cisco ccnp route 642-902

cisco ccnp route 642-902

After bgp confederation iden 345 configuration, for the federated AS , this AS is not what 64512 , but 345 Sw(config)#interface range fa 0/3-4 Several problems with VTP 100 VTP Operating Mode : Server Maximum VLANs supported locally 1005 13 CAM and TCAM None Through MED affect route choice 18 Origin IGP, metric 0, localpref 100, valid, external, multipath Certification //Get out a summary route instead of the default route Set the interface to nonegotiate and do not send DTP frames. If the configuration is non-negotiated, you must manually configure the interface mode as access. RFC2080 As a result, all three switches exchange VTP packets to inform them that there is a VLAN for accessing users . For VLANs that do not have users locally , they will be automatically trimmed. Let's take a look: Address family identifier. When the value is 2 , it indicates the IP protocol. Cc01.043c.0000 (10.1.1.252) VLAN isolated from each other, the broadcast can not cross VLAN communication, and therefore a different VLAN devices unable to reach between the general, different VLAN need to communicate with each other between the layer 3 device Configuration Example If you try to activate 8021.X on a port-security interface, you will get an error and the 802.1X function will not open. Turn on switch interfaces Port-Security will consume resources, Port-Security detects an incoming interface to each data frame to determine whether the flow method, or if there offenses. When a security interface settings violation to shutdown when the interface is in violation Example 3 of ip community-list (strictly matching community ): ^a.$ Encapsulation Status Path Router bgp 100 Reference material ? 345 ; R3 has a federated IBGP neighbor R4 . Weight It is usually a direct connection because it will look for direct routes. EBGP default TTL is 1 100 i The static manually configured security address on the interface will not be converted to a sticky mac address. 1 R3-R4 ; R4-R5 ; R3-R5 maintains IBGP neighbor relationships and uses their respective LOOPBACK ports as update sources and establishes Active is local Neighbor 10.1.12.1 remote-as 100 Router ospf 100 10.1.34.3 Switch(config)# vlan 20 *Mar 1 00:11:48.043: ICMP: echo reply rcvd, src 2.2.2.2, dst 192.168.123.3 Bgp dampening network redistribute Authentication Local !! Match the exit of the packet Switch, the switch also forwards it with an updated message to all attached LANs for which it is the designated switch. r >i1.1.1.0/24 Neighbor IBGP_peers send-community On R2 : Penalty value: 1000 per swing Router bgp 123 100 i R2 re-advertises the A route, then according to the preemptive rule, R3 will ignore the R1 update about the A route. At the same time, due to the deployment of two-way re-release, R3 will further re-publish the learned A- route back to process 1 . 1 This fulfills the demand. Index If multiple path originating router IDs or router IDs are the same, then the shortest path of the Cluster-List is preferred . Router bgp 64513 no synchronization 100 Request message: You can request the entire routing table or request specific routing information. DNS , WWW , and SMTP servers belong to the same subnet Metric LocPrf Weight 0 100 0 The configured static network path is redistributed into OSPF . In this way, when the intranet user needs to access the Netcom resources, because of the details of the network access, go to OR1 . To access other resources, take the default route to OR2 . Basic 28 Fa0/20 In the federal scope, the member AS number is pushed into the AS_PATH , but not published outside the federation, and the AS_PATH of TYPE3 , 4 is used . CISCO routers have two ways to find the global lookup of routes: classful ( Classful ) lookup mode and classless ( Classless ) lookup mode. 100 i UplinkFast 200 i Multi-hop EBGP Routing Protocols DMZ-Link Bw 193 kbytes Display BGP tables, for example: AS_SEQ type is {100 , 200} in this segment is AS_SET type. So AS_SEQ the AS_PATH used to identify the origin of this summary route, it is ordered AS list, in addition AS_SET this AS_PATH type used to identify the details of pre-aggregated Ip arp inspection vlan {vlan_ID | vlan_range} * >i11.11.11.0/24 Redistribution will only perform re-release