There are two dynamic routing protocols: Interior Gateway Protocol (IGP) and Exterior Gateway protocol (EGP). IGP is the protocol used to calculate the route to a destination inside an autonomous system. IGP supported by ES4624-SFP/ES4626-SFP switch include RIP and OSPF,...
BGP protocol. EGP supported by ES4624-SFP/ES4626-SFP switch include BGP-4, BGP-4+. 1.1.1 Routing Table As mentioned before, layer3 switch is mainly used to establish the route from the current layer3 switch to a network or a host, and to forward packets according to the route. Each layer3 switch has its own route table containing all routes used by that switch.
The matching rules can be previously configured to be applied in the routing publishing, receiving and distributing policies. Five filters are provided in ES4624-SFP/ES4626-SFP switch: route-map, acl, as-path, community-list and ip-prefix for use. We will introduce each filter in following sections: 1.
routing messages after the matching test is passed. Different nodes in a route-map is an “or” relation logically. The system checks each node of the route-map in turn and once certain node test is passed the route-map test will be passed without taking the next node test.
Page 8
1、 Define route-map 2、Define the match clause in route-map 3、Define the set clause in route-map 4、Define address prefix list 1. Define route-map Command Explanation Global mode Configure route-map; the route-map route-map <map_name> {deny permit} <map_name> [{deny <sequence_num> permit} route-map <map_name> [{deny | permit} <sequence_num>]...
Page 9
Match address next-hop; The no match match ip <address | next-hop> <ip-acl-name | ip <address | next-hop> ip-acl-num | prefix-list list-name> [<ip-acl-name no match ip <address | next-hop> [<ip-acl-name | ip-acl-num | prefix-list ip-acl-num | prefix-list [list-name]>] [list-name]>] command deletes match condition Match the routing metric value;...
Page 10
set as-path prepend <as-num> Add a specified AS No. no set as-path prepend [<as-num>] before the BGP routing messages as-path series; as-path prepend [<as-num>] command deletes configuration set atomic-aggregate Configure the BGP atomic no set atomic-aggregate aggregate property; The no set atomic-aggregate command deletes configuration...
Page 11
set local-preference <pre_val> Set local preference; The no set local-preference [<pre_val>] no set local-preference [<pre_val>] command deletes the configuration set metric < +/- metric_val | metric_val> Set routing metric value; no set metric [+/- metric_val | metric_val] The no set metric [+/- metric_val | metric_val] command deletes...
Command Explanation Global mode Describe the prefix list; prefix-list ip prefix-list <list_name> description <description> <list_name> description no ip prefix-list <list_name> description command deletes configuration Set the prefix list; The no ip prefix-list <list_name> ip prefix-list <list_name> [seq <sequence_number>] [seq <deny | permit> < any | ip_addr/mask_length [ge <sequence_number>] min_prefix_len] [le max_prefix_len]>...
Page 13
Usage Guide: This command can be used for explaining and describing a prefix-list, e.g. the application and attention matters of the prefix-list Example: Switch#config terminal Switch(config)#ip prefix-list 3 description This list is used by BGP 1.2.3.2 ip prefix-list seq Command: ip prefix-list <list_name> [seq <sequence_number>] <deny | permit> < any | ip_addr/mask_length [ge <min_prefix_len>] [le <max_prefix_len>]>...
Page 14
1.2.3.3 ip prefix-list sequence-number Command: ip prefix-list sequence-number no ip prefix-list sequence-number Function: Enable the sequence-number auto-creation function, the “no ip prefix-list sequence-number” command close the prefix-list sequence-number. Parameter:None. Default: Sequence-number auto-creation enabled. Command Mode: Global Mode Usage Guide: The command can be used to close the prefix-list sequence-number. Example: Close the prefix-list sequence-number.
Page 15
(Standard ACL)or 100~199(Extended ACL), [exact-match] means precise matching. Command Mode: route-map mode Usage Guide: This command matches the community attributes of the BGP routing message following the rules specified in the community list. If the matching succeeded, then the “permit” or “deny”...
Page 16
the route. If the matching succeeded, then the “permit” or “deny” action in the route-map is performed. Example: Switch#config terminal Switch(config)#route-map r1 permit 5 Switch(config-route-map)#match ip address prefix-list mylist 1.2.3.8 match metric Command: match metric <metric-val > no match metric [<metric-val >] Function: Match the metric value in the routing message.
Page 17
Command: match route-type external <type-1 | type-2 > no match route-type external [<type-1 | type-2 >] Function: Configure to matching with the route type of OSPF routing message. The “no match route-type external [<type-1 | type-2 >]” deletes the configuration. Parameter: type-1 means match with the OSPF type 1 external route, type-2 means match with the OSPF type 2 external route.
Page 18
Default: None Command Mode: Global Mode Usage Guide: A route-map may consist of several nodes each of which is a check unit. The check sequence among nodes is identified by sequence-number. “permit” means the node filter will be passed if all match subs are obtained by current route and then further all the set sub of this node will be executed without entering the check in the next node;...
Page 19
as-path prepend [<as-num>]” command deletes this configuration. Parameter: <as-num > is the AS number, ranging from 1 to 4294967295, it can be shown in decimal notation (such as 6553700) or delimiter method (such as 100.100), circulating inputting several numbers is available. Command Mode: route-map mode Usage Guide: To add AS number in the As domain of the BGP, the AS path length should be lengthened so to affect the best neighbor path option.
Page 20
Example: Switch#config terminal Switch(config)#route-map r1 permit 5 Switch(config-route-map)#set comm-list 100 delete 1.2.3.17 set community Command: set community [AA:NN] [internet] [local-AS] [no-advertise] [no-export] [none] [additive] no set community [AA:NN] [internet] [local-AS] [no-advertise] [no-export] [none] [additive] Function: Configure the community attributes of the BGP routing message. The “no set community [AA:NN] [internet] [local-AS] [no-advertise] [no-export] [none] [additive]”...
Page 21
Switch#config terminal Switch(config)#route-map r1 permit 5 Switch(config-route-map)#set extcommunity rt 100:10 Set soo as 200.200:10 Switch(config)#route-map r1 permit 10 Switch(config-route-map)#set extcommunity soo 200.200:10 1.2.3.19 set ip next-hop Command: set ip next-hop <ip_addr> no set ip next-hop [<ip_addr>] Function: Configure the next-hop of the route. The “no set ip next-hop [<ip_addr>]” command deletes the configuration.
Page 22
Command: set metric < metric_val> no set metric [< metric_val>] Function: Configure the metric value of the route. The “no set metric [< metric_val>]” command deletes the configuration. Parameter: <metric_val > is the metric value, ranging between 1~4294967295. Command Mode: route-map mode Usage Guide: The metric value only affects the path option from external neighbors to local AS.
Page 23
Command Mode: route-map mode Usage Guide: To use this command, one match clause should at first be defined. Example: Switch#config terminal Switch(config)#route-map r1 permit 5 Switch(config-route-map)#set origin egp 1.2.3.24 set originator-id Command: set originator-id <ip_addr> no set originator-id [<ip_addr>] Function: Configure the origin ip address of the BGP routing message. The “no set originator-id [<ip_addr>]”...
no set vpnv4 next-hop [<ip_addr>] Function: Configure the next-hop of BGP VPNv4 routing message. The “no set vpnv4 next-hop [<ip_addr>]” command deletes the configuration. Parameter: <ip_addr> is the next-hop ip address of VPNv4 route shown by dotted decimal notation. Command Mode: route-map mode Usage Guide: To use this command, one match clause should at first be defined.
192.68.11.1 VLAN1 VLAN3 192.68.10.1 VLAN2 SwitchA 192.68.6.1 SwitchB VLAN2 VLAN3 VLAN1 192.68.6.2 192.68.5.2 172.16.20.1 VLAN1 VLAN3 192.68.5.1 172.16.20.2 SwitchC SwitchD VLAN2 VLAN2 172 16 1 1 172.16.1.2 Fig 1-1 Policy routing Configuration configuration procedure: (only SwitchA is listed,configurations for other switches are omitted.) The configuration of Layer 3 switchA: SwitchA#config SwitchA (config) #router bgp 1...
Page 26
Items in address prefix list should at least have one item set to permit mode. The deny mode items can be defined first to fast remove the unmatched routing messages, however if all the items are set to deny mode, any route will not be able to pass the filtering of this address prefix list.
Page 27
Command: show ip prefix-list [<detail | summary> [<list-name>] ] Function: Show the prefix-list contents. Parameter: detail means show detailed messages, summary means show summary messages, <list-name> is the name of prefix-list. Default: None Command Mode: all modes Usage Guide: All prefix-lists will be shown if no prefix-list name is specified. Example: Switch#show ip prefix-list detail mylist ip prefix-list mylist:...
Match clauses: as-path 60 Set clauses: metric 10 Displayed information Explanation route-map a, deny, sequence 10 route-map a means the name of route map is a, deny means the deny mode, sequence 10 means the sequence number is 10 Match clauses: Match sub as-path 60 Detailed contents in the Match sub...
as its name indicates, is static, it won’t modify the route automatically on network failure, and manual configuration is required on such occasions, therefore it is not suitable for mid and large-scale networks. Static route is mainly used in the following two conditions: 1) in stable networks to reduce load of route selection and routing data streams.
only shows those with high priority. 1.3.5 Configuration Examples The figure shown below is a simple network consisting of three layer3 switches, the network mask for all switches and PC is 255.255.255.0. PC-A and PC-C are connected via the static route set in SwtichA and SwitchC;...
1.4 RIP 1.4.1 Introduction to RIP RIP is first introduced in ARPANET, this is a protocol dedicated to small, simple networks. RIP is a distance vector routing protocol based on the Bellman-Ford algorithm. Network devices running vector routing protocol send 2 kind of information to the neighboring devices regularly: Number of hops to reach the destination network, or metrics to use or number of networks to pass.
(simple plaintext password and MD5 password authentication are supported), and support variable length subnet mask. RIP-II used some of the zero field of RIP-I and require no zero field verification. ES4624-SFP/ES4626-SFP switch send RIP-II packets in multicast by default, both RIP-I and RIP-II packets will be accepted.
Page 35
(2)Display the information about configuration of redistribution of OSPF routing to RIP 1. Enable RIP protocol Applying RIP route protocol with basic configuration in ES4624-SFP/ES4626-SFP switch is simple. Normally you only have to open the RIP switch and configure the segments running RIP, namely send and receive the RIP data packet by default RIP configuration.
Page 36
Command Explanation Global mode router rip Enables RIP; the “no router rip” command no router rip disables RIP Router and address family configuration mode Enables the segment running RIP protocol; network <A.B.C.D/M | ifname> the no network <A.B.C.D/M | ifname> no network <A.B.C.D/M | ifname>...
Page 37
redistribute {kernel |connected| Redistribute the routes distributed in other static| ospf| isis| bgp} [metric<value>] routing protocols into the RIP data packet; the [route-map<word>] no redistribute {kernel |connected| static| no redistribute {kernel |connected| ospf| isis| bgp} [metric<value>] static| ospf| isis| bgp} [metric<value>] [route-map<word>] command cancels the [route-map<word>] distributed route of corresponding protocols...
Page 38
accept-lifetime <start-time> Configure a key on the key chain and accept it {<end-time>| duration<seconds>| as an authorized time; the no accept-lifetime infinite} command delete it no accept-lifetime send-lifetime <start-time> Configure the transmitting period of a key on {<end-time>| duration<seconds>| the key chain; the no send-lifetime command infinite} delete the send-lifetime no send-lifetime...
Page 39
(3)Configure other RIP protocol parameters 1)Configure RIP routing priority 2)Configure the RIP route capacity limit in route table 3)Configure timer for RIP update, timeout and hold-down 4)Configure RIP UDP receiving buffer size Command Explanation Router configuration mode distance <number> [<A.B.C.D/M> ] Specify the route administratively distance of [<access-list-name|access-list-numb protocol;...
Page 40
Sets the version of RIP packets to send on all ip rip send version { 1 | 1-compatible | ports; the no ip rip send version command set the version to the one configured by the no ip rip send version version command Sets the version of RIP packets to receive on ip rip receive version {1 | 2 | }...
(3) To display ipv4 aggregation route information Command Explanation Admin Mode and Configuration Mode show ip rip aggregate To display aggregation route information. 6. Redistribution of OSPF Routing to RIP (1) To enable Introduction of OSPF Routing for RIP Command Notes Router rip configuration mode redistribute...
