Дерево страниц

Сравнение версий

Ключ

  • Эта строка добавлена.
  • Эта строка удалена.
  • Изменено форматирование.

...

  • <VRF> – VRF name, set by the string of up to 31 characters.
  • <SUBNET> – destination address, can be specified in the following format:
    • BBB.CCC.DDD – host IP address, where each part takes values of [0..255].
    • BBB.CCC.DDD/NN – network IP address with prefix mask, where AAA-DDD take values of [0..255] and NN takes values of [1..32].
  • <NEXTHOP> – gateway IP address, defined as AAA.BBB.CCC.DDD where each part takes values of [0..255];
  • <IF> – an IP interface name specified in the form described in Section Types and naming order of router interfaces;
  • <TUN> – the name of the tunnel is specified as described in section Types and naming order of router tunnels;
  • <RULE> – wan rule number, set in the range of [1..50];
  • blackhole – when specifying the command, the packets to this subnet will be removed by the device without sending notifications to a sender;
  • unreachable – when specifying the command, the packets to this subnet will be removed by the device, a sender will receive in response ICMP Destination unreachable (Host unreachable, code 1);
  • prohibit – when specifying the command, the packets to this subnet will be removed by the device, a sender will receive in response ICMP Destination unreachable (Communication administratively prohibited, code 13);
  • bfd – when specifying the given key, the removal of static route in case of next-hop unavailability is activated.

...

  • <VRF> – VRF name, set by the string of up to 31 characters.
  • <SUBNET> – destination address, can be specified in the following formats:
    • The addresses are defined as X:X:X:X::X where each part takes values in hexadecimal format [0..FFFF].
    • <IPV6-ADDR/LEN> – IP address and mask of a subnet, defined as X:X:X:X::X/EE where each X part takes values in hexadecimal format [0..FFFF] and EE takes values of [1..128].
  • <IPV6-ADDR> – client IPv6 address, defined as X:X:X:X::X where each part takes values in hexadecimal format [0..FFFF];
  • resolve – when specifying the given parameter, gateway IPv6 address will be recursively calculated through the routing table. If the recursive calculation fails to find a gateway from a directly connected subnet, then this route will not be installed into the system;
  • <IF> – an IP interface name specified in the form described in Section Types and naming order of router interfaces;
  • blackhole – when specifying the command, the packets to this subnet will be removed by the device without sending notifications to a sender;
  • unreachable – when specifying the command, the packets to this subnet will be removed by the device, a sender will receive in response ICMP Destination unreachable (Host unreachable, code 1);
  • prohibit – when specifying the command, the packets to this subnet will be removed by the device, a sender will receive in response ICMP Destination unreachable (Communication administratively prohibited, code 13);
  • <METRIC> – route metric, takes values of [0..255].
  • bfd – when specifying the given key, the removal of static route in case of next-hop unavailability is activated.

...

Step

Description

Command

Keys

1

Configure OSFP precedence for the main routing table (optional).

esr(config)# ip protocols ospf preference <VALUE>

<VALUE> – protocol precedence, takes values in the range of [1..255].

Default value: 150.

esr(config-vrf)# ip protocols ospf preference <VALUE>

2

Configure OSFP routing tables capacity (optional).

esr(config)# ip protocols ospf max-routes <VALUE>

<VALUE> – amount of OSPF routes in the routing table, takes values in the range of:

  • for ESR-1000/1200/1500
    /1511/1700/3100/3200 and WLC-3200– [1..500000];
  • for ESR-20/2130//100/200 and WLC-30– [1..300000];
  • for ESR-10/12V(F)/14VF/15 and WLC-15– [1..30000]

Default value for the global mode:

  • for ESR-1000/1200/1500
    /1511/1700/3100/3200 and WLC-3200 – (500000);
  • for ESR-20/21/30/100/200 and WLC-30 – (300000);
  • for ESR-10/12V(F)/14VF/15 and WLC-15– (30000).

Default value for VRF: 0

esr(config)# ipv6 protocols ospf max-routes <VALUE>


3

Enable the output of OSPF neighbor state information (optional).

esr(config)# router ospf log-adjacency-changes


esr(config)# ipv6 router ospf log-adjacency-changes

4

Create IP subnets lists that will be used for further filtration of advertised and received IP routes (optional).

esr(config)# ip prefix-list <NAME>

<NAME> – name of a subnet list being configured, set by the string of up to 31 characters.

esr(config)# ipv6 prefix-list <NAME>

5

Permit or deny the prefixes lists (optional).

esr(config-pl)# permit [ { object-group <OBJ-GROUP-NETWORK-NAME> | <ADDR/LEN> | <IPV6-ADDR/LEN> } ] [ { eq <LEN> | le <LEN> | ge <LEN> [ le <LEN> ] } ]

