Contents Configuring basic IP routing ··········································································· 1 Routing table ······················································································································································ 1 Dynamic routing protocols·································································································································· 2 Route preference ··············································································································································· 2 Load sharing ······················································································································································ 3 Route backup ····················································································································································· 3 Route recursion ·················································································································································· 3 Route redistribution ············································································································································ 3 Extension attribute redistribution ························································································································ 3 Setting the maximum lifetime for routes and labels in the RIB···········································································...
Page 4
Advertising a default route ······················································································································· 31 Configuring received/redistributed route filtering······················································································ 32 Setting a preference for RIP ····················································································································· 32 Configuring RIP route redistribution ········································································································· 32 Tuning and optimizing RIP networks ··············································································································· 33 Configuration prerequisites ······················································································································ 33 Setting RIP timers ···································································································································· 33 Enabling split horizon and poison reverse ·······························································································...
Page 5
Configuring a virtual link ··························································································································· 76 Configuring OSPF network types ····················································································································· 77 Configuration prerequisites ······················································································································ 77 Configuring the broadcast network type for an interface·········································································· 77 Configuring the NBMA network type for an interface ··············································································· 77 Configuring the P2MP network type for an interface················································································ 78 Configuring the P2P network type for an interface···················································································...
Page 6
OSPF route summarization configuration example ················································································ 109 OSPF stub area configuration example ································································································· 112 OSPF NSSA area configuration example ······························································································ 114 OSPF DR election configuration example ······························································································ 116 OSPF virtual link configuration example ································································································ 121 OSPF GR configuration example ··········································································································· 123 OSPF NSR configuration example·········································································································...
Page 8
Configuring the SoO attribute ················································································································· 270 Tuning and optimizing BGP networks ············································································································ 271 Configuring the keepalive interval and hold time ··················································································· 271 Setting the session retry timer ················································································································ 273 Configuring the interval for sending updates for the same route ··························································· 274 Enabling BGP to establish an EBGP session over multiple hops ··························································...
Page 9
IPv6 BGP route reflector configuration example ···················································································· 363 6PE configuration example ···················································································································· 366 BFD for IPv6 BGP configuration example ······························································································ 369 IPv6 BGP FRR configuration example ··································································································· 372 IPv6 multicast BGP configuration example ···························································································· 376 Troubleshooting BGP ····································································································································· 379 Symptom ················································································································································ 379 Analysis ··················································································································································...
Page 11
Configuration prerequisites ···················································································································· 446 Configuration guidelines ························································································································· 447 Configuration procedure ························································································································· 447 Displaying and maintaining OSPFv3·············································································································· 448 OSPFv3 configuration examples···················································································································· 449 OSPFv3 stub area configuration example ····························································································· 449 OSPFv3 NSSA area configuration example ·························································································· 454 OSPFv3 DR election configuration example ·························································································· 456 OSPFv3 route redistribution configuration example···············································································...
Page 12
Configuring an IP prefix list ···················································································································· 503 Configuring an AS path list ····················································································································· 504 Configuring a community list ·················································································································· 504 Configuring an extended community list ································································································ 505 Configuring a MAC list ··························································································································· 505 Configuring a routing policy···························································································································· 505 Configuration prerequisites ···················································································································· 505 Creating a routing policy ························································································································...
Configuring basic IP routing IP routing directs IP packet forwarding on routers based on a routing table. This chapter focuses on unicast routing protocols. For more information about multicast routing protocols, see IP Multicast Configuration Guide. Routing table A RIB contains the global routing information and related information, including route recursion, route redistribution, and route extension information.
• Cost—If multiple routes to a destination have the same preference, the one with the smallest cost is the optimal route. • NextHop—Next hop. • Interface—Output interface. Dynamic routing protocols Static routes work well in small, stable networks. They are easy to configure and require fewer system resources.
Route type Preference OSPF ASE OSPF NSSA IBGP EBGP Unknown (route from an untrusted source) Load sharing A routing protocol might find multiple optimal equal-cost routes to the same destination. You can use these routes to implement equal-cost multi-path (ECMP) load sharing. Static routing, IPv6 static routing, RIP, RIPng, OSPF, OSPFv3, BGP, IPv6 BGP, IS-IS, and IPv6 IS-IS support ECMP load sharing.
The RIB records extended attributes of each routing protocol and redistribution relationships of different routing protocol extended attributes. Setting the maximum lifetime for routes and labels in the RIB Perform this task to prevent routes of a certain protocol from being aged out due to slow protocol convergence resulting from a large number of route entries or long GR period.
Step Command Remarks By default, the maximum Set the maximum lifetime for fib lifetime seconds lifetime for routes in the FIB IPv4 routes in the FIB. is 600 seconds. To set the maximum lifetime for routes in the FIB (IPv6): Step Command Remarks...
Configuring RIB NSR IMPORTANT: Use this feature with protocol GR or NSR to avoid route timeouts and traffic interruption. When an active/standby switchover occurs, nonstop routing (NSR) backs up routing information from the active process to the standby process to avoid routing flapping and ensure forwarding continuity.
Configuring IPv4 RIB inter-protocol FRR Step Command Remarks Enter system view. system-view Enter RIB view. Create the RIB IPv4 address By default, no RIB IPv4 address-family ipv4 family and enter its view. address family exists. By default, inter-protocol FRR is disabled. Enable IPv4 RIB inter-protocol fast-reroute If you do not specify a VPN...
Step Command Remarks Configure routing protocol protocol nexthop By default, routing policy-based policy-based recursive recursive-lookup route-policy recursive lookup is not lookup. route-policy-name configured. Displaying and maintaining a routing table Execute display commands in any view and reset commands in user view. Task Command display ip routing-table [ vpn-instance vpn-instance-name ]...
Configuring static routing Static routes are manually configured. If a network's topology is simple, you only need to configure static routes for the network to work correctly. Static routes cannot adapt to network topology changes. If a fault or a topological change occurs in the network, the network administrator must modify the static routes manually.
Step Command Remarks (Optional.) Enable By default, the device does periodic sending of not send ARP requests to ARP requests to the ip route-static arp-request interval interval the next hops of static next hops of static routes. routes. (Optional.) Configure the ip route-static default-preference The default setting is 60.
Configuring static route FRR A link or router failure on a path can cause packet loss and even routing loop. Static route fast reroute (FRR) enables fast rerouting to minimize the impact of link or node failures. Figure 1 Network diagram Backup nexthop: Router C Router A Router B...
Configuring static route FRR to automatically select a backup next hop Step Command Remarks Enter system view. system-view Configure static route FRR to By default, static route FRR is automatically select a ip route-static fast-reroute auto disabled from automatically backup next hop. selecting a backup next hop.
Static route configuration examples Basic static route configuration example Network requirements As shown in Figure 2, configure static routes on the switches for interconnections between any two hosts. Figure 2 Network diagram Host B 1.1.6.2/24 Vlan-int100 1.1.6.1/24 Vlan-int500 Vlan-int600 1.1.4.2/30 1.1.5.5/30 Switch B Vlan-int500...
Destination/Mask Proto Cost NextHop Interface 0.0.0.0/0 Static 60 1.1.4.2 Vlan500 Static Routing table Status : <Inactive> Summary Count : 0 # Display static routes on Switch B. [SwitchB] display ip routing-table protocol static Summary Count : 2 Static Routing table Status : <Active> Summary Count : 2 Destination/Mask Proto...
Page 29
• Configure a static route to subnet 120.1.1.0/24 on Switch A. • Configure a static route to subnet 121.1.1.0/24 on Switch B. • Enable BFD for both routes. • Configure a static route to subnet 120.1.1.0/24 and a static route to subnet 121.1.1.0/24 on Switch C.
Static Routing table Status : <Inactive> Summary Count : 0 The output shows that Switch A communicates with Switch B through VLAN-interface 11. BFD for static routes configuration example (indirect next hop) Network requirements Figure 4 shows the network topology as follows: •...
Page 32
Device Interface IP address Switch C VLAN-interface 11 10.1.1.100/24 Switch C VLAN-interface 13 13.1.1.2/24 Switch D VLAN-interface 10 12.1.1.2/24 Switch D VLAN-interface 12 11.1.1.2/24 Configuration procedure Configure IP addresses for interfaces. (Details not shown.) Configure static routes and BFD: # Configure static routes on Switch A and enable BFD control mode for the static route that traverses Switch D.
# Display the static routes on Switch A. <SwitchA> display ip routing-table protocol static Summary Count : 1 Static Routing table Status : <Active> Summary Count : 1 Destination/Mask Proto Cost NextHop Interface 120.1.1.0/24 Static 60 12.1.1.2 Vlan10 Static Routing table Status : <Inactive> Summary Count : 0 The output shows that Switch A communicates with Switch B through VLAN-interface 10.
Page 34
Table 6 Interface and IP address assignment Device Interface IP address Switch A VLAN-interface 100 12.12.12.1/24 Switch A VLAN-interface 200 13.13.13.1/24 Switch A Loopback 0 1.1.1.1/32 Switch B VLAN-interface 101 24.24.24.4/24 Switch B VLAN-interface 200 13.13.13.2/24 Switch B Loopback 0 4.4.4.4/32 Switch C VLAN-interface 100...
Configuring a default route A default route is used to forward packets that do not match any specific routing entry in the routing table. Without a default route, packets that do not match any routing entries are discarded and an ICMP destination-unreachable packet is sent to the source.
Configuring RIP Overview Routing Information Protocol (RIP) is a distance-vector IGP suited to small-sized networks. It employs UDP to exchange route information through port 520. RIP uses a hop count to measure the distance to a destination. The hop count from a router to a directly connected network is 0.
RIP versions There are two RIP versions, RIPv1 and RIPv2. RIPv1 is a classful routing protocol. It advertises messages only through broadcast. RIPv1 messages do not carry mask information, so RIPv1 can only recognize natural networks such as Class A, B, and C. For this reason, RIPv1 does not support discontiguous subnets. RIPv2 is a classless routing protocol.
Tasks at a glance (Optional.) Tuning and optimizing RIP networks: • Setting RIP timers • Enabling split horizon and poison reverse • Setting the maximum number of RIP ECMP routes • Enabling zero field check on incoming RIPv1 messages • Enabling source IP address check on incoming RIP updates •...
Step Command Remarks Enable RIP and enter RIP rip [ process-id ] [ vpn-instance By default, RIP is disabled. view. vpn-instance-name ] By default, RIP is disabled on a network. network network-address The network 0.0.0.0 command Enable RIP on a network. [ wildcard-mask ] can enable RIP on all interfaces in a single process, but does not...
Configuring a RIP version You can configure a global RIP version in RIP view or an interface-specific RIP version in interface view. An interface preferentially uses the interface-specific RIP version. If no interface-specific version is specified, the interface uses the global RIP version. If neither a global nor interface-specific RIP version is configured, the interface sends RIPv1 broadcasts and can receive the following: •...
Step Command Remarks Enter system view. system-view interface interface-type Enter interface view. interface-number Specify an inbound rip metricin [ route-policy The default setting is 0. additional routing metric. route-policy-name ] value Specify an outbound rip metricout [ route-policy The default setting is 1. additional routing metric.
Step Command Remarks interface interface-type Enter interface view. interface-number rip summary-address By default, no summary route is Configure a summary route. ip-address { mask-length | mask } configured. Disabling host route reception Perform this task to disable RIPv2 from receiving host routes from the same network to save network resources.
Configuring received/redistributed route filtering Perform this task to filter received and redistributed routes by using a filtering policy. To configure route filtering: Step Command Remarks Enter system view. system-view rip [ process-id ] [ vpn-instance Enter RIP view. vpn-instance-name ] By default, the filtering of received routes is not filter-policy { ipv4-acl-number |...
Step Command Remarks rip [ process-id ] [ vpn-instance Enter RIP view. vpn-instance-name ] By default, the maximum number Set the maximum number of maximum load-balancing of RIP ECMP routes equals the RIP ECMP routes. number maximum number of ECMP routes supported by the system.
Step Command Remarks By default, RIP does not Specify a RIP neighbor. peer ip-address unicast updates to any peer. Disable source IP By default, source IP address check on undo validate-source-address address check on inbound inbound RIP updates RIP updates is enabled. Configuring RIP network management You can use network management software to manage the RIP process to which MIB is bound.
Setting the maximum length of RIP packets CAUTION: The supported maximum length of RIP packets varies by vendor. Use this feature with caution to avoid compatibility issues. The packet length of RIP packets determines how many routes can be carried in a RIP packet. Set the maximum length of RIP packets to make good use of link bandwidth.
With the GR feature, the restarting router (known as the GR restarter) can notify the event to its GR capable neighbors. GR capable neighbors (known as GR helpers) maintain their adjacencies with the router within a GR interval. During this process, the FIB table of the router does not change. After the restart, the router contacts its neighbors to retrieve its FIB.
task to enable BFD for RIP. For more information about BFD, see High Availability Configuration Guide. RIP supports the following BFD detection modes: • Single-hop echo detection—Detection mode for a direct neighbor. In this mode, a BFD session is established only when the directly connected neighbor has route information to send. •...
Configuring bidirectional control detection Step Command Remarks Enter system view. system-view rip [ process-id ] [ vpn-instance Enter RIP view. vpn-instance-name ] By default, RIP does not unicast updates to any peer. Because the undo peer command does not remove the Specify a RIP neighbor.
Configuration prerequisites You must specify a next hop by using the apply fast-reroute backup-interface command in a routing policy and reference the routing policy for FRR. For more information about routing policy configuration, see "Configuring routing policies." Configuring RIP FRR Step Command Remarks...
Page 56
[SwitchB-Vlan-interface101] rip 1 enable [SwitchB-Vlan-interface101] quit [SwitchB] interface vlan-interface 102 [SwitchB-Vlan-interface102] rip 1 enable [SwitchB-Vlan-interface102] quit # Display the RIP routing table of Switch A. [SwitchA] display rip 1 route Route Flags: R - RIP, T - TRIP P - Permanent, A - Aging, S - Suppressed, G - Garbage-collect D - Direct, O - Optimal, F - Flush to RIB ---------------------------------------------------------------------------- Peer 1.1.1.2 on Vlan-interface100...
Page 57
The output shows that RIPv2 uses classless subnet masks. NOTE: After RIPv2 is configured, RIPv1 routes might still exist in the routing table until they are aged out. # Display the RIP routing table on Switch B. [SwitchB] display rip 1 route Route Flags: R - RIP, T - TRIP P - Permanent, A - Aging, S - Suppressed, G - Garbage-collect D - Direct, O - Optimal, F - Flush to RIB...
Peer 1.1.1.1 on Vlan-interface100 Destination/Mask Nexthop Cost Flags 2.1.1.0/24 1.1.1.3 RAOF Local route Destination/Mask Nexthop Cost Flags 1.1.1.0/24 0.0.0.0 RDOF 10.1.1.0/24 0.0.0.0 RDOF 10.2.1.0/24 0.0.0.0 RDOF Configuring RIP route redistribution Network requirements As shown in Figure 8, Switch B communicates with Switch A through RIP 100 and with Switch C through RIP 200.
Page 59
[SwitchB-rip-200] quit # Enable RIP 200, and configure RIPv2 on Switch C. <SwitchC> system-view [SwitchC] rip 200 [SwitchC-rip-200] network 12.0.0.0 [SwitchC-rip-200] network 16.0.0.0 [SwitchC-rip-200] version 2 [SwitchC-rip-200] undo summary [SwitchC-rip-200] quit # Display the IP routing table on Switch C. [SwitchC] display ip routing-table Destinations : 13 Routes : 13...
16.4.1.0/32 Direct 0 16.4.1.1 Vlan400 16.4.1.1/32 Direct 0 127.0.0.1 InLoop0 16.4.1.255/32 Direct 0 16.4.1.1 Vlan400 127.0.0.0/8 Direct 0 127.0.0.1 InLoop0 127.0.0.0/32 Direct 0 127.0.0.1 InLoop0 127.0.0.1/32 Direct 0 127.0.0.1 InLoop0 127.255.255.255/32 Direct 0 127.0.0.1 InLoop0 Configuring an additional metric for a RIP interface Network requirements As shown in Figure...
[SwitchC-rip-1] undo summary # Configure Switch D. <SwitchD> system-view [SwitchD] rip 1 [SwitchD-rip-1] network 1.0.0.0 [SwitchD-rip-1] version 2 [SwitchD-rip-1] undo summary # Configure Switch E. <SwitchE> system-view [SwitchE] rip 1 [SwitchE-rip-1] network 1.0.0.0 [SwitchE-rip-1] version 2 [SwitchE-rip-1] undo summary # Display all active routes in the RIP database on Switch A. [SwitchA] display rip 1 database 1.0.0.0/8, auto-summary 1.1.1.0/24, cost 0, nexthop 1.1.1.1, RIP-interface...
Page 62
Figure 10 Network diagram Vlan-int500 Vlan-int200 10.6.1.2/24 10.1.1.1/24 Switch B Vlan-int200 OSPF 10.1.1.2/24 Vlan-int600 Vlan-int100 Vlan-int300 10.5.1.2/24 10.2.1.2/24 11.3.1.1/24 Vlan-int100 10.2.1.1/24 Switch C Switch A Vlan-int400 Vlan-int300 11.4.1.2/24 11.3.1.2/24 Switch D Configuration procedure Configure IP addresses for interfaces. (Details not shown.) Configure basic OSPF: # Configure Switch A.
Page 63
[SwitchD-rip-1] network 11.0.0.0 [SwitchD-rip-1] version 2 [SwitchD-rip-1] undo summary [SwitchD-rip-1] quit # Configure RIP to redistribute routes from OSPF process 1 and direct routes on Switch C. [SwitchC-rip-1] import-route direct [SwitchC-rip-1] import-route ospf 1 [SwitchC-rip-1] quit # Display the IP routing table on Switch D. [SwitchD] display ip routing-table Destinations : 15 Routes : 15...
127.0.0.0/32 Direct 0 127.0.0.1 InLoop0 127.0.0.1/32 Direct 0 127.0.0.1 InLoop0 127.255.255.255/32 Direct 0 127.0.0.1 InLoop0 Configuring RIP GR Network requirements As shown in Figure 11, Switch A, Switch B, and Switch C all run RIPv2. • Enable GR on Switch A. Switch A acts as the GR restarter. •...
Page 65
Enable RIP NSR on Switch S to ensure correct routing when an active/standby switchover occurs on Switch S. Figure 12 Network diagram Loop 0 Loop 0 22.22.22.22/32 44.44.44.44/32 Switch S Vlan-int100 Vlan-int200 12.12.12.1/24 14.14.14.1/24 Vlan-int100 Vlan-int200 12.12.12.2/24 14.14.14.2/24 Switch B Switch A Configuration procedure Configure IP addresses and subnet masks for interfaces on the switches.
Route Flags: R - RIP, T - TRIP P - Permanent, A - Aging, S - Suppressed, G - Garbage-collect D - Direct, O - Optimal, F - Flush to RIB ---------------------------------------------------------------------------- Peer 12.12.12.2 on Vlan-interface200 Destination/Mask Nexthop Cost Flags 14.0.0.0/8 12.12.12.2 RAOF...
Page 67
• Enable BFD for RIP on VLAN-interface 100 of Switch A. When the link over VLAN-interface 100 fails, BFD can quickly detect the failure and notify RIP. RIP deletes the neighbor relationship and route information learned on VLAN-interface 100, and uses the route destined for 100.1.1.1 24 through VLAN-interface 200.
