Presentation is loading. Please wait.

Presentation is loading. Please wait.

Operating Juniper Networks Routers in the Enterprise

Similar presentations


Presentation on theme: "Operating Juniper Networks Routers in the Enterprise"— Presentation transcript:

1 Operating Juniper Networks Routers in the Enterprise
Chapter 6: Routing Protocols and Policy

2 Operating Juniper Networks Routers—J-series
Chapter Objectives Operating Juniper Networks Routers—J-series After successfully completing this chapter, you will be able to: Describe routing tables and route preferences Describe the role of JUNOS software routing policy Describe J-Web support for routing protocols and policy Configure and monitor static routes Explain the role of IGPs Configure and monitor RIP Configure and monitor OSPF Module 5: Routing Protocols and Policy

3 Operating Juniper Networks Routers—J-series
Agenda: Routing Protocols and Policy Routing Table and Route Preferences Routing Policy J-Web Support for Routing Protocols and Policy Configuring and Monitoring Static Routing Interior Gateway Protocols Configuring and Monitoring RIP Configuring and Monitoring OSPF Module 5: Routing Protocols and Policy

4 Operating Juniper Networks Routers—J-series
The Routing Table Operating Juniper Networks Routers—J-series Compiles information learned from routing protocols and other routing information sources Selects an active route to each destination Populates forwarding table Juniper Networks routers maintain multiple routing tables inet.0 for IPv4 unicast routing Others are outside the scope of this course Routing Protocol Databases OSPF Routing Table Forwarding Table Other Routing Information Sources Direct Static Module 5: Routing Protocols and Policy

5 Operating Juniper Networks Routers—J-series
Route Preference Operating Juniper Networks Routers—J-series Ranks routes received from different sources Primary criterion for selecting the active route Ranges from 0 to 4,294,967,295, with lower value preferred Route Preference Values Routing Information Source Default Preference Direct Local Static 5 OSPF internal 10 RIP 100 Aggregate 130 OSPF AS external 150 BGP (both EBGP and IBGP) 170 Module 5: Routing Protocols and Policy

6 This slide left intentionally blank!
Operating Juniper Networks Routers—J-series Module 5: Routing Protocols and Policy

7 Operating Juniper Networks Routers—J-series
Agenda: Routing Protocols and Policy Routing Table and Route Preferences Routing Policy J-Web Support for Routing Protocols and Policy Configuring and Monitoring Static Routing Interior Gateway Protocols Configuring and Monitoring RIP Configuring and Monitoring OSPF Module 5: Routing Protocols and Policy

8 Routing Policy Overview
Operating Juniper Networks Routers—J-series Controls routing information transferred into and out of the routing table Can ignore or change incoming routing information Can suppress or change outgoing routing information Policies are made up of match/action pairs Match conditions can be protocol specific Apply policy when: You do not want to import all learned routes into the routing table You do not want to advertise all learned routes to neighboring routers You want one protocol to receive routes from another protocol You want to modify information associated with a route Module 5: Routing Protocols and Policy

9 This slide left intentionally blank!
Operating Juniper Networks Routers—J-series Module 5: Routing Protocols and Policy

10 Import and Export Policies
Operating Juniper Networks Routers—J-series Import and Export Policies Perform policy filtering with respect to the JUNOS software routing table JUNOS software applies import policy prior to inclusion in the routing table JUNOS software applies export policy only to active routes in the routing table Neighbors Protocol Routing Table Forwarding Table Import Routes PFE Export Module 5: Routing Protocols and Policy

11 Operating Juniper Networks Routers—J-series
Routing Policy Flow Policies can be chained together Evaluation proceeds left to right until a terminating action of accept or reject is reached Individual policies can contain a collection of terms Flow-control actions such as next-policy supported Route Policy 1 Policy 2 Policy n Term A Term A Term A Accept or Reject Accept or Reject Accept or Reject Term B Term B Accept or Reject Accept or Reject Default Policy Reject Term C Term C Accept or Reject Accept or Reject Accept Module 5: Routing Protocols and Policy

12 This slide left intentionally blank!
Operating Juniper Networks Routers—J-series Module 5: Routing Protocols and Policy

13 Operating Juniper Networks Routers—J-series
IGP Default Policies Operating Juniper Networks Routers—J-series Protocols are associated with a default policy OSPF: Import: Accept all LSAs flooded by that protocol Export: Reject everything LSA flooding announces OSPF-learned and local routes RIP: Import: Accept all learned RIP routes, export nothing RIP requires export policy to announce RIP (or other) routes Module 5: Routing Protocols and Policy

