Hitchikers Guide to the CCIE v0.5

8/10/2019 Hitchikers Guide to the CCIE v0.5

1/179

CISQUEROS.BLOGSPOT.COM

presents

Hitchhikers Guide to the CCIEv0.5_august_2014


2/179

2Hitchhikers Guide to the CCIE v0.5 [cisqueros.blogspot.com]

This pge !s i"te"tio"ll# le$t bl"k.


3/179

%Hitchhikers Guide to the CCIE v0.5 [cisqueros.blogspot.com]

About

This is "othi"g more but script o$ simple guideli"es I mde duri"g m# CCIE preprtio"s& 20'2(20'). Hve i" mi"d tht I creted this script

throughout the e"tire preprtio" period& so some topics might seem bsic& s m# level !s CC*+& !hile some others require the reder to

hve the lmost(CCIE level. I$ #ou $i"d "# questio"ble co"te"t& plese let me k"o! "d I,ll revise i t.

I$ #ou $i"d m# "otes use$ul - I,m more th" gld I could help. ou c" use it& shre it& !htever& s lo"g s #ou do",t tr# to sell it or publish it s

#our o!".

/ost o$ the topics hve lso bee" published o" m# log& so plese check it out1 cisqueros.blogspot.com

Legal Notice: All certification-related titles are registrated trademarks of Cisco Systems, Inc.This script and contents contained herein, is not associated with or endorsed by Cisco.

Copyright Cisqeros, Inc.


4/179

)Hitchhikers Guide to the CCIE v0.5 [cisqueros.blogspot.com]

Table of Contents

bout .................................................................................................................................................................................................................... %

3* 4!itchi"g .......................................................................................................................................................................................................... '0

3* 4!itchi"g Tips "d Tricks ............................................................................................................................................................................. ''

3* 6ilters $or *7*(I+ Tr$$ic ........................................................................................................................................................................... ''

/E/78 7+TI/I9TI7* ( 4:/ ;4!itch :tbse /"geme"t< ..................................................................................................................... '2

I*TE86CE 4ttuses ............................................................................................................................................................................................ '%

=Tu"i"g> the C/ Tble ..................................................................................................................................................................................... '%

T+ ( 3* Tru"ki"g +rotocol............................................................................................................................................................................. '%

T+ +ru"i"g ........................................................................................................................................................................................................ ')

/+4 ( 3* /embership +olic# 4erver ............................................................................................................................................................ '5

Tru"ks "d :T+ ;:#"mic Tru"ki"g +rotocol< .................................................................................................................................................... '5

+8ITE 3*4 ................................................................................................................................................................................................... '?

:ot'q Tu""eli"g1 @02.'q& Ai"A Tu""eli"g ......................................................................................................................................................... '@4p""i"g Tree +rotocol ;4T+< ............................................................................................................................................................................. '@

Tu"i"g the 4p""i"g Tree ................................................................................................................................................................................... 'B

+ort$st ............................................................................................................................................................................................................... 20

/ultiple 4p""i"g Tree +rotocol ;/4T< .............................................................................................................................................................. 20

+: Gurd ........................................................................................................................................................................................................ 2'

+: 6ilter.......................................................................................................................................................................................................... 2'

8oot Gurd ......................................................................................................................................................................................................... 22

"idirectio"l 3i"k :etectio" ;:3:< "d 3oop Gurd ...................................................................................................................................... 22

+rotected +orts ................................................................................................................................................................................................... 2%

478CE G8: "d :HC+ 4*77+I*G ............................................................................................................................................................... 2)

ETHE8CH**E3 .................................................................................................................................................................................................. 2)

:I ;:#"mic 8+ I"spectio"< ............................................................................................................................................................................ 2?

4*/+ ( :+ '?'&'?2 .......................................................................................................................................................................................... 2@

/o"itori"g [4+*& 84+*] ................................................................................................................................................................................. 2B

4mrtport /cros ........................ .................... ....................... .................. ........................ ........................ .................. ....................... ................. 2B

3oggi"g ................................................................................................................................................................................................................ 2B

4torm Co"trol ..................................................................................................................................................................................................... %0HTT+ 4erver ;HTT+ ccess< o" 4!itch .............................................................................................................................................................. %0

8outer o" 4TICD "d I+ 8I:GI*G ................................................................................................................................................................... %'

Ctl#st /E%)00 4!itchi"g1 *I(E*I 3*s v.s. +rivte 3*s ..................... ..................... ...................... ....................... .................. ................ %'

I+ 4ervices ................................................................................................................................................................................................................ %%

I+ 4ervices Tips "d Tricks ................................................................................................................................................................................... %)

H48+ ( Hot 4t"db# 8outi"g +rotocol ................................................................................................................................................................. %)

88+ ( irtul 8outi"g 8edu"d"c# +rotocol ..................................................................................................................................................... %5

G3+ ( Globl 3od l"ci"g +rotocol ............................................................................................................................................................... %?

I8:+ ( IC/+ 8outer :iscover# +rotocol .............................................................................................................................................................. %

:8+ ( Cisco :istributed 8oute +rocessor ............................................................................................................................................................ %@


5/179


F4 "d FCC+ +rotocol .................................................................................................................................................................................. %@

*T+ ( *et!ork Time +rotocol ............................................................................................................................................................................. %B

I+ 43 ( /o"itor the *et!ork +er$orm"ce ....................................................................................................................................................... )0

4TTIC *T ......................................................................................................................................................................................................... )'

:*/IC *T ....................... ................... ........................ ....................... .................. ........................ .................. ........................ ................... ..... )2

3od bl"ci"g usi"g *T ................................................................................................................................................................................... )2

+T ;*T 7verlod< ............................................................................................................................................................................................ )%+8 ( Fhe" #ou "eed to impleme"t tr$$ic redirectio"s usi"g *T ................................................................................................................... )%

4ttic *T redu"d"c# !ith H48+ ...................................................................................................................................................................... ))

4clbilit# $or 4tte$ul *T ;4*T< ..................................................................................................................................................................... ))

*T Tr"sltio"s !ith the 7utside 4ource ......................................................................................................................................................... )5

*T o" 4tick ..................................................................................................................................................................................................... )5

:HC+ 4erver ...................... ................... ........................ ........................ .................. ....................... .................. ........................ .................... ........ )?

C*4 ;Cisco *et!orki"g 4ervices< ........................................................................................................................................................................ )?

G8E Tu""els ........................................................................................................................................................................................................ )

rious I74 Tricks ............................................................................................................................................................................................... )

I+ 8outi"g ................................................................................................................................................................................................................ )B

I+v) 8outi"g TI+4 ................................................................................................................................................................................................ 50

+8 ( +olic# sed 8outi"g ................................................................................................................................................................................. 50

E7T - E"h"ced 7bect Trcki"g ........................................................................................................................................................................ 50

7:8 ( 7*(:E/*: 87TI*G ............................................................................................................................................................................ 5'

8I+ ....................................................................................................................................................................................................................... 5'

8I+1 uthe"tictio" ...................... .................... ........................ ................. ........................ ........................ .................. ....................... ................. 5'

8I+1 Timers .......................................................................................................................................................................................................... 52

8I+1 pdtes Co"trol........................................................................................................................................................................................... 5%

8I+1 7664ET 3I4T4 ................................................................................................................................................................................................ 5%

8I+1 pdte 4ource Co"trol ................................................................................................................................................................................ 5%

8I+1 8oute 4ummrii"g...................................................................................................................................................................................... 5)

8I+1 8oute 6ilteri"g usi"g +re$i 3ists .................................................................................................................................................................. 5)

74+6 .................................................................................................................................................................................................................... 55

74+6 over 6rme(8el#& $ocus o" *et!ork T#pes .............................................................................................................................................. 55

74+6 87:C4T vs. +7I*T(T7(+7I*T vs. +7I*T(T7(/3TI+7I*T *et!orks.................................................................................................. 5?

