Cisco Router IOS XR Manual de usuario

CISCO IOS XR Jeffrey Fry © October 2012 FryGuy.Net

Cisco IOS XR Training Page 10 © 2012 Jeffrey Fry FryGuy.Net Ok, now lets commit it this time. RP/0/7/CPU0:R1#conf t Sun Apr 1 22:26:20.749 UTC R

Cisco IOS XR Training Page 100 © 2012 Jeffrey Fry FryGuy.Net 10.4.4.4 1 FULL/DR 00:00:33 10.1.34.4 FastEthernet0/0 All neighbore

Cisco IOS XR Training Page 101 © 2012 Jeffrey Fry FryGuy.Net 24. NHRP ( HSRP & VRRP) Next Hop Resolution Protocol comes in two fashions on th

Cisco IOS XR Training Page 102 © 2012 Jeffrey Fry FryGuy.Net HSRP is up first! First thing, from config mode, enter router hsrp RP/0/RSP0/CPU0:R

Cisco IOS XR Training Page 103 © 2012 Jeffrey Fry FryGuy.Net Time for some VRRP One thing cool about VRRP, you don’t have to burn an IP address j

Cisco IOS XR Training Page 104 © 2012 Jeffrey Fry FryGuy.Net Now back to R1 to see the VRRP status: RP/0/RSP0/CPU0:R1#show vrrp IPv4 Virtual Rou

Cisco IOS XR Training Page 105 © 2012 Jeffrey Fry FryGuy.Net This page intentionally left black for notes.

Cisco IOS XR Training Page 11 © 2012 Jeffrey Fry FryGuy.Net Few other things that is nice to know. You can configure the system in exclusive mo

Cisco IOS XR Training Page 12 © 2012 Jeffrey Fry FryGuy.Net Ok, so now we are at an unconfigured device. Now we can load the config on the disk

Cisco IOS XR Training Page 13 © 2012 Jeffrey Fry FryGuy.Net RP/0/RSP0/CPU0:R1(config)#commit replace Wed Oct 17 01:37:41.577 UTC This commit wil

Cisco IOS XR Training Page 14 © 2012 Jeffrey Fry FryGuy.Net 4. Configuring an interface Basic IPv4 and IPv6 address First we will take a look at

Cisco IOS XR Training Page 15 © 2012 Jeffrey Fry FryGuy.Net Notice, on IOS XR you can use / for the subnet, no more entering 255.255.255.0 : RP/0

Cisco IOS XR Training Page 16 © 2012 Jeffrey Fry FryGuy.Net Uncommitted changes found, commit them before exiting(yes/no/cancel)? [cancel]:yes RP

Cisco IOS XR Training Page 17 © 2012 Jeffrey Fry FryGuy.Net 5. Interface Bundles Etherchannels are also different between IOS and IOS XR. In ty

Cisco IOS XR Training Page 18 © 2012 Jeffrey Fry FryGuy.Net Ok, since this is a bundle, we should put restrictions around the max and min links.

Cisco IOS XR Training Page 19 © 2012 Jeffrey Fry FryGuy.Net Now let’s check our config before we commit: RP/0/RSP0/CPU0:PE2(config-if)#show confi

Cisco IOS XR Training Page 2 © 2012 Jeffrey Fry FryGuy.Net Table of Contents 1. Cisco IOS XR Introduction and Comparison to IOS 2. Cisco IOS

Cisco IOS XR Training Page 20 © 2012 Jeffrey Fry FryGuy.Net interface GigabitEthernet0/0/0/11 bundle id 200 mode active no shutdown ! interface

Cisco IOS XR Training Page 21 © 2012 Jeffrey Fry FryGuy.Net So, let’s PING! RP/0/RSP0/CPU0:PE1#ping 150.1.12.2 Fri Apr 27 01:51:12.692 UTC Type e

Cisco IOS XR Training Page 22 © 2012 Jeffrey Fry FryGuy.Net Now we can look at LACP: RP/0/RSP0/CPU0:PE1#show lacp Fri Apr 27 01:52:35.115 UTC St

