Check if your network drops RPKI invalid bgp advertisements.
Reset DCN Switch
Private VLANs on a OPTILINK SWITCH
OP-MEN99216BC# show running-config
Building configuration...
hostname OP-MEN99216BC
username admin privilege 15 password encrypted cGEkJHcwcmQ=
loop-protect
!
vlan 1,2,45,790-792,794
!
!
!
!
ip route 0.0.0.0 0.0.0.0 10.0.0.1
ip dhcp snooping
ntp server 1 ip-address 211.233.84.186
ntp server 2 ip-address 10.0.0.1
ntp server 3 ip-address asia.pool.ntp.org
clock timezone '' 5 30
tzidx 0
spanning-tree mode rstp
spanning-tree edge bpdu-filter
spanning-tree edge bpdu-guard
spanning-tree recovery interval 30
spanning-tree mst 0 priority 53248
snmp-server contact SM
snmp-server location Kolkata
no snmp-server user default_user engine-id 800007e5017f000001
system contact SM
system name OP-MEN99216BC
system location KOLKATA
system description 16-Port GbE L2+ Managed Fiber Switch
!
interface GigabitEthernet 1/1
no spanning-tree
loop-protect action log
switchport access vlan 2
switchport mode trunk
no pvlan 1
pvlan 2
description ISP1_IN
broadcast-storm-protection action log
broadcast-storm-protection pps 1024
broadcast-storm-protection timer 600
!
interface GigabitEthernet 1/2
no spanning-tree
loop-protect action shutdown log
switchport access vlan 2
pvlan isolation
pvlan 1,2
no ip dhcp snooping trust
speed 1000
duplex full
broadcast-storm-protection
broadcast-storm-protection action both
broadcast-storm-protection pps 1024
broadcast-storm-protection timer 600
!
interface GigabitEthernet 1/3
no spanning-tree
loop-protect action shutdown log
switchport access vlan 792
pvlan isolation
pvlan 1,2
no ip dhcp snooping trust
speed 1000
duplex full
broadcast-storm-protection
broadcast-storm-protection action both
broadcast-storm-protection pps 1024
broadcast-storm-protection timer 600
!
interface GigabitEthernet 1/4
no spanning-tree
loop-protect action shutdown log
switchport access vlan 2
pvlan isolation
pvlan 1,2
no ip dhcp snooping trust
broadcast-storm-protection
broadcast-storm-protection action both
broadcast-storm-protection pps 1024
broadcast-storm-protection timer 600
!
interface GigabitEthernet 1/5
loop-protect action log
switchport access vlan 792
pvlan isolation
pvlan 1,2
no ip dhcp snooping trust
speed 1000
duplex full
broadcast-storm-protection action log
broadcast-storm-protection pps 1024
broadcast-storm-protection timer 600
!
interface GigabitEthernet 1/6
no spanning-tree
loop-protect action shutdown log
switchport access vlan 2
pvlan isolation
pvlan 1,2
no ip dhcp snooping trust
broadcast-storm-protection
broadcast-storm-protection action both
broadcast-storm-protection pps 1024
broadcast-storm-protection timer 600
!
interface GigabitEthernet 1/7
no spanning-tree
loop-protect action shutdown log
switchport access vlan 792
pvlan isolation
pvlan 1,2
no ip dhcp snooping trust
speed 1000
duplex full
broadcast-storm-protection
broadcast-storm-protection action both
broadcast-storm-protection pps 1024
broadcast-storm-protection timer 600
!
interface GigabitEthernet 1/8
no spanning-tree
loop-protect action shutdown log
switchport access vlan 2
pvlan isolation
pvlan 1,2
no ip dhcp snooping trust
broadcast-storm-protection
broadcast-storm-protection action both
broadcast-storm-protection pps 1024
broadcast-storm-protection timer 600
!
interface GigabitEthernet 1/9
no spanning-tree
loop-protect action shutdown log
switchport access vlan 792
pvlan isolation
pvlan 1,2
no ip dhcp snooping trust
speed 1000
duplex full
broadcast-storm-protection
broadcast-storm-protection action both
broadcast-storm-protection pps 1024
broadcast-storm-protection timer 600
!
interface GigabitEthernet 1/10
no spanning-tree
loop-protect action shutdown log
switchport access vlan 2
pvlan isolation
pvlan 1,2
no ip dhcp snooping trust
broadcast-storm-protection
broadcast-storm-protection action both
broadcast-storm-protection pps 1024
broadcast-storm-protection timer 600
!
interface GigabitEthernet 1/11
no spanning-tree
loop-protect action shutdown log
switchport access vlan 2
switchport mode trunk
pvlan isolation
no pvlan 1
pvlan 2
description ISP1_OUT
broadcast-storm-protection action both
broadcast-storm-protection pps 1024
broadcast-storm-protection timer 600
!
interface GigabitEthernet 1/12
no spanning-tree
loop-protect action shutdown log
switchport access vlan 2
pvlan isolation
pvlan 1,2
no ip dhcp snooping trust
broadcast-storm-protection
broadcast-storm-protection action both
broadcast-storm-protection pps 1024
broadcast-storm-protection timer 600
!
interface GigabitEthernet 1/13
no spanning-tree
loop-protect action shutdown log
pvlan isolation
pvlan 1,2
no ip dhcp snooping trust
broadcast-storm-protection
broadcast-storm-protection action both
broadcast-storm-protection pps 1024
broadcast-storm-protection timer 600
!
interface GigabitEthernet 1/14
loop-protect action log
switchport access vlan 792
pvlan isolation
pvlan 1,2
no ip dhcp snooping trust
broadcast-storm-protection action log
broadcast-storm-protection pps 1024
broadcast-storm-protection timer 600
!
interface 10GigabitEthernet 1/1
no spanning-tree
loop-protect action shutdown log
switchport access vlan 2
pvlan isolation
pvlan 1,2
no ip dhcp snooping trust
speed 1000
broadcast-storm-protection
broadcast-storm-protection action both
broadcast-storm-protection pps 1024
broadcast-storm-protection timer 600
!
interface 10GigabitEthernet 1/2
no spanning-tree
loop-protect action shutdown log
switchport access vlan 2
pvlan isolation
pvlan 1,2
no ip dhcp snooping trust
speed auto
duplex auto
broadcast-storm-protection
broadcast-storm-protection action both
broadcast-storm-protection pps 1024
broadcast-storm-protection timer 600
!
interface vlan 2
ip address 10.0.0.2 255.255.255.0
!
!
!
spanning-tree aggregation
spanning-tree link-type point-to-point
!
!
line console 0
!
line vty 0
!
line vty 1
!
line vty 2
!
line vty 3
!
line vty 4
!
line vty 5
!
line vty 6
!
line vty 7
!
line vty 8
!
line vty 9
!
line vty 10
!
line vty 11
!
line vty 12
!
line vty 13
!
line vty 14
!
line vty 15
!
dms mode disabled
!
end
OP-MEN99216BC#
Setting management IP address and gateway in Revo GEPON
Remove any gateway set in aux port, if there exist any.
