Deploying IP Unicast
-
Upload
oleksiy-kovyrin -
Category
Documents
-
view
231 -
download
0
Transcript of Deploying IP Unicast
-
8/3/2019 Deploying IP Unicast
1/83
-
8/3/2019 Deploying IP Unicast
2/83
! "!!!###
-
8/3/2019 Deploying IP Unicast
3/83
$
%&'
(
-
8/3/2019 Deploying IP Unicast
4/83
'
)"**
-
8/3/2019 Deploying IP Unicast
5/83
+
!
,",-.**
-
8/3/2019 Deploying IP Unicast
6/83
/
,*
**%& )0 1
&11
&*10
(*1#
-
8/3/2019 Deploying IP Unicast
7/83
2
(*!
-34#+#4#3.
-
8/3/2019 Deploying IP Unicast
8/83
5
&677
-
8/3/2019 Deploying IP Unicast
9/83
8
61
**
-
8/3/2019 Deploying IP Unicast
10/83
34
(******!
-
8/3/2019 Deploying IP Unicast
11/83
33
61*
**
9*6
-
8/3/2019 Deploying IP Unicast
12/83
3
006
*!*! *!
!1
:*
-
8/3/2019 Deploying IP Unicast
13/83
3$
!"
;
-
8/3/2019 Deploying IP Unicast
14/83
3'
!"
%&/ **0! -;
-
8/3/2019 Deploying IP Unicast
15/83
3+
?*
*
>!1*
,
-
8/3/2019 Deploying IP Unicast
16/83
3/
#
*%& -.*
*7
'
*
-
8/3/2019 Deploying IP Unicast
17/83
32
$%&!
?*
** 6
(0*1
,1*B
-
8/3/2019 Deploying IP Unicast
18/83
35
%&!
# ifconfig lo:1 10.5.0.1 netmask 255.255.255.255 up
# ifconfig lo:1lo:1 Link encap:Local Loopback
inet addr:10.5.0.1 Mask:255.255.255.255
UP LOOPBACK RUNNING MTU:16436 Metric:1
# ifconfig lo0 alias 10.5.0.1 netmask 255.255.255.255
# ifconfig lo0
lo0: flags=8049 mtu 33224
inet 127.0.0.1 netmask 0xff000000inet 10.5.0.1 netmask 0xffffffff
C9
-
8/3/2019 Deploying IP Unicast
19/83
38
%&!
# ifconfig lo0 addif 10.5.0.1/32 up
Created new logical interface lo0:1# ifconfig lo0:1
lo0:1: flags=1000849
inet 10.5.0.1 netmask ffffffff
-
8/3/2019 Deploying IP Unicast
20/83
4
'%&!
*!1
1* %7#7
*
-
8/3/2019 Deploying IP Unicast
21/83
3
("%&!
%*
!07
!
CD7E
>***
-
8/3/2019 Deploying IP Unicast
22/83
#)!
"**7
-. =
-
8/3/2019 Deploying IP Unicast
23/83
$
#)!
*
A61* &
!0
-
8/3/2019 Deploying IP Unicast
24/83
'
")!
;7
F
GH
?*
!0!!
*
-
8/3/2019 Deploying IP Unicast
25/83
+
")!
=%F&
-
8/3/2019 Deploying IP Unicast
26/83
/
")!
**%F&
0*1
?A
*!!!
-
8/3/2019 Deploying IP Unicast
27/83
2
("%&!
-
8/3/2019 Deploying IP Unicast
28/83
5
("%&!
%7
9F& I@!1A
%F&!
!!
-
8/3/2019 Deploying IP Unicast
29/83
8
("%&!
DE*DE
F!I
D7E
!
,-**.
>0-.
-
8/3/2019 Deploying IP Unicast
30/83
$4
("%&!
/++43(
/++43(
F334#+#4#3'
/++44
334#+#4#3'
/++44
/++4+
=
/++4+=
/++$4>= &
/++$4>= &
/++3+=
/++3+=
/++4>=
/++4>=
/++34(&
/++34(&
/++$+=
/++$+=
/+++=
/+++=
-
8/3/2019 Deploying IP Unicast
31/83
$3
#%&!