Page 42
Parameter: <start-time> parameter specifies the start time of the time period, of which the form should be: <start-time>={<hh:mm:ss> <month> <day> <year>|<hh:mm:ss> <day> <month> <year>} <hh:mm:ss> specify the concrete valid time of accept-lifetime in hours, minutes and second <day> specifies the date of valid, ranging between 1 -31 <month>...
Page 43
connected delete direct routes from the RIP route table rip only delete RIP routes from the RIP route table ospf only delete OSPF routes from the RIP route table isis only delete ISIS routes from the RIP route table bgp only delete BGP routes from the RIP route table all delete all routes from the RIP route table Default: No default configurations Command Mode: Privilleged mode...
Page 44
Default: Disabled Command Mode: router mode Example: Switch# config terminal Switch(config)# router rip Switch(config-router)# default-information originate 1.4.3.5 default-metric Command: default-metric <value> no default-metric Function: Set the default metric value of the introduced route. The “no default-metric” command restores the default value to 1. Parameter: <value>...
Page 45
Switch(config-router)# distance 8 10.0.0.0/8 mylist 1.4.3.7 distribute-list Command: distribute-list {<access-list-number access-list-name> prefix <prefix-list-name>} {in |out} [<ifname>] no distribute-list {<access-list-number | access-list-name> | prefix <prefix-list-name>} {in|out} [<ifname>] Function: This command uses access-list or prefix-list to filter the route update packets sent and received.
Page 46
Usage Guide: If to configure aggregation route under router mode, RIP protocol must be enabled. If configured under interface configuration mode, RIP protocol may not be enabled, but the aggregation router can operation after the RIP protocol be enabled on interface. Example: To configure aggregation route as 192.168.20.0/22 globally.
Page 47
authentication). This command should be used associating the ip rip authentication key or ip rip authentication string. Independently configuration will not lead to authentication process. Example: Switch# config terminal Switch(config)# interface vlan 1 Switch(Config-if-Vlan1)# ip rip authentication mode md5 1.4.3.12 ip rip authentication string Command: ip rip authentication string <text>...
Page 48
Switch(config)# interface vlan 1 Switch(Config-if-Vlan1)# ip rip authentication cisco-compatible 1.4.3.14 ip rip receive-packet Command: ip rip receive-packet no ip rip receive-packet Function: Set the interface to be able to receivable RIP packets; the “no ip rip receive-packet” command set the interface to be unable to receivable RIP packets Default: Interface receives RIP packets Command Mode: Interface Mode Example: Switch# config terminal...
Page 49
Switch(Config-if-Vlan1)# ip rip send-packet 1.4.3.17 ip rip send version Command: ip rip send version { 1 | 2 | 1-compatible | 1 2} no ip rip send version Function: Set the version information of the RIP packets the interface receives. The default version is 2;...
Page 50
Usage Guide: The command permits entering the keychain-key mode and set the passwords corresponding to the keys. Example: Switch# config terminal Switch(config)# key chain mychain Switch(config-keychain)# key 1 Switch(config-keychain-key)# Relevant Commands: key chain, key-string, accept-lifetime, send-lifetime 1.4.3.20 key chain Command: key chain <name-of-chain> no key chain <...
Page 51
no maximum-prefix Function: Configure the maximum number of RIP routes in the route table. The “no maximum-prefix” command cancels the limit. Parameter: <maximum-prefix> the maximum number of RIP route, ranging between 1-65535; a warning is given when the number rate of current route exceeds <threshold> ranging between 1-100, default at 75 Command Mode: router mode Usage Guide: The maximum RIP routes only limits the number of routes learnt through RIP but...
Page 52
packets. If the network is not configured, all interfaces of the network will not be able to send or receive data packets. Example: Switch# config terminal Switch(config)# router rip Switch(config-router)# network 10.0.0.0/8 Switch(config-router)# network vlan 1 1.4.3.25 offset-list Command: offset-list <access-list-number | access-list-name> {in|out} <number> [<ifname>] no offset-list <access-list-number | access-list-name>...
Page 53
Command: recv-buffer-size<size> no recv-buffer-size Function: This command configures the size of UDP receiving buffer zone of RIP; the “no recv-buffer-size” command restores the system default. Parameter: <size> is the buffer zone size in bytes, ranging between 8192-2147483647 Default: 8192 bytes Command Mode: Router mode Example: Switch# config terminal Switch(config)# router rip...
Page 54
Usage Guide: The command add a static RIP route, and is mainly used for debugging. Routes configured by this command will not appear in kernel route table but in the RIP route database. Example: Switch# config terminal Switch(config)# router rip Switch(config-router)# route 1.0.0.0/8 1.4.3.30 router rip Command: router rip...
Page 55
Command: send-lifetime <start-time> {<end-time>| duration<seconds>| infinite} no send-lifetime Function: Use this command to specify a key on the keychain as the time period of sending keys. The “no send-lifetime” cancels this configuration. <start-time> parameter specifies the starting time of the time period, which is: Parameter: <start-time>={<hh:mm:ss>...
no timers basic Function: Adjust the RIP timer update, timeout, and garbage collecting time. The “no timers basic” command restores each parameters to their default values. Parameter: <update> time interval of sending update packet, shown in seconds and ranging 5-2147483647 between ;...
Page 57
SwitchB Interface Interface vlan1:10.1.1.2/24 vlan1:10.1.1.1/24 SwitchC SwitchA Interface Interface Vlan2:20.1.1.2/24 vlan2:20.1.1.1/24 Fig 1-3 RIP example In the figure shown above, a network consists of three Layer 3 switches, in which SwitchA connected with SwitchB and SwitchC, and RIP routing protocol is running in all of the three switches.
Page 58
SwitchA(config-router)#exit SwitchA(config) # Layer 3 SwitchB Configure the IP address of interface vlan 1 SwitchB#config SwitchB(config)# interface vlan 1 SwitchB(Config-if-Vlan1)# ip address 10.1.1.2 255.255.255.0 SwitchB(Config-if-Vlan1)exit Initiate RIP protocol and configure the RIP segments SwitchB(config)#router rip SwitchB(config-router)#network vlan 1 SwitchB(config-router)#exit Layer 3 SwitchC SwitchC#config SwitchC(config)# interface vlan 1 Configure the IP address of interface vlan 1...
Fig 1-4 Typical application of RIP aggregation As the above network topology, S2 is connected to S1 through interface vlan1, there are other 4 subnet routers of S2, which are 192.168.21.0/24, 192.168.22.0/24, 192.168.23.0/24, 192.168.24.0/24. S2 supports route aggregation, and to configure aggregation route 192.168.20.0/22 in interface vlan1 of S2, after that, sending router messages to S2 through vlan1, and put the four subnet routers aggregated to one router as 192.168.20.0/22, and send to S1, and not send subnet to neighbor.
Page 60
Second, ensure the interface and chain protocol are UP (use show interface command) Then initiate the RIP protocol (use router rip command) and configure the segment (use network command) and set RIP protocol parameter on corresponding interfaces, such as the option between RIP-I and RIP-II After that, one feature of RIP protocol should be noticed ---the Layer 3 switch running RIP protocol sending route updating messages to all neighboring Layer 3 switches every 30 seconds.
Page 61
Parameter: None. Default: Close the debug by default. Command Mode: Admin Mode. Usage Guide: None. Example: Switch#debug rip redistribute route receive Switch#no debug rip redistribute route receive 1.4.5.1.3 show debugging rip Command: show debugging rip Function: Show RIP event debugging, RIP packet debugging and RIP nsm debugging status Command Mode: Any mode Example: Switch# show debugging rip RIP debugging status:...
Page 62
Gateway Distance Last Update Bad Packets Bad Routes 20.1.1.1 120 00:00:31 Distance: (default is 120) Displayed information Explanation Sending updates every 30 seconds with +/-50%, next Sending update every 30 due in 8 seconds secs Timeout after 180 seconds, garbage collect after 120 route time-out event...
Page 63
Example: show ip rip Codes: R - RIP, K - Kernel, C - Connected, S - Static, O - OSPF, I - IS-IS, B - BGP Network Next Hop Metric From Time R 12.1.1.0/24 20.1.1.1 2 20.1.1.1 Vlan1 02:51 R 20.1.1.0/24 Vlan1 Amongst R stands for RIP route, namely a RIP route with the destination network address 12.1.1.0, the network prefix length as 24, next-hop address at 20.1.1.1.
Page 64
the route aggregated globally , then display “---”. Metric Metric of aggregation route Count The number of learned aggregation routes Suppress The times of aggregated for aggregation route. 1.4.5.1.7 show ip rip database Command: show ip rip database Function: Show the routes in the RIP route database Command Mode: Any mode Example: Switch# show ip rip database Codes: R - RIP, K - Kernel, C - Connected, S - Static, O - OSPF, I - IS-IS,...
RIP for all vrf. Default: Not shown by default. Command Mode: Admin Mode and Configuration Mode. Usage Guide: None. Example: Switch#show ip rip redistribute 1.5 RIPng 1.5.1 Introduction to RIPng RIPng is first introduced in ARPANET, this is a protocol dedicated to small, simple networks. RIPng is a distance vector routing protocol based on the Bellman-Ford algorithm.
Page 66
To avoid “infinite count”, RIPng provides mechanism such as “split horizon” and “triggered update” to solve route loop. “Split horizon” is done by avoiding sending to a gateway routes leaned from that gateway. There are two split horizon methods: “simple split horizon” and “poison reverse split horizon”.
(2) Display the information about configuration of redistribution of OSPFv3 routing to RIPng 1. Enable RIPng protocol Applying RIPng route protocol with basic configuration in ES4624-SFP/ES4626-SFP switch is simple. Normally you only have to open the RIPng switch and configure the segments running RIPng, namely send and receive the RIPng data packet by default RIPng configuration.
Page 68
2. Configure RIPng protocol parameters (1)Configure RIPng sending mechanism 1)configure the RIPng data packets point-transmitting Command Explanation Router configuration mode Specify the IPv6 Link-local address and interface of the neighboring route needs [no] neighbor <IPv6-address> point-transmitting; [no] neighbor <ifname> <IPv6-address> <ifname> command cancels the appointed router.
Page 69
Configure that provide a deviation value to the route metric value when the port sends or [no] offset-list receives RIPng data packet; [no] <access-list-number offset-list <access-list-number |access-list-name> {in|out} |access-list-name> {in|out} <number > <number > [<ifname>] [<ifname>] command removes the deviation table 3)configure and apply route filter and route aggregation Command Explanation...
Page 70
(4) Delete the specified route in RIPng route table Command Explanation Admin Mode clear IPv6 route the command deletes a specified route from {<IPv6-address>|kernel|static|con the RIP route table nected|rip|ospf|isis|bgp|all} 3. RIPng aggregation configuration task list (1) To configure ipv6 aggregation route globally Command Explanation Router Configuration Mode...
Router ipv6 rip configuration mode redistribute ospf [<process-tag>] [metric<value>] [route-map<word>] To enable or disable redistribution of redistribute ospf OSPFv3 routing for RIPng. [<process-tag>] (2)To display configuration information Command Notes Admin mode and configuration mode display RIPng routing which show ipv6 rip redistribute redistributed from other routing protocols.
Page 72
ospf delete IPv6 OSPF route from the RIPng route table only bgp delete IPv6 BGP route from the RIPng route table only ISIS delete ivp6 isis route from the RIPng route table only delete all routes from the RIPng route table Default: No default configuration Command Mode: Admin mode Usage Guide: All routes in the RIPng route table will be deleted by using this command with all...
Page 73
1.5.3.4 distance Command: distance <number> [<ipv6-address>] [<access-list-name access-list-number>] no distance [<ipv6-address>] Function: Set the managing distance with this command. The “no distance [<A.B.C.D/M> ]” command restores the default value to 120. Parameter: <number> specifies the distance value, ranging between 1-255. <ipv6-address> is the local link address or its prefix.
Page 74
Parameter: [poisoned] configures split horizon with poison reverse. Default: Split horizon with poison reverse Command Mode: Interface Mode Usage Guide: The split horizon is for preventing the routing loops, namely preventing the layer 3 switch from broadcasting a route at the interface from which the very route is learnt. The command can configure on IPv6 tunnel interface, but it is successful configuration to only configure tunnel carefully.
Page 75
Example: Switch#config terminal Switch(config)#interface Vlan1 Switch(Config-if-Vlan1)#ipv6 router rip 1.5.3.9 neighbor Command: neighbor <ipv6-address> <ifname> vlan <vlan-id> no neighbor <ipv6-address> <ifname> vlan <vlan-id> Function: Specify the destination address for fixed sending. The “no neighbor <ipv6-address> <ifname> vlan <vlan-id> “ cancels the specified address defined and restores all trusted gateways.