74+61 Co"$igurtio" o" I*TE86CE 3EE3 .......................................................................................................................................................... 5?

74+61 Co"$igurtio" I74 J8 ................................................................................................................................................................................ 5

74+61 6: ;idirectio"l 6or!rdi"g :etectio"< ................................................................................................................................................ 5@

74+61 Timers ....................................................................................................................................................................................................... 5@

74+61 uthe"tictio" .......................................................................................................................................................................................... 5@

74+61 I74 J8 uthe"tictio" .............................................................................................................................................................................. 5B

74+61 8oute 8edistributio" ................................................................................................................................................................................ 5B

74+6 8oute 4ummritio" ................................................................................................................................................................................ ?0

74+6 irtul 3i"k ................................................................................................................................................................................................. ?0

74+6 Cost ............................................................................................................................................................................................................ ?'


6/179

?Hitchhikers Guide to the CCIE v0.5 [cisqueros.blogspot.com]

8edirecti"g Tr$$ic ;678CI*G +TH< ................................................................................................................................................................ ?'

74+6 "d the G8E Tu""els.................................................................................................................................................................................. ?2

74+6 34 T#pes "d 8E T+E4 ........................................................................................................................................................................ ?2

74+6 4T4 ........................................................................................................................................................................................................ ?)

74+6 8oute 6ilteri"g ........................................................................................................................................................................................... ?5

74+6 *o"(rodcst *et!orks .......................................................................................................................................................................... ??

:*4 3ookup i" 74+6 ........................................................................................................................................................................................... ?I4+6 ..................................................................................................................................................................................................................... ?

6or!rd ddress 4uppressio" ............................................................................................................................................................................ ?

74+6 4hm 3i"k .................................................................................................................................................................................................. ?@

I4(I4 ..................................................................................................................................................................................................................... 0

I4(I4 3evel ' "d 3evel 2 dce"cies .................................................................................................................................................................. '

I4(I4 *et!ork T#pes& +th 4electio" "d 8oute 3eki"g ..................................................................................................................................... '

I4(I4 6: ;idirectio"l 6or!rdi"g :etectio"< .................................................................................................................................................. %

I4(I4 uthe"tictio" ............................................................................................................................................................................................ %

EIG8+ .................................................................................................................................................................................................................. 5

EIG8+ Ksho! "eighborsK comm"d .................................................................................................................................................................... 5

EIG8+ /etric ( D lues ...................................................................................................................................................................................... ?

EIG8+ 8oute 4ummritio" "d 3ek /ps ......................................................................................................................................................

EIG8+ :e$ult Gte!# .......................................................................................................................................................................................

8I*CE Comm"d .......................................................................................................................................................................................... @

EIG8+ uthe"tictio" ......................................................................................................................................................................................... @

EIG8+1 /imum Hops ....................................................................................................................................................................................... @

EIG8+ dmi"istrtive :ist"ce ........................................................................................................................................................................... B

EIG8+ pdtes F +erce"t ................................................................................................................................................................................ B

EIG8+ 8edistribute 8outes i"to EIG8+ ................................................................................................................................................................ B

EIG8+ o$$set(list [metric dustme"ts] ................................................................................................................................................................ B

EIG8+ 4tub .......................................................................................................................................................................................................... B

EIG8+ 8oute 6ilteri"g .......................................................................................................................................................................................... @0

G+ TI+s "d est +rctices ................................................................................................................................................................................ @0

G+ ersio" ........................................................................................................................................................................................................ @%

G+ +eer(Group .................................................................................................................................................................................................. @%

G+ +eer(4essio" "d +eer(+olic# Templtes .................................................................................................................................................... @%

G+ uthe"tictio" ............................................................................................................................................................................................ @)

G+ 8oute 8e$lectors .......................................................................................................................................................................................... @)

G+ CD:778 8oute ....................................................................................................................................................................................... @?

G+ C7*:ITI7*3 dvertiseme"ts ( dvertise /ps ............................ ........................ .................. ........................ ................. ........................ @?

G+ 8oute :mpe"i"g ....................................................................................................................................................................................... @

G+ 8oute 4ummritio" .................................................................................................................................................................................. @@

G+ I*LECT "d EJI4T mp ................................................................................................................................................................................. @@

G+ Commu"it# ttribute .................................................................................................................................................................................. @@

G+ M 3od l"ci"g ......................................................................................................................................................................................... @B


7/179

Hitchhikers Guide to the CCIE v0.5 [cisqueros.blogspot.com]

'. 4(+th ;The less 4s i" the pth ( the etter< ............................................................................................................................................... B0

2. Feight ;the Higher ( the etter< ..................................................................................................................................................................... B2

%. /E: ;/ulti Eit :iscrimi"tor< ....................................................................................................................................................................... B%

). 37C3 +8E6E8E*CE ........................................................................................................................................................................................ B%

G+ 6ilters1 :istributio" "d +re$i lists ............................................................................................................................................................. B)

G+1 8egulr Epressio"s ................................................................................................................................................................................... B)

G+ Co"$edertio"s ..................... .................... ....................... ................... ....................... ........................ ................. ........................ ................. B5/+(G+ ;/ulti(+rotocol G+< ............................................................................................................................................................................ B?

8oute 8edistributio" TI+s .............................................................................................................................................................................. B

Ao4 .......................................................................................................................................................................................................................... B@

Ao4 - Clssi$ictio" "d /rki"g........................................................................................................................................................................ BB

Ao4 o" ccess +orts ......................................................................................................................................................................................... '0%

:4C+ "d C74 /ppi"g .................................................................................................................................................................................... '0)

/p C74 to :4C+ o" device ................................ ....................... ................... ....................... ........................ .................. ....................... ........ '05

Ao4 +73ICI*G ( I*:II:3 "d GG8EGTE +73ICE8 ................................................................................................................................... '05

+8I78IT AEI*G ;priorit#(list< M C4T7/ AEI*G ;queue(list< ............................................................................................................... '05

F6A ( # de$ult !orks !ith I+ +8E4E:E*CE................................................................................................................................................... '0?

84+ ( 8esource 8eservtio" +rotocol ...................... ........................ ................... ...................... ........................ .................. ........................ .... '0?

I+v? Ao4 ..................... ..................... ..................... ........................ .................. ........................ .................. ....................... ........................ .......... '0

/tch /C ::8E44 ....................................................................................................................................................................................... '0

Ao4 Co"gestio" /"geme"t& +olici"g "d 4hpi"g ....................................................................................................................................... '0

Ao4 6rme(8el# 4H+I*G ............................................................................................................................................................................... '0@

Ao4 6rme(8el# +I+A ;+E8(I*TE86CE +riorit# Aueui"g< .............................................................................................................................. '''

Ao4 6rme(8el# +37: "d HE:E8 C7/+8E44I7* ................................................................................................................................ '''

Ao4 CF6A ( co"$igured usi"g /AC ................................................................................................................................................................ '''

Ao4 33A ;3o! 3te"c# Aueui"g


8/179

@Hitchhikers Guide to the CCIE v0.5 [cisqueros.blogspot.com]

68/E(8E3 T7(I*4T33 ........................................................................................................................................................................... '2%

I+ /ulticst ..................... ................... ........................ ........................ ................. ........................ .................. ........................ .................... ............. '2)

/ulticst TI+4 ................................................................................................................................................................................................... '25

/ulticst ( IG/+ ............................................................................................................................................................................................... '2?

