Дерево страниц

Сравнение версий

Ключ

  • Эта строка добавлена.
  • Эта строка удалена.
  • Изменено форматирование.

...

in/out

Default policy

Advertising methods

Filtering methods

Filtering policy application levels

Import

Route information reception is not limited

Network, Redistribute

Route-map — the last (implicit) rule denies anything that is not explicitly allowed by the previous rules.

Prefix-list — the last (implicit) rule denies anything that is not explicitly allowed by the previous rules.

RIP process

Export

Without separate advertising commands, the router/controller does not send routing information

Prefix-list — the last (implicit) rule allows anything that is not explicitly denied by the previous rules.

Prefix-list — the last (implicit) rule allows anything that is not explicitly denied by the previous rules.

...

Static routing is a type of routing in which routes/controllers are defined explicitly during the router configuration without dynamic routing protocols.

...

Scroll Pagebreak
Create a default route by specifying the IP address of R1 router device gi1/0/2 interface (192.168.100.1) as a nexthop:

...

RIP is a distance-vector dynamic routing protocol that uses hop count as a routing metric. The maximum amount of hops allowed for RIP is 15. By default, each RIP router device transmits full routing table into the network every 30 seconds. RIP operates at 3rd level of TCP/IP stack via UDP port 520.

...

Objective:

Configure RIP on the router device in order to exchange the routing information with neighboring routersdevices. The router/controller should advertise static routes and subnets 115.0.0.0/24, 14.0.0.0/24, 10.0.0.0/24. Routes should be advertised each 25 seconds.

...

Step

Description

Command

Keys

1

Configure OSFP precedence for the main routing table (optional).

esr(config)# ip protocols ospf preference <VALUE>

<VALUE> – protocol precedence, takes values in the range of [1..255].

Default value: 150.

esr(config-vrf)# ip protocols ospf preference <VALUE>

2

Configure OSFP routing tables capacity (optional).

esr(config)# ip protocols ospf max-routes <VALUE>

<VALUE> – amount of OSPF routes in the routing table, takes values in the range of:

  • for ESR-1000/1200/1500
    /1511/1700/3100/3200 and WLC-3200– [1..500000];
  • for ESR-20/2130//100/200 and WLC-30– [1..300000];
  • for ESR-10/12V(F)/14VF/15 and WLC-15– [1..30000]

Default value for the global mode:

  • for ESR-1000/1200/1500
    /1511/1700/3100/3200 and WLC-3200 – (500000);
  • for ESR-20/21/30/100/200 and WLC-30 – (300000);
  • for ESR-10/12V(F)/14VF/15 and WLC-15– (30000).

Default value for VRF: 0

esr(config)# ipv6 protocols ospf max-routes <VALUE>


3

Enable the output of OSPF neighbor state information (optional).

esr(config)# router ospf log-adjacency-changes


esr(config)# ipv6 router ospf log-adjacency-changes

4

Create IP subnets lists that will be used for further filtration of advertised and received IP routes (optional).

esr(config)# ip prefix-list <NAME>

<NAME> – name of a subnet list being configured, set by the string of up to 31 characters.

esr(config)# ipv6 prefix-list <NAME>

5

Permit or deny the prefixes lists (optional).

esr(config-pl)# permit [ { object-group <OBJ-GROUP-NETWORK-NAME> | <ADDR/LEN> | <IPV6-ADDR/LEN> } ] [ { eq <LEN> | le <LEN> | ge <LEN> [ le <LEN> ] } ]

<OBJ-GROUP-NETWORK-NAME> – IPv4/IPv6 addresses profile name, set by the string of up to 31 characters;

<ADDR> – IP address, defined as AAA.BBB.CCC.DDD where each part takes values of [0..255];

<LEN> – prefix length, takes values of [1..32] in prefix IP lists;

  • eq – when specifying the command, the prefix length mast match the specified one;
  • le – when specifying the command, the prefix length mast be less than or match the specified one;
  • ge – when specifying the command, the prefix length mast be more than or match the specified one;

esr(config-pl)# deny [ { object-group <OBJ-GROUP-NETWORK-NAME> | <ADDR/LEN > | <IPV6-ADDR/LEN> } ] [ { eq <LEN> | le <LEN> | ge <LEN> [ le <LEN> ] } ]

6

Add OSFP process to the system and switch to the OSFP process parameters configuration mode.

esr(config)# router ospf <ID> [vrf <VRF>]

<ID>  – stand alone system number, takes values of [1..65535].

<VRF> – VRF instance name, set by the string of up to 31 characters, within which the routing protocol will operate.

esr(config)# ipv6 router ospf <ID> [vrf <VRF>]

7

Set router identifier for the given OSFP process.

esr(config-ospf)# router-id <ID>

<ID> – router/controller identifier, defined as AAA.BBB.CCC.DDD where each part takes values of [0..255].

<IF> – interface specified in form given in the Types and naming procedure of router interfaces section of CLI command reference guide.

<TUN> – tunnel name specified in form given in the Types and naming procedure of router tunnels section.

esr(config-ipv6-ospf)# router-id <ID>

8

Define OSFP process routes precedence.


esr(config-ospf)# preference <VALUE>

<VALUE> – OSFP process routes precedence, takes values in the range of [1..255].


esr(config-ipv6-ospf)# preference <VALUE>

9Define maximum number of equivalent routes (optional).esr(config-ospf)# maximum-path <PATHS>

<PATHS> – number of equivalent routes to the target, takes values of [1..32].

