CIS 185 CCNP ROUTE Ch. 4 Manipulating Routing Updates Part 2 – Controlling Routing Updates Rick Graziani Cabrillo College graziani@cabrillo.edu Last Updated:

CIS 185 CCNP ROUTE Ch. 4 Manipulating Routing Updates Part 2 – Controlling Routing Updates
Rick Graziani Cabrillo College Last Updated: Fall 2017

Note There are 185+ slides in this presentation…
But we will only be covering the first 80 or so. 

Redistribution Techniques and Issues

501 Seed Metric RIP OSPF1 Largest metric is 500 501 router ospf 1 network redistribute rip default-metric 501 or redistribute rip metric 501 When redistributing information, the seed metric should be set to a value larger than the largest metric within the receiving autonomous system (aka the largest native metric). This will help prevent suboptimal routing and routing loops.

The default seed metric value for routes that are redistributed into each IP routing protocol.
A metric of infinity tells the router that the route is unreachable and, therefore, should not be advertised. When redistributing routes into RIP, IGRP, and EIGRP, you must specify a seed metric, or the redistributed routes will not be advertised. For OSPF, the redistributed routes have a default type 2 (E2) metric of 20, (except for redistributed BGP routes, which have a default type 2 metric of 1)

One-Point Redistribution
One-point redistribution has only one router redistributing between two routing protocols. A one-way redistribution issue that could occur…

R2 and R3 are both running OSPF and EIGRP
via R1 has AD 170 (EX EIGRP) via R2 has AD 110 (OSPF) So, I will choose (include in my routing table) the path via R2 (OSPF) R2 and R3 are both running OSPF and EIGRP Only R2 is redistributing from EIGRP into OSPF R1 has an External Route that it is redistributing into its EIGRP AS. R1 is advertising (via EIGRP) this route to both R2 and R3. R3 receives routing update information for the external route directly from: R1 via EIGRP (AD = 170) R2 via OSPF (AD = 110) Because the AD of OSPF (110) is lower than AD of external EIGRP routes (170), R3 selects the OSPF route. Suboptimal routing Instead of sending packets directly from router R3 to router R1, router R3 prefers the path via router R2, resulting in suboptimal routing. Solution: Tag routes. We will see how to do this later.

Multipoint redistribution
Multipoint redistribution has two separate routers running both routing protocols. Two possibilities exist: Multipoint one-way redistribution Multipoint two-way redistribution Likely to introduce potential routing loops

A one-way multipoint redistribution issue.
via R1 has AD 170 (EX EIGRP) via R3 has AD 110 (OSPF) So, I will choose (include in my routing table) the path via R3 (OSPF) via R1 has AD 170 (EX EIGRP) via R2 has AD 110 (OSPF) So, I will choose (include in my routing table) the path via R2 (OSPF) A one-way multipoint redistribution issue. R1 (EIGRP) is announcing routes, including the external route, to R2 and R3. R2 and R3 are both running two routing protocols (EIGRP and OSPF) and redistributing EIGRP into OSPF. Therefore, R2 and R3 receive routing update information for the external route : via (internal) EIGRP from router R1 and via (internal) OSPF from the other OSPF router (R2 from R3, and R3 from R2). The AD of OSPF (110) is lower than AD of external EIGRP (170): So R2 selects the OSPF route instead of sending packets directly to R1 R2 prefers the OSPF route via router R3 Routing Loop!

Modify the Administrative Distance of redistributed routes (extra)
via R1 has AD 170 (EX EIGRP) via R3 has AD 110 (OSPF) So, I will choose (include in my routing table) the path via R3 (OSPF) via R1 has AD 170 (EX EIGRP) via R2 has AD 110 (OSPF) So, I will choose (include in my routing table) the path via R2 (OSPF) To prevent routing loops in multipoint redistribution scenario the following recommendations should be considered: Tag routes in redistribution points and filter based on these tags when redistributing (later) Modify the Administrative Distance of redistributed routes (extra) Use default routes to avoid having to do two-way redistribution

A multi-way multipoint redistribution issue
The best path between R1 and R4 is via R3 But during redistribution from routing protocol B to routing protocol A, the metric is lost Domain A doesn’t know about metrics in Domain B R1 will send packets toward router R4 via router R2 (its best path outside its domain) Resulting in suboptimal routing.

