HP 3600 v2 Series User manual
HP 3600 v2 Switch Series
Layer 3 - IP Routing
Configuration Guide
Part number: 5998-2352
Software version: Release 2101
Document version: 6W101-20130930
Legal and notice information
© Copyright 2013 Hewlett-Packard Development Company, L.P.
No part of this documentation may be reproduced or transmitted in any form or by any means without
prior written consent of Hewlett-Packard Development Company, L.P.
The information contained herein is subject to change without notice.
HEWLETT-PACKARD COMPANY MAKES NO WARRANTY OF ANY KIND WITH REGARD TO THIS
MATERIAL, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
AND FITNESS FOR A PARTICULAR PURPOSE. Hewlett-Packard shall not be liable for errors contained
herein or for incidental or consequential damages in connection with the furnishing, performance, or
use of this material.
The only warranties for HP products and services are set forth in the express warranty statements
accompanying such products and services. Nothing herein should be construed as constituting an
additional warranty. HP shall not be liable for technical or editorial errors or omissions contained
herein.
i
Contents
IP routing basics ··························································································································································· 1
IP routing overview ···························································································································································1
Routing table·····························································································································································1
Dynamic routing protocols ······································································································································2
Routing preference ···················································································································································3
Load sharing ·····························································································································································3
Route backup ····························································································································································4
Route recursion ·························································································································································4
Route redistribution···················································································································································4
Displaying and maintaining a routing table ··················································································································4
Static routing configuration ········································································································································· 6
Introduction ········································································································································································6
Static route ································································································································································6
Default route······························································································································································6
Static route configuration items·······························································································································6
Configuring a static route·················································································································································7
Configuration prerequisites ·····································································································································7
Configuration procedure ·········································································································································7
Configuring BFD for static routes·····································································································································8
BFD control packet mode ········································································································································8
BFD echo packet mode············································································································································9
Configuring static route FRR·············································································································································9
Displaying and maintaining static routes ···················································································································· 10
Static route configuration examples····························································································································· 11
Basic static route configuration example ············································································································ 11
Static route FRR configuration example ·············································································································· 13
BFD for static routes configuration example (direct session) ············································································ 15
BFD for static routes configuration example (indirect session) ········································································· 17
RIP configuration ························································································································································20
RIP overview ··································································································································································· 20
RIP working mechanism ········································································································································ 20
Operation of RIP···················································································································································· 21
RIP version······························································································································································ 21
RIP message format ··············································································································································· 22
Supported RIP features·········································································································································· 23
Protocols and standards ······································································································································· 24
RIP configuration task list··············································································································································· 24
Configuring RIP basic functions ···································································································································· 25
Configuration prerequisites ·································································································································· 25
Configuration procedure ······································································································································ 25
Configuring RIP route control········································································································································ 27
Configuring an additional routing metric ··········································································································· 27
Configuring RIPv2 route summarization·············································································································· 27
Disabling host route reception ····························································································································· 28
Advertising a default route ··································································································································· 29
Configuring inbound or outbound route filtering······························································································· 29
Configuring a priority for RIP ······························································································································· 30
Configuring RIP route redistribution····················································································································· 30
ii
Tuning and optimizing RIP networks ···························································································································· 31
Configuring RIP timers··········································································································································· 31
Configuring split horizon and poison reverse···································································································· 31
Configuring the maximum number of load balanced routes············································································ 32
Enabling zero field check on incoming RIPv1 messages ·················································································· 32
Enabling source IP address check on incoming RIP updates············································································ 33
Configuring RIPv2 message authentication ········································································································ 33
Specifying a RIP neighbor ···································································································································· 34
Configuring RIP-to-MIB binding···························································································································· 34
Configuring the RIP packet sending rate ············································································································ 34
Configuring RIP FRR ······················································································································································· 35
Configuring BFD for RIP················································································································································· 36
Single-hop detection in BFD echo packet mode ································································································ 36
Bidirectional detection in BFD control packet mode·························································································· 36
Displaying and maintaining RIP ··································································································································· 37
RIP configuration examples··········································································································································· 37
Configuring RIP version ········································································································································ 37
Configuring RIP route redistribution····················································································································· 39
Configuring an additional metric for a RIP interface························································································· 41
Configuring RIP to advertise a summary route··································································································· 43
RIP FRR configuration example ···························································································································· 45
Configuring BFD for RIP (single-hop detection in BFD echo packet mode) ····················································· 47
Configuring BFD for RIP (bidirectional detection in BFD control packet mode)·············································· 50
Troubleshooting RIP························································································································································ 53
No RIP updates received ······································································································································ 53
Route oscillation occurred ···································································································································· 53
OSPF configuration····················································································································································55
Introduction to OSPF······················································································································································ 55
Basic concepts ······················································································································································· 55
Area based OSPF network partition ··················································································································· 57
Router types···························································································································································· 60
Classification of OSPF networks ·························································································································· 61
DR and BDR ··························································································································································· 62
OSPF packet formats············································································································································· 63
Supported features ················································································································································ 71
Protocols and standards ······································································································································· 72
OSPF configuration task list ·········································································································································· 72
Enabling OSPF ······························································································································································· 73
Configuration prerequisites ·································································································································· 73
Configuration procedure ······································································································································ 74
Configuring OSPF areas ··············································································································································· 75
Configuration prerequisites ·································································································································· 75
Configuring a stub area ······································································································································· 75
Configuring an NSSA area·································································································································· 76
Configuring a virtual link······································································································································ 76
Configuring OSPF network types ································································································································· 77
Configuration prerequisites ·································································································································· 77
Configuring the OSPF network type for an interface as broadcast ································································· 78
Configuring the OSPF network type for an interface as NBMA ······································································ 78
