Lab 3: VPN topology, route, and aggregation

Lab 3: VPN topology, route, and aggregation

Purpose:

By studying the topology, routing, and aggregation of relevant experiments in the VPN lab, you can learn how to set up the topology information, calculation methods, and how to adjust the measurement value and load balancing, and the vroeigrp of the network.

Tutorial topology:

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M00/3E/64/wKiom1PHTo2AC677AACq809FS0c495.jpg "Title =" 1topology .jpg "alt =" wkiom1phto2ac677aacq809fs0c495.jpg "/>

Tutorial steps:

1. Configure related interfaces on R1, R2, and R3 respectively, and maintain connectivity. Configure the corresponding IP address on the loopback port of the R1/R2/R3 router.

The command is as follows:

-----------------------------------------------------------------

R1 (config) # No IP domain Lo

R1 (config) # Lin con 0

R1 (config-line) # Exec-T 0 0

R1 (config-line) # logg SY

R1 (config-line) # exit

R1 (config) # int lO 0

R1 (config-If) # IP add 1.1.1.1 255.255.255.0

R1 (config-If) # int E0/0

R1 (config-If) # IP add 12.1.1.1 255.255.255.0

R1 (config-If) # No Shutdown

R1 (config-If) # exit

-----------------------------------------------------------------

R2 (config) # No IP domain Lo

R2 (config) # Lin con 0

R2 (config-line) # Exec-T 0 0

R2 (config-line) # logg SY

R2 (config-line) # exit

R2 (config) # int lO 0

R2 (config-If) # IP add 2.2.2.2 255.255.255.0

R2 (config-If) # int E0/1

R2 (config-If) # IP add 12.1.1.2 255.255.255.0

R2 (config-If) # No Shutdown

R2 (config-If) # int E0/0

R2 (config-If) # IP add 23.1.1.2 255.255.255.0

R2 (config-If) # No Shutdown

R2 (config-If) # exit

-----------------------------------------------------------------

R3 (config) # No IP domain Lo

R3 (config) # Lin con 0

R3 (config-line) # Exec-T 0 0

R3 (config-line) # logg SY

R3 (config-line) # exit

R3 (config) # int E0/1

R3 (config-If) # IP add 23.1.1.3 255.255.255.0

R3 (config-If) # No Shutdown

R3 (config-If) # int lO 0

R3 (config-If) # IP add 3.3.3.3 255.255.255.0

R3 (config-If) # exit

-----------------------------------------------------------------

Ensure that R1, R2, and R3 are interconnected. For example

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M01/3E/65/wKiom1PHTtiCPuEZAAKs_yNSUrA161.jpg "Title =" are guaranteed Two intercommunication .jpg "alt =" wkiom1phtticpuezaaks_ynsura161.jpg "/>

2. Configure the OSPF 100 process of R1/R2/R3, and use R1/R2/R3 to establish neighbors normally.

The command is as follows:

-----------------------------------------------------------------

R1 (config) # router VPN 100

R1 (config-router) # No auto-Summary

R1 (config-router) # net 1.1.1.0 0.0.255

R1 (config-router) # net 12.1.1.0 0.0.255

-----------------------------------------------------------------

R2 (config) # router VPN 100

R2 (config-router) # No auto-Summary

R2 (config-router) # net 2.2.2.0 0.0.0.255

R2 (config-router) # net 12.1.1.0 0.0.255

R2 (config-router) # net 23.1.1.0 0.0.255

-----------------------------------------------------------------

R3 (config) # router VPN 100

R3 (config-router) # No auto-Summary

R3 (config-router) # net 3.3.3.0 0.0.255

R3 (config-router) # net 23.1.1.0 0.0.255

-----------------------------------------------------------------

3. Check related relationships.

A. view the route table (show IP route) as follows:

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M00/3E/65/wKiom1PHTwSAWQO3AAOAF8MMAK4735.jpg "Title =" show IP route.jpg "alt =" wkiom1phtwsawqo3aaoaf8mmak4735.jpg "/>

We can see that, by default

The Management Distance of the VPN gateway is 90.

The metric value of the internal route of the VPN gateway is 409600.

B. view the topology table of the VPN gateway, such:

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M00/3E/65/wKioL1PHUEuBK1bTAAI_x0Y4d7s329.jpg "Title =" SH ip topology.jpg "alt =" wkiol1phueubk1btaai_x0y4d7s329.jpg "/>

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M00/3E/65/wKiom1PHT5zyU2RKAAGzA9k2-XA368.jpg "Title =" SH ip topology 1.1.1.1.jpg "alt =" wKiom1PHT5zyU2RKAAGzA9k2-XA368.jpg "/>

You can see that the measurements include:

Min bandwidth: 10000 kbit

Reliability: 255

Load: 1

Minimum MTU: 1500

After the OSPF process is enabled, the system loads the interface information that is added to the process into the update data packet and sends it to the corresponding neighbor. The update data packet contains the above information. After each VPN Router is updated, it is calculated based on the obtained topology information. Finally, the distance (RD) and the feasible distance (FD) are obtained ). if FD> RD is met, the route is marked as available and the optimal route is selected.

