares secrets on what he did to solve the 5 most common problems in IT, ...
  4. Disaster Recovery and Business Continuity
    Quest CTO, Mike Billon, gives an overview of the steps involved in building a dunamic disaster recovery plan. Through case studies and an examination of software/hardware tooles for monitoring and testing, you'll gain a better understandin of where you are, where you want ...
  5. Organize Your Visio Diagrams with Containers and Lists
    Scott Helmers uses cross functional flowcharts, wireframe diagrams, data graphic legends and seating charts to teach you: how to ustilize all three new structured diagram components in Visio 2010, the best practices for organizeing shapes in previous version of Visio, how to organize ...
  6. How to Us Objects, Properties, Events and Methods in Microsoft Access
    Alison Dalter gives an in-depbth look at objects, properties, events and methods in Microsoft Access. In this webinar you will learn about using the object browser, referring to objects, working with properties and methods, working with object variables, understanding the ...

Join the Community

Give a Little. Get a Lot.

Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.

Join the Community

Answers

 

by: mikecrPosted on 2009-08-13 at 20:02:43ID: 25094969

Keep in mind that you need to specifiy the network of the adjacent router also. So if you have a connection of 192.168.192.1 on RouterA and an interface on RouterB that has 192.168.192.2, you need to advertise that network also.

Looks like this:

Outside interface - 192.168.192.1 255.255.255.0
Inside interface - 45.101.128.1 255.255.255.0

router eigrp 101
network 192.168.192.0 0.0.0.255
network 45.101.128.0 0.0.0.255
no auto-summary

Also, you don't have to put EIGRP on your switches, only the router. If you have more than one subnet at a location, advertise it in EIGRP to the rest of the sites. This can be done one of two ways. You either add the network in your Eigrp config or you redistribute static routes.

Looks like this:
router eigrp 102
network 192.168.192.0 0.0.0.255
network 45.101.128.0 0.0.0.255
network 45.117.128.0 0.0.0.255
no auto-summary

Static route on router for next hop to this network.
ip route 45.117.128.0 255.255.255.0 45.101.128.2

OR

router eigrp 102
network 192.168.192.0 0.0.0.255
network 45.101.128.0 0.0.0.255
redistribute static
no auto-summary

Static route on router for this network.
ip route 45.117.128.0 255.255.255.0 45.101.128.2

Either way you get the same net effect. You should try to leave switches as they are. The addage is switch when you can, route when you must. Unless you have multiple networks at the same site and static routes would be excessive, it's best to run it slim with just default gateways configured, no EIGRP. This way you have a high performance network. If you start racking up the subnets then you may have to move that route.

If you have multiple switches on a network with multiple subnets, it is best to create the routable vlans on one switch and make it the core and the rest are trunked to it using VTP. One switch does all the routing between vlans if needed and everything else is fast switched which improves network performance because you don't have all the switches doing a route table lookup just to find out where their going. If you wish, you could put EIGRP on that particular core router and advertise those networks to the router, but like I said, you can get the same net effect just adding them on the router and it takes the burden off the switch to run a routing protocol.

 

by: N_W_OPosted on 2009-08-13 at 21:25:48ID: 25095259

Thanks for the reply.

I have noticed I made some mistakes and type-o's in my post, some of the IPs are not right according to my diagram but they are fake so it doesn't matter, I suppose. I have added a diagram of what I am changing my network to.  I don't have the routers in place yet and all my VLANs are trunked back to my co-lo currently.

I think I understand some what but a bit confused.  

1. No really need to run EIGRP on the switches
2. Each router should have a network config for any subnet that is configured on it, inside or outside.
3. Each router should have a default route of the next hop of the "outside" interface
4. Other than the default gateway why would I add static routes? Is that not the point of EIGRP so I dont have to keep up with configuring static routes?
5. My core router should have redistribute static added to the EIGRP table
6. I see you are using different EIGRP AS 101 and 102? I thought I had to use the same AS on my network if I wanted to share all my routes with all my routers.

I am going to have several sub-networks at each of my sites, I am a small service provider and each of my clients get a unique VLAN and public IP block of the size they request.  Some clients request NAT services as well thus the sample config I game in my original post.

Thoughts moving forward and thanks again!

 

by: JWCastilePosted on 2009-08-13 at 21:44:38ID: 25095316

mikecr has put a lot of good information up there.  May I add a few suggestions?  

