CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Lecture # 3
Categories of Routing Protocol: There are two main categories of routing protocol:

1:- IGP 2:- EGP

Interior Gateway Protocol (IGP): IGPs configured to perform Convergence within an Autonomous
System (AS).

Convergence: Each and every IP address/destination reachable or ping able.

AS: “A network with single/same routing policy is called an AS.” Or “A network with single
administration is called an AS”

Routing Policy: There are different policies for example: Best path, reliability, bandwidth etc. if there are
two different policies then the redistribution will be implemented between these policies.

Redistribution: Allows different routing policies to communicate or it allows routing between different
routing policies. Its act like a translator, translate one administrative policy to another one. For example:
if two languages Chinese and English, than it is used to translate chines to English and English to
Chinese.

(Note: Process delay, more resources utilization in redistribution. So better to choose autonomous
network other than ordinary network.)

IGP Protocols: (important interview point of view)

RIP, RIP vr2 OSPF, EIGRP, Intermediate System to Intermediate System (IS-IS or Router to Router).

(Note: IS-IS is not in CCNA (R & S), CCNP (R & S), CCIE (R & S) track, its only available or study in CCIE
Service Provider.)

Exterior Gateway Protocol (EGP): It is configured to perform convergence between different AS.

EGP protocol: Border Gateway Protocol (BGP)

BGP configured on Border Router, ”A router that connects different AS is called border router ”. As
shown in figure 1.

Figure 1

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 1
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

(Note: You can have single or multiple border routers in an AS (figure 1). Advantages of multiple border
routers are redundancy, backup and load balancing.)

Administrative Distance (AD): “AD value is a numeric value that defines priority of a routing method”

Higher the Numeric value
Lower the priority

Lower the Numeric value
Higher the priority

Routing Protocol/Policy/Method Administrative Distance Value

C
Directly Connected 0
S
Without Outgoing Interface 0
S
With next Hop IP Address 1
D
EIGRP 90
O
OSPF 110
I
IS-IS 115
R
RIP 120
B
Internal BGP 200
B
External BGP 20

Note: “S --> with next Hop IP Address” is not a good idea b/c IP could be changed.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 2
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Lecture # 4
Open Shortest Path First (OSPF):

Properties of OSPF

1:- Algorithm:

OSPF’s algorithm is known as: Link state or DIJKSTRA (*J is silent) or SPF (shortest path first).

“OSPF metric is a property of a link that is why it is called Link State Algorithm”

Note: Dijkstra's algorithm conceived by computer scientist Edsger Dijkstra in 1956 and published in 1959.

2:- OSPF is an Interior Gateway Protocol.

3:- OSPF’s AD value is “110”.

4:- Routing Updates: Routing protocols share/advertise information about best path or share routing
table with others. In OSPF, its advertisement is known as “LSA” (Link State Advertisement). OSPF
advertisement is a multicast advertisement.

Note: There are three ways of advertisement: 1- Unicast, 2- Multicast and 3- Broadcast.

OSPF has two multicast addresses that multicast advertisements, are:

1. [Link]
2. [Link]

This address “[Link]” represents all OSPF enabled devices.

Note: There are two basics type of a network: 1- Point to Point and 2- Multi-access.

Point to Point: “A network, in which two devices can be connected and communicate with each
other.”

If a network has 30 bits “/30” then host bits left 2 (formula for calculating host that is 22-2 = 4-2 = 2.) it’s
an example of point to point network in which only two IP addresses are available for hosts but it’s not a
valid confirmation of point to point connectivity. Point to point confirmation that you can get by
knowing which protocol/encapsulation is running in the network. In point to point network,
encapsulation is always and only HDLC or PPP.

Multi-access: “A network in which two or more than two devices can be connected or
communicate with each other.”

If a network has /30, /29, /28 and so on we get more hosts by doing this, mean it is a multi-access
network but it’s not a final confirmation that the network is multi-access or not. Multi-access network
confirmation that you can get by knowing which protocol/encapsulation is running in the network. In
multi-access network, encapsulation is Ethernet and Frame relay.

Now come to the point, why there is another multicast address [Link] for OSPF?

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 3
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

OSPF over Multi-access: As we know that the address “[Link]” represents all OSPF enabled devices
but OSPF over multi-access (Ethernet, Frame relay) is a special case in which the address “[Link]” is
used. (We’ll study more detail of this address in next lectures.)

Note: In OSPF updates are incremental and triggered. Only changed updates are triggered.

5:- OSPF Metric: (Important property of any protocol)

The OSPF Metric is a “COST”. “Cost is a simple small and a unit less number”.

Note: The cost is a derived and calculated number. It’s not a constant number.

Cost is inversely proportional to bandwidth (BW).

Cost ∝ 1 /BW

If the bandwidth is maximum than the cost is minimum.

By this formula we have this definition: “A path with the minimum cost is the best path in OSPF”.

Cost Calculation: Dijkstra said cost is always equal to 1 not less than 1, the days Dijkstra calculated the
cost, maximum bandwidth was 100Mbps, and he derived constant (reference bandwidth) equal to
Maximum bandwidth available in those days.

Reference Bandwidth
Constant
Cost =
Bandwidth
Maximum Bandwidth

So, Bandwidth = 100Mbps, Constant = 100Mbps. By putting these values into formula, we get cost=1.

Media Bandwidth Formula Cost

Fast Ethernet (FE) 100Mbps 100/100 1
Ethernet (E) 10Mbps 100/10 10
Serial (S) 1.5Mbps 100/1.5 64

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 4
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

An example: Which path is the best path?

By using Cost formula, the Costs of the links are:

To reach from Router A to X/24 network we have two paths (Costs)

From A (1) through A1 (64) through A2 (10) through B (1) to X/24 = 76 = Cost

From A (64) through B1 (1) through B2 (64) through B (1) to X/24 = 130 = Cost

As we know a path with minimum cost is the best path, so the path with 76 cost is the best path.

Note: “Total cost calculation is known as SPF Calculation.”

In case of Gigabit Ethernet (GE)

GE = 1000Mbps = Bandwidth
Cost = 100/1000 = 0.1 ≈ 1 which is less than 1 so the system considered it approximately 1.

In the above scenario unequal load balancing is performed, even though GE link is better than FE,
Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 5
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

by considering this Dijsktra stated “Constant is Configurable”. So with the presence of GE, constant
value becomes “Constant = 1000 Mbps”.

Media Bandwidth Formula Cost

Giga Ethernet (GE) 1000 Mbps 1000/1000 1
Fast Ethernet (FE) 100Mbps 1000/100 10
Ethernet (E) 10Mbps 1000/10 100
Serial (S) 1.5Mbps 1000/1.5 640

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 6
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Lecture # 5
Open Shortest Path First (OSPF):

Properties of OSPF (Continue)

6:- OSPF Tables: Routing procedure/mechanism in OSPF is reliable and efficient. For reliability and
efficiency, three tables are created in OSPF:

1- Neighbor Table 2- Database Table 3- Routing Table

1- Neighbor Table

“A list of OSPF enabled devices is known as Neighbor Table”.

Every OSPF enable device sends HELLO packet to confirm OSPF enable devices in its neighbor. For
example three routers with protocol OSPF ‘A’, ‘B’ and ‘C’ are connected with each other. ‘A’ will send
HELLO packet to ‘B’ and ‘C’ to confirm its neighbor with OSPF and ‘B’ will send HELLO packet to ‘C’ and
‘A’, similarly ‘C’ will send HELLO packet to ‘B’ and ‘A’ to confirm either it is OSPF enable device or not
and then keep information of all OSPF enable devices in Neighbor Table.

Note: Only OSPF enable devices share routing information with OSPF enable devices in their Neighbors.

What if a device/router ‘D’ added in neighbors of ‘A’, ‘B’ and ‘C’ with protocol RIP and later on OSPF runs
on it, shares routing information with ‘A’, ‘B’,’C’. It is a drawback that an un authenticated/unknown
router ‘D’ added in network with OSPF and gets the routing information from neighbors. To get rid of it
“An Encrypted Password is added” in HELLO packets of authenticated routers ‘A’, ‘B’ and ‘C’. (In coming
lectures we’ll study it in details.)

2- Database Table

All possible paths to reach the destination are placed in database table. It is also known as topology
table.

Note: SPF calculations are performed in database table.

3- Routing Table

Routing Table contains the best paths to reach the destination network.

Note: If the best path lost/vanished in routing table, no problem we can copy again the best path
information form database table. This is an advantage of Database Table.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 7
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

7:- OSPF supports both kind of routing “Class-less Routing” and “Class-full Routing”.

8:- OSPF Versions: There are two versions of OSPF:

1- Version 2: For IPv4 routing.

2- Version 3: For IPv6 routing.

9:- OSPF is a layer-3 Independent protocol and its Protocol ID is ‘89’.

10:- OSPF is designed for large size networks or ASs and its convergence time is fast.

We can divide large size OSPF enabled AS into ‘AREAS’ for fast convergence.

If an administrator feels that the convergence time is slow than he can divide a large size AS system to
AREAS for fast convergence.

Note: In one large AS 232 Areas can be created, it’s not practically possible.

A1 A2
A Large Size AS 1

A3 A4
1 1
Divided into Areas

Note: SPF calculations are performed per ‘Area’. Area1 has its own SPF calculations. Area2 has its own
and so on. At the end total calculation performed of all areas.

Area is must in OSPF. There are two flavors/kinds of Area.

1- Single Area OSPF 2- Multiple Area OSPF

Single Area OSPF, we have already study in CCNA, we’ll study Multiple Area in this CCNP course.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 8
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Nuts and Bolts of OSPF Labs

1- Process ID

2- Area ID

3- Wildcard Mask

4- Router ID

1- Process ID: Process ID is a number and its range is 1-65535.

Note: It’s not an optional number it’s a compulsory number.

Question: In which ways two different policy base AS cloud connect with each other?

1st Case:

Two Autonomous Systems AS -1 and AS-2, AS-1 running RIP and AS-2 running OSPF on it. These are two
diff AS with different policies. To connect these isolated AS, on independent border routers BGP will
applies on A and on B. As in figure-1.

Figure -1

2nd Case: In this case redistribution will apply on both different autonomous system on common border
router B. As in figure-2.

Figure -2

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 9
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

3rd Case: In this case routing policies are same neither we apply BGP on it nor redistribution. And in this
case routing information automatically shares with each other if policy is not implemented which is a
bad idea but policy base routing implements on both sides.

Figure -3

To overcome on above case OSPF with Process ID will be implemented (as in figure-4). On single router
with OSPF, Process ID has no significance but a router with a common border, process id has importance
b/c with these different process ids we have two different AS with different polices and redistribution
implements in this case.

Note: Process ID differentiates between different autonomous systems on a common border router. As in
figure below on Router B.

Figure -4

In Router B two OSPF databases are created by OSPF-5 and OSPF-7 and do not be merge until
redistribution applies with policy.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 10
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

More clearly:

B#router ospf 1

B#interface [Link]

exit

B#router ospf 5

B#interface [Link]

exit

B#router ospf 7

B#interface [Link]

B#interface [Link]

Exit

Note: above are not complete commands these are just for an example.

Three databases are created on common border router B but these databases do not merge until
redistribution performed with policy like ACL etc.

Note: Process id is locally significant. Process ID does not advertise with routing.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 11
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

2- Area ID: It must be configure in case of Single/Multiple OSPF. We can divide AS (Autonomous System)
into small Areas. OSPF can never be configured without area, atleast one area is required for OSPF.

Maximum no. of Areas in AS = OSPF have Single 2 32 and Multiple areas.

3- Wildcard Mask: It is an inverse of subnet mask. Its result indicates how many available IP addresses
or IP subnets are within certain VLSM (Variable Length Subnet Mask) network.

On Cisco router, wildcard subnet mask is used in the following occasion

• Defining subnet in ACL (Discontinuous)

• Defining subnet member in OSPF area (Contiguous)

Note: Wildcard mask we can say it is an inverse of subnet mask of any class for example in:

Class A the subnet mask is [Link] and wildcard mask in inverse i.e. [Link]

Class B the subnet mask is [Link] and wildcard mask in inverse i.e. [Link]

Class C the subnet mask is [Link] and wildcard mask in inverse i.e. [Link]

We can also get wildcard mask by subtracting subnet mask from broadcast IP.

[Link] - [Link] = [Link] wild card mask for Class A

[Link] - [Link] = [Link] wild card mask for Class B

[Link] - [Link] = [Link] wild card mask for Class C

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 12
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Lecture # 6
OSPF Router ID:

As we know, every OSPF enabled device/router sends hello packet to its neighbors to collect information
of OSPF enable devices and it keep that information in its neighbor table against some id that id is
known as “Router ID”.

Now question arise what is a router id?

Answer is basically “Router ID is an IP Address” in OSPF.

Note: Router ID/IP Address is a concept in OSPF it does not mean it is an IP Address of a router.

Methods to configure Router ID: There are three different ways/methods to configure OSPF Router ID.

1: OSPF Router ID is elected on the bases of highest physical interface IP address.

[Link]

[Link] [Link]

[Link]

As we initiate the OSPF process,

#Router OSPF 1

It will start searching for OSPF Router ID and selects highest IP Address on physical interface for OSPF
Router ID for process ‘OSPF 1’.

IP Address [Link] selected for OSPF Router ID.

Note: Every OSPF Process has its own OSPF Router ID/IP Address.

Note: if a router has reloaded or OSPF Process has restarted than OSPF Router ID ll again elect on the
basis of highest IP address of physical interfaces.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 13
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

2: OSPF Router ID is elected on the bases of highest “Loopback interface” IP address.

“Loopback interface is a virtual interface of a router.”

Note: A Router has diff virtual Interfaces and Loopback interface is one of them. We can add/create no.
of loopback interfaces on a router. It is just for testing purposes. 0-2147483647 loopback interfaces can
be created.

In the presence of loopback interfaces the physical interfaces do not participate in OSPF Router ID
election and with the highest loopback interface IP address, selected for OSPF Router ID. In the figure
above [Link] selected for OSPF Router ID.

Note: It is better than the method-1 but same if router has reloaded or OSPF Process has restarted than
OSPF Router ID ll again elect on the basis of highest IP address of loopback interfaces.

3- Hard Coded Router ID: The 3rd method is Hardcoded Router ID, in this method an administrator select
OSPF Router ID himself. It is more reliable than the previous two methods.

Note: Ethernet interfaces on router can be ‘UP’ without any connectivity.

R(config)#interface fastEthernet 0/0

R(config-if)#no shutdown

R(config-if)#no keepalive

It is just for testing purposes.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 14
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

CCNP OSPF LAB

Basic Configurations on all routers

Router R1

R1#configure terminal

R1(config)# interface serial 2/0

R1(config-if)#ip address [Link] [Link]

R1(config-if)#No shutdown

R1(config-if)#exit

R1(config)#interface fastEthernet 0/0

R1(config-if)#ip address [Link] [Link]

R1(config-if)#no shutdown

R1(config-if)#no keepalive

R1(config-if)#exit

R1#write

R1#show ip interface brief

Interface IP-Address OK? Method Status Protocol

FastEthernet0/0 [Link] YES manual up up

FastEthernet1/0 unassigned YES unset administratively down down

Serial2/0 [Link] YES manual up up

Serial2/1 unassigned YES unset administratively down down

Serial2/2 unassigned YES unset administratively down down

Serial2/3 unassigned YES unset administratively down down

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 15
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Router R2

R2#configure terminal

R2(config)# interface serial 2/0

R2(config-if)#ip address [Link] [Link]

R2(config-if)#No shutdown

R2(config-if)#exit

R2(config)# interface serial 2/1

R2(config-if)#ip address [Link] [Link]

R2(config-if)#No shutdown

R2(config-if)#exit

R2(config)#interface loopback 0

R2(config-if)#ip address [Link] [Link]  for single ip configuration

R2(config-if)#no shutdown

R2(config-if)#no keepalive

R2(config-if)#exit

R2(config)#interface fastEthernet 0/0

R2(config-if)#ip address [Link] [Link]

R2(config-if)#no shutdown

R2(config-if)#no keepalive

R2(config-if)#exit

R2#write

R2#show ip interface brief

Interface IP-Address OK? Method Status Protocol

FastEthernet0/0 [Link] YES manual up up

FastEthernet1/0 unassigned YES unset administratively down down

Serial2/0 [Link] YES manual up up

Serial2/1 [Link] YES manual up up

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 16
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Serial2/2 unassigned YES unset administratively down down

Serial2/3 unassigned YES unset administratively down down

Loopback0 [Link] YES manual up up

Router R3

R3#configure terminal

R3(config)# interface serial 2/0

R3(config-if)#ip address [Link] [Link]

R3(config-if)#No shutdown

R3(config-if)#exit

R3(config)#interface fastEthernet 0/0

R3(config-if)#ip address [Link] [Link]

R3(config-if)#no shutdown

R3(config-if)#no keepalive

R3(config-if)#exit

R3#write

R3#show ip interface brief

Interface IP-Address OK? Method Status Protocol

FastEthernet0/0 [Link] YES manual up up

FastEthernet1/0 unassigned YES unset administratively down down

Serial2/0 [Link] YES manual up up

Serial2/1 unassigned YES unset administratively down down

Serial2/2 unassigned YES unset administratively down down

Serial2/3 unassigned YES unset administratively down down

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 17
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Lecture # 7
Single Area OSPF Configuration LAB

AREA 0

Tasks

1: OSPF Router ID Configuration:

A- Election on R1

B- Loopback interface OSPF ID on R2

C- Hardcoded ID on R3

2: OSPF Configuration Methods:

2.1- Per Network/Subnet on R1

2.2- Per Interface on R2

2.2.A- Per IP Address

2.2.B- Direct Configuration on Interface

3- Per Platform/Global on R3

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 18
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Task 1-A and Task 2.1 On Router R1

1: OSPF Router ID Configuration and OSPF per Network/subnet

Note: Before configuring any protocol on router, first should check is there any route/routing protocol is
configured/running or not.

Command Description
#Show IP route Privileged EXEC Mode command to verify IP Route.
#Show IP protocols Privileged EXEC Mode command to verify IP
Protocols.

Election for OSPF Router ID on R1

R1#config t

R1(Config)#router ospf 1 (As we enter this command OSPF Router ID will be selected. )

Command Description
#Show IP ospf OR #show ip protocols Privileged EXEC Mode commands to verify Router
ID. choose the highest IP address of any other
physical interface.

OSPF Per network/subnet configuration method

R1#config t

R1(Config)#router ospf 1

R1(Config-router)#network [Link] [Link] area 0

R1(Config-router)#network [Link] [Link] area 0

Command Description
R1(Config)#router ospf 1 Global Configuration Mode Command, Starts OSPF
process 1. The process ID is any positive integer
value between 1 and 65,535.
R1(Config-router)#network OSPF advertises interfaces, not networks. Uses the
wildcard mask to determine which interfaces to
advertise

Note: OSPF does not accept discontinuous wild card mask (see page 12).

For example if we enter the wrong wildcard mask like network [Link] [Link] router will generate
the following error.

R1(Config-router)#network [Link] [Link] area 0

“OSPF: Invalid address/mask combination (discontiguous mask)”

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 19
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Task 1-B and Task 2.2.A and 2.2.b On Router R2

Command Description
#show ip aliases Privileged EXEC Mode commands to verify Directly
connected IP.

Election for OSPF Router ID on R2 “loopback interface”

R2#config t

R2(Config)#router ospf 1 (As we enter this command OSPF Router ID will be selected. )

Command Description
#Show IP ospf OR #show ip protocols Privileged EXEC Mode commands to verify Router
ID. choose the highest loopback IP address if
configured

Note: Now when you launch the OSPF process, the router ID will be picked amoung existing addresses. If
after that you set it manually, or set a loopback that should become the router ID, the change won't take
place until you reset the OPF process, or reload the router.

Or run “show running” copy the particular OSPF configuration on notepad and then3. run “no router ospf
1” and again configure the OSPF in this way you can get the right Router OSPF ID.

Command Description
#Show ip aliases Privileged EXEC Mode commands to verify directly
connected IP address.

2.2.A- Per IP Address

R2(config)#router ospf 1

R2(config-router)#net [Link] [Link] area 0

R2(config-router)#net [Link] [Link] area 0

2.2.B- Direct Configuration on Interface

R2(config)#interface serial 2/0

R2(config-if)#ip ospf 1 area 0

R2(config)#interface fastEthernet 0/0

R2(config-if)#ip ospf 1 area 0

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 20
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Task 1-C and Task 3 On Router R3

Hardcoded ID on R3

R3(config)#router ospf 1

R3(config-router)#router-id [Link]

Command Description
R3(config-router)#router-id <id> By this command you can configure hardcoded
OSPF router id.

3- Per Platform/Global on R3

R3(config-router)#net [Link] [Link] area 0

Note: This method is not practically recommended. This method is almost for lab environment. All
interfaces (current and coming) of router 3 will advertise in area 0. This method is not recommended in
multiple area ospf and in boder router case.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 21
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Verifications On Router 1

R1#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

C [Link]/8 is directly connected, Serial2/0

O [Link]/8 [110/128] via [Link], 00:03:03, Serial2/0
C [Link]/24 is directly connected, FastEthernet0/0
O [Link]/24 [110/65] via [Link], 00:03:03, Serial2/0
[Link]/32 is subnetted, 1 subnets
O [Link] [110/65] via [Link], 00:03:03, Serial2/0
O [Link]/24 [110/129] via [Link], 00:03:03, Serial2/0

R1#show ip protocols

Routing Protocol is "ospf 1"

Outgoing update filter list for all interfaces is not set
Incoming update filter list for all interfaces is not set

Router ID [Link]  Elected Router ID

Number of areas in this router is 1. 1 normal 0 stub 0 nssa

Maximum path: 4

Routing for Networks:  OSPF Per network/subnet configuration

[Link] [Link] area 0
[Link] [Link] area 0

Reference bandwidth unit is 100 mbps

Routing Information Sources:
Gateway Distance Last Update
Distance: (default is 110)

R1#sh ip ospf neighbor

Neighbor ID Pri State Dead Time Address Interface

[Link] 0 FULL/ - 00:00:38 [Link] Serial2/0

Note: FULL means the router is fully adjacent with its neighbor mean routing is complete. The Dead Time
field indicates the amount of time remaining that the router waits to receive an OSPF hello packet from
the neighbor before declaring the neighbor down. On broadcast and point-to-point media, the default
dead interval is 40 seconds.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 22
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Verifications On Router 2

R2#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

C [Link]/8 is directly connected, Serial2/0

C [Link]/8 is directly connected, Serial2/1
O [Link]/24 [110/65] via [Link], 00:01:55, Serial2/0
C [Link]/24 is directly connected, FastEthernet0/0
[Link]/32 is subnetted, 1 subnets
C [Link] is directly connected, Loopback0
O [Link]/24 [110/65] via [Link], 00:01:55, Serial2/1

R2#sh ip protocols

Routing Protocol is "ospf 1"

Outgoing update filter list for all interfaces is not set
Incoming update filter list for all interfaces is not set

Router ID [Link]  Loopback interface IP address

Number of areas in this router is 1. 1 normal 0 stub 0 nssa

Maximum path: 4

Routing for Networks:  Per IP Address

[Link] [Link] area 0
[Link] [Link] area 0

Routing on Interfaces Configured Explicitly (Area 0):  Direct Configuration on Interface

FastEthernet0/0
Serial2/0
Reference bandwidth unit is 100 mbps
Routing Information Sources:
Gateway Distance Last Update
Distance: (default is 110)

R2#show ip ospf neighbor

Neighbor ID Pri State Dead Time Address Interface
[Link] 0 FULL/ - 00:00:30 [Link] Serial2/0
[Link] 0 FULL/ - 00:00:38 [Link] Serial2/1

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 23
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Verifications On Router 3

R3#sh ip route

Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP

D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

O [Link]/8 [110/128] via [Link], 00:00:02, Serial2/0

C [Link]/8 is directly connected, Serial2/0
O [Link]/24 [110/129] via [Link], 00:00:02, Serial2/0
O [Link]/24 [110/65] via [Link], 00:00:02, Serial2/0
[Link]/32 is subnetted, 1 subnets
O [Link] [110/65] via [Link], 00:00:02, Serial2/0
C [Link]/24 is directly connected, FastEthernet0/0

R3#sh ip protocols

Routing Protocol is "ospf 1"

Outgoing update filter list for all interfaces is not set
Incoming update filter list for all interfaces is not set

Router ID [Link]  Hardcoded Router ID

Number of areas in this router is 1. 1 normal 0 stub 0 nssa

Maximum path: 4

Routing for Networks:  Per Platform/Global

[Link] [Link] area 0

Reference bandwidth unit is 100 mbps

Routing Information Sources:
Gateway Distance Last Update
Distance: (default is 110)

R3#show ip ospf neighbor

Neighbor ID Pri State Dead Time Address Interface

[Link] 0 FULL/ - 00:00:39 [Link] Serial2/0

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 24
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Lecture # 8
Multiple Area OSPF

Remember OSPF Area created in AS not AS created in Area. AS is a set and Area is its subset.

Area ID can be represented in two ways:

i) Area = 0, 1, 2, 3, ……. 232 “4.2 b”

ii) Area= [Link], [Link], [Link], and so on.

Design: let’s say we have an “AS” with multiple areas:

In this multiple area AS, every single area has its own ‘SPF’, neighbor table, database table and each
area shares information after completing its internal calculation for example routing information etc.

A0 shares with A2, A1 and A2 with A0, A3 and A3 with A1, A2 and A1 with A0, A3 but in this design we
have a drawback that is “Loopback”.

With the help of a little change we can avoid from Loop. As shows in figure below.

A1

A5 A2
A0 Figure 3

A4 A3

Let say we have created a special area A0, and all other area A1, A2, A3, A4 and A5 are directly
connected with A0. In this case all blue colored areas do not share SPF information with each other,
These area’s share SPF information with special area A0. For example A1 needs information about A3
than A0 will provide this information to A1 and so on.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 25
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

OSPF Area Types:

There are two basic areas:

• Backbone Area or Transit Area

• Simple Area or Regular Area

In Figure 3 ‘A0’ is a backbone area and in blue colors areas are regular areas.

Regular Areas cannot exchange information directly with each other.

Note: The backbone acts as a hub for inter-area transit traffic and the distribution of routing information
between areas. The OSPF backbone area is also known as area 0. And there is no two backbone areas in
an AS.

Example of A large Multiple Area network

1
a
re
A

Note: in 48 port multilayers switch 42 routers can be connected, 6 ports are for trunk.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 26
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Another example of Multiple Area OSPF

FE0/0 FE0/0 FE0/0

[Link] [Link] [Link]

S2/0 S2/1
S2/0 S2/0
[Link]
[Link] [Link] [Link]

R1 R2
Loopback 0
[Link]

Question: is there any problem in this OSPF multiple area network?

Answer: There is no problem b/c we have two areas i.e. Area 0 ‘backbone area’ and Area 1 ‘regular
area’.

OSPF Router Types

1) Internal Router
2) OSPF backbone Router
i) Backbone Internal Router
ii) Area Border Router (ABR)
3) Autonomous System boundary Router (ASBR)

1)Internal Router: “A router with all interfaces in a regular area is called an Internal Router.”

In above figure the R3 is a internal router.

2) Backbone Router: “A router with at least single interface in backbone is called a Backbone Router”

R1 and R2 are backbone routers.

i) Backbone internal router

A router with all interface in backbone area is called a backbone internal router. R1 is backbone
internal router.

ii) Area Border Router (ABR)

A router that connects backbone with regular area or areas is known as ABR. R2 is ABR.

3)ASBR: “A Router that connects an OSPF domain with a non OSPF domain (RIP, IGRP)”

Or “A router that connects different OSPF process”

Note: Redistribution is must in ASBR. One router can be ABR & ASBR.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 27
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Multiple Area OSPF Lab

R1

R1(config)#router ospf 1

R1(config-router)#network [Link] [Link] area 0

R1(config-router)#network [Link] [Link] area 0

R2

R2(config)#router ospf 1

R2(config-router)#network [Link] [Link] area 0

R2(config-router)#network [Link] [Link] area 0

R2(config-router)#network [Link] [Link] area 1

R2(config-router)#network [Link] [Link] area 1

R3

R3(config)#router ospf 1

R3(config-router)#network [Link] [Link] area 1

R3(config-router)#network [Link] [Link] area 1

Verifications

Router R1

R1#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

C [Link]/8 is directly connected, Serial2/0

O IA [Link]/8 [110/128] via [Link], 00:10:23, Serial2/0
C [Link]/24 is directly connected, FastEthernet0/0
O IA [Link]/24 [110/65] via [Link], 00:10:22, Serial2/0
[Link]/32 is subnetted, 1 subnets
O [Link] [110/65] via [Link], 00:10:23, Serial2/0
O IA [Link]/24 [110/129] via [Link], 00:10:02, Serial2/0

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 28
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Router R2

R2#sh ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

C [Link]/8 is directly connected, Serial2/0

C [Link]/8 is directly connected, Serial2/1
O [Link]/24 [110/65] via [Link], 00:13:03, Serial2/0
C [Link]/24 is directly connected, FastEthernet0/0
[Link]/32 is subnetted, 1 subnets
C [Link] is directly connected, Loopback0
O [Link]/24 [110/65] via [Link], 00:12:33, Serial2/1

Router R3

R3#sh ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

O IA [Link]/8 [110/128] via [Link], 00:00:04, Serial2/0

C [Link]/8 is directly connected, Serial2/0
O IA [Link]/24 [110/129] via [Link], 00:00:04, Serial2/0
O [Link]/24 [110/65] via [Link], 00:00:04, Serial2/0
[Link]/32 is subnetted, 1 subnets
O IA [Link] [110/65] via [Link], 00:00:04, Serial2/0
C [Link]/24 is directly connected, FastEthernet0/0

Note: Intra Area routes are the "O" routes that you see in the routing table. These routes are routes that
are in the same area. Inter-area routes are the "O IA" routes that are learned in different areas.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 29
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Lecture # 9
Tasks: ABR and ASBR in Lab

FE0/0 FE0/0 FE0/0

[Link] [Link] [Link]

S2/0 S2/1
S2/0 S2/0
[Link]
[Link] [Link] [Link]

R1 R2
Loopback 0
[Link]
R1

R1(config)#router ospf 1

R1(config-router)#network [Link] [Link] area 0

R1(config-router)#network [Link] [Link] area 0

R2

R2(config)#router ospf 1

R2(config-router)#network [Link] [Link] area 0

R2(config-router)#network [Link] [Link] area 0

R2(config-router)#network [Link] [Link] area 1

R2(config-router)#network [Link] [Link] area 1

R3

R3(config)#router ospf 1

R3(config-router)#network [Link] [Link] area 1

R3(config-router)#network [Link] [Link] area 1

Note: For ABR and ASBR please see page no. 27 of lecture # 8.

Command Description
#Show ip ospf neighbor Privileged EXEC Mode commands to verify OSPF
neighbors.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 30
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

On router R2 run “Show ip ospf neighbor” to verify OSPF is running properly or not.

R2#show ip ospf neighbor

Neighbor ID Pri State Dead Time Address Interface

[Link] 0 FULL/ - 00:00:32 [Link] Serial2/0
[Link] 0 FULL/ - 00:00:33 [Link] Serial2/1

Command Description
#Show ip ospf Privileged EXEC Mode commands to verify router
ID, ABR, ASBR.

By running this command “Show ip ospf” on router R1 we don’t get the information about ABR, ASBR its
mean this router is not ABR or ASBR. Now by running this command on router R2 we get the following
information:

R2#show ip ospf

Routing Process "ospf 1" with ID [Link]

Start time: 00:06:26.472, Time elapsed: 00:12:56.420
Supports only single TOS(TOS0) routes
Supports opaque LSA
Supports Link-local Signaling (LLS)
Supports area transit capability  Right after this line you can see ABR, ASBR.

It is an area border router

Router is not originating router-LSAs with maximum metric

Initial SPF schedule delay 5000 msecs
Minimum hold time between two consecutive SPFs 10000 msecs
Maximum wait time between two consecutive SPFs 10000 msecs
Incremental-SPF disabled
Minimum LSA interval 5 secs
Minimum LSA arrival 1000 msecs
LSA group pacing timer 240 secs
Interface flood pacing timer 33 msecs
Retransmission pacing timer 66 msecs
Number of external LSA 0. Checksum Sum 0x000000
Number of opaque AS LSA 0. Checksum Sum 0x000000
Number of DCbitless external and opaque AS LSA 0
Number of DoNotAge external and opaque AS LSA 0
Number of areas in this router is 2. 2 normal 0 stub 0 nssa
.
.

Its mean R2 is a Area Border Router.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 31
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Command Description
#Show ip ospf interface brief Privileged EXEC Mode command to Display a
summary of OSPF interfaces, PID, Area, Ip Address,
cost, state etc..

Note: Must remember this command “Show ip ospf interface brief”.

R2#show ip ospf interface brief

Interface PID Area IP Address/Mask Cost State Nbrs F/C

Se2/0 1 0 [Link]/8 64 P2P 1/1
Lo0 1 0 [Link]/32 1 LOOP 0/0
Fa0/0 1 1 [Link]/24 1 DR 0/0
Se2/1 1 1 [Link]/8 64 P2P 1/1

Note: This command is useful to rectify mistake. For example an interface added in wrong area.

Task: Configuration on R3 as a “ASBR” .

There are different ways to make R3 to ASBR for example add a ‘Router R4’ and configure OSPF 2/ RIP or
EIGRP on it or Add/configure Null route on router R3. We’ll adopt Null Routes considering we don’t have
4th router.

Note: In a router we can create virtual interfaces even virtual Autonomous System.

Suppose we have four LAN with different network id. i.e. And suppose this is a 4th router.

[Link]/24
[Link]/24
[Link]/24
[Link]/24

Configure static route on router R3

R3#conf t
R3(config)#ip route [Link] [Link] null 0
R3(config)#ip route [Link] [Link] null 0
R3(config)#ip route [Link] [Link] null 0
R3(config)#ip route [Link] [Link] null 0

Now you can see there are two different domain on router 3, one is OSPF domain and another is static
domain.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 32
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Now run show ip route on R3 you can see the static route:

Gateway of last resort is not set

C [Link]/8 is directly connected, Serial2/0

S [Link]/24 is directly connected, Null0
C [Link]/24 is directly connected, FastEthernet0/0
S [Link]/24 is directly connected, Null0
S [Link]/24 is directly connected, Null0
S [Link]/24 is directly connected, Null0
S [Link]/24 is directly connected, Null0

As we know we have a different virtual domain “Static” on router 3 to inject static to OSPF we have to
redistribute static to OSPF.

R3(config)#router ospf 1

R3(config-router)#redistribute static subnets

Note:’ Subnet’ mean classfull and classless both are redistributed. This is only happen in OSPF protocol
not in other protocols like rip, eigrp etc there is no need for ‘subnet’. Must remember to add’ subnet’ in
OSPF while redistributing.

Two way redistribution is called mutual redistribution for example RIP into OSPF and OSPF into RIP.