Configuring the OSPF network type for an interface as P2MP ········································································ 79
Configuring the OSPF network type for an interface as P2P············································································ 79
Configuring OSPF route control ··································································································································· 80
Configuration prerequisites ·································································································································· 80
Configuring OSPF route summarization ············································································································· 80
iii
Configuring OSPF inbound route filtering ·········································································································· 81
Configuring ABR Type-3 LSA filtering ················································································································· 82
Configuring an OSPF cost for an interface ········································································································ 82
Configuring the maximum number of OSPF routes ··························································································· 83
Configuring the maximum number of load-balanced routes ············································································ 83
Configuring OSPF preference······························································································································ 83
Configuring OSPF route redistribution ················································································································ 84
Advertising a host route········································································································································ 85
Tuning and optimizing OSPF networks························································································································ 85
Configuration prerequisites ·································································································································· 86
Configuring OSPF packet timers·························································································································· 86
Specifying LSA transmission delay ······················································································································ 87
Specifying SPF calculation interval······················································································································ 87
Specifying the LSA arrival interval······················································································································· 87
Specifying the LSA generation interval ··············································································································· 88
Disabling interfaces from receiving and sending OSPF packets······································································ 88
Configuring stub routers ······································································································································· 89
Configuring OSPF authentication ························································································································ 89
Adding the interface MTU into DD packets········································································································ 90
Configuring the maximum number of external LSAs in LSDB ··········································································· 90
Enabling compatibility with RFC 1583··············································································································· 90
Logging neighbor state changes·························································································································· 91
Configuring OSPF network management ··········································································································· 91
Enabling message logging··································································································································· 92
Enabling the advertisement and reception of opaque LSAs ············································································· 92
Configuring OSPF to give priority to receiving and processing hello packets ··············································· 92
Configuring the LSU transmit rate························································································································ 93
Enabling OSPF ISPF ·············································································································································· 93
Configuring OSPF FRR··················································································································································· 93
Configuring OSPF Graceful Restart······························································································································ 95
Configuring the OSPF GR Restarter····················································································································· 95
Configuring the OSPF GR Helper························································································································ 96
Triggering OSPF Graceful Restart························································································································ 97
Configuring BFD for OSPF ············································································································································ 97
Configuring control packet bidirectional detection ··························································································· 97
Configuring echo packet single-hop detection··································································································· 97
Displaying and maintaining OSPF······························································································································· 98
OSPF configuration examples ······································································································································ 99
Configuring OSPF basic functions······················································································································· 99
Configuring OSPF route redistribution ··············································································································103
Configuring OSPF to advertise a summary route·····························································································104
Configuring an OSPF stub area·························································································································107
Configuring an OSPF NSSA area·····················································································································109
Configuring OSPF DR election···························································································································111
Configuring OSPF virtual links ···························································································································115
Configuring OSPF Graceful Restart···················································································································117
Configuring route filtering ··································································································································120
Configuring OSPF FRR········································································································································122
Configuring BFD for OSPF ·································································································································124
Troubleshooting OSPF configuration ·························································································································128
No OSPF neighbor relationship established ····································································································128
Incorrect routing information······························································································································129
IS-IS configuration ··················································································································································· 130
IS-IS overview ·······························································································································································130
iv
Basic concepts ·····················································································································································130
IS-IS area ······························································································································································132
IS-IS network type ················································································································································134
IS-IS PDU format···················································································································································135
Supported IS-IS features······································································································································141
Protocols and standards ·····································································································································143
IS-IS configuration task list···········································································································································143
Configuring IS-IS basic functions································································································································144
Configuration prerequisites ································································································································144
Enabling IS-IS·······················································································································································145
Configuring the IS level and circuit level ··········································································································145
Configuring the network type of an interface as P2P······················································································146
Configuring IS-IS routing information control············································································································146
Configuration prerequisites ································································································································146
Configuring IS-IS link cost···································································································································146
Specifying a priority for IS-IS ·····························································································································148
Configuring the maximum number of equal cost routes··················································································148
Configuring IS-IS route summarization··············································································································148
Advertising a default route ·································································································································149
Configuring IS-IS route redistribution ················································································································149
Configuring IS-IS route filtering··························································································································150
Configuring IS-IS route leaking ··························································································································151
Tuning and optimizing IS-IS networks························································································································151
Configuration prerequisites ································································································································151
Specifying intervals for sending IS-IS hello and CSNP packets ·····································································151
Specifying the IS-IS hello multiplier····················································································································152
Configuring a DIS priority for an interface·······································································································152
Disabling an interface from sending or receiving IS-IS packets ·····································································153
Enabling an interface to send small hello packets···························································································153
Configuring LSP parameters·······························································································································153
Configuring SPF parameters ······························································································································156
Assigning a high priority to IS-IS routes············································································································156
Setting the LSDB overload bit·····························································································································156
Configuring system ID to host name mappings································································································157
Enabling the logging of neighbor state changes·····························································································158
Enhancing IS-IS network security ································································································································158
Configuration prerequisites ································································································································158
Configuring neighbor relationship authentication ···························································································158
Configuring area authentication························································································································159
Configuring routing domain authentication······································································································159
Configuring IS-IS GR····················································································································································160
Configuring IS-IS NSR··················································································································································160
Configuring IS-IS FRR ···················································································································································161
Enabling IS-IS SNMP trap ···········································································································································162
Binding an IS-IS process with MIBs ····························································································································162
Configuring BFD for IS-IS·············································································································································163
Displaying and maintaining IS-IS ·······························································································································163
IS-IS configuration examples·······································································································································164
IS-IS basic configuration ·····································································································································164
