Simple MPLS VPN LAB

Hi,
good lab to practicec from gns3 vault, good example which allow us to understand about VRF technology, the reason i'm doing this lab from this url (http://gns3vault.com/MPLS/basic-mpls-vpn.html) is because to understand clearly while i'm reading about CEF FIB of MPLS. Enjoy!

the main configs from SP1(or)SP3 are this: these two routers were configured almost the same to each other as the PE routers.

The router SP2 does not need to configure the BGP and its just carry the packets via MPLS which act as a pure LSR.

SP1#sh running-config | sec vrf

ip vrf KC

 rd 100:1

 route-target export 1:100

 route-target import 1:100

 ip vrf forwarding KC

 address-family ipv4 vrf KC

  redistribute bgp 8 metric 64000 1000 255 1 1500

  network 192.168.12.0

  no auto-summary

  autonomous-system 100

 address-family ipv4 vrf KC

  redistribute eigrp 100

  no synchronization

SP1#

SP1#sh running-config | sec bgp

  redistribute bgp 8 metric 64000 1000 255 1 1500

router bgp 8

 no synchronization

 bgp log-neighbor-changes

 neighbor 4.4.4.4 remote-as 8

 neighbor 4.4.4.4 update-source Loopback0

 no auto-summary

 !

 address-family vpnv4

  neighbor 4.4.4.4 activate

  neighbor 4.4.4.4 send-community both

 exit-address-family

 !

 address-family ipv4 vrf KC

  redistribute eigrp 100

  no synchronization

 exit-address-family

SP1#

SP1#sh running-config | sec eigrp

router eigrp 1

 no auto-summary

 !

 address-family ipv4 vrf KC

  redistribute bgp 8 metric 64000 1000 255 1 1500

  network 192.168.12.0

  no auto-summary

  autonomous-system 100

 exit-address-family

  redistribute eigrp 100

SP1#

SP1#sh ip route vrf KC 5.5.5.5
Routing entry for 5.5.5.5/32
  Known via "bgp 8", distance 200, metric 409600, type internal
  Redistributing via eigrp 100
  Advertised by eigrp 100 metric 64000 1000 255 1 1500
  Last update from 4.4.4.4 00:01:49 ago
  Routing Descriptor Blocks:
  * 4.4.4.4 (Default-IP-Routing-Table), from 4.4.4.4, 00:01:49 ago
      Route metric is 409600, traffic share count is 1
      AS Hops 0

Customer has completely no idea how their packet are travel through the provider's network but their goal simply is to connect their Branch and HQ. Their simple configs from HQ and Branch routers as follow.

HQ#sh run | sec eigrp

router eigrp 100

 network 1.0.0.0

 network 192.168.12.0

 no auto-summary

HQ#

Branch#sh run | sec eigrp

router eigrp 100

 network 5.0.0.0

 network 192.168.45.0

 no auto-summary

Branch#

But now they can connect each other through provider's network, successfully. 

HQ#ping 192.168.45.5

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.168.45.5, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 56/73/88 ms

HQ#traceroute 192.168.45.5

Type escape sequence to abort.

Tracing the route to 192.168.45.5

  1 192.168.12.2 24 msec 24 msec 12 msec

  2 192.168.23.3 [MPLS: Labels 16/19 Exp 0] 48 msec 56 msec 68 msec

  3 192.168.45.4 60 msec 44 msec 40 msec

  4 192.168.45.5 72 msec *  92 msec

HQ#

Branch#ping 1.1.1.1

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 1.1.1.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 52/83/104 ms

Branch#traceroute 1.1.1.1

Type escape sequence to abort.

Tracing the route to 1.1.1.1

  1 192.168.45.4 20 msec 48 msec 16 msec

  2 192.168.34.3 [MPLS: Labels 17/20 Exp 0] 68 msec 68 msec 72 msec

  3 192.168.12.2 [MPLS: Label 20 Exp 0] 52 msec 68 msec 52 msec

  4 192.168.12.1 72 msec *  100 msec

Branch#

KEY TOPIC: (copy from CCIE BOOK) Cisco routers can be confiugred to disable MPLS TTL propagation. When disabled, the ingress E-LSR set the MPLS header's TTL field to 255, and the egress E-LSR leaves the original IP header's TL field unchanged. As a result, the entire MPLS network appears to be a single router hop from a TTL perspective, and the routers inside the MPLS network are not seen from the customer's traceroute command.

