CCNP Routing and Switching Portable Command Guide

Message Types 42 OSPF LSA Types 43 Configuring OSPF 44 Using Wildcard Masks with OSPF Areas 44 Configuring Multiarea OSPF 45 Loopback Interfaces 45 Router ID 46 DR/BDR Elections 46 Passive Interfaces 46 Modifying Cost Metrics 47 OSPF auto-cost reference-bandwidth 47 OSPF LSDB Overload Protection 48 Timers 48 IP MTU 49 Propagating a Default Route 49 OSPF Special Area Types 49 Stub Areas 50 Totally Stubby Areas 50 Not-So-Stubby Areas 51 Totally NSSA 51 Route Summarization 52 Interarea Route Summarization 52 External Route Summarization 52 Configuration Example: Virtual Links 52 OSPF and NBMA Networks 53 OSPF over NBMA Topology Summary 57 IPv6 and OSPFv3 57 Enabling OSPF for IPv6 on an Interface 58 OSPFv3 and Stub/NSSA Areas 58 Interarea OSPFv3 Route Summarization 59 Enabling an IPv4 Router ID for OSPFv3 59 Forcing an SPF Calculation 59 IPv6 on NBMA Networks 60 OSPFv3 Address Families 60 Verifying OSPF Configuration 61 Troubleshooting OSPF 63 Configuration Example: Single-Area OSPF 64 Configuration Example: Multiarea OSPF 65 Configuration Example: OSPF and NBMA Networks 69 Configuration Example: OSPF and Broadcast Networks 72 Configuration Example: OSPF and Point-to-Multipoint Networks 76 Configuration Example: OSPF and Point-to-Point Networks Using Subinterfaces 80 Configuration Example: IPv6 and OSPFv3 83 Configuration Example: OSPFv3 with Address Families 86 Chapter 4 Configuration of Redistribution 91 Defining Seed and Default Metrics 91 Redistributing Connected Networks 93 Redistributing Static Routes 93 Redistributing Subnets into OSPF 93 Assigning E1 or E2 Routes in OSPF 94 Redistributing OSPF Internal and External Routes 95 Configuration Example: Route Redistribution for IPv4 95 Configuration Example: Route Redistribution for IPv6 97 Verifying Route Redistribution 98 Route Filtering Using the distribute-list Command 98 Configuration Example: Inbound and Outbound Distribute List Route Filters 99 Configuration Example: Controlling Redistribution with Outbound Distribute Lists 100 Verifying Route Filters 100 Route Filtering Using Prefix Lists 101 Configuration Example: Using a Distribute List That References a Prefix List to Control Redistribution 103 Verifying Prefix Lists 104 Using Route Maps with Route Redistribution 104 Configuration Example: Route Maps 105 Manipulating Redistribution Using Route Tagging 106 Changing Administrative Distance for Internal and External Routes 108 Passive Interfaces 108 Chapter 5 Path Control Implementation 111 Verifying Cisco Express Forwarding 111 Configuring Cisco Express Forwarding 111 Path Control with Policy-Based Routing 112 Verifying Policy-Based Routing 113 Configuration Example: PBR with Route Maps 114 Cisco IOS IP Service Level Agreements 115 Step 1: Define One (or More) Probe(s) 116 Step 2: Define One (or More) Tracking Object(s) 117 Step 3a: Define the Action on the Tracking Object(s) 117 Step 3b: Define Policy Routing Using the Tracking Object(s) 117 Step 4: Verify IP SLA Operations 118 Chapter 6 Enterprise Internet Connectivity 119 Configuring a Provider Assigned Static or DHCP IPv4 Address 120 Configuring Static NAT 121 Configuring Dynamic NAT 121 Configuring NAT Overload (PAT) 122 Verifying NAT 124 NAT Virtual Interface 124 Configuration Example: NAT Virtual Interfaces and Static NAT 124 Configure Basic IPv6 Internet Connectivity 125 Configuring IPv6 ACLs 126 Verifying IPv6 ACLs 127 Configuring Redistribution of Default Routes with Different Metrics