Controlling Routing Update Traffic

Routing updates are critical but compete with user data for bandwidth and router resources.
To ensure that the network operates efficiently, you must control and tune routing updates. The following are some ways to control or prevent dynamic routing updates from being generated: Passive interface—Prevents routing updates from being sent out an interface. Default routes—Can limit or eliminate the need for other routes. Static routes—Can limit or eliminate the need for dynamically learned routes or give greater control for specific routes. Advanced Route Filtering Route maps—Complex access lists that allow conditions to be tested and actions taken to modify attributes of the packet or route. Distribute lists—A distribute list allows an access list to be applied to routing updates. Prefix lists—A prefix list is a specialized access list designed to filter routes.

Route Maps

Route Map Applications
Several of the more common applications for route maps are as follows: Route filtering during redistribution— distribute lists can be used for this purpose but route maps offer additional features. Policy-based routing (PBR)—Sophisticated static routes. NAT—Route maps can better control which private addresses are translated to public addresses BGP—Route maps are the primary tools for implementing BGP policy (later chapter)

Route maps are like complex access lists that allow some conditions to be tested against the packet or route in question using match commands. If the conditions match: Actions can be taken to modify attributes of the packet or route These actions are specified by set commands. BIG difference between route maps and ACLs: Route map can modify the packet or route using set commands

A route map consists of multiple route map statements.
Router(config)# route-map map-tag [permit | deny] [sequence-number] A route map consists of multiple route map statements. Processed top-down, similar to an access list. The first match found for a route is applied. Sequence number: Used for inserting or deleting specific route map statements in a specific place in the route map. The default for the route-map command is: permit sequence-number of 10

Permit everything else
Command: match condition Defines the condition to be checked. Command: set condition If there is a match and the action to be taken is permit … Then set defines the action to be followed The consequences of a deny action depend on how the route map is being used. Like an ACL there is an implicit deny any at the end of a route map. A route map statement without any match commands will be considered a match

If {(x or y or z) and (a) match} then {set b and c}
Else If q matches then set r Set nothing A single match statement may contain multiple conditions. At least one condition in the match statement must be true for that match statement to be considered a match Logical OR operation A route map statement may contain multiple match statements. All match statements in the route map statement must be considered true for the route map statement to be considered matched. Logical AND operation

Configuring Route Maps to Control Routing Updates
Redistributing into EIGRP redistribute protocol [process-id | as-number] [metric bw delay reliability load mtu ] [match {internal | nssa-external | external 1 | external 2}] [tag tag-value] [route-map map-tag] Redistributing into OSPF redistribute protocol [process-id | as-number] [metric {metric-value | transparent}] [metric-type type-value] [match {internal | external 1 | external 2 | nssa-external}] [tag tag-value] [route-map map-tag] [subnets] The redistribute commands all have a route-map option with a map-tag parameter. When used with the redistribute command: A route map with permit indicates that the matched route will be redistributed. A route map with deny indicates that the matched route will NOT be redistributed.

The match condition commands are used to define the conditions to be checked.
Some of these commands are used for: BGP policy PBR Redistribution filtering.

Partial List The set condition changes or add characteristics, such as metrics, to any routes that have: met a match criterion the action to be taken is permit The consequences of a deny action depend on how the route map is being used.

Quick Introduction Policy Based Routing (PBR) Example Jeff Doyle, Routing TCP/IP Vol. I More later in Chapter 5 Using PBR is the best way to understand how route maps are configured, so here is a quick introduction… (more later on PBR in chapter 5) Policy routes are nothing more than sophisticated static routes. Static routes forward a packet to a specified next hop based on destination address of the packet. Policy routes can forward a packet to a specified next hop based on the source of the packet. Policy routes can also be linked to extended IP access lists so that routing may be based on protocol types and port numbers. Like a static route, policy route influences the routing only on the router on which it is configured.