Verification on R3 for ASBR

R3#sh ip ospf

Routing Process "ospf 1" with ID [Link]

Start time: 00:01:16.364, Time elapsed: 00:07:12.328
Supports only single TOS(TOS0) routes
Supports opaque LSA
Supports Link-local Signaling (LLS)
Supports area transit capability

It is an autonomous system boundary router 

Redistributing External Routes from,

static, includes subnets in redistribution

We have already seen

1- “Intra OSPF Route = O known as same area routes”,

2- “Inter OSPF Route =OIA, diff area routes”
3- now we have “External OSPF Routes = O E2 knows as external routes or redistributed routes”.

For External OSPF routes run this command “show ip route ospf” on R2.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 33
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Verification on R2

R2#sh ip route ospf

O [Link]/24 [110/65] via [Link], 00:08:49, Serial2/0

O [Link]/24 [110/65] via [Link], 00:01:28, Serial2/1
O E2 [Link]/24 [110/20] via [Link], 00:01:28, Serial2/1
O E2 [Link]/24 [110/20] via [Link], 00:01:28, Serial2/1
O E2 [Link]/24 [110/20] via [Link], 00:01:28, Serial2/1
O E2 [Link]/24 [110/20] via [Link], 00:01:28, Serial2/1

Verification on R1

R1#sh ip route ospf

O IA [Link]/8 [110/128] via [Link], 00:24:02, Serial2/0

O IA [Link]/24 [110/65] via [Link], 00:24:01, Serial2/0
[Link]/32 is subnetted, 1 subnets
O [Link] [110/65] via [Link], 00:24:02, Serial2/0
O IA [Link]/24 [110/129] via [Link], 00:23:41, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:16:45, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:16:45, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:16:45, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:16:45, Serial2/0

As we have noticed in R2 and R1, redistributed routes are with ‘O E2’ and with same cost=20. ‘E’ for
external. According to rules cost should be change while crossing WAN link cost should be 64 on router
R2 and cost 128 on router R1.

There are two types of OE/Redistributed route:

• E1
• E2 (Default)

What is difference between E and E2 for understanding this first understand what is ‘Metric’.

There are two types of metric:

• Internal Metric (Calculated)

• External or Seed Metric (Always constant)

Internal Metric: always calculated while crossing any link. For example for two WAN link calculation is
64+64=128

External Metric or Seed Metric: In OSPF it is always constant not calculated.

Note: As we know the metric of rip is ‘hope count/distance’ and OSPF’s metric is ‘cost’ there is no
comparison between hope count and cost. Distance cannot be converted in cost. For this in OSPF there
is fix cost that is “20” for external routes (Rip, EIGRP etc ) but in other protocols we have to define it.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 34
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

If OSPF type is ‘O E2’ than External/Seed metric is added and if OSPF type is ‘O E1’ than Seed + internal
added.

Question arises why we need E1, E2?

“Configure O E2 when there is single path and single ASBR”. ”processing saved”.

More concisely:

“If we have single ASBR and ASBR is reachable by single path than should configure O E2”.

And

“Configure O E1 when there are multiple ASBR or multiple paths to reach single ASBR”.

In this case internal cost will be added.

Question: where to configure O E1 or where to change O E2 to OE1?

Answer: It is configured on ASBR.

In our scenario its configure in Router R3.

R3(config-router)#redistribute static subnets metric-type ?

1 Set OSPF External Type 1 metrics

2 Set OSPF External Type 2 metrics

R3(config-router)#redistribute static subnets metric-type 1

R2#sh ip route ospf

O [Link]/24 [110/65] via [Link], 02:18:46, Serial2/0
O [Link]/24 [110/65] via [Link], 02:11:25, Serial2/1
O E1  (type has changed )[Link]/24 [110/84]  (Cost has changed) via [Link], 00:01:15,
Serial2/1
O E1 [Link]/24 [110/84] via [Link], 00:01:15, Serial2/1
O E1 [Link]/24 [110/84] via [Link], 00:01:15, Serial2/1
O E1 [Link]/24 [110/84] via [Link], 00:01:15, Serial2/1

R1#sh ip route ospf

(Only external routes)
O E1  (type has changed )[Link]/24 [110/148]  (Cost has changed) via [Link], 00:04:33,
Serial2/0
O E1 [Link]/24 [110/148] via [Link], 00:04:33, Serial2/0
O E1 [Link]/24 [110/148] via [Link], 00:04:33, Serial2/0
O E1 [Link]/24 [110/148] via [Link], 00:04:33, Serial2/0

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 35
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Question: how to configure seed matric?

R3(config)#router ospf 1

R3(config-router)#redistribute static subnets metric ?

<0-16777214> OSPF default metric

R3(config-router)#redistribute static subnets metric 10

R2#sh ip route ospf

O [Link]/24 [110/65] via [Link], 02:18:46, Serial2/0
O [Link]/24 [110/65] via [Link], 02:11:25, Serial2/1
O E1  (type has changed )[Link]/24 [110/74]  (Cost has changed) via [Link], 00:01:15,
Serial2/1
O E1 [Link]/24 [110/74] via [Link], 00:01:15, Serial2/1
O E1 [Link]/24 [110/74] via [Link], 00:01:15, Serial2/1
O E1 [Link]/24 [110/74] via [Link], 00:01:15, Serial2/1

R1#sh ip route ospf

(Only external routes)
O E1  (type has changed )[Link]/24 [110/138]  (Cost has changed) via [Link], 00:04:33,
Serial2/0
O E1 [Link]/24 [110/138] via [Link], 00:04:33, Serial2/0
O E1 [Link]/24 [110/138] via [Link], 00:04:33, Serial2/0
O E1 [Link]/24 [110/138] via [Link], 00:04:33, Serial2/0

In some cases for example we have two ASBR and we want to route traffic with O E1 and some traffic
with O E2 or for some traffic with metric 20 and other for 10, it is possible in policy base routing (PBR).

In next coming lectures we’ll start policy base routing PBR.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 36
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Lecture # 10
We have discussed static route, redistribution in previous lecture. And now…

Policy Base Routing

Autonomous System with OSFP

For Data

[Link]
S 2/0 FE 0/0
[Link]
Point A Point B
S 2/0 FE 0/1
Data B
FE 0/0 FE 0/0
[Link]
Voice
S 2/1 FE 0/2
A D
[Link]
S 2/0 FE 0/1
[Link]
C
For Voice

By running OSPF in this AS all routers are converged. Router receives traffic of network [Link]/8 from
two paths and cost are same for this traffic that is 64+1+1=66. Load balancing is also in this scenario.

Traffic generated from Point A to Point B will reach from two paths you may say load balancing is
performed on this traffic half traffic form A
B
D and half from A
C
D.

Now we want that the “Data” traffic use this path A
B
D and “Voice” use path A
B
D. for this
situation we have to define some policies, this is called PBR or

“A routing with Administrator defined policy is called Policy Base Routing (PBR)”

There are tools for policy making there is no built in mechanism for PBR in any routing protocol we have
to use 3rd party tools like ACL. “ACL is a list of IP addresses and network IDs that can be used in many
ways e.g. NAT, security, PBR etc.”

Policy Making Tools

1- Access Control List

2- Prefix List or IP Prefix List

3- Route Map

4- Distributed List

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 37
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

1- Access Control List: ACL Can be defined and apply. Policy making and implementation both are
available in ACL. Access lists filter network traffic by controlling whether routed packets are forwarded
or blocked at the router's interfaces. Permit and deny mechanism performed in ACL.

In ACL we use wildcard mask with network ID e.g. [Link] [Link]

2- Prefix List or IP Prefix List: It is like ACL. Policy making and implementation both are available in Prefix
list with littler change in ACL we use wildcard mask with network and in Prefix list we use variable length
like in [Link]/24. Where [Link] is prefix and /24 is a prefix length. Permit and deny
mechanism performed in Prefix List.

Note: ACL and Prefix List does not support to change cost or seed matric, metric type, next hop etc.

3- Route Map: we can say route map is a set and ACL& Prefix list are its subset. To change in cost or
seed matric, metric type, next hop etc Route Map is used.

4- Distributed List: it is different from ACL, prefix list and route map. “It is used for implementation ACL,
route map and prefix list only in routing protocols”

Initially we move toward Route Map and ACL first in detail.

Route Map

“It is used for advance policy. Route Map is just a combination of ‘match’ and ‘set’ clauses/conditions”.

According to our scenario “Data” traffic use this path A
B
D and “Voice” use path A
B
D. Or
data and voice used same path. For this we’ll use Route-Map.

Route-Map Structure:

Name: Route-map name.

Sequence: Any Sequence number 10, 20, 30, 100, 1000. You can say “how many Actions or equal to
action are performed.”

Match and Set: Match and set are conditions e.g. match data and set next hope.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 38
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Note:

After last sequence must make an empty sequence 50. Empty sequence means “Match Any Set
Nothing”. Must make this sequence otherwise all data other than data, voice will discarded.

How and Where to apply Route-Map?

It will apply on F0/0 on ‘Router A’

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 39
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Route Map Lab

AREA 1

Static route on R3
[Link]/24
[Link]/24
[Link]/24
[Link]/24

Tasks:

1) For network [Link]/24 and [Link]/24, matric type = 2 and seed matric = 10

2) For network [Link]/24 and [Link]/24, matric type = 1 and seed matric = 30

3) Two ACLs. ACL-1 for network [Link]/24 and [Link]/24 and ACL-2 for network
[Link]/24 and [Link]/24.

R1

R1(config)#router ospf 1

R1(config-router)#network [Link] [Link] area 1

R2

R2(config)#router ospf 1

R2(config-router)#network [Link] [Link] area 1

R3

R3#conf t
R3(config)#ip route [Link] [Link] null 0
R3(config)#ip route [Link] [Link] null 0
R3(config)#ip route [Link] [Link] null 0
R3(config)#ip route [Link] [Link] null 0
R3(config)#router ospf 1
R3(config-router)#network [Link] [Link] area 1
R3(config-router)#network [Link] [Link] area 1

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 40
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Access list and Route Map on R3

Note: In Route-Map we cannot directly match IP address and network IDs we have to make ACL first. IN
route-map whole ACL could be matched. And in ACL there could be one network or multiple network, one
IP or could be multiple IPs.

R3(config)#access-list 1 permit [Link] [Link]  Access List

R3(config)#access-list 2 permit [Link] [Link]

R3(config)#route-map CCNP permit 10  Route Map Configuration

R3(config-route-map)#match ip address 1  Access-List 1
R3(config-route-map)#set metric-type type-2  Conditions
R3(config-route-map)#set metric 10

R3(config)#route-map CCNP permit 20  Route Map Configuration

R3(config-route-map)#match ip address 2  Access-List 2
R3(config-route-map)#set metric-type type-1  Conditions
R3(config-route-map)#set metric 30
R3(config-route-map)#exit

R3#conf t
R3(config)#route-map CCNP permit 30  Empty Route-Map

R3(config)#router ospf 1
R3(config-router)#redistribute static subnets route-map CCNP
R3(config-router)#end

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 41
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Verifications on R2

R2#sh ip route

Before Policy
O E2 [Link]/24 [110/20] via [Link], 00:14:23, Serial2/1
O E2 [Link]/24 [110/20] via [Link], 00:14:14, Serial2/1
O E2 [Link]/24 [110/20] via [Link], 00:14:09, Serial2/1
O E2 [Link]/24 [110/20] via [Link], 00:13:59, Serial2/1

After Policy
O E2 [Link]/24 [110/10] via [Link], 00:00:27, Serial2/1  seed=10 Metric-Type=2
O E2 [Link]/24 [110/10] via [Link], 00:00:27, Serial2/1  seed=10 Metric-Type=2
O E1 [Link]/24 [110/94] via [Link], 00:00:29, Serial2/1  seed=30 Metric-Type=1
O E1 [Link]/24 [110/94] via [Link], 00:00:29, Serial2/1  seed=30 Metric-Type=1

Verifications on R1

R1#sh ip route

Before Policy
O E2 [Link]/24 [110/20] via [Link], 00:14:23, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:14:14, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:14:09, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:13:59, Serial2/0

After Policy
O E2 [Link]/24 [110/10] via [Link], 00:00:27, Serial2/0  seed=10 Metric-Type=2
O E2 [Link]/24 [110/10] via [Link], 00:00:27, Serial2/0  seed=10 Metric-Type=2
O E1 [Link]/24 [110/158] via [Link], 00:00:29, Serial2/0  seed=30 Metric-Type=1
O E1 [Link]/24 [110/158] via [Link], 00:00:29, Serial2/0  seed=30 Metric-Type=1

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 42
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Lecture # 11
Policy Base Routing LAB

Router “Data”

conf t
Hostname DATA
interface fastEthernet 0/0
ip address [Link] [Link]
no sh
ip route [Link] [Link] [Link] Default Routing
End

Command Description
# ip route [Link] [Link] (Forwarding router's Global configuration mode command To set the
address ) gateway of last resort on a router. Default Routing.

Router “Voice”

conf t
Hostname VOICE
interface fastEthernet 0/0
ip address [Link] [Link]
no sh
ip route [Link] [Link] [Link] Default Routing
End

Router R1

conf t
interface serial 2/0
ip address [Link] [Link]
no sh
interface serial 2/1
ip address [Link] [Link]
Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 43
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

no sh
interface fastEthernet 0/0
ip address [Link] [Link]
no sh
Router R2

conf t
interface serial 2/0
ip address [Link] [Link]
no sh

interface serial 2/1

ip address [Link] [Link]
no sh
end
wr

Router R3

conf t
interface serial 2/0
ip address [Link] [Link]
no sh

interface serial 2/1

ip address [Link] [Link]
no sh

end
wr

Router R4

conf t
interface serial 2/0
ip address [Link] [Link]
no sh

interface serial 2/1

ip address [Link] [Link]
no sh

inter fa 0/0
ip address [Link] [Link]
no sh
no keep
end
wr

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 44
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

OSPF On R1

Conf t
Router ospf 1
passive-interface fastEthernet 0/0 
network [Link] [Link] Area 0

Command Description
# passive-interface fastEthernet 0/0 Global configuration mode command to specify a
particular interface as a passive-interface in the
dynamic routing process.

Note: A passive interface does not send or process received hello’s thus not forming a neighbor
relationship or advertising routes.

OSPF On R2

Conf t
Router ospf 1
network [Link] [Link] Area 0

OSPF On R3

Conf t
Router ospf 1
network [Link] [Link] Area 0

OSPF On R4

Conf t
Router ospf 1
network [Link] [Link] Area 0

ACLs on R1

conf t
ip access-list standard DATA
permit [Link] [Link]
exit
ip access-list standard VOICE
permit [Link] [Link]
end

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 45
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Route-Map on R1

Command Description
# route-map Name/tag [permit | deny] Global configuration mode command defines a
[sequence-number] route map to control filtering.

Command Description
# match Name /tag [name ACL] Router configuration mode command matches
routes with a specified name, to be used as the
route map is referenced.

Conf t
Route-map PBR permit 10
match ip address DATA
set ip next-hop [Link]
exit

Route-map PBR permit 20

match ip address VOICE
set ip next-hop [Link]
exit

Route-map PBR permit 30

end

Route-Map Implementation On Router “R1”

Command Description
# ip policy route-map (name) Interface configuration mode command To
identify a route map to use for policy routing on an
interface.

conf t
int fa 0/0
ip policy route-map PBR  Route-Map implementation on common point Fast Ethernet 0/0 on R1
end

wr

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 46
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Verification On R1

Before Ping command from Router “Data” and “Voice” Results are:

Command Description
#Show route-map Privileged EXEC Mode command, displays
information about route maps configured on the
router.

R1#show route-map

route-map PBR, permit, sequence 10

Match clauses:
ip address (access-lists): DATA
Set clauses:
ip next-hop [Link]
Policy routing matches: 0 packets, 0 bytes  0 packets received from Router “Data” before Ping.
route-map PBR, permit, sequence 20
Match clauses:
ip address (access-lists): VOICE
Set clauses:
ip next-hop [Link]
Policy routing matches: 0 packets, 0 bytes  0 packets received from Router “Voice” before Ping.
route-map PBR, permit, sequence 30
Match clauses:
Set clauses:
Policy routing matches: 0 packets, 0 bytes

After Ping command from Router “Data” and “Voice” Results are:

R1#sh route-map

route-map PBR, permit, sequence 10

Match clauses:
ip address (access-lists): DATA
Set clauses:
ip next-hop [Link]
Policy routing matches: 5 packets, 570 bytes  5 packets received from Router “Data” after Ping.
route-map PBR, permit, sequence 20
Match clauses:
ip address (access-lists): VOICE
Set clauses:
ip next-hop [Link]
Policy routing matches: 4 packets, 456 bytes  4 packets received from Router “Data” after Ping.
route-map PBR, permit, sequence 30
Match clauses:
Set clauses:
Policy routing matches: 0 packets, 0 bytes

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 47
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Lecture # 12
Policy Base Routing (Continue)

Wild Card Mask Basic Concepts to Advance Level

ACL: “A list of IP Addresses & Network IDs.”

It is multipurpose, used in security, quality of service, policy base routing and NAT.

Note: In single line ACL we can use range of IP addresses or range of Network IDs and wildcard mask
used for this ranges.

As we know IP format is: x.x.x.x. No.1 octet start from 1 to 255 same for Octet no 2 ,3 and 4.

IP Address
X X X X
Format
0 0 0 0
Full Range To To To To
255 255 255 255

Note: Each Octet 0 to 255 is known as its Full Range. Total 0 to 255 = 256

We can divide it into small groups.

Single
Octet 256 128 64 32 16 8 4 2 1
Division
0-255 0-127 0-63 0-31 0-15 0-7 0-3 0-1 0
128-255 64-127 32-63 16-31 8-15 4-7 2-3 1
128-191 64-95 32-47 16-23 8-11 4-5 2
192-255 96-127 48-63 24-31 12-15 6-7 3
Groups
128-159 64-79 32-39 16-19 8-9 4
160-159 | | | | |
192-233 | | | | |
224-255 240-255 248-255 252-255 254-255 255

Note: This table is for all the octet.

If we have a Range of IP addresses than group can be choose from this table, we cannot cross this
boundary. e.g.

We have a range of IP addresses is “[Link] to [Link] “ total IPs are four than we can select group “4-7”
of block#4, all four IP addresses are set in this group. In this case we have only one ACL for permit/deny.

Now what if we have a range of another four addresses: “[Link] to [Link]“.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 48
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Could it be set in any single group? No, because there is no such group for this range in the table, it
could be divide into two groups. i.e. 6-7 and 8-9 of block #2 in the table. “Starting and Ending values
should be match”. In this case we have two ACLs for permit/deny.

Suppose 4th octet of any IP range. Wild Card mask for the range for:

IP Range 256 128 64 32 16 8 4 2 1

Wildcard
[Link] [Link] [Link] [Link] [Link] [Link] [Link] [Link] [Link]
Mask

Another way to calculate Wild Card Mask

Suppose we have IP Addresses range from [Link] to [Link]. By subtraction we can get
wild card mask for this range. e.g.

[Link] – [Link] = [Link]

[Link] is a wild card mask for this range and we have it already in the table above.

What if we have to permit this range [Link] to [Link]?

Apply Subtraction we have:

[Link] – [Link] = [Link] but it is not possible we don’t have this wild card mask In the
table as well.

For this ACL can be written as : [Link]
[Link] (for 8-11 IP Addresses)

And [Link]
[Link] (For single IP Address .12)

Wild Card Mask for Network IDs

Suppose we have Network IDs range from “[Link]/24 to [Link]/24”. Here 3rd octet is varying.
No problem for this we have the combination above in block 32 of the table. i.e.

Network ID 172 16 0 0
Wildcard Mask 0 0 31 255

3rd Octet is for Network and the 4th octet is for the host, mean we have 32 network and each network
has 256 host. i.e.

[Link]/24 0-255 host

[Link]/24 0-255 host and so on.

Suppose we have a range of network id from [Link] to [Link] to calculate its wildcard mask.

[Link] – [Link] = [Link] and we have a range of 0-15 in the table.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 49
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Note: Only network ID will match, neither host nor broadcast ID will match.

“[Link]” is a wild card mask and It can be used in ACL but you cannot use this wildcard mask in OSPF.
Because this dis-contagious wildcard mask for OSPF we have to add 255 instead of 0 to make it
contagious i.e. “[Link]” in this way host and broadcast ID will match.

How to Permit/deny all ranges of Class A, B and C

Class “A”

Range is 0-127

[Link] Start
[Link] End
[Link] Wild Card Mask

For ACL : permit/deny [Link] [Link]

Class “B”

Range is 128-191

[Link] Start
[Link] End
[Link] Wild Card Mask

For ACL : permit/deny [Link] [Link]

Class “B”

Range is 192-223

[Link] Start
[Link] End
[Link] Wild Card Mask

For ACL : permit/deny [Link] [Link]

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 50
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Mathematics of ACL

How it work in router?

Suppose we have Range [Link] [Link]. Wild card tells us we have 4 IPs in this range.

Convert the 4th octet in to binary of starting address and wild card mask i.e.

Starting Address: 00000000

Wild card mask: 00000011

Wild card mask tells the system to make the combination of 31st and 32nd bit of the starting address i.e.

In
Bits 31 32
Decimal
Starting
0 0 0 0 0 0 0 0 0
Address
0 0 0 0 0 0 0 1 1
0 0 0 0 0 0 1 0 2
WM 0 0 0 0 0 0 1 1 3

Another Example

Suppose we have Range [Link] [Link]. Wild card tells us we have 4 IPs in this range.

Convert the 4th octet in to binary of starting address and wild card mask i.e.

Starting Address: 00000100

Wild card mask: 00000011

Wild card mask tells the system to make the combination of 30th, 31st and 32nd bit of the starting address
i.e.

In
Bits 30 31 32
Decimal
Starting
0 0 0 0 0 1 0 0 4
Address
0 0 0 0 0 1 0 1 5
0 0 0 0 0 1 1 0 6
WM 0 0 0 0 0 1 1 1 7

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 51
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Task Given By Instructor

Static route on R3
[Link]/24
[Link]/24
[Link]/24
[Link]/24

Tasks:

1) For network [Link]/24 and [Link]/24, matric type = 2 and seed matric = 10

2) For network [Link]/24 and [Link]/24, matric type = 1 and seed matric = 10

3) Two ACLs for Even and Odd networks.

ACL for Even ACL for Odd

[Link] [Link]
Subtraction Subtraction
[Link] [Link]
Wild Card Mask [Link] Wild Card Mask [Link]

R1

Conf t
router ospf 1
network [Link] [Link] area 1
R2

Conf t
router ospf 1
network [Link] [Link] area 1
R3

conf t
ip route [Link] [Link] null 0
ip route [Link] [Link] null 0
ip route [Link] [Link] null 0
ip route [Link] [Link] null 0
router ospf 1
network [Link] [Link] area 1
network [Link] [Link] area 1

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 52
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Access list and Route Map on R3

Conf t
access-list 1 permit [Link] [Link]  For Even Network
access-list 2 permit [Link] [Link]  For Odd Network

route-map CCNP permit 10  Route Map Configuration

match ip address 1  Access-List 1
set metric-type type-2  Conditions
set metric 10
exit

route-map CCNP permit 20  Route Map Configuration

match ip address 2  Access-List 2
set metric-type type-1  Conditions
set metric 10
exit

route-map CCNP permit 30  Empty Route-Map

end

conf t
router ospf 1
redistribute static subnets route-map CCNP
end

Verifications on R2

R2#sh ip route

Before Policy
O E2 [Link]/24 [110/20] via [Link], 00:14:23, Serial2/1
O E2 [Link]/24 [110/20] via [Link], 00:14:14, Serial2/1
O E2 [Link]/24 [110/20] via [Link], 00:14:09, Serial2/1
O E2 [Link]/24 [110/20] via [Link], 00:13:59, Serial2/1

After Policy

O E2 [Link]/24 [110/10] via [Link], 00:00:06, Serial2/1  seed=10 Metric-Type=2

O E1 [Link]/24 [110/74] via [Link], 00:00:06, Serial2/1  seed=10 Metric-Type=1
O E2 [Link]/24 [110/10] via [Link], 00:00:08, Serial2/1  seed=10 Metric-Type=2
O E1 [Link]/24 [110/74] via [Link], 00:00:08, Serial2/1  seed=10 Metric-Type=1

Verifications on R1

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 53
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

R1#sh ip route

Before Policy
O E2 [Link]/24 [110/20] via [Link], 00:14:23, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:14:14, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:14:09, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:13:59, Serial2/0

After Policy

O E2 [Link]/24 [110/10] via [Link], 00:00:28, Serial2/0  seed=10 Metric-Type=2

O E1 [Link]/24 [110/138] via [Link], 00:00:29, Serial2/0  seed=10 Metric-Type=1
O E2 [Link]/24 [110/10] via [Link], 00:00:29, Serial2/0  seed=10 Metric-Type=2
O E1 [Link]/24 [110/138] via [Link], 00:00:29, Serial2/0  seed=10 Metric-Type=1

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 54
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Lecture # 13
OSPF Packet Types

As we know routing procedure of OSPF protocol is: neighbor ship, completing database table than
routing table than forwarding. OSPF uses five different packets from neighbor table to routing table.

In OSI reference modal the network layer attached its header to segment received form transport layer
become IP Packet. There is a filed for OSPF and EIGRP in this IP header, known as OSPF/EIGRP packet.

Note: RIP is an UDP base protocol uses port # 520 and BGP is TCP based but OSPF and EIGRP are pure
network layer protocol not depending on port numbers. There is unique ID for Network protocols. For
OSPF it is 89 and for EIGRP it is 88.

IP Header Protocol ID # 89 =OSPF

Version Type Packet-Length Router-ID Area-ID Check-Sum Auth-Type Authentication Data

The values of 2 and 3 indicate OSPF versions 2 and 3 respectively. Version 2 for IPv4
Version
and version 3 is for IPv6.
Differentiates the 5 types of OSPF packets.

Hello Hello Packet

DBD Database Descriptor Packet
Type
LSR Link State Request Packet

LSU Link State Update Packet

LS-Ack Link State Acknowledgment
Its variable not fixed the length of an OSPF packet, including LSA header and contents,
Packet-Length
in bytes.
Router-ID Uniquely identifies the source or originating OSPF router of an OSPF packet.
Area-ID Area ID assigned to the interface sending the OSPF packet.
Check-sum For error detection.
Auth-Type Plain, MD-5

Authentication Actual Password. Authentication data to verify the packet's integrity.

Data 5 type of OSPF packets have own data.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 55
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Five Types of OSPF Packets

Hello packets are OSPF packet Type 1. These packets are multicast periodically to
[Link] multicast address on all interfaces enabling dynamic discovery of neighbors
Hello
and maintain neighbor relationships. Its “Data” contains list of neighbor or neighbor
table.
Describes your database to your neighbors or List of existing LSAs. For link-state
routing protocol, it is required that the link-state databases for all routers remain
DBD synchronized. The synchronization starts as soon as the adjacency is formed between
neighbors. OSPF uses Database Descriptor (DBD) packets for this purpose. DBD “Data”
is list of existing LSAs (Link State Advertisement)

Request for missing LSA and its “Data” is a list of missing LSAs. After DBD packets
LSR exchange process, the router may find it does not have an up-to-date database. The
LSR packet is used to request pieces of neighbor database that is more up-to-date.

Demanded/ Requested LSAs are in Link State Update Packet. Each LSA contains
LSU
routing, metric and topology information to describe a portion of OSPF network.

Its “Data” field is empty. Link State Acknowledgment (LSAck) packets are OSPF packet
LSAck Type 5. OSPF requires acknowledgment for the receipt of each LSA. Multiple LSAs can
be acknowledged in a single LSAck packet.

Note: Hello is periodic packet, exchanged in every 10 seconds to maintain neighbor table. Rest four
packets are not periodic.

OSPF Neighbors only exchange Hello packet and OSPF Adjacent Neighbors exchange all 5 packets.

Dead Interval is 40 seconds in OSPF after 40 seconds neighbor ship expires.

If DBD has changed in one router than it will triggered the DBD “unicast”.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 56
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

MultiAccess Network With Single Network ID

[Link]/8

Hello
A B

DBD

LSR

LSU F C

LSAck

E D

Suppose we have a Multi-Access Network with Network ID [Link]/8. There is a change in DBD packet
of Router E it will send to all routers than all routers send LSR to Router E and Router E will send LSU to
all routers after receiving LSR, all routers also send LSU to Router E and in last Router E sends LSAck to
all routers and all routers also send LSAck to Router E.

We have configured OSPF in this multi-access network like point to point but this is not a good idea
because there is a chance of network choking in this case. Here the change is occur only in Router E,
what if there is a change in all routers A,B,C,D and F? Result is network Chock. As shown in figure above
there is no chance of data forwarding.

What is the solution than?

To overcome on it “Dijkstra” already provided the solution for this. That will be study in next lecture.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 57
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Lecture # 14
OSPF Over Multi-Access Network

In previous lecture we discussed Multi-Access network in this network OSPF was running like point to
point network that cause network chock burden router processor etc.

The behavior of OSPF over Multi-Access network should be different from the behavior of Point to Point
network.

Every single router sends Hello to all OSPF routers in the network and as we know these packets are
multicast periodically to [Link] in every 10 seconds and become neighbors of each other after
exchanging hello packet.

Every multi-access network has a Designated Router and Backup Designated Router.

The Designated Router originates a network links advertisement

Designated Router (DR) on behalf of the network. The Designated Router becomes
adjacent to all other routers on the network.
BDR takes over its role of redistributing updated information, if DR
Backup Designated Router (BDR)
is down.
DR Others DR Others are non DR, BDR.

For example, on multi-access networks, DR and BDR serve as the central point for exchanging OSPF
routing information. Each DRO router will exchange routing information only with the DR and BDR,
instead of exchanging updates with every router on the network segment. DR will then distribute
information to every other router inside the same area. This reduces OSPF traffic.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 58
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

To send routing information to a DR or BDR the multicast address of [Link] is used. DR or BDR sends
routing updates to the multicast address of [Link]. If DR fails, BDR takes over its role of redistributing
routing information.

Note: Every router on a network segment establishes a full neighbor relationship with the DR and BDR.
DR others routers establish a two way neighbor relationship between themselves.

DR, BDR Election Criteria:

DR:

1. Router with the highest interface OSPF priority will become a DR. By default, all routers have a
priority of 1 and priority can be changed. Priority Value is form 0 to 255.

2. If there is a tie, a router with the highest router ID wins the election. In figure above Router A is DR.

Note: Any router with priority 0 means is not participating in DR, BDR election.

BDR:

The router with the second highest OSPF priority or router ID will become a BDR.

Note: First 40 seconds after running OSPF, DR,BDR are elected.

Note: DR, BDR election done on the bases of Hello Packet.

After DR, BDR election if a router with highest priority 250 added in network than already elected DR,
BDR are remain intact DR and BDR. And if, DR is down than BDR become DR and that newly added
router with highest priority, selected as a BDR. And if previous DR again up than it acts like a DRO.

Note: Do not change DR, BDR for stability in network.

 DR and BDR are Adjacent Neighbors

 DR and DROs are Adjacent Neighbors
 BDR and DROs are Adjacent Neighbors
 DROs and DROs are only Neighbors

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 59
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

How many Networks are in this Multi-Access Network?

There are four networks: W) [Link]/8 X) [Link]/8 Y) [Link]/8 Z) [Link]/8

Which are DR, ADR and DROs in this network?

 In Network (W) Router A is DR with priority 200 and BDR is Router B with priority 100, DRO is
Router Z with interface FE0 priority 10.
 In Network (X) Router C is DR with priority 150 and BDR is Router Z with interface FE1 and
priority 100, DRO is Router D with priority 10.
 In Network (Y) Router Z is DR with interface and priority 200 and BDR is Router F with priority
150, DRO is Router E with priority 50.
 Network (Z) is with default priority 1. DR and BDR are elected on Highest Router ID. Router Z
with ID [Link] is DR and Router H with ID [Link] is BDR, Router G is DRO.

Note: One router has multiple roles.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 60
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

In this multi-access network there is no BDR only DR is in each network.

Note: On point-to-point links a DR and BDR are not elected since only two routers are directly connected.

In this multi-access network there is DR and BDR with default priority and DR and BDR selected on
Highest Router ID.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 61
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Lecture # 15
OSPF Over Multi-Access Network LAB

Tasks:

1. Manually priority setting for DR and BDR.

2. Verifying DR and BDR, properly elected and working.

LAB:

R1

R1#Conf t
R1(config)#interface fastEthernet 0/0
R1(config-if)#ip add
R1(config-if)#ip address [Link] [Link]
R1(config-if)#no sh
R1(config-if)#no keepalive
R1(config-if)#end

R2

R2#Conf t
R2 (config)#interface fastEthernet 0/0
R2 (config-if)#ip add
R2 (config-if)#ip address [Link] [Link]
R2 (config-if)#no sh
R2 (config-if)#no keepalive
R2(config-if)#end

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 62
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

R3
R3#Conf t
R3 (config)#interface fastEthernet 0/0
R1(config-if)#ip add
R3 (config-if)#ip address [Link] [Link]
R3 (config-if)#no sh
R3 (config-if)#no keepalive
R3(config-if)#end

R4

R4#Conf t
R4 (config)#interface fastEthernet 0/0
R4 (config-if)#ip add
R4 (config-if)#ip address [Link] [Link]
R4 (config-if)#no sh
R4 (config-if)#no keepalive
R4(config-if)#end

1- Manually priority setting for DR and BDR on R1 and R2 respectively .

Command Description
R1(config-if)#ip ospf priority <0-255> Interface configuration mode command to set the
OSPF priority.

R1

R1#Conf t
R1(config)#interface fastEthernet 0/0
R1(config-if)#ip ospf priority 200
R1(config-if)#exit

R2

R2#Conf t
R2(config)#interface fastEthernet 0/0
R2(config-if)#ip ospf priority 150
R2(config-if)#exit

Default priority on R3 and R4.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 63
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

OSPF protocol on all routers.

R1

R1(config)#router ospf 1

R1(config-router)#network [Link] [Link] area 1

R2

R2(config)#router ospf 1

R2(config-router)#network [Link] [Link] area 1

R3

R3(config)#router ospf 1

R3(config-router)#network [Link] [Link] area 1

R4

R4(config)#router ospf 1

R4(config-router)#network [Link] [Link] area 1

Following messages received in all routers after running OSPF Protocols.