Configuring BFD for RIP (single hop echo detection for a specific destination) Network requirements As shown in Figure 14, VLAN-interface 100 of Switch A and Switch B runs RIP process 1. VLAN-interface 200 of Switch B and Switch C runs RIP process 1. •...
Tunnel ID: Invalid Interface: vlan-interface 100 BkTunnel ID: Invalid BkInterface: N/A FtnIndex: 0x0 TrafficIndex: N/A Connector: N/A # Display routes destined for 100.1.1.0/24 on Switch B when the link between Switch A and Switch B fails. <SwitchB> display ip routing-table 100.1.1.0 24 verbose Summary Count : 1 Destination: 100.1.1.0/24 Protocol: RIP...
Page 72
Figure 15 Network diagram Switch D Vlan-int300 Vlan-int400 101.1.1.0/24 100.1.1.0/24 Vlan-int300 Vlan-int400 Switch B Vlan-int100 Vlan-int200 Vlan-int100 Vlan-int200 Switch A Switch C Table 7 Interface and IP address assignment Device Interface IP address Switch A VLAN-interface 300 192.168.3.1/24 Switch A VLAN-interface 100 192.168.1.1/24 Switch B...
Verifying the configuration # Display the BFD session information on Switch A. <SwitchA> display bfd session Total Session Num: 1 Up Session Num: 1 Init Mode: Active IPv4 session working under Ctrl mode: LD/RD SourceAddr DestAddr State Holdtime Interface 513/513 192.168.1.1 192.168.2.2 1700ms...
Page 75
Device Interface IP address Switch A VLAN-interface 200 13.13.13.1/24 Switch A Loopback 0 1.1.1.1/32 Switch B VLAN-interface 101 24.24.24.4/24 Switch B VLAN-interface 200 13.13.13.2/24 Switch B Loopback 0 4.4.4.4/32 Switch C VLAN-interface 100 12.12.12.2/24 Switch C VLAN-interface 101 24.24.24.2/24 Configuration procedure Configure IP addresses and subnet masks for interfaces on the switches.
Configuring OSPF Overview Open Shortest Path First (OSPF) is a link-state IGP developed by the OSPF working group of the IETF. OSPF version 2 is used for IPv4. OSPF refers to OSPFv2 throughout this chapter. OSPF has the following features: •...
• Network LSA—Type-2 LSA, originated for broadcast and NBMA networks by the designated router, and flooded throughout a single area only. This LSA contains the list of routers connected to the network. • Network Summary LSA—Type-3 LSA, originated by Area Border Routers (ABRs), and flooded throughout the LSA's associated area.
Page 79
Backbone area and virtual links Each AS has a backbone area that distributes routing information between non-backbone areas. Routing information between non-backbone areas must be forwarded by the backbone area. OSPF has the following requirements: • All non-backbone areas must maintain connectivity to the backbone area. •...
routes. It advertises a default route in a Type-3 LSA so that the routers in the area can reach external networks through the default route. NSSA area and totally NSSA area An NSSA area does not import AS external LSAs (Type-5 LSAs) but can import Type-7 LSAs generated by the NSSA ASBR.
• Each router transforms the LSDB to a weighted directed graph that shows the topology of the area. All the routers within the area have the same graph. • Each router uses the SPF algorithm to compute a shortest path tree that shows the routes to the nodes in the area.
Figure 22 DR and BDR in a network DR other DR other DR other Physical links Adjacencies NOTE: In OSPF, neighbor and adjacency are different concepts. After startup, OSPF sends a hello packet on each OSPF interface. A receiving router checks parameters in the packet. If the parameters match its own, the receiving router considers the sending router an OSPF neighbor.
Page 84
Tasks at a glance (Required.) Enabling OSPF (Optional.) Configuring OSPF areas: • Configuring a stub area • Configuring an NSSA area • Configuring a virtual link (Optional.) Configuring OSPF network types: • Configuring the broadcast network type for an interface •...
You can specify a global router ID, or specify a router ID when you create an OSPF process. • If you specify a router ID when you create an OSPF process, any two routers in an AS must have different router IDs. A common practice is to specify the IP address of an interface as the router ID.
Step Command Remarks interface interface-type Enter interface view. interface-number By default, OSPF is disabled on an interface. If the specified OSPF process and area do Enable an OSPF process ospf process-id area not exist, the command creates the OSPF on the interface. area-id [ exclude-subip ] process and area.
Configuring an NSSA area A stub area cannot import external routes, but an NSSA area can import external routes into the OSPF routing domain while retaining other stub area characteristics. Do not configure the backbone area as an NSSA area or totally NSSA area. To configure an NSSA area, configure the nssa command on all the routers attached to the area.
Configuring OSPF network types OSPF classifies networks into four types, including broadcast, NBMA, P2MP, and P2P. The default network type of an interface on the device is broadcast. When you change the network type of an interface, follow these guidelines: •...
Step Command Remarks The default setting is 1. (Optional.) Set a router ospf dr-priority priority The router priority configured with this priority for the interface. command is for DR election. Return to system view. quit ospf [ process-id | router-id Enter OSPF view.
Configuring the P2P network type for an interface Step Command Remarks Enter system view. system-view interface interface-type Enter interface view. interface-number Configure the OSPF ospf network-type p2p By default, the network type of an network type for the [ peer-address-check ] interface is broadcast.
Configuring route summarization on an ASBR Perform this task to enable an ASBR to summarize external routes within the specified address range into a single route. The ASBR advertises only the summary route to reduce the number of LSAs in the LSDB. An ASBR can summarize routes in the following LSAs: •...
To configure Type-3 LSA filtering: Step Command Remarks Enter system view. system-view ospf [ process-id | router-id router-id Enter OSPF view. | vpn-instance vpn-instance-name ] Enter area view. area area-id filter { ipv4-acl-number | prefix-list Configure Type-3 LSA prefix-list-name | route-policy By default, the ABR does not filtering.
Setting the maximum number of ECMP routes Perform this task to implement load sharing over ECMP routes. To set the maximum number of ECMP routes: Step Command Remarks Enter system view. system-view ospf [ process-id | router-id router-id Enter OSPF view. | vpn-instance vpn-instance-name ] By default, the maximum number of ECMP routes...
Configuring OSPF route redistribution On a router running OSPF and other routing protocols, you can configure OSPF to redistribute static routes, direct routes, or routes from other protocols, such as RIP, IS-IS, and BGP. OSPF advertises the routes in Type-5 LSAs or Type-7 LSAs. In addition, you can configure OSPF to filter redistributed routes so that OSPF advertises only permitted routes.
Step Command Remarks Enter system view. system-view ospf [ process-id | router-id router-id | Enter OSPF view. vpn-instance vpn-instance-name ] * Configure the default parameters for default { cost cost-value | tag tag | type By default, the cost is 1, the tag redistributed routes type } * is 1, and the type is Type-2.
• Enable OSPF. Setting OSPF timers An OSPF interface includes the following timers: • Hello timer—Interval for sending hello packets. It must be identical on OSPF neighbors. • Poll timer—Interval for sending hello packets to a neighbor that is down on the NBMA network. •...
Setting LSA transmission delay To avoid LSAs from aging out during transmission, set an LSA retransmission delay especially for low speed links. To set the LSA transmission delay on an interface: Step Command Remarks Enter system view. system-view interface interface-type Enter interface view.
Step Command Remarks The default setting is 1000 milliseconds. Make sure this interval is smaller Set the LSA arrival interval. lsa-arrival-interval interval than or equal to the interval set with the lsa-generation-interval command. Setting the LSA generation interval Adjust the LSA generation interval to protect network resources and routers from being overwhelmed by LSAs at the time of frequent network changes.
Step Command Remarks By default, an OSPF interface can receive and send OSPF packets. The silent-interface command disables only the interfaces Disable interfaces from silent-interface { interface-type associated with the current receiving and sending interface-number | all } process rather than other OSPF packets.
Setting a DSCP value for OSPF packets Step Command Remarks Enter system view. system-view ospf [ process-id | router-id router-id | Enter OSPF view. vpn-instance vpn-instance-name ] * By default, the DSCP Set a DSCP value for OSPF dscp dscp-value value for OSPF packets packets.
If RFC 2328 is not compatible with RFC 1583, the intra-area route in a non-backbone area is preferred to reduce the burden of the backbone area. The inter-area route and intra-area route in the backbone area have equal preference. Selects the route with the lower cost if two routes have equal preference.
Step Command Remarks By default, OSPF MIB is Bind OSPF MIB to an ospf mib-binding process-id bound to the process with the OSPF process. smallest process ID. snmp-agent trap enable ospf [ authentication-failure | bad-packet | config-error | grhelper-status-change | grrestarter-status-change | if-state-change | lsa-maxage | lsa-originate | lsdb-approaching-overflow |...
Step Command Remarks ospf [ process-id | router-id router-id | Enter OSPF view. vpn-instance vpn-instance-name ] * (Optional.) Set the LSU transmit By default, an OSPF interface interval and the sends a maximum of three maximum number transmit-pacing interval interval count count LSU packets every 20 of LSUs that can be milliseconds.
Step Command Remarks Enter system view. system-view ospf [ process-id | router-id router-id | Enter OSPF view. vpn-instance vpn-instance-name ] * Enable prefix By default, prefix suppression suppression for the prefix-suppression is disabled for an OSPF OSPF process. process. Configuring prefix suppression for an interface Interface prefix suppression does not suppress prefixes of secondary IP addresses.
Step Command Remarks ospf [ process-id | router-id router-id | Enter OSPF view. vpn-instance vpn-instance-name ] * Enable PIC for By default, OSPF PIC is pic [ additional-path-always ] OSPF. enabled. Configuring BFD for OSPF PIC By default, OSPF PIC does not use BFD to detect primary link failures. To speed up OSPF convergence, enable BFD for OSPF PIC to detect the primary link failures.
Step Command Remarks By default, the number of OSPF logs is Set the number of event-log { lsa-flush | peer | spf } 10 for each type, including LSA aging OSPF logs. size count logs, route calculation logs, and neighbor logs. Filtering outbound LSAs on an interface To reduce the LSDB size for the neighbor and save bandwidth, you can perform this task on an interface to filter LSAs to be sent to the neighbor.
You can configure GTSM in OSPF area view or interface view. • The configuration in OSPF area view applies to all OSPF interfaces in the area. • The configuration in interface view takes precedence over OSPF area view. IMPORTANT: To use GTSM, you must configure GTSM on both the local and peer devices. You can specify different hop-count values for them.
IMPORTANT: You cannot enable OSPF NSR on a device that acts as GR restarter. Configuring the IETF OSPF GR restarter Step Command Remarks Enter system view. system-view ospf [ process-id | router-id Enable OSPF and enter its router-id | vpn-instance view.
Step Command Remarks (Optional.) Enable GR helper graceful-restart helper enable By default, GR helper capability is capability. [ planned-only ] enabled. (Optional.) Enable strict LSA graceful-restart helper By default, strict LSA checking for checking for the GR helper. strict-lsa-checking the GR helper is disabled. Configuring the non-IETF OSPF GR helper Step Command...
Step Command Remarks ospf [ process-id | router-id router-id Enter OSPF view. | vpn-instance vpn-instance-name ] By default, OSPF NSR is disabled. This command takes effect only for the Enable OSPF NSR. non-stop-routing current process. As a best practice, enable OSPF NSR for each process if multiple OSPF processes exist.
Configuring OSPF FRR A link or router failure on a path can cause packet loss and even routing loop until OSPF completes routing convergence based on the new network topology. FRR enables fast rerouting to minimize the impact of link or node failures. Figure 23 Network diagram for OSPF FRR Backup nexthop: Router C Router A...
Page 114
Step Command Remarks By default, OSPF FRR is disabled. Enable OSPF FRR to If abr-only is specified, the route to calculate a backup next hop fast-reroute lfa [ abr-only ] the ABR is selected as the backup by using the LFA algorithm. path.
Step Command Remarks Enable BFD echo By default, BFD echo packet mode for packet mode for ospf primary-path-detect bfd echo OSPF FRR is disabled. OSPF FRR. Advertising OSPF link state information to BGP After the device advertises OSPF link state information to BGP, BGP can advertise the information for intended applications.
Page 117
Figure 24 Network diagram Area 0 Switch A Switch B Vlan-int100 10.1.1.1/24 Vlan-int100 Vlan-int200 10.1.1.2/24 Vlan-int200 10.3.1.1/24 10.2.1.1/24 Vlan-int200 Area 1 Area 2 Vlan-int200 10.3.1.2/24 10.2.1.2/24 Vlan-int300 Vlan-int300 10.4.1.1/24 10.5.1.1/24 Switch C Switch D Configuration procedure Configure IP addresses for interfaces. (Details not shown.) Enable OSPF: # Configure Switch A.
Page 118
<SwitchD> system-view [SwitchD] router id 10.5.1.1 [SwitchD] ospf [SwitchD-ospf-1] area 2 [SwitchD-ospf-1-area-0.0.0.2] network 10.3.1.0 0.0.0.255 [SwitchD-ospf-1-area-0.0.0.2] network 10.5.1.0 0.0.0.255 [SwitchD-ospf-1-area-0.0.0.2] quit [SwitchD-ospf-1] quit Verifying the configuration # Display information about neighbors on Switch A. [SwitchA] display ospf peer verbose OSPF Process 1 with Router ID 10.2.1.1 Neighbors Area 0.0.0.0 interface 10.1.1.1(Vlan-interface100)'s neighbors Router ID: 10.3.1.1...
10.1.1.0/24 Transit 10.1.1.1 10.2.1.1 0.0.0.0 Total nets: 5 Intra area: 3 Inter area: 2 ASE: 0 NSSA: 0 # Display OSPF routing information on Switch D. [SwitchD] display ospf routing OSPF Process 1 with Router ID 10.5.1.1 Routing Table Topology base (MTID 0) Routing for network Destination Cost...
Page 120
Figure 25 Network diagram Switch A Area 0 Switch B Vlan-int100 10.1.1.1/24 Vlan-int100 10.1.1.2/24 Vlan-int200 Vlan-int200 10.3.1.1/24 10.2.1.1/24 Vlan-int200 Vlan-int200 Area 1 Area 2 10.3.1.2/24 10.2.1.2/24 Vlan-int300 Vlan-int500 10.4.1.1/24 10.5.1.1/24 Switch C Switch D Configuration procedure Configure IP addresses for interfaces. (Details not shown.) Enable OSPF (see "Basic OSPF configuration example").
10.4.1.0/24 Inter 10.3.1.1 10.3.1.1 0.0.0.2 10.5.1.0/24 Stub 10.5.1.1 10.5.1.1 0.0.0.2 10.1.1.0/24 Inter 10.3.1.1 10.3.1.1 0.0.0.2 Routing for ASEs Destination Cost Type NextHop AdvRouter 3.1.2.0/24 Type2 10.3.1.1 10.4.1.1 Total nets: 6 Intra area: 2 Inter area: 3 ASE: 1 NSSA: 0 OSPF route summarization configuration example Network requirements As shown in...
Page 122
[SwitchA-ospf-1-area-0.0.0.0] network 11.2.1.0 0.0.0.255 [SwitchA-ospf-1-area-0.0.0.0] quit [SwitchA-ospf-1] quit # Configure Switch B. <SwitchB> system-view [SwitchB] router id 11.2.1.1 [SwitchB] ospf [SwitchB-ospf-1] area 0 [SwitchB-ospf-1-area-0.0.0.0] network 11.2.1.0 0.0.0.255 [SwitchB-ospf-1-area-0.0.0.0] quit [SwitchB-ospf-1] quit # Configure Switch C. <SwitchC> system-view [SwitchC] router id 11.1.1.2 [SwitchC] ospf [SwitchC-ospf-1] area 0 [SwitchC-ospf-1-area-0.0.0.0] network 10.1.1.0 0.0.0.255...
Page 123
[SwitchC] bgp 100 [SwitchC-bgp] peer 11.1.1.1 as 200 [SwitchC-bgp] address-family ipv4 unicast [SwitchC-bgp-ipv4] import-route ospf [SwitchC-bgp-ipv4]import-route direct [SwitchC-bgp-ipv4] quit [SwitchC-bgp] quit Configure Switch B and Switch C to redistribute BGP routes into OSPF: # Configure OSPF to redistribute routes from BGP on Switch B. [SwitchB] ospf [SwitchB-ospf-1] import-route bgp # Configure OSPF to redistribute routes from BGP on Switch C.
11.2.1.0/24 Direct 0 11.2.1.2 Vlan100 11.2.1.0/32 Direct 0 11.2.1.2 Vlan100 11.2.1.2/32 Direct 0 127.0.0.1 InLoop0 11.2.1.255/32 Direct 0 11.2.1.2 Vlan100 127.0.0.0/8 Direct 0 127.0.0.1 InLoop0 127.0.0.0/32 Direct 0 127.0.0.1 InLoop0 127.0.0.1/32 Direct 0 127.0.0.1 InLoop0 127.255.255.255/32 Direct 0 127.0.0.1 InLoop0 224.0.0.0/4 Direct 0 0.0.0.0...
Page 125
OSPF Process 1 with Router ID 10.4.1.1 Routing Table to ABR and ASBR Topology base (MTID 0) Type Destination Area Cost Nexthop RtType Intra 10.2.1.1 0.0.0.1 10.2.1.1 Inter 10.5.1.1 0.0.0.1 10.2.1.1 ASBR # Display OSPF routing table on Switch C. <SwitchC>...
[SwitchC] display ospf routing OSPF Process 1 with Router ID 10.4.1.1 Routing Table Topology base (MTID 0) Routing for network Destination Cost Type NextHop AdvRouter Area 0.0.0.0/0 Inter 10.2.1.1 10.2.1.1 0.0.0.1 10.2.1.0/24 Transit 0.0.0.0 10.2.1.1 0.0.0.1 10.3.1.0/24 Inter 10.2.1.1 10.2.1.1 0.0.0.1 10.4.1.0/24 Stub...
Page 127
• Configure OSPF on all switches and split AS into three areas. • Configure Switch A and Switch B as ABRs to forward routing information between areas. • Configure Area 1 as an NSSA area and configure Switch C as an ASBR to redistribute static routes into the AS.
10.5.1.0/24 Inter 10.2.1.1 10.2.1.1 0.0.0.1 10.1.1.0/24 Inter 10.2.1.1 10.2.1.1 0.0.0.1 Total nets: 5 Intra area: 2 Inter area: 3 ASE: 0 NSSA: 0 Configure route redistribution: # Configure Switch C to redistribute static routes. [SwitchC] ip route-static 3.1.3.1 24 10.4.1.2 [SwitchC] ospf [SwitchC-ospf-1] import-route static [SwitchC-ospf-1] quit...
Page 129
Figure 29 Network diagram Switch A Switch B Vlan-int1 Vlan-int1 192.168.1.1/24 192.168.1.2/24 Vlan-int1 Vlan-int1 192.168.1.4/24 192.168.1.3/24 Switch D Switch C Configuration procedure Configure IP addresses for interfaces. (Details not shown.) Enable OSPF: # Configure Switch A. <SwitchA> system-view [SwitchA] router id 1.1.1.1 [SwitchA] ospf [SwitchA-ospf-1] area 0 [SwitchA-ospf-1-area-0.0.0.0] network 192.168.1.0 0.0.0.255...