Then create the interface VLAN and set IP there.
Add default route in the following format: 0.0.0.0 0.0.0.0 1.1.1.1
BGP Communities
General blocking filter for blackholing IP Address:
88888:0
Where 88888 is the AS to which you want to not to forward any BGP advertisements through the peer.
BGP with IPv6 Addresses. Injecting BGP routes in OSPF
Building configuration...
Current configuration : 2581 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname AIRTEL
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
ip source-route
no ip icmp rate-limit unreachable
!
!
!
!
ip cef
no ip domain lookup
ipv6 unicast-routing
no ipv6 traffic interface-statistics
ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
redundancy
!
!
!
!
!
ip tcp synwait-time 5
!
!
!
!
interface Ethernet0/0
description "IKF_CORE"
ip address 1.4.0.1 255.255.255.252
ipv6 address 2401:AF:1:1:1:1:1:1/126
!
interface Ethernet0/1
no ip address
shutdown
!
interface Ethernet0/2
no ip address
shutdown
!
interface Ethernet0/3
no ip address
shutdown
!
interface Ethernet1/0
no ip address
shutdown
!
interface Ethernet1/1
no ip address
shutdown
!
interface Ethernet1/2
no ip address
shutdown
!
interface Ethernet1/3
no ip address
shutdown
!
interface Serial2/0
no ip address
shutdown
serial restart-delay 0
!
interface Serial2/1
no ip address
shutdown
serial restart-delay 0
!
interface Serial2/2
no ip address
shutdown
serial restart-delay 0
!
interface Serial2/3
no ip address
shutdown
serial restart-delay 0
!
interface Serial3/0
no ip address
shutdown
serial restart-delay 0
!
interface Serial3/1
no ip address
shutdown
serial restart-delay 0
!
interface Serial3/2
no ip address
shutdown
serial restart-delay 0
!
interface Serial3/3
no ip address
shutdown
serial restart-delay 0
!
router bgp 1400
bgp log-neighbor-changes
neighbor 1.4.0.2 remote-as 1300
neighbor 1.4.0.2 description IKF_CORE
neighbor 2401:AF:1:1:1:1:1:2 remote-as 1300
!
address-family ipv4
no synchronization
neighbor 1.4.0.2 activate
neighbor 2401:AF:1:1:1:1:1:2 activate
no auto-summary
exit-address-family
!
address-family ipv6
network 2401:AF:1:1::/64
network 2401:AF:1:2::/64
network 2401:AF:1:3::/64
network 2401:AF:1:4::/64
neighbor 2401:AF:1:1:1:1:1:2 activate
neighbor 2401:AF:1:1:1:1:1:2 soft-reconfiguration inbound
exit-address-family
!
ip forward-protocol nd
!
!
no ip http server
no ip http secure-server
!
ipv6 route 2401:AF:1:1::/64 Null0
ipv6 route 2401:AF:1:2::/64 Null0
ipv6 route 2401:AF:1:3::/64 Null0
ipv6 route 2401:AF:1:4::/64 Null0
!
!
!
!
!
!
control-plane
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
line aux 0
exec-timeout 0 0
privilege level 15
logging synchronous
line vty 0 4
login
!
exception data-corruption buffer truncate
end
AIRTEL#
AIRTEL#sh bgp ipv6 unicast neighbors 2401:AF:1:1:1:1:1:2 received-routes
BGP table version is 9, local router ID is 1.4.0.1
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete
Network Next Hop Metric LocPrf Weight Path
*> 2404:CF40:1::/64 2401:AF:1:1:1:1:1:2
0 0 1300 i
*> 2404:CF40:2::/64 2401:AF:1:1:1:1:1:2
0 0 1300 i
*> 2404:CF40:3::/64 2401:AF:1:1:1:1:1:2
0 0 1300 i
*> 2404:CF40:4::/64 2401:AF:1:1:1:1:1:2
0 0 1300 i
Total number of prefixes 4
AIRTEL#sh bgp ipv6 unicast neighbors 2401:AF:1:1:1:1:1:2 advertised-routes
BGP table version is 9, local router ID is 1.4.0.1
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete
Originating default network ::/0
Network Next Hop Metric LocPrf Weight Path
*> 2401:AF:1:1::/64 :: 0 32768 i
*> 2401:AF:1:2::/64 :: 0 32768 i
*> 2401:AF:1:3::/64 :: 0 32768 i
*> 2401:AF:1:4::/64 :: 0 32768 i
Total number of prefixes 4
AIRTEL#
IKF_CORE#sh run
Building configuration...
Current configuration : 2922 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname IKF_CORE
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
ip source-route
no ip icmp rate-limit unreachable
!
!
--More--
*Apr 26 16:07:31.791: %SYS-5-CONFIG_I: Configured from console by console
!
!
ip cef
no ip domain lookup
ipv6 unicast-routing
no ipv6 traffic interface-statistics
ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
redundancy
!
!
!
!
!
ip tcp synwait-time 5
!
!
!
!
interface Loopback0
ip address 1.3.0.1 255.255.255.255
ip ospf network point-to-point
ip ospf 1 area 0
!
interface Ethernet0/0
ip address 1.3.1.1 255.255.255.252
ip ospf 1 area 0
ipv6 address 2404:CF40:1:1:1:1:1:1/126
ipv6 ospf 1 area 0
!
interface Ethernet0/1
description AIRTEL
ip address 1.4.0.2 255.255.255.252
ipv6 address 2401:AF:1:1:1:1:1:2/126
!
interface Ethernet0/2
no ip address
shutdown
!
interface Ethernet0/3
no ip address
shutdown
!
interface Ethernet1/0
no ip address
shutdown
!
interface Ethernet1/1
no ip address
shutdown
!
interface Ethernet1/2
no ip address
shutdown
!
interface Ethernet1/3
no ip address
shutdown
!
interface Serial2/0
IKF_CORE#
IKF_CORE#sh run
Building configuration...
Current configuration : 2922 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname IKF_CORE
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
ip source-route
no ip icmp rate-limit unreachable
!
!
!
!
ip cef
no ip domain lookup
ipv6 unicast-routing
no ipv6 traffic interface-statistics
ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
redundancy
!
!
!
!
!
ip tcp synwait-time 5
!
!
!
