ccnp tshoot lab equipment

ccnp tshoot lab equipment

Summarized as follows: Not used (set to all 0s ) Optional delivery 8 Rl , R2 , R3 using LOOPBACK neighbor relationship with the address of 1.1.1.1 , 2.2.2.2 , 3.3.3.3 , running OSPF such Path Vlan 100 PBR Case Switchport trunk encapsulation ? switchport mode trukn switchport nonegotiate ? Redis static route-map test 10.1.23.3 from 10.1.23.3 (3.3.3.3) Policy-list feature Configuration command, ARP packets permitted or denied by the ACL are logged. Access-list 1 permit any route-map PBR permit 10 match ip address 1 Use clear port-security dynamic command to clear all port-security interface by dynamically learned secure address entry using clear port-security sticky command to clear all sticky secure address entries 0 ? *>i100.0.2.0/24 Switch(config)# spanning-tree [ vlan vlan-id ] hello-time sec Switch(config)# spanning-tree [ vlan vlan-id ] forward-time sec Switch(config)# spanning-tree [ vlan vlan-id ] Max-age sec Other configuration ? Ip rip triggered Refcount 6 Ip route 0.0.0.0 0.0.0.0 192.168.23.3 Routing entry for 192.168.1.0/24 Both R1 and R2 inject 100.0.1.0 and 100.0.2.0 into BGP using network . We look R5 are BGP table: Simplify the synchronization of VLAN information bases in large campus networks (same VTP management domain) This environment is relatively simple, PC and DHCP server in the same VLAN , I mainly want to confirm that the ordinary switch pair is carried Ip prefix-list 1 permit 11.11.11.0/24 route-map test deny 10 BGP is designed to AS transfer routes between, so it is actually a hop AS . Network 192.168.20.0 0.0.0.255 area 1 On: channel member without negotiation ( no protocol ) OSPF redistributes into BGP Match ip add pre 1 R2(config-router)# distribute-list 1 in fa0/0 This command can change the properties of the aggregation route (note, only for the summary route, not for the details). AS_PATH several commands Packets with destination addresses that do not exist at the beginning of 192.168 are discarded directly. Normal traffic on other subnets of the 192.168 intranet will be forwarded according to the longest matching principle. Of course, it is ok to filter the prefix list in the in direction on R2 . If the route is learned from other neighbors, the default value (locally the route) is 0. This is the typical recursive route of BGP . The next hop of the 3.3.3.0 route on R1 is 2.2.2.2 , further recursive 2.2.2.2 , and the associated outbound interface S0/0. C 1.1.1.0 is directly connected, Loopback0 2.0.0.0/32 is subnetted, 1 subnets Local-as As mentioned above, a route is allowed to carry multiple community values ​​to form a community list. If you want to delete one or several community values, for example, Case: Double Exit NAT : Disabled The decision process of BGP is to use the local routing policy for the routes in ajd-RIBs-IN , and put the selected or modified routes into Loc-RIB and 100 i Host address. Routing VS. Switched Campus Network Architecture Define multiple serial numbers under route-map . The serial number has a priority order when performing matching actions. External If the static keyword is used , it means that the ARP ACLs enable the implicit deny any mechanism. That is, if ARP packets and ARP ACLs are used. Switch(config)# interface fast 0/1 Switch(config-if)# no switchport If it is access mode, the vlan must be the same. VLAN IDs of the allowed VLANs when this port is in trunking mode add VLANs to the current list Administrative distance problem Configure the SVI interface corresponding to the VLAN . Establish IBGP full interconnection and close the synchronization mechanism. This method is basically used at present. But this method has a flaw, that is, if IBGP Establish BGP neighbors R2(config)# access-list 1 deny 192.168.3.0 R2(config)# access-list 1 permit any R2(config)# router rip Neighbor 10.1.23.3 remote-as 300 neighbor 10.1.23.3 route-map test out R1 Next Hop Next hop 10.1.12.2, FastEthernet0/0 valid adjacency The PC has obtained the address and viewed dhcp snooping bingding databsae on SW1 : Router bgp 300 The longest match There is no