Cisco ASR 9000 Series Aggregation Services Router IP Addresses and Services Configuration ...

392 Pages·2017·5.17 MB·English

Cisco ASR 9000 Series Aggregation Services Router IP Addresses
and Services Configuration Guide, Release 5.2.x
First Published: 2014-07-01
Last Modified: 2014-10-01
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: [phone]
800 553-NETS (6387)
Fax: [phone]
Text Part Number: OL-32734-01
THESPECIFICATIONSANDINFORMATIONREGARDINGTHEPRODUCTSINTHISMANUALARESUBJECTTOCHANGEWITHOUTNOTICE.ALLSTATEMENTS,
INFORMATION,ANDRECOMMENDATIONSINTHISMANUALAREBELIEVEDTOBEACCURATEBUTAREPRESENTEDWITHOUTWARRANTYOFANYKIND,
EXPRESSORIMPLIED.USERSMUSTTAKEFULLRESPONSIBILITYFORTHEIRAPPLICATIONOFANYPRODUCTS.
THESOFTWARELICENSEANDLIMITEDWARRANTYFORTHEACCOMPANYINGPRODUCTARESETFORTHINTHEINFORMATIONPACKETTHATSHIPPEDWITH
THEPRODUCTANDAREINCORPORATEDHEREINBYTHISREFERENCE.IFYOUAREUNABLETOLOCATETHESOFTWARELICENSEORLIMITEDWARRANTY,
CONTACTYOURCISCOREPRESENTATIVEFORACOPY.
TheCiscoimplementationofTCPheadercompressionisanadaptationofaprogramdevelopedbytheUniversityofCalifornia,Berkeley(UCB)aspartofUCB'spublicdomainversion
oftheUNIXoperatingsystem.Allrightsreserved.Copyright©1981,RegentsoftheUniversityofCalifornia.
NOTWITHSTANDINGANYOTHERWARRANTYHEREIN,ALLDOCUMENTFILESANDSOFTWAREOFTHESESUPPLIERSAREPROVIDED“ASIS"WITHALLFAULTS.
CISCOANDTHEABOVE-NAMEDSUPPLIERSDISCLAIMALLWARRANTIES,EXPRESSEDORIMPLIED,INCLUDING,WITHOUTLIMITATION,THOSEOF
MERCHANTABILITY,FITNESSFORAPARTICULARPURPOSEANDNONINFRINGEMENTORARISINGFROMACOURSEOFDEALING,USAGE,ORTRADEPRACTICE.
INNOEVENTSHALLCISCOORITSSUPPLIERSBELIABLEFORANYINDIRECT,SPECIAL,CONSEQUENTIAL,ORINCIDENTALDAMAGES,INCLUDING,WITHOUT
LIMITATION,LOSTPROFITSORLOSSORDAMAGETODATAARISINGOUTOFTHEUSEORINABILITYTOUSETHISMANUAL,EVENIFCISCOORITSSUPPLIERS
HAVEBEENADVISEDOFTHEPOSSIBILITYOFSUCHDAMAGES.
AnyInternetProtocol(IP)addressesandphonenumbersusedinthisdocumentarenotintendedtobeactualaddressesandphonenumbers.Anyexamples,commanddisplayoutput,network
topologydiagrams,andotherfiguresincludedinthedocumentareshownforillustrativepurposesonly.AnyuseofactualIPaddressesorphonenumbersinillustrativecontentisunintentional
andcoincidental.
CiscoandtheCiscologoaretrademarksorregisteredtrademarksofCiscoand/oritsaffiliatesintheU.S.andothercountries.ToviewalistofCiscotrademarks,gotothisURL:http://
www.cisco.com/go/trademarks.Third-partytrademarksmentionedarethepropertyoftheirrespectiveowners.Theuseofthewordpartnerdoesnotimplyapartnership
relationshipbetweenCiscoandanyothercompany.(1110R)
©2014CiscoSystems,Inc.Allrightsreserved.
