PipRouting.Net

OSPF Virtual Link Configuration, Verification and troubleshooting

2010-05-28T11:34:00.002-04:00

Configuration:

R1:

interface Loopback0
ip address 10.0.0.1 255.224.0.0
!
!
interface Loopback32
ip address 10.32.0.1 255.224.0.0
!
!
interface Loopback64
ip address 10.64.0.1 255.224.0.0
!
!
interface Loopback96
ip address 10.96.0.1 255.224.0.0
!
interface Serial1/0
bandwidth 128
ip address 192.168.1.1 255.255.255.252
serial restart-delay 0
clock rate 64000

router ospf 1
router-id 1.1.1.1
log-adjacency-changes
network 10.0.0.0 0.31.255.255 area 0
network 10.32.0.0 0.31.255.255 area 0
network 10.64.0.0 0.31.255.255 area 0
network 10.96.0.0 0.31.255.255 area 0
network 192.168.1.0 0.0.0.3 area 0
__________________________________________________________________________________

R2:

interface FastEthernet0/0
ip address 5.5.5.1 255.255.255.0
ip ospf priority 10
duplex half
!
!
interface Serial1/0
bandwidth 128
ip address 192.168.1.2 255.255.255.224
serial restart-delay 0
!
router ospf 1
router-id 2.2.2.1
log-adjacency-changes
network 5.5.5.0 0.0.0.255 area 1
network 192.168.1.0 0.0.0.3 area 0
___________________________________________________________________________________

R3:

interface Loopback45
ip address 45.45.45.1 255.255.255.0
!
!
interface Loopback46
ip address 45.45.46.1 255.255.255.0
!
!
interface Loopback47
ip address 45.45.47.1 255.255.255.0
!
!
interface FastEthernet0/0
ip address 5.5.5.2 255.255.255.0
ip ospf priority 0
duplex half
!
!
!
router ospf 1
router-id 3.3.3.1
log-adjacency-changes
network 5.5.5.0 0.0.0.255 area 1
network 45.45.45.0 0.0.0.0 area 1
network 45.45.46.0 0.0.0.0 area 1
network 45.45.47.0 0.0.0.0 area 1
!
__________________________________________________________________________________

R4:

interface Loopback28
ip address 28.28.28.1 255.255.255.0
!
!
interface Loopback29
ip address 28.28.29.1 255.255.255.0
!
!
interface Loopback30
ip address 28.28.30.1 255.255.255.0
!
!
interface FastEthernet0/0
ip address 5.5.5.3 255.255.255.0
ip ospf priority 0
duplex half
!
!
interface Serial1/0
bandwidth 64
ip address 7.7.7.1 255.255.255.252
serial restart-delay 0
clock rate 64000
!

router ospf 1
router-id 4.4.4.1
log-adjacency-changes
network 5.5.5.0 0.0.0.255 area 1
network 7.7.7.0 0.0.0.3 area 51

___________________________________________________________________________________

R5:

interface Loopback31
ip address 31.31.31.1 255.255.255.0
!
!
interface Loopback32
ip address 31.31.32.1 255.255.255.0
!

interface Serial1/0
ip address 7.7.7.2 255.255.255.252
serial restart-delay 0
!

router ospf 1
router-id 5.5.5.1
log-adjacency-changes
network 7.7.7.0 0.0.0.3 area 51
network 31.31.31.0 0.0.0.255 area 51
network 31.31.32.0 0.0.0.255 area 51
___________________________________________________________________________________

Negiborship Verification

R1#sh ip ospf neighbor

Neighbor ID     Pri   State           Dead Time   Address         Interface
2.2.2.1           0   FULL/ -        00:00:37    192.168.1.2     Serial1/0
___________________________________________________________________________________

Neighbor ID     Pri   State           Dead Time   Address         Interface
1.1.1.1           0   FULL/ -        00:00:39    192.168.1.1     Serial1/0
3.3.3.1           0   FULL/DROTHER    00:00:36    5.5.5.2         FastEthernet0/0
4.4.4.1           0   FULL/DROTHER    00:00:33    5.5.5.3         FastEthernet0/0
___________________________________________________________________________________

R3#sh ip ospf neighbor

Neighbor ID     Pri   State           Dead Time   Address         Interface
2.2.2.1          10   FULL/DR         00:00:31    5.5.5.1         FastEthernet0/0
4.4.4.1           0   2WAY/DROTHER    00:00:36    5.5.5.3         FastEthernet0/0
___________________________________________________________________________________
R4#sh ip ospf neighbor

Neighbor ID     Pri   State           Dead Time   Address         Interface
2.2.2.1          10   FULL/DR         00:00:31    5.5.5.1         FastEthernet0/0
3.3.3.1           0   2WAY/DROTHER    00:00:37    5.5.5.2         FastEthernet0/0
5.5.5.1           0   FULL/ -        00:00:37    7.7.7.2         Serial1/0
___________________________________________________________________________________

R5#sh ip ospf neighbor

Neighbor ID     Pri   State           Dead Time   Address         Interface
4.4.4.1           0   FULL/ -        00:00:38    7.7.7.1         Serial1/0
____________________________________________________________________________________

Note: Lets take a look at what routers see as they become neighbors: The following output happens between R4 and R5.

R4#
*May 28 10:56:50.735: OSPF: Serial1/0: Route adjust notification: UP/UP
*May 28 10:56:50.735: OSPF: Interface Serial1/0 going Up
*May 28 10:56:50.739: OSPF: Serial1/0: Interface state change to UP, new ospf state P2P
*May 28 10:56:51.235: OSPF: Build router LSA for area 51, router ID 4.4.4.1, seq 0x80000008, process 1
R4#
*May 28 10:57:03.419: OSPF: Rcv DBD from 5.5.5.1 on Serial1/0 seq 0x1653 opt 0x52 flag 0x7 len 32 mtu 1500 state INIT
*May 28 10:57:03.419: OSPF: 2 Way Communication to 5.5.5.1 on Serial1/0, state 2WAY
*May 28 10:57:03.423: OSPF: Serial1/0 Nbr 5.5.5.1: Prepare dbase exchange
*May 28 10:57:03.423: OSPF: Send DBD to 5.5.5.1 on Serial1/0 seq 0x151D opt 0x52 flag 0x7 len 32
*May 28 10:57:03.423: OSPF: NBR Negotiation Done. We are the SLAVE
*May 28 10:57:03.423: OSPF: Serial1/0 Nbr 5.5.5.1: Summary list built, size 2
*May 28 10:57:03.427: OSPF: Send DBD to 5.5.5.1 on Serial1/0 seq 0x1653 opt 0x52 flag 0x2 len 72
*May 28 10:57:03.499: OSPF: Rcv DBD from 5.5.5.1 on Serial1/0 seq 0x1654 opt 0x52 flag 0x1 len 72 mtu 1500 state EXCHANGE
*May 28 10:57:03.503: OSPF: Exchange Done with 5.5.5.1 on Serial1/0
*May 28 10:57:03.503: OSPF: Send LS REQ to 5.5.5.1 length 12 LSA count 1
*May 28 10:57:03.503: OSPF: Send DBD to 5.5.5.1 on Serial1/0 seq 0x1654 opt 0x52 flag 0x0 len 32
*May 28 1
R4#0:57:03.595: OSPF: Rcv LS UPD from 5.5.5.1 on Serial1/0 length 76 LSA count 1
*May 28 10:57:03.595: OSPF: Synchronized with 5.5.5.1 on Serial1/0, state FULL
*May 28 10:57:03.599: %OSPF-5-ADJCHG: Process 1, Nbr 5.5.5.1 on Serial1/0 from LOADING to FULL, Loading Done
*May 28 10:57:03.651: OSPF: Rcv LS REQ from 5.5.5.1 on Serial1/0 length 36 LSA count 1
*May 28 10:57:04.099: OSPF: Build router LSA for area 51, router ID 4.4.4.1, seq 0x80000009, process 1
R4#U ALL
All possible debugging has been turned off
____________________________________________________________________________________