<OBJ-GROUP-NETWORK-NAME> – IPv4/IPv6 addresses profile name, set by the string of up to 31 characters;

<ADDR> – IP address, defined as AAA.BBB.CCC.DDD where each part takes values of [0..255];

<LEN> – prefix length, takes values of [1..32] in prefix IP lists;

  • eq – when specifying the command, the prefix length mast match the specified one;
  • le – when specifying the command, the prefix length mast be less than or match the specified one;
  • ge – when specifying the command, the prefix length mast be more than or match the specified one;

esr(config-pl)# deny [ { object-group <OBJ-GROUP-NETWORK-NAME> | <ADDR/LEN > | <IPV6-ADDR/LEN> } ] [ { eq <LEN> | le <LEN> | ge <LEN> [ le <LEN> ] } ]

6

Add OSFP process to the system and switch to the OSFP process parameters configuration mode.

esr(config)# router ospf <ID> [vrf <VRF>]

<ID>  – stand alone system number, takes values of [1..65535].

<VRF> – VRF instance name, set by the string of up to 31 characters, within which the routing protocol will operate.

esr(config)# ipv6 router ospf <ID> [vrf <VRF>]

7

Set router identifier for the given OSFP process.

esr(config-ospf)# router-id <ID>

<ID> – router/controller identifier, defined as AAA.BBB.CCC.DDD where each part takes values of [0..255].

<IF> – interface specified in form given in the Types and naming procedure of router interfaces section of CLI command reference guide.

<TUN> – tunnel name specified in form given in the Types and naming procedure of router tunnels section.

esr(config-ipv6-ospf)# router-id <ID>

8

Define OSFP process routes precedence.


esr(config-ospf)# preference <VALUE>

<VALUE> – OSFP process routes precedence, takes values in the range of [1..255].


esr(config-ipv6-ospf)# preference <VALUE>

9Define maximum number of equivalent routes (optional).esr(config-ospf)# maximum-path <PATHS>

<PATHS> – number of equivalent routes to the target, takes values of [1..32].

Default value: 16.

esr(config-ipv6-ospf)# maximum-path <PATHS>

10

Enable compatibility with RFC 1583 (optional).

esr(config-ospf)# compatible rfc1583


esr(config-ipv6-ospf)# compatible rfc1583

11

Add subnets filtration in incoming or outgoing updates (optional).

esr(config-ospf)# prefix-list <PREFIX-LIST-NAME> { in | out }

<PREFIX-LIST-NAME> – name of a subnet list being configured, set by the string of up to 31 characters.

  • in – incoming routes filtration;
  • out – advertised routes filtration.

esr(config-ipv6-ospf)# prefix-list <PREFIX-LIST-NAME> { in | out }

12

Enable advertising of routes received in an alternative way (optional).

esr(config-ospf)# redistribute static [ route-map <NAME> ]

<NAME> – name of the route map that will be used for advertised static routes filtration and modification, set by the string of up to 31 characters.

esr(config-ipv6-ospf)# redistribute static [ route-map <NAME> ]

esr(config-ospf)# redistribute connected [ route-map <NAME> ]

<NAME> – name of the route map that will be used for filtration and modification of advertised directly connected subnets, set by the string of up to 31 characters.

esr(config-ipv6-ospf)# redistribute connected [ route-map <NAME> ]

esr(config-ospf)# redistribute rip [ route-map <NAME> ]

<NAME> – name of the route map that will be used for advertised RIP routes filtration and modification, set by the string of up to 31 characters.

esr(config-ospf)# redistribute bgp <AS> [ route-map <NAME> ]

<AS>  – stand alone system number, takes values of [1..4294967295].

<NAME> – name of the route map that will be used for advertised BGP routes filtration and modification, set by the string of up to 31 characters.

esr(config-ipv6-ospf)# redistribute bgp <AS> [ route-map <NAME> ]

13

Enable OSFP process.

esr(config-ospf)# enable


esr(config-ipv6-ospf)# enable

14

Create OSFP area and switch to the scope configuration mode.

esr(config-ospf)# area <AREA_ID>

<AREA_ID> – area identifier, defined as AAA.BBB.CCC.DDD where each part takes values of [0..255].

esr(config-ipv6-ospf)# area <AREA_ID>

15

Enable subnets advertising (optional). 

esr(config-ospf-area)# network <ADDR/LEN>

<ADDR/LEN> – subnet address, set in the following format:

AAA.BBB.CCC.DDD/NN – network IP address with prefix mask, where AAA-DDD take values of [0..255] and EE takes values of [1..32].

esr(config-ipv6-ospf-area)# network <IPV6-ADDR/LEN>

<IPV6-ADDR/LEN> – IPv6 address and mask of a subnet, defined as X:X:X:X::X/EE where each X part takes values in hexadecimal format [0..FFFF] and EE takes values of [1..128].

