Cisco Router IOS XR Manuel d'utilisateur

Naviguer en ligne ou télécharger Manuel d'utilisateur pour Systèmes de contrôle d'accès de sécurité Cisco Router IOS XR. Cisco IOS XR Workbook Manuel d'utilisatio

  • Télécharger
  • Ajouter à mon manuel
  • Imprimer

Résumé du contenu

Page 1

CISCO IOS XR Jeffrey Fry © October 2012 FryGuy.Net

Page 2 - Table of Contents

Cisco IOS XR Training Page 10 © 2012 Jeffrey Fry FryGuy.Net Ok, now lets commit it this time. RP/0/7/CPU0:R1#conf t Sun Apr 1 22:26:20.749 UTC R

Page 3 - G0/3/0/3 G0/5/0/3

Cisco IOS XR Training Page 100 © 2012 Jeffrey Fry FryGuy.Net 10.4.4.4 1 FULL/DR 00:00:33 10.1.34.4 FastEthernet0/0 All neighbore

Page 4

Cisco IOS XR Training Page 101 © 2012 Jeffrey Fry FryGuy.Net 24. NHRP ( HSRP & VRRP) Next Hop Resolution Protocol comes in two fashions on th

Page 5

Cisco IOS XR Training Page 102 © 2012 Jeffrey Fry FryGuy.Net HSRP is up first! First thing, from config mode, enter router hsrp RP/0/RSP0/CPU0:R

Page 6 - Differences

Cisco IOS XR Training Page 103 © 2012 Jeffrey Fry FryGuy.Net Time for some VRRP One thing cool about VRRP, you don’t have to burn an IP address j

Page 7

Cisco IOS XR Training Page 104 © 2012 Jeffrey Fry FryGuy.Net Now back to R1 to see the VRRP status: RP/0/RSP0/CPU0:R1#show vrrp IPv4 Virtual Rou

Page 8

Cisco IOS XR Training Page 105 © 2012 Jeffrey Fry FryGuy.Net This page intentionally left black for notes.

Page 9

Cisco IOS XR Training Page 11 © 2012 Jeffrey Fry FryGuy.Net Few other things that is nice to know. You can configure the system in exclusive mo

Page 10

Cisco IOS XR Training Page 12 © 2012 Jeffrey Fry FryGuy.Net Ok, so now we are at an unconfigured device. Now we can load the config on the disk

Page 11

Cisco IOS XR Training Page 13 © 2012 Jeffrey Fry FryGuy.Net RP/0/RSP0/CPU0:R1(config)#commit replace Wed Oct 17 01:37:41.577 UTC This commit wil

Page 12

Cisco IOS XR Training Page 14 © 2012 Jeffrey Fry FryGuy.Net 4. Configuring an interface Basic IPv4 and IPv6 address First we will take a look at

Page 13

Cisco IOS XR Training Page 15 © 2012 Jeffrey Fry FryGuy.Net Notice, on IOS XR you can use / for the subnet, no more entering 255.255.255.0 : RP/0

Page 14 - Basic IPv4 and IPv6 address

Cisco IOS XR Training Page 16 © 2012 Jeffrey Fry FryGuy.Net Uncommitted changes found, commit them before exiting(yes/no/cancel)? [cancel]:yes RP

Page 15

Cisco IOS XR Training Page 17 © 2012 Jeffrey Fry FryGuy.Net 5. Interface Bundles Etherchannels are also different between IOS and IOS XR. In ty

Page 16

Cisco IOS XR Training Page 18 © 2012 Jeffrey Fry FryGuy.Net Ok, since this is a bundle, we should put restrictions around the max and min links.

Page 17 - 5. Interface Bundles

Cisco IOS XR Training Page 19 © 2012 Jeffrey Fry FryGuy.Net Now let’s check our config before we commit: RP/0/RSP0/CPU0:PE2(config-if)#show confi

Page 18

Cisco IOS XR Training Page 2 © 2012 Jeffrey Fry FryGuy.Net Table of Contents 1. Cisco IOS XR Introduction and Comparison to IOS 2. Cisco IOS

Page 19

Cisco IOS XR Training Page 20 © 2012 Jeffrey Fry FryGuy.Net interface GigabitEthernet0/0/0/11 bundle id 200 mode active no shutdown ! interface

Page 20

Cisco IOS XR Training Page 21 © 2012 Jeffrey Fry FryGuy.Net So, let’s PING! RP/0/RSP0/CPU0:PE1#ping 150.1.12.2 Fri Apr 27 01:51:12.692 UTC Type e

