BGP Med

El atributo MED no sirve para influenciar el trafico de  de entrada a nuestrpo sistema autonomo .

R1:
route-map red1a permit 10
 match ip address 1
 set metric 151
route-map red1a permit 20
!
route-map red1 permit 10
 match ip address 1
 set metric 149
route-map red1 permit 20

router bgp 10
 network 1.1.1.0 mask 255.255.255.0
 network 11.11.11.0 mask 255.255.255.0
 neighbor 2.2.2.2 remote-as 20
 neighbor 2.2.2.2 ebgp-multihop 2
 neighbor 2.2.2.2 update-source Loopback0
 neighbor 2.2.2.2 route-map red1a out
 neighbor 3.3.3.3 remote-as 20
 neighbor 3.3.3.3 ebgp-multihop 2
 neighbor 3.3.3.3 update-source Loopback0
 neighbor 3.3.3.3 route-map red1 out

MPLS VPN Frame-Relay

R4#sh ip rou
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route
Gateway of last resort is not set
     4.0.0.0/24 is subnetted, 1 subnets
C       4.4.4.0 is directly connected, Loopback0
     5.0.0.0/24 is subnetted, 1 subnets
O IA    5.5.5.0 [110/133] via 192.168.100.1, 10:12:48, FastEthernet0/0
     10.0.0.0/24 is subnetted, 1 subnets
O IA    10.1.35.0 [110/133] via 192.168.100.1, 10:12:48, FastEthernet0/0
C    192.168.100.0/24 is directly connected, FastEthernet0/0
R4#

MPLS VPN

R1#sh ip route vrf cliente1
Routing Table: cliente1
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route
Gateway of last resort is not set
     4.0.0.0/24 is subnetted, 1 subnets
D       4.4.4.0 [90/409600] via 10.1.14.2, 00:33:16, FastEthernet0/0
     5.0.0.0/24 is subnetted, 1 subnets
B       5.5.5.0 [200/11] via 3.3.3.3, 00:32:18
     10.0.0.0/24 is subnetted, 2 subnets
C       10.1.14.0 is directly connected, FastEthernet0/0
B       10.1.35.0 [200/0] via 3.3.3.3, 00:32:18


R1#show ip bgp vpnv4 vrf cliente1
BGP table version is 15, local router ID is 1.1.1.1
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
              r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete
   Network          Next Hop            Metric LocPrf Weight Path
Route Distinguisher: 4:5 (default for vrf cliente1)
*> 4.4.4.0/24       10.1.14.2              122         32768 ?
*>i5.5.5.0/24       3.3.3.3                 11    100      0 ?
*> 10.1.14.0/24     0.0.0.0                  0         32768 ?
*>i10.1.35.0/24     3.3.3.3                  0    100      0 ?
R4#sh ip route
Gateway of last resort is not set
     4.0.0.0/24 is subnetted, 1 subnets
C       4.4.4.0 is directly connected, Loopback0
     5.0.0.0/24 is subnetted, 1 subnets
D EX    5.5.5.0 [170/2560025856] via 10.1.14.1, 00:30:44, FastEthernet0/0
     10.0.0.0/24 is subnetted, 2 subnets
C       10.1.14.0 is directly connected, FastEthernet0/0
D EX    10.1.35.0 [170/2560025856] via 10.1.14.1, 00:30:44, FastEthernet0/0
R4#ping 5.5.5.5
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 5.5.5.5, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 52/116/204 ms
R4#trace 5.5.5.5
Type escape sequence to abort.
Tracing the route to 5.5.5.5
  1 10.1.14.1 128 msec 56 msec 16 msec
  2 10.1.12.2 [MPLS: Labels 18/19 Exp 0] 120 msec 76 msec 76 msec
  3 10.1.35.1 [MPLS: Label 19 Exp 0] 56 msec 72 msec 116 msec
  4 10.1.35.2 116 msec 124 msec 56 msec
R4#

