ccnpv6 route lab6-4 bgp reflectors filters student

8/12/2019 CCNPv6 ROUTE Lab6-4 BGP Reflectors Filters Student

http://slidepdf.com/reader/full/ccnpv6-route-lab6-4-bgp-reflectors-filters-student 1/10

CCNPv6 ROUTE

Chapter 6 Lab 6-4, BGP Route Reflectors and Route Filters

Topology

Objectives

• Configure IBGP routers to use a route reflector and a simple route filter

Background

!he International !ra"el #genc$ maintains a full-mesh IBGP net%or& that has 'uic&l$ scaled be$ond ())

routers !he compan$ %ants to implement route reflectors to %or& around the full-mesh IBGP re'uirement

Configure a small cluster and obser"e ho% BGP operates in this configuration *se IP prefi+ filters to control

the updates bet%een IBGP peers

Note: !his lab uses Cisco (4( routers %ith Cisco I. Release (/40/41!( and the #d"anced IP .er"ices

image c(4(-ad"ipser"ices&2-m3(/4-/4!(bin ou can use other routers 0such as a /)( or /((1 and

Cisco I. .oft%are "ersions if the$ ha"e comparable capabilities and features 5epending on the router or

s%itch model and Cisco I. .oft%are "ersion, the commands a"ailable and output produced might "ar$ from

%hat is sho%n in this lab

#ll contents are Cop$right (22/7/)() Cisco .$stems, Inc #ll rights reser"ed !his document is Cisco Public Information Page ( of ()



CCNPv6 ROUTE

Reuired Resources

• 8 routers 0Cisco (4( %ith Cisco I. Release (/40/41!( #d"anced IP .er"ices or comparable1

• .erial and console cables

!tep ": Prepare t#e routers $or t#e lab%

Cable the net%or& as sho%n in the topolog$ diagram 9rase the startup configuration and reload each router

to clear pre"ious configurations 5o not configure Loopbac& ) on .an:ose8 at this time

!tep &: Con$igure t#e #ostna'e and inter$ace addresses%

ou can cop$ and paste the follo%ing configurations into $our routers to begin

Router R" (#ostna'e !an)ose"*

hostname SanJose1

!

interface Serial0/0/0

ip address 192.168.1.5 255.255.255.252

clock rate 128000

no shutdown

Router R& (#ostna'e !an)ose&*

hostname SanJose2

!

interface oopack0

ip address 10.2.2.1 255.255.255.0

!


ip address 192.168.1.6 255.255.255.252

no shutdown

!


ip address 1"2.2#.1.1" 255.255.255.0 clock rate 128000

no shutdown

Router R+ (#ostna'e !an)ose+*

hostname SanJose$

!


ip address 1"2.2#.1.18 255.255.255.0

no shutdown

Note; 5o not configure R8 0.an:ose81 %ith loopbac& ) at this time !hat %ill be done in a later step

!tep +: Con$igure R,Pv&%a Build and configure the net%or& according to the diagram *se RIP"/ as the IGP 5o not configure the

(2(88/(2) net%or& under the RIP process

SanJose1%confi&'( router ripSanJose1%confi&)router'( version 2SanJose1%confi&)router'( no auto-summarySanJose1%confi&)router'( network 192.168.1.0

SanJose2%confi&'( router ripSanJose2%confi&)router'( version 2

#ll contents are Cop$right (22/7/)() Cisco .$stems, Inc #ll rights reser"ed !his document is Cisco Public Information Page / of ()



CCNPv6 ROUTE

SanJose2%confi&)router'( no auto-summarySanJose2%confi&)router'( network 172.24.0.0SanJose2%confi&)router'( network 192.168.1.0SanJose2%confi&)router'( network 10.0.0.0

SanJose$%confi&'( router rip

SanJose$%confi&)router'( version 2SanJose$%confi&)router'( no auto-summarySanJose$%confi&)router'( network 172.24.0.0

b Issue the s#o- ip route command on the routers to "erif$ that each router has a complete routing table

SanJose1( show ip route*odes+ * ) connected, S ) static, - ) -, ) moile, )