R5#

*May 28 10:58:58.183: OSPF: Serial1/0: Route adjust notification: UP/UP
*May 28 10:58:58.183: OSPF: Interface Serial1/0 going Up
*May 28 10:58:58.187: OSPF: Serial1/0: Interface state change to UP, new ospf state P2P
*May 28 10:58:58.215: OSPF: 2 Way Communication to 4.4.4.1 on Serial1/0, state 2WAY
*May 28 10:58:58.215: OSPF: Serial1/0 Nbr 4.4.4.1: Prepare dbase exchange
*May 28 10:58:58.215: OSPF: Send DBD to 4.4.4.1 on Serial1/0 seq 0x1653 opt 0x52 flag 0x7 len 32
*May 28 10:58:58.491: OSPF: Rcv DBD from 4.4.4.1 on Serial1/0 seq 0x151D opt 0x52 flag 0x7 len 32 mtu 1500 state EXSTART
*May 28 10:58:58.491: OSPF: First DBD and we are not SLAVE
*May 28 10:58:58.495: OSPF: Rcv DBD from 4.4.4.1 on Serial1/0 seq 0x1653 opt 0x52 flag 0x2 len 72 mtu 1500 state EXSTART
*May 28 10:58:58.495: OSPF: NBR Negotiation Done. We are the MASTER
*May 28 10:58:58.495: OSPF: Serial1/0 Nbr
R5#4.4.4.1: Summary list built, size 2
*May 28 10:58:58.495: OSPF: Send DBD to 4.4.4.1 on Serial1/0 seq 0x1654 opt 0x52 flag 0x1 len 72
*May 28 10:58:58.603: OSPF: Rcv LS REQ from 4.4.4.1 on Serial1/0 length 36 LSA count 1
*May 28 10:58:58.607: OSPF: Send UPD to 7.7.7.1 on Serial1/0 length 52 LSA count 1
*May 28 10:58:58.615: OSPF: Rcv DBD from 4.4.4.1 on Serial1/0 seq 0x1654 opt 0x52 flag 0x0 len 32 mtu 1500 state EXCHANGE
*May 28 10:58:58.615: OSPF: Exchange Done with 4.4.4.1 on Serial1/0
*May 28 10:58:58.619: OSPF: Send LS REQ to 4.4.4.1 length 12 LSA count 1
*May 28 10:58:58.683: OSPF: Build router LSA for area 51, router ID 5.5.5.1, seq 0x80000009, process 1
*May 28 10:58:58.747: OSPF: Rcv LS UPD from 4.4.4.1 on Serial1/0 length 64 LSA count 1
*May 28 10:58:58.751: OSPF: Synchronized with 4.4.4.1 on Serial1/0, state FULL
*May 28 10:58:58.751: %OSPF-5-ADJCHG: Process 1, Nbr 4.4.4.1 on Serial1/0 from LOADING to FULL, Loading Done
*May 28 10:58:58.751: OSPF: Serial1/0 Nbr 4
R5#.4.4.1: Clean-up dbase exchange
R5#
*May 28 10:59:03.683: OSPF: Build router LSA for area 51, router ID 5.5.5.1, seq 0x8000000A, process 1
R5#SH IP OSpf NEighbor

Neighbor ID     Pri   State           Dead Time   Address         Interface
4.4.4.1           0   FULL/ -        00:00:38    7.7.7.1         Serial1/0
R5#U ALL
All possible debugging has been turned off
____________________________________________________________________________________

Let's take a look at the Link State Database of R2 and R5:

R2#SH IP OSpf Database

            OSPF Router with ID (2.2.2.1) (Process ID 1)

                Router Link States (Area 0)

Link ID         ADV Router      Age         Seq#       Checksum Link count
1.1.1.1         1.1.1.1         994         0x80000009 0x005099 6
2.2.2.1         2.2.2.1         641         0x80000003 0x0090A7 2

                Summary Net Link States (Area 0)

Link ID         ADV Router      Age         Seq#       Checksum
5.5.5.0         2.2.2.1         641         0x80000002 0x00A67E

                Router Link States (Area 1)

Link ID         ADV Router      Age         Seq#       Checksum Link count
2.2.2.1         2.2.2.1         396         0x80000003 0x00A75A 1
3.3.3.1         3.3.3.1         371         0x80000003 0x007685 1
4.4.4.1         4.4.4.1         91          0x80000003 0x0048AC 1

                Net Link States (Area 1)

Link ID         ADV Router      Age         Seq#       Checksum
5.5.5.1         2.2.2.1         138         0x80000003 0x0036C8

                Summary Net Link States (Area 1)

Link ID         ADV Router      Age         Seq#       Checksum
10.0.0.1        2.2.2.1         644         0x80000002 0x006CAC
10.32.0.1       2.2.2.1         645         0x80000002 0x00EA0E
10.64.0.1       2.2.2.1         645         0x80000002 0x00696F
10.96.0.1       2.2.2.1         646         0x80000002 0x00E7D0
192.168.1.0     2.2.2.1         646         0x80000002 0x007762
192.168.1.3     2.2.2.1         646         0x80000002 0x009F0B
__________________________________________________________________________________

R5#sh ip ospf database

            OSPF Router with ID (5.5.5.1) (Process ID 1)

                Router Link States (Area 51)

Link ID         ADV Router      Age         Seq#       Checksum Link count
4.4.4.1         4.4.4.1         581         0x80000009 0x000882 2
5.5.5.1
____________________________________________________________________________________

Now for the Virtual Link configuration: Before I configure the virtual link let's take a look at the routing table of R1 and R4. Because the network is discontiguous R1 and R4 will not be able to communicate with each other.

R1#SH IP ROUTe ospf
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route, + - replicated route

Gateway of last resort is not set

      5.0.0.0/24 is subnetted, 1 subnets
O IA     5.5.5.0 [110/782] via 192.168.1.2, 00:51:17, Serial1/0
      192.168.1.0/24 is variably subnetted, 3 subnets, 3 masks
O        192.168.1.0/27 [110/1562] via 192.168.1.2, 00:57:56, Serial1/0
R1#ping 31.31.31.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 31.31.31.1, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
___________________________________________________________________________________R5#sh R5#sh ip route ospf
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route, + - replicated route

Gateway of last resort is not set
R5#ping 10.0.0.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.0.0.1, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
R5#

Note: As we can see there is no end to end network connectivity. The routing tables of R1 and R5 give proof to this.

Note: Virtual Links are a last resort to a disjointed network, this is only a temporary fix
__________________________________________________________________________________

Virtual Link config

If you take a look at the network diagram you will notice that R2 and R4 are ABR's. Virtual links cannot be configured in area 0. One of the routers in the Virtual Link must be a part of area 0. In the diagram R2 is in area 0. The Virtual Link will be configured on R2 and R4.

R2(config)#router ospf 1
R2(config-router)#area 1 virtual-link 4.4.4.1
*May 28 11:23:10.019: %OSPF-5-ADJCHG: Process 1, Nbr 4.4.4.1 on OSPF_VL1 from LOADING to FULL, Loading Done

__________________________________________________________________________________

R4(config-router)#area 1 virtual-link 2.2.2.1
R4(config-router)#
*May 28 11:23:10.019: %OSPF-5-ADJCHG: Process 1, Nbr 2.2.2.1 on OSPF_VL1 from LOADING to FULL, Loading Done
___________________________________________________________________________________

Note: Let us quickly verify the status of the virtual link on R2 and R4, then I will revisit the routing table of R1 and R5.

R2#SH IP OSpf VIrtual-links
Virtual Link OSPF_VL0 to router 4.4.4.1 is up
Run as demand circuit
DoNotAge LSA allowed.
Transit area 1, via interface FastEthernet0/0
Topology-MTID    Cost    Disabled     Shutdown      Topology Name
        0           1         no          no            Base
Transmit Delay is 1 sec, State POINT_TO_POINT,
Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
    Hello due in 00:00:02
    Adjacency State FULL (Hello suppressed)
    Index 2/4, retransmission queue length 0, number of retransmission 0
    First 0x0(0)/0x0(0) Next 0x0(0)/0x0(0)
    Last retransmission scan length is 0, maximum is 0
    Last retransmission scan time is 0 msec, maximum is 0 msec
_________________________________________________________________________________

R4#SH IP OSpf VIrtual-links
Virtual Link OSPF_VL1 to router 2.2.2.1 is up
Run as demand circuit
DoNotAge LSA allowed.
Transit area 1, via interface FastEthernet0/0
Topology-MTID    Cost    Disabled     Shutdown      Topology Name
        0           1         no          no            Base
Transmit Delay is 1 sec, State POINT_TO_POINT,
Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
    Hello due in 00:00:02
    Adjacency State FULL (Hello suppressed)
    Index 1/3, retransmission queue length 0, number of retransmission 0
    First 0x0(0)/0x0(0) Next 0x0(0)/0x0(0)
    Last retransmission scan length is 0, maximum is 0
    Last retransmission scan time is 0 msec, maximum is 0 msec

R1 and R2 routing table verification:

R1#sh ip route ospf
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route, + - replicated route

