Aboutmyself

HelloRoute

NetworkGeekStuff"Thenetworkisvastandinfinite"MotokoKusanagi

CCIE Training - INE IT Training

MULTIHOMINGacompletestepbystepguide[DownloadeBook]

Search...

Search

CiscoIOSXRCompleteGettingStarted
ExamplesGuide,Part1/2
By
PeterHavrila
November1,2012Postedin:Cisco,Networking
Like 66

Tweet

10

Share

52

MostPopular

EverwantedquickreferenceforIOSXRinbasic
security,configurationcommitting,RIP,OSPF,EIGRP,ISIS,IPv6andcomparisonswithclassic
IOS?Itsrighthereforeyou.ThereisnotmuchtolearnaboutIOSXRfromanetworktheorypoint
ofview.Itisjustanothercommandlineonarouter,butasmanypeoplearegettingafraidoftouching
thisnewbeast,IhavedecidedtodomyselfareferencepointonallthebasicsoftheIOSXR.This
articleissupposedtobesummaryofsomeCCNAlevelconfigurationsonIOSXR.Forcreatingand
verifyingthisarticle,IhaveusedASR9000thatImanagedtogetaccesstoviaCiscopartnerlearning
program.
NOTE:ThisarticleexpectsyouhavesomegraspoftheoriginalIOSconfigurationandthisarticle
willgothroughtheIOSsimilaritiesanddifferences.Iwillnotexplainalldetailsofnetworktheories
behindprotocolsorIPv4/IPv6routing.Butsomebasicsummarywillbegivenifyouneedto
rememberthingslikeISIS.
Contents[hide]
IOSvs.IOSXEvs.IOSXR?
WhatrouterisrunningwhatIOS?
IOSXRCommandLineAccessandConfigurationPrinciples
Loginandaccessprivileges
ConfigurationEditingandCommittingonIOSXR
ConfigurationManagementandCommitsHistory
ExclusiveConfigurationSessions
BasicIOSXRroutingprotocolconfigurationexamples
1.StaticRoutesConfiguration
2.RIPv2(IPv4)configurationonIOSandIOSXR
3.EIGRPonIOSXR
AutoSummarization
IPv6supportinEIGRP
EIGRPEqualandUnequalCostLoadBalancing
EIGRPIOSXRAuthentication
4.OSPFandOSPFv3onIOSXRconfigurationexample
AddinginterfacestoOSPFinIOS,IOSXEandIOSXDcomparison
ConfigurationexampleofIOSXRwithIPv4network
ConfigurationexampleofIOSXRwithIPv6network
VerificationonIOSXR
OSPFv2andOSPFv3AuthenticationonIOSXRandIOS
5.ISISBasicsonIOSXR
CLNSAddresses
ISISMetric
ISISConfigurationexampleforIOSandIOSXR
ISISLoadBalancing
ISISAuthentication
BasicIOSXRroutersecurity,UserGroupsandTaskGroups
TaskGroupsandUserGroups

IOSvs.
IOSXEvs.
IOSXR?
OK,IknownowI
havemaybekilled
someofyouwith
confusionthat
thereareactually
threedifference
types.Thepoint
hereisevolution.
IOSXEis
evolutionofthe
originalIOSand
hasnearlyexactly
thesamesyntax
asoriginalIOS.
IOSXEwasbuild
toprovidebetter
highavailability
andrapidfeature
deliveryutilizing
theexisting
worldwide
knowledgeofthe
IOSCommand
LineInterface
(CLI).In

CiscoBGPTimersreExplained
CiscoIOSXRComplete
GettingStartedExamplesGuide,
Part1/2
[minipost]MikrotikQoS
PrioritizationExample
RedundantCiscoACELoad
BalancerDesignConfiguration
Example
RecentArticles

