Errata

Recipe 21.9. Stateful NAT Failover

Incorrect: See the NAT pool name (NATPOOL1 & 2 are not being used and there is no such pool as NATPOOL)
Router-A(config)#ip nat pool NATPOOL1 172.17.100.100 172.17.100.150 netmask 255.255.255.0
Router-A(config)#ip nat inside source list 11 pool NATPOOL mapping-id 1
Router-A(config)#ip nat pool NATPOOL2 172.17.100.151 172.17.100.200 netmask 255.255.255.0
Router-A(config)#ip nat inside source list 12 pool NATPOOL mapping-id 2


Coorect: See the NAT pool name in 'ip nat inside source' statements:
Router-A(config)#ip nat pool NATPOOL1 172.17.100.100 172.17.100.150 netmask 255.255.255.0
Router-A(config)#ip nat inside source list 11 pool NATPOOL1 mapping-id 1
Router-A(config)#ip nat pool NATPOOL2 172.17.100.151 172.17.100.200 netmask 255.255.255.0
Router-A(config)#ip nat inside source list 12 pool NATPOOL2 mapping-id 2

In discussing Recipe 2.5 presented at the top of the page, the third paragraph includes the following phrase and code snippet:

?If you don?t want to run CDP on a particular interface, you can use the no cdp enable command, as we did for the serial interface in the example:

Router1(config)#interface Serial0/0
Router1(config-ip)#no cdp enable

However, if you look at Recipe 2.5, the ?no cdp enable? command actually applies to interface FastEthernet0/0.

I suspect that the authors intended the ?no cdp enable? command to be associated with interface Serial0/0, but that is not what is in the recipe.

[submitting again -- using plain ASCII quotes this time]

In discussing Recipe 2.5 presented at the top of the page, the third paragraph includes the following phrase and code snippet:

If you don?t want to run CDP on a particular interface, you can use the no cdp enable command, as we did for the serial interface in the example:

Router1(config)#interface Serial0/0
Router1(config-ip)#no cdp enable

However, if you look at Recipe 2.5, the "no cdp enable" command actually applies to interface FastEthernet0/0.

I suspect that the authors intended the "no cdp enable" command to be associated with interface Serial0/0, but that is not what is in the recipe.

In section 3.9 "Changing VTY Timeouts," the text says "You can use this same command to simply increase the EXEC timeout to a large value, such as three hours..." yet the code sets the timeout to two hours:

exec-timeout 240 0 !! 240 minutes is two hours

Oops.... 240 minutes is four hours. Totally confused.

Testing Solution 3.10 against IOS 15.1(4)M2, it seems that the "transport input telnet" command doesn't work as expected, or at least doesn't change how the transport is reported when you issue "show terminal | include input".

Both before and after issuing a "transport input telnet" command, the output from "show terminal | include input" is:

Allowed input transports are none.

Text states:

....the router uses the BGP Multipath feature only for routes that are equivalent after all tests up to
and including the MED test.

Cisco web site states:

If the following conditions are all true, insert the route for this path into the IP routing table:

Both the best route and this route are external.

Both the best route and this route are from the same neighboring autonomous system.

maximum-paths is enabled.

The check described above occurs after the MED check. For reference, please see:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121cgcr/ip_c/ipcprt2/1cdbgp.htm

The following command below seems in Recipe 12.6 to be a holdover from Recipe 12.5 (Creating an Encrypted
Router-to-Router VPN in a GRE Tunnel) on page 530. It shouldn't be needed; nor is it mentioned as part of
Router2's configuration example as it is in Recipe 12.5. It also isn't added to a direction on an
interface in the recipe which would also prove it is a holdover from Recipe 12.5

Router1(config)#access-list 102 permit gre host 172.16.1.1 host 172.16.2.1

ip nat inside source list 16 pool INBOUNDNAT overload

The correct syntax should be:

ip nat outside source list 16 pool INBOUNDNAT overload

1st complete sentence ends with "... Router-PE2." It should be "Router-PE3".

From the book
Router-PE2(config)#interface FastEthernet0/0.2
Router-PE2(config-if)#description Connection to customer A, site 2
Router-PE2(config-if)#encapsulation dot1Q 102
Router-PE2(config-if)#ip address 192.168.3.1 255.255.255.0

Lacking
Router-PE2(config-if)#ip vrf forwarding NetworkA

From the book
Router-PE2(config-router)#neighbor 10.0.0.3 remote-as 100
Router-PE2(config-router)#neighbor 10.0.0.3 update-source Loopback0

Should be
Router-PE2(config-router)#neighbor 10.0.0.4 remote-as 100
Router-PE2(config-router)#neighbor 10.0.0.4 update-source Loopback0