I've book for my lab in coming August, but its seem like 80% sure to fail, anyway Goodluck!

CCIE R&S Lab v4.0 Preparation

Wow!
Times flew hmm..

I got a slot to sit CCIE lab in coming August ;)

for now i'm quite busy with IPv6 at work and final exam for my B.sc at school.

I think i'l be free after thin gyan and will start to get 100% emphasis for my lab exam.

there will be only one helper during the exam, this url

http://www.cisco.com/cisco/web/psa/default.html?mode=prod

not excetly like this one, but only the 'product' session, i should start familiar with it now.

My plan is simple,

I can't effort to build a home lab, it can be around 2-3 k $., since the exam itself is 2k, i don't think i want to build a home rack for another 2k.

So, i simply hv to practice using gns3 and try to build small session of each protocols  to test and get used to those commands.

And m planning to cover the official exam topics, one by one, and study according to the blue print.

Mayb, if i need, i might need to use online lab rental.

So, some new topics like, MPLS, QOS, Multicast, and IPv6 might need extra time to read.

Hooo ya! I'm on CCIE mode, let's do it baby!

Cleared all Written Exam!

BGP best path selection attributes process

Women Laugh At Me!

1 - Weight
2 - Local Preference
3 - AS path
4 - Metric

We Love Oranges As Orange Mean Pure Refreshment!

Weight (Highest)

Local Preference (Highest)

Originated Locally

AS Path (Shortest)

Origin (Lowest - IGP < EGP < Incomplete)

MED (Lowest)

EBGP over IBGP

Closest IGP

Oldest

Router ID (Lowest)

IP Address (Lowest)

Anyway, i'l sit my CCIE written in this week.

Basic IP Multicasting for Me, a Beginner-Dummy.

၁၉၈၀ ေလာက္က Mr.Deering ဆိုတဲ႕လူၾကီးက သူ႕ရဲ႕ Phd ေဒါက္တာ Thesis မွာ အသံုးလိုတာနဲ႕ ထြင္လုိက္တယ္

အဓိကကေတာ႕ Application ရဲ႕လိုအပ္ခ်က္အရ Network ေပၚက Destination တခ်ိဳ႕ကိုပဲ Layer 3 Network ေပၚကေန သီးသန္႕ Traffic ေတြပို႕ဖို႕လုိအပ္ေနတယ္။

Broadcast ကေတာ႕ Loud Speaker လိုမ်ိဳး မၾကားခ်င္လို႕တံခါးပိတ္ထားလဲ ၾကားေနရၿပီး Unicast ကေတာ႕ တယ္လီဖုန္းေခၚသလိုေပါ႕

ဆုိေတာ႕ သူ႕က Multicast ကိုထြင္လုိက္တယ္..တကယ္လဲ လိုအပ္ေနတာၾကီးပဲ

Multicast က ေရဒီယိုနဲ႕တူတယ္.. Frequency သိတဲ႕သူေတြပဲ နားေထာင္လုိ႕ရမယ္

၁၉၉၁ မွာ Routing Protocol ေတြရဲ႕ ေျခလွမး္သစ္ Mr.Deering ရဲ႕ ေဒါက္တာ Thesis “Multicast Routing in a Datagram Network” ထြက္လာခဲ႕တယ္။ ဂုရုၾကီးေပါ႕ေလ...

IP-Multicast  သံုးမယ္ဆိုရင္..