DIS election configuration ··································································································································169
Configuring IS-IS route redistribution ················································································································173
IS-IS Graceful Restart configuration example ···································································································176
IS-IS NSR configuration example·······················································································································178
IS-IS FRR configuration example ························································································································180
v
IS-IS authentication configuration example·······································································································183
Configuring BFD for IS-IS····································································································································185
BGP configuration··················································································································································· 189
BGP overview ·······························································································································································189
Formats of BGP messages ··································································································································189
BGP path attributes ·············································································································································192
BGP route selection ·············································································································································196
iBGP and IGP synchronization ··························································································································198
Settlements for problems in large scale BGP networks ···················································································198
BGP GR ································································································································································201
MP-BGP·································································································································································202
Protocols and standards ·····································································································································202
BGP configuration task list ··········································································································································203
Configuring BGP basic functions································································································································204
Configuration prerequisites ································································································································204
Creating a BGP connection································································································································204
Specifying the source interface for TCP connections·······················································································205
Allowing establishment of eBGP connection to an indirectly connected peer or peer group·····················206
Controlling route generation·······································································································································206
Configuration prerequisites ································································································································206
Injecting a local network ····································································································································207
Configuring BGP route redistribution ················································································································207
Enabling default route redistribution into BGP ·································································································207
Controlling route distribution and reception ·············································································································208
Configuration prerequisites ································································································································208
Configuring BGP route summarization ·············································································································208
Advertising a default route to a peer or peer group ·······················································································209
Configuring BGP route distribution/reception filtering policies ·····································································209
Enabling BGP and IGP route synchronization ·································································································210
Limiting prefixes received from a peer or peer group·····················································································211
Configuring BGP route dampening···················································································································211
Configuring a shortcut route·······························································································································212
Configuring BGP route attributes································································································································212
Configuration prerequisites ································································································································212
Specifying a preferred value for routes received·····························································································212
Configuring preferences for BGP routes ···········································································································213
Configure the default local preference ·············································································································213
Configuring the MED attribute ···························································································································213
Configuring the next hop attribute·····················································································································215
Configuring the AS-PATH attribute ····················································································································216
Tuning and optimizing BGP networks························································································································219
Configuration prerequisites ································································································································219
Configuring the BGP keepalive interval and holdtime ····················································································219
Configuring the interval for sending the same update ····················································································220
Configuring BGP soft-reset··································································································································220
Enabling the BGP ORF capability······················································································································221
Enabling 4-byte AS number suppression ··········································································································222
Enabling quick eBGP session reestablishment ·································································································223
Enabling MD5 authentication for TCP connections ·························································································223
Configuring BGP load balancing ······················································································································223
Forbiding session establishment with a peer or peer group···········································································224
Configuring a large scale BGP network····················································································································224
Configuration prerequisites ································································································································224
Configuring BGP peer groups ···························································································································224
vi
Configuring BGP community······························································································································226
Configuring a BGP route reflector·····················································································································227
Configuring a BGP confederation ·····················································································································227
Configuring BGP GR ···················································································································································228
Enabling trap································································································································································229
Enabling logging of peer state changes····················································································································229
Configuring BFD for BGP ············································································································································230
Displaying and maintaining BGP·······························································································································230
Displaying BGP····················································································································································230
Resetting BGP connections ·································································································································231
Clearing BGP information ··································································································································232
BGP configuration examples·······································································································································232
BGP basic configuration·····································································································································232
BGP and IGP synchronization configuration····································································································236
BGP load balancing configuration····················································································································239
BGP community configuration····························································································································241
BGP route reflector configuration ······················································································································243
BGP confederation configuration ······················································································································245
BGP path selection configuration ······················································································································249
BGP GR configuration·········································································································································252
Configuring BFD for BGP ···································································································································253
Troubleshooting BGP ···················································································································································258
BGP peer relationship not established ··············································································································258
IPv6 static routing configuration····························································································································· 259
Introduction to IPv6 static routing ·······························································································································259
Features of IPv6 static routes ······························································································································259
Default IPv6 route ················································································································································259
Configuring an IPv6 static route ·································································································································259
Configuration prerequisites ································································································································259
Configuration procedure ····································································································································259
Displaying and maintaining IPv6 static routes··········································································································260
IPv6 static routing configuration example ·················································································································260
RIPng configuration················································································································································· 263
Introduction to RIPng····················································································································································263
RIPng working mechanism··································································································································263
RIPng packet format ············································································································································264
RIPng packet processing procedure ··················································································································265
Protocols and standards ·····································································································································265
RIPng configuration task list ········································································································································265
Configuring RIPng basic functions······························································································································266
Configuration prerequisites ································································································································266
Configuration procedure ····································································································································266
Configuring RIPng route control ·································································································································266
Configuring an additional routing metric ·········································································································267
Configuring RIPng route summarization ···········································································································267
Advertising a default route ·································································································································267
Configuring a RIPng route filtering policy·········································································································268
Configuring a priority for RIPng·························································································································268
Configuring RIPng route redistribution ··············································································································268