3 ) 4-, 4 ) 4- eternal, 7 ) 7S, ) 7S inter area

:1 ) 7S :SS eternal t;pe 1, :2 ) 7S :SS eternal t;pe 2

41 ) 7S eternal t;pe 1, 42 ) 7S eternal t;pe 2

i ) S)S, su ) S)S summar;, 1 ) S)S le<el)1, 2 ) S)S le<el)2

ia ) S)S inter area, = ) candidate default, > ) per)user static route

o ) 73-, ) periodic downloaded static route

atewa; of last resort is not set

1"2.2#.0.0/2# is sunetted, 1 sunets

- 1"2.2#.1.0 ?120/1@ <ia 192.168.1.6, 00+00+21, Serial0/0/0

10.0.0.0/2# is sunetted, 1 sunets

- 10.2.2.0 ?120/1@ <ia 192.168.1.6, 00+00+21, Serial0/0/0

192.168.1.0/$0 is sunetted, 1 sunets

* 192.168.1.# is directl; connected, Serial0/0/0

c Run the follo%ing !cl script on all routers to "erif$ connecti"it$

SanJose1( tclsh

foreach address

10.2.2.1192.168.1.!192.168.1.6172.24.1.17172.24.1.18"

pin# $address "

!tep .: Con$igure ,B/P peers and route re$lectors%

In this lab, $ou %ill configure a route reflector B$ default, a router that recei"es an 9BGP route ad"ertises it to

its 9BGP and IBGP peers <o%e"er, if it recei"es it through IBGP, it does not ad"ertise it to its IBGP peers,

as a loop pre"ention mechanism !o maintain loop pre"ention, a route reflector adds t%o optional,

nontransiti"e BGP attributes to each reflected route, the RIGI=#!R>I5 and CL*.!9R>LI.! It uses theseattributes in a similar %a$ to #.>P#!< list to pre"ent routing loops from occurring .ee

http;??toolsietforg?html?rfc44@6 for more information

<o%e"er, because of this beha"ior, the onl$ %a$ for all IBGP routers to recei"e a route after it is originated

into the #. is to ha"e a full mesh of IBGP peers !his can get comple+ %ith a large number of peers # route

reflector allo%s a topolog$ to get around the IBGP limitation of ha"ing to ha"e a full mesh !o do this, a route

reflector specifies some of its neighbors as route reflector clients Ahen a route reflector recei"es an update

from a route reflector client, it can pass it on to its other clients !he route reflector %ould also pass that client-

learned route on to its other non-client peers 0both IBGP and 9BGP peers1 .imilarl$, a route learned from a

#ll contents are Cop$right (22/7/)() Cisco .$stems, Inc #ll rights reser"ed !his document is Cisco Public Information Page 8 of ()

http://tools.ietf.org/html/rfc4456





CCNPv6 ROUTE

non-client peer 0again, from either an IBGP or 9BGP peer1 %ould be passed on to its client peers !his greatl$

simplifies configuration because onl$ the route reflector needs to &no% all the other peers !he clients do not

e"en &no% that the$ are clients !o them, it is ust a normal IBGP peering relationship ou can e"en set up

multiple route reflectors in a more ad"anced configuration for redundanc$

a Configure the IBGP peers for BGP Later, $ou %ill configure .an:ose/ as the route reflector <o%e"er,

first configure it to peer %ith both of the other routersSanJose2%confi&'( router %#p 100SanJose2%confi&)router'( nei#h%or 192.168.1.! remote-as 100SanJose2%confi&)router'( nei#h%or 172.24.1.18 remote-as 100

#fter .an:ose/ is configured, configure the other t%o routers as route reflector clients Remember that to

set up clients simpl$, configure peering bet%een the client and the ser"er IBGP does not need to be

configured in a full mesh

b Issue the follo%ing commands on .an:ose(;

SanJose1%confi&'( router %#p 100SanJose1%confi&)router'( nei#h%or 192.168.1.6 remote-as 100

c Issue the follo%ing commands on .an:ose8;SanJose$%confi&'( router %#p 100SanJose$%confi&)router'( nei#h%or 172.24.1.17 remote-as 100

d *se the s#o- ip bgp neig#bors command to "erif$ that .an:ose/ has established a peering

relationship %ith both .an:ose( and .an:ose8 !roubleshoot as necessar$

SanJose2( show ip %#p nei#h%ors nei&hor is 1"2.2#.1.18, remote S 100, internal link