Gateway of last resort is not set

      5.0.0.0/24 is subnetted, 1 subnets
O IA     5.5.5.0 [110/782] via 192.168.1.2, 01:06:15, Serial1/0
      7.0.0.0/30 is subnetted, 1 subnets
O IA     7.7.7.0 [110/2344] via 192.168.1.2, 00:06:32, Serial1/0
      31.0.0.0/32 is subnetted, 2 subnets
O IA     31.31.31.1 [110/2345] via 192.168.1.2, 00:06:32, Serial1/0
O IA     31.31.32.1 [110/2345] via 192.168.1.2, 00:06:32, Serial1/0
      192.168.1.0/24 is variably subnetted, 3 subnets, 3 masks
O        192.168.1.0/27 [110/1562] via 192.168.1.2, 01:12:54, Serial1/0
R1#ping 31.31.31.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 31.31.31.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 108/135/192 ms
___________________________________________________________________________________

R5#sh ip route ospf
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route, + - replicated route

Gateway of last resort is not set

      5.0.0.0/24 is subnetted, 1 subnets
O IA     5.5.5.0 [110/65] via 7.7.7.1, 00:08:19, Serial1/0
      10.0.0.0/32 is subnetted, 4 subnets
O IA     10.0.0.1 [110/847] via 7.7.7.1, 00:08:15, Serial1/0
O IA     10.32.0.1 [110/847] via 7.7.7.1, 00:08:15, Serial1/0
O IA     10.64.0.1 [110/847] via 7.7.7.1, 00:08:15, Serial1/0
O IA     10.96.0.1 [110/847] via 7.7.7.1, 00:08:15, Serial1/0
      192.168.1.0/24 is variably subnetted, 2 subnets, 2 masks
O IA     192.168.1.0/27 [110/846] via 7.7.7.1, 00:08:15, Serial1/0
O IA     192.168.1.0/30 [110/1627] via 7.7.7.1, 00:08:15, Serial1/0

R5#ping 10.0.0.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.0.0.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 112/151/188 ms
R5#ping 10.32.0.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.32.0.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 112/148/188 ms
R5#ping 10.64.0.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.64.0.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 108/143/176 ms
R5#ping 10.96.0.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.96.0.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 120/142/188 ms
We now have full network reachability

RIPng Lab

2010-05-20T12:13:00.000-04:00

RIPng Lab1:

Configuration

R1:

ipv6 unicast-routing
ipv6 cef

interface Loopback1
no ip address
ipv6 address ABCD:1111::1/32
ipv6 rip lab1 enable
!
!
interface Loopback2
no ip address
ipv6 address ABCD:1112::1/32
ipv6 rip lab1 enable
!
!
interface FastEthernet0/0
no ip address
duplex half
ipv6 address A:A:A::1/48
ipv6 rip lab1 enable
!

ipv6 router rip lab1

__________________________________________________________________________________

R2:

ipv6 unicast-routing
ipv6 cef

interface Loopback1
no ip address
ipv6 address 1111::1/16
ipv6 rip lab1 enable
!
!
interface Loopback2
no ip address
ipv6 address 2222::1/16
ipv6 rip lab1 enable
!
!
interface Loopback3
no ip address
ipv6 address 3333::1/16
ipv6 rip lab1 enable
!
!
interface FastEthernet0/0
no ip address
duplex half
ipv6 address A:A:A::2/48
ipv6 rip lab1 enable
!

ipv6 router rip lab1
!
!
________________________________________________________________________________

Verification R1

R1:

R1#SH IPV6 INTerface BRief

FastEthernet0/0            [up/up]
    FE80::C800:17FF:FE84:0
    A:A:A::1
Loopback1                  [up/up]
    FE80::C800:17FF:FE84:0
    ABCD:1111::1
Loopback2                  [up/up]
    FE80::C800:17FF:FE84:0
    ABCD:1112::1

R1#SH IPV6 PROtocols

IPv6 Routing Protocol is "connected"
IPv6 Routing Protocol is "ND"
IPv6 Routing Protocol is "rip lab1"
Interfaces:
    Loopback2
    Loopback1
    FastEthernet0/0
Redistribution:
    None

R1#SH IPV6 ROute RIp

IPv6 Routing Table - default - 10 entries
Codes: C - Connected, L - Local, S - Static, U - Per-user Static route
       B - BGP, M - MIPv6, R - RIP, I1 - ISIS L1
       I2 - ISIS L2, IA - ISIS interarea, IS - ISIS summary, D - EIGRP
       EX - EIGRP external, ND - Neighbor Discovery
       O - OSPF Intra, OI - OSPF Inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2
       ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2
R   1111::/16 [120/2]
     via FE80::C801:FFF:FE20:0, FastEthernet0/0
R   2222::/16 [120/2]
     via FE80::C801:FFF:FE20:0, FastEthernet0/0
R   3333::/16 [120/2]
     via FE80::C801:FFF:FE20:0, FastEthernet0/0

R1#SH IPV6 RIp Database

RIP process "lab1", local RIB
A:A:A::/48, metric 2
     FastEthernet0/0/FE80::C801:FFF:FE20:0, expires in 161 secs
1111::/16, metric 2, installed
     FastEthernet0/0/FE80::C801:FFF:FE20:0, expires in 161 secs
2222::/16, metric 2, installed
     FastEthernet0/0/FE80::C801:FFF:FE20:0, expires in 161 secs
3333::/16, metric 2, installed
     FastEthernet0/0/FE80::C801:FFF:FE20:0, expires in 161 secs

Test end to end connectivity

R1#PING 3333::1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 3333::1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 52/108/216 ms
R1#

__________________________________________________________________________________

Verification R2

R2:

R2#SH IPV6 INTerface BRief

FastEthernet0/0            [up/up]
    FE80::C801:FFF:FE20:0
    A:A:A::2
Loopback1                  [up/up]
    FE80::C801:FFF:FE20:0
    1111::1
Loopback2                  [up/up]
    FE80::C801:FFF:FE20:0
    2222::1
Loopback3                  [up/up]
    FE80::C801:FFF:FE20:0
    3333::1

R2#SH IPV6 PROtocols

IPv6 Routing Protocol is "connected"
IPv6 Routing Protocol is "ND"
IPv6 Routing Protocol is "rip lab1"
Interfaces:
    Loopback3
    Loopback2
    Loopback1
    FastEthernet0/0
Redistribution:
    None

R2#SH IPV6 ROute RIp

IPv6 Routing Table - default - 11 entries
Codes: C - Connected, L - Local, S - Static, U - Per-user Static route
       B - BGP, M - MIPv6, R - RIP, I1 - ISIS L1
       I2 - ISIS L2, IA - ISIS interarea, IS - ISIS summary, D - EIGRP
       EX - EIGRP external, ND - Neighbor Discovery
       O - OSPF Intra, OI - OSPF Inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2
       ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2
R   ABCD:1111::/32 [120/2]
     via FE80::C800:17FF:FE84:0, FastEthernet0/0
R   ABCD:1112::/32 [120/2]
     via FE80::C800:17FF:FE84:0, FastEthernet0/0

R2#SH IPV6 RIp Database

RIP process "lab1", local RIB
A:A:A::/48, metric 2
     FastEthernet0/0/FE80::C800:17FF:FE84:0, expires in 170 secs
ABCD:1111::/32, metric 2, installed
     FastEthernet0/0/FE80::C800:17FF:FE84:0, expires in 170 secs
ABCD:1112::/32, metric 2, installed
     FastEthernet0/0/FE80::C800:17FF:FE84:0, expires in 170 secs

Test end to end connectivity

R2#PING abcd:1112::1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to ABCD:1112::1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 40/88/120 ms

OSPF LAB

2010-05-20T10:04:00.142-04:00

OSPF: Open Shortest Path First (OSPF) is a dynamic routing protocol for use in Internet Protocol (IP) networks. Specifically, it is a link-state routing protocol and falls into the group of interior gateway protocols, operating within a single autonomous system (AS). It is defined as OSPF Version 2 in RFC 2328 (1998). Source:http://en.wikipedia.org/wiki/Open_Shortest_Path_First

^{This lab starts with a basic OSPF configurations and verification.}

^R1:

^{interface Loopback45
ip address 45.45.45.1 255.255.255.0
!
!
interface Loopback46
ip address 45.45.46.1 255.255.255.0
!
!
interface Loopback47
ip address 45.45.47.1 255.255.255.0
!
!
interface FastEthernet0/0
ip address 20.0.0.1 255.224.0.0
duplex half
!
!
!
router ospf 1
router-id 1.1.1.1
log-adjacency-changes
network 20.0.0.0 0.31.255.255 area 0
network 45.45.45.0 0.0.0.255 area 0
network 45.45.46.0 0.0.0.255 area 0
network 45.45.47.0 0.0.0.255 area 0
!}^{______________________________________________________________________________________________}