14 This slide left intentionally blank!
Operating Juniper Networks Routers—J-series Module 5: Routing Protocols and Policy

15 Operating Juniper Networks Routers—J-series
Agenda: Routing Protocols and Policy Routing Table and Route Preferences Routing Policy J-Web Support for Routing Protocols and Policy Configuring and Monitoring Static Routing Interior Gateway Protocols Configuring and Monitoring RIP Configuring and Monitoring OSPF Module 5: Routing Protocols and Policy

16 J-Web and Routing Protocols (1 of 2)
Operating Juniper Networks Routers—J-series J-Web routing protocol wizards found at Configuration > Quick Configuration > Routing and Protocols Quickly establish basic connectivity for: Static, RIP, OSPF, and BGP routing Module 5: Routing Protocols and Policy

17 J-Web and Routing Protocols (2 of 2)
Operating Juniper Networks Routers—J-series Use J-Web configuration editor (or the CLI) to: Tweak OSPF default route origination, summarization, authentication, etc. Create and apply routing policy Module 5: Routing Protocols and Policy

18 Monitoring Routing with J-Web
Operating Juniper Networks Routers—J-series Use J-Web to monitor routing at the Monitor > Routing page Displays the routing table Displays protocol-specific information Module 5: Routing Protocols and Policy

19 Sample J-Web Route Table Display
Operating Juniper Networks Routers—J-series Table name and summary Route table contents Filter display using these fields Module 5: Routing Protocols and Policy

20 Operating Juniper Networks Routers—J-series
Agenda: Routing Protocols and Policy Routing Table and Route Preferences Routing Policy J-Web Support for Routing Protocols and Policy Configuring and Monitoring Static Routing Interior Gateway Protocols Configuring and Monitoring RIP Configuring and Monitoring OSPF Module 5: Routing Protocols and Policy

21 Operating Juniper Networks Routers—J-series
Static Routing Service Provider Access Router se-0/0/2 /30 .1 .2 Static Routing show route protocol static inet.0: 8 destinations, 8 routes (8 active, 0 holddown, 0 hidden) + = Active Route, - = Last Active, * = Both / *[Static/5] 00:00:15 > via se-0/0/2.0 Route source/global preference Next-hop interface/IP address A default route Static routing is often used when single-homed to a service provider Static default route directs external traffic to the service provider Module 5: Routing Protocols and Policy

22 This slide left intentionally blank!
Operating Juniper Networks Routers—J-series This slide left intentionally blank! Module 5: Routing Protocols and Policy

23 Static Routing Case Study
Operating Juniper Networks Routers—J-series Wintermute London lo0: se-1/0/1 .2 fe-0/0/1 .1 se-1/0/0 HARLIE Tokyo lo0: /30 /30 /30 (DCE) (DTE) Use static routing to provide connectivity among all WAN, LAN, and loopback addresses Module 5: Routing Protocols and Policy

24 Default Route Configuration
Operating Juniper Networks Routers—J-series Access the J-Web static routing wizard at the Configuration > Quick Configuration > Routing and Protocols page Create a default route on London Create a default route by identifying the next-hop IP address Module 5: Routing Protocols and Policy

25 Static Route Configuration
Operating Juniper Networks Routers—J-series Static route definitions at Tokyo Provides reachability to London’s loopback address and /30 network Module 5: Routing Protocols and Policy

26 Confirming Static Routing
Operating Juniper Networks Routers—J-series Use J-Web or the CLI to display the routing table and to confirm reachability Wintermute London lo0: se-1/0/1 .2 fe-0/0/1 .1 se-1/0/0 HARLIE Tokyo lo0: /30 /30 /30 (DCE) (DTE) show route protocol static inet.0: 9 destinations, 9 routes (9 active, 0 holddown, 0 hidden) + = Active Route, - = Last Active, * = Both / *[Static/5] 00:01:54 > to via se-1/0/0.0 /32 *[Static/5] 00:03:09 ping source count 2 PING ( ): 56 data bytes 64 bytes from : icmp_seq=0 ttl=255 time= ms 64 bytes from : icmp_seq=1 ttl=255 time= ms ping statistics --- 2 packets transmitted, 2 packets received, 0% packet loss round-trip min/avg/max/stddev = /47.951/85.853/ ms Both static routes are active at Tokyo Test traffic sourced from the LAN interface to confirm end-to-end routing Module 5: Routing Protocols and Policy