Router R1

*Mar 1 00:46:04.871: %OSPF-5-ADJCHG: Process 1, Nbr [Link] on FastEthernet0/0 from LOADING to

FULL, Loading Done

R1#

*Mar 1 00:47:24.971: %OSPF-5-ADJCHG: Process 1, Nbr [Link] on FastEthernet0/0 from LOADING to

FULL, Loading Done

R1#

*Mar 1 00:48:05.031: %OSPF-5-ADJCHG: Process 1, Nbr [Link] on FastEthernet0/0 from LOADING to

FULL, Loading Done

Router R2

*Mar 1 00:46:03.339: %OSPF-5-ADJCHG: Process 1, Nbr [Link] on FastEthernet0/0 from LOADING to

FULL, Loading Done

R2(config-router)#

*Mar 1 00:47:23.479: %OSPF-5-ADJCHG: Process 1, Nbr [Link] on FastEthernet0/0 from LOADING to

FULL, Loading Done

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 64
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

R2(config-router)#

*Mar 1 00:48:03.475: %OSPF-5-ADJCHG: Process 1, Nbr [Link] on FastEthernet0/0 from LOADING to

FULL, Loading Done

Router R3

*Mar 1 00:47:20.915: %OSPF-5-ADJCHG: Process 1, Nbr [Link] on FastEthernet0/0 from LOADING to

FULL, Loading Done

*Mar 1 00:47:20.927: %OSPF-5-ADJCHG: Process 1, Nbr [Link] on FastEthernet0/0 from LOADING to

FULL, Loading Done

Router R4

*Mar 1 00:47:56.583: %OSPF-5-ADJCHG: Process 1, Nbr [Link] on FastEthernet0/0 from LOADING to

FULL, Loading Done

*Mar 1 00:47:56.583: %OSPF-5-ADJCHG: Process 1, Nbr [Link] on FastEthernet0/0 from LOADING to

FULL, Loading Done

We have noticed on R1 and on R3, 3 messages LOADING to FULL, Loading Done received but on the
other hand there are 2 messages on R3 and R4 why?

It is because,

R1 has three adjacent neighbors R2, R3 and R4.

R2 has three adjacent neighbors R1, R3 and R4.

R3 and R4 have two adjacent neighbors R1 and R2.

Note: Full state is always with an Adjacent Neighbor.

For More explanation, run “show IP OSPF neighbors” on all routers.

Router R1

R1#show ip ospf neighbor

Neighbor ID Pri State Dead Time Address Interface

[Link] 150 FULL/BDR 00:00:32 [Link] FastEthernet0/0
[Link] 1 FULL/DROTHER 00:00:34 [Link] FastEthernet0/0
[Link] 1 FULL/DROTHER 00:00:38 [Link] FastEthernet0/0

Note: Here Router R1 is adjacent with R2, R3 and R4. This is why three messages received on Router R1.
We are also getting the information about BDR and DROTHERs.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 65
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Router R2

R2#show ip ospf neighbor

Neighbor ID Pri State Dead Time Address Interface

[Link] 200 FULL/DR 00:00:38 [Link] FastEthernet0/0
[Link] 1 FULL/DROTHER 00:00:35 [Link] FastEthernet0/0
[Link] 1 FULL/DROTHER 00:00:39 [Link] FastEthernet0/0

Note: Here Router R2 is adjacent with R1, R3 and R4. This is why three messages received on Router R2.
And we are also getting the information about DR and DROTHERs.

Router R3

R3#show ip ospf neighbor

Neighbor ID Pri State Dead Time Address Interface

[Link] 200 FULL/DR 00:00:38 [Link] FastEthernet0/0
[Link] 150 FULL/BDR 00:00:33 [Link] FastEthernet0/0
[Link] 1 2WAY/DROTHER 00:00:39 [Link] FastEthernet0/0

Note: Here Router R3 is only adjacent with R1 and R2 this is why two messages received on Router R3.
With router [Link] it is only a neighbor. And we are also getting the information about DR, BDR and
DROTHERs on router R3.

Router R4

R4#show ip ospf neighbor

Neighbor ID Pri State Dead Time Address Interface

[Link] 200 FULL/DR 00:00:37 [Link] FastEthernet0/0
[Link] 150 FULL/BDR 00:00:32 [Link] FastEthernet0/0
[Link] 1 2WAY/DROTHER 00:00:34 [Link] FastEthernet0/0

Note: Here Router R4 is only adjacent with R1 and R2 this is why two messages received on Router R4.
With router [Link] it is only a 2WAY/DROther neighbor. DR, BDR and DROTHERs are shown here too.

Another Command for verification of DR, BDR and DROTHERs

Command Description
R1#show ip ospf interface <interface> Privileged EXEC Mode commands to verify OSPF on
interface.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 66
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Router R1

R1#show ip ospf interface fastEthernet 0/0

FastEthernet0/0 is up, line protocol is up

Internet Address [Link]/8, Area 1
Process ID 1, Router ID [Link], Network Type BROADCAST, Cost: 1

Transmit Delay is 1 sec, State DR, Priority 200  STATE DR

Designated Router (ID) [Link], Interface address [Link]

Backup Designated router (ID) [Link], Interface address [Link]  BDR Information

Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
oob-resync timeout 40
Hello due in 00:00:06
Supports Link-local Signaling (LLS)
Index 1/1, flood queue length 0
Next 0x0(0)/0x0(0)
Last flood scan length is 1, maximum is 1
Last flood scan time is 0 msec, maximum is 4 msec

Neighbor Count is 3, Adjacent neighbor count is 3  Adj Neighbor Info

Adjacent with neighbor [Link] (Backup Designated Router)
Adjacent with neighbor [Link]
Adjacent with neighbor [Link]
Suppress hello for 0 neighbor(s)

Router R2

R2#show ip ospf interface fastEthernet 0/0

FastEthernet0/0 is up, line protocol is up

Internet Address [Link]/8, Area 1
Process ID 1, Router ID [Link], Network Type BROADCAST, Cost: 1

Transmit Delay is 1 sec, State BDR, Priority 150  STATE BDR

Designated Router (ID) [Link], Interface address [Link]
Backup Designated router (ID) [Link], Interface address [Link]

Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
oob-resync timeout 40
Hello due in 00:00:07
Supports Link-local Signaling (LLS)
Index 1/1, flood queue length 0
Next 0x0(0)/0x0(0)
Last flood scan length is 0, maximum is 1
Last flood scan time is 0 msec, maximum is 0 msec

Neighbor Count is 3, Adjacent neighbor count is 3  Adj Neighbor Info

Adjacent with neighbor [Link] (Designated Router)
Adjacent with neighbor [Link]
Adjacent with neighbor [Link]
Suppress hello for 0 neighbor(s)

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 67
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Router R3

R3#sho ip ospf interface fastEthernet 0/0

FastEthernet0/0 is up, line protocol is up

Internet Address [Link]/8, Area 1
Process ID 1, Router ID [Link], Network Type BROADCAST, Cost: 1
Transmit Delay is 1 sec, State DROTHER, Priority 1  STATE DROTHER

Designated Router (ID) [Link], Interface address [Link]  DR Information

Backup Designated router (ID) [Link], Interface address [Link]  BDR Information

Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
oob-resync timeout 40
Hello due in 00:00:00
Supports Link-local Signaling (LLS)
Index 1/1, flood queue length 0
Next 0x0(0)/0x0(0)
Last flood scan length is 0, maximum is 1
Last flood scan time is 0 msec, maximum is 0 msec

Neighbor Count is 3, Adjacent neighbor count is 2  Neighbors Info, total 3, Adjacent 2

Adjacent with neighbor [Link] (Designated Router)
Adjacent with neighbor [Link] (Backup Designated Router)

Suppress hello for 0 neighbor(s)

Router R4

R4#show ip ospf interface fastEthernet 0/0

FastEthernet0/0 is up, line protocol is up

Internet Address [Link]/8, Area 1
Process ID 1, Router ID [Link], Network Type BROADCAST, Cost: 1

Transmit Delay is 1 sec, State DROTHER, Priority 1  STATE DROTHER

Designated Router (ID) [Link], Interface address [Link]  DR Information
Backup Designated router (ID) [Link], Interface address [Link]  BDR Information

Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
oob-resync timeout 40
Hello due in 00:00:04
Supports Link-local Signaling (LLS)
Index 1/1, flood queue length 0
Next 0x0(0)/0x0(0)
Last flood scan length is 0, maximum is 1
Last flood scan time is 0 msec, maximum is 0 msec

Neighbor Count is 3, Adjacent neighbor count is 2  Neighbors Info, total 3, Adjacent 2

Adjacent with neighbor [Link] (Designated Router)
Adjacent with neighbor [Link] (Backup Designated Router)

Suppress hello for 0 neighbor(s)

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 68
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Another Command for brief description of Neighbors.

Command Description
R1#show ip ospf interface brief Privileged EXEC Mode commands to verify OSPF,
briefly on interfaces of router.

R1#show ip ospf interface brief

Interface PID Area IP Address/Mask Cost State Nbrs F/C

Fa0/0 1 1 [Link]/8 1 DR 3/3 

R2#show ip ospf interface brief

Interface PID Area IP Address/Mask Cost State Nbrs F/C

Fa0/0 1 1 [Link]/8 1 BDR 3/3 

R3#show ip ospf interface brief

Interface PID Area IP Address/Mask Cost State Nbrs F/C

Fa0/0 1 1 [Link]/8 1 DROTH 2/3 

R4#show ip ospf interface brief

Interface PID Area IP Address/Mask Cost State Nbrs F/C

Fa0/0 1 1 [Link]/8 1 DROTH 2/3 

For LIVE Monitoring

Command Description
Privileged EXEC Mode commands to display
information on adjacency events related to Open
Shortest Path First (OSPF), such as packets being
R1#debug ip ospf adj
dropped due to a Time-to-Live (TTL) security
check. To disable debugging output, use the no
form of this command.

Running Debug ip ospf adj command on all routers.

R1#debug ip ospf adj

R2#debug ip ospf adj

R3#debug ip ospf adj

R4#debug ip ospf adj

(OSPF adjacency events debugging is on) display on all routers.

For changing in DBD of OSPF routers add loopback interface on all routers.
Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 69
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Adding Loopback Interface on Router R4

R4(config)#interface loopback 1

R4(config-if)#ip address [Link] [Link]

As we entered the Loop back address the results are below on R1, R2 and R3.

R1#
*Mar 1 00:14:56.447: OSPF: Rcv LS UPD from [Link] on FastEthernet0/0 length 76 LSA count 1

R2#
*Mar 1 00:14:46.647: OSPF: Rcv LS UPD from [Link] on FastEthernet0/0 length 76 LSA count 1
*Mar 1 00:14:46.819: OSPF: Rcv LS UPD from [Link] on FastEthernet0/0 length 76 LSA count 1

R3#
*Mar 1 00:14:35.023: OSPF: Rcv LS UPD from [Link] on FastEthernet0/0 length 76 LSA count 1

R4#
*Mar 1 00:15:04.303: OSPF: Build router LSA for area 1, router ID [Link], seq 0x80000003
*Mar 1 00:15:04.555: OSPF: Rcv LS UPD from [Link] on FastEthernet0/0 length 76 LSA count 1

Here we have noticed that the R3 (DRO) only receive update from R1 (DR) not directly from R4 (DRO).
And R2 (BDR) received update directly from R4 and from R1.

Adding Loopback Interface on Router R2 (BDR)

R2#conf t
R2(config)#interface loopback 1
R2(config-if)#ip address [Link] [Link]

R2(config-if)#

*Mar 1 00:49:57.531: OSPF: Build router LSA for area 1, router ID [Link], seq 0x80000004

R1#
*Mar 1 00:50:07.363: OSPF: Rcv LS UPD from [Link] on FastEthernet0/0 length 76 LSA count 1

R3#
*Mar 1 00:49:45.799: OSPF: Rcv LS UPD from [Link] on FastEthernet0/0 length 76 LSA count 1

R4#
*Mar 1 00:50:15.291: OSPF: Rcv LS UPD from [Link] on FastEthernet0/0 length 76 LSA count 1

Here we have noticed that the R2 (BDR) sends update directly to R1 (DR), R3 (DRO) and R4 (DRO).

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 70
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Adding Loopback Interface on Router R1 (DR)

R1#conf t
R1(config)#interface loopback 1
R1(config-if)#ip address [Link] [Link]

R1(config-if)#
*Mar 1 00:58:49.955: OSPF: Build router LSA for area 1, router ID [Link], seq 0x80000004

R2#
*Mar 1 00:58:40.255: OSPF: Rcv LS UPD from [Link] on FastEthernet0/0 length 76 LSA count 1

R3#
*Mar 1 00:58:28.459: OSPF: Rcv LS UPD from [Link] on FastEthernet0/0 length 76 LSA count 1

R4#
*Mar 1 00:58:57.947: OSPF: Rcv LS UPD from [Link] on FastEthernet0/0 length 76 LSA count 1

Here we have noticed that the R1 (DR) sends update directly to R2 (BDR), R3 (DRO) and R4 (DRO).

Adding Loopback Interface on Router R3

R3(config)#interface loopback 1

R3(config-if)#ip address [Link] [Link]

R3(config-if)#
*Mar 1 00:40:29.755: OSPF: Build router LSA for area 1, router ID [Link], seq 0x80000004
*Mar 1 00:40:29.871: OSPF: Rcv LS UPD from [Link] on FastEthernet0/0 length 76 LSA count 1

R1#
*Mar 1 00:40:51.347: OSPF: Rcv LS UPD from [Link] on FastEthernet0/0 length 76 LSA count 1

R2#
*Mar 1 00:40:41.611: OSPF: Rcv LS UPD from [Link] on FastEthernet0/0 length 76 LSA count 1
*Mar 1 00:40:41.663: OSPF: Rcv LS UPD from [Link] on FastEthernet0/0 length 76 LSA count 1

R4#
*Mar 1 00:40:59.447: OSPF: Rcv LS UPD from [Link] on FastEthernet0/0 length 76 LSA count 1

Here we have noticed that the R4 (DRO) only receive update from R1 (DR) not directly from R3 (DRO).
And R2 (BDR) received update directly from R3 and from R1 also.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 71
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

OSPF Neighbor/Adjacency States:

1. Down
2. INIT (1-Way)
3. 2-Way
4. Ex Start
5. Exchange
6. Loading
7. Full

Neighbor states are different for each others.

Down This is the first OSPF neighbor state. It means that no information (hellos) has been
received from this neighbor or Hello packet is mismatched, but hello packets can still be
sent to the neighbor in this state.
During the fully adjacent neighbor state, if a router doesn't receive hello packet from a
neighbor within the RouterDeadInterval time or if the manually configured neighbor is
being removed from the configuration, then the neighbor state changes from Full to
Down.

INIT (1-Way) This state specifies that the router has received a hello packet from its neighbor, but the
receiving router's ID was not included in the hello packet. When a router receives a
hello packet from a neighbor, it should list the sender's router ID in its hello packet as an
acknowledgment that it received a valid hello packet.

2-Way This state designates that 2 way communications has been established between two
routers. 2-way means that each router has seen the other's hello packet. DR and BDR
are elected in this state.

Ex Start Process of Adjacency started form Ex-start state. DBD start from it. In this state, the
routers and their DR and BDR establish a master-slave relationship and choose the
initial sequence number for adjacency formation. The router with the higher router ID
becomes the master and starts the exchange, and as such, is the only router that can
increment the sequence number.
Remember that the DR/BDR election might be purely by virtue of a higher priority
configured on the router instead of highest router ID. Thus, it is possible that a DR plays
the role of slave. And also note that master/slave election is on a per-neighbor basis.

If adjacency is stuck or hanged in Ex start state the only reason is MTU mismatched.
To ignore MTU:

(Config-if)# IP OSPF mtu ignore

Exchange In the exchange state, OSPF routers exchange database descriptor (DBD) packets.
Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 72
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Database descriptors contain link-state advertisement (LSA) headers only and describe
the contents of the entire link-state database.
Loading In this state, the actual exchange of link state information occurs. Based on the
information provided by the DBDs, routers send link-state request packets. The
neighbor then provides the requested link-state information in link-state update
packets. During the adjacency, if a router receives an outdated or missing LSA, it
requests that LSA by sending a link-state request packet. All link-state update packets
are acknowledged.

Full Completion of process In this state, router is fully adjacent with each other. All the
router and network LSAs are exchanged and the routers' databases are fully
synchronized.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 73
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Lecture # 16
OSPF LSA Types

There are 11 types of LSA but in CCNP, 7 types of LSAs are discussed:

Sr # LSA-Types Name
1 LSA-1 Router LSA
2 LSA-2 Network LSA
3 LSA-3
Summary LSA
4 LSA-4
5 LSA-5 External LSA
6 LSA-6 Multicast LSA
7 LSA-7 NSSA LSA

LSA-1 (Router LSA):

Router LSA Type 1 is generated by every router for each link that belongs to an area. “When a router
advertises its directly connected networks to its neighbors within same area is called “Router LSA””.
Displays with “O”. They are generated only inside of area to which they belong.

LSA-2 (Network LSA):

When a router advertises routing information received from a neighbor to another neighbor with the
same area is known as LSA-2. Usually generated by Designated Router (DR) for multi-access networks
and describe the routers that are connected to that segment. They are sent inside the area/same area to
which the network segment belongs. Displays with “O”.

(Remember the Lecture # 7 Single Area OSPF Configuration LAB)

R1#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

C [Link]/8 is directly connected, Serial2/0

O [Link]/8 [110/128] via [Link], 00:03:03, Serial2/0  LSA-1,2
C [Link]/24 is directly connected, FastEthernet0/0
O [Link]/24 [110/65] via [Link], 00:03:03, Serial2/0  LSA-1,2
[Link]/32 is subnetted, 1 subnets
O [Link] [110/65] via [Link], 00:03:03, Serial2/0  LSA-1,2
O [Link]/24 [110/129] via [Link], 00:03:03, Serial2/0  LSA-1,2

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 74
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

LSA-3 (Summary LSA)

When LSA-1 and LSA-2 become LSA-3 on changing their Area is known as LSA-3 “Summary LSA”. In type
3 LSAs are advertised networks from an area to the rest of the areas in AS. In routing table it displays in
“OIA”

Note: Only LSA-1 and LSA-2 become LSA-3.

LSA-3 is always generated by ABR.

(Remember the Lecture # 8 Multiple Area OSPF Configuration LAB)

R1#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route

Gateway of last resort is not set

C [Link]/8 is directly connected, Serial2/0

O IA [Link]/8 [110/128] via [Link], 00:10:23, Serial2/0  LSA-3
C [Link]/24 is directly connected, FastEthernet0/0
O IA [Link]/24 [110/65] via [Link], 00:10:22, Serial2/0  LSA-3
[Link]/32 is subnetted, 1 subnets
O [Link] [110/65] via [Link], 00:10:23, Serial2/0
O IA [Link]/24 [110/129] via [Link], 00:10:02, Serial2/0  LSA-3

LSA-4 (Summary LSA)

LSA-4 does not appear in routing table. LSA-4 appears in database table. This type of LSAs contains
routes information to ASBR.

Note: LSA-3 and LSA-4 always generated by ABR.

LSA-5 (External LSA)

Redistributed Routes are called LSA-5. LSA-5 Always generated by ASBR

(Remember the Lecture # 9 and #10 ABR & ASBR LAB and Policy Base Routing Lab)

R2#sh ip route ospf

O [Link]/24 [110/65] via [Link], 00:08:49, Serial2/0

O [Link]/24 [110/65] via [Link], 00:01:28, Serial2/1
O E2 [Link]/24 [110/20] via [Link], 00:01:28, Serial2/1  LSA-5
O E2 [Link]/24 [110/20] via [Link], 00:01:28, Serial2/1  LSA-5
O E2 [Link]/24 [110/20] via [Link], 00:01:28, Serial2/1  LSA-5
O E2 [Link]/24 [110/20] via [Link], 00:01:28, Serial2/1  LSA-5

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 75
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

LSA-6 (Multicast LSA)

Not discussed in cisco not even in Huwaway.

LSA-7 (Not So Stubby Area LSA)

Type 7 LSA allow injection of external routes throug Not-so-Stubby-Areas (NSSA). Generally external
routes are advertised by type 5 LSA but they are not allowed inside any stub area. That’s why Type 7
LSA is used, to trick OSPF. Type 7 LSA is generated by NSSA ASBR and is translated into type 5 LSA as it
leaves the area by NSSA ABR, which is then propagated throughout the network as type 5 LSA.

Area Types:

1 Backbone or Transit Area

2 Regular Area Stub Area
Totally Stubby Area
Not So Stubby Area
Totally Not So Stubby Area

Note: Regular Area is manually configurable by an administrator.

Stub Area:

“Such Area where only single exit point”. LSA-5 is not allowed to enter or to be generated in stub area.

A stub area is an area which does not receive route advertisements external to the autonomous system.
An ABR converts/delete type 5 LSAs from internal routers, sends them a default route of [Link] and
turns itself into a default gateway.

Benefit is this, OSPF regular areas are configured to manage resources, and it reduces LSDB and routing
table size for internal routers.

Note: Policy base routing is not possible in Stub Area.

Totally Stubby Area:

In this area LSA-5 and Summary LSA are blocked/not allowed to be entered. Default route is the
replacement of LSA-5 and Summary LSA.

Note: Default route is dynamically generated by OSPF in case of stub or totally stub.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 76
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Not So Stubby Area:

LSA-5 can be generated but cannot be received or you may say the ASBR generate addresses with a
type 7 LSA, the ABR converts a type 7 LSA to type 5 and sends it to other areas.

Represent O N1 and O N2 on router R2 and become O E1 and O E2 on router R3.

Note: Default route is not dynamically generated in NSSA. Administrator manually generates the default
route in NSSA whenever needed.

Totally NSSA:

LSA-5 and Summary LSAs are not be allowed in Totally NSSA but LSA-5 converts in LSA-7 and generated.
Default route dynamically generated.

In Summarized Form:

No Type 5 (External )LSA

Stub Area NO ASBR
Default route is generated by ABR.

No Type 3 (Summary)LSA
No Type 5 (External )LSA
Totally Stub Area
NO ASBR
Default route is dynamically generated

No Type 5 (External) LSA

ASBR Allowed
NSSA
Administrator manually generates the default
route

No Type 3 (Summary)LSA
No Type 5 (External )LSA
Totally NSSA
ASBR Allowed
Default route dynamically generated

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 77
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Lecture # 17
OSPF LSA Types LAB

FE0/0 FE0/0 FE0/0

[Link] [Link] [Link]
Static route on R3
S2/0 S2/1 [Link]/24
S2/0 S2/0 [Link]/24
[Link]
[Link] [Link] [Link] [Link]/24
Loopback 0 [Link]/24
R1 R2 [Link]

Task: Stub Area and Totally stubby Area

Task: Not So Stub Area and Totally Not So Stubby Area

NOTE: After basic and OSPF configuration on all routers.

Before Stub Area

R1#sho ip route ospf

C [Link]/8 is directly connected, Serial2/0
O IA [Link]/8 [110/128] via [Link], 00:05:33, Serial2/0
C [Link]/24 is directly connected, FastEthernet0/0
O [Link]/24 [110/65] via [Link], 00:05:33, Serial2/0
[Link]/32 is subnetted, 1 subnets
O IA [Link] [110/65] via [Link], 00:05:33, Serial2/0
O IA [Link]/24 [110/129] via [Link], 00:04:16, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:00:26, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:00:28, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:00:28, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:00:28, Serial2/0

R1#sho ip route Summary

IP routing table name is Default-IP-Routing-Table(0)

IP routing table maximum-paths is 16
Route Source Networks Subnets Overhead Memory (bytes)
connected 2 0 144 272
static 0 0 0 0
ospf 1 7 1 576 1088
Intra-area: 1 Inter-area: 3 External-1: 0 External-2: 4
NSSA External-1: 0 NSSA External-2: 0
internal 1 1156
Total 10 1 720 2516

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 78
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Configuring Stub Area on R1

Command Description
Privileged Exec Mode commands to Show
R1#Show ip route summary
Summarized Route information.

Command Description
R1(config)#router ospf 1 Router configuration Mode commands to make
R1(config-router)#area 1 stub stub area.

Router R1

R1(config)#router ospf 1
R1(config-router)#area 1 stub

*Mar 1 00:35:50.835: %OSPF-5-ADJCHG: Process 1, Nbr [Link] on Serial2/0 from FULL to DOWN,
Neighbor Down: Adjacency forced to reset  Regular area mismatch

R1#

*Mar 1 00:42:15.571: %OSPF-5-ADJCHG: Process 1, Nbr [Link] on Serial2/0 from LOADING to

FULL, Loading Done  Down to Full area matched

Now Configuring Stub Area on R2 because R1 and R2 are in Area 1.

*Mar 1 00:36:24.171: %OSPF-5-ADJCHG: Process 1, Nbr [Link] on Serial2/0 from FULL to

DOWN, Neighbor Down: Dead timer expired  Regular area mismatch

R2(config)#router ospf 1
R2(config-router)#area 1 stub

*Mar 1 00:42:14.279: %OSPF-5-ADJCHG: Process 1, Nbr [Link] on Serial2/0 from LOADING to

FULL, Loading Done  Down to Full area matched

After Configuring Stub Area there should not be LSA 5 on Router R1 And should be default route
injected by ABR.

R1#show ip route

C [Link]/8 is directly connected, Serial2/0

O IA [Link]/8 [110/128] via [Link], 00:08:00, Serial2/0
C [Link]/24 is directly connected, FastEthernet0/0
O [Link]/24 [110/65] via [Link], 00:08:00, Serial2/0
[Link]/32 is subnetted, 1 subnets
O IA [Link] [110/65] via [Link], 00:08:00, Serial2/0
O IA [Link]/24 [110/129] via [Link], 00:08:00, Serial2/0

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 79
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

O*IA [Link]/0 [110/65] via [Link], 00:08:00, Serial2/0

R1#show ip route summary

IP routing table name is Default-IP-Routing-Table(0)
IP routing table maximum-paths is 16
Route Source Networks Subnets Overhead Memory (bytes)
connected 2 0 144 272
static 0 0 0 0
ospf 1 4 1 360 680
Intra-area: 1 Inter-area: 4 External-1: 0 External-2: 0
NSSA External-1: 0 NSSA External-2: 0
internal 1 1156
Total 7 1 504 2108

Before Configuring Stub Area After Configuring Stub Area

R1#sho ip route ospf R1#show ip route

C [Link]/8 is directly connected, Serial2/0 C [Link]/8 is directly connected, Serial2/0

O IA [Link]/8 [110/128] via [Link], 00:05:33, Serial2/0 O IA [Link]/8 [110/128] via [Link], 00:08:00, Serial2/0
C [Link]/24 is directly connected, FastEthernet0/0 C [Link]/24 is directly connected, FastEthernet0/0
O [Link]/24 [110/65] via [Link], 00:05:33, Serial2/0 O [Link]/24 [110/65] via [Link], 00:08:00, Serial2/0
[Link]/32 is subnetted, 1 subnets [Link]/32 is subnetted, 1 subnets
O IA [Link] [110/65] via [Link], 00:05:33, Serial2/0 O IA [Link] [110/65] via [Link], 00:08:00, Serial2/0
O IA [Link]/24 [110/129] via [Link], 00:04:16, Serial2/0 O IA [Link]/24 [110/129] via [Link], 00:08:00, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:00:26, Serial2/0 O*IA [Link]/0 [110/65] via [Link], 00:08:00, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:00:28, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:00:28, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:00:28, Serial2/0

R1#show ip route summary R1#show ip route summary

IP routing table name is Default-IP-Routing-Table(0) IP routing table name is Default-IP-Routing-Table(0)

IP routing table maximum-paths is 16 IP routing table maximum-paths is 16
Route Source Networks Subnets Overhead Memory Route Source Networks Subnets Overhead Memory (bytes)
(bytes) connected 2 0 144 272
connected 2 0 144 272 static 0 0 0 0
static 0 0 0 0 ospf 1 4 1 360 680
ospf 1 7 1 576 1088 Intra-area: 1 Inter-area: 4 External-1: 0 External-2: 0
Intra-area: 1 Inter-area: 3 External-1: 0 External-2: 4 NSSA External-1: 0 NSSA External-2: 0
NSSA External-1: 0 NSSA External-2: 0 internal 1 1156
internal 1 1156 Total 7 1 504 2108
Total 10 1 720 2516

We have noted that:

No Type 5 (External )LSA
NO ASBR
Default route is generated by ABR.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 80
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Task: Total Stubby Area Configuration

Command Description
R2(config)#router ospf 1 Router configuration Mode commands to make
R2(config-router)#area 1 stub no-summary not so stubby area.

Note: As we know that the ABR generates the LSA-3 so we will configure Total Stubby Area on R2 (ABR).

Router R2

R2(config)#router ospf 1
R2(config-router)#area 1 stub no-summary

Before Configuring Totally Stub Area After Configuring Totally Stub Area

R1#show ip route R1#show ip route

C [Link]/8 is directly connected, Serial2/0 C [Link]/8 is directly connected, Serial2/0

O IA [Link]/8 [110/128] via [Link], 00:08:00, Serial2/0 C [Link]/24 is directly connected, FastEthernet0/0
C [Link]/24 is directly connected, FastEthernet0/0 O [Link]/24 [110/65] via [Link], 00:08:00, Serial2/0
O [Link]/24 [110/65] via [Link], 00:08:00, Serial2/0 O*IA [Link]/0 [110/65] via [Link], 00:08:00, Serial2/0
[Link]/32 is subnetted, 1 subnets
O IA [Link] [110/65] via [Link], 00:08:00, Serial2/0
O IA [Link]/24 [110/129] via [Link], 00:08:00, Serial2/0
O*IA [Link]/0 [110/65] via [Link], 00:08:00, Serial2/0

R1#show ip route summary R1#show ip route summary

IP routing table name is Default-IP-Routing-Table(0) IP routing table name is Default-IP-Routing-Table(0)

IP routing table maximum-paths is 16 IP routing table maximum-paths is 16
Route Source Networks Subnets Overhead Memory (bytes) Route Source Networks Subnets Overhead Memory (bytes)
connected 2 0 144 272 connected 2 0 144 272
static 0 0 0 0 static 0 0 0 0
ospf 1 4 1 360 680 ospf 1 2 0 144 272
Intra-area: 1 Inter-area: 4 External-1: 0 External-2: 0 Intra-area: 1 Inter-area: 1 External-1: 0 External-2: 0
NSSA External-1: 0 NSSA External-2: 0 NSSA External-1: 0 NSSA External-2: 0
internal 1 1156 Total 4 0 288 544
Total 7 1 504 2108

We have noted that:

No Type 3 (Network )LSA
No Type 5 (External )LSA
NO ASBR
Default route is generated by ABR.

Note: If there is already a static route on exist on R1 and R2 generated default route dynamically than
the administrative distance ll be noted for routing.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 81
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 82
 CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Task: NSSA and Totally NSSA Configuration

FE0/0 FE0/0 FE0/0

[Link] [Link] [Link]
Static route on R1 Static route on R3
[Link]/24 [Link]/24
[Link]/24 S2/0 S2/1 [Link]/24
S2/0 S2/0 [Link]/24
[Link]
[Link] [Link] [Link] [Link]/24
Loopback 0
R1 R2 [Link]

NOTE: After basic and OSPF configuration on all routers.

Note: Stub Area and NSSA are not configurable if we want to configure both Areas on Area 1.

NSSA configuration of Router R1

R1(config)#router ospf 1
R1(config-router)#area 1 nss
R1(config-router)#area 1 nssa
R1(config-router)#
*Mar 1 00:21:42.471: %OSPF-5-ADJCHG: Process 1, Nbr [Link] on Serial2/0 from FULL to DOWN,
Neighbor Down: Adjacency forced to reset

NSSA configuration of Router R2

R2(config)#router ospf 1
R2(config-router)#area
R2(config-router)#area 1 nss
R2(config-router)#area 1 nssa
R2(config-router)#
*Mar 1 00:23:04.111: %OSPF-5-ADJCHG: Process 1, Nbr [Link] on Serial2/0 from LOADING to
FULL, Loading Done

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 83
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Before NSSA Router R1 After NSSA Router R1

R1#show ip route R1#sho ip route

C [Link]/8 is directly connected, Serial2/0 C [Link]/8 is directly connected, Serial2/0

O IA [Link]/8 [110/128] via [Link], 00:06:54, Serial2/0 O IA [Link]/8 [110/128] via [Link], 00:01:16, Serial2/0
C [Link]/24 is directly connected, FastEthernet0/0 C [Link]/24 is directly connected, FastEthernet0/0
O [Link]/24 [110/65] via [Link], 00:06:54, Serial2/0 O [Link]/24 [110/65] via [Link], 00:01:16, Serial2/0
S [Link]/16 is directly connected, Null0 S [Link]/16 is directly connected, Null0
S [Link]/16 is directly connected, Null0 S [Link]/16 is directly connected, Null0
[Link]/32 is subnetted, 1 subnets [Link]/32 is subnetted, 1 subnets
O IA [Link] [110/65] via [Link], 00:06:54, Serial2/0 O IA [Link] [110/65] via [Link], 00:01:16, Serial2/0
O IA [Link]/24 [110/129] via [Link], 00:06:54, Serial2/0 O IA [Link]/24 [110/129] via [Link], 00:01:16, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:06:55, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:06:55, Serial2/0 No Type 5 (External) LSA
O E2 [Link]/24 [110/20] via [Link], 00:06:55, Serial2/0 ASBR Allowed
O E2 [Link]/24 [110/20] via [Link], 00:06:55, Serial2/0 No default route

R1#show ip route summary R1#show ip route summary

IP routing table name is Default-IP-Routing-Table(0) IP routing table name is Default-IP-Routing-Table(0)
IP routing table maximum-paths is 16 IP routing table maximum-paths is 16
Route Source Networks Subnets Overhead Memory (bytes) Route Source Networks Subnets Overhead Memory (bytes)
connected 2 0 144 272 connected 2 0 144 272
static 2 0 144 272 static 2 0 144 272
ospf 1 7 1 576 1088 ospf 1 3 1 288 544
Intra-area: 1 Inter-area: 3 External-1: 0 External-2: 4 Intra-area: 1 Inter-area: 3 External-1: 0 External-2: 0
NSSA External-1: 0 NSSA External-2: 0 NSSA External-1: 0 NSSA External-2: 0
internal 1 1156 internal 1 1156
Total 12 1 864 2788 Total 8 1 576 2244

Before NSSA Router R2 After NSSA Router R2

R2#sh ip route R2#show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2 i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route o - ODR, P - periodic downloaded static route

Gateway of last resort is not set Gateway of last resort is not set

C [Link]/8 is directly connected, Serial2/0 C [Link]/8 is directly connected, Serial2/0

C [Link]/8 is directly connected, Serial2/1 C [Link]/8 is directly connected, Serial2/1
O [Link]/24 [110/65] via [Link], 00:00:05, Serial2/0 O [Link]/24 [110/65] via [Link], 00:07:36, Serial2/0
C [Link]/24 is directly connected, FastEthernet0/0 C [Link]/24 is directly connected, FastEthernet0/0
O E2 [Link]/16 [110/20] via [Link], 00:00:05, Serial2/0 O N2 [Link]/16 [110/20] via [Link], 00:07:36, Serial2/0
O E2 [Link]/16 [110/20] via [Link], 00:00:05, Serial2/0 O N2 [Link]/16 [110/20] via [Link], 00:07:36, Serial2/0
[Link]/32 is subnetted, 1 subnets [Link]/32 is subnetted, 1 subnets
C [Link] is directly connected, Loopback1 C [Link] is directly connected, Loopback1
O [Link]/24 [110/65] via [Link], 00:03:22, Serial2/1 O [Link]/24 [110/65] via [Link], 00:07:46, Serial2/1
O E2 [Link]/24 [110/20] via [Link], 00:00:06, Serial2/1 O E2 [Link]/24 [110/20] via [Link], 00:07:38, Serial2/1
O E2 [Link]/24 [110/20] via [Link], 00:00:06, Serial2/1 O E2 [Link]/24 [110/20] via [Link], 00:07:38, Serial2/1
O E2 [Link]/24 [110/20] via [Link], 00:00:06, Serial2/1 O E2 [Link]/24 [110/20] via [Link], 00:07:38, Serial2/1
O E2 [Link]/24 [110/20] via [Link], 00:00:06, Serial2/1 O E2 [Link]/24 [110/20] via [Link], 00:07:38, Serial2/1
R2#sh ip route summary R2#show ip route summary
IP routing table name is Default-IP-Routing-Table(0) IP routing table name is Default-IP-Routing-Table(0)
IP routing table maximum-paths is 16 IP routing table maximum-paths is 16
Route Source Networks Subnets Overhead Memory (bytes) Route Source Networks Subnets Overhead Memory (bytes)
connected 3 1 288 544 connected 3 1 288 544
static 0 0 0 0 static 0 0 0 0
ospf 1 8 0 576 1088 ospf 1 8 0 576 1088
Intra-area: 2 Inter-area: 0 External-1: 0 External-2: 6 Intra-area: 2 Inter-area: 0 External-1: 0 External-2: 4
NSSA External-1: 0 NSSA External-2: 0 NSSA External-1: 0 NSSA External-2: 2
internal 1 1156 internal 1 1156
Total 12 1 864 2788 Total 12 1 864 27881 576 2244
O N2 [Link]/16 [110/20] via [Link], 00:07:36, Serial2/0
Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 84
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

O N2 [Link]/16 [110/20] via [Link], 00:07:36, Serial2/0

These routes are received by R2 As LSA-7 and sends to Router R3 as a LSA-5

R3#show ip route

O IA [Link]/8 [110/128] via [Link], 00:13:25, Serial2/0

C [Link]/8 is directly connected, Serial2/0
O IA [Link]/24 [110/129] via [Link], 00:13:16, Serial2/0
O IA [Link]/24 [110/65] via [Link], 00:13:25, Serial2/0
O E2 [Link]/16 [110/20] via [Link], 00:13:10, Serial2/0  LSA-7 to LSA-5
O E2 [Link]/16 [110/20] via [Link], 00:13:10, Serial2/0  LSA-7 to LSA-5
[Link]/32 is subnetted, 1 subnets
O [Link] [110/65] via [Link], 00:13:25, Serial2/0
C [Link]/24 is directly connected, FastEthernet0/0
S [Link]/24 is directly connected, Null0
S [Link]/24 is directly connected, Null0
S [Link]/24 is directly connected, Null0
S [Link]/24 is directly connected, Null0

Now for Default route configuration manually on Router R2 (ABR )

R2(config)#router ospf 1

R2(config-router)#area 1 nssa default-information-originate

Note: Default route is not a good idea.

