Friday, May 28, 2010

OSPF Virtual Link Configuration, Verification and troubleshooting



Configuration:

R1:

interface Loopback0
 ip address 10.0.0.1 255.224.0.0
 !
!
interface Loopback32
 ip address 10.32.0.1 255.224.0.0
 !
!
interface Loopback64
 ip address 10.64.0.1 255.224.0.0
 !
!
interface Loopback96
 ip address 10.96.0.1 255.224.0.0
 !
interface Serial1/0
 bandwidth 128
 ip address 192.168.1.1 255.255.255.252
 serial restart-delay 0
 clock rate 64000

router ospf 1
 router-id 1.1.1.1
 log-adjacency-changes
 network 10.0.0.0 0.31.255.255 area 0
 network 10.32.0.0 0.31.255.255 area 0
 network 10.64.0.0 0.31.255.255 area 0
 network 10.96.0.0 0.31.255.255 area 0
 network 192.168.1.0 0.0.0.3 area 0

__________________________________________________________________________________

R2:
interface FastEthernet0/0
 ip address 5.5.5.1 255.255.255.0
 ip ospf priority 10
 duplex half
 !
!
interface Serial1/0
 bandwidth 128
 ip address 192.168.1.2 255.255.255.224
 serial restart-delay 0
 !
router ospf 1
 router-id 2.2.2.1
 log-adjacency-changes
 network 5.5.5.0 0.0.0.255 area 1
 network 192.168.1.0 0.0.0.3 area 0

___________________________________________________________________________________

R3:
interface Loopback45
 ip address 45.45.45.1 255.255.255.0
 !
!
interface Loopback46
 ip address 45.45.46.1 255.255.255.0
 !
!
interface Loopback47
 ip address 45.45.47.1 255.255.255.0
 !
!
interface FastEthernet0/0
 ip address 5.5.5.2 255.255.255.0
 ip ospf priority 0
 duplex half
 !
!
!
router ospf 1
 router-id 3.3.3.1
 log-adjacency-changes
 network 5.5.5.0 0.0.0.255 area 1
 network 45.45.45.0 0.0.0.0 area 1
 network 45.45.46.0 0.0.0.0 area 1
 network 45.45.47.0 0.0.0.0 area 1

!
__________________________________________________________________________________

R4:
interface Loopback28
 ip address 28.28.28.1 255.255.255.0
 !
!
interface Loopback29
 ip address 28.28.29.1 255.255.255.0
 !
!
interface Loopback30
 ip address 28.28.30.1 255.255.255.0
 !
!
interface FastEthernet0/0
 ip address 5.5.5.3 255.255.255.0
 ip ospf priority 0
 duplex half
 !
!
interface Serial1/0
 bandwidth 64
 ip address 7.7.7.1 255.255.255.252
 serial restart-delay 0
 clock rate 64000
 !
router ospf 1
 router-id 4.4.4.1
 log-adjacency-changes
 network 5.5.5.0 0.0.0.255 area 1
 network 7.7.7.0 0.0.0.3 area 51

___________________________________________________________________________________
R5:

interface Loopback31
 ip address 31.31.31.1 255.255.255.0
 !
!
interface Loopback32
 ip address 31.31.32.1 255.255.255.0
 !

interface Serial1/0
 ip address 7.7.7.2 255.255.255.252
 serial restart-delay 0
 !

router ospf 1
 router-id 5.5.5.1
 log-adjacency-changes
 network 7.7.7.0 0.0.0.3 area 51
 network 31.31.31.0 0.0.0.255 area 51
 network 31.31.32.0 0.0.0.255 area 51

___________________________________________________________________________________



Negiborship Verification

R1#sh ip ospf neighbor

Neighbor ID     Pri   State           Dead Time   Address         Interface
2.2.2.1           0   FULL/  -        00:00:37    192.168.1.2     Serial1/0
___________________________________________________________________________________

Neighbor ID     Pri   State           Dead Time   Address         Interface
1.1.1.1           0   FULL/  -        00:00:39    192.168.1.1     Serial1/0
3.3.3.1           0   FULL/DROTHER    00:00:36    5.5.5.2         FastEthernet0/0
4.4.4.1           0   FULL/DROTHER    00:00:33    5.5.5.3         FastEthernet0/0
___________________________________________________________________________________

R3#sh ip ospf neighbor

Neighbor ID     Pri   State           Dead Time   Address         Interface
2.2.2.1          10   FULL/DR         00:00:31    5.5.5.1         FastEthernet0/0
4.4.4.1           0   2WAY/DROTHER    00:00:36    5.5.5.3         FastEthernet0/0
___________________________________________________________________________________
R4#sh ip ospf neighbor

Neighbor ID     Pri   State           Dead Time   Address         Interface
2.2.2.1          10   FULL/DR         00:00:31    5.5.5.1         FastEthernet0/0
3.3.3.1           0   2WAY/DROTHER    00:00:37    5.5.5.2         FastEthernet0/0
5.5.5.1           0   FULL/  -        00:00:37    7.7.7.2         Serial1/0
___________________________________________________________________________________

R5#sh ip ospf neighbor

Neighbor ID     Pri   State           Dead Time   Address         Interface
4.4.4.1           0   FULL/  -        00:00:38    7.7.7.1         Serial1/0
____________________________________________________________________________________

Note: Lets take a look at what routers see as they become neighbors: The following output happens between R4 and R5.

R4#
*May 28 10:56:50.735: OSPF: Serial1/0: Route adjust notification: UP/UP
*May 28 10:56:50.735: OSPF: Interface Serial1/0 going Up
*May 28 10:56:50.739: OSPF: Serial1/0: Interface state change to UP, new ospf state P2P
*May 28 10:56:51.235: OSPF: Build router LSA for area 51, router ID 4.4.4.1, seq 0x80000008, process 1
R4#
*May 28 10:57:03.419: OSPF: Rcv DBD from 5.5.5.1 on Serial1/0 seq 0x1653 opt 0x52 flag 0x7 len 32  mtu 1500 state INIT
*May 28 10:57:03.419: OSPF: 2 Way Communication to 5.5.5.1 on Serial1/0, state 2WAY
*May 28 10:57:03.423: OSPF: Serial1/0 Nbr 5.5.5.1: Prepare dbase exchange
*May 28 10:57:03.423: OSPF: Send DBD to 5.5.5.1 on Serial1/0 seq 0x151D opt 0x52 flag 0x7 len 32
*May 28 10:57:03.423: OSPF: NBR Negotiation Done. We are the SLAVE
*May 28 10:57:03.423: OSPF: Serial1/0 Nbr 5.5.5.1: Summary list built, size 2
*May 28 10:57:03.427: OSPF: Send DBD to 5.5.5.1 on Serial1/0 seq 0x1653 opt 0x52 flag 0x2 len 72
*May 28 10:57:03.499: OSPF: Rcv DBD from 5.5.5.1 on Serial1/0 seq 0x1654 opt 0x52 flag 0x1 len 72  mtu 1500 state EXCHANGE
*May 28 10:57:03.503: OSPF: Exchange Done with 5.5.5.1 on Serial1/0
*May 28 10:57:03.503: OSPF: Send LS REQ to 5.5.5.1 length 12 LSA count 1
*May 28 10:57:03.503: OSPF: Send DBD to 5.5.5.1 on Serial1/0 seq 0x1654 opt 0x52 flag 0x0 len 32
*May 28 1
R4#0:57:03.595: OSPF: Rcv LS UPD from 5.5.5.1 on Serial1/0 length 76 LSA count 1
*May 28 10:57:03.595: OSPF: Synchronized with 5.5.5.1 on Serial1/0, state FULL
*May 28 10:57:03.599: %OSPF-5-ADJCHG: Process 1, Nbr 5.5.5.1 on Serial1/0 from LOADING to FULL, Loading Done
*May 28 10:57:03.651: OSPF: Rcv LS REQ from 5.5.5.1 on Serial1/0 length 36 LSA count 1
*May 28 10:57:04.099: OSPF: Build router LSA for area 51, router ID 4.4.4.1, seq 0x80000009, process 1
R4#U ALL
All possible debugging has been turned off
____________________________________________________________________________________