16

Specify the area type (optional).

esr(config-ospf-area)# area-type <TYPE> [ no-summary ]

<TYPE> – area type:

  • stub – sets stub value (stub area);
    no-summary – command in conjunction with the 'stub' parameter forms the 'totallystubby' area (only the default route is used to transfer information outside the area).
  • nssa – sets nssa value (NSSA area);
    no-summary – command in conjunction with the 'nssa' parameter forms the 'totallynssa' area (by default the route is generated as an inter-place one).

esr(config-ipv6-ospf-area)# area-type <TYPE> [ no-summary ]

17

Enable the default route generation for NSSA area and its advertising as NSSA-LSA (optional).

esr(config-ospf-area)# default-information-originate


esr(config-ipv6-ospf-area)# default-information-originate

18

Enable the subnet summarization or hiding (optional).

esr(config-ospf-area)# summary-address <ADDR/LEN>  { advertise | not-advertise }

<ADDR/LEN> – IP address and subnet mask, defined as AAA.BBB.CCC.DDD/EE where each part AAA-DDD takes values of [0..255] and EE takes values of [1..32];

  • advertise – if a command is specified, instead of the specified subnets, the total subnet will be advertised;
  • not-advertise – when specifying the command, the subnets included in a subnet specified will not be advertised.

esr(config-ipv6-ospf-area)# summary-address  <IPV6-ADDR/LEN> { advertise | not-advertise }

<IPV6-ADDR/LEN> – IPv6 address and mask of a subnet, defined as X:X:X:X::X/EE where each X part takes values in hexadecimal format [0..FFFF] and EE takes values of [1..128];

  • advertise – when specifying the command instead of the subnets included in a subnet specified, a total subnet will be advertised;
  • not-advertise – the subnets included in a subnet specified will not be advertised.

19

Enable OSFP area.

esr(config-ospf-area)# enable


esr(config-ipv6-ospf-area)# enable

20

Establish a virtual connection between the main and remote areas having several areas between them (optional).

esr(config-ospf-area)# virtual-link <ID>

<ID> – identifier of the router/controller with which the virtual connection is established, defined as AAA.BBB.CCC.DDD where each part takes values of [0..255].

esr(config-ipv6-ospf-area)# virtual-link <ID>

21

Set the time interval in seconds after which the device re-sends a packet that has not received a delivery confirmation (for example, a DatabaseDescription packet or LinkStateRequest packets) (optional).

esr(config-ospf- vlink)# restransmit-interval <TIME>

<TIME> – time in seconds, takes values of [1..65535].

Default value: 5 seconds.

esr(config-ipv6-ospf- vlink)# restransmit-interval <TIME>

22

Set the time interval in seconds after which the device sends the next hello packet (optional).

esr(config-ospf- vlink)# hello-interval <TIME>

<TIME> – time in seconds, takes values of [1..65535].

Default value: 10 seconds.

esr(config-ipv6-ospf- vlink)# hello-interval <TIME>

23

Set the time interval in seconds after which the neighbor is considered to be idle. This interval should be a multiple of the ‘hello interval’ value.

esr(config-ospf- vlink)# dead-interval <TIME>

<TIME> – time in seconds, takes values of [1..65535].

Default value: 40 seconds.

esr(config-ipv6-ospf- vlink)# dead-interval <TIME>

24

Set the time interval in seconds after which the device selects DR in the network (optional).

esr(config-ospf- vlink)# wait-interval <TIME>

<TIME> – time in seconds, takes values of [1..65535].
Default value: 40 seconds

esr(config-ipv6-ospf- vlink)# wait-interval <TIME>

25

Define authentication algorithm (optional).

esr(config-ospf- vlink)# authentication algorithm <ALGORITHM>

<ALGORITHM> – authentication algorithm:

  • cleartext – password, transmitted in unencrypted form (available only for RIP and OSPF-VLINK);
  • md5 – password is hashed by md5 algorithm.

26

Set the password for neighbor authentication (optional).

esr(config-ospf- vlink)# authentication key ascii-text  { <CLEAR-TEXT> | encrypted <ENCRYPTED-TEXT> }

<CLEAR-TEXT> – password, set by the string of 8 to 16 characters.

<ENCRYPTED-TEXT> – encrypted password of 8 to 16 bytes (from 16 to 32 characters) in hexadecimal format (0xYYYY ...) or (YYYY ...).

27

Specify the list of passwords for authentication via md5 hashing algorithm.

esr(config-ospf- vlink)# authentication key chain <KEYCHAIN>

<KEYCHAIN> – key list identifier, set by the string of up to 16 characters.