Layer 3 Address တခ်ိဳ႕ကို Multicast သီးသန္႕သံုးဖို႕ စရံလုပ္ထားရမယ္

Multicast Address ေတြကို Destination Address ေတြအေနနဲ႕ပဲသံုးမယ္ Source မဟုတ္ဘူး

Multicast traffic ကိုလိုခ်င္တဲ႕ Host ေတြမွာ Multicast Application ကို Multicast Server မွာသံုးထားတဲ႕ Multicast IP Address နဲ႕အတူတူConfigure လုပ္ၿပီး Installေိ္ေadfasdfasfadsfasdfasdfasfasdfasdfas

 လုပ္ထားရမယ္

Host ေတြက Standard Method တစ္ခုကိုသံုးၿပီးေတာ႕ အဲဒီေပးထားတဲ႕ Multicast IP Address ကိုတြက္လိုက္မယ္ဆိုရင္ တူညီတဲ႕ Layer – 2 Mac Address တစ္ခုထြက္လာၾကမယ္။ အဲဒီ L-2 Address ကိုသူတို႕ရဲ႕ NIC မွာ တပ္လုိက္မယ္

Multicast Mechanism အရ Host ေတြကလဲ ကြ်န္ေတာ္တို႕ကေတာ႕ ဒီ Multicast Traffic ဆုိရင္ လိုခ်င္ပါတယ္ဆိုတဲ႕ Message ေတြကို သူတို႕ရသက္ဆိုင္ရာ Router ေတြကို inform လုပ္ထားၿပီးၿပီ

IGMP လို Protocol သံုးထားတဲ႕ Switch ေတြဆိုရင္ ဘယ္ Host ကေတာ႕ ဘယ္ Multicast Traffic ကိုလိုခ်င္တယ္ေနာ္. အဲဒီ Host က ဘယ္ Port မွာေနာ္ ဆိုတာကို Learn လုပ္ထားနွင္႕ၿပီးပါၿပီ။

Router ေတြမွာလဲ Multicast Traffic ေတြသြားရေအာင္ Multicast-Protocol ေတြရွိေနပါၿပီ။ ဥပမာ.MOSPF, PIM-DM လိုမ်ိဳး..

Multicast က scalable ျဖစ္တယ္ အဓိကက bandwidth မစားဘူး Centralize Compuratise system ေတြ Server ေတြ ရဲ႕ uplink consumes မျဖစ္ဘူး.ဥပမာ Unicast မွာ Video Server ကေန 1.5 Mb ရွိတဲ႕Data ကို Host 100 က တျပိဳင္ထဲၾကည္႕ဖို႕အတြက္ Server မွာ 1.5GB uplink လိုတယ္၊ ဟုတ္? Broadcast က်ေတာ႕ တစ္ခါကို 1.5Mb နွုန္းနဲ႕ပဲမလုိခ်င္တဲ႕သူေတြလဲရကုန္မယ္..100 မကဘူး.

Multicast သံုးမယ္ဆိုရင္ Server Uplink 1.5 Mb ထဲနဲ႕ပဲ အဆင္ေျပတယ္ အေယာက္ ၁၀၀ မကဘူး ၁၀၀၀ ၾကည္႕ၾကည္႕..Video Server ကေန Host 1000 အတြက္ 1.5Mb Data Uplink ဆိုအလုပ္ျဖစ္ေနၿပီ

1)    Video Server ကေန Multicast-IP ဥပမာ 255.5.5.5 ပါတဲ႕ Multicast Packet တစ္ခု ပို႕လုိက္တယ္ တစ္ခုထဲေနာ္ဟီး

2)    WAN Router ေတြက Multicast Protocol သံုးၿပီး LAN Router ေတြဆီေရာက္သြားတယ္

3)    Host 100 က Multicast-application Install လုပ္ထားနွင္႕ၿပီ သေဘာက 255.5.5.5 ဆိုရင္လုိခ်င္ပါတယ္ျဖစ္ေနၾကၿပီ  သူတို႕က Multicast IP ကေန L-2 Address ကို Standard Method သံုးၿပီး Calculate လုပ္ၿပီး အဲဒီရလာတဲ႕ L-2 Address ကို သံုးၿပီးေစာင္႕ေနၾကၿပီ