HPEsDCN/NuageSDNPart
2FirstStepsCreating
Virtual/OverlayCustomer
NetworkSeptember23,2016
HPEsDCN/NuageSDNPart
1IntroductionandLAB
InstallationTutorialAugust1,
2016
TutorialforsmallHadoopcloud
clusterLABusingvirtual
machinesandcompiling/running
firstHelloWorldMapReduce
exampleprojectJune12,2016
Pingonyou!Beta2.0isonline
June4,2016
[minipost]QuickLAB/config
exampleforIPv6BGPbetween
HPNetworkingComwarev5
andCiscoJune2,2016
PingonYou!smallweekend
web/CGIprojectMarch28,2016
[minipost]Windowspartition
editingwithdiskpartMarch28,
2016
CheckpointFirewallCLItool
dbeditandquicklabexamples
February27,2016
SovietMi24VHindE,1/72scale
June6,2015
Tutorialforcreatingfirstexternal
SDNapplicationforHPSDN
VANcontrollerPart3/3:Node
CutterSDNapplicationinperl
withwebinterfaceMay24,2015
Tutorialforcreatingfirstexternal
SDNapplicationforHPSDN
VANcontrollerPart2/3:

ConfigurationExampleofTaskGroups,TasksandUsersinUserGroups
ConfiguringAAA,RADIUSandTACACS+
ConfiguringSyslogandSNMPlogging
Suspending,Resuming,andclosingaTelnetsessions.
CiscoDiscoveryProtocolonIOSXR
NetFlowIOSXRconfiguration
Summary

summarytheIOS
XEisan
improvedversion
ofIOSinternally,
butdoesntmean
muchforbasic
configuration.

IOSXRhowever
iscompletelybuildfromscratchonamicrokernelarchitecture,memoryprotectedandpreemptive
multitasking.IOSXRhaveadvantagesovertheoriginalIOSandIOSXEin:
Improvedhighavailabilitylargelythroughsupportforhardwareredundancyandfault
containmentmethodssuchasprotectedmemoryspace.Alsoprocessesareselfrestartable.
BetterScalabilityforlargehardwareconfigurationsadistributedsoftwareinfrastructureand
twostageforwardingarchitectureisavailable
Packagebasedsoftwaredistributionmodelthisallowforinstalling/removingrouterfeatures
likemulticast/MPLStobeaddedwhilerouterisrunningandwithnodowntime.Alsopatches
canbeinstalledwithoutoutage(potentially).
AlsowebbasedGUIforsystemmanagement(supportforXMLconfigurationautomation)

WhatrouterisrunningwhatIOS?
IOSCiscoISRSeriesRouters(800,1900,2900,3900series),Cisco7200and7600Seriesand
alllegacyroutersandCatalysts6500
IOSXEASR1000SeriesandCatalyst4500ESeriesSwitches
IOSXRCiscoCRS1andCRS3,CiscoASR9000andCiscoXR12000

IOSXRCommandLineAccessandConfigurationPrinciples
Alongwiththebasicaccesstophysicalconsoleandauxiliaryport,IOSXRcomeswithdedicated
physicalmanagementinterfaces.OnASR9000theseare:
interfaceMgntEth0/RSP0/CPU0/0
interfaceMgntEth0/RSP0/CPU0/1

IfyouwantIPmanagementaccesstotherouter,youneedtoconfiguretheseinterfaceswithIPsfrom
themanagementsubnet.EitherphysicalorvirtualIPssupported.
Additionally,theIOSXRpromptonASR9000hasthefollowingstructureoftheprompt:
RP/0/RSP0/CPU0:PE1#
RProuteprocessor
0forsinglerackchassis
RSP0RouteSwitchProcessor(eitherRSP0orRSP1)
CPU0shouldalwaysbethesameonASR9000
PE1therouterhostname

Loginandaccessprivileges
IntheinitialIOSXRconfigurationanrootsystemuserusernameandpasswordiscreated.This
useristheonlycapableofcreatingotherusersintheIOSXRsystem.Youcanthinkofthisoneas
rootonlinux.
FurthermoretheIOSXRhasabuildinconceptofusersandtaskgroups.Theconceptofusergroup,
taskgroupandinheritanceisimportantofunderstandingpermissions.
Inthefollowingdiagram,Ihopetogiveyoutheideaofconfigurationinataskgroupand
configurationasrootsystemusersorAdmin.