R5#

*May 28 10:58:58.183: OSPF: Serial1/0: Route adjust notification: UP/UP
*May 28 10:58:58.183: OSPF: Interface Serial1/0 going Up
*May 28 10:58:58.187: OSPF: Serial1/0: Interface state change to UP, new ospf state P2P
*May 28 10:58:58.215: OSPF: 2 Way Communication to 4.4.4.1 on Serial1/0, state 2WAY
*May 28 10:58:58.215: OSPF: Serial1/0 Nbr 4.4.4.1: Prepare dbase exchange
*May 28 10:58:58.215: OSPF: Send DBD to 4.4.4.1 on Serial1/0 seq 0x1653 opt 0x52 flag 0x7 len 32
*May 28 10:58:58.491: OSPF: Rcv DBD from 4.4.4.1 on Serial1/0 seq 0x151D opt 0x52 flag 0x7 len 32  mtu 1500 state EXSTART
*May 28 10:58:58.491: OSPF: First DBD and we are not SLAVE
*May 28 10:58:58.495: OSPF: Rcv DBD from 4.4.4.1 on Serial1/0 seq 0x1653 opt 0x52 flag 0x2 len 72  mtu 1500 state EXSTART
*May 28 10:58:58.495: OSPF: NBR Negotiation Done. We are the MASTER
*May 28 10:58:58.495: OSPF: Serial1/0 Nbr
R5#4.4.4.1: Summary list built, size 2
*May 28 10:58:58.495: OSPF: Send DBD to 4.4.4.1 on Serial1/0 seq 0x1654 opt 0x52 flag 0x1 len 72
*May 28 10:58:58.603: OSPF: Rcv LS REQ from 4.4.4.1 on Serial1/0 length 36 LSA count 1
*May 28 10:58:58.607: OSPF: Send UPD to 7.7.7.1 on Serial1/0 length 52 LSA count 1
*May 28 10:58:58.615: OSPF: Rcv DBD from 4.4.4.1 on Serial1/0 seq 0x1654 opt 0x52 flag 0x0 len 32  mtu 1500 state EXCHANGE
*May 28 10:58:58.615: OSPF: Exchange Done with 4.4.4.1 on Serial1/0
*May 28 10:58:58.619: OSPF: Send LS REQ to 4.4.4.1 length 12 LSA count 1
*May 28 10:58:58.683: OSPF: Build router LSA for area 51, router ID 5.5.5.1, seq 0x80000009, process 1
*May 28 10:58:58.747: OSPF: Rcv LS UPD from 4.4.4.1 on Serial1/0 length 64 LSA count 1
*May 28 10:58:58.751: OSPF: Synchronized with 4.4.4.1 on Serial1/0, state FULL
*May 28 10:58:58.751: %OSPF-5-ADJCHG: Process 1, Nbr 4.4.4.1 on Serial1/0 from LOADING to FULL, Loading Done
*May 28 10:58:58.751: OSPF: Serial1/0 Nbr 4
R5#.4.4.1: Clean-up dbase exchange
R5#
*May 28 10:59:03.683: OSPF: Build router LSA for area 51, router ID 5.5.5.1, seq 0x8000000A, process 1
R5#SH IP OSpf NEighbor

Neighbor ID     Pri   State           Dead Time   Address         Interface
4.4.4.1           0   FULL/  -        00:00:38    7.7.7.1         Serial1/0
R5#U ALL
All possible debugging has been turned off
____________________________________________________________________________________

Let's take a look at the Link State Database of R2 and R5:

R2#SH IP OSpf Database

            OSPF Router with ID (2.2.2.1) (Process ID 1)

                Router Link States (Area 0)

Link ID         ADV Router      Age         Seq#       Checksum Link count
1.1.1.1         1.1.1.1         994         0x80000009 0x005099 6
2.2.2.1         2.2.2.1         641         0x80000003 0x0090A7 2

                Summary Net Link States (Area 0)

Link ID         ADV Router      Age         Seq#       Checksum
5.5.5.0         2.2.2.1         641         0x80000002 0x00A67E

                Router Link States (Area 1)

Link ID         ADV Router      Age         Seq#       Checksum Link count
2.2.2.1         2.2.2.1         396         0x80000003 0x00A75A 1
3.3.3.1         3.3.3.1         371         0x80000003 0x007685 1
4.4.4.1         4.4.4.1         91          0x80000003 0x0048AC 1

                Net Link States (Area 1)


Link ID         ADV Router      Age         Seq#       Checksum
5.5.5.1         2.2.2.1         138         0x80000003 0x0036C8

                Summary Net Link States (Area 1)

Link ID         ADV Router      Age         Seq#       Checksum
10.0.0.1        2.2.2.1         644         0x80000002 0x006CAC
10.32.0.1       2.2.2.1         645         0x80000002 0x00EA0E
10.64.0.1       2.2.2.1         645         0x80000002 0x00696F
10.96.0.1       2.2.2.1         646         0x80000002 0x00E7D0
192.168.1.0     2.2.2.1         646         0x80000002 0x007762
192.168.1.3     2.2.2.1         646         0x80000002 0x009F0B
__________________________________________________________________________________


R5#sh ip ospf database

            OSPF Router with ID (5.5.5.1) (Process ID 1)

                Router Link States (Area 51)

Link ID         ADV Router      Age         Seq#       Checksum Link count
4.4.4.1         4.4.4.1         581         0x80000009 0x000882 2
5.5.5.1
____________________________________________________________________________________

Now for the Virtual Link configuration: Before I configure the virtual link let's take a look at the routing table of R1 and R4. Because the network is discontiguous R1 and R4 will not be able to communicate with each other.

R1#SH IP ROUTe ospf
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route, + - replicated route

Gateway of last resort is not set

      5.0.0.0/24 is subnetted, 1 subnets
O IA     5.5.5.0 [110/782] via 192.168.1.2, 00:51:17, Serial1/0
      192.168.1.0/24 is variably subnetted, 3 subnets, 3 masks
O        192.168.1.0/27 [110/1562] via 192.168.1.2, 00:57:56, Serial1/0
R1#ping 31.31.31.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 31.31.31.1, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
___________________________________________________________________________________R5#sh R5#sh ip route ospf
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route, + - replicated route

Gateway of last resort is not set
R5#ping 10.0.0.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.0.0.1, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
R5#

Note: As we can see there is no end to end network connectivity. The routing tables of R1 and R5 give proof to this.

Note: Virtual Links are a last resort to a disjointed network, this is only a temporary fix
__________________________________________________________________________________

Virtual Link config

If you take a look at the network diagram you will notice that R2 and R4 are ABR's. Virtual links cannot be configured in area 0. One of the routers in the Virtual Link must be a part of area 0. In the diagram R2 is in area 0. The Virtual Link will be configured on R2 and R4.

R2(config)#router ospf 1
R2(config-router)#area 1 virtual-link 4.4.4.1

*May 28 11:23:10.019: %OSPF-5-ADJCHG: Process 1, Nbr 4.4.4.1 on OSPF_VL1 from LOADING to FULL, Loading Done

__________________________________________________________________________________




R4(config-router)#area 1 virtual-link 2.2.2.1
R4(config-router)#
*May 28 11:23:10.019: %OSPF-5-ADJCHG: Process 1, Nbr 2.2.2.1 on OSPF_VL1 from LOADING to FULL, Loading Done

___________________________________________________________________________________

Note: Let us quickly verify the status of the virtual link on R2 and R4, then I will revisit the routing table of R1 and R5.