Page 76
Command: passive-interface<ifname>|vlan <vlan-id> no passive-interface<ifname>|vlan <vlan-id> Function: Set the RIPng layer 3 switches to block RIPng broadcast on the specified interfaces, and only send the RIPng data packet to the layer 3 switch which is configured with neighbor. Parameter: <ifname> is the specific interface name Default: Not configured Command Mode: Router mode Example: Switch#config terminal...
between 0 and 16. route-map <word> is the pointer to the introduced routing map. Default: Not redistributed by default. Command Mode: RIPng configuration mode. Usage Guide: None. Example: To redistribute ospfv3 abc routing ro ripng. Switch(config)#router ipv6 rip Switch(config-router)#redistribute ospf abc 1.5.3.14 route Command: route <ipv6-address>...
Page 78
1.5.4.1 Typical RIP Examples SwitchC Interface VLAN 1 Interface VLAN 1 2000:1:1::2/64 2000:1:1::1/64 Interface VLAN 2 SwitchB SwitchA 2001:1:1::1/64 Interface VLAN 2 2001:1:1::2/64 Fig 1-5 RIPng Example As shown in the above figure, a network consists of three layer 3 switches. SwitchA and SwitchB connect to SwitchC through interface vlan1 and vlan2.
Page 79
SwitchB (config)#router IPv6 rip SwitchB (config-router-rip)#exit Configure the IPv6 address and interfaces of Ethernet port vlan1 to run RIPng SwitchB #config SwitchB (config)# interface Vlan1 SwitchB (config-if)# IPv6 address 2001:1:1::2/64 SwitchB (config-if)#IPv6 router rip SwitchB (config-if)exit Enable RIPng protocol SwitchC (config)#router IPv6 rip SwitchC (config-router-rip)#exit Configure the IPv6 address and interfaces of Ethernet port vlan1 to run RIPng SwitchC#config...
other 4 subnet routers of S2, which are 2001:1::20:0/112, 2001:1::21:0/112, 2001:1::22:0/112, 2001:1::23:0/112. S2 supports route aggregation, and to configure aggregation route 2001:1::20:0/110 in interface vlan1 of S2, after that, sending router messages to S2 through vlan1, and put the four subnet routers aggregated to one router as 2001:1::20:0/110, and send to S1, and not send subnet to neighbor.
Page 81
no debug ipv6 rip [events| nsm| packet[recv|send][detail]| all] Function: For opening various debugging switches of RIPng, showing various debugging messages. The “no debug ipv6 rip [events| nsm| packet[recv|send][detail]| all]” command close the corresponding debugging switch Parameter: Events shows the debugging message of RIPng events Nsm shows the communication messages between RIPng and NSM.
Page 82
information for RIPng. The no form of this command will disable the debugging information. Parameter: None. Default: Close the debug by default. Command Mode: Admin Mode. Usage Guide: None. Example: Switch#debug ipv6 rip redistribute route receive Switch#no debug ipv6 rip redistribute route receive 1.5.5.1.4 show debugging ipv6 rip Command: show debugging ipv6 rip Function: Show RIPng debugging status for following debugging options: nsm debugging,...
Page 83
2001:1:2::/60 Vlan1 ---- Displayed information Notes Network Route prefix and prefix length Aggregated Ifname To configure the interface name of the aggregation route. If the route aggregated globally , then display “---”. Metric Metric of aggregation route Count The number of learned aggregation routes Suppress The times of aggregated for aggregation route.
Page 84
Command: show ipv6 rip redistribute Function: Show the configuration information of redistributed other out routing to RIPng. Parameter: None. Default: Not shown by default. Command Mode: Admin Mode and Configuration Mode. Usage Guide: None. Example: Switch#show ipv6 rip redistribute 1.5.5.1.8 show ipv6 protocols rip Command: show ipv6 protocols rip Function: Show the RIPng process parameters and statistic messages Command Mode: All mode...
Redistributing: static Redistricting the static route into the RIP routes Interface The interfaces running RIP is Vlan10 Vlan 10 and Vlan 2 Vlan2 1.5.5.1.9 show ipv6 rip Command: show ipv6 rip Function: Show RIPng Routing Command Mode: All mode Example: Switch#show ipv6 rip Codes: R - RIP, K - Kernel, C - Connected, S - Static, O - OSPF, I - IS-IS, B - BGP, a - aggregate, s - suppressed Network...
Page 86
to generate a route table basing on that database. Autonomous system (AS) is a self-managed interconnected network. In large networks, such as the Internet, a giant interconnected network is broken down to autonomous systems. Big enterprise networks connecting to the Internet are independent AS, since the other host on the Internet are not managed by those AS and they don’t share interior routing information with the layer3 switches on the Internet.
Page 87
advantages release some layer3 switch resources, as the process ability and bandwidth used by bad route information are minor. The features of OSPF protocol include the following: OSPF supports networks of various scales, several hundreds of layer3 switches can be supported in an OSPF network. Routing topology changes can be quickly found and updating LSAs can be sent immediately, so that routes converge quickly.
Page 88
OSPF areas are centered with the Backbone area, identified as Area 0, all the other areas must be connected to Area 0 logically, and Area 0 must be continuous. For this reason, the concept of virtual link is introduced to the backbone area, so that physically separated areas still have logical connectivity to the backbone area.
RFC2328. 1.6.2 OSPF Configuration Task List The OSPF configuration for Edge-core series switches may be different from the configuration procedure to switches of the other manufacturers. It is a two-step process: 1、Enable OSPF in the Global Mode;...
Page 90
Disable OSPF protocol 1. Enable OSPF protocol Basic configuration of OSPF routing protocol on ES4624-SFP/ES4626-SFP switch is quite simple, usually only enabling OSPF and configuration of the OSPF area for the interface are required. The OSPF protocol parameters can use the default settings. If OSPF protocol parameters need to be modified, please refer to “2.
Page 91
Command Explanation Interface configuration mode Configures the authentication method by the ospf authentication interface to accept OSPF packets; the no ip { message-digest | null} ospf authentication command restores the no ip ospf authentication default settings. Configure the key of the authentication ip ospf authentication-key LINE process of OSPF data packets receiving for no ip ospf authentication-key...
Page 92
redistribute { bgp | connected | static Distribute other protocols to find routing | rip | kernel} [ metric-type { 1 | 2 } ] and static routings as external routing [ tag <tag> ] [ metric <cost_value> ] messages the no redistribute { bgp | [router-map <WORD>] connected | static | rip | kernel } no redistribute { bgp | connected |...
Page 93
2)configure the LSA limit in the OSPF link state database 3)Configure various OSPF parameters Command Explanation OSPF protocol configuration mode configure the SPF timer of OSPF; the timers spf <interval> no timers spf command restores the no timers spf default settings overflow database {<max-LSA>...
log-adjacency-changes detail Configure to keep a log for OSPF adjacency no log-adjacency-changes detail changes or not. 6)Filter the route obtained by OSPF Command Explanation OSPF Protocol Configuration Mode Use access list to filter the route obtained by filter-policy <access-list-name> OSPF, the no command cancels the route no filter-policy filtering.
Page 95
Command: area <id> default-cost <cost> no area <id> default-cost Function: Configure the cost of sending to the default summary route in stub or NSSA area; the “no area <id> default-cost” command restores the default value. Parameter: <id> is the area number which could be shown as digits 0~4294967295, or as an IP address;...
Page 96
Function: Set the area to Not-So-Stubby-Area (NSSA ) area. Parameter: <id> is the area number which could be digits ranging between 0~4294967295, and also as an IP address. TRANLATOR = translator-role {candidate|never|always}, specifies the LSA translation mode for routes: candidate means if the router is elected translator, Type 7 LSA can be translated to Type-5 LSA, the default is candidate.
Page 97
Usage Guide: Use this command to aggregate routes inside an area. If the network IDs in this area are not configured continuously, a summary route can be advertised by configuring this command on ABR. This route consists of all single networks belong to specific range. Example: Switch # config terminal Switch (config)# router ospf 100...
Page 98
authentication : Enable authentication on this virtual link. message-digest: Authentication with MD-5. null : Overwrite password or packet summary with null authentication. AUTH_KEY= authentication-key <key>. <key>: A password consists of less than 8 characters. INTERVAL= [dead-interval hello-interval message-digest-key<1-255>md5<LINE> retransmit-interval | transmit-delay] <value>. <value>:>: The delay or interval seconds, ranging between 1~65535.
Page 99
Usage Guide: The interface metric value is acquired by divide the interface bandwith with reference bandwidth. This command is mainly for differentiate high bandwidth links. If several high bandwidth links exist, their cost can be assorted by configuring a larger reference bandwidth value.
Page 100
ROUTE1= external <external-distance>, Configure the distance learnt from other routing area. <external-distance>distance value, ranging between 1~255. ROUTE2= inter-area <inter-distance>, configure the distance value from one area to another area. <inter-distance> manage distance value, ranging between 1~255. ROUTE3= intra-area <intra-distance> Configure all distance values in one area. <intra-distance>...
Page 101
Switch(config-router)#redistribute bgp 1.6.3.13 filter-policy Command: filter-policy <access-list-name> no filter-policy Function: Use access list to filter the route obtained by OSPF, the no command cancels the route filtering. Parameter: <access-list-name>: Access list name will be applied, it can use numeric standard IP access list and naming standard IP access list to configure.
Page 102
1.6.3.15 ip ospf authentication Command: ip ospf [<ip-address>] authentication [message-digest|null] no ip ospf [<ip-address>] authentication Function: Specify the authentication mode required in sending and receiving OSPF packets on the interfaces; the “no ip ospf [<ip-address>] authentication” command cancels the authentication. Parameter: <ip-address>...
Page 103
<cost > is the cost of OSPF protocol ranging between 1~65535. Default: Default OSPF cost on the interface is auto-figure out based bandwidth. Command Mode: Interface Mode. Example: Switch#config terminal Switch(config)#interface vlan 1 Switch(Config-if-Vlan1)#ip ospf cost 3 1.6.3.18 ip ospf database-filter Command: ip ospf [<ip-address>] database-filter all out no ip ospf [<ip-address>] database-filter Function: The command opens LSA database filter switch on specific interface;...
Page 104
least 4 times of the hello-interval value. Example: Switch#config terminal Switch(config)#interface vlan 1 Switch(Config-if-Vlan1)#ip ospf dead-interval 80 1.6.3.20 ip ospf disable all Command: ip ospf disable all no ip ospf disable all Function: Stop OSPF group process on the interface. Command Mode: Interface Mode.
Page 105
Relevant Commands: ip ospf dead-interval 1.6.3.22 ip ospf message-digest-key Command: ip ospf [<ip-address>] message-digest-key <key_id> MD5 <LINE> no ip ospf [<ip-address>] message-digest-key <key_id> Function: Specify the key id and value of MD5 authentication on the interface; the “no ip ospf [<ip-address>] message-digest-key <key_id>“...
Page 106
Command: ip ospf <ip-address> mtu-ignore no ip ospf <ip-address> mtu-ignore Function: Use this command so that the mtu size is not checked when switching DD; the “no ip ospf <ip-address> mtu-ignore” will ensure the mtu size check when performing DD switch. Parameter: <ip-address>...
Page 107
Usage Guide: When two layer 3 switches connected to the same segments both want to be the “Defined layer 3 switch”, the priority will decide which one should be chosen. Normally the one with higher priority will be elected, or the one with larger router-id number if the priorities are the same.
Page 108
adjacent layer 3 switches, shown in seconds ang raning between 1~65535. Default: Default transmit delay value of link state announcements is 1 second. Command Mode: Interface Mode. Usage Guide: The LSA ages with time in the layer 3 switches, but not in the network transmitting process.
Page 109
1.6.3.31 key chain Command: key chain <name-of-chain> no key chain < name-of-chain > Function: This command is for entering a keychain manage mode and configure a keychain. The “no key chain < name-of-chain >“ delete one keychain. Parameter: <name-of-chain> is the name string of the keychain the length of which is not specifically limited.
Page 110
Default: No default configuration. Command Mode: OSPF protocol mode. Usage Guide: Use this command on NBMA network to configure neighbor manually. Every known non-broadcasting neighbor router should be configured with a neighbor entry. The configured neighbor address should be the main address of the interface. The poll-interval should be much larger than the hello-interval.