^R2:

interface FastEthernet0/0
ip address 20.0.0.2 255.224.0.0
duplex half
!
!
interface Serial1/0
ip address 1.1.1.1 255.255.255.252
serial restart-delay 0
clock rate 64000
!

router ospf 1
router-id 2.2.2.1
log-adjacency-changes
network 1.1.1.0 0.0.0.3 area 0
network 20.0.0.0 0.31.255.255 area 0

___________________________________________________________________________________

R3:

interface Loopback20
ip address 20.20.20.1 255.255.255.0
!
!
interface Loopback21
ip address 20.20.21.1 255.255.255.0
!
!
interface Loopback22
ip address 20.20.22.1 255.255.255.0
!
!
interface FastEthernet0/0
ip address 15.15.15.1 255.255.255.0
duplex half
!
!
interface Serial1/0
ip address 1.1.1.2 255.255.255.252
serial restart-delay 0
!
!
interface Serial1/1
no ip address
shutdown
serial restart-delay 0
!
!
interface Serial1/2
no ip address
shutdown
serial restart-delay 0
!
!
interface Serial1/3
no ip address
shutdown
serial restart-delay 0
!
!
!
router ospf 2
router-id 3.3.3.1
log-adjacency-changes
network 1.1.1.0 0.0.0.3 area 0
network 15.15.15.0 0.0.0.255 area 1
network 20.20.20.0 0.0.0.255 area 1
network 20.20.21.0 0.0.0.255 area 1
network 20.20.22.0 0.0.0.255 area 1
___________________________________________________________________________________

R4:

interface Loopback1
ip address 192.168.2.1 255.255.255.0
!
!
interface Loopback2
ip address 192.168.1.1 255.255.255.0
!
!
interface Loopback3
ip address 192.168.3.1 255.255.255.0
!
!
interface FastEthernet0/0
ip address 15.15.15.2 255.255.255.0
duplex half
!
!
!
router ospf 2
router-id 4.4.4.1
log-adjacency-changes
redistribute rip metric 25 metric-type 1 subnets
network 15.15.15.0 0.0.0.255 area 1
!
router rip
version 2
network 192.168.1.0
network 192.168.2.0
network 192.168.3.0
no auto-summary
!
____________________________________________________________________________________

The next step is to verify neighborship between the routers

R1:

R1#SH IP OSpf NEighbor

Neighbor ID     Pri   State           Dead Time   Address         Interface
2.2.2.1           1   FULL/BDR        00:00:33    20.0.0.2        FastEthernet0/0

____________________________________________________________________________________

R2:

R2#SH IP OSpf NEighbor

Neighbor ID     Pri   State           Dead Time   Address         Interface
3.3.3.1           0   FULL/ -        00:00:34    1.1.1.2         Serial1/0
1.1.1.1           1   FULL/DR         00:00:37    20.0.0.1        FastEthernet0/0
___________________________________________________________________________________

R3:

R3#SH IP OSpf NEighbor

Neighbor ID     Pri   State           Dead Time   Address         Interface
2.2.2.1           0   FULL/ -        00:00:37    1.1.1.1         Serial1/0
4.4.4.1           1   FULL/BDR        00:00:30    15.15.15.2      FastEthernet0/0
___________________________________________________________________________________

R4:

R4#SH IP OSpf NEighbor

Neighbor ID Pri State Dead Time Address Interface
3.3.3.1 1 FULL/DR 00:00:34 15.15.15.1 FastEthernet0/0
___________________________________________________________________________________

Note: Pay attention to the state of the neighbor:

R1 identifies R2 as the BDR for the broadcast network:

Neighbor ID Pri State Dead Time Address Interface
2.2.2.1 1 FULL/BDR 00:00:33 20.0.0.2 FastEthernet0/0

R2 identifies R1 as the DR for the broadcast network:
R2 identifies R3 as FULL/-, this happens on Point-to-Point networks where only one router is connected at the other end of the link.

Neighbor ID     Pri   State           Dead Time   Address         Interface
3.3.3.1           0   FULL/ -        00:00:34    1.1.1.2         Serial1/0
1.1.1.1           1   FULL/DR         00:00:37    20.0.0.1        FastEthernet0/0

___________________________________________________________________________________

Let's take a brief look at LSA's and LSA types:

LSA type 1 (Router): Type 1 LSA's are sent by all routers in an area describing their directly connected networks. These LSA's do not leave the area.

LSA type 2 (Network): Type 2 LSA's are sent by the DR in a non-broadcast multiaccess network describing all connected routers on the segment. These LSA's do not leave the area

LSA type 3 (Summary): Type 3 LSA's are sent by the ABR to describe a route to neighbors outside of the area

LSA type 4 (Summary): Type 4 LSA's are sent by the ABR describing the IP address of the ASBR.

LSA type 5 (External): Type 5 LSA's are sent by the ASBR describing routes that are being redistributed into the area.

LSA type 7 Not so Stubby area(NSSA): Are sourced from a router in a NSSA
___________________________________________________________________________________

Let's take a look at the OSPF database

R1:

R1#sh ip ospf database

            OSPF Router with ID (1.1.1.1) (Process ID 1)

                Router Link States (Area 0)

Link ID         ADV Router      Age         Seq#       Checksum Link count
1.1.1.1         1.1.1.1         1534        0x80000006 0x0077B4 4
2.2.2.1         2.2.2.1         1488        0x80000006 0x0058EF 3
3.3.3.1         3.3.3.1         1284        0x80000003 0x00E898 2

                Net Link States (Area 0)

Link ID         ADV Router      Age         Seq#       Checksum
20.0.0.1        1.1.1.1         1534        0x80000002 0x006CC7

                Summary Net Link States (Area 0)

Link ID         ADV Router      Age         Seq#       Checksum
15.15.15.0      3.3.3.1         1284        0x80000002 0x0025DE
20.20.20.1      3.3.3.1         1284        0x80000002 0x00668D
20.20.21.1      3.3.3.1         1284        0x80000002 0x005B97
20.20.22.1      3.3.3.1         1284        0x80000002 0x0050A1

                Summary ASB Link States (Area 0)

Link ID         ADV Router      Age         Seq#       Checksum
4.4.4.1         3.3.3.1         775         0x80000002 0x009A88

                Type-5 AS External Link States

Link ID         ADV Router      Age         Seq#       Checksum Tag
192.168.1.0     4.4.4.1         715         0x80000002 0x007132 0
192.168.2.0     4.4.4.1         975         0x80000002 0x00663C 0
192.168.3.0     4.4.4.1         975         0x80000002 0x005B46 0

___________________________________________________________________________________

R2:

R2#SH IP OSpf Database

            OSPF Router with ID (2.2.2.1) (Process ID 1)

                Router Link States (Area 0)

Link ID         ADV Router      Age         Seq#       Checksum Link count
1.1.1.1         1.1.1.1         133         0x80000007 0x0075B5 4
2.2.2.1         2.2.2.1         116         0x80000007 0x0056F0 3
3.3.3.1         3.3.3.1         1921        0x80000003 0x00E898 2

                Net Link States (Area 0)

Link ID         ADV Router      Age         Seq#       Checksum
20.0.0.1        1.1.1.1         133         0x80000003 0x006AC8

                Summary Net Link States (Area 0)

Link ID         ADV Router      Age         Seq#       Checksum
15.15.15.0      3.3.3.1         1921        0x80000002 0x0025DE
20.20.20.1      3.3.3.1         1921        0x80000002 0x00668D
20.20.21.1      3.3.3.1         1921        0x80000002 0x005B97
20.20.22.1      3.3.3.1         1921        0x80000002 0x0050A1

                Summary ASB Link States (Area 0)

Link ID         ADV Router      Age         Seq#       Checksum
4.4.4.1         3.3.3.1         1412        0x80000002 0x009A88

                Type-5 AS External Link States

Link ID         ADV Router      Age         Seq#       Checksum Tag
192.168.1.0     4.4.4.1         1352        0x80000002 0x007132 0
192.168.2.0     4.4.4.1         1611        0x80000002 0x00663C 0
192.168.3.0     4.4.4.1         1611        0x80000002 0x005B46 0

___________________________________________________________________________________

R3:

R3#SH IP OSpf DAtabase

            OSPF Router with ID (3.3.3.1) (Process ID 2)

                Router Link States (Area 0)

Link ID         ADV Router      Age         Seq#       Checksum Link count
1.1.1.1         1.1.1.1         271         0x80000007 0x0075B5 4
2.2.2.1         2.2.2.1         254         0x80000007 0x0056F0 3
3.3.3.1         3.3.3.1         31          0x80000004 0x00E699 2

