Technologie počítačových sítí - ZS 2015/2016 Kombinované studium Případová studie příklady syntaktických konstruktů Cisco IOS pro jednotlivé části případové studie. Petr Grygárek Ping ipv6 ve VRF : ping vrf V ipv6 <ip6-addr> Zadání - Část 1 Pro Test point 1 router ospf 1 int g0/2 ip ospf 1 area 0 NEBO router ospf 1 network a.a.a.a 0.0.0.0 area 0! a.a.a.a je adresa na příslušném interface router isis 1 is-type level-1 net 49.aaaa.iiii.iiii.iiii00 int g0/3 ip router isis 1 Pro Test point 2 ipv6 unicast-routing router bgp AS no bgp default ipv4-unicast neighbor x.x.x.x remote-as EBGP-AS
neighbor x.x.x.x ebgp-multihop 2 neighbor x.x.x.x update-source Loopback1 neighbor y.y.y.y remote-as IBGP-AS neighbor y.y.y.y update-source Loopback1 address-family ipv4 neighbor x.x.x.x activate no auto-summary no synchronization exit-address-family address-family vpnv4 unicast neighbor y.y.y.y activate no auto-summary no synchronization address-family vpnv6 unicast neighbor y.y.y.y activate no auto-summary no synchronization Pro Test point 3 mpls ip mpls ldp router-id lo 1 access-list 1 permit <povoleny loopback1> access-list 1 permit <povoleny loopback2> no mpls ldp advertise-labels mpls ldp advertise-labels for 1! lze specifikovat formou adresního rozsahu int g0/x mpls ip Pro Test point 4 vrf definition V rd 65001:xxx route-target export 65001:eee
route-target import 65001:iii route-target import 65001:iii! address-family ipv4 exit-address-family! address-family ipv6 exit-address-family router ospf 100 vrf V redistribute bgp 65001 subnets router ospfv3 101 address-family ipv6 unicast vrf V redistribute bgp 65001 address-family ipv4 vrf V redistribute connected redistribute ospf 100 address-family ipv6 vrf V redistribute connected redistribute ospf 101 address-family ipv4 vrf W neighbor n.n.n.n remote-as 65111 address-family ipv6 (unicast) vrf W neighbor nnnn:nnnn::n remote-as 65111 interface g0/1.vlanx encap dot vlanx vrf forwarding V ip address ipv6 address ip ospf 100 area AAA ospfv3 101 ipv6 area AAA
RSgx: router ospf 100 vrf A capability vrf-lite!!! V databazi jinak Summary LSA jsou s Downward bitem a neuplatní se router ospfv3 101 address-family ipv6 uni vrf A capability vrf-lite!!! V databazi jinak Summary LSA jsou s Downward bitem a neuplatní se Pro Test point A (BGP-free core / 6PE) address-family ipv4 / ipv6 neighbor x.x.x.x activate neighbor x.x.x.x send-label Pro Test point B/C (AToM) Rgx: interface g0/1.v encap dot v xconnect r.r.r.r encapsulation mpls RSgx: RIP ipv4 ve VRF: router rip version 2 address-family ipv4 vrf A network RIP ipv6 ve VRF:
ipv6 rip vrf-mode enable ipv6 router rip R address-family ipv6 vrf V redistribute bgp AS metric M int I1 ipv6 rip R enable Pro Test point D (IPSec) route-map RMTOBGP permit 10 set community 65001:999 address-family ipv4 vrf B redistribute RIP route-map RMTOBGP! tags all redistributed routes with community 999 ip community-list 1 permit 65001:999 route-map TORR deny 10 match community 1! matches all routes with community 999 route-map TORR permit 20 route-map FROMRR per 10 set weight 40000! Filter out all routes with community 999 from being advertised tobgp RR! Prefer routes coming from RR over locally originated ones (from redistribution) address-family vpnv4 neighbor rr.rr.rr.rr route-map TORR out neighbor 2.99.99.10 route-map FROMRR in address-family vpnv6 neighbor rr.rr.rr.rr route-map TORR out neighbor 2.99.99.10 route-map FROMRR in ip prefix-list PLTORIP permit <local-prefix> route-map TORIP permit 1 match ip address prefix-list PLTORIP match source-protocol bgp 65111 router rip
address-family ipv4 vrf B distance D redistribute bgp 65001 metric 5 route-map TORIP interface Tunnel12 tunnel mode gre ip tunnel protection ipsec profile PROF12 ipv6 rip R enable Pro Test point E (GRE) interface Tun10 tunnel mode gre ip tunnel source tunnel destination Pro Test point F (6to4) interface tunnel200 vrf forwarding V tunnel mode ipv6 6to4 ipv6 address 2002:<Lo1IP>:cccc::1/64 ipv6 route vrf B 2002::/16 tunnel 200 ipv6 route vrf B aaaa/nn 2002:<Lo1IP-otherSide>:cccc::1 Pro Test point G (ISATAP) interface tunnel202 tunnel source lo 1 tunnel mode ipv6ip isatap ipv6 address 2001:EEEE::/64 eui-64 ipv6 route vrf B aaaa/nn 2001:EEEE::5EFE:<Lo1IP-otherSide>