Академический Документы
Профессиональный Документы
Культура Документы
by
Alexander Marhold
CCIE #3324, CCSI #20642, CCNP, CCDP
route-map map-tag [permit | deny] [sequence-number] FOR POLICY ROUTING
match ip address {access-list-number | name} [...access-list-number | name]
The CISCO Routing Process
match length min max including POLICY Routing
Policy Routing
on incoming interface
set ip next-hop ip-address [...ip-address] DATA Packets
set interface type number [...type number]
selected by: Output Access-list
Input Access-list
NAT / PAT Queueing
NAT ip policy route-map map-tag Accounting
DATA no match
or deny or Recursive Lookup
set default interface type number [... type number] OUTGOING to same protocol
set ip default next-hop ip-address [...ip-address]
S ... Static
C ... Connected
offset-list {access-list-number | name} in offset [type number] x .... dynamic routing
Route-TAGs
distance weight [address mask [access-list-number | name]] Route-TAGs
distribute-list {access-list-number | name} in [type number] OUTGOING coming from other protocol
passive-interface type number (only for Link State and EIGRP)
ip access-group {access-list-number | name} in
( for selected protocol)
distribute-list {access-list-number | name} out
Metric [routing-process |autonomous-system-number]
Incoming Outgoing
ROUTE Information Routes
Route Processing Route Processing
Routing Updates
Other Network
Information sources
Static Routes
OSPF
Eth ernet
Connected Interfaces
DATA Packets
Output Access-list
Input Access-list
NAT / PAT Queueing
NAT
Accounting
DATA
Recursive Lookup
Routing Table
S ... Static
C ... Connected
x .... dynamic routing
Process CLASSFUL and CLASSLESS are behaviors for What is "Gateway of last Resort",
using the default route when information about a default-network, ip route 0.0.0.0 0.0.0.0 ?
specific subnet is not in the routing table, but
Packets are forwarded downstream a path other subnets of that mayor network are found IP Default-Network xxx.xxx.xxx.xxx - This
from the sender to the receiver. in the routing table. is the command that will cause a router to treat
Route information (information about the xxx.xxx.xxx.xxx as a gateway of last resort. A
reachability of a network) is forwarded Example: router can have multiple ip default-networks
UPSTREAM from router to router. entered.
# show ip route (edited output)
This is important to consider when using … Gateway of last resort - This is the term that
blocking of routing information in order to network 172.16.0.0/16 is subnetted is applied to a routing entry in the Cisco routing
prevent access to certain networks. 2 subnets, 2 masks table that the router will use to forward packets
R 172.16.12.0/24 [120/2] 192.168.1.1 eth0
R 172.16.16.0/20 [120/4] 10.0.0.1 ser0
to when it lacks a more specific route. This can
The packet forwarding is done by an … be learned from a route provided by another
independent decision of each router on the path, *S 0.0.0.0/0 [0/0] 11.1.1.1 ser1 router that is tagged as a default by the
using the destination address of the packet and advertising router. The ip default-network
the Routing Table as basis for finding a next-hop. The router now receives a packet on eth1 with command is one way of having a router tag a
the destination address 172.16.10.234 route as a gateway of last resort.
The router will consult the routing table (or a
special forwarding table, based on the content of This address belonging to a specific subnet of IP Default-Gateway - This command is used
the routing table), comparing the destination 172.16.0.0/16 is NOT in the routing table. in routers when IP routing disabled in order to
address with the network information in the give them an address to forward packets that are
routing table and will use the most specific - With IP CLASSLESS the router will take not in their address space. Routers in boot mode
network information for a decision about the the default route and forward the packet are a good example of this situation.
outgoing path. out on Serial 1. This is done independent of
The lookup process can be recursive, that any other subnet information for that IP ROUTE 0.0.0.0 0.0.0.0 establishes a default
means, that more than one lookup may be mayor network 172.16.0.0/16. route (catch-all) if no specific route is found
needed in order to find the real next-hop-address
for forwarding the packet. - When CLASSFUL routing with the !!! CAVEAT !!!