4)    Host ေတြကို ခ်ိတ္ထားတဲ႕ Switch ေတြကလဲ ဘယ္ Port က ဘယ္Host ကေတာ႕ ေစာင္႕ေနတယ္ဆိုတာ သိေနၿပီ

5)    LAN Router ကေန လိုသေလာက္ Packet ကို Copy ပြားၿပီး Ethernet Link ကေန  Switch ေတြဆီကို Forward လုိက္တယ္

6)    အဲဒီ Multicast Packet မွာ L-2 Destination Address ပါတယ္ေလ အဲဒီ Address ေတြက Host ေတြ Calculate ၿပီးတြက္ထားတဲ႕ L-2 Mac address နဲ႕တူတူပဲေလ

7)    အဲဒီ အခ်ိန္က်မွ 101 ေျမာက္ Host က ရုတ္တရက္ သူလဲ လိုခ်င္ပါတယ္ ဆိုရင္ Multicast Group ထဲကို Multicast IP သံုးၿပီး၀င္ပါလိုက္ရံုပဲေလ သူ႕အတြက္ Server Bandwidth ကိုမထိခိုက္သြားနိုင္ပါဘူး

City FM လိုေပါ႕.. Frequency သိရင္ Tune လုိက္ၾကေပါ႕ အသံထြက္လာပါလိမ္႕မယ္။

 Ref: Introduction to IP Multicasting, CCIE Routing and Switching Certification Guide, 4^th Edition.

Practice Make Perfect

let me share this, credit to the original blog, you gonna love this for sure.

http://dans-net.com/TS_mini/

Thanks & regards,

kc

BGP quick set up.

I found this note when i clean my old files, quite helpful.

Step 1. Configure IP address on a loopback interface.
Step 2. Tell BGP on each router to use the loopback ip address as source ip address .
Step 3. Configure the BGP neighbor command on each router to refer to the other router's loopback up address.
Step 4. Make sure each router has ip routes so that they can forward packets to the loopback interface IP address to the other router.

When configure loopback interface as source address, we need to configure eBGP multihop command to increase
the TTL value.

CCIE Journey!

Hi,

Do you guys familiar with sadikhov forum? I got my MCSE from this, LOL.
But, today, they already become a truly supporter for true-certification, but not dumps.
Here is one of a guy sharing his CCIE journey, interesting... after reading his, i'm thinking for mine now. How should I face it, how can i prepare, can i really do it, anyway, i'l go for it.

Link : http://www.sadikhov.com/forum/index.php?/topic/67385-what-i-did-to-pass-the-ccie-lab/

"
Hi after many PM's asking what I did, I have decided to put it here so I don’t have to type it so many times.

First of, I started my CCIE preparations last year about December. I started with Reading the standard books.

Routing TCP/IP vol I & II. I actually did all of my studies off of Vol I first edition and the re-read the 2nd ed when it cam out. I recommend reading the 2nd ed.
I also browsed thru Cisco Lan Switching, but the entire books is based in CAT OS so I ended up going back to my CCNP BCMSN (Cisco press) book. I think it pretty much covered what I needed to know. It is actually a pretty good book.
I used the QOS book (Cisco press) for CCVP. 
I referred to the BGP commands and configuration guide as needed.
I referred to the OSPF commands and configuration guide as needed.
In the last week before my written, I used TestKing.. (yes I used TK, but only after I felt I have a strong background in all of the core topics)
I took and passed my CCIE R&S Written on March 11. 
I bought the CCIE Exam certification guide after I passed the written and read it. It is much more useful it you get it before the written, because it is mostly for the written.

I then played around a little bit on the CCIE Practical studies VOL I until I started my class in June.

On Just 6 I stared a bootcamp in India. I attended Ip Solutions R&S Lab bootcamp in Mumbai India. It lasted for 1 month. Basically I sat in front of a computer with a Full Lab sitting next to me and for 8 hours a day I completed Labs with a CCIE instructor helping me. The class itself was 1 month, but I stayed a little longer, (about 4 more weeks) and utilized the equipment doing Internetwork Experts labs. I really liked them and felt they thought me A LOT. 

