8
PBR and Inter-vlan Routing Design:

community.cisco.com · Web view84 bytes from 192.168.0.1 icmp_seq=5 ttl=255 time=5.120 ms Author Francesco Molino Created Date 06/18/2016 11:40:00 Last modified by Francesco Molino

  • Upload
    others

  • View
    4

  • Download
    0

Embed Size (px)

Citation preview

Page 1: community.cisco.com · Web view84 bytes from 192.168.0.1 icmp_seq=5 ttl=255 time=5.120 ms Author Francesco Molino Created Date 06/18/2016 11:40:00 Last modified by Francesco Molino

PBR and Inter-vlan RoutingDesign:

Page 2: community.cisco.com · Web view84 bytes from 192.168.0.1 icmp_seq=5 ttl=255 time=5.120 ms Author Francesco Molino Created Date 06/18/2016 11:40:00 Last modified by Francesco Molino

Design with flow:

Page 3: community.cisco.com · Web view84 bytes from 192.168.0.1 icmp_seq=5 ttl=255 time=5.120 ms Author Francesco Molino Created Date 06/18/2016 11:40:00 Last modified by Francesco Molino

Configuration of R1

interface FastEthernet0/0 description TO R5 f0/0 ip address 10.10.10.2 255.255.255.252!interface Vlan10 description PC1 ip address 192.168.0.1 255.255.255.0!interface Vlan20 description PC2 ip address 192.168.1.1 255.255.255.0!interface Vlan30 description PC3 ip address 192.168.2.1 255.255.255.0!ip route 0.0.0.0 0.0.0.0 10.10.10.1

Configuration of R5

interface FastEthernet0/0 description TO R1 f0/0 ip address 10.10.10.1 255.255.255.252 ip policy route-map LAN!interface FastEthernet0/1 description TO INTERNET SWITCH WITH MULTIPLE ISP ip address 172.16.0.1 255.255.255.248! ip route 0.0.0.0 0.0.0.0 172.16.0.3 ip route 192.168.0.0 255.255.0.0 10.10.10.2!ip access-list extended LAN1 deny ip 192.168.0.0 0.0.255.255 192.168.0.0 0.0.255.255 permit ip 192.168.0.0 0.0.0.255 anyip access-list extended LAN2 deny ip 192.168.0.0 0.0.255.255 192.168.0.0 0.0.255.255 permit ip 192.168.1.0 0.0.0.255 anyip access-list extended LAN3 deny ip 192.168.0.0 0.0.255.255 192.168.0.0 0.0.255.255 permit ip 192.168.2.0 0.0.0.255 any!route-map LAN permit 10 match ip address LAN1 set ip next-hop 172.16.0.2

Page 4: community.cisco.com · Web view84 bytes from 192.168.0.1 icmp_seq=5 ttl=255 time=5.120 ms Author Francesco Molino Created Date 06/18/2016 11:40:00 Last modified by Francesco Molino

!route-map LAN permit 20 match ip address LAN2 set ip next-hop 172.16.0.3!route-map LAN permit 30 match ip address LAN3 set ip next-hop 172.16.0.4!route-map LAN permit 40!!

Configuration of R2

interface Loopback0 ip address 8.8.8.8 255.255.255.255!interface FastEthernet0/0 ip address 172.16.0.2 255.255.255.248!ip route 0.0.0.0 0.0.0.0 172.16.0.1

Configuration of R3

interface Loopback0 ip address 8.8.8.8 255.255.255.255!interface FastEthernet0/0 ip address 172.16.0.3 255.255.255.248!ip route 0.0.0.0 0.0.0.0 172.16.0.1

Configuration of R4

interface Loopback0 ip address 8.8.8.8 255.255.255.255!interface FastEthernet0/0 ip address 172.16.0.4 255.255.255.248!ip route 0.0.0.0 0.0.0.0 172.16.0.1

Page 5: community.cisco.com · Web view84 bytes from 192.168.0.1 icmp_seq=5 ttl=255 time=5.120 ms Author Francesco Molino Created Date 06/18/2016 11:40:00 Last modified by Francesco Molino

