Question 14.10 Site Of Origin

Do we really need to have the SoO configured in Sw1 and Sw2... i guess since in the Doc CD they point out that it has to be done in the PE and not in the CE as well

 

Thanks

Comments

  • Hello Seifeddine,

     

    Test this : put the same SOO (for R5 and R6), then shutdown the link between SW1 and SW2. You will get on SW1 the following routes :

     


    Rack1SW1#sh ip ro e

         8.0.0.0/32 is subnetted, 1 subnets

    D EX    8.8.8.8 [170/2560000512] via 155.1.67.6, 00:00:21, Vlan67

         9.0.0.0/32 is subnetted, 1 subnets

    D EX    9.9.9.9 [170/2560000512] via 155.1.67.6, 00:00:21, Vlan67


     

    If you put a different SOOs you will get on SW1 :


    Rack1SW1#sh ip ro e

         155.1.0.0/24 is subnetted, 6 subnets

    D       155.1.8.0 [90/28672] via 155.1.67.6, 00:00:37, Vlan67

    D       155.1.58.0 [90/28416] via 155.1.67.6, 00:00:37, Vlan67

         172.16.0.0/24 is subnetted, 2 subnets

    D       172.16.8.0 [90/156416] via 155.1.67.6, 00:00:37, Vlan67

         8.0.0.0/32 is subnetted, 1 subnets

    D EX    8.8.8.8 [170/2560000512] via 155.1.67.6, 00:00:37, Vlan67

         9.0.0.0/32 is subnetted, 1 subnets

    D EX    9.9.9.9 [170/2560000512] via 155.1.67.6, 00:00:37, Vlan67

         150.1.0.0/24 is subnetted, 2 subnets

    D       150.1.8.0 [90/156416] via 155.1.67.6, 00:00:37, Vlan67


    As you see, in case of a failure on the backup link, you can't have reachability between CEs (SW1 and SW2) via the VPN (R5-R4-R6) because they have the same SOO.


    HTH

     

Sign In or Register to comment.