Jeff Doyle’s Peanuts Example Single interface example – source IP address
We want to implement a policy on Linus such that: Traffic from /24 subnet is forwarded to Lucy Traffic from /24 subnet is forwarded to Pigpen All other traffic is routed normally

Linus: inter S0 ip policy route-map Sally route-map Sally permit 10 match ip address 1 set ip next-hop route-map Sally permit 15 match ip address 2 set ip next-hop access-list 1 permit access-list 2 permit Any packets that do no match 15, such as from /24 are routed normally.

Jeff Doyle’s Peanuts Example Single interface example – destination IP address
Suppose we want to implement a policy on Linus such that: Traffic to host is forwarded to Lucy Traffic from to host is forwarded to Pigpen All other traffic is routed normally

Linus: Any packets that do no match 15 are routed normally. inter S0
ip policy route-map Sally route-map Sally permit 10 match ip address 101 set ip next-hop route-map Sally permit 15 match ip address 102 set ip next-hop access-list 101 permit ip any host access-list 102 permit ip host host Any packets that do no match 15 are routed normally.

Example RIPv2 OSPF /8 /16 metric=500 E1 /16 metric=500 E1 All other networks metric=5,000 E2 Redistribute RIP routes into OSPF with the following: /16 and /24 networks will be redistributed into OSPF with a metric of 500 and be E1 routes /8 networks will not be redistributed All other routes will be redistributed into OSPF with a metric of 5000 and be E2 routes

Configuring Route Redistribution using Route Maps
router ospf 1 redistribute rip route-map redis-rip subnets route-map redis-rip permit 10 match ip address 23 29 set metric 500 set metric-type 1 route-map redis-rip deny 20 match ip address 37 route-map redis-rip permit 30 set metric 5000 set metric-type 2 access-list 23 permit access-list 29 permit access-list 37 permit /16 and /24 networks will be redistributed into OSPF with a metric of 500 and be E1 routes /8 networks will not be redistributed into OSPF All other routes will be redistributed into OSPF with a metric of 5000 and be E2 routes The decision to filter a route or allow the route through is based on the deny or permit in the route-map command, and not the deny or permit in the ACL or prefix list.

Using Route Maps to Avoid Route Feedback
RIPv2 OSPF A /24 0 E /24 C D B Multi-point boundary routers may cause suboptimal routing or routing loops. RIPv2 on Router C advertises network Routers A and B redistribute the network into OSPF. OSPF then advertises the route to its neighbor OSPF routers as an OSPF external route. The route passes through the OSPF AS and eventually makes its way back to the other edge router. Router B (or A) then redistributes from OSPF back into the original RIPv2 network; this is a routing feedback loop.

This solution does not scale well. Let’s try tagging routes.
router ospf 10 redistribute rip subnets router rip redistribute ospf 10 route-map OSPF_into_RIP route-map OSPF_into_RIP deny 10 match ip address 1 route-map OSPF_into_RIP permit 20 access-list 1 permit /24 network will not be redistributed into RIP All other routes will be redistributed into RIP To prevent the routing feedback loop, a route map called OSPF_into_RIP has been applied to Routers A and B when redistributing OSPF routes into RIP. The decision to filter a route or allow the route through is based on the deny or permit in the route-map command, and not the deny or permit in the ACL or prefix list. This solution does not scale well. Let’s try tagging routes.

Using Route Maps With Tags
router eigrp 100 redistribute rip metric route-map into-eigrp route-map into-eigrp deny 10 match tag 40 route-map into-eigrp permit 20 set tag 20 route tag – A unitless 32-bit integer that most routing protocols can assign to any given route. Tag follows the route advertisement, even through the redistribution process. Another router may use an IOS tool such as route-maps to match routes with a given route tag to make a decision. Can be used to help to solve the domain loop problem.