CONTENTS
Preface Preface xvii
ChangestoThisDocument xvii
ObtainingDocumentationandSubmittingaServiceRequest xvii
CHAPTER 1 NewandChangedFeatureInformationinCiscoIOSXRRelease5.2.x 1
NewandChangedIPAddressesandServicesFeatures 1
CHAPTER 2 ImplementingAccessListsandPrefixLists 5
PrerequisitesforImplementingAccessListsandPrefixLists 6
RestrictionsforImplementingAccessListsandPrefixLists 6
RestrictionsforImplementingACL-BasedForwarding 7
HardwareLimitations 8
InformationAboutImplementingAccessListsandPrefixLists 8
AccessListsandPrefixListsFeatureHighlights 8
PurposeofIPAccessLists 8
HowanIPAccessListWorks 9
IPAccessListProcessandRules 9
HelpfulHintsforCreatingIPAccessLists 10
SourceandDestinationAddresses 10
WildcardMaskandImplicitWildcardMask 10
TransportLayerInformation 11
IPAccessListEntrySequenceNumbering 11
SequenceNumberingBehavior 11
IPAccessListLoggingMessages 11
ExtendedAccessListswithFragmentControl 12
PolicyRouting 14
CommentsAboutEntriesinAccessLists 14
Cisco ASR 9000 Series Aggregation Services Router IP Addresses and Services Configuration Guide, Release 5.2.x
OL-32734-01 iii
Contents
AccessControlListCounters 14
BGPFilteringUsingPrefixLists 15
HowtheSystemFiltersTrafficbyPrefixList 15
InformationAboutImplementingACL-basedForwarding 16
ACL-basedForwardingOverview 16
ABF-OT 16
IPv6ACLBasedForwardingObjectTracking 16
IPSLAsupportforObjecttracking 16
ACLCountersUsingSNMP 17
HowtoImplementAccessListsandPrefixLists 17
ConfiguringExtendedAccessLists 17
ApplyingAccessLists 20
ControllingAccesstoanInterface 20
ControllingAccesstoaLine 21
ConfiguringPrefixLists 22
ConfiguringStandardAccessLists 24
CopyingAccessLists 26
SequencingAccess-ListEntriesandRevisingtheAccessList 27
CopyingPrefixLists 29
SequencingPrefixListEntriesandRevisingthePrefixList 30
HowtoImplementACL-basedForwarding 31
ConfiguringACL-basedForwardingwithSecurityACL 31
ImplementingIPSLA-OT 33
Enablingtrackmode 33
Configuringtracktype 34
Configuringtrackingtype(lineprotocol) 34
Configuringtracktype(list) 35
Configuringtrackingtype(route) 35
Configuringtrackingtype(rtr) 36
ConfiguringPureACL-BasedForwardingforIPv6ACL 37
ACL-Chaining 38
ACL-ChainingOverview 38
RestrictionsforCommonACL 39
ConfiguringanInterfacetoacceptCommonACL 39
ACLScaleEnhancements 40
Cisco ASR 9000 Series Aggregation Services Router IP Addresses and Services Configuration Guide, Release
5.2.x
iv OL-32734-01
Contents
ACLScaleEnhancements:BackwardCompatibility 40
ConfiguringaNetworkObject-Group 41
ConfiguringaPortObject-Group 42
ConfiguringACLwithObject-Groups 43
AtomicACLUpdatesByUsingtheDisableOption 45
ModifyingACLswhenAtomicACLUpdatesareDisabled 46
ConfiguringACLCountersforSNMPQuery 48
ConfigurationExamplesforImplementingAccessListsandPrefixLists 49
ResequencingEntriesinanAccessList:Example 49
AddingEntrieswithSequenceNumbers:Example 50
AddingEntriesWithoutSequenceNumbers:Example 50
AtomicACLUpdatesByUsingtheDisableOption 51
ModifyingACLswhenAtomicACLUpdatesareDisabled 51
IPv6ACLinClassMap 53
ConfiguringIPv6ACLQoS-AnExample 54
IPv4/IPv6ACLoverBVIinterface 56
ConfiguringIPv4ACLoverBVIinterface-AnExample 57
ConfiguringABFv4/v6overIRB/BVIinterface 57
ConfiguringABFv4overIRB/BVIinterface:Example 60
ConfiguringABFv6overIRB/BVIinterface:Example 60
ConfiguringanInterfacetoacceptCommonACL-Examples 61
ConfiguringACLCountersforSNMPQuery:Example 62
AdditionalReferences 63
CHAPTER 3 ImplementingARP 65
PrerequisitesforConfiguringARP 65
RestrictionsforConfiguringARP 66
InformationAboutConfiguringARP 66
IPAddressingOverview 66
AddressResolutiononaSingleLAN 67