                Net Link States (Area 0)

Link ID         ADV Router      Age         Seq#       Checksum
20.0.0.1        1.1.1.1         271         0x80000003 0x006AC8

                Summary Net Link States (Area 0)

Link ID         ADV Router      Age         Seq#       Checksum
15.15.15.0      3.3.3.1         31          0x80000003 0x0023DF
20.20.20.1      3.3.3.1         31          0x80000003 0x00648E
20.20.21.1      3.3.3.1         31          0x80000003 0x005998
20.20.22.1      3.3.3.1         31          0x80000003 0x004EA2

                Summary ASB Link States (Area 0)

Link ID         ADV Router      Age         Seq#       Checksum
4.4.4.1         3.3.3.1         1548        0x80000002 0x009A88

                Router Link States (Area 1)

Link ID         ADV Router      Age         Seq#       Checksum Link count
3.3.3.1         3.3.3.1         1797        0x80000006 0x008945 4
4.4.4.1         4.4.4.1         1746        0x80000004 0x00981E 1

                Net Link States (Area 1)

Link ID         ADV Router      Age         Seq#       Checksum
15.15.15.1      3.3.3.1         1797        0x80000002 0x0018D1

                Summary Net Link States (Area 1)

Link ID         ADV Router      Age         Seq#       Checksum
1.1.1.0         3.3.3.1         33          0x80000003 0x00836D
20.0.0.0        3.3.3.1         33          0x80000003 0x0042B8
45.45.45.1      3.3.3.1         33          0x80000003 0x0069FC
45.45.46.1      3.3.3.1         33          0x80000003 0x005E07
45.45.47.1      3.3.3.1         33          0x80000003 0x005311

                Type-5 AS External Link States

Link ID         ADV Router      Age         Seq#       Checksum Tag
192.168.1.0     4.4.4.1         1488        0x80000002 0x007132 0
192.168.2.0     4.4.4.1         1748        0x80000002 0x00663C 0
192.168.3.0     4.4.4.1         1748        0x80000002 0x005B46 0
___________________________________________________________________________________

R4:

R4#SH IP ospf database

            OSPF Router with ID (4.4.4.1) (Process ID 2)

                Router Link States (Area 1)

Link ID         ADV Router      Age         Seq#       Checksum Link count
3.3.3.1         3.3.3.1         1952        0x80000006 0x008945 4
4.4.4.1         4.4.4.1         1900        0x80000004 0x00981E 1

                Net Link States (Area 1)

Link ID         ADV Router      Age         Seq#       Checksum
15.15.15.1      3.3.3.1         1952        0x80000002 0x0018D1

                Summary Net Link States (Area 1)

Link ID         ADV Router      Age         Seq#       Checksum
1.1.1.0         3.3.3.1         188         0x80000003 0x00836D
20.0.0.0        3.3.3.1         188         0x80000003 0x0042B8
45.45.45.1      3.3.3.1         188         0x80000003 0x0069FC
45.45.46.1      3.3.3.1         188         0x80000003 0x005E07
45.45.47.1      3.3.3.1         188         0x80000003 0x005311

                Type-5 AS External Link States

Link ID         ADV Router      Age         Seq#       Checksum Tag
192.168.1.0     4.4.4.1         1641        0x80000002 0x007132 0
192.168.2.0     4.4.4.1         1902        0x80000002 0x00663C 0
192.168.3.0     4.4.4.1         1902        0x80000002 0x005B46 0
___________________________________________________________________________________

Let's verify the contents of the routing table across the network

R1:
R1#SH IP ROUTE
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route, + - replicated route

Gateway of last resort is not set

      1.0.0.0/30 is subnetted, 1 subnets
O        1.1.1.0 [110/65] via 20.0.0.2, 01:27:32, FastEthernet0/0
      15.0.0.0/24 is subnetted, 1 subnets
O IA     15.15.15.0 [110/66] via 20.0.0.2, 01:23:14, FastEthernet0/0
      20.0.0.0/8 is variably subnetted, 5 subnets, 2 masks
O IA     20.20.20.1/32 [110/66] via 20.0.0.2, 01:25:49, FastEthernet0/0
O IA     20.20.21.1/32 [110/66] via 20.0.0.2, 01:25:49, FastEthernet0/0
O IA     20.20.22.1/32 [110/66] via 20.0.0.2, 01:25:39, FastEthernet0/0
O E1 192.168.1.0/24 [110/91] via 20.0.0.2, 01:17:27, FastEthernet0/0
O E1 192.168.2.0/24 [110/91] via 20.0.0.2, 01:18:12, FastEthernet0/0
O E1 192.168.3.0/24 [110/91] via 20.0.0.2, 01:18:12, FastEthernet0/0
R1#

__________________________________________________________________________

R2:

Gateway of last resort is not set

      1.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C        1.1.1.0/30 is directly connected, Serial1/0
L        1.1.1.1/32 is directly connected, Serial1/0
      15.0.0.0/24 is subnetted, 1 subnets
O IA     15.15.15.0 [110/65] via 1.1.1.2, 01:14:33, Serial1/0
      20.0.0.0/8 is variably subnetted, 5 subnets, 2 masks
C        20.0.0.0/11 is directly connected, FastEthernet0/0
L        20.0.0.2/32 is directly connected, FastEthernet0/0
O IA     20.20.20.1/32 [110/65] via 1.1.1.2, 01:17:08, Serial1/0
O IA     20.20.21.1/32 [110/65] via 1.1.1.2, 01:17:08, Serial1/0
O IA     20.20.22.1/32 [110/65] via 1.1.1.2, 01:16:58, Serial1/0
      45.0.0.0/32 is subnetted, 3 subnets
O        45.45.45.1 [110/2] via 20.0.0.1, 01:19:01, FastEthernet0/0
O        45.45.46.1 [110/2] via 20.0.0.1, 01:19:03, FastEthernet0/0
O        45.45.47.1 [110/2] via 20.0.0.1, 01:19:03, FastEthernet0/0
O E1 192.168.1.0/24 [110/90] via 1.1.1.2, 01:08:48, Serial1/0
O E1 192.168.2.0/24 [110/90] via 1.1.1.2, 01:09:34, Serial1/0
O E1 192.168.3.0/24 [110/90] via 1.1.1.2, 01:09:34, Serial1/0
R2#
__________________________________________________________________________________

R3:

Gateway of last resort is not set

      1.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C        1.1.1.0/30 is directly connected, Serial1/0
L        1.1.1.2/32 is directly connected, Serial1/0
      15.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C        15.15.15.0/24 is directly connected, FastEthernet0/0
L        15.15.15.1/32 is directly connected, FastEthernet0/0
      20.0.0.0/8 is variably subnetted, 7 subnets, 3 masks
O        20.0.0.0/11 [110/65] via 1.1.1.1, 01:18:08, Serial1/0
C        20.20.20.0/24 is directly connected, Loopback20
L        20.20.20.1/32 is directly connected, Loopback20
C        20.20.21.0/24 is directly connected, Loopback21
L        20.20.21.1/32 is directly connected, Loopback21
C        20.20.22.0/24 is directly connected, Loopback22
L        20.20.22.1/32 is directly connected, Loopback22
      45.0.0.0/32 is subnetted, 3 subnets
O        45.45.45.1 [110/66] via 1.1.1.1, 01:18:10, Serial1/0
O        45.45.46.1 [110/66] via 1.1.1.1, 01:18:10, Serial1/0
O        45.45.47.1 [110/66] via 1.1.1.1, 01:18:10, Serial1/0
O E1 192.168.1.0/24 [110/26] via 15.15.15.2, 01:09:37, FastEthernet0/0
O E1 192.168.2.0/24 [110/26] via 15.15.15.2, 01:10:27, FastEthernet0/0
O E1 192.168.3.0/24 [110/26] via 15.15.15.2, 01:10:28, FastEthernet0/0
R3#
___________________________________________________________________________________

R4:

Gateway of last resort is not set

      1.0.0.0/30 is subnetted, 1 subnets
O IA     1.1.1.0 [110/65] via 15.15.15.1, 01:13:50, FastEthernet0/0
      15.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C        15.15.15.0/24 is directly connected, FastEthernet0/0
L        15.15.15.2/32 is directly connected, FastEthernet0/0
      20.0.0.0/8 is variably subnetted, 4 subnets, 2 masks
O IA     20.0.0.0/11 [110/66] via 15.15.15.1, 01:13:50, FastEthernet0/0
O        20.20.20.1/32 [110/2] via 15.15.15.1, 01:13:50, FastEthernet0/0
O        20.20.21.1/32 [110/2] via 15.15.15.1, 01:13:50, FastEthernet0/0
O        20.20.22.1/32 [110/2] via 15.15.15.1, 01:13:50, FastEthernet0/0
      45.0.0.0/32 is subnetted, 3 subnets
O IA     45.45.45.1 [110/67] via 15.15.15.1, 01:13:50, FastEthernet0/0
O IA     45.45.46.1 [110/67] via 15.15.15.1, 01:13:50, FastEthernet0/0
O IA     45.45.47.1 [110/67] via 15.15.15.1, 01:13:51, FastEthernet0/0
      192.168.1.0/24 is variably subnetted, 2 subnets, 2 masks
C        192.168.1.0/24 is directly connected, Loopback2
L        192.168.1.1/32 is directly connected, Loopback2
      192.168.2.0/24 is variably subnetted, 2 subnets, 2 masks
C        192.168.2.0/24 is directly connected, Loopback1
L        192.168.2.1/32 is directly connected, Loopback1
      192.168.3.0/24 is variably subnetted, 2 subnets, 2 masks
C        192.168.3.0/24 is directly connected, Loopback3
L        192.168.3.1/32 is directly connected, Loopback3
R4#
_________________________________________________________________________________

Note: I will verify end to end connectivity, if all is well i should be able to ping from R1 to R4 and vice versa.

R1:

R1#PING 192.168.3.1 r 20
Type escape sequence to abort.
Sending 20, 100-byte ICMP Echos to 192.168.3.1, timeout is 2 seconds:
!!!!!!!!!!!!!!!!!!!!
Success rate is 100 percent (20/20), round-trip min/avg/max = 44/64/108 ms
R1#
__________________________________________________________________________________

R4:

R4(config)#do ping 45.45.47.1 r 20

Type escape sequence to abort.
Sending 20, 100-byte ICMP Echos to 45.45.47.1, timeout is 2 seconds:
!!!!!!!!!!!!!!!!!!!!
Success rate is 100 percent (20/20), round-trip min/avg/max = 36/70/112 ms
R4(config)#

Note: Everything looks good, this lab config was simple and straight forward. The difficult part is knowing where to look when there are anomalies on the network. Troubleshooting is a MUST have skill. Later in this lab there will be a lot of issues that must be resolved. Once we have a good baseline understanding of the network, the troubleshooting steps will fall into place, hopefully :-)

How to configure Netflow

2010-05-19T16:01:00.007-04:00

What is Netflow?

A flow can be considered as traffic that share "header" information such as source and destination IP address, protocols numbers, port numbers and TOS field information. Reference CCNP Tshoot Cisco Press.

Netflow allows you to monitor which user or computer system in the network is using the most traffic. Netflow can be configured as stand alone (on the router) or tied together with applications that support Netflow. My favorite program is WhatsUpGold http://www.whatsupgold.com/. There is a 30 day trial available for download. I will give you a simple stand alone config and a sample config tied in with WhatsUpGold v14.

Neetflow interface configuration

Interface config mode:

interface FastEthernet0/0
ip address 10.0.32.1 255.255.224.0
ip flow ingress
duplex full

Global config mode:

!
ip flow-export source Loopback0
ip flow-export version 5
ip flow-export destination 192.168.1.1 9999
ip flow-top-talkers
top 5
sort-by bytes

Specify the flow-export source
Specify the version number
Specify where the flow will be exported
Configure how many top talkers will be monitored
the results will be sorted by bytes

Below is a sample output of the show flow command:

CME_2651XM#sh ip cache flow
IP packet size distribution (1710195 total packets):
   1-32   64   96 128 160 192 224 256 288 320 352 384 416 448 480
   .000 .385 .208 .024 .012 .009 .026 .004 .003 .002 .024 .001 .002 .002 .001

    512 544 576 1024 1536 2048 2560 3072 3584 4096 4608
   .001 .001 .001 .018 .267 .000 .000 .000 .000 .000 .000

IP Flow Switching Cache, 278544 bytes
15 active, 4081 inactive, 341232 added
5824827 ager polls, 0 flow alloc failures
Active flows timeout in 30 minutes
Inactive flows timeout in 15 seconds
IP Sub Flow Cache, 25800 bytes
15 active, 1009 inactive, 336988 added, 336988 added to flow
0 alloc failures, 0 force free
1 chunk, 5 chunks added
last clearing of statistics never
Protocol         Total    Flows   Packets Bytes Packets Active(Sec) Idle(Sec)
--------         Flows     /Sec     /Flow /Pkt     /Sec     /Flow     /Flow
TCP-Telnet       19434      0.0         9    42      0.1       0.0       1.5
TCP-FTP             22        0.0         1    45      0.0       0.8      12.9
TCP-FTPD          12        0.0         1    43      0.0       0.2      13.3
TCP-WWW        12517 0.0        39   841      0.3       2.9       6.6

_________________________________________________________________________________
CME_2651XM#sh ip flow top-talkers

SrcIf         SrcIPaddress    DstIf         DstIPaddress    Pr SrcP DstP Bytes
Fa0/0         10.46.240.1     Null          255.255.255.255 11 0043 0044    18K
Fa0/1         1.1.1.1         Local         1.1.1.1      01 0000 0800 3612

2 of 5 top talkers shown. 23 flows processed.

Configure WhatsUpGold:

Login into the WhatsUpGold interface

2. Under flow monitor click go--configure-- settings

3. Listening port: Select a port number it should be the same as port configured using the ip flow-destination command eg (ip flow-export destination 192.168.1.1 9999)

Sample WhatsUpGold display:

How to configure a Frame Relay Network

2010-05-07T14:02:00.041-04:00

Step 1:

Configure the frame relay switch a Cisco 2600 is used in this example:

In global config mode type...

1. frame-relay switching

2. Configure the serial interfaces for frame relay

interface Serial1/0
no ip address
encapsulation frame-relay
logging event subif-link-status
logging event dlci-status-change
serial restart-delay 0
clock rate 56000
no frame-relay inverse-arp
frame-relay lmi-type cisco
frame-relay intf-type dce
frame-relay route 102 interface Serial1/1 201
frame-relay route 103 interface Serial1/2 301
!
!
interface Serial1/1
no ip address
encapsulation frame-relay
logging event subif-link-status
logging event dlci-status-change
serial restart-delay 0
clock rate 56000
no frame-relay inverse-arp
frame-relay lmi-type cisco
frame-relay intf-type dce
frame-relay route 201 interface Serial1/0 102
frame-relay route 701 interface Serial1/2 107
!
!
interface Serial1/2
no ip address
encapsulation frame-relay
logging event subif-link-status
logging event dlci-status-change
serial restart-delay 0
clock rate 56000
no frame-relay inverse-arp
frame-relay lmi-type cisco
frame-relay intf-type dce
frame-relay route 107 interface Serial1/1 701
frame-relay route 301 interface Serial1/0 103
!
This is the end of the FRAME RELAY SWITCH CONFIG

I will now configure each router in the frame relay network.

R1:

1. Go under the serial interface and configure the following...

interface Serial1/0
no ip address
encapsulation frame-relay
logging event subif-link-status
logging event dlci-status-change
serial restart-delay 0

2. Pay close attention to the configuration, notice no IP address has been configured and encapsulation has been configured.

Note: In this particular lab sub interfaces will be configured as Point-To-Point.

3. Configure the sub interface to support the DLCI being used. A best practice is to configure the sub interface with the DLCI number. For example DLCI 102 will be configured as interface s1/0.101 point-to-point.

!
interface Serial1/0.102 point-to-point
ip address 10.0.0.1 255.224.0.0
frame-relay interface-dlci 102
!
interface Serial1/0.103 point-to-point
ip address 10.32.0.1 255.224.0.0
frame-relay interface-dlci 103
I will repeat steps 1-3 on R2 and R3.

R2:

!
interface Serial1/0
no ip address
encapsulation frame-relay
serial restart-delay 0
!
!
interface Serial1/0.201 point-to-point
ip address 10.0.0.2 255.224.0.0
frame-relay interface-dlci 201
!
interface Serial1/0.701 point-to-point
ip address 10.64.0.1 255.224.0.0
frame-relay interface-dlci 701

R3:

interface Serial1/0
no ip address
encapsulation frame-relay
serial restart-delay 0
!
!
interface Serial1/0.107 point-to-point
ip address 10.64.0.2 255.224.0.0
frame-relay interface-dlci 107
!
interface Serial1/0.301 point-to-point
ip address 10.32.0.2 255.224.0.0
frame-relay interface-dlci 301

Note: Each sub interface is in it's own subnet and the IP address much match each point-to-point sub interface.

Now on with the verification...