On R1 default route will show as LSA-7

Gateway of last resort is [Link] to network [Link]

C [Link]/8 is directly connected, Serial2/0

O IA [Link]/8 [110/128] via [Link], 00:20:13, Serial2/0
C [Link]/24 is directly connected, FastEthernet0/0
O [Link]/24 [110/65] via [Link], 00:20:13, Serial2/0
S [Link]/16 is directly connected, Null0
S [Link]/16 is directly connected, Null0
[Link]/32 is subnetted, 1 subnets
O IA [Link] [110/65] via [Link], 00:20:13, Serial2/0
O IA [Link]/24 [110/129] via [Link], 00:20:13, Serial2/0
O*N2 [Link]/0 [110/1] via [Link], 00:01:46, Serial2/0  Manually Default route as LSA-7

Task: Totally NSSA Configuration

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 85
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

R2(config)#router ospf 1

R2(config-router)#area 1 nssa no-summary

Before NSSA Router R1 After NSSA Router R1

R1#sh ip route R1#show ip route

Gateway of last resort is [Link] to network [Link] Gateway of last resort is [Link] to network [Link]

C [Link]/8 is directly connected, Serial2/0 C [Link]/8 is directly connected, Serial2/0

O IA [Link]/8 [110/128] via [Link], 00:20:13, Serial2/0 C [Link]/24 is directly connected, FastEthernet0/0
C [Link]/24 is directly connected, FastEthernet0/0 O [Link]/24 [110/65] via [Link], 00:27:24, Serial2/0
O [Link]/24 [110/65] via [Link], 00:20:13, Serial2/0 S [Link]/16 is directly connected, Null0
S [Link]/16 is directly connected, Null0 S [Link]/16 is directly connected, Null0
S [Link]/16 is directly connected, Null0 O*IA [Link]/0 [110/65] via [Link], 00:02:39, Serial2/0
[Link]/32 is subnetted, 1 subnets R1#
O IA [Link] [110/65] via [Link], 00:20:13, Serial2/0
O IA [Link]/24 [110/129] via [Link], 00:20:13, Serial2/0
O*N2 [Link]/0 [110/1] via [Link], 00:01:46, Serial2/0

R1#show ip route summary R1#show ip route summary

IP routing table name is Default-IP-Routing-Table(0)
IP routing table maximum-paths is 16 IP routing table name is Default-IP-Routing-Table(0)
Route Source Networks Subnets Overhead Memory (bytes) IP routing table maximum-paths is 16
connected 2 0 144 272 Route Source Networks Subnets Overhead Memory (bytes)
static 2 0 144 272 connected 2 0 144 272
ospf 1 3 1 288 544 static 2 0 144 272
Intra-area: 1 Inter-area: 3 External-1: 0 External-2: 0 ospf 1 2 0 144 272
NSSA External-1: 0 NSSA External-2: 0 Intra-area: 1 Inter-area: 1 External-1: 0 External-2: 0
internal 1 1156 NSSA External-1: 0 NSSA External-2: 0
Total 8 1 576 2244 Total 6 0 432 816

Here we have noted that:

No Type 3 (Summary)LSA
No Type 5 (External )LSA
ASBR Allowed
Default route dynamically generated

Note: Technically Router 1 have two default routes form Router 2 one as LSA-7 and other as LSA-3 as
default route. Lowest LSA highest priority.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 86
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Lecture # 18
Route Summarization/Supernetting Or Classless Inter Domain Routing:
Route Summarization is combining several IP network addresses into one IP network address. It reduces
the number of entries in a routing table.

Let say we have a range and we want to summarize these addresses. How?

[Link]/24 To [Link]/24

Solution: Firstly, the addresses are converted into binary format.

For Every Octet 128 64 32 16 8 4 2 1

Address Range 1st Octet 2nd Octet 3rd Octet 4th Octet
[Link] 11000000 10101000 00000000 00000000
[Link] 11000000 10101000 00000001 00000000
[Link] 11000000 10101000 00000010 00000000
[Link] 11000000 10101000 00000011 00000000

Secondly, match the common bits (which are shown in black). Lastly, the numbers of common bits are
counted i.e. 22. The summary route is found by setting the mismatched bits to zero, as shown below. It
is followed by a slash and then the number of common bits.

1st Octet 2nd Octet 3rd Octet 4th Octet Address Netmask
11000000 10101000 00000000 00000000 [Link] /22

Or More precisely: Binary to Decimal (Plus the all bits “1”)

For Every
128 64 32 16 8 4 2 1 Address
Octet
st
1 Octet 1 1 0 0 0 0 0 0 64+128=192
2nd Octet 1 0 1 0 1 0 0 0 128+32+8=168
3rd Octet 0 0 0 0 0 0 0 0 0
4th Octet 0 0 0 0 0 0 0 0 0

Subnet mask: By converting all 22 matched bits to “1” and mismatched bits to “0”.

For Every
128 64 32 16 8 4 2 1 Subnet Mask
Octet
st
1 Octet 1 1 1 1 1 1 1 1 64+128+32+16+8+4+2+1=255
2nd Octet 1 1 1 1 1 1 1 1 64+128+32+16+8+4+2+1=255
3rd Octet 1 1 1 1 1 1 0 0 64+128+32+16+8+4+0+0=252
4th Octet 0 0 0 0 0 0 0 0 0+0+0+0+0+0+0+0=0

The summarized route is [Link]/22. The subnet mask is [Link].

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 87
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Another Example: [Link]/24 to [Link]/24

Firstly, the addresses are converted into binary format.

For Every Octet 128 64 32 16 8 4 2 1

Address Range 1st Octet 2nd Octet 3rd Octet 4th Octet
[Link] 11000000 10101000 00000100 00000000
[Link] 11000000 10101000 00000101 00000000
[Link] 11000000 10101000 00000110 00000000
[Link] 11000000 10101000 00000111 00000000
[Link] 11000000 10101000 00001000 00000000

Secondly, match the common bits (which are shown in black). Lastly, the number of common bits is
counted i.e 20. The summary route is found by setting the mismatched bits to zero, as shown below. It is
followed by a slash and then the number of common bits.

Octets 1st Octet 2nd Octet 3rd Octet 4th Octet Netmask
Binary 11000000 10101000 00000000 00000000
Decimal 192 168 0 0 /20

The summarized route is [Link]/20. The subnet mask is [Link].

Note: Outgoing interface must be same and single to perform Route Summarization. It is performed for
resource management. [Link]/18
Interface S/0/0/0

Shortest Way for Route Summarization: What if we have a range from 1 to 65 than?

First and the last address of the range, is converted into binary format:

Address Range 1st Octet 2nd Octet 3rd Octet 4th Octet
[Link] 11000000 10101000 00000001 00000000
[Link] 11000000 10101000 00100001 00000000

Secondly, match the common bits (which are shown in black). Lastly, the number of common bits is
counted i.e 18. The summary route is found by setting the mismatched bits to zero, as shown below. It is
followed by a slash and then the number of common bits.

Octets 1st Octet 2nd Octet 3rd Octet 4th Octet Netmask
Binary 11000000 10101000 00000000 00000000
Decimal 192 168 0 0 /18

The summarized route is [Link]/18. The subnet mask is [Link].

Note: This is the best way of calculation for route summarization. There is another way for
summarization please listen the audio of 18th lecture ”Route Summarization”.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 88
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Subnet Mask Table with Prefix Length

Mask In Binary Prefix Length Subnet Mask

1111 1111 0000 0000 0000 0000 0000 0000 /8 [Link]
1111 1111 1000 0000 0000 0000 0000 0000 /9 [Link]
1111 1111 1100 0000 0000 0000 0000 0000 /10 [Link]
1111 1111 1110 0000 0000 0000 0000 0000 /11 [Link]
1111 1111 1111 0000 0000 0000 0000 0000 /12 [Link]
1111 1111 1111 1000 0000 0000 0000 0000 /13 [Link]
1111 1111 1111 1100 0000 0000 0000 0000 /14 [Link]
1111 1111 1111 1110 0000 0000 0000 0000 /15 [Link]
1111 1111 1111 1111 0000 0000 0000 0000 /16 [Link]
1111 1111 1111 1111 1000 0000 0000 0000 /17 [Link]
1111 1111 1111 1111 1100 0000 0000 0000 /18 [Link]
1111 1111 1111 1111 1110 0000 0000 0000 /19 [Link]
1111 1111 1111 1111 1111 0000 0000 0000 /20 [Link]
1111 1111 1111 1111 1111 1000 0000 0000 /21 [Link]
1111 1111 1111 1111 1111 1100 0000 0000 /22 [Link]
1111 1111 1111 1111 1111 1110 0000 0000 /23 [Link]
1111 1111 1111 1111 1111 1111 0000 0000 /24 [Link]
1111 1111 1111 1111 1111 1111 1000 0000 /25 [Link]
1111 1111 1111 1111 1111 1111 1100 0000 /26 [Link]
1111 1111 1111 1111 1111 1111 1110 0000 /27 [Link]
1111 1111 1111 1111 1111 1111 1111 0000 /28 [Link]
1111 1111 1111 1111 1111 1111 1111 1000 /29 [Link]
1111 1111 1111 1111 1111 1111 1111 1100 /30 [Link]
1111 1111 1111 1111 1111 1111 1111 1110 /31 [Link]
1111 1111 1111 1111 1111 1111 1111 1111 /32 [Link]

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 89
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

OSPF Route Summarization:

Route Summarization is always manually performed in OSPF. BGP, RIPv2 and EIGRP Auto and manually
both are supported.

Note: In OSPF there are only two LSAs on which Route Summarization is performed i.e. LSA-3 and LSA-5
or Route Summarization In OSPF, is only supported for LSA-3 and LSA-5.

Route Summarization for LSA-3 in configured on ABR and Route Summarization for LSA-5 is configured
on ASBR.

Route Summarization LAB

Area 0 Static route on R3
[Link]/24
FE0/0 FE0/0 FE0/0 [Link]/24
[Link] [Link] [Link]
[Link]/24
[Link]/24
S2/0 S2/1
S2/0 S2/0
[Link]
[Link] [Link] [Link]
Loopback 0
R1 R2 [Link] R3 Loopback Interfaces on R3
Area 1 [Link]/24
[Link]/24
[Link]/24
[Link]/24

Route Summarization Calculation:

First and the last address of the range, is converted into binary format:

Address Range 1st Octet 2nd Octet 3rd Octet 4th Octet
[Link] 11000000 10101000 00000001 00000000
[Link] 11000000 10101000 00000011 00000000

Secondly, match the common bits (which are shown in black). Lastly, the number of common bits is
counted i.e 22. The summary route is found by setting the mismatched bits to zero, as shown below. It is
followed by a slash and then the number of common bits.

Subnet mask: By converting all 22 matched bits to “1” and mismatched bits to “0”.

Octets 1st Octet 2nd Octet 3rd Octet 4th Octet Netmask
Address Binary 11000000 10101000 00000000 00000000
Address Decimal 192 168 0 0 /22
Subnet Mask Binary 11111111 11111111 11111100 00000000
Subnet Mask Decimal 255 255 252 0

The summarized route is [Link]/22. The subnet mask is [Link].

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 90
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

First and the last address of a range, is converted into binary format:

Address Range 1st Octet 2nd Octet 3rd Octet 4th Octet
[Link] 10101100 00001000 00000000 00000000
[Link] 10101100 00001011 00000000 00000000

Secondly, match the common bits (which are shown in black). Lastly, the number of common bits is
counted i.e 14. The summary route is found by setting the mismatched bits to zero, as shown below. It is
followed by a slash and then the number of common bits.

Subnet mask: By converting all 14 matched bits to “1” and mismatched bits to “0”.

Octets 1st Octet 2nd Octet 3rd Octet 4th Octet Netmask
Address Binary 11000000 00001000 00000000 00000000
Address Decimal 192 16 0 0 /14
Subnet Mask Binary 11111111 11111100 00000000 00000000
Subnet Mask Decimal 255 252 0 0

The summarized route is [Link]/14. The subnet mask is [Link].

Router R1
R1(config)#router ospf 1
R1(config-router)#network [Link] [Link] area 1
R1(config-router)#network [Link] [Link] area 1

Router R2
R2(config-router)#network [Link] [Link] area 1
*Mar 1 00:15:09.323: %OSPF-5-ADJCHG: Process 1, Nbr [Link] on Serial2/0 from LOADING to
FULL, Loading Done
R2(config-router)#network [Link] [Link] area 1
R2(config-router)#net [Link] [Link] area 0
R2(config-router)#net [Link] [Link] area 0

Router R3
R3(config)#router ospf 1
R3(config-router)#network [Link] [Link] area 0
*Mar 1 00:20:42.139: %OSPF-5-ADJCHG: Process 1, Nbr [Link] on Serial2/0 from LOADING to
FULL, Loading Done
R3(config-router)#network [Link] [Link] area 0
R3(config-router)#network [Link] [Link] area 0
R3(config-router)#network [Link] [Link] area 0
R3(config-router)#network [Link] [Link] area 0
R3(config-router)#network [Link] [Link] area 0
R3(config-router)#redistribute static subnets

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 91
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Configuring Route Summarization for LSA – 5 on Router R3 (ASBR).

Command Description
R3(config)#router ospf 1 Router configuration Mode commands to
R3(config-router)# summary-address <summary Summarized Routes.
address> <summary mask>

R3(config)#router ospf 1

R3(config-router)#summary-address [Link] [Link]

Before Route Summarization R1 Before Route Summarization R1

R1#show ip route ospf R1#show ip route ospf
O IA [Link]/8 [110/128] via [Link], 00:37:42, Serial2/0 O IA [Link]/8 [110/128] via [Link], 01:03:25, Serial2/0
O [Link]/24 [110/65] via [Link], 00:37:52, Serial2/0 O [Link]/24 [110/65] via [Link], 01:03:34, Serial2/0
[Link]/32 is subnetted, 1 subnets [Link]/32 is subnetted, 1 subnets
O IA [Link] [110/129] via [Link], 00:29:46, Serial2/0 O IA [Link] [110/129] via [Link], 00:55:28, Serial2/0
[Link]/32 is subnetted, 1 subnets [Link]/32 is subnetted, 1 subnets
O IA [Link] [110/129] via [Link], 00:29:56, Serial2/0 O IA [Link] [110/129] via [Link], 00:55:39, Serial2/0
[Link]/32 is subnetted, 1 subnets [Link]/32 is subnetted, 1 subnets
O IA [Link] [110/129] via [Link], 00:29:36, Serial2/0 O IA [Link] [110/129] via [Link], 00:55:18, Serial2/0
[Link]/32 is subnetted, 1 subnets [Link]/32 is subnetted, 1 subnets
O IA [Link] [110/129] via [Link], 00:29:46, Serial2/0 O IA [Link] [110/129] via [Link], 00:55:28, Serial2/0
[Link]/32 is subnetted, 1 subnets [Link]/32 is subnetted, 1 subnets
O IA [Link] [110/65] via [Link], 00:37:52, Serial2/0 O IA [Link] [110/65] via [Link], 01:03:34, Serial2/0
O IA [Link]/24 [110/129] via [Link], 00:32:59, Serial2/0 O IA [Link]/24 [110/129] via [Link], 00:58:41, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:24:57, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:24:57, Serial2/0 O E2 [Link]/22 [110/20] via [Link], 00:10:33, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:24:57, Serial2/0 (Summarized)
O E2 [Link]/24 [110/20] via [Link], 00:24:57, Serial2/0

R1#show ip route summary R1#show ip route summary

IP routing table name is Default-IP-Routing-Table(0) IP routing table name is Default-IP-Routing-Table(0)
IP routing table maximum-paths is 16 IP routing table maximum-paths is 16
Route Source Networks Subnets Overhead Memory (bytes) Route Source Networks Subnets Overhead Memory (bytes)
connected 2 0 144 272 connected 2 0 144 272
static 0 0 0 0 static 0 0 0 0
ospf 1 7 5 864 1632 ospf 1 4 5 648 1224
Intra-area: 1 Inter-area: 7 External-1: 0 External-2: 4 Intra-area: 1 Inter-area: 7 External-1: 0 External-2: 1
NSSA External-1: 0 NSSA External-2: 0 NSSA External-1: 0 NSSA External-2: 0
internal 5 5780 internal 5 5780
Total 14 5 1008 7684 Total 11 5 792 7276

Before Route Summarization R2 Before Route Summarization R2

R2#sh ip route ospf R2#show ip route ospf
O [Link]/24 [110/65] via [Link], 00:38:13, Serial2/0 O [Link]/24 [110/65] via [Link], 00:53:36, Serial2/0
[Link]/32 is subnetted, 1 subnets [Link]/32 is subnetted, 1 subnets
O [Link] [110/65] via [Link], 00:25:23, Serial2/1 O [Link] [110/65] via [Link], 00:40:47, Serial2/1
[Link]/32 is subnetted, 1 subnets [Link]/32 is subnetted, 1 subnets
O [Link] [110/65] via [Link], 00:25:23, Serial2/1 O [Link] [110/65] via [Link], 00:40:47, Serial2/1
[Link]/32 is subnetted, 1 subnets [Link]/32 is subnetted, 1 subnets
O [Link] [110/65] via [Link], 00:25:23, Serial2/1 O [Link] [110/65] via [Link], 00:40:47, Serial2/1
[Link]/32 is subnetted, 1 subnets [Link]/32 is subnetted, 1 subnets
O [Link] [110/65] via [Link], 00:25:23, Serial2/1 O [Link] [110/65] via [Link], 00:40:47, Serial2/1
O [Link]/24 [110/65] via [Link], 00:25:23, Serial2/1 O [Link]/24 [110/65] via [Link], 00:40:47, Serial2/1
O E2 [Link]/24 [110/20] via [Link], 00:25:23, Serial2/1 O E2 [Link]/22 [110/20] via [Link], 00:00:35, Serial2/1
O E2 [Link]/24 [110/20] via [Link], 00:25:23, Serial2/1
O E2 [Link]/24 [110/20] via [Link], 00:25:23, Serial2/1
O E2 [Link]/24 [110/20] via [Link], 00:25:23, Serial2/1

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 92
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

R1#show ip route summary R2#show ip route summary

IP routing table name is Default-IP-Routing-Table(0)
IP routing table name is Default-IP-Routing-Table(0) IP routing table maximum-paths is 16
IP routing table maximum-paths is 16 Route Source Networks Subnets Overhead Memory (bytes)
Route Source Networks Subnets Overhead Memory (bytes) connected 3 1 288 544
connected 2 0 144 272 static 0 0 0 0
static 0 0 0 0 ospf 1 3 4 504 952
ospf 1 7 5 864 1632
Intra-area: 1 Inter-area: 7 External-1: 0 External-2: 4 Intra-area: 6 Inter-area: 0 External-1: 0 External-2: 1
NSSA External-1: 0 NSSA External-2: 0 NSSA External-1: 0 NSSA External-2: 0
internal 5 5780 internal 5 5780
Total 14 5 1008 7684 Total 11 5 792 7276

Route Summarization for Loopback Addresses Range on Router 2 (ABR) for LSA-3.

Command Description
R2(config)#router ospf 1 Router configuration Mode commands to
R2(config-router)# area 0 range <summary Summarized Routes on ABR.
address> <summary mask>

R2(config)#router ospf 1

R2(config-router)#area 0 range [Link] [Link]

*Mar 1 01:37:58.291: %OSPF-4-CONFLICTING_LSAID: LSA origination prevented by existing LSA with same LSID but a different mask
Existing Type 3 LSA: LSID [Link]/14
New Destination: [Link]/32

Before Route Summarization R1 Before Route Summarization R1

R1#show ip route ospf R1#show ip route ospf
O IA [Link]/8 [110/128] via [Link], 01:03:25, Serial2/0 O IA [Link]/8 [110/128] via [Link], 01:24:33, Serial2/0
O [Link]/24 [110/65] via [Link], 01:03:34, Serial2/0 O [Link]/24 [110/65] via [Link], 01:24:42, Serial2/0
[Link]/32 is subnetted, 1 subnets [Link]/32 is subnetted, 1 subnets
O IA [Link] [110/129] via [Link], 00:55:28, Serial2/0 O IA [Link] [110/65] via [Link], 01:24:42, Serial2/0
[Link]/32 is subnetted, 1 subnets O IA [Link]/24 [110/129] via [Link], 01:19:49, Serial2/0
O IA [Link] [110/129] via [Link], 00:55:39, Serial2/0
[Link]/32 is subnetted, 1 subnets O IA [Link]/14 [110/129] via [Link], 00:02:51, Serial2/0
O IA [Link] [110/129] via [Link], 00:55:18, Serial2/0 Summarized LSA-3
[Link]/32 is subnetted, 1 subnets
O IA [Link] [110/129] via [Link], 00:55:28, Serial2/0 O E2 [Link]/22 [110/20] via [Link], 00:02:46, Serial2/0
[Link]/32 is subnetted, 1 subnets Summarized LSA-5
O IA [Link] [110/65] via [Link], 01:03:34, Serial2/0
O IA [Link]/24 [110/129] via [Link], 00:58:41, Serial2/0

O E2 [Link]/22 [110/20] via [Link], 00:10:33, Serial2/0

R1#show ip route summary R1#show ip route summary

IP routing table name is Default-IP-Routing-Table(0) IP routing table name is Default-IP-Routing-Table(0)
IP routing table maximum-paths is 16 IP routing table maximum-paths is 16
Route Source Networks Subnets Overhead Memory (bytes) Route Source Networks Subnets Overhead Memory (bytes)
connected 2 0 144 272 connected 2 0 144 272
static 0 0 0 0 static 0 0 0 0
ospf 1 4 5 648 1224 ospf 1 5 1 432 816
Intra-area: 1 Inter-area: 7 External-1: 0 External-2: 1 Intra-area: 1 Inter-area: 4 External-1: 0 External-2: 1
NSSA External-1: 0 NSSA External-2: 0 NSSA External-1: 0 NSSA External-2: 0
internal 5 5780 internal 1 1156
Total 11 5 792 7276 Total 8 1 576 2244

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 93
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Route Filtering Overview in OSPF

Prefix List or IP Prefix List:

It is like ACL. Policy making and implementation both are available in Prefix list with littler change in ACL
we use wildcard mask with network and in Prefix list we use variable length like in [Link]/24.
Where [Link] is prefix and /24 is a prefix length. Permit and deny mechanism performed in Prefix
List.

IP prefix-list CCNP deny [Link]/24

Note: ACL is used for packet filtering and Prefix list is used to filter routes.

Prefix & length both should be same you want to permit/deny. If [Link] prefix is same but length
is /25 than prefix list does not work properly.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 94
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Lecture # 19
As we discussed in previous lecture, “Route Summarization” performed on LSA- 3 and LSA- 5. For LSA-5
configuring on ASBR by “summary-address” command and for LSA-3 on ABR by “area 0 range”
command.

Now we’ll filter different LSAs in OSPF. After applying filtration on LSAs, communication will stop. In
summarization summarized route is injected for communication but in filtration there is no concept of
default route or summarized route.

Following tools are used for filtering:

Prefix List or IP Prefix List

Prefix is a route or network with its length i.e. [Link]/24. Prefix list deny/permit prefix.

In CCNA we have read two kinds of ACL Standard and Extended. Standard ACL is a Source IP based.
Deny/permit packet with source IP on the other hand Extended ACL is a source IP, destination IP and
port number based. Port number mean protocol like ping, telnet etc. Deny/permit ping, http, ftp or
telnet traffic is performed in extended ACL.

But prefix list is little different form ACL, it denies/permit route or network, incoming or outgoing.

Note: Deny and permit in Prefix-List exact match of prefix and its length is must. ip prefix-list CCNP deny
[Link]/24.

If asked for summarized single IP than base network will summarized for it, for example:

[Link]/32 is a single subnetted and its base network is [Link]/8. [Link]/8 is summarized for [Link]/32.

Distributed List:

It is different from ACL, prefix list and route map. “It is used for implementation ACL, route map and
prefix list, only in routing protocols”.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 95
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Task: Deny O E2 [Link]/24 with prefix list on R1 Static route on R3

[Link]/24
[Link]/24
[Link]/24
FE0/0 FE0/0 FE0/0
[Link] [Link] [Link] [Link]/24

S2/0 S2/1
S2/0 S2/0
[Link] Loopback Interfaces on R3
[Link] [Link] [Link]
Loopback 0
[Link]/24
R1 R2 [Link] [Link]/24
[Link]/24
[Link]/24

Note: OSPF configured routers.

Router R1
Command Description
#ip prefix-list name [ seq number ] { permit | Global configuration Mode command for Prefix-
deny } prefix [ eq length | [ ge length ] [ le list.
length ]]

Conf t
R1(config)#ip prefix-list OE2 deny [Link]/24 le 26
R1(config)#ip prefix-list OE2 permit [Link]/0 le 32

Le: Specifies the prefix length to match. The range is from 1 to 32

Command Description
Router configuration Mode command to
#distribute-list prefix {name} in
implement Prefix-list.

R1(config-router)#distribute-list prefix OE2 in

Before Route filtration on R1 After Route filtration on R1

R1#sh ip route ospf R1#Clear Ip route *
O IA [Link]/8 [110/128] via [Link], 00:19:57, Serial2/0 R1#sh ip route ospf
O [Link]/24 [110/65] via [Link], 00:19:57, Serial2/0 O IA [Link]/8 [110/128] via [Link], 00:19:57, Serial2/0
[Link]/32 is subnetted, 1 subnets O [Link]/24 [110/65] via [Link], 00:19:57, Serial2/0
O IA [Link] [110/129] via [Link], 00:19:47, Serial2/0 [Link]/32 is subnetted, 1 subnets
[Link]/32 is subnetted, 1 subnets O IA [Link] [110/129] via [Link], 00:19:47, Serial2/0
O IA [Link] [110/129] via [Link], 00:19:47, Serial2/0 [Link]/32 is subnetted, 1 subnets
[Link]/32 is subnetted, 1 subnets O IA [Link] [110/129] via [Link], 00:19:47, Serial2/0
O IA [Link] [110/129] via [Link], 00:19:47, Serial2/0 [Link]/32 is subnetted, 1 subnets
[Link]/32 is subnetted, 1 subnets O IA [Link] [110/129] via [Link], 00:19:47, Serial2/0
O IA [Link] [110/129] via [Link], 00:19:47, Serial2/0 [Link]/32 is subnetted, 1 subnets
[Link]/32 is subnetted, 1 subnets O IA [Link] [110/129] via [Link], 00:19:47, Serial2/0
O IA [Link] [110/65] via [Link], 00:19:57, Serial2/0 [Link]/32 is subnetted, 1 subnets
O IA [Link]/24 [110/129] via [Link], 00:19:47, Serial2/0 O IA [Link] [110/65] via [Link], 00:19:57, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:19:37, Serial2/0 O IA [Link]/24 [110/129] via [Link], 00:19:47, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:19:37, Serial2/0 O E2 [Link]/24 [110/20] via [Link], 00:19:37, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:19:37, Serial2/0 No O E2 filtered [Link]/24
O E2 [Link]/24 [110/20] via [Link], 00:19:37, Serial2/0 O E2 [Link]/24 [110/20] via [Link], 00:19:37, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:19:37, Serial2/0

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 96
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Command Description
Exec Mode command to refresh routing table.
#Clear Ip route *
Delete expired entries immediately.

Area Specific Filtration

Suppose we want to filter prefix [Link]/32 for Area 1.

Configuration of Area filter, applies on ABR.

R1(config)#ip prefix-list BLB deny [Link]/32

R1(config)#ip prefix-list BLB permit [Link]/0 le 32

Command Description
Router configuration Mode command for Area
(config-router)#area 1 filter-list prefix {name} in
specific filtration.

R2(config-router)#area 1 filter-list prefix BLB in

Note: If applying “ip prefix-list” on router R2 to deny [Link]/32 than it denies this prefix on router R2
but Router R1 still receive [Link]/32 from R2. Why? Applying Ip prefix list we use Distribute list that
applies between Routing DB and Routing Table it denies/permits path in RT not in DB.
Can be verify by “show ip ospf database“ and “show ip route ospf” in exec mode on Router R2 after
applying distribute list on Router R2. Same as on Router R1.

Before Route filtration on R1 After Route filtration on R1

R1#sh ip route ospf R1#Clear Ip route *
O IA [Link]/8 [110/128] via [Link], 00:19:57, Serial2/0 R1#sh ip route ospf
O [Link]/24 [110/65] via [Link], 00:19:57, Serial2/0 O IA [Link]/8 [110/128] via [Link], 00:19:57, Serial2/0
[Link]/32 is subnetted, 1 subnets O [Link]/24 [110/65] via [Link], 00:19:57, Serial2/0
O IA [Link] [110/129] via [Link], 00:19:47, Serial2/0 [Link]/32 is subnetted, 1 subnets
[Link]/32 is subnetted, 1 subnets O IA [Link] [110/129] via [Link], 00:19:47, Serial2/0
O IA [Link] [110/129] via [Link], 00:19:47, Serial2/0 No Entry for [Link]/32
[Link]/32 is subnetted, 1 subnets O IA [Link] [110/129] via [Link], 00:19:47, Serial2/0
O IA [Link] [110/129] via [Link], 00:19:47, Serial2/0 [Link]/32 is subnetted, 1 subnets
[Link]/32 is subnetted, 1 subnets O IA [Link] [110/129] via [Link], 00:19:47, Serial2/0
O IA [Link] [110/129] via [Link], 00:19:47, Serial2/0 [Link]/32 is subnetted, 1 subnets
[Link]/32 is subnetted, 1 subnets O IA [Link] [110/65] via [Link], 00:19:57, Serial2/0
O IA [Link] [110/65] via [Link], 00:19:57, Serial2/0 O IA [Link]/24 [110/129] via [Link], 00:19:47, Serial2/0
O IA [Link]/24 [110/129] via [Link], 00:19:47, Serial2/0 O E2 [Link]/24 [110/20] via [Link], 00:19:37, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:19:37, Serial2/0 O E2 [Link]/24 [110/20] via [Link], 00:19:37, Serial2/0
No O E2 filtered [Link]/24 O E2 [Link]/24 [110/20] via [Link], 00:19:37, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:19:37, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:19:37, Serial2/0

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 97
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

OSPF Virtual Link

Design Problem: Area 2 is not connected with backbone Area 0.

As we know, two regular areas do not communicate directly, backbone area is must between two
regular areas. There is a solution for it i.e. OSP Virtual Link.

Note: Virtual Link is not at all reliable/stable solution.

• OSPF Virtual Link behaves like a tunnel.

• Virtual Link connects a regular area with a backbone area.

Conditions to Implement Virtual Link.

1. Virtual Link is always configured between two routers/routing devices. It can be a multilayer
switch (MLS)
2. One Router must be ABR.
3. These two routers must have a common regular area between them.

Now we have to confirm which two routers are suitable for virtual link as we know that virtual link is
created between two routers in which one router must be ABR and a common regular area is must .

Virtual Link is not suitable between R2 and R3 it is suitable between R1 and R2 because conditions are
fulfilled.

Note: Virtual link is by default exist in Area 0.

Now R2 is Virtually ABR and there are total two links between R1 and R2. Virtual link encapsulated in
Area1.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 98
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Note: Two times neighbor ship is performed between R1 and R2 because of one physical link and one due
to virtual link.

Virtual link’s configuration is dependent upon Router ID.