<ersion #, remote router 3 1"2.2#.1.18

state A 4stalished, up for 00+02+10

Boutput omittedC

nei&hor is 192.168.1.5, remote S 100, internal link <ersion #, remote router 3 192.168.1.5

state A 4stalished, up for 00+0#+15

.an:ose( and .an:ose8 should not ha"e established a connection Ah$

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

.an:ose( and .an:ose8 %ere not configured %ith the appropriate BGP neig#bor command #s route

reflector clients, .an:ose( and .an:ose8 do not need to reach an established state

!tep 0: ,nject a net-ork into B/P%

a !o obser"e the full effect of using a route reflector, configure .an:ose8 to inect e+ternal routinginformation into BGP

SanJose$%confi&'( interface loop%ack 0

SanJose$%confi&)if'( ip address 198.1&&.219.1 2!!.2!!.2!!.0

SanJose$%confi&)if'( router %#p 100SanJose$%confi&)router'( network 198.1&&.219.0

#ll contents are Cop$right (22/7/)() Cisco .$stems, Inc #ll rights reser"ed !his document is Cisco Public Information of ()



CCNPv6 ROUTE

!his configuration forces .an:ose8 to inect the e+ternal route (2(88/(2) into BGP *se the s#o- ip

route command to chec& if .an:ose/ has pic&ed up this route through BGP .an:ose/ should ha"e a

route to (2(88/(2)










* 1"2.2#.1.0 is directl; connected, Serial0/0/1


* 10.2.2.0 is directl; connected, oopack0

198.1$$.219.0/2# ?200/0@ <ia 1"2.2#.1.18, 00+01+#8

* 10.2.2.0 is directl; connected, oopack0 192.168.1.0/$0 is sunetted, 1 sunets


Ahat is the ne+t hop for this route 9+plain

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

b Derif$ that $ou can ping (2(88/(2( from .an:ose/ If not, troubleshoot

c Chec& the routing table of .an:ose( !here should not be a route to (2(88/(2) Ah$

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> d Remember that .an:ose( is not configured to peer %ith .an:ose8 !o eliminate the need for a full IBGP

mesh, .an:ose/ must be configured as a route reflector Issue the follo%ing commands on .an:ose/;

SanJose2%confi&'( router %#p 100SanJose2%confi&)router'( nei#h%or 192.168.1.! route-reflector-clientSanJose2%confi&)router'( nei#h%or 172.24.1.18 route-reflector-client

=ar 9 19+02+2".8$1+ D)5)3J*E:4+ nei&hor 192.168.1.5 3own -- client

conf

i& chan&e

=ar 9 19+02+2".9$1+ D)5)3J*E:4+ nei&hor 1"2.2#.1.18 3own -- client

conf

i& chan&e

=ar 9 19+02+$2.$8"+ D)5)3J*E:4+ nei&hor 1"2.2#.1.18 >p

=ar 9 19+02+$".50"+ D)5)3J*E:4+ nei&hor 192.168.1.5 >p

e Derif$ that an IBGP cluster %as successfull$ created b$ issuing the s#o- ip protocols command on

.an:ose/ !he output of this command should indicate that .an:ose/ is a route reflector

SanJose2( show ip protocols-outin& rotocol is FripF

7ut&oin& update filter list for all interfaces is not set

ncomin& update filter list for all interfaces is not set

#ll contents are Cop$right (22/7/)() Cisco .$stems, Inc #ll rights reser"ed !his document is Cisco Public Information Page @ of ()



CCNPv6 ROUTE

Sendin& updates e<er; $0 seconds, net due in 26 seconds

n<alid after 180 seconds, hold down 180, flushed after 2#0

-edistriutin&+ rip

3efault <ersion control+ send <ersion 2, recei<e <ersion 2

nterface Send -ec< Gri&&ered - He;)chain

Serial0/0/0 2 2

Serial0/0/1 2 2

oopack0 2 2

utomatic network summariIation is not in effect

aimum path+ #

-outin& for :etworks+

10.0.0.0

1"2.2#.0.0

192.168.1.0

-outin& nformation Sources+

atewa; 3istance ast >pdate

3istance+ %default is 120'

