Download
Share
Print this page
Huawei Quidway NetEngine80E Configuration Manual
  1. Manuals
  2. Brands
  3. Huawei Manuals
  4. Network Router
  5. Quidway NetEngine80E
  6. Configuration manual

Huawei Quidway NetEngine80E Configuration Manual

Universal service router, ip routing
Hide thumbs Also See for Quidway NetEngine80E:
1
2
3
4
5
Table Of Contents
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990

Advertisement

Quick Links

HUAWEI NetEngine80E/40E Router
V600R008C10
Configuration Guide - IP Routing
Issue
02
Date
2014-09-30
HUAWEI TECHNOLOGIES CO., LTD.

Advertisement

loading
Need help?

Need help?

Do you have a question about the Quidway NetEngine80E and is the answer not in the manual?

Questions and answers

Subscribe to Our Youtube Channel

Related Manuals for Huawei Quidway NetEngine80E

Summary of Contents for Huawei Quidway NetEngine80E

  • Page 1 HUAWEI NetEngine80E/40E Router V600R008C10 Configuration Guide - IP Routing Issue Date 2014-09-30 HUAWEI TECHNOLOGIES CO., LTD.
  • Page 2 All other trademarks and trade names mentioned in this document are the property of their respective holders. Notice The purchased products, services and features are stipulated by the contract made between Huawei and the customer. All or part of the products, services and features described in this document may not be within the purchase scope or the usage scope.

  • Page 3: About This Document

    Related Versions The following table lists the product versions related to this document. Product Name Version HUAWEI NetEngine80E/40E V600R008C10 Router Intended Audience This document is intended for: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 4: Command Conventions

    Items (keywords or arguments) in brackets [ ] are optional. { x | y | ... } Optional items are grouped in braces and separated by vertical bars. One item is selected. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 5 Changes in Issue 02 (2014-09-30) This issue is the second official release. Changes in Issue 01 (2014-06-30) This issue is the first official release. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 6: Table Of Contents

    1.6.3 Associating an Interface with a VRRP Backup Group....................21 1.6.4 Checking the Configurations.............................22 1.7 Configuring an IPv4 Direct Route to Respond to L3VE Interface Status Changes After a Delay......23 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 7: Table Of Contents

    2.2.5 (Optional) Configuring Permanent Advertisement of IPv4 Static Routes..............96 2.2.6 Configuring Static IPv4 Routes in a Topology Instance...................96 2.2.7 Checking the Configurations.............................97 2.3 Configuring an IPv6 Static Route..........................97 2.3.1 Before You Start................................98 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 8: Table Of Contents

    2.10.7 Example for Configuring Permanent Advertisement of IPv4 Static Routes............148 3 RIP Configuration........................155 3.1 Introduction................................157 3.1.1 Overview of RIP..............................157 3.1.2 RIP Features Supported by the NE80E/40E......................158 3.2 Configuring Basic RIP Functions..........................158 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 9: Table Of Contents

    3.8.6 Configuring RIP to Check the Validity of Update Packets..................193 3.8.7 Configuring RIP Neighbors.............................194 3.8.8 Configuring the RIP GTSM Functions........................195 3.8.9 Checking the Configurations...........................195 3.9 Configuring RIP GR..............................196 3.9.1 Before You Start..............................196 Issue 02 (2014-09-30) Huawei Proprietary and Confidential viii Copyright © Huawei Technologies Co., Ltd.

  • Page 10: Table Of Contents

    4.6.3 Disabling Sending of RIPng Packets on an Interface....................238 4.6.4 Configuring RIPng to Filter the Routes to be Sent....................239 4.6.5 Checking the Configurations...........................241 4.7 Controlling the Receiving of RIPng Routing Information..................242 4.7.1 Before You Start..............................242 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 11: Table Of Contents

    5.3.3 Configuring NBMA Network Attributes.........................280 5.3.4 Configuring P2MP Network Attributes........................281 5.3.5 Checking the Configurations...........................284 5.4 Configuring an OSPF Route Selection Rule......................285 5.4.1 Before You Start..............................285 5.4.2 Setting the Interface Cost............................286 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 12: Table Of Contents

    5.12.4 (Optional) Configuring GR Session Parameters on the Helper................330 5.12.5 Checking the Configurations..........................332 5.13 Improving Security of an OSPF Network........................333 5.13.1 Before You Start..............................333 5.13.2 Configuring the OSPF GTSM Functions......................334 5.13.3 Configuring the Authentication Mode........................335 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 13: Table Of Contents

    6.3.4 Configuring the Interval for Retransmitting LSAs to Neighboring Routers............412 6.3.5 Configuring the Delay for Transmitting LSAs on the Interface................413 6.3.6 Checking the Configurations...........................414 6.4 Configuring OSPFv3 Areas............................414 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 14: Table Of Contents

    6.10.2 Enabling BFD for OSPFv3............................444 6.10.3 Configuring OSPFv3 BFD Parameters at Process Level..................445 6.10.4 Enabling OSPFv3 BFD at Interface Level......................446 6.10.5 Configuring OSPFv3 BFD Parameters at Interface Level..................447 Issue 02 (2014-09-30) Huawei Proprietary and Confidential xiii Copyright © Huawei Technologies Co., Ltd.

  • Page 15: Table Of Contents

    7.1.1 Basic Concepts of IS-IS............................496 7.1.2 IS-IS Features Supported by the NE80E/40E......................497 7.2 Configuring Basic IPv4 IS-IS Functions........................504 7.2.1 Before You Start..............................504 7.2.2 Creating IPv4 IS-IS Processes..........................505 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 16: Table Of Contents

    7.10.3 Enabling Multi-Topology for IPv4 IS-IS Interfaces....................564 7.10.4 Checking the Configurations..........................565 7.11 Configuring IPv4 IS-IS Auto FRR...........................567 7.11.1 Before You Start..............................567 7.11.2 Enabling IPv4 IS-IS Auto FRR..........................568 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 17: Table Of Contents

    7.19 Configuring IPv6 IS-IS Auto FRR...........................624 7.19.1 Before You Start..............................624 7.19.2 Enabling IPv6 IS-IS Auto FRR..........................626 7.19.3 (Optional) Disabling an Interface from Participating in IPv6 LFA Calculation...........626 7.19.4 Checking the Configurations..........................627 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 18: Table Of Contents

    8.1 Introduction................................737 8.1.1 BGP Overview.................................737 8.1.2 BGP Features Supported by the NE80E/40E......................738 8.2 Configuring the Format of BGP 4-Byte AS Numbers....................754 8.3 Configuring Basic BGP Functions..........................756 Issue 02 (2014-09-30) Huawei Proprietary and Confidential xvii Copyright © Huawei Technologies Co., Ltd.

  • Page 19: Table Of Contents

    8.10.5 (Optional) Preventing BGP Routes from Being Added into the IP Routing Table..........816 8.10.6 (Optional) Enabling the RR to Modify the Route Attributes Using the Export Policy.........817 Issue 02 (2014-09-30) Huawei Proprietary and Confidential xviii Copyright © Huawei Technologies Co., Ltd.

  • Page 20: Table Of Contents

    8.25 Applying BGP AS_Path Regular Expressions......................872 8.26 Maintaining BGP..............................883 8.26.1 Configuring BGP to Record Peer Status Changes and Event Information............883 8.26.2 Resetting BGP Connections..........................884 8.26.3 Clearing BGP Information.............................885 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 21: Table Of Contents

    9.3.7 Configuring the AS_Path Attribute........................1057 9.3.8 Configuring the BGP4+ Community Attribute.....................1059 9.3.9 Checking the Configurations..........................1061 9.4 Controlling the Advertising and Receiving of BGP4+ Routing Information............1061 9.4.1 Before You Start..............................1061 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 22: Table Of Contents

    9.11.3 (Optional) Disabling a Route Reflection Between Clients..................1097 9.11.4 (Optional) Configuring the Cluster ID for a Route Reflector................1098 9.11.5 (Optional) Preventing BGP4+ Routes from Being Added into the IPv6 Routing Table........1098 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 23: Table Of Contents

    9.18.6 Example for Configuring Inter-AS 6PE OptionB....................1151 9.18.7 Example for Configuring Inter-AS 6PE OptionC (Solution 1)................1161 9.18.8 Example for Configuring Inter-AS 6PE OptionC (Solution 2)................1173 9.18.9 Example for Configuring BGP4+ 6PE FRR......................1184 Issue 02 (2014-09-30) Huawei Proprietary and Confidential xxii Copyright © Huawei Technologies Co., Ltd.

  • Page 24: Table Of Contents

    10.7 Controlling the Valid Time of the Routing policy....................1249 10.7.1 Before You Start..............................1249 10.7.2 Configuring the Delay for Applying the Routing Policy..................1250 10.7.3 Checking the Configurations..........................1250 Issue 02 (2014-09-30) Huawei Proprietary and Confidential xxiii Copyright © Huawei Technologies Co., Ltd.

  • Page 25: Table Of Contents

    11 Route Monitoring Group Configuration................1262 11.1 Overview................................1263 11.1.1 Introduction.................................1263 11.1.2 Route Monitoring Group Features Supported by the NE80E/40E..............1263 11.2 Configuring a Route Monitoring Group.........................1264 A Glossary............................1268 B Acronyms and Abbreviations....................1272 Issue 02 (2014-09-30) Huawei Proprietary and Confidential xxiv Copyright © Huawei Technologies Co., Ltd.

  • Page 26: Ip Routing Basic Configuration

    Ethernet (L3VE) interface status changes after a delay. During traffic switchback after an L3VE interface recovers, this configuration can reduce traffic loss and improve network reliability. 1.9 Configuring the Association Between the IPv4 Direct Route and PW Status Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 27 1.18 Configuration Example IP routing configuration examples provide networking requirements, networking diagrams, configuration notes, configuration roadmap, and configuration procedures. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 28: Routing Management

    – Run the display ipv6 routing-table command to check brief information about current active routes. – Run the display ipv6 routing-table verbose command to check detailed information about the IPv6 routing table. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 29: Displaying Of The Routing Management Module

    FRR is a technique that allows the physical layer or data link layer to report a fault (if any) to the upper layer routing system so that packets are forwarded over a backup link. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 30: Configuring Ipv4 Multi-Topology

    For detailed introduction of FRR, see the HUAWEI NetEngine80E/40E Router Feature Description- IP Route. For detailed configuration of VPN IP FRR and VPN FRR, see the HUAWEI NetEngine80E/ 40E Router Configuration Guide - VPN. FRR can provide backup for direct, static, and dynamic routes (including OSPF, IS-IS, and BGP routes) of NE80E/40Es.

  • Page 31: Creating An Ipv4 Topology Instance

    To configure IPv4 multi-topology, you need the following data. Data Name of the IPv4 topology instance 1.2.2 Creating an IPv4 Topology Instance By configuring IPv4 topology instances, you can properly use network resources. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 32: Binding An Interface To An Ipv4 Topology Instance

    To add direct routes or IS-IS routes of an interface to the topology instance, you need to bind the interface to the topology instance. Perform the following steps on the interface where an IPv4 topology instance needs to be bound: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 33: Checking The Configurations

    ----End Example Run the display ip topology topology-name verbose command after configuring IPv4 multi- topology. If the following is displayed, it means that the configuration succeeds. <HUAWEI> display ip topology red verbose Topology Name : red Topology ID : 0x0100...

  • Page 34: Configuring Ipv6 Multi-Topology

    (for example, voice and data services) in different topology instances as required, you can isolate network resources on a network. Figure 1-2 Networking of multi-topology base topology green topology red topology blue topology Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 35: Creating An Ipv6 Topology Instance

    The maximum number of routes supported by a specified IPv6 topology instance is set. By default, the maximum number of routes supported by a topology instance is not set. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 36: Binding An Interface To An Ipv6 Topology Instance

    ----End 1.3.4 Checking the Configurations After IPv6 multi-topology is configured, you can check information about the created topology instance. Prerequisites IPv6 multi-topology has been configured. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 37: Configuring Public Network Ip Frr

    ----End Example Run the display ipv6 topology topology-name verbose command after configuring IPv6 multi- topology. If the following is displayed, it means that the configuration succeeds. <HUAWEI> display ipv6 topology red verbose Topology Name : red Topology ID : 0x0100...

  • Page 38: Configuring A Route-Policy

    Step 4 Run: apply backup-interface interface-type interface-number The backup outbound interface is specified. Step 5 Run: apply backup-nexthop ip-address The backup next hop is specified. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 39: Enabling Public Network Ip Frr

    Both poison reverse and BAS services cannot be configured on one interface. Both poison reverse and inter-VLAN proxy ARP cannot be configured on one interface. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 40 Run the display ip routing-table ip-address verbose command to view the backup outbound interface and the backup next hop in the routing table. An example command output is as follows: <HUAWEI> display ip routing-table 172.17.1.0 verbose Route Flags: R - relay, D - download to fib...

  • Page 41: Before You Start

    When configuring IPv6 FRR for the public network, you can configure a route-policy to specify the backup next hops and backup outbound interfaces for routes. Context Perform the following steps on the router to which IPv6 FRR needs to be applied: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 42: Enabling Public Network Ipv6 Frr

    Procedure Step 1 Run: system-view The system view is displayed. Step 2 Run: ipv6 frr route-policy route-policy-name IPv6 FRR is enabled. By default, IPv6 FRR is disabled. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 43 Run the display ipv6 routing-table ipv6-address verbose command to view the backup outbound interface and the backup next hop in the routing table. An example command output is as follows: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 44: Configuring Vrrp For Direct Routes

    This allows the UPE to perform a successful traffic switchback if recovering from a fault. For detailed configurations of an IP RAN, see the section "IP RAN Configuration" in the HUAWEI NetEngine80E/40E Router Configuration Guide - VPN. Pre-configuration Tasks...

  • Page 45: Configuring A Vrrp Backup Group

    If the master router fails, a backup router takes over services. For detailed configurations of a VRRP backup group, see the section "VRRP Configuration" in the HUAWEI NetEngine80E/40E Router Configuration Guide - Reliability. Perform the following steps on devices in a VRRP backup group:...

  • Page 46: Associating An Interface With A Vrrp Backup Group

    After an interface is associated with a VRRP backup group, the cost of the direct route in a network segment, to which the interface belongs, changes based on the VRRP status. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 47 [ brief ] command to check the VRRP backup group status. Run the display ip routing-table [ verbose ] command to check the information about the IPv4 routing table. ----End Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 48: Configuring An Ipv4 Direct Route To Respond To L3Ve Interface Status Changes After A Delay

    CSG can access the L3VPN. BGP is configured on AGGs to import direct routes between the CSG and AGGs. These direct routes are converted to BGP VPNv4 routes and advertised to RSGs. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 49 Up Data Preparation To configure an IPv4 direct route to respond to L3VE interface status changes after a delay, you need the following data. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 50 If an AGG's L3VE interface goes from Down to Up, run the display ip routing-table vpn- instance vpn-instance-name [ ip-address ] [ verbose ] command on the AGG. The command Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 51: Configuring An Ipv6 Direct Route To Respond To L3Ve Interface Status Changes After A Delay

    CSG and advertises the route to RSGs. Downstream traffic is then switched over to LinkA. However, AGG1 has not learned the MAC addresses of the base stations yet, so downstream traffic will be lost. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 52 The L2VPN can access the L3VPN only if the L2VE and L3VE interfaces are bound to the same VE group and reside on the same board. Step 4 Run: quit Return to the system view. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 53: Configuring The Association Between The Ipv4 Direct Route And Pw Status

    Layer 3 Virtual Private Network (L3VPN). BGP is configured on AGGs to import direct routes between the CSG and AGGs. These direct routes are converted to BGP VPNv4 routes and advertised to RSGs. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 54 Up Data Preparation To configure the association between the IPv4 direct route and PW status, you need the following data. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 55 If a PW has recovered but has not become active, run the display ip routing-table vpn- instance vpn-instance-name [ ip-address ] [ verbose ] command on an AGG. The command Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 56: Configuring The Association Between The Ipv6 Direct Route And Pw Status

    LinkA. However, AGG1 has not learned the MAC addresses of the base stations yet and PW1 is standing by, so downstream traffic will be lost. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 57 (L2VE) and L3VE interfaces are bound to the same VE group and reside on the same board. Step 4 Run: quit Return to the system view. Step 5 Run: interface virtual-ethernet interface-number.subinterface-number Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 58: Configuring The Association Between The Ipv4 Direct Routes And Ipsec Instance Status

    (0). As a result, after receiving these routes from the master and backup RSGs, CSGs cannot select an optimal one based on the cost. With the association between IPv4 direct routes and IPSec instance status: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 59 IPv4 direct routes and the IPSec instance status cannot be configured on this IPSec tunnel interface. The cost of local IPv4 direct routes that are not to be advertised cannot be associated with the IPSec instance status. ----End Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 60: 1.12 Configuring A Device To Deactivate The Ipv4 Network Segment Route That Corresponds To An L3Ve Sub-Interface

    CSGs can access the L3VPN. BGP is configured on the AGGs to import direct routes between the CSGs and AGGs. These direct routes are converted to BGP VPNv4 routes and advertised to the RSGs. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 61 PW3. CSG2 forwards data destined for CSG1 to AGG2 through PW3. AGG2 forwards the data to CSG1 through the primary PW (PW2). In this situation, data can be forwarded between CSG1 and CSG2. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 62 Step 6 Run: direct-route track pw-state deactive-standby The device is configured to deactivate the IPv4 network segment route that corresponds to the L3VE sub-interface of the secondary PW. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 63: 1.13 Configuring A Device To Deactivate The Ipv6 Network Segment Route That Corresponds To An L3Ve Sub-Interface

    AGG. The command output shows the IPv4 network segment route that corresponds to the L3VE sub- interface of the secondary PW. <HUAWEI> display ip routing-table vpn-instance vrf1 Route Flags: R - relay, D - download to fib ------------------------------------------------------------------------------...
  • Page 64 AGG2, instead of AGG1. AGG1 cannot learn the MAC addresses stored on CSG2 or forward traffic to CSG2. The network segment route from AGG1 to CSG2 becomes a black-hole route. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 65 Return to the system view. Step 5 Run: interface virtual-ethernet interface-number.subinterface-number A VE sub-interface is created and the VE sub-interface view is displayed. Step 6 Run: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 66 AGG, run the display ipv6 routing-table vpn-instance vpn-instance-name command on the AGG. The command output shows the IPv6 network segment route that corresponds to the L3VE sub-interface of the secondary PW. <HUAWEI> display ipv6 routing-table vpn-instance vrf1 Routing Table : vrf1 Destinations : 3...

  • Page 67: Configuring Aggs To Load-Balance Rnc-To-Csg Traffic

    L3VE sub-interface of the secondary pseudo wire (PW). Configure a static route to each NodeB and allow the static route to inherit the cost of the route to which the static route is iterated. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 68 The system view is displayed. Run: ip vpn-instance vpn-instance The VPN instance view is displayed. Run: arp vlink-direct-route advertise The AGG is configured to advertise ARP Vlink direct routes. Run: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 69 L3VE sub-interface of the secondary PW. By default, the cost of ARP Vlink direct routes and routes to the directly connected network segment on L3VE sub-interfaces is 0. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 70 To import static routes to the BGP routing table automatically, run the import-route static command. To import static routes to the BGP routing table manually, run the network command. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 71: Configuring The Advertisement Of Ipv4 Arp Vlink Direct Routes On The Public Network

    Router D to filter out routes to the network segment of the VLAN for which the VLANIF interfaces are configured and filter out routes to Router A and Router C. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 72: Enabling The Advertisement Of Ipv4 Arp Vlink Direct Routes

    In this manner, data traffic can be precisely controlled. Perform the following steps on the router on which IPv4 ARP Vlink direct routes need to be advertised: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 73 Run the display ip routing-table ip-address [ mask | mask-length ] [ longer-match ] [ verbose ] command to check information about advertised IPv4 ARP Vlink direct routes on the public network. ----End Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 74: Configuring The Advertisement Of Ipv6 Ndp Vlink Direct Routes On The Public Network

    # Run the display ip routing-table ip-address mask-length verbose command to view detailed information about the IPv4 ARP Vlink direct route 10.1.1.4/32. <HUAWEI> display ip routing-table 10.1.1.4 32 verbose Route Flags: R - relay, D - download to fib ------------------------------------------------------------------------------...

  • Page 75: Enabling The Advertisement Of Ipv6 Ndp Vlink Direct Routes

    Before IPv6 NDP Vlink direct routes are advertised, a route-policy can be used to filter the advertised routes and only routes that pass the filtering can be advertised. In this manner, data traffic can be precisely controlled. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 76 IPv6 NDP Vlink direct routes on the public network. Prerequisites All configurations relevant to the advertisement of IPv6 NDP Vlink direct routes has been configured. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 77: Maintaining The Route Management Module

    # Run the display ipv6 routing-table ipv6-address [ mask | mask-length ] verbose command to view detailed information about the IPv6 NDP Vlink direct route 2001:db8:2000::4/128. <HUAWEI> display ipv6 routing-table 2001:db8:2000::4 128 verbose Routing Table : Summary Count : 1...

  • Page 78: Configuring Thresholds For The Number Of Ipv6 Route Prefixes

    The number of IPv6 route prefixes on the device exceeds the alarm threshold. The alarm informs users that an abnormality may exist and to take corrective actions. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 79: Configuring A Limit On The Number Of Ipv4 Public Route Prefixes

    If you specify alert-percent in the command, when the number of IPv4 public route prefixes exceeds the value calculated by number x alert-percent/100, an alarm is generated. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 80: Configuring A Limit On The Number Of Ipv6 Public Route Prefixes

    IPv6 public route prefixes. When the number of IPv6 public route prefixes exceeds the limit, an alarm is generated, prompting you to check whether unneeded IPv6 public route prefixes exist. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 81 You can run the command to set a larger value for the interval to decrease the frequency at which these logs are generated. ----End Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 82: Configuration Example

    IP FRR to ensure that link B functions as the backup of link A Data Preparation To complete the configuration, you need the following data: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 83: Configuration Procedure

    SecTunnelID: 0x0 BkPETunnelID: 0x0 BkPESecTunnelID: 0x0 BkIndirectID: 0x0 If IP FRR is not required, run the undo ip frr command to disable IP FRR. [RouterT] undo ip frr Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 84 GigabitEthernet3/0/0 return Configuration file of Router A sysname RouterA interface GigabitEthernet1/0/0 ip address 192.167.10.2 255.255.255.0 interface GigabitEthernet2/0/0 ip address 192.167.11.2 255.255.255.0 ospf 1 area 0.0.0.0 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 85: Example For Configuring Public Network Ipv6 Frr

    A. In this way, after link A becomes faulty, traffic can be switched to link B immediately. The requirement can be met by configuring IPv6 FRR on Router T. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 86 Assign an IPv6 address for each interface according to Figure 1-13. For details, see configuration files. Step 2 Configure OSPFv3 on Router T, Router A, Router B, and Router C. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 87 [RouterT-GigabitEthernet2/0/0] ospfv3 cost 100 [RouterT-GigabitEthernet2/0/0] quit # Set the cost for GE 1/0/0 on Router C to 100. [RouterC] interface gigabitethernet 1/0/0 [RouterC-GigabitEthernet1/0/0] ospfv3 cost 100 [RouterC-GigabitEthernet1/0/0] quit Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 88 : 267337828 EntryFlags : 0x80002100 Reference Cnt: 2 Priority : medium : 3sec IndirectID : 0x0 RelayNextHop : :: TunnelID : 0x0 Interface : GigabitEthernet1/0/0 Flags ----End Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 89 1 area 0.0.0.0 interface GigabitEthernet2/0/0 undo shutdown ipv6 enable ipv6 address 2001:db8:2002::1/64 ospfv3 1 area 0.0.0.0 return Configuration file of Router B sysname RouterB ipv6 ospfv3 1 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 90: Example For Configuring Vrrp For Direct Routes

    RSG. UPE1 functions as the master and UPE2 functions as the backup. UPE2 takes over services from UPE1 if UPE1 fails. UPE1's Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 91 Associate GE 2/0/0 on UPE1 with backup group 1, enabling the cost of the direct route to the network segment where GE 2/0/0 resides to change based on the VRRP status. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 92 VRRP status of UPE1 is Master and the VRRP status of UPE2 is Backup. The command output on UPE1 and UPE2 is as follows: [UPE1] display vrrp GigabitEthernet2/0/0 | Virtual Router 1 State : Master Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 93 [UPE2] display ip routing-table Route Flags: R - relay, D - download to fib ------------------------------------------------------------------------------ Routing Tables: Public Destinations : 10 Routes : 11 Destination/Mask Proto Cost Flags NextHop Interface Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 94 [UPE1] display vrrp GigabitEthernet2/0/0 | Virtual Router 1 State : Backup Virtual IP : 20.1.3.111 Master IP : 20.1.3.2 PriorityRun : 120 PriorityConfig : 120 MasterPriority : 0 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 95 OSPF 20.1.1.1 GigabitEthernet1/0/0 OSPF 20.1.3.2 GigabitEthernet2/0/0 20.1.3.0/24 Direct 20.1.3.1 GigabitEthernet2/0/0 20.1.3.1/32 Direct 127.0.0.1 GigabitEthernet2/0/0 20.1.3.111/32 Direct 127.0.0.1 GigabitEthernet2/0/0 127.0.0.0/8 Direct 127.0.0.1 InLoopBack0 127.0.0.1/32 Direct 127.0.0.1 InLoopBack0 ----End Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 96 20.1.3.2 255.255.255.0 vrrp vrid 1 virtual-ip 20.1.3.111 interface GigabitEthernet1/0/0 undo shutdown ip address 20.1.2.2 255.255.255.0 interface LoopBack0 ip address 3.3.3.3 255.255.255.255 ospf 1 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 97: Example For Importing Ipv4 Arp Vlink Direct Routes To Bgp

    IPv4 ARP Vlink direct route advertisement on Router C, and use a route-policy to filter out the routes to the network segment of the VLAN and the route to Router A. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 98 Route-policy used to advertise BGP routes on Router C (the route-policy is policy2 in this example) Procedure Step 1 Configure an IP address for each interface. # Configure Router A. <HUAWEI> system-view Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 99 [SwitchA-GigabitEthernet3/0/0] port default vlan 10 [SwitchA-GigabitEthernet3/0/0] quit [SwitchA] interface Vlanif 10 [SwitchA-Vlanif10] ip address 20.1.1.2 24 [SwitchA-Vlanif10] quit # Configure Router C. <HUAWEI> system-view [HUAWEI] sysname RouterC Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 100 Status codes: * - valid, > - best, d - damped, h - history, i - internal, s - suppressed, S - Stale Origin : i - IGP, e - EGP, ? - incomplete Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 101 20.1.1.3/32 has been filtered out. Step 6 Use the route-policy policy2 to filter out the network segment route 20.1.1.0/24 on Router C when BGP routes are advertised. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 102 GigabitEthernet1/0/0 portswitch undo shutdown port link-type access port default vlan 10 interface GigabitEthernet2/0/0 portswitch undo shutdown port link-type access port default vlan 10 interface GigabitEthernet3/0/0 portswitch Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 103 10 permit 20.1.1.4 32 ip ip-prefix prefix2 index 10 deny 20.1.1.0 24 ip ip-prefix prefix2 index 20 permit 0.0.0.0 0 less-equal 32 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 104: Example For Importing Ipv6 Ndp Vlink Direct Routes To Bgp4

    Enable BGP4+ on Router C and Router D, ensuring that Router C and Router D are able to advertise IPv6 routes to each other. Enable the function of IPv6 NDP Vlink direct route advertisement on Router C. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 105 [HUAWEI] sysname RouterC [RouterC] ipv6 [RouterC] interface GigabitEthernet 2/0/0 [RouterC-GigabitEthernet2/0/0] undo shutdown [RouterC-GigabitEthernet2/0/0] ipv6 enable [RouterC-GigabitEthernet2/0/0] ipv6 address 2001:db8:2::1 64 [RouterC-GigabitEthernet2/0/0] quit # Configure Router D. <HUAWEI> system-view Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 106 Step 3 Configure BGP4+ between Router C and Router D. # Configure Router C. [RouterC] bgp 100 [RouterC-bgp] router-id 1.1.1.1 [RouterC-bgp] peer 2001:db8:2::2 as-number 100 [RouterC-bgp] ipv6-family unicast Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 107 PrefixLen : 64 NextHop : :: LocPrf PrefVal Label Path/Ogn : ? *> Network : 2001:db8:1::1 PrefixLen : 128 NextHop : :: LocPrf PrefVal Label Path/Ogn : ? Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 108 : 2001:db8:2::1 LocPrf : 100 PrefVal Label Path/Ogn : ? i Network : 2001:db8:2:: PrefixLen : 64 NextHop : 2001:db8:2::1 LocPrf : 100 PrefVal Label Path/Ogn : ? Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 109 PrefixLen : 64 NextHop : :: LocPrf PrefVal Label Path/Ogn : ? *> Network : 2001:db8:2::1 PrefixLen : 128 NextHop : :: LocPrf PrefVal Label Path/Ogn : ? Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 110 [RouterC] route-policy policy2 permit node 10 [RouterC-route-policy] if-match ipv6 address prefix-list prefix2 [RouterC-route-policy] quit [RouterC] bgp 100 [RouterC-bgp] ipv6-family unicast [RouterC-bgp-af-ipv6] peer 2001:db8:2::2 route-policy policy2 export [RouterC-bgp-af-ipv6] quit [RouterC-bgp] quit [RouterC] quit Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 111 10 interface GigabitEthernet3/0/0 portswitch undo shutdown port link-type access port default vlan 10 return Configuration file of Router A Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 112 2001:db8:2::2 enable peer 2001:db8:2::2 route-policy policy2 export route-policy policy1 permit node 10 if-match ip-prefix prefix1 if-match ipv6 address prefix-list prefix1 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 113 2001:db8:2::2/64 bgp 100 router-id 2.2.2.2 peer 2001:db8:2::1 as-number 100 ipv4-family unicast undo synchronization ipv6-family unicast undo synchronization peer 2001:db8:2::1 enable return Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 114: Ip Static Route Configuration

    An NQA test instance is used to detect the link status to allow a fast link switchover after a link fault occurs. This prevents long-time service interruption. 2.8 Configuring IPv4 Static Routes to Inherit the Costs of Iterated Routes Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 115 IPv6 static routes with link status to improve network reliability. 2.10 Configuration Examples Static route configuration examples explain networking requirements, networking diagrams, configuration notes, configuration roadmap, and configuration procedures. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 116: Introduction

    The NE80E/40E supports ordinary static routes and the static routes associated with VPN instances. The static routes associated with VPN instances are used to manage VPN routes . For details of VPN instances, see the HUAWEI NetEngine80E/40E Router Feature Description - VPN.

