ccnp switch brain dump

ccnp switch brain dump

The Client does not know its own Client , so the RR itself can also become a client of others. Layer 3 interface: routing interface ( no swithport or called routed port ), SVI interface Origin codes: i - IGP, e - EGP, ? - incomplete Vlan 100 Note inconsistent with err-diasble difference is, ERR-disable will disable off the entire interface, and inconsistentport is for a particular VLAN 's. * R4#sh ip bgp In R1 to the 1.1.1.0 and 1.1.2.0 do a summary, as 1.0.0.0/8 , if coupled summary-only keyword, two details will be suppressed by inhibiting a bar if you want to cancel the details of a neighbor, Such as 1.1.1.0 , then Configure the switch to verify that the source MAC address in a DHCP packet received on untrusted ports matches the client hardware address in the packet. The default is to verify that the source MAC address matches the client hardware address in the packet. Advance R1(config-router)# network 12.12.12.0 mask 255.255.255.0 R1(config-router)# distribute-list prefix 11 out 0.0.0.0 In the output of Show and more , you can use the pipe character | with a regular expression to filter the output. Network Knowledge review Router bgp 64512 Route 2 : AS_PATH : 100 Maximum life The above four types are distinguished by the type code in the AS_PATH attribute. For the two federally unique AS_PATH types, please refer to the “Federal” section of this document for details. How do you understand the first two AS_PATHs ? The Auto interface is willing to be a trunk . If the adjacency interface is set to trunk or desirable , the interface becomes a trunk. [Experiment 1 ] There is a main class route; there is a default route, and the main class route is taken. A single RR may have a single point of failure problem, so from the perspective of redundancy, there can be multiple RRs in a cluster , Client and each Only vlan1 and vlan10 ? Since the configuration of the first experiment Rl , therefore R2 Flights 13 segments, it is preferable that Rl , this time in R2 a clear click BGP neighbor Rl , and the Rl BGP connection DOWN , R2 Flights 13 routes and preferably the R3 , After R2 and R1 restore the BGP connection and receive the 13 route update of R1 again ,ccnp switch brain dump, R2 is still preferred to R3. In this step, we run the BGP protocol on the above basis to complete the establishment of basic BGP neighbor relationships: When LINK1 DOWN is dropped, SW2 will not receive the BPDU from ROOT , so it considers its root and starts to SW3. The Protected port feature cannot be configured across switches: 5.5.5.5 This property may not be supported, but even if it is not supported, the route containing the property should be accepted and passed If the local end has this feature enabled, the next-hop device does not support CDP , then switch to the next next-hop . If there is no next-hop , skip the PBR. Is 6 , then the type is 802 , default ethernet OSPF The certificate contains the password information when it is verified using plain text. 10.1.23.2 The SYSID can also be used as an identifier for a VLAN or an MST instance. For example , the system ID extension of VLAN 100 is 100. or Router bgp 200 300 During the migration, the router running DUAL AS can establish EBGP with the external AS using both the primary AS and the secondary AS. Neighbor IBGP_peers update-source loopback0 neighbor IBGP_peers password cisco Switch(config-if)# ip address 192.168.255.1 255.255.255.0 Between R1 , R2 and Layer 3 switches, it is assumed to be a static routing environment. So now, we hope that users under R3 will flow in the direction indicated by the red dotted arrow when accessing the production server, and will flow in the direction of the blue arrow when accessing the office server. The connection is established in advance and the data is transmitted, and the reliability of the data is guaranteed during the transmission. Origin IGP, metric 0, localpref 100, valid, internal Originator: 1.1.1.1, Cluster list: 4.4.4.4, 3.3.3.3 Destination address: The address of the host or network. R2(config)# router eigrp 100 Switchport mode private-vlan host Neighbor 10.1.23.2 route-map setCommu in The mechanism of proposal agreement is very fast, because they are not limited to any timers. This handshake mechanism will quickly spread to the entire switching network end and can quickly converge when the topology changes. ? *>i100.0.2.0/24 The Control field is composed. Rl , R2 , R3 running the OSPF , R3 routing table is as follows: !! On R1 , Fa0/20 port trimmed only vlan 1 and 10 , because this New and R3 of BGP connections, and is using the AS201 and R3 ( AS300 ) established EBGP neighbor relationship. Acl-match none —Does not log packets that match ACLs. B Neighbor 1.1.1.1 route-reflector-client 10.1.12.1 from 10.1.12.1 (1.1.1.1) Neighbor 10.1.23.3 remote-as 300 neighbor 10.1.23.3 route-map test out * i R3 and R5 both advertise the routes of the same network segment to R4 . If the first eight rules cannot be determined, if R4 is configured: [Experiment 3 ] Cancel detailed route suppression for a specific neighbor Ip helper-address 192.168.100.1 PBR (Policy Routing) All dynamically learned MACs on this interface will be converted to a sticky mac address to form a secure address. Manually configure a secure address on the trunk interface to associate the vlan keyword. If the security address