Tuning and optimizing the RIPng network·················································································································269
Configuring RIPng timers ····································································································································269
Configuring split horizon and poison reverse··································································································269
Configuring zero field check on RIPng packets ·······························································································270
vii
Configuring the maximum number of equal cost routes for load balancing ················································270
Applying IPsec policies for RIPng ·······························································································································271
Displaying and maintaining RIPng·····························································································································272
RIPng configuration examples·····································································································································272
Configuring RIPng basic functions·····················································································································272
Configuring RIPng route redistribution ··············································································································275
Configuring RIPng IPsec policies ·······················································································································277
OSPFv3 configuration············································································································································· 280
Introduction to OSPFv3················································································································································280
OSPFv3 overview ················································································································································280
OSPFv3 packets···················································································································································280
OSPFv3 LSA types···············································································································································281
Timers of OSPFv3 ················································································································································281
OSPFv3 features supported································································································································282
Protocols and standards ·····································································································································282
OSPFv3 configuration task list····································································································································282
Enabling OSPFv3 ·························································································································································283
Configuration prerequisites ································································································································283
Enabling OSPFv3 ················································································································································283
Configuring OSPFv3 area parameters ······················································································································284
Configuration prerequisites ································································································································284
Configuring an OSPFv3 stub area ····················································································································284
Configuring an OSPFv3 virtual link···················································································································285
Configuring OSPFv3 network types···························································································································285
Configuration prerequisites ································································································································286
Configuring the OSPFv3 network type for an interface ··················································································286
Configuring an NBMA or P2MP neighbor·······································································································286
Configuring OSPFv3 routing information control ·····································································································286
Configuration prerequisites ································································································································286
Configuring OSPFv3 route summarization ·······································································································287
Configuring OSPFv3 inbound route filtering ····································································································287
Configuring an OSPFv3 cost for an interface ··································································································287
Configuring the maximum number of OSPFv3 load-balanced routes ···························································288
Configuring a priority for OSPFv3 ····················································································································288
Configuring OSPFv3 route redistribution··········································································································289
Tuning and optimizing OSPFv3 networks ·················································································································289
Configuration prerequisites ································································································································290
Configuring OSPFv3 timers································································································································290
Configuring a DR priority for an interface········································································································291
Ignoring MTU check for DD packets ·················································································································291
Disable interfaces from receiving and sending OSPFv3 packets···································································291
Enable the logging of neighbor state changes ································································································292
Configuring OSPFv3 GR ·············································································································································292
Configuring GR Restarter····································································································································292
Configuring GR Helper·······································································································································293
Configuring BFD for OSPFv3······································································································································293
Applying IPsec policies for OSPFv3···························································································································294
Displaying and maintaining OSPFv3·························································································································295
OSPFv3 configuration examples ································································································································296
Configuring OSPFv3 areas ································································································································296
Configuring OSPFv3 DR election·······················································································································300
Configuring OSPFv3 route redistribution··········································································································302
Configuring OSPFv3 GR ····································································································································305
Configuring BFD for OSPFv3 ·····························································································································307
viii
Configuring OSPFv3 IPsec policies ···················································································································310
Troubleshooting OSPFv3 configuration ·····················································································································313
No OSPFv3 neighbor relationship established································································································313
Incorrect routing information······························································································································314
IPv6 IS-IS configuration··········································································································································· 315
Introduction to IPv6 IS-IS··············································································································································315
Configuring IPv6 IS-IS basic functions························································································································315
Configuration prerequisites ································································································································315
Configuration procedure ····································································································································315
Configuring IPv6 IS-IS routing information control ···································································································316
Configuration prerequisites ································································································································316
Configuration procedure ····································································································································316
Configuring BFD for IPv6 IS-IS ····································································································································317
Displaying and maintaining IPv6 IS-IS·······················································································································318
IPv6 IS-IS configuration examples ······························································································································319
IPv6 IS-IS basic configuration example·············································································································319
Configuring BFD for IPv6 IS-IS ···························································································································323
IPv6 BGP configuration··········································································································································· 327
IPv6 BGP overview·······················································································································································327
IPv6 BGP configuration task list··································································································································328
Configuring IPv6 BGP basic functions ·······················································································································329
Configuration prerequisites ································································································································329
Specifying an IPv6 BGP peer·····························································································································329
Injecting a local IPv6 route·································································································································329
Configuring a preferred value for routes from a peer or peer group····························································330
Specifying the source interface for establishing TCP connections ·································································330
Allowing the establishment of an indirect eBGP connection ··········································································331
Configuring a description for an IPv6 peer or peer group·············································································331
Disabling session establishment to an IPv6 peer or peer group ····································································331
Logging IPv6 peer or peer group state changes······························································································332
Controlling route distribution and reception ·············································································································332
Configuration prerequisites ································································································································332
Configuring IPv6 BGP route redistribution········································································································332
Configuring IPv6 BGP route summarization·····································································································333
Advertising a default route to an IPv6 peer or peer group·············································································333
Configuring outbound route filtering ·················································································································333
Configuring inbound route filtering ···················································································································334
Configuring IPv6 BGP and IGP route synchronization····················································································335
Configuring route dampening····························································································································335
Configuring IPv6 BGP route attributes ·······················································································································335
Configuration prerequisites ································································································································336
Configuring IPv6 BGP preference and default LOCAL_PREF and NEXT_HOP attributes ····························336
Configuring the MED attribute ···························································································································336
Configuring the AS_PATH attribute ···················································································································337
Tuning and optimizing IPv6 BGP networks ···············································································································337
Configuration prerequisites ································································································································338
Configuring IPv6 BGP timers······························································································································338
Configuring IPv6 BGP soft reset·························································································································339
Enabling the IPv6 BGP ORF capability ·············································································································339
Enabling 4-byte AS number suppression ··········································································································340
Configuring the maximum number of load-balanced routes ··········································································341