CODEwww.ipsol.net


I got back to the states in August and continued to do Internetwork Experts Labs with online rack time. I used Internetwork Experts online labs a few times, but mostly used CODEwww.ccie2be.comas they are cheaper for the time. Their equipment is set up perfectly for the IEWB. 
I made sure I could get thru all of the IEWB labs. I did 1-30 and repeated 1-10. 
In Late August I signed up for an IEWB Mock Lab and did pretty well on it and then I signed up for the CCIE assessor Lab. I did well on it too, so I figured I was ready. 

I sat my lab for my first attempt on Sep 8 and feel I came pretty close, just not close enough.

After that I was pretty discouraged for a while and did not study at all. I was just being lazy but really wanted to continue but did not have my heart in it. I scheduled a trip to Hawaii and for the day after Hawaii, I set up the Heinz Ulm bootcamp. 

So, after my trip to Hawaii, I flew directly to Denver and sat in Class with Heinz Ulm for his Mock Lab bootcamp. October 9-13CODEhttp://www.heinzulm.com/mocklab.php
That ended and I had one week before my Lab Date of October 20. I made a deal with Heinz and utilized his Online Labs until the following Thursday morning. (day before Lab) I used that week to do a few more of his labs and go thru the DOC CD every chance I got to find things I knew I might need to find in the real lab. 

I sat down on Friday, Oct 20 and was pretty confident. I was finished with my IGP and had started BGP before Lunch. When i got back form Lunch, I continued with BGP and moved on to the rest. I had completed my entire Lab with the exception of one security Task I never got to work right. I ended up leaving it alone because I felt it would mess me up in other areas because I never did get it right. I got up to leave about 1 our before time was up, but for some reason came back to my seat to run a few more tests (LUCKILY). I found one thing that was broken from one of the later tasks I did, and fixed it, after that I could not drag myself away from the seat until they told me to go. I ran ping, Telnets, and Trace routes to EVERY SINGLE IP in the Exam. I highly recommend that if you have time, do it. 
"

The most important protocol for a data network engineer?

What a wise pick for a topic ;) lets discuss about the protocols again. Needless to say, there are so many protocols out there and some Ipv6 protocols are still coming. Since i myself only working in data network, i can not discuss about voice or security or wireless, lets base on TCP/IP model also I do believe that Application Layer is less important then the others for a network operation engineer whi maintain and run a live network. However that was my earlier perspective and later I found out the other way round. I try to understand how the internal mechanism of most popular protocols are working, how they behave one another in different platforms, what m trying to say is for example, the famous routing protocol OSPF forming neighbors over LAN, and over WAN. But now I am quite surprise that these are not enough. There are quite a few numbers of protocols out there, most of them become IEEE standard while some of them are Cisco proprietary protocols, like routing protocol EIGRP and redundancy protocols like HSRP and GLBP(excuse me, m cisco student).
Anyway.. lets think again, u know what? I jst want to stop typing with my tiny iphone, this gonna b my first iphone blogging, gudnight!

Me vs ITIL

Since I've been working for a service provider network, one of the main core value is how to deliver the services, how good the services are and how can we make sure that we are delivering our best services ( sound like management ;P ), anyway.

So there's always been a conflict between IT people, the technicians, and the business people, the manager or more precisely, the stakeholders. We used to take different sites.

IT people always talk about base on the technology models, in order to improve the service not base on the business perspective. Frankly, just demanding more budgets for higher techs, while the business people think they only need just the 'pure services' which will bring values and profits no matter what the technologies but with the lowest cost.

There is a frame work called ITIL, to lowering IT costs and also improving the services, is globally accepted as the blue print for IT to deliver values.

I'm going to sit ITIL2011 Edition exams, for ITIL certificate, because I need it to step forward in my career. For the guys working as Network Engineer out there, Just a soft reminder, its always not enough only to be good at technical, because we are living in the world of business. That's the reason why I choose to get Business Information System degree. Anyway, I'll be still going for my CCIE next year.