Page 111
Default: Cisco by default. Command Mode: OSPF protocol mode. Usage Guide: For Specifying the realizing type of abr. This command is good for interactive operation among different OSPF realizing method and is especially useful in the multiple host environment. Example: Configure abr as standard. Switch#config terminal Switch(config)#router ospf 100 Switch(config-router)#ospf abr-type standard...
Page 112
Switch(config-router)#overflow database 10000 soft 1.6.3.38 overflow database external Command: overflow database external [<maxdbsize > <maxtime>] no overflow database external [<maxdbsize > <maxtime>] Function: The command is for configuring the size of external link database and the waiting time before the route exits overflow state. The “no overflow database external [<maxdbsize > <maxtime>]”...
Page 113
Function: Introduce route learnt from other routing protocols into OSPF. Parameter: kernel introduce from kernel route. connected introduce from direct route. static introduce from static route. rip introduce from the RIP route. isis introduce from ISIS route. bgp introduce from BGP route. metric <value>...
Page 114
Example: Switch(config-router)#redistribute ospf 1.6.3.42 router ospf Command: router ospf <process_id> no router ospf <process_id> Function: This command is for relating the OSPF process. The “no router ospf <process_id>” command deletes the config. Parameter: <process_id> specifies the id of the OSPF process to be created. Command Mode: Global mode.
Page 115
Relevant Commands: route-map 1.6.3.44 default-metric Command: default-metric <value> no default-metric Function: The command set the default metric value of OSPF routing protocol; the “no default-metric” returns to the default state. Parameter: <value>, metric value, ranging between 0~16777214. Default: Built-in, metric value auto translating. Command Mode: OSPF protocol mode.
ES4624-SFP/ES4626-SFP switch for example, where layer3 SwitchA and SwitchE make up OSPF area 0, layer3 SwitchB and SwitchC form OSPF area 1 (assume vlan1 interface of layer3 SwitchA belongs to area 0), layer3 SwitchD forms OSPF area 2 (assume vlan2 interface of layer3 SwitchE belongs to area 0).
Page 117
SwitchA(config-if-vlan1)# ip address 10.1.1.1 255.255.255.0 SwitchA(config-if-vlan1)#no shut-down SwitchA(config-if-vlan1)#exit Configuration of the IP address for interface vlan2 Configure the IP address of interface vlan2 SwitchA(config)# interface vlan 2 SwitchA(config-if-vlan2)# ip address 100.1.1.1 255.255.255.0 SwitchA (config-if-vlan2)#exit Enable OSPF protocol, configure the area number for interface vlan1 and vlan2. SwitchA(config)#router ospf SwitchA(config-router)#network 10.1.1.0/24 area 0 SwitchA(config-router)#network 100.1.1.0/24 area 0...
Page 118
SwitchC(config-if-vlan3)#no shut-down SwitchC(config-if-vlan3)#exit Enable OSPF protocol, configure the OSPF area interfaces vlan3 resides in. Initiate the OSPF protocol, configure the OSPF area to which interface vlan3 belongs SwitchC(config)#router ospf SwitchC(config-router)# network 20.1.1.0/24 area 1 SwitchC(config-router)#exit SwitchC(config)#exit SwitchC# Layer 3 SwitchD Configuration of the IP address for interface vlan3 SwitchD#config SwitchD(config)# interface vlan 3...
Page 119
SwitchE(config-router)#exit SwitchE(config)#exit Scenario 2: Typical OSPF protocol complex topology. SwitchD SwitchA SwitchE SwitchB SwitchF SwitchC Area1 Area0 SwitchK SwitchI SwitchJ SwitchG SwitchH SwitchL Area2 Area3 Fig 1-8 Typical complex OSPF autonomous system. This scenario is a typical complex OSPF autonomous system network topology. Area1 include network N1-N4 and layer3 SwitchA-SwitchD, area2 include network N8-N10, host H1 and layer3 SwitchH, area3 include N5-N7 and layer3 SwitchF, SwitchG SwitchA0 and Switch11, and network N8-N10 share a summary route with host H1(i.e.
Page 120
link between backbone layer3 Switch10 and Switch11. The area edge layer3 switches exchange summary information via the backbone layer3 switch, each area edge layer3 switch listens to the summary information from the other edge layer3 switches. Virtual link can not only maintain the connectivity of the backbone area, but also strengthen the backbone area.
Page 121
Configure IP address and area number for interface vlan1. SwitchA(config)# interface vlan 1 SwitchA(config-If-Vlan1)#ip address 20.1.1.1 255.255.255.0 SwitchA(config-If-Vlan1)#exit SwitchA(config)#router ospf SwitchA(config-router)#network 20.1.1.0/24 area 1 SwitchA(config-router)#exit 2)SwitchB: Configure IP address for interface vlan2 SwitchB#config SwitchB(config)# interface vlan 2 SwitchB(config-If-Vlan2)# ip address 10.1.1.2 255.255.255.0 SwitchB(config-If-Vlan2)#exit Enable OSPF protocol, configure the area number for interface vlan2.
Page 122
SwitchC(config)#router ospf SwitchC(config-router)#network 10.1.1.0/24 area 1 SwitchC(config-router)#exit Configure simple key authentication SwitchC(config)#interface vlan 2 SwitchC(config-If-Vlan2)#ip ospf authentication SwitchC(config-If-Vlan2)#ip ospf authentication-key DCS SwitchC(config-If-Vlan2)#exit Configure IP address and area number for interface vlan3 SwitchC(config)# interface vlan 3 SwitchC(config-If-Vlan3)#ip address 20.1.3.1 255.255.255.0 SwitchC(config-If-Vlan3)#exit SwitchC(config)#router ospf SwitchC(config-router)#network 20.1.3.0/24 area 1 SwitchC(config-router)#exit...
Page 123
SwitchD(config-router)#exit Configure simple key authentication. SwitchD(config)#interface vlan 2 SwitchD(config-If-Vlan2)#ip ospf authentication SwitchD(config-If-Vlan2)#ip ospf authentication-key DCS SwitchD(config-If-Vlan2)#exit Configure the IP address and the area number for the interface vlan 1 SwitchD(config)# interface vlan 1 SwitchD(config-If-Vlan1)# ip address 10.1.6.1 255.255.255.0 SwitchD(config-If-Vlan1)exit SwitchD(config)#router ospf SwitchD(config-router)#network 10.1.6.0/24 area 0 SwitchD(config-router)#exit Configure MD5 key authentication...
Page 124
Configure VPN route/transmitting examples vpnb and vpnc SwitchA#config SwitchA(config)#ip vrf vpnb SwitchA(config-vrf)# SwitchA(config-vrf)#exit SwitchA#(config) SwitchA(config)#ip vrf vpnc SwitchA(config-vrf)# SwitchA(config-vrf)#exit Associate the vlan 1 and vlan 2 respectively with vpnb and vpnc while configuring IP address SwitchA(config)#in vlan1 SwitchA(config-if-Vlan1)#ip vrf forwarding vpnb SwitchA(config-if-Vlan1)#ip address 10.1.1.1 255.255.255.0 SwitchA(config-if-Vlan1)#exit SwitchA(config)#in vlan2...
The Layer 3 SwitchC of CE2 Configure the IP address of Ethernet E 1/2 SwitchC#config SwitchC(config)# interface Vlan1 SwitchC(config-if-vlan1)# ip address 20.1.1.2 255.255.255.0 SwitchC(config-if-vlan1)#exit Initiate OSPF protocol and configuring OSPF segments SwitchC(config)#router ospf SwitchC(config-router)#network 20.1.1.0/24 area 0 SwitchC(config-router)#exit 1.6.5 OSPF Troubleshooting The OSPF protocol may not be working properly due to errors such as physic connection, configuration error when configuring and using the OSPF protocol.
Page 126
Command Mode: Admin and global mode Example: Switch#debug ospf events router 1.6.5.1.2 debug ospf ifsm Command: [no]debug ospf ifsm [status|events|timers] Function: Open debugging switches showing the OSPF interface states; the “[no]debug ospf ifsm [status|events|timers]” command closes this debugging switches. Default: Closed Command Mode: Admin mode and global mode Example: Switch#debug ospf ifsm events...
Page 127
Command: [no]debug ospf nsm [interface|redistribute] Function: Open debugging switches showing showing OSPF NSM, the “[no]debug ospf nsm [interface|redistribute]” command closes this debugging switch. Default: Closed Command Mode: Admin mode and global mode Example: Switch#debug ospf nsm interface 1.6.5.1.6 debug ospf packet Command: [no]debug ospf packet [dd|detail|hello|ls-ack|ls-request|ls-update|recv|detail] Function: Open debugging switches showing showing OSPF packet messages;...
Page 128
Command Mode: Admin Mode. Usage Guide: None. Example: Switch#debug ospf redistribute message send 1.6.5.1.9 debug ospf redistribute route receive Command: debug ospf redistribute route receive no debug ospf redistribute route receive Function: To enable/disable debugging of received routing message from nsm for OSPF process.
Page 129
Number of LSA originated 0 Number of LSA received 0 Number of areas attached to this router: 1 Area 0 (BACKBONE) (Inactive) Number of interfaces in this area is 0(0) Number of fully adjacent neighbors in this area is 0 Area has message digest authentication SPF algorithm executed 0 times Number of LSA 0.
Page 130
Default: Not displayed Command Mode: All modes Example: Switch#show ip ospf border-routers OSPF process 0 internal Routing Table Codes: i - Intra-area route, I - Inter-area route i 10.15.0.1 [10] via 10.10.0.1, Vlan1, ASBR, Area 0.0.0.0 i 172.16.10.1 [10] via 10.10.11.50, Vlan2, ABR, ASBR, Area 0.0.0.0 1.6.5.1.12 show ip ospf database Command: show ip ospf [<process-id>] database[{ adv-router [{<linkstate_id>| self-originate |adv-router <advertiser_router>}]...
Page 131
192.168.1.3 192.168.1.3 236 0x80000033 0x0521 2 Net Link States (Area 0.0.0.2) Link ID ADV Router Age Seq# CkSum 20.1.1.2 192.168.1.2 254 0x8000002b 0xece4 Summary Link States (Area 0.0.0.2) Link ID ADV Router Age Seq# CkSum Route 6.1.0.0 192.168.1.2 68 0x8000002b 0x5757 6.1.0.0/22 6.1.1.0 192.168.1.2 879 0x8000002a 0xf8bc...
Page 132
Process ID 0, Router ID 10.10.11.50, Network Type BROADCAST, Cost: 10 Transmit Delay is 5 sec, State Waiting, Priority 1 No designated router on this network No backup designated router on this network Timer intervals configured, Hello 35, Dead 35, Wait 35, Retransmit 5 Hello due in 00:00:16 Neighbor Count is 0, Adjacent neighbor count is 0 1.6.5.1.14 show ip ospf neighbor...
Page 133
Command: show ip ospf [<process-id>] route Function: Display the OSPF routing table messages. Parameter: <process-id> is the process ID ranging between 0~65535 Default: Not displayed Command Mode: All modes Example: Switch#show ip ospf route O 10.1.1.0/24 [10] is directly connected, Vlan1, Area 0.0.0.0 O 10.1.1.4/32 [10] via 10.1.1.4, Vlan1, Area 0.0.0.0 IA 11.1.1.0/24 [20] via 10.1.1.1, Vlan1, Area 0.0.0.0 IA 11.1.1.2/32 [20] via 10.1.1.1, Vlan1, Area 0.0.0.0...
Page 134
ospf process 3 redistribute information: ospf process 1 Switch#show ip ospf 2 redistribute ospf process 2 redistribute information: ospf process 1 1.6.5.1.17 show ip ospf virtual-links Command: show ip ospf [<process-id>] virtual-links Function: Display the OSPF virtual link message. Parameter: <process-id> is the process ID ranging between 0~65535 Default: Not displayed Command Mode: All modes Example:...
Page 135
Example: Switch#show ip route database process-detail Codes: K - kernel, C - connected, S - static, R - RIP, B - BGP O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2 i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area >...
Default: None Command Mode: All modes Example: Switch#show ip protocols Use “show ip protocols” command will show the messages of the routing protocol running on current layer 3 switch For example, the displayed messages are: Routing Protocol is "ospf 0" Invalid after 0 seconds, hold down 0, flushed after 0 Outgoing update filter list for all interfaces is Incoming update filter list for all interfaces is...
Page 137
basing on that database. Autonomous system (AS) is a self-managed interconnected network. In large networks, such as the Internet, a giant interconnected network is broken down to autonomous systems. Big enterprise networks connecting to the Internet are independent AS, since the other host on the Internet are not managed by those AS and they don’t share interior routing information with the layer3 switches on the Internet.