R2#SH IP OSpf VIrtual-links
Virtual Link OSPF_VL0 to router 4.4.4.1 is up

  Run as demand circuit
  DoNotAge LSA allowed.
  Transit area 1, via interface FastEthernet0/0
 Topology-MTID    Cost    Disabled     Shutdown      Topology Name
        0           1         no          no            Base
  Transmit Delay is 1 sec, State POINT_TO_POINT,
  Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
    Hello due in 00:00:02
    Adjacency State FULL (Hello suppressed)
    Index 2/4, retransmission queue length 0, number of retransmission 0
    First 0x0(0)/0x0(0) Next 0x0(0)/0x0(0)
    Last retransmission scan length is 0, maximum is 0
    Last retransmission scan time is 0 msec, maximum is 0 msec
_________________________________________________________________________________

R4#SH IP OSpf VIrtual-links
Virtual Link OSPF_VL1 to router 2.2.2.1 is up
  Run as demand circuit
  DoNotAge LSA allowed.
  Transit area 1, via interface FastEthernet0/0
 Topology-MTID    Cost    Disabled     Shutdown      Topology Name
        0           1         no          no            Base
  Transmit Delay is 1 sec, State POINT_TO_POINT,
  Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
    Hello due in 00:00:02
    Adjacency State FULL (Hello suppressed)
    Index 1/3, retransmission queue length 0, number of retransmission 0
    First 0x0(0)/0x0(0) Next 0x0(0)/0x0(0)
    Last retransmission scan length is 0, maximum is 0
    Last retransmission scan time is 0 msec, maximum is 0 msec

R1 and R2 routing table verification:

R1#sh ip route  ospf
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route, + - replicated route

Gateway of last resort is not set

      5.0.0.0/24 is subnetted, 1 subnets
O IA     5.5.5.0 [110/782] via 192.168.1.2, 01:06:15, Serial1/0
      7.0.0.0/30 is subnetted, 1 subnets
O IA     7.7.7.0 [110/2344] via 192.168.1.2, 00:06:32, Serial1/0
      31.0.0.0/32 is subnetted, 2 subnets
O IA     31.31.31.1 [110/2345] via 192.168.1.2, 00:06:32, Serial1/0
O IA     31.31.32.1 [110/2345] via 192.168.1.2, 00:06:32, Serial1/0
      192.168.1.0/24 is variably subnetted, 3 subnets, 3 masks
O        192.168.1.0/27 [110/1562] via 192.168.1.2, 01:12:54, Serial1/0
R1#ping 31.31.31.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 31.31.31.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 108/135/192 ms
___________________________________________________________________________________

R5#sh ip route ospf
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route, + - replicated route

Gateway of last resort is not set

      5.0.0.0/24 is subnetted, 1 subnets
O IA     5.5.5.0 [110/65] via 7.7.7.1, 00:08:19, Serial1/0
      10.0.0.0/32 is subnetted, 4 subnets
O IA     10.0.0.1 [110/847] via 7.7.7.1, 00:08:15, Serial1/0
O IA     10.32.0.1 [110/847] via 7.7.7.1, 00:08:15, Serial1/0
O IA     10.64.0.1 [110/847] via 7.7.7.1, 00:08:15, Serial1/0
O IA     10.96.0.1 [110/847] via 7.7.7.1, 00:08:15, Serial1/0
      192.168.1.0/24 is variably subnetted, 2 subnets, 2 masks
O IA     192.168.1.0/27 [110/846] via 7.7.7.1, 00:08:15, Serial1/0
O IA     192.168.1.0/30 [110/1627] via 7.7.7.1, 00:08:15, Serial1/0

R5#ping 10.0.0.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.0.0.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 112/151/188 ms
R5#ping 10.32.0.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.32.0.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 112/148/188 ms
R5#ping 10.64.0.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.64.0.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 108/143/176 ms
R5#ping 10.96.0.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.96.0.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 120/142/188 ms
We now have full network reachability

Thursday, May 20, 2010

RIPng Lab

RIPng Lab1:



Configuration

R1:

ipv6 unicast-routing
ipv6 cef


interface Loopback1
 no ip address
 ipv6 address ABCD:1111::1/32
 ipv6 rip lab1 enable
 !
!
interface Loopback2
 no ip address
 ipv6 address ABCD:1112::1/32
 ipv6 rip lab1 enable
 !
!
interface FastEthernet0/0
no ip address
duplex half
ipv6 address A:A:A::1/48
ipv6 rip lab1 enable
 !

ipv6 router rip lab1

__________________________________________________________________________________

R2:

ipv6 unicast-routing
ipv6 cef

interface Loopback1
 no ip address
 ipv6 address 1111::1/16
 ipv6 rip lab1 enable
 !
!
interface Loopback2
 no ip address
 ipv6 address 2222::1/16
 ipv6 rip lab1 enable
 !
!
interface Loopback3
 no ip address
 ipv6 address 3333::1/16
 ipv6 rip lab1 enable
 !
!
interface FastEthernet0/0
 no ip address
 duplex half
 ipv6 address A:A:A::2/48
 ipv6 rip lab1 enable
 !

ipv6 router rip lab1
!
!
________________________________________________________________________________


Verification R1
R1:

R1#SH IPV6 INTerface BRief

FastEthernet0/0            [up/up]
    FE80::C800:17FF:FE84:0
    A:A:A::1
Loopback1                  [up/up]
    FE80::C800:17FF:FE84:0
    ABCD:1111::1
Loopback2                  [up/up]
    FE80::C800:17FF:FE84:0
    ABCD:1112::1
R1#SH IPV6 PROtocols

IPv6 Routing Protocol is "connected"
IPv6 Routing Protocol is "ND"
IPv6 Routing Protocol is "rip lab1"
  Interfaces:
    Loopback2
    Loopback1
    FastEthernet0/0
  Redistribution:
    None

R1#SH IPV6 ROute RIp

IPv6 Routing Table - default - 10 entries
Codes: C - Connected, L - Local, S - Static, U - Per-user Static route
       B - BGP, M - MIPv6, R - RIP, I1 - ISIS L1
       I2 - ISIS L2, IA - ISIS interarea, IS - ISIS summary, D - EIGRP
       EX - EIGRP external, ND - Neighbor Discovery
       O - OSPF Intra, OI - OSPF Inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2
       ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2
R   1111::/16 [120/2]
     via FE80::C801:FFF:FE20:0, FastEthernet0/0
R   2222::/16 [120/2]
     via FE80::C801:FFF:FE20:0, FastEthernet0/0
R   3333::/16 [120/2]
     via FE80::C801:FFF:FE20:0, FastEthernet0/0

R1#SH IPV6 RIp Database

RIP process "lab1", local RIB
 A:A:A::/48, metric 2
     FastEthernet0/0/FE80::C801:FFF:FE20:0, expires in 161 secs
 1111::/16, metric 2, installed
     FastEthernet0/0/FE80::C801:FFF:FE20:0, expires in 161 secs
 2222::/16, metric 2, installed
     FastEthernet0/0/FE80::C801:FFF:FE20:0, expires in 161 secs
 3333::/16, metric 2, installed
     FastEthernet0/0/FE80::C801:FFF:FE20:0, expires in 161 secs

Test end to end connectivity

R1#PING 3333::1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 3333::1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 52/108/216 ms
R1#

__________________________________________________________________________________



Verification R2
R2:
R2#SH IPV6 INTerface BRief

FastEthernet0/0            [up/up]
    FE80::C801:FFF:FE20:0
    A:A:A::2
Loopback1                  [up/up]
    FE80::C801:FFF:FE20:0
    1111::1
Loopback2                  [up/up]
    FE80::C801:FFF:FE20:0
    2222::1
Loopback3                  [up/up]
    FE80::C801:FFF:FE20:0
    3333::1

R2#SH IPV6 PROtocols

IPv6 Routing Protocol is "connected"
IPv6 Routing Protocol is "ND"
IPv6 Routing Protocol is "rip lab1"
  Interfaces:
    Loopback3
    Loopback2
    Loopback1
    FastEthernet0/0
  Redistribution:
    None