in a Dual-Homed Internet Connectivity Scenario 127 Configuring BGP 128 BGP and Loopback Addresses 129 iBGP Next-Hop Behavior 129 eBGP Multihop 130 Verifying BGP Connections 132 Troubleshooting BGP Connections 132 Default Routes 133 Attributes 134 Route Selection Decision Process 134 Weight Attribute 134 Using AS_PATH Access Lists to Manipulate the Weight Attribute 136 Using Prefix Lists and Route Maps to Manipulate the Weight Attribute 136 Local Preference Attribute 137 Using AS_PATH Access Lists with Route Maps to Manipulate the Local Preference Attribute 138 AS_PATH Attribute Prepending 139 AS_PATH: Removing Private Autonomous Systems 141 MED Attribute 142 Route Aggregation 144 Route Reflectors 145 Regular Expressions 146 Regular Expressions: Examples 146 BGP Route Filtering Using Access Lists and Distribute Lists 147 Configuration Example: Using Prefix Lists and AS_PATH Access Lists 149 BGP Peer Groups 150 MP-BGP 151 Configure MP-BGP Using Address Families to Exchange IPv4 and IPv6 Routes 151 Verifying MP-BGP 153 Chapter 7 Routers and Routing Protocol Hardening 155 Securing Cisco Routers According to Recommended Practices 156 Securing Cisco IOS Routers Checklist 156 Components of a Router Security Policy 157 Configuring Passwords 157 Password Encryption 158 Configuring SSH 159 Restricting Virtual Terminal Access 160 Securing Access to the Infrastructure Using Router ACLs 161 Configuring Secure SNMP 162 Configuration Backups 165 Implementing Logging 166 Disabling Unneeded Services 169 Configuring Network Time Protocol 169 NTP Configuration 170 NTP Design 171 Securing NTP 172 Verifying NTP 173 SNTP 174 Setting the Clock on a Router 174 Using Time Stamps 178 Configuration Example: NTP 178 Authentication of Routing Protocols 182 Authentication Options for Different Routing Protocols 182 Authentication for EIGRP 183 Authentication for OSPF 185 Authentication for BGP and BGP for IPv6 189 Part II: SWITCH Chapter 8 Basic Concepts and Network Design 191 Hierarchical Model (Cisco Enterprise Campus Architecture) 191 Verifying Switch Content-Addressable Memory 192 Switching Database Manager Templates 192 Configuring SDM Templates 192 Verifying SDM Templates 193 LLDP (802.1AB) 194 Configuring LLDP 194 Verifying LLDP 195 Power over Ethernet 196 Configuring PoE 196 Verifying PoE 196 Chapter 9 Campus Network Architecture 197 Virtual LANs 198 Creating Static VLANs 198 Normal-Range static VLAN Configuration 198 Extended-Range static VLAN Configuration 199 Assigning Ports to Data and Voice VLANs 199 Using the range Command 200 Dynamic Trunking Protocol 200 Setting the Trunk Encapsulation and Allowed VLANs 201 Verifying VLAN Information 202 Saving VLAN Configurations 202 Erasing VLAN Configurations 203 Verifying VLAN Trunking 203 VLAN Trunking Protocol 204 Using Global Configuration Mode 204 Verifying VTP 206 Configuration Example: VLANs 206 Layer 2 Link Aggregation 209 Link Aggregation Interface Modes 210 Guidelines for Configuring Link Aggregation 210 Configuring L2 EtherChannel 211 Configuring L3 EtherChannel 211 Verifying EtherChannel 212 Configuring EtherChannel Load Balancing 212 Configuration Example: PAgP EtherChannel 213 DHCP for IPv4 216 Configuring Basic DHCP Server for IPv4 216 Configuring DHCP Manual IP Assignment for IPv4 217 Implementing DHCP Relay IPv4 217 Verifying DHCP for IPv4 218 Implementing DHCP for IPv6 218 Configuring DHCPv6 Server 219 Configuring DHCPv6 Client 219 Configuring DHCPv6 Relay Agent 220 Verifying DHCPv6 220 Chapter 10 Implementing