Page 21

Cisco IOS XR Training Page 22 © 2012 Jeffrey Fry FryGuy.Net Now we can look at LACP: RP/0/RSP0/CPU0:PE1#show lacp Fri Apr 27 01:52:35.115 UTC St

Page 22

Cisco IOS XR Training Page 23 © 2012 Jeffrey Fry FryGuy.Net 6. Software installation, PIE packages, and patches As part of any system, from time

Page 23

Cisco IOS XR Training Page 24 © 2012 Jeffrey Fry FryGuy.Net RP/0/RSP0/CPU0:R1# copy ftp://1.1.1.2/ASR9K-iosxr-k9-4.1.2.tar compactflash: Tue Apr

Page 24

Cisco IOS XR Training Page 25 © 2012 Jeffrey Fry FryGuy.Net Info: asr9k-video-p.pie-4.1.2 Info: asr9k-mgbl-p.pie-4.1.2 Info:

Page 25

Cisco IOS XR Training Page 26 © 2012 Jeffrey Fry FryGuy.Net Now we should be able to activate and install one of the PIE images, here we will act

Page 26

Cisco IOS XR Training Page 27 © 2012 Jeffrey Fry FryGuy.Net Once completed, we will be notified on the cli RP/0/RSP0/CPU0:ios(admin)#Install oper

Page 27

Cisco IOS XR Training Page 28 © 2012 Jeffrey Fry FryGuy.Net Now if we look at our show install active summary command, we now have the MPLS PIE

Page 28

Cisco IOS XR Training Page 29 © 2012 Jeffrey Fry FryGuy.Net Info: asr9k-p-4.1.2.CSCtu30994.txt (skipped - not a pie) Info: The install op

Page 29

Cisco IOS XR Training Page 3 © 2012 Jeffrey Fry FryGuy.Net There are two topologies that have been used. This is because of what I had access to

Page 30

Cisco IOS XR Training Page 30 © 2012 Jeffrey Fry FryGuy.Net Now, that was not one that required a reload, if you have one of them like CSCtw84381

Page 31 - 7. Licensing

Cisco IOS XR Training Page 31 © 2012 Jeffrey Fry FryGuy.Net 7. Licensing The ever loving Cisco licensing – well, not just Cisco but all vendors

Page 32

Cisco IOS XR Training Page 32 © 2012 Jeffrey Fry FryGuy.Net Next we can use the license add command from Admin mode RP/0/1/CPU0:CRS# RP/0/1/CPU0:

Page 33

Cisco IOS XR Training Page 33 © 2012 Jeffrey Fry FryGuy.Net Once installed, we can check using the show license command. RP/0/RSP0/CPU0:R1#sh lic

Page 34 - 8. Aliases

Cisco IOS XR Training Page 34 © 2012 Jeffrey Fry FryGuy.Net 8. Aliases From IOS, Aliases can sometimes make life easier on you and your support

Page 35

Cisco IOS XR Training Page 35 © 2012 Jeffrey Fry FryGuy.Net Now, let’s see what happens when we do a show int for that alias RP/0/7/CPU0:R1#sh in

Page 36

Cisco IOS XR Training Page 36 © 2012 Jeffrey Fry FryGuy.Net reliability 255/255, txload 0/255, rxload 0/255 Encapsulation ARPA, Full-dup

Page 37

Cisco IOS XR Training Page 37 © 2012 Jeffrey Fry FryGuy.Net No. of members in this bundle: 2 TenGigE0/0/0/0 Full-duplex 10

Page 38 - 9. Wildcard Masks

Cisco IOS XR Training Page 38 © 2012 Jeffrey Fry FryGuy.Net 9. Wildcard Masks A really cool thing with IOS XR is interface wildcards. If you w

Page 39 - 10. Processes

Cisco IOS XR Training Page 39 © 2012 Jeffrey Fry FryGuy.Net 10. Processes So, since IOS XR is based on QNX, the SHOW PROCESSES command is a bit d

Page 40

Cisco IOS XR Training Page 4 © 2012 Jeffrey Fry FryGuy.Net 1. Cisco IOS XR Introduction and Comparison to IOS Let’s start with the basic diffe

Page 41

Cisco IOS XR Training Page 40 © 2012 Jeffrey Fry FryGuy.Net Now, since IOS XR is based on a flavor of Unix, we have a command similar to TOP call

Page 42

Cisco IOS XR Training Page 41 © 2012 Jeffrey Fry FryGuy.Net 11. Remote Access Services – Telnet and SSH We need to have a way to remote access th