Default value: 16.

esr(config-ipv6-ospf)# maximum-path <PATHS>

10

Enable compatibility with RFC 1583 (optional).

esr(config-ospf)# compatible rfc1583


esr(config-ipv6-ospf)# compatible rfc1583

11

Add subnets filtration in incoming or outgoing updates (optional).

esr(config-ospf)# prefix-list <PREFIX-LIST-NAME> { in | out }

<PREFIX-LIST-NAME> – name of a subnet list being configured, set by the string of up to 31 characters.

  • in – incoming routes filtration;
  • out – advertised routes filtration.

esr(config-ipv6-ospf)# prefix-list <PREFIX-LIST-NAME> { in | out }

12

Enable advertising of routes received in an alternative way (optional).

esr(config-ospf)# redistribute static [ route-map <NAME> ]

<NAME> – name of the route map that will be used for advertised static routes filtration and modification, set by the string of up to 31 characters.

esr(config-ipv6-ospf)# redistribute static [ route-map <NAME> ]

esr(config-ospf)# redistribute connected [ route-map <NAME> ]

<NAME> – name of the route map that will be used for filtration and modification of advertised directly connected subnets, set by the string of up to 31 characters.

esr(config-ipv6-ospf)# redistribute connected [ route-map <NAME> ]

esr(config-ospf)# redistribute rip [ route-map <NAME> ]

<NAME> – name of the route map that will be used for advertised RIP routes filtration and modification, set by the string of up to 31 characters.

esr(config-ospf)# redistribute bgp <AS> [ route-map <NAME> ]

<AS>  – stand alone system number, takes values of [1..4294967295].

<NAME> – name of the route map that will be used for advertised BGP routes filtration and modification, set by the string of up to 31 characters.

esr(config-ipv6-ospf)# redistribute bgp <AS> [ route-map <NAME> ]

13

Enable OSFP process.

esr(config-ospf)# enable


esr(config-ipv6-ospf)# enable

14

Create OSFP area and switch to the scope configuration mode.

esr(config-ospf)# area <AREA_ID>

<AREA_ID> – area identifier, defined as AAA.BBB.CCC.DDD where each part takes values of [0..255].

esr(config-ipv6-ospf)# area <AREA_ID>

15

Enable subnets advertising (optional). 

esr(config-ospf-area)# network <ADDR/LEN>

<ADDR/LEN> – subnet address, set in the following format:

AAA.BBB.CCC.DDD/NN – network IP address with prefix mask, where AAA-DDD take values of [0..255] and EE takes values of [1..32].

esr(config-ipv6-ospf-area)# network <IPV6-ADDR/LEN>

<IPV6-ADDR/LEN> – IPv6 address and mask of a subnet, defined as X:X:X:X::X/EE where each X part takes values in hexadecimal format [0..FFFF] and EE takes values of [1..128].

16

Specify the area type (optional).

esr(config-ospf-area)# area-type <TYPE> [ no-summary ]

<TYPE> – area type:

  • stub – sets stub value (stub area);
    no-summary – command in conjunction with the 'stub' parameter forms the 'totallystubby' area (only the default route is used to transfer information outside the area).
  • nssa – sets nssa value (NSSA area);
    no-summary – command in conjunction with the 'nssa' parameter forms the 'totallynssa' area (by default the route is generated as an inter-place one).

esr(config-ipv6-ospf-area)# area-type <TYPE> [ no-summary ]

17

Enable the default route generation for NSSA area and its advertising as NSSA-LSA (optional).

esr(config-ospf-area)# default-information-originate


esr(config-ipv6-ospf-area)# default-information-originate

18

Enable the subnet summarization or hiding (optional).

esr(config-ospf-area)# summary-address <ADDR/LEN>  { advertise | not-advertise }

<ADDR/LEN> – IP address and subnet mask, defined as AAA.BBB.CCC.DDD/EE where each part AAA-DDD takes values of [0..255] and EE takes values of [1..32];

  • advertise – if a command is specified, instead of the specified subnets, the total subnet will be advertised;
  • not-advertise – when specifying the command, the subnets included in a subnet specified will not be advertised.

esr(config-ipv6-ospf-area)# summary-address  <IPV6-ADDR/LEN> { advertise | not-advertise }

<IPV6-ADDR/LEN> – IPv6 address and mask of a subnet, defined as X:X:X:X::X/EE where each X part takes values in hexadecimal format [0..FFFF] and EE takes values of [1..128];

  • advertise – when specifying the command instead of the subnets included in a subnet specified, a total subnet will be advertised;
  • not-advertise – the subnets included in a subnet specified will not be advertised.

19

Enable OSFP area.

esr(config-ospf-area)# enable


esr(config-ipv6-ospf-area)# enable

20

Establish a virtual connection between the main and remote areas having several areas between them (optional).

esr(config-ospf-area)# virtual-link <ID>

<ID> – identifier of the router/controller with which the virtual connection is established, defined as AAA.BBB.CCC.DDD where each part takes values of [0..255].

esr(config-ipv6-ospf-area)# virtual-link <ID>

21

Set the time interval in seconds after which the router device re-sends a packet that has not received a delivery confirmation (for example, a DatabaseDescription packet or LinkStateRequest packets) (optional).

esr(config-ospf- vlink)# restransmit-interval <TIME>

<TIME> – time in seconds, takes values of [1..65535].