Configuration before Virtual Link as in the figure above

Router R1
R1(config)#router ospf 1
R1(config-router)#network [Link] [Link] area 0
R1(config-router)#network [Link] [Link] area 1

Router R2
R2(config)#router ospf 1
R2(config-router)#network [Link] [Link] area 1
R2(config-router)#network [Link] [Link] area 1
*Mar 1 00:16:01.931: %OSPF-5-ADJCHG: Process 1, Nbr [Link] on Serial2/0 from LOADING to
FULL, Loading Done
R2(config-router)#network [Link] [Link] area 2
R2(config-router)#network [Link] [Link] area 2

Router R3
R3(config)#router ospf 1
R3(config-router)#network [Link] [Link] area 2
R3(config-router)#network [Link] [Link] area 2

R1#sho ip route
C [Link]/8 is directly connected, Serial2/0
C [Link]/24 is directly connected, FastEthernet0/0
O [Link]/24 [110/65] via [Link], 00:08:50, Serial2/0

R1#sh ip ospf neighbor

Neighbor ID Pri State Dead Time Address Interface

[Link] 0 FULL/ - 00:00:35 [Link] Serial2/0

R2#sh ip route
C [Link]/8 is directly connected, Serial2/0
C [Link]/8 is directly connected, Serial2/1
O IA [Link]/24 [110/65] via [Link], 00:07:03, Serial2/0
C [Link]/24 is directly connected, FastEthernet0/0
[Link]/32 is subnetted, 1 subnets
C [Link] is directly connected, Loopback0

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 99
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

O [Link]/24 [110/65] via [Link], 00:07:03, Serial2/1

R2#show ip ospf neighbor

Neighbor ID Pri State Dead Time Address Interface
[Link] 0 FULL/ - 00:00:32 [Link] Serial2/0
[Link] 0 FULL/ - 00:00:32 [Link] Serial2/1

R3#show ip route
C [Link]/8 is directly connected, Serial2/0
[Link]/32 is subnetted, 1 subnets
O [Link] [110/65] via [Link], 00:00:07, Serial2/0
C [Link]/24 is directly connected, FastEthernet0/0

R3#show ip ospf neighbor

Neighbor ID Pri State Dead Time Address Interface
[Link] 0 FULL/ - 00:00:36 [Link] Serial2/0

Virtual Link Configuration

Note: As we know, Virtual link is depended upon Router ID so first note down the Router ID of those
router where Virtual Link is to be configure.
*See Lecture No. 6 for Router ID

Commands for verifying OSPF Router ID:

#show ip ospf
#show ip protocols

OSPF Router IDs:

Router R1’s Router ID [Link]
Router R2’s Router ID [Link]

Virtual Link on Router R1

Command Description
#area 1 virtual-link ID (IP addr) associated with Router configuration mode command to create
virtual link neighbor Virtual Link in specific Area.

R1(config)#router ospf 1
R1(config-router)#area 1 virtual-link [Link]
R1(config-router)#
*Mar 1 01:02:37.539: %OSPF-5-ADJCHG: Process 1, Nbr [Link] on OSPF_VL0 from LOADING to
FULL, Loading Done

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 100
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Virtual Link on Router R2

R2(config)#router ospf 1
R2(config-router)#area 1 virtual-link [Link]
R2#
*Mar 1 01:02:36.163: %OSPF-5-ADJCHG: Process 1, Nbr [Link] on OSPF_VL0 from LOADING to
FULL, Loading Done
*Mar 1 01:02:36.827: %SYS-5-CONFIG_I: Configured from console by console

Note: If OSPF Router ID is changed than Virtual Link is down and if physical link on which virtual link is
dependent, is down Virtual link is down. That is why Virtual link is not stable.

R1#sh ip ospf neighbor

Neighbor ID Pri State Dead Time Address Interface

[Link] 0 FULL/ - - [Link] OSPF_VL0
[Link] 0 FULL/ - 00:00:30 [Link] Serial2/0

Double neighbor ship with R2 one is through virtual link and another with serial link. There is no dead
time for Virtual link b/c its depend on physical link.

Note: In virtual Link, hello packet is unicast and not repeatable/not periodic.

Before Virtual Link on R1 After Virtual Link on R1

R1#sho ip route R1#sh ip route

C [Link]/8 is directly connected, Serial2/0 C [Link]/8 is directly connected, Serial2/0

C [Link]/24 is directly connected, FastEthernet0/0 O IA [Link]/8 [110/128] via [Link], 01:27:38, Serial2/0
O [Link]/24 [110/65] via [Link], 00:08:50, Serial2/0 C [Link]/24 is directly connected, FastEthernet0/0
O [Link]/24 [110/65] via [Link], 01:27:38, Serial2/0
[Link]/32 is subnetted, 1 subnets
O IA [Link] [110/65] via [Link], 01:27:38, Serial2/0
O IA [Link]/24 [110/129] via [Link], 01:27:38, Serial2/0

R1#sh ip ospf neighbor R1#sh ip ospf neighbor

Neighbor ID Pri State Dead Time Address Interface Neighbor ID Pri State Dead Time Address Interface
[Link] 0 FULL/ - 00:00:35 [Link] Serial2/0 [Link] 0 FULL/ - - [Link] OSPF_VL0
[Link] 0 FULL/ - 00:00:39 [Link] Serial2/0

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 101
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Before Virtual Link on R2 After Virtual Link on R2

R2#sh ip route R1#sh ip route

C [Link]/8 is directly connected, Serial2/0 C [Link]/8 is directly connected, Serial2/0

C [Link]/8 is directly connected, Serial2/1 C [Link]/8 is directly connected, Serial2/1
O IA [Link]/24 [110/65] via [Link], 00:07:03, Serial2/0 O [Link]/24 [110/65] via [Link], 01:33:32, Serial2/0
C [Link]/24 is directly connected, FastEthernet0/0 C [Link]/24 is directly connected, FastEthernet0/0
[Link]/32 is subnetted, 1 subnets [Link]/32 is subnetted, 1 subnets
C [Link] is directly connected, Loopback0 C [Link] is directly connected, Loopback0
O [Link]/24 [110/65] via [Link], 00:07:03, Serial2/1 O [Link]/24 [110/65] via [Link], 01:33:42, Serial2/1

R2#show ip ospf neighbor R1#sh ip ospf neighbor

Neighbor ID Pri State Dead Time Address Interface Neighbor ID Pri State Dead Time Address Interface
[Link] 0 FULL/ - 00:00:32 [Link] Serial2/0 [Link] 0 FULL/ - - [Link] OSPF_VL0
[Link] 0 FULL/ - 00:00:32 [Link] Serial2/1 [Link] 0 FULL/ - 00:00:37 [Link] Serial2/0
[Link] 0 FULL/ - 00:00:37 [Link] Serial2/1

Note: On router 2, double neighbor ship due to virtual link. Before Virtual link, network
[Link] was inter-route (O- IA) now it is intra-route (O) b/c of virtual link.

Before Virtual Link on R3 After Virtual Link on R3

R2#sh ip route R1#sh ip route

C [Link]/8 is directly connected, Serial2/0 O IA [Link]/8 [110/128] via [Link], 01:39:38, Serial2/0
[Link]/32 is subnetted, 1 subnets C [Link]/8 is directly connected, Serial2/0
O [Link] [110/65] via [Link], 00:00:07, Serial2/0 O IA [Link]/24 [110/129] via [Link], 01:39:28, Serial2/0
C [Link]/24 is directly connected, FastEthernet0/0 O IA [Link]/24 [110/65] via [Link], 01:39:38, Serial2/0
[Link]/32 is subnetted, 1 subnets
O [Link] [110/65] via [Link], 01:39:38, Serial2/0
C [Link]/24 is directly connected, FastEthernet0/0

R3#show ip ospf neighbor R3#show ip ospf neighbor

Neighbor ID Pri State Dead Time Address Interface Neighbor ID Pri State Dead Time Address Interface
[Link] 0 FULL/ - 00:00:36 [Link] Serial2/0 [Link] 0 FULL/ - 00:00:31 [Link] Serial2/0

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 102
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Task Given by the Instructor

Task: Virtual Link Configuration

Problem: Network is not converged.

Solution: Virtual Link between R1 and R2 and then between R2 and R3.

Note: Every router must have 8 routes in its routing table. And try to build each router’s routing table in
your mind this is the best way to stronger yours concepts. For example how many paths are with O, OIA
or O-EA etc.

OSPF Configuration On All Routers according to the figure.

Router R1

R1(config)#router ospf 1
R1(config-router)#network [Link] [Link] area 0
R1(config-router)#network [Link] [Link] area 1

Router R2

R2(config)#router ospf 1
R2(config-router)#network [Link] [Link] area 1
R2(config-router)#network [Link] [Link] area 1
R2(config-router)#network [Link] [Link] area 2
R2(config-router)#network [Link] [Link] area 2

Router R3

R3(config)#router ospf 1
R3(config-router)#network [Link] [Link] area 2
R3(config-router)#network [Link] [Link] area 2
R3(config-router)#network [Link] [Link] area 3

Router R4

R4(config)#router ospf 1
R4(config-router)#network [Link] [Link] area 3
R4(config-router)#network [Link] [Link] area 3

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 103
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Before Virtual Link Verification.

Router R1 Before Virtual Link Router R2 Before Virtual Link

R1#show ip route R2#show ip route
C [Link]/8 is directly connected, Serial2/0
C [Link]/24 is directly connected, FastEthernet0/0 C [Link]/8 is directly connected, Serial2/0
O [Link]/24 [110/65] via [Link], 00:11:42, Serial2/0 C [Link]/8 is directly connected, Serial2/1
O IA [Link]/24 [110/65] via [Link], 00:11:21, Serial2/0
C [Link]/24 is directly connected, FastEthernet0/0
[Link]/32 is subnetted, 1 subnets
C [Link] is directly connected, Loopback0

R1#show ip ospf neighbor R2#show ip ospf neighbor

Neighbor ID Pri State Dead Time Address Interface Neighbor ID Pri State Dead Time Address Interface
[Link] 0 FULL/ - 00:00:34 [Link] Serial2/0 [Link] 0 FULL/ - 00:00:37 [Link] Serial2/0
[Link] 0 FULL/ - 00:00:36 [Link] Serial2/1
Router R3 Before Virtual Link Router R4 Before Virtual Link
R3#show ip route R4#show ip route

O [Link]/24 [110/65] via [Link], 00:10:31, Serial2/1 C [Link]/24 is directly connected, FastEthernet0/0
C [Link]/8 is directly connected, Serial2/0 C [Link]/8 is directly connected, Serial2/0
C [Link]/8 is directly connected, Serial2/1
[Link]/32 is subnetted, 1 subnets
O [Link] [110/65] via [Link], 00:11:52, Serial2/0
C [Link]/24 is directly connected, FastEthernet0/0

R3#show ip ospf neighbor R4#show ip ospf neighbor

Neighbor ID Pri State Dead Time Address Interface Neighbor ID Pri State Dead Time Address Interface
[Link] 0 FULL/ - 00:00:31 [Link] Serial2/0 [Link] 0 FULL/ - 00:00:34 [Link] Serial2/0
[Link] 0 FULL/ - 00:00:34 [Link] Serial2/1

Virtual Link Configuration between R1 and R2

Lo [Link]
Area 0 Area 1 Area 2 Area 3
[Link] [Link] [Link] [Link] [Link] [Link]
[Link]

R1 [Link] R2 [Link] R3 [Link] R4

Virtual Link Area 1

OSPF Router IDs:

Router ID (R1) [Link]
Router ID (R2) [Link]
Router ID (R3) [Link]

As we know virtual links depended upon OSPF router.

Virtual Link on Router R1

R1(config)#router ospf 1
R1(config-router)#area 1 virtual-link [Link]

Virtual Link on Router R2

R2(config)#router ospf 1
R2(config-router)#area 1 virtual-link [Link]
Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 104
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Virtual Link Configuration on between R2 and R3

Virtual Link on Router R2

R2(config)#router ospf 1
R2(config-router)#area 2 virtual-link [Link]

Virtual Link on Router R3

R3(config)#router ospf 1
R3(config-router)#area 2 virtual-link [Link]

Router R1 After Virtual Link Router R2 After Virtual Link

R1#show ip route R2#show ip route

O IA [Link]/24 [110/193] via [Link], 00:26:08, Serial2/0 O IA [Link]/24 [110/129] via [Link], 00:19:46, Serial2/1
C [Link]/8 is directly connected, Serial2/0 C [Link]/8 is directly connected, Serial2/0
O IA [Link]/8 [110/128] via [Link], 00:26:08, Serial2/0 C [Link]/8 is directly connected, Serial2/1
O IA [Link]/8 [110/192] via [Link], 00:26:08, Serial2/0 O IA [Link]/8 [110/128] via [Link], 00:19:46, Serial2/1
C [Link]/24 is directly connected, FastEthernet0/0 O [Link]/24 [110/65] via [Link], 00:27:54, Serial2/0
O [Link]/24 [110/65] via [Link], 00:30:13, Serial2/0 C [Link]/24 is directly connected, FastEthernet0/0
[Link]/32 is subnetted, 1 subnets [Link]/32 is subnetted, 1 subnets
O IA [Link] [110/65] via [Link], 00:26:08, Serial2/0 C [Link] is directly connected, Loopback0
O IA [Link]/24 [110/129] via [Link], 00:18:13, Serial2/0 O [Link]/24 [110/65] via [Link], 00:19:46, Serial2/1

R1#show ip ospf neighbor R2#show ip ospf neighbor

Neighbor ID Pri State Dead Time Address Interface Neighbor ID Pri State Dead Time Address Interface
[Link] 0 FULL/ - - [Link] OSPF_VL0 [Link] 0 FULL/ - - [Link] OSPF_VL1
[Link] 0 FULL/ - 00:00:31 [Link] Serial2/0 [Link] 0 FULL/ - - [Link] OSPF_VL0
[Link] 0 FULL/ - 00:00:35 [Link] Serial2/0
[Link] 0 FULL/ - 00:00:36 [Link] Serial2/1

R1#show ip route summary R2#show ip route summary

IP routing table name is Default-IP-Routing-Table(0) IP routing table name is Default-IP-Routing-Table(0)
IP routing table maximum-paths is 16 IP routing table maximum-paths is 16
Route Source Networks Subnets Overhead Memory (bytes) Route Source Networks Subnets Overhead Memory (bytes)
connected 2 0 144 272 connected 3 1 288 544
static 0 0 0 0 static 0 0 0 0
ospf 1 5 1 432 816 ospf 1 4 0 288 544
Intra-area: 1 Inter-area: 5 External-1: 0 External-2: 0 Intra-area: 2 Inter-area: 2 External-1: 0 External-2: 0
NSSA External-1: 0 NSSA External-2: 0 NSSA External-1: 0 NSSA External-2: 0
internal 1 1156 internal 1 1156
Total 8 1 576 2244 Total 8 1 576 2244

Router R3 After Virtual Link Router R4 After Virtual Link

R3#show ip route R4#sh ip route

O [Link]/24 [110/65] via [Link], 00:26:32, Serial2/1 C [Link]/24 is directly connected, FastEthernet0/0
O IA [Link]/8 [110/128] via [Link], 00:17:47, Serial2/0 O IA [Link]/8 [110/192] via [Link], 00:08:22, Serial2/0
C [Link]/8 is directly connected, Serial2/0 O IA [Link]/8 [110/128] via [Link], 00:09:00, Serial2/0
C [Link]/8 is directly connected, Serial2/1 C [Link]/8 is directly connected, Serial2/0
O [Link]/24 [110/129] via [Link], 00:17:47, Serial2/0 O IA [Link]/24 [110/193] via [Link], 00:08:22, Serial2/0
O IA [Link]/24 [110/65] via [Link], 00:17:47, Serial2/0 O IA [Link]/24 [110/129] via [Link], 00:08:22, Serial2/0

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 105
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

[Link]/32 is subnetted, 1 subnets [Link]/32 is subnetted, 1 subnets

O [Link] [110/65] via [Link], 00:17:47, Serial2/0 O IA [Link] [110/129] via [Link], 00:09:00, Serial2/0
C [Link]/24 is directly connected, FastEthernet0/0 O IA [Link]/24 [110/65] via [Link], 00:00:18, Serial2/0

R3#show ip ospf neighbor R4#show ip ospf neighbor

Neighbor ID Pri State Dead Time Address Interface Neighbor ID Pri State Dead Time Address Interface
[Link] 0 FULL/ - - [Link] OSPF_VL1 [Link] 0 FULL/ - 00:00:36 [Link] Serial2/0
[Link] 0 FULL/ - 00:00:37 [Link] Serial2/0
[Link] 0 FULL/ - 00:00:36 [Link] Serial2/1

R3#show ip route summary R4#show ip route summary

IP routing table name is Default-IP-Routing-Table(0) IP routing table name is Default-IP-Routing-Table(0)
IP routing table maximum-paths is 16 IP routing table maximum-paths is 16
Route Source Networks Subnets Overhead Memory (bytes) Route Source Networks Subnets Overhead Memory (bytes)
connected 3 0 216 408 connected 2 0 144 272
static 0 0 0 0 static 0 0 0 0
ospf 1 4 1 360 680 ospf 1 5 1 432 816
Intra-area: 3 Inter-area: 2 External-1: 0 External-2: 0 Intra-area: 0 Inter-area: 6 External-1: 0 External-2: 0
NSSA External-1: 0 NSSA External-2: 0 NSSA External-1: 0 NSSA External-2: 0
internal 1 1156 internal 1 1156
Total 8 1 576 2244 Total 8 1 576 2244

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 106
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Task: Given by the Instructor – II

Problem: Network is not converged.

Solution: Virtual Link between R1 and R3.

Note: Every router must have 8 routes in its routing table. And try to build each router’s routing table
in your mind this is the best way to stronger yours concepts. For example how many paths are with O,
OIA or O-EA etc.

OSPF Configuration On All Routers according to the figure.

Router R1

R1(config)#router ospf 1
R1(config-router)#network [Link] [Link] area 0
R1(config-router)#network [Link] [Link] area 1

Router R2

R2(config)#router ospf 1
R2(config-router)#network [Link] [Link] area 1
R2(config-router)#network [Link] [Link] area 1
R2(config-router)#network [Link] [Link] area 1
R2(config-router)#network [Link] [Link] area 1

Router R3

R3(config)#router ospf 1
R3(config-router)#network [Link] [Link] area 1
R3(config-router)#network [Link] [Link] area 1
R3(config-router)#network [Link] [Link] area 2

Router R4

R4(config)#router ospf 1
R4(config-router)#network [Link] [Link] area 2
R4(config-router)#network [Link] [Link] area 2

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 107
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Virtual Link Configuration on between R1 and R3

OSPF Router IDs:

Router ID (R1) [Link]
Router ID (R3) [Link]

Virtual Link on Router R1

R1(config)#router ospf 1
R1(config-router)#area 1 virtual-link [Link]

Virtual Link on Router R2

R3(config)#router ospf 1
R3(config-router)#area 1 virtual-link [Link]

Router R1 Before Virtual Link Router R1 After Virtual Link

R1#show ip route R1#show ip route

C [Link]/8 is directly connected, Serial2/0 O IA [Link]/24 [110/193] via [Link], 00:06:44, Serial2/0
O [Link]/8 [110/128] via [Link], 00:00:10, Serial2/0 C [Link]/8 is directly connected, Serial2/0
C [Link]/24 is directly connected, FastEthernet0/0 O [Link]/8 [110/128] via [Link], 00:06:44, Serial2/0
O [Link]/24 [110/65] via [Link], 00:00:10, Serial2/0 O IA [Link]/8 [110/192] via [Link], 00:06:44, Serial2/0
[Link]/32 is subnetted, 1 subnets C [Link]/24 is directly connected, FastEthernet0/0
O [Link] [110/65] via [Link], 00:00:10, Serial2/0 O [Link]/24 [110/65] via [Link], 00:06:44, Serial2/0
O [Link]/24 [110/129] via [Link], 00:00:10, Serial2/0 [Link]/32 is subnetted, 1 subnets
O [Link] [110/65] via [Link], 00:06:44, Serial2/0
O [Link]/24 [110/129] via [Link], 00:06:46, Serial2/0

R1#show ip ospf neighbor R1#show ip ospf neighbor

Neighbor ID Pri State Dead Time Address Interface Neighbor ID Pri State Dead Time Address Interface
[Link] 0 FULL/ - 00:00:39 [Link] Serial2/0 [Link] 0 FULL/ - - [Link] OSPF_VL0
[Link] 0 FULL/ - 00:00:30 [Link] Serial2/0

R1#show ip route summary R1#show ip route summary

IP routing table name is Default-IP-Routing-Table(0) IP routing table name is Default-IP-Routing-Table(0)
IP routing table maximum-paths is 16 IP routing table maximum-paths is 16
Route Source Networks Subnets Overhead Memory (bytes) Route Source Networks Subnets Overhead Memory (bytes)
connected 2 0 144 272 connected 2 0 144 272
static 0 0 0 0 static 0 0 0 0
ospf 1 3 1 288 544 ospf 1 5 1 432 816
Intra-area: 4 Inter-area: 0 External-1: 0 External-2: 0 Intra-area: 4 Inter-area: 2 External-1: 0 External-2: 0
NSSA External-1: 0 NSSA External-2: 0 NSSA External-1: 0 NSSA External-2: 0
internal 1 1156 internal 1 1156
Total 6 1 432 1972 Total 8 1 576 2244

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 108
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Router R2 Before Virtual Link Router R2 After Virtual Link

R2#show ip route R2#show ip route

C [Link]/8 is directly connected, Serial2/0 O IA [Link]/24 [110/129] via [Link], 00:05:38, Serial2/1
C [Link]/8 is directly connected, Serial2/1 C [Link]/8 is directly connected, Serial2/0
O IA [Link]/24 [110/65] via [Link], 00:01:25, Serial2/0 C [Link]/8 is directly connected, Serial2/1
C [Link]/24 is directly connected, FastEthernet0/0 O IA [Link]/8 [110/128] via [Link], 00:05:38, Serial2/1
[Link]/32 is subnetted, 1 subnets O IA [Link]/24 [110/65] via [Link], 00:05:38, Serial2/0
C [Link] is directly connected, Loopback0 C [Link]/24 is directly connected, FastEthernet0/0
O [Link]/24 [110/65] via [Link], 00:01:25, Serial2/1 [Link]/32 is subnetted, 1 subnets
C [Link] is directly connected, Loopback0
O [Link]/24 [110/65] via [Link], 00:05:38, Serial2/1

R2#show ip ospf neighbor R2#show ip ospf neighbor

Neighbor ID Pri State Dead Time Address Interface Neighbor ID Pri State Dead Time Address Interface
[Link] 0 FULL/ - 00:00:32 [Link] Serial2/1 [Link] 0 FULL/ - 00:00:32 [Link] Serial2/1
[Link] 0 FULL/ - 00:00:37 [Link] Serial2/0 [Link] 0 FULL/ - 00:00:37 [Link] Serial2/0

R2#show ip route summary R2#show ip route summary

IP routing table name is Default-IP-Routing-Table(0) IP routing table name is Default-IP-Routing-Table(0)
IP routing table maximum-paths is 16 IP routing table maximum-paths is 16
Route Source Networks Subnets Overhead Memory (bytes) Route Source Networks Subnets Overhead Memory (bytes)
connected 3 1 288 544 connected 3 1 288 544
static 0 0 0 0 static 0 0 0 0
ospf 1 2 0 144 272 ospf 1 4 0 288 544
Intra-area: 1 Inter-area: 1 External-1: 0 External-2: 0 Intra-area: 1 Inter-area: 3 External-1: 0 External-2: 0
NSSA External-1: 0 NSSA External-2: 0 NSSA External-1: 0 NSSA External-2: 0
internal 1 1156 internal 1 1156
Total 6 1 432 1972 Total 8 1 576 2244

Router R3 Before Virtual Link Router R3 After Virtual Link

R3#show ip route R3#sh ip route

O [Link]/24 [110/65] via [Link], 00:02:45, Serial2/1 O [Link]/24 [110/65] via [Link], 00:04:19, Serial2/1
O [Link]/8 [110/128] via [Link], 00:02:45, Serial2/0 O [Link]/8 [110/128] via [Link], 00:04:09, Serial2/0
C [Link]/8 is directly connected, Serial2/0 C [Link]/8 is directly connected, Serial2/0
C [Link]/8 is directly connected, Serial2/1 C [Link]/8 is directly connected, Serial2/1
O IA [Link]/24 [110/129] via [Link], 00:02:45, Serial2/0 O [Link]/24 [110/129] via [Link], 00:04:09, Serial2/0
O [Link]/24 [110/65] via [Link], 00:02:45, Serial2/0 O [Link]/24 [110/65] via [Link], 00:04:09, Serial2/0
[Link]/32 is subnetted, 1 subnets [Link]/32 is subnetted, 1 subnets
O [Link] [110/65] via [Link], 00:02:45, Serial2/0 O [Link] [110/65] via [Link], 00:04:09, Serial2/0
C [Link]/24 is directly connected, FastEthernet0/0 C [Link]/24 is directly connected, FastEthernet0/0

R3#show ip ospf neighbor R3#show ip ospf neighbor

Neighbor ID Pri State Dead Time Address Interface Neighbor ID Pri State Dead Time Address Interface
[Link] 0 FULL/ - 00:00:32 [Link] Serial2/0 [Link] 0 FULL/ - - [Link] OSPF_VL0
[Link] 0 FULL/ - 00:00:38 [Link] Serial2/1 [Link] 0 FULL/ - 00:00:36 [Link] Serial2/0
[Link] 0 FULL/ - 00:00:32 [Link] Serial2/1

R3#show ip route summary R3#show ip route summary

IP routing table name is Default-IP-Routing-Table(0) IP routing table name is Default-IP-Routing-Table(0)
IP routing table maximum-paths is 16 IP routing table maximum-paths is 16
Route Source Networks Subnets Overhead Memory (bytes) Route Source Networks Subnets Overhead Memory (bytes)
connected 3 0 216 408 connected 3 0 216 408
static 0 0 0 0 static 0 0 0 0
ospf 1 4 1 360 680 ospf 1 4 1 360 680
Intra-area: 4 Inter-area: 1 External-1: 0 External-2: 0 Intra-area: 5 Inter-area: 0 External-1: 0 External-2: 0
NSSA External-1: 0 NSSA External-2: 0 NSSA External-1: 0 NSSA External-2: 0
internal 1 1156 internal 1 1156
Total 8 1 576 2244 Total 8 1 576 2244

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 109
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Router R4 Before Virtual Link Router R4 After Virtual Link

R4#show ip route R4#sh ip route

C [Link]/24 is directly connected, FastEthernet0/0 C [Link]/24 is directly connected, FastEthernet0/0

C [Link]/8 is directly connected, Serial2/0 O IA [Link]/8 [110/192] via [Link], 00:00:59, Serial2/0
O IA [Link]/8 [110/128] via [Link], 00:00:59, Serial2/0
C [Link]/8 is directly connected, Serial2/0
O IA [Link]/24 [110/193] via [Link], 00:00:45, Serial2/0
O IA [Link]/24 [110/129] via [Link], 00:00:59, Serial2/0
[Link]/32 is subnetted, 1 subnets
O IA [Link] [110/129] via [Link], 00:00:59, Serial2/0
O IA [Link]/24 [110/65] via [Link], 00:00:59, Serial2/0

R4#show ip ospf neighbor R4#sh ip ospf neighbor

Neighbor ID Pri State Dead Time Address Interface Neighbor ID Pri State Dead Time Address Interface
[Link] 0 FULL/ - 00:00:36 [Link] Serial2/0 [Link] 0 FULL/ - 00:00:35 [Link] Serial2/0

R4#show ip route summary R4#sh ip route summary

IP routing table name is Default-IP-Routing-Table(0) IP routing table name is Default-IP-Routing-Table(0)
IP routing table maximum-paths is 16 IP routing table maximum-paths is 16
Route Source Networks Subnets Overhead Memory (bytes) Route Source Networks Subnets Overhead Memory (bytes)
connected 2 0 144 272 connected 2 0 144 272
static 0 0 0 0 static 0 0 0 0
ospf 1 0 0 0 0 ospf 1 5 1 432 816
Intra-area: 0 Inter-area: 0 External-1: 0 External-2: 0 Intra-area: 0 Inter-area: 6 External-1: 0 External-2: 0
NSSA External-1: 0 NSSA External-2: 0 NSSA External-1: 0 NSSA External-2: 0
Total 2 0 144 272 internal 1 1156
Total 8 1 576 2244

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 110
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Lecture # 20

Final Lab

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 111
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

IMPLEMENTING MULTIPLE IP ROUTING PROTOCOLS WITH PBR

TASK1: Configure Interior Gateway Protocols according to the given Diagram and Tables.

TASK2: Configure and advertise OSPF Router IDs according to the table.

TASK3: Perform Convergence.

1. You are allowed to configure virtual link if required.

2. You are only allowed to perform clockwise redistribution.
3. You are not allowed to advertise Loopback1 of R2 with Network Command.

TASK4: Try to configure OSPF area 1 as STUB and note the “Remark”.

TASK5:

1. Configure Policy Based Routing according to the following table:

[Link]/24 OSPF METRIC TYPE SHOULD BE TYPE-2

[Link]/24 EXTERNAL OSPF METRIC 30
[Link]/24 OSPF METRIC TYPE SHOULD BE TYPE-1
[Link]/24

2. R1 should only receive Class A networks from Backbone Router.

Backbone Router is Pre-configured, and NOT Reachable by the candidate.

TASK6: Perform OSPF route-summarization for R2 static routes given in the table.

TASK7: Perform EIGRP route-summarization for R3 static routes given in the table.

TASK8: Network [Link]/24 is appearing as O-IA in R2 Routing Table, It should appear with D-EX,
and your solution should not impact any other Route in the Network.

TASK9: Perform OSPF and EIGRP Authentication between R1-R2 and R2-R3.

Use strongest Authentication Method and set all passwords as “cisco”.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 112
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Solution
(Before Tasks)

Basic IP Configuration/Static Routes/Loop back Interfaces on All Routers According to Diagram:-

Back Bone Router

Note: Backbone router in figure above is given in exam preconfigured. It represents an AS. Backbone is
not accessible and routing protocol is already running on it that can be any routing protocol RIP v2, OSPF
or EIGRP. One interface of accessible router is connected with backbone and if you successfully run the
required protocol on accessible router than you can see the routes in its routing table from backbone
router.

In our case we have to configure Backbone Router. According to the figure RIP v2 is running on
Backbone router and you can add few static routes on it for redistribution.

Backbone(config)#interface FastEthernet0/0

Backbone(config-if)# ip address [Link] [Link]

Backbone(config-if)# no shutdown

Backbone(config)#ip route [Link] [Link] Null0

Backbone(config)#ip route [Link] [Link] Null0

Backbone(config)#ip route [Link] [Link] Null0

Backbone(config)#ip route [Link] [Link] Null0

Backbone(config)#ip route [Link] [Link] Null0

Backbone(config)#ip route [Link] [Link] Null0

Backbone(config)#ip route [Link] [Link] Null0

Backbone(config)#ip route [Link] [Link] Null0

Backbone(config-if)#router rip

Backbone(config-router)# version 2

Backbone(config-router)# redistribute static metric 1

Backbone(config-router)# network [Link]

Backbone(config-router)# no auto-summary

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 113
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Router R1
interface FastEthernet0/0
ip address [Link] [Link]
no sh
no keep
interface Serial2/0
ip address [Link] [Link]
no sh
interface Serial2/1
ip address [Link] [Link]
no sh

Router R2
interface FastEthernet0/0
ip address [Link] [Link]
no shut
no keep
interface Serial2/0
ip address [Link] [Link]
no shut
interface Serial2/1
ip address [Link] [Link]
no shut

Router R3
interface FastEthernet0/0
ip address [Link] [Link]
no shut
no keep
interface Serial2/0
ip address [Link] [Link]
no shut
interface Serial2/1
ip address [Link] [Link]
no shut

Router R4
interface FastEthernet0/0
ip address [Link] [Link]
no shut
no keep
interface Serial2/0
ip address [Link] [Link]
no shut

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 114
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

interface Serial2/1
ip address [Link] [Link]
no shut

All basic configurations are done on all routers.

Note: Read the tasks given in the exam’s lab, at least one time. You may face tricky tasks.

TASK1: Configure Interior Gateway Protocols according to the given Diagram and Tables.
TASK2: Configure and advertise OSPF Router IDs according to the table.

Note: For task2 OSPF Routers IDs are loopback addresses which are not yet configured and if we don’t
configure the OSPF with loopback addresses than the highest physical address is the OSPF router ID.
That’s why it is necessary to read the tasks before starting the lab.

Loopback Addresses On Routers

Router R1
R1(config)#interface loopback 0
R1(config-if)#ip address [Link] [Link]

Router R2
R2(config)#interface loopback 0
R2(config-if)#ip address
R2(config-if)#ip address [Link] [Link]
R2(config-if)#exit
R2(config)#interface loopback 1
R2(config-if)#ip address [Link] [Link]

Router R3
R3(config)#interface loopback 0
R3(config-if)#ip address [Link] [Link]

Router R4
R4(config)#interface loopback 0
R4(config-if)#ip address [Link] [Link]

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 115
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

TASK-1: Configure Interior Gateway Protocols according to the given Diagram and Tables.
TASK-2: Configure and advertise OSPF Router IDs according to the table.

Router R1
R1(config)#router rip
R1(config-router)# version 2
R1(config-router)# network [Link]
R1(config-router)# no auto-summary

Note: RIP and EIGRP support auto-summa. Auto summary is enabled default. Can be disable by the
command “no auto-summary”. And auto summary is not recommended in most cases.
OSPF/IS-IS do not automatically summarize.

R1#show ip route rip

R [Link]/16 [120/1] via [Link], 00:00:15, FastEthernet0/0
R [Link]/24 [120/1] via [Link], 00:00:15, FastEthernet0/0
R [Link]/16 [120/1] via [Link], 00:00:15, FastEthernet0/0
R [Link]/24 [120/1] via [Link], 00:00:15, FastEthernet0/0
R [Link]/8 [120/1] via [Link], 00:00:15, FastEthernet0/0
R [Link]/16 [120/1] via [Link], 00:00:15, FastEthernet0/0
R [Link]/8 [120/1] via [Link], 00:00:15, FastEthernet0/0
R [Link]/8 [120/1] via [Link], 00:00:15, FastEthernet0/0

Its mean RIP V2 successfully configured

Routing Protocols Configuration

Router R1
R1(config)#router ospf 1
R1(config-router)#
R1(config-router)# network [Link] [Link] area 1
R1(config-router)# network [Link] [Link] area 1
R1(config-router)# network [Link] [Link] area 1
R1(config)#router rip
R1(config-router)#version 2
R1(config-router)#no auto-summary
R1(config-router)#network [Link]

Router R2
R2(config)#router ospf 1
R2(config-router)#network [Link] [Link] area 0
R2(config-router)#network [Link] [Link] area 1
R2(config-router)#network [Link] [Link] area 0

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 116
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

EIGRP Configuration n Router R2.

Command Description
Router(config)# router eigrp Global configuration mode. Enables an EIGRP routing
autonomous-system process in.
Router(config-router)# network Router configuration mode. Associates networks with an
network-number EIGRP routing process.

R2(config)#router eigrp 100 *100 is EIGRP AS Number

R2(config-router)#no auto-summary
R2(config-router)#network [Link] [Link]

Note: EIGRP can be configured in two ways, like RIP style and like OSPF style but without Area.