Page 130
# Display OSPF neighbor information on Switch A. [SwitchA] display ospf peer verbose OSPF Process 1 with Router ID 1.1.1.1 Neighbors Area 0.0.0.0 interface 192.168.1.1(Vlan-interface1)'s neighbors Router ID: 2.2.2.2 Address: 192.168.1.2 GR State: Normal State: 2-Way Mode: None Priority: 1 DR: 192.168.1.4 BDR: 192.168.1.3 MTU: 0...
Page 131
[SwitchC-Vlan-interface1] ospf dr-priority 2 [SwitchC-Vlan-interface1] quit # Display neighbor information on Switch D. <SwitchD> display ospf peer verbose OSPF Process 1 with Router ID 4.4.4.4 Neighbors Area 0.0.0.0 interface 192.168.1.4(Vlan-interface1)'s neighbors Router ID: 1.1.1.1 Address: 192.168.1.1 GR State: Normal State: Full Mode:Nbr is slave Priority: 100...
Page 132
Neighbors Area 0.0.0.0 interface 192.168.1.4(Vlan-interface1)'s neighbors Router ID: 1.1.1.1 Address: 192.168.1.1 GR State: Normal State: Full Mode: Nbr is slave Priority: 100 DR: 192.168.1.1 BDR: 192.168.1.3 MTU: 0 Options is 0x02 (-|-|-|-|-|-|E|-) Dead timer due in 39 Neighbor is up for 00:01:40 Authentication Sequence: [ 0 ] Neighbor state change count: 6 BFD status: Disabled...
OSPF Process 1 with Router ID 2.2.2.2 Interfaces Area: 0.0.0.0 IP Address Type State Cost 192.168.1.2 Broadcast DROther 192.168.1.1 192.168.1.3 The interface state DROther means the interface is not the DR or BDR. OSPF virtual link configuration example Network requirements As shown in Figure 30, configure a virtual link between Switch B and Switch C to connect Area 2 to...
Page 134
[SwitchC-ospf-1] area 1 [SwitchC-ospf-1-area-0.0.0.1] network 10.2.1.0 0.0.0.255 [SwitchC-ospf-1-area-0.0.0.1] quit [SwitchC-ospf-1] area 2 [SwitchC–ospf-1-area-0.0.0.2] network 10.3.1.0 0.0.0.255 [SwitchC–ospf-1-area-0.0.0.2] quit [SwitchC-ospf-1] quit # Configure Switch D. <SwitchD> system-view [SwitchD] ospf 1 router-id 4.4.4.4 [SwitchD-ospf-1] area 2 [SwitchD-ospf-1-area-0.0.0.2] network 10.3.1.0 0.0.0.255 [SwitchD-ospf-1-area-0.0.0.2] quit [SwitchD-ospf-1] quit # Display the OSPF routing table on Switch B.
Topology base (MTID 0) Routing for network Destination Cost Type NextHop AdvRouter Area 10.2.1.0/24 Transit 10.2.1.1 3.3.3.3 0.0.0.1 10.3.1.0/24 Inter 10.2.1.2 3.3.3.3 0.0.0.0 10.1.1.0/24 Transit 10.1.1.2 2.2.2.2 0.0.0.0 Total nets: 3 Intra area: 2 Inter area: 1 ASE: 0 NSSA: 0 The output shows that Switch B has learned the route 10.3.1.0/24 to Area 2.
Page 136
[SwitchB] ospf 100 [SwitchB-ospf-100] area 0 [SwitchB-ospf-100-area-0.0.0.0] network 192.1.1.0 0.0.0.255 [SwitchB-ospf-100-area-0.0.0.0] quit [SwitchB-ospf-1] quit # Configure Switch C. <SwitchC> system-view [SwitchC] router id 3.3.3.3 [SwitchC] ospf 100 [SwitchC-ospf-100] area 0 [SwitchC-ospf-100-area-0.0.0.0] network 192.1.1.0 0.0.0.255 [SwitchC-ospf-100-area-0.0.0.0] quit [SwitchC-ospf-1] quit Configure OSPF GR: # Configure Switch A as the non-IETF OSPF GR restarter: enable the link-local signaling capability, the out-of-band re-synchronization capability, and non-IETF GR capability for OSPF process 100.
Page 138
[SwitchS-ospf-100] quit Verifying the configuration # Perform an active/standby switchover on Switch S. [SwitchS] placement reoptimize Predicted changes to the placement Program Current location New location --------------------------------------------------------------------- slsp rib6 routepolicy staticroute6 staticroute eviisis ospf Continue? [y/n]:y Re-optimization of the placement start. You will be notified on completion Re-optimization of the placement complete.
Intra area: 4 Inter area: 0 ASE: 0 NSSA: 0 # Display OSPF neighbors on Switch B to verify the neighbor relationship between Switch B and Switch S. <SwitchB> display ospf peer OSPF Process 1 with Router ID 4.4.4.1 Neighbor Brief Information Area: 0.0.0.0 Router ID Address...
Page 140
Figure 33 Network diagram Switch A Switch B Vlan-int10 Vlan-int10 Loop0 Loop0 Vlan-int11 Vlan-int13 L2 Switch Area 0 Vlan-int11 Vlan-int13 Switch C Table 9 Interface and IP address assignment Device Interface IP address Switch A Vlan-int10 192.168.0.102/24 Switch A Vlan-int11 10.1.1.102/24 Switch A Loop0...
Page 141
# Configure Switch C. <SwitchC> system-view [SwitchC] ospf [SwitchC-ospf-1] area 0 [SwitchC-ospf-1-area-0.0.0.0] network 10.1.1.0 0.0.0.255 [SwitchC-ospf-1-area-0.0.0.0] network 13.1.1.0 0.0.0.255 [SwitchC-ospf-1-area-0.0.0.0] quit [SwitchC-ospf-1] quit Configure BFD: # Enable BFD on Switch A and configure BFD parameters. [SwitchA] bfd session init-mode active [SwitchA] interface vlan-interface 10 [SwitchA-Vlan-interface10] ospf bfd enable [SwitchA-Vlan-interface10] bfd min-transmit-interval 500...
OrigTblID: 0x0 OrigVrf: default-vrf TableID: 0x2 OrigAs: 0 NibID: 0x26000002 LastAs: 0 AttrID: 0xffffffff Neighbor: 0.0.0.0 Flags: 0x1008c OrigNextHop: 192.168.0.100 Label: NULL RealNextHop: 192.168.0.100 BkLabel: NULL BkNextHop: N/A Tunnel ID: Invalid Interface: Vlan-interface10 BkTunnel ID: Invalid BkInterface: N/A FtnIndex: 0x0 TrafficIndex: N/A Connector: N/A The output shows that Switch A communicates with Switch B through VLAN-interface 10.
Page 143
Figure 34 Network diagram Switch C Link B Link A Loop0 Loop0 Vlan-int200 Vlan-int200 Switch A Switch B Table 10 Interface and IP address assignment Device Interface IP address Switch A Vlan-int100 12.12.12.1/24 Switch A Vlan-int200 13.13.13.1/24 Switch A Loop0 1.1.1.1/32 Switch B Vlan-int101...
Page 146
Analysis The backbone area must maintain connectivity to all other areas. If a router connects to more than one area, a minimum of one area must be connected to the backbone. The backbone cannot be configured as a stub area. In a stub area, all routers cannot receive external routes, and all interfaces connected to the stub area must belong to the stub area.
Configuring IS-IS Overview Intermediate System-to-Intermediate System (IS-IS) is a dynamic routing protocol designed by the ISO to operate on the connectionless network protocol (CLNP). IS-IS was modified and extended in RFC 1195 by the IETF for application in both TCP/IP and OSI reference models, called "Integrated IS-IS"...
Figure 35 NSAP address format HO-DSP System ID (6 octet) SEL (1 octet) Area address Area address The area address comprises the IDP and the HO-DSP of the DSP, which identify the area and the routing domain. Different routing domains cannot have the same area address. Typically, a router only needs one area address, and all nodes in the same area must have the same area address.
Typically, a router only needs one NET, but it can have a maximum of three NETs for smooth area merging and partitioning. When you configure multiple NETs, make sure the system IDs are the same. IS-IS area IS-IS has a 2-level hierarchy to support large-scale networks. A large-scale routing domain is divided into multiple areas.
backbone in this topology. The backbone comprises all contiguous Level-2 and Level-1-2 routers in different areas. The IS-IS backbone does not need to be a specific area. Figure 37 IS-IS topology 2 Area 1 Area 4 Area 2 L1/L2 L1/L2 Area 3 Both the Level-1 and Level-2 routers use the SPF algorithm to generate the shortest path tree.
Figure 38 DIS in the IS-IS broadcast network L1/L2 L1/L2 L2 adjacencies L1 adjacencies The DIS creates and updates pseudonodes, and generates LSPs for the pseudonodes, to describe all routers on the network. A pseudonode represents a virtual node on the broadcast network. It is not a real router. In IS-IS, it is identified by the system ID of the DIS and a 1-byte Circuit ID (a non-zero value).
Page 152
Hello PDU IS-to-IS hello (IIH) PDUs are used by routers to establish and maintain neighbor relationships. On broadcast networks, Level-1 routers use Level-1 LAN IIHs, and Level-2 routers use Level-2 LAN IIHs. The P2P IIHs are used on point-to-point networks. The LSPs carry link state information.
Tasks at a glance (Optional.) Configuring IS-IS route control: • Configuring IS-IS link cost • Specifying a preference for IS-IS • Configuring the maximum number of ECMP routes • Configuring IS-IS route summarization • Advertising a default route • Configuring IS-IS route redistribution •...
Enabling IS-IS Step Command Remarks Enter system view. system-view isis [ process-id ] Enable IS-IS and enter IS-IS [ vpn-instance By default, IS-IS is disabled. view. vpn-instance-name ] Assign a NET. network-entity net By default, NET is not assigned. Return to system view. quit interface interface-type Enter interface view.
If only two routers exist on a broadcast network, set the network type of attached interfaces to P2P. This avoids DIS election and CSNP flooding, saving network bandwidth and speeding up network convergence. To configure P2P network type for an interface: Step Command Remarks...
Step Command Remarks By default, no route is redistributed. import-route protocol [ as-number ] By default, if no level is [ process-id | all-processes | specified, this command Redistribute routes from allow-ibgp ] [ allow-direct | cost redistributes routes into the other routing protocols or cost-value | cost-type { external | Level-2 routing table.
Tuning and optimizing IS-IS networks Configuration prerequisites Before you tune and optimize IS-IS networks, complete the following tasks: • Configure IP addresses for interfaces to ensure IP connectivity between neighboring nodes. • Enable IS-IS. Specifying the interval for sending IS-IS hello packets If a neighbor does not receive any hello packets from the router within the advertised hold time, it considers the router down and recalculates the routes.
Specifying the interval for sending IS-IS CSNP packets On a broadcast network, perform this task on the DIS that uses CSNP packets to synchronize LSDBs. To specify the interval for sending IS-IS CSNP packets: Step Command Remarks Enter system view. system-view interface interface-type Enter interface view.
Enabling an interface to send small hello packets IS-IS messages cannot be fragmented at the IP layer because they are directly encapsulated in frames. Any two IS-IS neighboring routers must negotiate a common MTU. To avoid sending big hellos to save bandwidth, enable the interface to send small hello packets without CLVs. To enable an interface to send small hello packets: Step Command...
Page 165
Step Command Remarks Specify the LSP refresh By default, the LSP refresh timer lsp-refresh seconds interval. interval is 900 seconds. By default: • The maximum interval timer lsp-generation is 5 seconds. maximum-interval Specify the LSP generation • The minimum interval [ minimum-interval interval.
Page 166
Step Command Remarks By default, the maximum Specify the maximum length lsp-length receive size length of received LSPs is of received LSPs. 1497 bytes. Enabling LSP flash flooding Changed LSPs can trigger SPF recalculation. To advertise the changed LSPs before the router recalculates routes for faster network convergence, enable LSP flash flooding.
Figure 41 Network diagram of a fully meshed network Router D Router A GE1/0/1 GE1/0/3 GE1/0/2 GE1/0/2 GE1/0/3 GE1/0/1 GE1/0/1 GE1/0/1 GE1/0/2 GE1/0/2 GE1/0/3 GE1/0/3 Router B Router C To avoid this problem, you can add interfaces to a mesh group or block some interfaces. •...
Step Command Remarks By default: • The maximum interval is 5 seconds. timer spf maximum-interval Configure the SPF • [ minimum-interval The minimum interval is calculation interval. [ incremental-interval ] ] 50 milliseconds. • The incremental interval is 200 milliseconds. Configuring convergence priorities for specific routes A topology change causes IS-IS routing convergence.
Step Command Remarks set-overload [ on-startup [ [ start-from-nbr system-id [ timeout1 By default, the overload bit is Set the overload bit. [ nbr-timeout ] ] ] | timeout2 | not set. wait-for-bgp [ timeout3 ] ] ] [ allow { external | interlevel } * ] Configuring the ATT bit A Level-1-2 router sends Level-1 LSPs with an ATT bit to inform the Level-1 routers that it can reach...
Configuring system ID to host name mappings A 6-byte system ID in hexadecimal notation uniquely identifies a router or host in an IS-IS network. To make a system ID easy to read, the system allows you to use host names to identify devices. It also provides mappings between system IDs and host names.
Step Command Remarks By default, no DIS name is configured. This command takes effect only on Configure a DIS name. isis dis-name symbolic-name a router enabled with dynamic system ID to host name mapping. This command is not available on P2P interfaces.
Step Command Remarks interface interface-type Enter interface view. interface-number By default, prefix suppression is disabled on the interface. Enable prefix suppression isis prefix-suppression This command is also on the interface. applicable to the secondary IP address of the interface. Configuring IS-IS network management This task includes the following configurations: •...
When both IS-IS PIC and IS-IS FRR are configured, IS-IS FRR takes effect. IS-IS PIC applies only to LSPs sent by neighbors. Enabling IS-IS PIC Step Command Remarks Enter system view. system-view isis [ process-id ] [ vpn-instance Enter IS-IS view. vpn-instance-name ] By default, IS-IS PIC is Enable PIC for IS-IS.
Configuration prerequisites Before the configuration, complete the following tasks: • Configure IP addresses for interfaces to ensure IP connectivity between neighboring nodes. • Enable IS-IS. Configuring neighbor relationship authentication With neighbor relationship authentication configured, an interface adds the key in the specified mode into hello packets to the peer and checks the key in the received hello packets.
Configure IS-IS GR on the GR restarter. GR restarter uses the following timers: • T1 timer—Specifies the times that GR restarter can send a Restart TLV with the RR bit set. When rebooted, the GR restarter sends a Restart TLV with the RR bit set to its neighbor. If the GR restarter receives a Restart TLV with the RA set from its neighbor before the T1 timer expires, the GR process starts.
IMPORTANT: IS-IS NSR and IS-IS GR are mutually exclusive. Do not configure them at the same time. To configure IS-IS NSR: Step Command Remarks Enter system view. system-view isis [ process-id ] Enter IS-IS view. [ vpn-instance vpn-instance-name ] By default, IS-IS NSR is disabled. IS-IS NSR takes effect on a Enable IS-IS NSR.
hop to reduce traffic recovery time. Meanwhile, IS-IS calculates the shortest path based on the new network topology, and forwards packets over the path after network convergence. You can assign a backup next hop for IS-IS FRR through the following ways: •...
Page 179
Step Command Remarks Enter system view. system-view interface interface-type Enter interface view. interface-number By default, the interface (Optional.) Disable LFA isis fast-reroute lfa-backup participates in LFA calculation, calculation on the interface. exclude and can be elected as a backup interface. Return to system view.
Displaying and maintaining IS-IS Execute display commands in any view and the reset command in user view. Task Command Display IS-IS process information. display isis [ process-id ] (In standalone mode.) Display IS-IS display isis graceful-restart event-log slot slot-number GR log information. display isis graceful-restart event-log chassis chassis-number (In IRF mode.) Display IS-IS GR log information.
IPv4 Destination IntCost ExtCost ExitInterface NextHop Flags ------------------------------------------------------------------------------- 192.168.0.0/24 NULL Vlan300 Direct D/L/- 10.1.1.0/24 NULL Vlan100 Direct D/L/- 10.1.2.0/24 NULL Vlan200 Direct D/L/- Flags: D-Direct, R-Added to Rib, L-Advertised in LSPs, U-Up/Down Bit Set Level-2 IPv4 Forwarding Table ----------------------------- IPv4 Destination IntCost ExtCost ExitInterface NextHop...
Page 186
Figure 44 Network diagram Switch A Switch B L1/L2 L1/L2 Vlan-int100 Vlan-int100 10.1.1.1/24 10.1.1.2/24 Vlan-int100 Vlan-int100 10.1.1.3/24 10.1.1.4/24 Switch C Switch D Configuration procedure Configure IP addresses for interfaces. (Details not shown.) Enable IS-IS: # Configure Switch A. <SwitchA> system-view [SwitchA] isis 1 [SwitchA-isis-1] network-entity 10.0000.0000.0001.00 [SwitchA-isis-1] quit...
Page 187
[SwitchD-isis-1] quit [SwitchD] interface vlan-interface 100 [SwitchD-Vlan-interface100] isis enable 1 [SwitchD-Vlan-interface100] quit # Display information about IS-IS neighbors on Switch A. [SwitchA] display isis peer Peer information for IS-IS(1) ---------------------------- System Id: 0000.0000.0002 Interface: Vlan-interface100 Circuit Id: 0000.0000.0003.01 State: Up HoldTime: 21s Type: L1(L1L2) PRI: 64...
Page 188
Interface: Vlan-interface100 Index IPv4.State IPv6.State CircuitID Type 00001 Down 1497 L1/L2 No/Yes The output shows that when the default DIS priority is used, Switch C is the DIS for Level-1, and Switch D is the DIS for Level-2. The pseudonodes of Level-1 and Level-2 are 0000.0000.0003.01 and 0000.0000.0004.01.
----------------------------- IPv4 Destination IntCost ExtCost ExitInterface NextHop Flags ------------------------------------------------------------------------------- 10.1.1.0/24 NULL VLAN100 Direct D/L/- 10.1.2.0/24 NULL VLAN200 Direct D/L/- 192.168.0.0/24 NULL VLAN300 Direct D/L/- Flags: D-Direct, R-Added to Rib, L-Advertised in LSPs, U-Up/Down Bit Set Level-2 IPv4 Forwarding Table ----------------------------- IPv4 Destination IntCost ExtCost ExitInterface...
Page 194
Figure 46 Network diagram Switch A Vlan-int100 10.1.1.2/24 Vlan-int100 Vlan-int300 10.1.1.1/24 10.1.3.1/24 Vlan-int300 Vlan-int200 10.1.3.2/24 Switch C 10.1.2.1/24 Switch D L1/L2 Vlan-int200 10.1.2.2/24 Area 20 Switch B Area 10 Configuration procedure Configure IP addresses for interfaces. (Details not shown.) Configure basic IS-IS: # Configure Switch A.
Page 195
# Configure Switch D. <SwitchD> system-view [SwitchD] isis 1 [SwitchD-isis-1] network-entity 20.0000.0000.0001.00 [SwitchD-isis-1] quit [SwitchD] interface vlan-interface 300 [SwitchD-Vlan-interface300] isis enable 1 [SwitchD-Vlan-interface300] quit Configure neighbor relationship authentication between neighbors: # Set the authentication mode to MD5 and set the plaintext key to eRq on VLAN-interface 100 of Switch A and on VLAN-interface 100 of Switch C.
