Re: Narbik's Advance tech WB ..BGP Lab 5, Aggregation.

From: Narbik Kocharians (narbikk@gmail.com)
Date: Fri Dec 26 2008 - 15:33:31 ARST

Andy, unicast me.

On Fri, Dec 26, 2008 at 8:31 AM, Andy Hogard <andyhogard@gmail.com> wrote:

> Also, in the WB solution ..there is a static route, being used to null0.
> Which in the lab would simply be not possible ..hence, the reason why I
> came
> up with an alternate.
>
> Just thought would add it as well.
>
> On Fri, Dec 26, 2008 at 9:57 PM, Andy Hogard <andyhogard@gmail.com> wrote:
>
> > Yeah, R3 never gets it, because it has its own as no in the as-path ..
> but
> > then aggergate goes away only when the lo 0 on R1 goes down, R3 never
> gets
> > the aggegrate ya!!
> >
> > *"R1 should NOT use R2 if it's network 3.1.11.0/24 network is down"*
> which
> > is also part of the task, and the solution is in co-ordance with the task
> > ..init?!
> >
> > :-?
> >
> >
> > On Fri, Dec 26, 2008 at 9:16 PM, Larry <cc13lab@gmail.com> wrote:
> >
> >> then you would still get 0 points because the aggregate is gone.....
> read
> >> the question it is to create an aggregate that R3 does not get.... not
> R1
> >>
> >>
> >> This aggregation should be done such that
> >> the R1 in AS 100 is the only AS that recieves the aggregate route,
> >>
> >>
> >>
> >>
> >> On Fri, Dec 26, 2008 at 10:39 AM, Andy Hogard <andyhogard@gmail.com
> >wrote:
> >>
> >>> Yeah, I know Narbik must be busy with x-mas ya!! So seeking some help
> >>> from the group & I thought someone must have done this whilst their
> >>> practise.
> >>>
> >>> Anyways, are you telling this ..because you tested my config or just
> >>> because you feel so. Lab it up dear, R1 will no longer have the summary
> ..if
> >>> its loo 0 ie 3.1.11.0/24 went down. That's infact is the condition in
> >>> the advertise map on R2. Infact when R1 loo 0 goes down it is only left
> with
> >>> 2.0.0.0/8 netowrk in its bgp table. :)
> >>>
> >>> So I would still bag points, and besides all this I just wanted to know
> >>> if this is a valid solution for his task.
> >>>
> >>> Cheers!
> >>>
> >>> On Fri, Dec 26, 2008 at 8:07 PM, Larry <cc13lab@gmail.com> wrote:
> >>>
> >>>> You would get 0 points for the section because R1 will use the summary
> >>>> address when its 3.1.11.0/24 is down.
> >>>>
> >>>> "R1 should NOT use R2 if it's
> >>>> network 3.1.11.0/24 network is down."
> >>>>
> >>>> But why are you asking us?? why not ask Narbik these questions????
> >>>>
> >>>>
> >>>>
> >>>> -larry
> >>>>
> >>>>
> >>>>
> >>>> On Fri, Dec 26, 2008 at 7:41 AM, Andy Hogard <andyhogard@gmail.com
> >wrote:
> >>>>
> >>>>> Hey all,
> >>>>>
> >>>>>
> >>>>> This is what *the task* *5 of bgp lab 5 wants us to do "*R2 should
> >>>>> aggergate
> >>>>> all the networks in 3.1.0.0 address space and advertise a single
> >>>>> aggregate
> >>>>> route that only aggregates the specific routes for subnet under the
> >>>>> 3.0.0.0
> >>>>> network in it's BGP table, ensure that the atomic-aggregate attribute
> >>>>> is not
> >>>>> attacher to the aggregate route. This aggregation should be done such
> >>>>> that
> >>>>> the R1 in AS 100 is the only AS that recieves the aggregate route, R3
> >>>>> in AS
> >>>>> 300 should NOT recieve the aggregate route. R1 should NOT use R2 if
> >>>>> it's
> >>>>> network 3.1.11.0/24 network is down. R3 does not need NLRI to
> network
> >>>>> 3.1.11.0/24 advertised by R1.*"*
> >>>>>
> >>>>> *Network topolgy,*
> >>>>>
> >>>>> R1 -----FR-Cloud----- R2 ------Ethernet ------R3
> >>>>> 10.1.12.0/24 10.1.23.0/24
> >>>>>
> >>>>>
> >>>>> Hmm, *below is my solution* to achieve this task, *which differs from
> >>>>> the
> >>>>> solution mentioned in the w-book..*
> >>>>>
> >>>>> *Config on R1,*
> >>>>>
> >>>>> version 12.3
> >>>>> service timestamps debug datetime msec
> >>>>> service timestamps log datetime msec
> >>>>> no service password-encryption
> >>>>> !