  • Page 117: Default Route

    Permanent advertisement of static routes provides a simple link detection mechanism to monitor services, which improves compatibility between Huawei devices and non-Huawei devices. If service traffic needs to be forwarded along a specified path, you can detect links by pinging the destination addresses of static routes.

  • Page 118: Configuring An Ipv4 Static Route

    Other attributes Setting different preferences for static routes helps flexibly apply routing policies. For example, when configuring multiple routes to the same destination address, you can set the Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 119: Configuring An Ipv4 Static Route On The Public Network

    } [ preference preference | tag tag ] [ description text ] An IPv4 static route is configured. By default, no IPv4 static route is configured. ----End Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 120: Optional) Setting The Default Preference For Ipv4 Static Routes

    Forwarding Information Base (FIB) table. The other routes become inactive. Perform the following steps on the router to be configured with static routes: Procedure Step 1 Run: system-view The system view is displayed. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 121: Optional) Configuring Permanent Advertisement Of Ipv4 Static Routes

    2.2.5 (Optional) Configuring Permanent Advertisement of IPv4 Static Routes Permanent advertisement of static routes provides a low-cost and simple link detection mechanism and improves the compatibility between Huawei devices and non-Huawei devices. Context Link connectivity directly affects the stability and availability of a network. Consequently, detecting link status is an important part of network maintenance.
  • Page 122 Run the display ip routing-table verbose command to check detailed information about the IPv4 routing table. ----End 2.3 Configuring an IPv6 Static Route On an IPv6 network, you can accurately control route selection by configuring IPv6 static routes. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 123 { interface-type interface- number | nexthop-ipv6-address } [ preference preference | tag tag ] [ description text ] An IPv6 static route is configured. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 124: Optional) Setting The Default Preference For Ipv6 Static Routes

    IPv6 routes in a simple topology instance, you can improve the network performance and provide the guaranteed bandwidth for important services. Perform the following steps on the router where static IPv6 routes need to be configured: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 125 2.4.1 Before You Start Before configuring BFD for static routes, familiarize yourself with the usage scenario, complete the pre-configuration tasks, and obtain the data required for the configuration. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 126 { mask | mask-length } { nexthop-address | interface- type interface-number [ nexthop-address ] | vpn-instance vpn-instance-name nexthop- address } [ preference preference | tag tag ] [ description text ] Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 127: Configuring A Bfd Session

    IP address of the BFD packet in case the BFD packet is incorrectly discarded. Step 5 Configure the discriminators. l Run: discriminator local discr-value The local discriminator is configured. l Run: discriminator remote discr-value The remote discriminator is configured. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 128: Binding A Static Route To A Bfd Session

    After BFD for static route is configured, you can check information about BFD sessions and BFD for static route. Prerequisites BFD configurations for IPv4 static routes are complete. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 129: Configuring Bfd For Ipv6 Static Routes On The Public Network

    Up Data Preparation To configure BFD for IPv6 static routes on the public network, you need the following data. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 130: Configuring An Ipv6 Static Route

    ----End 2.5.3 Configuring a BFD Session BFD sessions are used to rapidly detect and monitor the connectivity of links on a network. Procedure Step 1 Run: system-view Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 131 2.5.4 Binding a Static Route to a BFD Session When binding a static route to a BFD session, ensure that the static route resides on the same link as the BFD session. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 132 BFD, Network Quality Analysis (NQA) for static IPv4 routes can be configured to detect faults Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 133 Administrator name and name of an NQA test instance Destination IP address of the NQA test instance Destination network address and mask Next hop IPv4 address or outbound interface for a static route Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 134: Configuring An Icmp Type Nqa Test Instance

    NQA reports the test results to the system when a link fault is detected and when the link fault is rectified. For details about NQA, see the chapter "NQA Configuration" in the HUAWEI NetEngine80E/40E Router Configuration Guide - System Management. Perform the following steps on the NQA client:...

  • Page 135: Binding An Ipv4 Static Route To An Nqa Test Instance

    Perform the following steps on the router that requires NQA for static IPv4 routes: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 136 | include nqa command in the system view to check whether the static route has been associated with the NQA test instance. For example: <HUAWEI> display current-configuration | include nqa ip route-static 172.16.1.3 255.255.255.255 GigabitEthernet1/0/0 track nqa admin icmp...

  • Page 137: Configuring Nqa For Ipv6 Static Routes

    The test is finished Completion:success For example: <HUAWEI> display nqa results test-instance admin icmp NQA entry(admin, icmp) :testflag is active ,testtype is icmp 1 . Test 206 result The test is finished Send operation times: 15...

  • Page 138: Configuring An Icmp Nqa Test Instance

    NQA schedules these test instances into test instance queues according to their operation types. After the test instances are started, the data information about the protocol-related running status can be collected according to the return packet. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 139 1 second. This ensures that NQA reports the test results to the system when a link fault is detected and when the link fault is rectified. For details about NQA configurations, see the section "NQA Configuration" in HUAWEI NetEngine80E/40E Router Configuration Guide - SystemManagement.

  • Page 140: Associating A Ipv6 Static Route With An Nqa Test Instance

    [ nexthop-ipv6-address ] | nexthop-ipv6-address } [ preference preference | tag tag ] track nqa admin-name test-name [ description text ] An IPv6 static route is associated with an NQA test instance. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 141 The test is finished Completion:success An example command output is as follows: <HUAWEI> display nqa results test-instance admin1 test1 NQA entry(admin1, test1) :testflag is active ,testtype is icmp 1 . Test 9 result The test is finished...

  • Page 142: Configuring Ipv4 Static Routes To Inherit The Costs Of Iterated Routes

    Link A. However, AGG1 has not learned the MAC addresses of the base stations yet and the primary PW is unavailable, so packets are dropped during the traffic switchback. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 143 Configuring link-layer protocol parameters and IP addresses for interfaces to ensure that the link layer protocol of each interface is Up Procedure Step 1 Run: system-view The system view is displayed. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 144: Configuring Ipv6 Static Routes To Inherit The Costs Of Iterated Routes

    (L3VPN). In such a scenario, the IPv6 direct route cost is usually controlled by Configuring an IPv6 direct route to respond to L3VE interface status changes after a delay or by Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 145 In this case, even if AGG1 advertises IPv6 static routes to RSGs, RSGs do not preferentially select these routes and downstream traffic still travels along LinkB. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 146: Configuration Examples

    L3VE interface's direct route to the CSG. 2.10 Configuration Examples Static route configuration examples explain networking requirements, networking diagrams, configuration notes, configuration roadmap, and configuration procedures. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 147: Example For Configuring Ipv4 Static Routes

    Configure an IPv4 static route and a default route to the destination address on each router. Configure an IPv4 default gateway on each host to make any two hosts communicate. Data Preparation To complete the configuration, you need the following data: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 148 Reply from 1.1.3.1: bytes=56 Sequence=2 ttl=254 time=63 ms Reply from 1.1.3.1: bytes=56 Sequence=3 ttl=254 time=63 ms Reply from 1.1.3.1: bytes=56 Sequence=4 ttl=254 time=62 ms Reply from 1.1.3.1: bytes=56 Sequence=5 ttl=254 time=62 ms Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 149 Configuration file of Router C sysname RouterC interface GigabitEthernet2/0/0 ip address 1.1.3.1 255.255.255.0 interface Pos1/0/0 link-protocol ppp ip address 1.1.4.6 255.255.255.252 ip route-static 0.0.0.0 0.0.0.0 1.1.4.5 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 150: Example For Configuring Ipv6 Static Routes

    Configure an IPv6 default gateway on each host to make any two hosts communicate. Data Preparation To complete the configuration, you need the following data: Default route with the outbound interface being POS 1/0/0 of Router A Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 151 PrefixLength : 64 NextHop : 2001:db8:1::1 Preference Cost Protocol : Direct RelayNextHop : :: TunnelID : 0x0 Interface : GigabitEthernet2/0/0 Flags Destination : 2001:db8:1::1 PrefixLength : 128 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 152 2001:db8:1::1/64 interface Pos1/0/0 link-protocol ppp ipv6 enable ipv6 address auto link-local ipv6 route-static :: 0 Pos 1/0/0 return Configuration file of Router B sysname RouterB ipv6 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 153: Example For Configuring Bfd For Ipv4 Static Routes

    BFD session is configured between Router A and Router B to detect the link between the two devices. Figure 2-5 Networking diagram for configuring BFD for IPv4 static routes Pos2/0/0 GE1/0/0 GE1/0/0 2.2.2.2/24 1.1.1.1/24 1.1.1.2/24 Internet SwitchC RouterB RouterA Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 154 Step 3 Configure a default static route and bind it to a BFD session. # On Router A, configure a default static route to the external network and bind it to a BFD session named aa. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 155 Routes : 2 Destination/Mask Proto Cost Flags NextHop Interface 1.1.1.0/24 Direct 0 1.1.1.1 GigabitEthernet1/0/0 1.1.1.1/32 Direct 0 127.0.0.1 GigabitEthernet1/0/0 ----End Configuration Files Configuration file of Router A sysname RouterA Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 156: Example For Configuring Bfd For Ipv6 Static Routes

    BFD session is configured between Router A and Router B to detect the link between the two devices. Figure 2-6 Networking diagram for configuring BFD for IPv6 static routes GE1/0/0 Pos2/0/0 GE1/0/0 2001:db8:1::2/64 2001:db8:2::1/64 2001:db8:1::1/64 Internet SwitchC RouterB RouterA Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 157 # On Router A, configure a default static route to the external network and bind it to a BFD session named aa. [RouterA] ipv6 route-static 0::0 0 2001:db8:1::2 track bfd-session aa Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 158 # Check the IP routing table of Router A. The command output shows that default route 0::0/0 does not exist. This is because the default static route is bound to a BFD session. When BFD Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 159 2001:db8:1::2/64 interface Pos2/0/0 link-protocol ppp ipv6 enable ipv6 address 2001:db8:2::1/64 bfd bb bind peer-ipv6 2001:db8:1::1 discriminator local 20 discriminator remote 10 commit return Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 160: Example For Configuring Nqa For Ipv4 Static Routes

    Normally, traffic travels along the active link of Router B → Switch A. If a fault occurs in the active link, traffic switches to the standby link of Router C → Switch Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 161 Configure OSPF on Router B and Router C to import static routes, and set a higher cost for the static route imported to Router C than that imported to Router B. After Router A Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 162 After completing the configuration, run the display current-configuration | include nqa command in the system view on Router B to check whether the static route has been associated Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 163 Direct 172.16.3.1 GigabitEthernet2/0/0 172.16.3.2/32 Direct 127.0.0.1 GigabitEthernet2/0/0 172.16.4.0/24 OSPF 172.16.3.1 GigabitEthernet2/0/0 172.16.5.0/24 Direct 172.16.5.1 GigabitEthernet3/0/0 172.16.5.1/32 Direct 127.0.0.1 GigabitEthernet3/0/0 172.16.5.2/32 Direct 172.16.5.2 GigabitEthernet3/0/0 172.16.7.0/24 Static 172.16.1.2 GigabitEthernet1/0/0 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 164 [RouterB] display ip routing-table Route Flags: R - relay, D - download to fib ------------------------------------------------------------------------------ Routing Tables: Public Destinations : 10 Routes : 10 Destination/Mask Proto Cost Flags NextHop Interface Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 165 172.16.4.2, and the cost is 20. Traffic switches to the link of Router C → Switch B. ----End Configuration Files Configuration file of Router A sysname RouterA router id 1.1.1.1 interface GigabitEthernet1/0/0 undo shutdown Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 166 3.3.3.3 interface GigabitEthernet1/0/0 undo shutdown ip address 172.16.2.1 255.255.255.0 interface GigabitEthernet2/0/0 undo shutdown ip address 172.16.4.2 255.255.255.0 interface GigabitEthernet3/0/0 undo shutdown ip address 172.16.6.1 255.255.255.0 ospf 1 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 167: Example For Configuring Nqa For Ipv6 Static Routes

    Normally, traffic is forwarded through the active link Router B→Switch A. When the active link becomes faulty, traffic is switched to the backup link Router C→ Switch B. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 168 Configure OSPFv3 on Router B and Router C to import static routes and set the cost to the static route imported by Router C to be larger than the cost of the static route imported by Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 169 [RouterB] ospfv3 1 [RouterB-ospfv3-1] import-route static cost 10 [RouterB-ospfv3-1] quit # Configure OSPFv3 on Router C to import static routes and set the route cost to 20. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 170 A route to 2001:db8:7::/64 exists in the routing table, with the outbound interface GE 1/0/0 and the cost 10. Traffic will be forwarded through the link Router B→Switch A. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 171 2001:db8:7::/64 from Router C. The outbound interface to 2001:db8:7::/64 is changed to GE 2/0/0 and the cost is 20. Traffic will be switched to Router C→Switch B. ----End Configuration Files Configuration file of Router A Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 172 2001:db8:7:: 64 GigabitEthernet1/0/0 FE80:1::1 track nqa admin1 test1 nqa test-instance admin1 test1 test-type icmp destination-address ipv6 2001:db8:3::2 frequency 3 probe-count 1 start now return Configuration file of Router C sysname RouterC ipv6 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 173: Example For Configuring Permanent Advertisement Of Ipv4 Static Routes

    Link A by periodically pinging the interface address of Router B through the network monitoring system. This detects the status of BGP services. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 174 Router IDs and AS numbers of all routers Procedure Step 1 Configure an IP address for each interface. This example assumes that you know the configuration method and no details are provided here. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 175 [RouterC-bgp] peer 20.1.1.1 as-number 100 [RouterC-bgp] network 20.1.1.0 255.255.255.0 [RouterC-bgp] import-route ospf 1 [RouterC-bgp] quit # After the preceding configurations, check the EBGP connection status of Router A. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 176 Direct 40.1.1.2 Pos1/0/0 20.1.1.0/24 Direct 20.1.1.1 Pos2/0/0 20.1.1.1/32 Direct 127.0.0.1 Pos2/0/0 20.1.1.2/32 Direct 20.1.1.2 Pos2/0/0 30.1.1.0/24 EBGP 40.1.1.2 Pos1/0/0 127.0.0.0/8 Direct 127.0.0.1 InLoopBack0 127.0.0.1/32 Direct 127.0.0.1 InLoopBack0 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 177 Request time out Request time out Request time out Request time out Request time out --- 2.2.2.2 ping statistics --- 5 packet(s) transmitted 0 packet(s) received 100.00% packet loss Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 178 2.2.2.2 255.255.255.255 bgp 200 peer 40.1.1.1 as-number 100 ipv4-family unicast undo synchronization peer 40.1.1.1 enable ospf 1 area 0.0.0.0 network 2.2.2.2 0.0.0.0 network 30.1.1.0 0.0.0.255 return Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 179 20.1.1.1 as-number 100 ipv4-family unicast undo synchronization network 20.1.1.0 255.255.255.0 import-route ospf 1 peer 20.1.1.1 enable ospf 1 import-route direct area 0.0.0.0 network 20.1.1.0 0.0.0.255 network 30.1.1.0 0.0.0.255 return Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 180: Rip Configuration

    RIP timers, setting the interval for sending packets, and setting the maximum number of packets to be sent. 3.9 Configuring RIP GR Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 181 This section describes how to reset RIP connections and clear RIP information. 3.14 Configuration Examples In actual networking, RIP versions and whether to import external routes will affect which routes can be learned. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 182 Provides packets that contain mask information and supports route aggregation and Classless Inter-domain Routing (CIDR). Supports the next hop address and can select the optimal next hop address in the broadcast network. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 183: Rip Features Supported By The Ne80E/40E

    Configuring IP addresses for interfaces to ensure that neighboring nodes are reachable at the network layer Data Preparation To configure basic RIP functions, you need the following data. Data RIP process ID Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 184: Enabling Rip

    RIP process should be associated with the RIP-process-related VPN instance. Step 3 (Optional) Run: description Descriptions for RIP processes are configured. ----End Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 185: Enabling Rip On The Specified Network Segment

    Perform the following steps on the RIP router. Procedure Configuring the Global RIP Version Number Run: system-view The system view is displayed. Run: rip [ process-id ] Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 186 Run the display rip process-id statistics interface { all | interface-type interface- number [ verbose | neighbor neighbor-ip-address ] } command to check statistics about RIP interfaces. ----End Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 187 Number of routes sent in last periodic update : 4 Run the display rip process-id route command, and you can view all activated and inactivated routes of the specified RIP process. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 188 Run the display rip process-id statistics interface { all | interface-type interface-number [ verbose | neighbor neighbor-ip-address ] } command, and you can view statistics about the specified RIP interface. <HUAWEI> display rip 1 statistics interface gigabitethernet1/0/0 GigabitEthernet1/0/0(10.0.0.11) Statistical information...

  • Page 189: Configuring Rip Route Attributes

    You can specify commands to set additional metrics for incoming and outgoing RIP routes. Context The additional metric is added to the original metric of the RIP route. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 190 ACL or an IP prefix list. If a RIP route does not pass the filtering, its metric is not incremented. Step 4 Run any of the following commands as required: l Based on the basic ACL: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 191: Configuring Rip Preference

    The RIP process is enabled and the RIP view is displayed. Step 3 Run: preference { preference | route-policy route-policy-name } * The RIP preference is set. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 192: Setting The Maximum Number Of Equal-Cost Routes

    Prerequisites RIP route attributes has been configured. Procedure Run display rip [ process-id | vpn-instance vpn-instance-name ] command to check the running status and configuration of RIP. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 193: Configuring Rip To Import External Routes

    Data Preparation To configure RIP to import external routes, you need the following data. Data Protocol name and process ID of the external route to be imported Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 194: Controlling The Advertising Of Rip Routing Information

    After performing the configuration procedures in this section, you can: Advertise default routes to neighbors. Suppress interfaces from sending RIP Update packets. Filter the routes to be advertised. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 195: Configuring Rip To Advertise Default Routes

    3.5.3 Disabling an Interface from Sending RIP Update Packets Disabling interfaces from sending RIP Update packets is a method of preventing routing loops and can be implemented in two ways. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 196 By running this command, you can specify whether to send RIP Update packets on an interface. The silent-interface command takes precedence over the undo rip output command. By default, an interface is allowed to send RIP Update packets. ----End Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 197: Configuring Rip To Filter The Routes To Be Sent

    Route filtering using a whitelist: Configure a rule with a smaller number and specify the action permit in this rule to permit the routes to be received or advertised by the Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 198 If the routes of other routing protocols are imported and the tag is used in the routing policy, ensure that the tag value does not exceed 65535. Otherwise, the routing policy becomes invalid or the matching result is incorrect. ----End Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 199 RIP routing information accurately. After performing configuration procedures in this section, you can: Disable an interface from receiving RIP Update packets. Filter the received routing information. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 200: Disabling An Interface From Receiving Rip Update Packets

    When you disable RIP from receiving host routes on a router, the router rejects to receive host routes. This prevents the router from receiving a large number of unnecessary routes and therefore avoiding wasting network resources. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 201: Configuring Rip To Filter The Received Routes

    You can also configure the router to receive RIP packets only from a specified neighbor. Perform the following steps on the RIP router: Procedure Step 1 Run: system-view Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 202 Run quit, return to the system view. Run acl name acl-name advance [ number acl-number2 ] [ match-order { auto | config } ], the basic ACL view is displayed. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 203 Run the display rip process-id database [ verbose ] command to check all activated RIP routes in the database. Run the display rip process-id interface [ interface-type interface-number ] [ verbose ] command to check information about the RIP interface. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 204: Configuring Rip-2 Features

    Configuring IP addresses for interfaces to ensure that neighboring nodes are reachable at the network layer Data Preparation To configure RIP-2 features, you need the following data. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 205: Configuring Rip-2 Route Summarization

    [ always ] Route summarization is enabled. – Enable the RIP-2 automatic route summarization when split horizon is disabled, there is no need to configure always. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 206: Configuring Packet Authentication Of Rip-2

    To ensure device security, change the password periodically. Perform the following steps on the RIP router. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 207 P2P link. Security upgrade between Router A and Router B are configured with default version. Figure 3-1 RIP on P2P link interface1 interface2 Router A Router B Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 208 Version 2 broadcast and multicast with authentication interface2 on Router B: (Version 2 broadcast) Send: Version 2 broadcast with authentication Receive: Version 1 Version 2 broadcast and multicast with authentication Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 209 Router B: (Default version or version 1 compatible) Send: Version 1 Receive: Version 1 Version 2 broadcast and multicast interface1 on Router A: (Version 1) Send: Version 1 Receive: Version 1 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 210 Router B: (Default version or version 1 compatible) Send: Version 1 Receive: Version 1 Version 2 broadcast and multicast with authentication interface1 on Router A: (Default version or version 1 compatible) Send: Version 1 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 211 Version 2 broadcast and multicast with authentication interface3 on Router C: (version 2 brooadcast) Send: Version 2 broadcast with authentication Receive: Version 1 Version 2 broadcast and multicast with authentication Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 212 At Router C, if we configure rip version 2, then the send version on that interface is version 2 multicast with authentication. Authentication on other devices was already configured, Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 213 Run the display rip process-id database [ verbose ] command to check all activated RIP routes in the database. Run the display rip process-id route command to check all the RIP routes that are learned from other routers. ----End Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 214: Optimizing A Rip Network

    Number of Update packets that an interface sends each time and interval for sending an Update packet Maximum number of equal-cost routes Packet authentication mode and password Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 215: Configuring Rip Timers

    RIP has three timers: Update timer, Age timer and Garbage-collect timer. Changing the values of the three timers affects the RIP convergence speed. For details on timers, see corresponding description in the chapter "RIP" in the HUAWEI NetEngine80E/40E Router Feature Description - IP Routing.

  • Page 216: Setting The Interval For Sending Packets And The Maximum Number Of The Sent Packets

    Perform the following steps on the RIP router: Procedure Step 1 Run: system-view Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 217: Enabling Replay-Protect Function

    Step 1 Run: system-view The system view is displayed. Step 2 Run: interface interface-type interface-number The interface view is displayed. Step 3 Run: rip authentication-mode md5 nonstandard Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 218: Configuring Rip To Check The Validity Of Update Packets

    Run: rip [ process-id ] The RIP process is enabled and the RIP view is displayed. Run: checkzero The zero field check is configured for RIPv1 packets. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 219: Configuring Rip Neighbors

    The system view is displayed. Step 2 Run: rip [ process-id ] The RIP process is enabled and the RIP view is displayed. Step 3 Run: peer ip-address Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 220: Configuring The Rip Gtsm Functions

    Run the display rip process-id database [ verbose ] command to check all activated RIP routes in the database. Run the display rip process-id interface [ interface-type interface-number ] [ verbose ] command to check information about the RIP interface. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 221: Configuring Rip Gr

    Run the display rip process-id interface [ interface-type interface-number ] [ verbose ] command, and you can view RIP information about the specified interface. The command output shows that the interface status is Up. <HUAWEI> display rip 1 interface GigabitEthernet1/0/0 ------------------------------------------------------------------ Interface...

  • Page 222: Enabling Rip Gr

    GR. Otherwise, the Restarter is forced to exit from GR. 3.9.3 Checking the Configurations After RIP GR is configured, you can check the RIP GR status. Prerequisites RIP GR has been configured. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 223: Configuring Bfd For Rip

    RIP interfaces. Enable BFD on RIP interfaces: This method is recommended when BFD for RIP needs to be enabled on a small number of RIP interfaces. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 224 (Optional) Run: bfd all-interfaces { min-rx-interval min-receive-value | min-tx-interval min-transmit-value | detect-multiplier detect-multiplier-value } The values of BFD parameters used to establish the BFD session are set. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 225 After enabling BFD for RIP at both ends of a link, run the display rip bfd session { interface interface-type interface-number | neighbor-id | all } command. You can see that the BFDState field value on the local router is displayed Up. For example: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 226: Configuring Static Bfd For Rip

    HUAWEI NetEngine80E/40E Router Configuration Guide - IP Routing 3 RIP Configuration <HUAWEI> display rip 1 bfd session all LocalIp :10.1.0.1 RemoteIp :10.1.0.2 BFDState :Up :1000 :1000 Multiplier:3 BFD Local Dis:8192 Interface :GigabitEthernet0/0/0 DiagnosticInfo: No diagnostic information LocalIp :10.2.0.1 RemoteIp :10.2.0.2...
  • Page 227 IP address specified in the peer-ip command as the next-hop address. Set discriminators. l Run: discriminator local discr-value Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 228 RIP configurations on the specified interface. interface [ interface-type interface-number ] verbose Run the display rip process-id interface interface-type interface-number verbosecommand. The command output shows that static BFD has been enabled on GigabitEthernet1/0/0. For example: <HUAWEI> display rip 1 interface gigabitethernet1/0/0 verbose GigabitEthernet1/0/0 (172.16.1.1) State : UP MTU : 500...