!
interface Loopback0
ip address 1.3.0.1 255.255.255.255
ip ospf network point-to-point
ip ospf 1 area 0
!
interface Ethernet0/0
ip address 1.3.1.1 255.255.255.252
ip ospf 1 area 0
ipv6 address 2404:CF40:1:1:1:1:1:1/126
ipv6 ospf 1 area 0
!
interface Ethernet0/1
description AIRTEL
ip address 1.4.0.2 255.255.255.252
ipv6 address 2401:AF:1:1:1:1:1:2/126
!
interface Ethernet0/2
no ip address
shutdown
!
interface Ethernet0/3
no ip address
shutdown
!
interface Ethernet1/0
no ip address
shutdown
!
interface Ethernet1/1
no ip address
shutdown
!
interface Ethernet1/2
no ip address
shutdown
!
interface Ethernet1/3
no ip address
shutdown
!
interface Serial2/0
no ip address
shutdown
serial restart-delay 0
!
interface Serial2/1
no ip address
shutdown
serial restart-delay 0
!
interface Serial2/2
no ip address
shutdown
serial restart-delay 0
!
interface Serial2/3
no ip address
shutdown
serial restart-delay 0
!
interface Serial3/0
no ip address
shutdown
serial restart-delay 0
!
interface Serial3/1
no ip address
shutdown
serial restart-delay 0
!
interface Serial3/2
no ip address
shutdown
serial restart-delay 0
!
interface Serial3/3
no ip address
shutdown
serial restart-delay 0
!
router ospf 1
log-adjacency-changes detail
redistribute bgp 1300
!
router bgp 1300
bgp log-neighbor-changes
neighbor 1.4.0.1 remote-as 1400
neighbor 2401:AF:1:1:1:1:1:1 remote-as 1400
neighbor 2401:AF:1:1:1:1:1:1 description AIRTEL
!
address-family ipv4
no synchronization
neighbor 1.4.0.1 activate
neighbor 2401:AF:1:1:1:1:1:1 activate
no auto-summary
exit-address-family
!
address-family ipv6
network 2404:CF40:1::/64
network 2404:CF40:2::/64
network 2404:CF40:3::/64
network 2404:CF40:4::/64
neighbor 2401:AF:1:1:1:1:1:1 activate
neighbor 2401:AF:1:1:1:1:1:1 soft-reconfiguration inbound
exit-address-family
!
ip forward-protocol nd
!
!
no ip http server
no ip http secure-server
!
ipv6 route 2404:CF40:1::/64 Null0
ipv6 route 2404:CF40:2::/64 Null0
ipv6 route 2404:CF40:3::/64 Null0
ipv6 route 2404:CF40:4::/64 Null0
ipv6 router ospf 1
log-adjacency-changes
redistribute bgp 1300
!
!
!
!
!
!
!
control-plane
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
line aux 0
exec-timeout 0 0
privilege level 15
logging synchronous
line vty 0 4
login
!
exception data-corruption buffer truncate
end
IKF_CORE#
IKF_CORE#sh ipv6 route
IPv6 Routing Table - default - 14 entries
Codes: C - Connected, L - Local, S - Static, U - Per-user Static route
B - BGP, M - MIPv6, R - RIP, I1 - ISIS L1
I2 - ISIS L2, IA - ISIS interarea, IS - ISIS summary, D - EIGRP
EX - EIGRP external, ND - Neighbor Discovery
O - OSPF Intra, OI - OSPF Inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2
ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2
B 2401:AF:1:1::/64 [20/0]
via FE80::A8BB:CCFF:FE00:400, Ethernet0/1
C 2401:AF:1:1:1:1:1:0/126 [0/0]
via Ethernet0/1, directly connected
L 2401:AF:1:1:1:1:1:2/128 [0/0]
via Ethernet0/1, receive
B 2401:AF:1:2::/64 [20/0]
via FE80::A8BB:CCFF:FE00:400, Ethernet0/1
B 2401:AF:1:3::/64 [20/0]
via FE80::A8BB:CCFF:FE00:400, Ethernet0/1
B 2401:AF:1:4::/64 [20/0]
via FE80::A8BB:CCFF:FE00:400, Ethernet0/1
S 2404:CF40:1::/64 [1/0]
via Null0, directly connected
C 2404:CF40:1:1:1:1:1:0/126 [0/0]
via Ethernet0/0, directly connected
L 2404:CF40:1:1:1:1:1:1/128 [0/0]
via Ethernet0/0, receive
O 2404:CF40:1:1:1:1:1:8/126 [110/20]
via FE80::A8BB:CCFF:FE00:100, Ethernet0/0
S 2404:CF40:2::/64 [1/0]
via Null0, directly connected
S 2404:CF40:3::/64 [1/0]
via Null0, directly connected
S 2404:CF40:4::/64 [1/0]
via Null0, directly connected
L FF00::/8 [0/0]
via Null0, receive
IKF_CORE#
IKF_AGGREGATION#sh run
Building configuration...
Current configuration : 2191 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname IKF_AGGREGATION
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
ip source-route
no ip icmp rate-limit unreachable
!
!
!
!
ip cef
no ip domain lookup
ipv6 unicast-routing
no ipv6 traffic interface-statistics
ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
redundancy
!
!
!
!
!
ip tcp synwait-time 5
!
!
!
!
interface Loopback0
ip address 1.3.0.2 255.255.255.255
ip ospf network point-to-point
ip ospf 1 area 0
!
interface Ethernet0/0
ip address 1.3.1.2 255.255.255.252
ip ospf 1 area 0
ipv6 address 2404:CF40:1:1:1:1:1:2/126
ipv6 ospf 1 area 0
!
interface Ethernet0/1
ip address 1.3.1.5 255.255.255.252
ip ospf 1 area 0
ipv6 address 2404:CF40:1:1:1:1:1:9/126
ipv6 ospf 1 area 0
!
interface Ethernet0/2
no ip address
shutdown
!
interface Ethernet0/3
no ip address
shutdown
!
interface Ethernet1/0
no ip address
shutdown
!
interface Ethernet1/1
no ip address
shutdown
!
interface Ethernet1/2
no ip address
shutdown
!
interface Ethernet1/3
no ip address
shutdown
!
interface Serial2/0
no ip address
shutdown
serial restart-delay 0
!
interface Serial2/1
no ip address
shutdown
serial restart-delay 0
!
interface Serial2/2
no ip address
shutdown
serial restart-delay 0
!
interface Serial2/3
no ip address
shutdown
serial restart-delay 0
!
interface Serial3/0
no ip address
shutdown
serial restart-delay 0
!
interface Serial3/1
no ip address
shutdown
serial restart-delay 0
!
interface Serial3/2
no ip address
shutdown
serial restart-delay 0
!
interface Serial3/3
no ip address
shutdown
serial restart-delay 0
!
router ospf 1
log-adjacency-changes detail
!
ip forward-protocol nd
!
!
no ip http server
no ip http secure-server
!
ipv6 router ospf 1
log-adjacency-changes
!
!
!
!
!
!