-outin& rotocol is F&p 100F

7ut&oin& update filter list for all interfaces is not set

ncomin& update filter list for all interfaces is not set -oute -eflector for address famil; <# >nicast, 2 clients

-oute -eflector for address famil; <6 >nicast, 2 clients

-oute -eflector for address famil; <# 3G, 2 clients

-oute -eflector for address famil; :<# >nicast, 2 clients

-oute -eflector for address famil; :<6 >nicast, 2 clients

-oute -eflector for address famil; <# ulticast, 2 clients

-oute -eflector for address famil; <6 ulticast, 2 clients

-oute -eflector for address famil; :S >nicast, 2 clients

s;nchroniIation is disaled

utomatic route summariIation is disaled

:ei&hor%s'+

ddress iltn ilt7ut 3istn 3ist7ut Kei&ht -outeap

1"2.2#.1.18

192.168.1.5

aimum path+ 1

-outin& nformation Sources+

atewa; 3istance ast >pdate

1"2.2#.1.18 200 00+01+#$

3istance+ eternal 20 internal 200 local 200

<o% man$ clients does .an:ose/ ha"e

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

f Issue the s#o- ip protocols command on .an:ose( !he output of this command does not include

information about route reflectors Remember that .an:ose( is a client and not a route reflector ser"er,

so it is una%are of route reflection

g Finall$, "erif$ that route reflection is %or&ing b$ chec&ing the routing table on .an:ose( .an:ose( %ill

ha"e a route to net%or& (2(88/(2)







#ll contents are Cop$right (22/7/)() Cisco .$stems, Inc #ll rights reser"ed !his document is Cisco Public Information of ()



CCNPv6 ROUTE




- 1"2.2#.1.0 ?120/1@ <ia 192.168.1.6, 00+00+08, Serial0/0/0


- 10.2.2.0 ?120/1@ <ia 192.168.1.6, 00+00+08, Serial0/0/0

198.1$$.219.0/2# ?200/0@ <ia 1"2.2#.1.18, 00+01+25



Is (E//4(( the IP address of the ne+t hop of this route on the .an:ose( table 9+plain

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

=otice that .an:ose( is not directl$ connected to the IP net%or& for the ne+t hop Ah$

1int: From %hich router did .an:ose( learn the route

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

h Ping (2(88/(2( from .an:ose( !his ping should be successful

=otice that .an:ose( pings to R8 (2(88/(2( are successful e"en though the ne+t-hop address is not

on a directl$-connected net%or& For e+ample, the ne+t-hop address could be (2/(6(6 on R/ if it %ere

not for the beha"ior of IBGP

!tep 6: ,nject a su''ary address into B/P%

a For the purpose of this lab, configure .an:ose8 to inect a summar$ address into BGP

SanJose$%confi&'( router %#p 100SanJose$%confi&)router'( a##re#ate-address 198.0.0.0 2!!.0.0.0

BGP should no% send the supernet route (2))))? to .an:ose/ %ith the attribute

#!IC>#GGR9G#!9 set

Note; B$ default, BGP on Cisco routers ad"ertises both aggregate routes and the indi"idual component

routes If onl$ the aggregate route is to be ad"ertised, use the aggregate2address network mask

su''ary2only command

b n .an:ose/, issue the follo%ing command;

SanJose2( show ip %#p 198.0.0.0 routin& tale entr; for 198.0.0.0/8, <ersion 8

aths+ %1 a<ailale, est (1, tale 3efault))-outin&)Gale'

la&+ 0820

d<ertised to update)&roups+ 1

ocal, %a&&re&ated ; 100 1"2.2#.1.18', %-ecei<ed from a --)client'

1"2.2#.1.18 from 1"2.2#.1.18 %1"2.2#.1.18'

7ri&in , metric 0, localpref 100, <alid, internal, atomic)a&&re&ate,

est

#ccording to the output of this command, %hich address aggregated this route

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

Ahat indicates that route reflection is in"ol"ed in this process

#ll contents are Cop$right (22/7/)() Cisco .$stems, Inc #ll rights reser"ed !his document is Cisco Public Information Page E of ()



CCNPv6 ROUTE

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

Is there an indication that the #!IC>#GGR9G#!9 attribute has been set

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

c .an:ose/ should, in turn, reflect this route to .an:ose( Chec& both the routing table and BGP table on