28

Enable virtual connection.

esr(config-ospf- vlink)# enable


29

Switch to the interface/tunnel/network bridge configuration mode.

esr(config)# interface <IF-TYPE><IF-NUM>

<IF-TYPE> – interface type;

<IF-NUM> – F/S/P – F frame (1), S – slot (0), P – port.

esr(config)# tunnel <TUN-TYPE><TUN-NUM>

<TUN-TYPE> – tunnel type;

<TUN-NUM> – tunnel number.

esr(config)# bridge <BR-NUM>

<BR-NUM> – bridge number.

30

Define the interface / tunnel / network bridge inherence to a specific OSPF process.

esr(config-if-gi)# ip ospf instance <ID>

<ID> – process number, takes values of [1..65535].

esr(config-if-gi)# ipv6 ospf instance <ID>

31

Define the interface inherence to a specific OSPF process area.

esr(config-if-gi)# ip ospf area <AREA_ID>

<AREA_ID> – area identifier, defined as AAA.BBB.CCC.DDD where each part takes values of [0..255].

esr(config-if-gi)# ipv6 ospf area <AREA_ID>

32

Enable the routing via OSFP on the interface.

esr(config-if-gi)# ip ospf


esr(config-if-gi)# ipv6 ospf

33

Enable the mode in which the OSPF process will ignore MTU interface value in incoming Database Description packets (optional).

esr(config-if-gi)# ip ospf mtu-ignore


esr(config-if-gi)# ipv6 ospf mtu-ignore

34

Specify OSFP authentication algorithm (optional).

esr(config-if-gi)# ip ospf authentication algorithm <ALGORITHM>

<ALGORITHM> – authentication algorithm:

  • cleartext – password, transmitted in clear text;
  • md5 – password is hashed by md5 algorithm.

35

Set the password for OSPF neighbor authentication when transmitting an unencrypted password (optional).

esr(config-if-gi)# ip ospf authentication key ascii-text  { <CLEAR-TEXT> | encrypted <ENCRYPTED-TEXT> }

<CLEAR-TEXT> – password, set by the string of 8 to 16 characters;

<ENCRYPTED-TEXT> – encrypted password of 8 to 16 bytes (from 16 to 32 characters) in hexadecimal format (0xYYYY ...) or (YYYY ...).

36

Specify the list of passwords for neighbor authentication via md5 hashing algorithm (optional).

esr(config-if-gi)# ip ospf authentication key-chain <KEYCHAIN>

<KEYCHAIN> – key list identifier, set by the string of up to 16 characters.

37

Set the time interval in seconds after which the device selects DR in the network (optional).

esr(config-if-gi)# ip ospf wait-interval <TIME>

<TIME> – time in seconds, takes values of [1..65535].

Default value: 40 seconds.

esr(config-if-gi)# ipv6 ospf wait-interval <TIME>

38

Set the time interval in seconds after which the device re-sends a packet that has not received a delivery confirmation (for example, a DatabaseDescription packet or LinkStateRequest packets. Optional).

esr(config-if-gi)# ip ospf restransmit-interval <TIME>

<TIME> – time in seconds, takes values of [1..65535].

Default value: 5 seconds.

esr(config-if-gi)# ipv6 ospf restransmit-interval <TIME>

39

Set the time interval in seconds after which the device sends the next hello packet (optional).

esr(config-if-gi)# ip ospf hello-interval <TIME>

<TIME> – time in seconds, takes values of [1..65535].

Default value: 10 seconds.

esr(config-if-gi)# ipv6 ospf hello-interval <TIME>

40

Set the time interval in seconds after which the neighbor is considered to be idle (optional). This interval should be a multiple of the ‘hello interval’ value.

esr(config-if-gi)# ip dead-interval <TIME>

<TIME> – time in seconds, takes values of [1..65535].

Default value: 40 seconds.

esr(config-if-gi)# ipv6 dead-interval <TIME>

41

Set the time interval during which NBMA interface waits before sending a HELLO packet to a neighbor, even if the neighbor is inactive (optional).

esr(config-if-gi)# ip poll-interval <TIME>

<TIME> – time in seconds, takes values of [1..65535].

Default value: 120 seconds.

esr(config-if-gi)# ipv6 poll-interval <TIME>

42

Set static IP address of a neighbor to establish a relation in NMBA and P2MP (Point-to-MultiPoint) networks (optional).

esr(config-if-gi)# ip ospf neighbor <IP> [ eligible ]

<IP> – neighbor’s IP address, defined as AAA.BBB.CCC.DDD where each part takes values of [0..255].

eligible – optional parameter, allows the device to take part in DR selection process in NMBA networks. The interface priority should be greater than zero.

esr(config-if-gi)# ip ospf neighbor <IP> [ eligible ]

<IPV6-ADDR> – neighbor’s IPv6 address, defined as X:X:X:X::X where each part takes values in hexadecimal format [0..FFFF];

eligible – optional parameter, allows the device to take part in DR selection process in NMBA networks. The interface priority should be greater than zero.