InfluencingFlowsviacURL
commandsMay23,2015
Tutorialforcreatingfirstexternal
SDNapplicationforHPSDN
VANcontrollerPart1/3:LAB
creationandRESTAPI
introductionMay22,2015
Tutorial:Emailserverforasmall
companyincludingIMAPfor
mobiles,SPFandDKIMMay19,
2015
Eycalyptuscloudintroduction
andautoscalingtutorialFebruary
2,2015
IntroductionandLABtutorialof
HPHelionCommunityEdition,
theOpenStackbasedcloud
systemthatcangiveyoua
personalcloud!June10,2014
[minipost]Mikrotik/RouterBoard
portknockingexamplefor
firewall/NATopeningsJune9,
2014
[minipost]HowtofixMySQL
losttabledescriptionfrom.frm
filesafteremergencymigrationof
/var/lib/mysqlJune3,2014
SlovakAirForceMiG29with
2008DigitalCamoflage,1/48
March4,2014
PlayingwiththenewHPSDN
Controllerincludinggetting
startedguidewithOpenvSwitch
inGNS3January1,2014
Nexus7kGettingStarted
ExamplesPart1(basics,VDC
andvPC)December19,2013
[minipost]Createaloopback
harddrivepartitioninsideafilein
linuxDecember18,2013
ArmA2CWR2mod:Winter
Kolgujev+MaldenDomination
withXmasextrasDecember18,
2013
BeagleBoneBlackreplaced
RaspberryPIrunning
networkgeekstuff.com(and
performancereasonsreview)
November19,2013
RevellF104GStarfighter1/48
November1,2013
RevellLEOPARD2A6tank
model1:72September26,2013
ArmA2Dominationcoopwith
all@DLCsonSMDorCAA1
SahraniSeptember10,2013
HowtocreatecustomLinuxWi
Firegulatorydatabasetounlock
30db/1000mWSeptember10,
2013
[minipost]Mikrotikscripting:
MonitoringinterfaceIPfor
changesAugust15,2013
PlayingwithotherpeopleWiFi
part2:WPS,thebackdoorto
WPAJuly23,2013
PlayingwithotherpeopleWiFi
part1:ThegoodoldWEPJuly
17,2013
Archives

Basedonthecommandline,youareabletoidentifywhereyouareintheIOSXRcommandprompt.
EXEC
RP/0/RPS0/CPU0:router#

Globalconfig
RP/0/RPS0/CPU0:router#configure
RP/0/RPS0/CPU0:router(config)#

Interfaceandsubinterfacemode
RP/0/RPS0/CPU0:router(config)#interfacepos0/2/0/0
RP/0/RPS0/CPU0:router(configif)#

Protocolandsubmodeconfig
RP/0/RPS0/CPU0:router(config)#routerbgp2524
RP/0/RPS0/CPU0:router(configbgp)#addressfamilyipv4
RP/0/RPS0/CPU0:router(configbgpaf)#

September2016(1)
August2016(1)
June2016(3)
March2016(2)
February2016(1)
June2015(1)
May2015(4)
February2015(1)
June2014(3)
March2014(1)
January2014(1)
December2013(3)
November2013(2)
September2013(3)
August2013(1)
July2013(2)
May2013(1)
April2013(1)
February2013(1)
January2013(2)
December2012(4)
November2012(3)
October2012(5)

Admin
RP/0/RPS0/CPU0:router#admin
RP/0/RPS0/CPU0:router(admin)#

Adminconfig
RP/0/RPS0/CPU0:router(admin)#configure
RP/0/RPS0/CPU0:router(adminconfig)#

TIP:Youdonothavetoalwaysgotoadminmodetogetadmincommandsoutput.Youcando
admin<XY>commandalsoinEXECmodetogetacommandthatisavailableinadminmode
only.Forexamplesomecommandhavedifferentoutputsdependingwhereyouarelikeshow
platform,ifyouwantadminversionofthiscommand,youcanuseadminshowplatform.