!
control-plane
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
line aux 0
exec-timeout 0 0
privilege level 15
logging synchronous
line vty 0 4
login
!
exception data-corruption buffer truncate
end
IKF_AGGREGATION#
IKF_AGGREGATION#sh ipv6 route
IPv6 Routing Table - default - 9 entries
Codes: C - Connected, L - Local, S - Static, U - Per-user Static route
B - BGP, M - MIPv6, R - RIP, I1 - ISIS L1
I2 - ISIS L2, IA - ISIS interarea, IS - ISIS summary, D - EIGRP
EX - EIGRP external, ND - Neighbor Discovery
O - OSPF Intra, OI - OSPF Inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2
ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2
OE2 2401:AF:1:1::/64 [110/1]
via FE80::A8BB:CCFF:FE00:200, Ethernet0/0
OE2 2401:AF:1:2::/64 [110/1]
via FE80::A8BB:CCFF:FE00:200, Ethernet0/0
OE2 2401:AF:1:3::/64 [110/1]
via FE80::A8BB:CCFF:FE00:200, Ethernet0/0
OE2 2401:AF:1:4::/64 [110/1]
via FE80::A8BB:CCFF:FE00:200, Ethernet0/0
C 2404:CF40:1:1:1:1:1:0/126 [0/0]
via Ethernet0/0, directly connected
L 2404:CF40:1:1:1:1:1:2/128 [0/0]
via Ethernet0/0, receive
C 2404:CF40:1:1:1:1:1:8/126 [0/0]
via Ethernet0/1, directly connected
L 2404:CF40:1:1:1:1:1:9/128 [0/0]
via Ethernet0/1, receive
L FF00::/8 [0/0]
via Null0, receive
IKF_AGGREGATION#
IKF_AGGREGATION#sh ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, + - replicated route
Gateway of last resort is not set
1.0.0.0/8 is variably subnetted, 7 subnets, 2 masks
O 1.3.0.1/32 [110/11] via 1.3.1.1, 02:34:42, Ethernet0/0
C 1.3.0.2/32 is directly connected, Loopback0
O 1.3.0.3/32 [110/11] via 1.3.1.6, 04:01:58, Ethernet0/1
C 1.3.1.0/30 is directly connected, Ethernet0/0
L 1.3.1.2/32 is directly connected, Ethernet0/0
C 1.3.1.4/30 is directly connected, Ethernet0/1
L 1.3.1.5/32 is directly connected, Ethernet0/1
IKF_AGGREGATION#
Building configuration...
Current configuration : 2174 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname IKF_DISTRIBUTION
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
ip source-route
no ip icmp rate-limit unreachable
!
!
!
!
ip cef
no ip domain lookup
ipv6 unicast-routing
no ipv6 traffic interface-statistics
ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
redundancy
!
!
!
!
!
ip tcp synwait-time 5
!
!
!
!
interface Loopback0
ip address 1.3.0.3 255.255.255.255
ip ospf network point-to-point
ip ospf 1 area 0
!
interface Ethernet0/0
ip address 1.3.1.6 255.255.255.252
ip ospf 1 area 0
ipv6 address 2404:CF40:1:1:1:1:1:A/126
ipv6 ospf 1 area 0
!
interface Ethernet0/1
no ip address
shutdown
!
interface Ethernet0/2
no ip address
shutdown
!
interface Ethernet0/3
no ip address
shutdown
!
interface Ethernet1/0
no ip address
shutdown
!
interface Ethernet1/1
no ip address
shutdown
!
interface Ethernet1/2
no ip address
shutdown
!
interface Ethernet1/3
no ip address
shutdown
!
interface Serial2/0
no ip address
shutdown
serial restart-delay 0
!
interface Serial2/1
no ip address
shutdown
serial restart-delay 0
!
interface Serial2/2
no ip address
shutdown
serial restart-delay 0
!
interface Serial2/3
no ip address
shutdown
serial restart-delay 0
!
interface Serial3/0
no ip address
shutdown
serial restart-delay 0
!
interface Serial3/1
no ip address
shutdown
serial restart-delay 0
!
interface Serial3/2
no ip address
shutdown
serial restart-delay 0
!
interface Serial3/3
no ip address
shutdown
serial restart-delay 0
!
router ospf 1
log-adjacency-changes detail
!
ip forward-protocol nd
!
!
no ip http server
no ip http secure-server
!
ipv6 route 2404:CF40:1:1:1:1:1:0/126 Ethernet0/0 2404:CF40:1:1:1:1:1:9
ipv6 router ospf 1
log-adjacency-changes
!
!
!
!
!
!
!
control-plane
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
line aux 0
exec-timeout 0 0
privilege level 15
logging synchronous
line vty 0 4
login
!
exception data-corruption buffer truncate
end
IKF_DISTRIBUTION#
IKF_DISTRIBUTION#sh ip rou
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, + - replicated route
Gateway of last resort is not set
1.0.0.0/8 is variably subnetted, 6 subnets, 2 masks
O 1.3.0.1/32 [110/21] via 1.3.1.5, 02:35:13, Ethernet0/0
O 1.3.0.2/32 [110/11] via 1.3.1.5, 04:02:30, Ethernet0/0
C 1.3.0.3/32 is directly connected, Loopback0
O 1.3.1.0/30 [110/20] via 1.3.1.5, 04:02:30, Ethernet0/0
C 1.3.1.4/30 is directly connected, Ethernet0/0
L 1.3.1.6/32 is directly connected, Ethernet0/0
IKF_DISTRIBUTION#sh ipv6 route
IPv6 Routing Table - default - 8 entries
Codes: C - Connected, L - Local, S - Static, U - Per-user Static route
B - BGP, M - MIPv6, R - RIP, I1 - ISIS L1
I2 - ISIS L2, IA - ISIS interarea, IS - ISIS summary, D - EIGRP
EX - EIGRP external, ND - Neighbor Discovery
O - OSPF Intra, OI - OSPF Inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2
ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2
OE2 2401:AF:1:1::/64 [110/1]
via FE80::A8BB:CCFF:FE00:110, Ethernet0/0
OE2 2401:AF:1:2::/64 [110/1]
via FE80::A8BB:CCFF:FE00:110, Ethernet0/0
OE2 2401:AF:1:3::/64 [110/1]
via FE80::A8BB:CCFF:FE00:110, Ethernet0/0
OE2 2401:AF:1:4::/64 [110/1]
via FE80::A8BB:CCFF:FE00:110, Ethernet0/0
S 2404:CF40:1:1:1:1:1:0/126 [1/0]
via 2404:CF40:1:1:1:1:1:9, Ethernet0/0
C 2404:CF40:1:1:1:1:1:8/126 [0/0]
via Ethernet0/0, directly connected
L 2404:CF40:1:1:1:1:1:A/128 [0/0]
via Ethernet0/0, receive
L FF00::/8 [0/0]
via Null0, receive
IKF_DISTRIBUTION#sh ipv6 osp
IKF_DISTRIBUTION#sh ipv6 ospf ne
IKF_DISTRIBUTION#sh ipv6 ospf neighbor
Neighbor ID Pri State Dead Time Interface ID Interface
1.3.0.2 1 FULL/BDR 00:00:31 4 Ethernet0/0
IKF_DISTRIBUTION#
VLANs in Huawei
If
dis vlan 101is run, the output will show the description and not the name.