Router R3
R3(config)#router ospf 2
R3(config-router)#network [Link] [Link] area 0
R3(config-router)#network [Link] [Link] area 0

R3(config)#router eigrp 100

R3(config-router)#no auto-summary
R3(config-router)#network [Link] [Link]
R3(config-router)#network [Link] [Link]

Router R4
R4(config)#router ospf 1
R4(config-router)#network [Link] [Link] area 2
R4(config-router)#network [Link] [Link] area 1
R4(config-router)#network [Link] [Link] area 2
R4(config)#router eigrp 100
R4(config-router)#no auto-summary
R4(config-router)#network [Link] [Link]

Static Routes Configuration

Static Routes On Router 2

R2#conf t
R2(config)#ip route [Link] [Link] Null0
R2(config)#ip route [Link] [Link] Null0
R2(config)#ip route [Link] [Link] Null0
R2(config)#ip route [Link] [Link] Null0

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 117
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Static Routes On Router 3

R3#conf t
R3(config)#ip route [Link] [Link] Null0
R3(config)#ip route [Link] [Link] Null0
R3(config)#ip route [Link] [Link] Null0
R3(config)#ip route [Link] [Link] Null0

Static Routes On Router 4

R4#conf t
R4(config)#ip route [Link] [Link] Null0
R4(config)#ip route [Link] [Link] Null0
R4(config)#ip route [Link] [Link] Null0
R4(config)#ip route [Link] [Link] Null0

Note: Try to build each router’s routing table in your mind this is the best way to stronger yours
concepts. For example how many paths are with O, OIA, D, R or O-EA etc.

Router R1 with Task 1 & 2 Router R2 with Task 1 & 2

R1#show ip route R2#show ip route

C [Link]/8 is directly connected, Serial2/0 C [Link]/8 is directly connected, Serial2/0

C [Link]/8 is directly connected, Serial2/1 C [Link]/8 is directly connected, Serial2/1
C [Link]/24 is directly connected, FastEthernet0/0 D [Link]/8 [90/2681856] via [Link], 00:10:07, Serial2/1
R [Link]/16 [120/1] via [Link], 00:00:09, O [Link]/8 [110/128] via [Link], 00:07:31, Serial2/0
FastEthernet0/0 [Link]/32 is subnetted, 1 subnets
O IA [Link]/24 [110/65] via [Link], 00:00:45, Serial2/0 C [Link] is directly connected, Loopback1
[Link]/32 is subnetted, 1 subnets C [Link]/24 is directly connected, FastEthernet0/0
O IA [Link] [110/65] via [Link], 00:00:45, Serial2/0 [Link]/32 is subnetted, 1 subnets
R [Link]/24 [120/1] via [Link], 00:00:09, C [Link] is directly connected, Loopback0
FastEthernet0/0 [Link]/32 is subnetted, 1 subnets
R [Link]/16 [120/1] via [Link], 00:00:12, O [Link] [110/65] via [Link], 00:07:33, Serial2/0
FastEthernet0/0 S [Link]/24 is directly connected, Null0
R [Link]/24 [120/1] via [Link], 00:00:12, S [Link]/24 is directly connected, Null0
FastEthernet0/0 S [Link]/24 is directly connected, Null0
R [Link]/8 [120/1] via [Link], 00:00:12, FastEthernet0/0 S [Link]/24 is directly connected, Null0
R [Link]/16 [120/1] via [Link], 00:00:12,
FastEthernet0/0
[Link]/32 is subnetted, 1 subnets
C [Link] is directly connected, Loopback0
R [Link]/8 [120/1] via [Link], 00:00:14, FastEthernet0/0
R [Link]/8 [120/1] via [Link], 00:00:14, FastEthernet0/0
Router R3 with Task 1 & 2 Router R4 with Task 1 & 2
R3#show ip route R4#show ip route
C [Link]/24 is directly connected, FastEthernet0/0
C [Link]/8 is directly connected, Serial2/0 O [Link]/8 [110/128] via [Link], 00:09:08, Serial2/1
[Link]/32 is subnetted, 1 subnets D [Link]/8 [90/2681856] via [Link], 00:08:57, Serial2/0
C [Link] is directly connected, Loopback0 C [Link]/8 is directly connected, Serial2/0
C [Link]/8 is directly connected, Serial2/1 C [Link]/8 is directly connected, Serial2/1
C [Link]/24 is directly connected, FastEthernet0/0 O IA [Link]/24 [110/129] via [Link], 00:09:08, Serial2/1
S [Link]/24 is directly connected, Null0 [Link]/32 is subnetted, 1 subnets
S [Link]/24 is directly connected, Null0 O IA [Link] [110/129] via [Link], 00:09:08, Serial2/1
S [Link]/24 is directly connected, Null0 [Link]/32 is subnetted, 1 subnets
S [Link]/24 is directly connected, Null0 O [Link] [110/65] via [Link], 00:09:11, Serial2/1
S [Link]/24 is directly connected, Null0
S [Link]/24 is directly connected, Null0
S [Link]/24 is directly connected, Null0
[Link]/32 is subnetted, 1 subnets
C [Link] is directly connected, Loopback0
S [Link]/24 is directly connected, Null0

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 118
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Lecture # 21
Final Lab (Continue)

TASK-3: Perform Convergence.

1. You are allowed to configure virtual link if required.

2. You are only allowed to perform clockwise redistribution.
3. You are not allowed to advertise Loopback1 of R2 with Network Command.

Solution:

Total Route Should be 33 in each router’s routing table after convergence.

WAN=4, LAN=4, Loopbacks=5, Static Routes=12 and RIP=8. Total = 4 + 4 + 5 + 12 + 8 = 33

3.1. You are allowed to configure virtual link if required.

Area 2 is not connected with Area 0 that is why Virtual link is required.

Note: Better to Configure Virtual Link first if asked for both redistribution and Virtual Link.

Virtual Link is not suitable between R2 and R3. It is suitable between R2 and R4 because conditions are
fulfilled.

1. Virtual Link is always configured between two routers/routing devices. It can be a multilayer
switch (MLS)
2. One Router must be ABR.
3. These two routers must have a common regular area between them.

Before configuring we must know the OSPF Routers-ID of R1 and R4.

OSPF Router IDs:

Router ID (R2) [Link]

Router ID (R4) [Link]

Virtual Link on Router R2

R2(config)#router ospf 1
R2(config-router)#area 1 virtual-link [Link]

Note: In virtual link Hello packet is Unicast until neighbor-ship is established.

Virtual Link on Router R4

R4(config)#router ospf 1
R4(config-router)#area 1 virtual-link [Link]

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 119
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Router R2 Before Virtual Link Router R2 After Virtual Link

R2#show ip route R2#show ip route

C [Link]/8 is directly connected, Serial2/0 O IA [Link]/24 [110/129] via [Link], 00:12:25, Serial2/0
C [Link]/8 is directly connected, Serial2/1 C [Link]/8 is directly connected, Serial2/0
D [Link]/8 [90/2681856] via [Link], 00:10:07, Serial2/1 C [Link]/8 is directly connected, Serial2/1
O [Link]/8 [110/128] via [Link], 00:07:31, Serial2/0 D [Link]/8 [90/2681856] via [Link], 00:25:50, Serial2/1
[Link]/32 is subnetted, 1 subnets O [Link]/8 [110/128] via [Link], 00:12:25, Serial2/0
C [Link] is directly connected, Loopback1 [Link]/32 is subnetted, 1 subnets
C [Link]/24 is directly connected, FastEthernet0/0 C [Link] is directly connected, Loopback1
[Link]/32 is subnetted, 1 subnets C [Link]/24 is directly connected, FastEthernet0/0
C [Link] is directly connected, Loopback0 [Link]/32 is subnetted, 1 subnets
[Link]/32 is subnetted, 1 subnets C [Link] is directly connected, Loopback0
O [Link] [110/65] via [Link], 00:07:33, Serial2/0 [Link]/32 is subnetted, 1 subnets
S [Link]/24 is directly connected, Null0 O [Link] [110/65] via [Link], 00:12:29, Serial2/0
S [Link]/24 is directly connected, Null0 S [Link]/24 is directly connected, Null0
S [Link]/24 is directly connected, Null0 S [Link]/24 is directly connected, Null0
S [Link]/24 is directly connected, Null0 S [Link]/24 is directly connected, Null0
[Link]/32 is subnetted, 1 subnets
O IA [Link] [110/129] via [Link], 00:12:32, Serial2/0
S [Link]/24 is directly connected, Null0

R2#sh ip ospf neighbor R2#sh ip ospf neighbor

Neighbor ID Pri State Dead Time Address Interface Neighbor ID Pri State Dead Time Address Interface
[Link] 0 FULL/ - 00:00:31 [Link] Serial2/0 [Link] 0 FULL/ - - [Link] OSPF_VL0
[Link] 0 FULL/ - 00:00:31 [Link] Serial2/0

Router R4 Before Virtual Link Router R4 After Virtual Link

R4#show ip route R4#show ip route

C [Link]/24 is directly connected, FastEthernet0/0 C [Link]/24 is directly connected, FastEthernet0/0

O [Link]/8 [110/128] via [Link], 00:09:08, Serial2/1 O [Link]/8 [110/128] via [Link], 00:22:02, Serial2/1
D [Link]/8 [90/2681856] via [Link], 00:08:57, Serial2/0 D [Link]/8 [90/2681856] via [Link], 00:35:26, Serial2/0
C [Link]/8 is directly connected, Serial2/0 C [Link]/8 is directly connected, Serial2/0
C [Link]/8 is directly connected, Serial2/1 C [Link]/8 is directly connected, Serial2/1
O IA [Link]/24 [110/129] via [Link], 00:09:08, Serial2/1 O [Link]/24 [110/129] via [Link], 00:22:02, Serial2/1
[Link]/32 is subnetted, 1 subnets [Link]/32 is subnetted, 1 subnets
O IA [Link] [110/129] via [Link], 00:09:08, Serial2/1 O [Link] [110/129] via [Link], 00:22:02, Serial2/1
[Link]/32 is subnetted, 1 subnets [Link]/32 is subnetted, 1 subnets
O [Link] [110/65] via [Link], 00:09:11, Serial2/1 O [Link] [110/65] via [Link], 00:22:05, Serial2/1
S [Link]/24 is directly connected, Null0 S [Link]/24 is directly connected, Null0
S [Link]/24 is directly connected, Null0 S [Link]/24 is directly connected, Null0
S [Link]/24 is directly connected, Null0 S [Link]/24 is directly connected, Null0
[Link]/32 is subnetted, 1 subnets [Link]/32 is subnetted, 1 subnets
C [Link] is directly connected, Loopback0 C [Link] is directly connected, Loopback0
S [Link]/24 is directly connected, Null0 S [Link]/24 is directly connected, Null0

R4#show ip ospf neighbor R4#show ip ospf neighbor

Neighbor ID Pri State Dead Time Address Interface Neighbor ID Pri State Dead Time Address Interface
[Link] 0 FULL/ - 00:00:39 [Link] Serial2/1 [Link] 0 FULL/ - - [Link] OSPF_VL0
[Link] 0 FULL/ - 00:00:39 [Link] Serial2/1

Note : In point to point connectivity, priority is “0”.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 120
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

2. You are only allowed to perform clockwise redistribution.

Rule: Redistribution is always accordingly Routing Table it is not dependent on Neighbor Table or
Database Table.

Note: Redistribution only concerts Routing Table.

Some people have a concept that if RIP Redistribute in OSPF and there is no need for redistribution in
EIGRP for RIP because RIP’s network from OSPF to EIGRP already reached.

Note: This is a wrong concept we cannot make a routing protocol as a bridge on a single router.

As we know redistribution only concert with routing table OSPF routing table have route with R from RIP
and if OSPF routes redistribute in EIGRP than only OSPF routes will pass in EIGRP routing table because
we are redistribution OSPF routes not RIP.

In this case we have to Redistribute RIP in EIGRP individually.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 121
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

A routing protocol can be configure as abridge but in between multiple routers.

Now coming to the main task.

3.2. You are only allowed to perform clockwise redistribution.

Router R1

R1(config)#router ospf 1

R1(config-router)#redistribute rip subnets

Router R4

R4(config)#router eigrp 100

R4(config-router)#redistribute static metric 1 1 1 1 1

R4(config-router)#redistribute ospf 1 metric 1 1 1 1 1

Note: Seed metric entered manually in EIGRP. 5 seed metrics are in EIGRP. OSPF automatically add seed
metric. 1- Bandwidth metric, 2- EIGRP delay metric, 3- EIGRP reliability metric, 4- EIGRP Effective
bandwidth metric, 5- EIGRP MTU of the path.

Router R3

R3(config)#router eigrp 100

R3(config-router)#redistribute static metric 1 1 1 1 1

R3(config-router)#redistribute ospf 2 metric 1 1 1 1 1

Router R2

R2(config)#router ospf 1

R2(config-router)#redistribute static subnets

R2(config-router)#redistribute eigrp 100 subnets

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 122
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Router R1

R1#show ip route

O IA [Link]/24 [110/65] via [Link], 00:00:00, Serial2/1

C [Link]/8 is directly connected, Serial2/0
O E2 [Link]/8 [110/20] via [Link], 00:00:00, Serial2/0
[Link]/32 is subnetted, 1 subnets
O E2 [Link] [110/20] via [Link], 00:00:00, Serial2/0
O E2 [Link]/8 [110/20] via [Link], 00:00:00, Serial2/0
C [Link]/8 is directly connected, Serial2/1
C [Link]/24 is directly connected, FastEthernet0/0
R [Link]/16 [120/1] via [Link], 00:00:14, FastEthernet0/0
O IA [Link]/24 [110/65] via [Link], 00:00:05, Serial2/0
[Link]/32 is subnetted, 1 subnets
O IA [Link] [110/65] via [Link], 00:00:05, Serial2/0
R [Link]/24 [120/1] via [Link], 00:00:18, FastEthernet0/0
R [Link]/16 [120/1] via [Link], 00:00:22, FastEthernet0/0
R [Link]/24 [120/1] via [Link], 00:00:22, FastEthernet0/0
R [Link]/8 [120/1] via [Link], 00:00:22, FastEthernet0/0
R [Link]/16 [120/1] via [Link], 00:00:22, FastEthernet0/0
O E2 [Link]/24 [110/20] via [Link], 00:00:08, Serial2/0
[Link]/32 is subnetted, 1 subnets
C [Link] is directly connected, Loopback0
O E2 [Link]/24 [110/20] via [Link], 00:00:08, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:00:08, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:00:08, Serial2/0
[Link]/32 is subnetted, 1 subnets
O IA [Link] [110/65] via [Link], 00:00:08, Serial2/1
O E2 [Link]/24 [110/20] via [Link], 00:00:08, Serial2/0
R [Link]/8 [120/1] via [Link], 00:00:22, FastEthernet0/0
R [Link]/8 [120/1] via [Link], 00:00:22, FastEthernet0/0

R1#show ip route summary

IP routing table name is Default-IP-Routing-Table(0)
IP routing table maximum-paths is 16
Route Source Networks Subnets Overhead Memory (bytes)
connected 3 1 288 544
static 0 0 0 0
ospf 1 17 3 1440 2720
Intra-area: 0 Inter-area: 4 External-1: 0 External-2: 16
NSSA External-1: 0 NSSA External-2: 0
rip 8 0 576 1088
internal 4 4624
Total 32 4 2304 8976

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 123
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Router R4

R4#show ip route

C [Link]/24 is directly connected, FastEthernet0/0

O [Link]/8 [110/128] via [Link], 00:01:35, Serial2/1
D [Link]/8 [90/2681856] via [Link], 00:02:01, Serial2/0
[Link]/32 is subnetted, 1 subnets
O E2 [Link] [110/20] via [Link], 00:01:35, Serial2/1
C [Link]/8 is directly connected, Serial2/0
C [Link]/8 is directly connected, Serial2/1
O E2 [Link]/24 [110/20] via [Link], 00:01:35, Serial2/1
O E2 [Link]/16 [110/20] via [Link], 00:01:35, Serial2/1
O [Link]/24 [110/129] via [Link], 00:01:38, Serial2/1
[Link]/32 is subnetted, 1 subnets
O [Link] [110/129] via [Link], 00:01:38, Serial2/1
O E2 [Link]/24 [110/20] via [Link], 00:01:38, Serial2/1
O E2 [Link]/16 [110/20] via [Link], 00:01:40, Serial2/1
O E2 [Link]/24 [110/20] via [Link], 00:01:40, Serial2/1
O E2 [Link]/8 [110/20] via [Link], 00:01:40, Serial2/1
O E2 [Link]/16 [110/20] via [Link], 00:01:40, Serial2/1
O E2 [Link]/24 [110/20] via [Link], 00:01:40, Serial2/1
[Link]/32 is subnetted, 1 subnets
O [Link] [110/65] via [Link], 00:01:40, Serial2/1
S [Link]/24 is directly connected, Null0
O E2 [Link]/24 [110/20] via [Link], 00:01:31, Serial2/1
O E2 [Link]/24 [110/20] via [Link], 00:01:40, Serial2/1
S [Link]/24 is directly connected, Null0
O E2 [Link]/24 [110/20] via [Link], 00:01:40, Serial2/1
O E2 [Link]/24 [110/20] via [Link], 00:01:31, Serial2/1
O E2 [Link]/24 [110/20] via [Link], 00:01:31, Serial2/1
O E2 [Link]/24 [110/20] via [Link], 00:01:40, Serial2/1
S [Link]/24 is directly connected, Null0
[Link]/32 is subnetted, 1 subnets
C [Link] is directly connected, Loopback0
O E2 [Link]/24 [110/20] via [Link], 00:01:44, Serial2/1
O E2 [Link]/24 [110/20] via [Link], 00:01:35, Serial2/1
S [Link]/24 is directly connected, Null0
O E2 [Link]/8 [110/20] via [Link], 00:01:44, Serial2/1
O E2 [Link]/8 [110/20] via [Link], 00:01:44, Serial2/1

R4#show ip route summary

IP routing table name is Default-IP-Routing-Table(0)
IP routing table maximum-paths is 16
Route Source Networks Subnets Overhead Memory (bytes)
connected 3 1 324 544
static 4 0 432 544
eigrp 100 1 0 108 136
ospf 1 20 3 1656 3128
Intra-area: 4 Inter-area: 0 External-1: 0 External-2: 19
NSSA External-1: 0 NSSA External-2: 0
internal 4 4624
Total 32 4 2520 8976

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 124
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Router R3

R3#show ip route Note:

D EX [Link]/24 [170/2560512256] via [Link], 00:03:13, Serial2/1 Internal EIGRP AD value is 90

D EX [Link]/8 [170/2560512256] via [Link], 00:03:02, Serial2/1 Internal EIGRP AD value is 170
C [Link]/8 is directly connected, Serial2/0
[Link]/32 is subnetted, 1 subnets
C [Link] is directly connected, Loopback0
C [Link]/8 is directly connected, Serial2/1
D EX [Link]/8 [170/2560512256] via [Link], 00:03:13, Serial2/1
D EX [Link]/24 [170/2560512256] via [Link], 00:02:57, Serial2/1
D EX [Link]/16 [170/2560512256] via [Link], 00:03:03, Serial2/1
D EX [Link]/24 [170/2560512256] via [Link], 00:03:05, Serial2/1
[Link]/32 is subnetted, 1 subnets
D EX [Link] [170/2560512256] via [Link], 00:03:05, Serial2/1
D EX [Link]/24 [170/2560512256] via [Link], 00:03:01, Serial2/1
D EX [Link]/16 [170/2560512256] via [Link], 00:03:05, Serial2/1
D EX [Link]/24 [170/2560512256] via [Link], 00:03:03, Serial2/1
D EX [Link]/8 [170/2560512256] via [Link], 00:03:05, Serial2/1
D EX [Link]/16 [170/2560512256] via [Link], 00:03:05, Serial2/1
C [Link]/24 is directly connected, FastEthernet0/0
[Link]/32 is subnetted, 1 subnets
D EX [Link] [170/2560512256] via [Link], 00:03:08, Serial2/1
D EX [Link]/24 [170/2560512256] via [Link], 00:02:43, Serial2/1
D EX [Link]/24 [170/2560512256] via [Link], 00:02:43, Serial2/1
S [Link]/24 is directly connected, Null0
D EX [Link]/24 [170/2560512256] via [Link], 00:02:43, Serial2/1
S [Link]/24 is directly connected, Null0
D EX [Link]/24 [170/2560512256] via [Link], 00:02:43, Serial2/1
D EX [Link]/24 [170/2560512256] via [Link], 00:02:43, Serial2/1
S [Link]/24 is directly connected, Null0
D EX [Link]/24 [170/2560512256] via [Link], 00:02:46, Serial2/1
[Link]/32 is subnetted, 1 subnets
D EX [Link] [170/2560512256] via [Link], 00:03:21, Serial2/1
S [Link]/24 is directly connected, Null0
D EX [Link]/24 [170/2560512256] via [Link], 00:02:46, Serial2/1
D EX [Link]/24 [170/2560512256] via [Link], 00:02:46, Serial2/1
D EX [Link]/8 [170/2560512256] via [Link], 00:03:08, Serial2/1
D EX [Link]/8 [170/2560512256] via [Link], 00:03:08, Serial2/1

R3#show ip route summary

IP routing table name is Default-IP-Routing-Table(0)
IP routing table maximum-paths is 16
Route Source Networks Subnets Overhead Memory (bytes)
connected 3 1 288 544
static 4 0 288 544
eigrp 100 21 3 1728 3264
ospf 2 0 0 0 0
Intra-area: 0 Inter-area: 0 External-1: 0 External-2: 0
NSSA External-1: 0 NSSA External-2: 0
internal 4 4624
Total 32 4 2304 8976

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 125
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Router R2

R2#show ip route

O IA [Link]/24 [110/129] via [Link], 00:03:17, Serial2/0

C [Link]/8 is directly connected, Serial2/0
C [Link]/8 is directly connected, Serial2/1
[Link]/32 is subnetted, 1 subnets
D EX [Link] [170/2560512256] via [Link], 00:03:43, Serial2/1
D [Link]/8 [90/2681856] via [Link], 00:03:43, Serial2/1
O [Link]/8 [110/128] via [Link], 00:03:17, Serial2/0
[Link]/32 is subnetted, 1 subnets
C [Link] is directly connected, Loopback1
O E2 [Link]/24 [110/20] via [Link], 00:03:21, Serial2/0
O E2 [Link]/16 [110/20] via [Link], 00:03:21, Serial2/0
C [Link]/24 is directly connected, FastEthernet0/0
[Link]/32 is subnetted, 1 subnets
C [Link] is directly connected, Loopback0
O E2 [Link]/24 [110/20] via [Link], 00:03:21, Serial2/0
O E2 [Link]/16 [110/20] via [Link], 00:03:21, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:03:21, Serial2/0
O E2 [Link]/8 [110/20] via [Link], 00:03:21, Serial2/0
O E2 [Link]/16 [110/20] via [Link], 00:03:21, Serial2/0
D EX [Link]/24 [170/2560512256] via [Link], 00:03:47, Serial2/1
[Link]/32 is subnetted, 1 subnets
O [Link] [110/65] via [Link], 00:03:21, Serial2/0
D EX [Link]/24 [170/2561024256] via [Link], 00:03:11, Serial2/1
S [Link]/24 is directly connected, Null0
D EX [Link]/24 [170/2560512256] via [Link], 00:03:47, Serial2/1
D EX [Link]/24 [170/2561024256] via [Link], 00:03:15, Serial2/1
D EX [Link]/24 [170/2560512256] via [Link], 00:03:51, Serial2/1
S [Link]/24 is directly connected, Null0
S [Link]/24 is directly connected, Null0
D EX [Link]/24 [170/2560512256] via [Link], 00:03:51, Serial2/1
D EX [Link]/24 [170/2561024256] via [Link], 00:03:15, Serial2/1
[Link]/32 is subnetted, 1 subnets
O IA [Link] [110/129] via [Link], 00:03:25, Serial2/0
D EX [Link]/24 [170/2560512256] via [Link], 00:03:51, Serial2/1
S [Link]/24 is directly connected, Null0
D EX [Link]/24 [170/2561024256] via [Link], 00:03:15, Serial2/1

R2#show ip route summary

IP routing table name is Default-IP-Routing-Table(0)
IP routing table maximum-paths is 16
Route Source Networks Subnets Overhead Memory (bytes)
connected 3 2 360 680
static 4 0 288 544
eigrp 100 10 1 792 1496
ospf 1 11 2 936 1768
Intra-area: 2 Inter-area: 2 External-1: 0 External-2: 9
NSSA External-1: 0 NSSA External-2: 0
internal 5 5780
Total 33 5 2376 10268

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 126
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Note: Routing loops must be in redistribution if topology is down or restarted. To avoid routing loops
redistribution must be done with stability. Policy Base routing is used to avoid these loops.

3.3. You are not allowed to advertise Loopback1 of R2 with Network Command.

R2(config)#route-map LOOPBACK1 permit 10

R2(config-route-map)#match interface loopback 1
R2(config)#router ospf 1
R2(config-router)#redistribute connected subnets route-map LOOPBACK1

Note: Directly connected interfaces can be redistribute.

R1#sh ip route

O IA [Link]/24 [110/65] via [Link], 00:08:24, Serial2/1

C [Link]/8 is directly connected, Serial2/0
[Link]/32 is subnetted, 1 subnets
O E2 [Link] [110/20] via [Link], 00:08:24, Serial2/0
O E2 [Link]/8 [110/20] via [Link], 00:08:24, Serial2/0
C [Link]/8 is directly connected, Serial2/1
[Link]/32 is subnetted, 1 subnets
O E2 [Link] [110/20] via [Link], 00:03:51, Serial2/0
C [Link]/24 is directly connected, FastEthernet0/0
R [Link]/16 [120/1] via [Link], 00:00:27, FastEthernet0/0
O IA [Link]/24 [110/65] via [Link], 00:08:28, Serial2/0
[Link]/32 is subnetted, 1 subnets
O IA [Link] [110/65] via [Link], 00:08:28, Serial2/0
R [Link]/24 [120/1] via [Link], 00:00:03, FastEthernet0/0
R [Link]/16 [120/1] via [Link], 00:00:03, FastEthernet0/0
R [Link]/24 [120/1] via [Link], 00:00:03, FastEthernet0/0
R [Link]/8 [120/1] via [Link], 00:00:03, FastEthernet0/0
R [Link]/16 [120/1] via [Link], 00:00:03, FastEthernet0/0
O E2 [Link]/24 [110/20] via [Link], 00:08:32, Serial2/0
[Link]/32 is subnetted, 1 subnets
C [Link] is directly connected, Loopback0
O E2 [Link]/24 [110/20] via [Link], 00:08:32, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:08:32, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:08:32, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:08:32, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:08:32, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:08:32, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:08:32, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:08:37, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:08:37, Serial2/0
[Link]/32 is subnetted, 1 subnets
O IA [Link] [110/65] via [Link], 00:08:37, Serial2/1
O E2 [Link]/24 [110/20] via [Link], 00:08:37, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:08:37, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:08:37, Serial2/0
R [Link]/8 [120/1] via [Link], 00:00:08, FastEthernet0/0
R [Link]/8 [120/1] via [Link], 00:00:11, FastEthernet0/0

Note: Now a problem occurs after redistributing connected loopback1 on Router R2, one network is no
more in R1’s routing table. It will discuss in next lecture.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 127
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Lecture # 22
Final Lab (Continue)

If we look at the routing table of Router R1 there is a big change occur due to topology restart RIP routes
are now with OSPF O E2. Why? After redistribution R1 receives RIP routes from two points R5, R2.
Because OSPF AD value is 110 and RIP=120, that’s why prefers these routes with OSPF external routes
from R2.

Router R1 Before Topology Restart Router R1 after Topology Restart

R2#show ip route R1#show ip route

O IA [Link]/24 [110/65] via [Link], 00:08:24, Serial2/1 O IA [Link]/24 [110/65] via [Link], 00:00:24, Serial2/1
C [Link]/8 is directly connected, Serial2/0 C [Link]/8 is directly connected, Serial2/0
[Link]/32 is subnetted, 1 subnets [Link]/32 is subnetted, 1 subnets
O E2 [Link] [110/20] via [Link], 00:08:24, Serial2/0 O E2 [Link] [110/20] via [Link], 00:00:24, Serial2/0
O E2 [Link]/8 [110/20] via [Link], 00:08:24, Serial2/0 O E2 [Link]/8 [110/20] via [Link], 00:00:24, Serial2/0
C [Link]/8 is directly connected, Serial2/1 C [Link]/8 is directly connected, Serial2/1
[Link]/32 is subnetted, 1 subnets [Link]/32 is subnetted, 1 subnets
O E2 [Link] [110/20] via [Link], 00:03:51, Serial2/0 O E2 [Link] [110/20] via [Link], 00:00:24, Serial2/0
C [Link]/24 is directly connected, FastEthernet0/0 C [Link]/24 is directly connected, FastEthernet0/0
R [Link]/16 [120/1] via [Link], 00:00:27, O E2 [Link]/16 [110/20] via [Link], 00:00:29, Serial2/0
FastEthernet0/0 O IA [Link]/24 [110/65] via [Link], 00:00:29, Serial2/0
O IA [Link]/24 [110/65] via [Link], 00:08:28, Serial2/0 [Link]/32 is subnetted, 1 subnets
[Link]/32 is subnetted, 1 subnets O IA [Link] [110/65] via [Link], 00:00:29, Serial2/0
O IA [Link] [110/65] via [Link], 00:08:28, Serial2/0 O E2 [Link]/24 [110/20] via [Link], 00:00:01, Serial2/0
R [Link]/24 [120/1] via [Link], 00:00:03, O E2 [Link]/16 [110/20] via [Link], 00:00:01, Serial2/0
FastEthernet0/0 O E2 [Link]/24 [110/20] via [Link], 00:00:01, Serial2/0
R [Link]/16 [120/1] via [Link], 00:00:03, O E2 [Link]/8 [110/20] via [Link], 00:00:01, Serial2/0
FastEthernet0/0 O E2 [Link]/16 [110/20] via [Link], 00:00:01, Serial2/0
R [Link]/24 [120/1] via [Link], 00:00:03, O E2 [Link]/24 [110/20] via [Link], 00:00:01, Serial2/0
FastEthernet0/0 [Link]/32 is subnetted, 1 subnets
R [Link]/8 [120/1] via [Link], 00:00:03, C [Link] is directly connected, Loopback0
FastEthernet0/0 O E2 [Link]/24 [110/20] via [Link], 00:00:01, Serial2/0
R [Link]/16 [120/1] via [Link], 00:00:03, O E2 [Link]/24 [110/20] via [Link], 00:00:01, Serial2/0
FastEthernet0/0 O E2 [Link]/24 [110/20] via [Link], 00:00:01, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:08:32, Serial2/0 O E2 [Link]/24 [110/20] via [Link], 00:00:01, Serial2/0
[Link]/32 is subnetted, 1 subnets O E2 [Link]/24 [110/20] via [Link], 00:00:01, Serial2/0
C [Link] is directly connected, Loopback0 O E2 [Link]/24 [110/20] via [Link], 00:00:01, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:08:32, Serial2/0 O E2 [Link]/24 [110/20] via [Link], 00:00:01, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:08:32, Serial2/0 O E2 [Link]/24 [110/20] via [Link], 00:00:01, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:08:32, Serial2/0 O E2 [Link]/24 [110/20] via [Link], 00:00:05, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:08:32, Serial2/0 [Link]/32 is subnetted, 1 subnets
O E2 [Link]/24 [110/20] via [Link], 00:08:32, Serial2/0 O IA [Link] [110/65] via [Link], 00:00:05, Serial2/1
O E2 [Link]/24 [110/20] via [Link], 00:08:32, Serial2/0 O E2 [Link]/24 [110/20] via [Link], 00:00:05, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:08:32, Serial2/0 O E2 [Link]/24 [110/20] via [Link], 00:00:05, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:08:37, Serial2/0 O E2 [Link]/24 [110/20] via [Link], 00:00:05, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:08:37, Serial2/0 O E2 [Link]/8 [110/20] via [Link], 00:00:05, Serial2/0
[Link]/32 is subnetted, 1 subnets O E2 [Link]/8 [110/20] via [Link], 00:00:09, Serial2/0
O IA [Link] [110/65] via [Link], 00:08:37, Serial2/1
O E2 [Link]/24 [110/20] via [Link], 00:08:37, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:08:37, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:08:37, Serial2/0
R [Link]/8 [120/1] via [Link], 00:00:08, FastEthernet0/0
R [Link]/8 [120/1] via [Link], 00:00:11, FastEthernet0/0

One more change. the network O E2 [Link]/8 [110/20] via [Link], 00:00:00, Serial2/0 is no more in
routing table of R1 due to redistributing connected loopback1 on Router R2 In task 3.

To overcome these situations Policy Base Routing is helpful.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 128
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

There are many solution one solution you can change RIP AD value to 109 or there is another solution is
policy base routing. That is route map.

We can tag RIP routes on redistribution while these routes reach from R4 to R3 and R3 to R2 and then
R2 to R1, on R1 we will drop these Tagged redistributed RIP routes with the help of Distributed List.

R1(config)#router ospf 1

R1(config-router)#redistribute rip subnets tag 500

You can see the route with tag500 on any router.