R2#SH IPV6 ROute RIp

IPv6 Routing Table - default - 11 entries
Codes: C - Connected, L - Local, S - Static, U - Per-user Static route
       B - BGP, M - MIPv6, R - RIP, I1 - ISIS L1
       I2 - ISIS L2, IA - ISIS interarea, IS - ISIS summary, D - EIGRP
       EX - EIGRP external, ND - Neighbor Discovery
       O - OSPF Intra, OI - OSPF Inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2
       ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2
R   ABCD:1111::/32 [120/2]
     via FE80::C800:17FF:FE84:0, FastEthernet0/0
R   ABCD:1112::/32 [120/2]
     via FE80::C800:17FF:FE84:0, FastEthernet0/0


R2#SH IPV6 RIp Database

RIP process "lab1", local RIB
 A:A:A::/48, metric 2
     FastEthernet0/0/FE80::C800:17FF:FE84:0, expires in 170 secs
 ABCD:1111::/32, metric 2, installed
     FastEthernet0/0/FE80::C800:17FF:FE84:0, expires in 170 secs
 ABCD:1112::/32, metric 2, installed
     FastEthernet0/0/FE80::C800:17FF:FE84:0, expires in 170 secs


Test end to end connectivity

R2#PING abcd:1112::1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to ABCD:1112::1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 40/88/120 ms

OSPF LAB

OSPF: Open Shortest Path First (OSPF) is a dynamic routing protocol for use in Internet Protocol (IP) networks. Specifically, it is a link-state routing protocol and falls into the group of interior gateway protocols, operating within a single autonomous system (AS). It is defined as OSPF Version 2 in RFC 2328 (1998). Source:http://en.wikipedia.org/wiki/Open_Shortest_Path_First




  This lab starts with a basic OSPF configurations and verification.








R1:

interface Loopback45
 ip address 45.45.45.1 255.255.255.0
 !
!
interface Loopback46
 ip address 45.45.46.1 255.255.255.0
 !
!
interface Loopback47
 ip address 45.45.47.1 255.255.255.0
 !
!
interface FastEthernet0/0
 ip address 20.0.0.1 255.224.0.0
 duplex half
 !
!
!
router ospf 1
 router-id 1.1.1.1
 log-adjacency-changes
 network 20.0.0.0 0.31.255.255 area 0
 network 45.45.45.0 0.0.0.255 area 0
 network 45.45.46.0 0.0.0.255 area 0
 network 45.45.47.0 0.0.0.255 area 0

!
______________________________________________________________________________________________


R2:
interface FastEthernet0/0
 ip address 20.0.0.2 255.224.0.0
 duplex half
 !
!
interface Serial1/0
 ip address 1.1.1.1 255.255.255.252
 serial restart-delay 0
 clock rate 64000
 !

router ospf 1
 router-id 2.2.2.1
 log-adjacency-changes
 network 1.1.1.0 0.0.0.3 area 0
 network 20.0.0.0 0.31.255.255 area 0


___________________________________________________________________________________

R3:

interface Loopback20
 ip address 20.20.20.1 255.255.255.0
 !
!
interface Loopback21
 ip address 20.20.21.1 255.255.255.0
 !
!
interface Loopback22
 ip address 20.20.22.1 255.255.255.0
 !
!
interface FastEthernet0/0
 ip address 15.15.15.1 255.255.255.0
 duplex half
 !
!
interface Serial1/0
 ip address 1.1.1.2 255.255.255.252
 serial restart-delay 0
 !
!
interface Serial1/1
 no ip address
 shutdown
 serial restart-delay 0
 !
!
interface Serial1/2
 no ip address
 shutdown
 serial restart-delay 0
 !
!
interface Serial1/3
 no ip address
 shutdown
 serial restart-delay 0
 !
!
!
router ospf 2
 router-id 3.3.3.1
 log-adjacency-changes
 network 1.1.1.0 0.0.0.3 area 0
 network 15.15.15.0 0.0.0.255 area 1
 network 20.20.20.0 0.0.0.255 area 1
 network 20.20.21.0 0.0.0.255 area 1
 network 20.20.22.0 0.0.0.255 area 1
___________________________________________________________________________________

R4:

interface Loopback1
 ip address 192.168.2.1 255.255.255.0
 !
!
interface Loopback2
 ip address 192.168.1.1 255.255.255.0
 !
!
interface Loopback3
 ip address 192.168.3.1 255.255.255.0
 !
!
interface FastEthernet0/0
 ip address 15.15.15.2 255.255.255.0
 duplex half
 !
!
!
router ospf 2
 router-id 4.4.4.1
 log-adjacency-changes
 redistribute rip metric 25 metric-type 1 subnets
 network 15.15.15.0 0.0.0.255 area 1
!
router rip
 version 2
 network 192.168.1.0
 network 192.168.2.0
 network 192.168.3.0
 no auto-summary
!
____________________________________________________________________________________

The next step is to verify neighborship between the routers

R1:
R1#SH IP OSpf NEighbor

Neighbor ID     Pri   State           Dead Time   Address         Interface
2.2.2.1           1   FULL/BDR        00:00:33    20.0.0.2        FastEthernet0/0


____________________________________________________________________________________

R2:

R2#SH IP OSpf NEighbor

Neighbor ID     Pri   State           Dead Time   Address         Interface
3.3.3.1           0   FULL/  -        00:00:34    1.1.1.2         Serial1/0
1.1.1.1           1   FULL/DR         00:00:37    20.0.0.1        FastEthernet0/0
___________________________________________________________________________________


R3:

R3#SH IP OSpf NEighbor

Neighbor ID     Pri   State           Dead Time   Address         Interface
2.2.2.1           0   FULL/  -        00:00:37    1.1.1.1         Serial1/0
4.4.4.1           1   FULL/BDR        00:00:30    15.15.15.2      FastEthernet0/0
___________________________________________________________________________________

R4:

R4#SH IP OSpf NEighbor

Neighbor ID     Pri   State           Dead Time   Address         Interface
3.3.3.1           1   FULL/DR         00:00:34    15.15.15.1      FastEthernet0/0
___________________________________________________________________________________

Note: Pay attention to the state of the neighbor:


  1. R1 identifies R2 as the BDR for the broadcast network: 

Neighbor ID     Pri   State           Dead Time   Address         Interface
2.2.2.1           1   FULL/BDR        00:00:33    20.0.0.2        FastEthernet0/0

  1. R2 identifies R1 as the DR for the broadcast network:
  2. R2 identifies R3 as FULL/-, this happens on Point-to-Point networks where only one router is connected at the other end of the link.


Neighbor ID     Pri   State           Dead Time   Address         Interface
3.3.3.1           0   FULL/  -        00:00:34    1.1.1.2         Serial1/0
1.1.1.1           1   FULL/DR         00:00:37    20.0.0.1        FastEthernet0/0

___________________________________________________________________________________

Let's take a brief look at LSA's and LSA types:

LSA type 1 (Router): Type 1 LSA's are sent by all routers in an area describing their directly connected networks. These LSA's do not leave the area.

LSA type 2 (Network): Type 2 LSA's are sent by the DR in a non-broadcast multiaccess network describing all connected routers on the segment. These LSA's do not leave the area

LSA type 3 (Summary): Type 3 LSA's are sent by the ABR to describe a route to neighbors outside of the area

LSA type 4 (Summary): Type 4 LSA's are sent by the ABR describing the IP address of the ASBR.

LSA type 5 (External): Type 5 LSA's are sent by the ASBR describing routes that are being redistributed into the area.