> >>>>> hostname R1
> >>>>> !
> >>>>> boot-start-marker
> >>>>> boot-end-marker
> >>>>> !
> >>>>> !
> >>>>> no aaa new-model
> >>>>> !
> >>>>> resource policy
> >>>>> !
> >>>>> memory-size iomem 5
> >>>>> ip subnet-zero
> >>>>> !
> >>>>> !
> >>>>> ip cef
> >>>>> no ip domain lookup
> >>>>> no ip dhcp use vrf connected
> >>>>> !
> >>>>> !
> >>>>> no ip ips deny-action ips-interface
> >>>>> !
> >>>>> no ftp-server write-enable
> >>>>> !
> >>>>> no crypto isakmp ccm
> >>>>> !
> >>>>> !
> >>>>> interface Loopback0
> >>>>> ip address 3.1.11.1 255.255.255.0
> >>>>> !
> >>>>> interface Ethernet0/0
> >>>>> no ip address
> >>>>> shutdown
> >>>>> half-duplex
> >>>>> !
> >>>>> interface Ethernet0/1
> >>>>> no ip address
> >>>>> shutdown
> >>>>> half-duplex
> >>>>> !
> >>>>> interface Ethernet0/2
> >>>>> no ip address
> >>>>> shutdown
> >>>>> half-duplex
> >>>>> !
> >>>>> interface Ethernet0/3
> >>>>> no ip address
> >>>>> shutdown
> >>>>> half-duplex
> >>>>> !
> >>>>> interface Serial1/0
> >>>>> no ip address
> >>>>> encapsulation frame-relay
> >>>>> serial restart-delay 0
> >>>>> no dce-terminal-timing-enable
> >>>>> !
> >>>>> interface Serial1/0.12 point-to-point
> >>>>> ip address 10.1.12.1 255.255.255.0
> >>>>> frame-relay interface-dlci 102
> >>>>> !
> >>>>> interface Serial1/1
> >>>>> no ip address
> >>>>> shutdown
> >>>>> serial restart-delay 0
> >>>>> no dce-terminal-timing-enable
> >>>>> !
> >>>>> interface Serial1/2
> >>>>> no ip address
> >>>>> shutdown
> >>>>> serial restart-delay 0
> >>>>> no dce-terminal-timing-enable
> >>>>> !
> >>>>> interface Serial1/3
> >>>>> no ip address
> >>>>> shutdown
> >>>>> serial restart-delay 0
> >>>>> no dce-terminal-timing-enable
> >>>>> !
> >>>>> router bgp 100
> >>>>> no synchronization
> >>>>> bgp log-neighbor-changes
> >>>>> network 3.1.11.0 mask 255.255.255.0
> >>>>> neighbor 10.1.12.2 remote-as 200
> >>>>> neighbor 10.1.12.2 allowas-in 1
> >>>>> no auto-summary
> >>>>> !
> >>>>> ip http server
> >>>>> no ip http secure-server
> >>>>> ip classless
> >>>>> !
> >>>>> control-plane
> >>>>> !
> >>>>> !
> >>>>> line con 0
> >>>>> exec-timeout 0 0
> >>>>> logging synchronous
> >>>>> line aux 0
> >>>>> line vty 0 4
> >>>>> exec-timeout 0 0
> >>>>> logging synchronous
> >>>>> login
> >>>>> !
> >>>>> !