RIPv2 EIGRP Tag 40 20 40 R1 Tag 20 40 20 Tag 40 /16 /8 R2 Tag 20 router eigrp 100 redistribute rip metric route-map into-eigrp router rip redistribute eigrp 100 metric 3 route-map into-rip route-map into-eigrp permit 20 set tag 20 route-map into-rip permit 20 set tag 40 Routes redistributed into EIGRP are tagged with the value 20 Routes redistributed into RIP are tagged with the value 40 BUT BEFORE we tag and allow a route into the domain we want to deny any routes that the other router already tagged and allowed in from the other domain.

RIPv2 EIGRP Tag 40 20 40 R1 X Tag 40 40 20 Tag 40 /16 /8 /8 R2 X Tag 40 router eigrp 100 redistribute rip metric route-map into-eigrp router rip redistribute eigrp 100 metric 3 route-map into-rip route-map into-eigrp deny 10 match tag 40 route-map into-eigrp permit 20 set tag 20 route-map into-rip deny 10 match tag 20 route-map into-rip permit 20 set tag 40 Updates with the tag 40 are not allowed to go back into EIGRP All other updates get a tag 20 are allowed into EIGRP

RIPv2 EIGRP X Tag 20 20 40 R1 Tag 20 20 40 X Tag 20 /16 /8 /8 R2 Tag 20 router eigrp 100 redistribute rip metric route-map into-eigrp router rip redistribute eigrp 100 metric 3 route-map into-rip route-map into-eigrp deny 10 match tag 40 route-map into-eigrp permit 20 set tag 20 route-map into-rip deny 10 match tag 20 route-map into-rip permit 20 set tag 40 Updates with the tag 20 are not allowed to go back into RIP All other updates get a tag 40 are allowed into RIP

40 20 R3 40 20 /8 Notice that the route tags do not appear on the routes within the R1 and R2 routers, because these routers learn about all routes from both RIP and EIGRP directly.

40 20 R3 40 20 /8 However, show ip route output from router R3, an internal router in the EIGRP network. Notice that router R3 does see network with a tag of 20; this tag is carried with the route as R3 advertises it to other routers in the EIGRP network, including R1 and R2. When routers R1 and R2 see the tag of 20, they do not redistribute the route back into RIP.

Using Distribute Lists

Distribute lists are another way to control routing updates.
Distribute list allow an access list to be applied to routing updates. distribute-list command allow updates to be filtered based on factors including the following: Incoming interface Outgoing interface Redistribution from another routing protocol

Configuring Distribute Lists to Control Routing Updates
An implementation plan when planning to configure distribute lists: Will it be used to permit or deny routes? Will it use an access list or a route map? Will it be applied to the inbound or outbound updates?

Only permit 10.10.11.0/24 and10.10.12.0/24 routes to be propagated.
R3(config)# ip access-list standard ROUTE-FILTER R3(config-std-nacl)# remark Outgoing Route Filter used with Distribute List R3(config-std-nacl)# permit R3(config-std-nacl)# permit R3(config-std-nacl)# exit R3(config)# router ospf 10 R3(config-router)# redistribute eigrp 100 metric 40 subnets R3(config-router)# distribute-list ROUTE-FILTER out eigrp 100 R3 must redistribute EIGRP routes into the OSPF domain with a metric of 40. Only permit /24 and /24 routes to be propagated. All other routes should not be permitted.

Using Prefix Lists

Advantages of using prefix lists:
Significant performance improvement over access lists in loading and route lookup of large lists. (Uses a tree structure) Support for incremental modifications. You can add and remove individual lines without removing the entire list. A more user-friendly command-line interface. Greater flexibility. Routers can match network numbers in a routing update against the prefix-list using as many bits as indicated. Routers can specify the size of the subnet mask, or that the subnet mask must be in a specified range.

Prefix-list concepts ip prefix-list list-name [seq seq-value] {deny | permit prefix/prefix-length}[ge ge-value] [le le-value] The route prefix (the subnet address) The prefix length (the subnet mask) Each command has a permit or deny action Only used for matching routes. Not used for packet filtering. Just implies whether a route is matched (permit) or not (deny). Sequence numbers are used for the insertion and deletion of individual commands.