Enabling MD5 authentication for TCP connections ·························································································341
Applying an IPsec policy to an IPv6 BGP peer or peer group·······································································342
ix
Configuring a large-scale IPv6 BGP network············································································································342
Configuration prerequisites ································································································································343
Configuring IPv6 BGP peer group·····················································································································343
Configuring IPv6 BGP community ·····················································································································344
Configuring an IPv6 BGP route reflector···········································································································345
Configuring BFD for IPv6 BGP····································································································································345
Displaying and maintaining IPv6 BGP·······················································································································346
Displaying BGP····················································································································································346
Resetting IPv6 BGP connections·························································································································347
Clearing IPv6 BGP information··························································································································347
IPv6 BGP configuration examples ······························································································································347
IPv6 BGP basic configuration example·············································································································347
IPv6 BGP route reflector configuration example ······························································································349
IPv6 BGP IPsec policy configuration example··································································································351
Configuring BFD for IPv6 BGP ···························································································································355
Troubleshooting IPv6 BGP configuration ···················································································································360
IPv6 BGP peer relationship not established······································································································360
Routing policy configuration ·································································································································· 361
Introduction to routing policy ······································································································································361
Routing policy application··································································································································361
Routing policy implementation···························································································································361
Filters·····································································································································································361
Routing policy configuration task list··························································································································363
Defining filters·······························································································································································363
Prerequisites ·························································································································································363
Defining an IP-prefix list ······································································································································363
Defining an AS path list······································································································································364
Defining a community list ···································································································································364
Defining an extended community list ················································································································365
Configuring a routing policy·······································································································································365
Prerequisites ·························································································································································365
Creating a routing policy ···································································································································365
Defining if-match clauses ····································································································································366
Defining apply clauses········································································································································367
Defining a continue clause ·································································································································369
Displaying and maintaining the routing policy·········································································································369
Routing policy configuration examples······················································································································370
Applying a routing policy to IPv4 route redistribution·····················································································370
Applying a routing policy to IPv6 route redistribution·····················································································373
Applying a routing policy to filter received BGP routes··················································································374
Troubleshooting routing policy configuration············································································································377
IPv4 routing information filtering failure············································································································377
IPv6 routing information filtering failure············································································································377
Policy-based routing configuration ························································································································ 378
Introduction to PBR ·······················································································································································378
PBR modes····························································································································································378
Concepts·······························································································································································379
QoS mode····························································································································································379
Configuring PBR (using a PBR policy) ························································································································380
Defining a policy ·················································································································································380
Configuring local PBR ·········································································································································381
Configuring interface PBR ··································································································································381
PBR and track·······················································································································································382
x
Configuring PBR (using a QoS policy)·······················································································································382
Configuring a QoS policy ··································································································································382
Applying the QoS policy····································································································································382
Displaying and maintaining PBR configuration ········································································································383
PBR configuration (using a PBR policy) ·············································································································383
PBR configuration (using a QoS policy)············································································································384
PBR configuration examples········································································································································385
Configuring local PBR based on packet type···································································································385
Configuring interface PBR based on packet type ····························································································386
IPv4 PBR configuration example (using a QoS policy) ···················································································388
IPv6 PBR configuration example (using a QoS policy) ···················································································389
MCE configuration·················································································································································· 391
MCE overview ······························································································································································391
MPLS L3VPN overview········································································································································391
MPLS L3VPN concepts ········································································································································392
Multi-VPN-instance CE ········································································································································394
How MCE works ·················································································································································395
Using MCE in tunneling applications················································································································395
Configuring routing on an MCE·································································································································396
Route exchange between an MCE and a VPN site·························································································396
Route exchange between an MCE and a PE ···································································································398
Configuring an MCE ···················································································································································398
Configuring VPN instances ································································································································398
Configuring routing on an MCE·································································································································400
Configuration prerequisites ································································································································400
Configuring routing between MCE and VPN site····························································································401
Configuring routing between MCE and PE ······································································································405
Displaying and maintaining MCE······························································································································408
Resetting BGP connections ·································································································································408
Displaying and maintaining MCE ·····················································································································409
MCE configuration examples ·····································································································································410
Using OSPF to advertise VPN routes to the PE·································································································410
Using BGP to advertise VPN routes to the PE···································································································415
Using tunnels to advertise VPN routes ··············································································································418
Support and other resources ·································································································································· 425
Contacting HP ······························································································································································425
Subscription service ············································································································································425
Related information······················································································································································425
Documents····························································································································································425
Websites·······························································································································································425
Conventions ··································································································································································426
Index ········································································································································································ 428
1
IP routing basics
NOTE:
•The term
router
in this document refers to both routers and Layer 3 switches.
•The types of interfaces that appear in any figures other than the network diagrams for configuration
examples are for illustration only. Some of them might be unavailable on your switch.
•The term
interface
in the routing features refers to Layer 3 interfaces, including VLAN interfaces and
route-mode (or Layer 3) Ethernet ports. You can set an Ethernet port to operate in route mode by usin
g
the port link-mode route command (see
Layer 2—LAN Switching Configuration Guide
).
•The 3600 v2 SI Switch Series does not support OSPF, BGP, IS-IS, OSPFv3, IPv6 BGP, or IPv6 IS-IS.
IP routing overview
Upon receiving a packet, a router determines the optimal route based on the destination address and
forwards the packet to the next router in the path. When the packet reaches the last router, it then
forwards the packet to the destination host.
Routing provides the path information that guides the forwarding of packets.
Routes can be divided into the following categories by destination:
•Network route—The destination is a network. The subnet mask is less than 32 bits.
•Host route—The destination is a host. The subnet mask is 32 bits.
Routes can be divided into the following types based on whether the destination is directly connected to
the router:
•Direct routes—The destination is directly connected to the router.
•Indirect routes—The destination is not directly connected to the router.