27 Lab 4—Parts 1–3: Static Routing
Operating Juniper Networks Routers—J-series Configure and monitor static routing. Note: This lab and future labs require each team to use the Sydney router, which is logically segmented into several virtual routers. Each student router connects to a virtual router in the form of xx-VR, where xx is a two letter abbreviation for the directly connected student router. Please keep in mind that the command syntax is slightly different when working with a virtual router. Following are some examples: ping routing-instance LO-VR show route table LO-VR traceroute routing-instance LO-VR Module 5: Routing Protocols and Policy

28 Operating Juniper Networks Routers—J-series
Agenda: Routing Protocols and Policy Routing Table and Route Preferences Routing Policy J-Web Support for Routing Protocols and Policy Configuring and Monitoring Static Routing Interior Gateway Protocols Configuring and Monitoring RIP Configuring and Monitoring OSPF Module 5: Routing Protocols and Policy

29 Interior Gateway Protocol Overview
Operating Juniper Networks Routers—J-series lo0: /32 lo0: /32 Flooded LSAs build link-state database Adjacencies Router A Router B Router A can reach , cost 0 Router C lo0: /32 IGPs provide internal reachability Promote connectivity but lack administrative controls needed to enforce routing policy Normally, link-state routing (OSPF) is deployed Optimal convergence and bandwidth usage based on reliable flooding of link-state updates Builds a replicated network topology database at all stations within an OSPF area or IS-IS level and uses SPF to find optimal paths RIP and static routing are also common Module 5: Routing Protocols and Policy

30 This slide left intentionally blank!
Operating Juniper Networks Routers—J-series Module 5: Routing Protocols and Policy

31 Operating Juniper Networks Routers—J-series
Agenda: Routing Protocols and Policy Routing Table and Route Preferences Routing Policy J-Web Support for Routing Protocols and Policy Configuring and Monitoring Static Routing Interior Gateway Protocols Configuring and Monitoring RIP Configuring and Monitoring OSPF Module 5: Routing Protocols and Policy

32 Operating Juniper Networks Routers—J-series
What Is RIP? Operating Juniper Networks Routers—J-series RIP is an IGP that is used within an AS Two versions: RIPv1 (RFC 1058) RIPv2 (RFC 2453) Primary characteristics: Distance-vector routing protocol; prone to loops and slow convergence Split horizon and poison reverse for loop prevention Hop count is used as the metric for path selection, based on Bellman-Ford distance-vector routing algorithm Routing updates sent every 30 seconds Module 5: Routing Protocols and Policy

33 This slide left intentionally blank!
Operating Juniper Networks Routers—J-series This slide left intentionally blank! Module 5: Routing Protocols and Policy

34 Operating Juniper Networks Routers—J-series
RIP Message Types Operating Juniper Networks Routers—J-series RIP V2 Update: /30, cost /32, cost 1 Wintermute London lo0: se-1/0/1 .2 fe-0/0/1 .1 se-1/0/0 HARLIE Tokyo lo0: /30 /30 /30 (DCE) (DTE) Two message types: Request message Asks neighbors to send routes Response message Carries route updates Advertises up to 25 routes per update Router decides how to handle routes in update Add, modify, or delete Module 5: Routing Protocols and Policy

35 This slide left intentionally blank!
Operating Juniper Networks Routers—J-series This slide left intentionally blank! Module 5: Routing Protocols and Policy

36 Operating Juniper Networks Routers—J-series
RIPv2 Features Operating Juniper Networks Routers—J-series /26 /30 The prefix is subnetted with a variable-length netmask /26 RIP V2 updates include the netmask in updates to support VLSM /30 Update: /26, Cost 1 Backward compatible with RIPv1 Update includes prefix length to support VLSM Authentication on a per-message basis Simple password or MD5 authentication Updates sent to multicast address You can configure broadcast-based updates Module 5: Routing Protocols and Policy

37 This slide left intentionally blank!
Operating Juniper Networks Routers—J-series This slide left intentionally blank! Module 5: Routing Protocols and Policy

38 Operating Juniper Networks Routers—J-series
RIP Limitations Operating Juniper Networks Routers—J-series Limitations: Maximum network diameter = 15 hops Regular updates include entire routing table approximately every 30 seconds Poison reverse increases size of routing updates Count to infinity slows route-loop prevention Metrics reflect hop count only Broadcasts between neighbors (RIPv1 only) Classful routing means no prefix length carried in route updates (RIPv1 only) No authentication mechanism exists (RIPv1 only) Has poor convergence Module 5: Routing Protocols and Policy