match to a or c or t the end of the content If you increase the switchport port-security aging static command, the aging time of the statically configured secure address also starts. SW1#sh int trunk Set community no-advertise route-map setCommu permit 10 router bgp 300 Switchport mode access switchport port-security When deploying the campus network, we often have the following special requirements for switches: Note that at this time, the routing table is used to recursively find the route to 10.1.12.2 , so there must be reachable routes in the routing table. Configure ARP packet rate limit CA004FEC0008CA014FEC00080800 * i100.0.1.0/24 EtherChannel RIP-1 compatibility RIPv2 sends updates in the form of broadcasts, enabling V1 to receive 100 Port-security supports 802.1Q tunnel interface Floating static route 23 The packet contains a maximum of 25 routing entries. Instead of choosing R3 ? This is determined according to the routing principle of BGP (see the BGP document of Red Tea Three Cups Zhu SIR ). Here, the final impact of routing is such a rule "preferred routing from EBGP neighbors (relative to IBGP neighbors) "), R2 is the EBGP neighbor of R5 , so it is preferred. Route-map usage scenario !! The red font part is the number of hops to be increased Metric Send Keepalive bag The route for no-export cannot be more or less. 100 i RIPng 802.1D situation: Abc+d Last update from 192.168.34.3 on Serial0/1, 00:09:32 ago Routing Descriptor Blocks: When the network is normal, the data is forced to go ISP1 , ping 100 remote network data to ISP1 3 jumps. Version Match abd , abcd , abccd , abcccd, etc. Fa0/22 1-4094 Determine if the frame has a VLAN tag . Match community 11 The above match statement is used to match the neighbor IP that sent the summary route . If you specify a copy attributes option, is inject the specific routes will inherit the path attribute of the aggregated route, or breakdown will be as locally generated routes. In this step, we run the BGP protocol on the above basis to complete the establishment of basic BGP neighbor relationships: RIPv1 , v2 Maximum route entry The MAC address pool of the CISCO CATALYST switch can hold up to 1024 addresses. The model of the switch determines the number of available MAC addresses . Not all Catalyst switches can support such multiple MAC addresses. Port role: Name server Synchronize only VLAN information 5.5.5.5 Management distance problem 43 Next turn on DAI on SW1 : Fa0/20 Router(config) router rip ? Is 2 , 3 with AS the first comparison, 2 is MED small it is preferable; 2 with a further comparison, one of external routes it is preferably ( MED not compare) Configuration BGP federal 25 DTP enables trunk negotiation between switches Ip dhcp snooping binding mac-address vlan vlan-id ip-address interface interface-id expiry seconds The BGP AS is planned as follows: R1 , R2 , and R3 each have a network loopback route in the BGP process (without any policy); route summarization is performed on R4 and R5 respectively: Length of the suboption type Forwarder 1 State is Active Ip dhcp snooping [Case] ​​routing flipping Neighbor 10.1.23.3 send-community neighbor 10.1.23.3 route-map test out Router bgp 200 bgp dmzlink-bw 10.1.13.1 4 3 Switch(config)# vlan 20 Origin IGP, metric 0, localpref 100, valid, external, atomic-aggregate , best Aa:nn additive internet local-AS After SW3 receives this message, it knows that SW2 no longer has vlan10 users, and no longer needs vlan10 traffic, so it will trim vlan10 on its own FA0/22 port : Port Vlans in spanning tree forwarding state and not pruned RSTP port status Metric We look at the above chart,ccnp tshoot lab equipment, two switches trunk both ends of the native vlan is not the same, what's the problem? First, the vlan2 communication at both ends is certainly no problem, but the communication between vlan3 and vlan4 has a problem . The data frame sent by the user of the left vlan3 goes out of the trunk from the left switch , and is not tagged, but these data frames are sent to the right switch. It will think that these data frames belong to vlan4 , which is a problem.