43

Define the network type for OSPF neighborhood establishment (optional).

esr(config-if-gi)# ip ospf network <TYPE>

<TYPE> – network type:

  • broadcast – broadcast connection type;
  • non-broadcast – NBMA connection type;
  • point-to-multipoint – point-to-multipoint connection type;
  • point-to-multipoint non-broadcast – point-to-multipoint NBMA connection type;
  • point-to-point – point-to-point connection type.

Default value: broadcast.

esr(config-if-gi)# ipv6 ospf network <TYPE>

44

Set the device priority that is used for DR and BDR selection (optional).

esr(config-if-gi)# ip ospf priority <VALUE>

<VALUE> – interface priority, takes values of [1..65535].

Default value: 120.

esr(config-if-gi)# ipv6 ospf priority <VALUE>

45

Set the metric size on the interface or tunnel (optional).

esr(config-if-gi)# ip ospf cost <VALUE>

<VALUE> – metric size, takes values of [0..32767].

Default value: 150.

esr(config-if-gi)# ipv6 ospf cost <VALUE>

46

Enable BFD protocol for OSPF protocol.

esr(config-if-gi)# ip ospf bfd-enable


esr(config-if-gi)# ipv6 ospf bfd-enable

...

Step

Description

Command

Keys

1

Configure BGP precedence for the main routing table (optional).

esr(config)# ip protocols bgp preference <VALUE>

<VALUE> – protocol precedence, takes values in the range of [1..255].

Default value: BGP (170).

2

Configure the BGP routing table capacity (not required when using the global routing table).

esr(config)# ip protocols bgp max-routes <VALUE>

<VALUE> – amount of BGP routes in the routing table, takes values in the range of:

  • for ESR-1000/1200/1500/1511/1700/3100/3200 and WLC-3200 – [1..5000000];
  • for ESR-20/21/30/100/200 and WLC-30 – [1..2500000];
  • for ESR-10/12V(F)/14VF/15 and WLC-15 – [1..1000000].

The default value for the global routing table:

  • for ESR-1000/1200/1500/1511/1700/3100/3200 and WLC-3200 – [5000000];
  • for ESR-20/21/30/100/200 and WLC-30 – [2500000];
  • for ESR-10/12V/12VF/14VF/15 and WLC-15 – [1000000].

Default value for VRF: 0.

esr(config)# ipv6 protocols bgp max-routes <VALUE>

esr(config-vrf)# ip protocols bgp max-routes <VALUE>

esr(config-vrf)# ipv6 protocols bgp max-routes <VALUE>

3

Enable the output of BGP neighbor state information (optional).

esr(config)# router bgp log-neighbor-changes


esr(config)# ipv6 router bgp log-neighbor-changes

4

Enable ECMP and define the maximum amount of equal routes to a destination point.

esr(config)# router bgp maximum-paths <VALUE>

<VALUE> – amount of valid equal routes to the target, takes the values of [1..16].

5


















Select the filtering method for the information transmitted between routers (mandatory when configuring eBGP to announce subnets).



If route-map-based filtering method is selected, create a list of rules that will be used to filter the advertised and received IP routes in the future.

esr(config)# route-map <NAME>

<NAME> – configured routing rule name, set by the string of up to 31 characters.

Create rule

(config-route-map)# rule <ORDER>

<ORDER> – rule number, takes values of [1..10000].

Define the list of subnets affected by the rule.

esr(config-route-map-rule)#match ip address  { <ADDR/LEN> | object-group <OBJ-GRP-NETNAME> }  [ { eq <LEN> | le <LEN> | ge <LEN 1> [ le <LEN 2> ] } ]

<ADDR/LEN> – IP address and subnet mask, in the format of.

AAA.BBB.CCC.DDD/EE – network IP address with prefix mask, where AAA-DDD take values of [0..255] and EE takes values of [1..32];

<IPV6-ADDR/LEN> – IPv6 address and subnet mask, in the format of:

X:X:X:X::X/EE, where each X part takes values in hexadecimal format [0..FFFF] and EE takes values of [1..128];

<OBJ-GRP-NETNAME> – IP addresses profile name, set by the string of up to 31 characters*;

<LEN>, <LEN 1>, <LEN 2> – prefix length, may take values [1..32] in prefix IP lists for IPv4 and [1..128] for IPv6;

eq – when specifying the command, the prefix length mast match the specified one;

le – when specifying the command, the prefix length mast be less than or match the specified one;

ge – when specifying the command, the prefix length mast be more than or match the specified one;

ge <LEN 1> le <LEN 2> – When specifying a command, the prefix length must be greater than or equal to <LEN> but less than or equal to <LEN1>.