  • Page 229: Configuring The Network Management Function In Rip

    Perform the following steps on the RIP router: Procedure Step 1 Run: system-view The system view is displayed. Step 2 Run: rip mib-binding process-id RIP is bound to MIBs. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 230 RIP process. When the RIP process starts, all parameters use default values. ----End 3.13.2 Clearing RIP This section describes how to clear statistics about RIP counters. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 231 B, Router C, and Router D and the routers interconnect with each other by using RIP-2. Figure 3-3 Networking diagram for configuring the RIP version number RouterC POS2/0/0 172.16.1.2/24 POS2/0/0 POS1/0/0 POS3/0/0 172.16.1.1/24 192.168.1.1/24 10.1.1.2/24 POS1/0/0 POS3/0/0 192.168.1.2/24 RouterB 10.1.1.1/24 RouterA RouterD Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 232 [RouterC-rip-1] quit # Configure Router D. [RouterD] rip [RouterD-rip-1] network 10.0.0.0 [RouterD-rip-1] quit # Check the RIP routing table of Router A. [RouterA] display rip 1 route Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 233 The preceding display shows that the routes advertised by RIPv2 carry subnet masks. ----End Configuration Files Configuration file of Router A sysname RouterA interface Pos1/0/0 link-protocol ppp undo shutdown ip address 192.168.1.1 255.255.255.0 rip 1 version 2 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 234: Example For Configuring Rip To Import External Routes

    3.14.2 Example for Configuring RIP to Import External Routes To obtain more RIP routing information, you can configure RIP to import external routes. You can run commands to view the configuration results. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 235 Default cost of the routes imported by Router B from RIP 200, which is 3 ACL 2000 that is used to deny the route with the source network segment being 192.168.4.0 Procedure Step 1 Configure an IP address for each interface. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 236 [RouterA] display ip routing-table Route Flags: R - relay, D - download to fib ------------------------------------------------------------------------------ Routing Tables: Public Destinations : 10 Routes : 10 Destination/Mask Proto Cost Flags NextHop Interface Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 237 192.168.3.0/24 192.168.1.2 Pos1/0/0 ----End Configuration Files Configuration file of Router A sysname RouterA interface GigabitEthernet2/0/0 undo shutdown ip address 192.168.0.1 255.255.255.0 interface Pos1/0/0 link-protocol ppp undo shutdown Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 238: Example For Configuring One-Arm Static Bfd For Rip

    Pos1/0/0 link-protocol ppp undo shutdown ip address 192.168.2.2 255.255.255.0 rip 200 network 192.168.2.0 network 192.168.3.0 network 192.168.4.0 return 3.14.3 Example for Configuring One-Arm Static BFD for RIP Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 239 Enable global BFD on Router A. Enable One-Arm static BFD on the interface connecting Router A and Router B. Data Preparation To complete the configuration, you need the following data: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 240 # After the configurations are complete, run the display rip neighbor command, and you can see that RIP neighbor relationships among Router A, Router B, and Router C have been established. Take the display on Router A as an example. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 241 # After the configurations are completed, run the display bfd sessionall command on Router A and you can see that a static BFD session is set up. [RouterA] display bfd session all ---------------------------------------------------------------------------------- --------- Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 242 RouterA interface gigabitethernet1/0/0 undo shutdown ip address 2.2.2.1 255.255.255.0 rip bfd static interface gigabitethernet2/0/0 undo shutdown ip address 3.3.3.1 255.255.255.0 rip 1 version 2 network 2.0.0.0 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 243 3.0.0.0 network 4.0.0.0 return Configuration file of Router D sysname RouterD interface gigabitethernet1/0/0 undo shutdown ip address 172.16.1.2 255.255.255.0 rip 1 version 2 network 172.16.0.0 return Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 244: Example For Configuring Bfd For Rip

    Configure basic RIP functions on each router to ensure that RIP neighbor relationships are properly established. Enable BFD globally. Configure BFD on interfaces at both ends of the link between Routers A and B. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 245 Routers A, B, and C have established neighbor relationships with each other. In the following example, the display on Router A is used. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 246 [RouterA] display rip 1 bfd session all LocalIp :2.2.2.1 RemoteIp :2.2.2.2 BFDState :Up :100 :100 Multiplier:10 BFD Local Dis:8192 Interface :GigabitEthernet1/0/0 DiagnosticInfo: No diagnostic information Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 247 172.16.0.0/16 are 3.3.3.2 and GE 2/0/0 respectively. ----End Configuration Files Configuration file of Router A sysname RouterA interface gigabitethernet1/0/0 undo shutdown ip address 2.2.2.1 255.255.255.0 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 248 4.4.4.2 255.255.255.0 interface gigabitethernet2/0/0 undo shutdown ip address 3.3.3.2 255.255.255.0 rip 1 version 2 network 3.0.0.0 network 4.0.0.0 return Configuration file of Router D sysname RouterD interface gigabitethernet1/0/0 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 249 HUAWEI NetEngine80E/40E Router Configuration Guide - IP Routing 3 RIP Configuration undo shutdown ip address 172.16.1.2 255.255.255.0 rip 1 version 2 network 172.16.0.0 return Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 250: Ripng Configuration

    4.9 Configuring IPSec Authentication for RIPng Configuring IPSec authentication for RIPng can improve security of a RIPng network. 4.10 Configuration Examples Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 251 HUAWEI NetEngine80E/40E Router Configuration Guide - IP Routing 4 RIPng Configuration In actual networking, different RIPng features have different applications. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 252 These routing entries contain the following information: Destination address: indicates the IPv6 address of a host or network. Next-hop address: indicates the address of the next router to the destination. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 253: Ripng Features Supported By The Ne80E/40E

    Configuring IPv6 addresses for interfaces to ensure that neighboring nodes are reachable at the network layer Data Preparation To configure basic RIPng functions, you need the following data. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 254: Enabling Ripng And Entering The Ripng View

    After an interface is associated with a RIPng process, routing information on this interface can be exchanged through RIPng. Context Perform the following steps on the router to be enabled with RIPng: Procedure Step 1 Run: system-view Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 255 Run the display ripng [ process-id | vpn-instance vpn-instance-name ] command, and you can view the configuration of the specified RIPng process. <HUAWEI> display ripng 100 Public vpn-instance Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 256 : 30 Run the display ripng process-id statistics interface command, and you can view statistics about the specified RIPng interface. <HUAWEI> display ripng 1 statistics interface gigabitethernet 1/0/0 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 257: Configuring Ripng Route Attributes

    3.2 Configuring Basic RIP Functions Data Preparation To configure RIPng route attributes, you need the following data. Data RIPng preference Additional metric of the interface Maximum number of equal-cost routes Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 258: Configuring The Ripng Preference

    IPv6 ACL or an IPv6 prefix list. If a RIPng route does not pass the filtering, its metric is increased by 1. Perform the following steps on the RIPng router: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 259: Configuring The Maximum Number Of Equal-Cost Routes

    The system view is displayed. Step 2 Run: ripng [ process-id ] The RIPng view is displayed. Step 3 Run: maximum load-balancing number The maximum number of equal-cost routes is set. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 260 2, tag 0, RA, 6 Sec Dest 2001:DB8:4:2::/64, via FE80::200:5EFF:FE04:3302, cost 2, tag 0, RA, 6 Sec Dest 2001:DB8:4:3::/64, via FE80::200:5EFF:FE04:3302, cost 2, tag 0, RA, 6 Sec Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 261: Configuring Ripng Route Summarization

    Run the import-route (RIPng)command to set the cost of the imported route. Run the default-cost (RIPng) command to set the cost of the default route. Procedure Step 1 Run: system-view Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 262: Controlling The Advertising Of Ripng Routing Information

    Disable interfaces from sending RIPng Update packets. Filter routes to be advertised. Pre-configuration Tasks Before configuring the router to control the advertising of RIPng routing information, complete the following tasks: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 263: Configuring Ripng To Advertise The Default Routes

    IPv6 routing table. ----End 4.6.3 Disabling Sending of RIPng Packets on an Interface Disabling an interface from sending RIPng packets is a method of preventing routing loops. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 264: Configuring Ripng To Filter The Routes To Be Sent

    RIPng is configured to filter the routes based on the ACL. Run any of the following commands as required: – Configure a basic ACL: Run: quit Return to the RIPng view. Run: quit Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 265 Return to the RIPng view. Run: quit Return to the system view. acl ipv6 name acl-name [ number acl-number2 ] [ match-order { auto | config } ] Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 266 After the function of controlling the advertising of RIPng routing information is successfully configured, you can view RIPng routing information. Prerequisites Controlling the advertising of RIPng routing information has been configured. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 267: Controlling The Receiving Of Ripng Routing Information

    To meet the requirements of a complicated networking environment, you need to control the receiving of RIPng routing information accurately. After performing configuration procedures in this section, you can: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 268: Disabling Receiving Of Ripng Packets On An Interface

    The interface view is displayed. Step 3 Run: undo ripng input The interface is disabled from receiving RIPng packets. By default, an interface is allowed to receive RIPng packets. ----End Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 269: Configuring Ripng To Filter The Received Routes

    – If an ACL does not contain any rules, all routes matching the route-policy that references the ACL will not be received or advertised by the system. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 270 Route filtering using a blacklist: Configure a rule with a smaller number and specify the action deny in this rule to filter out the unwanted routes. Then, Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 271 FE80::2E0:E6FF:FE1B:8142, Ethernet0/0/0, cost 1 2001:DB8:10::/64, via FE80::2E0:E6FF:FE1B:8142, Ethernet0/0/1, cost 1 2001:DB8:12::/64, Ethernet0/0/0 cost 0, RIPng-interface # Display all the RIPng routes that are learned from other routers. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 272: Optimizing A Ripng Network

    Configuring IPv6 addresses for interfaces to ensure that neighboring nodes are reachable at the network layer Configuring Basic RIPng Functions Data Preparation To optimize a RIPng network, you need the following data. Data Values of timers Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 273: Configuring Ripng Timers

    RIPng performance. Context Perform the following steps on the RIPng router: Procedure Step 1 Run: system-view The system view is displayed. Step 2 Run: interface interface-type interface-number Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 274: Configuring Split Horizon And Poison Reverse

    In a RIPng packet, there are certain fields whose values must be 0. These fields are called zero fields. If the values of these zero fields in some RIPng packets are not 0s, these RIPng packets are ignored. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 275 Run the display ripng process-id route command to check all the RIPng routes that are learned from other routers. ----End 4.9 Configuring IPSec Authentication for RIPng Configuring IPSec authentication for RIPng can improve security of a RIPng network. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 276 If IPSec authentication is enabled in the RIPng view, all interfaces in the RIPng process will perform IPSec authentication on the RIPng packets received or sent by the interfaces. Procedure Step 1 Run: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 277: Configuring Ipsec Authentication On A Ripng Interface

    4.9.4 Checking the Configurations After IPSec authentication for RIPng is configured, you can check the SA used in IPSec authentication and statistics on the RIPng packets that failed authentication. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 278 Examples in this document use interface numbers and link types of the NE40E-X8. In real world situations, the interface numbers and link types may be different from those used in this document. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 279: Example For Configuring Ripng To Filter The Received Routes

    Step 1 Configure an IPv6 address for each interface. The configurations details are not described here. Step 2 Configure basic RIPng functions. # Configure Router A. [RouterA] ripng 1 [RouterA-ripng-1] quit Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 280 [RouterB] acl ipv6 number 2000 [RouterB-acl6-basic-2000] rule deny source 2001:DB8:3::/64 [RouterB-acl6-basic-2000] rule permit [RouterB-acl6-basic-2000] quit [RouterB] ripng 1 [RouterB-ripng-1] filter-policy 2000 import [RouterB-ripng-1] quit Step 4 Verify the configuration. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 281 0 deny source 2001:DB8:3::/64 rule 1 permit interface Pos1/0/0 link-protocol ppp undo shutdown ipv6 enable ipv6 address auto link-local ripng 1 enable interface Pos2/0/0 link-protocol ppp undo shutdown Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 282 2001:DB8:3::1/64 ripng 1 enable interface Pos1/0/0 link-protocol ppp undo shutdown ipv6 enable ipv6 address auto link-local ripng 1 enable ripng 1 return Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 283: Ospf Configuration

    Configuring a non-backbone area on the border of an AS as an NSSA does not transmit routes learned from other areas in the AS but external routes imported. This reduces bandwidth and storage resource consumption on the router. 5.9 Configuring Local MT Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 284 5.16 Configuration Examples This section provides several configuration examples of OSPF together with the Networking diagram. The configuration examples explain networking requirements, configuration notes, and configuration roadmap. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 285 Area-based and interface-based packet authentication guarantees the security of packet interaction. Multicast Multicast packets are transmitted only on certain types of links to reduce the interference for some devices. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 286 After area division, route aggregation can be performed on border routers to reduce the number of LSAs advertised to other areas. Route aggregation also minimizes the influence caused by changes in the topology. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 287: Ospf Network Types

    Point-to-Multipoint (P2MP): A P2MP network must be forcibly changed from other network types. In this type of networks, Hello packets are transmitted in multicast mode Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 288: Ospf Features Supported By The Ne80E/40E

    Backing up only the OSPF configuration: After the switchover between the AMB and the SMB, OSPF performs graceful restart (GR), obtains the adjacency relationship from neighbors, and synchronizes the LSDBs. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 289 TE tunnel through related physical interfaces. The routers, however, do not have multicast forwarding entries. As a result, the multicast data packets are discarded. Services therefore become unavailable. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 290 MIGP routing table. Multicast uses routes in the MIGP routing table to forward packets. NOTE For details of local MT, refer to the chapter "IP Multicast Overview" in the HUAWEI NetEngine80E/ 40E Router Feature Description - IP Multicast. OSPF GR When a router restarts or performs the active/standby switchover, it directly ages all routing entries in the Forward Information Base (FIB) table.
  • Page 291 If only forwarding adjacency is enabled, OSPF can reach the destination by using the LSP. If only IGP Shortcut is enabled, only the router enabled with IGP Shortcut can use the LSP. NOTE For detailed configuration of this feature, refer to the HUAWEI NetEngine80E/40E Router Configuration Guide - MPLS. OSPF VPN Multi-instance OSPF supports multi-instance, which can run between PEs and CEs in VPN networks.
  • Page 292 The Generalized TTL Security Mechanism (GTSM) refers to the generic TTL security protection mechanism. GTSM protects services of the upper layer over the IP layer by checking whether Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 293: Configuring Basic Ospf Functions

    VPN instance name (if OSPF multi-instance is configured) ID of the area to which an interface belongs IP address of the network segment where an interface resides Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 294: Enabling Ospf

    The router ID of each OSPF process must be unique on the entire network. Otherwise, routers cannot establish OSPF neighbor relationships, and the routing information is incorrect. If a router ID conflict occurs, perform either of the following operations: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 295 By default, OSPF uses a 32-bit host route to advertise the IP address of a loopback interface. To advertise routes to the network segment of the loopback interface, Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 296: Optional) Creating Ospf Virtual Links

    [ dead dead-interval | hello hello-interval | retransmit retransmit-interval | smart-discover | trans-delay trans-delay-interval | [ simple [ plain plain-text | [ cipher ] cipher-text ] | { md5 | hmac-md5 | hmac-sha256 } Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 297: Optional) Configuring A Route Selection Rule On The Router

    By default, the router complies with route selection rule defined in RFC 1583. ----End 5.2.5 (Optional) Setting the OSPF Priority When multiple routing protocols are used to select routes, you can set the OSPF priority to maneuver route selection. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 298: Optional) Restricting The Flooding Of Lsa Update Packets

    This intensifies neighbor relationship interruption. To resolve this problem, you can restrict the flooding of LSA update packets to maintain neighbor relationships. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 299: Optional) Configuring The Maximum Number Of Packet Retransmission Attempts

    [ process-id ] The OSPF process view is displayed. Step 3 Run: retransmission-limit [ max-number ] The maximum number of OSPF packet retransmission attempts is set. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 300: Optional) Setting An Interval At Which An Lsa Packet Is Retransmitted To The Neighboring Router

    After virtual links are created, different default MTUs may be used on devices provided by different vendors. To ensure consistency, the MTU is set to 0 by default when the interface sends DD packets. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 301 Run the display ospf peer command. If the OSPF neighbor relationship is in the Full state, the configuration succeeds. <HUAWEI> display ospf peer OSPF Process 1 with Router ID 10.1.1.2 Neighbors Area 0.0.0.0 interface 10.1.1.2(GigabitEthernet1/0/0)'s neighbors Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 302: Configuring Ospf On The Nbma Or P2Mp Network

    Ethernet or Fiber Distributed Data packets are multicasted; DD Interface (FDDI), OSPF regards packets and LSR packets are the network as a broadcast unicasted. network by default. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 303: Default Configuration

    To configure OSPF on the NBMA or P2MP network, you need the following data. Data Number of the interface running OSPF Network type DR priority of an interface Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 304: Configuring Network Types For Ospf Interfaces

    On an interface with the broadcast network type, if a router that does not support the multicast address exists, change the network type of the interface to NBMA. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 305: Configuring Nbma Network Attributes

    The interface view is displayed. Run: ospf network-type nbma The network type of the OSPF interface is set to NBMA. Step 2 (Optional) Run: ospf timer poll interval Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 306: Configuring P2Mp Network Attributes

    The network type of the OSPF interface is configured. A P2MP network is forcibly changed from another other type of network. For details, see Configuring Network Types for OSPF Interfaces. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 307 – If an ACL does not contain any rules, all routes matching the route-policy that references the ACL will not be received or advertised by the system. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 308 Route filtering using a blacklist: Configure a rule with a smaller number and specify the action deny in this rule to filter out the unwanted routes. Then, Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 309 Run the display ospf interface command to view the network type of the interface and the priority of the interface for DR election. <HUAWEI> display ospf interface GigabitEthernet2/0/0 OSPF Process 1 with Router ID 1.1.1.1 Interfaces Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 310: Configuring An Ospf Route Selection Rule

    To configure an OSPF route selection rule, you need the following data. Data Interface cost Maximum number of equal-cost routes Equal-cost route preference Link cost adjustment value Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 311: Setting The Interface Cost

    The system view is displayed. Run: ospf [ process-id ] The OSPF process view is displayed. Run: bandwidth-reference value The bandwidth reference value is set. ----End Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 312: Configuring Equal-Cost Routes

    Route preference: Routes with lower preferences are selected for load balancing. For details about route preference configuration, see Step Interface index: If routes have the same priorities, routes with higher interface index values are selected for load balancing. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 313: Configuring A Stub Router

    By default, no router is configured as a stub router. If a router is configured as a stub router, the router keeps functioning as a stub router for 500s. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 314: Suppressing An Interface From Receiving And Sending Ospf Packets

    The system view is displayed. Step 2 Run: ospf [ process-id ] The OSPF process view is displayed. Step 3 Run: silent-interface { all | interface-typeinterface-number } Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 315: Configuring An Ospf Interface To Automatically Adjust The Link Cost

    BER of the OSPF interface reaches or falls below the lower threshold, the link quality changes from low to good. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 316 Priority : Low : 00h02m43s 5.5 Controlling OSPF Routing Information You can control the advertising and receiving of OSPF routing information and import routes of other protocols. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 317 OSPF provides loop-free intra-area routes and inter-area routes; however, OSPF cannot prevent external routing loops. Therefore, exercise caution when configuring OSPF to import external routes. For details, see "OSPF VPN" in the HUAWEI NetEngine80E/40E Router Feature Description - IP Routing.
  • Page 318 { [ number ] acl-number1 | name acl-name basic [ number acl-number2 ] } [ match-order { auto | config } ] The basic ACL view is displayed. Run: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 319 When a filtering policy of a routing protocol is used to filter routes: – If the action specified in an ACL rule is permit, a route that matches the rule will be received or advertised by the system. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 320: Configuring Ospf To Import A Default Route

    On the area border and AS border of an OSPF network generally reside multiple routers for next- hop backup or traffic load balancing. A default route can be configured to reduce routing entries and improve resource usage on the OSPF network. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 321 Step 3 Run: default-route-advertise [ [ always | permit-calculate-other ] | cost cost | type type | route-policy route-policy-name ] The default route is imported into the OSPF process. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 322: Configuring Route Summarization

    You can specify to generate a black-hole route in the RM module by using generate- null0-route, which is used to prevent routing loops. Configure ASBR route summarization. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 323: Configuring Ospf To Filter Routes Received By Ospf

    The OSPF process view is displayed. Step 3 Run any of the following commands as required: l Based on the basic ACL: Run: filter-policy { acl-number | acl-name acl-name } import Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 324 Routes received by OSPF are filtered. Run: quit Return to the system view. Run: Run acl name acl-name advance [ number acl-number2 ] [ match-order { auto | config } ] Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 325: Configuring The Router To Filter Lsas To Be Sent

    Filtering the LSAs to be sent on the local router can prevent unnecessary LSA transmission. This reduces the size of the LSDB on the neighboring router and speeds up network convergence. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 326 ACL will not be received or advertised by the system. – If the ACL referenced by the route-policy does not exist, all routes matching the route-policy will be received or advertised by the system. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 327 Then, configure another rule with a larger number in the same ACL and specify the action permit in this rule to receive or advertise the other routes. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 328: Optional) Configuring Ospf To Filter Lsas In An Area

    { [ number ] acl-number1 | name acl-name basic [ number acl- number2 ] } [ match-order { auto | config } ] The basic ACL view is displayed. Run: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 329 When a filtering policy of a routing protocol is used to filter routes: – If the action specified in an ACL rule is permit, a route that matches the rule will be received or advertised by the system. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 330 { source-ip-address source-wildcard | any } | time-range time- name | vpn-instance vpn-instance-name ] The rule for the basic ACL is configured. When a filtering policy of a routing protocol is used to filter routes: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 331 – If a route has not matched any ACL rules, the route will not be received or advertised by the system. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 332: Optional) Enabling The Mesh-Group Function

    The interfaces belong to the same area and OSPF process. The interfaces begin to exchange DD packets. The interfaces are connected to the same neighboring router. Procedure Step 1 Run: system-view Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 333: Setting The Maximum Number Of External Lsas In The Lsdb

    – display ospf [ process-id ] routing [ ip-address [ mask | mask-length ] ] [ interface interface-type interface-number ] [ nexthop nexthop-address ] – display ospf [ process-id ] routing router-id [ router-id ] Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 334: Configuring An Ospf Dynamic Hostname

    LSA, from which you can check the mapping between the router ID and the dynamic hostname. Pre-configuration Tasks Before configuring a dynamic hostname, complete the following tasks: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 335 Run the display ospf hostname-table command to check information about OSPF dynamic hostnames. <HUAWEI> display ospf hostname-table OSPF Process 1 with Router ID 1.2.3.4 Hostname table information Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 336: Configuring An Ospf Stub Area

    Configuring IP addresses for interfaces to ensure that neighboring routers are reachable at the network layer Configuring Basic OSPF Functions Data Preparation To configure a stub area, you need the following data. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 337 By default, the cost of the default route to the stub area is 1. ----End Checking the Configurations Run either of the following commands to check LSDB information. display ospf [ process-id ] lsdb [ brief ] Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 338: Configuring An Nssa

    Configuring IP addresses for interfaces to ensure that neighboring routers are reachable at the network layer Configuring Basic OSPF Functions Data Preparation To configure an NSSA, you need the following data. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 339 3600s for Type 5 LSAs so that the invalid Type 5 LSAs from other routers can be deleted in time. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 340 [ process-id ] routing router-id [ router-id ] Run the display ospf [ process-id ] interface [ all | interface-type interface-number ] [ verbose ] command to check OSPF interface information. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 341: Configuring Local Mt

    Data (Optional) Filtering list used to filter MIGP routing information Procedure Step 1 Run: system-view The system view is displayed. Step 2 Run: ospf [ process-id ] Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 342 | any } | time-range time-name ] The rule for the advanced ACL is configured. l Based on the IP prefix: Run: local-mt filter-policy ip-prefix ip-prefix-name Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 343: Configuring Bfd For Ospf

    5.10.1 Before You Start Before configuring BFD for OSPF, familiarize yourself with the usage scenario, complete the pre-configuration tasks, and obtain the data required for the configuration. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 344: Configuring Bfd For Ospf In A Specified Process

    Down, the BFD session will be dynamically deleted. Before configuring BFD for OSPF, enable BFD globally. Perform the following steps on the routers between which a BFD session is to be created. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 345 A short interval at which BFD packets are transmitted can be configured for a link that has a higher requirement for reliability. A long interval at which BFD packets are transmitted can be configured for a link that has a lower requirement for reliability. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 346: Configuring Bfd For Ospf On A Specified Interface

    After BFD for OSPF is configured on a specified interface and the interface becomes faulty, the router rapidly detects the fault and instructs OSPF to recalculate routes. This speeds up OSPF Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 347 A short interval at which BFD packets are transmitted can be configured for a link that has a higher requirement for reliability. A long interval at which BFD packets are transmitted can be configured for a link that has a lower requirement for reliability. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 348 ----End Example If the BFD session is successfully created, information about BFD for OSPF shows that the BFD session is Up on the local router. <HUAWEI> display ospf bfd session all OSPF Process 1 with Router ID 3.3.3.3 NeighborId:2.2.2.2 AreaId:0.0.0.0...

  • Page 349: Configuring Ospf Ip Frr

    To configure OSPF IP FRR, you need the following data. Data OSPF process ID (Optional) Cost of the interface (Optional) BFD parameters (Optional) Name of the route policy Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 350: Enabling Ospf Ip Frr

    LFA algorithm is used to calculate the nexthop and outbound interface. Step 6 (Optional) Run: frr-policy route route-policy route-policy-name Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 351: Optional) Binding Ospf Ip Frr And Bfd

    [ process-id | router-id router-id | vpn-instance vpn-instance-name ] The OSPF process is enabled, and the OSPF view is displayed. Run: bfd all-interfaces enable BFD is enabled in an OSPF process. Run: bfd all-interfaces frr-binding Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 352: Optional) Disabling Ospf Ip Frr On An Interface

    The view of the OSPF IP FRR-enabled interface is displayed. Step 3 Run: ospf frr block The OSPF IP FRR function is disabled on the specified interface. ----End Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 353 OSPF IP FRR is enabled. ----End Example View the routes to the specified OSPF device. <HUAWEI> display ospf routing router-id 2.2.2.2 OSPF Process 1 with Router ID 1.1.1.1 Destination : 2.2.2.2 Route Type : Intra-area Area : 0.0.0.0...

  • Page 354: Enabling Ospf Gr

    OSPF supports GR using Type 9 LSAs. l OSPF supports TE using Type 10 LSAs. Before configuring OSPF GR, you must enable opaque LSA capability running the opaque- capability enable command. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 355: Optional) Configuring The Gr Session Parameters On The Restarter

    5.12.4 (Optional) Configuring GR Session Parameters on the Helper This part describes how to set GR session parameters (including the filtering policies, checks the LSAs outside the AS, and Planned GR) on the Helper. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 356 [ rule-id ] { deny | permit } protocol [ source { source-ip-address source-wildcard | any } | time-range time-name ] The rule for the advanced ACL is configured. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 357 Virtual neighbors Sham-link neighbors : 0 Total neighbors Number of restarting neighbors : 0 Last exit reason: On graceful restart : successful exit On Helper : none Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 358: Improving Security Of An Ospf Network

    OSPF process ID (Optional) Names of VPN instances of OSPF (Optional) TTL value to be checked ID of an OSPF area that needs to be configured with authentication Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 359: Configuring The Ospf Gtsm Functions

    Therefore, if the private network policy or the public network policy is configured only, it is recommended to set the default action performed on the packets that do not match the GTSM Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 360: Configuring The Authentication Mode

    Run: system-view The system view is displayed. Run: ospf [ process-id ] The OSPF process view is displayed. Run: area area-id The OSPF area view is displayed. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 361 { plain plain-text | [ cipher ] cipher-text } ] The MD5 authentication is configured for the OSPF interface. – Run: ospf authentication-mode null The non-authentication mode is configured for the OSPF interface. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 362 For example: <HUAWEI> display gtsm statistics all GTSM Statistics Table ---------------------------------------------------------------- SlotId Protocol Total Counters Drop Counters Pass Counters ---------------------------------------------------------------- BGPv6 OSPF OSPFv3 ---------------------------------------------------------------- Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 363: Configuring The Network Management Function Of Ospf

    OSPF MIB to select the process to which it is bound. Procedure Step 1 Run: system-view The system view is displayed. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 364: Configuring Ospf Trap

    Step 2 Run: ospf [ process-id ] The OSPF process view is displayed. Step 3 Run: enable log [ config | error | state | snmp-trap ] Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 365 After the reset ospf process command is used to restart OSPF, the following situations may occur: – If the router ID is changed, a new router ID will take affect after the reset ospf process command is run. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 366: Clearing Ospf

    5.16.1 Example for Configuring Basic OSPF Functions This section provides an example for configuring basic OSPF functions. Detailed operations include enabling OSPF on each router and specifying network segments in different areas. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 367 Router ID 4.4.4.4 of Router D; OSPF process ID 1; network segments 192.168.2.0/24 and 172.17.1.0/24 of Area 2 Router ID 5.5.5.5 of Router E; OSPF process ID 1; network segment 172.16.1.0/24 of Area Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 368 [RouterE-ospf-1] area 1 [RouterE-ospf-1-area-0.0.0.1] network 172.16.1.0 0.0.0.255 [RouterE-ospf-1-area-0.0.0.1] quit # Configure Router F. [RouterF] router id 6.6.6.6 [RouterF] ospf [RouterF-ospf-1] area 2 [RouterF-ospf-1-area-0.0.0.2] network 172.17.1.0 0.0.0.255 [RouterF-ospf-1-area-0.0.0.2] quit Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 369 # Check the routing table on Router D and perform the ping operation to test the connectivity. [RouterD] display ospf routing OSPF Process 1 with Router ID 4.4.4.4 Routing Tables Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 370 Configuration file of Router B sysname RouterB router id 2.2.2.2 interface Pos1/0/0 link-protocol ppp undo shutdown ip address 192.168.0.2 255.255.255.0 interface Pos2/0/0 link-protocol ppp undo shutdown ip address 192.168.2.1 255.255.255.0 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 371 Configuration file of Router E sysname RouterE router id 5.5.5.5 interface GigabitEthernet2/0/0 undo shutdown ip address 172.16.1.2 255.255.255.0 ospf 1 area 0.0.0.1 network 172.16.1.0 0.0.0.255 return Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 372: Example For Configuring Ospf Virtual Links

    Configure a virtual link between Router A and Router B to connect a non-backbone area to the backbone area. Data Preparation To complete the configuration, you need the following data: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 373 [RouterB-ospf-1-area-0.0.0.1] vlink-peer 1.1.1.1 [RouterB-ospf-1-area-0.0.0.1] quit Step 5 Verify the configuration. # Check the routing table on Router A. [RouterA] display ospf routing OSPF Process 1 with Router ID 1.1.1.1 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 374 192.168.1.2 255.255.255.0 ospf 1 router-id 2.2.2.2 area 0.0.0.1 network 192.168.1.0 0.0.0.255 vlink-peer 1.1.1.1 area 0.0.0.2 network 172.16.0.0 0.0.255.255 return Configuration file of Router C sysname RouterC Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 375: Example For Configuring Dr Election Of Ospf