39 This slide left intentionally blank!
Operating Juniper Networks Routers—J-series This slide left intentionally blank! Module 5: Routing Protocols and Policy

40 Operating Juniper Networks Routers—J-series
RIP Case Study Wintermute London lo0: se-1/0/1 .2 fe-0/0/1 .1 se-1/0/0 HARLIE Tokyo lo0: /30 /30 /30 (DCE) (DTE) Use RIPv2 to provide connectivity among all WAN, LAN, and loopback addresses Module 5: Routing Protocols and Policy

41 Configuring RIP: J-Web
Operating Juniper Networks Routers—J-series Use the J-Web Configuration > Quick Configuration > Routing and Protocols > RIP Routing wizard Automatically creates export policy to advertise RIP-enabled interface and learned RIP routes RIP is enabled RIP is enabled on LAN, WAN, and loopback interfaces Module 5: Routing Protocols and Policy

42 The Resulting RIP Configuration
Operating Juniper Networks Routers—J-series show protocols rip group jweb-rip { export [ jweb-policy-rip jweb-policy-direct ]; neighbor fe-0/0/1.0; neighbor lo0.0; neighbor se-1/0/1.0; } [edit] show policy-options policy-statement jweb-policy-rip { from protocol rip; then accept; policy-statement jweb-policy-direct { from { protocol direct; interface [ fe-0/0/1.0 lo0.0 se-1/0/1.0 ]; Two export policies are in effect Export policies override default behavior by advertising RIP interfaces and learned RIP routes Module 5: Routing Protocols and Policy

43 Operating Juniper Networks Routers—J-series
Monitoring RIP: J-Web Operating Juniper Networks Routers—J-series Use the J-Web Monitor > Routing > RIP Information page to monitor general RIP operation Two routes learned via RIP RIP interface parameters Module 5: Routing Protocols and Policy

44 Monitoring RIP Using the CLI (1 of 3)
Operating Juniper Networks Routers—J-series Show the state of your RIP interfaces using the show rip neighbor command show rip neighbor Source Destination Send Receive In Neighbor State Address Address Mode Mode Met se-1/0/ Up mcast both lo Up mcast both fe-0/0/ Up mcast both Show routes learned via RIP using the show route protocol rip command show route protocol rip inet.0: 10 destinations, 10 routes (10 active, 0 holddown, 0 hidden) + = Active Route, - = Last Active, * = Both / *[RIP/100] 00:21:16, metric 2, tag 0 > to via se-1/0/1.0 /32 *[RIP/100] 00:21:16, metric 2, tag 0 / *[RIP/100] 00:21:22, metric 1 MultiRecv Module 5: Routing Protocols and Policy

45 Monitoring RIP Using the CLI (2 of 3)
Operating Juniper Networks Routers—J-series Display RIP routes advertised out an interface using the show route advertising-protocol rip neighbor command neighbor is the IP address of local RIP interface show route advertising-protocol rip inet.0: 10 destinations, 10 routes (10 active, 0 holddown, 0 hidden) + = Active Route, - = Last Active, * = Both / *[Direct/0] 01:19:23 > via fe-0/0/1.0 /32 *[Direct/0] 01:19:23 > via lo0.0 Advertisement of the LAN and loopback addresses owned by London are confirmed on London’s se-1/0/1 interface Module 5: Routing Protocols and Policy

46 Monitoring RIP Using the CLI (3 of 3)
Operating Juniper Networks Routers—J-series Display RIP routes received on a particular interface using the show route receive-protocol rip neighbor command neighbor is the IP address of remote RIP neighbor show route receive-protocol rip inet.0: 10 destinations, 10 routes (10 active, 0 holddown, 0 hidden) + = Active Route, - = Last Active, * = Both / *[RIP/100] 00:27:04, metric 2, tag 0 > to via se-1/0/1.0 /32 *[RIP/100] 00:27:04, metric 2, tag 0 RIP advertisements for the LAN and loopback addresses owned by Tokyo are confirmed on London’s se-1/0/1 interface Module 5: Routing Protocols and Policy

47 Operating Juniper Networks Routers—J-series
Lab 4—Parts 4–5: RIP Operating Juniper Networks Routers—J-series Configure and monitor RIP version 2. Module 5: Routing Protocols and Policy

