cisco ccnp 300-135 topology

cisco ccnp 300-135 topology

Where min ( holdtime ) is the minimum value of holdtime between two BGP neighbors. 3 : MD5 verification. Known via "ospf 1", distance 110, metric 1 The route obtained by the BGP speaker from EBGP will be advertised to all its BGP neighbors (including EBGP and IBGP ). Whether the MAC correspondence is legal The above figure only makes basic BGP configuration, releases 1.0 and 2.0 on R1 , does not summarize, and 1.0 and 2.0 BGP routes received by R4 . These two attributes are used to prevent ringing within the federation and member AS . Note that the neighbor 1.1.1.1 filter-list x weight yyy command can be used multiple times for a neighbor, that is, set different weights for different routes . But the neighbor 1.1.1.1 filter-list 1 command, in the same neighbor in or out direction, can only be used once, these two commands are very different In 802.1q the native vlan is untagged, using Dot1q switches all unmarked frame is forwarded to the native vlan in the ISL on all data frames, including native vlan encapsulation, so if the package is not received The data frame will be discarded (the ISL does not have the concept of a native VLAN ). Next Hop Switch(config-if)# switchport mode dynamic {auto | desirable} Configuration and implementation SW1#show int trunk AS64512 private AS number is not allowed to declare to the Internet , if unchecked, R3 received R1 route, the AS_PATH certainly contains 64512 This private AS number, assuming that R3 as Internet routers, how R2 on the R3 delivery route When shielding private ASs ? Just a very simple command: neighbor 10.1.23.3 remove-private-as Limit the number of access hosts per port (number of MAC addresses) Configuring BGP Federal Switch(config-if)# switchport mode access About PBR At this time we look at the state of the trunk on SW1 : Internal EIGRP 1 Router(config-router)# passive-interface fast 0/0 Router(config-router)# neighbor 192.168.123.2 UplinkFast Switch(config-if)# switchport mode access After the interface is configured, the interface switches to the err-disable state immediately after receiving the BPDU . Gateway implementation) BGP routing table entry for 100.100.100.0/24, version 2 Paths: (2 available, best #2, table Default-IP-Routing-Table) Flag: 0x820 Or trunk Policy-list The route of ( permit ) will be filtered and the other will be released. 8 bits 3.0 this route. This is an example of the use of a distribution list. Of course, it has a wider range of applications. In the BGP table, only one route is preferred, which should be R3 (because R3 's RouterID3.3.3.3 is less than R5 's 5.5.5.5 ) Neighbor 10.1.23.3 dmzlink-bw The smaller the RID of a BGP neighbor is, the higher the priority is. Show ip bgp Trunk configuration OSPFpassive-interface neither sends nor receives routing updates, nor does it send HELLO packets. The configuration of SW2 is as follows: As a result of the experiment, the PC could not get the address. Note that, EIGRP the metric is a mixed type, metric. 1 100000 100 255 1500 Parameters specified here, from left to right is the bandwidth, delay, load, reliability, the MTU . It can be flexibly set according to actual needs. After the above configuration is completed, R2 will be in the routing table. A frame whose type field has a value of 0800 represents an IP protocol frame. Configuring static routes The figure above is the initial state. Solution 2 : Free arp Host 192.168.1.111 255.255.255.0 Switch(config-vlan)# name Classroom *>i100.0.2.0/24 Neighbor 5.5.5.5 update-source Loopback0 We restore the experimental environment to the basic configuration: BGP neighbor relationships are as follows Ip address 192.168.100.254 255.255.255.0 Use the show spanning-tree inconsistentports command to view related entries. The smaller the total cost of the switch to reach the root switch path, the better, related to the interface bandwidth. Define the network segment associated with the address pool R3 , R4 , and R5 each create a LOOPBACK interface with an IP address of xxxx and x is the number of the router. Run the switchport port-security mac-address command to configure a static security address entry. Matches 100~109 , and 10 because " ." also contains spaces Ip route 1.1.1.0 255.255.255.0 serial 0/0 Paths: (1 available, best #1, table Default-IP-Routing-Table, not advertised to EBGP peer) Flag: 0x820 When the previous eight routing principles fail to optimize the optimal route, and the maximum-paths [ibgp] n is configured under the BGP process , and the value of n is 2-6, the equivalent load balancing will be performed. Sw1(config-if-range)#no switchport // Configure the L3 interface Redistribute ospf 1 match internal external 1 To this end, some organizations and manufacturers propose to layer the data link layer, which is divided into logical link control sub-layer ( LLC ) and media access control sub-layer ( MAC ). Such different physical layers correspond to different MAC sublayers, and the LLC sublayer can be completely independent. As shown in Figure 1-4 . Three-layer exchange Port-security configuration Ip community-list 30 permit 300:30 route-map PA permit 10 R1(config)# access-list 1 deny 172.16.32.0 R1(config)# access-list 1 permit any BGP Deaggregation Ip helper-address command can configure the first to receive client broadcasts emanating discovery on the interface that three packets, after the broadcast DHCP messages will be relayed to unicast packets, is to take the IP routing It is. Redistribute connected metric 10 subnets route-map test network 192.168.23.3 0.0.0.0 area 0 Network 10.10.10.0 mask 255.255.255.0 Neighbor 5.5.5.5 update-source Loopback0 The route to the nearest BGP NEXT_HOP route is the route with the smallest IGP metric to the next hop router. After the basic configuration is completed, the BGP table of R4 is as follows: Total MAC Addresses 0 Using this feature may reduce the performance of the device to a certain extent. In addition, you must ensure that CDP is enabled for both the neighbor and the router interface . Process switching and CEF support this feature, but dCEF does not. Authenticate Network 100.0.2.0 mask 255.255.255.0 neighbor 10.1.13.3 route-map test out to sum up Note: If CDP- based detection and object tracking- based detection are applied, the latter is preferred. R3 , R4 , and R5 establish IBGP full interconnection, and R3 R4 R5 uses LOOPBACK as the update source and refers to the neighbor . Match interface : To distribute any routes that have their next hop out one of the interfaces specified, use the match interface command in route-map configuration mode . The understanding is that the match interface matches the next hop out interface is the route of this interface. entry Ip address 100.0.2.1 255.255.255.0 Neighbor 10.1.23.3 send-community neighbor 10.1.23.3 route-map test out 200 RSTP is able to quickly transition between edge ports and point2piont links. The link type of the RSTP is automatically obtained through the duplex state of the interface. If the interface is half-duplex, the link type is the shared port . If it is full-duplex, it is point2point . R3#show ip bgp DMZ-Link Bw 12500 kbytes 100 Ip route 172.16.0.0 255.255.0.0 192.168.12.1 External EIGRP Ip route 172.16.1.0 255.255.255.224 192.168.12.1 The configuration of R5 is as follows: RIP redistribute default route The PC has obtained the address and viewed dhcp snooping bingding databsae on SW1 : On R10 , the route is redistributed into OSPF . R11 learns 8.8.8.0 through OSPF . On R11 , the route is: 32 bits Deception process ARP Request R4 knows that to go to the destination, it needs to go to AS100 via AS300 to get the purpose. The configuration on R3 is as follows: During the migration, the router running DUAL AS can establish EBGP with the external AS using both the primary AS and the secondary AS. Sw1(config-if-range)#no ip address *>i For more detailed BGP state machine and neighbor relationship establishment process, please see the note document: " BGP State Machine and Neighbor Relationship Establishment Process" Matching with the detailed route 172.16.32.0/24 , so eventually these two routes will be filtered out, which is inconsistent with our needs. In fact, this is the drawback of using a standard ACL to match the route, you can only match the network number of the route, and can not further match the prefix of the route. Whether the MAC correspondence is legal Configuration and implementation The same prefix is ​​obtained through different protocols, first than AD , and later than metric Aggregate-address summary address summary-only When a BGP route is sent from the group members of the cluster to the RR , RR Neighbor 3.3.3.3 route-reflector-client Interface fast0/0 * i100.0.1.0/24 100 i or Bgp cluster-id 222.222.222.222 : Disabled When a BGP route is sent from the group members of the cluster to the RR , RR Sw(config-vlan)#private-vlan primary ^$ And SW3 on the same case ? The default is 6 update cycles, which is 180s . The route entry tag when an entry with a larger hop count is received Route-map nat3 permit 10 match ip address 2 match interface serial0/1 Community value (route), then how to write it? If you directly match no-export , it will match with 11.11.11.0 , so you should use the exact-match keyword. If configured on R3 as follows: In CEF , there are two main types of load balancing, based on messages and based on purpose. Not advertised to any peer 200 100 The VLAN ID , which is 12 bits long, indicates the VLAN to which the frame belongs . In VRP , the configurable VLAN ID ranges from 1 to 4094 . In the port field of the circuit-ID suboption, the port numbers start at 3. That is to say, in this field, the port number is from 3 , the first port number is 3 , and so on. For example, a 24- port switch with an SFP slot , port3 is fast x/0/1 , port4 is fast x/0/2 , and so on, port 27 is the x/0/1 port of the sfq module . Where x is the stack member number. 