ConfigurationEditingandCommittingonIOSXR
Letsstartbluntly,thereisnoconceptofstartupconfigandrunningconfigonIOSXR.Thenewway
todothingsisviaatwostepconfigurationmethod.
Inthefirststageyoumakeacollectionofchangestothecurrentconfiguration.Youcancheckyou
changesforcorrectionsinthesystem.Personallythisisthesameasmanyofusdoingchangesina
notepadorothertxteditorbeforegoingtotheroutertoapplyit.Thisisabitthesamethingexcept
directlysupportedbytheIOSXR.
Inthesecondstage,youcancommittheconfigurationtothetargetconfiguration.Commitisallor
nothingacceptanceofyourchanges.Ifevenoneofyourpreparedcommandsisnotcorrect,the
wholeconfigurationchangeswillnotbeapplied.Youcanseeyourconfigurationchangeswith
showconfig.
Therearesomeothermethodsofapplyingthecommitcommandtotherouter,asIdonotwanttogo
todetailsaquicklooktothecommit?shouldbeenough.
RP/0/RSP0/CPU0:PE(config)#commit?
besteffortCommittheconfigurationchangesviabesteffortoperation
commentAssignacommenttothiscommit
confirmedRollbackthiscommitunlessthereisaconfirmingcommit
forceOverridethememorychecks
labelAssignalabeltothiscommit
replaceReplacethecontentsofrunningconfiguration
saverunningSaverunningconfigurationtoafile
<cr>Committheconfigurationchangesviapseudoatomicoperation

TIP:Toerasecurrentstartupconfigurationyoucanusecommitreplacewithemptyconfiguration
changes.
TIP:Toloadorsaveconfigurationfromortoafile,usetheloadorsavecommands.
Basiccommittingcommandssummary:
showconfigShowuncommittedconfiguration
showconfigmergeShowfutureconfigurationexpectedaftercommit
showconfigchangesShowfutureconfigurationifcommitreplaceused
commitbesteffortCommitallconfigurationthatcanbecommitted(thiswillnegatetheall
ornothinglogic).
commitconfirmedsecondsCommitforthedurationofthetimes(unlesscommittedbefore
timerelapses)
commitlabelcommitsandaddsadescriptionofthechangestothehistory
commitcommentaddsacommenttothecommittedhistoryentry
showconfigurationfailedIfyourcommittedchangesgenerateanderrorandrevertback,
youcanseewhatwentwronginthisoutput.