* When using object-group filtering, they must be created in advance.

esr(config-route-map-rule)#match ipv6 address  { <IPV6-ADDR/LEN> | object-group <OBJ-GRP-NETNAME> }  [ { eq <LEN> | le <LEN> | ge <LEN 1> [ le <LEN 2> ] } ]

Permit or deny action for the specified subnets in the rule.

esr(config-route-map-rule)# action {deny | permit}


If prefix-list-based filtering method is selected, create a list of IP networks that will be used to filter the advertised and received IP routes in the future.

esr(config)# ip prefix-list <NAME>

<NAME> – name of a subnet list being configured, set by the string of up to 31 characters.

esr(config)# ipv6 prefix-list <NAME>

Permit or deny the prefixes lists.

esr(config-pl)# permit  { <ADDR/LEN> | object-group <OBJ-GRP-NETNAME>}  [ { eq <LEN> | le <LEN> | ge <LEN 1> [ le <LEN 2> ] } ]

<ADDR/LEN> – IP address and subnet mask, in the format of.

AAA.BBB.CCC.DDD/EE – network IP address with prefix mask, where AAA-DDD take values of [0..255] and EE takes values of [1..32];

<IPV6-ADDR/LEN> – IPv6 address and subnet mask, in the format of:

X:X:X:X::X/EE, where each X part takes values in hexadecimal format [0..FFFF] and EE takes values of [1..128];

<OBJ-GRP-NETNAME> – IP addresses profile name, set by the string of up to 31 characters*;

<LEN>, <LEN 1>, <LEN 2> – prefix length, may take values [1..32] in prefix IP lists for IPv4 and [1..128] for IPv6;

eq – when specifying the command, the prefix length mast match the specified one;

le – when specifying the command, the prefix length mast be less than or match the specified one;

ge – when specifying the command, the prefix length mast be more than or match the specified one;

ge <LEN 1> le <LEN 2> – When specifying a command, the prefix length must be greater than or equal to <LEN> but less than or equal to <LEN1>.

* When using object-group filtering, they must be created in advance.

esr(config-pl)# deny  {<ADDR/LEN> | object-group <OBJ-GRP-NETNAME>}  [ { eq <LEN> | le <LEN> | ge <LEN 1> [ le <LEN 2> ] } ]

esr(config-ipv6-pl)# permit  { <IPV6-ADDR/LEN> | object-group <OBJ-GRP-NETNAME>}  [ { eq <LEN> | le <LEN> | ge <LEN 1> [ le <LEN 2> ] } ]

esr(config-ipv6-pl)# deny  {<IPV6-ADDR/LEN> | object-group <OBJ-GRP-NETNAME> }  [ { eq <LEN> | le <LEN> | ge <LEN 1> [ le <LEN 2> ] } ]

6

Add BGP process to the system and switch to the BGP process parameters configuration mode.

esr(config)# router bgp <AS>

<AS> – stand alone system number, takes values of [1..4294967295].

7

Set the router identifier.

esr(config-bgp)# router-id { <ID> | <IF> | <TUN> }

<ID> – router identifier, defined as AAA.BBB.CCC.DDD where each part takes values of [0..255].

<IF> – interface specified in form given in the Types and naming procedure of router interfaces section of CLI command reference guide.

<TUN> – tunnel name specified in form given in the Types and naming procedure of router tunnels section.

8

Set the Route-Reflector identifier of the cluster to which the router BGP process belongs (if necessary).

esr(config-bgp)# cluster-id <ID>

<ID> – Route-Reflector cluster identifier, defined as AAA.BBB.CCC.DDD where each part takes values of [0..255].

9

Enable generation and sending of a default route, if the default route is in the FIB routing table (optional).

esr(config-bgp)# default-information-originate


10

Set the time interval after which the connection with the opposing party is checked (optional).

esr(config-bgp-af)# timers keepalive <TIME>

<TIME> – time in seconds, takes values of [1..65535].

Default value: 60 seconds.

11

Set time interval after which the opposing party is considered to be unavailable (optional).

esr(config-bgp-af)# timers holdtime <TIME>

<TIME> – time in seconds, takes values of [1..65535].

Default value: 180 seconds.

12

Set the time of minimum and maximum delay during which it is prohibited to establish a connection in order to prevent frequent disconnections (optional).

esr(config-bgp-af)# timers error-wait <TIME1> <TIME2>

<TIME1> – minimum delay time in seconds, takes values of [1..65535].

<TIME2> – maximum delay time in seconds, takes values of [1..65535].