[SwitchD] isis 1 [SwitchD-isis-1] domain-authentication-mode md5 plain 1020Sec IS-IS GR configuration example Network requirements As shown in Figure 47, Switch A, Switch B, and Switch C belong to the same IS-IS routing domain. Figure 47 Network diagram GR restarter Switch A Vlan-int100 10.0.0.1/24 Vlan-int100...
Level-2 restart information --------------------------- Total number of interfaces: 1 Number of waiting LSPs: 0 IS-IS NSR configuration example Network requirements As shown in Figure 48, Switch S, Switch A, and Switch B belong to the same IS-IS routing domain. • Run IS-IS on all the switches to interconnect them with each other.
Page 198
track ip6addr ipaddr trange tunnel lagg slsp usr6 fczone ethbase ipcim ip6base ipbase eviisis ifnet isis Continue? [y/n]:y Re-optimization of the placement start. You will be notified on completion Re-optimization of the placement complete. Use 'display placement' to view the new placement # During the switchover period, display IS-IS neighbor information on Switch A to verify the neighborship between Switch A and Switch S.
Page 199
----------------------------- IPv4 Destination IntCost ExtCost ExitInterface NextHop Flags ------------------------------------------------------------------------------- 12.12.12.0/24 NULL vlan100 Direct D/L/- 22.22.22.22/32 NULL Loop0 Direct D/-/- 14.14.14.0/32 NULL vlan100 12.12.12.2 R/L/- 44.44.44.44/32 NULL vlan100 12.12.12.2 R/L/- Flags: D-Direct, R-Added to Rib, L-Advertised in LSPs, U-Up/Down Bit Set Level-2 IPv4 Forwarding Table ----------------------------- IPv4 Destination...
FtnIndex: 0x0 TrafficIndex: N/A Connector: N/A The output shows that Switch A and Switch B communicate through VLAN-interface 10. Then the link over VLAN-interface 10 fails. # Display routes destined for 120.1.1.1/32 on Switch A. <SwitchA> display ip routing-table 120.1.1.1 verbose Summary Count : 1 Destination: 120.1.1.1/32 Protocol: IS_L1...
Page 204
Table 15 Interface and IP address assignment Device Interface IP address Device Interface IP address Switch A Vlan-int100 12.12.12.1/24 Switch B Vlan-int101 24.24.24.4/24 Vlan-int200 13.13.13.1/24 Vlan-int200 13.13.13.2/24 Loop0 1.1.1.1/32 Loop0 4.4.4.4/32 Switch C Vlan-int100 12.12.12.2/24 Vlan-int101 24.24.24.2/24 Configuration procedure Configure IP addresses and subnet masks for interfaces on the switches. (Details not shown.) Configure IS-IS on the switches to make sure Switch A, Switch B, and Switch C can communicate with each other at Layer 3.
Configuring BGP Overview Border Gateway Protocol (BGP) is an exterior gateway protocol (EGP). It is called internal BGP (IBGP) when it runs within an AS and called external BGP (EBGP) when it runs between ASs. The current version in use is BGP-4 (RFC 4271). BGP has the following characteristics: •...
Page 208
The ORIGIN attribute specifies the origin of BGP routes. This attribute has the following types: IGP—Has the highest priority. Routes generated in the local AS have the IGP attribute. EGP—Has the second highest priority. Routes obtained through EGP have the EGP ...
Page 209
When a BGP speaker sends a received route to an EBGP peer, it sets the address of the sending interface as the NEXT_HOP. When a BGP speaker sends a route received from an EBGP peer to an IBGP peer, it does ...
Page 210
Generally BGP only compares MEDs of routes received from the same AS. You can also use the compare-different-as-med command to force BGP to compare MED values of routes received from different ASs. • LOCAL_PREF The LOCAL_PREF attribute is exchanged between IBGP peers only, and is not advertised to any other AS.
• Extended community attribute To meet new demands, BGP defines the extended community attribute. The extended community attribute has the following advantages over the COMMUNITY attribute: Provides more attribute values by extending the attribute length to eight bytes. Allows for using different types of extended community attributes in different scenarios to ...
• When multiple feasible routes to a destination exist, BGP advertises only the optimal route to its peers. If the advertise-rib-active command is configured, BGP advertises the optimal route in the IP routing table. If not, BGP advertises the optimal route in the BGP routing table. •...
Figure 55 Network diagram Router A Router D Router C AS 200 AS 100 9.0.0.0/24 Router B Router E Settlements for problems in large-scale BGP networks You can use the following methods to facilitate management and improve route distribution efficiency on a large-scale BGP network.
Page 214
Figure 56 BGP route dampening Penalty value Suppress threshold Reusable threshold Suppression time Time Half-life • Peer group You can organize BGP peers with the same attributes into a group to simplify their configurations. When a peer joins the peer group, the peer obtains the same configuration as the peer group. If the configuration of the peer group is changed, the configuration of group members is changed.
Page 215
The route reflector and clients form a cluster. Typically a cluster has one route reflector. The ID of the route reflector is the Cluster_ID. You can configure more than one route reflector in a cluster to improve availability, as shown in Figure 58.
A non-confederation BGP speaker does not need to know sub-ASs in the confederation. It considers the confederation as one AS, and the confederation ID as the AS number. In the above figure, AS 200 is the confederation ID. Confederation has a deficiency. When you change an AS into a confederation, you must reconfigure the routers, and the topology will be changed.
MP-BGP uses these two attributes to advertise feasible and unfeasible routes for different network layer protocols. BGP speakers not supporting MP-BGP ignore updates containing these attributes and do not forward them to its peers. Address family MP-BGP uses address families and subsequent address families to identify different network layer protocols for routes contained in the MP_REACH_NLRI and MP_UNREACH_NLRI attributes.
Page 218
View names Ways to enter the views Remarks <Sysname> system-view [Sysname] bgp 100 instance abc Configurations in this view apply to BGP IPv4 multicast address IPv4 multicast routes and peers of [Sysname-bgp-abc] family view the specified BGP instance. address-family ipv4 multicast [Sysname-bgp-abc-mul-ipv4] <Sysname>...
View names Ways to enter the views Remarks <Sysname> system-view [Sysname] bgp 100 instance abc Configurations in this view apply to [Sysname-bgp-abc] ip BGP-VPN IPv6 unicast IPv6 unicast routes and peers in the vpn-instance vpn1 address family view specified VPN instance of the [Sysname-bgp-abc-vpn1] specified BGP instance.
• RFC 5082, The Generalized TTL Security Mechanism (GTSM) • RFC 6037, Cisco Systems' Solution for Multicast in BGP MPLS IP VPNs BGP configuration task list On a basic BGP network, perform the following configuration tasks: • Enable BGP. • Configure BGP peers or peer groups.
Page 221
Tasks at a glance Remarks (Optional.) Tuning and optimizing BGP networks: • Configuring the keepalive interval and hold time • Setting the session retry timer • Configuring the interval for sending updates for the same route • Enabling BGP to establish an EBGP session over multiple hops •...
Page 222
Tasks at a glance Remarks Configuring basic BGP: • As a best practice, (Required.) Enabling BGP configure BGP peer • (Required.) Perform one of the following tasks: groups on large scale Configuring a BGP peer BGP networks for easy Configuring dynamic BGP peers ...
Tasks at a glance Remarks (Optional.) Tuning and optimizing BGP networks: • Configuring the keepalive interval and hold time • Setting the session retry timer • Configuring the interval for sending updates for the same route • Enabling BGP to establish an EBGP session over multiple hops •...
Enabling BGP A router ID is the unique identifier of a BGP router in an AS. • To ensure the uniqueness of a router ID and enhance availability, specify in BGP instance view the IP address of a local loopback interface as the router ID. Different BGP instances can have the same router ID.
Step Command Remarks Enable the router to By default, the router cannot exchange IPv6 unicast peer ipv6-address enable exchange IPv6 unicast routing routing information with the information with the peer. specified peer. Configuring a BGP peer (IPv4 multicast address family) Step Command Remarks...
Page 227
If multiple BGP peers reside in the same network, you can use this feature to simplify BGP peer configuration. For a remote device to establish a peer relationship with the local device, you must specify the IP address of the local device on the remote device. Configuring dynamic BGP peers (IPv4 unicast address family) Step Command...
Page 228
Step Command Remarks Create the BGP IPv6 By default, no BGP IPv6 unicast address family or unicast address family or BGP-VPN IPv6 unicast address-family ipv6 [ unicast ] BGP-VPN IPv6 unicast address family and enter address family exists. its view. Enable BGP to exchange By default, BGP cannot IPv6 unicast routing...
Step Command Remarks Enable BGP to exchange By default, BGP cannot IPv6 unicast routing exchange IPv6 unicast routing information used for RPF peer ipv6-address prefix-length information used for RPF check with dynamic BGP enable check with dynamic BGP peers in the specified peers.
Page 230
To configure an IBGP peer group (IPv6 unicast address family): Step Command Remarks Enter system view. system-view • Enter BGP instance view: bgp as-number [ instance instance-name ] • Enter BGP-VPN instance view: Enter BGP instance view or BGP-VPN instance view. a.
Page 231
Step Command Remarks Create the BGP IPv4 By default, no BGP IPv4 multicast multicast address family and address-family ipv4 multicast address family exists. enter its view. Enable the router to By default, the router cannot exchange IPv4 unicast exchange IPv4 unicast routing routing information used for peer group-name enable information used for RPF check...
Page 232
Step Command Remarks • Enter BGP instance view: bgp as-number [ instance instance-name ] • Enter BGP-VPN instance view: Enter BGP instance view or BGP-VPN instance view. a. bgp as-number [ instance instance-name ] b. ip vpn-instance vpn-instance-name By default, no EBGP peer groups Create an EBGP peer group.
Page 233
Step Command Remarks By default, no AS number is specified. Specify the AS number of the peer group-name as-number If a peer group contains peers, group. as-number you cannot remove or change its AS number. By default, no peers exist in the peer group.
Page 234
Step Command Remarks Enable the router to By default, the router cannot exchange IPv4 unicast exchange IPv4 unicast routing routing information used for peer group-name enable information used for RPF check RPF check with peers in the with the peers in the group. specified peer group.
Page 235
Step Command Remarks By default, no EBGP peer groups Create an EBGP peer group. group group-name external exist. Create an IPv4 BGP peer peer ipv4-address [ mask-length ] By default, no IPv4 BGP peers and specify its AS number. as-number as-number exist.
Page 236
Step Command Remarks (Optional.) Configure a peer group-name description By default, no description is description for the peer text configured for the peer group. group. Create the BGP IPv6 unicast By default, no BGP IPv6 unicast address family or BGP-VPN address-family ipv6 [ unicast ] address family or BGP-VPN IPv6 IPv6 unicast address family...
Page 237
Step Command Remarks Create an IPv6 BGP peer peer ipv6-address [ prefix-length ] By default, no IPv6 BGP peers and specify its AS number. as-number as-number exist. By default, no peers exist in the peer group. The as-number as-number peer ipv6-address [ prefix-length ] Add the peer into the EBGP option, if used, must specify the group group-name [ as-number...
Page 238
To configure an EBGP peer group by using Method 3 (IPv6 unicast address family): Step Command Remarks Enter system view. system-view • Enter BGP instance view: bgp as-number [ instance instance-name ] • Enter BGP-VPN instance view: Enter BGP instance view or BGP-VPN instance view.
To configure an EBGP peer group by using Method 3 (IPv6 multicast address family): Step Command Remarks Enter system view. system-view bgp as-number [ instance Enter BGP instance view. instance-name ] By default, no EBGP peer groups Create an EBGP peer group. group group-name external exist.
Step Command Remarks • Enter BGP instance view: bgp as-number [ instance instance-name ] • Enter BGP-VPN instance view: Enter BGP instance view or BGP-VPN instance view. a. bgp as-number [ instance instance-name ] b. ip vpn-instance vpn-instance-name Specify the source address peer { group-name | ipv4-address of TCP connections to a peer By default, BGP uses the primary...
Page 241
The specified network must be available and active in the local IP routing table. To inject a local network (IPv4 unicast/multicast address family): Step Command Remarks Enter system view. system-view • Enter BGP IPv4 unicast address family view: a. bgp as-number [ instance instance-name ] b.
Step Command Remarks • Enter BGP IPv6 unicast address family view: a. bgp as-number [ instance instance-name ] b. address-family ipv6 [ unicast ] • Enter BGP-VPN IPv6 unicast address family view: Enter BGP IPv6 unicast c. bgp as-number address family view, [ instance BGP-VPN IPv6 unicast instance-name ]...
Page 245
Step Command Remarks Enter system view. system-view • Enter BGP IPv4 unicast address family view: a. bgp as-number [ instance instance-name ] b. address-family ipv4 [ unicast ] • Enter BGP-VPN IPv4 unicast address family view: Enter BGP IPv4 unicast c.
Page 246
Step Command Remarks • Enter BGP IPv4 unicast address family view: a. bgp as-number [ instance instance-name ] b. address-family ipv4 [ unicast ] • Enter BGP-VPN IPv4 unicast address family view: Enter BGP IPv4 unicast c. bgp as-number address family view, [ instance BGP-VPN IPv4 unicast instance-name ]...
Step Command Remarks • Enter BGP IPv4 unicast address family view: address-family ipv4 [ unicast ] Enter BGP IPv4 unicast • Enter BGP-VPN IPv4 unicast address family view or address family view: BGP-VPN IPv4 unicast address family view. a. ip vpn-instance vpn-instance-name b.
Page 249
Step Command Remarks • Enter BGP IPv4 unicast address family view: a. bgp as-number [ instance instance-name ] b. address-family ipv4 [ unicast ] • Enter BGP-VPN IPv4 unicast address family view: Enter BGP IPv4 unicast c. bgp as-number address family view, [ instance BGP-VPN IPv4 unicast instance-name ]...
Figure 60 Network diagram Internet Device A Device B Device C Device D Device E Procedure Step Command Remarks Enter system view. system-view bgp as-number [ instance Enter BGP instance view. instance-name ] Configure BGP to first By default, BGP does not first send send updates of the default-route update-first updates of the default route.
Page 252
Step Command Remarks Enter system view. system-view • Enter BGP IPv4 unicast address family view: a. bgp as-number [ instance instance-name ] b. address-family ipv4 [ unicast ] • Enter BGP-VPN IPv4 unicast address family view: Enter BGP IPv4 unicast c.
Step Command Remarks • Enter BGP IPv6 unicast address family view: a. bgp as-number [ instance instance-name ] b. address-family ipv6 [ unicast ] • Enter BGP-VPN IPv6 unicast address family view: Enter BGP IPv6 unicast c. bgp as-number address family view, [ instance BGP-VPN IPv6 unicast instance-name ]...
Page 254
peer route-policy export Only routes passing all the configured policies can be advertised. To configure BGP route distribution filtering policies (IPv4 unicast/multicast address family): Step Command Remarks Enter system view. system-view • Enter BGP IPv4 unicast address family view: a. bgp as-number [ instance instance-name ] b.
Page 255
Step Command Remarks • Reference an ACL or IP prefix list to filter advertised BGP routes: filter-policy { ipv4-acl-number | prefix-list prefix-list-name } export [ direct | isis process-id | ospf process-id | rip process-id | static ] • Reference a routing policy to filter BGP routes advertised to a peer or peer group: peer { group-name |...
Page 256
Step Command Remarks • Enter BGP IPv6 unicast address family view: a. bgp as-number [ instance instance-name ] b. address-family ipv6 [ unicast ] • Enter BGP-VPN IPv6 unicast address family view: Enter BGP IPv6 unicast c. bgp as-number address family view, [ instance BGP-VPN IPv6 unicast instance-name ]...
Page 257
Step Command Remarks • Reference an ACL or IPv6 prefix list to filter advertised BGP routes: filter-policy { ipv6-acl-number | prefix-list ipv6-prefix-name } export [ direct | isisv6 process-id | ospfv3 process-id | ripng process-id | static ] • Reference a routing policy to filter BGP routes advertised to a peer or peer group: peer { group-name |...
Page 258
Step Command Remarks Enter system view. system-view • Enter BGP IPv4 unicast address family view: a. bgp as-number [ instance instance-name ] b. address-family ipv4 [ unicast ] • Enter BGP-VPN IPv4 unicast address family view: Enter BGP IPv4 unicast c.
For a device with high performance, you can set a high BGP route sending rate as needed. For a device without high performance, set a relatively low BGP route sending rate as a best practice. This task applies only to IPv4 unicast routes and IPv6 unicast routes. To set the BGP route sending rate: Step Command...
Figure 61 Network diagram Router B IP network Router A Router C Procedure To configure a startup policy for BGP route updates: Step Command Remarks Enter system view. system-view bgp as-number [ instance Enter BGP instance view. instance-name ] Specify the period after bgp apply-policy on-startup By default, the startup policy reboot within which the...
Page 262
Step Command Remarks • Enter BGP IPv4 unicast address family view: a. bgp as-number [ instance instance-name ] b. address-family ipv4 [ unicast ] • Enter BGP-VPN IPv4 unicast address family view: Enter BGP IPv4 unicast c. bgp as-number [ instance address family view, instance-name ] BGP-VPN IPv4 unicast...
Controlling BGP path selection By configuring BGP path attributes, you can control BGP path selection. Setting a preferred value for routes received Perform this task to set a preferred value for specific routes to control BGP path selection. Among multiple routes that have the same destination/mask and are learned from different peers, the one with the greatest preferred value is selected as the optimal route.
Step Command Remarks • Enter BGP IPv6 unicast address family view: a. bgp as-number [ instance instance-name ] b. address-family ipv6 [ unicast ] • Enter BGP-VPN IPv6 unicast address family view: Enter BGP IPv6 unicast c. bgp as-number address family view, [ instance BGP-VPN IPv6 unicast instance-name ]...
Page 269
Step Command Remarks • Enter BGP IPv4 unicast address family view: a. bgp as-number [ instance instance-name ] b. address-family ipv4 [ unicast ] • Enter BGP-VPN IPv4 unicast address family view: Enter BGP IPv4 unicast c. bgp as-number address family view, [ instance BGP-VPN IPv4 unicast instance-name ]...
Page 270
Step Command Remarks • Enter BGP IPv6 unicast address family view: a. bgp as-number [ instance instance-name ] b. address-family ipv6 [ unicast ] • Enter BGP-VPN IPv6 unicast address family view: Enter BGP IPv6 unicast c. bgp as-number address family view, [ instance BGP-VPN IPv6 unicast instance-name ]...
Page 271
Figure 62 Route selection based on MED (in an IPv4 network) AS 400 Router E 10.0.0.0 AS 300 AS 200 Router C Router B Router A Loop0 Loop0 Loop0 3.3.3.3/32 1.1.1.1/32 2.2.2.2/32 GE1/0/1 GE1/0/1 GE1/0/1 13.1.1.2/24 12.1.1.2/24 11.1.1.2/24 GE1/0/1 GE1/0/3 GE1/0/2 Router D AS 100...
1.1.1.1 200 400e To enable MED comparison for routes on a per-AS basis: Step Command Remarks Enter system view. system-view • Enter BGP instance view: bgp as-number [ instance instance-name ] • Enter BGP-VPN instance view: Enter BGP instance view or BGP-VPN instance view.
