ccnp switch tutorial

ccnp switch tutorial

S uppercase S , stale , indicating expired routes About UDLD Note that the neighbor 1.1.1.1 filter-list x weight yyy command can be used multiple times for a neighbor, that is, set different weights for different routes . But the neighbor 1.1.1.1 filter-list 1 command, in the same neighbor in or out direction, can only be used once, these two commands are very different Is 2 , 3 with AS the first comparison, 2 is MED small it is preferable; 2 with a further comparison, one of external routes it is preferably ( MED not compare) MED attributes for routes published to the federation are retained throughout the federation Send Update package One thing to note here is that ip bgp-community new-format is used to convert the display format of community in CISCO IOS . When using regular expressions in the extended community-list list, the filtering results will vary depending on the format choice. RIPv1 Ip address 192.168.10.254 255.255.255.0 The command distribute-list out works only on the routes being redistributed by the Autonomous System Boundary Routers (ASBRs) into OSPF. It can be applied to external type 2 and external type 1 routes, but not to intra-area and interarea routes. Note that the as-path access-list is also implicitly rejecting all by default. 10.1.12.1 from 10.1.12.1 (1.1.1.1) SW1#show port-security interface f0/1 Abc*d Display BGP tables, for example: ! Optional Unicast update Loopback Loopback interface Sw(config-vlan)#private-vlan community Neighbor 10.1.13.3 remote-as 345 So in fact this is a macro command Origin codes: i - IGP, e - EGP, ? - incomplete After deploying loopguard : Internal BGP Then let's go to R4 and see: R2 re-released the incoming A network segment route and then got up? Then R3 will ignore the route from R1 update. For R3 , go to Apply the configured ARP ACL to the DAI. * i100.0.1.0/24 Address family identifier. When the value is 2 , it indicates the IP protocol. The configuration is as follows: IP The 802.1Q Tag contains 4 fields, which have the following meanings: Configuration command 46 DHCP Snooping Binding Database Background Access-list 2 permit 172.16.20.0 route-map BGP2OSPF permit 10 MTU is the largest transmission unit, and different systems have different settings and understandings for MTU . Origin attribute (priority: IGP > EGP > Incomplete ) Ip prefix-list 1 permit 100.0.1.0/24 Then 1 , 2 are compared first, 2 is preferred (because 2 has a smaller RID ); then 2 is compared with 3 , 2 is external , so 2 is preferred About IP Routing ? Timer bgp 0 0 neighbor never goes down The shorter the AS-Path, the higher the priority. AS_SEQ type is {100 , 200} in this segment is AS_SET type. So AS_SEQ the AS_PATH used to identify the origin of this summary route, it is ordered AS list, in addition AS_SET this AS_PATH type used to identify the details of pre-aggregated After the TCP session is established, both neighbors must send an OPEN message. Both parties use the OPEN message to identify themselves and specify their own BGP running parameters. If the open message is accepted, a keepalive message is sent back for confirmation, and the update message can be sent after confirmation . The OPEN message contains the following: The configuration of R3 is as follows: The rules for BGP next-hop are as follows: *>i Prefix-list After deploying Backbone Fast , SW3 will immediately perform a series of steps to recalculate the root port as soon as it receives the suboptimal BPDU sent by SW2 . SW3 will send an RLQ request from the root port to the root bridge. Basic knowledge point To configure globally, use the command: SW3(config)# spanning-tree portfast bpduguard default , which activates bpduguard on all interfaces that activate the portfast feature : The Permit/deny keyword has a different role in different deployment scenarios. R4 has two BGP neighbors, where R3 is its federated IBGP neighbor and R5 is its federated EBGP neighbor. Mtu 1500 , so it will be fragmented, then on R2 , the two fragments are reorganized. By MED influence route selection Next hop address: The IP address of the interface of the neighboring router that needs to pass to reach the destination . 10 SW2 is the core layer switch, deploying DHCP relay basic configuration Route-map MD5 digest : 0x73 0x52 0x60 0xE7 0x4D 0xA5 0xC7 0x4F 0xCA 0x3D 0x6F 0x1D 0x3F 0x23 0x03 0xBB No synchronization no auto-summary Bgp dampening Switch(config)# vlan 10 Network 11.11.11.0 mask 255.255.255.0 Route summary 23 SW1#show int trunk Consider the case where R2 is RR , and R4 and R5 respectively declare loop Add configuration on SW2 : (global configuration mode) ip dhcp relay information trust-all As a result, R3 updates the BGP route to R4 , and next-hop will be replaced with R3 's loopback interface IP . Origin IGP, localpref 100, valid, external,ccnp switch tutorial, best Community: 100:11 no-export Switch(config-if)# spanning-tree portfast [trunk] R1 RIPv1 Detect the reachability of the next hop, the default is off ? CISCO default MED is 0 , optional non-delivery 1 Dynamic routing protocol port number or protocol number 7 Timer verification Set metric-type internal Network Between R1 and R2 , the original R3 and R4 are updated through a multi-access network, and BGP is run . Features Overview Risk of routing policy configuration loss Switchport port-security maximum 1 vlan 10,20,30 !! can associate multiple VLANs For details on the related fields of the BGP table, see the show section of the BGP Configuration section of this document. Match ip address prefix-list 1 set as-path prepend 100 route-map test permit 20 Use as-path access-list to match routes R1 Local-pref only affects the amount of traffic leaving the AS ( selecting a large LP value ) Epoch 0 Interface f0/3 After Port-Security is activated on the interface , the interface has certain security functions, such as limiting the maximum number of MACs of the interface (connected) , thereby limiting the access host users; or limiting the specific MAC to which the interface is connected . Thereby achieving the restriction of accessing users. Then to perform filtering or limiting actions, you need to have a basis, which is based on the secure address – secure MAC address .