Prefix-list Concepts ip prefix-list list-name [seq seq-value] {deny | permit prefix/prefix-length}[ge ge-value] [le le-value] Prefix-list Logic: The route’s prefix must be within the range of addresses implied by the prefix-list command’s prefix/prefix-length parameters. The route’s prefix length must match the range of prefixes implied by the prefix-list command's prefix-length, ge, and le parameters. What???

Prefix-list concepts ip prefix-list list-name [seq seq-value] {deny | permit prefix/prefix-length}[ge ge-value] [le le-value] Examining the Prefix prefix/prefix-length – Prefix: Address to be used for matching. Prefix length: How much of the address must match. /8 Any number (address) whose first 8 bits (/8) match Examples coming soon!

Prefix-list concepts ip prefix-list list-name [seq seq-value] {deny | permit prefix/prefix-length}[ge ge-value] [le le-value] Examining the Prefix Length Blank: Exact match. ge ge-value: Subnet mask must be at least this length up to /32. le le-value: Subnet mask must be this length or less, but at least the length of the prefix-length. ge ge-value le le-value: Subnet mask must fall within this range The ge value must be larger than the configured prefix length in the base part of the command. ip prefix-list list1 permit /8 ge 7 would be rejected The ge value (7) is less than the configured prefix-length (/8). Examples coming next!

Match the Prefix List with the appropriate routes
/8 /9 /24 /24 /30 /30 /8 Routes matched: 1 Reason: Without ge or le configured, both the prefix ( ) and length (8) must be an exact match. ip prefix-list list-name [seq seq-value] {deny | permit prefix/prefix-length} [ge ge-value] [le le-value]

/8 /9 /24 /24 /30 /30 /8 ge 9 Routes matched: 2 - 6 Reason: The /8 means “all routes whose first octet is 10”. The prefix length must be between 9 and 32, inclusive. ip prefix-list list-name [seq seq-value] {deny | permit prefix/prefix-length} [ge ge-value] [le le-value]

/8 /9 /24 /24 /30 /30 /8 ge 24 le 24 Routes matched: 3, 4 Reason: The /8 means “all routes whose first octet is 10,” and the prefix range is 24 to 24 — meaning only routes with prefix length 24. ip prefix-list list-name [seq seq-value] {deny | permit prefix/prefix-length} [ge ge-value] [le le-value]

/8 /9 /24 /24 /30 /30 /8 le 28 Routes matched: 1 - 4 Reason: The prefix length needs to be between 8 and 28, inclusive. ip prefix-list list-name [seq seq-value] {deny | permit prefix/prefix-length} [ge ge-value] [le le-value]

/8 /9 /24 /24 /30 /30 /0 Routes matched: none Reason: /0 means “match all prefixes”. Because no le nor ge parameter is configured, the /0 also means that the prefix length must be exactly 0. Only a default route would match this prefix list. ip prefix-list list-name [seq seq-value] {deny | permit prefix/prefix-length} [ge ge-value] [le le-value]

/8 /9 /24 /24 /30 /30 /0 le 32 Routes matched: All Reason: The range implied by /0 is all IPv4 addresses. The le 32 then implies any prefix length between 0 and 32, inclusive. This is the syntax for “match all” prefix list logic. ip prefix-list list-name [seq seq-value] {deny | permit prefix/prefix-length} [ge ge-value] [le le-value]

Filtering with Prefix Lists
ip prefix-list list-name [seq seq-value] {deny | permit prefix/prefix-length}[ge ge-value] [le le-value] We will use examples to see how this works! Whether a prefix is permitted or denied is based on the following rules: An empty prefix list permits all prefixes. If a prefix is permitted, the route is used. If a prefix is denied, the route is not used. Prefix lists consist of statements with sequence numbers. The router begins the search for a match at the top of the prefix list, which is the statement with the lowest sequence number. When a match occurs, the router does not need to go through the rest of the prefix list. For efficiency, you might want to put the most common matches (permits or denies) near the top of the list (lower sequence number). An implicit deny is assumed if a given prefix does not match any entries in a prefix list.