The bandwidth, latency, load, reliability, and MTU can be used for the calculation. That is, k1 = K3 = 1, and other K values are 0. For example:

4. Through analysis, you can find out how to adjust the measured value of the OSPF:

A. Adjust the bandwidth of the interface.

R1 (config) # int lO 0

R1 (config-'If) # bandwidth 8888

Adjust the lo port bandwidth of R1 to 888 kbit

Note: The bandwidth is the minimum bandwidth on the entire link and the inbound interface bandwidth.

For example:

650) This. length = 650; "src =" http://s3.51cto.com/wyfs02/M02/3E/65/wKioL1PHUOWBtkwcAAWXTTY4npg309.jpg "Title =" with width .jpg "width =" 730 "Height =" 384 "border =" 0 "hspace =" 0 "vspace =" 0 "style =" Width: 730px; Height: 384px; "alt =" wkiol1phuowbtkwcaawxtty4npg309.jpg "/>

B. Adjust the interface latency.

R1 (config) # int lO 0

R1 (config-If) # delay 1

Adjust the cycle port delay of R1 to 10 seconds. Note the unit here.

Note: latency is the sum of the latencies of the entire link and the latency of the inbound interface.

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M02/3E/A5/wKioL1PHiX-AdpdgAAOx-7yrNgA265.jpg "Title =" delay.jpg "alt =" wKioL1PHiX-AdpdgAAOx-7yrNgA265.jpg "/>

C. Adjust the K value.

We recommend that you do not change the K value in general, so there is no excessive operation here.

The command to view the K value is (show IP glasprotocols)

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M01/3E/A5/wKiom1PHiSzD1TyVAAI2uJ63CB4117.jpg "Title =" kvalue graph .jpg "alt =" wkiom1phiszd1tyvaai2uj63cb4117.jpg "/>

D. offset-list)

The offset list can be used to adjust the metric value of a specific route. The command is as follows:

-----------------------------------------------------------------

R1 (config) # access-List 1 permit 2.2.2.0 0.0.255

R1 (config) # router VPN 100

R1 (config-router) # offset-List 1 in 1 E0/0 // The first 1 is the 1 that calls the ACL, and the second 1 is

Add 1 to the metric value of the E0/0 inbound Interface

R1 (config-router) # End

-----------------------------------------------------------------

For example:

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M01/3F/80/wKiom1PJ4yGgs_NoAAVZV-YDH20217.jpg "Title =" skewness. jpg "alt =" wKiom1PJ4yGgs_NoAAVZV-YDH20217.jpg "/>

5. Non-equivalent load balancing

6. Remote Routing

By default, if a route destined for a specified prefix is lost, the system checks whether there is a successor to reliability. If yes, the system uses it directly. If no, then, the Network Gateway marks the route entry as active, and then generates query data packets and sends them to all active neighbors to inquire about the route. The neighbor checks its own topology information table. If not, the query is spread to other neighbors again. When no query is available, reply data packets will be used to reply to the query. Therefore, in order to accelerate convergence, vrouters are usually configured as virtual routers.

Purpose: The query is not sent to the vro.

-----------------------------------------------------------------

R2 (config) # router VPN 100

R2 (config-router) # Kerberos stub?

Connected do advertise connected routes

Leak-map allow dynamic prefixes Based on the leak-Map

Receive-only set IP-EIGRP as receive only neighbor

Redistributed do advertise redistributed routes

Static do advertise static routes

Summary do advertise summary routes

<Tr>

-----------------------------------------------------------------

Connected indicates that the vro only advertises the directly connected network information contained in the network.

Receive-only indicates that the router does not pass any information except receive neighbor information.

Redistributed indicates that the vro only uses the route information that is forwarded by the reseller.

Static indicates that the vro only advertises the static routes that are re-distributed (dynamic)

Summary indicates that the router only advertises manual or automatically summarized route information.

<Tr> the default value is connected and summary.

-----------------------------------------------------------------

The test is as follows:

If R2 is set to a vro, when R1 loses the 1.1.1.0/24 route, R1 will not send a route query packet to r2.

For example:

650) This. width = 650; "src =" http://s3.51cto.com/wyfs02/M00/3F/80/wKiom1PJ4u2yk5XFAAMM-LvTSfw888.jpg "Title =" imagestub.jpg "alt =" wKiom1PJ4u2yk5XFAAMM-LvTSfw888.jpg "/>

This article from the "disheartened" blog, please be sure to keep this source http://hzajie.blog.51cto.com/722914/1440151

Lab 3: VPN topology, route, and aggregation