Co"$igure +I/ /ulticst ................................................................................................................................................................................... '2

+I/ :e"se /ode& +I/(:/ ( 6or the pplictio"s EE87*E !"ts............................. ................... ........................ ..................... ................... '2B

4TTIC 8E*:E979 +7I*T ;8+< Co"$igurtio" ............................................................................................................................................... '%0:E4IG*TE: 87TE8 ;:8< Co"$igurtio" ........................................................................................................................................................ '%0

I+ /3TIC4T1 T7/TIC 8E*:E979 +7I*T ;uto(8+< Co"$igurtio" .................................................................................................... '%'

I+ /3TIC4T1 48 ;ootstrp 8outer< Co"$igurtio" ..................................................................................................................................... '%2

I+ /3TIC4T1 /4:+ ;/ulticst 4ource :iscover# +rotocol< Co"$igurtio" .................................................................................................... '%%

/ultiprotocol G+ ;/+(G+< M I+ /ulticst .................................................................................................................................................... '%%

I+ /3TIC4T1 Co"$iguri"g 44/ ;4ource 4peci$ic /ulticst< ............................................................................................................................ '%)

I+ /3TIC4T1 idirectio"l +I/ ;idir(+I/< .................................................................................................................................................... '%5

I+ /3TIC4T1 Helper /p .............................................................................................................................................................................. '%?

4ecurit# .................................................................................................................................................................................................................. '%

4ecurit# TI+4 ..................................................................................................................................................................................................... '%@

3#er 2 4ecurit#................................................................................................................................................................................................. '%B

ccess 8estrictio"s "d +rivilege 3evels ........................................................................................................................................................... ')0

8C ;8ole sed ccess Co"trol< .................................................................................................................................................................... ')0

8outer 4ecurit# ( est +rctices ........................................................................................................................................................................ ')0

D*7F* TTCD4 "d ho! to preve"t ............................................................................................................................................................. ')'

**E8 "d /E* Co"$igurtio" ................................................................................................................................................................... ')2

Co"$igure 44H ccess ........................................................................................................................................................................................ ')2

:*CE: ccess 3ists ;C3< Co"$igurtio" .................................................................................................................................................... ')%

:*/IC C3 ;k 3ock "d ke# C3< .............................................................................................................................................................. '))

8E63EJIE C3 ( 6or 4essio" 6ilteri"g ............................................................................................................................................................... ')5

TC+ I*TE8CE+T ( To preve"t TC+ 4* :o4 ttcks ........................................................................................................................................... ')5

CC ( Co"tet sed ccess Co"trol 6ire!ll ................................................................................................................................................. ')?

+/ ( +ort to pplictio" /ppi"g .................................................................................................................................................................. ')

u8+6 ( "icst 8everse +th 6or!rdi"g .......................................................................................................................................................... ')

9o"e sed 6ire!ll .......................................................................................................................................................................................... ')@

C7*T873 +l"e +olic# ;C++r< ........................................................................................................................................................................... ')B

I74 I+4 ;I"trusio" +reve"tio" 4#stem< .............................................................................................................................................................. '50

uthe"tictio" .......................................................................................................................................................................................... '5'

/+34 ...................................................................................................................................................................................................................... '5%

/+34 sics1 3:+ .............................................................................................................................................................................................. '5)

/+34 Co"$igurtio" .......................................................................................................................................................................................... '5

/+34 36I "d 3bels ;3bel 4pci"g< ............................................................................................................................................................... '5

/+34 4essio" +rotectio" .................................................................................................................................................................................. '5B

/+34 3%+*1 86& 8: "d 8T ........................ ..................... ....................... .................. ........................ .................. ....................... .................... '?0

86 3ite ............................................................................................................................................................................................................. '?%


9/179

BHitchhikers Guide to the CCIE v0.5 [cisqueros.blogspot.com]

/+34 Tu""els.................................................................................................................................................................................................... '?%

32+* ( To/ ;"# Tr"sport over /+34< ....................................................................................................................................................... '?)

I"ter(4 /+34 3%+* ........................................................................................................................................................................................ '?)

/+34 3%+* I"ter(4 7ptio" - ck(to(ck 86 Ech"ge ......................................................................................................................... '?5

/+34 3%+* I"ter(4 7ptio" - +*v) eG+ Ech"ge ................................................................................................................................. '?5

/+34 3%+* I"ter(4 7ptio" C - /ultihop +*v) eG+ Ech"ge ................................................................................................................. '?5

/+34 Tu""els1 3%+* !ith 4ttic 8outi"g "dNor 8I+ ...................................................................................................................................... '?? +E - CE 8outi"g !ith EIG8+ .............................................................................................................................................................................. '?

I+v? over /+34 !ith ?+E M ?+E ...................................................................................................................................................................... '?

I+v? ........................................................................................................................................................................................................................ '?B

I+v? TI+4 ........................................................................................................................................................................................................... '0

I+v? sics ........................................................................................................................................................................................................ '0

Co"vert /C to 3i"k 3ocl I+v? ddress .......................................................................................................................................................... '2

I+v? 8outi"g ...................... ................... ........................ ........................ ...................... ........................ ................. ........................ .................. .... '%

8I+"g ................................................................................................................................................................................................................. ')

74+6v% .............................................................................................................................................................................................................. ')

EIG8+ I+v? ..................... .................... ....................... ........................ .................. ........................ ................. ........................ ...................... ........ '5

/+(G+& usi"g G+() protocol ete"sio"s $or I+v? ....................................................................................................................................... '?

I+v? Tu""els ...................... ................... ........................ ........................ ...................... ........................ ................. ........................ .................. .... '

I+v? /ulticst 8outi"g ...................................................................................................................................................................................... '@


10/179

'0Hitchhikers Guide to the CCIE v0.5 [cisqueros.blogspot.com]

LAN Switching


11/179

''Hitchhikers Guide to the CCIE v0.5 [cisqueros.blogspot.com]

OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO

LAN Switching Tips and TricksOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO

TIP [general]1 To remove 673:E8 $rom the $lsh1 #delete /force /recursive flash:c3750-ipbase-mz.122-35.SE5

TIP [general]1 To check the curre"t C+ processes& "d sort them "icel#& #ou m# use this comm"d& "d crete " lis belo!1

# show process cpu sorted 1min | exclude [0-9.]+% +0.00% +[0-9.]+%# alias exec checkcpu show process cpu sorted 1min | exclude [0-9.]+% +0.00% +[0-9.]+%

TIP: Fhe" there is CI4C7 +ho"e ttched to " ccess port( co"$igure the Kswitchport voice vlan XK o" " ccess port.

TIP1 The maximum-aging timeis the "umber o$ seco"ds 4!itch !its !ithout receivi"g sp""i"g(tree co"$igurtio" messges be$ore

ttempti"g reco"$igurtio".

(config)#spanning-tree vlan 1 max-age 30


VLAN Filters for NON-I Traffic


These re "ot used i" the productio" e"viro"me"t ver# o$te"& but i" the CCIE em this c" be use$ul to k"o!. 7" Cisco :ocs c" be $ou"d

u"der the K*et!ork 4ecurit# !ith C3sK u"der the 4!itch Co"$igurtio" Guide1

http1NN!!!.cisco.comNe"N4NdocsNs!itchesNl"Nctl#st%5?0Nso$t!reNreleseN'2.2O)?OseNco"$igurtio"NguideNs!cl.html

STEP : sicll# i"sted o$ I+ C3& !ePre creti"g the /C C3 i" order to lter ppl# it. 6or emple here therePs " /C ccess(list creted

to $ilter out +:(s o$ certi" t#pe ;check ll the *7*(I+ stu$$ !e c" $ilter out


12/179


(config-access-map)#action forward


13/179

'%Hitchhikers Guide to the CCIE v0.5 [cisqueros.blogspot.com]


INT"#FAC" StatusesOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO

I$TER,#CE 7n &6ut7 BUT $OT CO$$ECTE' TO #$8T(I$G:

GigabitEthernet3/0/1 unassigned YES unset down down

I$TER,#CE 7n &6ut7 BUT L! ,#ILI$G ,OR SOME RE#SO$ 9t5%iall5 it 3e%en3& n t6e ena%&ulatin an3 t6e inter4ae t5%e ;ut 5u &6ul36e< 4r ,R LMI t5%e r t6e "#CL& t6at mig6t ;e a%%lie3 r C(#P aut6entiatin=:

GigabitEthernet3/0/1 unassigned YES unset up down

I$TER,#CE 7&6ut3>n7:

GigabitEthernet3/0/17 unassigned YES unset administratively downdown

I$TER,#CE 7n &6ut7 an3 CO$$ECTE':

GigabitEthernet3/0/19 unassigned YES unset up up


*Tuning+ the CA! TableOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO

4!itches populte the C/ tble& or /C ddress tble& b# $loodi"g u"k"o!" $rmes ever#!here i" the 3* the# !ere received i" "d b#

looki"g t the source /C ddress o$ $rmes received i" its ports. ou c" set up the /C gi"g Time& "d 4ecurit# ;to e"ble the k"o!" "d

secure /C ddresses to utomticll# llo! $or the $u"ctio"lit# built i"to Cisco proprietr# $etures such

s +ort6st "d pli"k6st. +ort$st bri"gs the quick tr"sitio"& i" order to b#pss 3I4TE*I*G M 3E8*I*G "d skip to 678F8:I*G imiditel#&

"d "ot !it s much !he"& $or emple& +C reboots.

(config-if)#spanning-tree portfast

%Warning: portfast should only be enabled on ports connected to a single host. Connecting hubs,

concentrators, switches, bridges, etc... to this interface when portfast is enabled, can cause temporary

bridging loops.

PORT,#ST re3ue& &igni4iantl5 t6e ?er6ea3& becuse TC$ 9T%lg5 C6ange $ti4iatin= BP'U& >ill nt ;e generate3.

There is specil versio" o$ +ort$st desig"ed specill# $or the T8*D li"ks used to co""ect to +CUI+ +ho"e. e cre$ull "ot to e"ble this

$eture o" " ctul tru"k li"k $or 4!itch I"terco""ectio". To e"ble it the comm"d is1

(config-if)#spanning-tree portfast trunk

I$ #ou !"t to e"ble +ort$st globll# o" 4!itch& =+ort$st> de$ult hs the sme e$$ect s the i"ter$ce(level port$st comm"d& but it is

utomticll# e"bled o" ll i"ter$ces t the sme time1

(config)# spanning-tree portfast default


!ultiple Spanning Tree rotocol '!ST)OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO

/4T +rotocol is IEEE st"drd de$i"ed i" @02.'s& "d it supports up to )0B? i"st"ces o$ 4p""i"g Tree. Fhe" /4T is e"bled& 84T+ ;@02.'!< is

utomticll# e"bled. Fhe" /4T is e"bled& 8pid 4p""i"g(Tree +rotocol ;84T+< is utomticll# e"bled. 84T+ is " IEEE st"drd de$i"edi" 1!.> t6at &%ee3& u% n?ergene t6rug6 a relia;le 6an3&6a


21/179

2'Hitchhikers Guide to the CCIE v0.5 [cisqueros.blogspot.com]

(config)# spanning-tree mode mst

(config)# spanning-tree mst configuration

(config-mst)# revision 1

(config-mst)# instance 1 vlan 12, 34

(config-mst)# instance 2 vlan 56, 90

(config-mst)# name CCIE "d ="o shut> comm"d is used& or to check o" prticulr

i"ter$ce #ou c" do =show interface fa1/0/5 status>.

To co"$igure this $eture globll# o" the 4!itch& hve i" mi"d tht this $eture !orks together !ith the +ort$st& so #ou !ould do the

$ollo!i"g1

(config)# spanning-tree portfast bpduguard default

(config)# spanning-tree portfast default


7&8 Filter



22/179


+: 6ilter c" be co"sidered =lighter> versio" o$ +: gurd. This is becuse it does",t tke "# ctio" !he" the +: is received& "d it

bsicll# o"l# drops ll i"bou"d +:s "d disbles " i"ter$ce $rom ever se"di"g out 4T+ pcket ;+:


23/179

2%Hitchhikers Guide to the CCIE v0.5 [cisqueros.blogspot.com]

I" *orml /ode& i$ the 3#er ' is still +& the port is mrked s ="determi"ed>& but it does",t shut do!" or disble it& so "o i"terruptio"s&

but "o 4T+ loop preve"tio" either.

I$ itYs TFI4TE: +I8 ( use #GGRESSI"E m3eS I" the ggressive mode !he" the s!itch loses its "eighbor it ctivel# tries to re(estblish the

reltio"ship b# se"di"g :3: $rmes time& e?er5 &en3. I$ the "eighbor does "ot respo"d $ter tht& the port is co"sidered to be

u"idirectio"l "d se"t to err(disble stte.

To utomticll# recover $rom err(disble stte i" seco"ds ;X'20 i" this cse and I 7#I&9IN9


I"tegrted 8outi"g "d ridgi"g e"bles user to route give" protocol bet!ee" routed i"ter$ces "d bridge groups or route give"

protocol bet!ee" the bridge groups. *ormll# the protocol c" be 87TE: or 8I:GE:. # usi"g I8 ;I*TEG8TE: 87TI*G "d 8I:GI*G< (

!e overcome this. 4o the $irst step here is to de$i"e the 8I:GE /7:E to be the I81

(config)#bridge irb

8I:GE G87+ is I8T3 8I:GE i"side the 8outer& !ith its o!" /C ddress tble.

To co"$igure 3* ssocited !ith bridge group !ith de$ult "tive 3*1

(config)#interface FastEthernet0/0.16

(config-subif)#encapsulation dot1Q 16


32/179

%2Hitchhikers Guide to the CCIE v0.5 [cisqueros.blogspot.com]

2.

E$I;E"h"ced *et!ork I"ter$ces< - To co""ect to Customers 8outers "d 4!itches. 32 co"trol protocols re supported& so u"like

o" *I ports& the 4T+ is supported& but it,s o$$ b# de$ult.

%.

$$I;*et!ork *ode I"ter$ces< - To co""ect to the 4+ "et!ork ;+E router "orml#


33/179

%%Hitchhikers Guide to the CCIE v0.5 [cisqueros.blogspot.com]

I Serices


34/179

%)Hitchhikers Guide to the CCIE v0.5 [cisqueros.blogspot.com]


I Serices Tips and TricksOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO

IMPORT#$T:

(SRP1 :+ port D/to /ulticst ddress !!.1.1.! ;ll routers


35/179

%5Hitchhikers Guide to the CCIE v0.5 [cisqueros.blogspot.com]


V## - Virtual #outing #edundanc, rotocolOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO

The 88+ co"$igurtio" is similr to the H48+& !ith $e! slight di$$ere"ces. 6or emple& there re "o CTIE "d 4T*:& but M#STER

an3 B#CFUProuter& s sho!" belo!1

#show vrrp brief

Interface Grp Pri Time Own Pre State Master addr Group addrFa0/0 1 200 3218 Y Master 172.25.12.1 172.25.12.22

Fa0/0 2 100 3609 Y Backup 172.25.12.2 172.25.12.11

TI/E84 re bit di$$ere"t to co"$igure. 8u nee3 t tell Ma&ter t #'"ERTISE t6e (ell Timer ?alue t t6e Ba


36/179

%?Hitchhikers Guide to the CCIE v0.5 [cisqueros.blogspot.com]


9L7 - 9lobal Load 7alancing rotocolOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO

G3+ is di$$ere"t $rom H48+ "d 88+& s i" ( itPs more comple "d gives more possibilities& such s La3 Balaning ,eature.