Default value: 5 seconds.

esr(config-ipv6-ospf- vlink)# restransmit-interval <TIME>

22

Set the time interval in seconds after which the router device sends the next hello packet (optional).

esr(config-ospf- vlink)# hello-interval <TIME>

<TIME> – time in seconds, takes values of [1..65535].

Default value: 10 seconds.

esr(config-ipv6-ospf- vlink)# hello-interval <TIME>

23

Set the time interval in seconds after which the neighbor is considered to be idle. This interval should be a multiple of the ‘hello interval’ value.

esr(config-ospf- vlink)# dead-interval <TIME>

<TIME> – time in seconds, takes values of [1..65535].

Default value: 40 seconds.

esr(config-ipv6-ospf- vlink)# dead-interval <TIME>

24

Set the time interval in seconds after which the router device selects DR in the network (optional).

esr(config-ospf- vlink)# wait-interval <TIME>

<TIME> – time in seconds, takes values of [1..65535].
Default value: 40 seconds

esr(config-ipv6-ospf- vlink)# wait-interval <TIME>

25

Define authentication algorithm (optional).

esr(config-ospf- vlink)# authentication algorithm <ALGORITHM>

<ALGORITHM> – authentication algorithm:

  • cleartext – password, transmitted in unencrypted form (available only for RIP and OSPF-VLINK);
  • md5 – password is hashed by md5 algorithm.

26

Set the password for neighbor authentication (optional).

esr(config-ospf- vlink)# authentication key ascii-text  { <CLEAR-TEXT> | encrypted <ENCRYPTED-TEXT> }

<CLEAR-TEXT> – password, set by the string of 8 to 16 characters.

<ENCRYPTED-TEXT> – encrypted password of 8 to 16 bytes (from 16 to 32 characters) in hexadecimal format (0xYYYY ...) or (YYYY ...).

27

Specify the list of passwords for authentication via md5 hashing algorithm.

esr(config-ospf- vlink)# authentication key chain <KEYCHAIN>

<KEYCHAIN> – key list identifier, set by the string of up to 16 characters.

28

Enable virtual connection.

esr(config-ospf- vlink)# enable


29

Switch to the interface/tunnel/network bridge configuration mode.

esr(config)# interface <IF-TYPE><IF-NUM>

<IF-TYPE> – interface type;

<IF-NUM> – F/S/P – F frame (1), S – slot (0), P – port.

esr(config)# tunnel <TUN-TYPE><TUN-NUM>

<TUN-TYPE> – tunnel type;

<TUN-NUM> – tunnel number.

esr(config)# bridge <BR-NUM>

<BR-NUM> – bridge number.

30

Define the interface / tunnel / network bridge inherence to a specific OSPF process.

esr(config-if-gi)# ip ospf instance <ID>

<ID> – process number, takes values of [1..65535].

esr(config-if-gi)# ipv6 ospf instance <ID>

31

Define the interface inherence to a specific OSPF process area.

esr(config-if-gi)# ip ospf area <AREA_ID>

<AREA_ID> – area identifier, defined as AAA.BBB.CCC.DDD where each part takes values of [0..255].

esr(config-if-gi)# ipv6 ospf area <AREA_ID>

32

Enable the routing via OSFP on the interface.

esr(config-if-gi)# ip ospf


esr(config-if-gi)# ipv6 ospf

33

Enable the mode in which the OSPF process will ignore MTU interface value in incoming Database Description packets (optional).

esr(config-if-gi)# ip ospf mtu-ignore


esr(config-if-gi)# ipv6 ospf mtu-ignore

34

Specify OSFP authentication algorithm (optional).

esr(config-if-gi)# ip ospf authentication algorithm <ALGORITHM>

<ALGORITHM> – authentication algorithm:

  • cleartext – password, transmitted in clear text;
  • md5 – password is hashed by md5 algorithm.

35

Set the password for OSPF neighbor authentication when transmitting an unencrypted password (optional).

esr(config-if-gi)# ip ospf authentication key ascii-text  { <CLEAR-TEXT> | encrypted <ENCRYPTED-TEXT> }

<CLEAR-TEXT> – password, set by the string of 8 to 16 characters;

<ENCRYPTED-TEXT> – encrypted password of 8 to 16 bytes (from 16 to 32 characters) in hexadecimal format (0xYYYY ...) or (YYYY ...).

36

Specify the list of passwords for neighbor authentication via md5 hashing algorithm (optional).

esr(config-if-gi)# ip ospf authentication key-chain <KEYCHAIN>

<KEYCHAIN> – key list identifier, set by the string of up to 16 characters.

37

Set the time interval in seconds after which the router device selects DR in the network (optional).

esr(config-if-gi)# ip ospf wait-interval <TIME>

<TIME> – time in seconds, takes values of [1..65535].

Default value: 40 seconds.

esr(config-if-gi)# ipv6 ospf wait-interval <TIME>

38

Set the time interval in seconds after which the router device re-sends a packet that has not received a delivery confirmation (for example, a DatabaseDescription packet or LinkStateRequest packets. Optional).

esr(config-if-gi)# ip ospf restransmit-interval <TIME>

<TIME> – time in seconds, takes values of [1..65535].