LSA type 7 Not so Stubby area(NSSA): Are sourced from a router in a NSSA
___________________________________________________________________________________


 Let's take a look at the OSPF database

R1:

R1#sh ip ospf database

            OSPF Router with ID (1.1.1.1) (Process ID 1)

                Router Link States (Area 0)

Link ID         ADV Router      Age         Seq#       Checksum Link count
1.1.1.1         1.1.1.1         1534        0x80000006 0x0077B4 4
2.2.2.1         2.2.2.1         1488        0x80000006 0x0058EF 3
3.3.3.1         3.3.3.1         1284        0x80000003 0x00E898 2

                Net Link States (Area 0)

Link ID         ADV Router      Age         Seq#       Checksum
20.0.0.1        1.1.1.1         1534        0x80000002 0x006CC7

                Summary Net Link States (Area 0)

Link ID         ADV Router      Age         Seq#       Checksum
15.15.15.0      3.3.3.1         1284        0x80000002 0x0025DE
20.20.20.1      3.3.3.1         1284        0x80000002 0x00668D
20.20.21.1      3.3.3.1         1284        0x80000002 0x005B97
20.20.22.1      3.3.3.1         1284        0x80000002 0x0050A1

                Summary ASB Link States (Area 0)

Link ID         ADV Router      Age         Seq#       Checksum
4.4.4.1         3.3.3.1         775         0x80000002 0x009A88

                Type-5 AS External Link States

Link ID         ADV Router      Age         Seq#       Checksum Tag
192.168.1.0     4.4.4.1         715         0x80000002 0x007132 0
192.168.2.0     4.4.4.1         975         0x80000002 0x00663C 0
192.168.3.0     4.4.4.1         975         0x80000002 0x005B46 0


___________________________________________________________________________________

R2:


R2#SH IP OSpf Database

            OSPF Router with ID (2.2.2.1) (Process ID 1)

                Router Link States (Area 0)

Link ID         ADV Router      Age         Seq#       Checksum Link count
1.1.1.1         1.1.1.1         133         0x80000007 0x0075B5 4
2.2.2.1         2.2.2.1         116         0x80000007 0x0056F0 3
3.3.3.1         3.3.3.1         1921        0x80000003 0x00E898 2

                Net Link States (Area 0)

Link ID         ADV Router      Age         Seq#       Checksum
20.0.0.1        1.1.1.1         133         0x80000003 0x006AC8

                Summary Net Link States (Area 0)

Link ID         ADV Router      Age         Seq#       Checksum
15.15.15.0      3.3.3.1         1921        0x80000002 0x0025DE
20.20.20.1      3.3.3.1         1921        0x80000002 0x00668D
20.20.21.1      3.3.3.1         1921        0x80000002 0x005B97
20.20.22.1      3.3.3.1         1921        0x80000002 0x0050A1

                Summary ASB Link States (Area 0)

Link ID         ADV Router      Age         Seq#       Checksum
4.4.4.1         3.3.3.1         1412        0x80000002 0x009A88

                Type-5 AS External Link States

Link ID         ADV Router      Age         Seq#       Checksum Tag
192.168.1.0     4.4.4.1         1352        0x80000002 0x007132 0
192.168.2.0     4.4.4.1         1611        0x80000002 0x00663C 0
192.168.3.0     4.4.4.1         1611        0x80000002 0x005B46 0


___________________________________________________________________________________

R3:

R3#SH IP OSpf DAtabase

            OSPF Router with ID (3.3.3.1) (Process ID 2)

                Router Link States (Area 0)

Link ID         ADV Router      Age         Seq#       Checksum Link count
1.1.1.1         1.1.1.1         271         0x80000007 0x0075B5 4
2.2.2.1         2.2.2.1         254         0x80000007 0x0056F0 3
3.3.3.1         3.3.3.1         31          0x80000004 0x00E699 2

                Net Link States (Area 0)

Link ID         ADV Router      Age         Seq#       Checksum
20.0.0.1        1.1.1.1         271         0x80000003 0x006AC8

                Summary Net Link States (Area 0)

Link ID         ADV Router      Age         Seq#       Checksum
15.15.15.0      3.3.3.1         31          0x80000003 0x0023DF
20.20.20.1      3.3.3.1         31          0x80000003 0x00648E
20.20.21.1      3.3.3.1         31          0x80000003 0x005998
20.20.22.1      3.3.3.1         31          0x80000003 0x004EA2

                Summary ASB Link States (Area 0)

Link ID         ADV Router      Age         Seq#       Checksum
4.4.4.1         3.3.3.1         1548        0x80000002 0x009A88

                Router Link States (Area 1)

Link ID         ADV Router      Age         Seq#       Checksum Link count
3.3.3.1         3.3.3.1         1797        0x80000006 0x008945 4
4.4.4.1         4.4.4.1         1746        0x80000004 0x00981E 1

                Net Link States (Area 1)

Link ID         ADV Router      Age         Seq#       Checksum
15.15.15.1      3.3.3.1         1797        0x80000002 0x0018D1

                Summary Net Link States (Area 1)

Link ID         ADV Router      Age         Seq#       Checksum
1.1.1.0         3.3.3.1         33          0x80000003 0x00836D
20.0.0.0        3.3.3.1         33          0x80000003 0x0042B8
45.45.45.1      3.3.3.1         33          0x80000003 0x0069FC
45.45.46.1      3.3.3.1         33          0x80000003 0x005E07
45.45.47.1      3.3.3.1         33          0x80000003 0x005311

                Type-5 AS External Link States

Link ID         ADV Router      Age         Seq#       Checksum Tag
192.168.1.0     4.4.4.1         1488        0x80000002 0x007132 0
192.168.2.0     4.4.4.1         1748        0x80000002 0x00663C 0
192.168.3.0     4.4.4.1         1748        0x80000002 0x005B46 0
___________________________________________________________________________________

R4:

R4#SH IP ospf database

            OSPF Router with ID (4.4.4.1) (Process ID 2)

                Router Link States (Area 1)

Link ID         ADV Router      Age         Seq#       Checksum Link count
3.3.3.1         3.3.3.1         1952        0x80000006 0x008945 4
4.4.4.1         4.4.4.1         1900        0x80000004 0x00981E 1

                Net Link States (Area 1)

Link ID         ADV Router      Age         Seq#       Checksum
15.15.15.1      3.3.3.1         1952        0x80000002 0x0018D1

                Summary Net Link States (Area 1)

Link ID         ADV Router      Age         Seq#       Checksum
1.1.1.0         3.3.3.1         188         0x80000003 0x00836D
20.0.0.0        3.3.3.1         188         0x80000003 0x0042B8
45.45.45.1      3.3.3.1         188         0x80000003 0x0069FC
45.45.46.1      3.3.3.1         188         0x80000003 0x005E07
45.45.47.1      3.3.3.1         188         0x80000003 0x005311

                Type-5 AS External Link States

Link ID         ADV Router      Age         Seq#       Checksum Tag
192.168.1.0     4.4.4.1         1641        0x80000002 0x007132 0
192.168.2.0     4.4.4.1         1902        0x80000002 0x00663C 0
192.168.3.0     4.4.4.1         1902        0x80000002 0x005B46 0
___________________________________________________________________________________

Let's verify the contents of the routing table across the network

R1:
R1#SH IP ROUTE
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route, + - replicated route

Gateway of last resort is not set

      1.0.0.0/30 is subnetted, 1 subnets
O        1.1.1.0 [110/65] via 20.0.0.2, 01:27:32, FastEthernet0/0
      15.0.0.0/24 is subnetted, 1 subnets
O IA     15.15.15.0 [110/66] via 20.0.0.2, 01:23:14, FastEthernet0/0
      20.0.0.0/8 is variably subnetted, 5 subnets, 2 masks
O IA     20.20.20.1/32 [110/66] via 20.0.0.2, 01:25:49, FastEthernet0/0
O IA     20.20.21.1/32 [110/66] via 20.0.0.2, 01:25:49, FastEthernet0/0
O IA     20.20.22.1/32 [110/66] via 20.0.0.2, 01:25:39, FastEthernet0/0
O E1  192.168.1.0/24 [110/91] via 20.0.0.2, 01:17:27, FastEthernet0/0
O E1  192.168.2.0/24 [110/91] via 20.0.0.2, 01:18:12, FastEthernet0/0
O E1  192.168.3.0/24 [110/91] via 20.0.0.2, 01:18:12, FastEthernet0/0
R1#

__________________________________________________________________________

R2:

Gateway of last resort is not set

      1.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C        1.1.1.0/30 is directly connected, Serial1/0
L        1.1.1.1/32 is directly connected, Serial1/0
      15.0.0.0/24 is subnetted, 1 subnets
O IA     15.15.15.0 [110/65] via 1.1.1.2, 01:14:33, Serial1/0
      20.0.0.0/8 is variably subnetted, 5 subnets, 2 masks
C        20.0.0.0/11 is directly connected, FastEthernet0/0
L        20.0.0.2/32 is directly connected, FastEthernet0/0
O IA     20.20.20.1/32 [110/65] via 1.1.1.2, 01:17:08, Serial1/0
O IA     20.20.21.1/32 [110/65] via 1.1.1.2, 01:17:08, Serial1/0
O IA     20.20.22.1/32 [110/65] via 1.1.1.2, 01:16:58, Serial1/0
      45.0.0.0/32 is subnetted, 3 subnets
O        45.45.45.1 [110/2] via 20.0.0.1, 01:19:01, FastEthernet0/0
O        45.45.46.1 [110/2] via 20.0.0.1, 01:19:03, FastEthernet0/0
O        45.45.47.1 [110/2] via 20.0.0.1, 01:19:03, FastEthernet0/0
O E1  192.168.1.0/24 [110/90] via 1.1.1.2, 01:08:48, Serial1/0
O E1  192.168.2.0/24 [110/90] via 1.1.1.2, 01:09:34, Serial1/0
O E1  192.168.3.0/24 [110/90] via 1.1.1.2, 01:09:34, Serial1/0
R2#
__________________________________________________________________________________


R3:

Gateway of last resort is not set

      1.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C        1.1.1.0/30 is directly connected, Serial1/0
L        1.1.1.2/32 is directly connected, Serial1/0
      15.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C        15.15.15.0/24 is directly connected, FastEthernet0/0
L        15.15.15.1/32 is directly connected, FastEthernet0/0
      20.0.0.0/8 is variably subnetted, 7 subnets, 3 masks
O        20.0.0.0/11 [110/65] via 1.1.1.1, 01:18:08, Serial1/0
C        20.20.20.0/24 is directly connected, Loopback20
L        20.20.20.1/32 is directly connected, Loopback20
C        20.20.21.0/24 is directly connected, Loopback21
L        20.20.21.1/32 is directly connected, Loopback21
C        20.20.22.0/24 is directly connected, Loopback22
L        20.20.22.1/32 is directly connected, Loopback22
      45.0.0.0/32 is subnetted, 3 subnets
O        45.45.45.1 [110/66] via 1.1.1.1, 01:18:10, Serial1/0
O        45.45.46.1 [110/66] via 1.1.1.1, 01:18:10, Serial1/0
O        45.45.47.1 [110/66] via 1.1.1.1, 01:18:10, Serial1/0
O E1  192.168.1.0/24 [110/26] via 15.15.15.2, 01:09:37, FastEthernet0/0
O E1  192.168.2.0/24 [110/26] via 15.15.15.2, 01:10:27, FastEthernet0/0
O E1  192.168.3.0/24 [110/26] via 15.15.15.2, 01:10:28, FastEthernet0/0
R3#
___________________________________________________________________________________

R4:

Gateway of last resort is not set

      1.0.0.0/30 is subnetted, 1 subnets
O IA     1.1.1.0 [110/65] via 15.15.15.1, 01:13:50, FastEthernet0/0
      15.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C        15.15.15.0/24 is directly connected, FastEthernet0/0
L        15.15.15.2/32 is directly connected, FastEthernet0/0
      20.0.0.0/8 is variably subnetted, 4 subnets, 2 masks
O IA     20.0.0.0/11 [110/66] via 15.15.15.1, 01:13:50, FastEthernet0/0
O        20.20.20.1/32 [110/2] via 15.15.15.1, 01:13:50, FastEthernet0/0
O        20.20.21.1/32 [110/2] via 15.15.15.1, 01:13:50, FastEthernet0/0
O        20.20.22.1/32 [110/2] via 15.15.15.1, 01:13:50, FastEthernet0/0
      45.0.0.0/32 is subnetted, 3 subnets
O IA     45.45.45.1 [110/67] via 15.15.15.1, 01:13:50, FastEthernet0/0
O IA     45.45.46.1 [110/67] via 15.15.15.1, 01:13:50, FastEthernet0/0
O IA     45.45.47.1 [110/67] via 15.15.15.1, 01:13:51, FastEthernet0/0
      192.168.1.0/24 is variably subnetted, 2 subnets, 2 masks
C        192.168.1.0/24 is directly connected, Loopback2
L        192.168.1.1/32 is directly connected, Loopback2
      192.168.2.0/24 is variably subnetted, 2 subnets, 2 masks
C        192.168.2.0/24 is directly connected, Loopback1
L        192.168.2.1/32 is directly connected, Loopback1
      192.168.3.0/24 is variably subnetted, 2 subnets, 2 masks
C        192.168.3.0/24 is directly connected, Loopback3
L        192.168.3.1/32 is directly connected, Loopback3
R4#
 _________________________________________________________________________________

Note: I will verify end to end connectivity, if all is well i should be able to ping from R1 to R4 and vice versa.

R1:
R1#PING 192.168.3.1 r 20
Type escape sequence to abort.
Sending 20, 100-byte ICMP Echos to 192.168.3.1, timeout is 2 seconds:
!!!!!!!!!!!!!!!!!!!!
Success rate is 100 percent (20/20), round-trip min/avg/max = 44/64/108 ms
R1#
__________________________________________________________________________________

R4:
R4(config)#do ping 45.45.47.1 r 20

Type escape sequence to abort.
Sending 20, 100-byte ICMP Echos to 45.45.47.1, timeout is 2 seconds:
!!!!!!!!!!!!!!!!!!!!
Success rate is 100 percent (20/20), round-trip min/avg/max = 36/70/112 ms
R4(config)#

Note: Everything looks good, this lab config was simple and straight forward. The difficult part is knowing where to look when there are anomalies on the network. Troubleshooting is a MUST have skill. Later in this lab there will be a lot of issues that must be resolved. Once we have a good baseline understanding of the network, the troubleshooting steps will fall into place, hopefully :-)

Wednesday, May 19, 2010

How to configure Netflow

What is Netflow?

A flow can be considered as traffic that share "header" information such as source and destination IP address, protocols numbers, port numbers and TOS field information. Reference CCNP Tshoot Cisco Press.

Netflow allows you to monitor which user or computer system in the network is using the most traffic. Netflow can be configured as stand alone (on the router) or tied together with applications that support Netflow. My favorite program is WhatsUpGold http://www.whatsupgold.com/. There is a 30 day trial available for download. I will give you a simple stand alone config and a sample config tied in with WhatsUpGold v14.