Page 43

Cisco IOS XR Training Page 42 © 2012 Jeffrey Fry FryGuy.Net RP/0/RSP0/CPU0:R1(config-ssh-peer)# allow Telnet peer RP/0/RSP0/CPU0:R1(config-telnet

Page 44

Cisco IOS XR Training Page 43 © 2012 Jeffrey Fry FryGuy.Net 12. TACACS Configuration (default and non-default VRF) Ok, so you want to secure you

Page 45

Cisco IOS XR Training Page 44 © 2012 Jeffrey Fry FryGuy.Net From another terminal, SSH into the box using a TACACs account, and if successful, c

Page 46 - 13. Access Lists

Cisco IOS XR Training Page 45 © 2012 Jeffrey Fry FryGuy.Net And finally do the commit confirmed here again RP/0/RSP0/CPU0:PE2(config)#commit conf

Page 47 - 14. OSPF

Cisco IOS XR Training Page 46 © 2012 Jeffrey Fry FryGuy.Net 13. Access Lists Access lists - these are the same as IOS Extended access lists. S

Page 48

Cisco IOS XR Training Page 47 © 2012 Jeffrey Fry FryGuy.Net 14. OSPF Time for some OSPF configs, these will build off the previous configs we j

Page 49

Cisco IOS XR Training Page 48 © 2012 Jeffrey Fry FryGuy.Net Now to see if we neighbored up with R2: RP/0/7/CPU0:R1#sh ip ospf nei Thu Mar 29 19

Page 50

Cisco IOS XR Training Page 49 © 2012 Jeffrey Fry FryGuy.Net For reference, here is a similar IOS config for the same thing: R1(config)#router os

Page 51

Cisco IOS XR Training Page 5 © 2012 Jeffrey Fry FryGuy.Net Here is a table of some of the other significant differences between IOS and IOS XR I

Page 52 - 15. EIGRP

Cisco IOS XR Training Page 50 © 2012 Jeffrey Fry FryGuy.Net Then set our MD5 key #1 to Cisco RP/0/7/CPU0:R1(config-ospf-ar-if)#message-digest-ke

Page 53

Cisco IOS XR Training Page 51 © 2012 Jeffrey Fry FryGuy.Net Then make sure we are getting a route RP/0/7/CPU0:R1#sh route ipv4 ospf Sat Mar 31 1

Page 54

Cisco IOS XR Training Page 52 © 2012 Jeffrey Fry FryGuy.Net 15. EIGRP First thing we need to do is delete the OSPF process,that is if you still

Page 55

Cisco IOS XR Training Page 53 © 2012 Jeffrey Fry FryGuy.Net NSF-aware route hold timer is 480s NSF signal timer is 20s NSF converge t

Page 56 - 16. RIP

Cisco IOS XR Training Page 54 © 2012 Jeffrey Fry FryGuy.Net D 2.2.2.2/32 [90/130816] via 150.1.12.2, 00:00:11, GigabitEthernet0/3/0/2 C 150

Page 57

Cisco IOS XR Training Page 55 © 2012 Jeffrey Fry FryGuy.Net [90/130816] via fe80::2d0:79ff:fe01:3a78, 00:01:43, GigabitEthernet0/3/0/2 C

Page 58 - 17. IS-IS

Cisco IOS XR Training Page 56 © 2012 Jeffrey Fry FryGuy.Net 16. RIP (yeah yeah, why would you want to run this? Think – PE-CE) Ok, time for the

Page 59

Cisco IOS XR Training Page 57 © 2012 Jeffrey Fry FryGuy.Net Version: 2 Default metric: Not set Maximum paths:

Page 60

Cisco IOS XR Training Page 58 © 2012 Jeffrey Fry FryGuy.Net 17. IS-IS Time for some IS-IS routing! Between IS-IS and OSPF, those are the two mos

Page 61 - 18. BGP iBGP and eBGP

Cisco IOS XR Training Page 59 © 2012 Jeffrey Fry FryGuy.Net interface GigabitEthernet0/3/0/2 address-family ipv4 unicast ! address-family

Page 62

Cisco IOS XR Training Page 6 © 2012 Jeffrey Fry FryGuy.Net 2. Cisco IOS XR Prompt and Hostname Differences Let’s cover the prompt real quick as

Page 63

Cisco IOS XR Training Page 60 © 2012 Jeffrey Fry FryGuy.Net Ok, that worked – now we can do the same for IPv6. First we should look at the IPv6

Page 64

Cisco IOS XR Training Page 61 © 2012 Jeffrey Fry FryGuy.Net 18. BGP iBGP and eBGP BGP, this is where it starts to get different with IOS XR. Fi

Page 65

Cisco IOS XR Training Page 62 © 2012 Jeffrey Fry FryGuy.Net Precedence: internet Neighbor capabilities: Route refresh: advertised and rec

Page 66

Cisco IOS XR Training Page 63 © 2012 Jeffrey Fry FryGuy.Net Cool, we have a route to R2 Loopback interface. Lets PING it! RP/0/7/CPU0:R1#ping 2.