Frame Relay Switch (Cisco 2651XM)

FRS#sh frame-relay ?
end-to-end     Frame-relay end-to-end VC information
fragment       show frame relay fragmentation information
ip             show frame relay IP statistics
iphc           Frame Relay FRF.20 Control Protocol frames
lapf           show frame relay lapf status/statistics
lmi            show frame relay lmi statistics
map            Frame-Relay map table
multilink      Show Multilink Frame Relay bundle information
pvc            show frame relay pvc statistics
qos-autosense show frame relay qos-autosense information
route          show frame relay route
svc            show frame relay SVC stuff
traffic        Frame-Relay protocol statistics
vc-bundle      FR VC-Bundle
vofr           Show frame-relay VoFR statistics

FRS#sh fram
FRS#sh frame-relay lmi
FRS#sh frame-relay lmi

LMI Statistics for interface Serial1/0 (Frame Relay DCE) LMI TYPE = CISCO
Invalid Unnumbered info 0             Invalid Prot Disc 0
Invalid dummy Call Ref 0              Invalid Msg Type 0
Invalid Status Message 0              Invalid Lock Shift 0
Invalid Information ID 0              Invalid Report IE Len 0
Invalid Report Request 0              Invalid Keep IE Len 0
Num Status Enq. Rcvd 151              Num Status msgs Sent 151
Num Update Status Sent 0              Num St Enq. Timeouts 17

LMI Statistics for interface Serial1/1 (Frame Relay DCE) LMI TYPE = CISCO
Invalid Unnumbered info 0             Invalid Prot Disc 0
Invalid dummy Call Ref 0              Invalid Msg Type 0
Invalid Status Message 0              Invalid Lock Shift 0
Invalid Information ID 0              Invalid Report IE Len 0
Invalid Report Request 0              Invalid Keep IE Len 0
Num Status Enq. Rcvd 122              Num Status msgs Sent 122
Num Update Status Sent 0              Num St Enq. Timeouts 32

LMI Statistics for interface Serial1/2 (Frame Relay DCE) LMI TYPE = CISCO
Invalid Unnumbered info 0             Invalid Prot Disc 0
Invalid dummy Call Ref 0              Invalid Msg Type 0
Invalid Status Message 0              Invalid Lock Shift 0
Invalid Information ID 0              Invalid Report IE Len 0
Invalid Report Request 0              Invalid Keep IE Len 0
Num Status Enq. Rcvd 114              Num Status msgs Sent 114
Num Update Status Sent 0              Num St Enq. Timeouts 33
FRS#

R1:

SH FRAMe-relay MAp

Serial1/0.102 (up): point-to-point dlci, dlci 102(0x66,0x1860), broadcast
status defined, active
Serial1/0.103 (up): point-to-point dlci, dlci 103(0x67,0x1870), broadcast
status defined, active

LMI Statistics for interface Serial1/0 (Frame Relay DTE) LMI TYPE = CISCO

Invalid Unnumbered info 0             Invalid Prot Disc 0
Invalid dummy Call Ref 0              Invalid Msg Type 0
Invalid Status Message 0              Invalid Lock Shift 0
Invalid Information ID 0              Invalid Report IE Len 0
Invalid Report Request 0              Invalid Keep IE Len 0
Num Status Enq. Sent 157              Num Status msgs Rcvd 158
Num Update Status Rcvd 0              Num Status Timeouts 0
Last Full Status Req 00:00:17         Last Full Status Rcvd 00:00:17

SH FRaMe-relay Pvc

PVC Statistics for interface Serial1/0 (Frame Relay DTE)

              Active     Inactive      Deleted       Static
Local          2            0            0            0
Switched       0            0            0            0
Unused         0            0            0            0

DLCI = 102, DLCI USAGE = LOCAL, PVC STATUS = ACTIVE, INTERFACE = Serial1/0.102

input pkts 42            output pkts 44           in bytes 9427
out bytes 10108          dropped pkts 0           in pkts dropped 0
out pkts dropped 0                out bytes dropped 0
in FECN pkts 0           in BECN pkts 0           out FECN pkts 0
out BECN pkts 0          in DE pkts 0             out DE pkts 0
out bcast pkts 24        out bcast bytes 8028
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
pvc create time 00:25:45, last time pvc status changed 00:21:23

DLCI = 103, DLCI USAGE = LOCAL, PVC STATUS = ACTIVE, INTERFACE = Serial1/0.103

input pkts 26            output pkts 28           in bytes 7326
out bytes 8016           dropped pkts 3           in pkts dropped 3
out pkts dropped 0                out bytes dropped 0
in FECN pkts 0           in BECN pkts 0           out FECN pkts 0
out BECN pkts 0          in DE pkts 0             out DE pkts 0
out bcast pkts 22        out bcast bytes 7392
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
pvc create time 00:25:05, last time pvc status changed 00:19:55

R2:

SH FRAMe-relay MAp
Serial1/0.201 (up): point-to-point dlci, dlci 201(0xC9,0x3090), broadcast
          status defined, active
Serial1/0.701 (up): point-to-point dlci, dlci 701(0x2BD,0xACD0), broadcast
          status defined, active

SH FRAMe-relay LMi

LMI Statistics for interface Serial1/0 (Frame Relay DTE) LMI TYPE = CISCO
Invalid Unnumbered info 0             Invalid Prot Disc 0
Invalid dummy Call Ref 0              Invalid Msg Type 0
Invalid Status Message 0              Invalid Lock Shift 0
Invalid Information ID 0              Invalid Report IE Len 0
Invalid Report Request 0              Invalid Keep IE Len 0
Num Status Enq. Sent 140              Num Status msgs Rcvd 141
Num Update Status Rcvd 0              Num Status Timeouts 0
Last Full Status Req 00:00:27         Last Full Status Rcvd 00:00:27

SH FRaMe-relay Pvc

PVC Statistics for interface Serial1/0 (Frame Relay DTE)

              Active     Inactive      Deleted       Static
Local          2            0            0            0
Switched       0            0            0            0
Unused         0            0            0            0

DLCI = 201, DLCI USAGE = LOCAL, PVC STATUS = ACTIVE, INTERFACE = Serial1/0.201

input pkts 46            output pkts 44           in bytes 10780
out bytes 10099          dropped pkts 0           in pkts dropped 0
out pkts dropped 0                out bytes dropped 0
in FECN pkts 0           in BECN pkts 0           out FECN pkts 0
out BECN pkts 0          in DE pkts 0             out DE pkts 0
out bcast pkts 24        out bcast bytes 8019
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
pvc create time 00:23:51, last time pvc status changed 00:23:51

DLCI = 701, DLCI USAGE = LOCAL, PVC STATUS = ACTIVE, INTERFACE = Serial1/0.701

input pkts 47            output pkts 46           in bytes 10224
out bytes 9888           dropped pkts 1           in pkts dropped 1
out pkts dropped 0                out bytes dropped 0
in FECN pkts 0           in BECN pkts 0           out FECN pkts 0
out BECN pkts 0          in DE pkts 0             out DE pkts 0
out bcast pkts 22        out bcast bytes 7392
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
pvc create time 00:21:22, last time pvc status changed 00:19:53

R3:

Sh frame-relay map
Serial1/0.107 (up): point-to-point dlci, dlci 107(0x6B,0x18B0), broadcast
          status defined, active
Serial1/0.301 (up): point-to-point dlci, dlci 301(0x12D,0x48D0), broadcast
          status defined, active

SH FRAMe-relay LMi

LMI Statistics for interface Serial1/0 (Frame Relay DTE) LMI TYPE = CISCO
Invalid Unnumbered info 0             Invalid Prot Disc 0
Invalid dummy Call Ref 0              Invalid Msg Type 0
Invalid Status Message 0              Invalid Lock Shift 0
Invalid Information ID 0              Invalid Report IE Len 0
Invalid Report Request 0              Invalid Keep IE Len 0
Num Status Enq. Sent 139              Num Status msgs Rcvd 139
Num Update Status Rcvd 0              Num Status Timeouts 0
Last Full Status Req 00:00:16         Last Full Status Rcvd 00:00:16

sh frame-relay pvc

PVC Statistics for interface Serial1/0 (Frame Relay DTE)

              Active     Inactive      Deleted       Static
Local          2            0            0            0
Switched       0            0            0            0
Unused         0            0            0            0

DLCI = 107, DLCI USAGE = LOCAL, PVC STATUS = ACTIVE, INTERFACE = Serial1/0.107

input pkts 47            output pkts 55           in bytes 10224
out bytes 11520          dropped pkts 0           in pkts dropped 0
out pkts dropped 0                out bytes dropped 0
in FECN pkts 0           in BECN pkts 0           out FECN pkts 0
out BECN pkts 0          in DE pkts 0             out DE pkts 0
out bcast pkts 25        out bcast bytes 8400
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
pvc create time 00:22:23, last time pvc status changed 00:20:53