Alternatively you can find the status of a VLAN using its name:
dis vlan vlan-name NAGPUR
Clear vSphere Connection History
Open this section in Registry Editor and Clear the Entries shown in the Snap:
HKEY_CURRENT_USER\Software\VMware\VMware Infrastructure Client\Preferences
Cisco TechNotes
What is the difference between the two methods to create static routes?
There are two methods to create static routes:
The ip route 10.1.1.1 255.255.255.0 eth 0/0 command generates an ARP broadcast that looks for the next-hop IP address.
The ip route 10.1.1.1 255.255.255.0 172.16.1.1 command does not generate an ARP request. It keeps Layer 2 out of the routing process.
General Debugging Commands:
- term len 0
terminal length
Syntax Description
lines
|
Number of lines to display. The range is from 0 to 511. Use 0 to not pause while displaying output.
|
- term exec prompt timestamp
- show ver
- show inv
- show log
- show platform
- show platform software process list R0 sort mem
- show platform software status control-processor brief
- show platform software memory messaging chassis-manager 0
Building a DNS using Bind on Ubuntu
type master;
file "/etc/bind/db.13";
};
$TTL 604800zone "example.co.in" {
@ IN SOA example.co.in. root.example.co.in. (
2252019 ; Serial
604800 ; Refresh
86400 ; Retry
2419200 ; Expire
604800 ) ; Negative Cache TTL
;
@ IN NS ns1.example.co.in.
@ IN A 10.88.13.11
ns1 IN A 10.88.13.10
type master;
file "/etc/bind/db.example.co.in";
};
$TTL 86400
@ IN SOA ns1.example.in. root.example.co.in.(
20191 ; serial
28800 ; refresh
14400 ; retry
36000 ; expire
86400); default_ttl
@ IN NS ns1
ns1 IN A 10.8.13.10
10 IN PTR ns1.example.co.in.
29 IN PTR www.example.co.in.
1 IN PTR reverse.1.13.8.10.example.co.in.
allow-query { any; };
recursion yes;
allow-query-cache { any; };
allow-recursion{ any; };
filter-aaaa-on-v4 yes;
logging{
channel simple_log {
file "/var/cache/bind/bind.log" versions 3 size 5m;
severity warning;
print-time yes;
print-severity yes;
print-category yes;
};
category default {
simple_log;
};
channel query_log {
file "/var/cache/bind/bind-queries.log";
print-category yes;
print-time yes;
};
category queries {
query_log;
};
};
Google Caching
Following are some key points to remember from Google's perspective when deploying GCC in ISP Network:
Please be aware that advertising a prefix to a GGC node makes the node a candidate to serve users behind that prefix. It does not guarantee that the GGC node will be selected as the best location to serve that prefix.
When Google have multiple paths available to serve a prefix, the "best" one is continuously re-calculated.
The calculation is based primarily on prefix-specificity, AS-path length and RTT. A number of other factors will also be considered, including current GGC loading, and the quality of the network paths between the GGC node and it's users.
Google rely on our GGC partners to make appropriate prefix announcements to the node(s) they host, and do not intervene in discussions about the propriety of individual advertisements.
https://support.google.com/interconnect/answer/7658596?hl=en&ref_topic=7650153
https://support.google.com/interconnect/answer/7658603?hl=en&ref_topic=7659203
ISP Portal: https://isp.google.com/
ISP Help Center: https://support.google.com/interconnect/
What does it mean to have fast or autonomous switching "enabled" and "disabled" on the same interface ?
Look at the above snap ^
If you enable fast or autonomous switching on
an interface, packets coming from any other interface on the router are
fast-switched (or autonomous-switched) to that interface. If you enable
same-interface fast or autonomous switching, packets whose source and
destination address are the same are fast or autonomous switched. You can use
same-interface fast or autonomous switching in cases where you have Frame Relay
or Asynchronous Transfer Mode (ATM) WAN links configured as subinterfaces on
the same main interface. Another situation is when you are using secondary
networks on LAN interfaces, as during IP address migration. In order to enable
same-interface fast switching, use the ip route-cache same-interface configuration
command.
Fast Switching:-
Fast switching is an improvement over process
switching. The first packet of a new session is copied to the interface
processor buffer. The packet is then copied to the CxBus (or other backplane
technology as appropriate to the platform) and sent to the switch processor. A
check is made against other switching caches (for example, silicon or
autonomous) for an existing entry.
Fast switching is then used because no entries
exist within the more efficient caches. The packet header is copied and sent to
the route processor, where the fast-switching cache resides. Assuming that an
entry exists in the cache, the packet is encapsulated for fast switching and
sent back to the switch processor. Then the packet is copied to the buffer on
the outgoing interface processor, and ultimately it is sent out the destination
interface.
Fast switching is on by default for lower-end
routers like the4000/2500 series and may be used on higher-end routers as well.
It is important to note that diagnostic processes sometimes require reverting
to process switching. Fast-switched packets will not traverse the route
processor, which provides the method by which packets are displayed during
debugging. Fast switching may also be inappropriate when bringing traffic from
high-speed interfaces to slower ones—this is one area where designers must
understand not only the bandwidth potential of their links, but also the actual
flow of traffic.
Fast switching guarantees that packets will be
processed within16 processor cycles. Unlike process-switched packets, the
router’s processor will not be interrupted to facilitate forwarding.
Autonomous Switching:-
Feature on Cisco routers that provides faster
packet processing by allowing the ciscoBus to switch packets independently
without interrupting the system processor.
Autonomous switching is comparable to fast
switching. When a packet arrives on the interface processor, it checks the
switching cache closest to it— the caches that reside on other processor
boards. The packet is encapsulated for autonomous switching and sent back to
the interface processor. The packet header is not sent to the route processor.
Autonomous switching is available only on AGS+ and Cisco7000 series routers
that have high-speed controller interface cards.
If you enable fast or autonomous switching on
an interface, packets coming from any other interface on the router are
fast-switched (or autonomous-switched) to that interface. If you enable
same-interface fast or autonomous switching, packets whose source and destination
address are the same are fast or autonomous switched.
You can use same-interface fast or autonomous
switching in cases where you have Frame Relay or Asynchronous Transfer Mode
(ATM) WAN links configured as subinterfaces on the same main interface. Another
situation is when you are using secondary networks on LAN interfaces, as during
IP address migration. In order to enable same-interface fast switching, you can
use the ip route-cache same-interface command.
Deploying SEEDBOX using uTorrent on Ubuntu Server.