Page 67

Cisco IOS XR Training Page 64 © 2012 Jeffrey Fry FryGuy.Net RP/0/7/CPU0:R1(config-isis)#exit Now we need to configure an interface to advertise

Page 68

Cisco IOS XR Training Page 65 © 2012 Jeffrey Fry FryGuy.Net Gateway of last resort is not set L 1.1.1.1/32 is directly connected, 02:26:47,

Page 69 - 19. Route Filtering

Cisco IOS XR Training Page 66 © 2012 Jeffrey Fry FryGuy.Net Hold time is 180, keepalive interval is 60 seconds Configured hold time: 180, kee

Page 70

Cisco IOS XR Training Page 67 © 2012 Jeffrey Fry FryGuy.Net Here is the first difference with IOS XR – eBGP peers must have a Route-Policy (rout

Page 71

Cisco IOS XR Training Page 68 © 2012 Jeffrey Fry FryGuy.Net ip prefix-list PASS seq 5 permit 0.0.0.0/0 le 32 route-map PASS permit 10 match ip

Page 72

Cisco IOS XR Training Page 69 © 2012 Jeffrey Fry FryGuy.Net 19. Route Filtering Ok, now that BGP has been covered, lets talk about filtering rout

Page 73

Cisco IOS XR Training Page 7 © 2012 Jeffrey Fry FryGuy.Net Notice that the hostname did not change? In IOS XR you need to COMMIT your changes in

Page 74

Cisco IOS XR Training Page 70 © 2012 Jeffrey Fry FryGuy.Net Now that we have the policy committed with no errors, we can apply it to the neighbor

Page 75 - 21. Basic MPLS - LDP

Cisco IOS XR Training Page 71 © 2012 Jeffrey Fry FryGuy.Net 20. VRF lite and Dot1Q Trunks Ok, time for some VRF lite basics and we can throw in

Page 76

Cisco IOS XR Training Page 72 © 2012 Jeffrey Fry FryGuy.Net RP/0/7/CPU0:R1(config-subif)#comm Fri Mar 30 14:12:12.700 UTC RP/0/7/CPU0:R1(config-

Page 77

Cisco IOS XR Training Page 73 © 2012 Jeffrey Fry FryGuy.Net Now we can check our config: RP/0/7/CPU0:R1(config-ospf-vrf)#show configuration Fri M

Page 78

Cisco IOS XR Training Page 74 © 2012 Jeffrey Fry FryGuy.Net Cool, we have a route to R2’s Loop1000 of 222.222.222.222/32. Ping test time! RP/0/

Page 79

Cisco IOS XR Training Page 75 © 2012 Jeffrey Fry FryGuy.Net 21. Basic MPLS - LDP Ok, time for some MPLS! For this lab I will be using the OSPF r

Page 80

Cisco IOS XR Training Page 76 © 2012 Jeffrey Fry FryGuy.Net Now, lets check our interfaces and check for a neighbor. RP/0/7/CPU0:R1#sh mpls ldp i

Page 81 - 22. MPLS VPN

Cisco IOS XR Training Page 77 © 2012 Jeffrey Fry FryGuy.Net Now here is something different than normal IOS, as soon as you enable authentication

Page 82

Cisco IOS XR Training Page 78 © 2012 Jeffrey Fry FryGuy.Net ISIS Changing Metrics on an interface. To change a metric on an interface in IS-IS,

Page 83

Cisco IOS XR Training Page 79 © 2012 Jeffrey Fry FryGuy.Net Passive Interfaces Now, typically in ISIS you make the loopback interface passive. T

Page 84

Cisco IOS XR Training Page 8 © 2012 Jeffrey Fry FryGuy.Net 3. Basic Configuration Options Ok, we have seen the basic COMMIT option – but what ot

Page 85

Cisco IOS XR Training Page 80 © 2012 Jeffrey Fry FryGuy.Net You may or may not have to clear the process; I did not and was able to catch this in