    The configuration roadmap is as follows: Configure the router ID on each router, enable OSPF, and specify the network segment. Check the DR/BDR status of each router with the default priority. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 376 State: Full Mode:Nbr is Master Priority: 1 DR: 192.168.1.4 BDR: 192.168.1.3 MTU: 0 Dead timer due in 32 Retrans timer interval: 5 Neighbor is up for 00:04:21 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 377 Dead timer due in 35 Retrans timer interval: 5 Neighbor is up for 00:11:19 Authentication Sequence: [ 0 ] Router ID: 3.3.3.3 Address: 192.168.1.3 State: Full Mode:Nbr is Slave Priority: 2 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 378 DR or BDR. Therefore, they need not exchange LSAs. If the status of the OSPF interface is DROther, it indicates that it is neither DR nor BDR. ----End Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 379 192.168.1.0 0.0.0.255 return Configuration file of Router D sysname RouterD router id 4.4.4.4 interface GigabitEthernet1/0/0 undo shutdown ip address 192.168.1.4 255.255.255.0 ospf 1 area 0.0.0.0 network 192.168.1.0 0.0.0.255 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 380: Example For Configuring Ospf Load Balancing

    IP Address RouterA POS1/0/0 10.1.1.1/24 RouterC POS1/0/0 10.1.2.2/24 POS2/0/0 10.1.2.1/24 POS2/0/0 192.168.1.1/ POS3/0/0 10.1.3.1/24 RouterD POS1/0/0 10.1.3.2/24 GE4/0/0 172.16.1.1./ POS2/0/0 192.168.2.1/ RouterB POS1/0/0 10.1.1.2/24 RouterE POS1/0/0 192.168.0.2/ Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 381: Device Interface

    Step 2 Configure basic OSPF functions. This example assumes that you know the configuration method and no details are provided here. Step 3 View the routing table of Router A. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 382 Step 5 Configure the priority for equal-cost routes on Router A. [RouterA] ospf 1 [RouterA-ospf-1] nexthop 10.1.1.2 weight 2 [RouterA-ospf-1] nexthop 10.1.2.2 weight 1 [RouterA-ospf-1] nexthop 10.1.3.2 weight 1 [RouterA-ospf-1] quit Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 383 10.1.1.2 weight 2 nexthop 10.1.2.2 weight 1 nexthop 10.1.3.2 weight 1 area 0.0.0.0 network 10.1.1.0 0.0.0.255 network 10.1.2.0 0.0.0.255 network 10.1.3.0 0.0.0.255 network 172.16.1.0 0.0.0.255 return Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 384 192.168.2.1 255.255.255.0 ospf 1 router-id 4.4.4.4 area 0.0.0.0 network 10.1.3.0 0.255.255.255 network 192.168.2.0 0.0.255.255 return Configuration file of Router E sysname RouterE interface GigabitEthernet3/1/0 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 385: Example For Configuring An Ospf Stub Area

    Figure 5-10 Configuring an OSPF stub area Area0 POS1/0/0 192.168.0.1/24 RouterA RouterB POS1/0/0 192.168.0.2/24 POS2/0/0 POS2/0/0 192.168.1.1/24 192.168.2.1/24 POS1/0/0 POS1/0/0 192.168.1.2/24 192.168.2.2/24 RouterD RouterC ASBR Stub Area2 Area1 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 386 192.168.0.0/24 Inter-area 192.168.1.1 1.1.1.1 0.0.0.1 192.168.1.0/24 Stub 192.168.1.2 3.3.3.3 0.0.0.1 192.168.2.0/24 Inter-area 192.168.1.1 1.1.1.1 0.0.0.1 Routing for ASEs Destination Cost Type NextHop AdvRouter 200.0.0.0/8 Type1 192.168.1.1 4.4.4.4 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 387 OSPF Process 1 with Router ID 3.3.3.3 Routing Tables Routing for Network Destination Cost Type NextHop AdvRouter Area 0.0.0.0/0 Inter-area 192.168.1.1 1.1.1.1 0.0.0.1 192.168.1.0/24 Stub 192.168.1.2 3.3.3.3 0.0.0.1 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 388 192.168.2.1 255.255.255.0 ospf 1 area 0.0.0.0 network 192.168.0.0 0.0.0.255 area 0.0.0.2 network 192.168.2.0 0.0.0.255 return Configuration file of Router C sysname RouterC router id 3.3.3.3 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 389: Example For Configuring An Ospf Nssa

    LSAs advertised to Area 1 without affecting the route reachability, configure Area 1 as an NSSA and configure Router A as an LSA translator in the NSSA. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 390 For details about the configuration, see the configuration files. Step 2 Configure basic OSPF functions. # Configure Router A. [RouterA] router id 1.1.1.1 [RouterA] ospf 1 [RouterA-ospf-1] area 0 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 391 Step 3 Configure Area 1 as an NSSA. # Configure Router A. [RouterA] ospf 1 [RouterA-ospf-1] area 1 [RouterA-ospf-1-area-0.0.0.1] nssa [RouterA-ospf-1-area-0.0.0.1] quit # Configure Router B. [RouterB] ospf 1 [RouterB-ospf-1] area 1 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 392 The command output shows that Router C has imported the AS external route and the router with the router ID of 2.2.2.2 will advertise LSAs carrying information about the imported AS Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 393 192.168.0.1 255.255.255.0 interface Pos2/0/0 link-protocol ppp undo shutdown ip address 192.168.3.1 255.255.255.0 interface Pos3/0/0 link-protocol ppp undo shutdown ip address 192.168.1.1 255.255.255.0 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 394 192.168.0.2 255.255.255.0 interface Pos2/0/0 link-protocol ppp undo shutdown ip address 192.168.2.2 255.255.255.0 ospf 1 area 0.0.0.0 network 192.168.0.0 0.0.0.255 network 192.168.2.0 0.0.0.255 return Configuration file of Router D Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 395: Example For Configuring Local Ospf Mt

    RM module creates a separate MIGP routing table for the multicast protocol, calculates the physical outbound interface for the route, and adds the physical interface to the MIGP routing table for multicast forwarding. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 396 Table 5-3 IP address of each interface router IP Address of Loopback 0 Router A 1.1.1.1/32 Router B 2.2.2.2/32 Router C 3.3.3.3/32 Router D 4.4.4.4/32 Router E 5.5.5.5/32 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 397 Upstream Interface: GigabitEthernet2/0/0 List of 1 downstream interface GigabitEthernet1/0/0 00002. (192.168.3.9, 224.31.31.31) Uptime: 15:03:04 Upstream Interface: GigabitEthernet2/0/0 List of 1 downstream interface GigabitEthernet1/0/0 00003. (192.168.3.10, 224.31.31.31) Uptime: 15:03:04 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 398 [RouterD-mpls] mpls rsvp-te [RouterD-mpls] quit [RouterD] interface Gigabitethernet 1/0/0 [RouterD-GigabitEthernet1/0/0] mpls [RouterD-GigabitEthernet1/0/0] mpls te [RouterD-GigabitEthernet1/0/0] mpls rsvp-te [RouterD-GigabitEthernet1/0/0] quit [RouterD] ospf 1 [RouterD-ospf-1] opaque-capability enable [RouterD-ospf-1] area 0.0.0.0 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 399 # Enable local OSPF MT on Router B. [RouterB] ospf [RouterB-ospf-1] local-mt enable [RouterB-ospf-1] quit Step 7 Verify the configuration. # Check the multicast routing table on Router C. [RouterC] display multicast routing-table Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 400 1.1.1.1 255.255.255.255 ospf 1 area 0.0.0.0 network 172.16.1.0 0.0.0.255 network 10.0.0.0 0.0.0.255 return Configuration file of Router B sysname RouterB router id 2.2.2.2 multicast routing-enable Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 401 3.3.3.3 mpls mpls te mpls rsvp-te ospf 1 opaque-capability enable area 0.0.0.0 network 10.0.1.0 0.0.0.255 network 10.0.2.0 0.0.0.255 network 3.3.3.3 0.0.0.0 mpls-te enable Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 402 1 opaque-capability enable area 0.0.0.0 network 10.0.2.0 0.0.0.255 network 10.0.3.0 0.0.0.255 network 4.4.4.4 0.0.0.0 mpls-te enable C-BSR GigabitEthernet1/0/0 C-RP GigabitEthernet1/0/0 return Configuration file of Router E Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 403: Example For Configuring Bfd For Ospf

    Router B. When the link between Router A and Router B fails, BFD can rapidly detect the failure and report it to OSPF. Traffic is then switched to the secondary link. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 404 # Check the OSPF neighbor relationships on Router A. <RouterA> display ospf peer OSPF Process 1 with Router ID 1.1.1.1 Neighbors Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 405 [RouterA-ospf-1] quit # Configure Router B. [RouterB] bfd [RouterB-bfd] quit [RouterB] ospf [RouterB-ospf-1] bfd all-interfaces enable [RouterB-ospf-1] bfd all-interfaces min-tx-interval 500 min-rx-interval 500 detect- multiplier 4 [RouterB-ospf-1] quit Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 406 Router B takes effect after the primary link fails, and the next hop address of the route to 172.16.1.0/24 is 1.1.1.2. ----End Configuration Files Configuration file of Router A sysname RouterA router id 1.1.1.1 interface GigabitEthernet1/0/0 undo shutdown Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 407 GigabitEthernet1/0/0 undo shutdown ip address 1.1.1.2 255.255.255.0 interface GigabitEthernet2/0/0 undo shutdown ip address 2.2.2.1 255.255.255.0 ospf 1 area 0.0.0.0 network 1.1.1.0 0.0.0.255 network 2.2.2.0 0.0.0.255 return Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 408: Example For Configuring Ospf Ip Frr

    Router ID (4.4.4.4), OSPF process ID (1), network segment address in Area 1 (10.4.1.0),interface cost (as shown in Figure 5-14), and destination address of the imported static route (172.16.1.1/32) of Router D Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 409 : ASBR : 00h31m27s URT Cost : 59 NextHop : 10.2.1.2 Interface : GigabitEthernet1/0/2 Backup Nexthop : 10.1.1.2 Backup Interface : GigabitEthernet1/0/1 Backup Type : LFA LINK Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 410 10.3.1.0 0.0.0.255 network 10.1.1.0 0.0.0.255 return Configuration file of Router C sysname RouterC router-id 3.3.3.3 interface GigabitEthernet1/0/1 undo shutdown ip address 10.2.1.2 255.255.255.0 ospf cost 4 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 411: Example For Configuring Ospf Gr

    SMB that back up each other. The routers interconnect by means of OSPF, and are enabled with It is required that service forwarding be not interrupted when Router A restarts the OSPF process in GR mode or performs the active/standby switchover. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 412 Step 3 (Optional) Enable forcible active/standby switchover on Router A and configure the SMB to automatically synchronize information on the AMB. By default, the forcible active/standby switchover is enabled. [RouterA] slave switchover enable Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 413 Router D and Router B to check the OSPF neighbor relationship with Router A. The statuses of the OSPF neighbor relationship are displayed as Full. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 414 10.1.1.2 255.255.255.0 interface Pos2/0/0 link-protocol ppp ip address 10.1.2.1 255.255.255.0 ospf 1 opaque-capability enable graceful-restart area 0.0.0.0 network 10.1.2.0 0.0.0.255 area 0.0.0.1 network 10.1.1.0 0.0.0.255 return Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 415: Example For Configuring Ospf-Bgp

    10.1.1.0 0.0.0.255 return 5.16.11 Example for Configuring OSPF-BGP This part provides an example for configuring OSPF-BGP association to prevent network traffic from being interrupted after router are restarted. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 416: Network Requirements

    The router ID of Router A is 1.1.1.1, the AS number is 10, the OSPF process number is 1, and the network segments in Area 0 are 10.1.1.0/30 and 10.1.2.0/30. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 417 [RouterC-LoopBack0] ip address 3.3.3.3 32 [RouterC-LoopBack0] quit [RouterC] bgp 10 [RouterC-bgp] router-id 3.3.3.3 [RouterC-bgp] peer 1.1.1.1 as-number 10 [RouterC-bgp] peer 1.1.1.1 connect-interface LoopBack 0 [RouterC-bgp] peer 2.2.2.2 as-number 10 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 418 Interface 1.1.1.1/32 Direct 0 127.0.0.1 InLoopBack0 2.2.2.2/32 OSPF 10.1.1.2 Pos1/0/0 4.4.4.0/24 IBGP 4.4.4.4 Pos1/0/0 4.4.4.4/32 OSPF 10.1.1.2 Pos1/0/0 5.5.5.0/24 EBGP 10.2.1.2 Pos1/0/0 10.1.1.0/30 Direct 0 10.1.1.1 Pos1/0/0 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 419 # View the routing table of Router A. As shown in the routing table, the route to the network 10.3.1.0 can be learned through BGP, and the outgoing interface is POS 2/0/0. [RouterA] display ip routing-table Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 420 Direct 0 10.1.1.2 Pos1/0/0 10.1.1.1/32 Direct 0 10.1.1.1 Pos1/0/0 10.1.1.2/32 Direct 0 127.0.0.1 InLoopBack0 10.1.2.0/30 OSPF 10.1.1.1 Pos1/0/0 10.1.3.0/30 Direct 0 10.1.3.1 Pos2/0/0 10.1.3.1/32 Direct 0 127.0.0.1 InLoopBack0 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 421 10.1.1.0 0.0.0.3 network 10.1.2.0 0.0.0.3 return Configuration file of Router B sysname RouterB router id 2.2.2.2 interface Pos1/0/0 link-protocol ppp undo shutdown ip address 10.1.1.2 255.255.255.252 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 422 2.2.2.2 connect-interface LoopBack 0 peer 4.4.4.4 as-number 10 peer 4.4.4.4 connect-interface LoopBack 0 ipv4-family unicast undo synchronization peer 1.1.1.1 enable peer 2.2.2.2 enable peer 4.4.4.4 enable ospf 1 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 423 0.0.0.0 network 4.4.4.4 0.0.0.0 network 10.1.3.0 0.0.0.3 network 10.1.4.0 0.0.0.3 return Configuration file of Router E sysname RouterE router id 5.5.5.5 interface Pos1/0/0 link-protocol ppp undo shutdown Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 424: Example For Configuring Ospf Gtsm

    GE1/0/0 GE3/0/0 192.168.1.1/24 10.1.1.2/8 10.1.1.1/8 Network POS2/0/0 192.168.2.1/24 RouterD RouterA POS2/0/0 192.168.2.2/24 Area0 Virtual Link RouterC Area1 Configuration Roadmap The configuration roadmap is as follows: Configure OSPF. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 425 # On Router C, run the display gtsm statistics all command. You can view GTSM statistics on Router C. The default behavior is pass, no illegal packets exist, and the number of discarded packets is 0. <RouterC> display gtsm statistics all Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 426 GigabitEthernet3/0/0 undo shutdown ip address 10.1.1.1 255.0.0.0 interface Pos1/0/0 link-protocol ppp undo shutdown ip address 192.168.1.1 255.255.255.0 interface Pos2/0/0 link-protocol ppp undo shutdown ip address 192.168.2.1 255.255.255.0 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 427 2 return Configuration file of Router D sysname RouterD router id 4.4.4.4 interface GigabitEthernet1/0/0 undo shutdown ip address 10.1.1.2 255.0.0.0 ospf 1 area 0.0.0.0 network 10.1.1.2 0.0.0.255 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 428 HUAWEI NetEngine80E/40E Router Configuration Guide - IP Routing 5 OSPF Configuration ospf valid-ttl-hops 3 return Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 429: Ospfv3 Configuration

    6.8 Optimizing an OSPFv3 Network By configuring OSPFv3 functions in special network environments, you can adjust and optimize the OSPFv3 network performance. 6.9 Configuration OSPFv3 GR Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 430 6.16 Configuration Examples This section provides several configuration examples of OSPFv3 together with the Networking diagram. The configuration examples explain networking requirements, configuration notes, and configuration roadmap. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 431 Then, SPF needs to be calculated again. If the router recovers after a short period of time, the neighbor relationship becomes unstable. This results in route flapping. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 432: Configuring Basic Ospfv3 Functions

    IDs. OSPFv3 process ID is set when OSPFv3 is enabled and is only locally valid. It does not affect the packet exchange with other routers. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 433: Enabling Ospfv3 On An Interface

    Procedure Step 1 Run: system-view The system view is displayed. Step 2 Run: interface interface-type interface-number The interface view is displayed. Step 3 Run: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 434: Entering The Ospfv3 Area View

    An OSPFv3 area cannot be deleted directly. Only after all the configurations in the area view are removed and the status of the related interfaces in this area become Down, this area is automatically removed. ----End Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 435 By establishing and maintaining OSPFv3 neighbor relationships or adjacencies, you can build OSPFv3 networks. 6.3.1 Before You Start When setting parameters on an interface, ensure that these parameters are consistent with those on the adjacent router. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 436: Configuring The Interval For Sending Hello Packets

    DR and the BDR. RFC 2328 requires that the Hello timer values of neighbors be consistent. The value of the Hello timer is inversely proportional to the route convergence speed and network load. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 437: Configuring Dead Time Of Neighbor Relationship

    After a router sends an LSA to its neighbor, the router expects to receive an LSAck packet from its neighbor. If the router does not receive an LSAck packet within the LSA retransmission interval, it retransmits the LSA to the neighbor. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 438: Configuring The Delay For Transmitting Lsas On The Interface

    The interface view is displayed. Step 3 Run: ospfv3 trans-delay interval [ instance instance-id ] The delay in transmitting LSAs on the interface is set. ----End Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 439 Data Preparation To configure OSPFv3 area attributes, you need the following data. Data Areas to be defined as stub areas Metrics of default routes sent to stub areas Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 440: Configuring Ospfv3 Stub Areas

    Context After OSPFv3 areas are defined, OSPFv3 route update between non-backbone areas is implemented through a backbone area. Then, OSPFv3 requires that all non-backbone areas Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 441 ] external [ ipv6-address prefix-length ] [ link-state-id ] Run the commands as follow to check the OSPFv3 routing table: – display ospfv3 [ process-id ] routing uninstalled Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 442: Configuring Ospfv3 Nssa Areas

    Derived from a stub area, an NSSA allows AS external routes to be imported; an ASBR advertises Type 7 NSSA LSAs in the local NSSA. Procedure Step 1 Run: system-view Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 443 [ uninstalled ] | ipv6-address prefix-length | intra-routes | inter-routes | ase-routes | nssa-routes ] ----End 6.6 Configuring OSPFv3 Route Attributes By setting OSPFv3 route attributes, you can change OSPFv3 routing policies to meet the requirements of complex networks. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 444 You can control route calculation by setting the link cost of OSPFv3 on different interfaces. Procedure Step 1 Run: system-view The system view is displayed. Step 2 Run: interface interface-type interface-number Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 445 The smaller the weight value, the higher the preference of the route. The default weight value is 255, which indicates that load balancing is implemented regardless of the route preferences. ----End Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 446 Through the configuration in this section, you can control the advertising and receiving of OSPFv3 routing information and configure OSPFv3 to import external routes. Pre-configuration Tasks Before controlling OSPFv3 routing information, complete the following tasks: Enabling IPv6 capability Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 447: Configuring Ospfv3 Route Aggregation

    Perform the following steps on the ABR that runs OSPFv3: Run: system-view The system view is displayed. Run: ospfv3 [ process-id ] The OSPFv3 view is displayed. Run: area area-id Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 448: Configuring Ospfv3 To Filter The Received Routes

    Context After receiving LSAs, OSPFv3 determines whether to add the calculated routes to the local routing table according to the filtering policy. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 449 Route filtering using a blacklist: Configure a rule with a smaller number and specify the action deny in this rule to filter out the unwanted routes. Then, configure another Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 450 Then, configure another rule with a larger number in the same ACL and specify the action deny in this rule to filter out unwanted routes. l Based on the IP prefix: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 451: Configuring Ospfv3 To Import External Routes

    Importing IBGP routes in OSPFv3 process can lead to routing loops. Step 6 (Optional) Run: default-route-advertise [ always | cost cost | type type | tag tag | route-policy route-policy-name [ match-any ] ] Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 452 Then, configure another rule with a larger number in the same ACL and specify the action deny in this rule to filter out unwanted routes. l Configure an advanced ACL: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 453 [ protocol [ process-id ] ] The imported external routes are filtered. After you run the import-route command on an OSPFv3 device to import external routes, the router becomes an ASBR. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 454: Optional) Configuring Ospfv3 To Filter Lsas In An Area

    { acl6-number | acl6-name acl6-name } import The filter incoming Type 3 LSAs in the area are filtered. Run: quit Return to the OSPFv3 view. Run: quit Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 455 – Configure an advanced ACL: Run: filter acl6-name acl6-name import The filter incoming Type 3 LSAs in the area are filtered. Run: quit Return to the OSPFv3 view. Run: quit Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 456 Filter outgoing Type 3 LSAs in the area, run any of the following commands as required: – Configure a basic ACL: Run: filter { acl6-number | acl6-name acl6-name } export Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 457 Then, configure another rule with a larger number in the same ACL and specify the action deny in this rule to filter out unwanted routes. – Configure an advanced ACL: Run: filter acl6-name acl6-name export Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 458 – Based on the IP prefix: Run: filter ipv6-prefix ipv6-prefix-name export The filter outgoing Type 3 LSAs in the area are filtered. – Based on the Route-Policy: Run: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 459 By adjusting the OSPFv3 timer, you can change the convergence speed of an OSPFv3 network and the network overload caused by protocol packets. On low-speed links, you need to consider Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 460: Configuring The Spf Timer

    Adjusting the SPF delay and hold interval can suppress frequent network changes to avoid resource consumption. Procedure Configure an SPF normal timer. Run: system-view The system view is displayed. Run: ospfv3 [ process-id ] The OSPFv3 view is displayed. Run: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 461: Setting The Interval For Receiving Lsas

    The interval for receiving LSAs is set. ----End 6.8.4 Configuring an Intelligent Timer for Generating LSAs Configuring an intelligent timer for generating LSAs speeds up network convergence. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 462: Suppressing An Interface From Sending And Receiving Ospfv3 Packets

    OSPFv3 packets. Procedure Step 1 Run: system-view The system view is displayed. Step 2 Run: ospfv3 [ process-id ] The OSPFv3 view is displayed. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 463: Configuring Dr Priority Of An Interface

    After the DR priority is changed, you can re-elect a DR or BDR through the following methods, which, however, will result in the interruption of the OSPFv3 neighbor relationship between routers and therefore are used only when necessary. Restarting all routers. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 464: Configuring Stub Routers

    Step 1 Run: system-view The system view is displayed. Step 2 Run: interface interface-type interface-number The interface view is displayed. Step 3 Run: ospfv3 mtu-ignore [ instance instance-id ] Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 465 After OSPFv3 restarts, the GR restarter and the GR helper keep the neighbor relationship, exchange routing information, synchronize the database, and update the routing table and the forwarding table. OSPFv3 fast convergence is therefore realized. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 466: Enabling Ospfv3 Gr

    The GR Helper, which is a neighbor of the GR Restarter, can identify GR signaling, maintain the adjacency with the Restarter during the active/standby switchover of the Restarter, and help the Restarter to restore the network topology. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 467 The basic ACL view is displayed. rule [ rule-id ] { deny | permit } protocol [ source { source-ipv6-address prefix-length | source-ipv6-address/prefix-length | any } | time-range time- name ] Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 468 BFD notifies the routing protocol of the failure, which triggers fast convergence. When the neighbor relationship is Down, the BFD session is deleted dynamically. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 469 On the two routers that need to establish a BFD session, you can configure BFD for all the interfaces in a certain OSPFv3 process. Procedure Step 1 Run: system-view The system view is displayed. Step 2 Run: BFD is globally configured. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 470: Configuring Ospfv3 Bfd Parameters At Process Level

    A short interval at which BFD packets are transmitted can be configured for a link that has a higher requirement for reliability. A long interval at which BFD packets are transmitted can be configured for a link that has a lower requirement for reliability. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 471: Enabling Ospfv3 Bfd At Interface Level

    Step 4 Run: interface interface-type interface-number The interface view is displayed. Step 5 Run: ospfv3 bfd enable [ instance instance-id ] OSPFv3 BFD is enabled on the interface. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 472: Configuring Ospfv3 Bfd Parameters At Interface Level

    A short interval at which BFD packets are transmitted can be configured for a link that has a higher requirement for reliability. A long interval at which BFD packets are transmitted can be configured for a link that has a lower requirement for reliability. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 473 6.11.1 Before You Start Before configuring OSPFv3 IP FRR, familiarize yourself with the usage scenario, complete the pre-configuration tasks, and obtain the data required for the configuration. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 474: Enabling Ospfv3 Ip Frr

    OSPFv3 can fast switch the traffic to a backup link. Procedure Step 1 Run: system-view The system view is displayed. Step 2 Run: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 475: Optional) Binding Ospfv3 Ip Frr And Bfd

    BFD parameters set on the interface. Procedure Binding OSPFv3 IP FRR and BFD in a specified process . Run: system-view The system view is displayed. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 476: Optional) Disabling Ospfv3 Ip Frr On An Interface

    OSPFv3 IP FRR can be disabled on an interface of a specific device that is running important services and resides on an FRR backup link. This setting prevents the device connected to this Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 477 Backup NextHop is address of the backup next hop, Backup Interface is outbound interface of the backup next hop, Backup Type is type of the backup next hop. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 478: Configuring Ospfv3 Ipsec

    ESP authentication key (in the format of a string) used for protecting incoming and outgoing traffic AH authentication key (in the hexadecimal format) used for protecting incoming and outgoing traffic Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 479: Enabling Ipsec In An Ospfv3 Process

    The system view is displayed. Step 2 Run: ospfv3 [ process-id ] The OSPFv3 view is displayed. Step 3 Run: area area-id The OSPFv3 area view is displayed. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 480: Enabling Ipsec On An Interface

    Virtual Link. Procedure Step 1 Run: system-view The system view is displayed. Step 2 Run: ospfv3 [ process-id ] The OSPFv3 view is displayed. Step 3 Run: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 481: Enabling Ipsec On The Sham Link

    OSPFv3 process, OSPFv3 area, OSPFv3 interface, OSPFv3 virtual link, and OSPFv3 sham link. Prerequisites The OSPFv3 IPSec has been configured. Perform the following steps on the router that runs OSPFv3. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 482 Number of LSA 4. Checksum Sum 0x23AC8 Number of Unknown LSA 0 Area Bdr Router count: 0 Area ASBdr Router count: 1 IP security association configured: sa4 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 483: Improving Ospfv3 Network Security

    6 OSPFv3 Configuration Run the display ospfv3 interface command, and you can view the SA configured in an OSPFv3 interface. For example: <HUAWEI> display ospfv3 interface gigabitethernet 1/0/0 GigabitEthernet1/0/0 is up, line protocol is up Interface ID 518 IPv6 Prefixes...
  • Page 484 ID of the OSPFv3 area in which authentication is to be configured Numbers of the OSPFv3 interfaces on which authentication is to be configured Authentication mode and password Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 485: Configuring Ospfv3 Gtsm

    Open Shortest Path First version 3 (OSPFv3) supports packet authentication, enabling routers to receive only the OSPFv3 packets that are authenticated. If packets fail to be authenticated, Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 486 [ process-id ] The OSPFv3 process view is displayed. Run: authentication-mode { hmac-sha256 key-id key-id { plain plain-text | [ cipher ] cipher-text } | keychain keychain-name } Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 487 OSPFv3 packets. <HUAWEI> display gtsm statistics all GTSM Statistics Table ---------------------------------------------------------------- SlotId Protocol Total Counters Drop Counters Pass Counters ---------------------------------------------------------------- BGPv6 OSPF OSPFv3 ---------------------------------------------------------------- Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 488: Configuring The Network Management Function Of Ospfv3

    OSPFv3 MIB to select the process to which it is bound. Procedure Step 1 Run: system-view The system view is displayed. Step 2 Run: ospfv3 mib-binding process-id OSPFv3 MIB binding is configured. ----End Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 489: Configuring Ospfv3 Trap