13

Define the global algorithm of neighbor authentication (if necessary).

esr(config-bgp)# authentication algorithm <ALGORITHM>

<ALGORITHM> – encryption algorithm:

  • md5 – password is encrypted by md5 algorithm.

Default value: encryption is not used.

14

Set a global password for authentication with neighbors (used in conjunction with 'authentication algorithm').

esr(config-bgp)# authentication key ascii-text  { <CLEAR-TEXT> | encrypted <ENCRYPTED-TEXT> }

<CLEAR-TEXT> – password, set by the string of 8 to 16 characters;

<ENCRYPTED-TEXT> – encrypted password of 8 to 16 bytes (from 16 to 32 characters) in hexadecimal format (0xYYYY ...) or (YYYY ...).

15

Enable BGP process.

esr(config-bgp)# enable


16

Define the type of configured routing information and switch to this configuration mode.

esr(config-bgp)# address-family { ipv4 | ipv6 } unicast

ipv 4 – IPv4 family;

ipv 6 – IPv6 family;

17

Enable route advertising by BGP process obtained alternatively (if necessary).

esr(config-bgp-af)# redistribute static [ route-map <NAME> ]

<NAME> – name of the route map that will be used for advertised static routes filtration and modification, set by the string of up to 31 characters.

esr(config-bgp-af)# redistribute connected [ route-map <NAME> ]

<NAME> – name of the route map that will be used for filtration and modification of advertised directly connected subnets, set by the string of up to 31 characters.

esr(config-bgp-af)# redistribute rip [ route-map <NAME> ]

<NAME> – name of the route map that will be used for advertised RIP routes filtration and modification, set by the string of up to 31 characters.

esr(config-bgp-af)# redistribute ospf <ID> <ROUTE-TYPE 1>  [<ROUTE-TYPE 2>] [<ROUTE-TYPE 3>] [<ROUTE-TYPE 4>]  [ route-map <NAME> ]

<ID> – process number, takes values of {1..65535};

<ROUTE-TYPE> – route type:

  • intra-area – OSPF process routes advertising within a zone;
  • inter-area – OSPF process routes advertising between zones;
  • external1 – OSPF format 1 external routes advertising;
  • external2 – OSPF format 2 external routes advertising;

<NAME> – name of the route map that will be used for advertised OSFP routes filtration and modification, set by the string of up to 31 characters.

esr(config-bgp-af)# redistribute bgp <AS> [ route-map <NAME> ]

<AS>  – stand alone system number, takes values of [1..4294967295].

<NAME> – name of the route map that will be used for advertised BGP routes filtration and modification, set by the string of up to 31 characters.

18

Enable subnets advertising.

esr(config-bgp-af)# network <ADDR/LEN>

<ADDR/LEN> – subnet address, set in one of the following formats:

  • AAA.BBB.CCC.DDD/EE – network IP address with prefix mask, where AAA-DDD take values of [0..255] and EE takes values of [1..32];
  • X:X:X:X::X/EE – IPv6 address and mask of a subnet, where each X part takes values in hexadecimal format [0..FFFF] and EE takes values of [1..128].

19

Exit global BGP process route information advertisement configuration mode.

esr(config-bgp-af)# exit


20

Add BGP neighbor and switch to the BGP process parameters configuration mode.

esr(config-bgp)# neighbor <ADDR>|<IPV6-ADDR>

<ADDR> – neighbor’s IP address, defined as AAA.BBB.CCC.DDD where each part takes values of [0..255];

<IPV6-ADDR> – client IPv6 address, defined as X:X:X:X::X where each part takes values in hexadecimal format [0..FFFF].

21

Specify neighbor description (optional).

esr(config-bgp-neighbor)# description <DESCRIPTION>

<DESCRIPTION> – neighbor description, set by the string of up to 255 characters.

22

Set the time interval after which the connection with the opposing party is checked (optional).

esr(config-bgp-neighbor)# timers keepalive <TIME>

<TIME> – time in seconds, takes values of [1..65535].

Default value: 60 seconds.

23

Set time interval after which the opposing party is considered to be unavailable (optional).

esr(config-bgp- neighbor)# timers holdtime <TIME>

<TIME> – time in seconds, takes values of [1..65535].

Default value: 180 seconds.

24

Set the time of minimum and maximum delay during which it is prohibited to establish a connection in order to prevent frequent disconnections (optional).

esr(config-bgp-af)# timers error-wait <TIME1> <TIME2>

<TIME1> – minimum delay time in seconds, takes values of [1..65535].

<TIME2> – maximum delay time in seconds, takes values of [1..65535].

Default value: 60 and 300 seconds

25

Set the number of BGP neighbor stand alone system.

esr(config-bgp-neighbor)# remote-as <AS>

<AS> – stand alone system number, takes values of [1..4294967295].