Neetflow interface configuration 

Interface config mode:

interface FastEthernet0/0
 ip address 10.0.32.1 255.255.224.0
 ip flow ingress
 duplex full

Global config mode:
!
ip flow-export source Loopback0
ip flow-export version 5
ip flow-export destination 192.168.1.1 9999
ip flow-top-talkers
 top 5
 sort-by bytes
  1. Specify the flow-export source
  2. Specify the version number
  3. Specify where the flow will be exported 
  4. Configure how many top talkers will be monitored
  5. the results will be sorted by bytes
Below is a sample output of the show flow command:

CME_2651XM#sh ip cache flow
IP packet size distribution (1710195 total packets):
   1-32   64   96  128  160  192  224  256  288  320  352  384  416  448  480
   .000 .385 .208 .024 .012 .009 .026 .004 .003 .002 .024 .001 .002 .002 .001

    512  544  576 1024 1536 2048 2560 3072 3584 4096 4608
   .001 .001 .001 .018 .267 .000 .000 .000 .000 .000 .000

IP Flow Switching Cache, 278544 bytes
  15 active, 4081 inactive, 341232 added
  5824827 ager polls, 0 flow alloc failures
  Active flows timeout in 30 minutes
  Inactive flows timeout in 15 seconds
IP Sub Flow Cache, 25800 bytes
  15 active, 1009 inactive, 336988 added, 336988 added to flow
  0 alloc failures, 0 force free
  1 chunk, 5 chunks added
  last clearing of statistics never
Protocol         Total    Flows   Packets Bytes  Packets Active(Sec) Idle(Sec)
--------         Flows     /Sec     /Flow  /Pkt     /Sec     /Flow     /Flow
TCP-Telnet       19434      0.0         9    42      0.1       0.0       1.5
TCP-FTP             22        0.0         1    45      0.0       0.8      12.9
TCP-FTPD          12        0.0         1    43      0.0       0.2      13.3
TCP-WWW        12517  0.0        39   841      0.3       2.9       6.6


 _________________________________________________________________________________
CME_2651XM#sh ip flow top-talkers

SrcIf         SrcIPaddress    DstIf         DstIPaddress    Pr SrcP DstP Bytes
Fa0/0         10.46.240.1     Null          255.255.255.255 11 0043 0044    18K
Fa0/1         1.1.1.1             Local         1.1.1.1      01 0000 0800  3612

2 of 5 top talkers shown. 23 flows processed.


Configure WhatsUpGold:

  1. Login into the WhatsUpGold interface


     2. Under flow monitor click go--configure-- settings

    

     3. Listening port: Select a port number it should be the same as port configured using the ip flow-destination command eg (ip flow-export destination 192.168.1.1 9999)


Sample WhatsUpGold display:

Friday, May 7, 2010

How to configure a Frame Relay Network



Step 1:


Configure the frame relay switch a Cisco 2600 is used in this example:

In global config mode type...

1. frame-relay switching

2. Configure the serial interfaces for frame relay

interface Serial1/0
 no ip address
 encapsulation frame-relay
 logging event subif-link-status
 logging event dlci-status-change
 serial restart-delay 0
 clock rate 56000
 no frame-relay inverse-arp
 frame-relay lmi-type cisco
 frame-relay intf-type dce
 frame-relay route 102 interface Serial1/1 201
 frame-relay route 103 interface Serial1/2 301
 !
!
interface Serial1/1
 no ip address
 encapsulation frame-relay
 logging event subif-link-status
 logging event dlci-status-change
 serial restart-delay 0
 clock rate 56000
 no frame-relay inverse-arp
 frame-relay lmi-type cisco
 frame-relay intf-type dce
 frame-relay route 201 interface Serial1/0 102
 frame-relay route 701 interface Serial1/2 107
 !
!
interface Serial1/2
 no ip address
 encapsulation frame-relay
 logging event subif-link-status
 logging event dlci-status-change
 serial restart-delay 0
 clock rate 56000
 no frame-relay inverse-arp
 frame-relay lmi-type cisco
 frame-relay intf-type dce
 frame-relay route 107 interface Serial1/1 701
 frame-relay route 301 interface Serial1/0 103
 !
This is the end of the FRAME RELAY SWITCH CONFIG

I will now configure each router in the frame relay network.

R1:


1. Go under the serial interface and configure the following...

interface Serial1/0
 no ip address
 encapsulation frame-relay
 logging event subif-link-status
 logging event dlci-status-change
 serial restart-delay 0

2. Pay close attention to the configuration, notice no IP address has been configured and encapsulation has been configured.

Note: In this particular lab sub interfaces will be configured as Point-To-Point.


3. Configure the sub interface to support the DLCI being used. A best practice is to configure the sub interface with the DLCI number. For example DLCI 102 will be configured as interface s1/0.101 point-to-point.

!
interface Serial1/0.102 point-to-point
 ip address 10.0.0.1 255.224.0.0
 frame-relay interface-dlci 102 
!
interface Serial1/0.103 point-to-point
 ip address 10.32.0.1 255.224.0.0
 frame-relay interface-dlci 103
I will repeat steps 1-3 on R2 and R3.


R2:

!
interface Serial1/0
 no ip address
 encapsulation frame-relay
 serial restart-delay 0
 !
!
interface Serial1/0.201 point-to-point
 ip address 10.0.0.2 255.224.0.0
 frame-relay interface-dlci 201 
!
interface Serial1/0.701 point-to-point
 ip address 10.64.0.1 255.224.0.0
 frame-relay interface-dlci 701 

R3:

interface Serial1/0
 no ip address
 encapsulation frame-relay
 serial restart-delay 0
 !
!
interface Serial1/0.107 point-to-point
 ip address 10.64.0.2 255.224.0.0
 frame-relay interface-dlci 107 
!
interface Serial1/0.301 point-to-point
 ip address 10.32.0.2 255.224.0.0
 frame-relay interface-dlci 301


Note: Each sub interface is in it's own subnet and the IP address much match each point-to-point sub interface.

Now on with the verification...

Frame Relay Switch (Cisco 2651XM)

FRS#sh frame-relay ?
  end-to-end     Frame-relay end-to-end VC information
  fragment       show frame relay fragmentation information
  ip             show frame relay IP statistics
  iphc           Frame Relay FRF.20 Control Protocol frames
  lapf           show frame relay lapf status/statistics
  lmi            show frame relay lmi statistics
  map            Frame-Relay map table
  multilink      Show Multilink Frame Relay bundle information
  pvc            show frame relay pvc statistics
  qos-autosense  show frame relay qos-autosense information
  route          show frame relay route
  svc            show frame relay SVC stuff
  traffic        Frame-Relay protocol statistics
  vc-bundle      FR VC-Bundle
  vofr           Show frame-relay VoFR statistics

FRS#sh fram
FRS#sh frame-relay lmi
FRS#sh frame-relay lmi

LMI Statistics for interface Serial1/0 (Frame Relay DCE) LMI TYPE = CISCO
  Invalid Unnumbered info 0             Invalid Prot Disc 0
  Invalid dummy Call Ref 0              Invalid Msg Type 0
  Invalid Status Message 0              Invalid Lock Shift 0
  Invalid Information ID 0              Invalid Report IE Len 0
  Invalid Report Request 0              Invalid Keep IE Len 0
  Num Status Enq. Rcvd 151              Num Status msgs Sent 151
  Num Update Status Sent 0              Num St Enq. Timeouts 17

LMI Statistics for interface Serial1/1 (Frame Relay DCE) LMI TYPE = CISCO
  Invalid Unnumbered info 0             Invalid Prot Disc 0
  Invalid dummy Call Ref 0              Invalid Msg Type 0
  Invalid Status Message 0              Invalid Lock Shift 0
  Invalid Information ID 0              Invalid Report IE Len 0
  Invalid Report Request 0              Invalid Keep IE Len 0
  Num Status Enq. Rcvd 122              Num Status msgs Sent 122
  Num Update Status Sent 0              Num St Enq. Timeouts 32

LMI Statistics for interface Serial1/2 (Frame Relay DCE) LMI TYPE = CISCO
  Invalid Unnumbered info 0             Invalid Prot Disc 0
  Invalid dummy Call Ref 0              Invalid Msg Type 0
  Invalid Status Message 0              Invalid Lock Shift 0
  Invalid Information ID 0              Invalid Report IE Len 0
  Invalid Report Request 0              Invalid Keep IE Len 0
  Num Status Enq. Rcvd 114              Num Status msgs Sent 114
  Num Update Status Sent 0              Num St Enq. Timeouts 33
FRS#





R1:
SH FRAMe-relay MAp

Serial1/0.102 (up): point-to-point dlci, dlci 102(0x66,0x1860), broadcast
          status defined, active
Serial1/0.103 (up): point-to-point dlci, dlci 103(0x67,0x1870), broadcast
          status defined, active