Here are a few things I personally like to do when configuring EIGRP/OSPF/etc:

1) At the EIGRP process, enter no auto-summary and passive-interface default.  Then do a no passive-interface default on all interfaces that you want to advertise EIGRP hello messages.  This does not prevent an interface from being advertised, only from being used to form adjacencies.

2) When looking to summarize or generate a default route, I always prefer to do so at the interface level when using EIGRP vs. doing redistribution.  Keep in mind that EIGRP summaries create a discard route by default, but you can eliminate this by setting the AD on the summary to 255.

3) When doing any sort of redistribution, I always use a route-map to control which routes are injected into my IGP.  I always tag redistributed routes as well, but that's more of a personal preference.

4) EIGRP supports MD5 key-chains.  Use them.  :)

A few other things of note:

1) I am an advocate for Layer3 switching.  If given the option, I will always run my L3 functionality on a switch vs. a router.  There is a lot to be said for being able to route at wire speed.

2) If you use VTP (I personally try to avoid it, but I know a lot of people really like it), make sure you pre-determine which switch is going to be your VTP server and set a password for your VTP domain.  Before joining any new switches to the VTP domain, change them to client mode.  Having all of your VLANs vanish is a bad way to start off a day.  (A couple of things of note - a) You cannot create a VLAN ID higher than 1024 when using server/client VTP, b) To essentially disable VTP, set the VTP mode to transparent)

3) Named access-lists are your friend.  There's nothing worse than reading through hundreds of lines of code to try to figure out exactly what access-list 105 does.  If you name your access-list something like EIGRP->OSPF, then you know that particular ACL is probably being used to match addresses that you are redistributing from EIGRP into OSPF or something very similar.

Ok that's probably way more than you were after, but hopefully it helps.

-J

 

by: mikecrPosted on 2009-08-14 at 07:14:29ID: 25098248

That is what I normally do is set the VTP mode to transparent and then use the allowed vlan command on a switchport to only allow those vlans that I want to cross. This way the switch doesn't have to look at all vlans.

I agree with JWCastile that routing at wire speed is good, but I only do it when have a lot of networks that I have to deal with at one location. Routing on a core like I described above gives you the same net effect, you just don't have all your switches running a process that it rarely would use like EIGRP.

I highly agree with the statement about named access lists. They are your friend, use them.

I provided you an example of route redistribution but I normally do wht JWCastile does and pick and choose which routes that I want to redistribute.

Give us a chance to look over your diagram and we may be able to give some more helpful info.

 

by: N_W_OPosted on 2009-08-14 at 16:52:31ID: 25103279

Thank you both, I do have followup questions but will wait to see if any comments are made on the diagram of what I will be moving to.

 

by: N_W_OPosted on 2009-08-14 at 18:02:04ID: 25103459

I have a side note/question.  I have a friend that is a hardware liquidator and has offered me a choice of of either the Cisco 2691 or the 3640 (as described in the diagram) both with max D/F for free to make this network upgrade.  Which do you suggest I get, I am leaning toward to 2691, faster CPU, same D/F limits and to fastethernet integrated.

thoughts and thank you.

 

by: mikecrPosted on 2009-08-16 at 08:14:58ID: 25109232

I would go with the 2691 since it is a multiservice router, it's faster,  and supports a larger assortment of WIC cards.

 

by: N_W_OPosted on 2009-08-23 at 19:10:19ID: 31615598

After getting the comments I need to do more research before deploying EIGRP.  Both experts gave me good information to start with.

20120131-EE-VQP-002

3 Ways to Join

30-Day Free Trial

The Experts

98% positive feedback on 31,087 answers since March 2000. angeliii is a Microsoft Most Valuable Professional for his work with MS SQL Server & Develoment.

He has also proven his knowledge of Visual Basic Programming, PHP Scripting and Oracle Databases.

The Experts

97% positive feedback on 10,752 answers since July 2000. lrmoore has more than 18 years experience in the networking industry.

The six-time Mircosoft MVPs specialties include firewalls, virtual private networking, and network management.

Testimonials

"...and excellent source for support... Kind of like having your very own IT dept." Electriciansnet

Testimonials

"I was apprehensive at signing up at first. However... it has already made my life as an IT administrator much easier." JaCrews

Testimonials

"WOW! You guys have great, active, and knowledgeable people on here." moore50

Business Clients

Business Clients

In the Press

"If you’ve got a question... Experts Exchange can supply an answer.”

In the Press

"...an invaluable aid for both IT professionals and those who require tech support."

In the Press

"where IT professionals provide quick answers on just about any topic"

Business Account Plans

Loading Advertisement...