0xFFFF 2 Neighbor 5.5.5.5 update-source Loopback0 no auto-summary Ip rip triggered SA sends the original switch MAC of the frame R8 to re-advertise 8.8.8.0 into the BGP , has spread to R10 , the R10 on the route AS_PATH is 98? , Switch(config)# vlan 255 Switch(config)# interface fast0/15 Switch(config-if)# switchport mode trunk Switch(config)# interface vlan 10 3.3.3.3 Origin IGP, metric 0, localpref 100, valid, internal If both commands are closed: Not advertised to any peer 100 100 i / / Used to match the BGP neighbors passed to my summary route , here is the IP of R4 2 1. where 3 means that my own network of Weight No-export Path Configuration example: ? Port-Security supports nonegotiating trunk interface Ip helper-address 192.168.100.1 Fast switching is superior to process switching, it uses a route cache ( route cache ) for storing information about a stream of data (Flow) specific information , DHCP configuration manual binding to read bindings from the network The meaning of this command here is that only 1.1.1.0 is allowed to go out of the route redistributed from the RIP routing protocol (to OSPF , there is no direction, as long as the interface is running OSPF ) No synchronization Connectionless data transfer service with acknowledgment. Now, we have to go through the calculations to get a summary of the segments that are just "inclusive". R3 is added as follows: //Get out a summary route instead of the default route The shorter the AS-Path, the higher the priority. Verify the value of experiment 1 ORIGINATOR_ID It can be activated in interface mode or in global mode, which is different. FastEthernet0/0 3.3.3.3 DMZ-Link Bw can only configure single-hop EBGP neighbors on this router. Note: Using the policy to modify AS_PATH can only be performed on its EBGP neighbors on the BGP router , because AS_PATH is only in the AS. We can use the ip route-cache command , is enabled on the interface fast switching show ip cache to check the fast switching -related information . 2 : RIP-2 ; TblVer InQ OutQ Up/Down State/PfxRcd We restore the experimental environment to the basic configuration: BGP neighbor relationships are as follows Represents a range. Matches only one of the characters contained in the range. You can also configure DAI to discard the Ethernet frame source MAC and ARP body in the MAC illegal inconsistent ARP . This is followed by a further introduction. Convergence comparison between 802.1D and RSTP Vlan 10 Configure BPDUs ! Optional Match ip address prefix-list 100 set extcommunity cost 1 10 to sum up We will ping 1.1.1.2 repeat 1 size 1500 , we will find that R1 directly sends an ICMP packet, no fragmentation, the message is as follows: Administrative Distance (AD) 6 R1(config-router)#summary-address 10.0.0.0 255.0.0.0 tag ? Path Test purpose: VLAN information transfer 802.1D situation: 100 100 ? Root port: The interface that receives the optimal BPDU is the root port. This is the closest ( cost minimum) interface to Root . Neighbor 5.5.5.5 update-source Loopback0 The static manually configured security address on the interface will not be converted to a sticky mac address. The next hop of 1.1.1.0/24 , because the AD value of OSPF is better than RIP . OSPF redistributes routes to RIP : R1 BEGIN The above command only re-advertises OSPF internal routes and E1 routes into BGP. BGP router identifier 10.1.13.3, local AS number 345 The default violation is shutdown . If it is protect , then the penalty will be gentle, for illegal data frames (such as the source of the data frame) No need to connect directly. Only TCP connectivity is required. Dynamic routing protocol port number or protocol number Switchport port-security maximum 1 vlan 10,20,30 !! can associate multiple VLANs An important improvement in RSTP is the rapid transition of ports. The traditional STP algorithm needs to go through several timers before transitioning an interface to the forwarding state. In order to get a fast convergence of the network, we may adjust the timer, but this method may affect the stability of the network. AS number . 