Cisco IOS XR Training Page 23 © 2012 Jeffrey Fry FryGuy.Net 6. Software installation, PIE packages, and patches As part of any system, from time

Cisco IOS XR Training Page 24 © 2012 Jeffrey Fry FryGuy.Net RP/0/RSP0/CPU0:R1# copy ftp://1.1.1.2/ASR9K-iosxr-k9-4.1.2.tar compactflash: Tue Apr

Cisco IOS XR Training Page 25 © 2012 Jeffrey Fry FryGuy.Net Info: asr9k-video-p.pie-4.1.2 Info: asr9k-mgbl-p.pie-4.1.2 Info:

Cisco IOS XR Training Page 26 © 2012 Jeffrey Fry FryGuy.Net Now we should be able to activate and install one of the PIE images, here we will act

Cisco IOS XR Training Page 27 © 2012 Jeffrey Fry FryGuy.Net Once completed, we will be notified on the cli RP/0/RSP0/CPU0:ios(admin)#Install oper

Cisco IOS XR Training Page 28 © 2012 Jeffrey Fry FryGuy.Net Now if we look at our show install active summary command, we now have the MPLS PIE

Cisco IOS XR Training Page 29 © 2012 Jeffrey Fry FryGuy.Net Info: asr9k-p-4.1.2.CSCtu30994.txt (skipped - not a pie) Info: The install op

Cisco IOS XR Training Page 3 © 2012 Jeffrey Fry FryGuy.Net There are two topologies that have been used. This is because of what I had access to

Cisco IOS XR Training Page 30 © 2012 Jeffrey Fry FryGuy.Net Now, that was not one that required a reload, if you have one of them like CSCtw84381

Cisco IOS XR Training Page 31 © 2012 Jeffrey Fry FryGuy.Net 7. Licensing The ever loving Cisco licensing – well, not just Cisco but all vendors

Cisco IOS XR Training Page 32 © 2012 Jeffrey Fry FryGuy.Net Next we can use the license add command from Admin mode RP/0/1/CPU0:CRS# RP/0/1/CPU0:

Cisco IOS XR Training Page 33 © 2012 Jeffrey Fry FryGuy.Net Once installed, we can check using the show license command. RP/0/RSP0/CPU0:R1#sh lic

Cisco IOS XR Training Page 34 © 2012 Jeffrey Fry FryGuy.Net 8. Aliases From IOS, Aliases can sometimes make life easier on you and your support

Cisco IOS XR Training Page 35 © 2012 Jeffrey Fry FryGuy.Net Now, let’s see what happens when we do a show int for that alias RP/0/7/CPU0:R1#sh in

Cisco IOS XR Training Page 36 © 2012 Jeffrey Fry FryGuy.Net reliability 255/255, txload 0/255, rxload 0/255 Encapsulation ARPA, Full-dup

Cisco IOS XR Training Page 37 © 2012 Jeffrey Fry FryGuy.Net No. of members in this bundle: 2 TenGigE0/0/0/0 Full-duplex 10

Cisco IOS XR Training Page 38 © 2012 Jeffrey Fry FryGuy.Net 9. Wildcard Masks A really cool thing with IOS XR is interface wildcards. If you w

Cisco IOS XR Training Page 39 © 2012 Jeffrey Fry FryGuy.Net 10. Processes So, since IOS XR is based on QNX, the SHOW PROCESSES command is a bit d

Cisco IOS XR Training Page 4 © 2012 Jeffrey Fry FryGuy.Net 1. Cisco IOS XR Introduction and Comparison to IOS Let’s start with the basic diffe

Cisco IOS XR Training Page 40 © 2012 Jeffrey Fry FryGuy.Net Now, since IOS XR is based on a flavor of Unix, we have a command similar to TOP call

Cisco IOS XR Training Page 41 © 2012 Jeffrey Fry FryGuy.Net 11. Remote Access Services – Telnet and SSH We need to have a way to remote access th

Cisco IOS XR Training Page 42 © 2012 Jeffrey Fry FryGuy.Net RP/0/RSP0/CPU0:R1(config-ssh-peer)# allow Telnet peer RP/0/RSP0/CPU0:R1(config-telnet