Page 273
For example, as shown in Figure 63, Router A and Router B establish an EBGP neighbor relationship, and Router B and Router C establish an IBGP neighbor relationship. If Router C has no route destined for IP address 1.1.1.1/24, you must configure Router B to set itself 3.1.1.1/24 as the next hop for the network 2.1.1.1/24 advertised to Router C.
Page 274
Step Command Remarks • Enter BGP IPv4 unicast address family view: a. bgp as-number [ instance instance-name ] b. address-family ipv4 [ unicast ] • Enter BGP-VPN IPv4 unicast address family view: Enter BGP IPv4 unicast c. bgp as-number address family view, [ instance BGP-VPN IPv4 unicast instance-name ]...
Step Command Remarks • Enter BGP IPv6 unicast address family view: a. bgp as-number [ instance instance-name ] b. address-family ipv6 [ unicast ] • Enter BGP-VPN IPv6 unicast address family view: Enter BGP IPv6 unicast c. bgp as-number address family view, [ instance BGP-VPN IPv6 unicast instance-name ]...
Page 276
Step Command Remarks • Enter BGP IPv4 unicast address family view: a. bgp as-number [ instance instance-name ] b. address-family ipv4 [ unicast ] • Enter BGP-VPN IPv4 unicast address family view: Enter BGP IPv4 unicast c. bgp as-number address family view, [ instance BGP-VPN IPv4 unicast instance-name ]...
Page 277
Step Command Remarks • Enter BGP IPv6 unicast address family view: a. bgp as-number [ instance instance-name ] b. address-family ipv6 [ unicast ] • Enter BGP-VPN IPv6 unicast address family view: Enter BGP IPv6 unicast c. bgp as-number address family view, [ instance BGP-VPN IPv6 unicast instance-name ]...
Page 278
Step Command Remarks Enter system view. system-view • Enter BGP instance view: bgp as-number [ instance instance-name ] • Enter BGP-VPN instance view: Enter BGP instance view or BGP-VPN instance view. a. bgp as-number [ instance instance-name ] b. ip vpn-instance vpn-instance-name By default, no fake AS number is advertised to a peer or peer...
Page 279
Figure 65 AS number substitution configuration (in an IPv4 network) AS 100 PE 1 PE 2 MPLS backbone EBGP_Update: 10.1.0.0/16 EBGP_Update: 10.1.0.0/16 VPNv4_Update: 10.1.0.0/16 AS_PATH: 100, 100 AS_PATH: 800 RD: 100:1 AS_PATH: 800 CE 1 CE 2 AS 800 AS 800 As shown in Figure 65, CE 1 and CE 2 use the same AS number 800.
Page 280
Removing private AS numbers from updates sent to an EBGP peer or peer group Private AS numbers are typically used in test networks, and should not be transmitted in public networks. The range of private AS numbers is from 64512 to 65535. To remove private AS numbers from updates sent to an EBGP peer or peer group (IPv4 unicast/multicast address family): Step...
Step Command Remarks By default, no SoO attribute is Configure the SoO attribute peer { group-name | ipv4-address configured for a peer or peer for a peer or peer group. [ mask-length ] } soo site-of-origin group. To configure the SoO attribute (IPv6 unicast/multicast address family): Step Command Remarks...
Page 284
• If the keepalive interval is not 0, the actual keepalive interval is the smaller one between 1/3 of the hold time and the keepalive interval. To configure the keepalive interval and hold time (IPv4 unicast/multicast address family): Step Command Remarks Enter system view.
Step Command Remarks Use at least one method. • Configure the global By default, the keepalive interval keepalive interval and hold is 60 seconds, and hold time is time: 180 seconds. timer keepalive keepalive The timer command takes effect hold holdtime for new BGP sessions and does •...
Configuring the interval for sending updates for the same route A BGP router sends an update message to its peers when a route is changed. If the route changes frequently, the BGP router keeps sending updates for the same route, resulting route flapping. To prevent this situation, perform this task to configure the interval for sending updates for the same route to a peer or peer group.
Enabling BGP to establish an EBGP session over multiple hops To establish an EBGP session, two routers must have a direct physical link and use directly connected interfaces. If no direct link is available, you must use the peer ebgp-max-hop command to enable BGP to establish an EBGP session over multiple hops and specify the maximum hops.
Enabling immediate re-establishment of direct EBGP connections upon link failure When the link to a directly connected EBGP peer goes down, the router does not re-establish a session to the peer until the hold time timer expires. This feature enables BGP to immediately recreate the session in that situation.
Page 289
Step Command Remarks • Enter BGP IPv4 unicast address family view: a. bgp as-number [ instance instance-name ] b. address-family ipv4 [ unicast ] • Enter BGP-VPN IPv4 unicast address family view: Enter BGP IPv4 unicast c. bgp as-number [ instance address family view, instance-name ] BGP-VPN IPv4 unicast...
Step Command Remarks • Enter BGP instance view: bgp as-number [ instance instance-name ] • Enter BGP-VPN instance view: Enter BGP instance view or BGP-VPN instance view. a. bgp as-number [ instance instance-name ] b. ip vpn-instance vpn-instance-name Enable MD5 authentication peer { group-name | ipv6-address By default, MD5 authentication is for a BGP peer group or...
Step Command Remarks (Optional.) Enable load By default, BGP cannot perform balancing for routes that load balancing for routes that balance as-path-relax have different AS_PATH have different AS_PATH attributes of the same length. attributes of the same length. To specify the maximum number of BGP ECMP routes for load balancing (IPv6 unicast/multicast address family): Step Command...
Step Command Remarks Enter system view. system-view • Enter BGP instance view: bgp as-number [ instance instance-name ] • Enter BGP-VPN instance view: Enter BGP instance view or BGP-VPN instance view. a. bgp as-number [ instance instance-name ] b. ip vpn-instance vpn-instance-name Disable BGP to establish a peer { group-name | ipv4-address...
To configure GTSM for BGP (IPv4 unicast/multicast address family): Step Command Remarks Enter system view. system-view • Enter BGP instance view: bgp as-number [ instance instance-name ] • Enter BGP-VPN instance Enter BGP instance view or view: BGP-VPN instance view. a.
Page 297
• Manual soft-reset—Use the refresh bgp command to enable BGP to send local routing information or advertise a route-refresh message to the specified peer. The peer then resends its routing information. After receiving the routing information, the router filters the routing information by using the new policy.
Page 298
Step Command Remarks • Enable BGP route refresh for the specified peer or peer group: peer { group-name | ipv6-address [ prefix-length ] } capability-advertise route-refresh By default, the BGP route refresh, • Enable BGP route refresh for multi-protocol extension, and Enable the BGP route a peer or peer group.
Page 299
To save all route updates from the specified peer or peer group (IPv6 unicast/multicast address family): Step Command Remarks Enter system view. system-view • Enter BGP IPv6 unicast address family view: a. bgp as-number [ instance instance-name ] b. address-family ipv6 [ unicast ] •...
Page 300
Step Command Remarks • Enter BGP instance view: bgp as-number [ instance instance-name ] • Enter BGP-VPN instance view: Enter BGP instance view or BGP-VPN instance view. a. bgp as-number [ instance instance-name ] b. ip vpn-instance vpn-instance-name • Enable BGP route refresh for the specified peer or peer group: peer { group-name |...
Page 301
Step Command Remarks • Enter BGP instance view: bgp as-number [ instance instance-name ] • Enter BGP-VPN instance view: Enter BGP instance view or BGP-VPN instance view. a. bgp as-number [ instance instance-name ] b. ip vpn-instance vpn-instance-name • Enable BGP route refresh for the specified peer or peer group: peer { group-name |...
Step Command Remarks Configure BGP to protect an By default, BGP periodically tears peer { group-name | ipv4-address EBGP peer or peer group down an EBGP session to release [ mask-length ] } when the memory usage memory resources when level 2 low-memory-exempt reaches level 2 threshold.
After the suboptimal route is flushed to the RIB on a network, BGP immediately switches traffic to the suboptimal route when the optimal route fails. For example, the device has a static route to the subnet 1.1.1.0/24 that has a higher priority than a BGP route.
Step Command Remarks • Enter BGP instance view: bgp as-number [ instance instance-name ] • Enter BGP-VPN instance view: Enter BGP instance view or BGP-VPN instance view. a. bgp as-number [ instance instance-name ] b. ip vpn-instance vpn-instance-name Disable route recursion peer { group-name | ip-address By default, the route recursion policy control for routes...
reflector, and confederation features as needed. For more information about configuring peer groups, "Configuring a BGP peer group." Configuring BGP community By default, a router does not advertise the COMMUNITY or extended community attribute to its peers or peer groups. When the router receives a route carrying the COMMUNITY or extended community attribute, it removes the attribute before advertising the route to other peers or peer groups.
Page 307
Step Command Remarks • Advertise the COMMUNITY attribute to a peer or peer group: peer { group-name | ipv4-address [ mask-length ] } Advertise the COMMUNITY By default, the COMMUNITY or advertise-community or extended community extended community attribute is • attribute to a peer or peer Advertise the extended not advertised.
Step Command Remarks • Advertise the COMMUNITY attribute to a peer or peer group: peer { group-name | ipv6-address [ prefix-length ] } Advertise the COMMUNITY By default, the COMMUNITY or advertise-community or extended community extended community attribute is • attribute to a peer or peer Advertise the extended not advertised.
Page 309
Step Command Remarks • Enter BGP IPv4 unicast address family view: a. bgp as-number [ instance instance-name ] b. address-family ipv4 [ unicast ] • Enter BGP-VPN IPv4 unicast address family view: Enter BGP IPv4 unicast c. bgp as-number address family view, [ instance BGP-VPN IPv4 unicast instance-name ]...
Page 310
Step Command Remarks • Enter BGP IPv6 unicast address family view: a. bgp as-number [ instance instance-name ] Enter BGP IPv6 unicast b. address-family ipv6 address family view, or BGP [ unicast ] IPv6 multicast address family • Enter BGP IPv6 multicast view.
Step Command Remarks Enter system view. system-view • Enter BGP instance view: bgp as-number [ instance instance-name ] • Enter BGP-VPN instance view: Enter BGP instance view or BGP-VPN instance view. a. bgp as-number [ instance instance-name ] b. ip vpn-instance vpn-instance-name By default, BGP does not ignore the ORIGINATOR_ID attribute.
Configuring confederation compatibility If any routers in the confederation do not comply with RFC 3065, enable confederation compatibility to allow the router to work with those routers. To configure confederation compatibility: Step Command Remarks Enter system view. system-view bgp as-number [ instance Enter BGP instance view.
As a best practice, perform the following configuration on the GR restarter and GR helper. To configure BGP GR: Step Command Remarks Enter system view. system-view bgp as-number [ instance Enter BGP instance view. instance-name ] By default, GR capability is Enable GR capability for BGP.
Enabling SNMP notifications for BGP After you enable SNMP notifications for BGP, the device generates a notification when a BGP neighbor state change occurs. The notification includes the neighbor address, the error code and subcode of the most recent error, and the current neighbor state. For BGP notifications to be sent correctly, you must also configure SNMP on the device.
Step Command Remarks (Optional.) Enter BGP-VPN ip vpn-instance instance view. vpn-instance-name Enable logging for session By default, logging for session peer { group-name | ipv6-address state changes for a peer or state changes is enabled for all [ prefix-length ] } log-change peer group.
Step Command Remarks • Enter BGP instance view: bgp as-number [ instance instance-name ] • Enter BGP-VPN instance view: Enter BGP instance view or BGP-VPN instance view. a. bgp as-number [ instance instance-name ] b. ip vpn-instance vpn-instance-name peer { group-name | ipv4-address Enable BFD to detect the link to the By default, BFD is [ mask-length ] } bfd [ multi-hop |...
Page 318
• Method 1—Execute the pic command in BGP address family view. BGP calculates a backup next hop for each BGP route in the address family if there are two or more unequal-cost routes that reach the destination. • Method 2—Execute the fast-reroute route-policy command to use a routing policy in which a backup next hop is specified by using the command apply [ ipv6 ] fast-reroute backup-nexthop.
Page 319
Step Command Remarks Enter BGP IPv4 unicast address family view or address-family ipv4 [ unicast ] BGP-VPN IPv4 unicast address family view. By default, BGP FRR is disabled. Method 1 might result in routing • (Method 1) Enable BGP FRR loops.
Step Command Remarks By default, BGP FRR is disabled. • (Method 1) Enable BGP Method 1 might result in routing loops. FRR for the address Use it with caution. family: By default, no routing policy is applied. • (Method 2) Apply a Enable BGP FRR.
• Configure BGP on 6PE devices so that they can advertise tagged IPv6 routing information through BGP sessions. The following describes only BGP configurations on 6PE devices. To configure basic 6PE: Step Command Remarks Enter system view. system-view bgp as-number [ instance Enter BGP instance view.
Page 322
Step Command Remarks Specify an IPv6 prefix list to peer { group-name | ipv4-address filter routes advertised to or By default, no IPv6 prefix list is [ mask-length ] } prefix-list received from the 6PE peer specified. ipv6-prefix-name { export | import } or peer group.
Configuring BGP LS The BGP Link State (LS) feature implements inter-domain and inter-AS advertisement of link state database (LSDB) and TE database (TEDB) information. The device sends the collected link state information to the controller, which implements end-to-end traffic management and scheduling, and meets the requirements of intended applications. Configuring basic BGP LS Step Command...
Specifying an AS number and a router ID for BGP LS messages Perform this task to ensure that LS messages sent by devices in the same AS have the same AS number and router ID. To specify an AS number and a router ID for BGP LS messages: Step Command Remarks...
Page 333
BGP local router ID is 2.2.2.2 Status codes: * - valid, > - best, d - dampened, h - history, s - suppressed, S - stale, i - internal, e - external Origin: i - IGP, e - EGP, ? - incomplete Network NextHop LocPrf...
Two routes, 2.2.2.2/32 and 9.1.1.0/24, have been added in Switch A's routing table. # Display the BGP routing table on Switch C. [SwitchC] display bgp routing-table ipv4 Total number of routes: 4 BGP local router ID is 3.3.3.3 Status codes: * - valid, > - best, d - dampened, h - history, s - suppressed, S - stale, i - internal, e - external Origin: i - IGP, e - EGP, ? - incomplete Network...
Configuration considerations Configure BGP to redistribute routes from OSPF on Switch B, so Switch A can obtain the route to 9.1.2.0/24. Configure OSPF to redistribute routes from BGP on Switch B, so Switch C can obtain the route to 8.1.1.0/24. Configuration procedure Configure IP addresses for interfaces.
Page 336
[SwitchB-bgp-default] quit [SwitchB] ospf 1 [SwitchB-ospf-1] import-route bgp [SwitchB-ospf-1] quit # Display the BGP routing table on Switch A. [SwitchA] display bgp routing-table ipv4 Total number of routes: 3 BGP local router ID is 1.1.1.1 Status codes: * - valid, > - best, d - dampened, h - history, s - suppressed, S - stale, i - internal, e - external Origin: i - IGP, e - EGP, ? - incomplete Network...
round-trip min/avg/max/std-dev = 2.000/8.000/12.000/3.406 ms [SwitchC] ping -a 9.1.2.1 8.1.1.1 Ping 8.1.1.1 (8.1.1.1) from 9.1.2.1: 56 data bytes, press CTRL_C to break 56 bytes from 8.1.1.1: icmp_seq=0 ttl=254 time=9.000 ms 56 bytes from 8.1.1.1: icmp_seq=1 ttl=254 time=4.000 ms 56 bytes from 8.1.1.1: icmp_seq=2 ttl=254 time=3.000 ms 56 bytes from 8.1.1.1: icmp_seq=3 ttl=254 time=3.000 ms 56 bytes from 8.1.1.1: icmp_seq=4 ttl=254 time=3.000 ms --- Ping statistics for 8.1.1.1 ---...
Page 338
# Configure static routes to 192.168.64.0/24, 192.168.74.0/24, and 192.168.99.0/24 with the same next hop 192.168.212.161 on Switch B. <SwitchB> system-view [SwitchB] ip route-static 192.168.64.0 24 192.168.212.161 [SwitchB] ip route-static 192.168.74.0 24 192.168.212.161 [SwitchB] ip route-static 192.168.99.0 24 192.168.212.161 Configure OSPF between Switch B and Switch C and configure OSPF on Switch B to redistribute static routes: # Configure OSPF to advertise the local network and enable OSPF to redistribute static routes on Switch B.
Page 339
[SwitchC-bgp-default] router-id 3.3.3.3 [SwitchC-bgp-default] peer 10.220.2.217 as-number 64631 [SwitchC-bgp-default] address-family ipv4 unicast [SwitchC-bgp-default-ipv4] peer 10.220.2.217 enable [SwitchC-bgp-default-ipv4] import-route ospf # Enable BGP, and configure Switch C as an EBGP peer on Switch D. [SwitchD] bgp 64631 [SwitchD-bgp-default] router-id 4.4.4.4 [SwitchD-bgp-default] peer 10.220.2.16 as-number 65106 [SwitchD-bgp-default] address-family ipv4 unicast [SwitchD-bgp-default-ipv4] peer 10.220.2.16 enable [SwitchD-bgp-default-ipv4] quit...
[SwitchD] display ip routing-table protocol bgp Summary count : 1 BGP Routing table Status : <Active> Summary count : 1 Destination/Mask Proto Cost NextHop Interface 192.168.64.0/18 10.220.2.16 Vlan200 BGP Routing table Status : <Inactive> Summary count : 0 The output shows that Switch D has only one route 192.168.64.0/18 to AS 65106. # Verify that Switch D can ping the hosts on networks 192.168.64.0/24, 192.168.74.0/24, and 192.168.99.0/24.
Page 341
• Configure a static route to interface loopback 0 on Switch C (or use a routing protocol like OSPF) to establish the IBGP connection. On Switch C: • Establish an EBGP connection with Switch A and an IBGP connection with Switch B. •...
Page 342
[SwitchC-bgp-default-ipv4] peer 2.2.2.2 enable [SwitchC-bgp-default-ipv4] network 9.1.1.0 24 [SwitchC-bgp-default-ipv4] quit [SwitchC-bgp-default] quit [SwitchC] ip route-static 2.2.2.2 32 9.1.1.1 # Display the BGP routing table on Switch A. [SwitchA] display bgp routing-table ipv4 Total number of routes: 3 BGP local router ID is 1.1.1.1 Status codes: * - valid, >...
* > 8.1.1.0/24 8.1.1.1 32768 * >e 9.1.1.0/24 3.1.1.1 65009i * >e 3.1.2.1 65009i • The route 9.1.1.0/24 has two next hops, 3.1.1.1 and 3.1.2.1, both of which are marked with a greater-than sign (>), indicating that they are the optimal routes. •...
Page 345
Total number of routes: 1 BGP local router ID is 3.3.3.3 Status codes: * - valid, > - best, d - dampened, h - history, s - suppressed, S - stale, i - internal, e - external Origin: i - IGP, e - EGP, ? - incomplete Network NextHop LocPrf...
BGP local router ID: 2.2.2.2 Local AS number: 20 Paths: 1 best BGP routing table information of 9.1.1.0/24: Not advertised to any peers yet # Display the BGP routing table on Switch C. [SwitchC] display bgp routing-table ipv4 Total number of routes: 0 The output shows that BGP has not learned any route.