Default value: 5 seconds.

esr(config-if-gi)# ipv6 ospf restransmit-interval <TIME>

39

Set the time interval in seconds after which the router device sends the next hello packet (optional).

esr(config-if-gi)# ip ospf hello-interval <TIME>

<TIME> – time in seconds, takes values of [1..65535].

Default value: 10 seconds.

esr(config-if-gi)# ipv6 ospf hello-interval <TIME>

40

Set the time interval in seconds after which the neighbor is considered to be idle (optional). This interval should be a multiple of the ‘hello interval’ value.

esr(config-if-gi)# ip dead-interval <TIME>

<TIME> – time in seconds, takes values of [1..65535].

Default value: 40 seconds.

esr(config-if-gi)# ipv6 dead-interval <TIME>

41

Set the time interval during which NBMA interface waits before sending a HELLO packet to a neighbor, even if the neighbor is inactive (optional).

esr(config-if-gi)# ip poll-interval <TIME>

<TIME> – time in seconds, takes values of [1..65535].

Default value: 120 seconds.

esr(config-if-gi)# ipv6 poll-interval <TIME>

42

Set static IP address of a neighbor to establish a relation in NMBA and P2MP (Point-to-MultiPoint) networks (optional).

esr(config-if-gi)# ip ospf neighbor <IP> [ eligible ]

<IP> – neighbor’s IP address, defined as AAA.BBB.CCC.DDD where each part takes values of [0..255].

eligible – optional parameter, allows the device to take part in DR selection process in NMBA networks. The interface priority should be greater than zero.

esr(config-if-gi)# ip ospf neighbor <IP> [ eligible ]

<IPV6-ADDR> – neighbor’s IPv6 address, defined as X:X:X:X::X where each part takes values in hexadecimal format [0..FFFF];

eligible – optional parameter, allows the device to take part in DR selection process in NMBA networks. The interface priority should be greater than zero.

43

Define the network type for OSPF neighborhood establishment (optional).

esr(config-if-gi)# ip ospf network <TYPE>

<TYPE> – network type:

  • broadcast – broadcast connection type;
  • non-broadcast – NBMA connection type;
  • point-to-multipoint – point-to-multipoint connection type;
  • point-to-multipoint non-broadcast – point-to-multipoint NBMA connection type;
  • point-to-point – point-to-point connection type.

Default value: broadcast.

esr(config-if-gi)# ipv6 ospf network <TYPE>

44

Set the router device priority that is used for DR and BDR selection (optional).

esr(config-if-gi)# ip ospf priority <VALUE>

<VALUE> – interface priority, takes values of [1..65535].

Default value: 120.

esr(config-if-gi)# ipv6 ospf priority <VALUE>

45

Set the metric size on the interface or tunnel (optional).

esr(config-if-gi)# ip ospf cost <VALUE>

<VALUE> – metric size, takes values of [0..32767].

Default value: 150.

esr(config-if-gi)# ipv6 ospf cost <VALUE>

46

Enable BFD protocol for OSPF protocol.

esr(config-if-gi)# ip ospf bfd-enable


esr(config-if-gi)# ipv6 ospf bfd-enable

...

Configure OSPF protocol on the router device in order to exchange the routing information with neighboring routersdevices. The router device should be in 1.1.1.1 identifier area and announce routes received via RIP.

...

Блок кода
esr(config-ospf)# enable
esr(config-ospf)# exit

neighboring routers Neighboring devices are connected to gi1/0/5 and gi1/0/15 interfaces. To establish the neighboring with other routersdevices, map them to OSPF process and the area. Next, enable OSPF routing for the interface.

...

Change area type to stub. For each router R2 and R3 from 1.1.1.1 area, execute the following command in the configuration mode:

...

Pre-configure OSPF protocol and IP addresses on interfaces according to the network structure shown in figure above.

For R1 routerdevice, proceed to 1.1.1.1 area configuration mode:

...

Блок кода
esr(config-ospf-area)# virtual-link 0.0.0.3
esr(config-ospf-vlink)# enable

For R3 router, proceed to 1.1.1.1 area configuration mode:

...

BGP protocol is designed to exchange subnet reachability information among autonomous systems (AS), i.e. router device groups united under a single technical control that uses interdomain routing protocol for defining packet delivery routes to other AS. Transmitted information includes a list of AS that are accessible through this system. Selection of the optimal routes is based on effective rules for the network.

...

BFD (Bidirectional Forwarding Detection) is a protocol operating over other protocols and allowing to reduce the problem detection time to 50 msec. BFD is two-party protocol, it requires the configuration of both routers or controllers (both routers/controllers generate BFD packets and respond to each other).

...

Step

Description

Command

Keys

1

Create a route map for IP routes filtering and modification.

esr(config)# route-map <NAME>

<NAME> – router map name, set by the string of up to 31 characters.

2

Create a route map rule.

esr(config-route-map)# rule <ORDER>

<ORDER> – rule number, takes values of [1..10000].

3

Specify the action that should be applied for routing information.

esr(config-route-map-rule)# action <ACT>

<ACT> – allocated action:

  • permit – routing information reception or advertising is permitted;
  • deny – denied.