Configuring Prefix Lists
ip prefix-list list-name [seq seq-value] {deny | permit prefix/prefix-length}[ge ge-value] [le le-value]

Reminder: Distribute List and ACL Example
R3(config)# ip access-list standard ROUTE-FILTER R3(config-std-nacl)# remark Outgoing Route Filter used with Distribute List R3(config-std-nacl)# permit R3(config-std-nacl)# permit R3(config-std-nacl)# exit R3(config)# router ospf 10 R3(config-router)# redistribute eigrp 100 metric 40 subnets R3(config-router)# distribute-list ROUTE-FILTER out eigrp 100 R3 must redistribute EIGRP routes into the OSPF domain with a metric of 40. Only permit /24 and /24 routes to be propagated. All other routes should be denied.

Distribute List and Prefix List Example
R3(config)# ip prefix-list FILTER-ROUTES description Outgoing Route Filter R3(config)# ip prefix-list FILTER-ROUTES seq 5 permit /24 R3(config)# ip prefix-list FILTER-ROUTES seq 10 permit /24 R3(config)# router ospf 10 R3(config-router)# redistribute eigrp 100 metric 40 subnets R3(config-router)# distribute-list prefix FILTER-ROUTES out eigrp 100 R3 must redistribute EIGRP routes into the OSPF domain with a metric of 40. Only permit /24 and /24 routes to be propagated. All other routes should be denied.

Distribute List and Prefix List Example
R1# show ip route ospf <Output omitted> /8 is variably subnetted, 6 subnets, 2 masks O E /24 [110/40] via , 01:09:26, Ethernet0/0 O E /24 [110/40] via , 01:09:26, Ethernet0/0 O /32 [110/65] via , 01:48:04, Serial1/0 O /32 [110/65] via , 01:48:04, Serial1/0 O /32 [110/65] via , 01:48:04, Serial1/0 O /32 [110/65] via , 01:48:04, Serial1/0

Redistributing OSPFv2 Routes into the EIGRP Routing Domain Using an ACL and Distribute List

Redistributing OSPFv2 Routes into the EIGRP Routing Domain Using an ACL and Distribute List
R1 will: Redistribute OSPF routes into the EIGRP routing domain using ACLs and a distribute list Redistribute EIGRP routes into the OSPF routing domain using prefix lists and a distribute list

R1 will: Redistribute OSPF routes into the EIGRP routing domain using ACLs and a distribute list Redistribute OSPF routes into the EIGRP routing domain using prefix lists and a distribute list Redistributing OSPF Routes into EIGRP R1(config)# access-list 5 deny R1(config)# access-list 5 deny R1(config)# access-list 5 deny R1(config)# access-list 5 deny R1(config)# access-list 5 permit any R1(config)# router eigrp 100 R1(config-router)# redistribute ospf 10 metric R1(config-router)# distribute-list 5 out ospf 10 R1 will not redistribute the /24, /24, /24, and /24 routes into the EIGRP routing domain…. All other routes permitted

R1 will: Redistribute OSPF routes into the EIGRP routing domain using ACLs and a distribute list Redistribute OSPF routes into the EIGRP routing domain using prefix lists and a distribute list Redistributing OSPF Routes into EIGRP R2# show ip route eigrp <Output omitted> /16 is variably subnetted, 16 subnets, 4 masks D EX /30 [170/ ] via , 1w0d, Ethernet0/0 D EX /24 [170/ ] via , 1w0d, Ethernet0/0 D EX /32 [170/ ] via , 1w0d, Ethernet0/0 D EX /32 [170/ ] via , 1w0d, Ethernet0/0 D EX /32 [170/ ] via , 1w0d, Ethernet0/0 D EX /32 [170/ ] via , 1w0d, Ethernet0/0 R1 will not redistribute the /24, /24, /24, and /24 routes into the EIGRP routing domain…. All other routes permitted