Page 138
advantages release some layer3 switch resources, as the process ability and bandwidth used by bad route information are minor. The features of OSPFv3 protocol include the following: OSPFv3 supports networks of various scales, several hundreds of layer3 switches can be supported in an OSPFv3 network. Routing topology changes can be quickly found and updating LSAs can be sent immediately, so that routes converge quickly.
Page 139
OSPFv3 areas are centered with the Backbone area, identified as the Area 0, all the other areas must be connected to Area 0 logically, and Area 0 must be continuous. For this reason, the concept of virtual link is introduced to the backbone area, so that physically separated areas still have logical connectivity to the backbone area.
Obviously, all layer3 switches in the same autonomous system will have the same network topology map. c) Each layer3 switch uses the shortest path first (SPF) algorithm to calculate a tree of shortest path rooted by itself. The tree provides the route to all the nodes in the autonomous system, leaf nodes consist of the exterior route information.
Page 141
It is very simple to run the basic configurations of OSPFv3 routing protocol on the Layer 3 switch of ES4624-SFP/ES4626-SFP switch, normally only enabling OSPFv3, implement OSPFv3 interface, the default value is defined to OSPFv3 protocol parameters. Refer to 2.
Page 142
Interface Configuration Mode IPv6 ospf cost <cost> [instance-id Appoint interface to implement required cost <id>] of OSPFv3 protocol. The no IPv6 ospf cost no IPv6 ospf cost [instance-id [instance-id <id>] restores the default setting <id>] 3)Configure OSPFv3 packet sending timer parameter (timer of broadcast interface sending HELLO packet to poll, timer of neighboring layer3 switch invalid timeout, timer of LSA transmission delay and timer of LSA retransmission.
Page 143
Introduces other protocol discovery routing and static routing regarded as external routing message. [no]redistribute {kernel |connected| [no]redistribute {kernel |connected| static| rip| isis| bgp} [metric<value>] static| rip| isis| bgp} [metric<value>] [metric-type {1|2}][route-map<word>] [metric-type {1|2}][route-map<word>] command cancels imported external routing message. (3)Configure OSPFv3 importing the routes of other OSPFv3 processes 1) Enable the function of OSPFv3 importing the routes of other OSPFv3 processes Command Explanation...
Page 144
debug ipv6 ospf redistribute Enable/disable debugging of sending message send command from OSPFv3 process no debug ipv6 ospf redistribute redistributed to other OSPFv3 process message send routing. debug ipv6 ospf redistribute route Enable/disable debugging of received receive routing message from nsm for OSPFv3 no debug ipv6 ospf redistribute route process.
Global mode no router IPv6 ospf [<tag>] Disable OSPFv3 Routing Protocol 1.7.3 Commands for OSPFV3 1.7.3.1 area default cost Command: area <id> default-cost <cost> no area <id> default-cost Function: Configure the cost of sending to the default summary route in stub or NSSA area; the “no area <id>...
Page 146
Switch (config)# router ipv6 ospf Switch (config-router)# area 1 range 2000::/3 1.7.3.3 area stub Command: area <id> stub [no-summary] no area <id> stub [no-summary] Function: Define a area to a stub area. The “no area <id> stub [no-summary]” command cancels this function. Parameter: <id>...
Page 147
is 10 seconds <retransmit-interval>: The time interval before a router retransmitting a group message, default is 5 seconds <transmit-delay>: The time delay before a router sending a group messages, 1 second by default Default: No default configuration. Command Mode: OSPFv3 protocol mode Usage Guide: In the OSPF all non-backbone areas will be connected to a backbone area.
Page 148
default-metric” returns to the default state. Parameter: <value>, metric value, ranging between 1~16777214 Default: Built-in, metric value auto translating Command Mode: OSPF protocol mode Usage Guide: When the default metric value makes the metric value not compatible, the route introducing still goes through. If the metric value can not be translated, the default value provides alternative option to carry the route introducing on.
Page 149
Usage Guide: If no HELLO data packet received after the dead-interval period then this layer 3 switch is considered inaccessible and invalid. This command modifies the dead interval value of neighboring layer 3 switch according to the actual link state. The set dead-interval value is written into the Hello packet and transmitted.
Page 150
between the layer 3 switches adjacent to the interface must be in accordance. The command can configure on IPv6 tunnel interface, but it is successful configuration to only configure tunnel carefully. Example: Switch#config terminal Switch(config)#interface vlan 1 Switch(Config-if-Vlan1)#ipv6 ospf hello-interval 20 Relevant Commands: ipv6 ospf dead-interval 1.7.3.11 ipv6 ospf priority Command: ipv6 ospf priority <priority>...
Page 151
adjacent layer 3 switches, shown in seconds ang raning between 1~65535 Default: Default retransmit interval is 5 seconds Command Mode: Interface Mode Usage Guide: When a layer 3 switch transmits LSA to its neighbor, it will maintain the link state announcements till confirm from the object side is received.
Page 152
command cancels this configuration. Parameter: <area-id> is an area ID which could be shown in digits ranging between 0~ 4294967295, or an IPv4 address <instance-id> is the interface instance ID ranging between 0~255 and defaulted at 0. <tag> ospfv3 process identifier Default: Not configured Command Mode: Interface Mode Usage Guide: To enable this command on the interface, the area id must be configured.
Page 153
Default: Not configured Command Mode: OSPFv3 protocol mode Example: Switch#config terminal Switch(config)#router ipv6 ospf Switch(config-router)#passive-interface vlan1 1.7.3.17 redistribute Command: [no] redistribute {kernel |connected| static| rip| isis| bgp} [metric<value>] [metric-type {1|2}] [route-map<word>] Function: Introduce route learnt from other routing protocols into OSPFv3. Parameter: kernel Introduct from kernel route connected Introduce from direct route static Introduce from static route...
Page 154
default. route-map <word> is the pointer to the introduced routing map. Default: Not redistributed any OSPFv3 routing by default. Command Mode: OSPFv3 protocol mode. Usage Guide: When process-id is not input, that means ospfv3 routing will be redistributed by default. (Process-tag is NULL) When the no command input the optional parameters of metric, metric-type and routermap, then restores default configuration.
ES4624-SFP/ES4626-SFP switch for example, where layer3 SwitchA and SwitchD make up OSPF area 0, layer3 Switch2 and Switch3 form OSPF area 1 (assume vlan1 interface of layer3 SwitchA belongs to area 0), layer3 SwitchD forms OSPF area2 (assume vlan2 interface of layer3 SwitchD belongs to area 0).
Page 156
! Enable OSPFv3 protocol, configure router ID SwitchA(config)#router IPv6 ospf SwitchA (config-router)#router-id 192.168.2.1 Configure interface vlan1 IPv6 address and affiliated OSPFv3 area SwitchA#config SwitchA(config)# interface vlan 1 SwitchA(config-if-vlan1)# IPv6 address 2010:1:1::1/64 SwitchA(config-if-vlan1)# IPv6 router ospf area 0 SwitchA(config-if-vlan1)#exit Configure interface vlan2 IP address and affiliated OSPFv3 area SwitchA(config)# interface vlan 2 SwitchA(config-if-vlan2)# IPv6 address 2100:1:1::1/64 SwitchA(config-if-vlan2)# IPv6 router ospf area 0...
SwitchC(config-if-vlan3)# IPv6 router ospf area 1 SwitchC(config-if-vlan3)#exit SwitchC(config)#exit Layer 3 SwitchD: ! Enable OSPFv3 protocol, configure router ID SwitchD(config)#router IPv6 ospf SwitchD(config-router)#router-id 192.168.2.4 Configure interface vlan3 IPv6 address and affiliated OSPFv3 area SwitchD#config SwitchD(config)# interface vlan 3 SwitchD(config-if-vlan3)# IPv6 address 2030:1:1::2/64 SwitchD(config-if-vlan3)# IPv6 router ospf area 0 SwitchD(config-if-vlan3)#exit SwitchD(config)#exit...
Page 158
Secondly, to ensure interface and link protocol are UP (execute show interface instruction); And configure IPv6 address of the different net segment on every interface. To startup OSPFv3 protocol (execute router IPv6 OSPF instruction), and configure affiliated OSPFv3 area on relative interface. And then, consider OSPFv3 protocol characteristic ——...
Page 159
Function: Open debugging switches showing showing OSPF neighbor state machine; the “[no]debug ipv6 ospf nfsm [status|events|timers]”command closes this debugging switch. Default: Closed. Command Mode: Admin mode. Switch#debug ipv6 ospf nfsm 1970/01/01 01:14:07 IMI: NFSM[192.168.2.3-000007d4]: LS update timer expire 1970/01/01 01:14:07 IMI: NFSM[192.168.2.1-000007d3]: LS update timer expire 1970/01/01 01:14:08 IMI: NFSM[192.168.2.1-000007d3]: Full (HelloReceived) 1970/01/01 01:14:08 IMI: NFSM[192.168.2.1-000007d3]: nfsm_ignore called 1970/01/01 01:14:08 IMI: NFSM[192.168.2.1-000007d3]: Full (2-WayReceived)
Page 160
[abr|asbr|os|router|vlink]” command closes this debugging switch. Default: Closed. Command Mode: Admin mode. Example: Switch#debug ipv6 ospf events 1970/01/01 01:10:35 IMI: ROUTER[Process:(null)]: GC timer expire 1.7.5.1.8 debug ipv6 ospf redistribute message send Command: debug ipv6 ospf redistribute message send no debug ipv6 ospf redistribute message send Function: To enable/disable debugging of sending command from IPv6 OSPF process redistributed to other IPv6 OSPF process routing.
Page 161
Example: Routing Process "OSPFv3 (*null*)" with ID 192.168.2.2 SPF schedule delay 5 secs, Hold time between SPFs 10 secs Minimum LSA interval 5 secs, Minimum LSA arrival 1 secs Number of external LSA 0. Checksum Sum 0x0000 Number of AS-Scoped Unknown LSA 0 Number of LSA originated 6 Number of LSA received 14 Number of areas in this router is 1...
Page 162
0.0.7.211 192.168.2.2 1409 0x80000001 0x6dda 0.0.7.212 192.168.2.3 1357 0x80000001 0x248e Link-LSA (Interface Vlan2) Link State ID ADV Router Age Seq# CkSum Prefix 0.0.7.211 192.168.2.1 1450 0x80000001 0xa565 0.0.7.212 192.168.2.2 1399 0x80000001 0x4305 Router-LSA (Area 0.0.0.0) Link State ID ADV Router Age Seq# CkSum Link...
Page 163
IPv6 Prefixes fe80::203:fff:fe01:257c/64 (Link-Local Address) 2001:1:1::1/64 OSPFv3 Process (*null*), Area 0.0.0.0, Instance ID 0 Router ID 192.168.2.2, Network Type BROADCAST, Cost: 10 Transmit Delay is 1 sec, State DR, Priority 1 Designated Router (ID) 192.168.2.2 Interface Address fe80::203:fff:fe01:257c Backup Designated Router (ID) 192.168.2.3 Interface Address fe80::203:fff:fe01:d28 Timer interval configured, Hello 10, Dead 40, Wait 40, Retransmit 5 Hello due in 00:00:10...
Page 164
Router ID 192.168.2.2, Network Type Process ID; Router ID; Network Type; Cost BROADCAST, Cost: 10 Transmit Delay is 1 sec, State DR, Priority 1 LAS transmission delay on the interface; state; electing the priority of the layer 3 switch. Designated Router (ID) 192.168.2.2 Specifying layer 3 switch Interface Address fe80::203:fff:fe01:257c Backup...
Page 165
Priority 1.7.5.1.14 show ipv6 ospf route Command: show ipv6 ospf [<tag>] route Function: Show the OSPF route table messages Parameter: <tag> is the processes tag, which is a character string Default: Not displayed Command Mode: All modes Example: Switch#show ipv6 ospf route Codes: C - connected, D - Discard, O - OSPF, IA - OSPF inter area E1 - OSPF external type 1, E2 - OSPF external type 2 Destination...
Page 166
ospf process def redistribute information: ospf process abc Switch#show ipv6 ospf abc redistribute ospf process abc redistribute information: ospf process def 1.7.5.1.16 show ipv6 ospf topology Command: show ipv6 ospf [<tag>] topology [area <area-id>] Function: Show messages of OSPF topology Parameter: <tag>...