Spanning Tree 221 Spanning-Tree Standards 222 Enabling Spanning Tree Protocol 222 Configuring the Root Switch 223 Configuring a Secondary Root Switch 224 Configuring Port Priority 224 Configuring the Path Cost 224 Configuring the Switch Priority of a VLAN 225 Configuring STP Timers 225 Verifying STP 226 Cisco STP Toolkit 226 Port Error Conditions 231 FlexLinks 231 Changing the Spanning-Tree Mode 231 Extended System ID 232 Enabling Rapid Spanning Tree 232 Enabling Multiple Spanning Tree 233 Verifying MST 235 Troubleshooting Spanning Tree 235 Configuration Example: PVST+ 235 Spanning-Tree Migration Example: PVST+ to Rapid-PVST+ 239 Chapter 11 Implementing Inter-VLAN Routing 241 Inter-VLAN Communication Using an External Router: Router-on-a-Stick 241 Inter-VLAN Routing Tips 242 Removing L2 Switch Port Capability of a Switch Port 242 Configuring SVI Autostate 243 Inter-VLAN Communication on a Multilayer Switch Through a Switch Virtual Interface 243 Configuration Example: Inter-VLAN Communication 244 Configuration Example: IPv6 Inter-VLAN Communication 251 Chapter 12 Implementing High-Availability Networks 259 Configuring IP Service Level Agreements (Catalyst 3750) 260 Configuring Authentication for IP SLA 262 Monitoring IP SLA Operations 262 Implementing Port Mirroring 262 Default SPAN and RSPAN Configuration 262 Configuring Local SPAN 263 Local SPAN Guidelines for Configuration 263 Configuring Local SPAN Example 264 Configuring Remote SPAN 267 Remote SPAN Guidelines for Configuration 267 Configuring Remote SPAN Example 268 Verifying and Troubleshooting Local and Remote SPAN 269 Switch Virtualization 269 StackWise 270 Virtual Switching System 271 Chapter 13 First-Hop Redundancy Implementation 277 First-Hop Redundancy 278 Hot Standby Router Protocol 278 Configuring Basic HSRP 278 Default HSRP Configuration Settings 279 Verifying HSRP 279 HSRP Optimization Options 279 Multiple HSRP Groups 281 HSRP IP SLA Tracking 283 HSRPv2 for IPv6 284 Debugging HSRP 285 Virtual Router Redundancy Protocol 285 Configuring VRRP 285 Interface Tracking 287 Verifying VRRP 287 Debugging VRRP 287 Gateway Load Balancing Protocol 287 Configuring GLBP 288 Interface Tracking 290 Verifying GLBP 290 Debugging GLBP 291 IPv4 Configuration Example: HSRP on L3 Switch 291 IPv4 Configuration Example: GLBP 296 IPv4 Configuration Example: VRRP on Router and L3 Switch 300 IPv6 Configuration Example: HSRP on Router and L3 Switch 304 Chapter 14 Campus Network Security 311 Switch Security Recommended Practices 312 Configuring Switch Port Security 313 Sticky MAC Addresses 313 Verifying Switch Port Security 314 Recovering Automatically from Error-Disabled Ports 315 Verifying Autorecovery of Error-Disabled Ports 315 Configuring Port Access Lists 315 Creating and Applying Named Port Access List 316 Configuring Storm Control 316 Implementing Authentication Methods 317 Local Database Authentication 317 RADIUS Authentication 318 TACACS+ Authentication 319 Configuring Authorization and Accounting 321 Configuring 802.1x Port-Based Authentication 322 Configuring DHCP Snooping 323 Verifying DHCP Snooping 324 IP Source Guard 324 Dynamic ARP Inspection 325 Verifying DAI 326 Mitigating VLAN Hopping: Best Practices 326 VLAN Access Lists 327 Verifying VACLs 329 Configuration Example: VACLs 329 Private VLANs 331 Verifying PVLANs 332 Configuration Example: PVLANs 333 Appendixes Appendix A Private VLAN Catalyst Switch Support Matrix 337 Appendix B Create Your Own Journal Here 339 9781587144349 TOC 12/8/2014