actions on routes in the routing table. Address-family ipv4 unicast Set metric-type sets the metric type of the target routing protocol *> 100.0.2.0/24 The next hop of the route advertised by the device is 0.0.0.0) So to rule 12 : if multiple path originating router IDs or router IDs are the same, then the shortest path of the Cluster-List is preferred . With Root Guard Match any single character, including spaces Switch(config)# vlan 255 Switch(config)# interface fast0/15 Switch(config-if)# switchport mode trunk Switch(config)# interface vlan 10 Origin IGP, metric 0, localpref 100, valid, internal 1-4094 Active BGP Identifer ROUTER-ID and OSPF selected routerID consistent manner Distribute-list route-map test in BPDU , then he will send again. Therefore, for 802.1D , the root bridge will send BPDUs to all interfaces continuously . The non-root bridge will receive BPDUs from its own root port and send BPDUs to its designated port . Non-designated ports will not send. BPDU 's will only listen. Neighbor 4.4.4.4 remote-as 345 If there is a tag , it is determined whether the trunk port allows the VLAN frame to enter. Allow the next step, otherwise discard the frame. 300 Match ad , abcd , aaabcd, etc. Used to limit the time that the route staying in the routing table has not been updated. Detailed rules ( FraIue check sequence ) Public 8 If the static keyword is not used , the ARP packet will be matched by the ARP ACL . If there is no match, the DHCP snooping database security entry will be checked again. If there is a valid entry, the data will be released. If not, discard it. Neighbor 2.2.2.2 peer-group IBGP_peers R2(config-router)# redistribute os 1 metric 100000 100 255 1 1500 17:57:27 A strange phenomenon has appeared. It seems that R4 does not reflect the route from R5 to R3 . Why? In theory, the RR will learn from non- client of IBGP neighbor to route reflection to their Client , but it is clear, in this experiment, R4 and did not learn from R5 route reflection to their Client . Using route reflector 23 Note that the relay device needs to enable the DHCP service: service dhcp aggregate-address 192.168.0.0 255.255.0.0 as-set after, R1 can only learn to 2.0 , the summary route are rejected, the reason is 1.0 carries no-adver of Community Community , when the summary route plus the as-set keyword after Will inherit its community , so the summary route also carries no-adver , this time You can use show ip bgp regexp to check the results of the configured regular expression. Vlans allowed on trunk Interface f0/3 Address Resolution Protocol Access-list 2 permit 2.2.2.0 Network Layer Reachable Information ( NLRI ) One or more (length, prefix) binary groups used to advertise IP address prefixes and prefix lengths The default is 180s , which can also be called expiration timer time limit timer or timeout timer. Then IOS will automatically change the command to Set ip next-hop ip1 ip2 ...... Of course, it is ok to filter the prefix list in the in direction on R2 . Path Metric Weight 3.3.3.3 Ip address 100.0.1.1 255.255.255.0 Note that with route-map , the last is implicitly killing any , while the suppress-map is different. Show ip bgp on R3 Modify the default AD value of BGP . The command is as follows: There can only be one Isolate vlan in a primary VLAN. *>i100.0.2.0/24 Sent from the root bridge BPDU number of seconds after (this BPDU survived for how long), each through a bridge are minus 1 , so it is essentially the number of hops to reach the root bridge. The two networks of network 100.0 on R1 and R2 enter BGP , then the BGP table on R4 : Load balancing actions can be based on MAC , port, IP (source IP ,cisco ccnp route 642-902, destination IP, or both) Port-Security violation penalties Authenticate Offset-list 1 out 1 serial 0/0 Neighbor 3.3.3.3 remote-as 345 BVI Bridge-Group Virtual Interface Redirect time 600 sec, forwarder time-out 14400 sec Preemption disabled Limit of inhibition: 2000 CASE1 : Sh ip bgp neighbors {address} routes The following figure is the open message content of the negotiation capability parameter (note the ORF part) 8.1 Overview 91 This idea has been applied to dynamic routing protocols such as OSPF . Careful children's shoes will find that after you deploy route summarization in OSPF , it