ConfigurationManagementandCommitsHistory
Wheneveracommitchangeisappliedtheconfigurationbotholdandnewismaintainedinthe
configurationhistory.Thisisgreatbecauseiftherearetroubles,youcanrevertbackXnumberof
commits.EachcommitisgivenauniqueIDknownascommitIDtowhatyoucanrollbackto.
ToseetheconfigurationhistoryonIOSXR,issuetheshowconfigurationhistoryasonexample
below.
RP/0/RP1/CPU0:CRS#showconfigurationhistory
ThrOct1811:37:20.623CEDT
Sno.EventInfoTimeStamp
~~~~~~~~~~~~~~~~~~~~~~~
1commitid1000001848ThrOct1809:22:192012
2commitid1000001349ThrOct1809:24:382012
3commitid1000001950ThrOct1809:15:272012
4commitid1000002051ThrOct1809:05:492012
5backupPeriodicASCIIbackupThrOct1809:06:362012
6shutdownsyncforpotentialshutdownThrOct1809:29:572012

Youcanthenrollbackusingtherollbackconfigurationeitherusingrelativemovementwith
rollbackconfigurationlast2ortoaexactcommitnumberwithrollbackconfigurationto4.
Thesystemautomaticallychecksforfeatureincompatibilitysoifyouwanttorevertbacktoa
configurationthathascommandsnotsupportedbycurrentIOSXRpackage,yougetanerrorandthe
operationwillfail.
ExclusiveConfigurationSessions
Someofyoumighthavenowgettheideaandrealizethatthereisapotentialfortwouserscollisions
whentwousersstarttoedittheconfigurationchanges.Toavoidconfigurationcollisionsonthe
configuration,youcanenterconfigurationnotwiththenormalconfigure[terminal]butinstead
withtheconfigureexclusivecommandyouenteredanexclusivemodeandyoulockedoutall
otherusersfromenteringanyconfigurationatall.
Ifsomeoneelsehasenteredthismodeandispreventingyoufromdoingchanges,youcanfindout
whoiscurrentlyholdingtheexclusivesessionbyusingshowconfigurationlockandshow
configurationsessions.
RP/0/RSP0/CPU0:PE1#showconfigurationlock

August2012(1)
July2012(2)
June2012(1)
May2012(8)
March2012(2)
January2012(3)
December2011(6)
November2011(1)
July2011(1)
January2011(3)

RP/0/RSP0/CPU0:PE1#showconfigurationlock
TueJun2811:22:10.449UTC
SessionWriteLock
000002120024548900000000
RP/0/RSP0/CPU0:PE1#showconfigurationsessions
TueJun2811:23:13.269UTC
CurrentConfigurationSessionLineUserDate
Lock
000002120024548900000000vty0adminThrOct1811:40:202012*

NOTE:Enteringconfigurationmodeispossiblewhilesomeoneelseishavinganexclusivesession,
butuntiltheexclusivelockisreleasednobodyelsecancommittheirchanges.

BasicIOSXRroutingprotocolconfigurationexamples
PleasenotethattheIOSXRbydefaultusestheVirtualRoutingandForwarding(VRF)andassuch
thesebasicexamplesapplytothedefaultVRFinwhichallroutingisbydefault.

1.StaticRoutesConfiguration
InterestingtonotehereisthatinIOSXRalsostaticroutesarebehindtheroutersubsectioncalled
routerstatic.Thefollowingexamplewillconfigureastaticroutetothe10.1.10.0/24networkwith
192.168.101.11asnexthop.ThetopologytowhichIwillbeaddingthestaticrouteslookslikethis:

BasictopologywithASR9000andIOSrouterforSTATICROUTES

ConfigurationofthestaticroutesontheASR9000isasfollowsforexactstaticroute.
routerstatic
addressfamilyipv4unicast
10.1.10.0/24192.168.101.11

Thisisfordefaultrouteexamplewhichisthesameasstaticrouteusing0.0.0.0/0asdestination.
routerstatic
addressfamilyipv4unicast
0.0.0.0/0192.168.101.11

Aswithanyrouting,youcanhavealookifyourroutesareworkingbylookingattheroutingtable
withshowroute.
RP/0/RSP0/CPU0:PE1#showroute
<omitted>