Debug on R2 with ICMP from PC1R2#*Mar 1 01:22:46.275: ICMP: echo reply sent, src 8.8.8.8, dst 192.168.0.2R2#*Mar 1 01:22:47.347: ICMP: echo reply sent, src 8.8.8.8, dst 192.168.0.2R2#*Mar 1 01:22:48.379: ICMP: echo reply sent, src 8.8.8.8, dst 192.168.0.2R2#*Mar 1 01:22:49.419: ICMP: echo reply sent, src 8.8.8.8, dst 192.168.0.2R2#*Mar 1 01:22:50.455: ICMP: echo reply sent, src 8.8.8.8, dst 192.168.0.2R2#

Debug from PC1 for inter-vlan routingPC1> ping 192.168.2.2

192.168.2.2 icmp_seq=1 timeout84 bytes from 192.168.2.2 icmp_seq=2 ttl=63 time=14.788 ms84 bytes from 192.168.2.2 icmp_seq=3 ttl=63 time=14.797 ms84 bytes from 192.168.2.2 icmp_seq=4 ttl=63 time=15.195 ms84 bytes from 192.168.2.2 icmp_seq=5 ttl=63 time=21.773 ms

Debug on R3 with ICMP from PC2R3#*Mar 1 01:24:39.263: ICMP: echo reply sent, src 8.8.8.8, dst 192.168.1.2R3#*Mar 1 01:24:40.307: ICMP: echo reply sent, src 8.8.8.8, dst 192.168.1.2R3#*Mar 1 01:24:41.335: ICMP: echo reply sent, src 8.8.8.8, dst 192.168.1.2R3#*Mar 1 01:24:42.371: ICMP: echo reply sent, src 8.8.8.8, dst 192.168.1.2R3#*Mar 1 01:24:43.415: ICMP: echo reply sent, src 8.8.8.8, dst 192.168.1.2R3#

Debug from PC2 for inter-vlan routingPC2> ping 192.168.0.1

84 bytes from 192.168.0.1 icmp_seq=1 ttl=255 time=18.037 ms84 bytes from 192.168.0.1 icmp_seq=2 ttl=255 time=7.631 ms84 bytes from 192.168.0.1 icmp_seq=3 ttl=255 time=1.217 ms84 bytes from 192.168.0.1 icmp_seq=4 ttl=255 time=36.050 ms84 bytes from 192.168.0.1 icmp_seq=5 ttl=255 time=9.160 ms

Page 6: community.cisco.com · Web view84 bytes from 192.168.0.1 icmp_seq=5 ttl=255 time=5.120 ms Author Francesco Molino Created Date 06/18/2016 11:40:00 Last modified by Francesco Molino

Debug on R4 with ICMP from PC3R4#*Mar 1 01:25:31.267: ICMP: echo reply sent, src 8.8.8.8, dst 192.168.2.2R4#*Mar 1 01:25:32.307: ICMP: echo reply sent, src 8.8.8.8, dst 192.168.2.2R4#*Mar 1 01:25:33.359: ICMP: echo reply sent, src 8.8.8.8, dst 192.168.2.2R4#*Mar 1 01:25:34.399: ICMP: echo reply sent, src 8.8.8.8, dst 192.168.2.2R4#*Mar 1 01:25:35.455: ICMP: echo reply sent, src 8.8.8.8, dst 192.168.2.2

Debug from PC3 for inter-vlan routingPC3> ping 192.168.0.1

84 bytes from 192.168.0.1 icmp_seq=1 ttl=255 time=8.181 ms84 bytes from 192.168.0.1 icmp_seq=2 ttl=255 time=7.924 ms84 bytes from 192.168.0.1 icmp_seq=3 ttl=255 time=10.049 ms84 bytes from 192.168.0.1 icmp_seq=4 ttl=255 time=6.253 ms84 bytes from 192.168.0.1 icmp_seq=5 ttl=255 time=5.120 ms