Cisco IOS XR Training Page 43 © 2012 Jeffrey Fry FryGuy.Net 12. TACACS Configuration (default and non-default VRF) Ok, so you want to secure you

Cisco IOS XR Training Page 44 © 2012 Jeffrey Fry FryGuy.Net From another terminal, SSH into the box using a TACACs account, and if successful, c

Cisco IOS XR Training Page 45 © 2012 Jeffrey Fry FryGuy.Net And finally do the commit confirmed here again RP/0/RSP0/CPU0:PE2(config)#commit conf

Cisco IOS XR Training Page 46 © 2012 Jeffrey Fry FryGuy.Net 13. Access Lists Access lists - these are the same as IOS Extended access lists. S

Cisco IOS XR Training Page 47 © 2012 Jeffrey Fry FryGuy.Net 14. OSPF Time for some OSPF configs, these will build off the previous configs we j

Cisco IOS XR Training Page 48 © 2012 Jeffrey Fry FryGuy.Net Now to see if we neighbored up with R2: RP/0/7/CPU0:R1#sh ip ospf nei Thu Mar 29 19

Cisco IOS XR Training Page 49 © 2012 Jeffrey Fry FryGuy.Net For reference, here is a similar IOS config for the same thing: R1(config)#router os

Cisco IOS XR Training Page 5 © 2012 Jeffrey Fry FryGuy.Net Here is a table of some of the other significant differences between IOS and IOS XR I

Cisco IOS XR Training Page 50 © 2012 Jeffrey Fry FryGuy.Net Then set our MD5 key #1 to Cisco RP/0/7/CPU0:R1(config-ospf-ar-if)#message-digest-ke

Cisco IOS XR Training Page 51 © 2012 Jeffrey Fry FryGuy.Net Then make sure we are getting a route RP/0/7/CPU0:R1#sh route ipv4 ospf Sat Mar 31 1

Cisco IOS XR Training Page 52 © 2012 Jeffrey Fry FryGuy.Net 15. EIGRP First thing we need to do is delete the OSPF process,that is if you still

Cisco IOS XR Training Page 53 © 2012 Jeffrey Fry FryGuy.Net NSF-aware route hold timer is 480s NSF signal timer is 20s NSF converge t

Cisco IOS XR Training Page 54 © 2012 Jeffrey Fry FryGuy.Net D 2.2.2.2/32 [90/130816] via 150.1.12.2, 00:00:11, GigabitEthernet0/3/0/2 C 150

Cisco IOS XR Training Page 55 © 2012 Jeffrey Fry FryGuy.Net [90/130816] via fe80::2d0:79ff:fe01:3a78, 00:01:43, GigabitEthernet0/3/0/2 C

Cisco IOS XR Training Page 56 © 2012 Jeffrey Fry FryGuy.Net 16. RIP (yeah yeah, why would you want to run this? Think – PE-CE) Ok, time for the

Cisco IOS XR Training Page 57 © 2012 Jeffrey Fry FryGuy.Net Version: 2 Default metric: Not set Maximum paths:

Cisco IOS XR Training Page 58 © 2012 Jeffrey Fry FryGuy.Net 17. IS-IS Time for some IS-IS routing! Between IS-IS and OSPF, those are the two mos

Cisco IOS XR Training Page 59 © 2012 Jeffrey Fry FryGuy.Net interface GigabitEthernet0/3/0/2 address-family ipv4 unicast ! address-family

Cisco IOS XR Training Page 6 © 2012 Jeffrey Fry FryGuy.Net 2. Cisco IOS XR Prompt and Hostname Differences Let’s cover the prompt real quick as

Cisco IOS XR Training Page 60 © 2012 Jeffrey Fry FryGuy.Net Ok, that worked – now we can do the same for IPv6. First we should look at the IPv6

Cisco IOS XR Training Page 61 © 2012 Jeffrey Fry FryGuy.Net 18. BGP iBGP and eBGP BGP, this is where it starts to get different with IOS XR. Fi

Cisco IOS XR Training Page 62 © 2012 Jeffrey Fry FryGuy.Net Precedence: internet Neighbor capabilities: Route refresh: advertised and rec

Cisco IOS XR Training Page 63 © 2012 Jeffrey Fry FryGuy.Net Cool, we have a route to R2 Loopback interface. Lets PING it! RP/0/7/CPU0:R1#ping 2.