Origin: i - IGP, e - EGP, ? - incomplete Network NextHop LocPrf PrefVal Path/Ogn * >e 20.0.0.0 192.1.1.1 100i # Display the BGP routing table on Switch D. [SwitchD] display bgp routing-table ipv4 Total number of routes: 1 BGP local router ID is 4.4.4.4 Status codes: * - valid, >...
Page 349
Device Interface IP address Device Interface IP address Vlan-int500 10.1.4.1/24 Switch F Vlan-int100 200.1.1.2/24 Switch B Vlan-int200 10.1.1.2/24 Vlan-int600 9.1.1.1/24 Switch C Vlan-int300 10.1.2.2/24 Configuration procedure Configure IP addresses for interfaces. (Details not shown.) Configure BGP confederation: # Configure Switch A. <SwitchA>...
Page 351
[SwitchF-bgp-default] address-family ipv4 unicast [SwitchF-bgp-default-ipv4] peer 200.1.1.1 enable [SwitchF-bgp-default-ipv4] network 9.1.1.0 255.255.255.0 [SwitchF-bgp-default-ipv4] quit [SwitchF-bgp-default] quit Verifying the configuration # Display the routing table on Switch B. [SwitchB] display bgp routing-table ipv4 Total number of routes: 1 BGP local router ID is 2.2.2.2 Status codes: * - valid, >...
Network NextHop LocPrf PrefVal Path/Ogn * >i 9.1.1.0/24 10.1.3.1 100i [SwitchD] display bgp routing-table ipv4 9.1.1.0 BGP local router ID: 4.4.4.4 Local AS number: 65001 Paths: 1 available, 1 best BGP routing table information of 9.1.1.0/24: From : 10.1.3.1 (1.1.1.1) Rely nexthop : 10.1.3.1 Original nexthop: 10.1.3.1...
Page 353
Figure 75 Network diagram AS 200 Vlan-int100 Vlan-int300 AS 100 Switch B Vlan-int101 Vlan-int300 Vlan-int100 Vlan-int400 Vlan-int200 Switch D Vlan-int400 Switch A Vlan-int200 Switch C Table 18 Interface and IP address assignment Device Interface IP address Device Interface IP address Switch A Vlan-int101 1.0.0.1/8...
# Configure a routing policy named localpref on Switch C, setting the local preference of route 1.0.0.0/8 to 200 (the default is 100). [SwitchC] route-policy localpref permit node 10 [SwitchC-route-policy-localpref-10] if-match ip address acl 2000 [SwitchC-route-policy-localpref-10] apply local-preference 200 [SwitchC-route-policy-localpref-10] quit # Apply routing policy localpref to routes from peer 193.1.1.1.
Page 356
<SwitchA> system-view [SwitchA] bgp 65008 [SwitchA-bgp-default] router-id 1.1.1.1 [SwitchA-bgp-default] peer 200.1.1.1 as-number 65009 # Enable GR capability for BGP. [SwitchA-bgp-default] graceful-restart # Inject network 8.0.0.0/8 to the BGP routing table. [SwitchA-bgp-default] address-family ipv4 [SwitchA-bgp-default-ipv4] network 8.0.0.0 # Enable Switch A to exchange IPv4 unicast routing information with Switch B. [SwitchA-bgp-default-ipv4] peer 200.1.1.1 enable Configure Switch B: # Configure IP addresses for interfaces.
BFD for BGP configuration example Network requirements As shown in Figure 77, configure OSPF as the IGP in AS 200. • Establish two IBGP connections between Switch A and Switch C. When both paths operate correctly, Switch C uses the path Switch A<—>Switch B<—>Switch C to exchange packets with network 1.1.1.0/24.
Page 358
[SwitchA-bgp-default-ipv4] peer 2.0.2.2 enable [SwitchA-bgp-default-ipv4] quit [SwitchA-bgp-default] quit # Create IPv4 basic ACL 2000 to permit 1.1.1.0/24 to pass. [SwitchA] acl basic 2000 [SwitchA-acl-ipv4-basic-2000] rule permit source 1.1.1.0 0.0.0.255 [SwitchA-acl-ipv4-basic-2000] quit # Create two routing policies to set the MED for route 1.1.1.0/24. The policy apply_med_50 sets the MED to 50, and the policy apply_med_100 sets the MED to 100.
Page 359
Local Discr: 513 Remote Discr: 513 Source IP: 3.0.2.2 Destination IP: 3.0.1.1 Session State: Up Interface: N/A Min Tx Inter: 500ms Act Tx Inter: 500ms Min Rx Inter: 500ms Detect Inter: 2500ms Rx Count: 135 Tx Count: 135 Connect Type: Indirect Running Up for: 00:00:58 Hold Time: 2457ms Auth mode: None...
Connector: N/A The output shows that Switch C communicates with network 1.1.1.0/24 through the path Switch C<—>Switch B<—>Switch A. # Break down the path Switch C<—>Switch B<—>Switch A and then display route 1.1.1.0/24 on Switch C. <SwitchC> display ip routing-table 1.1.1.0 24 verbose Summary count : 1 Destination: 1.1.1.0/24 Protocol: BGP...
Page 361
Figure 78 Network diagram Loop0 2.2.2.2/32 Vlan-int 100 Vlan-int 101 AS 200 10.1.1.2/24 20.1.1.2/24 Switch B Vlan-int 100 Vlan-int 101 10.1.1.1/24 20.1.1.4/24 Switch A Switch D Link B AS 100 Vlan-int 200 Vlan-int 201 Link A 30.1.1.1/24 40.1.1.4/24 Switch C Vlan-int 200 Vlan-int 201 30.1.1.3/24...
Page 362
# Configure Switch C to establish an EBGP session to Switch A, and an IBGP session to Switch <SwitchC> system-view [SwitchC] bgp 200 [SwitchC-bgp-default] router-id 3.3.3.3 [SwitchC-bgp-default] peer 30.1.1.1 as-number 100 [SwitchC-bgp-default] peer 4.4.4.4 as-number 200 [SwitchC-bgp-default] peer 4.4.4.4 connect-interface loopback 0 [SwitchC-bgp-default] address-family ipv4 unicast [SwitchC-bgp-default-ipv4] peer 30.1.1.1 enable [SwitchC-bgp-default-ipv4] peer 4.4.4.4 enable...
Page 363
[SwitchA-bgp-default] primary-path-detect bfd echo # Apply the routing policy to BGP FRR for BGP IPv4 unicast address family. [SwitchA-bgp-default] address-family ipv4 unicast [SwitchA-bgp-default-ipv4] fast-reroute route-policy frr [SwitchA-bgp-default-ipv4] quit [SwitchA-bgp-default] quit # On Switch D, set the source address of BFD echo packets to 44.1.1.1. [SwitchD] bfd echo-source-ip 44.1.1.1 # Create routing policy frr to set a backup next hop 3.3.3.3 (Switch C) for the route destined for 1.1.1.1/32.
# Display detailed information about the route to 1.1.1.1/32 on Switch D. The output shows the backup next hop for the route. [SwitchD] display ip routing-table 1.1.1.1 32 verbose Summary count : 1 Destination: 1.1.1.1/32 Protocol: BGP Process ID: 0 SubProtID: 0x1 Age: 00h00m36s Cost: 0...
Page 365
Figure 79 Network diagram AS 100 AS 200 Loop0 Loop0 Switch B Vlan-int101 Vlan-int101 Switch A Receiver Vlan-int100 Source Switch D Vlan-int104 Switch C Vlan-int104 PIM-SM 1 Loop0 Loop0 PIM-SM 2 MBGP peers Table 20 Interface and IP address assignment Device Interface IP address...
Page 366
[SwitchC] multicast routing [SwitchA-mrib] quit # Enable PIM-SM on interfaces, and enable IGMP on VLAN-interface 200. [SwitchC] interface vlan-interface 102 [SwitchC-Vlan-interface102] pim sm [SwitchC-Vlan-interface102] quit [SwitchC] interface vlan-interface 104 [SwitchC-Vlan-interface104] pim sm [SwitchC-Vlan-interface104] quit [SwitchC] interface vlan-interface 200 [SwitchC-Vlan-interface200] pim sm [SwitchC-Vlan-interface200] igmp enable [SwitchC-Vlan-interface200] quit # Configure the BSR boundary on Switch A.
Page 367
[SwitchA-bgp-default-mul-ipv4] peer 192.168.1.2 enable # Redistribute direct routes into BGP. [SwitchA-bgp-default-mul-ipv4] import-route direct [SwitchA-bgp-default-mul-ipv4] quit [SwitchA-bgp-default] quit # On Switch B, establish an EBGP session to Switch A. [SwitchB] bgp 200 [SwitchB-bgp-default] router-id 2.2.2.2 [SwitchB-bgp-default] peer 192.168.1.1 as-number 100 # Enable exchange of IPv4 unicast routes used for RPF check with Switch B. [SwitchB-bgp-default] address-family ipv4 multicast [SwitchB-bgp-default-mul-ipv4] peer 192.168.1.1 enable # Redistribute OSPF routes into BGP.
Dynamic BGP peer configuration example Network requirements As shown in Figure 80, Switch A needs to establish IBGP peer relationships with Switch B, Switch C, and Switch D in network 10.1.0.0/16. Configure dynamic BGP peers to simplify the configuration. Configure Switch A as the route reflector, and configure Switch B, Switch C, and Switch D as its clients.
Page 369
[SwitchC-bgp-default] peer 10.1.2.1 as-number 200 [SwitchC-bgp-default] address-family ipv4 [SwitchC-bgp-default-ipv4] peer 10.1.2.1 enable # Configure Switch D to establish an IBGP peer relationship with Switch A. <SwitchD> system-view [SwitchD] bgp 200 [SwitchD-bgp-default] router-id 4.4.4.4 [SwitchD-bgp-default] peer 10.1.3.1 as-number 200 [SwitchD-bgp-default] address-family ipv4 [SwitchD-bgp-default-ipv4] peer 10.1.3.1 enable # Display BGP peer information on Switch A.
BGP LS configuration example Network requirements As shown in Figure 81, all switches run BGP. Run IBGP between Switch A and Switch B, between Switch B and Switch C, and between Switch B and Switch D. Configure Switch B as a route reflector with client Switch A to allow Switch A to learn LS information advertised by Switch C and Switch D.
Page 374
The output shows that Switch A and Switch B have established an EBGP connection, and Switch B and Switch C have established an IBGP connection. # Display IPv6 BGP routing table information on Switch A. [SwitchA] display bgp routing-table ipv6 Total number of routes: 4 BGP local router ID is 1.1.1.1 Status codes: * - valid, >...
Page 377
[SwitchC-bgp-default] quit Verifying the configuration # Execute the display bgp routing-table ipv6 command on Switch D. [SwitchD] display bgp routing-table ipv6 Total number of routes: 5 BGP local router ID is 4.4.4.4 Status codes: * - valid, > - best, d - dampened, h - history, s - suppressed, S - stale, i - internal, e - external Origin: i - IGP, e - EGP, ? - incomplete * >i Network : 1::...
6PE configuration example Network requirements As shown in Figure 84, use 6PE to connect two isolated IPv6 networks over an IPv4/MPLS network. • The ISP uses OSPF as the IGP. • PE 1 and PE 2 are edge devices of the ISP, and establish an IPv4 IBGP connection between them.
Page 379
[PE1-bgp-default-ipv6] peer 3.3.3.3 enable [PE1-bgp-default-ipv6] peer 3.3.3.3 label-route-capability [PE1-bgp-default-ipv6] quit [PE1-bgp-default] quit # Configure a static route to CE 1. [PE1] ipv6 route-static 1::1 128 10::1 # Configure OSPF for the ISP. [PE1] ospf [PE1-ospf-1] area 0 [PE1-ospf-1-area-0.0.0.0] network 2.2.2.2 0.0.0.0 [PE1-ospf-1-area-0.0.0.0] network 1.1.0.0 0.0.255.255 [PE1-ospf-1-area-0.0.0.0] quit [PE1-ospf-1] quit...
Page 380
<CE1> system-view [CE1] ipv6 route-static :: 0 10::2 Configure a static route on CE 2, with PE 2 as the default next hop. <CE2> system-view [CE2] ipv6 route-static :: 0 20::2 Verifying the configuration # Display the IPv6 BGP routing tables on PE 1 and PE 2. The output shows that each of them has two IPv6 network routes.
BFD for IPv6 BGP configuration example Network requirements As shown in Figure 85, configure OSPFv3 as the IGP in AS 200. • Establish two IBGP connections between Switch A and Switch C. When both paths operate correctly, Switch C uses the path Switch A<—>Switch B<—>Switch C to exchange packets with network 1200::0/64.
Page 382
[SwitchA-bgp-default-ipv6] peer 2001::3 enable [SwitchA-bgp-default-ipv6] quit # Create IPv6 basic ACL 2000 to permit 1200::0/64 to pass. [SwitchA] acl ipv6 basic 2000 [SwitchA-acl-ipv6-basic-2000] rule permit source 1200:: 64 [SwitchA-acl-ipv6-basic-2000] quit # Create two routing policies to set the MED for route 1200::0/64. The policy apply_med_50 sets the MED to 50, and the policy apply_med_100 sets the MED to 100.
Page 383
Local Discr: 513 Remote Discr: 513 Source IP: 3001::3 Destination IP: 3000::1 Session State: Up Interface: N/A Min Tx Inter: 500ms Act Tx Inter: 500ms Min Rx Inter: 500ms Detect Inter: 2500ms Rx Count: 13 Tx Count: 14 Connect Type: Indirect Running Up for: 00:00:05 Hold Time: 2243ms Auth mode: None...
The output shows that Switch C communicates with network 1200::0/64 through the path Switch C<—>Switch B<—>Switch A. # Break down the path Switch C<—>Switch B<—>Switch A and then display route 1200::0/64 on Switch C. <SwitchC> display ipv6 routing-table 1200::0 64 verbose Summary count : 1 Destination: 1200::/64 Protocol: BGP4+...
Page 385
Configuration procedure Configure IPv6 addresses for interfaces. (Details not shown.) Configure OSPFv3 in AS 200 to ensure connectivity among Switch B, Switch C, and Switch D. (Details not shown.) Configure BGP connections: # Configure Switch A to establish EBGP sessions to Switch B and Switch C, and advertise network 1::/64.
Page 386
[SwitchD-bgp-default] peer 3002::1 as-number 200 [SwitchD-bgp-default] peer 2002::1 as-number 200 [SwitchD-bgp-default] address-family ipv6 unicast [SwitchD-bgp-default-ipv6] peer 3002::1 enable [SwitchD-bgp-default-ipv6] peer 2002::1 enable [SwitchD-bgp-default-ipv6] network 4:: 64 [SwitchD-bgp-default-ipv6] quit [SwitchD-bgp-default] quit Configure preferred values so Link B is used to forward traffic between Switch A and Switch D: # Configure Switch A to set the preferred value to 100 for routes received from Switch B.
Page 387
Verifying the configuration # Display detailed information about the route to 4::/64 on Switch A. The output shows the backup next hop for the route. [SwitchA] display ipv6 routing-table 4:: 64 verbose Summary count : 1 Destination: 4::/64 Protocol: BGP4+ Process ID: 0 SubProtID: 0x2 Age: 00h00m58s...
IPv6 multicast BGP configuration example Network requirements As shown in Figure 87, OSPFv3 runs within AS 100 and AS 200 to ensure intra-AS connectivity. IPv6 MBGP runs between the two ASs to exchange IPv6 unicast routes used for RPF check. Enable Anycast RP on Switch A and Switch B.
Page 389
[SwitchA] interface vlan-interface 101 [SwitchA-Vlan-interface101] ipv6 pim sm [SwitchA-Vlan-interface101] quit [SwitchA] interface loopback 0 [SwitchA-LoopBack0] ipv6 pim sm [SwitchA-LoopBack0] quit # Configure Switch B and Switch D in the same way that Switch A was configured. # On Switch C, enable IPv6 multicast routing globally. <SwitchC>...
Page 390
[SwitchA] bgp 100 [SwitchA-bgp-default] router-id 1.1.1.1 [SwitchA-bgp-default] peer 1001::2 as-number 200 # Enable exchange of IPv6 unicast routes used for RPF check with Switch B. [SwitchA-bgp-default] address-family ipv6 multicast [SwitchA-bgp-default-mul-ipv6] peer 1001::2 enable # Redistribute direct routes into BGP. [SwitchA-bgp-default-mul-ipv6] import-route direct [SwitchA-bgp-default-mul-ipv6] quit # On Switch B, establish an EBGP session to Switch A.
Configuring PBR Overview Policy-based routing (PBR) uses user-defined policies to route packets. A policy can specify the next hop and default next hop for packets that match specific criteria such as ACLs. A device forwards received packets using the following process: The device uses PBR to forward matching packets.
• apply default-next-hop Table 23 Priorities and meanings of apply clauses Clause Meaning Priority apply precedence Sets an IP precedence. This clause is always executed. apply next-hop and apply Sets next hops and sets Only the apply next-hop clause is executed output-interface output interfaces.
PBR configuration task list Tasks at a glance (Required.) Configuring a policy: • Creating a node • Setting match criteria for a node • Configuring actions for a node (Required.) Configuring PBR: • Configuring local PBR • Configuring interface PBR Configuring a policy Creating a node Step...
Configuring actions for a node Step Command Remarks Enter system system-view view. Enter policy policy-based-route policy-name [ deny | node view. permit ] node node-number Set an IP By default, no IP precedence is apply precedence { type | value } precedence.
Local PBR might affect local services, such as ping and Telnet. Do not configure local PBR unless doing so is required. To configure local PBR: Step Command Remarks Enter system view. system-view ip local policy-based-route By default, no policy is locally Apply a policy locally.
PBR configuration examples Packet type-based local PBR configuration example Network requirements As shown in Figure 88, configure PBR on Switch A to forward all TCP packets to the next hop 1.1.2.2. Switch A forwards other packets according to the routing table. Figure 88 Network diagram Switch B Vlan-int10...
# Configure the IP address of VLAN-interface 10. [SwitchB] interface vlan-interface 10 [SwitchB-Vlan-interface10] ip address 1.1.2.2 24 Configure Switch C: # Create VLAN 20. <SwitchC> system-view [SwitchC] vlan 20 [SwitchC-vlan20] quit # Configure the IP address of VLAN-interface 20. [SwitchC] interface vlan-interface 20 [SwitchC-Vlan-interface20] ip address 1.1.3.2 24 Verifying the configuration # Telnet to Switch B on Switch A.
Page 399
Figure 89 Network diagram Switch B Switch C Vlan-int10 Vlan-int20 1.1.2.2/24 1.1.3.2/24 Vlan-int10 Vlan-int20 1.1.2.1/24 1.1.3.1/24 Switch A Vlan-int11 10.110.0.10/24 Subnet 10.110.0.0/24 Host A Host B 10.110.0.20/24 Gateway: 10.110.0.10 Configuration procedure Configure Switch A: # Create VLAN 10 and VLAN 20. <SwitchA>...