> >>>>> end
> >>>>>
> >>>>> *Config on R2,*
> >>>>>
> >>>>> version 12.3
> >>>>> service timestamps debug datetime msec
> >>>>> service timestamps log datetime msec
> >>>>> no service password-encryption
> >>>>> !
> >>>>> hostname R2
> >>>>> !
> >>>>> boot-start-marker
> >>>>> boot-end-marker
> >>>>> !
> >>>>> !
> >>>>> no aaa new-model
> >>>>> !
> >>>>> resource policy
> >>>>> !
> >>>>> memory-size iomem 5
> >>>>> ip subnet-zero
> >>>>> !
> >>>>> !
> >>>>> ip cef
> >>>>> no ip domain lookup
> >>>>> no ip dhcp use vrf connected
> >>>>> !
> >>>>> !
> >>>>> no ip ips deny-action ips-interface
> >>>>> !
> >>>>> no ftp-server write-enable
> >>>>> !
> >>>>> no crypto isakmp ccm
> >>>>> !
> >>>>> !
> >>>>> interface Loopback0
> >>>>> ip address 2.2.2.2 255.0.0.0
> >>>>> !
> >>>>> interface Ethernet0/0
> >>>>> ip address 10.1.23.2 255.255.255.0
> >>>>> full-duplex
> >>>>> !
> >>>>> interface Ethernet0/1
> >>>>> no ip address
> >>>>> shutdown
> >>>>> half-duplex
> >>>>> !
> >>>>> interface Ethernet0/2
> >>>>> no ip address
> >>>>> shutdown
> >>>>> half-duplex
> >>>>> !
> >>>>> interface Ethernet0/3
> >>>>> no ip address
> >>>>> shutdown
> >>>>> half-duplex
> >>>>> !
> >>>>> interface Serial1/0
> >>>>> no ip address
> >>>>> encapsulation frame-relay
> >>>>> serial restart-delay 0
> >>>>> no dce-terminal-timing-enable
> >>>>> !
> >>>>> interface Serial1/0.21 point-to-point
> >>>>> ip address 10.1.12.2 255.255.255.0
> >>>>> frame-relay interface-dlci 201
> >>>>> !
> >>>>> interface Serial1/1
> >>>>> no ip address
> >>>>> shutdown
> >>>>> serial restart-delay 0
> >>>>> no dce-terminal-timing-enable
> >>>>> !
> >>>>> interface Serial1/2
> >>>>> no ip address
> >>>>> shutdown
> >>>>> serial restart-delay 0
> >>>>> no dce-terminal-timing-enable
> >>>>> !
> >>>>> interface Serial1/3
> >>>>> no ip address
> >>>>> shutdown
> >>>>> serial restart-delay 0
> >>>>> no dce-terminal-timing-enable
> >>>>> !
> >>>>> router bgp 200
> >>>>> no synchronization
> >>>>> bgp log-neighbor-changes
> >>>>> network 2.0.0.0
> >>>>> aggregate-address 3.1.0.0 255.255.240.0 as-set summary-only
> >>>>> advertise-map
> >>>>> IF_NET_3.1.11.0/24
> >>>>> neighbor 10.1.12.1 remote-as 100
> >>>>> neighbor 10.1.23.3 remote-as 300
> >>>>> neighbor 10.1.23.3 unsuppress-map UNSUP_NET3.1.11.0/24
> >>>>> default-metric 50
> >>>>> no auto-summary
> >>>>> !
> >>>>> ip http server
> >>>>> no ip http secure-server
> >>>>> ip classless
> >>>>> !
> >>>>> !
> >>>>> !
> >>>>> ip prefix-list NET3.1.11.0/24 seq 5 permit 3.1.11.0/24
> >>>>> !
> >>>>> route-map IF_NET_3.1.11.0/24 permit 10
> >>>>> match ip address prefix-list NET3.1.11.0/24
> >>>>> !
> >>>>> route-map UNSUP_NET3.1.11.0/24 permit 10
> >>>>> match ip address prefix-list NET3.1.11.0/24
> >>>>> !
> >>>>> !
> >>>>> !
> >>>>> control-plane
> >>>>> !