ItPs got "IRTU#L IP& "d "#RIOUS M#C& !here the G ;de$i"ed belo!< is decidi"g the times !he" to ""ou"ce !hich /C o$ the

desti"tio" router to the clie"t.

ou c" hve UP TO ROUTERS I$ # GLBP GROUPSSS

G3+ Group /embers commu"icte usi"g (ELLO& !!.1.1.1! U'PK*!!!& b# de$ult Hello Timer X % sec

sicll# there re 2 roles1

#"G 9#ti?e "irtual Gate>a5=/4TE8 8outer i" chrge o$ ssig"i"g irtul /C ddresses to other 8outers "d it hs to k"o! 33 the

/Cs o$ the 6s

#",& 9#ti?e "irtual ,r>ar3er&=the rest o$ the 8outers& !hich tke G $u"ctio" i$ G dies.

#sh glbp br

Interface Grp Fwd Pri State Address Active router Standby route

Fa0/0 1 - 100 Standby 10.1.1.100 10.1.1.2 local

Fa0/0 1 1 7 Active 0007.b400.0101 local -

Fa0/0 1 2 7 Listen 0007.b400.0102 10.1.1.2 -

ou c" tu"e G3+ s #ou like& !hich me"s tht ;besides ll the stu$$ #ou c" lso do i" H48+ "d 88+< #ou c" choose t6e La3 Balaning

met63:

(config-if)#glbp 1 load-balancing ?

host-dependent Load balance equally, source MAC determines forwarder choice

round-robin Load balance equally using each forwarder in turn

weighted Load balance in proportion to forwarder weighting (GLBP places WEIGHT on each router)

s " dditio"l G3+ $eture& there is 8E:I8ECT timer& !hich &et& t6e time-ut 4r a&&igning t6e "irtual M#Co$ 6 tht hs $iled.

(config-if)#glbp 1 timers ?

Hello interval in seconds

msec Specify hello interval in milliseconds

redirect Specify time-out values for failed forwarders

Tra


37/179

%Hitchhikers Guide to the CCIE v0.5 [cisqueros.blogspot.com]


I#& - IC! #outer &iscoer, rotocolOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO

I8:+ e"bles 8outers to autmatiall5 3i&?er t6e IP 4 t6eir %tential 'e4ault Gate>a5. It u&e& ICMP an3 Sliitatin Me&&age&.

+ote"til GF 8outers periodicll# ""ou"ce the I+ ddress o$ their I8:+ co"$igured i"ter$ce to brodcst desti"tio". I8:+ +re$ere"ce

vlue is dvertised !ith these messges& lo"g !ith the I+ ddress.

Ste% :

The co"$igurtio" is prett# stright($or!rd. 6irst #ou /4T turn t6e Ruting 44o" the router tht #ou !"t to discover its o!" GF1

(config)#no ip routing

Ste% !:

I8:+ "eeds to be e"bled o" the 8outer1

(config)#ip gdp ?

eigrp Discover routers transmitting EIGRP router updates

irdp Discover routers transmitting IRDP router updates


38/179

%@Hitchhikers Guide to the CCIE v0.5 [cisqueros.blogspot.com]


- Cisco &istributed #oute rocessorOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO

ItPs :+ bsed pplictio"& !hich ena;le& Ci& 'i&tri;ute3 'iretr t QUER8 ROUTES;:8+ ge"t


39/179

%BHitchhikers Guide to the CCIE v0.5 [cisqueros.blogspot.com]


NT - Network Ti(e rotocolOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO

6irst there is " Kold schoolK method o$ setti"g time o" #our I74 :evice& !hich is $i"e i$ #ouPre o"e o$ those 110.185.117.1 [226]

*Nov 7 11:34:02.610: NAT*: s=10.185.117.1->152.168.13.9, d=232.32.32.4 [227]

*Nov 7 11:34:04.606: NAT*: s=10.185.117.1->152.168.13.9, d=232.32.32.4 [228]

*Nov 7 11:34:04.606: NAT*: s=232.32.32.4, d=152.168.13.9->10.185.117.1 [228]

*Nov 7 11:34:04.606: NAT*: s=10.185.117.1->152.168.13.9, d=232.32.32.4 [229]

*Nov 7 11:34:04.606: NAT*: s=232.32.32.4, d=152.168.13.9->10.185.117.1 [229]

*Nov 7 11:34:04.610: NAT*: s=10.185.117.1->152.168.13.9, d=232.32.32.4 [230]

*Nov 7 11:34:04.610: NAT*: s=232.32.32.4, d=152.168.13.9->10.185.117.1 [230]


Scalabilit, for Stateful NAT 'SNAT)OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO

4clbilit# $or 4tte$ul *T $eture llo!s 4tte$ul *et!ork ddress Tr"sltio" ;4*T< to co"trol the Hot 4t"db# 8outer +rotocol ;H48+ re the timers.

The co"$igurtio" is quite stright $or!rd1

I74

(config)# interface FastEthernet0/1

(config-if)# ip ospf bfd Q( 6or I+v? ust ch"ge toipv6 ospf bfd(config)-if# bfd interval 250 min_rx 250 multiplier 3

To veri$# the 6: dce"c#1

# show bfd neighbors detail

NeighAddr LD/RD RH/RS State Int

10.1..1.22 1/99281 Up Up Fa0/1

Session state is UP and using echo function with 250 ms interval.

I74 J8

XR(config)# router ospf 1

XR(config-ospf)# area 0

XR(config-ospf-area0)# interface G0/0/0/1

XR(config-ospf-area0-if)# bfd minimum-interval 250

XR(config-ospf-area0-if)# bfd fast-detect

XR(config-ospf-area0-if)# bfd multiplier 3

To veri$# the 6: dce"c#1

XR# show bfd ipv4 session detail

Fri Aug 22 19:10:18.114 UTC I/f: GigabitEthernet0/0/0/1, Location: 0/1/CPU0

State: UP for 0d:0h:12m:18s, number of times UP: 1

B,' 4r IP?0 i& nt &u%%rte3 in IOS AR until &4t>are relea&e ..


OSF0 Ti(ersOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO

4t"drd comm"ds $or setti"g the 74+6 timers re Kip ospf hello-timerK "d Kip ospf dead-timerK o" the i"ter$ce level. I$ #ou

"eed smller vlues the" ' seco"d $or hello& #ou "eed to use the $ollo!i"g ;mi"iml me"s less the" ' seco"d


59/179

5BHitchhikers Guide to the CCIE v0.5 [cisqueros.blogspot.com]

(config-router)#area 0 authentication r3=

(config-if)# ip ospf authenticationQ( Tur" the %lain textuthe"tictio" 7*(config-if)# ip ospf authentication-key ^&*(^*&&%

2. M'/ 9I' !-;it Pa&&>r3=:

(config-if)# ip ospf authenticationQ( Tur" the M'/uthe"tictio" 7*(config-if)#ip ospf message-digest-key 1 MD5 ^&*^&^*

To :I43E the uthe"tictio" o" " i"ter$ce1

(config-if)#ip ospf authentication null

Check !ht t#pe o$ 74+6 uthe"tictio" hs bee" co"$igured "d !ht De#N+ss!ord is pplied1

# show ip ospf interface s1/0.12 | b authentic

Simple password authentication enabled

Fhe" #ou "eed to CH*GE the +44F78: !ithout the service i"terruptio"& co"$igure the 2"d DE& "d remove the 'st1

(config-if)# ip ospf message-digest-key 2 MD5 SECOND_KEY

#ut6entiatin al>a5& u&e& t6e 8OU$GEST FE8;the o"e tht !s co"$igured lst frame-relay map ip 10.1.1.4 104 (REMOVE "broadcast")

I" H(*:(4+7DE the 4pokes do "ot hve the 3#er 2 rechbilit#& so this comm"d mkes "o se"se. I"sted ust be sure to set their

;H4< 74+6 priorit# to 0& so tht the# do",t prticipte the :8N:8 Electio"

(config-if)#ip ospf priority 0


67/179


The H 8outer !ill be elected s :8 o" ever# 3i"k "d ech"ge 74+6 :tbse !ith ech o$ the 4pokes1

#show ip ospf neighbor Q( 8' I4 THE H

Neighbor ID Pri State Dead Time Address Interface

2.2.2.2 0 FULL/DROTHER 00:01:51 10.1.1.2 Serial1/0



I" this ki"d o$ 74+6 Topolog# ( itPs "ot "ecessr# to hve the 6rme(8el# i"ter$ce co"$igured !ith the KbrodcstK ke#!ord& becuse !e re

m"ull# de$i"i"g the 74+6 *eighbor "d tur"i"g the 3i"ks i"to *IC4T4.