Page 403
# Create node 0, use ACL 3000 to match packets with source IP address 10.1.1.1 and destination IP address 10.1.1.20. Apply next hop 10.1.1.11 and service chain path ID 1 to matching packets. [SwitchA] policy-based-route aa permit node 0 [SwitchA-pbr-aa-0] if-match acl 3000 [SwitchA-pbr-aa-0] apply service-chain path-id 1 [SwitchA-pbr-aa-0] apply next-hop vpn-instance vpna 10.1.1.11 # Apply policy aa to VSI-interface 3.
Page 404
[SwitchB-Vsi-interface1] mac-address 0001-0001-0001 [SwitchB-Vsi-interface1] local-proxy-arp enable [SwitchB-Vsi-interface1] distributed-gateway local [SwitchB-Vsi-interface1] quit # Associate VSI instance vpna with VSI-interface 1. [SwitchB] vsi vpna [SwitchB-vsi-vpna] gateway vsi-interface 1 [SwitchB-vsi-vpna] quit # Configure VSI-interface 3. [SwitchB] interface vsi-interface 3 [SwitchB-Vsi-interface3] ip binding vpn-instance vpna [SwitchB-Vsi-interface3] l3-vni 1000 [SwitchB-Vsi-interface3] quit # Configure GigabitEthernet 1/0/1 as an AC interface.
Configuring IPv6 static routing Static routes are manually configured and cannot adapt to network topology changes. If a fault or a topological change occurs in the network, the network administrator must modify the static routes manually. IPv6 static routing works well in a simple IPv6 network. Configuring an IPv6 static route Before you configure an IPv6 static route, complete the following tasks: •...
Bidirectional control mode To use BFD bidirectional control detection between two devices, enable BFD control mode for each device's static route destined to the peer. To configure a static route and enable BFD control mode, use one of the following methods: •...
Step Command Remarks By default, the source address of echo packets is not configured. The source address of echo Configure the packets must be a global source address of bfd echo-source-ipv6 ipv6-address unicast address. echo packets. For more information about this command, see High Availability Command Reference.
Page 410
Figure 91 Network diagram Host B 2::2/64 Vlan-int400 2::1/64 Vlan-int200 Vlan-int300 4::2/64 5::2/64 Switch B Vlan-int200 Vlan-int300 4::1/64 5::1/64 Vlan-int100 Vlan-int500 1::1/64 3::1/64 Switch C Switch A Host C Host A 3::2/64 1::2/64 Configuration procedure Configure the IPv6 addresses for all VLAN interfaces. (Details not shown.) Configure IPv6 static routes: # Configure a default IPv6 static route on Switch A.
The output shows that Switch A communicates with Switch B through VLAN-interface 11. BFD for IPv6 static routes configuration example (indirect next hop) Network requirements As shown in Figure • Switch A has a route to interface Loopback 1 (2::9/128) on Switch B, and the output interface is VLAN-interface 10.
Page 415
Device Interface IPv6 address Switch D Vlan-int10 12::2/64 Switch D Vlan-int12 11::1/64 Configuration procedure Configure IPv6 addresses for interfaces. (Details not shown.) Configure IPv6 static routes and BFD: # Configure IPv6 static routes on Switch A and enable BFD control packet mode for the IPv6 static route that traverses Switch D.
Page 416
Destination IP: 2::9 Session State: Up Interface: N/A Hold Time: 2012ms The output shows that the BFD session has been created. # Display the IPv6 static routes on Switch A. <SwitchA> display ipv6 routing-table protocol static Summary Count : 1 Static Routing table Status : <Active>...
Configuring an IPv6 default route A default IPv6 route is used to forward packets that match no entry in the routing table. A default IPv6 route can be configured in either of the following ways: • The network administrator can configure a default route with a destination prefix of ::/0. For more information, see "Configuring IPv6 static routing."...
Configuring RIPng Overview RIP next generation (RIPng) is an extension of RIP-2 for support of IPv6. Most RIP concepts are applicable to RIPng. RIPng is a distance vector routing protocol. It employs UDP to exchange route information through port 521. RIPng uses a hop count to measure the distance to a destination. The hop count is the metric or cost.
A response packet that fails the check is discarded. Protocols and standards • RFC 2080, RIPng for IPv6 • RFC 2081, RIPng Protocol Applicability Statement RIPng configuration task list Tasks at a glance (Required.) Configuring basic RIPng (Optional.) Configuring RIPng route control: •...
Step Command Remarks By default, RIPng is disabled. Enable RIPng on the If RIPng is not enabled on an ripng process-id enable interface. interface, the interface does not send or receive any RIPng route. Configuring RIPng route control Before you configure RIPng, complete the following tasks: •...
Step Command Remarks Enter interface view. interface interface-type interface-number By default, the Advertise a summary IPv6 ripng summary-address ipv6-address summary IPv6 prefix prefix. prefix-length is not configured. Advertising a default route You can configure RIPng to advertise a default route with the specified cost to its neighbors. To configure RIPng to advertise a default route: Step Command...
Step Command Remarks Enter system view. system-view ripng [ process-id ] Enter RIPng view. [ vpn-instance vpn-instance-name ] preference { preference | By default, the preference of Set a preference for RIPng. route-policy route-policy-name } RIPng is 100. Configuring RIPng route redistribution Step Command Remarks...
Step Command Remarks ripng [ process-id ] Enter RIPng view. [ vpn-instance vpn-instance-name ] By default, zero field check is Enable the zero field check checkzero enabled for incoming RIPng on incoming RIPng packets. packets. Setting the maximum number of ECMP routes Step Command Remarks...
Setting the interval for sending triggered updates Perform this task to avoid network overhead and reduce system resource consumption caused by frequent RIPng triggered updates. You can use the timer triggered command to set the maximum interval, minimum interval, and incremental interval for sending RIPng triggered updates.
Step Command Remarks ripng [ process-id ] Enable RIPng and enter [ vpn-instance RIPng view. vpn-instance-name ] Enable the GR capability for graceful-restart By default, RIPng GR is disabled. RIPng. (Optional.) Set the GR By default, the GR interval is 60 graceful-restart interval interval interval.
As shown in Figure 94, configure FRR on Router B by using a routing policy to specify a backup next hop. When the primary link fails, RIPng directs packets to the backup next hop. At the same time, RIPng calculates the shortest path based on the new network topology. Then, the device forwards packets over that path after network convergence.
Displaying and maintaining RIPng Execute display commands in any view and reset commands in user view. Task Command Display configuration information for a display ripng [ process-id ] RIPng process. display ripng process-id database [ ipv6-address Display routes in the RIPng database. prefix-length ] Display RIPng GR information.
Page 430
Route Flags: A - Aging, S - Suppressed, G - Garbage-collect, D – Direct O - Optimal, F - Flush to RIB ---------------------------------------------------------------- Peer FE80::200:2FF:FE64:8904 on Vlan-interface100 Destination 3::/64, via FE80::200:2FF:FE64:8904, cost 1, tag 0, AOF, 31 secs Destination 4::/64, via FE80::200:2FF:FE64:8904, cost 2, tag 0, AOF, 31 secs Destination 5::/64, via FE80::200:2FF:FE64:8904, cost 2, tag 0, AOF, 31 secs...
Peer FE80::2:100 on Vlan-interface100 Destination 4::/64, via FE80::1:100, cost 2, tag 0, AOF, 2 secs RIPng route redistribution configuration example Network requirements As shown in Figure 96, Switch B communicates with Switch A through RIPng 100 and with Switch C through RIPng 200.
Figure 97 Network diagram Router ID: 1.1.1.1 GR restarter Switch A Vlan-int100 2000::1/24 Vlan-int100 Vlan-int100 2000::2/24 2000::3/24 Switch B Switch C GR helper GR helper Router ID: 3.3.3.3 Router ID: 2.2.2.2 Configuration procedure Configure IPv6 addresses for interfaces. (Details not shown.) Configure RIPng on the switches to ensure the following: (Details not shown.) Switch A, Switch B, and Switch C can communicate with each other at Layer 3.
Page 435
Figure 98 Network diagram Loop 0 Loop 0 2002::2/128 4004::4/128 Switch S Vlan-int100 Vlan-int200 1200:1::1/64 1400:1::1/64 Vlan-int100 Vlan-int200 1200:1::2/64 1400:1::2/64 Switch B Switch A Configuration procedure Configure IPv6 addresses for interfaces. (Details not shown.) Configure RIPng on the switches to ensure the following: (Details not shown.) Switch S, Switch A, and Switch B can communicate with each other at Layer 3.
Route Flags: A - Aging, S - Suppressed, G - Garbage-collect, D - Direct O - Optimal, F - Flush to RIB ---------------------------------------------------------------- Peer FE80::AE45:5CE7:422E:2867 on Vlan-interface100 Destination 1400:1::/64, via FE80::AE45:5CE7:422E:2867, cost 1, tag 0, AOF, 1 secs Destination 4004::4/128, via FE80::AE45:5CE7:422E:2867, cost 2, tag 0, AOF, 1 secs Local route Destination 2002::2/128,...
Page 437
Figure 99 Network diagram Switch C Link B Link A Loop0 Loop0 Vlan-int200 Vlan-int200 Switch A Switch B Device Interface IP address Switch A VLAN-interface 100 1::1/64 Switch A VLAN-interface 200 2::1/64 Switch A Loopback 0 10::1/128 Switch B VLAN-interface 101 3::1/64 Switch B VLAN-interface 200...
Page 438
[SwitchB-ripng-1] quit Verifying the configuration # Display the route 20::1/128 on Switch A to view the backup next hop information. [SwitchA] display ipv6 routing-table 20::1 128 verbose Summary count : 1 Destination: 20::1/128 Protocol: RIPng Process ID: 1 SubProtID: 0x0 Age: 00h17m42s Cost: 1 Preference: 100...
Configuring OSPFv3 This chapter describes how to configure RFC 2740-compliant Open Shortest Path First version 3 (OSPFv3) for an IPv6 network. For more information about OSPFv2, see "Configuring OSPF." Overview OSPFv3 and OSPFv2 have the following in common: • 32-bit router ID and area ID. •...
• AS External LSA—Type-5 LSA, originated by ASBRs, and flooded throughout the AS, except stub areas and Not-So-Stubby Areas (NSSAs). Each AS External LSA describes a route to another AS. A default route can be described by an AS External LSA. •...
Tasks at a glance (Optional.) Tuning and optimizing OSPFv3 networks: • Setting OSPFv3 timers • Setting LSA transmission delay • Setting SPF calculation interval • Setting the LSA generation interval • Setting a DR priority for an interface • Ignoring MTU check for DD packets •...
Step Command Remarks Enable an OSPFv3 process ospfv3 process-id area area-id By default, no OSPFv3 processes on the interface. [ instance instance-id ] are enabled on an interface. Configuring OSPFv3 area parameters OSPFv3 has the same stub area, NSSA area, and virtual link features as OSPFv2. After you split an OSPFv3 AS into multiple areas, the LSA number is reduced and OSPFv3 applications are extended.
To configure a totally NSSA area, configure the nssa no-summary command on the ABR. The ABR of a totally NSSA area does not advertise inter-area routes into the area. To configure an NSSA area: Step Command Remarks Enter system view. system-view ospfv3 [ process-id | Enter OSPFv3 view.
Follow these guidelines when you change the network type of an OSPFv3 interface: • An NBMA network must be fully connected. Any two routers in the network must be directly reachable to each other through a virtual circuit. If no such direct link is available, you must change the network type through a command.
Configuring OSPFv3 route summarization Route summarization enables an ABR or ASBR to summarize contiguous networks into a single network and advertise it to other areas. Configuring route summarization on an ABR If contiguous network segments exist in an area, you can summarize them into one network segment on the ABR.
Step Command Remarks By default, OSPFv3 accepts all filter-policy { ipv6-acl-number [ gateway routes calculated using received prefix-list-name ] | prefix-list LSAs. Configure OSPFv3 to prefix-list-name [ gateway filter routes calculated This command can only filter prefix-list-name ] | gateway using received LSAs.
Step Command Remarks Enter system view. system-view ospfv3 [ process-id | Enter OSPFv3 view. vpn-instance vpn-instance-name ] * Set a bandwidth reference bandwidth-reference value The default setting is 100 Mbps. value. Setting the maximum number of OSPFv3 ECMP routes Perform this task to implement load sharing over ECMP routes. To set the maximum number of ECMP routes: Step Command...
Page 448
IMPORTANT: The import-route bgp4+ command redistributes only EBGP routes. Because the import-route bgp4+ allow-ibgp command redistributes both EBGP and IBGP routes, and might cause routing loops, use it with caution. Redistributing routes from another routing protocol Step Command Remarks Enter system view. system-view ospfv3 [ process-id | vpn-instance Enter OSPFv3 view.
Step Command Remarks Set a tag for redistributed By default, the tag of default tag tag routes. redistributed routes is 1. Tuning and optimizing OSPFv3 networks This section describes configurations of OSPFv3 timers, interface DR priority, and the logging of neighbor state changes.
Step Command Remarks interface interface-type Enter interface view. interface-number Set the LSA transmission ospfv3 trans-delay seconds By default, the LSA transmission delay. [ instance instance-id ] delay is 1 second. Setting SPF calculation interval LSDB changes result in SPF calculations. When the topology changes frequently, a large amount of network and router resources are occupied by SPF calculation.
Setting a DR priority for an interface The router priority is used for DR election. Interfaces having the priority 0 cannot become a DR or BDR. To configure a DR priority for an interface: Step Command Remarks Enter system view. system-view Enter interface view.
Step Command Remarks By default, the interfaces are able to receive and send OSPFv3 packets. This command disables only the Disable interfaces from silent-interface { interface-type interfaces associated with the receiving and sending interface-number | all } current process. However, OSPFv3 packets.
Step Command Remarks By default, MIB is bound to the Bind MIB to an OSPFv3 ospfv3 mib-binding process-id process with the smallest process. process ID. snmp-agent trap enable ospfv3 [ grrestarter-status-change | grhelper-status-change | if-state-change | if-cfg-error | Enable SNMP notifications if-bad-pkt | neighbor-state-change | By default, SNMP notifications for OSPFv3.
• Use the OSPFv3 max-metric router LSA feature. This feature enables OSPFv3 to advertise its locally generated Type-1 LSAs with a maximum cost of 65535. Neighbors do not send packets to the stub router as long as they have a route with a smaller cost. To configure a router as a stub router: Step Command...
Configuring prefix suppression for an interface Step Command Remarks Enter system view. system-view Enter interface interface interface-type interface-number view. Enable prefix ospfv3 prefix-suppression [ disable ] By default, prefix suppression suppression for the [ instance instance-id ] is disabled for an interface. interface.
Configuring OSPFv3 GR GR ensures forwarding continuity when a routing protocol restarts or an active/standby switchover occurs. Two routers are required to complete a GR process. The following are router roles in a GR process: • GR restarter—Graceful restarting router. It must be Graceful Restart capable. •...
Step Command Remarks Enable strict LSA graceful-restart helper By default, strict LSA checking is checking. strict-lsa-checking disabled. Triggering OSPFv3 GR OSPFv3 GR is triggered by an active/standby switchover or when the following command is executed. To trigger OSPFv3 GR, perform the following command in user view: Task Command reset ospfv3 [ process-id ] process graceful-restart...
To configure BFD for OSPFv3, you need to configure OSPFv3 first. To configure BFD for OSPFv3: Step Command Remarks Enter system view. system-view ospfv3 [ process-id | Enter OSPFv3 view. vpn-instance vpn-instance-name ] * Specify a router ID. router-id router-id Quit the OSPFv3 view.
Configuration guidelines Do not use the fast-reroute lfa command together with the vlink-peer command. Configuration procedure Configuring OSPFv3 FRR to calculate a backup next hop using the LFA algorithm Step Command Remarks Enter system view. system-view interface interface-type Enter interface view. interface-number By default, the interface on which LFA (Optional.) Disable LFA on...
Step Command Remarks Enter system view. system-view interface interface-type Enter interface view. interface-number Enable BFD control ospfv3 primary-path-detect bfd By default, BFD control packet packet mode for OSPFv3 ctrl [ instance instance-id ] mode for OSPFv3 FRR is disabled. FRR. To configure BFD echo packet mode for OSPFv3 FRR: Step Command...
Page 462
Configuration procedure Configure IPv6 addresses for interfaces. (Details not shown.) Configure basic OSPFv3: # On Switch A, enable OSPFv3 and specify the router ID as 1.1.1.1. <SwitchA> system-view [SwitchA] ospfv3 [SwitchA-ospfv3-1] router-id 1.1.1.1 [SwitchA-ospfv3-1] quit [SwitchA] interface vlan-interface 300 [SwitchA-Vlan-interface300] ospfv3 1 area 1 [SwitchA-Vlan-interface300] quit [SwitchA] interface vlan-interface 200 [SwitchA-Vlan-interface200] ospfv3 1 area 1...
Page 463
Area: 0.0.0.0 ------------------------------------------------------------------------- Router ID Pri State Dead-Time InstID Interface 3.3.3.3 Full/BDR 00:00:40 Vlan100 Area: 0.0.0.1 ------------------------------------------------------------------------- Router ID Pri State Dead-Time InstID Interface 1.1.1.1 Full/DR 00:00:40 Vlan200 # Display OSPFv3 neighbors on Switch C. [SwitchC] display ospfv3 peer OSPFv3 Process 1 with Router ID 3.3.3.3 Area: 0.0.0.0 ------------------------------------------------------------------------- Router ID...
Page 464
AdvRouter : 4.4.4.4 Area : 0.0.0.2 Preference : 10 *Destination: 2001:3::/64 Type : IA Cost NextHop : FE80::F40D:0:93D0:1 Interface: Vlan400 AdvRouter : 3.3.3.3 Area : 0.0.0.2 Preference : 10 Total: 4 Intra area: 1 Inter area: 3 ASE: 0 NSSA: 0 Configure Area 2 as a stub area: # Configure Switch D.
OSPFv3 NSSA area configuration example Network requirements As shown in Figure 102: • Configure OSPFv3 on all switches and split the AS into three areas. • Configure Switch B and Switch C as ABRs to forward routing information between areas. •...
Page 467
*Destination: 2001::/64 Type : IA Cost NextHop : FE80::20C:29FF:FE74:59C6 Interface: Vlan200 AdvRouter : 2.2.2.2 Area : 0.0.0.1 Preference : 10 *Destination: 2001:1::/64 Type Cost Nexthop : :: Interface: Vlan200 AdvRouter : 1.1.1.1 Area : 0.0.0.1 Preference : 10 *Destination: 2001:2::/64 Type : IA Cost...
*Destination: 2001:2::/64 Type Cost NextHop : :: Interface: Vlan400 AdvRouter : 4.4.4.4 Area : 0.0.0.2 Preference : 10 *Destination: 1234::/64 Type : E2 Cost NextHop : FE80::20C:29FF:FEB9:F2EF Interface: Vlan400 AdvRouter : 2.2.2.2 Area : 0.0.0.2 Preference : 10 Total: 4 Intra area: 1 Inter area: 2 ASE: 1...
Page 469
[SwitchA-ospfv3-1] quit [SwitchA] interface vlan-interface 100 [SwitchA-Vlan-interface100] ospfv3 1 area 0 [SwitchA-Vlan-interface100] quit # On Switch B, enable OSPFv3 and specify the router ID as 2.2.2.2. <SwitchB> system-view [SwitchB] ospfv3 [SwitchB-ospfv3-1] router-id 2.2.2.2 [SwitchB-ospfv3-1] quit [SwitchB] interface vlan-interface 200 [SwitchB-Vlan-interface200] ospfv3 1 area 0 [SwitchB-Vlan-interface200] quit # On Switch C, enable OSPFv3 and specify the router ID as 3.3.3.3.