will automatically generate a summary route pointing to null0 locally . The reason is explained above. the same. Set community none router bgp 3 BGP has three management distances, 200 learned from IBGP and 20 learned from EBGP . This is because the design concept of BGP works. If the MED of the received or generated route is empty , set the MED to 0 when advertising to the IBGP Peer . Sw(config-vlan)#private-vlan isolated Type echo protocol ipIcmpEcho 10.1.1.2 source-ipaddr 10.1.1.1 frequency 10 LocPrf For R2 , it is now in its own process 1 , while learning the route of this OE2 from R1 and R3 , how will it choose? Review Flag field LSB = TC MSB = TCA Router bgp 1234 If you turn on always-compare-med When a data frame is sent from the Hybrid port, the switch determines whether the attribute of the VLAN on the port is Untag or Tag . If it is Untag , first strip the VLAN tag of the frame and then send it ; if it is a Tag , send the frame directly. *>i100.0.2.0/24 The configuration commands are as follows: If the access layer switch is connected to a single link, there is a single point failure of the single link failure. If any aggregation device is down, it will directly cause the downlink access network to hang. Neighbor management Ip route 0.0.0.0 0.0.0.0 null0 AD Router bgp 100 Although the network devices are in the same subnet, they belong to different pVlans , and communication between pVlans must be implemented through the default gateway. R8 to re-advertise 8.8.8.0 into the BGP , has spread to R10 , the R10 on the route AS_PATH is 98? , 100 Ip address 10.1.45.5 255.255.255.0 192.168.1.0 the OSPF routing but will be re-injected into the RIP (because we deploy a two-way re-release), this is the route Feedback , the route was filling back. Origin IGP, metric 0, localpref 100, valid, external, atomic-aggregate , best DHCP overview Neighbor 10.1.23.3 dmzlink-bw Bgp inject-map map1 exist-map map2 [copy attributes] On R1 , ip route 1.0.0.0 255.0.0.0 null 0 then ip defaut-network 1.0.0.0 , then R2R3 will learn the default route Half-life: 15 minutes *Mar 1 00:11:48.043: ICMP: echo reply rcvd, src 2.2.2.2, dst 192.168.123.3 Fa0/20 1,10 command Switch(config-if)# spanning-tree portfast [trunk] Associate route-map when route is re-published Activates self-recovery of the err-disable interface due to arp-inspection violations . UPDATE message B 3.3.3.0 [200/0] via 2.2.2.2, 00:03:01 EGP Case: Double Exit NAT At the same time, R4 also received the 100.0 route introduced by R2 , but it was not passed to R3 . This is the principle of horizontal splitting of IBGP : " BGP routers will not pass IBGP to him and pass it to other IBGP neighbors." //The default community is not sent, so this command must be configured basic configuration The next hop of the A segment becomes R4 , which results in a suboptimal path. Also, on R3 , the re-release of process 1 to process 2 fails. Path Redis ospf 1 route-map test This property may not be supported, but even if it is not supported, the route containing the property should be accepted and passed Metric s> 172.16.10.0/24 ! Neighbor R2 unsuppress-map test R* 0.0.0.0/0 [120/1] via 192.168.12.1, 00:00:03, Serial0/0 *Mar 4 07:02:23.473: DHCPD: relay information option exists, but giaddr is zero. / / Set the interface mode to Trunk mode 0 00:04:30 Sw(config)#vlan 202 Device ID Both SW1 and SW2 can learn, and three-year-olds can do it. Ip route 192.168.1.0 255.255.255.0 172.16.12.1 Experiment 1 * i100.0.2.0/24 Vlan 10 Combine object tracking to detect the reachability of a remote device (or IP ) R3#show ip bgp summary {100,200} i OSPF redistributes routes to RIP : 3 / / There is a S entry in the routing table 3.3.3.3 Based on agreement ? Network 11.11.11.0 mask 255.255.255.0 In 802.1q the native vlan is untagged, using Dot1q switches all unmarked frame is forwarded to the native vlan in the ISL on all data frames, including native vlan encapsulation, so if the package is not received The data frame will be discarded (the ISL does not have the concept of a native VLAN ). 