CCIE Study Notes-on-premise

CCIE Study Notes

To declare a default route to the OSPF domain:

1. Use ipdefault-network:

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M02/45/C2/wKioL1Pq4nOQ6YakAADtETgZiec877.jpg "Title =" image001.png "alt =" wkiol1pq4noq6yakaadtetgziec877.jpg "/>

Key configurations of R2:

IP Route 2.0.0.0255.0.0.0 null 0 // create a primary network in the routing table

Router VPN 1

Network2.0.0.0 // declare the primary network

Ipdefault-network 2.0.0.0 // It is equivalent to telling the vroeigrp Default Gateway in the OSPF domain to be 2.0.0.0. Therefore, the route table of the vro publishing this gateway must be accessible to this address.

IP Route 0.0.0.00.0.0.0 F1/0 12.1.1.2 // make R2 accessible to the Internet

R2 route table:

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M00/45/C2/wKioL1Pq4vHwZnjDAAF6zQs6lQ0485.jpg "Title =" image002.png "alt =" wkiol1pq4vhwznjdaaf6zqs6lq0485.jpg "/>

R3 route table:

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M02/45/C1/wKiom1Pq4eXj4SkXAAFkbghzkKk898.jpg "Title =" image003.png "alt =" wkiom1pq4exj4skxaafkbghzkkk898.jpg "/>

R3ping Internet:

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M01/45/C2/wKioL1Pq4xOQ2CozAACnAhu_n9Q550.jpg "Title =" image004.png "alt =" wkiol1pq4xoq2cozaacnahu_n9q550.jpg "/>

2. R2 write a static default route and re-release it:

Key configurations of R2:

IP Route 0.0.0.0 0.0.0.0 F1/0 12.1.1.1

Router VPN 1

Redistribute static metric 100000 10 255 1 1500

 

3. R2 writes a static default route and network:

Key configurations of R2:

IP Route 0.0.0.0 0.0.0.0 F1/0 12.1.1.1

Router VPN 1

Network 0.0.0.0

 

4. R2 summarizes a detailed route to R3:

Key configurations of R2:

Int F0/1

IP Summary-address subnet 1 0.0.0.0 0.0.0.0

 

NOTE: If method 1 (IP default-Network) is used to advertise an IPsec route, you can use default-informationin/out to control the sending and receiving of the default route, the other three methods cannot be controlled by default-information:

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M00/45/C2/wKioL1Pq43uSIGkzAAGBWmGPjtM358.jpg "Title =" image005.png "alt =" wkiol1pq43usigkzaagbwmgpjtm358.jpg "/>

 

IP bandwidth-percent: used to set the percentage of bandwidth that can be used by the network.

 

IP authentication key-chain eigrpas-number key-chainip Authentication Mode China East 2: in the multi-path access environment of the hub spoke, one hub interface connects multiple spoke (such as Frame Relay Network ), the next hop from spoke to spoke when you run the command is the hub interface connecting spoke (because the update is sent from this interface) by default ), use this command to change the next hop to the target spoke interface (that is, the spoke update is forwarded by the hub to another spoke without changing the next one ). IP split-horizon Kerberos as-Number: by default, horizontal split is enabled for Frame Relay Network. By default, rip disables the IP address Summary-address, such as-number, IP-address, and mask [admin-distance] [leak-Map Name]:

Leak-map: (optional) specifies theroute-map reference that is

Used to configure the route leaking throughthe

Summary. For example:

R2 (config) # access-List 1 permit 2.2.2.20.0.0.0

R2 (config) # route-map leak permit 10

R2 (config-route-map) # Match ip address 1

R2 (config-If) # IP Summary-address VPN 12.0.0.0 255.0.0.0 100 leak-map leak

Route table for receiving the summary route:

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M02/45/C1/wKiom1Pq4nKCGCVvAAFDdgUzWWw671.jpg "Title =" image006.png "alt =" wkiom1pq4nkcgcvvaafddguzwww671.jpg "/>

 

Metric maximum-Hops:

(Config-router) # metric maximum-hops 10 // you can specify a maximum of 10 hops.

Metric weights TOS K1 K2 K3 K4 K5

ToS: type of service. This value mustalways be zero.

Router (config-router) # metric weights 0 2 02 0 0

Neighbor {IP-address | ipv6-address} interface-typeinterface-number [remote maximum-hops]

When using neighbor in a multi-channel access network, it will not send or receive multicast HELLO messages. You can only create a neighbor through neighbor.

Neighbor IP-address maximum-Prefix maximum [threshold] [WARNING-only]

In address family mode, specify the maximum number of prefixes received from a neighbor:

Router (config) # router VPN 1

Router (config-router) # address-family IPv4

Router (config-router-AF) # autonomous-system1

Router (config-router-AF) # Neighbor 10.0.0.1maximum-Prefix 1000 80

NSF

Enable none stop forwarding:

Router (config) # router VPN 101

Router (config-router) # NSF

Offset-list

Router (config-router) # offset-LIST 21 in 10 Ethernet 0 // metric that is learned from E0 and complies with the standard acl21 plus 10

Redistribute maximum-Prefix maximum [threshold] [[dampened] [reset-time minutes] [restart minutes] [restart-count number] | [WARNING-only]

Restrict the route to be republished to the network. It can only be used in address family mode.

Timers active-time [time-limit | disabled]

Set the wait time from sending query to declaring this route entry to stuck in active (SIA)

Router (config-router) # timers active-time200

Traffic-share balanced

Traffic-share balance: enables non-equivalent load balancing (default)

Traffic-share min: only the link with the minimum overhead is used. If there are multiple links, load balancing (equivalent load)

Router (config-router) # Traffic-sharebalanced

Summary

Interface: IP Summary-addresseigrp

The summary route advertised to the MongoDB is not marked as an external route (even if it is d ex before the summary)

This article is from the "flyclc" blog, please be sure to keep this source http://flyclc.blog.51cto.com/1385758/1539315