------------------------------------------------------------------------------------------
1. http://www.mollify.org/downloads.php
2. http://www.utorrent.com/downloads/linux
------------------------------------------------------------------------------------------
------------------------------------------------------------------------------------------
Install uTorrent Server 3.3
Step 1: Download latest uTorrent Server from here
Note: (You need to download uTorrent Server for 13.04, also works for Ubuntu 14.04)Step 2: Extract uTorrent Files
- Launch terminal and change directory to Downloads folder
cd Downloads/ - Extract uTorrent files to the /opt directory
sudo tar xvzf utserver.tar.gz -C /opt/
Step 3: Set Permission
- Set permission on uTorrent-server folder
sudo chmod -R 777 /opt/utorrent-server-alpha-v3_3/
Step 4: Set Symbolic link
- Run the command to link uTorrent server to the /user/bin directory.
sudo ln -s /opt/utorrent-server-alpha-v3_3/utserver /usr/bin/utserver
Step 5: Start uTorrent
utserver -settingspath /opt/utorrent-server-alpha-v3_3/
Note: If you get an error about libssl.so package missing or see utserver not starting, run the command below to install it, then try starting it again.sudo apt-get install libssl0.9.8:i386
Step 6: Log into uTorrent
- Open Firefox and browse to the URL
localhost:8080/gui - The username is 'admin' and leave the password field empty.
- Step 7: Modify /etc/rc.local for uTorrent to start at Boot:
root@seedbox:~# cat /etc/rc.local
#!/bin/sh -e
#
# rc.local
#
# This script is executed at the end of each multiuser runlevel.
# Make sure that the script will "exit 0" on success or any other
# value on error.
#
# In order to enable or disable this script just change the execution
# bits.
#
# By default this script does nothing.
/usr/bin/utserver -settingspath /opt/uts/ -daemon -logfile /opt/uts/server.log
su -l soham -c rtorrent
exit 0
root@seedbox:~#
Bridge ports in Cisco Routers

R1(config)# no ip routing. Enables bridging of IP packets. This command needs to be executed once per card, not once per bridge-group. This step is not done for integrated routing and bridging (IRB).
------------------------
bridge irb
bridge-group 1
bridge 1 protocol ieee
------------------------
BANDEL#show run
Building configuration...
Current configuration : 1909 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname BANDEL
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
ip source-route
no ip icmp rate-limit unreachable
!
!
!
!
ip cef
no ip domain lookup
no ipv6 traffic interface-statistics
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
redundancy
!
!
!
!
!
ip tcp synwait-time 5
bridge irb
!
!
!
!
interface Ethernet0/0
description "BRIDGED"
no ip address
bridge-group 1
!
interface Ethernet0/1
description "BRIDGED"
no ip address
bridge-group 1
!
interface Ethernet0/2
description "BRIDGED"
no ip address
bridge-group 1
!
interface Ethernet0/3
no ip address
shutdown
!
interface Ethernet1/0
no ip address
shutdown
!
interface Ethernet1/1
no ip address
shutdown
!
interface Ethernet1/2
no ip address
shutdown
!
interface Ethernet1/3
no ip address
shutdown
!
interface Serial2/0
no ip address
shutdown
serial restart-delay 0
!
interface Serial2/1
no ip address
shutdown
serial restart-delay 0
!
interface Serial2/2
no ip address
shutdown
serial restart-delay 0
!
interface Serial2/3
no ip address
shutdown
serial restart-delay 0
!
interface Serial3/0
no ip address
shutdown
serial restart-delay 0
!
interface Serial3/1
no ip address
shutdown
serial restart-delay 0
!
interface Serial3/2
no ip address
shutdown
serial restart-delay 0
!
interface Serial3/3
no ip address
shutdown
serial restart-delay 0
!
ip forward-protocol nd
!
!
no ip http server
no ip http secure-server
!
!
!
!
!
!
!
control-plane
!
bridge 1 protocol ieee
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
line aux 0
exec-timeout 0 0
privilege level 15
logging synchronous
line vty 0 4
login
!
exception data-corruption buffer truncate
end
BANDEL#
BURDWAN#show run
Building configuration...
Current configuration : 1910 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname BURDWAN
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
ip source-route
no ip icmp rate-limit unreachable
!
!
!
!
ip cef
no ip domain lookup
no ipv6 traffic interface-statistics
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
redundancy
!
!
!
!
!
ip tcp synwait-time 5
bridge irb
!
!
!
!
interface Ethernet0/0
description "BRIDGED"
no ip address
bridge-group 1
!
interface Ethernet0/1
description "BRIDGED"
no ip address
bridge-group 1
!
interface Ethernet0/2
description "BRIDGED"
no ip address
bridge-group 1
!
interface Ethernet0/3
no ip address
shutdown
!
interface Ethernet1/0
no ip address
shutdown
!
interface Ethernet1/1
no ip address
shutdown
!
interface Ethernet1/2
no ip address
shutdown
!
interface Ethernet1/3
no ip address
shutdown
!
interface Serial2/0
no ip address
shutdown
serial restart-delay 0
!
interface Serial2/1
no ip address
shutdown
serial restart-delay 0
!
interface Serial2/2
no ip address
shutdown
serial restart-delay 0
!
interface Serial2/3
no ip address
shutdown
serial restart-delay 0
!
interface Serial3/0
no ip address
shutdown
serial restart-delay 0
!
interface Serial3/1
no ip address
shutdown
serial restart-delay 0
!
interface Serial3/2
no ip address
shutdown
serial restart-delay 0
!
interface Serial3/3
no ip address
shutdown
serial restart-delay 0
!
ip forward-protocol nd
!
!
no ip http server
no ip http secure-server
!
!
!
!
!
!
!
control-plane
!
bridge 1 protocol ieee
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
line aux 0
exec-timeout 0 0
privilege level 15
logging synchronous
line vty 0 4
login
!
exception data-corruption buffer truncate
end
BURDWAN#
PANDUA(config)#do ping 1.4.2.9 repeat 1
Type escape sequence to abort.
Sending 1, 100-byte ICMP Echos to 1.4.2.9, timeout is 2 seconds:
!
Success rate is 100 percent (1/1), round-trip min/avg/max = 1/1/1 ms
PANDUA(config)#do ping 1.4.2.9 repeat 1000
Type escape sequence to abort.
Sending 1000, 100-byte ICMP Echos to 1.4.2.9, timeout is 2 seconds:
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!