R4#show ip route [Link]  For specific network

Routing entry for [Link]/24
Known via "ospf 1", distance 110, metric 20
Tag 500, type extern 2, forward metric 64
Redistributing via eigrp 100
Advertised by eigrp 100 metric 1 1 1 1 1
Last update from [Link] on Serial2/1, 00:01:15 ago
Routing Descriptor Blocks:
* [Link], from [Link], 00:01:15 ago, via Serial2/1
Route metric is 20, traffic share count is 1
Route tag 500

Route-Map and Distribute-list on R1

R1(config)#route-map DROP deny 10

R1(config-route-map)#match tag 500
R1(config)#route-map DROP permit 20
R1(config-route-map)#exit

R1(config)#router ospf 1
R1(config-router)#distribute-list route-map DROP in
R1(config-router)#end

Router R1 After Topology Restart Router R1 after Route-Map and Distribute-list

R1#show ip route R1#show ip route

O IA [Link]/24 [110/65] via [Link], 00:00:24, Serial2/1 O IA [Link]/24 [110/65] via [Link], 00:02:25, Serial2/1
C [Link]/8 is directly connected, Serial2/0 C [Link]/8 is directly connected, Serial2/0
[Link]/32 is subnetted, 1 subnets [Link]/32 is subnetted, 1 subnets
O E2 [Link] [110/20] via [Link], 00:00:24, Serial2/0 O E2 [Link] [110/20] via [Link], 00:00:41, Serial2/0
O E2 [Link]/8 [110/20] via [Link], 00:00:24, Serial2/0 O E2 [Link]/8 [110/20] via [Link], 00:00:41, Serial2/0
C [Link]/8 is directly connected, Serial2/1 C [Link]/8 is directly connected, Serial2/1
[Link]/32 is subnetted, 1 subnets [Link]/32 is subnetted, 1 subnets
O E2 [Link] [110/20] via [Link], 00:00:24, Serial2/0 O E2 [Link] [110/20] via [Link], 00:02:25, Serial2/0
C [Link]/24 is directly connected, FastEthernet0/0 C [Link]/24 is directly connected, FastEthernet0/0
O E2 [Link]/16 [110/20] via [Link], 00:00:29, Serial2/0 R [Link]/16 [120/1] via [Link], 00:00:20,
O IA [Link]/24 [110/65] via [Link], 00:00:29, Serial2/0 FastEthernet0/0
[Link]/32 is subnetted, 1 subnets O IA [Link]/24 [110/65] via [Link], 00:02:28, Serial2/0

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 129
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

O IA [Link] [110/65] via [Link], 00:00:29, Serial2/0 [Link]/32 is subnetted, 1 subnets

O E2 [Link]/24 [110/20] via [Link], 00:00:01, Serial2/0 O IA [Link] [110/65] via [Link], 00:02:28, Serial2/0
O E2 [Link]/16 [110/20] via [Link], 00:00:01, Serial2/0 R [Link]/24 [120/1] via [Link], 00:00:22,
O E2 [Link]/24 [110/20] via [Link], 00:00:01, Serial2/0 FastEthernet0/0
O E2 [Link]/8 [110/20] via [Link], 00:00:01, Serial2/0 R [Link]/16 [120/1] via [Link], 00:00:22,
O E2 [Link]/16 [110/20] via [Link], 00:00:01, Serial2/0 FastEthernet0/0
O E2 [Link]/24 [110/20] via [Link], 00:00:01, Serial2/0 R [Link]/24 [120/1] via [Link], 00:00:22,
[Link]/32 is subnetted, 1 subnets FastEthernet0/0
C [Link] is directly connected, Loopback0 R [Link]/8 [120/1] via [Link], 00:00:22,
O E2 [Link]/24 [110/20] via [Link], 00:00:01, Serial2/0 FastEthernet0/0
O E2 [Link]/24 [110/20] via [Link], 00:00:01, Serial2/0 R [Link]/16 [120/1] via [Link], 00:00:22,
O E2 [Link]/24 [110/20] via [Link], 00:00:01, Serial2/0 FastEthernet0/0
O E2 [Link]/24 [110/20] via [Link], 00:00:01, Serial2/0 O E2 [Link]/24 [110/20] via [Link], 00:00:47, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:00:01, Serial2/0 [Link]/32 is subnetted, 1 subnets
O E2 [Link]/24 [110/20] via [Link], 00:00:01, Serial2/0 C [Link] is directly connected, Loopback0
O E2 [Link]/24 [110/20] via [Link], 00:00:01, Serial2/0 O E2 [Link]/24 [110/20] via [Link], 00:00:45, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:00:01, Serial2/0 O E2 [Link]/24 [110/20] via [Link], 00:02:30, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:00:05, Serial2/0 O E2 [Link]/24 [110/20] via [Link], 00:00:46, Serial2/0
[Link]/32 is subnetted, 1 subnets O E2 [Link]/24 [110/20] via [Link], 00:00:45, Serial2/0
O IA [Link] [110/65] via [Link], 00:00:05, Serial2/1 O E2 [Link]/24 [110/20] via [Link], 00:00:46, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:00:05, Serial2/0 O E2 [Link]/24 [110/20] via [Link], 00:02:30, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:00:05, Serial2/0 O E2 [Link]/24 [110/20] via [Link], 00:02:30, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:00:05, Serial2/0 O E2 [Link]/24 [110/20] via [Link], 00:00:50, Serial2/0
O E2 [Link]/8 [110/20] via [Link], 00:00:05, Serial2/0 O E2 [Link]/24 [110/20] via [Link], 00:00:50, Serial2/0
O E2 [Link]/8 [110/20] via [Link], 00:00:09, Serial2/0 [Link]/32 is subnetted, 1 subnets
O IA [Link] [110/65] via [Link], 00:02:33, Serial2/1
O E2 [Link]/24 [110/20] via [Link], 00:00:50, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:02:33, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:00:49, Serial2/0
R [Link]/8 [120/1] via [Link], 00:00:25, FastEthernet0/0
R [Link]/8 [120/1] via [Link], 00:00:28, FastEthernet0/0

For the solution of missing network O E2 [Link]/8, first we will study the behavior of IPv4
redistribution.
Redistribution

Lo 0

Fa 0

RIP OSPF
A B C

If we redistribute RIP in to OSPF than the IPv4 first redistribute pure RIP route that is Fa0 and then
directly connected on which RIP is enabled with network command i.e. Lo 0.

And if there is IPv6 it only redistribute pure RIP route it does not redistribute connected itself.

In our case:

R2(config-router)#redistribute connected subnets route-map LOOPBACK1

Because of this command and according to IPv4 redistribution rule only connected networks are
redistributed and further there is a policy for connected network only loopback is redistributed that’s
why network [Link]/8 dropped due to this policy.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 130
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Solution for it:

On Router R2.

R2(config)#router ospf 1

R2(config-router)#no redistribute connected

R2(config-router)#redistribute connected subnets

Note: Network is Converged now every router has 33 routes.

R1#sh ip route
O IA [Link]/24 [110/65] via [Link], 00:00:09, Serial2/1
C [Link]/8 is directly connected, Serial2/0
O E2 [Link]/8 [110/20] via [Link], 00:00:09, Serial2/0
[Link]/32 is subnetted, 1 subnets
O E2 [Link] [110/20] via [Link], 00:00:07, Serial2/0
O E2 [Link]/8 [110/20] via [Link], 00:00:07, Serial2/0
C [Link]/8 is directly connected, Serial2/1
[Link]/32 is subnetted, 1 subnets
O E2 [Link] [110/20] via [Link], 00:00:09, Serial2/0
C [Link]/24 is directly connected, FastEthernet0/0
R [Link]/16 [120/1] via [Link], 00:00:11, FastEthernet0/0
O IA [Link]/24 [110/65] via [Link], 00:00:12, Serial2/0
[Link]/32 is subnetted, 1 subnets
O IA [Link] [110/65] via [Link], 00:00:15, Serial2/0
R [Link]/24 [120/1] via [Link], 00:00:14, FastEthernet0/0
R [Link]/16 [120/1] via [Link], 00:00:14, FastEthernet0/0
R [Link]/24 [120/1] via [Link], 00:00:14, FastEthernet0/0
R [Link]/8 [120/1] via [Link], 00:00:14, FastEthernet0/0
R [Link]/16 [120/1] via [Link], 00:00:14, FastEthernet0/0
O E2 [Link]/24 [110/20] via [Link], 00:00:14, Serial2/0
[Link]/32 is subnetted, 1 subnets
C [Link] is directly connected, Loopback0
O E2 [Link]/24 [110/20] via [Link], 00:00:12, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:00:15, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:00:12, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:00:12, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:00:13, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:00:15, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:00:18, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:00:15, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:00:15, Serial2/0
[Link]/32 is subnetted, 1 subnets
O IA [Link] [110/65] via [Link], 00:00:18, Serial2/1
O E2 [Link]/24 [110/20] via [Link], 00:00:15, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:00:18, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:00:15, Serial2/0
R [Link]/8 [120/1] via [Link], 00:00:17, FastEthernet0/0
R [Link]/8 [120/1] via [Link], 00:00:17, FastEthernet0/0

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 131
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

R1#show ip route summary

IP routing table name is Default-IP-Routing-Table(0)
IP routing table maximum-paths is 16
Route Source Networks Subnets Overhead Memory (bytes)
connected 3 1 288 544
static 0 0 0 0
ospf 1 17 4 1512 2856
Intra-area: 0 Inter-area: 4 External-1: 0 External-2: 17
NSSA External-1: 0 NSSA External-2: 0
rip 8 0 576 1088
internal 5 5780
Total 33 5 2376 10268

R2#show ip route summ

IP routing table name is Default-IP-Routing-Table(0)
IP routing table maximum-paths is 16
Route Source Networks Subnets Overhead Memory (bytes)
connected 3 2 360 680
static 4 0 288 544
eigrp 100 10 1 792 1496
ospf 1 11 2 936 1768
Intra-area: 2 Inter-area: 2 External-1: 0 External-2: 9
NSSA External-1: 0 NSSA External-2: 0
internal 5 5780
Total 33 5 2376 10268

R3#show ip route summ

IP routing table name is Default-IP-Routing-Table(0)
IP routing table maximum-paths is 16
Route Source Networks Subnets Overhead Memory (bytes)
connected 3 1 288 544
static 4 0 288 544
eigrp 100 21 4 1800 3400
ospf 2 0 0 0 0
Intra-area: 0 Inter-area: 0 External-1: 0 External-2: 0
NSSA External-1: 0 NSSA External-2: 0
internal 5 5780
Total 33 5 2376 10268

R4#show ip route summary

IP routing table name is Default-IP-Routing-Table(0)
IP routing table maximum-paths is 16
Route Source Networks Subnets Overhead Memory (bytes)
connected 3 1 324 544
static 4 0 432 544
eigrp 100 1 0 108 136
ospf 1 20 4 1728 3264
Intra-area: 4 Inter-area: 0 External-1: 0 External-2: 20
NSSA External-1: 0 NSSA External-2: 0
internal 5 5780
Total 33 5 2592 10268

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 132
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

TASK4: Try to configure OSPF area 1 as STUB and note the “Remark”.

Stub Area: “Such Area where only single exit point”. LSA-5 is not allowed to enter or to be generated in
stub area.

(See lecture # 16 for more detail)

R2(config)#router ospf 1

R2(config-router)#area 1 stub

“Remark”

% OSPF: Area cannot be a stub as it contains a virtual link

TASK5:

5.1. Configure Policy Based Routing according to the following table:

[Link]/24 OSPF METRIC TYPE SHOULD BE TYPE-2

[Link]/24 EXTERNAL OSPF METRIC 30
[Link]/24 OSPF METRIC TYPE SHOULD BE TYPE-1
[Link]/24

5.2. R1 should only receive Class A networks from Backbone Router.

Backbone Router is Pre-configured, and NOT Reachable by the candidate.

5.1. Configure Policy Based Routing according to the following table:

These static routes are in Router R4 now the question arise where to configure the policy base routing
we cannot configure it on R4 and R3 because EIGRP is configured on these routers and in the task OSPF
metric should be type-1 and type-2 it must be configure on Router R2 because OSPF is running on it.

Router R2

R2(config)#ip access-list standard EVEN

R2(config-std-nacl)#permit [Link] [Link]
R2(config-std-nacl)#exit

R2(config)#ip access-list standard ODD

R2(config-std-nacl)#permit [Link] [Link]
R2(config-std-nacl)#exit

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 133
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

R2(config)#route-map PBR permit 10

R2(config-route-map)#match ip address EVEN
R2(config-route-map)#set metric-type type-2
R2(config-route-map)#set metric 30
R2(config-route-map)#exit

R2(config)#route-map PBR permit 20

R2(config-route-map)#match ip address ODD
R2(config-route-map)#set metric-type type-1
R2(config-route-map)#exit

R2(config)#route-map PBR permit 30

R2(config-route-map)#end

R2#conf t
R2(config)#router ospf 1
R2(config-router)#redistribute eigrp 100 subnets route-map PBR
R2(config-router)#end

On Router R1 for verification

R1#show ip route | inc 192.168.3

O E2 [Link]/24 [110/20] via [Link], 00:18:44, Serial2/0
O E1 [Link]/24 [110/84] via [Link], 00:04:53, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:18:44, Serial2/0
O E2 [Link]/24 [110/20] via [Link], 00:18:44, Serial2/0
O E1 [Link]/24 [110/84] via [Link], 00:04:53, Serial2/0

5.2. R1 should only receive Class A networks from Backbone Router.

R1(config)#ip access-list standard 3

R1(config-std-nacl)#permit [Link] [Link]
R1(config-std-nacl)#
R1(config-std-nacl)#exit

R1(config)#router rip
R1(config-router)#distribute-list 3 in fa
R1(config-router)#distribute-list 3 in fastEthernet 0/0
R1(config-router)#
R1(config-router)#end

Note: See lecture # 12 how to deny permit whole network of any class.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 134
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Router R1 Before Access List Router R1 After Access List

R1#show ip route rip R1#sh ip route rip

R [Link]/16 [120/1] via [Link], 00:00:26, R [Link]/8 [120/1] via [Link], 00:00:06,
FastEthernet0/0 FastEthernet0/0
R [Link]/24 [120/1] via [Link], 00:00:26, R [Link]/8 [120/1] via [Link], 00:00:06, FastEthernet0/0
FastEthernet0/0 R [Link]/8 [120/1] via [Link], 00:00:06, FastEthernet0/0
R [Link]/16 [120/1] via [Link], 00:00:26,
FastEthernet0/0
R [Link]/24 [120/1] via [Link], 00:00:26,
FastEthernet0/0
R [Link]/8 [120/1] via [Link], 00:00:01,
FastEthernet0/0
R [Link]/16 [120/1] via [Link], 00:00:26,
FastEthernet0/0
R [Link]/8 [120/1] via [Link], 00:00:01, FastEthernet0/0
R [Link]/8 [120/1] via [Link], 00:00:01, FastEthernet0/0

Note: Flush out time of RIP is 240 seconds.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 135
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Lecture # 23
Final Lab (Continue)

TASK6: Perform OSPF route-summarization for R2 static routes given in the table.

R2(config)#router ospf 1
R2(config-router)#summ
R2(config-router)#summary-address [Link] [Link]
R2(config-router)#end

Note: See Lecture # 18 “Route-Summarization” for more detail.

R2#show ip route

O IA [Link]/24 [110/129] via [Link], 00:53:45, Serial2/0

C [Link]/8 is directly connected, Serial2/0
C [Link]/8 is directly connected, Serial2/1
[Link]/32 is subnetted, 1 subnets
D EX [Link] [170/2560512256] via [Link], 00:54:07, Serial2/1
D [Link]/8 [90/2681856] via [Link], 00:54:07, Serial2/1
O [Link]/8 [110/128] via [Link], 00:53:45, Serial2/0
[Link]/32 is subnetted, 1 subnets
C [Link] is directly connected, Loopback1
O E2 [Link]/24 [110/20] via [Link], 00:52:44, Serial2/0
D EX [Link]/16 [170/2561024256] via [Link], 00:18:46, Serial2/1
C [Link]/24 is directly connected, FastEthernet0/0
[Link]/32 is subnetted, 1 subnets
C [Link] is directly connected, Loopback0
D EX [Link]/24 [170/2561024256] via [Link], 00:18:55, Serial2/1
D EX [Link]/16 [170/2561024256] via [Link], 00:18:55, Serial2/1
D EX [Link]/24 [170/2561024256] via [Link], 00:18:55, Serial2/1
O E2 [Link]/8 [110/20] via [Link], 00:50:17, Serial2/0
D EX [Link]/16 [170/2561024256] via [Link], 00:18:55, Serial2/1
D EX [Link]/24 [170/2560512256] via [Link], 00:54:21, Serial2/1
[Link]/32 is subnetted, 1 subnets
O [Link] [110/65] via [Link], 00:53:59, Serial2/0
D EX [Link]/24 [170/2561024256] via [Link], 00:54:20, Serial2/1
S [Link]/24 is directly connected, Null0
D EX [Link]/24 [170/2560512256] via [Link], 00:54:18, Serial2/1
D EX [Link]/24 [170/2561024256] via [Link], 00:54:20, Serial2/1
D EX [Link]/24 [170/2560512256] via [Link], 00:54:18, Serial2/1
S [Link]/24 is directly connected, Null0
S [Link]/24 is directly connected, Null0
D EX [Link]/24 [170/2560512256] via [Link], 00:54:22, Serial2/1
D EX [Link]/24 [170/2561024256] via [Link], 00:54:24, Serial2/1
[Link]/32 is subnetted, 1 subnets
O IA [Link] [110/129] via [Link], 00:54:03, Serial2/0
D EX [Link]/24 [170/2560512256] via [Link], 00:54:22, Serial2/1
S [Link]/24 is directly connected, Null0
D EX [Link]/24 [170/2561024256] via [Link], 00:54:24, Serial2/1
O E2 [Link]/8 [110/20] via [Link], 00:50:24, Serial2/0
O E2 [Link]/8 [110/20] via [Link], 00:50:24, Serial2/0
O [Link]/22 is a summary, 00:00:42, Null0  Summarized Address.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 136
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

TASK7: Perform EIGRP route-summarization for R3 static routes given in the table.

Note: Interface-level route-summarization is performed on in EIGRP not globally. Summarization in EIGRP

and RIP is same.

R3(config)#interface serial 2/0

R3(config-if)#ip summary-address eigrp 100 [Link] [Link]
R3(config-if)#
*Mar 1 01:11:50.999: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 100: Neighbor [Link] (Serial2/0) is resync:
summary configured

On Router R2

R2#show ip route eigrp

[Link]/32 is subnetted, 1 subnets
D EX [Link] [170/2560512256] via [Link], 01:13:29, Serial2/1
D [Link]/8 [90/2681856] via [Link], 01:13:29, Serial2/1
D EX [Link]/16 [170/2561024256] via [Link], 00:38:03, Serial2/1
D EX [Link]/24 [170/2561024256] via [Link], 00:38:03, Serial2/1
D EX [Link]/16 [170/2561024256] via [Link], 00:38:03, Serial2/1
D EX [Link]/24 [170/2561024256] via [Link], 00:38:03, Serial2/1
D EX [Link]/16 [170/2561024256] via [Link], 00:38:03, Serial2/1
D EX [Link]/24 [170/2560512256] via [Link], 01:13:29, Serial2/1
D EX [Link]/24 [170/2561024256] via [Link], 01:13:28, Serial2/1
D EX [Link]/24 [170/2561024256] via [Link], 01:13:28, Serial2/1
D EX [Link]/24 [170/2561024256] via [Link], 01:13:28, Serial2/1
D EX [Link]/24 [170/2561024256] via [Link], 01:13:28, Serial2/1
D [Link]/22 [90/2560512256] via [Link], 00:01:54, Serial2/1

Note: This network [Link] was previously with D EX now only with D reason is, “because summary
is performed internally on R3”

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 137
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

TASK8: Network [Link]/24 is appearing as O-IA in R2 Routing Table, It should appear with D-
EX, and your solution should not impact any other Route in the Network.

Solution:

This network [Link]/24 is appearing as O-IA in R2 because of virtual link. This route is reaching in
R2 from 2 paths, 1st virtual link and secondly through EIGRP R4
R3
R2. The AD value of OSPF 110
and AD value of External EIGRP is 170 that’s why appearing as O-IA.

We can change the AD value of that route with policy base routing on Router R2.

Router R2

R2(config)#access-list 65 per
R2(config)#access-list 65 permit [Link] [Link]

R2(config)#router ospf 1
R2(config-router)#distance 171 [Link] [Link] ?
<1-99> IP Standard access list number
<1300-1999> IP Standard expanded access list number
WORD Standard access-list name
<cr>

R2(config-router)#distance 171 [Link] [Link] 65

R2(config-router)#end

R2#show ip route eigrp

D EX [Link]/24 [170/2561024256] via [Link], 00:01:25, Serial2/1
[Link]/32 is subnetted, 1 subnets
D EX [Link] [170/2560512256] via [Link], 01:34:57, Serial2/1
D [Link]/8 [90/2681856] via [Link], 01:34:57, Serial2/1
D EX [Link]/16 [170/2561024256] via [Link], 00:59:32, Serial2/1
D EX [Link]/24 [170/2561024256] via [Link], 00:59:32, Serial2/1
D EX [Link]/16 [170/2561024256] via [Link], 00:59:32, Serial2/1
D EX [Link]/24 [170/2561024256] via [Link], 00:59:32, Serial2/1
D EX [Link]/8 [170/2561024256] via [Link], 00:01:24, Serial2/1
D EX [Link]/16 [170/2561024256] via [Link], 00:59:32, Serial2/1
D EX [Link]/24 [170/2560512256] via [Link], 01:34:57, Serial2/1
D EX [Link]/24 [170/2561024256] via [Link], 01:34:56, Serial2/1
D EX [Link]/24 [170/2561024256] via [Link], 01:34:56, Serial2/1
D EX [Link]/24 [170/2561024256] via [Link], 01:34:56, Serial2/1
D EX [Link]/24 [170/2561024256] via [Link], 01:34:56, Serial2/1
D EX [Link]/8 [170/2561024256] via [Link], 00:01:25, Serial2/1
D EX [Link]/8 [170/2561024256] via [Link], 00:01:25, Serial2/1
D EX [Link]/22 [170/2561024256] via [Link], 00:01:26, Serial2/1
D [Link]/22 [90/2560512256] via [Link], 00:23:24, Serial2/1

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 138
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

TASK9: Perform OSPF and EIGRP Authentication between R1-R2 and R2-R3.

Use strongest Authentication Method and set all passwords as “cisco”.

Note: Authentication for RIP v2 and EIGRP is same. RIP v1 has no authentication.

Strongest Authentication Method is MD5 in Cisco.

Authentication is always interface level.

OSPF Authentication between R1-R2

Router R1
R1#conf t
R1(config)#inter serial 2/0
R1(config-if)#ip ospf authentication message-digest
*Mar 1 00:14:35.663: %OSPF-5-ADJCHG: Process 1, Nbr [Link] on Serial2/0 from FULL to DOWN,
Neighbor Down: Dead timer expired  Hello packet mismatched
R1(config-if)#ip ospf message-digest-key 1 md5 cisco

Note: Same configuration must be on R2 for neighbor-ship.

Router R2
R2(config)#interface serial 2/0
R2(config-if)#ip ospf authentication message-digest

R2(config-if)#ip ospf message-digest-key 1 md5 cisco

*Mar 1 00:20:23.715: %OSPF-5-ADJCHG: Process 1, Nbr [Link] on Serial2/0 from LOADING to

FULL, Loading Done  Neighbor-ship done

EIGRP Authentication between R2-R3

Router R2

R2(config)#key chain EIGRP

R2(config-keychain)#key 1 *can be up to 2147483647
R2(config-keychain-key)#key-string ?
0 Specifies an UNENCRYPTED password will follow
7 Specifies a HIDDEN password will follow
LINE The UNENCRYPTED (cleartext) user password

R2(config-keychain-key)#key-string cisco
R2(config-keychain-key)#end
R2#

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 139
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

R2#conf t
R2(config)#interface serial 2/1
R2(config-if)#ip authentication mode eigrp 100 md5
*Mar 1 00:02:41.515: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 100: Neighbor [Link] (Serial2/1) is down:
authentication mode changed
R2(config-if)#ip authentication key-chain eigrp 100 EIGRP

Router R3

R3(config)# key chain EIGRP

R3(config-keychain)# key 1
R3(config-keychain-key)# key-string cisco

R3(config)#interface serial 2/0

R3(config-if)#ip authentication mode eigrp 100 md5
R3(config-if)#ip authentication key-chain eigrp 100 EIGRP
*Mar 1 00:33:33.199: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 100: Neighbor [Link] (Serial2/0) is up: new
adjacency

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 140
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Lecture # 24
Border Gateway Protocol (BGP)

As we know, there are two main categories of routing protocol:

1:- IGP 2:- EGP

Interior Gateway Protocol (IGP): IGPs configured to perform Convergence within an Autonomous
System (AS). RIP, EIGRP OSPF are IGP.

Exterior Gateway Protocol (EGP): It is configured to perform convergence between different AS.

EGP protocol: Border Gateway Protocol (BGP)

Brief History:

In past Service provider provided access to all their clients to the border router at their premises, client
purchases the card and installed at service provider’s border router himself. And configuration
performed on that router by client’s Administrator. There was a chance of security breach and that’s
why service provider stop giving access to the clients at their premises.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 141
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Burden on the resources of service provider because multiple IP routing policies are running on it. If
OSPF is running on the clients than OSPF process id is different for every client. As we know single
router cannot be a bridge for different routing protocols. Mutual Redistribution is performed for every
network.

In this case routes can be exchanged between different AS. To avoid from it policy base routing is
implement on PTCL router but still there is a burden on service provider equipment. At last service
provider asked to clients to limit their routing protocol at their own premises. Like in figure below.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 142
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Now the question is this how they will perform routing? Service Provider said I have configured BGP on
my border router clients are also advised to configure BGP at their border router.

BGP connects different AS, running only on borders. Only two protocol’s mutual redistribution is
performed on every AS. This BGP is known as External BGP (EBGP).

Two categories of BGP:

E-BGP “E-BGP is always configure between different AS.”

I-BGP “Internal BGP configure with in an AS.”

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 143
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Previously we have discussed route for DATA and VOICE in policy base routing.

Cost is same for this traffic that is 64+1+1=66. Load balancing is also in this scenario.

What if we add another router on Data Path?

Now cost is different for data is 64+1+1+1=67. Now there is only one best path in routing table. In this
case data traffic discarded b/c in policy base routing we have configure route-map and for data the next
hope is [Link] but that is not in routing table b/c of cost.

Note: Policy base routing is always dependent on routing table.

Implementing policy base routing in IGP is not an easier task. To overcome on this problem we can
implement IBGP in our AS for difficult policy base routing. IBGP is configured for complex policy base
routing.

Note: BGP is a metric-less protocol. There are attributes in BGP for selection of best path instead of
metric.

Metric is a distance, bandwidth, delay, traffic load, mtu, distance etc.

Attribute can be change easily metric is difficult to change.

There are much attributes, sub attributes of BGP.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 144
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Disadvantages of BGP
• BGP is difficult to configure as compare to IGP.
• BGP is resource intensive protocol.

Advantages of BGP (I-BGP)

BGP handles/manage large number of routes from different AS easily.
IBGP is just for policy base routing.

Note: IBGP is not configured for convergence.

If we want to access loopbacks of RIP from OSPF and OSPF’s loopbacks from RIP Mutual redistribution
on each border router is performed RIP to EBGP and EBGP to RIP same for OSPF to EBGP and EBGP to
OSPF.

Note: If we configure IBGP on RIP and OSPF than there is no need for redistribution between IBGP and
EBGP.

Now if we want to send data from A to C and receive from D to B. It is possible with IGP routing policies
like Route-Map but there are two paths for if one path down the data flow and routing information will
be terminated that’s why IBGP is best for routing policy in it if one path down automatically end path is
selected for routing. IBGP uses attribute “preference” for this task.

Note: User Data flow and Routing Update routes are opposite from each other.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 145
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Lecture # 25

Border Gateway Protocol (BGP) (continue)

1- Algorithm: BGP is a Path Vector Routing protocol.

2- Border Gateway Protocol is an EGP.

3- Two categories of BGP:

EBGP AD value is 20

IBGP AD value is 200

4- Routing Updates: BGP routing updates are known as “Updates”. Updates are incremental and
triggered. Updates are Unicast and Unicast towards PEERs “Neighbor ship at the same level is called
Peers.”

5- BGP has no metric but BGP uses attributes for path selection.

6- BGP is TCP based protocol and uses port # 179.

7- Tables of BGP:

• BGP Neighbor Database

• BGP Database
• Routing Table

8- BGP peering can be configured between directly connected and indirectly connected.

Condition for BGP Peering

• Neighbor’s Unicast Ip must be reachable

• TCP # 79 must be configured & permit

9- BGP supports class-less and class-full routing.

10- BGP is designed for very very large size networks.

Note: Two AS numbers cannot be configured on same router. BGP AS Number = 1 to 65535

There is no redistribution between EBGP and IBGP. By default shares route.

11- BGP is a policy base routing protocol. (IGPs are not policy base routing protocols). There is built in
mechanism available in the shape of “Attributes”.

Note: Route-map, ACL, prefix-list and distribute list can be used in BGP.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 146
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

You have two links 1st 8Mb and 2nd 4 Mb backup links, for example if OSPF running on this system OSPF
select best path of 8 Mb (more bandwidth less cost). And in future more users added in the network and
now you want to use 30% or 50% of backup link for users but OSPF uses best path of 8Mb OSPF cannot
help in this scenario. If BGP is running on both AS, you can use backup link 30%, 50% 0r 70% by
configuring BGP.

If a customer having two links from service provider, it is called Multi-homing If a customer has only
single link it is called Single-homing.

Multi-homing is possible only in BGP in OSPF both links should be same for multi-homing.

Note: Use different service provider’s link for true multi-homing.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 147
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

BGP Configuration AS = 100

[Link]

EBGP
R1 R4

EBGP
IBGP IBGP

IBGP
R2 R3

AS = 200

Note: In BGP (E-BGP, I-BGP) neighbor-ship always configure manually.

Commands Description
Exec Mode command for BGP neighbor database
#show ip bgp summary
table.
#show ip bgp Exec Mode command for BGP database table.

Note: BGP database table is known as layer 4 table.

R1#sh ip bgp summary

% BGP not active  BGP is not configured
R1#show ip bgp
% BGP not active  BGP is not configured

Commands Description
Global configuration Mode command for BGP
#Router bgp <AS#>
configuration
#neighbor <neighbor address> <remote-as> Router configuration mode command for neighbor
<neighbor AS #> ship.

Router R1
R1(config)#router bgp 100
R1(config-router)#no aut
R1(config-router)#no auto-summary
R1(config-router)#neighbor [Link] remote-as 200

Note: BGP version IV running now a day.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 148
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Neighbor ship is not established yet with [Link] because tcp port no 79 is not active on remote side.

R2(config)#router bgp 200

R2(config-router)#no auto-summary
R2(config-router)#neighbor [Link] remote-as 100

Note: BGP scanning time is 60 seconds maximum.

R2#

*Mar 1 00:44:01.115: %BGP-5-ADJCHANGE: neighbor [Link] Up

Router R1
R1#sh ip bgp summary
BGP router identifier [Link], local AS number 100
BGP table version is 1, main routing table version 1

Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd

[Link] 4 200 12 12 1 0 0 00:04:29 0

Router R2
R2#sh ip bgp summary
BGP router identifier [Link], local AS number 200
BGP table version is 1, main routing table version 1

Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd

[Link] 4 100 7 7 1 0 0 00:03:24 0

No network/prefix received yet from Router R1.

Router R1
R1(config)#router bgp 100

R1(config-router)#network [Link]  Network Advertised

Router R2
R2#sh ip bgp summary
Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd
[Link] 4 100 16 15 2 0 0 00:11:47 1  Prefix Received
R2#show ip route
C [Link]/8 is directly connected, Serial2/0
C [Link]/8 is directly connected, Serial2/1
B [Link]/24 [20/0] via [Link], 00:00:29

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 149
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Lecture # 26

Border Gateway Protocol (BGP) (continue)

AS = 100

[Link]

EBGP
R1 R4
EBGP

IBGP IBGP

IBGP
R2 R3

AS = 200

R2#show ip bgp  for BGP database

BGP table version is 2, local router ID is [Link]

Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

Network Next Hop Metric LocPrf Weight Path

*> [Link] [Link] 0 0 100 i

*>

* This sign indicates VALID prefixes.

> This sign indicates BEST prefixes.

Note: Only valid and best prefixes are copied into routing table from BGP database. Remaining remains
in database table.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 150
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Now the question is this in which circumstances, prefixes are valid and best?

R2#show ip route
C [Link]/8 is directly connected, Serial2/0
C [Link]/8 is directly connected, Serial2/1
B [Link]/24 [20/0] via [Link], 00:00:29

Prefix [Link]/24 is in R2’s routing table now our task is, this prefix must be in Router R3. This
possible only in redistribution in any running IGP protocols.

OSPF configuration on Router 2 and Router3.

OSPF 1

R2 R3
Router R2
R2(config)#router ospf 1
R2(config-router)#network [Link] [Link] area 0
R2#
*Mar 1 00:07:48.679: %SYS-5-CONFIG_I: Configured from console by console
R2#
*Mar 1 00:08:12.279: %OSPF-5-ADJCHG: Process 1, Nbr [Link] on Serial2/1 from LOADING to
FULL, g Done

Router R3
R3(config)#router ospf 1
R3(config-router)#network [Link] [Link] area 0
R3#
*Mar 1 00:08:06.211: %OSPF-5-ADJCHG: Process 1, Nbr [Link] on Serial2/0 from LOADING to FULL,
Loading Done
*Mar 1 00:08:06.491: %SYS-5-CONFIG_I: Configured from console by console

Redistribution for prefix [Link] advertisement.

R2(config)#router ospf 1
R2(config-router)#redistribute bgp 200 subnets

On Router R3
R3#show ip route
C [Link]/8 is directly connected, Serial2/0
C [Link]/8 is directly connected, Serial2/1
O E2 [Link]/24 [110/1] via [Link], 00:00:07, Serial2/0 As LSA 5
C [Link]/24 is directly connected, FastEthernet0/0

Note: For BGP seed metric is 1 in OSPF, preferred BGP by default. We can change this value.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 151
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Now configure IBGP on R2 and R3.

OSPF 1
[Link] [Link]

R2 IBGP R3

Router R2
R2(config)#router bgp 200
R2(config-router)#neighbor [Link] remote-as 200

Router R3
R3(config)#router bgp 200
R3(config-router)#no auto-summary
R3(config-router)#neighbor [Link] remote-as 200
R3#
*Mar 1 00:13:44.231: %BGP-5-ADJCHANGE: neighbor [Link] Up

Note: if BGP configured within AS is known as IBGP. Here we have same AS 200.

Now there are two protocols running between R2 and R3, one OSPF and on OSFP that is IBGP. The
advertised network [Link] on R3’s routing table is with IBGP or OSPF? Still with OSPF because the
AD Value or IBGP is 200 and OSPF’s AD value is 110.

Router R3
R3#show ip route
C [Link]/8 is directly connected, Serial2/0
C [Link]/8 is directly connected, Serial2/1
O E2 [Link]/24 [110/1] via [Link], 00:19:43, Serial2/0
C [Link]/24 is directly connected, FastEthernet0/0

Understanding < * Behavior

On Router R3
R3#show bgp
BGP table version is 1, local router ID is [Link]
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

Network Next Hop Metric LocPrf Weight Path

* i200.100.50.0 [Link] 0 100 0 100 i

The network is valid but not best. Does it because AD value of OSPF and IBGP? No, this is not the
reason. Can be prove by removing redistribution BGP on router R2.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 152
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Router R2

R2(config)#router ospf 1
R2(config-router)#no redistribute bgp 200

On Router R3

R3#show bgp
BGP table version is 1, local router ID is [Link]
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

Network Next Hop Metric LocPrf Weight Path

* i200.100.50.0 [Link] 0 100 0 100 i

The network is still valid but not best. Now what is the problem? The problem is “next hope
unreachability”. For R3 the next hope should be [Link] but here next hope is [Link].

This BGP behavior, in this scenario BGP supposed two links for reaching AS 200 from AS 100 as shown in
figure below. We are using path [Link] to [Link] but there are two paths.

This BGP behavior , the network/prefix advertised from AS 100 to AS 200 through EBGP the next hope is
[Link]. and for AS 200 for every router the next hope is [Link]. Like router R3 the next hope is [Link].

There are two solutions for it:

1- Recursive lookup.

Consulting routing table again and again to reach destination is known as recursive lookup. And we
know routing is always on the bases of next hope. If next hope is unreachable than you have to acts like
recursive lookup to reach destination.

For R3 the next hope is [Link] for reaching network [Link] but the network [Link] is unknown
for R3. If R3 has [Link] in its routing table it can be reach that prefix.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 153
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Advertise the network [Link] by OSPF on Router R2

R2(config)#router ospf 1

R2(config-router)#network [Link] [Link] area 0

Issue has been resolved by doing this.