4

Set BGPAS-Path attribute value in the route for which the rule should work (optional).

esr(config-route-map-rule)# match as-path  [begin | end | contain] <AS-PATH>

<AS-PATH> – list of stand alone system numbers, defined as AS,AS,AS, takes values of [1..4294967295]. Optional parameters:

  • begin – attribute value begins with the specified AS numbers;
  • end – attribute value ends with the specified AS numbers;
  • contain – attribute value includes the specified AS numbers list.

5

Set BGPCommunity attribute value for which the rule should work (optional).

esr(config-route-map-rule)# match community  <COMMUNITY-LIST>

<COMMUNITY-LIST> – community list, defined as AS:N,AS:N, takes values of [1..4294967295]. Up to 64 communities can be specified.

6

BGPExtendedCommunity attribute value for which the rule should work (optional).

esr(config-route-map-rule)# match extcommunity  <EXTCOMMUNITY-LIST>

<EXTCOMMUNITY-LIST> – extcommunity list, defined as KIND:AS:N, KIND:AS:N, where

KIND – extcommunity type:

  • rt (Route Target);
  • ro (Route Origin);

N – extcommunity number, takes values of [1..65535].

7

Set IP addresses profile including destination subnet values in the route (optional).

esr(config-route-map-rule)# match ip address  object-group <OBJ-GROUP-NETWORK-NAME>

<OBJ-GROUP-NETWORK-NAME> – name of the IP addresses profile that includes destination subnets prefixes, set by the string of up to 31 characters.

esr(config-route-map-rule)# match ipv6 address  object-group <OBJ-GROUP-NETWORK-NAME>

8

Set IP addresses profile that includes BGPNext-Hop attribute value in the route for which the rule should work (optional).

esr(config-route-map-rule)# match ip next-hop  object-group <OBJ-GROUP-NETWORK-NAME>

<OBJ-GROUP-NETWORK-NAME> – name of the IP addresses profile that includes destination subnets prefixes, set by the string of up to 31 characters.

esr(config-route-map-rule)# match ipv6 next-hop  object-group <OBJ-GROUP-NETWORK-NAME>

9

Set the profile that includes IP addresses of the router device having advertised the route for which the rule should work (optional).

esr(config-route-map-rule)# match ip route-source  object-group <OBJ-GROUP-NETWORK-NAME>

<OBJ-GROUP-NETWORK-NAME> – name of the IP addresses profile that includes destination subnets prefixes, set by the string of up to 31 characters.

esr(config-route-map-rule)# match ipv6 route-source  object-group <OBJ-GROUP-NETWORK-NAME>

10

Specify ACL group for which the rule should work (optional).

esr(config-route-map-rule)# match access-group <NAME>

<NAME> – access control list name, set by the string of up to 31 characters.

11

Set BGP MED attribute value in the route for which the rule should work (optional).

esr(config-route-map-rule)# match metric bgp <METRIC>

<METRIC> – BGP MED attribute value, takes values in the range of [0..4294967295].

12

Set OSPF Metric attribute value in the route for which the rule should work.

esr(config-route-map-rule)# match metric ospf <TYPE> <METRIC>

<TYPE> – OSPF Metric attribute type, takes values type-1 and type-2;

<METRIC> – OSPF Metric attribute value, takes values in the range of [0..65535].

13

Set RIP Metric attribute value in the route for which the rule should work.

esr(config-route-map-rule)# match metric rip <METRIC>

<METRIC> – RIP Metric attribute value, takes values in the range of [0..16].

14

Set OSPF Tag attribute value in the route for which the rule should work.

esr(config-route-map-rule)# match tag ospf <TAG>

<TAG> – OSPF Tag attribute value, takes values in the range of [0..4294967295].

15

Set RIP Tag attribute value in the route for which the rule should work.

esr(config-route-map-rule)# match tag rip <TAG>

<RIP> – RIP Tag attribute value, takes values in the range of [0..65535].

16

Set BGP AS-Path attribute value that will be added to the beginning of AS-Path list (optional).

esr(config-route-map-rule)# action set as-path
prepend <AS-PATH> {track <TRACK-ID>}

<AS-PATH> – stand alone systems number list that will be added to the current value in the route. Set as AS, AS, AS, takes values of [1..4294967295].

<TCACK-ID> – vrrp-tracking identifier that provides the specified action execution. Changes in the range of [1..60].

17

Set BGP Community attribute value that will be specified in the route (optional).

esr(config-route-map-rule)# action set community  {COMMUNITY-LIST> | no-advertise | no-export }

<COMMUNITY-LIST> – community list, defined as AS:N,AS:N, where each part takes values of [1..65535].

  • no-advertise – routes transmitted with the given community should not be advertised to other BGP neighbors;
  • no-export – routes transmitted with the given community should not be advertised to eBGP neighbors but can be advertised to external neighbors in the confederation.

18

Set BGP ExtCommunity attribute value that will be specified in the route (optional).

esr(config-route-map-rule)# action set extcommunity  <EXTCOMMUNITY-LIST>

<EXTCOMMUNITY-LIST> – extcommunity list, defined as KIND:AS:N, KIND:AS:N, where

KIND – extcommunity type:

  • rt (Route Target);
  • ro (Route Origin);

N – extcommunity number, takes values of [1..65535].