0-65535 ( 0x00000000-0x0000FFFF ) and 4294901760-429496729502710046 R1(config-route-map)# match ip address prefix-list list1 Switchport mode private-vlan promiscuous Switchport private-vlan mapping add 100 101 Configuration example: Version FastEthernet0/0 By modifying the weight to influence the routing decision Match ip address Windows system), at the same time reply a Gratuitous ARP response to inform the peer that there is a duplicate IP address. C 192.168.12.0/24 is directly connected, Serial0/0 1.0.0.0/24 is subnetted, 1 subnets Origin IGP, metric 0, localpref 100, valid, internal Local DHCP client broadcasts DHCP request The frame structure formed by the MAC sublayer is mentioned in the introduction above , including IEEE802.3 frames and ETHERNET_II frames. Active is 10.1.1.252 (primary), weighting 100 (expires in 7.028 sec) Arp replies sent: 1 ICMP redirect BGP routing table entry for 100.100.100.0/24, version 5 Paths: (2 available, best #1, table Default-IP-Routing-Table) Multipath: eBGP RIP version number: Experiment 3: Weighted extension The type parameter in the above command is used to indicate the hardware type of this hardware address. If type is 1 , the type is ethernet , if type Keepalive package. AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd AS number . 2B , but with the network development, . 2B is not enough, so now expanded to 4 Ge B router bgp? You can view (Note: only available in certain IOS supported under version) Otherwise the flag field is obtained by some calculation (as part of the verification process) Neighbor 4.4.4.4 route-map LP out The LP field is all there, but it will assign a default value to this route locally, which is 100 , and then pass it to its own IBGP. Fa0/20 1,10 None Message age LP takes the maximum value of LP in the detailed routing Encapsulation Status RIPv1 29 The default native vlan is vlan 1 Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, r RIB-failure, S Stale About IP Routing 5 2 : Reponse message, send all or part of its routing information, a Response Port Verify the role of the match interface 1 We restore the experimental environment to the basic configuration: BGP neighbor relationships are as follows The standard ACL active part and destination part use the source matching route prefix and use the destination part matching route mask. Switchport access vlan 10 interface fast0/24 Configure BPDUs ? Match ip add pre 1 201 200 100 Ip local policy route-map x None AS does not compare the MED values. In other words, for multiple paths, the MED is compared only if the first AS in AS_SEQUENCE is the same ; any leading AS_CONFED_SEQUENCE will be ignored. MED only affects traffic between directly connected autonomous systems, and does not pass across ASs. learner PS : At present, the Ethernet frames we use are basically Ethernet II frames. Often used with the portfast feature on the interface for connecting to the host The src-mac detects the received ARP packet. The source MAC address of the Ethernet pillow is the same as the sender MAC address in the ARP body . This verification action is performed in both the ARP request and the response message. RFC1723 10.1.25.2 PROTOCOL 100 Delete a specific community value in the community list neighbor to mean), BGP The network command, only the local routing loaded into BGP one way process. *Mar 1 00:11:47.887: ICMP: redirect rcvd from 192.168.123.1- for 2.2.2.2 use gw 192.168.123.2 Path Aggregate-address 172.16.0.0 255.255.0.0 as-set summary-only advertise-map test TYPE Sourced in sev-epoch 1 Encap length 14 Example 2 : We look at the above picture, the external detail route 172.16.32.0 – 39.0/24 , and the summary route 32.0/21 are introduced into OSPF by R1 , now !! Two ACLs are created above to match the routes that need to be treated differently. Policy deployment in BGP Display has not been loaded into the RIB in the BGP routing, and why not loaded When LINK1 DOWN is dropped, SW2 will not receive the BPDU from ROOT , so it considers its root and starts to SW3. 16 bits The requirements, methods and tools for implementing data access path control are often very many. If the basic elements such as IP and VLAN in the early stage of the network are very scientific and reasonable, then it is easier and more diverse to deploy in the strategy. This chapter does not discuss the various path control tools in detail. Just a few common tools and methods are discussed. In fact, using the tools learned in the past , such as route-map, etc.