Page 86

Cisco IOS XR Training Page 81 © 2012 Jeffrey Fry FryGuy.Net 22. MPLS VPN Next up is MPLS VPN; actually VPNv4 routes are what these actually are s

Page 87

Cisco IOS XR Training Page 82 © 2012 Jeffrey Fry FryGuy.Net Now for the interface facing the PE (here f0/0) CE1(config-if)#int f0/0 CE1(config-if

Page 88

Cisco IOS XR Training Page 83 © 2012 Jeffrey Fry FryGuy.Net Now it is time to get some IP addresses on PE1. We will use G0/1/0/11 for connection

Page 89

Cisco IOS XR Training Page 84 © 2012 Jeffrey Fry FryGuy.Net And our IS Type RP/0/RSP0/CPU0:R1(config-isis)#is-type level-2 Set the loopback int

Page 90

Cisco IOS XR Training Page 85 © 2012 Jeffrey Fry FryGuy.Net Cool, we have a Level2 route to 150.1.1.1 via R1. Now, lets PING to make sure. RP/0/

Page 91

Cisco IOS XR Training Page 86 © 2012 Jeffrey Fry FryGuy.Net For this example, we will call our VRF R3R4 since we are connecting R3 (CE1) and R4

Page 92

Cisco IOS XR Training Page 87 © 2012 Jeffrey Fry FryGuy.Net PE1: RP/0/RSP0/CPU0:R1#conf t Fri Apr 20 01:48:48.712 UTC Lets get to our interface,

Page 93

Cisco IOS XR Training Page 88 © 2012 Jeffrey Fry FryGuy.Net There, that worked. Lets check R2 RP/0/RSP0/CPU0:R2#ping vrf R3R4 10.1.24.4 Fri Apr

Page 94

Cisco IOS XR Training Page 89 © 2012 Jeffrey Fry FryGuy.Net Ok, PE2 done. Now we can check for OSPF neighbor in that VRF. To do that, we need to

Page 95

Cisco IOS XR Training Page 9 © 2012 Jeffrey Fry FryGuy.Net Now, what if we want to make a change but we want to be sure we don’t lose connection

Page 96

Cisco IOS XR Training Page 90 © 2012 Jeffrey Fry FryGuy.Net C 10.1.13.0/24 is directly connected, FastEthernet0/0 C 10.3.3.3/32 is di

Page 97 - 23. L2VPN

Cisco IOS XR Training Page 91 © 2012 Jeffrey Fry FryGuy.Net Ok, now that that is done – we need to do the same thing on PE2 RP/0/RSP0/CPU0:R2(con

Page 98

Cisco IOS XR Training Page 92 © 2012 Jeffrey Fry FryGuy.Net BGP table state: Active Table ID: 0x0 RD version: 3889240856 BGP main routing table

Page 99

Cisco IOS XR Training Page 93 © 2012 Jeffrey Fry FryGuy.Net And on PE2: RP/0/RSP0/CPU0:R2(config)#router ospf R3R4 RP/0/RSP0/CPU0:R2(config-

Page 100

Cisco IOS XR Training Page 94 © 2012 Jeffrey Fry FryGuy.Net RP/0/RSP0/CPU0:R2#sh bgp vpnv4 unicast vrf R3R4 10.1.13.0 Fri Apr 20 02:45:47.177

Page 101 - 24. NHRP ( HSRP & VRRP)

Cisco IOS XR Training Page 95 © 2012 Jeffrey Fry FryGuy.Net RP/0/RSP0/CPU0:R2(config)#router ospf R3R4 RP/0/RSP0/CPU0:R2(config-ospf)#vrf R3R4 N

Page 102 -

Cisco IOS XR Training Page 96 © 2012 Jeffrey Fry FryGuy.Net 10.0.0.0/8 is variably subnetted, 4 subnets, 2 masks C 10.1.13.0/24 is di

Page 103

Cisco IOS XR Training Page 97 © 2012 Jeffrey Fry FryGuy.Net 23. L2VPN Ok, now it is time for some L2VPN. Here we will use the same diagram as be

Page 104

Cisco IOS XR Training Page 98 © 2012 Jeffrey Fry FryGuy.Net CE2(config-if)#ip add 10.1.34.4 255.255.255.0 CE2(config-if)#int l0 CE2(config-if)#ip

Page 105

Cisco IOS XR Training Page 99 © 2012 Jeffrey Fry FryGuy.Net RP/0/RSP0/CPU0:PE2(config)#l2vpn RP/0/RSP0/CPU0:PE2(config-l2vpn)#xconnect group R3R

Commentaires sur ces manuels

Pas de commentaire