    6.15 Maintaining OSPFv3 Maintaining OSPFv3 and Debugging OSPFv3 involve resetting OSPFv3. 6.15.1 Resetting OSPFv3 Restarting OSPFv3 can reset OSPFv3. In addition, you can reset OSPFv3 through GR. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 490 Router B and Router C serve as ABRs to forward the inter-area routes. It is required that Area 2 be configured as a stub area to decrease the LSAs advertised to this area, without affecting route reachability. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 491 For configuration details, see "Configuration Files" in this section. Step 2 Configure basic OSPFv3 functions. # Configure Router A. [RouterA] ipv6 [RouterA] ospfv3 [RouterA-ospfv3-1] router-id 1.1.1.1 [RouterA-ospfv3-1] quit Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 492 OSPFv3 Area (0.0.0.2) Neighbor ID State Dead Time Interface Instance ID 4.4.4.4 Full/ - 00:00:33 Pos2/0/0 # Display the OSPFv3 routing table of Router D. [RouterD] display ospfv3 routing Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 493 # Configure Router C and configure Area 2 as a totally stub area. [RouterC] ospfv3 [RouterC-ospfv3-1] area 2 [RouterC-ospfv3-1-area-0.0.0.2] stub no-summary [RouterC-ospfv3-1-area-0.0.0.2] quit Step 5 Verify the configuration. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 494 2001:DB8:1::1/64 ospfv3 1 area 0.0.0.0 interface Pos2/0/0 link-protocol ppp undo shutdown ipv6 enable ipv6 address 2001:DB8:2::1/64 ospfv3 1 area 0.0.0.1 ospfv3 1 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 495: Example For Configuring Ospfv3 Dr Election

    Router B is 0 so that it cannot be elected as the DR. Router D does not have a priority and the priority is 1 by default. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 496 [RouterA-ospfv3-1] router-id 1.1.1.1 [RouterA-ospfv3-1] quit [RouterA] interface GigabitEthernet 1/0/0 [RouterA-GigabitEthernet1/0/0] ospfv3 1 area 0 [RouterA-GigabitEthernet1/0/0] quit # Configure Router B, enable OSPFv3, and set its Router ID to 2.2.2.2. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 497 [RouterA] interface GigabitEthernet 1/0/0 [RouterA-GigabitEthernet1/0/0] ospfv3 dr-priority 100 [RouterA-GigabitEthernet1/0/0] quit # Set the DR priority of Router B to 0. [RouterB] interface GigabitEthernet 1/0/0 [RouterB-GigabitEthernet1/0/0] ospfv3 dr-priority 0 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 498 Dead Time Interface Instance ID 1.1.1.1 Full/DR 00:00:39 GE1/0/0 2.2.2.2 2-Way/DROther 00:00:35 GE1/0/0 3.3.3.3 Full/Backup 00:00:39 GE1/0/0 ----End Configuration Files Configuration file of Router A sysname RouterA ipv6 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 499 Configuration file of Router D sysname RouterD ipv6 interface GigabitEthernet1/0/0 undo shutdown ipv6 enable ipv6 address 2001:DB8::4/64 ospfv3 1 area 0.0.0.0 ospfv3 1 router-id 4.4.4.4 return Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 500: Example For Configuring Ospfv3 Virtual Links

    Router ID of Router A as 1.1.1.1 of Area 2 Router ID of Router B as 2.2.2.2 of Areas 1 and 2 Router ID of Router C as 3.3.3.3 of Areas 1 and 0 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 501 # Display the OSPFv3 routing table of Router C, and you can find that there is no routing information of Area 2 in the routing table. [RouterC] display ospfv3 routing OSPFv3 Process (1) Destination Metric Next-hop 2001:DB8:1::/64 directly-connected, Pos1/0/0 2001:DB8:3::/64 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 502 RouterA ipv6 interface Pos1/0/0 link-protocol ppp undo shutdown ipv6 enable ipv6 address 2001:DB8:2::2/64 ospfv3 1 area 0.0.0.2 ospfv3 1 router-id 1.1.1.1 return Configuration file of Router B Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 503 Configuration file of Router D sysname RouterD ipv6 interface Pos1/0/0 link-protocol ppp undo shutdown ipv6 enable ipv6 address 2001:DB8:3::2/64 ospfv3 1 area 0.0.0.0 ospfv3 1 router-id 4.4.4.4 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 504: Example For Configuring Ospfv3 Gr

    Step 2 Configure basic OSPFv3 functions. For configuration details, see "Configuration Files" in this section. Step 3 Enable OSPFv3 GR on Router A. [RouterA] ospfv3 100 [RouterA-ospfv3-100] graceful-restart Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 505 Date- 25:6:2007, Time- 17:31:46 reference Interface Ethernet3/2/0 Destination: 2001:DB8:2:: PrefixLength : 64 NextHop FE80::200:1FF:FE00:200 Flag : DGU Label NULL Tunnel ID TimeStamp Date- 26:6:2007, Time- 14:6:3 reference Interface Ethernet3/2/0 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 506 Configuration file of Router C ipv6 interface Pos2/0/0 link-protocol ppp undo shutdown ipv6 enable ipv6 address 2001:DB8:2:2/64 ospfv3 100 area 0.0.0.0 ospfv3 100 router-id 3.3.3.3 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 507: Example For Configuring Bfd For Ospfv3

    Router ID of Router C is 3.3.3.3. Minimum interval for sending the BFD packets, minimum interval for receiving the BFD packets, and detection multiple on Router A and Router B. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 508 In the area 0.0.0.0 via interface GE1/0/0 DR Priority is 1 DR is 2.2.2.2 BDR is 1.1.1.1 Options is 0x000013 (-|R|-|-|E|V6) Dead timer due in 00:00:34 Neighbour is up for 01:30:52 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 509 # Enable global BFD on Router C. [RouterC] bfd [RouterC-bfd] quit [RouterC] ospfv3 [RouterC-ospfv3-1] bfd all-interfaces enable [RouterC-ospfv3-1] bfd all-interfaces min-transmit-interval 100 min-receive- interval 100 detect-multiplier 4 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 510 N - NSSA, U - Uninstalled, D - Denied by Import Policy OSPFv3 Process (1) Destination Metric Next-hop 2001:DB8:1::/64 directly connected, GigabitEthernet1/0/0 2001:DB8:2::/64 via FE80::E0:9C69:8142:2, GigabitEthernet1/0/1 2001:DB8:3::/64 directly connected, GigabitEthernet1/0/1 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 511 2001:DB8:2::1/64 ospfv3 1 area 0.0.0.0 interface gigabitethernet1/0/2 ipv6 enable ipv6 address 2001:DB8:4::1/64 ospfv3 1 area 0.0.0.0 return Configuration file of Router C Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 512: Example For Configuring Ipsec For Ospfv3

    The configuration roadmap is as follows: Configure basic OSPFv3 functions on RouterA and RouterB. Configure a security proposal and define the security protocol and authentication algorithm and encapsulation mode. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 513 [RouterA] interface gigabitethernet1/0/1 [RouterA-GigabitEthernet1/0/1] ipv6 enable [RouterA-GigabitEthernet1/0/1] ipv6 address 2001:DB8:100::1 64 [RouterA-GigabitEthernet1/0/1] ospfv3 1 area 1 [RouterA-GigabitEthernet1/0/1] quit # Configure RouterB. [RouterB] interface gigabitethernet1/0/1 [RouterB-GigabitEthernet1/0/1] ipv6 enable Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 514 [RouterA] ipsec sa sa1 [RouterA-ipsec-sa-sa1] sa spi inbound esp 12345 [RouterA-ipsec-sa-sa1] sa spi outbound esp 12345 [RouterA-ipsec-sa-sa1] sa string-key inbound esp Huawei-123 [RouterA-ipsec-sa-sa1] sa string-key outbound esp Huawei-123 [RouterA-ipsec-sa-sa1] quit # Configure SPIs and authentication keys in the string format on RouterB.
  • Page 515 0 wrong length: 0 replay packet: 0 too long packet: 0 invalid SA: 0 policy deny: 0 the normal packet statistics: input/output dropped normal packets: 0/0 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 516 12345 sa string-key inbound esp %@%@%#%#VlrZ=1vTW":z9:%F`[a=o[t#%@%@%#%# sa spi outbound esp 12345 sa string-key outbound esp %@%@%#%#)YTP%@nFE7bL^B&WSBiQ1[p#%@%@%#%# ospfv3 1 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 517 Configuration Guide - IP Routing 6 OSPFv3 Configuration router-id 2.2.2.2 ipsec sa sa2 area 0.0.0.1 interface GigabitEthernet1/0/1 undo shutdown ipv6 enable ipv6 address 2001:DB8:100::2/64 ospfv3 1 area 0.0.0.1 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 518: Is-Is Configuration

    Static BFD can be configured to monitor IS-IS links. 7.9 Configuring Dynamic BFD for IPv4 IS-IS Dynamic BFD for IPv4 IS-IS can accelerate IS-IS route convergence. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 519 On a network that requires high security, you can configure IS-IS authentication or optional checksum to improve the security of the IS-IS network. 7.23 Maintaining IS-IS Maintaining IS-IS involves resetting IS-IS and clearing IS-IS statistics. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 520 Configuration Guide - IP Routing 7 IS-IS Configuration 7.24 Configuration Examples This section provides several configuration examples of IS-IS. The configuration examples explain networking requirements, configuration notes, and configuration roadmap. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 521 Area 1 is a backbone area. All routers in this area are Level-2 routers. The other four areas are non-backbone areas. They are connected to Area 1 through Level-1-2 routers. Figure 7-1 IS-IS topology Area2 Area3 L1/2 L1/2 Area1 Area5 Area4 L1/2 L1/2 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 522: Is-Is Features Supported By The Ne80E/40E

    IS-IS Preference, fast convergence, Bidirectional Forwarding Detection (BFD), and three-way handshake. Multi-Instance and Multi-Process IS-IS supports multi-process and multi-instance, facilitating management and improving control efficiency of IS-IS. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 523 To solve this problem, you can enable local MT to create a separate Multicast IGP (MIGP) routing table for multicast packets. NOTE For details about local MT, see the IS-IS Local MT of "IS-IS" chapter in the HUAWEI NetEngine80E/ 40E Router Feature Description-IP Routing. IS-IS MT IS-IS MT, a set of independent IP topologies, is an optional mechanism within IS-ISs used today by many ISPs for IGP routing.
  • Page 524 TE tunnels are excluded from a multicast topology, ensuring continuity of multicast services. NOTE For details about IS-IS MT, see the IS-IS MT of "IS-IS" chapter in the HUAWEI NetEngine80E/ 40E Router Feature Description-IP Routing. IS-IS GR GR is a function used to restart a router gracefully.
  • Page 525 CR-LSPs can acquire the TE information of the links using IS- NOTE For details about IS-IS TE, see the HUAWEI NetEngine80E/40E Router Configuration Guide-MPLS. All the other LSPs referred to in this chapter are link state protocol data units. Differentiate the two acronyms.
  • Page 526 IS-IS load balancing, however, may affect traffic management because traffic will be randomly forwarded in this mode. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 527 CPU resources will be consumed if the network topology changes frequently. An SPF intelligent timer can quickly respond to certain emergent events and also prevent excessive CPU resource consumption. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 528 Dynamic BFD can provide link failure detection with light load and high speed (at the millisecond level). Dynamic BFD does not take the place of the Hello mechanism of IS- Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 529: Configuring Basic Ipv4 Is-Is Functions

    IS to recalculate routes to correctly guide packet forwarding. The NE80E/40E supports dynamic IPv4 and IPv6 BFD for IS-IS. NOTE For details about IS-IS GR, see the "IS-IS" chapter in the HUAWEI NetEngine80E/40E Router Feature Description-IP Routing. IS-IS Three-Way Handshake A reliable link layer protocol is required when IS-IS runs on a point-to-point (P2P) link.

  • Page 530: Creating Ipv4 Is-Is Processes

    IS-IS adjacency strict-check to ensure that an IS-IS adjacency is established only when both IPv4 and IPv6 go Up. IS-IS adjacency strict-check improves network reliability and prevents traffic losses. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 531 IP address to 3 bits, add 0 to the front of any part that is shorter than 3 bits, divide the extended address into three parts, with each part consisting of four decimal digits, and the reconstructed address is the system ID. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 532: Configuring Ipv4 Is-Is Interfaces

    The level of an IS-IS device and level of an interface determine the level of a neighbor relationship. By default, Level-1 and Level-2 neighbor relationships are established between Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 533 A suppressed IS-IS interface does not send or receive IS-IS packets. The routes of the network segment where the interface resides, however, can still be advertised to other routers within the area. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 534: Optional) Configuring The Ipv4 Is-Is Interfaces

    – If the cost type is narrow, the cost of an interface ranges from 1 to 63. The maximum cost of a route received by the interface is 1023. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 535 The system view is displayed. Run: isis [ process-id ] The IS-IS view is displayed. Run: circuit-cost { cost | maximum } [ level-1 | level-2 ] Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 536 100 Mbit/s < interface bandwidth ≤ 155 Mbit/ 155 Mbit/s < interface bandwidth ≤ 622 Mbit/ 622 Mbit/s < Interface bandwidth ≤ 2.5 Gbit/ Interface bandwidth > 2.5 Gbit/s Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 537: Optional) Configuring Ipv4 Is-Is Attributes For Interfaces On Different Types Of Networks

    The DIS priority is configured on the interface. The greater the value, the higher the priority. (Optional) Run: isis dis-name symbolic-name The name of the DIS is configured for easier maintenance and management. Configure the network type of an IS-IS interface. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 538 P2P, and then run the isis ppp- negotiation command to set the negotiation mode for the establishment of the neighbor relationship. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 539 Configure IS-IS not to check whether the IP addresses of received Hello packets are on the same network segment. Run: system-view The system view is displayed. Run: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 540 Run the display isis peer command. The command output shows the status of an IS-IS neighbor, DeviceB. System Id is displayed as DeviceB. <HUAWEI> display isis peer Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 541 ExtCost ExitInterface NextHop Flags ------------------------------------------------------------------------------- 12.1.1.0/24 NULL Pos1/0/2 23.1.1.1 A/-/-/- 23.1.1.0/24 NULL Pos1/0/2 Direct D/-/L/- Flags: D-Direct, A-Added to URT, L-Advertised in LSPs, S-IGP Shortcut, U-Up/Down Bit Set Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 542: Establishing Or Maintaining Is-Is Neighbor Relationships Or Adjacencies

    This part describes how to set the intervals for sending Hello packets, Complete Sequence Number PDUs (CSNPs), and Link State PDUs (LSPs). Context Perform the following steps on the router that runs IS-IS. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 543 In IS-IS, the period during which the local router and its neighbor keep the neighbor relationship is determined by the invalid number of Hello packets and the interval for sending Hello packets. Configuring the Interval for Sending CSNPs Run: system-view Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 544 You can set the minimum interval for sending LSPs on an IS-IS interface, that is, the delay between two consecutive LSPs. The value is also the interval for sending fragments of a CSNP. ----End Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 545: Configuring Lsp Parameters

    When a router generates an LSP, it sets the max lifetime for the LSP. After the LSP is received by other routers, its lifetime decreases as time passes. If a router does not receive Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 546 LSP packet) must be smaller than or equal to that of the received LSP packet. The value of max-size set by using the lsp-length command must meet the following conditions. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 547 [ [ level-1 | level-2 | level-1-2 ] | [ mode-1 | mode-2 ] ] * LSP fragments extension is enabled in an IS-IS process. Run: virtual-system virtual-system-id Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 548 : 123.1.1.1 IPV6 Link Local Address IPV6 Global Address(es) Csnp Timer Value Hello Timer Value DIS Hello Timer Value Hello Multiplier Value LSP-Throttle Timer Cost Ipv6 Cost Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 549: Configuring Ipv4 Is-Is Route Selection

    Before configuring IPv4 IS-IS route selection, complete the following tasks: Configuring IP addresses for interfaces to ensure that neighboring nodes are reachable at the network layer Configuring Basic IPv4 IS-IS Functions Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 550: Configuring Ipv4 Is-Is Route Leaking

    Level-1 area. Run: system-view The system view is displayed. Run: isis [ process-id ] The IS-IS view is displayed. Run any of the following commands as required: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 551 Run quit, return to the system view. Run acl name acl-name advance [ number acl-number2 ] [ match-order { auto | config } ], the basic ACL view is displayed. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 552 Configure routes in Level-1 areas to leak into the Level-2 area. Run: system-view The system view is displayed. Run: isis [ process-id ] The IS-IS view is displayed. Run any of the following commands as required: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 553 Run quit, return to the system view. Run acl name acl-name advance [ number acl-number2 ] [ match-order { auto | config } ], the basic ACL view is displayed. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 554: Configuring Principles For Using Equal-Cost Ipv4 Is-Is Routes

    IS-IS routes to facilitate traffic management. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 555 IP address are selected for load balancing. Configure preference values for equal-cost IS-IS routes. Run: system-view The system view is displayed. Run: isis [ process-id ] The IS-IS view is displayed. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 556: Filtering Ipv4 Is-Is Routes

    When a filtering policy of a routing protocol is used to filter routes: – If the action specified in an ACL rule is permit, a route that matches the rule will be received or advertised by the system. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 557 Then, configure another rule with a larger number in the same ACL and specify the action permit in this rule to receive or advertise the other routes. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 558: Configuring An Overload Bit For An Ipv4 Is-Is Device

    The destination address and mask of a default route are all 0s. If the destination address of a packet does not match any entry in the routing table of a device, the device sends the packet Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 559 Run the following command as required: – To set the ATT bit in the LSPs sent by the Level-1-2 router, run the attached-bit advertise { always | never } command. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 560: Configuring An Ipv4 Is-Is Interface To Automatically Adjust The Link Cost

    BER of the IS-IS interface reaches or falls below the lower threshold, the link quality changes from low to good. Step 5 Run: isis link-quality low incr-cost { cost | max-reachable } Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 561 U-Up/Down Bit Set On the Level-1-2 device, run the display isis lsdb verbose command to check whether the Level-1-2 device has leaked the route 192.168.1.0/24 to Level-1 areas. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 562 Run the display isis lsdb command to check whether an IS-IS device is in the overload state. If an IS-IS device is in the overload state, the command output is similar to the following information. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 563: Configuring Ipv4 Is-Is Route Summarization

    If a link on an IP network segment that is summarized frequently alternates between Up and Down states, IP network segments that are not summarized will not be affected, preventing route flapping and improving the network stability. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 564: Configuring Ipv4 Is-Is To Interact With Other Routing Protocols

    Applicable Environment If other routing protocols are configured on an IS-IS network, the following issues need to be considered: Preference of IS-IS routes Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 565: Configuring A Preference Value For Ipv4 Is-Is

    If multiple routes to the same destination are discovered by different routing protocols, configuring the highest preference value for IS-IS allows a route discovered by IS-IS to be selected preferentially. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 566: Configuring Ipv4 Is-Is To Import External Routes

    7.6.3 Configuring IPv4 IS-IS to Import External Routes If devices in an IS-IS routing domain need to learn external routes, configure IS-IS on a Level-1-2 device of this routing domain to import external routes. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 567 IS-IS routing domain. Configure IS-IS to advertise some external routes to an IS-IS routing domain. Run: system-view The system view is displayed. Run: isis [ process-id ] Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 568 Run quit, return to the system view. Run acl name acl-name advance [ number acl-number2 ] [ match-order { auto | config } ], the basic ACL view is displayed. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 569 Run the display isis lsdb [ { level-1 | level-2 } | verbose | { local | lsp-id | is-name symbolic- name } ] [ process-id | vpn-instance vpn-instance-name ] command to check IS-IS LSDB information. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 570 AREA ADDR INTF ADDR 20.1.1.2 2222.2222.2222.00 COST: 10 IP-Internal 20.1.1.0 255.255.255.0 COST: 10 Total LSP(s): 5 *(In TLV)-Leaking Route, *(By LSPID)-Self LSP, +-Self LSP(Extended), ATT-Attached, P-Partition, OL-Overload Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 571 Run the display ip routing-table command to view the IP routing table. The command output shows that the value of Preference of IPv4 IS-IS has been changed from its default value 15 to Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 572: Configuring The Ipv4 Is-Is Route Convergence Speed

    Configuring the link layer protocol on interfaces Configuring IP addresses for interfaces to ensure that neighboring nodes are reachable at the network layer Configuring Basic IPv4 IS-IS Functions Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 573: Configuring The Interval For Detecting Is-Is Neighboring Device Failures

    Procedure Set an interval at which Hello packets are sent. Run: system-view The system view is displayed. Run: interface interface-type interface-number The interface view is displayed. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 574: Setting Flooding Parameters Of Snps And Lsps

    CSNP. If a router detects that its LSDB is not synchronized with that on its neighboring router, the router will also send PSNPs to apply for missing LSPs. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 575 LSP increases twice every time until the delay reaches the value specified by max- interval. After the delay remains at the value specified by max-interval for three times Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 576 The system view is displayed. Run: isis [ process-id ] The IS-IS view is displayed. Run: timer lsp-refresh refresh-time A refresh interval is set for LSPs. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 577 The value of count is an integer ranging from 1 to 1000. Enable LSP fast flooding. Run: system-view The system view is displayed. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 578: Setting The Spf Calculation Interval

    For example, to speed up IS-IS route convergence, set the interval for SPF calculation to a small value, and set the interval to a large value after the IS-IS network becomes stable. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 579: Configuring Convergence Priorities For Ipv4 Is-Is Routes

    The NE80E/40E allows you to configure the highest convergence priority for specific IS-IS routes so that those IS-IS routes will be converged first when a network topology changes. Procedure Step 1 Run: system-view Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 580 Run the display isis interface [ [ verbose | traffic-eng ] | tunnel ] [ process-id | vpn- instance vpn-instance-name ] command to check IS-IS packet information. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 581 : 20.20.20.0/24 Int. Cost : 20 Ext. Cost : NULL Admin Tag Src Count : 2 Flags : A/-/-/- Priority : Low NextHop Interface : ExitIndex : Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 582: Configuring Static Bfd For Ipv4 Is-Is

    Enable BFD globally. Run: system-view The system view is displayed. Run: BFD is enabled globally. Run: quit The system view is displayed. Configure a single-hop BFD session. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 583 BFD session is established. Run the display isis interface verbose command. The command output shows that the status of static BFD for IS-IS process 1 is Yes. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 584: Configuring Dynamic Bfd For Ipv4 Is-Is

    BFD. Pre-configuration Tasks Before configuring dynamic BFD for IPv4 IS-IS, complete the following tasks: Configuring Basic IPv4 IS-IS Functions. Configuration Roadmap The configuration roadmap is as follows: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 585 The parameters for establishing BFD sessions are set for all interfaces. The command execution result is applicable to BFD session parameters on all IS-IS interfaces. Run: quit Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 586 After BFD is enabled on both ends of a link, run the display isis [ process-id | vpn-instance vpn-instance-name ] bfd session { all | peer ip-address | interface interface-type interface- number } command. The command output shows that BFD status is up. <HUAWEI> display isis bfd session all BFD session information for ISIS(1) ----------------------------------- Peer System ID : 0000.0000.0002...

  • Page 587: Configuring Multi-Topology For Ipv4 Is-Is

    Assigning an IP address to each interface to ensure IP connectivity Configuring multi-topology for IPv4 IS-IS globally Configuring Basic IPv4 IS-IS Functions Data Preparation To configure multi-topology for IPv4 IS-IS, you need the following data. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 588: Enabling Multi-Topology For Ipv4 Is-Is Processes

    { cost | maximum } [ level-1 | level-2 ] l circuit default-tag tag [ level-1 | level-2 ] Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 589: Enabling Multi-Topology For Ipv4 Is-Is Interfaces

    Command that disables an interface from participating in LFA calculation so that the interface will not be a backup interface Command that sets an administrative tag for an interface in a specified topology instance Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 590 Multi-topology for IPv4 IS-IS has been configured. Procedure Run the display isis peer [ verbose ] [ process-id | vpn-instance vpn-instance-name ] command to check information about IS-IS neighbors. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 591 : 0000.0000.0003 Total Peer(s): 2 Run the display isis route topology Red command. The command output shows the information about routes of the IS-IS topology instance named Red. <HUAWEI> display isis route topology Red Route information for ISIS(1) ----------------------------- topology Red...

  • Page 592: Configuring Ipv4 Is-Is Auto Frr

    IS-IS Auto FRR is suitable for IP services that require a low delay and low packet loss ratio. Pre-configuration Tasks Before configuring IS-IS Auto FRR, complete the following tasks: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 593: Enabling Ipv4 Is-Is Auto Frr

    IS-IS Auto FRR is enabled and the loop-free backup route is created. If the IS-IS level is not specified, IS-IS Auto FRR is enabled on Level-1 and Level-2 to create the backup route. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 594: Optional) Disabling An Interface From Being Involved In Ipv4 Lfa Calculation

    Router Feature Description - IP Routing. NOTE For detailed information about IS-IS Auto FRR, refer to the HUAWEI NetEngine80E/40E Router Feature Description - IP Routing. IS-IS can create the loop-free backup route only if the interface cost is in compliance with the traffic protection inequality of IS-IS Auto FRR.
  • Page 595 Enable IS-IS Auto FRR, and then check and find the traffic protection type for the router with the system ID as 0000.0000.0004. The following is the check result: <HUAWEI> display isis spf-tree systemid 0000.0000.0004 verbose Shortest Path Tree for ISIS(1)

  • Page 596: Configuring Basic Ipv6 Is-Is Functions

    Other IS-IS functions can be configured only after basic IS-IS functions are configured. Configuring basic IPv6 IS-IS functions includes the following operations: Create IPv6 IS-IS processes. Configure IPv6 IS-IS interfaces. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 597: Creating Ipv6 Is-Is Processes

    IS-IS adjacency strict-check to ensure that an IS-IS adjacency is established only when both IPv4 and IPv6 go Up. IS-IS adjacency strict-check improves network reliability and prevents traffic losses. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 598 (Optional) Configure the level of a device. Run: is-level { level-1 | level-1-2 | level-2 } The level of the router is configured. (Optional) Configure IS-IS host name mapping. Run: is-name symbolic-name Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 599: Configuring Ipv6 Is-Is Interfaces

    Hello packets. This suppression improves the link bandwidth usage. Procedure Configure an IS-IS interface. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 600: Optional) Configuring The Ipv6 Is-Is Interfaces

    ----End 7.12.4 (Optional) Configuring the IPv6 IS-IS Interfaces Configuring the IS-IS interface costs can control IS-IS route selection. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 601 1023. Subsequent routes forwarded by the interface are discarded. – If relax-spf-limit is specified, the cost of a route works as follows: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 602 [ process-id ] The IS-IS view is displayed. Run: ipv6 bandwidth-reference value The reference value of the bandwidth is configured. By default, the bandwidth reference value is 100 Mbit/s. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 603: Optional) Configuring Ipv6 Is-Is Attributes For Interfaces On Different Types Of Networks

    The establishment modes of IS-IS neighbor relationships are different on a broadcast network and on a P2P network. Different IS-IS attributes can be configured for interfaces on different types of networks. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 604 Hello packets, the number of Hello packets that IS-IS fails to receive from a neighbor before the neighbor is declared Down, interval for retransmitting LSPs Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 605 After this command is run, the OSICP negotiation status of a PPP interface affects the status of an IS-IS interface. When PPP detects that the OSI network fails, the link Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 606 ----End Example Run the display isis name-table command to view the mappings between host names and system IDs. <HUAWEI> display isis name-table Name table information for ISIS(1) Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 607 30:1::/64 and with the next-hop address of 10:1::/64. <HUAWEI> display isis route Route information for ISIS(1) ----------------------------- ISIS(1) Level-2 Forwarding Table -------------------------------- IPV6 Dest. ExitInterface NextHop Cost Flags Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 608: Configuring Ipv6 Is-Is Route Selection

    Configuring IP addresses for interfaces to ensure that neighboring nodes are reachable at the network layer. Configuring Basic IPv6 IS-IS Functions. Data Preparation To configure the IPv6 IS-IS route selection, you need the following data. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 609: Configuring Ipv6 Is-Is Route Leaking

    Routes in the Level-2 area and other Level-1 areas that meet the specified conditions are leaked into the local Level-1 area based on the ACL. Run any of the following commands as required: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 610 ACL and specify the action deny in this rule to filter out unwanted routes. – Configure an advanced ACL: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 611 ] Routes in the Level-2 area and other Level-1 areas that meet the specified conditions are leaked into the local Level-1 area based on the route policy. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 612 – If a route has not matched any ACL rules, the route will not be received or advertised by the system. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 613 Routes can be filtered using a blacklist or a whitelist: Route filtering using a blacklist: Configure a rule with a smaller number and specify the action deny in this rule to filter out the Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 614: Configuring Principles For Using Equal-Cost Ipv6 Is-Is Routes

    Procedure Step 1 Run: system-view The system view is displayed. Step 2 Run: isis [ process-id ] The IS-IS view is displayed. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 615: Filtering Ipv6 Is-Is Routes

    Conditions for filtering IS-IS routes are configured based on the ACL. Run any of the following commands as required: – Configure a basic ACL: Run: quit Return to the BGP view. Run: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 616 [ rule-id ] { deny | permit } protocol [ source { source-ipv6- address prefix-length | source-ipv6-address/prefix-length | any } | time- range time-name ] A rule is configured for the advanced ACL. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 617: Configuring An Overload Bit For An Ipv6 Is-Is Device