19

Specify BGP Next-Hop attribute that will be set in the route when advertising (optional).

esr(config-route-map-rule)# action set ip bgp-next-hop <ADDR>

<ADDR> – gateway IP address, defined as AAA.BBB.CCC.DDD where each part takes values of [0..255].

esr(config-route-map-rule)# action set ipv6 bgp-next-hop <IPV6-ADDR>

<IPV6-ADDR> – gateway IPv6 address, defined as X:X:X:X::X where each part takes values in hexadecimal format [0..FFFF].

20

Specify Next-Hop value that will be set in the route received by BGP (optional).

esr(config-route-map-rule)# action set ip next-hop  {NEXTHOP> | blackhole | unreachable | prohibit}

<NEXTHOP> – gateway IP address, defined as AAA.BBB.CCC.DDD where each part takes values of [0..255];

  • blackhole – packets to this subnet will be removed without sending notifications to a sender;
  • unreachable – packets to this subnet will be removed, a sender will receive in response ICMP Destination unreachable (Host unreachable, code 1);
  • prohibit – when specifying the command, the packets to this subnet will be removed by the device, a sender will receive in response ICMP Destination unreachable (Communication administratively prohibited, code 13);

esr(config-route-map-rule)# action set ipv6 next-hop <IPV6-NEXTHOP>

<IPV6-ADDR> – gateway IPv6 address, defined as X:X:X:X::X where each part takes values in hexadecimal format [0..FFFF].

21

Specify BGP Local Preference attribute value that will be set in the route (optional).

esr(config-route-map-rule)# action set local-preference <PREFERENCE>

<PREFERENCE> – BGP Local Preference attribute value, takes values in the range of [0..255].

22

Specify BGP Origin attribute value that will be set in the route (optional).

esr(config-route-map-rule)# action set origin <ORIGIN>

<ORIGIN> – BGP Origin attribute value:

  • egp – route is learnt by EGP;
  • igp – route is received inside the initial AS;
  • incomplete – route is learnt in another way.

23

Specify BGP MED value that will be set in the route (optional).

esr(config-route-map-rule)# action set metric bgp <METRIC>

<METRIC> – BGP MED attribute value, takes values in the range of [0..4294967295].

24

Add filtration and modification of routes in incoming or outgoing directions.

esr(config-bgp-neighbor)# route-map <NAME><DIRECTION>

<NAME> –  name of the route map having been configured;

<DIRECTION> – direction:

  • in – filtration and modification of received routes;
  • out – filtration and modification of advertised routes.

esr(config-ipv6-bgp-neighbor)# route-map <NAME><DIRECTION>

...

  • Configure BGP with AS2500 on ESR router or WLC controller;
  • Establish neighboring with AS20.

...

Step

Description

Command

Keys

1

Create an IS-IS process and switch to the parameters configuration mode of this process.

esr(config)# router isis <ID> [vrf <VRF>]

<ID> – process number, takes values of [1..65535];

<VRF> – VRF instance name, set by the string of up to 31 characters.

2

Set NET address.

esr(config-isis)# net {<NET>}

<NET> – NET address, format: ff[.ffff.ffff.ffff.ffff.ffff.ffff].ffff.ffff.ffff.00.

3

Enable IS-IS process.

esr(config-isis)# enable


4

Set the authentication algorithm for the L2 layer (optional).

esr(config-isis)# authentication domain algorithm <ALGORITHM>

<ALGORITHM> – authentication algorithm:

  • cleartext – unencrypted password;
  • md5 – password is hashed by md5 algorithm.  

5

Set the authentication password for the L2 layer (optional).

esr(config-isis)# authentication domain key ascii-text  { <CLEAR-TEXT> | encrypted <ENCRYPTED-TEXT> }  

<CLEAR-TEXT> – password, set by the string of 8 characters;

<ENCRYPTED-TEXT> – encrypted password of 8 bytes (16 characters) in hexadecimal format (0xYYYY...) or (YYYY...).

6

Set a list of keys for authentication (optional).

esr(config-isis)# authentication domain key chain <KEYCHAIN>

<KEYCHAIN> – key list identifier, set by the string of up to 16 characters.  

7

Select the authentication algorithm for the L1 layer (optional).

esr(config-isis)# authentication area algorithm <ALGORITHM>  

<ALGORITHM> – authentication algorithm:

  • cleartext – unencrypted password;
  • md5 – password is hashed by md5 algorithm.  

8

Set the authentication password for the L1 layer (optional).

esr(config-isis)# authentication area key ascii-text  { <CLEAR-TEXT> | encrypted <ENCRYPTED-TEXT> }

<CLEAR-TEXT> – password, set by the string of 8 characters;

<ENCRYPTED-TEXT> – encrypted password of 8 bytes (16 characters) in hexadecimal format (0xYYYY...) or (YYYY...).

9

Set a list of keys for authentication (optional).

esr(config-isis)# authentication area key chain <KEYCHAIN>

<KEYCHAIN> – key list identifier, set by the string of up to 16 characters.

10

Enable transmission of router/controller name to the LSP (optional).

esr(config-isis)# hostname dynamic


11

Set the IS-IS process operating level (optional).

esr(config-isis)# is-type {<LEVEL>}

<LEVEL> – IS-IS protocol operation level:

  • level-1 – operate only on level 1;
  • level-1-2 – operate on levels 2 and 2;
  • level-2-only – operate only on level 2. 