Corporation. BGP has been used since1989, its earliest three versions are RFC1105 (BGP-1) 、 RFC1163 (BGP-2)and RFC1267(BGP-3).Currently, the most popular one is RFC1771(BGP-4). The ES4624-SFP/ES4626-SFP switch supports BGP-4. Characteristics of BGP-4 1. BGP-4 is suitable for the distributed structure and supports Classless InterDomain Routing (CIDR).
Page 168
B and class C network. For instance, an illegal class C address 192.213.0.0 255.255.0.0 can be represented as 192.213.0.0/16 by CIDR which is a legal super network. /16 represents that the network number is formed by 16 bits from the beginning left of the address. The introduction of CIDR abbreviates the route aggregation.
Page 169
receives or generates new routing information and advertises it to other BGP speakers. When a BGP speaker receives a new routing notification from other AS, if this route is better than the presently known route or there is no acceptable route, it sends this route to all the other BGP speakers of the AS.
fulfilled: The switch’s route must be next hop reachable. That is in the route table there is the route that can reach the next hop. BGP must be synchronized with IGP (unless asynchronism is configured; only restricted to IBGP) BGP route selecting process is based on the BGP attribute.
Page 171
1.Use Route Maps to Modify Route 2.Configure Route Aggregation 3.Configure BGP Community Filtering 4.Configure BGP Confederation 5.Configure a Route Reflector 6.Configure Peer Groups 7.Configure Neighbors and Peer Groups’ Parameters 8.Adjust BGP Timers 9.Adjust BGP Announcement Interval 10.Configure the default Local Priority 11.Allow to Transfer Default Route 12.Configure BGP’s MED Value 13.Configure BGP Routing Redistribution...
Page 172
neighbor {<ip-address>|<TAG>} Specify a BGP neighbor, the no neighbor remote-as <as-id> {<ip-address>|<TAG>} [remote-as no neighbor {<ip-address>|<TAG>} <as-id>] command deletes the neighbor. [remote-as <as-id>] 3.Administrate the change of routing policy (1)Configure hard reconfiguration. Command Explanation Admin Mode clear ip bgp {<*>|<as-id>| external | Configure hard reconfiguration.
Page 173
Configure BGP neighbor weights; neighbor { <ip-address> | <TAG> } weight the no neighbor { <ip-address> | <weight> <TAG> command recovers no neighbor { <ip-address> | <TAG> } default weights. (5)Configure BGP Route Filtering policy based on neighbor Command Explanation Router configuration mode Filter neighbor...
Page 174
BGP configuration mode Configure allowance EBGP connection with other neighbor {<ip-address> <TAG>} networks that are not connected ebgp-multihop [<1-255>] directly; neighbor neighbor {<ip-address> <TAG>} {<ip-address> <TAG>} ebgp-multihop [<1-255>] ebgp-multihop [<1-255>] command cancels the setting. (8)Configure BGP session identifier Command Explanation BGP configuration mode Configure the router-id value;...
Page 175
2.Configure Route Aggregation Command Explanation BGP configuration mode Create an aggregate entry in the aggregate-address <ip-address/M> routing table; [summary-only] [as-set] aggregate-address aggregate-address <ip-address/M> <ip-address/M> [summary-only] [summary-only] [as-set] [as-set] command cancels the aggregate entry. 3.Configure BGP Community Filtering Command Explanation BGP configuration mode Allow the routing updates with community attributes sending to neighbor...
Page 176
(1) The following commands can be used to configure route reflector and its clients. Command Explanation BGP configuration mode Configure the current switch as route reflector and specify a client. neighbor neighbor <ip-address> route-reflector-client <ip-address> no neighbor <ip-address> route-reflector-client route-reflector-client commands format deletes a client.
Page 177
Command Explanation BGP configuration mode neighbor <ip-address> peer-group Make a neighbor a member of the peer <TAG> group. The no neighbor <ip-address> no neighbor <ip-address> peer-group peer-group <TAG> command cancels the <TAG> specified member. 7.Configure neighbors and peer Groups’ parameters Command Explanation BGP configuration mode...
Page 178
advertisement-interval <TAG>} advertisement-interval command recovers the default value. Configure the allowance of EBGP neighbor {<ip-address> <TAG>} connections with networks ebgp-multihop [<1-255>] connected indirectly; neighbor {<ip-address> <TAG>} neighbor {<ip-address> ebgp-multihop <TAG>} ebgp-multihop command cancels this setting. Configure BGP neighbor weights; neighbor {<ip-address> | <TAG>} weight the no neighbor {<ip-address>...
Page 179
neighbor {<ip-address> <TAG>} {<ip-address> <TAG>} route-map <map-name> {in | out} route-map <map-name> {in | out} command cancels the setting of route reflector. Store the route information from neighbor {<ip-address> <TAG>} neighbor peers; soft-reconfiguration inbound neighbor {<ip-address> neighbor {<ip-address> <TAG>} <TAG>} soft-reconfiguration soft-reconfiguration inbound inbound command cancels the...
Page 180
Configure minimum interval neighbor {<ip-address> <TAG>} among routes update advertisement-interval <seconds> information; neighbor no neighbor {<ip-address> | <TAG>} {<ip-address> <TAG>} advertisement-interval advertisement-interval command recovers the default setting. 10. Configure the Local Preference Value Command Explanation BGP configuration mode Change default local preference; the no bgp default local-preference <value>...
Page 181
Command Explanation BGP configuration mode redistribute { connected | static | rip | Redistribute IGP routes to BGP and may ospf} [metric <metric>] [route-map specify the redistributed metric and route <NAME>] reflector; the no redistribute {connected no redistribute { connected | static | | static | rip | ospf} command cancels the rip | ospf} redistribution.
Page 182
neighbor {<ip-address>|<TAG>} capability {dynamic | route-refresh} no neighbor {<ip-address>|<TAG>} capability {dynamic | route-refresh} neighbor {<ip-address>|<TAG>} provides capability negotiation capability prefix-list regulation and carry out this capability {<both>|<send>|<receive>} match while establishing connection. The no neighbor {<ip-address>|<TAG>} currently supported capabilities include capability prefix-list route update, dynamic capability, outgoing {<both>|<send>|<receive>}...
bgp always-compare-med no bgp always-compare-med BGP may change some path-select rules bgp bestpath as-path ignore by configuration to change the best no bgp bestpath as-path ignore selection and compare MED under EBGP bgp bestpath compare-confed-aspath environment through these command, bestpath ignore the AS-PATH length, compare the compare-confed-aspath confederation as-path length, compare the...
Page 184
1.8.3.1 address-family Command: address-family <AFI> <SAFI> Function: Enter address-family mode. Parameter: <AFI> : <AFI> : address-family, such as IPv4、IPv6、VPNv4, etc <SAFI>: sub address-family, such as unicast 、multicast. Default: None. Command Mode: BGP routing mode. Usage Guide: Since the BGP-4 supports multi-protocol, it is available to get different configuration for each address-family.
Page 185
aggregate-nexthop-check” command cancels this configuration, namely not check the next-hop accordance of aggregate route. Parameter: None. Default: No nexthop checked during aggregating. Command Mode: Global mode. Usage Guide: When check is enabled, the aggregate will not be performed if the next-hop of the covered routes are not in accordance.
Page 186
Example: Show AS number and match the regular expression with ASDOT method. Switch(config)#router bgp 200 Switch(config-router)#bgp asnotation asdot Related Command: None. 1.8.3.6 bgp bestpath as-path ignore Command: bgp bestpath as-path ignore n o b g p b estpath as-path ignore Function: Set to ignore the AS-PATH length.
Page 187
configuration. Parameter: None. Default: Not configured. Command Mode: BGP route mode. Usage Guide: Normally the first arrived route from the same AS (with other conditions equal) will be chosen as the best route. By using this command, source router ID will also be compared. Example: Device (...
Page 188
route-reflector-client, the router performs routing reflection in default condition. The NO form of this command cancels the route reflection among CLIENT, (reflection among Clients and non-CLIENT is not disturbed). Example: Switch(config-router)#no bgp client-to-client reflection Relevant Commands: neighbor route-reflector-client, no neighbor route-reflector-client 1.8.3.11 bgp cluster-id Command: bgp cluster-id {<ip-address>|<01-4294967295>} no bgp cluster-id {<[<ip-address>]|<0-4294967295>}...
Page 189
Command: bgp confederation peers <as-id> [<as-id>..] no bgp confederation peers <as-id> [<as-id>..] Function: Add/delete one or several AS to a confederation. Parameter: <as-id>: ID numbers of the AS included in the confederation, ranging from 1 to 4294967295, it can be shown in decimal notation (such as 6553700) or delimiter method (such as 100.100), which could be multiple.
Page 190
Function: Set the BGP defaults, the “no bgp default {ipv4-unicast|local-preference [<0-4294967295>]}” command cancels this configuration. Parameter: <0-4294967295>: Default local priority. Default: The IPv4 unicast is default enabled when BGP is enabled. The default priority is 100. Command Mode: BGP route mode. Usage Guide: IPv4 unicast address-family is default enabled in BGP.
Page 191
1.8.3.18 bgp fast-external-failover Command: bgp fast-external-failover no bgp fast-external-failover Function: Fast reset when the BGP neighbor connection varies at the interface other than wait for TCP timeout. The “no bgp fast-external-failover” command cancels this configuration. Parameter: None. Default: Configured. Command Mode: BGP route mode. Usage Guide: This command is for immediately cutting of the neighbor connection when the interface is down.
Page 192
Example:The following configuration will limit max number of routers that the bgp process receives from its neighbors as 20000. Switch(config-router)# bgp inbound-max-route-num 20000 1.8.3.21 bgp log-neighbor-changes Command: bgp log-neighbor-changes no bgp log-neighbor-changes Function: Output message when neighbor changes. “no log-neighbor-changes” command cancels this configuration. Parameter: None.
Page 193
Example: Switch(config)# bgp rfc1771-path-select 1.8.3.24 bgp rfc1771-strict Command: bgp rfc1771-strict no bgp rfc1771-strict Function: Set whether strictly follows the rfc1771 restrictions. The “no bgp rfc1771-strict” command set to not strictly following. Parameter: None. Default: Not following rfc 1771 restrictions. Command Mode: Global mode. Usage Guide: With this attribute set, generation types of routes from protocols such as RIP, OSPF, ISIS, etc will be regarded as IGP (internal generated), or else as incomplete.
Page 194
this check. Set the parameter to 0 if you don’t want to check. Example: Switch(config-router)# bgp scan-time 30 1.8.3.27 clear ip bgp Command: clear [view <NAME>] {<*>|<as-id>| external|peer-group <NAME>|<ip-address>} [<ADDRESS-FAMILY>] [in [prefix-filter] |out|soft [in|out]] Function: Clear up BGP links or states. Parameter: all.
Page 195
Command: clear [<ADDRESS-FAMILY>] flap-statistics [<ip-address>|<ip-address/M>] Function: For resetting BGP routing dampening statistics messages. Parameter: <ADDRESS-FAMILY>: address-family such as “ipv4 unicast”. <ip-address/M>: IP address and mask. Default: None. Command Mode: Admin mode. Usage Guide: It is possible to clear BGP routing dampening statistic messages and state by different parameters (such as address-family or IPv4 address).
Page 196
1.8.3.32 exit-address-family Command: exit-address-family Function: Exit the BGP address-family mode. Parameter: None. Default: None. Command Mode: BGP address-family mode. Usage Guide: Use this command to exit the mode so to end the address-family configuration when configuring address-family under BGP. Example: Switch(config)#router bgp 100 Switch(config-router)#address-family ipv4 unicast Switch(config-router-af)# exit-address-family...
Page 197
*> 11.1.1.0/24 11.1.1.64 0 200 ? *>i15.1.1.0/24 10.1.1.68 655 300 ? *> 20.1.1.0/24 11.1.1.64 0 200 ? *>i100.1.1.0/24 10.1.1.68 655 300 ? Route Distinguisher: 100:10 *>i15.1.1.0/24 10.1.1.68 0 300 ? *>i100.1.1.0/24 10.1.1.68 0 300 ? As we can see, the weight of the route from the VPN changes to 655 after introduced into VRF test.
Page 198
Default: None. Command Mode: Global mode. Usage Guide: With this command we can configure the community-list so to supply terms for the pass/filter/search. Example: Switch(config)# ip community-list LN permit 100:10 1.8.3.36 ip extcommunity-list Command: ip extcommunity-list {<LISTNAME>|<1-199>|[expanded <WORD>]|[standard <WORD>]} {deny|permit} <.COMMUNITY> extcommunity-list {<LISTNAME>|<1-199>|[expanded <WORD>]|[standard <WORD>]} {deny|permit} <.COMMUNITY>...