48 Operating Juniper Networks Routers—J-series
Agenda: Routing Protocols and Policy Routing Table and Route Preferences Routing Policy J-Web Support for Routing Protocols and Policy Configuring and Monitoring Static Routing Interior Gateway Protocols Configuring and Monitoring RIP Configuring and Monitoring OSPF Module 5: Routing Protocols and Policy

49 OSPF Protocol Overview
Operating Juniper Networks Routers—J-series OSPF Protocol Overview OSPF is a link-state routing protocol OSPF reliably floods LSAs to distribute link-state information once an adjacency is formed Each router uses these LSAs to create a complete database for the network OSPF uses the SPF algorithm within the database to calculate the best route to every node in the network JUNOS software support for OSPF includes: RFC 1587, The OSPF NSSA Option RFC 2328, OSPF Version 2 RFC 2740, OSPF for IPv6 draft-katz-yeung-ospf-traffic-01.txt, Traffic Engineering Extensions to OSPF draft-ietf-katz-ward-bfd-00.txt, Bidirectional Forwarding Detection Module 5: Routing Protocols and Policy

50 This slide left intentionally blank!
Operating Juniper Networks Routers—J-series This slide left intentionally blank! Module 5: Routing Protocols and Policy

51 OSPF Router Terminology
Operating Juniper Networks Routers—J-series Internal router has all OSPF links in the same area Within Area 0, also called a backbone router Backbone router Any router with a link to Area 0 ABRs Routers that belong to more than one area are called area border routers Connect OSPF areas to the backbone Area 0 ASBRs Routers that inject routing information from outside the OSPF domain are called AS boundary routers Module 5: Routing Protocols and Policy

52 Operating Juniper Networks Routers—J-series
The Designated Router OSPF elects a DR to represent a broadcast segment Significantly reduces OSPF traffic on segment A backup DR is also elected to recover for DR failures DROther stations form adjacencies to the DR and BDR only BDR DR Adjacencies DROther DROther DROther Module 5: Routing Protocols and Policy

53 OSPF Neighbors Versus Adjacencies
Operating Juniper Networks Routers—J-series Adjacent DR DROther DROther 2-way show ospf neighbor extensive Address Intf State ID Pri Dead fe-0/0/ Full area , opt 0x42, DR , BDR Up 00:10:50, adjacent 00:10:50 fe-0/0/ Full Up 00:10:50, adjacent 00:10:52 fe-0/0/ Way Up 00:08:10 2-way state to DROther routers is normal Module 5: Routing Protocols and Policy

54 Operating Juniper Networks Routers—J-series
OSPF Areas (1 of 2) Areas: Single AS can be divided into smaller groups called areas Areas reduce the link-state database because LSA flooding is now constrained to the area Routers maintain a separate link-state database on a per-area basis Each link-state database within an area must still be identical on all routers Module 5: Routing Protocols and Policy

55 Operating Juniper Networks Routers—J-series
OSPF Areas (2 of 2) Special OSPF area called the backbone area Backbone area ( ) distributes routing information between areas All other OSPF areas must connect to the backbone area All user traffic from one area to another must traverse the backbone Module 5: Routing Protocols and Policy

56 OSPF Area Relationships
Operating Juniper Networks Routers—J-series Intra-Area Routes Area 1 Interarea Routes (Summary Routes) Area 3 Area 2 Backbone ( ) RIP External Routes BGP Module 5: Routing Protocols and Policy

57 Operating Juniper Networks Routers—J-series
OSPF Area Types Operating Juniper Networks Routers—J-series Stub areas Do not carry external routes Cannot contain ASBRs Totally stubby areas Stub areas that only receive the default route from the backbone Not-so-stubby areas Allow external routes to be advertised from the area but not received from another area Module 5: Routing Protocols and Policy

58 This slide left intentionally blank!
Operating Juniper Networks Routers—J-series This slide left intentionally blank! Module 5: Routing Protocols and Policy

59 Operating Juniper Networks Routers—J-series
OSPF Area Types Operating Juniper Networks Routers—J-series Intra-Area Routes Stub Area Interarea Routes (Summary Routes) Default Route Not-So-Stubby Area Totally Stubby Area Backbone ( ) RIP External Routes BGP Module 5: Routing Protocols and Policy