Cisco IOS XR Training Page 64 © 2012 Jeffrey Fry FryGuy.Net RP/0/7/CPU0:R1(config-isis)#exit Now we need to configure an interface to advertise

Cisco IOS XR Training Page 65 © 2012 Jeffrey Fry FryGuy.Net Gateway of last resort is not set L 1.1.1.1/32 is directly connected, 02:26:47,

Cisco IOS XR Training Page 66 © 2012 Jeffrey Fry FryGuy.Net Hold time is 180, keepalive interval is 60 seconds Configured hold time: 180, kee

Cisco IOS XR Training Page 67 © 2012 Jeffrey Fry FryGuy.Net Here is the first difference with IOS XR – eBGP peers must have a Route-Policy (rout

Cisco IOS XR Training Page 68 © 2012 Jeffrey Fry FryGuy.Net ip prefix-list PASS seq 5 permit 0.0.0.0/0 le 32 route-map PASS permit 10 match ip

Cisco IOS XR Training Page 69 © 2012 Jeffrey Fry FryGuy.Net 19. Route Filtering Ok, now that BGP has been covered, lets talk about filtering rout

Cisco IOS XR Training Page 7 © 2012 Jeffrey Fry FryGuy.Net Notice that the hostname did not change? In IOS XR you need to COMMIT your changes in

Cisco IOS XR Training Page 70 © 2012 Jeffrey Fry FryGuy.Net Now that we have the policy committed with no errors, we can apply it to the neighbor

Cisco IOS XR Training Page 71 © 2012 Jeffrey Fry FryGuy.Net 20. VRF lite and Dot1Q Trunks Ok, time for some VRF lite basics and we can throw in

Cisco IOS XR Training Page 72 © 2012 Jeffrey Fry FryGuy.Net RP/0/7/CPU0:R1(config-subif)#comm Fri Mar 30 14:12:12.700 UTC RP/0/7/CPU0:R1(config-

Cisco IOS XR Training Page 73 © 2012 Jeffrey Fry FryGuy.Net Now we can check our config: RP/0/7/CPU0:R1(config-ospf-vrf)#show configuration Fri M

Cisco IOS XR Training Page 74 © 2012 Jeffrey Fry FryGuy.Net Cool, we have a route to R2’s Loop1000 of 222.222.222.222/32. Ping test time! RP/0/

Cisco IOS XR Training Page 75 © 2012 Jeffrey Fry FryGuy.Net 21. Basic MPLS - LDP Ok, time for some MPLS! For this lab I will be using the OSPF r

Cisco IOS XR Training Page 76 © 2012 Jeffrey Fry FryGuy.Net Now, lets check our interfaces and check for a neighbor. RP/0/7/CPU0:R1#sh mpls ldp i

Cisco IOS XR Training Page 77 © 2012 Jeffrey Fry FryGuy.Net Now here is something different than normal IOS, as soon as you enable authentication

Cisco IOS XR Training Page 78 © 2012 Jeffrey Fry FryGuy.Net ISIS Changing Metrics on an interface. To change a metric on an interface in IS-IS,

Cisco IOS XR Training Page 79 © 2012 Jeffrey Fry FryGuy.Net Passive Interfaces Now, typically in ISIS you make the loopback interface passive. T

Cisco IOS XR Training Page 8 © 2012 Jeffrey Fry FryGuy.Net 3. Basic Configuration Options Ok, we have seen the basic COMMIT option – but what ot

Cisco IOS XR Training Page 80 © 2012 Jeffrey Fry FryGuy.Net You may or may not have to clear the process; I did not and was able to catch this in

Cisco IOS XR Training Page 81 © 2012 Jeffrey Fry FryGuy.Net 22. MPLS VPN Next up is MPLS VPN; actually VPNv4 routes are what these actually are s

