PACKET FORWARDING DECISION PROCESS
A packet forwarding decision process is the mechanism a router uses to determine the best interface
to send incoming packets toward their destination. It involves decapsulating the frame, examining the
destination IP address, applying Longest Prefix Match (LPM) on the routing table, updating the
Time-to-Live (TTL), and re-encapsulating the frame for the next hop.
The Decision Process include:
1. The data link frame with an encapsulated IP packet arrives on the ingress interface.
2. The router examines the destination IP address in the packet header and consults its IP routing
table.
3. The router finds the longest matching prefix in the routing table.
4. The router encapsulates the packet in a data link frame and forwards it out the egress interface.
The destination could be a device connected to the network or a next-hop router.
5. However, if there is no matching route entry the packet is dropped.
Figure above shows packet forwarding decision process.
After a router has determined the best path, it could do the following:
Forward the Packet to a Device on a Directly Connected Network
● If the route entry indicates that the egress interface is a directly connected network, the packet
can be forwarded directly to the destination device. Typically, this is an Ethernet LAN.
● To encapsulate the packet in the Ethernet frame, the router needs to determine the
destination MAC address associated with the destination IP address of the packet. The process
varies based on whether the packet is an IPv4 or IPv6 packet.
Forward the Packet to a Next-Hop Router
● If the route entry indicates that the destination IP address is on a remote network, meaning a
device on network that is not directly connected. The packet must be forwarded to the
next-hop router. The next-hop address is indicated in the route entry.
● If the forwarding router and the next-hop router are on an Ethernet network, a similar process
(ARP and ICMPv6 Neighbor Discovery) will occur for determining the destination MAC address
of the packet as described previously. The difference is that the router will search for the IP
address of the next-hop router in its ARP table or neighbor cache, instead of the destination IP
address of the packet.
Note: This process will vary for other types of Layer 2 networks.
Drop the Packet - No Match in Routing Table
● If there is no match between the destination IP address and a prefix in the routing table,
and if there is no default route, the packet will be dropped.
Packet Forwarding Mechanisms
The primary responsibility of the packet forwarding function is to encapsulate packets in the
appropriate data link frame type for the outgoing interface. The more efficiently a router can perform
this task, the faster packets can be forwarded by the router.
Routers support the following three packet forwarding mechanisms:
● Process switching
● Fast switching
● Cisco Express Forwarding (CEF)
Process Switching
Process switching is an older forwarding method used in Cisco routers where every incoming packet is
sent to the router’s CPU (control plane). The CPU checks the routing table to determine the destination
and the exit interface, then forwards the packet.
This process happens individually for every packet, even if multiple packets are going to the same
destination, making it slow and inefficient compared to modern forwarding methods.
Fast switching
Fast switching is an improved (but still older) packet forwarding method used in Cisco routers. It
introduces a cache that stores next-hop information.
When a packet arrives:
● The CPU checks the fast-switching cache.
● If the destination is not in the cache, the packet is process-switched, and its routing info is then
stored in the cache.
● Subsequent packets to the same destination are forwarded using the cached information without
CPU involvement.
This makes fast switching faster and more efficient than process switching.
Cisco Express Forwarding (CEF)
Cisco Express Forwarding (CEF) is the modern and default packet-forwarding method in Cisco IOS.
It uses two key data structures:
● Forwarding Information Base (FIB) for routing decisions
● Adjacency table for next-hop details
Unlike fast switching, CEF is not packet-driven—it is updated only when network changes occur (e.g.,
topology changes). Once the network is stable, these tables already contain all necessary information,
allowing packets to be forwarded quickly and efficiently without CPU involvement.
CONFIGURE BASIC SETTINGS ON A ROUTER
Configuring a router involves accessing its CLI via console or a web interface to set a hostname, secure
privileged mode with a password, encrypt password files, set a MOTD banner, and configure interface IP
addresses. Essential steps include using configure terminal, setting a hostname, and enabling security
with enable secret.
Configuration Commands
Verification Commands
Common verification commands include the following:
● show ip interface brief
● show running-config interface interface-type number
● show interfaces
● show ip interface
● show ip route
● ping
In each case, replace ip with ipv6 for the IPv6 version of the command.
Filter Command Output
Filtering commands can be used to display specific sections of output. To enable the filtering command,
enter a pipe (|) character after the show command and then enter a filtering parameter and a filtering
expression. The filtering parameters that can be configured after the pipe include:
● section - This displays the entire section that starts with the filtering expression.
● include - This includes all output lines that match the filtering expression.
● exclude - This excludes all output lines that match the filtering expression.
● begin - This displays all the output lines from a certain point, starting with the line that matches
the filtering expression.
Note: Output filters can be used in combination with any show command.