    IS-IS and BGP are configured, set an overload bit to instruct an IS to enter the overload state during its start or restart. After BGP convergence is complete, cancel the overload bit. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 618: Configuring Is-Is To Generate Ipv6 Default Routes

    LSP and whether a Level-1 router generates a default route after it receives the LSP carrying ATT bit 1. NOTE This mode applies only to Level-1 routers. Procedure Configure command-triggered default route generation mode. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 619 Run the display isis lsdb [ { level-1 | level-2 } | verbose | { local | lsp-id | is-name symbolic- name } ] [ process-id | vpn-instance vpn-instance-name ] command to check information in the IS-IS LSDB. ----End Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 620 1111.1111.1111.00 COST: 0 2222.2222.2222.00 COST: 0 2222.2222.2222.00-00* 0x00000007 0x459e 1194 1/0/0 SOURCE 2222.2222.2222.00 NLPID IPV6 AREA ADDR INTF ADDR V6 10:1::2 INTF ADDR V6 20:1::1 Topology Standard Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 621 20:1::/64 GE1/0/0 FE80::2E0:51FF:FE52:8100 A/-/- 10:1::/64 GE1/0/0 Direct D/L/- 44:4::/64 GE1/0/0 FE80::2E0:51FF:FE52:8100 A/-/- GE1/0/1 FE80::2E0:FFFF:FE50:8200 Flags: D-Direct, A-Added to URT, L-Advertised in LSPs, S-IGP Shortcut, U-Up/Down Bit Set Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 622: Configuring Ipv6 Is-Is Route Summarization

    Run the display isis route command to check summary routes in the IS-IS routing table. Run the display ipv6 routing-table [ verbose ] command to check summary routes in the IP routing table. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 623: Configuring Ipv6 Is-Is To Interact With Other Routing Protocols

    Before configuring IPv6 IS-IS to interact with other routing protocols, complete the following tasks: Configuring the link layer protocol on interfaces Configuring IP addresses for interfaces to ensure that neighboring nodes are reachable at the network layer Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 624: Configuring A Preference Value For Ipv6 Is-Is

    The IS-IS view is displayed. Run: ipv6 preference preference The IS-IS preference value is configured. NOTE A smaller preference value indicates a higher preference. The default IS-IS preference value is 15. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 625: Configuring Ipv6 Is-Is To Import External Routes

    – If you want to set the cost for the imported route, you can run the ipv6 import- route { direct | static | { ospfv3 | ripng | isis } [ process-id ] | bgp [ permit- Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 626 [ rule-id ] { deny | permit } [ fragment | source { source- ipv6-address prefix-length | source-ipv6-address/prefix-length | any } | time-range time-name | vpn-instance vpn-instance- name ] A rule is configured for the basic ACL. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 627 – If a route has not matched any ACL rules, the route will not be received or advertised by the system. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 628 [ | count ] command to check IS-IS routing information. Run the display ipv6 routing-table ipv6-prefix ipv6-prefix-name [ verbose ] command to check the IP routing table. ----End Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 629 ::/0 with a next-hop address of FE80::7D7E:0:22D7:1 has been imported into the Level-2 IS-IS routing table. <HUAWEI> display isis route Route information for ISIS(1) ----------------------------- ISIS(1) Level-2 Forwarding Table -------------------------------- Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 630 PrefixLength : 128 NextHop : ::1 Preference Cost Protocol : Direct RelayNextHop : :: TunnelID : 0x0 Interface : InLoopBack0 Flags Destination : 10:1:: PrefixLength : 64 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 631: Configuring The Ipv6 Is-Is Route Convergence Speed

    Before configuring the IPv6 IS-IS route convergence speed, familiarize yourself with the usage scenario, complete the pre-configuration tasks, and obtain the data required for the configuration. Applicable Environment The procedure for implementing IS-IS is as follows: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 632 Connection status between an IS-IS device and its neighboring devices can be monitored by exchanging Hello packets at intervals. An IS-IS neighboring device is considered Down if the Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 633 The interface view is displayed. Run: isis timer holding-multiplier number [ level-1 | level-2 ] The holding multiplier of neighboring devices is set. ----End Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 634 The interval at which CSNPs are sent is set on the specified interface. NOTE Configure Level-1 and Level-2 only when a broadcast interface is specified. Configure the intelligent timer controlling LSP generation. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 635 Ensure that the value of max-size for LSPs to be generated must be smaller than or equal to the value of max-size for LSPs to be received. The value of max-size in the lsp-length command must meet the following conditions. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 636 0, the LSP will be deleted from the LSDB 60s later if no more updated LSPs are received. Set the minimum interval at which LSPs are sent. Run: system-view Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 637 The interface view is displayed. Run: isis timer lsp-retransmit retransmit-interval The interval at which LSPs are retransmitted over a P2P link is set. ----End Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 638 7.16.5 Configuring Convergence Priorities for IPv6 IS-IS Routes If some IS-IS routes need to be converged by preference to minimize adverse impacts on services, configure those routes to have the highest convergence priority. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 639 The system view is displayed. Step 5 (Optional) Run: ipv6 route prefix-priority-scheduler critical-weight high-weight medium-weight low- weight The preference-based scheduling ratio of IPv6 routes is configured. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 640 Run the display isis route verbose command. The command output shows that the convergence priority of the IS-IS route 13:1::/64 is Critical, and the convergence priority of the other IS-IS routes is Low. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 641: Configuring Dynamic Bfd For Ipv6 Is-Is

    Configure IPv6 addresses for interfaces to ensure that neighbor nodes are reachable. Configure IPv6 IS-IS functions to ensure that each node is reachable at the network layer. Configuring Multi-Topology for IPv6 IS-IS. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 642 BFD for IS-IS is enabled. After BFD is enabled globally and the neighbor status is Up, default BFD parameters will be used to establish BFD sessions on all interfaces. (Optional) Run: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 643 Run the display isis [ process-id | vpn-instance vpn-instance-name ] ipv6 bfd session { all | peer ipv6-address | interface interface-type interface-number } command to check information about an BFD session. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 644: Configuring Multi-Topology For Ipv6 Is-Is

    BFD for IPv6 IS-IS on the specified interface. Run the display isis ipv6 bfd session command to view the status of an BFD session. An example command output is as follows: <HUAWEI> display isis 1 ipv6 bfd session all IPv6 BFD session information for ISIS(1) ----------------------------------- Peer System ID : 0000.0000.0003...

  • Page 645: Enabling Multi-Topology For Ipv6 Is-Is Processes

    [ topology-id { multicast | topology-id } ] The specified IS-IS process is associated with the specified topology instance, and the IPv6 IS- IS topology view is displayed. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 646: Enabling Multi-Topology For Ipv6 Is-Is Interfaces

    Command that suppresses IS-IS to advertise direct routes of an interface in a specified topology Command that configures the cost of an interface in a specified topology instance Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 647 ----End 7.18.4 Checking the Configurations After multi-topology for IPv6 IS-IS is configured, you can view information about multi- topology. Prerequisites Multi-topology for IPv6 IS-IS has been configured. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 648 Total Peer(s): 2 Run the display isis route ipv6 topology Red command. The command output shows the information about routes of the IS-IS topology instance named Red. <HUAWEI> display isis route ipv6 topology Red Route information for ISIS(1) ----------------------------- ipv6 topology Red...

  • Page 649: Configuring Ipv6 Is-Is Auto Frr

    HUAWEI NetEngine80E/40E Router Configuration Guide - IP Routing 7 IS-IS Configuration <HUAWEI> display isis spf-tree ipv6 topology Red Shortest Path Tree for ISIS(1) ------------------------------ ipv6 topology Red ----------------- Flags: T-System is on SPF TREE R-System is directly reachable O-System is Overload...
  • Page 650 Data Preparation To configure IPv6 IS-IS Auto FRR, you need the following data. Data IS-IS process ID Interface to be enabled with IPv6 IS-IS Auto FRR Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 651: Enabling Ipv6 Is-Is Auto Frr

    IPv6 IS-IS Auto FRR is enabled to generate a loop-free backup link. If no level is specified, IPv6 IS-IS Auto FRR is enabled in Level-1 and Level-2 areas to generate backup routes. For details of IS-IS Auto FRR, see the HUAWEI NetEngine80E/40E Router Feature Description - IP Routing. NOTE IS-IS can generate loop-free backup routes only when the traffic protection inequality of IS-IS Auto FRR is satisfied.
  • Page 652 Run the display isis route command, and you can view information about the outbound interface and next hop of the backup route. The configuration result is as follows: <HUAWEI> display isis route ipv6 3::3 verbose Route information for ISIS(100) -------------------------------...
  • Page 653 U-Up/Down Bit Set Run the display isis spf-tree command, and you can view the traffic protection type of a specified device. The configuration result is as follows: <HUAWEI> display isis spf-tree systemid 0000.0000.0004 verbose ipv6 Shortest Path Tree for ISIS(100) --------------------------------...
  • Page 654 Pre-configuration Tasks Before configuring IS-IS local MT, complete the following tasks: Configuring IP addresses for interfaces to ensure network connectivity between neighboring nodes Configuring Basic IS-IS Functions Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 655: Enabling Local Mt

    MIGP routing table, therefore controlling the size of the MIGP routing table. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 656 – If an ACL does not contain any rules, all routes matching the route-policy that references the ACL will not be received or advertised by the system. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 657 Then, configure another rule with a larger number in the same ACL and specify the action deny in this rule to filter out unwanted routes. l Based on the IP prefix: local-mt filter-policy ip-prefix ip-prefix-name ----End Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 658 Before configuring IS-IS GR, familiarize yourself with the usage scenario, complete the pre- configuration tasks, and obtain the required data. This can help you complete the configuration task quickly and accurately. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 659: Enabling Is-Is Gr

    Before configuring IS-IS GR, you need to enable the GR capability for IS-IS. Context Perform the following steps on the router that runs IS-IS. Procedure Step 1 Run: system-view Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 660: Configuring Parameters Of An Is-Is Gr Session

    The IS-IS view is displayed. Step 3 Run: graceful-restart no-impact-holdtime The holdtime of an IS-IS neighbor is configured to remain unchanged in IS-IS GR mode. Step 4 (Optional) Run: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 661 Step 1 Run display isis graceful-restart status [ level-1 | level-2 ] [ process-id | vpn-instance vpn- instance-name ] command to check the status of IS-IS GR. ----End Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 662: Improving Security Of An Is-Is Network

    TLVs. The authentication mechanism enhances IS-IS network security. IS-IS optional checksum ensures that the data is correctly transmitted at the link layer. Pre-configuration Tasks Before configuring IS-IS authentication, complete the following tasks: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 663: Configuring Is-Is Authentication

    When configuring an authentication password, select the ciphertext mode becasue the password is saved in configuration files in plaintext if you select plaintext mode, which has a high risk. To ensure device security, change the password periodically. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 664 – Authentication information is encapsulated in the sent LSPs and SNPs and the received LSPs and SNPs are not checked. In this case, all-send-only needs to be configured. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 665 – Authentication information is encapsulated in the sent LSPs and SNPs and the received LSPs and SNPs are not checked. In this case, all-send-only needs to be configured. Configure IS-IS interface authentication. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 666: Configuring The Optional Checksum

    Hello packets sent by IS-IS devices. When the peer device receives the encapsulated packets, it checks whether TLVs carried in the packets are correct. If TLVs are not correct, the peer device discards the packets for network security. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 667 On GE2/0/0, set the interface authentication mode to simple and password to 123. Neighbor relationship can be established when authentication information on the two routers is consistent. Run the display isis 1 peer verbose command. The display is as follows: <HUAWEI> display isis peer 1 verbose Peer information for ISIS(1) System Id...

  • Page 668: Maintaining Is-Is

    The specified IS-IS neighbor relationship is deleted after you reset a specified IS-IS neighbor by using the reset isis peer command. Exercise caution when running this command. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 669 Figure 7-4 Networking diagram for configuring basic IS-IS functions IS-IS Area10 IS-IS Area20 RouterA POS3/0/0 POS1/0/0 GE2/0/0 POS1/0/0 192.168.0.1/24 192.168.0.2/24 172.16.1.1/16 10.1.1.1/24 172.16.0.0/16 POS1/0/0 RouterC RouterD POS2/0/0 10.1.1.2/24 L1/2 10.1.2.1/24 POS1/0/0 RouterB 10.1.2.2/24 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 670 [RouterC] interface Pos 1/0/0 [RouterC-Pos1/0/0] isis enable 1 [RouterC-Pos1/0/0] quit [RouterC] interface Pos 2/0/0 [RouterC-Pos2/0/0] isis enable 1 [RouterC-Pos2/0/0] quit [RouterC] interface Pos 3/0/0 [RouterC-Pos3/0/0] isis enable 1 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 671 Holdtime Length ATT/P/OL ------------------------------------------------------------------------- 0000.0000.0001.00-00 0x00000006 0xbf7d 0/0/0 0000.0000.0002.00-00 0x00000003 0xef4d 0/0/0 0000.0000.0003.00-00* 0x00000008 0x3340 1/0/0 Total LSP(s): 3 *(In TLV)-Leaking Route, *(By LSPID)-Self LSP, +-Self LSP(Extended), Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 672 Flags: D-Direct, A-Added to URT, L-Advertised in LSPs, S-IGP Shortcut, U-Up/Down Bit Set [RouterD] display isis route Route information for ISIS(1) ----------------------------- ISIS(1) Level-2 Forwarding Table -------------------------------- IPV4 Destination IntCost ExtCost ExitInterface NextHop Flags ------------------------------------------------------------------------- Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 673 1 isis authentication-mode md5 N`C55QK<`=/Q=^Q`MAF4<1!! interface Pos2/0/0 link-protocol ppp ip address 10.1.2.1 255.255.255.0 isis enable 1 interface Pos3/0/0 link-protocol ppp ip address 192.168.0.1 255.255.255.0 isis enable 1 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 674: Example For Configuring Is-Is In An Nbma Network

    The configuration roadmap is as follows: Set the type of the sub-interface to P2P when creating an ATM sub-interface, because IS- IS does not support the NBMA network. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 675 [RouterA] interface atm 1/0/0.1 p2p [RouterA-Atm1/0/0.1] isis enable 1 [RouterA-Atm1/0/0.1] quit # Configure Router B. [RouterB] isis 1 [RouterB-isis-1] network-entity 10.0000.0000.0002.00 [RouterB-isis-1] quit [RouterB] interface atm 1/0/0.1 p2p Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 676 NextHop Flags ------------------------------------------------------------------------- 10.1.1.0/24 NULL Atm2/0/0.1 10.1.2.1 A/-/L/- 10.1.2.0/24 NULL Atm2/0/0.1 Direct D/-/L/- Flags: D-Direct, A-Added to URT, L-Advertised in LSPs, S-IGP Shortcut, U-Up/Down Bit Set ----End Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 677: Example For Configuring Is-Is Route Summarization

    1 pvc 2/2 map ip 10.1.2.1 broadcast return 7.24.3 Example for Configuring IS-IS Route Summarization This section provides an example for configuring IS-IS route summarization. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 678 Enable IS-IS on each router, configure the levels, and specify network entities. Check the IS-IS routing table of Router A. Configure Router B to summarize routes. Data Preparation To complete the configuration, you need the following data: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 679 Step 4 Configure route summarization on routerRouter B. # Configure Router B to summarize the routes to network segments 172.1.1.0/24, 172.1.2.0/24, 172.1.3.0./24, and 172.1.4.0/24 into the route 172.1.0.0/16. [RouterB] isis 1 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 680 172.1.4.2 255.255.255.0 isis enable 1 return Configuration file of Router C sysname RouterC isis 1 is-level level-1 network-entity 10.0000.0000.0003.00 interface GigabitEthernet1/0/0 ip address 172.1.4.1 255.255.255.0 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 681: Example For Configuring The Dis Election Of Is-Is

    Figure 7-7 Configuring the DIS election of IS-IS RouterB RouterA L1/L2 L1/L2 GE1/0/0 GE1/0/0 10.1.1.1/24 10.1.1.2/24 GE1/0/0 GE1/0/0 10.1.1.3/24 10.1.1.4/24 RouterC RouterD Configuration Roadmap The configuration roadmap is as follows: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 682 # Check the MAC address of GigabitEthernet1/0/0 on Router D. [RouterD] display arp interface gigabitethernet 1/0/0 IP ADDRESS MAC ADDRESS EXPIRE(M) TYPE INTERFACE VPN-INSTANCE VLAN PVC ------------------------------------------------------------------------- 10.1.1.4 00e0-ff1d-305c GE1/0/0 ------------------------------------------------------------------------- Total:1 Dynamic:0 Static:0 Interface:1 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 683 Type GE1/0/0 Down 1497 L1/L2 No/No # Display the IS-IS interface on Router B. [RouterB] display isis interface Interface information for ISIS(1) --------------------------------- Interface IPV4.State IPV6.State Type Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 684 L2(L1L2) 100 0000.0000.0004 GE1/0/0 0000.0000.0001.01 Up Total Peer(s): 4 [RouterB] display isis interface Interface information for ISIS(1) --------------------------------- Interface IPV4.State IPV6.State Type GE1/0/0 Down 1497 L1/L2 No/No Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 685 Configuration file of Router C sysname RouterC isis 1 is-level level-1 network-entity 10.0000.0000.0003.00 interface GigabitEthernet1/0/0 ip address 10.1.1.3 255.255.255.0 isis enable 1 return Configuration file of Router D sysname RouterD Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 686: Example For Configuring Is-Is Load Balancing

    POS 2/0/0 10.1.2.1/24 Router D GE 3/0/0 172.17.1.1/24 Router B POS 1/0/0 10.1.1.2/24 Router D POS 1/0/0 192.168.0.2/24 Router B POS 2/0/0 192.168.0.1/24 Router D POS 2/0/0 192.168.1.2/24 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 687 ID of Router B is small. IS-IS chooses the route with the next hop being 10.1.1.2 as the unique optimal route. Step 4 Restore the default number of load balancing paths on Router A. [RouterA] isis 1 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 688 Router C) is higher than that of next hop 10.1.1.2 (that is, Router B), IS-IS chooses the route with the next hop being 10.1.2.2 as the optimal route. ----End Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 689 10.0000.0000.0003.00 interface Pos1/0/0 link-protocol ppp ip address 10.1.2.2 255.255.255.0 isis enable 1 interface Pos2/0/0 link-protocol ppp ip address 192.168.1.1 255.255.255.0 isis enable 1 return Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 690: Example For Configuring Is-Is To Interact With Bgp

    Figure 7-9 Networking diagram for configuring IS-IS to interact with BGP Loopback0 Loopback0 1.1.1.1/32 2.2.2.2/32 POS1/0/0 POS1/0/0 POS1/0/0 10.2.1.2/24 10.2.1.1/24 10.1.1.1/24 POS1/0/0 RouterC RouterA 10.1.1.2/24 RouterB AS65009 AS65008 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 691 # Configure Router C. [RouterC] bgp 65009 [RouterC-bgp] router-id 2.2.2.2 [RouterC-bgp] peer 10.2.1.1 as-number 65008 [RouterC-bgp] ipv4-family unicast [RouterC-bgp-af-ipv4] network 10.2.1.0 255.255.255.0 Step 4 Configure IS-IS to import BGP routes. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 692 10.1.1.1/32 Direct 0 127.0.0.1 Pos1/0/0 10.1.1.2/32 Direct 0 10.1.1.2 Pos1/0/0 127.0.0.0/8 Direct 0 127.0.0.1 InLoopBack0 127.0.0.1/32 Direct 0 127.0.0.1 InLoopBack0 3.3.3.3/32 ISIS-L2 15 94 D 10.1.1.2 Pos1/0/0 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 693 10.1.1.2 255.255.255.0 isis enable 1 interface Pos2/0/0 link-protocol ppp ip address 10.2.1.1 255.255.255.0 interface LoopBack0 ip address 1.1.1.1 255.255.255.255 bgp 65008 router-id 1.1.1.1 peer 10.2.1.2 as-number 65009 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 694: Example For Configuring Is-Is Mt

    Router C, because the calculated SPT passes through Router B that does not support IPv6. To ensure IPv6 packet transmission, enable IS-IS multi-topologies and create separate IPv4 and IPv6 routing tables. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 695 IPv4 topology instance blue for all routers and IPv6 topology instance red for Router A, Router C, and Router D. Procedure Step 1 Configure IP addresses for the interfaces. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 696 # Use the interfaces on Router A as an example. [RouterA] interface gigabitethernet 1/0/0 [RouterA-GigabitEthernet1/0/0] ip topology red enable [RouterA-GigabitEthernet1/0/0] isis topology red [RouterA-GigabitEthernet1/0/0] quit [RouterA] interface gigabitethernet 2/0/0 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 697 GE 1/0/0. This is because in the SPF calculation when an IPv4/IPv6 topology is deployed, the cost of the link passing through GE 1/0/0 to 2008::1/64 is smaller. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 698 GigabitEthernet2/0/0 undo shutdown ipv6 enable ipv6 address 2001:db8:1::1/64 isis ipv6 enable 1 ipv6 topology blue enable isis ipv6 topology blue Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 699 GigabitEthernet2/0/0 undo shutdown ip address 192.168.2.2 255.255.255.0 isis enable 1 ip topology red enable isis topology red interface LoopBack1 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 700: Example For Configuring Local Mt

    Router A, Router B, Router C, Router D, and Router E run IS-IS, and they are Level-2 routers. A TE tunnel is established between Router B and Router D. IGP Shortcut is enabled on Router B. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 701 0, the tunnel encapsulation protocol is MPLS TE, the destination address is 4.4.4.4, the tunnel ID is 100, and the tunnel signaling protocol is RSVP-TE. Procedure Step 1 Assign an IP address for each interface and enable IS-IS. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 702 [RouterB] isis 1 [RouterB-isis-1] cost-style wide [RouterB-isis-1] traffic-eng level-2 [RouterB-isis-1] quit # Configure Router C. [RouterC] mpls lsr-id 3.3.3.3 [RouterC] mpls [RouterC-mpls] mpls te [RouterC-mpls] mpls rsvp-te Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 703 Direct D/-/L/- 192.168.3.0/24 NULL Tun1/0/0 2.2.2.2 A/S/-/- 5.5.5.5/32 NULL Tun1/0/0 2.2.2.2 A/S/-/- 10.0.0.0/24 NULL GE1/0/0 Direct D/-/L/- 10.0.1.0/24 NULL GE2/0/0 Direct D/-/L/- 4.4.4.4/32 NULL Tun1/0/0 2.2.2.2 A/S/-/- Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 704 TE tunnel interface is found in the MIGP routing table. ----End Configuration Files Configuration file of Router A sysname RouterA router id 1.1.1.1 multicast routing-enable isis 1 is-level level-2 cost-style wide network-entity 10.0000.0000.0001.00 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 705 4.4.4.4 mpls te tunnel-id 100 mpls te igp shortcut isis mpls te igp metric relative -10 isis enable 1 pim sm C-BSR LoopBack0 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 706 4.4.4.4 multicast routing-enable mpls lsr-id 4.4.4.4 mpls mpls te mpls rsvp-te mpls te cspf isis 1 is-level level-2 cost-style wide network-entity 10.0000.0000.0004.00 traffic-eng level-2 interface GigabitEthernet1/0/0 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 707: Example For Configuring Basic Is-Is Ipv6 Functions

    Router A, Router B, and Router C belong to area 10. Router D belongs to area 20. Router A and Router B are Level-1 routers. Router C is a Level-1-2 router. Router D is a Level-2 router. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 708 Router A as an example. The configurations of Router B, Router C and Router D are similar to that of Router A. The detailed configurations are not mentioned here. <HUAWEI> system-view [HUAWEI] sysname RouterA [RouterA] ipv6 [RouterA] interface pos 1/0/0 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 709 Step 3 Verify the configuration. # Display the IS-IS routing table of Router A. [RouterA] display isis route Route information for ISIS(1) ----------------------------- ISIS(1) Level-1 Forwarding Table -------------------------------- Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 710 0x4e06 1117 0/0/0 SOURCE 0000.0000.0001.00 NLPID IPV6 AREA ADDR INTF ADDR V6 2001:db8:1::2 Topology Standard 0000.0000.0003.00 COST: 10 IPV6 2001:db8:1::/64 COST: 10 0000.0000.0002.00-00 0x00000009 0x738c 1022 0/0/0 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 711 *(In TLV)-Leaking Route, *(By LSPID)-Self LSP, +-Self LSP(Extended), ATT-Attached, P-Partition, OL-Overload ----End Configuration Files Configuration file of Router A sysname RouterA ipv6 isis 1 is-level level-1 network-entity 10.0000.0000.0001.00 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 712 1 interface Pos3/0/0 link-protocol ppp ipv6 enable ipv6 address 2001:db8:3::1/64 isis ipv6 enable 1 isis circuit-level level-2 return Configuration file of Router D sysname RouterD ipv6 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 713: Example For Configuring Is-Is Fast Convergence

    Set the time parameters of fast convergence on Router A and Router B. Data Preparation To configure IS-IS fast convergence, you need the following data: Levels and area addresses of the two routers Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 714 Step 4 Set the time parameters of fast convergence. # Configure Router A. [RouterA] isis 1 [RouterA-isis-1] flash-flood [RouterA-isis-1] timer spf 1 20 100 [RouterA-isis-1] timer lsp-generation 1 1 120 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 715 1 1 120 level-2 flash-flood level-1 flash-flood level-2 network-entity 10.0000.0000.0001.00 timer spf 1 20 100 interface GigabitEthernet1/0/0 ip address 10.1.1.1 255.255.255.0 isis enable 1 isis bfd static Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 716: Example For Configuring Is-Is Auto Frr (Ip Protecting Ip)

    The four routers are all Level-1-2 routers. If Router C or Link T fails, it is required that the traffic forwarded by Router A is rapidly switched to the backup link. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 717 Step 2 Configure basic IS-IS functions. # Configure Router A. [RouterA] isis 1 [RouterA-isis-1] is-level level-1-2 [RouterA-isis-1] network-entity 10.0000.0000.0001.00 [RouterA-isis-1] quit [RouterA] interface gigabitethernet 1/0/0 [RouterA-GigabitEthernet1/0/0] isis enable 1 [RouterA-GigabitEthernet1/0/0] quit Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 718 Int. Cost : 30 Ext. Cost : NULL Admin Tag Src Count : 1 Flags : A/-/L/- Priority : Low NextHop Interface : ExitIndex : 10.1.0.2 GE1/0/0 0x00000003 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 719 : 10.5.1.0/24 Int. Cost : 30 Ext. Cost : NULL Admin Tag Src Count : 1 Flags : A/-/L/- Priority : Low NextHop Interface : ExitIndex : Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 720 IF:GE2/0/0 NBR:0000.0000.0002.00 TYPE:LOOP-FREE PROTECT:LINK-NODE IPv4 Nexthops-MIGP IPv6 Nexthops Neighbors: 2 (Children:1 Parents:1 Others:0) 0000.0000.0003.02 Cost : 10 Flags : Parent 0000.0000.0004.03 Cost : 10 Flags : Child Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 721 InLabelBak : NULL LspToken_ForInLabelBak : 0x0 EntryRefCount : 0 VlanId : 0x0 LspType Label_ForLspTokenBak MplsMtu Gateway_ForLspTokenBak : 0 NextToken IfIndex_ForLspTokenBak : 0 Label_NextToken : 0 Label : 0 LspBfdState Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 722 1/0/0 ip address 10.1.0.2 255.255.255.0 isis enable 1 interface gigabitethernet 2/0/0 shutdown ip address 10.4.0.1 255.255.255.0 isis enable 1 return Configuration file of Router D Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 723: Example For Configuring Is-Is Auto Frr (Te Protecting Ip)

