Deploying IP Unicast

8/3/2019 Deploying IP Unicast

1/83


2/83

! "!!!###


3/83

$

%&'

(


4/83

'

)"**


5/83

+

!

,",-.**


6/83

/

,*

**%& )0 1

&11

&*10

(*1#


7/83

2

(*!

-34#+#4#3.


8/83

5

&677


9/83

8

61

**


10/83

34

(******!


11/83

33

61*

**

9*6


12/83

3

006

*!*! *!

!1

:*


13/83

3$

!"

;


14/83

3'

!"

%&/ **0! -;


15/83

3+

?*

*

>!1*

,


16/83

3/

#

*%& -.*

*7

'

*


17/83

32

$%&!

?*

** 6

(0*1

,1*B


18/83

35

%&!

# ifconfig lo:1 10.5.0.1 netmask 255.255.255.255 up

# ifconfig lo:1lo:1 Link encap:Local Loopback

inet addr:10.5.0.1 Mask:255.255.255.255

UP LOOPBACK RUNNING MTU:16436 Metric:1

# ifconfig lo0 alias 10.5.0.1 netmask 255.255.255.255

# ifconfig lo0

lo0: flags=8049 mtu 33224

inet 127.0.0.1 netmask 0xff000000inet 10.5.0.1 netmask 0xffffffff

C9


19/83

38

%&!

# ifconfig lo0 addif 10.5.0.1/32 up

Created new logical interface lo0:1# ifconfig lo0:1

lo0:1: flags=1000849

inet 10.5.0.1 netmask ffffffff


20/83

4

'%&!

*!1

1* %7#7

*


21/83

3

("%&!

%*

!07

!

CD7E

>***


22/83

#)!

"**7

-. =


23/83

$

#)!

*

A61* &

!0


24/83

'

")!

;7

F

GH

?*

!0!!

*


25/83

+

")!

=%F&


26/83

/

")!

**%F&

0*1

?A

*!!!


27/83

2

("%&!


28/83

5

("%&!

%7

9F& I@!1A

%F&!

!!


29/83

8

("%&!

DE*DE

F!I

D7E

!

,-**.

>0-.


30/83

$4

("%&!

/++43(

/++43(

F334#+#4#3'

/++44

334#+#4#3'

/++44

/++4+

=

/++4+=

/++$4>= &

/++$4>= &

/++3+=

/++3+=

/++4>=

/++4>=

/++34(&

/++34(&

/++$+=

/++$+=

/+++=

/+++=


31/83

$3

#%&!

C

*%& ,6*

J*

!6

,! %&

"


32/83

$

*

>00K

7>*

;; ANSWER SECTION:

ns1.example.com. 86400 IN A 10.5.0.1


33/83

$$

>

?&0&&&0!*

>*C

(**>

;7*6

&**


34/83

$'

,

6-7.%&0A*

,-.%&A

*

!


35/83

$+

%&'

(


36/83

$/

>

33 ;"

*,;&

1? /'-;


37/83

$2

#**+

&",6

*;


38/83

$5

#**+

917%& 192.175.48.0/24

*3/!!

33


39/83

$8

%&!,

router bgp 112

bgp router-id 192.175.48.254

network 192.175.48.0

neighbor PEER_IP remote-as PEER_ASneighbor PEER_IP ebgp-multihop

neighbor PEER_IP next-hop-self

CJ##

policy-statement advertise-aggregate {term first-term {

from protocol aggregate;

then accept;

}

term second-term {

from route-filter 192.175.48.0/24 longer;

then reject;

}

}

[continued]

J##

M"!!!##N!33O


40/83

'4

%&!,

# set routing-options aggregate route 192.175.48.0/24

[edit protocols bgp group 112]

# set export advertise-aggregate

# set type external

# set peer-as PEER_AS

# set neighbor PEER_IP

J##


41/83

'3

#**+

zone 10.in-addr.arpa { type master; file db.RFC-1918; };

zone 254.169.in-addr.arpa { type master; file db.RFC-1918; };

...