26

Allow connections to neighbors that are located not in directly connected subnets (optional).

esr(config-bgp-neighbor)# ebgp-multihop <NUM>

<NUM> – maximum amount of hops when installing EBGP (used for TTL).

27

Specify BGP neighbor as a Route-Reflector client (optional).

esr(config-bgp-neighbor)# route-reflector-client


28

Set IP/IPv6 router address that will be used as source IP/IPv6 address in transmitted BGP route information updates (optional).

esr(config-bgp-neighbor)# update-source { <ADDR> | <IPV6-ADDR> }

<ADDR> – source IP address, defined as AAA.BBB.CCC.DDD where each part takes values of [0..255];

<IPV6-ADDR> – source IPv6 address, defined as X:X:X:X::X where each part takes values in hexadecimal format [0..FFFF].

<IF> – interface specified in form given in the Types and naming procedure of router interfaces section of CLI command reference guide.

<TUN> – tunnel name specified in form given in the Types and naming procedure of router tunnels section.

29

Enable the mode in which the reception of routes in the BGP attribute, AS Path of which includes the numbers of process stand alone system, is allowed (optional).

esr(config-bgp-neighbor)# allow-local-as <NUMBER>

<NUMBER> – threshold amount of instances of autonomous system number in the AS Path attribute at which the route will be accepted, the range of acceptable values [1..10].

30

Enable the BFD protocol on the configured BGP neighbor (optional, used in conjunction with the update-source parameter).

esr(config-bgp-neighbor)# bfd-enable


31

Specify neighbor authentication algorithm (optional).

esr(config-bgp-neighbor)# authentication algorithm <ALGORITHM>

<ALGORITHM> – encryption algorithm:

md5 – password is encrypted by md5 algorithm.

32

Set the password for neighbor authentication (optional).

esr(config-bgp-neighbor)# authentication key ascii-text  { <CLEAR-TEXT> | encrypted <ENCRYPTED-TEXT> }

<CLEAR-TEXT> – password, set by the string of 8 to 16 characters;

<ENCRYPTED-TEXT> – encrypted password of 8 to 16 bytes (from 16 to 32 characters) in hexadecimal format (0xYYYY ...) or (YYYY ...).

33

Make neighborhood active.

esr(config-bgp-neighbor)# enable


34

Define the type of neighbor configured routing information and switch to this configuration mode.

esr(config-bgp-neighbor)# address-family { ipv4 | ipv6 | vpnv4 } unicast

ipv 4 – IPv4 family;

ipv 6 – IPv6 family;

vpnv4 – VPNv4 family.

35

If prefix list filtering mode is selected, add subnet filtering in incoming or outgoing updates ( Mandatory when configuring eBGP for subnet advertisement).

esr(config-bgp-neighbor-af)# prefix-list <PREFIX-LIST-NAME> { in | out }

<PREFIX-LIST-NAME> – name of a subnet list being configured, set by the string of up to 31 characters.

in – incoming routes filtering;

out – outgoing routes filtering.

36

Set the mode in which the default route is always sent to the BGP neighbor in the update along with other routes (optional, none for vpnv4).

esr(config-bgp-neighbor-af)# default-originate


37

Set the mode in which all updates are sent to BGP neighbor with the IP address of a local router outgoing interface as the next-hop (optional, none for vpnv4).

esr(config-bgp-neighbor-af)# next-hop-self


38

Define the precedence of the routes received from a neighbor (optional).

esr(config-bgp-neighbor-af)# preference <VALUE>

<VALUE> – neighbor routes precedence, takes values in the range of [1..255].

Default value: 170.

39

Set the mode in which private numbers of autonomous systems are removed from the AS Path routes BGP attribute before sending an update (in accordance with RFC 6996) (optional, none for vpnv4).

esr(config-bgp-neighbor-af)# remove-private-as  [ { all | nearest | replace } ]

all – remove all private AS number from AS-path;

nearest – replace the nearest private AS in the AS-path with a nearby public AS;

replace – replace all private AS numbers with the number of the current BGP process.

Default value: all.

40

Enable routing information exchange.

esr(config-bgp-neighbor-af)# enable


...

Блок кода
ESR2# show isis neighbors
IS-IS 2
IS-IS Level 1 Neighbors
System ID                Hostname          Interface         State         Holdtime  SNPA
1111.1111.1111  ESR1                      gi1/0/2             Up              25                  a8f9.4baa.1d42
IS-IS Level 2 Neighbors
System ID               Hostname          Interface         State         Holdtime  SNPA
3333.3333.3333  ESR3                     gi1/0/1             Up               8                   a8f9.4bab.813a

Scroll Pagebreak