C
*%& ,6*
J*
!6
,! %&
"
-
8/3/2019 Deploying IP Unicast
32/83
$
*
>00K
7>*
;; ANSWER SECTION:
ns1.example.com. 86400 IN A 10.5.0.1
-
8/3/2019 Deploying IP Unicast
33/83
$$
>
?&0&&&0!*
>*C
(**>
;7*6
&**
-
8/3/2019 Deploying IP Unicast
34/83
$'
,
6-7.%&0A*
,-.%&A
*
!
-
8/3/2019 Deploying IP Unicast
35/83
$+
%&'
(
-
8/3/2019 Deploying IP Unicast
36/83
$/
>
33 ;"
*,;&
1? /'-;
-
8/3/2019 Deploying IP Unicast
37/83
$2
#**+
&",6
*;
-
8/3/2019 Deploying IP Unicast
38/83
$5
#**+
917%& 192.175.48.0/24
*3/!!
33
-
8/3/2019 Deploying IP Unicast
39/83
$8
%&!,
router bgp 112
bgp router-id 192.175.48.254
network 192.175.48.0
neighbor PEER_IP remote-as PEER_ASneighbor PEER_IP ebgp-multihop
neighbor PEER_IP next-hop-self
CJ##
policy-statement advertise-aggregate {term first-term {
from protocol aggregate;
then accept;
}
term second-term {
from route-filter 192.175.48.0/24 longer;
then reject;
}
}
[continued]
J##
M"!!!##N!33O
-
8/3/2019 Deploying IP Unicast
40/83
'4
%&!,
# set routing-options aggregate route 192.175.48.0/24
[edit protocols bgp group 112]
# set export advertise-aggregate
# set type external
# set peer-as PEER_AS
# set neighbor PEER_IP
J##
-
8/3/2019 Deploying IP Unicast
41/83
'3
#**+
zone 10.in-addr.arpa { type master; file db.RFC-1918; };
zone 254.169.in-addr.arpa { type master; file db.RFC-1918; };
...
9%>*
$TTL 300
@ IN SOA prisoner.iana.org. hostmaster.root-servers.org. (
2002040800 30m 15m 1w 1w )
NS blackhole-1.iana.org.
NS blackhole-2.iana.org.
G
-
8/3/2019 Deploying IP Unicast
42/83
'
)#
&"
!*)-01.
1*!
AN>L
F"*!
")7%&
-
8/3/2019 Deploying IP Unicast
43/83
'$
)#
D!3
$++2
*%
... 3557 3557 3557F>& ... 23709 3557>&-=.
-
8/3/2019 Deploying IP Unicast
44/83
''
-)./"
;>>CFL*#C;F
* D*
E
>-204.74.112.1, 204.74.113.1.
(!'I** =7
.
-
8/3/2019 Deploying IP Unicast
45/83
'+
-)./"
?
C! **0**
% 0 #
-
8/3/2019 Deploying IP Unicast
46/83
'/
%0#
&"
?!
>7%&-*.
F"!>*7*%&
") I*%&
% 0 #
-
8/3/2019 Deploying IP Unicast
47/83
'2
%0#
128.2.1.0/26 *7
-*%&. (!%&"128.2.1.10,128.2.1.11
)9%>8 *'I/*
?&0&&&
% 0 #
-
8/3/2019 Deploying IP Unicast
48/83
'5
%0#
=7
-H.NC&*!