Preparation - installing basic knowledges

Hay,

Its been awhile .... I'm doing good!, I think so ^_^
I just left two other modules to graduate (Yay!), I hope I can clear before 2013 Thin-Gyan.

Anyway, let's get back to the main business- CCIE R&S, there is a popular website called,
http://www.ine.com/, I'm planning to buy Lab exam package from them, $199.00.
Before that, of cause I must had passed the written exam. For the written exam, before reading to Official Certification Guide, I think I might need to build-up and equip myself with some expert level knowledges. This is the reading list I got after googled it.


1.Developing IP Multicast Networks Volume I (Cisco Press)
2.MPLS VPN Architectures Volume I (Cisco Press)
3.Internet Routing Architectures (Bassam Halabi)

Oh, I found one website, www.abebooks.com selling used books, amazingly cheap, fantastic man, you sh try!
I bought one book during my assignment (that's not related to Networking), almost like new, the price was only $15 or smth, with $7 shipping charges.

Goodluck with your study, I'll be so busy these months, you know what? I'm one of the player in changing one of the largest ISP's broadband network into IPv6. Yahoo!
Just go and renew my library card.

Reason for leaving blogging.

Hi there,

I'll be busy the whole 2012 until first quarter of 2013 for my B.SC class.
I myself stop learning about Networking and planned to resume maybe after 2013 ThinGyan.
Let's study CCIE when we meet again in 2013.

Thanks and best regards,
KC

Very Good Multicast Video

Hi guys,

If u guys looking for a multicast explanation, here it is.

http://www.youtube.com/watch?v=AvbSMBKBZgY&feature=relmfu

Thanks,

Project for 2011.

These days, i myself thinking very seriously to create my own standard-network, virtual or physical. Which should include

a) a unix base machines, which connect to

b) some layer 2 switches, and these are distributing by

c) a couple of layer 3 switches, i mean, Cisco Catalyst switches which operating inter-vlan routing, and

d) few routers, which running very good and stable dynamic IGP routing, plus

e) core level routers, which aggregate routes and establish via bgp to another network.

After verify that this network is working fine, i need to

i) install unix base application which use SNMP protocols to gather network information and utilization and put in a file in unix.

ii) create a CRON job which trigger the PERL scripts to grep require information, to operate and compare for monitoring which should trigger another unix base application to send alerts (sms, emails) to me on certain condition.

iii) after that, i'll put some firewalls on the edge fields.

------------------------------------------------------------

Alright, for those things, i need to understand following.

i) advance routing and switching ( layer 2 and 3)

ii) comfortably using unix or linux platform (cron jobs manageable)

iii) Perl Scripting

---------------------------------------------------------------------

Now i'm searching for some Perl books to references, routing is no problem, just finished my Route exam, for switching, currently reading the Cisco Press books. for linux, using latest Ubuntu. Goodluck myself !!!

Me vs PPPOE.

Configures the router to dynamically create PPPoE subinterfaces over static PPPoE major interfaces.

what happened is, the vlan interface is configured,for eg. ETHERNET 13/0/2.132, without an IP, In this case, i'm not sure

whethere we can configure ip address for a vlan,

the vlan status will be down, until someone plug in the cable.

once the physical interface comes up.

The vlan also will comes up.

the DSLAM will forward ppp packets, for them, BRAS will create PPoe subinterfaces, automatically,

on the major subinterface which is vlan. 13/0/2.132.

I need to find out, what is the maximum subinterface id number.

E.g. - PPPoE subinterface GigabitEthernet 16/0/2.830.184388 is operStatusUp (dynamic)

No Posts Reasons.