&NS Lookup in OSFOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO

E"ble 74+6 to lookup the "mes1

(config)#ip ospf name-lookup

"d de$i"e the */E(I+ correltio"1

(config)#ip host R5 5.5.5.5


ISFOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO

I"creme"tl 4+6 is more e$$icie"t th" the $ull 4+6 lgorithm& thereb# llo!i"g 74+6 to co"verge $ster o" "e! routi"g topolog# i" rectio"

to "et!ork eve"t.


Forward Address SuppressionOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO

The im is to SUPRESS t6e a33re&& 4 t6e ruter t6at riginate3 t6e Pre4ix. Fhe" the re is *44& "d #ou !"t C7*T873 the remp process

o$ the 34 to 345& but use 0.0.0.0 s the $or!rdi"g ddress i"sted o$ the o"e speci$ied i" the 341

(config-router)# area 1 nssa translate type7 suppress-fa ?

default-information-originate Originate Type 7 default into NSSA area

no-redistribution No redistribution into this NSSA area

no-summary Do not send summary LSA into NSSA

e$ore the comm"d hs bee" pplied the eter"l ;345< sub"et !ithi" the re 0 is see" s1

# sh ip ospf database external 6.0.0.0

OSPF Router with ID (1.1.1.1) (Process ID 1)

Type-5 AS External Link States

LS age: 557

Options: (No TOS-capability, DC)

LS Type: AS External Link

Link State ID: 6.0.0.0 (External Network Number )

Advertising Router: 3.3.3.3

LS Seq Number: 80000003

Checksum: 0x1286

Length: 36Network Mask: /8

Metric Type: 2 (Larger than any link state path)

MTID: 0

Metric: 20


68/179

?@Hitchhikers Guide to the CCIE v0.5 [cisqueros.blogspot.com]

Forward Address: 200.1.36.6

External Route Tag: 0

Fhile $ter the comm"d hs bee" impleme"ted& !e hve1

#sh ip ospf database external 6.0.0.0

OSPF Router with ID (1.1.1.1) (Process ID 1)

Type-5 AS External Link States

Routing Bit Set on this LSA in topology Base with MTID 0

LS age: 41

Options: (No TOS-capability, DC)LS Type: AS External Link

Link State ID: 6.0.0.0 (External Network Number )

Advertising Router: 3.3.3.3

LS Seq Number: 80000004

Checksum: 0x3952

Length: 36

Network Mask: /8

Metric Type: 2 (Larger than any link state path)

MTID: 0

Metric: 20

Forward Address: 0.0.0.0


69/179

?BHitchhikers Guide to the CCIE v0.5 [cisqueros.blogspot.com]

The 74+6 ;pre$i ler"ed $rom the +E vi 74+6< !ill l!#s be pre$erred& simpl# becuse "othi"g bets the I*TE8*3 ;I"tr re< 74+6 route

;7een t6e CE&& so tht it !ould be 3E44 +8E6E88E:& becuse the e"tire

poi"t !s to pre$er the G+ li"k1

(config-if)# ip ospf cost 500


70/179



IS-ISOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO

TIP1 3evel ' pths re l!#s pre$erred.

IS-IS 9Interme3iate S5&tem t Interme3iate S5&tem meaning Ruter t Ruter=is 3i"k 4tte protocol similr to 74+6& "d it supports I+v)

"d I+v? i" the sme stck& u"like other protocols. I4(I4 is used i" the core o$ 4+ "et!orks. I4(I4 is prt o$ the CL$S &tar< Entit5 Title=ddress is the C3*4 8outer I:& "d it uses the I47 *4+ ddressi"g 6ormt. It c" be "#thi"g& but it hs to be

u"ique. The minimumle"gth !ould be1

$ET #RE#-I' S8STEM-I' $-SELECTOR& Emple1 ##V.SSSS.SSSS.SSSS.$$

( #rea I';"ot $loodi"g domi"& like i" 74+6


71/179

'Hitchhikers Guide to the CCIE v0.5 [cisqueros.blogspot.com]

(config-router)# passive-interface lo0


IS-IS Leel . and Leel 3 AdacenciesOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO

+rocess "d I"ter$ces de$ult to Le?el--!& so bet!ee" the routers !ithi" the sme I4(I4 re t!o dce"cies re bei"g $ormed. The 3evel o$

dce"c# hs to mtch o" both sides& or the ech"ged hellos !ill "ot mtch "d the =is(t#pe mismtch> messge !ill be sho!" "d the

dce"c# !ill "ot be $ormed.

Le?el ! 9L!=behves like " re 0 i" 74+6& "d the dce"cies !ithi" the Core o$ the 4+ *et!ork re 32. The dce"c# c" be1

(

Inter-areadce"c# ;bet!ee" di$$ere"t I4(I4 resr< T5%e& an3 (ELLO&

:e$ult HE337 is '0 seco"ds $or "o"(:I4& "d %&%%% seco"ds $or :I4 i"ter$ces. There re ! net>r< t5%e&i" I4(I4 ;i$ the "et!ork t#pe o" both

sides does",t mtch& the IIH& !hich re Hellos& !ill hve mismtch issue


72/179


'IS Eletin

There is "o ckup :I4. Electio" is :#"mic& "d i$ there re 32 "d 3' dce"cies& 2 seprte :I4 !ill be elected. The order o$ decisio" is1

( Highest +riorit# ;c" be modi$ied usi"g the =isis priority> i"ter$ce comm"dr3=


74/179

)Hitchhikers Guide to the CCIE v0.5 [cisqueros.blogspot.com]

(config-if)# isis authentication mode text level-2Q( Tur" the %lain textuthe"tictio" 7*(config-if)# isis authentication key-chain ISIS-CHAIN

2. M'/ 9I' !-;it Pa&&>r3=:

(config-if)# ip ospf authentication mode md5 level-2Q( Tur" the M'/uthe"tictio" 7*(config-if)# isis authentication key-chain ISIS-CHAIN

I74 J8

'. Plain Text 90-;it Pa&&>r3=

XR(config)# router isis 1


XR(config-ospf-area0-if)# hello-password text CLEARTEXTPASSWORD

2. M'/ 9I' !-;it Pa&&>r3=:

XR(config)# router isis 1


XR(config-ospf-area0-if)# hello-password hmac-md5 MD5PASSWORD

OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO

#outing olic, Language on IOS #


TIP1 :o"t $orget to C7//IT the co"$igurtio". se =pss> "d =drop> $or the tr$$ic polic# co"trol.