9%>*

$TTL 300

@ IN SOA prisoner.iana.org. hostmaster.root-servers.org. (

2002040800 30m 15m 1w 1w )

NS blackhole-1.iana.org.

NS blackhole-2.iana.org.

G


42/83

'

)#

&"

!*)-01.

1*!

AN>L

F"*!

")7%&


43/83

'$

)#

D!3

$++2

*%

... 3557 3557 3557F>& ... 23709 3557>&-=.


44/83

''

-)./"

;>>CFL*#C;F

* D*

E

>-204.74.112.1, 204.74.113.1.

(!'I** =7

.


45/83

'+

-)./"

?

C! **0**

% 0 #


46/83

'/

%0#

&"

?!

>7%&-*.

F"!>*7*%&

") I*%&

% 0 #


47/83

'2

%0#

128.2.1.0/26 *7

-*%&. (!%&"128.2.1.10,128.2.1.11

)9%>8 *'I/*

?&0&&&

% 0 #


48/83

'5

%0#

=7

-H.NC&*!

% 0 # % &


49/83

'8

%0#%&

options {

listen-on { 128.2.1.10; 128.2.1.11; };

query-source address 128.2.4.21;};

9%>8

router ospf 1area 0.0.0.0 authentication message-digest

area 128.2.4.0 authentication message-digest

area 128.2.4.0 nssa default-information-originate no-summary

network 128.2.4.0 0.0.0.63 area 128.2.4.0

network 128.2.0.0 0.0.255.255 area 0.0.0.0

);

% 0 # % &


50/83

+4

%0#%&

options {

listen-on { 128.2.1.10; 128.2.1.11; };

query-source address 128.2.4.21;};

9%>8

router ospf 1area 0.0.0.0 authentication message-digest

area 128.2.4.0 authentication message-digest

area 128.2.4.0 nssa default-information-originate no-summary

network 128.2.4.0 0.0.0.63 area 128.2.4.0

network 128.2.0.0 0.0.255.255 area 0.0.0.0

);!

,1A

7***#

% 0 # % &


51/83

+3

%0#%&

[edit protocols ospf]

area 4 {

nssa {area-range 128.2.4.0/26;

default-lsa {

default-metric metric;

type-7;

}

no-summaries;

}

authentication-type md5;

interface interface;

}

);0

$ , )! %&


52/83

+

$(,)!%&

interface eth0

ip address 128.2.4.21/26

!

interface lo:1

ip address 128.2.1.10/32

!

interface lo:2

ip address 128.2.1.11/32

6#*interface eth0

ip ospf authentication message-digest

ip ospf message-digest-key 1 md5 [key]

!

router ospf

ospf router-id 128.2.4.21

ospf abr-type cisco

compatible rfc1583

area 128.2.4.0 authentication message

area 128.2.4.0 nssanetwork 128.2.4.21/26 area 128.2.4.0

redistribute connected

distribute-list 50 out connected

!

access-list 50 permit host 128.2.1.10

access-list 50 permit host 128.2.1.11

*#*

! )


53/83

+$

!)

&" &%,7,*;&

*

*-;&.

!**;&*

>*7

F",;& *!

")*;&-;


54/83

+'

!)

;&

1 ;&

*

;&*

,&;& -

. ;&

! )


55/83

++

!)

interface Loopback0

description Router Management

ip address 10.2.4.249 255.255.255.255

ip pim sparse-modeinterface Loopback1

description Anycast RP Interface

ip address 10.2.1.130 255.255.255.255

ip pim sparse-mode

!

ip msdp peer 10.2.4.248 connect-source Loopback0

ip msdp peer 10.2.4.250 connect-source Loopback0ip msdp mesh-group CMU-MSDP 10.2.4.248

ip msdp mesh-group CMU-MSDP 10.2.4.250

ip msdp cache-sa-state

ip msdp originator-id Loopback0

;&;

ip pim rp-address 10.2.1.130 override

ip pim accept-rp 10.2.1.130

>7;&;

! )


56/83

+/

!)