Routing table
Introduction to routing table
A router selects optimal routes from the routing table, and sends them to the forwarding information base
(FIB) table to guide packet forwarding. Each router maintains a routing table and a FIB table.
Routes in a routing table can be divided into the following categories by origin:
•Direct routes—Routes discovered by data link protocols, also known as “interface routes”
•Static routes—Routes manually configured. Static routes are easy to configure and require less
system resources. They work well in small and stable networks. Static routes cannot adjust to
network changes. You must manually configure the routes again whenever the network topology
changes.
•Dynamic routes—Routes discovered dynamically by routing protocols
Each entry in the FIB table specifies a physical interface that packets destined for a certain address
should go out to reach the next hop—the next router—or the directly connected destination.
2
NOTE:
For more information about the FIB table, see
Layer 3—IP Services Configuration Guide
.
Routing table information
Display the brief information of a routing table by using the display ip routing-table command.
For example:
<Sysname> display ip routing-table
Routing Tables: Public
Destinations : 7 Routes : 7
Destination/Mask Proto Pre Cost NextHop Interface
1.1.1.0/24 Direct 0 0 1.1.1.1 Vlan11
2.2.2.0/24 Static 60 0 12.2.2.2 Vlan12
80.1.1.0/24 OSPF 10 2 80.1.1.1 Vlan13
…(Part of the output information is omitted)
A route entry includes the following key items:
•Destination—Destination IP address or destination network
•Mask—The network mask specifies, in company with the destination address, the address of the
destination network. A logical AND operation between the destination address and the network
mask yields the address of the destination network. For example, if the destination address is
129.102.8.10 and the mask 255.255.0.0, the address of the destination network is 129.102.0.0. A
network mask is made up of a certain number of consecutive 1s. It can be expressed in dotted
decimal format or by the number of the 1s.
•Pre—Preference of the route. Among routes to the same destination, the one with the highest
preference is optimal.
•Cost—When multiple routes to a destination have the same preference, the one with the smallest
cost becomes the optimal route.
•NextHop—Specifies the IP address of the next hop
•Interface—Specifies the interface through which a matching IP packet is to be forwarded
Dynamic routing protocols
Based on dynamic routing protocols, dynamic routing can detect network topology changes and
recalculate the routes, so it is suitable for large networks. However, dynamic routing is difficult to
configure, imposes higher requirements on the system, and consumes a certain amount of network
resources.
Dynamic routing protocols can be classified based on different criteria, as shown in Table 1:
Table 1 Dynamic routing protocols
Criterion Categories
Optional scope
•Interior gateway protocols (IGPs)—Work within an autonomous system (AS).
Examples include RIP, OSPF, and IS-IS.
•Exterior gateway protocols (EGPs)—Work between ASs. The most popular one is
BGP.
3
Criterion Categories
Routing algorithm
•Distance-vector protocols—RIP and BGP. BGP is also considered a path-vector
protocol.
•Link-state protocols—OSPF and IS-IS
Destination address
type
•Unicast routing protocols—RIP, OSPF, BGP, and IS-IS
•Multicast routing protocols—PIM-SM and PIM-DM
IP version
•IPv4 routing protocols—RIP, OSPF, BGP, and IS-IS
•IPv6 routing protocols—RIPng, OSPFv3, IPv6 BGP, and IPv6 IS-IS
NOTE:
•An AS refers to a group of routers sharing the same routing policy and working under the same
administration.
•This chapter focuses on unicast routing protocols. For more information about multicast routing
protocols, see
IP Multicast Configuration Guide
.
Routing preference
Different routing protocols can find different routes to the same destination. However, not all of those
routes are optimal. For route selection, routing protocols, direct routes, and static routes are assigned
different preferences. The route with the highest preference is preferred.
The preference of a direct route is always 0 and cannot be changed. You can manually configure
preferences for any other route type. Each static route can be configured with a different preference. The
following table lists the types of routes and the default preferences. The smaller the preference value, the
higher the preference.
Routing approach Preference
Direct route 0
OSPF 10
IS-IS 15
Static route 60
RIP 100
OSPF ASE 150
OSPF NSSA 150
iBGP 255
eBGP 255
Unknown (route from an untrusted source) 256
Load sharing
A routing protocol can be configured with multiple equal-cost routes to the same destination. These routes
have the same preference and will all be used to accomplish load sharing if there is no route with a
higher preference available.
4
NOTE:
A
t presen
t
, routing protocols supporting load sharing include static routing/IPv6 static routing, RIP/RIPng,
OSPF/OSPFv3, BGP/IPv6 BGP, and IS-IS/IPv6 IS-IS.
Route backup
Route backup can help improve network reliability. With route backup, you can configure multiple routes
to the same destination, expecting the one with the highest preference to be the main route and all the
rest backup routes.
Under normal circumstances, packets are forwarded through the main route. When the link fails, the
route with the highest preference among the backup routes is selected to forward packets. When the link
recovers, the route selection process is performed again and the main route is selected again to forward
packets.
Route recursion
The next hops of some BGP routes (except eBGP routes) and static routes may not be directly connected.
The outgoing interface to reach the next hop must be available. Route recursion is used to find the
outgoing interface based on the next hop information of the route. Link-state routing protocols, such as
OSPF and IS-IS, do not need route recursion because they obtain next hop information through route
calculation.
Route redistribution
Different routing protocols running on a network learn route information from each other through route
redistribution. Each routing protocol can redistribute routes from other protocols, direct routes, and static
routes. For more information, see relevant protocols in this configuration guide.