12

Set the type of metric to be used in the IS-IS process (optional).

esr(config-isis)# metric-style  { narrow | wide | transition } [<LEVEL>]

narrow — accepts and generates TLVs (on network reachability) of the old type;

wide — accepts and generates TLVs (on network reachability) of the new type;

transition — accepts and generates TLVs (on network reachability) of the new and old type;

<LEVEL> – IS-IS protocol operation level:

  • level-1 – operate only on level 1;
  • level-2-only – operate only on level 2. 

13

Set the route priority for the specified IS-IS process (optional).

esr(config-isis)# preference {<VALUE>}

<VALUE> – may take values [1..255].

14

Enable IS-IS operation with IPv4 and/or IPv6 addresses (optional).

esr(config-isis)# address-family { ipv4 | ipv6 }

ipv4 – IPv4 family;

ipv6 – IPv6 family.

15

Set the update interval for own LSP (optional).

esr(config-isis)# lsp-refresh-interval  { min | max } <TIME> [ <LEVEL> ]

min — minimum update/generation interval;

max — maximum update/generation interval;

<TIME> – time in seconds, takes values of [1..65535];

<LEVEL> – IS-IS protocol operation level:

  • level-1 – operate only on level 1;
  • level-2-only – operate only on level 2. 

16

Set the lifetime of own LSP (optional).

esr(config-isis)# max-lsp-lifetime <TIME> [<LEVEL>]

<TIME> – time in seconds, takes values of [1..65535];

<LEVEL> – IS-IS protocol operation level:

  • level-1 – operate only on level 1;
  • level-2-only – operate only on level 2. 

17

Set a timeout before the next SPF calculation (optional).

esr(config-isis)# spf-timeout <TIME> [<LEVEL>]

<TIME> – time in milliseconds, takes values of [1..10000];

<LEVEL> – IS-IS protocol operation level:

  • level-1 – operate only on level 1;
  • level-2-only – operate only on level 2. 

18






Enable advertising of routes received in an alternative way (optional).







esr(config-isis)# redistribute bgp <AS>  [ route-map <NAME> ] [is-type <LEVEL>]

<AS>  – stand alone system number, takes values of [1..4294967295].

<NAME> – name of the route map that will be used for advertised routes filtration and modification, set by the string of up to 31 characters;

<LEVEL> – IS-IS protocol operation level:

  • level-1 – operate only on level 1;
  • level-2-only – operate only on level 2.

esr(config-isis)# redistribute ipv6 bgp <AS>  [ route-map <NAME> ] [is-type <LEVEL>]

esr(config-isis)# redistribute ospf <ID> <ROUTE-TYPE>  [ route-map <NAME> ] [is-type <LEVEL>]

<ID>  – process number, takes values of [1..65535].

<ROUTE-TYPE> – route type:

  • intra-area – OSPF process routes advertising within a zone;
  • inter-area – OSPF process routes advertising between zones;
  • external1 – OSPF format 1 external routes advertising;
  • external2 – OSPF format 2 external routes advertising;

<NAME> – name of the route map that will be used for advertised OSFP routes filtration and modification, set by the string of up to 31 characters;

<LEVEL> – IS-IS protocol operation level:

  • level-1 – operate only on level 1;
  • level-2-only – operate only on level 2.

esr(config-isis)# redistribute ipv6 ospf <ID> <ROUTE-TYPE>  [ route-map <NAME> ] [is-type <LEVEL>]

esr(config-isis)# redistribute isis <ID> <ROUTE-TYPE>  [ route-map <NAME> ] [is-type <LEVEL>]

<ID>  – process number, takes values of [1..65535].

<ROUTE-TYPE> – route type:

  • level-1 – level 1 routes advertising;
  • level-2 – level 2 routes advertising;
  • inter-area – IS-IS process routes advertising between zones;

<NAME> – name of the route map that will be used for advertised IS-IS routes filtration and modification, set by the string of up to 31 characters;

<LEVEL> – IS-IS protocol operation level:

  • level-1 – operate only on level 1;
  • level-2-only – operate only on level 2.

esr(config-isis)# redistribute rip  [ route-map <NAME> ] [is-type <LEVEL>]

<NAME> – name of the route map that will be used for advertised RIP routes filtration and modification, set by the string of up to 31 characters;

<LEVEL> – IS-IS protocol operation level:

  • level-1 – operate only on level 1;
  • level-2-only – operate only on level 2.

esr(config-isis)# redistribute static  [ route-map <NAME> ] [is-type <LEVEL>]

<NAME> – name of the route map that will be used for advertised static routes filtration and modification, set by the string of up to 31 characters;

<LEVEL> – IS-IS protocol operation level:

  • level-1 – operate only on level 1;
  • level-2-only – operate only on level 2.

esr(config-isis)# redistribute connected  [ route-map <NAME> ] [is-type <LEVEL>]

<NAME> – name of the route map that will be used for advertised connected routes filtration and modification, set by the string of up to 31 characters;

<LEVEL> – IS-IS protocol operation level:

  • level-1 – operate only on level 1;
  • level-2-only – operate only on level 2.

19

Add subnets filtration in incoming or outgoing updates (optional).

esr(config-isis)# prefix-list  { ipv6 <LIST_NAME> | <LIST_NAME> } {in|out} 

<LIST-NAME> – name of a subnet list being configured, set by the string of up to 31 characters.

in – incoming routes filtration;

out – advertised routes filtration.