Page 199
Command Mode: BGP route mode and address-family mode. Usage Guide: IP unicast is configured under BGP route mode. Configure whether specific address-family is switched under address-family mode. If this option on any side between local side and partner is not enabled, the address-family route will not be acquired by the partner even if the corresponding address family routes acquired before will be cancelled after this option is disabled.
Page 200
repeat count it is defaulted at 3 when <1-10> parameters not set. Command Mode: BGP route mode and address family mode. Usage Guide: Normally BGP will not allow same AS number appears in the route more than one time. The system will deny a route when its AS number appears in the AS-PATH. However to support some special needs, especially the VPN support, the extended BGP allows the AS re-appear counts by configuration.
Page 201
Usage Guide: This is an extended BGP capability. With this configuration supported capabilities by both side will be negotiated in the OPEN messages, and the partner will respond if this capability is supported by the partner and send NOTIFICATION if not. The originating side will then send an OPEN excluded the capability to reestablish the connection.
Page 202
no neighbor {<ip-address>|<TAG>} collide-established Function: Enable the collision check and settlement in the TCP connection collision. The “no neighbor {<ip-address>|<TAG>} collide-established” command disables the TCP connection collision settlement. Parameter: <ip-address>: Neighbor IP address. <TAG>: Name of the peer. Default: Disabled and Unavailable. Command Mode: route mode and address family mode.
Page 203
{<ip-address>|<TAG>} description” command deletes the configurations of this string. Parameter: <ip-address>: Neighbor IP address. <TAG>: Name of peer group. <.LINE>: Description string consists of displayable characters less than 80. Default: Description string is empty. Command Mode: BGP route mode and address-family mode. Usage Guide: Configure the introduction of the peer or peer group.
Page 204
{<ip-address>|<TAG>} dont-capability-negotiate” command cancels this configuration. Parameter: <ip-address>: Neighbor IP address. <TAG>: Name of the peer group. Default: Capability negotiation performed. Command Mode: BGP route mode and address-family mode. Usage Guide: As the negotiation is the default, it can be disabled with this configuration when it is known that the partner BGP version is old which don’t support capability negotiation.
Page 205
no neighbor {<ip-address>|<TAG>} enforce-multihop Function: Enforce multihop connection neighbor. The “no neighbor {<ip-address>|<TAG>} enforce-multihop” command cancels this configuration. Parameter: <ip-address>: Neighbor IP address. <TAG>: Name of peer group. Default: Not enforced. Command Mode: BGP route mode and address-family mode. Usage Guide: In fact the direct route can not be enforced to multihop, however will be treated as a multihop connection with this configuration, namely the check originally only performed on IBGP and EBGP of non-direct routes will be performed on all after this attribute set.
Page 206
1.8.3.51 neighbor interface Command: neighbor <ip-address> interface <IFNAM> no neighbor <ip-address> interface <IFNAM> Function: Specify the interface to the neighbor. The “no neighbor <ip-address> interface <IFNAM>“ of the command cancels this configuration. Parameter: <ip-address>: Neighbor IP address. <IFNAME>: Interface name, e.g. “Vlan 2”. Default: Not configured.
Page 207
1.8.3.53 neighbor next-hop-self Command: neighbor {<ip-address>|<TAG>} next-hop-self no neighbor {<ip-address>|<TAG>} next-hop-self Function: Ask the neighbor to point the route nexthop sent by the local side to local side. The “no neighbor {<ip-address>|<TAG>} next-hop-self” command cancels this configuration. Parameter: <ip-address>: Neighbor IP address. <TAG>: Name of peer group.
Page 208
Default: Positively send the connecting request. Command Mode: BGP route mode and address-family mode. Usage Guide: With this attribute set, the local side will not positively send the TCP connecting request after the neighbors are configured, but stays in listening mode waiting for the connecting request from partners.
Page 209
configured at the same time so to reduce the configuration staff labor. Create peer group with above command and assign members into the group with this command. Example: Refer to above examples. 1.8.3.58 neighbor port Command: neighbor <ip-address> port <0-65535> no neighbor <ip-address>...
Page 210
Switch(config-router)#redistribute static Switch(config-router)neighbor 10.1.1.66 prefix-list prw out 1.8.3.60 neighbor remote-as Command: neighbor {<ip-address>|<TAG>} remote-as <as-id> no neighbor {<ip-address>|<TAG>} [remote-as <as-id>] Function: Configure the BGP neighbor. The “no neighbor {<ip-address>|<TAG>} [remote-as <as-id>]” command is used for deleting BGP neighbors. Parameter: <ip-address>: Neighbor IP address <TAG>: Name of peer group <as-id>: Neighbor AS number, ranging from 1 to 4294967295, it can be shown in decimal notation (such as 6553700) or delimiter method (such as 100.100).
Page 211
Example: Switch(config-router)#neighbor 10.1.1.64 remove-private-AS 1.8.3.62 neighbor route-map Command: neighbor {<ip-address>|<TAG>} route-map <NAME> {<in|out>} no neighbor {<ip-address>|<TAG>} route-map <NAME> {<in|out>} Function: Configure the route mapping policy when sending or receiving route. The “no neighbor {<ip-address>|<TAG>} route-map <NAME> {<in|out>}” command cancels this configuration Parameter: <ip-address>: Neighbor IP address <TAG>: Name of peer group...
Page 212
command configures itself as the route reflector, while specific peer group is as its client. Note: this configuration is only available inside AS Example: Switch(config)#router bgp 100 Switch(config-router)#neighbor 10.1.1.66 remote 100 Switch(config-router)#neighbor 10.1.1.66 route-reflector-client Switch(config-router)#neighbor 10.1.1.68 remote 100 Switch(config-router)#neighbor 10.1.1.68 route-reflector-client Switch(config-router)# 1.8.3.64 neighbor route-server-client Command: neighbor {<ip-address>|<TAG>} route-server-client...
Page 213
Parameter: <ip-address>: IP address of the neighbor <TAG>: Name of peer group [both|extended|standard]: Standard community only, extended community or both. Default: Sending the community attributes Command Mode: BGP route mode and address-family mode. Usage Guide: The community attributes can be sent to the outside or not. By default of our company we set to sending while the default in standard protocol is not sending.
Page 214
with other routers. The command is only available when the route refresh capability is not enabled Example: Switch(config-router)#neighbor 11.1.1.120 soft-reconfiguration inbound 1.8.3.68 neighbor strict-capability-match Command: neighbor {<ip-address>|<TAG>} strict-capability-match no neighbor {<ip-address>|<TAG>} strict-capability-match Function: Configure whether strict capability match is required when establishing connections. The “no neighbor {<ip-address>|<TAG>} strict-capability-match”...
Page 215
Command: neighbor {<ip-address>|<TAG>} timers connect <0-65535> no neighbor {<ip-address>|<TAG>} timers connect [<0-65535>] Function: Configure connecting retry time interval. “no neighbor {<ip-address>|<TAG>} timers connect [<0-65535>]” command restores the default value Parameter: <ip-address>: Neighbor IP address <TAG>: Name of peer group <0-65535>: Retry interval Default: 120s.
Page 216
Function: Configure the update source. The “no neighbor {<ip-address>|<TAG>} update-source <IFNAME>“ cancels this configuration Parameter: <ip-address>: Neighbor IP address <TAG>: Name of peer group <IFNAME>: Name or IP of the interface Default: Not configured, namely use nearest interface Command Mode: BGP route mode. Usage Guide: Specified update source is allowed to connect with any available interface which normally is the loop back interface.
Page 217
Default: The default weight acquired from other routers is 0. The default weight on the local static configuration is 32768. Command Mode: BGP route mode. Default: The default weight acquired from other routers is 0. The default weight on the local static configuration is 32768.
Page 218
Command Mode: BGP route mode. Usage Guide: Route from other ways will be distributed into the BGP route table with this command and transmitted to the neighbors Example: The static route is introduced into BGP with this configuration and advertised to the neighbors Switch(config-router)# redistribute static 1.8.3.77 redistribute ospf...
Switch(config-router)#exit 1.8.3.79 timers bgp Command: timers bgp <0-65535> <0-65535> no timers bgp [<0-65535> <0-65535>] Function: Configure all neighbor time in BGP. The “no timers bgp [<0-65535> <0-65535>]” command restores these times to default value Parameter: Respectively the KEEPALIVE interval and the hold time Default: KEEPALIVE is 60s, HOLD TIME is 240s.
Page 220
SwitchB(config)#router bgp 200 SwitchB(config-router-bgp)#network 11.0.0.0 SwitchB(config-router-bgp)#network 12.0.0.0 SwitchB(config-router-bgp)#network 13.0.0.0 SwitchB(config-router-bgp)#neighbor 11.1.1.1 remote-as 100 SwitchB(config-router-bgp)#neighbor 12.1.1.3 remote-as 200 SwitchB(config-router-bgp)#neighbor 13.1.1.4 remote-as 200 SwitchB(config-router-bgp)#exit The configurations of SwitchC are as following: SwitchC(config)#router bgp 200 SwitchC(config-router-bgp)#network 12.0.0.0 SwitchC(config-router-bgp)#network 13.0.0.0 SwitchC(config-router-bgp)#neighbor 12.1.1.2 remote-as 200 SwitchC(config-router-bgp)#neighbor 13.1.1.4 remote-as 200 SwitchC(config-router-bgp)#exit The configurations of SwitchD are as following:...
Page 221
SwitchB(config#router bgp 100 SwitchB(config-router-bgp)#aggregate 193.0.0.0/24 At the same time, the aggregation command above can be modified as following, then this switch only announce aggregation route 193.0.0.0 and forbid to announce more specified route to all the neighbors. SwitchB(config-router-bgp)#aggregate 193.0.0.0/24 summary-only 1.8.4.3 Examples 3: configure BGP community attributes In the following sample, “route map set-community”...
Page 222
Switch(config-route-map)#set metric 2000 Switch(config-route-map)#exit Switch(config)#route-map match-community permit 20 Switch(config-route-map)#match community com2 Switch(config-route-map)#set local-preference 500 Switch(config-route-map)#exit Switch(config)#ip community-list com1 permit 100 200 300 Switch(config)#ip community-list com1 permit 900 901 Switch(config)#ip community-list com2 permit 88 Switch(config)#ip community-list com2 permit 90 Switch(config)#exit Switch#clear ip bgp 16.1.1.6 soft out 1.8.4.4 Examples 4: configure BGP confederation The following is the configuration of an AS.
Page 224
SwitchC(config-router-bgp)#bgp confederation identifier 200 SwitchC(config-router-bgp)#bgp confederation peers 20 SwitchC(config-router-bgp)#neighbor 12.1.1.2 remote-as 10 SwitchD: SwitchD(config)#router bgp 20 SwitchD(config-router-bgp)#bgp confederation identifier 200 SwitchD(config-router-bgp)#bgp confederation peers 10 SwitchD(config-router-bgp)#neighbor 13.1.1.2 remote-as 10 1.8.4.5 Examples 5: configure BGP route reflector The following is the configuration of a route reflector. As the picture illustrated, SwitchA, SwitchB, SwitchC, SwitchD, SWE, SWF and SWG establish IBGP connection which is affiliated to AS100.
Page 225
AS200 SwitchH vlan1:8.8.8.8 SwitchG(RR) AS100 vlan1:7.7.7.7 SwitchD(RR) vlan1:3.3.3.4 vlan1:3.3.3.3 SwitchC(RR) SwitchE vlan1:1.1.1.1 vlan1:6.6.6.6 vlan1:2.2.2.2 vlan1:5.5.5.5 SwitchA SwitchF SwitchB AS300 SwitchI vlan1:9.9.9.9 Fig 1-13 the Topological Map of Route Reflector The configurations are as following: The configurations of SwitchC: SwitchC(config)#router bgp 100 SwitchC(config-router-bgp)#neighbor 1.1.1.1 remote-as 100 SwitchC(config-router-bgp)#neighbor 1.1.1.1 route-reflector-client SwitchC(config-router-bgp)#neighbor 2.2.2.2 remote-as 100...