R1 will: Redistribute OSPF routes into the EIGRP routing domain using ACLs and a distribute list Redistribute OSPF routes into the EIGRP routing domain using prefix lists and a distribute list Redistributing EIGRP Routes into OSPF R1(config)# ip prefix-list EIGRP-TO-OSPF seq 5 permit /16 le 24 R1(config)# router ospf 10 R1(config-router)# redistribute eigrp 100 metric 40 subnets R1(config-router)# distribute-list prefix EIGRP-TO-OSPF out eigrp 100 R1 will only redistribute all matching prefixes in the range of /16 to /24 into the OSPF routing domain

R1 will: Redistribute OSPF routes into the EIGRP routing domain using ACLs and a distribute list Redistribute OSPF routes into the EIGRP routing domain using prefix lists and a distribute list Redistributing EIGRP Routes into OSPF R4# show ip route ospf <Output omitted> Gateway of last resort is not set /16 is variably subnetted, 13 subnets, 3 masks O IA /24 [110/74] via , 1w1d, Serial0/0 O E /24 [110/20] via , 00:17:38, Serial0/0 O E /24 [110/20] via , 00:17:38, Serial0/0 R1 will only redistribute all matching prefixes in the range of /16 to /24 into the OSPF routing domain

Route Redistribution Using Route Maps and Prefix Lists

Route Redistribution Using Route Maps and Prefix Lists
R3(config)# ip prefix-list FILTER-ROUTES permit /24 R3(config)# ip prefix-list FILTER-ROUTES permit /24 R3(config)# route-map RM-INTO-OSPF permit 10 R3(config-route-map)# match ip address prefix-list FILTER-ROUTES R3(config-route-map)# set metric 25 R3(config-route-map)# set metric-type type-1 R3(config-route-map)# exit R3(config)# router ospf 10 R3(config-router)# redistribute eigrp 100 subnets route-map RM-INTO-OSPF R3 redistributes networks /24 and /24 from EIGRP into OSPF. Set the metric to 25 and metric type to external type 1 for matched routes.

Manipulating Redistribution

Manipulating Redistribution
R1 and R4 will be performing multipoint two-way redistribution. Three scenarios: R1 and R4 will be configured to support mutual redistribution without any filtering mechanism. R1 and R4 will be configured to support mutual redistribution using route maps. Change administrative distance for certain routes to enable optimal routing.

Mutual Redistribution without Route Filtering
R1(config)# router eigrp 100 R1(config-router)# redistribute ospf 10 metric R1(config-router)# exit R1(config)# router ospf 10 R1(config-router)# redistribute eigrp 100 subnets R4(config)# router eigrp 100 R4(config-router)# redistribute ospf 10 metric R4(config-router)# exit R4(config)# router ospf 10 R4(config-router)# redistribute eigrp 100 subnets

Mutual Redistribution without Route Filtering
R3# show ip route ospf /8 is variably subnetted, 16 subnets, 2 masks O /24 [110/65] via , 00:20:02, Serial1/0 O /24 [110/65] via , 00:20:02, Serial1/0 O /24 [110/65] via , 00:20:02, Serial1/0 O /24 [110/65] via , 00:20:02, Serial1/0 O E /24 [110/20] via , 00:58:31, Ethernet0/0 O E /24 [110/20] via , 00:58:31, Ethernet0/0 O E /24 [110/20] via , 00:58:31, Ethernet0/0 O E /24 [110/20] via , 00:58:31, Ethernet0/0 /16 is variably subnetted, 6 subnets, 3 masks O E /24 [110/20] via , 00:58:31, Ethernet0/0 O E /24 [110/20] via , 00:58:31, Ethernet0/0