% 0 # % &
-
8/3/2019 Deploying IP Unicast
49/83
'8
%0#%&
options {
listen-on { 128.2.1.10; 128.2.1.11; };
query-source address 128.2.4.21;};
9%>8
router ospf 1area 0.0.0.0 authentication message-digest
area 128.2.4.0 authentication message-digest
area 128.2.4.0 nssa default-information-originate no-summary
network 128.2.4.0 0.0.0.63 area 128.2.4.0
network 128.2.0.0 0.0.255.255 area 0.0.0.0
);
% 0 # % &
-
8/3/2019 Deploying IP Unicast
50/83
+4
%0#%&
options {
listen-on { 128.2.1.10; 128.2.1.11; };
query-source address 128.2.4.21;};
9%>8
router ospf 1area 0.0.0.0 authentication message-digest
area 128.2.4.0 authentication message-digest
area 128.2.4.0 nssa default-information-originate no-summary
network 128.2.4.0 0.0.0.63 area 128.2.4.0
network 128.2.0.0 0.0.255.255 area 0.0.0.0
);!
,1A
7***#
% 0 # % &
-
8/3/2019 Deploying IP Unicast
51/83
+3
%0#%&
[edit protocols ospf]
area 4 {
nssa {area-range 128.2.4.0/26;
default-lsa {
default-metric metric;
type-7;
}
no-summaries;
}
authentication-type md5;
interface interface;
}
);0
$ , )! %&
-
8/3/2019 Deploying IP Unicast
52/83
+
$(,)!%&
interface eth0
ip address 128.2.4.21/26
!
interface lo:1
ip address 128.2.1.10/32
!
interface lo:2
ip address 128.2.1.11/32
6#*interface eth0
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 [key]
!
router ospf
ospf router-id 128.2.4.21
ospf abr-type cisco
compatible rfc1583
area 128.2.4.0 authentication message
area 128.2.4.0 nssanetwork 128.2.4.21/26 area 128.2.4.0
redistribute connected
distribute-list 50 out connected
!
access-list 50 permit host 128.2.1.10
access-list 50 permit host 128.2.1.11
*#*
! )
-
8/3/2019 Deploying IP Unicast
53/83
+$
!)
&" &%,7,*;&
*
*-;&.
!**;&*
>*7
F",;& *!
")*;&-;
-
8/3/2019 Deploying IP Unicast
54/83
+'
!)
;&
1 ;&
*
;&*
,&;& -
. ;&
! )
-
8/3/2019 Deploying IP Unicast
55/83
++
!)
interface Loopback0
description Router Management
ip address 10.2.4.249 255.255.255.255
ip pim sparse-modeinterface Loopback1
description Anycast RP Interface
ip address 10.2.1.130 255.255.255.255
ip pim sparse-mode
!
ip msdp peer 10.2.4.248 connect-source Loopback0
ip msdp peer 10.2.4.250 connect-source Loopback0ip msdp mesh-group CMU-MSDP 10.2.4.248
ip msdp mesh-group CMU-MSDP 10.2.4.250
ip msdp cache-sa-state
ip msdp originator-id Loopback0
;&;
ip pim rp-address 10.2.1.130 override
ip pim accept-rp 10.2.1.130
>7;&;
! )
-
8/3/2019 Deploying IP Unicast
56/83
+/
!)
[edit interfaces lo0 unit 0 family inet]
# set address 10.2.4.249/32
# set address 10.2.1.130/32
[edit protocols pim]rp {
local {
address 10.2.1.130;
}
}
interface all {
mode sparse;version 2;
}
[edit protocols msdp]
group CMU-MSDP {
local-address 10.2.4.249;
mode mesh-group;
peer 10.2.4.248;peer 10.2.4.250;
}
;&;[edit protocols pim]
rp {
static {
address 10.2.1.130 {version 2;
}
}
}
>7;&;
! )
-
8/3/2019 Deploying IP Unicast
57/83
+2
!)
9F&0,9F&1;
"#
;&*F-. ;&
;&
*
;
! )
-
8/3/2019 Deploying IP Unicast
58/83
+5
!)
;&
;&
9F&0,9F&1;
# ,;& *-.
;&
L;&
*
,&,0)6
;
#'0
-
8/3/2019 Deploying IP Unicast
59/83
+8
#'0
&"?!1**-##!010.
*1I1A!**!11
F"*!**1*
")
1!1
#'0
-
8/3/2019 Deploying IP Unicast
60/83
/4
#'0
(**1"
*
*%&
9F&70"*
,1
1
JF0,&-*1.