8+3 Forks like progrmmi"g l"guge& "d it mkes the 4ET(/TCH s#"t bit more modulr "d $leible. It,s rell# import"t to k"o!

ho! to $i"d it !ithi" the :ocC: duri"g the em. Here is gret docume"t !ith the detiled epl"tio"1

https1NNsupport$orums.cisco.comNdocume"tN@@??NsrB000r(u"derst"di"g("d(usi"g(rpl(route(polic#(l"guge

Here is " emple o$ the route(polic# tht sets the 3ocl +re$ere"ce to '00 i$ /E: vlue o$ the +re$i is '001

(config)#route-policy test

(config-rpl)#if med eq 100 then

(config-rpl-if)#set local-preference 100

(config-rpl-if)#endif Q( :7*,T 678GET T7 C374E THE =I6> *: =87TE(+73IC>(config-rpl)#end-policy

(config)#commit

I$ #ou !"t to mtch the I+ pre$ies& use =if destination in (10.10.10.1/32, 10.10.10.2/32) then...>& or =if destination

in PREFIX_SET then ...>& "d de$i"e the +8E6IJO4ET.


75/179



"I9#OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO

EIG8+ uses t6e IP Prtl ;does"Pt use speci$ic TC+ or :+ port


76/179


I$ #ou !"t to disble the loggi"g o$ "eighbor ch"ges1

(config-router)#no eigrp log-neighbor-changes OR log-neighbor-warnings

7"ce itPs e"bledNdisbled& de$i"e the TI/E4 $or F8*I*G4 o"l#1

(config-router)#eigrp log-neighbor-warnings X (X is seconds)


"I9# !etric - > ValuesOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO

5 D(lues re used to clculte the EIG8+ /etric. ItYs prett# import"t to k"o! t lest !hich o"e is !hich o$ the D vlues1

F - Ban3>i3t6

F! - La3

F* - 'ela5

F - Relia;ilit5

F/ - MTU

Metri 9FB 9F!B=K9!/0-La3= F*'ela5= !/0

3ittle better epli"ed1 Metri 91.111.111KL>e&tPat6B Sum 4 all 'EL#8SK1=!/0

# de$ult D2 X D) X D5 X 0& so the /etric depe"ds o" the "d!idth "d :el# o"l#. To check the prmeters o" the i"ter$ce1

#SHOW Interfaces e0/0 | i BW

MTU 1500 bytes, BW 10000 Kbit, DLY 1000 usec

I$ #ou "eed the EIG8+ /etric to depe"d o" some other vlues the comm"d is ;To4 should be le$t 0


77/179

Hitchhikers Guide to the CCIE v0.5 [cisqueros.blogspot.com]


"I9# #oute Su((ariDation and Leak !apsOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO

The EIG8+ route 4ummritio" is do"e exatl5 t6e &ame li


78/179

@Hitchhikers Guide to the CCIE v0.5 [cisqueros.blogspot.com]


VA#IANC" Co((andOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO

ri"ce is " EIG8+ $eture tht e"bles U$EQU#L la3 ;alaning. The o"l# co"ditio" tht "eeds to be met is tht ll the +ths "eed to be i"

the routi"g tble "d /ET THE 6E4II3IT C7*:ITI7*S ;8outes :E8TI4E: :ist"ce must be lo!er th" the locl routes 6E4I3E

:ist"ce


79/179

BHitchhikers Guide to the CCIE v0.5 [cisqueros.blogspot.com]


"I9# Ad(inistratie &istanceOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO

# de$ult EIG8+ hs the $ollo!i"g dmi"istrtive :ist"ce vlues1

1 - External EIGRP Rute&

D1 - Internal EIGRP Rute&

/ - EIGRP Summar5 Rute&

ou c" mke EIG8+ Eter"l routes smller i$ #ou "eed them to "ot be less pre$erred the"& $or emple& 74+6& tht hs : ''0 $or Eter"l

routes1

(config-router)#distance eigrp 90 100


"I9# 8pdates 7 ercentOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO

The de$ult co"$igurtio" $or EIG8+ is to use u% t /1 %erent 4 t6e a?aila;le ;an3>i3t6& but this c" be ch"ged !ith the $ollo!i"g

comm"d o" the i"ter$ce level1

(config-if)#ip bandwidth-percent eigrp 200 30


"I9# #edistribute #outes into "I9#OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO

8OU $EE' TO 'E,I$E T(E METRIC& either :E63T o"e1

(config-router)#default-metric 1500 20000 255 1 1500

7r !he" co"$iguri"g the redistributio"1

(config-router)#redistribute static metric 150 20000 255 1 1500


"I9# offset-list


80/179

@0Hitchhikers Guide to the CCIE v0.5 [cisqueros.blogspot.com]

Tht 8outer !ill 7*3 see the 4ummr# ;i$ co"$iguredill O$L8 &ee t6e Summar5

*o! !ith the K&tu; &tatiK or 7&tu; re3i&tri;ute3K1

(config-router)#eigrp stub stub [static | redistributed]

This router keeps behvi"g ectl# the sme& !hile the EIGRP $eig6;r& O$L8 reei?e t6e Stati OR Re3i&tri;ute3 routes

Fith the K&tu; reei?e-nl5K1

(config-router)#eigrp stub receive-only

This router keeps behvi"g ectl# the sme& !hile the EIGRP $eig6;r& &t% reei?ing #$8 rute&$rom the 8outer

"d $i"ll# the Keigr% &tu;K comm"d c" be co"$igured !ithout "# ttributes& so ust1

(config-router)#eigrp stub

i" !hich cse the EIGRP neig6;r& O$L8 reei?e t6e Summar5 Rute


"I9# #oute FilteringOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO

EIG8+ uses the 'ISTRIBUTE LISTto $ilter the pre$ies& but there is lso " dv"ced optio" ( it lso $ilters the +8E6IJ G#TE#8S;7rigi"tor

I+s


81/179

@'Hitchhikers Guide to the CCIE v0.5 [cisqueros.blogspot.com]

S5n6rniNatin( itPs " old loop preve"tio" mech"ism tht is "o lo"ger used& so there is "o "eed to hve it e"bled. I" the "e!er versio"s o$

I74 itPs disbled b# de$ult. It !s origi"ll# creted to preve"t the 3CD H73E dvertisi"g. sicll# the 4*C 3ogic is1 :o "ot co"sider "

iG+ route i" the G+ tble E4T u"less the EJCT +8E6IJ !s ler"ed vi IG+ "d is curre"tl# i" the routi"g tble.

(config-router)#no synchronization

Fhe" ddi"g "e! *EIGH78& #ou "eed to speci$# their 4 *umber usi"g the Kremote(sK1

(config-router)#neighbor 10.1.1.2 remote-as 100

:ebug looks like this1

*Nov 23 12:34:55.223: BGP: 10.1.1.2 active OPEN has CAPABILITY code: 131, length 1

*Nov 23 12:34:55.223: BGP: 10.1.1.2 active OPEN has MULTISESSION capability, without grouping

*Nov 23 12:34:55.223: BGP: 10.1.1.2 active rcvd OPEN w/ optional parameter type 2 (Capability) len 6

*Nov 23 12:34:55.223: BGP: 10.1.1.2 active OPEN has CAPABILITY code: 65, length 4

*Nov 23 12:34:55.223: BGP: 10.1.1.2 active OPEN has 4-byte ASN CAP for: 100

*Nov 23 12:34:55.223: BGP: nbr global 10.1.1.2 neighbor does not have IPv4 MDT topology activated

*Nov 23 12:34:55.223: BGP: 10.1.1.2 active rcvd OPEN w/ remote AS 100, 4-byte remote AS 100

*Nov 23 12:34:55.223: BGP: 10.1.1.2 active went from OpenSent to OpenConfirm

*Nov 23 12:34:55.223: BGP: 10.1.1.2 active went from OpenConfirm to Established

*Nov 23 12:34:55.223: BGP: ses global 10.1.1.2 (0xAF0217D0:1) Up

*Nov 23 12:34:55.223: %BGP-5-ADJCHANGE: neighbor 10.1.1.2 Up

7"ce #ouPve got the "eighbors co"$igured usi"g the K"eighborK comm"d& #ou should be ble to ide"ti$# the outputs1