60 Operating Juniper Networks Routers—J-series
OSPF LSA Types Operating Juniper Networks Routers—J-series Router Links Type 1 Summary Links Types 3 and 4 ABR Describe the state and cost of the router’s links (interfaces) to the area (intra-area). Originated by ABRs only. Describe networks in the AS but outside of area (interarea). Also describe the location of the ASBR. Network Links Type 2 External Links Type 5 NSSA External Links Type 7 DR ASBR NSSA A Review of LSA Packet Types The OSPF specification details 11 different LSA types (listed below). These LSAs each represent a portion of the OSPF network and are flooded into the AS based on the function of the router. Modern OSPF networks use the LSA types marked with an asterisk (*). Type 1: Router LSA* Type 2: Network LSA* Type 3: Summary LSA* Type 4: ASBR summary LSA* (also referred to as ASBR reachability LSA) Type 5: AS external LSA* Type 6: Multicast OSPF LSA Type 7: NSSA external LSA* Type 8: External attributes LSA Type 9: Opaque LSA (link scope) Type 10: Opaque LSA (area scope—used for traffic engineering)* Type 11: Opaque LSA (AS scope) ASBR Originated for multi-access segments with more than one attached router. Describe all routers attached to the specific segment. Originated by a designated router (discussed later). Originated by an ASBR. Describe destinations external to the AS or a default route to the outside AS. Used by NSSAa to import external routes into a stub area. Module 5: Routing Protocols and Policy

61 OSPF Case Study (Single-Area)
Operating Juniper Networks Routers—J-series OSPF Area 0 Wintermute London lo0: se-1/0/1 .2 fe-0/0/1 .1 se-1/0/0 HARLIE Tokyo lo0: /30 /30 /30 (DCE) (DTE) Use a single OSPF area to provide connectivity among all WAN, LAN, and loopback addresses Module 5: Routing Protocols and Policy

62 Configuring OSPF: J-Web
Operating Juniper Networks Routers—J-series Use the J-Web OSPF wizard at the Configuration > Quick Configuration > Routing and Protocols page Configuration goal: A single-area OSPF network using the sample topology Defaults to lo0 address OSPF process enabled OSPF enabled on LAN, WAN, and loopback interfaces Area number and type Module 5: Routing Protocols and Policy

63 The Resulting OSPF Configuration
Operating Juniper Networks Routers—J-series [edit] show routing-options router-id ; show protocols ospf area { interface fe-0/0/1.0; interface se-1/0/1.0; interface lo0.0; } Required because of explicit RID; can be set to passive Default OSPF import and export policies are in effect Explicit declaration of lo0-based RID requires that OSPF run on loopback interface Otherwise, the loopback route will not be advertised Module 5: Routing Protocols and Policy

64 Monitoring OSPF: J-Web (1 of 2)
Operating Juniper Networks Routers—J-series Use the J-Web Monitor > Routing > OSPF Information page to monitor general OSPF operation OSPF neighbor and interface status OSPF protocol statistics Module 5: Routing Protocols and Policy

65 Monitoring OSPF: J-Web (2 of 2)
Operating Juniper Networks Routers—J-series Use the J-Web Monitor > Routing > Route Information page to monitor OSPF routing information Current OSPF routes Filter matches OSPF routes only Module 5: Routing Protocols and Policy

66 Monitoring OSPF Using the CLI (1 of 5)
Operating Juniper Networks Routers—J-series Use the show ospf route command to display routes learned and advertised into OSPF Includes routes for interfaces running OSPF show ospf route ? Possible completions: <[Enter]> Execute this command abr Display OSPF routes to area border routers asbr Display OSPF routes to AS border routers detail Display detailed output extern Display external OSPF routes instance Name of OSPF instance inter Display interarea OSPF routes intra Display intraarea OSPF routes | Pipe through a command show ospf route detail Prefix Path Route NH Metric NextHop Nexthop Type Type Type Interface addr/label Intra Router IP se-1/0/1.0 area , origin optional-capability 0x0, / Intra Network IP se-1/0/1.0 area , origin . . . Use switches to filter by OSPF route (LSA) type Module 5: Routing Protocols and Policy

67 This slide left intentionally blank!
Operating Juniper Networks Routers—J-series This slide left intentionally blank! Module 5: Routing Protocols and Policy

68 Monitoring OSPF Using the CLI (2 of 5)
Operating Juniper Networks Routers—J-series Use the show ospf interface command to display the OSPF interface parameters Add the detail or extensive switch for additional information show ospf interface Interface State Area DR ID BDR ID Nbrs fe-0/0/ DR lo DR se-1/0/ PtToPt DR/BDR not elected on point-to-point links An OSPF neighbor was detected Module 5: Routing Protocols and Policy