Mutual Redistribution with Route Maps
Redistribute only loopback addressees (same configuration on R4) R1(config)# router eigrp 100 R1(config-router)# redistribute ospf 10 route-map INTO-EIGRP R1(config-router)# exit R1(config)# router ospf 10 R1(config-router)# redistribute eigrp 100 subnets route-map INTO-OSPF R1(config)# access-list 10 permit R1(config)# access-list 20 permit R1(config)# route-map INTO-OSPF permit 10 R1(config-route-map)# match ip address 10 R1(config-route-map)# exit R1(config)# route-map INTO-EIGRP permit 10 R1(config-route-map)# match ip address 20 R1(config-route-map)# set metric

Changing Administrative Distance to Enable Optimal Routing

Mutual Redistribution with Changing Admin Dist.
A route redistributed into a routing protocol by default inherits the default administrative distance of that routing protocol. Occasionally, such as when using route redistribution, you might need to modify a protocol’s default administrative distance to manipulate the routing process.

110 170 R1# show ip route <partial output> /24 is subnetted, 12 subnets O [110/11] via , 03:47:09, Ethernet0/0 O [110/11] via , 03:47:09, Ethernet0/0 O [110/11] via , 03:47:09, Ethernet0/0 O [110/11] via , 03:47:09, Ethernet0/0 O [110/75] via , 00:32:22, Ethernet0/0 R1 prefers the path learned via OSPF to reach this network, even though it crosses a slow serial link. The alternative EIGRP path has faster links, but it also has a higher administrative distance. R1 prefers the OSPF administrative administrative distance of 110 (OSPF) than the external EIGRP route with an administrative value of 170

110 R1(config)# router eigrp 100 R1(config-router)# distance eigrp R1# show ip route <Output omitted> /24 is subnetted, 12 subnets D EX [100/284416] via , 00:00:26, Ethernet0/1 D EX [100/284416] via , 00:00:26, Ethernet0/1 D EX [100/284416] via , 00:00:26, Ethernet0/1 D EX [100/284416] via , 00:00:26, Ethernet0/1 D EX [100/284416] via , 00:00:26, Ethernet0/1 Changes local default values for internal and external routes that are redistributed into EIGRP domain. R1 prefers the path through the EIGRP domain to reach the /24 network.

Manipulating Redistribution Using Route Tagging

Manipulating Redistribution Using Route Tagging
Apply Tag R4(config)# router ospf 10 R4(config-router)# redistribute eigrp 100 subnets route-map EIGRP-TO-OSPF R4(config)# route-map EIGRP-TO-OSPF permit 10 R4(config-route-map)# set tag 50 R4(config-route-map)# exit Deny Tag R1(config)# router eigrp 100 R1(config-router)# redistribute ospf 10 metric route-map OSPF-TO-EIGRP R1(config)# route-map OSPF-TO-EIGRP deny 10 R1(config-route-map)# match tag 50 R1(config-route-map)# exit R1(config)# route-map OSPF-TO-EIGRP permit 20

We will end here but here are some additional examples for your enjoyment (FYI) Including many hidden slides

CIS 185 CCNP ROUTE Ch. 4 Manipulating Routing Updates Part 2
Rick Graziani Cabrillo College

CIS 185 CCNP ROUTE Ch. 4 Manipulating Routing Updates Part 2 – Controlling Routing Updates Rick Graziani Cabrillo College graziani@cabrillo.edu Last Updated:

Similar presentations

Presentation on theme: "CIS 185 CCNP ROUTE Ch. 4 Manipulating Routing Updates Part 2 – Controlling Routing Updates Rick Graziani Cabrillo College graziani@cabrillo.edu Last Updated:"— Presentation transcript:

Similar presentations

About project

Feedback

Log in

Auth with social network:

CIS 185 CCNP ROUTE Ch. 4 Manipulating Routing Updates Part 2 – Controlling Routing Updates Rick Graziani Cabrillo College graziani@cabrillo.edu Last Updated:

Similar presentations

Presentation on theme: "CIS 185 CCNP ROUTE Ch. 4 Manipulating Routing Updates Part 2 – Controlling Routing Updates Rick Graziani Cabrillo College graziani@cabrillo.edu Last Updated:"— Presentation transcript:

Similar presentations

About project

Feedback