AddressResolutionWhenInterconnectedbyaRouter 67
ARPandProxyARP 67
ARPCacheEntries 68
DirectAttachedGatewayRedundancy 68
AdditionalGuidelines 69
Cisco ASR 9000 Series Aggregation Services Router IP Addresses and Services Configuration Guide, Release 5.2.x
OL-32734-01 v
Contents
HowtoConfigureARP 69
DefiningaStaticARPCacheEntry 69
EnablingProxyARP 70
EnablingLocalProxyARP 71
ConfiguringDAGR 72
ConfiguringARPpurge-delay 74
ConfiguringARPtimeout 75
ConfigureLearningofLocalARPEntries 76
ConfigurationExamplesforARPConfigurationonCiscoIOSXRSoftware 77
CreatingaStaticARPCacheEntry:Example 77
EnablingProxyARP:Example 78
78
EnablingDAGRandConfiguringaDAGRGroup:Example 78
DisplayingtheOperationalStateofDAGRGroups:Example 78
AdditionalReferences 78
CHAPTER 4 ImplementingCiscoExpressForwarding 81
PrerequisitesforImplementingCiscoExpressForwarding 81
InformationAboutImplementingCiscoExpressForwardingSoftware 82
KeyFeaturesSupportedintheCiscoExpressForwardingImplementation 82
BenefitsofCEF 82
CEFComponents 83
BorderGatewayProtocolPolicyAccounting 83
ReversePathForwarding(StrictandLoose) 84
Per-FlowLoadBalancing 85
BGPAttributesDownload 86
HowtoImplementCEF 86
VerifyingCEF 86
ConfiguringBGPPolicyAccounting 87
VerifyingBGPPolicyAccounting 92
ConfiguringaRoutePurgeDelay 94
ConfiguringUnicastRPFChecking 94
ConfiguringModularServicesCard-to-RouteProcessorManagementEthernetInterface
Switching 95
ConfiguringPer-FlowLoadBalancing 96
Cisco ASR 9000 Series Aggregation Services Router IP Addresses and Services Configuration Guide, Release
5.2.x
vi OL-32734-01
Contents
Configuring3-TupleHashAlgorithm 96
ConfiguringBGPAttributesDownload 97
ConfiguringBGPAttributesDownload 97
IPv6RoutingoverIPv4MPLSTETunnels 98
RestrictionsforImplementingIPv6routingoverIPv4MPLSTEtunnels 98
ConfiguringtunnelasIPV6Forwarding-Adjacency 98
ConfiguringtunnelasIPV6interface 99
ConfigurationExamplesforImplementingCEFonRoutersSoftware 99
ConfiguringBGPPolicyAccounting:Example 100
VerifyingBGPPolicyStatistics:Example 103
ConfiguringUnicastRPFChecking:Example 114
ConfiguringtheSwitchingofModularServicesCardtoManagementEthernetInterfaceson
theRouteProcessor:Example 114
ConfiguringPer-FlowLoadBalancing:Example 114
ConfiguringBGPAttributesDownload:Example 115
AdditionalReferences 115
CHAPTER 5 ImplementingtheDynamicHostConfigurationProtocol 117
PrerequisitesforConfiguringDHCPRelayAgent 118
InformationAboutDHCPRelayAgent 118
LimitationsforDHCPv6RelayFeature 119
SecureARP 119
HowtoConfigureandEnableDHCPRelayAgent 119
ConfiguringandEnablingtheDHCPRelayAgent 120
ConfiguringaDHCPRelayProfile 120
ConfiguringDHCPv6RelayProfile 121
EnablingDHCPRelayAgentonanInterface 122
EnablingDHCPv6RelayAgentonanInterface 123
DisablingDHCPRelayonanInterface 124
EnablingDHCPRelayonaVRF 125
ConfiguringtheRelayAgentInformationFeature 126
ConfiguringRelayAgentGiaddrPolicy 128
ConfiguringaDHCPProxyProfile 129
ConfiguringDHCPv6RelayBindingDatabaseWritetoSystemPersistentMemory 130
DHCPv4Server 131
Cisco ASR 9000 Series Aggregation Services Router IP Addresses and Services Configuration Guide, Release 5.2.x
OL-32734-01 vii
Contents
ConfiguringDHCPv4ServerProfile 132
ConfiguringMultipleClasseswithaPool 135
ConfiguringaserverprofileDAPSwithclassmatchoption 137
ConfiguringServerProfilewithoutdapspoolmatchoption 140
ConfiguringanaddresspoolforeachISPonDAPS 142
DHCPv4Client 144
EnablingDHCPClientonanInterface 144
DHCPv6RelayAgentNotificationforPrefixDelegation 145
ConfiguringDHCPv6StatefulRelayAgentforPrefixDelegation 146
EnablingSecureARP 147