69 Operating Juniper Networks Routers—J-series
This slide left intentionally blank! Module 5: Routing Protocols and Policy

70 Monitoring OSPF Using the CLI (3 of 5)
Operating Juniper Networks Routers—J-series Use the show ospf neighbor command to display adjacency information show ospf neighbor Address Interface State ID Pri Dead se-1/0/ Full Clear adjacencies with the clear ospf neighbor command clear ospf neighbor se-1/0/ ExStart Module 5: Routing Protocols and Policy

71 This slide left intentionally blank!
Operating Juniper Networks Routers—J-series This slide left intentionally blank! Module 5: Routing Protocols and Policy

72 Monitoring OSPF Using the CLI (4 of 5)
Operating Juniper Networks Routers—J-series Use the show ospf database command to display entries in the link-state database Filter the display by LSA type Use the detail or extensive switches for added information show ospf database ? Possible completions: <[Enter]> Execute this command advertising-router Router ID of advertising router area OSPF area ID asbrsummary Show summary AS boundary router link-state database brief Display brief output (default) detail Display detailed output extensive Display extensive output extern Show external link-state database . . . show ospf database OSPF link state database, area Type ID Adv Rtr Seq Age Opt Cksum Len Router x x2 0xce62 72 Router * x x2 0x9b79 72 Self-originated LSAs marked with * Module 5: Routing Protocols and Policy

73 This slide left intentionally blank!
Operating Juniper Networks Routers—J-series This slide left intentionally blank! Module 5: Routing Protocols and Policy

74 Monitoring OSPF Using the CLI (5 of 5)
Operating Juniper Networks Routers—J-series Use the clear ospf database command to clear the link-state database Normally, existing LSAs are simply reflooded over existing adjacencies OSPF supports a purge option that forces the refreshing of all LSAs clear ospf database purge show ospf database OSPF link state database, area Type ID Adv Rtr Seq Age Opt Cksum Len Router x x2 0xc Router * x a x2 0x937d 72 The purge switch forces all LSAs to the maximum age; the originating router will refresh the LSA if it is still valid Module 5: Routing Protocols and Policy

75 Lab 4–Part 6: OSPF Single Area
Operating Juniper Networks Routers—J-series Lab 4–Part 6: OSPF Single Area Configure and monitor single-area OSPF. Module 5: Routing Protocols and Policy

76 OSPF Case Study (Multiarea)
Operating Juniper Networks Routers—J-series OSPF Area 1 OSPF Area 0 OSPF Area 2 London Tokyo se-1/0/0 /30 HARLIE se-1/0/1 Wintermute fe-0/0/1 .1 lo0: .2 lo0: fe-0/0/1 .2 (DCE) (DTE) .1 /30 /30 Use multiple OSPF areas to provide connectivity among all WAN, LAN, and loopback addresses Authenticate OSPF exchanges between neighbors Module 5: Routing Protocols and Policy

77 Multiarea OSPF Configuration
Operating Juniper Networks Routers—J-series [edit] show routing-options router-id ; show protocols ospf area { authentication-type md5; interface lo0.0; interface se-1/0/1.0 { authentication { md5 1 key "$9$vW7M7Vg4ZjkPJG"; ## SECRET-DATA } area { interface fe-0/0/1.0 { md5 1 key "$9$5T6AB1hrK8Ec"; ## SECRET-DATA Required because of explicit RID; can be set to passive Area and interface configuration Authentication parameters Module 5: Routing Protocols and Policy

78 Monitoring Multiarea OSPF (1 of 2)
Operating Juniper Networks Routers—J-series Use the show ospf interface command to display the OSPF interface parameters Add the detail or extensive switch for additional information show ospf interface Interface State Area DR ID BDR ID Nbrs lo DR se-1/0/ PtToPt fe-0/0/ DR Multiple OSPF areas indicates router’s role as ABR OSPF neighbors detected Module 5: Routing Protocols and Policy