DLCI = 301, DLCI USAGE = LOCAL, PVC STATUS = ACTIVE, INTERFACE = Serial1/0.301

input pkts 32            output pkts 33           in bytes 9360
out bytes 8750           dropped pkts 0           in pkts dropped 0
out pkts dropped 0                out bytes dropped 0
in FECN pkts 0           in BECN pkts 0           out FECN pkts 0
out BECN pkts 0          in DE pkts 0             out DE pkts 0
out bcast pkts 23        out bcast bytes 7710
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
pvc create time 00:23:44, last time pvc status changed 00:23:44

Ping directly connected neighbor for connectivity:

R1#ping 10.0.0.2

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.0.0.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 140/176/240 ms

R1#ping 10.32.0.2

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.32.0.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 144/185/232 ms
___________________________________________________________________________________

R2#PING 10.64.0.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.64.0.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 140/172/188 ms

R2#PING 10.32.0.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.32.0.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 140/192/236 ms
_________________________________________________________________________________
R3#PING 10.0.0.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.0.0.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 164/201/220 ms

R3#PING 10.64.0.2

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.64.0.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 136/166/192 ms

___________________________________________________________________________________

Spanning Tree, VLANs and VTP

2010-03-01T12:48:00.018-05:00

Spanning Tree 802.1d

Before STP Convergence

After STP Convergence

BPDU- Bridge Protocol Data Unit
There are two types of BPDUs:
· Configuration BPDU is used to compute STP
· Topology Change Notification (TCN) is used to announce changes in the network topology

Configuration BPDU message contains the following:
· Root bridge ID 8 bytes
· Root path cost 4 bytes
The primary goal of BPDU probes is to work toward electing a reference point a stable spanning tree topology.

By default BPDUs are sent out all switch ports every 2 seconds, this allows for faster convergence when there is a network failure.

Electing a root bridge:

Each switch has a “unique” id called a “bridge id” that identifies it to other switches in the network. By default switches do not know about each other.

The bridge id is an 8 byte value consisting of the following fields:
· Bridge priority (2 bytes): The priority of a switch ranges from 0-65,535 the default is 32,768
· MAC Address (6 bytes): The MAC Address used by a switch can come from the following:
o Supervisor Module
o The backplane
o A pool of 1,024 addresses assigned to the supervisor backplane

1. Every switch begins by sending BPDUs with a root bridge id equal to its own bridge id and sender id that is its own BPDU message.
2. The sender bridge id simply says who the bridge is
3. After the root bridge is agreed on configuration BPDUs are sent only by the root bridge
4. All other bridges must forward or relay BPDUs adding their own “sender id” in the message

Electing Root Ports:

1. Now that a reference point has been elected (Root Bridge). Each non root switch must figure out where it is located in relation to the root bridge.
2. Only one root port can be selected “per segment” on each non root switch.
3. Each root port is selected by evaluating the “root path cost”, this value is the sum of all links leading to the root bridge.

Note:

· Root path: The root path is carried inside the BPDU, switches add the root path as it travels across the switched network leading back to the root bridge.

· Path Cost: The path cost is not contained in BPDU it is local only to the switch

Common STP cost:

10 mbps = 100
100 mbps= 19
1 gbps =4
10 gbps = 2

To change the spanning-tree port priority type:

Sw (config) # interface fa0/0
Sw (config) #spanning-tree port-priority 112

VLANS:

1. Create VLANS at the physical boundary at the switch block
2. Do not pass VLAN information into the Core, they should stay at the distribution layer
3. The Core layer should be routed
4. Create VLANs in global configuration mode à VLANS in the exec mode is being phased out
5. VLANs are not stored in the running configuration
6. VLANs are stored in flash , they are located at flash:vlan.dat
7. Erasing startup configuration does not erase the vlan.dat file: Type the following command to remove the vlan.dat file: delete flash:vlan.dat

TRUNKING: Tags are not removed

Trunk ports leave the tag on the packet
· Trunking aka “tagging” passes multi-vlan information between switches
· Places VLAN information into each frame
· Trunking is a layer2 feature

There are two flavors of Trunking:

1. Inter switch Link (ISL)

· Cisco proprietary
· Encapsulates the entire frame
· Being phased out

2. 802.1Q
· Open standard
· Inserts a tag into the frame instead of encapsulating it

Note: Native VLAN mismatch is a common error message: The switch generates this message because the configured native VLAN on the port is different than the native VLAN that is set on the connecting switch or router port.

Solution: Ensure that the native VLAN for an 802.1Q trunk is the same on both ends of the trunk link. If the native VLAN on one end of the trunk is different than the native VLAN on the other end, the traffic of the native VLANs on both sides cannot be transmitted correctly on the trunk. This failure to transmit correctly can imply some connectivity issues in your network.

VLAN Trunking Protocol (VTP)

· VTP makes switch administration easier
· VTP is not a trunking is NOT a protocol, it can be better described as a “REPLICATION protocol”

VTP is updated on a “revision number” basis
· Higher VTP revision numbers are preferred
· VTP can destroy a network if it is not properly configured

Note: If the lights on the switch all turn “orange” it is possible that the VLANs have been compromised. This type of scenario is very common when a company places a switch from their lab environment into their production network.

VTP Modes:

Server Mode:
· Has the power to change VLANS
· Send and receive VTP updates
· Saves VLAN configuration in FLASH

Client Mode:
· Cannot change VLAN information
· Sends and receives VTP updates
· Does not save VLAN configuration à gets it from the server

Transparent Mode: The “REBEL SWITCH” DOES NOT ACCEPT VTP UPDATES FROM ANYONE
· Power to change VLAN information
· Forwards (passes on) VTP updates –VTP version 2
· Saves VLAN configuration Does not share its personal VLAN database

Search Engine Submission - AddMe

642-901 BSCI Routing Protocols- (EIGRP,OSPF,IS-IS and BGP)

2009-02-03T12:53:00.002-05:00

Passed BSCI--> Next stop BCMSN
Passed BCMSN--> Next stop TSHOOT/CCNA Voice

I am about to embark on my first CCNP exam. I am very excited to jump straight into the Cisco Press series of books...

EIGRP Principals:

Protocol "dependent" modules- Several protocol dependent modules are used, the two most important are IPV4 and IPV6
Reliable Transport Protocol (RTP): EIGRP sends "some" reliable packets using RTP
Neighbor discovery and recovery: EIGRP sends hellos to discovery neighbors, once neighbors are discovered hellos are sent between neighbors as a means of saying the links are up.
Diffusing Update Algorithm (DUAL): Is used to select the best routes, and feasible fail over routes.

Enabling EIGRP

To enable EIGRP as an active routing protocol use the router command and specify an autonomous system number. Eg Router EIGRP 1 Note (unlike OSPF the autonomous system number must be the same on all routers in an EIGRP domain)
At this point EIGRP is enabled but NOT active on the interface. EIGRP will NOT produce hellos or advertise networks until it is activated on the particular links.
Interfaces are attached to the EIGRP process with the network command eg Network 10.0.0.0, 192.168.2.0.

To enable EIGRP you must enable the following:

The EIGRP process: The routing protocol needs to be started on the router- router EIGRP
The EIGRP Autonomous System Number: This is a 16 bit number
Participating Router Interface: You can enable EIGRP on "some or all interfaces"

Passive interfaces: Prevents EIGRP from speaking on an interface, It does NOT send hellos or advertisements.

Neighbors and Reliable Incremental Updates

EIGRP produces reliable updates by identifying its packets using IP protocol 88. Reliable means that the receiver acknowledges that the transmission was received and understood. EIGRP only repeats itself if an advertisement is lost.

EIGRP usesfive types of packets to communicate. These packets are directly
encapsulated by the IP protocol.

Hello—Identifies neighbors. Hellos are sent as periodic multicasts and are not acknowledged directly.

Update—Advertises routes. Updates are sent as multicasts only when there is a change.

Ack—Acknowledges receipt of an update.

Query—Used to ask about routes for which the previous best path has been lost. If an update indicates that a path is down, multicast queries are used to ask other neighbors if they still have a path. If the quering router does not receive a reply from each of its neighbors, it repeats the query as a unicast to each unresponsive neighbor until it either gets a reply or gives up after sixteen tries.

Reply—Used to answer a query. Each neighbor responds to the query with a unicast reply indicating an alternative path or the fact that it does not have a path.