Gatewayoflastresortis192.168.101.10tonetwork0.0.0.0
S*0.0.0.0/0[1/0]via192.168.101.10
L10.1.1.1/32isdirectlyconnected,19:09:10,Loopback0
S10.1.10.0/24[1/0]via192.168.101.11,00:03:08
C192.168.101.0/24isdirectlyconnected,16:52:13,GigabitEthernet0/0/0/0
L192.168.101.10/32isdirectlyconnected,16:52:13,GigabitEthernet0/0/0/0

2.RIPv2(IPv4)configurationonIOSandIOSXR
InthefollowingexamplewestartthebasicRIPv2(IPv4)ontwointerfacesofIOSXRrouterand
IOSrouterconfiguredwiththewellknownRIPv2configuration.Thefollowingpictureshowsthe
topologyIwillbeusingandtheIOSrouterneighborRIPv2configuration.

BasictopologywithASR9000andIOSrouterforRIPv2routing
ThefollowingconfigurationcanbeappliedtotheASR9000routertoenableRIPv2onthetwo
interfacesandstartreceivingandannouncingroutes.
routerrip
interfaceloopback0
!
interfaceGigabitEthernet0/0/0/0

NOTE:OnIOSXRtheRIPversion2isenabledbydefault.
VerificationofRIPworkingonIOSXRissimpleandwejustwilllookifwearegettingthe
10.1.10.0/24networkfromtheIOSRouterneighbor.
RP/0/RSP0/CPU0:IOSXRRouter#showrouterip
FriApr1423:22:08.242UTC

FriApr1423:22:08.242UTC
R10.1.10.0/24[120/1]via192.168.101.11,00:05:50,GigabitEthernet0/0/0/0

AlsoontheothersideyoucanverifythattheIOSRouterisgettingthe10.1.1.0/24routefromthe
IOSXRRouter.
IOSRouter#showiprouterip
<omitted>
10.0.0.0/8isvariablysubnetted,3subnets,2masks
R10.1.1.0/24[120/1]via192.168.101.10,00:00:19,GigabitEthernet0/0

ToseetheRIPv2basicconfigurationincludingtimers,youcanentertheshowripcommand.
RP/0/RSP0/CPU0:PE1#showrip
SatApr1500:45:13.259UTC
RIPconfig:
Active:Yes
Addedtosocket:Yes
Outofmemorystate:Normal
Version:2
Defaultmetric:Notset
Maximumpaths:4
Autosummarize:No
BroadcastforV2:No
Packetsourcevalidation:Yes
NSF:Disabled
Timers:Update:30seconds(26secondsuntilnextupdate)
Invalid:180seconds
Holddown:180seconds
Flush:240seconds

Toalsoseeinterfacesassociatedwithinterfacesshowprotocolsripdefaultcontext
RP/0/RSP0/CPU0:PE1#showprotocolsripdefaultcontext
SatApr1500:50:54.530UTC
RoutingProtocolRIP
VRFdefaultisActive
2interfacesconfigured,2active
4routes,3pathsallocated
Timers:Update30s(nextin27s),Invalid180s,Holddown180s,Flush240s
OOMstateis"Normal"
InterfaceActiveIPAddressStateSendRecvNbrs
GigabitEthernet0_0_0_0Active192.168.101.10/24Up221
Loopback0Active10.1.1.1/24Up220

3.EIGRPonIOSXR
LetsrecreatethescenariofromtheRIPv2,thistimeweconfiguretheIOSrouterwithEIGRPwith
AutonomousSystemnumber100.AndwemovetoconfiguretheIOSXRwithEIGRPinthedefault
ipv4addressfamilywiththefollowingconfigurationsyntax:
routereigrp100
addressfamilyipv4
interfaceLoopback0
!
interfaceGigabitEthernet0/0/0/0

Thewholetopologyandconfigurationshouldlooklikethis.

BasictopologywithASR9000andIOSrouterforEIGRProuting
OntheCiscoIOSXRrouteryouneedtomanuallyenableadjactancyneighbourlogsinconsoleto
seetheneighborIOSroutercommingupinEIGRP,todothisyoucanusethefollowing
configurationusingthelogneighborchanges.
routereigrp100
addressfamilyipv4
logneighborchanges

YouwillseethisoutputontheCiscoIOSXRrouterwhenEIGRPadjacencycomesup:
RP/0/RSP0/CPU0:Oct18:11:43.139:eigrp[1022]:%ROUTINGEIGRP
5NBRCHANGE:defaultv4100:Neighbor192.168.101.11
(GigabitEthernet0/0/0/0)isup:newadjacency

TheCiscoIOSandIOSXEshowiprouteeigrpandCiscoIOSXRshowrouteeigrp
commandsdisplaythecurrentEIGRPentriesintheroutingtable.