LMI Statistics for interface Serial1/0 (Frame Relay DTE) LMI TYPE = CISCO
  Invalid Unnumbered info 0             Invalid Prot Disc 0
  Invalid dummy Call Ref 0              Invalid Msg Type 0
  Invalid Status Message 0              Invalid Lock Shift 0
  Invalid Information ID 0              Invalid Report IE Len 0
  Invalid Report Request 0              Invalid Keep IE Len 0
  Num Status Enq. Sent 157              Num Status msgs Rcvd 158
  Num Update Status Rcvd 0              Num Status Timeouts 0
  Last Full Status Req 00:00:17         Last Full Status Rcvd 00:00:17


SH FRaMe-relay Pvc

PVC Statistics for interface Serial1/0 (Frame Relay DTE)

              Active     Inactive      Deleted       Static
  Local          2            0            0            0
  Switched       0            0            0            0
  Unused         0            0            0            0

DLCI = 102, DLCI USAGE = LOCAL, PVC STATUS = ACTIVE, INTERFACE = Serial1/0.102

  input pkts 42            output pkts 44           in bytes 9427
  out bytes 10108          dropped pkts 0           in pkts dropped 0
  out pkts dropped 0                out bytes dropped 0
  in FECN pkts 0           in BECN pkts 0           out FECN pkts 0
  out BECN pkts 0          in DE pkts 0             out DE pkts 0
  out bcast pkts 24        out bcast bytes 8028
  5 minute input rate 0 bits/sec, 0 packets/sec
  5 minute output rate 0 bits/sec, 0 packets/sec
  pvc create time 00:25:45, last time pvc status changed 00:21:23

DLCI = 103, DLCI USAGE = LOCAL, PVC STATUS = ACTIVE, INTERFACE = Serial1/0.103

  input pkts 26            output pkts 28           in bytes 7326
  out bytes 8016           dropped pkts 3           in pkts dropped 3
  out pkts dropped 0                out bytes dropped 0
  in FECN pkts 0           in BECN pkts 0           out FECN pkts 0
  out BECN pkts 0          in DE pkts 0             out DE pkts 0
  out bcast pkts 22        out bcast bytes 7392
  5 minute input rate 0 bits/sec, 0 packets/sec
  5 minute output rate 0 bits/sec, 0 packets/sec
  pvc create time 00:25:05, last time pvc status changed 00:19:55

R2:

SH FRAMe-relay MAp
Serial1/0.201 (up): point-to-point dlci, dlci 201(0xC9,0x3090), broadcast
          status defined, active
Serial1/0.701 (up): point-to-point dlci, dlci 701(0x2BD,0xACD0), broadcast
          status defined, active

SH FRAMe-relay LMi

LMI Statistics for interface Serial1/0 (Frame Relay DTE) LMI TYPE = CISCO
  Invalid Unnumbered info 0             Invalid Prot Disc 0
  Invalid dummy Call Ref 0              Invalid Msg Type 0
  Invalid Status Message 0              Invalid Lock Shift 0
  Invalid Information ID 0              Invalid Report IE Len 0
  Invalid Report Request 0              Invalid Keep IE Len 0
  Num Status Enq. Sent 140              Num Status msgs Rcvd 141
  Num Update Status Rcvd 0              Num Status Timeouts 0
  Last Full Status Req 00:00:27         Last Full Status Rcvd 00:00:27

SH FRaMe-relay Pvc

PVC Statistics for interface Serial1/0 (Frame Relay DTE)

              Active     Inactive      Deleted       Static
  Local          2            0            0            0
  Switched       0            0            0            0
  Unused         0            0            0            0

DLCI = 201, DLCI USAGE = LOCAL, PVC STATUS = ACTIVE, INTERFACE = Serial1/0.201

  input pkts 46            output pkts 44           in bytes 10780
  out bytes 10099          dropped pkts 0           in pkts dropped 0
  out pkts dropped 0                out bytes dropped 0
  in FECN pkts 0           in BECN pkts 0           out FECN pkts 0
  out BECN pkts 0          in DE pkts 0             out DE pkts 0
  out bcast pkts 24        out bcast bytes 8019
  5 minute input rate 0 bits/sec, 0 packets/sec
  5 minute output rate 0 bits/sec, 0 packets/sec
  pvc create time 00:23:51, last time pvc status changed 00:23:51

DLCI = 701, DLCI USAGE = LOCAL, PVC STATUS = ACTIVE, INTERFACE = Serial1/0.701


  input pkts 47            output pkts 46           in bytes 10224
  out bytes 9888           dropped pkts 1           in pkts dropped 1
  out pkts dropped 0                out bytes dropped 0
  in FECN pkts 0           in BECN pkts 0           out FECN pkts 0
  out BECN pkts 0          in DE pkts 0             out DE pkts 0
  out bcast pkts 22        out bcast bytes 7392
  5 minute input rate 0 bits/sec, 0 packets/sec
  5 minute output rate 0 bits/sec, 0 packets/sec
  pvc create time 00:21:22, last time pvc status changed 00:19:53

R3:

Sh frame-relay map
Serial1/0.107 (up): point-to-point dlci, dlci 107(0x6B,0x18B0), broadcast
          status defined, active
Serial1/0.301 (up): point-to-point dlci, dlci 301(0x12D,0x48D0), broadcast
          status defined, active

SH FRAMe-relay LMi

LMI Statistics for interface Serial1/0 (Frame Relay DTE) LMI TYPE = CISCO
  Invalid Unnumbered info 0             Invalid Prot Disc 0
  Invalid dummy Call Ref 0              Invalid Msg Type 0
  Invalid Status Message 0              Invalid Lock Shift 0
  Invalid Information ID 0              Invalid Report IE Len 0
  Invalid Report Request 0              Invalid Keep IE Len 0
  Num Status Enq. Sent 139              Num Status msgs Rcvd 139
  Num Update Status Rcvd 0              Num Status Timeouts 0
  Last Full Status Req 00:00:16         Last Full Status Rcvd 00:00:16

sh frame-relay pvc

PVC Statistics for interface Serial1/0 (Frame Relay DTE)

              Active     Inactive      Deleted       Static
  Local          2            0            0            0
  Switched       0            0            0            0
  Unused         0            0            0            0

DLCI = 107, DLCI USAGE = LOCAL, PVC STATUS = ACTIVE, INTERFACE = Serial1/0.107

  input pkts 47            output pkts 55           in bytes 10224
  out bytes 11520          dropped pkts 0           in pkts dropped 0
  out pkts dropped 0                out bytes dropped 0
  in FECN pkts 0           in BECN pkts 0           out FECN pkts 0
  out BECN pkts 0          in DE pkts 0             out DE pkts 0
  out bcast pkts 25        out bcast bytes 8400
  5 minute input rate 0 bits/sec, 0 packets/sec
  5 minute output rate 0 bits/sec, 0 packets/sec
  pvc create time 00:22:23, last time pvc status changed 00:20:53

DLCI = 301, DLCI USAGE = LOCAL, PVC STATUS = ACTIVE, INTERFACE = Serial1/0.301

  input pkts 32            output pkts 33           in bytes 9360
  out bytes 8750           dropped pkts 0           in pkts dropped 0
  out pkts dropped 0                out bytes dropped 0
  in FECN pkts 0           in BECN pkts 0           out FECN pkts 0
  out BECN pkts 0          in DE pkts 0             out DE pkts 0
  out bcast pkts 23        out bcast bytes 7710
  5 minute input rate 0 bits/sec, 0 packets/sec
  5 minute output rate 0 bits/sec, 0 packets/sec
  pvc create time 00:23:44, last time pvc status changed 00:23:44


Ping directly connected neighbor for connectivity:

R1#ping 10.0.0.2

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.0.0.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 140/176/240 ms

R1#ping 10.32.0.2

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.32.0.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 144/185/232 ms
___________________________________________________________________________________

R2#PING 10.64.0.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.64.0.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 140/172/188 ms

R2#PING 10.32.0.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.32.0.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 140/192/236 ms
 _________________________________________________________________________________
R3#PING 10.0.0.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.0.0.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 164/201/220 ms

R3#PING 10.64.0.2

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.64.0.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 136/166/192 ms

___________________________________________________________________________________