> >>>>> line con 0
> >>>>> exec-timeout 0 0
> >>>>> logging synchronous
> >>>>> line aux 0
> >>>>> line vty 0 4
> >>>>> exec-timeout 0 0
> >>>>> logging synchronous
> >>>>> login
> >>>>> !
> >>>>> !
> >>>>> end
> >>>>>
> >>>>> *Config on R3, *
> >>>>>
> >>>>> version 12.3
> >>>>> service timestamps debug datetime msec
> >>>>> service timestamps log datetime msec
> >>>>> no service password-encryption
> >>>>> !
> >>>>> hostname R3
> >>>>> !
> >>>>> boot-start-marker
> >>>>> boot-end-marker
> >>>>> !
> >>>>> !
> >>>>> no aaa new-model
> >>>>> !
> >>>>> resource policy
> >>>>> !
> >>>>> memory-size iomem 5
> >>>>> ip subnet-zero
> >>>>> !
> >>>>> !
> >>>>> ip cef
> >>>>> no ip domain lookup
> >>>>> no ip dhcp use vrf connected
> >>>>> !
> >>>>> !
> >>>>> no ip ips deny-action ips-interface
> >>>>> !
> >>>>> no ftp-server write-enable
> >>>>> !
> >>>>> !
> >>>>> no crypto isakmp ccm
> >>>>> !
> >>>>> !
> >>>>> interface Loopback0
> >>>>> ip address 3.1.0.3 255.255.255.0
> >>>>> !
> >>>>> interface Loopback1
> >>>>> ip address 3.1.1.3 255.255.255.0
> >>>>> !
> >>>>> interface Loopback2
> >>>>> ip address 3.1.2.3 255.255.255.0
> >>>>> !
> >>>>> interface Loopback3
> >>>>> ip address 3.1.3.3 255.255.255.0
> >>>>> !
> >>>>> interface Loopback4
> >>>>> ip address 3.1.4.3 255.255.255.0
> >>>>> !
> >>>>> interface Loopback5
> >>>>> ip address 3.1.5.3 255.255.255.0
> >>>>> !
> >>>>> interface Loopback6
> >>>>> ip address 3.1.6.3 255.255.255.0
> >>>>> !
> >>>>> interface Loopback7
> >>>>> ip address 3.1.7.3 255.255.255.0
> >>>>> !
> >>>>> interface Loopback8
> >>>>> ip address 3.1.8.3 255.255.255.0
> >>>>> !
> >>>>> interface Loopback9
> >>>>> ip address 3.1.9.3 255.255.255.0
> >>>>> !
> >>>>> interface Loopback10
> >>>>> ip address 3.1.10.3 255.255.255.0
> >>>>> !
> >>>>> interface Loopback12
> >>>>> ip address 3.1.12.3 255.255.255.0
> >>>>> !
> >>>>> interface Loopback13
> >>>>> ip address 3.1.13.3 255.255.255.0
> >>>>> !
> >>>>> interface Loopback14
> >>>>> ip address 3.1.14.3 255.255.255.0
> >>>>> !
> >>>>> interface Loopback15
> >>>>> ip address 3.1.15.3 255.255.255.0
> >>>>> !
> >>>>> interface Ethernet0/0
> >>>>> ip address 10.1.23.3 255.255.255.0
> >>>>> full-duplex
> >>>>> !
> >>>>> interface Ethernet0/1
> >>>>> no ip address
> >>>>> shutdown
> >>>>> half-duplex
> >>>>> !
> >>>>> interface Ethernet0/2
> >>>>> no ip address
> >>>>> shutdown
> >>>>> half-duplex
> >>>>> !
> >>>>> interface Ethernet0/3
> >>>>> no ip address
> >>>>> shutdown
> >>>>> half-duplex
> >>>>> !
> >>>>> interface Serial1/0
> >>>>> no ip address
> >>>>> encapsulation frame-relay
> >>>>> serial restart-delay 0
> >>>>> no dce-terminal-timing-enable
> >>>>> !
> >>>>> interface Serial1/0.34 point-to-point
> >>>>> ip address 10.1.34.3 255.255.255.0
> >>>>> frame-relay interface-dlci 304
> >>>>> !
