Tuesday, October 1, 2013

MISC


  • Each AS contain indipenent routing policies.
  • Border Gateway Protocol (BGP) is 
    • an interdomain routing protocol 
    • designed to provide loop-free routing between separate routing domains 
      • that contain independent routing policies (autonomous systems)
  • BGP is mainly used to connect a local network to an external network to gain access to the Internet or to connect to other organizations.
  • BGP uses a path-vector routing algorithm to exchange network reachability information with other BGP speaking networking devices.
  • Network reachability information is exchanged between BGP peers in routing updates.
  • Network reachability information contains 
    • the network number, 
    • path specific attributes, 
    • and the list of autonomous system numbers that a route must transit through to reach a destination network.
  • BGP prevents routing loops 
    • by rejecting any routing update that contains the local autonomous system number 
    • because this indicates that the route has already traveled through that autonomous system and a loop would therefore be created. 
  • The BGP path-vector routing algorithm is a combination of the 
    • distance-vector routing algorithm and the AS-path loop detection.
  • NULL vs LOOPBACK interfaces
Correct Answer by Paul Stewart - CCIE Security, CCSI  on Mar 14, 2011 3:56 PM
Paul Stewart  -  CCIE Security, CCSI
There is a software interface called the loopback interface.  However, there isn't really a null interface, but you can create null routes.  A null route just indicates to the router to throw packets containing a certain destination away. 
Do they offer the same function?
A loopback is used for the router ID for OSPF and EIGRP, no similar function exists with a null route.  We can bring a loopback directly into the routing process by using the "network x.x.x.x" command.  No similar command exists for null routes and a null route is not used for any type of router ID.  Either can be used for redistribution.  To redistribute a loopback, you would use the "redistribute connected".  To redistribute a null route, you would use "redistribute static".

  • Asymmetric Routing: Incoming and outgoing routes are different between source & destination.

Mulit Exit Discriminator (MED)


  • The name of this metric for BGP versions 2 & 3 is INTER_AS_METRIC
  • MED value can be configure using Route Maps
  • MED is passed between iBGP peers along with an update without any change in value.
    • This action 

BGP


  • AS Path (Autonomous System Path)
    • In BGP, 
      • each route consist 
        • a network number
        • information about a list of AS
        • list of other path attributes
  • BGP primary function:
    • to exchange network reachability information with other BGP systems
    • also list of AS paths
  • This information can be used 
    • to construct a graph of AS conectivety
    • routing loops at as level can be pruned
    • AS level policy decisions can be enforced

Thursday, July 18, 2013

RSTP: Rapid Spanning Tree Protocol


  • 3 port types 
    • P2P-full duplex
    • Non Edge port(equal to PortFast enabled port in PVSTP)
  •  To allow backward compatability that port must be enable the PortFast
  • PortFast enabled ports in PVST become automatically edge ports in RPVST

STP LOOP GUARD / UniDirectional Link Detection


  • Loop guard is enabled on L-2 interfaces only
  • Unidirectional link:
    • due to stp unable to receive bpdu packets, but send the packets
      • cause, 
        • max-age expired
        • 2 switches bothe elected disignated port at same time
  • Example: In case of optical channels send channel not works but receive channel is working
    •  Due to layer-1 issue send channel is not working 
    • then BPDUs from SW2 to SW3 not reached
    • Blocked port on SW3 automatically Designated port after max-age timer expired
  • solution is create L-1 keep alive, that can we send both incoming & outgoing on the same link




FunctionalityLoop GuardUDLD
ConfigurationPer-portPer-port
Action granularityPer-VLANPer-port
AutorecoverYesYes, with err-disable timeout feature
Protection against STP failures caused by unidirectional linksYes, when enabled on all root and alternate ports in redundant topologyYes, when enabled on all links in redundant topology
Protection against STP failures caused by problems in the software (designated switch does not send BPDU)YesNo
Protection against miswiring.NoYes
Source: cisco documentation
  • Commonly run both loop guard & UDLD run at same time
  • spanning-tree loopguard default / spanning-tee guard loop
  • UDLD
    • udld port 
    • udld port aggressive