Cisco IOS XR Training Page 82 © 2012 Jeffrey Fry FryGuy.Net Now for the interface facing the PE (here f0/0) CE1(config-if)#int f0/0 CE1(config-if

Cisco IOS XR Training Page 83 © 2012 Jeffrey Fry FryGuy.Net Now it is time to get some IP addresses on PE1. We will use G0/1/0/11 for connection

Cisco IOS XR Training Page 84 © 2012 Jeffrey Fry FryGuy.Net And our IS Type RP/0/RSP0/CPU0:R1(config-isis)#is-type level-2 Set the loopback int

Cisco IOS XR Training Page 85 © 2012 Jeffrey Fry FryGuy.Net Cool, we have a Level2 route to 150.1.1.1 via R1. Now, lets PING to make sure. RP/0/

Cisco IOS XR Training Page 86 © 2012 Jeffrey Fry FryGuy.Net For this example, we will call our VRF R3R4 since we are connecting R3 (CE1) and R4

Cisco IOS XR Training Page 87 © 2012 Jeffrey Fry FryGuy.Net PE1: RP/0/RSP0/CPU0:R1#conf t Fri Apr 20 01:48:48.712 UTC Lets get to our interface,

Cisco IOS XR Training Page 88 © 2012 Jeffrey Fry FryGuy.Net There, that worked. Lets check R2 RP/0/RSP0/CPU0:R2#ping vrf R3R4 10.1.24.4 Fri Apr

Cisco IOS XR Training Page 89 © 2012 Jeffrey Fry FryGuy.Net Ok, PE2 done. Now we can check for OSPF neighbor in that VRF. To do that, we need to

Cisco IOS XR Training Page 9 © 2012 Jeffrey Fry FryGuy.Net Now, what if we want to make a change but we want to be sure we don’t lose connection

Cisco IOS XR Training Page 90 © 2012 Jeffrey Fry FryGuy.Net C 10.1.13.0/24 is directly connected, FastEthernet0/0 C 10.3.3.3/32 is di

Cisco IOS XR Training Page 91 © 2012 Jeffrey Fry FryGuy.Net Ok, now that that is done – we need to do the same thing on PE2 RP/0/RSP0/CPU0:R2(con

Cisco IOS XR Training Page 92 © 2012 Jeffrey Fry FryGuy.Net BGP table state: Active Table ID: 0x0 RD version: 3889240856 BGP main routing table

Cisco IOS XR Training Page 93 © 2012 Jeffrey Fry FryGuy.Net And on PE2: RP/0/RSP0/CPU0:R2(config)#router ospf R3R4 RP/0/RSP0/CPU0:R2(config-

Cisco IOS XR Training Page 94 © 2012 Jeffrey Fry FryGuy.Net RP/0/RSP0/CPU0:R2#sh bgp vpnv4 unicast vrf R3R4 10.1.13.0 Fri Apr 20 02:45:47.177

Cisco IOS XR Training Page 95 © 2012 Jeffrey Fry FryGuy.Net RP/0/RSP0/CPU0:R2(config)#router ospf R3R4 RP/0/RSP0/CPU0:R2(config-ospf)#vrf R3R4 N

Cisco IOS XR Training Page 96 © 2012 Jeffrey Fry FryGuy.Net 10.0.0.0/8 is variably subnetted, 4 subnets, 2 masks C 10.1.13.0/24 is di

Cisco IOS XR Training Page 97 © 2012 Jeffrey Fry FryGuy.Net 23. L2VPN Ok, now it is time for some L2VPN. Here we will use the same diagram as be

Cisco IOS XR Training Page 98 © 2012 Jeffrey Fry FryGuy.Net CE2(config-if)#ip add 10.1.34.4 255.255.255.0 CE2(config-if)#int l0 CE2(config-if)#ip

Cisco IOS XR Training Page 99 © 2012 Jeffrey Fry FryGuy.Net RP/0/RSP0/CPU0:PE2(config)#l2vpn RP/0/RSP0/CPU0:PE2(config-l2vpn)#xconnect group R3R