> >>>>> interface Serial1/1
> >>>>> no ip address
> >>>>> shutdown
> >>>>> serial restart-delay 0
> >>>>> no dce-terminal-timing-enable
> >>>>> !
> >>>>> interface Serial1/2
> >>>>> no ip address
> >>>>> shutdown
> >>>>> serial restart-delay 0
> >>>>> no dce-terminal-timing-enable
> >>>>> !
> >>>>> interface Serial1/3
> >>>>> no ip address
> >>>>> shutdown
> >>>>> serial restart-delay 0
> >>>>> no dce-terminal-timing-enable
> >>>>> !
> >>>>> router bgp 300
> >>>>> no synchronization
> >>>>> bgp log-neighbor-changes
> >>>>> network 3.1.0.0 mask 255.255.255.0
> >>>>> network 3.1.1.0 mask 255.255.255.0
> >>>>> network 3.1.2.0 mask 255.255.255.0
> >>>>> network 3.1.3.0 mask 255.255.255.0
> >>>>> network 3.1.4.0 mask 255.255.255.0
> >>>>> network 3.1.5.0 mask 255.255.255.0
> >>>>> network 3.1.6.0 mask 255.255.255.0
> >>>>> network 3.1.7.0 mask 255.255.255.0
> >>>>> network 3.1.8.0 mask 255.255.255.0
> >>>>> network 3.1.9.0 mask 255.255.255.0
> >>>>> network 3.1.10.0 mask 255.255.255.0
> >>>>> network 3.1.12.0 mask 255.255.255.0
> >>>>> network 3.1.13.0 mask 255.255.255.0
> >>>>> network 3.1.14.0 mask 255.255.255.0
> >>>>> network 3.1.15.0 mask 255.255.255.0
> >>>>> neighbor 10.1.23.2 remote-as 200
> >>>>> no auto-summary
> >>>>> !
> >>>>> ip http server
> >>>>> no ip http secure-server
> >>>>> ip classless
> >>>>> !
> >>>>> !
> >>>>> control-plane
> >>>>> !
> >>>>> line con 0
> >>>>> exec-timeout 0 0
> >>>>> logging synchronous
> >>>>> line aux 0
> >>>>> line vty 0 4
> >>>>> exec-timeout 0 0
> >>>>> logging synchronous
> >>>>> login
> >>>>> !
> >>>>> !
> >>>>> end
> >>>>>
> >>>>> *Now while I know my solution is correct, I want some of you experts
> to
> >>>>> tell
> >>>>> me if this was the task on the ccie lab, would I have scored all the
> >>>>> points
> >>>>> or none.
> >>>>> *
> >>>>>
> >>>>> *Regards,
> >>>>> Andy.*
> >>>>>
> >>>>> --
> >>>>> My Blog URL: http://ccieno.blogspot.com/
> >>>>>
> >>>>>
> >>>>>
> >>>>> --
> >>>>> My Blog URL: http://ccieno.blogspot.com/
> >>>>>
> >>>>>
> >>>>> Blogs and organic groups at http://www.ccie.net
> >>>>>
> >>>>>
> _______________________________________________________________________
> >>>>> Subscription information may be found at:
> >>>>> http://www.groupstudy.com/list/CCIELab.html
> >>>>>
> >>>>>
> >>>>>
> >>>>>
> >>>>>
> >>>>>
> >>>>>
> >>>>>
> >>>>
> >>>
> >>>
> >>> --
> >>> My Blog URL: http://ccieno.blogspot.com/
> >>>
> >>
> >>
> >
> >
> > --
> > My Blog URL: http://ccieno.blogspot.com/
> >
>
>
>
> --
> My Blog URL: http://ccieno.blogspot.com/
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
>
>
>
>
>
> 

-- 
Narbik Kocharians
CCSI#30832, CCIE# 12410 (R&S, SP, Security)
www.MicronicsTraining.com
www.Net-Workbooks.com
Sr. Technical Instructor

Blogs and organic groups at http://www.ccie.net

This archive was generated by hypermail 2.1.4 : Thu Jan 01 2009 - 12:53:10 ARST