20

Add subnets filtration in incoming or outgoing updates (optional).

esr(config-isis)# route-map <NAME> {in|out} 

<NAME> – name of the route map that will be used for advertised routes filtration and modification, set by the string of up to 31 characters.

21

Set a matching of interface to a specified IS-IS process.

esr(config-if-gi)# isis instance <ID>

<ID> – process number, takes values of [1..65535].

22

Enable the IS-IS protocol on the interface.

esr(config-if-gi)# isis enable


23

Enable the use of TLV#8 in hello packets (optional).

esr(config-if-gi)# isis hello-padding


24

Set the priority when selecting DIS (optional).

esr(config-if-gi)# isis priority <VALUE> [<LEVEL>]

<VALUE> – number, may take values [0..127];

<LEVEL> – IS-IS protocol operation level:

  • level-1 – operate only on level 1;
  • level-2-only – operate only on level 2. 

25

Set the metric value for the interface (optional).

esr(config-if-gi)# isis metric <VALUE> [<LEVEL>]

<VALUE> – number, may take values [1..16777215];

<LEVEL> – IS-IS protocol operation level:

  • level-1 – operate only on level 1;
  • level-2-only – operate only on level 2. 

26

Set defines which routing layer on the interface the current IS-IS process will run on (optional).

esr(config-if-gi)# isis circuit-type {<LEVEL>}

<LEVEL> – IS-IS protocol operation level:

  • level-1 – operate only on level 1;
  • level-1-2 – operate on levels 2 and 2;
  • level-2-only – operate only on level 2. 

27

Set the interval for sending hello packets (optional).

esr(config-if-gi)# isis hello-interval <TIME> [<LEVEL>]

<TIME> – time in seconds, takes values of [1..65535];

<LEVEL> – IS-IS protocol operation level:

  • level-1 – operate only on level 1;
  • level-2-only – operate only on level 2. 

28

Set the multiplier for calculating and sending Hold Time (optional).

esr(config-if-gi)# isis hello-multiplier <VALUE> [<LEVEL>]

<VALUE> – number, may take values [3..1000];

<LEVEL> – IS-IS protocol operation level:

  • level-1 – operate only on level 1;
  • level-2-only – operate only on level 2. 

29

Set the interface to point-to-point IS-IS protocol mode (optional).

esr(config-if-gi)# isis network point-to-point


30

Set the interval for generating and sending CSNP (optional).

esr(config-if-gi)# isis csnp-interval <TIME> [<LEVEL>]

<TIME> – time in seconds, takes values of [1..65535];

<LEVEL> – IS-IS protocol operation level:

  • level-1 – operate only on level 1;
  • level-2-only – operate only on level 2. 

31

Set the interval for generating and sending PSNP (optional).

esr(config-if-gi)# isis psnp-interval <TIME> [<LEVEL>]

<TIME> – time in seconds, takes values of [1..65535];

<LEVEL> – IS-IS protocol operation level:

  • level-1 – operate only on level 1;
  • level-2-only – operate only on level 2. 

32

Set the interval between LSP transmissions on the Broadcast network (optional).

esr(config-if-gi)# isis lsp-interval <TIME> [<LEVEL>]

<TIME> – time in milliseconds, takes values of [1-10000];

<LEVEL> – IS-IS protocol operation level:

  • level-1 – operate only on level 1;
  • level-2-only – operate only on level 2. 

33

Set the LSP re-distribution interval in the PtP network (optional).

esr(config-if-gi)# isis lsp-retransmit-interval <TIME> [<LEVEL>]

<TIME> – time in seconds, takes values of [1..65535];

<LEVEL> – IS-IS protocol operation level:

  • level-1 – operate only on level 1;
  • level-2-only – operate only on level 2. 

34

Set the authentication algorithm for the hello packets (optional).

esr(config-if-gi)# isis authentication algorithm  <ALGORITHM> [<LEVEL>]

<ALGORITHM> – authentication algorithm:

  • cleartext – unencrypted password;
  • md5 – password is hashed by md5 algorithm;

<LEVEL> – IS-IS protocol operation level:

  • level-1 – operate only on level 1;
  • level-2-only – operate only on level 2. 

35

Set the password for hello packet authentication (optional).

esr(config-if-gi)# isis authentication key ascii-text  { <CLEAR-TEXT> | encrypted <ENCRYPTED-TEXT> } [<LEVEL>]

<CLEAR-TEXT> – password, set by the string of 8 characters;

<ENCRYPTED-TEXT> – encrypted password of 8 bytes (16 characters) in hexadecimal format (0xYYYY ...) or (YYYY ...);

<LEVEL> – IS-IS protocol operation level:

  • level-1 – operate only on level 1;
  • level-2-only – operate only on level 2. 

36

Set the key list for hello packet authentication (optional).

esr(config-if-gi)# isis authentication key chain <KEYCHAIN> [<LEVEL>]

<KEYCHAIN> – key list identifier, set by the string of up to 16 characters;

<LEVEL> – IS-IS protocol operation level:

  • level-1 – operate only on level 1;
  • level-2-only – operate only on level 2. 

...

Configure the IS-IS protocol on routers devices to exchange routing information with neighbors. Router ESR1 will be L1-only, ESR2 will be L1/L2, ESR3 will be L2-only, which will also be in another area.

...