Router R3
R3#show ip route
O [Link]/8 [110/128] via [Link], 00:00:13, Serial2/0
C [Link]/8 is directly connected, Serial2/0
C [Link]/8 is directly connected, Serial2/1
B [Link]/24 [200/0] via [Link], 00:00:07
C [Link]/24 is directly connected, FastEthernet0/0

R3#show bgp
BGP table version is 2, local router ID is [Link]
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

Network Next Hop Metric LocPrf Weight Path

*>i200.100.50.0 [Link] 0 100 0 100 i

The path is best and valid. The reason was “next hope unreachable not due to clash between AD
values”. Now the path is valid and best, It is just because of OSPF. The reachability is due to OSPF. Butt
Still next hope is [Link].

Now again on Router R2, redistribute BGP in to OSPF.

R2(config)#router ospf 1

R2(config-router)#redistribute bgp 200 subnets

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 154
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Router R3

R3#show ip route
O [Link]/8 [110/128] via [Link], 00:02:18, Serial2/0
C [Link]/8 is directly connected, Serial2/0
C [Link]/8 is directly connected, Serial2/1
O E2 [Link]/24 [110/1] via [Link], 00:02:18, Serial2/0
C [Link]/24 is directly connected, FastEthernet0/0

R3#show bgp
BGP table version is 4, local router ID is [Link]
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

Network Next Hop Metric LocPrf Weight Path

r>i200.100.50.0 [Link] 0 100 0 100 i

Now again the prefix is with O E2. Again due to AD value.

Now the network is best(>) but not valid (*).

Note: R = RIB-failure (RIB = Routing Information base = Routing Table)

In IBGP vs IGP, IGP wins due to AD value. BGP successfully enter in DB table but not copied in Routing
Table due to rib failure.

Now the question why did not this problem occur in previous? BGP check best first and then validity
after and in previous the problem was with “best >” not with “valid *”, that’s why problem didn’t occur.

Note: IBGP is not possible without IGP.

Another Solution

Another solution could be this, R2 advertise to its IBGP neighbors/peers that I am your next hope and
router 2 obviously an ABR, has routing information of prefix [Link]. It can also solve the issue.

First stop advertising [Link] and redistribution in OSPF on Router R2.

R2(config)#router ospf 1
OSPF 1
R2(config-router)#no network [Link] [Link] area 0
R2(config-router)# no redistribute bgp 200 subnets
R2 R3

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 155
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

R3#sho bgp
BGP table version is 5, local router ID is [Link]
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

Network Next Hop Metric LocPrf Weight Path

* i200.100.50.0 [Link] 0 100 0 100 i

Again > issue. And Now.

OSPF 1
[Link] [Link]

R2 IBGP R3
Router R2

R2(config)#router bgp 200

R2(config-router)#neighbor [Link] next-hop-self  Informing Neighbor I am your next hop.

Router R3

R3#show ip route

C [Link]/8 is directly connected, Serial2/0

C [Link]/8 is directly connected, Serial2/1
B [Link]/24 [200/0] via [Link], 00:00:09
C [Link]/24 is directly connected, FastEthernet0/0

R3#show bgp

BGP table version is 8, local router ID is [Link]

Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

Network Next Hop Metric LocPrf Weight Path

*>i200.100.50.0 [Link] 0 100 0 100 i

Note: Problem can be solved by next hope-self and by IGP protocol configurations.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 156
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

BGP Protocols with IGP

OSFP configuration on R2, R3 and on R4

Router R2
R2(config)#router ospf 1
R2(config-router)#passive-interface serial 2/0
R2(config-router)#network [Link] [Link] area 0
R2(config-router)#network [Link] [Link] area 0

Router R3
R3(config)#router ospf 1
R3(config-router)#do sh ip ali
Address Type IP Address Port
Interface [Link]
Interface [Link]
Interface [Link]
R3(config-router)#network [Link] [Link] area 0
R3(config-router)#network [Link] [Link] area 0

Router R4
R4(config)#router ospf 1
R4(config-router)#passive-interface serial 2/1
R4(config-router)#network [Link] [Link] area 0
*Mar 1 00:15:12.203: %OSPF-5-ADJCHG: Process 1, Nbr [Link] on Serial2/0 from LOADING to
FULL, Loadin g Done
R4(config-router)#network [Link] [Link] area 0

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 157
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

BGP Configuration (EBGP, IBGP)

Router R1
R1(config)#router bgp 100
R1(config-router)#no aut
R1(config-router)#no auto-summary
R1(config-router)#neighbor [Link] remote-as 200
R1(config-router)#neighbor [Link] remote-as 200
R1(config-router)#network [Link]  Network Advertised

Router R2
R2(config)#router bgp 200
R2(config-router)#neighbor [Link] remote-as 100
R2(config-router)#neighbor [Link] remote-as 200
R2(config-router)#neighbor [Link] remote-as 200

Router R3
R3(config)#router bgp 200
R3(config-router)#no auto-summary
R3(config-router)#neighbor [Link] remote-as 200
R3(config-router)#neighbor [Link] remote-as 200

Router R4
R4(config)#router bgp 200
R4(config-router)#no auto-summary
R4(config-router)#neighbor [Link] remote-as 100
R4(config-router)#neighbor [Link] remote-as 200
R4(config-router)#neighbor [Link] remote-as 200

Router R1

R1#sh bgp summ

BGP router identifier [Link], local AS number 100

BGP table version is 2, main routing table version 2
1 network entries using 117 bytes of memory
1 path entries using 52 bytes of memory
2/1 BGP path/bestpath attribute entries using 248 bytes of memory
0 BGP route-map cache entries using 0 bytes of memory
0 BGP filter-list cache entries using 0 bytes of memory
BGP using 417 total bytes of memory
BGP activity 1/0 prefixes, 1/0 paths, scan interval 60 secs

Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd

[Link] 4 200 23 24 2 0 0 00:20:26 0
[Link] 4 200 0 0 0 0 0 never Active

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 158
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Router R2
R2#show ip bgp summary
BGP router identifier [Link], local AS number 200
BGP table version is 2, main routing table version 2
1 network entries using 117 bytes of memory
2 path entries using 104 bytes of memory
3/1 BGP path/bestpath attribute entries using 372 bytes of memory
1 BGP AS-PATH entries using 24 bytes of memory
0 BGP route-map cache entries using 0 bytes of memory
0 BGP filter-list cache entries using 0 bytes of memory
BGP using 617 total bytes of memory
BGP activity 1/0 prefixes, 2/0 paths, scan interval 60 secs

Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd

[Link] 4 100 39 38 2 0 0 00:35:17 1
[Link] 4 200 38 40 2 0 0 00:35:16 0
[Link] 4 200 12 12 2 0 0 00:07:41 1

Router R3
R3#show ip bgp summary
BGP router identifier [Link], local AS number 200
BGP table version is 4, main routing table version 4
1 network entries using 117 bytes of memory
2 path entries using 104 bytes of memory
2/1 BGP path/bestpath attribute entries using 248 bytes of memory
1 BGP AS-PATH entries using 24 bytes of memory
0 BGP route-map cache entries using 0 bytes of memory
0 BGP filter-list cache entries using 0 bytes of memory
BGP using 493 total bytes of memory
BGP activity 1/0 prefixes, 2/0 paths, scan interval 60 secs

Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd

[Link] 4 200 41 39 4 0 0 00:36:23 1
[Link] 4 200 14 13 4 0 0 00:09:10 1

Router R4
R4#show ip bgp summary
BGP router identifier [Link], local AS number 200
BGP table version is 2, main routing table version 2
1 network entries using 117 bytes of memory
2 path entries using 104 bytes of memory
3/1 BGP path/bestpath attribute entries using 372 bytes of memory
1 BGP AS-PATH entries using 24 bytes of memory
0 BGP route-map cache entries using 0 bytes of memory
0 BGP filter-list cache entries using 0 bytes of memory
BGP using 617 total bytes of memory
BGP activity 1/0 prefixes, 2/0 paths, scan interval 60 secs

Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd

[Link] 4 200 14 14 2 0 0 00:09:49 1
[Link] 4 200 14 15 2 0 0 00:10:11 0
[Link] 4 100 15 14 2 0 0 00:10:30 1

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 159
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Must listen audio too with these notes.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 160
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Lecture # 27

Border Gateway Protocol (BGP) (continue)

Note: BGP, OSPF configured network.

If tie in BGP attributes than the decision is taken on 2nd last attribute “Neighbor Router ID” In BGP “A
neighbor with a small router id is a preferred neighbor”.

BGP Attributes

1:- Wight
The weight is used for a best path selection process.
The weights attribute only impact on running router not on others.
The weight is assigned locally to the router.
A weight can be a number from 0 to 65535.

Commands Description
Global configuration Mode command for BGP
#Router bgp <AS#>
configuration
Router configuration mode command for setting
#neighbor <neighbor address> weight < 0-65535>
up weight attribute.

R3#sh bgp
BGP table version is 4, local router ID is [Link]
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete
Network Next Hop Metric LocPrf Weight Path
* i200.100.50.0 [Link] 0 100 0 100 i
*>i [Link] 0 100 0 100 i
Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 161
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Now we want to change the preference the best should be [Link], we can achieve it by configuring BGP
attribute “weight”.

R3(config)#router bgp 200

R3(config-router)#neighbor [Link] weight 10
R3#clear ip bgp *

Note: Must apply command “clear ip bgp *” after configuring BGP attribute for impact.

R3#sh ip bgp
BGP table version is 2, local router ID is [Link]
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

Network Next Hop Metric LocPrf Weight Path

* i200.100.50.0 [Link] 0 100 0 100 i
*>i [Link] 0 100 10 100 i

Now again we want to go back on default preferences there are two ways set the rest neighbor’s weight
to 10 another way is to set neighbor [Link] to 0.

R3(config)#router bgp 200

R3(config-router)#no neighbor [Link] weight 10
R3(config-router)#end
R3#clear ip bgp *
R3#
*Mar 1 01:12:48.383: %BGP-5-ADJCHANGE: neighbor [Link] Down User reset
*Mar 1 01:12:48.391: %BGP-5-ADJCHANGE: neighbor [Link] Down User reset
R3#
*Mar 1 01:12:51.427: %BGP-5-ADJCHANGE: neighbor [Link] Up
*Mar 1 01:12:51.431: %BGP-5-ADJCHANGE: neighbor [Link] Up

R3#sh ip bgp
BGP table version is 2, local router ID is [Link]
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

Network Next Hop Metric LocPrf Weight Path

*>i200.100.50.0 [Link] 0 100 0 100 i
*i [Link] 0 100 0 100 i

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 162
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

2:- Local Preference

Note: the only attribute used in CCIE service Provider Lab. And this is the most useable attribute.

Local Preference configured only on border routers of AS.

Its impact is advertised to whole local AS.

Note: The attribute local preference is higher in priority wise than the BGP attribute IBGP/EBGP.

Local Preference is an Inbound Attribute.

There are two methods for configuring local preference.

1st Method:

R4(config-router)#bgp default local-preference ?

<0-4294967295> Configure default local preference value

R4(config-router)#bgp default local-preference 200

R4#sh bgp
BGP table version is 2, local router ID is [Link]

Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,

r RIB-failure, S Stale

Origin codes: i - IGP, e - EGP, ? - incomplete

Network Next Hop Metric LocPrf Weight Path

*> [Link] [Link] 0 0 100 i

Only best and valid path will show.

R3#sh bgp
BGP table version is 6, local router ID is [Link]

Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,

r RIB-failure, S Stale

Origin codes: i - IGP, e - EGP, ? - incomplete

Network Next Hop Metric LocPrf Weight Path

*>i200.100.50.0 [Link] 0 200 0 100 i

R2#sh bgp
BGP table version is 5, local router ID is [Link]

Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,

r RIB-failure, S Stale

Origin codes: i - IGP, e - EGP, ? - incomplete

Network Next Hop Metric LocPrf Weight Path

*>i200.100.50.0 [Link] 0 200 0 100 i
* [Link] 0 0 100 i
R2#

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 163
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

We have configured globally which is not good practice in practical point of view. Later on if another
AS300 is attached with this router than it local preference ll be also 200. We have to configure local
preference for specific neighbor.

2nd Method

Before
R3#sh bgp
BGP table version is 8, local router ID is [Link]
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

Network Next Hop Metric LocPrf Weight Path

* i200.100.50.0 [Link] 0 100 0 100 i
*>i [Link] 0 100 0 100 i

Configuring with Route-Map

R4(config-router)#no bgp default local-preference 200
R4#clear ip bgp *

R4(config)#route-map LP permit 10
R4(config-route-map)#set local
R4(config-route-map)#set local-preference 200
R4(config-route-map)#
R4(config-route-map)#exit
R4(config)#router bgp 200
R4(config-router)#neighb
R4(config-router)#neighbor [Link] route
R4(config-router)#neighbor [Link] route-m
R4(config-router)#neighbor [Link] route-map LP in
R4(config-router)#do clear ip bgp *

After Configuring with Route-Map

R3#sh bgp
BGP table version is 9, local router ID is [Link]
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

Network Next Hop Metric LocPrf Weight Path

*>i200.100.50.0 [Link] 0 200 0 100 i

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 164
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Lecture # 28
Border Gateway Protocol (BGP) (continue)

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 165
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Lecture # 29
Border Gateway Protocol (BGP) (continue)

AS Path Attribute:
AS = 10 AS = 20

X/24
EBGP

A D

EBGP EBGP

OSPF

IBGP
B C
AS = 30

An AS path is a list of all the AS that a specific route passes through to reach one destination.

When the router receives the x/24, it adds the AS number of the exterior neighbor to the AS-Path. As
the route announcement passes from autonomous system to autonomous system, the path grows
longer with each receiver adding the neighbor's AS to the path.

For example Router “C” receives x/24 from “B” and “D”. When D receives “X/24” it adds exterior
neighbor’s AS number and when “C” receives from “D” AS numbers 10 and 20 added with x/24.

Router C prefers router B for x/24 because least AS numbers are attached with this prefix. What if we
want the router C prefers router D instead of router B. We can add virtual Autonomous Systems. By
adding 3 to 4 virtual AS between “A” and “B”, Router “C” starts prefer Router “D”

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 166
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Note: As-path is configurable. By default AS-path is appended. Virtual AS could be create for selection of
path (prepends).

AS-path prepends: Prepending an AS path makes a shorter AS path look longer and therefore less
preferable to BGP.

Note: AS path impacts on local AS. AS-path prepend can be inbound and outbound. AS path is configured
on border router.

Lab:

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 167
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

BGP Packets Types

BGP Packet-Header Fields

Each BGP packet contains a header whose primary purpose is to identify the function of the packet in
question. The following descriptions summarize the function of each field in the BGP header illustrated
in Figure.

Marker---Contains an authentication value that the message receiver can predict.

Length---Indicates the total length of the message in bytes.

Type---Specifies the message type as one of the following:

Open
Update
Notification
Keep-alive

Data---Contains upper-layer information in this optional field.

1- BGP Open Message Fields

BGP packets in which the type field in the header identifies the packet to be a BGP open message packet
include the following fields. These fields provide the exchange criteria for two BGP routers to establish a
peer relationship.

Version---Provides the BGP version number so that the recipient can determine whether it is running
the same version as the sender.

Autonomous System---Provides the autonomous system number of the sender.

Hold-Time---Indicates the maximum number of seconds that can elapse without receipt of a message
before the transmitter is assumed to be nonfunctional.

BGP Identifier---Provides the BGP identifier of the sender (an IP address), which is determined at startup
and is identical for all local interfaces and all BGP peers.

Optional Parameters Length---Indicates the length of the optional parameters field (if present).

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 168
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Optional Parameters---Contains a list of optional parameters (if any). Only one optional parameter type
is currently defined: authentication information.

Authentication information consists of the following two fields:

Authentication code: Indicates the type of authentication being used.
Authentication data: Contains data used by the authentication mechanism (if use)

2- BGP Update Message Fields

BGP packets in which the type field in the header identifies the packet to be a BGP update message
packet include the following fields. Upon receiving an update message packet, routers will be able to
add or delete specific entries from their routing tables to ensure accuracy. Update messages consist of
the following packets:

Unfeasible Routes Length--- Indicates the total length of the withdrawn routes field or that the field is
not present.

Withdrawn Routes--- Contains a list of IP address prefixes for routes being withdrawn from service.

Total Path Attribute Length--- Indicates the total length of the path attributes field or that the field is
not present.

Path Attributes--- Describes the characteristics of the advertised path. The following are possible
attributes for a path:

Origin: Mandatory attribute that defines the origin of the path information
AS Path: Mandatory attribute composed of a sequence of autonomous system path segments
Next Hop: Mandatory attribute that defines the IP address of the border router that should be used as
the next hop to destinations listed in the network layer reachability information field
Mult Exit Disc: Optional attribute used to discriminate between multiple exit points to a neighboring
autonomous system
Local Pref: Discretionary attribute used to specify the degree of preference for an advertised route
Atomic Aggregate: Discretionary attribute used to disclose information about route selections
Aggregator: Optional attribute that contains information about aggregate routes

Network Layer Reachability Information--- Contains a list of IP address prefixes for the advertised
routes

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 169
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

BGP Notification Message Fields

BGP packets in which the type field in the header identifies the packet to be a BGP notification message
packet include the following fields. This packet is used to indicate some sort of error condition to the
peers of the originating router.

Error Code---Indicates the type of error that occurred. The following are the error types defined by the
field:

Message Header Error: Indicates a problem with a message header, such as unacceptable message
length, unacceptable marker field value, or unacceptable message type.

Open Message Error: Indicates a problem with an open message, such as unsupported version
number, unacceptable autonomous system number or IP address, or unsupported authentication
code.

Update Message Error: Indicates a problem with an update message, such as a malformed attribute
list, attribute list error, or invalid next-hop attribute.

Hold Time Expired: Indicates that the hold-time has expired, after which time a BGP node will be
considered nonfunctional.

Finite State Machine Error: Indicates an unexpected event.

Cease: Closes a BGP connection at the request of a BGP device in the absence of any fatal errors.

Error Subcode---Provides more specific information about the nature of the reported error.

Error Data---Contains data based on the error code and error subcode fields. This field is used to
diagnose the reason for the notification message.

BGP Keep-Alive Message

Consists of only the 19-byte BGP message header with no additional data. Maintains the BGP connection
between 2 BGP peers.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 170
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

BGP States

If neighbor is reachable Connect If session is not established

Unreachabilty After 60 seconds

Idle Active
Unreachabilty

Unreachabilty

TCP session completes

Unreachabilty Established Open Sent Notification (versions, timers etc mismatched)
Unreachabilty

Open
If Keepalive
Confiem

If connection on both established

1- Idel: is the initial state of a BGP connection. The BGP speaker is waiting for a start event, generally
either the establishment of a TCP connection or the re-establishment of a previous connection. Once the
connection is established, BGP moves to the next state.

2- Connect: is the next state. If the TCP connection completes, BGP will move to the OpenSent stage if
the connection does not complete, BGP goes to Active.

3- Active: indicates that the BGP speaker is continuing to create a peer relationship with the remote
router. If this is successful, the BGP state goes to OpenSent. You'll occasionally see a BGP connection
flap between Active and Connect. This indicates an issue with the physical cable itself, or with the
configuration.

4- OpenSent: indicates that the BGP speaker has received an Open message from the peer. BGP will
determine whether the peer is in the same AS (iBGP) or a different AS (eBGP) in this state.

5- OpenConfirm: in this state, the BGP speaker is waiting for a keepalive message. If one is received, the
state moves to Established, and the neighbor relationship is complete. It is in the Established state that
update packets are actually exchanged.

6- Established: Connection reachable/established. If unreachable it goes to idle states.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 171
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Lecture # 30
Border Gateway Protocol (BGP) (continue)

Two Main Ways to Configure BGP

1: Full Mesh I-BGP

2: Route Reflector Modal

1: Full Mesh I-BGP

Partial-Mesh IBGP

Routes learnt from One iBGP Peer cannot be advertised to another iBGP Peer. Here in the in above
figure Router B received prefix x form Router A cannot advertised to its IBGP neighbor Router C.

In iBGP, the routes learnt from one iBGP neighbor are not advertised to another iBGP neighbor due to
the BGP Split Horizon Rule. To overcome the issues generated by this rule, one option is to have a full
mesh of iBGP routers, where each iBGP router is peering directly with all other iBGP routers in the AS. As
shown in figure below.

Full-Mesh IBGP

The solution is feasible if you have a small number of iBGP routers, but it will not scale if you need a
large numbers ‘500’ of iBGP speaking routers in the AS. Than you need another solution for it that is a
Route Reflector.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 172
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

2: Route Reflector

A route reflector (RR) is a network routing component. It offers an alternative to the logical full-mesh
requirement of internal border gateway protocol (IBGP). A RR acts as a focal point for IBGP sessions. The
purpose of the RR is concentration. Multiple BGP routers can peer with a central point, the RR - acting as
a route reflector server - rather than peer with every other router in a full mesh. All the other IBGP
routers become route reflector clients.

This approach, similar to OSPF's DR/BDR feature, provides large networks with added IBGP scalability. In
a fully meshed IBGP network of 10 routers, 90 individual statements (spread throughout all routers in
the topology) are needed just to define the remote-AS of each peer: this quickly becomes a headache to
administer. A RR topology could cut these 90 statements down to 18, offering a viable solution for the
larger networks administered by ISPs.

RR servers propagate routes inside the AS based on the following rules:

If a route is received from nonclient peer, reflect to clients only.

If a route is received from a client peer, reflect to all nonclient peers and also to client peers, except the
originator of the route.
If a route is received from an EBGP peer, reflect to all client and nonclient peers.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 173
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Note: A route reflector is a single point of failure; therefore (at least) a second route reflector should be
configured in order to provide redundancy.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 174
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Lecture # 31
Border Gateway Protocol (BGP) (continue)

Route Reflector Lab

Basic Configuration On All Routers

Router R1 Router R2 Router R3

Conf t conf t conf t
interface FastEthernet0/0 interface FastEthernet0/0 interface FastEthernet0/0
ip address [Link] [Link] ip address [Link] [Link] ip address [Link] [Link]
no sh no sh no sh
exit exit exit

interface FastEthernet1/0 interface FastEthernet1/0 interface FastEthernet1/0

ip address [Link] [Link] ip address [Link] [Link] ip address [Link] [Link]
no sh no shu no shu
exit exit exit

interface FastEthernet2/0 interface FastEthernet2/0 interface FastEthernet2/0

ip address [Link] [Link] ip address [Link] [Link] ip address [Link] [Link]
no sh no sh no sh
exit exit exit

interface loopback 0 interface loopback 0 interface loopback 0

ip address [Link] [Link] ip address [Link] [Link] ip address [Link] [Link]
end end end
wr wr wr

Router R4 Router R5
conf t conf t

interface FastEthernet0/0 interface FastEthernet0/0

ip address [Link] [Link] ip address [Link] [Link]
no sh no shut
exit exit

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 175
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

interface FastEthernet1/0 interface FastEthernet1/0

ip address [Link] [Link] ip address [Link] [Link]
no shu exit
exit

interface FastEthernet2/0 interface FastEthernet2/0

ip address [Link] [Link] ip address [Link] [Link]
no sh no shut
no keep no keepalive
exit exit

interface loopback 0 interface Loopback0

ip address [Link] [Link] ip address [Link] [Link]

end end
wr wr

OSPF configuration on R2, R3, R4, R5

Router R2 Router R3 Router R4 Router R5

conf t conf t conf t conf t

router ospf 5 router ospf 5 router ospf 5 router ospf 5

network [Link] [Link] a 0 network [Link] [Link] a 0 network [Link] [Link] a 0 network [Link] [Link] a 0
network [Link] [Link] a 0 network [Link] [Link] a 0 network [Link] [Link] a 0 network [Link] [Link] a 0
network [Link] [Link] a 0 network [Link] [Link] a 0 network [Link] [Link] a 0 network [Link] [Link] a 0

end end end end

wr wr wr wr

R5#sho ip route ospf

[Link]/8 is variably subnetted, 9 subnets, 2 masks
O [Link]/32 [110/2] via [Link], 00:23:56, FastEthernet1/0
O [Link]/32 [110/3] via [Link], 00:23:56, FastEthernet1/0
[110/3] via [Link], 00:23:56, FastEthernet0/0
O [Link]/32 [110/2] via [Link], 00:23:56, FastEthernet0/0
O [Link]/24 [110/2] via [Link], 00:23:56, FastEthernet1/0
O [Link]/24 [110/2] via [Link], 00:23:56, FastEthernet0/0

Note: Ping loopback address on every router (OSPF configured) if reply is successful its mean all four
Loopback Addresses are reachable and in routing table.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 176
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

I-BGP configuration on R2, R3, R4, R5

Note: Remember if neighbor-ship is on the bases of Loopback addresses than “update source “must be
loopback interface.

Router R2 Router R3
Conf t Conf t
router bgp 20 router bgp 20
neighbor [Link] remote-as 20 neighbor [Link] remote-as 20
neighbor [Link] remote-as 20 neighbor [Link] remote-as 20
neighbor [Link] remote-as 20 neighbor [Link] remote-as 20
neighbor [Link] update-source loopback 0 neighbor [Link] update-source loopback 0
neighbor [Link] update-source loopback 0 neighbor [Link] update-source loopback 0
neighbor [Link] update-source loopback 0 neighbor [Link] update-source loopback 0
neighbor [Link] route-reflector-client neighbor [Link] route-reflector-client
neighbor [Link] route-reflector-client neighbor [Link] route-reflector-client
neighbor [Link] route-reflector-client neighbor [Link] route-reflector-client

Note: In which router the command “router-reflector-client” is configured that router is known as “Route
Reflector Router”.

Rules of Routing in Route reflector between client and non-client

1- Client forward route information to Route Reflector and RR forward to Client.

2- Non-client forward routing information to Route Reflector and RR forward it to Client.

3- Client forward routing information to Route Reflector and RR forward it to Non-Client.

4- Non-Client does not forward routing information to Non-Client.

Router R4 Router R5
Conf t Conf t
router bgp 20 router bgp 20
neighbor [Link] remote-as 20 neighbor [Link] remote-as 20
neighbor [Link] remote-as 20 neighbor [Link] remote-as 20
neighbor [Link] update-source loopback 0 neighbor [Link] update-source loopback 0
neighbor [Link] update-source loopback 0 neighbor [Link] update-source loopback 0

According to the iBGP configurations R2 and R3 must have 3 neighbors and R4, R5 must have 2
neighbors.

For Verifying run command “show ip bgp summary” on every router.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 177
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Router R2
R2#sh ip bgp summary

BGP router identifier [Link], local AS number 20

BGP table version is 1, main routing table version 1

Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd

[Link] 4 20 26 27 1 0 0 00:23:21 0
[Link] 4 20 6 6 1 0 0 00:02:44 0
[Link] 4 20 6 6 1 0 0 00:02:33 0

Router R3
R3#sh ip bgp summary

BGP router identifier [Link], local AS number 20

BGP table version is 1, main routing table version 1

Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd

[Link] 4 20 38 37 1 0 0 00:34:32 0
[Link] 4 20 17 17 1 0 0 00:13:52 0
[Link] 4 20 17 17 1 0 0 00:13:27 0

Router R4
R4#sh ip bgp summary

BGP router identifier [Link], local AS number 20

BGP table version is 1, main routing table version 1

Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd

[Link] 4 20 5 5 1 0 0 00:01:52 0
[Link] 4 20 5 5 1 0 0 00:01:49 0

Router R5
R5#sh ip bgp summary

BGP router identifier [Link], local AS number 20

BGP table version is 1, main routing table version 1

Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd

[Link] 4 20 18 18 1 0 0 00:14:28 0
[Link] 4 20 18 18 1 0 0 00:14:11 0

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 178
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

EBGP configuration on R1

Note: EBGP neighbor-ship always on physical interface. Before configuring EBGP ping R2 and R3
reachable addresses (link addresses must be reachable).

Router R1 Router R2 Router R3

Conf t Conf t Conf t
router bgp 10 router bgp 20 router bgp 20
neighbor [Link] neighbor [Link] remote-as 10 neighbor [Link] remote-as 10
neighbor [Link] remote-as 20
neighbor [Link] remote-as 20

Router R1
R1#sh ip bgp summ
BGP router identifier [Link], local AS number 10
BGP table version is 1, main routing table version 1

Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd

[Link] 4 20 5 4 1 0 0 00:01:26 0
[Link] 4 20 4 4 1 0 0 00:00:03 0

Next-hop-self configuration on R2 and R3.

Note: For RR client next hop should be RR. Otherwise next hope address will be R1 link addresses.

Router R2 Router R3
Conf t Conf t
router bgp 20 router bgp 20
neighbor [Link] next-hop-self neighbor [Link] next-hop-self
neighbor [Link] next-hop-self neighbor [Link] next-hop-self
neighbor [Link] next-hop-self neighbor [Link] next-hop-self

Advertising [Link] prefix on Router R1.

Conf t
router bgp 10
network [Link] mask [Link]

Router R2 and R3 reflects this prefix to its clients. But the best and valid is Router R2 because its ID is
small.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 179
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Router R2

R4#sh ip bgp
BGP table version is 2, local router ID is [Link]
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

Network Next Hop Metric LocPrf Weight Path

* i5.9.11.0/24 [Link] 0 100 0 10 i
*>i [Link] 0 100 0 10 i

Router R3

R5#show ip bgp
BGP table version is 3, local router ID is [Link]
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

Network Next Hop Metric LocPrf Weight Path

*>i5.9.11.0/24 [Link] 0 100 0 10 i
*i [Link] 0 100 0 10 i

Best should be [Link] sometimes due to some errors GNS3 does not display the real output. But our aim
was to display information from route reflectors that are advertising prefix to its clients.

Understanding Client to RR to Client.

Router R4
Conf t
router bgp 20
network [Link] mask [Link]

Router R5
Conf t
router bgp 20
network [Link] mask [Link]

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 180
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Router R4

R4#sh ip bgp
BGP table version is 4, local router ID is [Link]
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

Network Next Hop Metric LocPrf Weight Path

* i5.9.11.0/24 [Link] 0 100 0 10 i
*>i [Link] 0 100 0 10 i
*> [Link]/24 [Link] 0 32768 i
* i5.9.55.0/24 [Link] 0 100 0 i
*>i [Link] 0 100 0 i

Note: There is no neighbor-ship between R4 and R5. The route is reflecting by the Route reflector.

Router R5

R5#show ip bgp
BGP table version is 6, local router ID is [Link]
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete

Network Next Hop Metric LocPrf Weight Path

*>i5.9.11.0/24 [Link] 0 100 0 10 i
*i [Link] 0 100 0 10 i
*>i5.9.44.0/24 [Link] 0 100 0 i
*i [Link] 0 100 0 i
*> [Link]/24 [Link] 0 32768 i

Note: Next-hope-self is only for other Autonomous Systems. IBGP route displays on other iBGP router the
next hop address is advertising router address.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 181
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Lecture # 32
IPv6 Introduction

Internet Protocol version 6 (IPv6) is the latest revision of the Internet Protocol (IP) and the first version
of the protocol to be widely deployed. IPv6 was developed by the Internet Engineering Task Force (IETF)
to deal with the long-anticipated problem of IPv4 address exhaustion.

IPv4

32 bits = 4,294,967,296 possible addressable devices

IPv6

128 bits: 4 times the size in bits = 3.4 x 1038 possible addressable devices

= 340,282,366,920,938,463,463,374,607,431,768,211,456

5 x 1028 addresses per person on the planet

IPv6 address format

Hexadecimal Number System

Before introducing IPv6 Address format, we must look into Hexadecimal Number System. Hexadecimal
is positional number system which uses radix (base) of 16. To represent the values in readable format,
this system uses 0-9 symbols to represent values from zero to nine and A-F symbol to represent values
from ten to fifteen. Every digit in Hexadecimal can represent values from 0 to 15.

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 182
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Format:
An IPv6 address is made of 128 bits divided into eight 16-bits blocks. Each block is then converted into 4-
digit Hexadecimal numbers separated by colon symbol.

An example of IPv6:
“ABCD:A569:68AE:5BCD:9FCF:A395:63FF:A1CE”

There are:
• 8 groups of 4 hexadecimal digits.
• Each group represents 16 bits (4 hexa digits * 4 bit)
• Separator is “:”
• Hex digits are not case sensitive, so “ABCD” is same as “abcd” or “ABcd”…

Note: Addresses are assigned to interfaces (network connections), not to the host. Each interface can
have more than one IPv6 address.

Rules for abbreviating IPv6 Addresses:

For example, the below is 128 bit IPv6 address represented in binary format and divided into eight 16-
bits blocks:

0010000000000010 0000000000000000 0000000000000000 0000000000001110 0000000000000000

0000000000000000 0000000000000000 0000000000010000

Each block is then converted into Hexadecimal and separated by ‘:’ symbol:

2002:0000:0000:000E:0000:0000:0000:0010

Even after converting into Hexadecimal format, IPv6 address remains long. IPv6 provides some rules to
shorten the address. These rules are:

Rule 1: Discard leading Zero(es):

In Block 4, 000E, the leading three 0s can be omitted, such as (4th block)

2002:0000:0000:E:0000:0000:0000:0010

Rule2: If two of more blocks contains consecutive zeroes, omit them all and replace with double colon
sign ::, such as (2nd and 3rd block):
2002::E:0000:0000:0000:0010

Consecutive blocks of zeroes can be replaced only once by :: so if there are still blocks of zeroes in the
address they can be shrink down to single zero, such as (5th, 6th and 7th blocks):

2002::E:0:0:0:10

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 183
CCNP by Hasnain Malik (Senior Instructor) Corvit Systems

Pv6 (128-bit) address contains two parts:

• The first 64-bits is known as the prefix. The prefix includes the network and subnet address.
Because addresses are allocated based on physical location, the prefix also includes global
routing information. The 64-bit prefix is often referred to as the global routing prefix.

• The last 64-bits is the host ID/ interface ID. This is the unique address assigned to an interface.

Network Host/Interface ID Short Form

2002:0:0:0: 0:0:0:A 2002::A
Network ID 2002:0:0:0:0:0:0:0/64 2002::/64

Note: There is no concept of Broadcast in IPv6. IPv6 treated as multicast. No classes in IPv6.

Categories/Types of IPv6 Addresses

A: Global Unicast Addresses are:

1. Like Public Addresses in IPv4
2. Configurable
3. Routable
4. Start with 2 or 3. for example 2002::E:0:0:0:10
5. In total 4.2*1037

B: Site Local Addresses Are:

1. Like Private Addresses in IPv4
2. Configurable
3. Routable
4. Start with FEC0: or FED0: or FEE0 or FEF0

C: Link Local IPv6 Addresses Are:

1. Not configurable
2. Not routable
3. Calculated/derived from MAC Addresses.
4. Start with FE80: or FE90: or FEA0 or FEB0

D: Multicast IPv6 Addresses Are:

1. Configurable
2. Routable
3. Start with FF
4. For group communication

Prepared by: Network Engineers Noman Amin & Shafkat Shahzad Page 184