79 Monitoring Multiarea OSPF (2 of 2)
Operating Juniper Networks Routers—J-series Use the show ospf database command to display entries in the link-state database for all areas show ospf database OSPF link state database, Area Type ID Adv Rtr Seq Age Opt Cksum Len Router x x22 0xb Router * x x22 0x16ce 60 Summary x x22 0xb Summary * x x22 0x4c70 28 Summary * x x22 0x59c2 28 OSPF link state database, Area Router x x22 0xe5b2 48 Router * x c x22 0xf Network * x x22 0xc Summary * x x22 0xdcd6 28 Summary * x x22 0xc5ec 28 Summary * x x22 0x20f8 28 Summary * x x22 0x21f6 28 Module 5: Routing Protocols and Policy

80 OSPF Case Study (Summarization)
Operating Juniper Networks Routers—J-series OSPF Area 0 OSPF Area 2 Amsterdam London Tokyo se-1/0/0 /30 fe-0/0/1 fe-0/0/1 HARLIE se-1/0/1 Wintermute .1 .1 /30 .2 lo0: lo0: .2 lo0: (DCE) (DTE) fe-2/0/0 Summarize link advertisements on ABR Summarize the x/30 routes from Amsterdam into Area 0 on London /30 /30 /30 /30 Module 5: Routing Protocols and Policy

81 OSPF Database (Before Summarization)
Operating Juniper Networks Routers—J-series show ospf database OSPF link state database, Area Type ID Adv Rtr Seq Age Opt Cksum Len Router x x22 0xb Router * x x22 0x14cf 60 Summary x x22 0xb Summary * x a x22 0x4a71 28 Summary * x x22 0x5a8a 28 Summary * x x22 0x32ae 28 Summary * x x22 0xad2 28 Summary * x x22 0xe1f6 28 Summary * x x22 0x57c3 28 OSPF link state database, Area Router x x22 0x6caf 96 Router * x d x22 0xf Network * x x22 0xc Summary * x x22 0xdcd6 28 Summary * x x22 0xc5ec 28 Summary * x x22 0x20f8 28 Summary * x x22 0x21f6 28 Module 5: Routing Protocols and Policy

82 Summary Configuration Added
Operating Juniper Networks Routers—J-series [edit] show protocols ospf area { authentication-type md5; interface lo0.0; interface se-1/0/1.0 { authentication { md5 1 key "$9$vW7M7Vg4ZjkPJG"; ## SECRET-DATA } area { area-range /28; interface fe-0/0/1.0 { md5 1 key "$9$5T6AB1hrK8Ec"; ## SECRET-DATA area-range statement will summarize all x/30 prefixes Module 5: Routing Protocols and Policy

83 OSPF Database (After Summarization)
Operating Juniper Networks Routers—J-series show ospf database OSPF link state database, Area Type ID Adv Rtr Seq Age Opt Cksum Len Router x x22 0xb Router * x x22 0x10d1 60 Summary x x22 0xb Summary * x b x22 0x Summary * x x22 0x10df 28 Summary * x a x22 0x55c4 28 OSPF link state database, Area Router x x22 0x6ab0 96 Router * x f x22 0xf23a 36 Network * x x22 0x Summary * x b x22 0xd6d9 28 Summary * x a x22 0xc3ed 28 Summary * x x22 0x1ef9 28 Summary * x a x22 0x1ff7 28 Module 5: Routing Protocols and Policy

84 Configuring IGP Tracing
Operating Juniper Networks Routers—J-series Use tracing to debug the operation of your IGP A typical OSPF tracing configuration: Monitor the resulting ospf-trace log file using the monitor start log-file-name or the show log log-file-name CLI commands Use Esc+q to toggle terminal output when monitoring and monitor stop to discontinue monitoring Turn off tracing by deleting the traceoptions stanza [edit protocols ospf] show traceoptions file ospf-trace; flag error detail; flag hello detail; flag lsa-update; Module 5: Routing Protocols and Policy

85 Operating Juniper Networks Routers—J-series
Review Questions Operating Juniper Networks Routers—J-series Describe the general purpose of routing policy. Describe the purpose and role of an IGP. What is the default import and export policy for RIP? How can you confirm OSPF adjacency status? How can you display only those routes that are learned by a certain protocol? What is the purpose of the ABR and the ASBR? Why might OSPF summarization be a good idea? Module 5: Routing Protocols and Policy

86 Lab 4—Part 7: OSPF Multiarea
Operating Juniper Networks Routers—J-series Configure and monitor multiarea OSPF. Summarize link-state information into Area 0. Module 5: Routing Protocols and Policy

87 Education Services


Download ppt "Operating Juniper Networks Routers in the Enterprise"

Similar presentations


Ads by Google