.an:ose( to be sure Both the route to (2(88/(2) and the supernet route (2))) should be

installed in the .an:ose( routing table and the BGP table









1"2.2#.0.0/2# is sunetted, 1 sunets- 1"2.2#.1.0 ?120/1@ <ia 192.168.1.6, 00+00+20, Serial0/0/0


- 10.2.2.0 ?120/1@ <ia 192.168.1.6, 00+00+20, Serial0/0/0

198.1$$.219.0/2# ?200/0@ <ia 1"2.2#.1.18, 00+08+$#



198.0.0.0/8 ?200/0@ <ia 1"2.2#.1.18, 00+0#+19

!he International !ra"el #genc$ has decided to filter specific routes to the (2)))? address space

Configure a route filter to pre"ent .an:ose/ from sending the (2(88/(2)?/4 route to its other clients,

in this case to .an:ose(

d Issue the follo%ing commands on .an:ose/;

SanJose2%confi&'( ip prefi'-list ()*+,+/ permit 198.0.0.08SanJose2%confi&'( router %#p 100SanJose2%confi&)router'( nei#h%or 192.168.1.! prefi'-list ()*+,+/ out

e Return to .an:ose(, issue the clear ip bgp 3 so$t command, and "erif$ that the prefi+ list has done its ob

b$ issuing a s#o- ip bgp command !roubleshoot as necessar$

*nli&e before, %here routes to (2(88/(2) and (2))) %ere present, no% onl$ one route to

(2))) in the routing and BGP tables should be seen !roubleshoot as necessar$




41 ) 7S eternal t;pe 1, 42 ) 7S eternal t;pe 2 i ) S)S, su ) S)S summar;, 1 ) S)S le<el)1, 2 ) S)S le<el)2





- 1"2.2#.1.0 ?120/1@ <ia 192.168.1.6, 00+00+20, Serial0/0/0


- 10.2.2.0 ?120/1@ <ia 192.168.1.6, 00+00+20, Serial0/0/0

#ll contents are Cop$right (22/7/)() Cisco .$stems, Inc #ll rights reser"ed !his document is Cisco Public Information Page of ()



CCNPv6 ROUTE



198.0.0.0/8 ?200/0@ <ia 1"2.2#.1.18, 00+0#+19

f Run the follo%ing !cl script on all routers to "erif$ full connecti"it$ #ll pings should be successful

SanJose1( tclsh

foreach address 10.2.2.1198.1&&.219.1192.168.1.!192.168.1.6172.24.1.17172.24.1.18"

pin# $address "

#ll contents are Cop$right (22/7/)() Cisco .$stems, Inc #ll rights reser"ed !his document is Cisco Public Information Page 2 of ()



CCNPv6 ROUTE

Router ,nter$ace !u''ary Table

Router ,nter$ace !u''ary

Router odel 9thernet Interface

(

9thernet Interface

/

.erial Interface

(

.erial Interface

/

(E)) Fast 9thernet )0F#)1

Fast 9thernet (0F#(1

.erial ) 0.)1 .erial ( 0.(1

()) Fast 9thernet )?)0F#)?)1

Fast 9thernet )?(0F#)?(1

.erial )?)?)0.)?)?)1

.erial )?)?(0.)?)?(1

/6)) Fast 9thernet )?)0F#)?)1


.erial )?) 0.)?)1 .erial )?( 0.)?(1

/)) Fast 9thernet )?)0F#)?)1


.erial )?)?)0.)?)?)1

.erial )?)?(0.)?)?(1

Note; !o find out ho% the router is configured, loo& at the interfaces to identif$ the t$pe of routerand ho% man$ interfaces the router has Rather than tr$ to list all the combinations of

configurations for each router class, this table includes identifiers for the possible combinations of9thernet and serial interfaces in the de"ice !he table does not include an$ other t$pe of interface,e"en though a specific router might contain one #n e+ample of this is an I.5= BRI interface !hestring in parenthesis is the legal abbre"iation that can be used in Cisco I. commands torepresent the interface

#ll contents are Cop$right (22/7/)() Cisco .$stems, Inc #ll rights reser"ed !his document is Cisco Public Information Page () of ()

ccnpv6 route lab6-4 bgp reflectors filters student

Documents