Page 470
Router ID Pri State Dead-Time InstID Interface 1.1.1.1 Full/DROther 00:00:30 Vlan100 2.2.2.2 Full/DROther 00:00:37 Vlan200 3.3.3.3 Full/BDR 00:00:31 Vlan100 Configure router priorities for interfaces: # Set the router priority of VLAN-interface 100 to 100 on Switch A. [SwitchA] interface Vlan-interface 100 [SwitchA-Vlan-interface100] ospfv3 dr-priority 100 [SwitchA-Vlan-interface100] quit # Set the router priority of VLAN-interface 200 to 0 on Switch B.
Area: 0.0.0.0 ------------------------------------------------------------------------- Router ID Pri State Dead-Time InstID Interface 2.2.2.2 Full/DROther 00:00:36 Vlan200 3.3.3.3 Full/BDR 00:00:35 Vlan100 4.4.4.4 Full/DROther 00:00:33 Vlan200 # Display neighbor information on Switch D. [SwitchD] display ospfv3 peer OSPFv3 Process 1 with Router ID 4.4.4.4 Area: 0.0.0.0 ------------------------------------------------------------------------- Router ID...
Page 472
[SwitchA-ospfv3-1] quit [SwitchA] interface vlan-interface 100 [SwitchA-Vlan-interface100] ospfv3 1 area 2 [SwitchA-Vlan-interface100] quit [SwitchA] interface vlan-interface 200 [SwitchA-Vlan-interface200] ospfv3 1 area 2 [SwitchA-Vlan-interface200] quit # Enable OSPFv3 process 1 and OSPFv3 process 2 on Switch B. <SwitchB> system-view [SwitchB] ospfv3 1 [SwitchB-ospfv3-1] router-id 2.2.2.2 [SwitchB-ospfv3-1] quit [SwitchB] interface vlan-interface 100...
OSPFv3 GR configuration example Network requirements As shown in Figure 106: • Switch A, Switch B, and Switch C that reside in the same AS and the same OSPFv3 routing domain are GR capable. • Switch A acts as the GR restarter. Switch B and Switch C act as the GR helpers, and synchronize their LSDBs with Switch A through GR.
[SwitchC] interface vlan-interface 100 [SwitchC-Vlan-interface100] ospfv3 1 area 1 [SwitchC-Vlan-interface100] quit Verifying the configuration # Perform a master/backup switchover on Switch A to trigger an OSPFv3 GR operation. (Details not shown.) OSPFv3 NSR configuration example Network requirements As shown in Figure 107, Switch S, Switch A, and Switch B belong to the same AS and OSPFv3 routing domain.
[SwitchS] interface vlan-interface 100 [SwitchS-Vlan-interface100] ospfv3 1 area 1 [SwitchS-Vlan-interface100] quit [SwitchS] interface vlan-interface 200 [SwitchS-Vlan-interface200] ospfv3 1 area 1 [SwitchS-Vlan-interface200] quit Verifying the configuration # Verify the following: • When an active/standby switchover occurs on Switch S, the neighbor relationships and routing information on Switch A and Switch B have not changed.
Page 481
# On Switch A, enable OSPFv3 and specify the router ID as 1.1.1.1. <SwitchA> system-view [SwitchA] ospfv3 [SwitchA-ospfv3-1] router-id 1.1.1.1 [SwitchA-ospfv3-1] quit [SwitchA] interface vlan-interface 10 [SwitchA-Vlan-interface10] ospfv3 1 area 0 [SwitchA-Vlan-interface10] quit [SwitchA] interface vlan-interface 11 [SwitchA-Vlan-interface11] ospfv3 1 area 0 [SwitchA-Vlan-interface11] quit # On Switch B, enable OSPFv3 and specify the router ID as 2.2.2.2.
[SwitchB-Vlan-interface10] bfd detect-multiplier 6 Verifying the configuration # Display the BFD information on Switch A. <SwitchA> display bfd session Total Session Num: 1 Init Mode: Active IPv6 Session Working Under Ctrl Mode: Local Discr: 1441 Remote Discr: 1450 Source IP: FE80::20F:FF:FE00:1202 (link-local address of VLAN-interface 10 on Switch A) Destination IP: FE80::20F:FF:FE00:1200 (link-local address of VLAN-interface 10 on Switch B)
Page 483
Figure 109 Network diagram Switch C Link B Link A Loop0 Loop0 Vlan-int200 Vlan-int200 Switch A Switch B Table 27 Interface and IP address assignment Device Interface IP address Device Interface IP address Switch A Vlan-int100 1::1/64 Switch B Vlan-int101 3::1/64 Vlan-int200 2::1/64...
Step Command Remarks Configure the network entity title (NET) for the IS-IS network-entity net By default, no NET is configured. process. Create the IPv6 address By default, no IS-IS IPv6 address address-family ipv6 [ unicast ] family and enter its view. family exists.
Step Command Remarks 10. Configure the maximum By default, the maximum number of redistributed number of redistributed import-route limit number Level 1/Level 2 IPv6 Level 1/Level 2 IPv6 routes routes. is not configured. import-route isisv6 level-2 into level-1 11. Configure route By default, IPv6 IS-IS does [ filter-policy { ipv6-acl-number | prefix-list advertisement from...
Step Command Remarks Configure a tag value on the By default, no tag value is isis ipv6 tag tag interface. configured on an interface. Controlling SPF calculation interval Step Command Remarks Enter system view. system-view isis [ process-id ] [ vpn-instance Enter IS-IS view.
Step Command Remarks Enter system view. system-view interface interface-type Enter interface view. interface-number Enable prefix suppression on By default, prefix suppression is isis ipv6 prefix-suppression the interface. disabled on an interface. Configuring BFD for IPv6 IS-IS Bidirectional forwarding detection (BFD) can quickly detect faults between IPv6 IS-IS neighbors to improve the convergence speed of IPv6 IS-IS.
Figure 110 Network diagram for IPv6 IS-IS FRR Backup next hop: Router C Router B Next hop: Router D Router E Figure 110, after you enable FRR on Router B, IPv6 IS-IS FRR automatically calculates or designates a backup next hop when a link failure is detected. In this way, packets are directed to the backup next hop to reduce traffic recovery time.
Page 493
Configuring IPv6 IS-IS FRR using a routing policy You can use the apply ipv6 fast-reroute backup-interface command to specify a backup next hop in a routing policy for routes matching specific criteria. You can also perform this task to reference the routing policy for IPv6 IS-IS FRR.
Step Command Remarks interface interface-type Enter interface view. interface-number By default, BFD echo packet Enable BFD echo packet isis ipv6 primary-path-detect bfd mode for IPv6 IS-IS FRR is mode for IPv6 IS-IS FRR. echo disabled. Enabling IPv6 IS-IS MTR On a network, IPv4 and IPv6 topologies must be consistent so that both IPv6 IS-IS and IPv4 IS-IS can use the SPF algorithm to perform route calculation.
Page 497
[SwitchD-Vlan-interface300] quit [SwitchD] interface vlan-interface 301 [SwitchD-Vlan-interface301] isis ipv6 enable 1 [SwitchD-Vlan-interface301] quit Verifying the configuration # Display the IPv6 IS-IS routing table on Switch A. [SwitchA] display isis route ipv6 Route information for IS-IS(1) ------------------------------ Level-1 IPv6 Forwarding Table ----------------------------- Destination : :: PrefixLen: 0...
Page 498
Destination : 2001:2:: PrefixLen: 64 Flag : R/-/- Cost : 20 Next Hop : Direct Interface: Vlan200 Destination : 2001:3:: PrefixLen: 64 Flag : R/-/- Cost : 20 Next Hop : FE80::200:FF:FE0F:4 Interface: Vlan200 Flags: D-Direct, R-Added to Rib, L-Advertised in LSPs, U-Up/Down Bit Set # Display the IPv6 IS-IS routing table on Switch C.
Flag : R/-/- Cost : 10 Next Hop : FE80::20F:E2FF:FE3E:FA3D Interface: Vlan300 Flags: D-Direct, R-Added to Rib, L-Advertised in LSPs, U-Up/Down Bit Set # Display the IPv6 IS-IS routing table on Switch D. [SwitchD] display isis route ipv6 Route information for IS-IS(1) ------------------------------ Level-2 IPv6 Forwarding Table -----------------------------...
Page 500
Figure 113 Network diagram 2001:1::/64 2001:4::/64 Switch A Switch B Vlan-int10 Vlan-int10 Vlan-int11 Vlan-int13 L2 Switch Area 0 Vlan-int11 Vlan-int13 Switch C Table 28 Interface and IP address assignment Device Interface IPv6 address Switch A Vlan-int10 2001::1/64 Switch A Vlan-int11 2001:2::1/64 Switch B Vlan-int10...
Destination IP: FE80::20F:FF:FE00:1200 (link-local address of VLAN-interface 10 on Switch B) Session State: Up Interface: Vlan10 Hold Time: 2319ms # Display routes destined for 2001:4::0/64 on Switch A. <SwitchA> display ipv6 routing-table 2001:4::0 64 Summary Count : 1 Destination: 2001:4::/64 Protocol : IS_L1 NextHop...
Page 503
Device Interface IP address Device Interface IP address Vlan-int101 3::2/64 Configuration procedure Configure IPv6 addresses for interfaces on the switches and enable IPv6 IS-IS. (Details not shown.) Configure IPv6 IS-IS on the switches to make sure Switch A, Switch B, and Switch C can communicate with each other at Layer 3.
Page 504
[SwitchB-isis-1-ipv6] quit [SwitchB-isis-1] quit Verifying the configuration # Display route 20::1/128 on Switch A to view the backup next hop information. [SwitchA] display ipv6 routing-table 20::1 128 verbose Summary count : 1 Destination: 20::1/128 Protocol: IS_L1 Process ID: 1 SubProtID: 0x1 Age: 00h27m45s Cost: 10 Preference: 15...
Configuring IPv6 PBR Overview Policy-based routing (PBR) uses user-defined policies to route packets. A policy can specify the next hop for packets that match specific criteria such as ACLs. A device forwards received packets using the following process: The device uses PBR to forward matching packets. If the packets do not match the PBR policy or the PBR-based forwarding fails, the device uses the routing table, excluding the default route, to forward the packets.
Relationship between the match mode and clauses on the node Does a packet match all Match mode the if-match clauses on the In permit mode In deny mode node? • If the node is configured with apply clauses, IPv6 PBR executes the apply clauses on the node.
Configuring an IPv6 policy Creating an IPv6 node Step Command Remarks Enter system view. system-view Create an IPv6 policy or policy node, and ipv6 policy-based-route policy-name [ deny | By default, no IPv6 policy enter IPv6 policy permit ] node node-number node is created.
Configuring IPv6 PBR Configuring IPv6 local PBR Configure IPv6 PBR by applying a policy locally. IPv6 PBR uses the policy to guide the forwarding of locally generated packets. The specified policy must already exist. Otherwise, the IPv6 local PBR configuration fails. You can apply only one policy locally.
Configuring routing policies Overview Routing policies control routing paths by filtering and modifying routing information. This chapter describes both IPv4 and IPv6 routing policies. Routing policies can filter advertised, received, and redistributed routes, and modify attributes for specific routes. To configure a routing policy: Configure filters based on route attributes, such as destination address and the advertising router's address.
Routing policy A routing policy can contain multiple nodes, which are in a logical OR relationship. A node with a smaller number is matched first. A route matches the routing policy if it matches one node (except the node configured with the continue clause) in the routing policy. Each node has a match mode of permit or deny.
Step Command Remarks ip prefix-list prefix-list-name [ index index-number ] Configure an IPv4 { deny | permit } ip-address mask-length By default, no IPv4 prefix list. [ greater-equal min-mask-length ] [ less-equal prefix lists exist. max-mask-length ] Configuring an IPv6 prefix list If all items are set to deny mode, no routes can pass the IPv6 prefix list.
Configuring an extended community list You can configure multiple items for an extended community list that is identified by a number. The relationship between the items is logical OR. A route matches the extended community list if it matches one item in the list. To configure an extended community list: Step Command...
Configuring if-match clauses You can either specify no if-match clauses or multiple if-match clauses for a routing policy node. If no if-match clause is specified for a permit node, all routes can pass the node. If no if-match clause is specified for a deny node, no routes can pass the node. The if-match clauses of a routing policy node have a logical AND relationship.
Step Command Remarks By default, no output interface match criterion is Match routes having the if-match interface { interface-type configured. specified output interface. interface-number }&<1-16> This command is not supported by BGP. By default, no local Match BGP routes having the if-match local-preference preference is configured for specified local preference.
Page 520
Step Command Remarks apply community { none | additive | Set the specified { community-number&<1-32> | By default, no community attribute is COMMUNITY attribute for aa:nn&<1-32> | internet | set for BGP routes. BGP routes. no-advertise | no-export | no-export-subconfed } * [ additive ] } Set a cost for routes.
Step Command Remarks • Set an IPv4 backup link for FRR: apply fast-reroute { backup-interface interface-type interface-number [ backup-nexthop ip-address ] | backup-nexthop ip-address } 21. Set a backup link for fast By default, no backup link is set for •...
Task Command display ip as-path [ as-path-number ] Display BGP AS path list information. display ip community-list [ basic-community-list-number | Display BGP community list adv-community-list-number | name comm-list-name ] information. Display BGP extended community list display ip extcommunity-list [ ext-comm-list-number ] information.
Total Nets: 4 Intra Area: 1 Inter Area: 0 ASE: 3 NSSA: 0 The output shows that the cost of route 172.17.1.0/24 is 100 and the tag of route 172.17.2.0/24 is 20. Routing policy configuration example for IPv6 route redistribution Network requirements As shown in Figure...
Configuring DCN Overview Data communication network (DCN) is built for the network management system (NMS) to implement operation, administration, and maintenance (OAM) on the network elements (NEs). On large-scaled networks with DCN configured, the NMS remotely manages and controls all NEs through the gateway network element (GNE), which reduces operation and maintenance costs.
Tasks at a glance (Optional.) Enabling the automatic report feature (Optional.) Configuring the source MAC address of LLDP frames (Required.) Advertising the LLDP management address (Required.) Enabling the system to issue the generated ARP entry to a Layer 3 Ethernet subinterface after a port receives an LLDP frame Enabling DCN After DCN is enabled, the device assigns an NE IP to the loopback interface with the largest interface...
Step Command Remarks Enter system view. system-view Create a VPN instance and ip vpn-instance By default, no VPN instances enter its view. vpn-instance-name exist. Quit VPN instance view. quit Create a loopback interface interface loopback By default, no loopback and enter its view. interface-number interfaces exist.
Advertising the LLDP management address An NE on the DCN network learns the MAC address of its neighbor through LLDP. Perform this task to enable an NE to advertise the IP address of the specified loopback interface (management address) for ARP entry learning. For more information about LLDP, see Layer 2—LAN Switching Configuration Guide.
DCN configuration examples Network requirements As shown in Figure 119, the GNE, Device A, and Device B run DCN in the same VPN instance. The NMS uses SNMP to manage the GNE, and the GNE automatically sends notifications to the NMS to report online or offline events of NEs.
Page 532
# Configure the system to issue the generated ARP entry to the Layer 3 Ethernet subinterface associated with VLAN 4094 in Dot1q termination after GigabitEthernet 1/0/1 receives an LLDP frame. [GNE-GigabitEthernet1/0/1] lldp management-address arp-learning vlan 4094 [GNE-GigabitEthernet1/0/1] quit # Enable the nearest bridge agents on GigabitEthernet 1/0/2 to advertise basic LLDP TLVs and management address TLVs.
Page 533
[DeviceA] ip vpn-instance dcn_vpn [DeviceA-vpn-instance-dcn_vpn] quit # Create interface Loopback 1023, and associate it with VPN instance dcn_vpn. [DeviceA] interface loopback 1023 [DeviceA-LoopBack1023] ip binding vpn-instance dcn_vpn [DeviceA-LoopBack1023] quit # Enable LLDP globally. [DeviceA] lldp global enable # Enable the nearest bridge agents on GigabitEthernet 1/0/1 to advertise basic LLDP TLVs and management address TLVs.
Page 534
[DeviceA] interface gigabitethernet 1/0/1 [DeviceA-GigabitEthernet1/0/1] ospf network-type p2p [DeviceA-GigabitEthernet1/0/1] quit # Set the OSPF network type for GigabitEthernet 1/0/2 to P2P. [DeviceA] interface gigabitethernet 1/0/2 [DeviceA-GigabitEthernet1/0/2] ospf network-type p2p [DeviceA-GigabitEthernet1/0/2] quit Configure Device B: # Enable DCN, configure the NE ID as 300003 and NE IP as 33.3.3.3/32. <DeviceB>...
Page 535
[DeviceB-GigabitEthernet1/0/1] ip binding vpn-instance dcn_vpn [DeviceB-GigabitEthernet1/0/1] ip address unnumbered interface loopback 1023 [DeviceB-GigabitEthernet1/0/1] quit # Create GigabitEthernet 1/0/2 that borrows the IP address of Loopback 1023. [DeviceB] interface gigabitethernet 1/0/2 [DeviceB-GigabitEthernet1/0/2] ip binding vpn-instance dcn_vpn [DeviceB-GigabitEthernet1/0/2] ip address unnumbered interface loopback 1023 [DeviceB-GigabitEthernet1/0/2] quit # Enable OSPF process 65535 to run in VPN instance dcn_vpn, and create area 0.
Page 536
# Remove Device B from the DCN network and display all DCN NE information for the GNE. [GNE] display dcn ne-info DCN Network Elements Information NE ID NE IP Metric Device Type 0x100001 11.1.1.1 HPE 7502 0x200002 22.2.2.2 HPE 7503 Total number: 2 The output shows that GNE and Device A are online.
Document conventions and icons Conventions This section describes the conventions used in the documentation. Command conventions Convention Description Boldface Bold text represents commands and keywords that you enter literally as shown. Italic Italic text represents arguments that you replace with actual values. Square brackets enclose syntax choices (keywords or arguments) that are optional.
Network topology icons Convention Description Represents a generic network device, such as a router, switch, or firewall. Represents a routing-capable device, such as a router or Layer 3 switch. Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that supports Layer 2 forwarding and other Layer 2 features.
Hewlett Packard Enterprise Support Center More Information on Access to Support Materials page: www.hpe.com/support/AccessToSupportMaterials IMPORTANT: Access to some updates might require product entitlement when accessed through the Hewlett Packard Enterprise Support Center. You must have an HP Passport set up with relevant entitlements.
Websites Website Link Networking websites Hewlett Packard Enterprise Information Library for www.hpe.com/networking/resourcefinder Networking Hewlett Packard Enterprise Networking website www.hpe.com/info/networking Hewlett Packard Enterprise My Networking website www.hpe.com/networking/support Hewlett Packard Enterprise My Networking Portal www.hpe.com/networking/mynetworking Hewlett Packard Enterprise Networking Warranty www.hpe.com/networking/warranty General websites Hewlett Packard Enterprise Information Library www.hpe.com/info/enterprise/docs Hewlett Packard Enterprise Support Center...
Page 541
part number, edition, and publication date located on the front cover of the document. For online help content, include the product name, product version, help edition, and publication date located on the legal notices page.