2B , but with the network development, . 2B is not enough,cisco ccnp 300-135 topology, so now expanded to 4 Ge B router bgp? You can view (Note: only available in certain IOS supported under version) Neighbor 10.1.12.2 capability orf prefix-list receive Process exchange For dynamic address allocation Next Hop 5.5.5.5 R3 , R4 running the OSPF , the R3 on each can learn from the R1 and R2 of looback A frame whose type field has a value of 0800 represents an IP protocol frame. 0 ? ? Switch(config-if)# switchport access vlan 10 Acl-match matchlog —Logs packets based on the DAI ACL configuration. If you specify the RIPv2 manual summary If R1 starts auto-summary and introduces 10.1.1.0/24 in the way of re-distribution direct connection , the subnet will be automatically summarized to R2. DAI 's work depends on DHCP snooping When the RR receives a route from an EBGP neighbor and passes it to the client or non- client , CLUSTER_LIST is not created . IP For the next hop and route tag, see Volume I, page 189 . Match ip address 1 ? R2#sh ip b 100.100.100.0 Neighbor 4.4.4.4 ebgp-multihop 4 Port ID of the BPDU sending bridge (priority + port number) When the interface is up/down , all dynamically learned MAC address entries will be cleared. The statically configured secure address entries remain. 4.3.1 improvements 35 100 i R3 configuration is as follows Route . 1 : the AS_PATH : 100 the MED : 200 is External RouterID : 1.1.1.1 If RP2 matching route exists in the BGP table, RP2 is advertised ; if RP2 hangs, RP1 is advertised. Port-security does not support the destination interface of SPAN *>i100.0.1.0/24 Will be reflected to other clients, non-clients and EBGP neighbors. DHCP overview ? Sw(config-vlan)#private-vlan isolated RR self-originated route byte CASE2 : 0 100 0 100 i Max age Experiment 1 Supplementary] When the same AS in the BGP router A introduces a route, A router transmitted the route to its IBGP neighbors B , has been abbreviation Metric =0 Obviously this method is too poorly scalable. Router bgp 200 The prefix list contains the serial number, matching from the smallest Switch(config)# vtp domain cisco In this step, we run the BGP protocol on the above basis to complete the establishment of basic BGP neighbor relationships: s> 172.16.10.0/24 meaning 2 Route matching tool When the following conditions occur, activation of punishment ( Violation ): Configure no switchport ( routed port ) Layer 3 interface When deploying the campus network, we often have the following special requirements for switches: Local origin In R4 connected R2 interfaces capture found update package 11.11.11.0 attribute prefix is carried in the AS_PATH , content of AS 1 command Interface fa1/0 The LP field is all there, but it will assign a default value to this route locally, which is 100 , and then pass it to its own IBGP. Several problems with VTP / / Set the interface mode to Trunk mode Further, the summary is transmitted to the route D after, D will continue to B to pass, and as summarized route from C , thus reaching D of AS400 RC and RA are separated by RB . In this case, EBGP runs through a non- BGP router by using the configurable " multi-hop EBGP" feature . In other words, RB can not support BGP , and the configuration is as follows ( RA ) BGP supports MD5 authentication. To enable MD5 authentication on the TCP connection between BGP peers , use the following command: Therefore than MED , 2 of MED small, 2 is the best path There are already many arp firewalls on the market that can be recognized. Of course, there are some simple methods, such as arp-a to see if the MAC is correct. Or catch a bag and so on. PVST+ has been improved in this respect. PerVLAN means that a VLAN corresponds to a spanning tree. In this way, the switch will calculate the spanning tree based on the VLAN . We can adjust the priority and other related parameters by using a separate VLAN spanning tree, thus affecting Spanning tree calculations ultimately achieve reasonable link bandwidth utilization. For example, in the above figure, there are two VLANs , 10 and 20 on the intranet . Let SW1 become the primary root of VLAN10 (the lowest priority of the whole network switch), SW2 becomes the secondary root of VLAN10 , and SW3 has the highest priority, so we will BLOCK off. SW3 is connected to the upper port of SW3 . In contrast, VLAN 20 is also the most specific adjustment. In this way, the user of VLAN 10 will go out to the left link, the user of VLAN 20 will go to the right, and the link is properly used to achieve load balancing.