12 )!
-
8/3/2019 Deploying IP Unicast
61/83
/3
12)!
&"*/'*/'
F"&!*
/! ")!71!%&'
**/'
12 )!
-
8/3/2019 Deploying IP Unicast
62/83
/
12)!
%&/91
%&'91
/'
;;
/';;
44""3//1
'/'*
38#55#88#4'
4""4
>%&/)/'&*
/';
.%(, #
-
8/3/2019 Deploying IP Unicast
63/83
/$
.% ,#
)!*7(&0
=!0 =70
=6!
90**!
.%(,#
-
8/3/2019 Deploying IP Unicast
64/83
/'
J*!1**0!
DP1Q! Q0
1!!
!707P#E
7 &J0'4$
034
-
8/3/2019 Deploying IP Unicast
65/83
/+
3 4
>(&(
;%)
K
167)&DE
-
8/3/2019 Deploying IP Unicast
66/83
//
%&'
$
,7
%&/
!($"$
-
8/3/2019 Deploying IP Unicast
67/83
/2
,7*
!
"7
*! ,@A 0
,** !*
1
-
8/3/2019 Deploying IP Unicast
68/83
/5
%&/0;
-
8/3/2019 Deploying IP Unicast
69/83
/8
** *
** *
%&
;6*
!#
>!I
> 6#1**#
> 6#1**#
1
*
*
%*
#
);
-
8/3/2019 Deploying IP Unicast
70/83
24
** *
** *
%&
;6*
!#
>!I
> 6#1**#
> 6#1**#
1
*
*
%*
#
);
-
8/3/2019 Deploying IP Unicast
71/83
23
** *
** *
%&
;6*
!#
>!I
> 6#1**#
> 6#1**#
1
*
*
%*
#
);
-
8/3/2019 Deploying IP Unicast
72/83
2
!$+3$ :*-.*
&!
*7
6
?*
16*
1!
-
8/3/2019 Deploying IP Unicast
73/83
2$
$+3$)&
>0#66
D)1E
$+3$(& *
*
&**!
1!
-
8/3/2019 Deploying IP Unicast
74/83
2'
0677
$+3$*"
!***%&
1
-
8/3/2019 Deploying IP Unicast
75/83
2+
;-$+3$.
7;
subnet prefix 0000000000000
357
;
subnet prefix anycast ID
2
11111111111
337
subnet prefix anycast ID/' 2
111111011..11+2=)%7/'
DE
>7=)%7/'
#!""
-
8/3/2019 Deploying IP Unicast
76/83
2/
!1
C*!***
1*/
6!7
-
8/3/2019 Deploying IP Unicast
77/83
22
&""!!!###
K,"1R#
12)!
-
8/3/2019 Deploying IP Unicast
78/83
25
>%&/)/'&*
/';
"44"544"**3*""3"443"'5"'"44""3%
&/
?%&/1
12)!
-
8/3/2019 Deploying IP Unicast
79/83
28
>%&/)/'&*
/';
/';1'
1 >"='/*
"44"544"**3*""3"443"'5"'"44""3%
&/
"38#55#88#3
&"'3%&'
"35##++#$3
12)!
-
8/3/2019 Deploying IP Unicast
80/83
54
/'
;;
/';;
%&/91
"44"544"**3*""3
"443"'5"'"44""3%&/
"38#55#88#3&"'3
%&
'
"35##++#$3 &1
;'0*!/
12)!
-
8/3/2019 Deploying IP Unicast
81/83
53
/'
;;
/';;
%&/91
"443"'5"'"44""3
"44"544"**3*""3%&/
"35##++#$3
&"'3%&
'
"M;;6O ;44""3/
;*!/'7*I'/*
12)!
-
8/3/2019 Deploying IP Unicast
82/83
5
>%&/)/'&*
/';
/';'I*!/
1
"443"'5"'"44""3"44"544"**3*""3%
&
/
"35##++#$3
&"'3%&'
"M;;6O
&
-
8/3/2019 Deploying IP Unicast
83/83
5$