Success rate is 100 percent (1000/1000), round-trip min/avg/max = 1/1/4 ms
PANDUA(config)#
Designing a Core ISP Network
root# show
## Last changed: 2019-04-04 20:12:37 UTC
version 12.1R1.9;
system {
root-authentication {
encrypted-password "$1$XrnazupP$IChYvM93l90W6b0GfMxNn/"; ## SECRET-DATA
}
services {
ssh;
telnet;
}
syslog {
user * {
any emergency;
}
file messages {
any notice;
authorization info;
}
file interactive-commands {
interactive-commands any;
}
}
}
interfaces {
em0 {
vlan-tagging;
unit 0 {
vlan-id 10;
family inet {
address 1.1.0.1/30;
}
}
}
em1 {
unit 0 {
description AIRTEL;
family inet {
address 1.2.0.6/30;
}
}
}
em2 {
unit 0 {
description FLIPKART;
family inet {
address 1.1.2.1/30;
}
}
}
}
routing-options {
static {
route 1.1.0.0/24 discard;
route 1.1.1.0/24 discard;
route 1.1.2.0/24 discard;
route 1.1.3.0/24 discard;
route 1.1.1.0/30 next-hop 1.1.0.2;
}
router-id 1.1.0.1;
}
protocols {
bgp {
local-as 1100;
group TATA {
export TATA_OUT;
peer-as 1100;
neighbor 1.1.0.2;
}
group AIRTEL {
export TATA_OUT;
peer-as 1200;
neighbor 1.2.0.5;
}
group FLIPKART {
export TATA_OUT;
peer-as 1500;
neighbor 1.1.2.2;
}
}
}
policy-options {
prefix-list TATA_OUT {
1.1.0.0/24;
1.1.1.0/24;
1.1.3.0/24;
1.1.4.0/24;
}
policy-statement TATA_OUT {
term 1 {
from {
prefix-list TATA_OUT;
}
then accept;
}
term 3 {
from protocol direct;
then accept;
}
term 2 {
from protocol bgp;
then accept;
}
}
}
[edit]
root#
[edit]
root#
[edit]
root# set system host-name TATA_US
[edit]
root# commit
commit complete
[edit]
root@TATA_US# show
## Last changed: 2019-04-04 20:33:34 UTC
version 12.1R1.9;
system {
host-name TATA_US;
root-authentication {
encrypted-password "$1$XrnazupP$IChYvM93l90W6b0GfMxNn/"; ## SECRET-DATA
}
services {
ssh;
telnet;
}
syslog {
user * {
any emergency;
}
file messages {
any notice;
authorization info;
}
file interactive-commands {
interactive-commands any;
}
}
}
interfaces {
em0 {
vlan-tagging;
unit 0 {
vlan-id 10;
family inet {
address 1.1.0.1/30;
}
}
}
em1 {
unit 0 {
description AIRTEL;
family inet {
address 1.2.0.6/30;
}
}
}
em2 {
unit 0 {
description FLIPKART;
family inet {
address 1.1.2.1/30;
}
}
}
}
routing-options {
static {
route 1.1.0.0/24 discard;
route 1.1.1.0/24 discard;
route 1.1.2.0/24 discard;
route 1.1.3.0/24 discard;
route 1.1.1.0/30 next-hop 1.1.0.2;
}
router-id 1.1.0.1;
}
protocols {
bgp {
local-as 1100;
group TATA {
export TATA_OUT;
peer-as 1100;
neighbor 1.1.0.2;
}
group AIRTEL {
export TATA_OUT;
peer-as 1200;
neighbor 1.2.0.5;
}
group FLIPKART {
export TATA_OUT;
peer-as 1500;
neighbor 1.1.2.2;
}
}
}
policy-options {
prefix-list TATA_OUT {
1.1.0.0/24;
1.1.1.0/24;
1.1.3.0/24;
1.1.4.0/24;
}
policy-statement TATA_OUT {
term 1 {
from {
prefix-list TATA_OUT;
}
then accept;
}
term 3 {
from protocol direct;
then accept;
}
term 2 {
from protocol bgp;
then accept;
}
}
}
[edit]
root@TATA_US#
root> configure
Entering configuration mode
[edit]
root# set system host-name TATA_INDIA
[edit]
root# commit
commit complete
[edit]
root@TATA_INDIA# show
## Last changed: 2019-04-04 20:34:43 UTC
version 12.1R1.9;
system {
host-name TATA_INDIA;
root-authentication {
encrypted-password "$1$QyYhErAK$Ovn/xeO20OoDNKpmKi81T."; ## SECRET-DATA
}
syslog {
user * {
any emergency;
}
file messages {
any notice;
authorization info;
}
file interactive-commands {
interactive-commands any;
}
}
}
interfaces {
em0 {
vlan-tagging;
unit 0 {
vlan-id 10;
family inet {
address 1.1.0.2/30;
}
}
}
em1 {
vlan-tagging;
unit 0 {
vlan-id 20;
family inet {
address 1.1.1.1/30;
}
}
}
}
routing-options {
router-id 1.1.1.1;
}
protocols {
bgp {
local-as 1100;
group TATA {
type internal;
peer-as 1100;
neighbor 1.1.0.1;
}
group IKF {
type external;
peer-as 1300;
neighbor 1.2.0.1;
neighbor 1.1.1.2;
}
}
}
[edit]
root@TATA_INDIA# run show route receive-protocol bgp 1.1.0.1
inet.0: 25 destinations, 26 routes (25 active, 0 holddown, 0 hidden)
Prefix Nexthop MED Lclpref AS path
* 1.1.0.0/24 1.1.0.1 100 I
1.1.0.0/30 1.1.0.1 100 I
* 1.1.1.0/24 1.1.0.1 100 I
* 1.1.2.0/30 1.1.0.1 100 I
* 1.1.3.0/24 1.1.0.1 100 I
* 1.2.0.0/24 1.2.0.5 0 100 1200 I
* 1.2.0.4/30 1.1.0.1 100 I
* 1.2.1.0/24 1.2.0.5 0 100 1200 I
* 1.2.2.0/24 1.2.0.5 0 100 1200 I
* 1.2.3.0/24 1.2.0.5 0 100 1200 I
* 1.3.0.0/24 1.2.0.5 100 1200 1300 I
* 1.3.1.0/24 1.2.0.5 100 1200 1300 I
* 1.3.2.0/24 1.2.0.5 100 1200 1300 I
* 1.3.3.0/24 1.2.0.5 100 1200 1300 I
* 1.4.0.0/24 1.2.0.5 100 1200 1300 1400 I
* 1.4.1.0/24 1.2.0.5 100 1200 1300 1400 I
* 1.4.2.0/24 1.2.0.5 100 1200 1300 1400 I
* 1.4.3.0/24 1.2.0.5 100 1200 1300 1400 I
* 1.5.0.0/24 1.1.2.2 100 1500 I
* 1.5.1.0/24 1.1.2.2 100 1500 I
* 1.5.2.0/24 1.1.2.2 100 1500 I
* 1.5.3.0/24 1.1.2.2 100 1500 I
[edit]
root@TATA_INDIA#
root@FLIPKART# show
## Last changed: 2019-04-04 20:44:18 UTC
version 10.1R1.8;
system {
host-name FLIPKART;
root-authentication {
encrypted-password "$1$VaEmnu16$W15FJXKTptT3u/6ie4iNe1"; ## SECRET-DATA
}
syslog {
user * {
any emergency;
}
file messages {
any notice;
authorization info;
}
file interactive-commands {
interactive-commands any;
}
}
}
interfaces {
em0 {
unit 0 {
description TATA_US;
family inet {
address 1.1.2.2/30;
}
}
}
em2 {
unit 0 {
description FLIPKART_HEADOFFICE;
family inet {
address 1.5.1.1/30;
}
}
}
lo0 {
unit 0 {
family inet {
address 1.5.0.1/32;
}
}
}
}
routing-options {
static {
route 1.5.0.0/24 discard;
route 1.5.1.0/24 discard;
route 1.5.2.0/24 discard;
route 1.5.3.0/24 discard;
}
}
protocols {
bgp {
local-as 1500;
group TATA_US {
export TATA_US_OUT;
peer-as 1100;
neighbor 1.1.2.1;
}
}
}
policy-options {
policy-statement TATA_US_OUT {
term 1 {
from {
route-filter 1.5.0.0/24 exact;
route-filter 1.5.1.0/24 exact;
route-filter 1.5.2.0/24 exact;
route-filter 1.5.3.0/24 exact;
}
then accept;
}
}
}
[edit]
root@FLIPKART#
Building configuration...