If such a next-hop or an outgoing interface is command:
NO IP CLASSLESS is selected, The 0.0.0.0 route has special meaning for RIP. It is
found the router will forward the packet on the automatically installed as the local gateway of last resort. No
specified connected interface. the router would delete the packet and ip default-network 0.0.0.0 is required. RIP automatically
If no route is found and also no default-route is inform the sender via ICMP that he cannot advertises the route to 0.0.0.0 even if redistribute static and
available or appropriate, the router will delete forward the packet as the specified subnet a default metric are not configured.
of the mayor network 172.16.0.0/16 is not For other routing protocols the router command:
the packet and inform the sender via ICMP about DEFAULT-INFORMATION … allows specific control of
this happening. in his table. forwarding or receiving default routes
Policy Routing
on incoming interface
set ip next-hop ip-address [...ip-address] DATA Packets
set interface type number [...type number]
selected by: Output Access-list
Input Access-list
NAT / PAT Queueing
NAT ip policy route-map map-tag Accounting
DATA no match
or deny or Recursive Lookup
set default interface type number [... type number]
set ip default next-hop ip-address [...ip-address]
Routing Table
S .. Static
C.. Connected
x .... dynamic routing
Internet Rem.OFF.
FR
IP POLICY ROUTE-MAP route-map-name ISL
PIX-to-OUT
Routing Table
S.. Sta tic
C ... Connecte d
x .. dynamic routin g
Route-TAGs
Route-TAGs
Metric
Incoming Outgoing
ROUTE In fo rmation Route s
Route Processing Route Processing
Metric
Incoming
ROUTE In fo rmatio n
Route Processing
Administrative Distance
INCOMING from LOCAL
0 Connecte d
1 Sta tic Route
5 EIG RP Summary
ip route prefix mask {address | 20 Exte rnal BGP
inte rfa ce} [d is ta nce] [ta g ta g] 90 Inte rnal EIG RP
[permanent] 100 IGRP
and fr om connected in te rfa ces 110 OSPF
115 IS-IS
120 RIP
170 Exte rnal EIG RP
200 Inte rnal BGP
255 <don´t use>
distr ib ute -lis t {access-lis t- number | name} out [in te rfa ce-name]
passiv e-in te rface type number
offs et-lis t {access-lis t- number | name} out
Routing Table offs et [ty pe number]
S .. Static
C .. Connecte d
x .. dynamic routin g
Route-TAGs
OUTGOING coming from other protocol
Outgoing
Route s
Route Processing
Metric
OUTGOING to another protocol
redis tr ib ute proto col [p rocess-id] {le vel- 1 | le vel- 1-2 | level-2} [metr ic
metr ic -value] [metr ic-ty pe ty pe-valu e] [m atc h {in te rnal | exte rnal 1 |
exte rnal 2}] [ta g ta g-value] [r oute -map map-ta g] [w eig ht weight] [s ubnets ]
defa ult- in fo rmatio n redistr ib utio n:
defa ult- in fo rmatio n orig in ate [a lw ays] [metric metr ic -valu e] [metr ic -ty pe ty pe-
valu e] {le vel- 1 | le vel- 1-2 | le vel-2} [r oute -map map-name] (RIP/O SPF)
defa ult- in fo rmatio n {in | out} {access-lis t- number | name} (IG RP/EIG RP)
before
shutdown 3 hops
3
RIP
R5 R3
1999, PRO IN Consulting GmbH Page 15 of 18
1
of 1 hop after shutdown of
R2-R3
route-map map-tag [permit | deny] [sequence-number] FOR POLICY ROUTING
match ip address {access-list-number | name} [...access-list-number | name]
The CISCO Routing Process
match length min max including POLICY Routing
Policy Routing
on incoming interface
set ip next-hop ip-address [...ip-address] DATA Packets
set interface type number [...type number]
selected by: Output Access-list
Input Access-list
NAT / PAT Queueing
NAT ip policy route-map map-tag Accounting
DATA no match
or deny or Recursive Lookup
set default interface type number [... type number] OUTGOING to same protocol
set ip default next-hop ip-address [...ip-address]
S ... Static
C ... Connected
offset-list {access-list-number | name} in offset [type number] x . .. dynamic routing
Route-TAGs
distance weight [address mask [access-list-number | name]] Route-TAGs
distribute-list {access-list-number | name} in [type number] OUTGOING coming from other protocol
passive-interface type number (only for Link State and EIGRP)
ip access-group {access-list-number | name} in
( for selected protocol)
distribute-list {access-list-number | name} out
Metric [routing-process |autonomous-system-number]
Incoming Outgoing
ROUTE Information Routes
Route Processing Route Processing