R6#ping 7.7.7.7
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 7.7.7.7, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 64/105/192 ms
R6#trace 7.7.7.7
Type escape sequence to abort.
Tracing the route to 7.7.7.7
  1 10.1.16.1 96 msec 28 msec 12 msec
  2 10.1.12.2 [MPLS: Labels 18/17 Exp 0] 80 msec 76 msec 104 msec
  3 10.1.37.1 [MPLS: Label 17 Exp 0] 60 msec 100 msec 56 msec
  4 10.1.37.2 108 msec 144 msec 88 msec
R6#

BGP as-path preepend

R1#sh run | sec bgp
router bgp 65000
 bgp log-neighbor-changes
 network 1.1.1.0 mask 255.255.255.0
 neighbor 2.2.2.2 remote-as 65000
 neighbor 2.2.2.2 update-source Loopback0
 neighbor 2.2.2.2 next-hop-self
 neighbor 3.3.3.3 remote-as 65000
 neighbor 3.3.3.3 update-source Loopback0
 neighbor 3.3.3.3 next-hop-self
 neighbor 4.4.4.4 remote-as 65001
 neighbor 4.4.4.4 ebgp-multihop 2
 neighbor 4.4.4.4 update-source Loopback0
 neighbor 4.4.4.4 route-map red3 out
R4#sh ip bgp
BGP table version is 54, local router ID is 4.4.4.4
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
              r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter,
              x best-external, a additional-path, c RIB-compressed,
Origin codes: i - IGP, e - EGP, ? - incomplete
RPKI validation codes: V valid, I invalid, N Not found
     Network          Next Hop            Metric LocPrf Weight Path
 r>  1.1.1.0/24       1.1.1.1                  0             0 65000 i
 *>  2.2.2.0/24       1.1.1.1                                0 65000 i
 *>i 3.3.3.0/24       6.6.6.6                  0    100      0 65000 i
 *                    1.1.1.1                                0 65000 65000 65000 65000 i
 *>  4.4.4.0/24       0.0.0.0                  0         32768 i
 * i 5.5.5.0/24       5.5.5.5                  0    100      0 i
 *>                   40.40.40.2         2297856         32768 i
 * i 6.6.6.0/24       6.6.6.6                  0    100      0 i
 *>                   40.40.40.2         2809856         32768 i
 *>  10.10.10.0/30    1.1.1.1                                0 65000 i
 *>  10.10.10.4/30    1.1.1.1                                0 65000 i
 *>i 10.10.10.8/30    6.6.6.6                  0    100      0 65000 i
 *>  40.40.40.0/30    0.0.0.0                  0         32768 i


R5#trace 3.3.3.3
Type escape sequence to abort.
Tracing the route to 3.3.3.3
VRF info: (vrf in name/id, vrf out name/id)
  1 40.40.40.6 10 msec 10 msec 10 msec
  2 30.30.30.1 23 msec 19 msec 19 msec
  3 10.10.10.5 [AS 65000] 32 msec 30 msec *
R5#trace 13.13.13.13
Type escape sequence to abort.
Tracing the route to 13.13.13.13
VRF info: (vrf in name/id, vrf out name/id)
  1 40.40.40.1 10 msec 9 msec 9 msec
  2 20.20.20.1 19 msec 21 msec 22 msec
  3 10.10.10.2 [AS 65000] 21 msec 33 msec *
R5#

BGP Local Preference

R2#sh run | sec bgp
router bgp 65000
 bgp log-neighbor-changes
 network 2.2.2.0 mask 255.255.255.0
 neighbor 1.1.1.1 remote-as 65000
 neighbor 1.1.1.1 update-source Loopback0
 neighbor 1.1.1.1 next-hop-self
 neighbor 3.3.3.3 remote-as 65000
 neighbor 3.3.3.3 update-source Loopback0
 neighbor 3.3.3.3 next-hop-self
 neighbor 6.6.6.6 remote-as 65001
 neighbor 6.6.6.6 ebgp-multihop 2
 neighbor 6.6.6.6 update-source Loopback0
 neighbor 6.6.6.6 route-map local3 in