    The MPLS TE tunnel should be configured as the backup path so that traffic between P nodes can be switched to the other plane when the link between P nodes fails. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 724 GE 2/0/0 10.1.2.1/30 10.1.2.2/30 GE 3/0/0 GE 2/0/0 10.1.3.1/30 10.1.3.2/30 GE 2/0/0 GE 2/0/0 10.1.4.1/30 10.1.4.2/30 GE 3/0/0 GE 2/0/0 10.1.5.1/30 10.1.5.2/30 GE 1/0/0 GE 1/0/0 10.1.6.1/30 10.1.6.2/30 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 725 Device Name IP Address of Loopback 0 1.1.1.1/32 2.2.2.2/32 3.3.3.3/32 4.4.4.4/32 5.5.5.5/32 6.6.6.6/32 7.7.7.7/32 8.8.8.8/32 Table 7-5 IS-IS parameters Parameter Value Router ID IP address of Loopback 0 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 726 LDP over TE can be implemented Tunnel bandwidth 200 Mbit/s Name of the LDP peer to_destination node Other parameters Default values Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 727 The command output shows that the nodes have learned routes from each other. For example, when checking whether there are routes to the IP address of Loopback 0 on PE1, you can find the following information: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 728 P1 and is not mentioned here. [P1] explicit-path to_P3 [P1-explicit-path-to_p3] next hop 10.1.1.2 [P1-explicit-path-to_p3] next hop 10.1.4.2 [P1-explicit-path-to_p3] next hop 10.1.6.1 [P1-explicit-path-to_p3] next hop 3.3.3.3 [P1-explicit-path-to_p3] quit Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 729 [P3] interface gigabitethernet 2/0/0 [P3-GigabitEthernet2/0/0] mpls ldp [P3-GigabitEthernet2/0/0] quit [P3] interface gigabitethernet 3/0/0 [P3-GigabitEthernet3/0/0] mpls ldp [P3-GigabitEthernet3/0/0] quit [P3] interface gigabitethernet 3/1/0 [P3-GigabitEthernet3/1/0] mpls ldp [P3-GigabitEthernet3/1/0] quit Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 730 IS-IS LFA backup interfaces. # Configure P1. [P1] isis 64 [P1-isis-64] frr [P1-isis-64-frr] loop-free-alternate level-2 [P1-isis-64-frr] quit [P1-isis-64] quit [P1] interface gigabitethernet3/1/0 [P1-GigabitEthernet3/1/0] undo isis lfa-backup Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 731 OutIfBak : [No Intf] LspTokenBak: 0x0 InLabelBak : NULL LspToken_ForInLabelBak : 0x0 EntryRefCount : 0 VlanId : 0x0 LspType Label_ForLspTokenBak MplsMtu Gateway_ForLspTokenBak : 0 NextToken IfIndex_ForLspTokenBak : 0 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 732 6 mpls te commit isis enable 64 interface GigabitEthernet1/0/0 undo shutdown ip address 10.1.1.1 255.255.255.252 isis enable 64 isis cost 5 mpls Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 733 10.1.1.2 255.255.255.252 isis enable 64 isis cost 5 mpls mpls te mpls rsvp-te mpls te bandwidth max-reservable-bandwidth 200000 mpls te bandwidth bc0 200000 interface GigabitEthernet2/0/0 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 734 86.0010.0030.0300.3003.00 is-name P3 interface LoopBack0 ip address 3.3.3.3 255.255.255.255 isis enable 64 interface Tunnel1/0/0 description toP1 ip address unnumbered interface LoopBack0 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 735 Configuration file of P4 sysname P4 router id 4.4.4.4 mpls lsr-id 4.4.4.4 mpls mpls te mpls rsvp-te mpls ldp isis 64 is-level level-2 cost-style wide network-entity 86.0010.0040.0400.4004.00 is-name P4 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 736 5.5.5.5 mpls mpls ldp isis 64 is-level level-2 cost-style wide network-entity 86.0010.0050.0500.5005.00 is-name P5 interface LoopBack0 ip address 5.5.5.5 255.255.255.255 isis enable 64 interface GigabitEthernet1/0/0 undo shutdown Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 737 10.1.5.2 255.255.255.252 isis enable 64 isis cost 5 mpls mpls ldp interface GigabitEthernet3/0/0 undo shutdown ip address 10.1.8.2 255.255.255.252 isis enable 64 isis cost 5 mpls Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 738 64 is-level level-2 cost-style wide network-entity 86.0010.0080.0800.8008.00 is-name PE3 interface LoopBack0 ip address 8.8.8.8 255.255.255.255 isis enable 64 interface GigabitEthernet1/0/0 undo shutdown ip address 10.1.12.1 255.255.255.252 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 739: Example For Configuring Is-Is Gr

    Set the same restart interval in the IS-IS views of all the routers. Data Preparation To complete the configuration, you need the following data: IS-IS process number Restart interval Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 740 As shown in the display, the FIB table on Router A does not change and the forwarding service is not affected. # Disable IS-IS GR on Router A. [RouterA] isis 1 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 741 150 is-level level-2 network-entity 10.0000.0000.0002.00 interface GigabitEthernet 1/0/0 link-protocol ppp ip address 10.2.1.2 255.255.255.0 isis enable 1 return Configuration file of Router C sysname RouterC isis 1 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 742: Example For Configuring Static Bfd For Is-Is

    The configuration roadmap is as follows: Enable basic IS-IS functions on each router. Enable BFD on Router A and Router B. Data Preparation To complete the configuration, you need the following data: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 743 Circuit Id State HoldTime Type 2222.2222.2222 GE1/0/0 2222.2222.2222.00 The IS-IS routing table of Router A has entries to Router B and Router C. [RouterA] display isis route Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 744 Retransmit Timer Value Bandwidth-Value Low 100000000 High Static Bfd Dynamic Bfd Dynamic IPv6 Bfd Fast-Sense Rpr Suppress Base Ipv6 Suppress Base Ipv4 MT 1000 Ipv4 MT 1000 Cost Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 745 Router B is deleted. ----End Configuration Files Configuration file of Router A sysname RouterA isis 1 is-level level-2 network-entity aa.1111.1111.1111.00 interface GigabitEthernet1/0/0 ip address 10.1.1.1 255.255.255.0 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 746: Example For Configuring Dynamic Bfd For Is-Is

    7-18, it is required as follows: Run IS-IS on Router A, Router B, and Router C. Enable BFD of the IS-IS process on Router A, Router B, and Router C. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 747 Minimum interval for sending the BFD packets, minimum interval for receiving the BFD packets, and local detection multiple on Router A and Router B Procedure Step 1 Assign an IP address to each interface. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 748 Route Flags: R - relay, D - download to fib ------------------------------------------------------------------------------ Routing Tables: Public Destinations : 8 Routes : 9 Destination/Mask Proto Cost Flags NextHop Interface 1.1.1.0/24 Direct 1.1.1.1 GigabitEthernet1/0/0 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 749 LocDis : 8192 Local IP Address: 3.3.3.1 Multiplier : 3 RemDis : 8192 Type : L2 Diag : No diagnostic information Peer System ID : 0000.0000.0003 Interface : GE1/0/0 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 750 Step 7 # Display the routing table on Router A. [RouterA] display ip routing-table Route Flags: R - relay, D - download to fib ------------------------------------------------------------------------------ Routing Tables: Public Destinations : 8 Routes : 8 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 751 1 isis cost 5 isis bfd enable isis bfd min-tx-interval 100 min-rx-interval 100 detect-multiplier 4 return Configuration file of Router B sysname RouterB isis 1 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 752: Example For Configuring Dynamic Bfd For Ipv6 Is-Is

    IS-IS IPv6 network. The primary path of traffic between Router S and Router D is Router S-->Switch-->Router D, and the backup path is Router S-->Router N-- >Router D. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 753 # The configurations of Router S are taken as an example. The configurations of other routers are as the same as those of Router S and thus are not mentioned here. <HUAWEI> system-view [HUAWEI] sysname RouterS [RouterS] ipv6 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 754 [RouterS] interface gigabitethernet 2/0/0 [RouterS-GigabitEthernet2/0/0] isis ipv6 cost 10 level-2 [RouterS-GigabitEthernet2/0/0] quit # Configure Router N. [RouterN] interface gigabitethernet 1/0/0 [RouterN-GigabitEthernet1/0/0] isis ipv6 cost 10 level-2 [RouterN-GigabitEthernet1/0/0] quit Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 755 LocDis : 8184 Local IPv6 Address : FE80::C964:0:B8B6:1 RemDis : 8192 Peer IPv6 Address : FE80::C964:0:B203:1 Diag : No diagnostic information Total IPv6 BFD session(s) : 2 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 756 RemDis : 8192 Peer IPv6 Address : FE80::C964:0:B203:1 Diag : No diagnostic information Total IPv6 BFD session(s) : 1 ----End Configuration Files Configuration file of Router S sysname RouterS Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 757 10 return Configuration file of Router D sysname RouterD isis 10 is-level level-2 ipv6 bfd all-interfaces enable ipv6 bfd all-interfaces min-tx-interval 150 min-rx-interval 150 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 758 2001:db8:3::2/120 isis ipv6 enable 10 isis ipv6 cost 10 return Configuration file of Switch Configuration file of Switch is not mentioned here. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 759: Bgp Configuration

    8.9 Configuring BGP Peer Groups Configuring BGP peer groups simplifies the BGP network configuration and improves the route advertisement efficiency. 8.10 Configuring BGP Route Reflectors Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 760 BGP GR can be configured to avoid traffic interruption due to protocol restart. 8.23 Configuring BGP Security Authentication can be implemented during the establishment of a TCP connection to enhance BGP security. 8.24 Disabling the BGP-IPv4 Unicast Address Family Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 761 Maintaining BGP involves resetting a BGP connection and clearing BGP statistics. 8.27 BGP Route Selection Rules 8.28 Configuration Examples BGP configuration examples explain networking requirements, networking diagram, configuration notes, configuration roadmap, and configuration procedure. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 762 BGP eliminates routing loops by adding AS_Path information to BGP routes. BGP provides multiple routing policies for flexible route selection and filtering. BGP can be easily extended and can adapt to the development of networks. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 763: Bgp Features Supported By The Ne80E/40E

    To transmit BGP 8.3 Configuring Basic BGP The configuration is mandatory. routes. Functions NOTE This configuration enables basic BGP functions and is a prerequisite for the following configurations. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 764 8.13 Configuring Prefix- based BGP ORF Suppressing Route Flapping and Improving 8.18 Configuring Path the Efficiency of Route MTU Auto Discovery Transmission Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 765 8.23.4 Configuring BGP GTSM Limit the number of the routes received from a peer or peer group Set the maximum number of AS numbers in the AS_Path attribute Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 766: Route Attributes

    Prevents routing loops among ASs. l Determines the selection of the optimal route. (The BGP route with the shortest AS_Path is selected as the optimal route.) Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 767 Prefers the route with the highest PreVal. PrefVal is a Huawei-specific attribute, valid only on the Huawei device where it is configured. Prefers the route with the highest Local_Pref.
  • Page 768 When there are multiple active routes, the BGP speaker advertises only the optimal route to its peer. The BGP speaker advertises only the preferred routes to its peer. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 769 The configuration and maintenance of a large-scale BGP network is difficult. To facilitate BGP network maintenance and management, you can configure peer groups, community, route reflector, or confederation as required. Table 8-3 lists these solutions. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 770 IBGP connections in each sub-AS, and an confederation. After within an AS. EBGP connection is the reconfiguration, the established between logical topology every two sub-ASs. changes accordingly. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 771 (a and ensure proper route in a routing table network operation. disappears and reappears frequently). Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 772 BGP route convergence speed is an important indicator used in evaluating network performance. Multiple solutions can be deployed on the NE80E/40E to adjust BGP route convergence speed. Table 8-5 lists the details. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 773 If BFD for BGP cannot be deployed on the network, BGP peer tracking is recommended because it is simple to deploy and has better extensibility. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 774 BFD for BGP is used to detection on a BGP detect faults on the link network. between BGP peers and notify the fault to BGP, speeding up BGP route convergence. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 775 (GR) interruption in case of peer relationship is re- a BGP restart. established and traffic forwarding is interrupted. After GR is enabled, traffic interruption can be avoided. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 776 In most cases, different ASs are under different technical administrations and therefore do not fully trust each other. To improve BGP network security, the following solutions are available, as listed in Table 8-7. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 777 Keychain authentication allows passwords to be changed automatically based on configurations. Therefore, keychain authentication is applicable to networks requiring high security. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 778 "MP-BGP configuration" in HUAWEI NetEngine80E/40E Router Configuration Guide-IP Multicast. For configuration details in the BGP VPNv4 address family, BGP VPN instance address family, and BGP Layer 2 Virtual Private Network (L2VPN) address family views, see HUAWEI NetEngine80E/40E Router Configuration Guide-VPN. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright ©...

  • Page 779: Configuring The Format Of Bgp 4-Byte As Numbers

    ----End Checking the Configurations After configuring the format of BGP 4-byte AS numbers, perform the following operations to check the configuration: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 780 In this example, the AS number in the AS_Path regular expression is an integer (65537), and the corresponding information is displayed. <HUAWEI> display bgp routing-table regular-expression ^65537 BGP Local router ID is 10.1.1.2 Status codes: * - valid, > - best, d - damped,...

  • Page 781: Configuring Basic Bgp Functions

    To configure basic BGP functions, you need the following data. Data Local AS number and router ID IPv4 address and AS number of a peer Interface originating an Update message Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 782: Starting A Bgp Process

    BGP peer relationships improves the stability of BGP connections, and therefore is recommended. IBGP peer relationships are established between devices within an AS. EBGP peer relationships are established between devices in different ASs. Procedure Configure an IBGP peer. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 783 Run: peer ipv4-address as-number { as-number-plain | as-number-dot } The IP address of a peer and the number of the AS where the peer resides are specified. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 784: Configuring Bgp To Import Routes

    8.3.4 Configuring BGP to Import Routes BGP can import routes from other protocols. When routes are imported from a dynamic routing protocol, the process IDs of the routing protocol must be specified. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 785 BGP is configured to import default routes. To import default routes, run both the default-route imported command and the import-route command. If only the import-route command is used, no default route Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 786 Run the display bgp peer ipv4-address { log-info | verbose } command to check log information of a specified BGP peer. Run the display bgp routing-table [ ipv4-address [ mask | mask-length ] ] command to check BGP routes. ----End Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 787: Configuring Bgp Route Attributes

    The Local_Pref attribute has the same function as the preferred value of a route. If both of them are configured for a BGP route, the preferred value takes precedence over the Local_Pref attribute. Multi_Exit Discriminator (MED) Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 788: Configuring The Bgp Preference

    IP packets. Perform the following steps on a device running BGP. Procedure Step 1 Run: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 789: Configuring Preferred Values For Bgp Routes

    The system view is displayed. Step 2 Run: bgp { as-number-plain | as-number-dot } The BGP view is displayed. Step 3 Run: peer { group-name | ipv4-address } preferred-value value Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 790: Configuring A Default Local_Pref Attribute For A Device

    The MED attribute equals a metric used in an IGP, and is used to determine the optimal route for traffic that enters an AS. If a BGP device obtains multiple routes from different EBGP peers Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 791 AS. This command enables the BGP device to compare the MED values of routes from different ASs. Configure the deterministic-MED function. Run: system-view The system view is displayed. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 792 If this command is not run, BGP uses 0 as the MED value for a route that has no MED value. Compare the MED values of routes in a confederation. Run: system-view Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 793: Configuring Next_Hop Attributes For Routes

    IP address before the device advertises the route to an IBGP peer. By default, a device does not change the next-hop address of a route when advertising the route to an IBGP peer. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 794 By default, provider edges (PEs) in different ASs set up EBGP peer relationships with each other, and they do not change next-hop addresses of routes when advertising the routes to their EBGP peers. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 795: Configuring As_Path Attributes For Routes

    CE, to accept the routes in which the local AS number repeats once. Run: system-view The system view is displayed. Run: bgp { as-number-plain | as-number-dot } Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 796 { as-number-plain | as-number-dot } The BGP view is displayed. Run: peer { ipv4-address | group-name } fake-as { as-number-plain | as-number- dot } A fake AS number is configured. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 797 AS numbers from the AS_Path attribute. Run: system-view The system view is displayed. Run: bgp { as-number-plain | as-number-dot } The BGP view is displayed. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 798 AS numbers exceeding the maximum value will be discarded. Prevent a BGP device from checking the first AS number contained in the AS_Path attribute of an Update message received from an EBGP peer. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 799 Run the display bgp routing-table [ network [ { mask | mask-length } [ longer- prefixes ] ] ] command to check routing information in a BGP routing table. ----End Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 800: Configuring Bgp To Advertise Routes

    Multiple routes to the same destination may exist and traverse different ASs. Routes to be advertised need to be filtered in order to direct routes to specific ASs. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 801: Configuring Bgp Filters

    ACL rules are used to classify packets. After ACL rules are applied to a device, the device permits or denies packets based on the ACL rules. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 802 Configuration Guide - IP Routing 8 BGP Configuration For details on ACL configurations, see the HUAWEI NetEngine80E/40E Router Configuration Guide - IP Services. An ACL can be used as a matching condition of a route-policy or used in the filter-...
  • Page 803 – To configure a standard community filter, run the ip community-filter { basic comm-filter-name { permit | deny } [ community-number | aa:nn ] &<1-16> | basic-comm-filter-num { permit | deny } [ community-number | aa:nn ] Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 804 For example, there are two nodes defined using the route-policy route-policy-example permit node 10 and route-policy route- policy-example deny node 20 commands. If a route matches the node defined Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 805 10 only when it matches the two if-match clauses. (Optional) Perform the following operations as needed to configure apply clauses for current nodes of the route-policy: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 806: Configuring To Controll The Advertisement Of Bgp Routing Information

    To delete more than one community attribute, run the ip community- filter command multiple times. If multiple community attributes are specified in one community filter, none of them can be deleted. For more information, see the HUAWEI NetEngine80E/40E Router Command Reference.
  • Page 807 Then, configure another rule with a larger number in the same ACL and Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 808 If protocol is specified, only routes discovered by a specific routing protocol are filtered. If protocol is not specified, all the routes to be advertised are filtered, including Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 809 – If a route has not matched any ACL rules, the route will not be received or advertised by the system. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 810 Then, configure another rule with a larger number in the same ACL and Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 811: Configuring Bgp Soft Reset

    If the device's peers support route-refresh, perform the following operations: (Optional) Enable route-refresh. Run: system-view The system view is displayed. Run: bgp { as-number-plain | as-number-dot } The BGP view is displayed. Run: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 812 After this command is used, all routing updates sent by a specified peer or peer group are stored, regardless of whether an import policy is used. When the local routing policy changes, the information can be used to regenerate BGP routes again. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 813 AS_Path filter. # View information about AS_Path filter 3. <HUAWEI> display ip as-path-filter 3 ListID Mode Expression deny [30] permit # View routes matching AS_Path filter 3. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 814: Configuring Bgp To Receive Routes

    HUAWEI NetEngine80E/40E Router Configuration Guide - IP Routing 8 BGP Configuration <HUAWEI> display bgp routing-table as-path-filter 3 Total Number of Routes: 12 BGP Local router ID is 192.168.1.121 Status codes: * - valid, > - best, d - damped, h - history,...
  • Page 815 ACL rules are used to classify packets. After ACL rules are applied to a device, the device permits or denies packets based on the ACL rules. For details on ACL configurations, see the HUAWEI NetEngine80E/40E Router Configuration Guide - IP Services.
  • Page 816 ACL or an IP prefix list to filter BGP routes may be complicated and make it difficult to maintain new routes. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 817 { advanced comm-filter-name | adv-comm-filter-num } { permit | deny } regular- expression command. Configure an extcommunity filter. Similar to a BGP community filter, a BGP extcommunity filter is used to filter private network routes. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 818 10 and route-policy route-policy- example deny node 20 commands, a route is first matched with the node configured using the route-policy route-policy-example permit node 10 command. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 819 | overwrite } | none overwrite } command. – To delete a specified BGP community attribute from a route, run the apply comm- filter comm-filter-number delete command. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 820: Configuring To Controll The Acceptment Of Bgp Routing Information

    To delete more than one community attribute, run the ip community- filter command multiple times. If multiple community attributes are specified in one community filter, none of them can be deleted. For more information, see the HUAWEI NetEngine80E/40E Router Command Reference.
  • Page 821 ACL and specify the action deny in this rule to filter out unwanted routes. – To filter routes based on an advanced ACL, perform the following steps: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 822 Configure a BGP device to receive routes from a specific peer or peer group. You can configure a BGP device to filter received routes. Perform the following steps on a BGP router: Run: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 823 Then, configure another rule with a larger number in the same ACL and specify the action permit in this rule to receive or advertise the other routes. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 824 } ip-prefix ip-prefix-nameimport command. – To filter routes based on an AS_Path filter, run the peer { ipv4-address | group- name } as-path-filter { as-path-filter-number | as-path-filter-name } import command. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 825 – If none of the preceding parameters is set, the peer relationship is disconnected. The router retries setting up a connection after 30 seconds. An alarm is generated and recorded in the log. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 826 Configure BGP soft reset. Run the refresh bgp [ vpn-instance vpn-instance-name ipv4-family | vpnv4 | vpn-target | l2vpn-ad ] { all | ipv4-address | group group-name | external | Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 827 8.6.5 Checking the Configurations After configuring BGP route reception, you can view the imported routes matching a specified filter. Prerequisites The BGP route reception configurations have been configured. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 828 Named Community basic filter: bb (ListID = 201) permit # View the routes matching the specified BGP community filter named aa. <HUAWEI> display bgp routing-table community-filter aa BGP Local router ID is 10.1.1.1 Status codes: * - valid, > - best, d - damped,...

  • Page 829: Configuring A Device To Advertise Bgp Supernet Unicast Routes To Bgp Peers

    When a BGP device receives a BGP supernet unicast route, the BGP device sets the route invalid and does not advertise it to other BGP peers. If a Huawei device is connected to a non-Huawei device and you want the Huawei device to advertise BGP supernet unicast routes that it receives from the non-Huawei device to other BGP peers, configure the Huawei device to advertise BGP supernet unicast routes to BGP peers.
  • Page 830 Qos information : 0x0 AS-path Nil, origin igp, MED 0, localpref 100, pref-val 0, valid, internal, best, select, pre 20, IGP cost 10 Advertised to such 1 peers: 15.1.1.1 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 831: Configuring Bgp Route Aggregation

    BGP aggregates routes based on natural network segments. The command, however, cannot aggregate routes imported using the network command. Configure manual route aggregation. Run: system-view Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 832 BGP aggregated routes. # Run the display bgp routing-table network command to view information about BGP aggregated routes. <HUAWEI> display bgp routing-table 192.168.0.0 BGP local router ID : 2.2.2.2 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 833: Configuring Bgp Peer Groups

    The configuration of this peer will override the configuration inherited by the peer from the peer group. Pre-configuration Tasks Before configuring BGP peer groups, complete the following task: Configuring Basic BGP Functions Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 834: Creating Ibgp Peer Groups

    If multiple EBGP peers exist in an AS, adding them to an EBGP peer group can simplify the BGP network configuration and management. All the peers in a pure EBGP peer group must have the same AS number. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 835: Creating Mixed Ebgp Peer Groups

    AS number for each peer. Procedure Step 1 Run: system-view The system view is displayed. Step 2 Run: bgp { as-number-plain | as-number-dot } The BGP view is displayed. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 836 Run the display bgp group [ group-name ] command in the system view to view information about a specified peer group. # View information about a peer group named rr. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 837: Configuring Bgp Route Reflectors

    Pre-configuration Tasks Before configuring a BGP RR, complete the following task: Configuring Basic BGP Functions Data Preparation To configure a BGP RR, you need the following data. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 838: Configuring A Route Reflector And Specifying Clients

    The IPv4 unicast address family view is displayed. Step 4 Run: peer { ipv4-address | group-name } reflect-client The router is specified as an RR and its clients are configured. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 839: Optional) Disabling Route Reflection Between Clients

    8.10.4 (Optional) Configuring the Cluster ID for a Route Reflector If several RRs are deployed in a cluster, assigning the same cluster ID to them can prevent route loops. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 840 ID is already on the cluster list, RR2 discards the route. NOTE Using a cluster list prevents route loops between RRs within an AS. Procedure Step 1 Run: system-view Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 841: Optional) Preventing Bgp Routes From Being Added Into The Ip Routing Table

    IP routing table on the RR to make the RR dedicated to route transmission. Procedure Step 1 Run: system-view The system view is displayed. Step 2 Run: bgp { as-number-plain | as-number-dot } Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 842: Optional) Enabling The Rr To Modify The Route Attributes Using The Export Policy

    The IPv4 unicast address family view is displayed. Step 4 Run: reflect change-path-attribute You can enable the RR to modify the route attributes of the BGP routes using the export policy. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 843 ----End Example # After a BGP RR is configured, run the following command to view detailed information about its peers. <HUAWEI> display bgp peer 10.1.1.2 verbose BGP Peer is 10.1.1.2, remote AS 65009 Type: IBGP link BGP version 4, Remote router ID 4.4.4.4...

  • Page 844: Configuring A Bgp Confederation

    AS into several sub-ASs. Full-mesh IBGP connections are established between devices in each sub-AS, and full-mesh EBGP connections are established between devices in different sub-ASs, Compared with RRs, confederations facilitate IGP extensions. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 845 In such a situation, confederation compatibility must be configured. Perform the following steps on a BGP device: Run: system-view The system view is displayed. Run: bgp { as-number-plain | as-number-dot } Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 846: Configuring Bgp Community Attributes

    Community attributes are route attributes, which are transmitted between BGP peers, and the transmission is not restricted within an AS. Pre-configuration Tasks Before configuring BGP community attributes, complete the following task: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 847: Configuring Community Attribute-Related Routing Policies

    Run: apply extcommunity { rt { as-number:nn | ipv4-address:nn } } &<1-16> [ additive ] An extended community attribute (Route-Target) is configured for BGP routes. ----End Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 848: Configuring A Bgp Device To Send Community Attributes To Its Peer

    BGP peers advertise only the extended community attributes carried in routes to a specified peer or peer group, and the peer route-policy command cannot be used to modify the extended community attributes. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 849 BGP peer a set of routing policies that can be used by its peer to filter out unwanted routes during route advertisement. Applicable Environment During routing information transmission between two devices, routing policies can be used on receiving and sending devices to filter routes. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 850 Step 2 Run: bgp { as-number-plain | as-number-dot } The BGP view is displayed. Step 3 Run: ipv4-family unicast The IPv4 unicast address family view is displayed. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 851 This step needs to be performed on both communication devices. The ORF capability supported by non-Huawei devices may be different from that defined in the RFC standard. To enable a Huawei device to communicate with a non-Huawei device, ensure that the devices are configured with the same compatibility mode (either non-standard-compatible or RFC-compatible).

  • Page 852: Configuring To Adjust The Bgp Network Convergence Speed

    No import route policy No export route policy No import distribute policy No export distribute policy # View prefix-based ORF information received from a specified peer. <HUAWEI> display bgp peer 10.1.1.1 orf ip-prefix Total number of ip-prefix received: 1 Index Action Prefix...
  • Page 853 EBGP connection reset. After rapid EBGP connection reset is disabled, direct EBPG sessions will not be reestablished and deleted as interface alternates between Up and Down, which speeds up network convergence. BGP peer tracking Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 854: Configuring A Bgp Connectretry Timer

    In addition, a ConnectRetry timer configured for a specific peer or peer group takes precedence over that configured for all peers or peer groups. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 855: Configuring Bgp Keepalive And Hold Timers

    Keepalive messages to each other to detect BGP peer relationship status. If a device receives no Keepalive message from its peer after the hold timer expires, the device considers the BGP connection to be closed. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 856 Setting the Keepalive time to 20s is recommended. If the Keepalive time is smaller than 20s, sessions between peers may be closed. When setting values of keepalive-time and hold-time, note the following points: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 857 The Keepalive and hold timer values are set for a specific peer or peer group. For information about the relationship between the keepalive-time and hold-time values, see Configure BGP timers for all peers or peer groups. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 858: Configuring A Minrouteadvertisementintervaltimer

    The MinRouteAdvertisementIntervalTimer configured for a peer takes precedence over the MinRouteAdvertisementIntervalTimer configured for a peer group. ----End Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 859: Configuring The Rate At Which Bgp Updates Routes In Response To Non-Critical Iteration Changes

    { as-number-plain | as-number-dot } The BGP view is displayed. Step 3 Run: ipv4-family unicast The IPv4 unicast address family view is displayed. Step 4 Run: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 860: Disabling Fast Reset Of Ebgp Connections

    BGP network convergence, and reduces network bandwidth consumption. Perform the following steps on a BGP router. Procedure Step 1 Run: system-view The system view is displayed. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 861: Enabling Bgp Peer Tracking

    BGP peer tracking configured on a peer takes precedence over BGP peer tracking configured on the peer group of this peer. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 862 Update-group ID: 1 BGP current state: Established, Up for 00h00m22s BGP current event: RecvKeepalive BGP last state: OpenConfirm BGP Peer Up count: 1 Received total routes: 0 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 863: Configuring Bgp Route Dampening

    If the penalty value of a route exceeds the pre-defined threshold, the route will not be advertised until the penalty value of the route reduces to the reuse threshold. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 864 | as-path-filter as-path-filter-number | network-address [ { mask | mask- length } [ longer-match ] ] ] command to check route flapping statistics. Run the display bgp routing-table dampened command to check dampened BGP routes. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 865: Configuring A Bgp Device To Send A Default Route To Its Peer

    01:06:25 65534 4837 701 26959i # Run the display bgp routing-table dampening parameter command to view configured BGP route dampening parameters. For example: <HUAWEI> display bgp routing-table dampening parameter Maximum Suppress Time(in second) : 3973 Ceiling Value : 16000 Reuse Value...
  • Page 866 Procedure Step 1 Run: system-view The system view is displayed. Step 2 Run: bgp { as-number-plain | as-number-dot } The BGP view is displayed. Step 3 Run: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 867 10.1.1.2 *> 1.1.1.1/32 10.3.1.1 *>i 4.0.0.0 10.2.1.2 100? *>i 10.0.0.0 10.2.1.2 100? *>i 10.2.1.0/24 10.1.1.2 *> 10.3.1.0/24 0.0.0.0 10.3.1.1 *>i 192.168.0.0/16 10.2.1.2 100? *>i 192.168.15.0 10.2.1.2 100? Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 868: Configuring Bgp Load Balancing

    Set the number of BGP routes to be used for load balancing. Run: system-view The system view is displayed. Run: bgp { as-number-plain | as-number-dot } The BGP view is displayed. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 869 The router is configured not to compare the AS_Path attributes of the routes to be used for load balancing. By default, the router compares the AS_Path attributes of the routes to be used for load balancing. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 870 If you run the maximum load-balancing eibgp number command, the device changes the next hop addresses of the routes to be advertised to a local address no matter whether the routes are used for load balancing. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 871 After this command is run, routes can be selected to balance traffic, regardless of their IGP metric values. Exercise caution when using this command. ----End Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 872 VPN instance. # Display the routing table of the VPN instance vpn1. You can see the routes to be used for load balancing. <HUAWEI> display ip routing-table vpn-instance vpn1 Route Flags: R - relay, D - download to fib ------------------------------------------------------------------------------...
  • Page 873 1:1 route-policy in permit node 20 route-policy out permit node 10 if-match community-filter filter1 apply ip-address next-hop 10.1.3.2 route-policy out permit node 20 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 874: Configuring Path Mtu Auto Discovery

    BGP performance, configure path MTU auto discovery between Router A and Router D to allow BGP messages to be transmitted based on the MSS of 1496. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 875 The transmit and receive paths between two BGP peers may be different. Therefore, running this command on both ends is recommended. It makes both peers exchange messages based on the path MTU. Step 4 Run: quit Return to the system view. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 876 Run the display bgp peer [ ipv4-address ] verbose command to check whether path MTU auto discovery has been successfully configured. # After configuring path MTU auto discovery, view detailed information about the BGP peer at 10.1.1.2. <HUAWEI> display bgp peer 10.1.1.2 verbose BGP Peer is 10.1.1.2, remote AS 65009 Type: IBGP link BGP version 4, Remote router ID 4.4.4.4...