Displaying and maintaining a routing table
To do… Use the command… Remarks
Display information about the
routing table
display ip routing-table [ vpn-instance
vpn-instance-name ] [ verbose ] [ | { begin
|exclude |include } regular-expression ]
Available in any view
Display information about routes
permitted by an IPv4 basic ACL
display ip routing-table [ vpn-instance
vpn-instance-name ] acl acl-number
[ verbose ] [ |{ begin | exclude |
include } regular-expression ]
Available in any view
Display information about routes to
the specified destination
display ip routing-table [ vpn-instance
vpn-instance-name ] ip-address [ mask |
mask-length ] [ longer-match ] [ verbose ]
[ |{ begin | exclude | include }
regular-expression ]
Available in any view
Display information about routes
with destination addresses in the
specified range
display ip routing-table [ vpn-instance
vpn-instance-name ] ip-address1 { mask |
mask-length } ip-address2 { mask |
mask-length } [ verbose ] [ |{ begin |
exclude | include } regular-expression ]
Available in any view
5
To do… Use the command… Remarks
Display routing information
permitted by an IPv4 prefix list
display ip routing-table [ vpn-instance
vpn-instance-name ] ip-prefix
ip-prefix-name [ verbose ] [ |{ begin |
exclude | include } regular-expression ]
Available in any view
Display routes of a routing protocol
display ip routing-table [ vpn-instance
vpn-instance-name ] protocol protocol
[ inactive | verbose ] [ |{ begin | exclude
| include } regular-expression ] [ |{ begin
| exclude | include } regular-expression ]
[ |{ begin | exclude | include }
regular-expression ]
Available in any view
Display statistics about the routing
table
display ip routing-table [ vpn-instance
vpn-instance-name ] statistics [ |{ begin |
exclude | include } regular-expression ]
Available in any view
Clear statistics for the routing table
reset ip routing-table statistics protocol
[ vpn-instance vpn-instance-name ]
{protocol |all }
Available in user view
Display IPv6 routing table
information
display ipv6 routing-table [ verbose ] [ |
{ begin | exclude | include }
regular-expression ]
Available in any view
Display routing information
permitted by an IPv6 ACL
display ipv6 routing-table acl
acl6-number [ verbose ] [ |{ begin |
exclude | include } regular-expression ]
Available in any view
Display routing information for a
specified destination IPv6 address
display ipv6 routing-table ipv6-address
prefix-length [ longer-match ] [ verbose ]
[ |{ begin | exclude | include }
regular-expression ]
Available in any view
Display IPv6 routing information
for an IPv6 address range
display ipv6 routing-table ipv6-address1
prefix-length1 ipv6-address2
prefix-length2 [ verbose ] [ |{ begin |
exclude | include } regular-expression ]
Available in any view
Display routing information
permitted by an IPv6 prefix list
display ipv6 routing-table ipv6-prefix
ipv6-prefix-name [ verbose ] [ |{ begin |
exclude | include } regular-expression ]
Available in any view
Display IPv6 routing information of
a routing protocol
display ipv6 routing-table protocol
protocol [ inactive | verbose ] [ |{ begin
| exclude | include } regular-expression ]
Available in any view
Display IPv6 routing statistics
display ipv6 routing-table statistics [ |
{ begin | exclude | include }
regular-expression ]
Available in any view
Clear specified IPv6 routing
statistics
reset ipv6 routing-table statistics protocol
{ protocol |all } Available in user view
6
Static routing configuration
NOTE:
The term router in this document refers to both routers and Layer 3 switches.
Introduction
Static route
Static routes are manually configured. If a network’s topology is simple, you only need to configure static
routes for the network to work properly. The proper configuration and usage of static routes can improve
network performance and ensure bandwidth for important network applications.
The disadvantage of using static routes is that they cannot adapt to network topology changes. If a fault
or a topological change occurs in the network, the relevant routes will be unreachable and the network
breaks. When this happens, the network administrator must modify the static routes manually.
Default route
Without a default route, a packet that does not match any routing entries is discarded.
A default route is used to forward packets that do not match any routing entry. It can be configured in
either of the following ways:
•The network administrator can configure a default route with both the destination and mask being
0.0.0.0. The router forwards any packet whose destination address fails to match any entry in the
routing table to the next hop of the default static route.
•Some dynamic routing protocols, such as OSPF, RIP, and IS-IS, can also generate a default route.
For example, an upstream router running OSPF can generate a default route and advertise it to
other routers, which install the default route with the next hop being the upstream router.
Static route configuration items
Before configuring a static route, you must know the following concepts:
1. Destination address and mask
In the ip route-static command, an IPv4 address is in dotted decimal format. A mask can be either in
dotted decimal format or in the form of mask length—the number of consecutive 1s in the mask.
2. Output interface and next hop address
When you configure a static route, specify either the output interface, next hop address, or both
depending on the specific occasion. The next hop address cannot be a local interface IP address;
otherwise, the route configuration will not take effect.
Each route lookup operation has to find the next hop to resolve the destination link layer address.
When specifying the output interface, observe the following rules:
7
•If the output interface is a Null 0 interface, no next hop address is required.
•If you specify a broadcast interface (such as an Ethernet interface or VLAN interface) as the output
interface, you must specify the corresponding next hop for the output interface.
3. Other attributes
You can configure different priorities for different static routes so that route management policies can be
more flexible. For example, specifying the same priority for different routes to the same destination
enables load sharing, but specifying different priorities for these routes enables route backup.