Page 226
SwitchD(config)#router bgp 100 SwitchD(config-router-bgp)#neighbor 5.5.5.5 remote-as 100 SwitchD(config-router-bgp)#neighbor 5.5.5.5 route-reflector-client SwitchD(config-router-bgp)#neighbor 6.6.6.6 remote-as 100 SwitchD(config-router-bgp)#neighbor 6.6.6.6 route-reflector-client SwitchD(config-router-bgp)#neighbor 3.3.3.3 remote-as 100 SwitchD(config-router-bgp)#neighbor 7.7.7.7 remote-as 100 The configurations of SwitchA: SwitchA(config)#router bgp 100 SwitchA(config-router-bgp)#neighbor 1.1.1.2 remote-as 100 SwitchA(config-router-bgp)#neighbor 9.9.9.9 remote-as 300 The SwitchA at this time needn’t to create IBGP connection with all the switches in the AS100 and could receive BGP route from other switches in the AS.
Page 227
Metric=0 AS400 AS100 vlan1:4.4.4.4 Set metric 50 vlan1:4.4.4.3 SwitchA vlan2:2.2.2.2 vlan3:3.3.3.3 SwitchB Set metric 200 Set metric 120 vlan1:2.2.2.1 AS300 vlan1:3.3.3.2 vlan2:1.1.1.2 SwitchD vlan2:1.1.1.1 SwitchC Fig 1-14 MED Configuring Topological Map The configurations of SwitchA: SwitchA(config)#router bgp 100 SwitchA(config-router-bgp)#neighbor 2.2.2.1 remote-as 300 SwitchA(config-router-bgp)#neighbor 3.3.3.2 remote-as 300 SwitchA(config-router-bgp)#neighbor 4.4.4.3 remote-as 400 The configurations of SwitchC:...
Page 229
Direct-link routes, static route, and IGP route (RIP and OSPF) are included in these imported routes. Network and redistribute (BGP) command are the ways of imported routes. For BGP, pay attention to the difference between the behaviors of IBGP and EBGP. After configuration finishes, the command of show ip bgp summary can be used to observe neighbor’s connections, so that all of the neighbors keep BGP connection situation.
Page 230
1.8.5.1.2 show ip bgp attribute-info Command: show ip bgp attribute-info Function: Display the BGP attributes messages Parameter: None Default: None Command Mode: All modes. Usage Guide: For displaying the attribute messages permitted by BGP Example: Switch#sh ip bgp attribute-info attr[1] nexthop 0.0.0.0 attr[1] nexthop 10.1.1.64 attr[3] nexthop 10.1.1.64 attr[1] nexthop 10.1.1.121...
Page 231
1.8.5.1.4 show ip bgp community-info Command: show ip bgp community-info Function: For displaying the community messages permitted by BGP Parameter: None Default: None Command Mode: All modes Usage Guide: Messages in the same community multiply closable at the same time Example: Switch#show ip bgp community-info Address Refcnt Community...
Page 232
Command: show ip bgp [<ADDRESS-FAMILY>] dampening {<dampened-paths> | <flap-statistics> | <parameters>} Function: Display the routes permitted by BGP and relevant to the route dampening. Parameter: <ADDRESS-FAMILY>: Address-family, such as “ipv4 unicast” Default: None Command Mode: All mode Usage Guide: Only the surged routes will be displayed. The Parameters shows the display configuration other than specific routes.
Page 233
Min penalty (floor) : 375 Total number of prefixes 1 1.8.5.1.7 show ip bgp filter-list Command: show ip bgp [<ADDRESS-FAMILY>] filter-list [<WORD >] Function: For displaying the routes in BGP meeting the specific AS filter list Parameter: <ADDRESS-FAMILY>: address-family such as “ipv4 unicast” <...
Page 234
Network Next Hop Metric LocPrf Weight Path * 100.1.1.0/24 10.1.1.68 0 300 ? *> 10.1.1.64 0 100 ? Total number of prefixes 1 1.8.5.1.9 show ip bgp neighbors Command: show [<ADDRESS-FAMILY>] neighbors [IP-ADDRESS] [advertised-routes|received {prefix-filter|routes}|routes] Function: For displaying the BGP neighbor related messages Parameter: <ADDRESS-FAMILY>: Address-family, such as “ipv4 unicast”...
Page 235
Connections established 7; dropped 6 1.8.5.1.10 show ip bgp paths Command: show ip bgp [<ADDRESS-FAMILY>] paths Function: Display the path message permitted by BGP Parameter: <ADDRESS-FAMILY>: Address-family such as “ipv4 unicast” Default: None Command Mode: All modes Usage Guide: Display the BGP path message includes the utilization state. Example: Switch#sh ip bgp paths Address...
Page 236
1.8.5.1.12 show ip bgp quote-regexp Command: show ip bgp [<ADDRESS-FAMILY>] quote-regexp [<WORD>] Function: For displaying the BGP route meets the specific AS related regular expression. Parameter: <ADDRESS-FAMILY>: address-family such as “ipv4 unicast” <WORD>: Regular expression Default: None Command Mode: All modes Usage Guide: Selecting the required route through regular expressions.
Page 237
Switch#sh ip bgp regexp 100 BGP table version is 2, local router ID is 11.1.1.100 Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, S Stale Origin codes: i - IGP, e - EGP, ? - incomplete Network Next Hop Metric LocPrf Weight Path...
Page 238
Usage Guide: None. Example: Switch#show ip bgp redistribute 1.8.5.1.16 show ip bgp neighbors Command: show ip bgp neighbors [vrf <NAME>] Function: Show neighbor information of specified bgp or total bgp processes. Parameter: vrf name, show bgp neighbor information of all vrf if there is no parameter. Default: Not shown by default.
Page 239
Switch#show ip bgp summary BGP router identifier 10.1.1.66, local AS number 200 BGP table version is 1 1 BGP AS-PATH entries 0 BGP community entries Neighbor AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd 10.1.1.68 never Active Total number of neighbors 1 Display Contents Explanation identifier...
Page 240
<ADDRESS-FAMILY>: Address-family such as “ipv4 unicast” Default: None Command Mode: All modes Usage Guide: Display messages of specified BGP instance Example: Switch#show ip bgp view as300 100.1.1.0/24 1.8.5.1.20 show ip bgp view neighbors Command: show ip bgp view [<NAME>] neighbors [<ip-address>] Function: Display neighbor messages of specified BGP instance Parameter: <NAME>: Name of BGP instance <ip-address>: neighbor IP address...
Default: Close the debug by default. Command Mode: Admin Mode. Usage Guide: None. Example: Switch#debug bgp redistribute message send Switch#no debug bgp redistribute message send 1.8.5.1.23 debug bgp redistribute route receive Command: debug bgp redistribute route receive no debug bgp redistribute route receive Function: To enable debugging of received messages from NSM for BGP.
Page 242
3. Redistribution of OSPFv3 Routing to MBGP4+ (1)Enable Redistribution of OSPFv3 Routing to MBGP4+ (2) Display the information about configuration of redistribution of OSPFv3 Routing to MBGP4+ 1. Configure IPv6 neighbor Command Explanation BGP Protocol Configuration Mode neighbor <X:X::X:X> remote-as Configure IPv6 neighbor <as-id>...
Command Notes Admin mode debug ipv6 redistribute message send To enable or disable debugging messages no debug ipv6 bgp redistribute sent by BGP4+ for redistribution of OSPFv3 message send routing. debug ipv6 bgp redistribute route To enable or disable debugging messages receive received from NSM.
Example: Switch#show ipv6 bgp redistribute 1.9.3.3 debug ipv6 bgp redistribute message send Command: debug ipv6 bgp redistribute message send Function: To enable debugging of sending messages for redistribution of routing information from external process such as OSPFv3 and others to BGP4+. Parameter: None.
SwitchC(config-router-af)#neighbor 2003::4 activate SwitchC(config-router-af)#exit-address-family SwitchC(config-router-bgp)#exit SwitchD configuration as follows: SwitchD(config)#router bgp 200 SwitchD(config-router-bgp)#neighbor 2003::3 remote-as 200 SwitchD(config-router-bgp)#neighbor 2002::2 remote-as 200 SwitchD(config-router-bgp)#address-family IPv6 unicast SwitchD(config-router-af)#neighbor 2002::2 activate SwitchD(config-router-af)#neighbor 2003::3 activate SwitchD(config-router-af)#exit-address-family SwitchD(config-router-bgp)#exit Here the connection between SwitchB and SwitchA is EBGP, and the connection between SwitchC and SwitchD is IBGP.
Chapter 2 Black Hole Routing Manual 2.1 Introduction to Black Hole Routing Black Hole Routing is a special kind of static routing which drops all the datagrams that match the routing rule. 2.2 IPv4 Black Hole Routing Configuration Tasks 1. To configure IPv4 Black Hole Routing 1.
Global Configuration Mode To configure static IPv6 black hole ipv6 route <ipv6-prefix/prefix-length> null0 routing. The no form of this [<precedence>] command will remove no ipv6 route <ipv6-prefix/prefix-length> null0 specified configuration. 2.4 Black Hole Routing Command 2.4.1 ip route null0 Command: ip route {<ip-prefix> <mask>|<ip-prefix>|<prefix-length>} null0 [<distance>] no ip route {<ip-prefix>...
routing, but using null0 as the output interface. Example: To configure a route to 2001:2:3:4::/64 as a black hole routing. Switch(config)#ipv6 route 2001::/64 null0 2.5 Black Hole Routing Configuration Exmaple Example 1: To configure IPv6 black hole routing. Fig 2-1 IPv4 Black Hole Routing Configuration Example As it is shown in the figure, in Switch2, eight in all interfaces are configured as Layer 3 VLAN interfaces for access interfaces.
Page 250
Switch#config Switch(config)#ip route 192.168.0.0/21 null0 50 Example 2: IPv6 Black Hole Routing Configuration. Fig 2-2 IPv6 Black Hole Routing Configuration Example As it is shown in the figure, in Switch2, eight in all interfaces are configured as Layer 3 VLAN interfaces for access interfaces.
2.6 Black Hole Routing Trouble Shooting When configuring the Black Hole Routing function, the configuration may not work due to some reasons such as incorrect network address mask, and incorrect management distance. Attention should be paid to the following items: ...
Chapter 3 ECMP Configuration 3.1 Introduction to ECMP ECMP (Equal-cost Multi-path Routing) works in the network environment where there are many different links to arrive at the same destination address. If using the traditional routing technique, only a link can be used to send the data packets to the destination address, other links at the backup state or the invalidation state, and it needs some times to process the mutual switchover under the static routing environment.
3.3 Commands for ECMP 3.3.1 maximum-paths Command: maximum-paths <1-32> no maximum-paths Function: This command is used to configure the maximum-paths which support the equivalence multi-paths. The no command restores the default configuration. Parameter: <1-32>: At present, users can configure the multi-paths number from 1 to 32. When configure 1, it is equal to disable ECMP function.
R1(config)#ip route 5.5.5.5/32 100.1.1.2 R1(config)#ip route 5.5.5.5/32 100.1.2.2 On R1, show ip route, the following is displayed: R1(config)#show ip route Codes: K - kernel, C - connected, S - static, R - RIP, B - BGP O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2 i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area...
Page 255
R2(Config-if-loopback1)# ip address 2.2.2.2 255.255.255.255 R2(config)#router ospf 1 R2(config-router)# ospf router-id 2.2.2.2 R2(config-router)# network 100.1.1.0/24 area 0 R2(config-router)# network 100.2.1.0/24 area 0 R3 configuration: R3(config)#interface Vlan100 R3(Config-if-Vlan100)# ip address 100.1.2.2 255.255.255.0 R3(config)#interface Vlan200 R3(Config-if-Vlan200)# ip address 100.2.2.2 255.255.255.0 R3(config)#interface loopback 1 R3(Config-if-loopback1)# ip address 3.3.3.3 255.255.255.255 R3(config)#router ospf 1 R3(config-router)# ospf router-id 3.3.3.3...
Page 256
1.1.1.1/32 is directly connected, Loopback1 tag:0 5.5.5.5/32 [110/3] via 100.1.1.2, Vlan100, 00:00:05 tag:0 [110/3] via 100.1.2.2, Vlan200, 00:00:05 tag:0 100.1.1.0/24 is directly connected, Vlan100 tag:0 100.1.2.0/24 is directly connected, Vlan200 tag:0 100.2.1.0/24 [110/2] via 100.1.1.2, Vlan100, 00:02:25 tag:0 100.2.2.0/24 [110/2] via 100.1.2.2, Vlan200, 00:02:25 tag:0 127.0.0.0/8 is directly connected, Loopback tag:0 Total routes are : 8 item(s)
Need help?
Do you have a question about the ES4624-SFP and is the answer not in the manual?
Questions and answers