လက္ရွိအလုပ္မွွာ ရွိတဲ႕ Juniper Router ေတြအေၾကာင္းလဲသိထားဖို႕လုပ္ရဦးမယ္။

ရာထူးတက္ခ်င္ေတာ႕ Pearl အေၾကာင္းလဲ နားလည္ခ်င္ေသးတယ္။

ေနာက္အလုပ္ေျပာင္းရင္ အဆင္ေျပေအာင္ CCIE ထိလည္း ေအာင္ထားခ်င္တယ္။ ဒီေတာ႕ CCNP ကို ျမန္ျမန္ေျဖေနရတယ္။ညစာစားၿပီးရင္ ရုပ္ရွင္လည္းၾကည္႕ခ်င္တယ္။ အေပၚကေျပာတဲ႕ဟာေတြအတြက္လည္း စာဖတ္ခ်င္တယ္။

မိန္းမနဲ႕ စကားေျပာရင္း လမ္းလည္း ဆင္းေလွ်ာက္ခ်င္တယ္။ Counter-Strike Online ကလဲ ေန႕တိုင္းမေဆာ႕ရင္ Rank က်သြားမွာစိုးလုိ႕ ေဆာ႕လုိက္ခ်င္တယ္။ေန၀င္ေနထြက္ေလးေတြ.. ျမင္ကြင္းေလးေတြလဲ ဓါတ္ပံုရိုက္ခ်င္ေသးတယ္။ ရိုက္ၿပီးသားဓါတ္ပံုေလးေတြ သီခ်င္းနားေထာင္ရင္းနဲ႕ ျပင္ခ်င္တယ္။ မနက္မနက္ မထနိုင္ေတာ႕ ေစာေစာလဲ အိ္ပ္ရအံုးမယ္။ကဲ..ဘေလာ႕ဘယ္အခ်ိန္ေရးရင္ေကာင္းမလဲ..။

CCNP ROUTE, 642-902

Hi all,

Today, i passed my Cisco Routing Exam, here i'll try to conclude the scope for CCNP ROUTE, 642-902.

1. Detail Understand of Static Routing, including floating static routes, etc.

2. Dynamic Routing Protocols - how they work, neighboring and adjacency over WAN, how they react the condition in which states. how they update, exchange the route info, etc....

a) RIP

b) RIPng

c) EIGRP

d) EIGRP for IPv6

e) OSPF

f) OSPFv3

g) BGP

h) MP-BGP for IPv6

3. Path Control for the routes,

a) Redistributing between the dynamic routing protocols.

b) Influencing the inbound and outbound dynamic routes using policy, metrics, and attributes.

c) Filtering and favoring some specific routes using its own metrics.

4. Understanding IPv6.

I think that's all.. Goodluck guys, for me, i'll start to open my SWITCH book, thanks.

TCL (sharing post)

http://ciscodreamer.blogspot.com/2011/01/tcl-to-prepare-configuration.html

iBGP peering.

Wow! Christmas is on coming Saturday. Merry Christmas to you all, today I’m reading about iBGP peering and hope that I can finish BGP chapter before 2010 ending. This is my iBGP lab, but seem like if I run this, it will be a heavy load for my poor Dell laptop.fuuu…

This time, enterprise have two core routers, IE-1 and IE-2, both are connecting to the internet, different ISP. In this case, we assume that , IE-1 configured to received default route and full BGP update from ISP-1 router. But for IE-2 only configured to received a default rout and partial BGP update, meaning that ISP-3 router will only send a partial part of his BGP updates, not including the updates from ISP-2 but including the customers of ISP-3, 202.1.1.1/24 network in this case.

When a packet from Enterprise want to go to 202.1.1.1/24, it will arrived at both IE-1 and IE-2, which are up link routers. Here, we can assume that OSPF is running within enterprise. Then IE-1 will send packet to IE-2 only but not to ISP-1 because IE-1 know that IE-2 has better route to ASN-5.

Without that iBGP connection, the routers will have no way to know if the other routers have a better BGP path.

- If one router has only one uplink to internet, no need to use loopback interface as update source, as the result, no need to use eBGP multihop subcommand.

- But, even though iBGP peering use loopback IP address (it should use because of the below reasons), it does not need to configure eBGP multihop subcommand.

The inter-connection between iBGP peering within Enterprise routers should use loopback interface. Because internet connected routers of same enterprise might not using the common subnets. Maybe, the routers in separate building or may actually be in different cities or even in different countries for the sake of redundancy. In such case, it makes sense to configure iBGP peers using loopback IP addresses for TCP connection so the single link failure does not cause the iBGP peering fail.