Configuring a static route
Configuration prerequisites
Before configuring a static route, complete the following tasks:
•Configure the physical parameters for related interfaces
•Configure the link-layer attributes for related interfaces
•Configure the IP addresses for related interfaces
Configuration procedure
Follow these steps to configure a static route:
To do… Use the command…
Remarks
Enter system view system-view —
Configure a static route
ip route-static dest-address { mask | mask-length }
{ next-hop-address [ track track-entry-number ] |
interface-type interface-number [ next-hop-address ] |
vpn-instance d-vpn-instance-name next-hop-address [ track
track-entry-number ] } [ preference preference-value ] [ tag
tag-value ] [ permanent ] [ description description-text ]
Required
Use one of the
approaches.
By default, preference
for static routes is 60,
tag is 0, and no
description
information is
configured.
Do not specify the
permanent and track
keywords
simultaneously.
If the outgoing
interface is down, the
permanent static route
is still active.
ip route-static vpn-instance s-vpn-instance-name&<1-6>
dest-address { mask | mask-length } { next-hop-address
[ public ] [ track track-entry-number ] | interface-type
interface-number [ next-hop-address ] | vpn-instance
d-vpn-instance-name next-hop-address [ track
track-entry-number ] } [ preference preference-value ] [ tag
tag-value ] [ permanent ] [ description description-text ]
Configure the default
preference for static
routes
ip route-static default-preference default-preference-value Optional
60 by default
8
NOTE:
•When you configure a static route, the static route does not take effect if you specify the next hop address
first and then configure it as the IP address of a local interface, such as Ethernet interface and VLAN
interface.
•If you do not specify the preference when you configure a static route, the default preference will be
used. Reconfiguring the default preference applies only to newly created static routes.
•You can flexibly control static routes by configuring tag values and using the tag values in the routing
policy.
•If the destination IP address and mask are both configured as 0.0.0.0 with the ip route-static command,
then the route is the default route.
•For detailed information about track, see
High Availability Configuration Guide
.
Configuring BFD for static routes
Bidirectional forwarding detection (BFD) provides a general-purpose, standard, medium-, and
protocol-independent fast failure detection mechanism. It can uniformly and quickly detect the failures of
the bidirectional forwarding paths between two routers for protocols, such as routing protocols. For more
information about BFD, see High Availability Configuration Guide.
A dynamic routing protocol notifies BFD of its neighbor information. BFD uses such information to
establish sessions with neighbors by sending BFD control packets. Static routing has no neighbor
discovery mechanism. This section describes how static routing implements BFD.
BFD control packet mode
To use BFD control packets for bidirectional detection between two devices, you must enable BFD control
packet mode for each device’s static route destined to the peer.
To configure a static route and enable BFD control packet mode for it, specify an outbound interface and
a direct next hop—BFD establishes a direct session, or specify an indirect next hop and a specific BFD
packet source address—BFD establishes an indirect session—for the static route.
Follow these steps to configure a static route with BFD control packet mode enabled (direct session):
To do… Use the command…
Remarks
Enter system view system-view —
Configure a static route
and enable BFD control
packet mode for it
ip route-static dest-address { mask |mask-length } interface-type
interface-number next-hop-address bfd control-packet
[ preference preference-value ] [ tag tag-value ] [ description
description-text ] Required
Use either
command
ip route-static vpn-instance s-vpn-instance-name&<1-6>
dest-address {mask |mask-length } interface-type
interface-number next-hop-address bfd control-packet
[ preference preference-value ] [ tag tag-value ] [ description
description-text ]
Follow these steps to configure a static route with BFD control packet mode enabled (indirect session):
To do… Use the command…
Remarks
Enter system view system-view —
Other manuals for 3600 v2 Series
9
Table of contents
Other HP Switch manuals
HP
HP 316095-B21 - StorageWorks Edge Switch 2/24 Instruction Manual
HP
HP KVM Server Console Switch G2 User manual
HP
HP 9500 Series User manual
HP
HP E3800-24G-PoE+-2SFP+ User manual
HP
HP ProCurve 3500yl-24G-PWR User manual
HP
HP AdvanceStack 100Base-T Hub-8TXE Installation and operating manual
HP
HP 3500 Series User manual
HP
HP FlexFabric 7900 Series Installation manual
HP
HP ProCurve 2910al-24G Manual
HP
HP HP 2530 User manual
HP
HP StorageWorks 2/16-EL User instructions
HP
HP ProCurve Switch 1800-24G User manual
HP
HP ProCurve 5400zl Series User manual
HP
HP 438031-B21 - 1:10Gb Ethernet BL-c Switch User manual
HP
HP 6125XLG User manual
HP
HP 377707-002 User manual
HP
HP A5920AF-24XG Installation instructions
HP
HP Procurve 2524 Instruction Manual
HP
HP 316095-B21 - StorageWorks Edge Switch 2/24 Quick start guide
HP
HP AA979A - StorageWorks SAN Switch 2/8V User manual
Popular Switch manuals by other brands
Interlogix
Interlogix NS3552-8P-2S Quick installation guide
Eaton
Eaton CurrentWatch ECS Series installation instructions
Brocade Communications Systems
Brocade Communications Systems ICX 6430-C installation instructions
Spirax Sarco
Spirax Sarco Colima Tor Series Installation and maintenance instructions
ETI
ETI MLBS S instruction manual
NETGEAR
NETGEAR GS108Tv2 - ProSafe Gigabit Smart Switch Coming... installation guide
Generac Power Systems
Generac Power Systems RXGW20SHA3 owner's manual
SkyLink
SkyLink MS-001 User instructions
Leonton
Leonton EG5-1802-M12XB-10GSFP-67 Hardware user manual
Belkin
Belkin OmniView F1DA104T Update instructions
D-Link
D-Link DSS-100 Quick installation guide
Agilent Technologies
Agilent Technologies Agilent E6474A user guide