  • Page 877: Configuring The Bgp Next Hop Delayed Response

    PE3, PE3 does not need to delete the route or instruct CE1 to delete the route. This delayed response speeds up BGP route convergence and minimizes traffic loss. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 878 { as-number-plain | as-number-dot } The BGP view is displayed. Step 3 Set a delay in responding to next hop changes. The iteration results are as follows: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 879: Configuring Bfd For Bgp

    # Display the delay in responding to a next hop change. <HUAWEI> display current-configuration configuration bgp | include nexthop recursive-lookup delay nexthop recursive-lookup delay 20 # Display the delay in responding to non-urgent next hop changes.
  • Page 880 Step 3 Run: quit Return to the system view. Step 4 Run: bgp { as-number-plain | as-number-dot } The BGP view is displayed. Step 5 (Optional) Run: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 881 The default value of wtr-value is 0, which means that the WTR timer will not be started. Step 7 Run: peer { group-name | ipv4-address } bfd enable [ single-hop-prefer ] Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 882: Configuring Bgp Auto Frr

    IBGP peers. By default, if single-hop-prefer is not specified, multi-hop sessions are established between direct IBGP peers (Huawei devices). To interconnect a Huawei device and a non-Huawei device that defaults the sessions between IBGP peers to single-hop, configure single-hop-prefer in the command.
  • Page 883 The BGP IPv4 unicast address family view is displayed. Step 4 Run: auto-frr BGP Auto FRR for unicast routes is enabled. By default, BGP Auto FRR is disabled for unicast routes. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 884 ----End Checking the Configurations After configuring BGP Auto FRR, you can run the following commands to check the configurations. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 885: Configuring Bgp Gr

    4.4.4.4/32. The route with next hop 10.1.1.2 has a smaller MED value and therefore becomes the optimal route. <HUAWEI> display bgp routing-table 4.4.4.4 32 longer-prefixes BGP Local router ID is 1.1.1.1 Status codes: * - valid, >...

  • Page 886: Enabling Bgp Gr

    Step 1 Run: system-view The system view is displayed. Step 2 Run: bgp { as-number-plain | as-number-dot } The BGP view is displayed. Step 3 Run: graceful-restart Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 887: Configuring Parameters For A Bgp Gr Session

    GR restarter restarts to the time when the BGP session is reestablished. By default, the restart period is 150 seconds. NOTE Changing the BGP restart period reestablishes BGP peer relationships. Step 4 Run: graceful-restart timer wait-for-rib time Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 888 ----End Example # Run the display bgp peer ipv4-address verbose command to view the BGP GR status. For example: <HUAWEI> display bgp peer 10.1.3.2 verbose BGP Peer is 10.1.3.2, remote AS 65009 Type: IBGP link BGP version 4, Remote router ID 3.3.3.3...

  • Page 889: Configuring Bgp Security

    TTL detection. If an attack simulates BGP packets and sends a large number of packets to a router, an interface through which the router receives the packets directly sends the Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 890: Configuring Md5 Authentication

    The BGP view is displayed. Step 3 Run: peer { ipv4-address | group-name } password { cipher cipher-password | simple simple-password } An MD5 authentication password is set. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 891: Configuring Keychain Authentication

    The peer keychain command run in the BGP view is also applicable to the BGP-VPNv4 address family view, because both BGP and BGP-VPNv4 use the same TCP connection. l BGP MD5 authentication and BGP keychain authentication are mutually exclusive. ----End Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 892: Configuring Bgp Gtsm

    The system view is displayed. Run: gtsm default-action { drop | pass } The default action to be taken on the packets that do not match a GTSM policy is Drop. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 893 ----End Example # Run the display bgp peer ipv4-address verbose command to view detailed information about MD5 authentication on BGP peers. For example: <HUAWEI> display bgp peer 10.1.1.2 verbose BGP Peer is 10.1.1.2, remote AS 65008 Type: EBGP link BGP version 4, Remote router ID 1.1.1.1...
  • Page 894 No routing policy is configured # Run the display bgp peer ipv4-address verbose command to view detailed information about keychain authentication on BGP peers. For example: <HUAWEI> display bgp peer 10.1.1.2 verbose BGP Peer is 10.1.1.1, remote AS 65009 Type: EBGP link BGP version 4, Remote router ID 2.2.2.2...
  • Page 895 For example: <HUAWEI> display gtsm statistics all GTSM Statistics Table ---------------------------------------------------------------- SlotId Protocol Total Counters Drop Counters Pass Counters ---------------------------------------------------------------- BGPv6 OSPF OSPFv3 BGPv6 OSPF OSPFv3 ---------------------------------------------------------------- Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 896: Disabling The Bgp-Ipv4 Unicast Address Family

    To enable the BGP-IPv4 unicast address family for a specified BGP peer, run the peer enable command in the BGP view or the BGP-IPv4 unicast address family view. ----End Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 897: Applying Bgp As_Path Regular Expressions

    | include default ipv4-unicast command to check the configurations. For example: # Display the BGP-IPv4 unicast address family configuration. <HUAWEI> display current-configuration configuration bgp | include default ipv4- unicast undo default ipv4-unicast 8.25 Applying BGP AS_Path Regular Expressions A regular expression is a string of characters that define a rule, against which other strings of characters are matched.
  • Page 898 AS_Path examples that 65$ does not match: 651, 1650, 6650, 60650, and 65001 NOTE ^$ matches null strings of characters (null AS_Path) and can be used to match the locally generated routes. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 899 AS number (the number of the first AS through "$". which a route passes) or the routes that originate in AS 65001. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 900 Router A and Router C, between Router B and Router C, between Router B and Router D, between Router C and Router D, and between Router D and Router E. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 901 - internal, s - suppressed, S - Stale Origin : i - IGP, e - EGP, ? - incomplete Total Number of Routes: 2 Network NextHop LocPrf PrefVal Path/Ogn *> 3.3.3.9/32 10.1.1.2 65001 65101 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 902 Case 4: Configure an AS_Path filter named s4 and allow Router A to discard routes that pass through intermediate AS 65101. [RouterA] ip as-path-filter s4 deny ._65101_. [RouterA] ip as-path-filter s4 permit .* [RouterA] display bgp routing-table as-path-filter s4 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 903 65001 65101 300i The preceding command output shows that the BGP routing table contains only one route that originates in AS 300 and passes through AS 65001. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 904 - internal, s - suppressed, S - Stale Origin : i - IGP, e - EGP, ? - incomplete Total Number of Routes: 1 Network NextHop LocPrf PrefVal Path/Ogn Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 905 Router C and Router D, and between Router D and Router E. AS 65001, AS 65011, AS 65101, and AS 65121 form a BGP confederation with AS 200 as its ID. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 906 [RouterA] ip as-path-filter s10 permit .* [RouterA] display bgp routing-table as-path-filter s10 BGP Local router ID is 189.6.2.2 Status codes: * - valid, > - best, d - damped, Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 907 Origin : i - IGP, e - EGP, ? - incomplete Total Number of Routes: 11 Network NextHop LocPrf PrefVal Path/Ogn *>i 1.1.1.9/32 10.1.1.1 (65121)i 10.1.2.1 (65011 65121) Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 908: Maintaining Bgp

    After you configure the Border Gateway Protocol (BGP) to record peer status changes and event information, BGP keeps logs when the peer status changes or an event occurs. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 909: Resetting Bgp Connections

    BGP is configured to record peer status changes and event information. ----End 8.26.2 Resetting BGP Connections Resetting a BGP connection will interrupt the peer relationship. You can also reset BGP in GR mode. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 910: Clearing Bgp Information

    This section describes how to clear the statistics of BGP accounting, flapped routes, and suppressed routes. Context NOTICE BGP statistics cannot be restored after being cleared. Exercise caution when running this command. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 911: Bgp Route Selection Rules

    Table 8-9 Key points for route processing Remarks BGP can import direct routes, static routes, user network routes, and IGP routes based on the import-route (BGP) or network command configuration. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 912 When multiple routes are available to the same destination, BGP selects one optimal route based on BGP route selection rules and adds it to the IP routing table for traffic forwarding. Figure 8-11 shows how the optimal route is selected. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 913 In addition, the first column can be summarized as a character string (PPAAA OMTCC RA), which helps memorize the matching sequence. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 914 The route with the If the bestroute as-path-ignore shortest AS_Path length command is configured, BGP does not is preferred. compare the AS_Path attribute. Origin IGP > EGP > Incomplete - Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 915 The routes have the same AIGP value. The routes have the same AS_Path length. The routes have the same origin type (IGP, EGP, or incomplete). The routes have the same MED value. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 916: Bgp Routing Table

    IP address of a BGP route Cluster_List display bgp routing-table network Originator_ID display bgp routing-table network Router ID display bgp routing-table network Peer IP display bgp routing-table network address Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 917 Table 8-12 Description of the display bgp routing-table command output Item Description BGP Local router ID is 1.1.1.2 Router ID: 1.1.1.2, in the same format as an IPv4 address Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 918 Network Network address in the BGP routing table NextHop Next hop address MED value of a BGP route, similar to the cost of IGP routes LocPrf Local_Pref Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 919 IP address of the route to which the BGP route is iterated. Relay IP Out- Outbound interface of the route to which the BGP route is iterated. Interface Original nexthop Original next hop IP address. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 920 12.13.14.15/32 is an IBGP route. If you run the display bgp routing-table network [ { mask | mask-length } [ longer-prefixes ] ] command, the route type will be displayed. For example: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 921: Route Attributes

    Unlike the Next_Hop attribute in an IGP, the Next_Hop attribute in BGP is not necessarily the IP address of a neighboring device. In most cases, the Next_Hop attribute in BGP complies with the following rules: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 922 After being forwarded to Configuring BGP the IBGP peers, the route Load Balancing. can be active because the Next_Hop is reachable (an IGP is configured in the AS). Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 923 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 924 During route selection, BGP first checks whether the next hop addresses of routes are reachable. Routes carrying unreachable next hop addresses are invalid and are not selected. Table 8-15 shows how to obtain a reachable next hop IP address or tunnel. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 925 BGP Local router ID is 10.1.1.1 Status codes: * - valid, > - best, d - damped, h - history, i - internal, s - suppressed, S - Stale Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 926 Origin : i - IGP, e - EGP, ? - incomplete Total Number of Routes: 3 Network NextHop LocPrf PrefVal Path/Ogn *> 1.1.1.9/32 0.0.0.0 *>i 3.3.3.9/32 10.1.2.1 65001i *>i 10.1.2.0/30 10.1.1.2 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 927 BGP prefers the route with the largest PreVal value during BGP route selection. PrefVal is Huawei-specific and valid only on the device where it is configured. The PreVal attribute is set by customers. Therefore, BGP first compares the PreVal values during route selection.
  • Page 928 The BGP routing table of Router A shows that Router A receives the routes 10.11.0.0/16 and 10.22.0.0/16 from ISP1 and ISP2. Check the information about the route 10.11.0.0/16 on Router A. [RouterA] display bgp routing-table 10.11.0.0 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 929 AS_Path 300 100 The route learned from ISP2 is selected as the optimal route because its AS_Path is shorter than that of the route learned from ISP1. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 930 Original nexthop: 10.1.3.2 Qos information : 0x0 AS-path 200, origin incomplete, pref-val 0, valid, external, pre 255, not preferred for PreVal Not advertised to any peer yet Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 931 - internal, s - suppressed, S - Stale Origin : i - IGP, e - EGP, ? - incomplete Total Number of Routes: 4 Network NextHop LocPrf PrefVal Path/Ogn *> 10.11.0.0/16 10.1.2.2 300 100? Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 932 Table 8-18 Methods to modify the Local_Pref value Method Usage Scenario Run the default local-preference command. This method sets a default Local_Pref for the routes that the local device advertises to IBGP peers. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 933 BGP Local router ID is 192.168.2.3 Status codes: * - valid, > - best, d - damped, h - history, i - internal, s - suppressed, S - Stale Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 934 Table 8-19 Route attribute comparison of the routes 10.11.0.0/16 learned from ISP1 and Router B Route Attribute Route Learned Route Learned Comparison from ISP1 from Router B PrefVal The same. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 935 2 available, 1 best, 1 select BGP routing table entry information of 10.11.0.0/16: From: 10.1.5.1 (192.168.2.2) Route Duration: 00h12m46s Relay IP Nexthop: 10.1.5.1 Relay IP Out-Interface: GigabitEthernet1/0/1 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 936 To meet the preceding requirements, run the default local-preference command on Router A to increase the Local_Pref values of the routes learned from Router A. This configuration ensures Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 937 [RouterB] display bgp routing-table 10.11.0.0 BGP local router ID : 192.168.2.2 Local AS number : 65001 Paths: 2 available, 1 best, 1 select BGP routing table entry information of 10.11.0.0/16: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 938 Origin : i - IGP, e - EGP, ? - incomplete Network NextHop LocPrf PrefVal Path/Ogn *>i 10.1.1.0/30 10.1.4.1 *>i 10.1.2.0/30 10.1.5.1 *>i 10.11.0.0/16 10.1.1.1 100 10i *>i 10.22.0.0/16 10.1.1.1 100 10i Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 939 Configurations on Router A bgp 65001 ipv4-family unicast peer 10.1.1.1 route-policy rp1 import //Apply import policy named rp1 to the routes learned from 10.1.1.1 and use rp1 to modify the Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 940 Total Number of Routes: 5 Network NextHop LocPrf PrefVal Path/Ogn *> 10.1.1.0/30 0.0.0.0 *>i 10.1.2.0/30 10.1.3.2 *> 10.11.0.0/16 10.1.1.1 100 10i *>i 10.22.0.0/16 10.1.2.1 200 10i 10.1.1.1 100 10i Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 941 Router C. As a result, only one route 10.11.0.0/16 with next hop address 10.1.1.1 is available in the BGP routing table of Router A. # Display the routing table of Router B. [RouterB] display bgp routing-table BGP Local router ID is 192.168.2.2 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 942 Origin : i - IGP, e - EGP, ? - incomplete Network NextHop LocPrf PrefVal Path/Ogn *>i 10.1.1.0/30 10.1.4.1 *>i 10.1.2.0/30 10.1.5.1 *>i 10.11.0.0/16 10.1.1.1 100 10i *>i 10.22.0.0/16 10.1.2.1 200 10i Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 943 Configure an import policy on Router C to modify the Local_Pref of the routes learned from Router A. The configurations on Router A are used as an example. Detailed configurations are as follows: bgp 65001 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 944 Origin : i - IGP, e - EGP, ? - incomplete Network NextHop LocPrf PrefVal Path/Ogn *>i 10.1.1.0/30 10.1.4.1 *>i 10.1.2.0/30 10.1.5.1 *>i 10.11.0.0/16 10.1.1.1 100 10i 10.1.2.1 200 10i Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 945 The routes imported using the network command take precedence over the routes imported using the import-route command. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 946 - internal, s - suppressed, S - Stale Origin : i - IGP, e - EGP, ? - incomplete Total Number of Routes: 10 Network NextHop LocPrf PrefVal Path/Ogn Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 947 The configurations on Router B are as follows: bgp 65001 ipv4-family unicast summary automatic aggregate 10.0.0.0 255.0.0.0 import-route direct Run the display bgp routing-table [ ip-address ] command to check the configurations. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 948 The preceding command output shows that the route generated using the aggregate command is selected as the optimal route. AIGP BGP prefers the route with the smallest AIGP value during BGP route selection. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 949 Router D 10.1.4.2/30 Run the display bgp routing-table [ ip-address ] command on Router E to check the configurations. The route 10.1.4.0/30 is used in this example. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 950 10 //Define the first node of aigp_policy and set the AIGP value of the route 10.1.4.0/30 to 10. if-match ip-prefix prefix1 apply aigp 10 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 951 10.1.1.2 65002? 10.1.3.2 65002? *> 10.1.4.0/30 10.1.3.2 65002? 10.1.1.2 65002? *> 10.1.5.0/30 10.1.3.2 65002? 10.1.1.2 65002? [RouterE] display bgp routing-table 10.1.4.0 BGP local router ID : 10.1.1.1 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 952 The AS_Set attribute is used in route summarization scenarios. AS_Confed_Sequence: records in reverse order all the sub-ASs within a BGP confederation through which a route passes from the local device to the destination. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 953 After the command is configured, BGP deletes private AS numbers (if any) from the AS_Path attribute before sending Update packets. Private AS numbers range from 64512 to 65534. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 954 On B: peer C public-as-only ISP1 ISP2 AS 65001 AS 100 AS 200 10.0.0.0/8 Router A Router C Router B Update Update 10.0.0.0/8 10.0.0.0/8 AS_Path: 65001 AS_Path: 100 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 955 AS 65002 AS 65004 10.1.2.2/30 10.1.1.2/30 10.1.2.1/30 10.1.4.1/3 Router B Router D 10.1 10.1.1.1/30 AS 65001 Router A Router E 10.1.5.2 10.1.3.1/30 Router C 10.1.3.2/30 10.1.5.1/30 AS 65003 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 956 10.1.3.1 route-policy add_asn export //Apply export policy named add_asn to routes to be advertised to 10.1.3.1. route-policy add_asn permit node 10 //Define the first node of Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 957 From: 10.1.3.2 (10.1.5.1) Route Duration: 00h02m12s Direct Out-interface: GigabitEthernet0/0/0 Original nexthop: 10.1.3.2 Qos information : 0x0 AS-path 65003 65003 65003 65003 65005, origin incomplete, pref-val 0, valid, Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 958 AS_Path as that of the route learned from Router B, and the two routes are used to load- balance traffic. Detailed configurations on Router A are as follows: bgp 65001 ipv4-family unicast undo synchronization peer 10.1.3.2 route-policy replace_asn import //Apply export policy named Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 959 Original nexthop: 10.1.1.2 Qos information : 0x0 AS-path 65002 65004 65005, origin incomplete, pref-val 0, valid, external, best, select, active, pre 255 Advertised to such 2 peers: 10.1.1.2 10.1.3.2 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 960 IGP: indicates that routes are added to the BGP routing table using the network command. IGP has the highest priority. EGP: indicates that routes are learned through the EGP protocol. EGP has the second highest priority. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 961 BGP Local router ID is 10.1.1.2 Status codes: * - valid, > - best, d - damped, h - history, i - internal, s - suppressed, S - Stale Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 962 Router D PrefVal The same. Local_Pref The same. Route type Learned from a peer Learned from a peer The same. AIGP The same. AS_Path The same length. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 963 Qos information : 0x0 AS-path Nil, origin incomplete, MED 0, localpref 100, pref-val 0, valid, internal, best, select, active, pre 255 Advertised to such 1 peers: 10.1.1.1 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 964 EBGP peers, the route with the smallest MED value is selected as the optimal route if all the other attributes are the same. Table 8-28 lists two methods used to modify the MED value. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 965 After the deterministic-med command is configured, routes will not be selected in the same sequence they are received. Figure 8-22, ISP1 and ISP2 can learn the route 1.1.1.9/32 from Router C or Router D. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 966 - internal, s - suppressed, S - Stale Origin : i - IGP, e - EGP, ? - incomplete Total Number of Routes: 2 Network NextHop LocPrf PrefVal Path/Ogn Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 967 Route Learned Comparison from Router C from Router D PrefVal The same. Local_Pref The same. Route type Learned from a peer Learned from a peer The same. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 968 To meet the preceding requirements, ensure that ISP1 selects the route learned from Router C and that ISP2 selects the route learned from Router D. Figure 8-23 shows the networking in which MED is used to control route selection. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 969 10.1.4.1 route-policy addmed100 export //Apply export policy named addmed100 to the routes to be advertised to 10.1.4.1 and use addmed100 to modify the MED value. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 970 [RouterB] display bgp routing-table 1.1.1.9 32 BGP local router ID : 10.1.2.1 Local AS number : 200 Paths: 2 available, 1 best, 1 select BGP routing table entry information of 1.1.1.9/32: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 971 Router D does not carry the MED value. During route selection, BGP uses the default value (0) as the MED of the route. Therefore, this route is Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 972 – BGP first compares route A1 and route B. The leftmost AS number in the AS_Path of route A1 is 65001, which is different from its counterpart in route B (65002). Therefore, Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 973: Peer Type

    Router B have an IBGP route and an EBGP route, and the two routes have the same AS_Path. In this situation, Router A and Router B select the EBGP route as the optimal route. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 974 Router B and Router C, and between Router B and Router D; Router E is configured to import routes (1.1.1.9/32 for example) from AS 100 to BGP. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 975 2 available, 1 best, 1 select BGP routing table entry information of 1.1.1.9/32: From: 10.1.3.2 (2.2.2.9) Route Duration: 00h00m44s Relay IP Nexthop: 10.1.3.2 Relay IP Out-Interface: GigabitEthernet0/0/0 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 976 BGP peer relationship establishment or the costs of used IGP routes are 0, the IGP cost is not displayed in the display bgp routing-table ip- address command output. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 977 BGP Upd Cluster3 Run the display bgp routing-table [ ip-address ] command on Router A to check the configurations. # Display the routing table of Router A. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 978 Router B from Router C PrefVal The same. Local_Pref The same. Route type Learned from a peer Learned from a peer The same. AIGP The same. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 979 RRs. Router D is a client of Router B, and Router E is a client of Router C. Router D and Router E are configured to import the route 10.1.4.0/30 to BGP. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 980 Relay IP Nexthop: 10.1.3.2 Relay IP Out-Interface: GigabitEthernet0/0/1 Original nexthop: 10.1.5.2 Qos information : 0x0 AS-path Nil, origin igp, MED 0, localpref 100, pref-val 0, valid, internal, best, Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 981 Peer type IBGP IBGP The same. IGP cost The same. Cluster_List 0.0.0.2 0.0.0.3 The same length. Originator_ID 10.1.4.2 10.1.4.1 The route learned from Router C is optimal. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 982 BGP peer relationships. In the following example, the two links are used to establish two BGP peer relationships to show how peer addresses are used in route selection. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 983 BGP local router ID : 192.168.2.3 Local AS number : 65001 Paths: 2 available, 1 best, 1 select BGP routing table entry information of 2.2.2.9/32: From: 10.1.1.2 (192.168.2.4) Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 984 Update messages carrying only changed routing information to its peers, and will not send its entire routing table. This greatly reduces bandwidth consumption. Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 985 # Configure Router B. [RouterB] bgp 65009 [RouterB-bgp] router-id 2.2.2.2 [RouterB-bgp] peer 9.1.1.2 as-number 65009 [RouterB-bgp] peer 9.1.3.2 as-number 65009 # Configure Router C. [RouterC] bgp 65009 [RouterC-bgp] router-id 3.3.3.3 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 986 # View the routing table of Router B. [RouterB] display bgp routing-table BGP Local router ID is 2.2.2.2 Status codes: * - valid, > - best, d - damped, Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 987 Status codes: * - valid, > - best, d - damped, h - history, i - internal, s - suppressed, S - Stale Origin : i - IGP, e - EGP, ? - incomplete Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 988 200.1.1.1 enable return Configuration file of Router B sysname RouterB interface Pos1/0/0 link-protocol ppp ip address 9.1.1.1 255.255.255.0 interface Pos2/0/0 link-protocol ppp ip address 200.1.1.1 255.255.255.0 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 989 9.1.2.2 255.255.255.0 bgp 65009 router-id 4.4.4.4 peer 9.1.1.1 as-number 65009 peer 9.1.2.1 as-number 65009 ipv4-family unicast undo synchronization peer 9.1.1.1 enable peer 9.1.2.1 enable return Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 990: Example For Configuring Bgp To Interact With An Igp

    Router B. (Optional) Configure BGP route summarization on Router B to simplify the BGP routing table. Data Preparation To complete the configuration, you need the following data: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 991 Origin : i - IGP, e - EGP, ? - incomplete Total Number of Routes: 3 Network NextHop LocPrf PrefVal Path/Ogn *> 8.1.1.0/24 0.0.0.0 *> 9.1.1.0/24 3.1.1.1 65009? Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 992 Reply from 9.1.2.1: bytes=56 Sequence=5 ttl=254 time=47 ms --- 9.1.2.1 ping statistics --- 5 packet(s) transmitted 5 packet(s) received 0.00% packet loss round-trip min/avg/max = 15/37/47 ms ----End Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 993 Configuration file of Router C sysname RouterC interface GigabitEthernet2/0/0 ip address 9.1.2.1 255.255.255.0 interface Pos1/0/0 link-protocol ppp ip address 9.1.1.2 255.255.255.0 ospf 1 area 0.0.0.0 network 9.1.1.0 0.0.0.255 Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 994: Example For Configuring As_Path Filters

    AS 30 to AS 10 or routes of AS 10 to AS 30. Data Preparation To complete the configuration, you need the following data: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 995 BGP Local router ID is 3.3.3.3 Status codes: * - valid, > - best, d - damped, h - history, i - internal, s - suppressed, S - Stale Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 996 BGP Local router ID is 3.3.3.3 Status codes: * - valid, > - best, d - damped, h - history, i - internal, s - suppressed, S - Stale Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 997 127.0.0.1/32 0.0.0.0 *> 200.1.2.0 0.0.0.0 200.1.2.2 *> 200.1.2.1/32 0.0.0.0 200.1.2.2 *> 200.1.2.2/32 0.0.0.0 *> 200.1.3.0 200.1.2.2 *> 200.1.3.2/32 200.1.2.2 ----End Configuration Files Configuration file of Router A Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 998 .* return Configuration file of Router C sysname RouterC interface GigabitEthernet1/0/0 undo shutdown ip address 20.1.1.1 255.255.255.0 interface Pos2/0/0 link-protocol ppp undo shutdown Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

  • Page 999: Example For Configuring Med Attributes To Control Bgp Route Selection

    Figure 8-32 Networking diagram for configuring MED attributes of routes to control route selection RouterB POS2/0/0 200.1.1.1/24 GE1/0/0 POS1/0/0 AS 65008 9.1.1.1/24 200.1.1.2/24 EBGP IBGP RouterA AS 65009 POS2/0/0 200.1.2.2/24 EBGP GE1/0/0 9.1.1.2/24 POS2/0/0 200.1.2.1/24 RouterC Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.
  • Page 1000 [RouterA] display bgp routing-table 9.1.1.0 24 BGP local router ID : 1.1.1.1 Local AS number : 65008 Paths: 2 available, 1 best, 1 select BGP routing table entry information of 9.1.1.0/24: Issue 02 (2014-09-30) Huawei Proprietary and Confidential Copyright © Huawei Technologies Co., Ltd.

This manual is also suitable for:

Quidway netengine40eNe40eNe80e