ConfigurationExamplesfortheDHCPRelayAgent 148
DHCPRelayProfile:Example 148
DHCPRelayonanInterface:Example 149
DHCPRelayonaVRF:Example 149
RelayAgentInformationOptionSupport:Example 149
RelayAgentGiaddrPolicy:Example 149
ImplementingDHCPSnooping 149
PrerequisitesforConfiguringDHCPSnooping 149
InformationaboutDHCPSnooping 150
TrustedandUntrustedPorts 150
DHCPSnoopinginaBridgeDomain 151
AssigningProfilestoaBridgeDomain 151
RelayInformationOptions 151
HowtoConfigureDHCPSnooping 151
EnablingDHCPSnoopinginaBridgeDomain 151
DisablingDHCPSnoopingonaSpecificBridgePort 154
UsingtheRelayInformationOption 156
ConfigurationExamplesforDHCPSnooping 157
AssigningaDHCPProfiletoaBridgeDomain:Example 158
DisablingDHCPSnoopingonaSpecificBridgePort:Example 158
ConfiguringaDHCPProfileforTrustedBridgePorts:Example 158
ConfiguringanUntrustedProfileonaBridgeDomain:Example 158
ConfiguringaTrustedBridgePort:Example 158
DHCPv6ProxyBindingTableReloadPersistency 159
ConfiguringDHCPv6ProxyBindingDatabaseWritetoSystemPersistentMemory 159
Cisco ASR 9000 Series Aggregation Services Router IP Addresses and Services Configuration Guide, Release
5.2.x
viii OL-32734-01
Contents
AdditionalReferences 160
CHAPTER 6 ImplementingHostServicesandApplications 163
PrerequisitesforImplementingHostServicesandApplications 163
InformationAboutImplementingHostServicesandApplications 164
NetworkConnectivityTools 164
Ping 164
Traceroute 164
DomainServices 165
TFTPServer 165
FileTransferServices 165
RCP 166
FTP 166
TFTP 166
SCP 166
Ciscoinetd 167
Telnet 167
HowtoImplementHostServicesandApplications 167
CheckingNetworkConnectivity 167
CheckingNetworkConnectivityforMultipleDestinations 167
CheckingPacketRoutes 168
ConfiguringDomainServices 169
ConfiguringaRouterasaTFTPServer 170
ConfiguringaRoutertoUsercpConnections 171
ConfiguringaRoutertoUseFTPConnections 173
ConfiguringaRoutertoUseTFTPConnections 175
ConfiguringTelnetServices 176
TransferringFilesUsingSCP 176
Configuringsyslogsource-interface 177
IPv6SupportforIPSLAICMPEchoOperation 178
ConfiguringanIPSLAICMPechooperation 178
ConfigurationExamplesforImplementingHostServicesandApplications 179
CheckingNetworkConnectivity:Example 180
ConfiguringDomainServices:Example 181
ConfiguringaRoutertoUsercp,FTP,orTFTPConnections:Example 181
Cisco ASR 9000 Series Aggregation Services Router IP Addresses and Services Configuration Guide, Release 5.2.x
OL-32734-01 ix
Contents
AdditionalReferences 182
CHAPTER 7 ImplementingHSRP 185
PrerequisitesforImplementingHSRP 186
RestrictionsforImplementingHSRP 186
InformationAboutImplementingHSRP 186
HSRPOverview 186
HSRPGroups 187
HSRPandARP 190
Preemption 190
ICMPRedirectMessages 190
HowtoImplementHSRP 190
EnablingHSRP 190
EnablingHSRPforIPv6 192
ConfiguringHSRPGroupAttributes 193
ConfiguringtheHSRPActivationDelay 197
EnablingHSRPSupportforICMPRedirectMessages 199
MultipleGroupOptimization(MGO)forHSRP 200
CustomizingHSRP 200
ConfiguringaPrimaryVirtualIPv4Address 203
ConfiguringaSecondaryVirtualIPv4Address 204
Configuringaslavefollow 205
ConfiguringaslaveprimaryvirtualIPv4address 207
ConfiguringaSecondaryVirtualIPv4addressfortheSlaveGroup 208
Configuringaslavevirtualmacaddress 209
ConfiguringanHSRPSessionName 210
BFDforHSRP 211
AdvantagesofBFD 212
BFDProcess 212
ConfiguringBFD 212
EnablingBFD 212
ModifyingBFDtimers(minimuminterval) 213
ModifyingBFDtimers(multiplier) 214
EnhancedObjectTrackingforHSRPandIPStatic 215
ConfiguringobjecttrackingforHSRP 216
Cisco ASR 9000 Series Aggregation Services Router IP Addresses and Services Configuration Guide, Release
5.2.x
x OL-32734-01