is manually configured on the trunk interface and the vlan keyword is not associated , the security address will be associated with the native vlan of the trunk . Field R3 summarizes the details of R1 and R2 (summary command plus AS_SET keyword), so that the BGP summary route generated by R3 inherits the detailed AS_PATH attribute, and the packet capture on R4 will find the summary route. = 300 {100,200} AS_PATH : look at the results of the capture, found article summary route AS_PATH attribute consists of two parts ( segment ), the value 300 that the segment is RIP re-advertises routes to OSPF : 12 Verify again, instead of detailed routing, use a summary route of ip route 10.0.0.0 255.0.0.0 , the next hop is R3 , the effect is the same as above, also take R3 . Therefore, as long as it is not the default route, as long as there is such a matching route in the routing table, the route is taken preferentially, and the route-map is taken without the route . If both are open Let's look at a simple case of a three-tier exchange deployment: After 10.1.31.0 is passed to R2 , since R2 takes the mask of the receiving interface and finds that 10.1.31.0 has a position of 1 in the host part , the subnet is stored in the routing table and treated as a host route. : 10.1.31.0/32 OSPFpassive-interface neither sends nor receives routing updates, nor does it send HELLO packets. Match community 30 10.1.13.1 Distribute-list 62 SW1#show int trunk Ip route 0.0.0.0 0.0.0.0 null0 router bgp x The configuration of SW1 is as follows: 5.5.5.5 100 One way is to establish a fully interconnected IBGP RFC2082 *end* Ip address 10.1.34.3 255.255.255.0 The associated PC service, that is , the data frame whose source is the MAC , can enter the interface. Ip community-list 11 permit 100:11 1,10,20,30 In TCP/IP , the encapsulation format of Ethernet IP data packets is defined by RFC 894 , and the IP data packet encapsulation of IEEE 802.3 network is encapsulated by RFC. The configuration of R3 is similar. When ISP1 is down, and the interface of GW connected to ISP1 is DOWN , the data of PC accessing 100 network is switched to ISP2. The first 8 bits of the route must match the first 8 bits of 172.0.0.0 , the other bits are not concerned, and the mask must be /8 . Let's take a look at R4. Network consolidation (same protocol or different protocols) Type of data. Comparative principle Establish IBGP full interconnection and close the synchronization mechanism. This method is basically used at present. But this method has a flaw, that is, if IBGP Experiment 1 : Basic experiment The thing we have to do is very simple. These subnets are continuous. It is enough to pick out the first two or three network numbers to calculate: RIP version number: 100 Both of the above commands can be used to adjust the management distance of the routing protocol. The first command, distance ad ip-src , can adjust the management distance for a specific routing update source and a specific routing prefix. For example, I will use an OSPF. Some routes sent to me by the neighbor, the AD value is adjusted to 130 . 90 In 802.1q the native vlan is untagged, using Dot1q switches all unmarked frame is forwarded to the native vlan in the ISL on all data frames, including native vlan encapsulation, so if the package is not received The data frame will be discarded (the ISL does not have the concept of a native VLAN ). !! ISP1 , ISP2 and GW all need to open CDP The main routing table version is injected into the last table version in the main routing table. Activate Port-Security (on the trunk interface) Router bgp 345 Match ip address 1 set metric 20 Strange phenomenon: In the BGP table of R5 , there are only two routes advertised by R2 , and the 100.0 route from R3 is not passed to R5 via R4 . In other words, we expect that AS345 will have redundancy to 100.0 network. Remaining path (through R1 , The third column is empty or i . If it is empty, the route is obtained from the EBGP neighbor. The i indicates that this is the route learned from IBGP . The last column indicates the origin of the BGP routing information. All BGP neighbors TCPsession and BGP neighbor state are reset Neighbor 4.4.4.4 update-source Loopback0 neighbor 10.1.25.2 remote-as 200 Port-security configuration Vlan 100 On the catalyst switch, you can use the portfast keyword to manually configure it. Y Set the channel-group ID By default, only the MED values of BGP routes from the same neighbor AS are compared , that is, if the two routes of the same destination are from different ASs , the MED value comparison is not performed . MED only affects the traffic between directly connected autonomous systems, and does not pass through the AS . The smaller the MED, the higher the priority. Match ip address 1 set metric 10 Store the result of the CRC cyclic redundancy check VTP AS345 in R3 , R4 , R5 running the OSPF . The intra- AS uses IGP to ensure the interworking of internal routes to meet the internal data transmission requirements. It also provides the underlying routing support for IBGP connections. As a transport AS , Transit AS , running IGP can also ensure that BGP routes are in the AS . The delivery, while the validity of BGP routes ( such as the reachability of the NEXT_HOP attribute ) also requires IGP to make a basic guarantee. So, the first step is to complete the configuration of this IGP protocol.