Current configuration : 1935 bytes
!
version 15.1
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
service compress-config
!
hostname FLIPKART_BRANCH
!
boot-start-marker
boot-end-marker
!
!
logging discriminator EXCESS severity drops 6 msg-body drops EXCESSCOLL
logging buffered 50000
logging console discriminator EXCESS
!
no aaa new-model
no ip icmp rate-limit unreachable
!
ip cef
!
ip dhcp pool 192.168.1.x
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
dns-server 192.168.1.1
lease 0 23
!
!
no ip domain-lookup
no ipv6 cef
ipv6 multicast rpf use-bgp
spanning-tree mode pvst
spanning-tree extend system-id
!
!
!
!
!
!
vlan internal allocation policy ascending
!
ip tcp synwait-time 5
!
!
!
!
interface Tunnel0
ip address 172.16.1.2 255.255.255.252
ip mtu 1400
ip tcp adjust-mss 1360
tunnel source Ethernet0/0
tunnel destination 1.5.1.2
!
interface Ethernet0/0
description "WEFE"
no switchport
ip address 1.4.1.2 255.255.255.252
!
interface Ethernet0/1
description "DHCP"
no switchport
ip address 192.168.1.1 255.255.255.0
!
interface Ethernet0/2
duplex auto
!
interface Ethernet0/3
duplex auto
!
interface Ethernet1/0
duplex auto
!
interface Ethernet1/1
duplex auto
!
interface Ethernet1/2
duplex auto
!
interface Ethernet1/3
duplex auto
!
interface Ethernet2/0
duplex auto
!
interface Ethernet2/1
duplex auto
!
interface Ethernet2/2
duplex auto
!
interface Ethernet2/3
duplex auto
!
interface Ethernet3/0
duplex auto
!
interface Ethernet3/1
duplex auto
!
interface Ethernet3/2
duplex auto
!
interface Ethernet3/3
duplex auto
!
interface Vlan1
no ip address
shutdown
!
!
!
no ip http server
ip route 0.0.0.0 0.0.0.0 1.4.1.1
ip route 192.168.0.0 255.255.255.0 Tunnel0
!
!
!
!
control-plane
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
line aux 0
exec-timeout 0 0
privilege level 15
logging synchronous
line vty 0 4
login
!
end
AIRTEL#show run
Building configuration...
Current configuration : 2943 bytes
!
version 15.1
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
service compress-config
!
hostname AIRTEL
!
boot-start-marker
boot-end-marker
!
!
logging discriminator EXCESS severity drops 6 msg-body drops EXCESSCOLL
logging buffered 50000
logging console discriminator EXCESS
!
no aaa new-model
no ip icmp rate-limit unreachable
!
ip cef
!
!
no ip domain-lookup
no ipv6 cef
ipv6 multicast rpf use-bgp
spanning-tree mode pvst
spanning-tree extend system-id
!
!
!
!
!
!
vlan internal allocation policy ascending
!
ip tcp synwait-time 5
!
!
!
!
interface Ethernet0/0
description "IKF"
no switchport
ip address 1.2.0.1 255.255.255.252
!
interface Ethernet0/1
description "TATA_US"
no switchport
ip address 1.2.0.5 255.255.255.252
!
interface Ethernet0/2
duplex auto
!
interface Ethernet0/3
duplex auto
!
interface Ethernet1/0
duplex auto
!
interface Ethernet1/1
duplex auto
!
interface Ethernet1/2
duplex auto
!
interface Ethernet1/3
duplex auto
!
interface Ethernet2/0
duplex auto
!
interface Ethernet2/1
duplex auto
!
interface Ethernet2/2
duplex auto
!
interface Ethernet2/3
duplex auto
!
interface Ethernet3/0
duplex auto
!
interface Ethernet3/1
duplex auto
!
interface Ethernet3/2
duplex auto
!
interface Ethernet3/3
duplex auto
!
interface Serial4/0
no ip address
shutdown
serial restart-delay 0
!
interface Serial4/1
no ip address
shutdown
serial restart-delay 0
!
interface Serial4/2
no ip address
shutdown
serial restart-delay 0
!
interface Serial4/3
no ip address
shutdown
serial restart-delay 0
!
interface Serial5/0
no ip address
shutdown
serial restart-delay 0
!
interface Serial5/1
no ip address
shutdown
serial restart-delay 0
!
interface Serial5/2
no ip address
shutdown
serial restart-delay 0
!
interface Serial5/3
no ip address
shutdown
serial restart-delay 0
!
interface Vlan1
no ip address
shutdown
!
router bgp 1200
bgp log-neighbor-changes
network 1.2.0.0 mask 255.255.255.0
network 1.2.1.0 mask 255.255.255.0
network 1.2.2.0 mask 255.255.255.0
network 1.2.3.0 mask 255.255.255.0
neighbor 1.2.0.2 remote-as 1300
neighbor 1.2.0.2 description IKF
neighbor 1.2.0.2 route-map IKF_OUT out
neighbor 1.2.0.6 remote-as 1100
neighbor 1.2.0.6 description "TATA_US"
!
!
!
no ip http server
ip route 1.2.0.0 255.255.255.0 Null0
ip route 1.2.1.0 255.255.255.0 Null0
ip route 1.2.2.0 255.255.255.0 Null0
ip route 1.2.3.0 255.255.255.0 Null0
!
!
ip prefix-list TO_IKF seq 1 permit 1.2.0.0/24
ip prefix-list TO_IKF seq 2 permit 1.2.1.0/24
ip prefix-list TO_IKF seq 3 permit 1.2.2.0/24
ip prefix-list TO_IKF seq 4 permit 1.2.3.0/24
!
route-map IKF_OUT permit 0
match ip address prefix-list TO_IKF
set as-path prepend 1200 1200 1200
!
!
!
control-plane
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
line aux 0
exec-timeout 0 0
privilege level 15
logging synchronous
line vty 0 4
login
!
end
AIRTEL#