This is the configuration example of the redistribution of the enterprise’s public address range of 202.202.0.0/19 by redistribution from OSPF and summarizing with the aggregate-address BGP subcommand. And as you can see, this is obvious that local BGP ASN and remote BGP ASN are same. So that line is for iBGP peering within same ASN.

Example:

Router bgp 4

Aggregate-address 202.202.0.0 255.255.224.0 summary-only

Redistribute ospf 1 route-map only-128-107

Neighbor 10.1.1.1 remote-as 4

Thanks !!!

BGP Lab - Neighbor Peering and static route injection.

scenario : Let's say Enterprise-1 is connecting to ISP-1 using dual homed design. There are two link which connect to the same ISP. Both link are always alive acting redundancies for each other.

Internal Routers of Enterprise-1, like IE-1 are connecting to their border router E1. In this case i'm using static routes inside the enterprise. If i use other dynamic route like OSPF or etc.., i have to configure "route redistributing" at E1.

And use a loopback interface as update source, and configure eBGP multihop with a dual BGP peer, which reduce the amount of overhead, while giving the same higher availability.

This is the Routing Table of Enterprise Router I-E1.

I-E1#sh ip route

Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP

D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP

i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area

* - candidate default, U - per-user static route, o - ODR

P - periodic downloaded static route

Gateway of last resort is 192.168.100.2 to network 0.0.0.0

192.168.100.0/30 is subnetted, 1 subnets

C 192.168.100.0 is directly connected, FastEthernet0/0

S* 0.0.0.0/0 [1/0] via 192.168.100.2 !! Default Static Route to E1

What I’m trying to do here is just try to set a default route, which saying that any packets which coming to I-E1 will go out to inner interface of Border Enterprise Router E1. Let’s say a packet come in, which want to go to ISP router ISP-1 that I-E1 don’t know. Then I-E1 will send all these into 192.168.100.2 of E1. From here, E1 will take care the rest of its journey by using its Routing table. Here is E1 routing table.

E1#sh ip route

Gateway of last resort is 0.0.0.0 to network 0.0.0.0

1.0.0.0/32 is subnetted, 1 subnets

C 1.1.1.1 is directly connected, Loopback0

2.0.0.0/32 is subnetted, 1 subnets

S 2.2.2.2 [1/0] via 192.168.1.2 !! This is the static route to use loopback interface.

[1/0] via 10.1.1.2

S 192.168.99.0/24 [1/0] via 192.168.100.1

C 10.0.0.0/8 is directly connected, FastEthernet2/0

C 192.168.1.0/24 is directly connected, FastEthernet1/0

192.168.100.0/30 is subnetted, 1 subnets

C 192.168.100.0 is directly connected, FastEthernet6/0

S* 0.0.0.0/0 is directly connected, Loopback0 !! This is default static route all packet via loopback

And, I tried to inject 192.168.100/24 and 192.168.99.0/24, which are internal subnets of Enterprise to advertise out in BGP message of E1. So ISP-1 will receive the route and know how to reach inner subnets or Enterprise.

ISP-1#sh ip route

Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP

D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP

i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area

* - candidate default, U - per-user static route, o - ODR

P - periodic downloaded static route

Gateway of last resort is not set

1.0.0.0/32 is subnetted, 1 subnets

S 1.1.1.1 [1/0] via 192.168.1.1

[1/0] via 10.1.1.1

2.0.0.0/32 is subnetted, 1 subnets

C 2.2.2.2 is directly connected, Loopback0

B 192.168.99.0/24 [20/0] via 1.1.1.1, 00:03:28

C 10.0.0.0/8 is directly connected, FastEthernet2/0

C 192.168.1.0/24 is directly connected, FastEthernet1/0

B 192.168.100.0/24 [20/0] via 1.1.1.1, 00:03:28

ISP-1#ping 192.168.100.1

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.168.100.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 64/94/140 ms

Vice visa,

I-E1#ping 2.2.2.2

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 2.2.2.2, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 172/240/300 ms