[edit interfaces lo0 unit 0 family inet]

# set address 10.2.4.249/32

# set address 10.2.1.130/32

[edit protocols pim]rp {

local {

address 10.2.1.130;

}

}

interface all {

mode sparse;version 2;

}

[edit protocols msdp]

group CMU-MSDP {

local-address 10.2.4.249;

mode mesh-group;

peer 10.2.4.248;peer 10.2.4.250;

}

;&;[edit protocols pim]

rp {

static {

address 10.2.1.130 {version 2;

}

}

}

>7;&;

! )


57/83

+2

!)

9F&0,9F&1;

"#

;&*F-. ;&

;&

*

;

! )


58/83

+5

!)

;&

;&

9F&0,9F&1;

# ,;& *-.

;&

L;&

*

,&,0)6

;

#'0


59/83

+8

#'0

&"?!1**-##!010.

*1I1A!**!11

F"*!**1*

")

1!1

#'0


60/83

/4

#'0

(**1"

*

*%&

9F&70"*

,1

1

JF0,&-*1.

12 )!


61/83

/3

12)!

&"*/'*/'

F"&!*

/! ")!71!%&'

**/'

12 )!


62/83

/

12)!

%&/91

%&'91

/'

;;

/';;

44""3//1

'/'*

38#55#88#4'

4""4

>%&/)/'&*

/';

.%(, #


63/83

/$

.% ,#

)!*7(&0

=!0 =70

=6!

90**!

.%(,#


64/83

/'

J*!1**0!

DP1Q! Q0

1!!

!707P#E

7 &J0'4$

034


65/83

/+

3 4

>(&(

;%)

K

167)&DE


66/83

//

%&'

$

,7

%&/

!($"$


67/83

/2

,7*

!

"7

*! ,@A 0

,** !*

1


68/83

/5

%&/0;


69/83

/8

** *

** *

%&

;6*

!#

>!I

> 6#1**#

> 6#1**#

1

*

*

%*

#

);


70/83

24

** *

** *

%&

;6*

!#

>!I

> 6#1**#

> 6#1**#

1

*

*

%*

#

);


71/83

23

** *

** *

%&

;6*

!#

>!I

> 6#1**#

> 6#1**#

1

*

*

%*

#

);


72/83

2

!$+3$ :*-.*

&!

*7

6

?*

16*

1!


73/83

2$

$+3$)&

>0#66

D)1E

$+3$(& *

*

&**!

1!


74/83

2'

0677

$+3$*"

!***%&

1


75/83

2+

;-$+3$.

7;

subnet prefix 0000000000000

357

;

subnet prefix anycast ID

2

11111111111

337

subnet prefix anycast ID/' 2

111111011..11+2=)%7/'

DE

>7=)%7/'

#!""


76/83

2/

!1

C*!***

1*/

6!7


77/83

22

&""!!!###

K,"1R#

12)!


78/83

25

>%&/)/'&*

/';

"44"544"**3*""3"443"'5"'"44""3%

&/

?%&/1

12)!


79/83

28

>%&/)/'&*

/';

/';1'

1 >"='/*

"44"544"**3*""3"443"'5"'"44""3%

&/

"38#55#88#3

&"'3%&'

"35##++#$3

12)!


80/83

54

/'

;;

/';;

%&/91

"44"544"**3*""3

"443"'5"'"44""3%&/

"38#55#88#3&"'3

%&

'

"35##++#$3 &1

;'0*!/

12)!


81/83

53

/'

;;

/';;

%&/91

"443"'5"'"44""3

"44"544"**3*""3%&/

"35##++#$3

&"'3%&

'

"M;;6O ;44""3/

;*!/'7*I'/*

12)!


82/83

5

>%&/)/'&*

/';

/';'I*!/

1

"443"'5"'"44""3"44"544"**3*""3%

&

/

"35##++#$3

&"'3%&'

"M;;6O

&


83/83

5$

Documents

Deploying IP Unicast