(config-router)#do show ip bgp summary | b Neighbor

Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd

100.11.1.1 4 100 9 9 5 0 0 00:05:23 1

100.11.1.3 4 100 9 9 5 0 0 00:05:12 1

100.11.1.4 4 100 8 8 5 0 0 00:04:57 1

(config-router)#do show ip bgp

BGP table version is 5, local router ID is 192.168.2.2

Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,

r RIB-failure, S Stale

Origin codes: i - IGP, e - EGP, ? - incomplete

Network Next Hop Metric LocPrf Weight Path

*>i1.0.0.0 10.1.1.1 0 100 0 i

*> 2.0.0.0 0.0.0.0 0 32768 i

*>i4.0.0.0 10.1.1.4 0 100 0 i

( The e"tr# i" the tble is vlid

2( ItPs the E4T e"tr# $or tht pre$i

i( ler"ed vi iG+

$et>rill 6a?e 1

Pat6( iG+ !ill hve KiK& "d eG+ !ill hve ll G+ 4 *umbers #ou "eed to trverse to get to the pre$i ;m 255 10.1.1.1 0 0 100 i* 2.0.0.0 10.1.1.2 0 100 200 i

* 10.1.1.2 0 300 200 i

*> 10.1.1.2 0 0 200 i

*> 3.0.0.0 10.1.1.3 0 0 300 i


82/179

@2Hitchhikers Guide to the CCIE v0.5 [cisqueros.blogspot.com]

*> 4.0.0.0 0.0.0.0 0 32768 i

*otice tht the +TH is "o lo"ger mrked s KiK $or iG+& but it sho!s " e"tire 4(+TH "o! ;list o$ ll the G+ uto"omous 4#stems the

route "eeds to pss i" order to rech the route10.1.112.2_0[0.0.0.0]: Sending Resv message to 10.1.112.1

*Aug 22 15:54:33.595: RSVP 10.1.112.1_0->10.1.112.2_0[0.0.0.0]: Received Path message from 10.1.112.1

(on FastEthernet0/0)

I$ #ou !"t the 8outer to be the 84+ +87J1

ip rsvp sender 10.1.112.2 1.1.1.1 tcp 0 0 1.1.1.1 lo0 10 5


I; 6oSOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO

K/tch ip precede"ceK 7*3 mtches the I+v)& "ot I+v? I$ #ou !"t I+v) *: I+v? to be mtched ( use Kmatch precedenceK


!atch !AC A&"SSOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO

(config)#class-map SRV1

(config-cmap)#match sou

(config-cmap)#match source-address ?

mac MAC address

e cre$ul& becuse i$ #ou mtch the 478CE /C ( #ou !o"t be ble to ppl# the service(polic# 7T7*:SSS There$ore ( crete the C3

mtchi"g the /C& "d mtch the CCE44(G87+.


6oS Congestion !anage(ent5 olicing and ShapingOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO

Fhe" !e re tlki"g bout the Ao4 Co"gestio" /"geme"t "d void"ce& the three most import"t terms re1 @ueuing 3r%%ing an3

&6e3uling. Aueui"g plces the pckets i"to the di$$ere"t so$t!re queues bsed o" the Ao4 lbels. $ter the tr$$ic is clssi$ied "d mrked

!ith Ao4 lbels& #ou c" ssig" the tr$$ic i"to certi" "umber di$$ere"t queues bsed o" the Ao4 lbels.

RE' 9eig6te3 Ran3m Earl5 'etetin=is the o"l# 8E: method used b# Cisco to drop the lst pckets i" the certi" queues. Threshold is

"umber o$ pckets i" queue tht !he" reched the pckets strt bei"g dropped.

The "umber o$ AEE4 "d TH8E4H73:4 !ill depe"d o" the 4!itch chrcteristics. :i$$ere"t co"$igurtio"s !ill be pplied ccordi"gl#. 8e$er

to the list o$ devices $or detils1

:edicte the F to ech o$ the queues. 4et the 7ICE tr$$ic s the si"gle strict priorit# queue to gur"tee mi"imum del#& "d the F88

scheduli"g method $or the remi"i"g queues to gur"tee the b"d!idth.


108/179

'0@Hitchhikers Guide to the CCIE v0.5 [cisqueros.blogspot.com]

ou c" check the Ao4 cpbilities such s I"gressNEgress "umber o$ Aueues& +riorit# Aueues "d Thresholds o" ech i"ter$ce usi"g the

$ollo!i"g comm"d1

# show interfaces GigabitEthernet 7/1 capabilities

GigabitEthernet7/1

Model: WS-SUP32-GE-3B

Type: 1000BaseSX

Speed: 1000

Duplex: full

Trunk encap. type: 802.1Q,ISL

Trunk mode: on,off,desirable,nonegotiate

Channel: yesBroadcast suppression: percentage(0-100)

Flowcontrol: rx-(off,on,desired),tx-(off,on,desired)

Membership: static

Fast Start: yes

QOS scheduling: rx-(2q8t), tx-(1p3q8t)

QOS queueing mode: rx-(cos), tx-(cos)

Fithi" the 3* *et!ork the best prctice !ould be mrki"g the pckets o" the I*G8E44 i"ter$ces& "d ppl#i"g the queui"g methods o" the

EG8E44 i"ter$ces to!rds the upper l#er s!itches. s #ou c" see $rom the previous emple& the give" s!itch !ith the 4upervisor model %2

hs '+%A@T1

(

' +riorit# Aueue tht !ill most likel# be used $or the 7ICE tr$$ici3t6K comm"d""ALIV"OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO

8outers depe"d o" 3/I to mi"ti" the CTIE C7**ECTI7*& but it,s "ot E*:(T7(E*: s i"termedite s!itches m# "ot support **I 3/Is. XW

68EED ;6rme 8el# E"d(to(E"d Deeplive< is used to provide locl router sttus o$ the other e"d

68EED /i"ti"s 2 i"tervl keeplives1

'. 4e"d sideW 4e"d keeplive "d h"dle the respo"ses

2. 8eceive sideW H"dle "d repl# the requests

4o it "eeds to be co"$igured 7* 7TH 4I:E4S ItPs co"$igured !ithi" the /+ C344SSS

(config)#map-class frame-relay FREEK

(config-map-class)#frame-relay end-to-end keepalive ?

error-threshold End-to-end keepalive error threshold

event-window End-to-end keepalive event window

mode End-to-end keepalive mode

success-events End-to-end keepalive success events

timer End-to-end keepalive timer

(config-map-class)#frame-relay end-to-end keepalive mode ?

bidirectional Set bidirectional mode Q( 7TH 4I:E4 8E+3 *: 8EAE4Tpassive-reply Set passive-reply mode

reply Set unidirectional reply mode Q( THE 7THE8 4I:E 8EAE4T4& THI4 4I:E 8E+3IE4

request Set unidirectional request mode Q( THI4 4I:E 8EAE4T4& 7THE8 4I:E 8E+3IE4

7"ce the /+ C344 hs bee" de$i"ed& ppl# u"der :3CI o" the 4(I*61

(config-map-class)#int s1/0.21

(config-subif)#frame-relay interface-dlci 201

(config-fr-dlci)#class FREEK


122/179



F#A!"-#"LA$ !8LTILIN>IN9OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO

I$ #ou "eed t!o 6rme(8el# 3I*D4 to pper s 7*E 68/E 8E3 3I*D XW use +++ /3TI3I*D. This might seem bit illogicl i" the

beg

Hitchikers Guide to the CCIE v0.5

Documents

Transcript of Hitchikers Guide to the CCIE v0.5