R3#sh ip bgp
BGP table version is 61, local router ID is 3.3.3.3
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
              r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter,
              x best-external, a additional-path, c RIB-compressed,
Origin codes: i - IGP, e - EGP, ? - incomplete
RPKI validation codes: V valid, I invalid, N Not found
     Network          Next Hop                Metric LocPrf Weight Path
 *>i 1.1.1.0/24       1.1.1.1                      0          100      0 i
 *>i 2.2.2.0/24       2.2.2.2                      0          100      0 i
 *>  3.3.3.0/24       0.0.0.0                      0         32768 i
 *>i 4.4.4.0/24       2.2.2.2            2809856        201      0 65001 i
 * i 5.5.5.0/24        2.2.2.2             2297856       100      0 65001 i
 *>i                        1.1.1.1             2297856       100      0 65001 i
 *>i 6.6.6.0/24       2.2.2.2                  0              100      0 65001 i
 *>  10.10.10.0/30    0.0.0.0                  0         32768 i
 *>  10.10.10.4/30    0.0.0.0                  0         32768 i
 *>  10.10.10.8/30    10.10.10.1             128         32768 i
 *>i 40.40.40.0/30    1.1.1.1                  0    100      0 65001 i
 *>i 40.40.40.4/30    2.2.2.2                  0    100      0 65001 i
R3#

SNMP

R1(config)#access-list 21 permit 192.168.100.0 0.0.0.255
R1(config)#snmp-server community lectura ro 21
R1(config)#snmp-server location Block1
R1(config)#snmp-server contact cesarinj@hotmail.com
R1(config)#snmp-server chassis-id 3725block1
R1(config)#snmp-server enable traps snmp
R1(config)#snmp-server enable traps hsrp
R1(config)#snmp-server enable traps config
R1(config)#snmp-server enable traps entity
R1(config)#snmp-server enable traps os
R1(config)#snmp-server enable traps bgp
R1(config)#snmp-server enable traps fra
R1(config)#snmp-server enable traps frame-relay
R1(config)#snmp-server enable traps rtr
R1(config)#snmp-server h
R1(config)#snmp-server host 192.168.100.100 lectura

CCIE LAB

A las personas que desean tener este BUNDLE , escribir al correo  cesarinj@hotmail.com  para darles los password e ip paraque puedan acceder  totalmente gratis

 

 

1) En el AS 100 usar Eigrp y en el AS 200 usar OSPF

2) R14,R15 y R16 son FRSwITCH. Sobre FR debe implementar MPLS para asegurar el reenvío basado en etiquetas en  la red FR

3) El trafico del AS 254 y 54 debe ir por  R10 ,R5,R4,R6 en caso de que se caiga debe ir por R10,R5,R3 (red redundante),  este trafico debe de pasar por la vrf 10024 en todo el trayecto indicado , (las redes destinos son las mismas R13 y R11,(debe publicar 8 redes privadas IPv4 sumarizables en R11 y R13 iguales en cada router, agregadas en una sola). El enlace Ethernet VLAN 45(100.1.45.0) solo debe usarse ante la caída de la red FR del router R4, en otros casos no presentará tráfico

4)El tráfico desde el AS 254 (Red Privada A) llegará a Internet por el AS 200 al R8 (usar una loopback con IP pública), la segunda opción sería por el AS 100 al  R9 (usar la misma IP pública en otra loopback) en caso de caída del R8. Para este controlar este tráfico debemos hacer túneles GRE con que permitirán la redundancia usando EIGRP.

5. El tráfico desde el AS 54 llegará a Internet en forma primaria por el AS 100, la segunda opción sería por el AS 200 en caso de caída del R9. Esto permitirá el acceso a los servidores de los AS 54 los cuales tendrán IPv6 e IPv4. Para ambos casos se debe hacer NAT para IPv6 (IPv4 público a IPv6 del servidor) así como para IPv4 (IPv4 público a IPv4 privado del servidor) desde Internet. Los AS 54 deben poder conectarse solamente por IPv6, mas no por IPv4 ya que sus direcciones IPv4 se repiten.

6. Solamente el tráfico generado en el AS 100 irá hacia el AS 200 por el enlace FR, mientras que el tráfico de retorno, es decir el generado en el AS 200 irá al AS 100 solamente por los routers R10-R5. El tráfico entre el AS 254 (Red Privada B) y una nueva Red Privada C del R9 (interface loopback con IPv6 pública) debe ser incluido en BGP. Este tráfico solo tomará el camino R10, R5 y R3.