AutoSummarization
OlderIOSroutershadautosummarizationenabledbydefault(before12.2(33)).NewIOSversion
haveitdisabledbydefault.ThisisalsodisabledbydefaultonallIOSXR.
Toenableautosummarization,youcangoundertheaddressfamilyandissueautosummary
command.
routereigrp100
addressfamilyipv4

addressfamilyipv4
autosummary

Verificationifautosummaryisenabledordisabledcanbegainedfromtheshowprotocolseigrp.
Examplebelow.
RP/0/RSP0/CPU0:PE1#showprotocolseigrp
TueOct1911:57:00.240UTC
RoutingProtocol:EIGRP,instance100
DefaultcontextAS:100,RouterID:10.1.1.1
AddressFamily:IPv4
Autosummarization,Loggingneighborchanges
Defaultnetworksnotflaggedinoutgoingupdates
Defaultnetworksnotacceptedfromincomingupdates
Distance:internal90,external170
Maximumpaths:4
EIGRPmetricweightK1=1,K2=0,K3=1,K4=0,K5=0
EIGRPmaximumhopcount100
EIGRPmaximummetricvariance1
EIGRPNSF:enabled
NSFawarerouteholdtimeris240s
NSFsignaltimeris20s
NSFconvergetimeris120s
Timesincelastrestartis01:18:20
SIAActivetimeris180s
Interfaces:
GigabitEthernet0/0/0/0
Loopback0

IPv6supportinEIGRP
EIGRPisamodularprotocolthatcansupportmultipledifferentroutedprotocolsincludingIPv6.
Configurationisstraightforward,thesecommandswillbedoneonourIOSXRtoconfigureEIGRP
tosupportIPv6.
interfaceLoopback0
ipv6enable
!
interfaceGigabitEthernet0/0/0/0
ipv6enable
!
routereigrp100
addressfamilyipv6
logneighborchanges
interfaceLoopback0
!
interfaceGigabitEthernet0/0/0/0

FinalconfigurationincludingtheIOSneighborcanbeseenonthepicturebelow.

BasictopologywithASR9000andIOSrouterforEIGRPIPv6routing
Verificationcanbedonequicklywiththefollowingcommands:
showeigrp100ipv6neighbors
RP/0/RSP0/CPU0:PE1#showeigrp100ipv6neighbors
IPv6EIGRPneighborsforAS(100)vrfdefault
HAddressInterfaceHoldUptimeSRTTRTOQSeq
(sec)(ms)CntNum
0LinkLocalAddress:Gi0/0/0/01100:06:36230006
fe80::eab7:48ff:fe2c:a180
showeigrp100ipv6interfaces
RP/0/RSP0/CPU0:PE1#showeigrp100ipv6interfaces
IPv6EIGRPinterfacesforAS(100)
XmitQueueMeanPacingTimeMulticastPending
InterfacePeersUn/ReliableSRTTUn/ReliableFlowTimerRoutes
Gi0/0/0/010/020/1000
Lo000/000/1000
showeigrp100ipv6topology
RP/0/RSP0/CPU0:PE1#showeigrp100ipv6topology
IPv6EIGRPTopologyTableforAS(100)/ID(10.1.1.1)
Codes:PPassive,AActive,UUpdate,QQuery,RReply,
rreplyStatus,ssiaStatus
P2001:db8:10:1:1::/80,1successors,FDis128256
viaConnected,Loopback0
P2001:db8:10:1:10::/80,1successors,FDis153856
viafe80::eab7:48ff:fe2c:a180(153856/128256),GigabitEthernet0/0/0/0

EIGRPEqualandUnequalCostLoadBalancing
AsweallknowfromourCCNAcourses,EIGRPdoesequalcostloadbalancingalongbydefault4
pathsthatarevalid.

OnIOSXRyoucangetupto32maximumpathsloadbalancingdonewiththemaximumpath
parametersunderEIGRP.Example:
routereigrp100
addressfamilyipv4
maximumpaths32

EIGRPalsosupportunequalloadbalancingthankstotheadvancedmetricthatcanavoidloops
thankstothefeasiblebackupcondition(AdvertisedDistance<FeasibleDistance).Toactivatethis
feature,usethevariancemodification.Configuration:
routereigrp100
addressfamilyipv4
variance2

NOTE:Varianceisavaluefrom1to128(defaultis1)thatisamultiplierofthebestpathmetricto
selectunequalpaths.Toselectanotherroutewithworsemetricasaunequalloadbalancecandidate,
itsfeasiblemetrichavetobelowerthanthebestroutemultipliedwiththevariance.Alsoinaddition,
theFeasibilityconditionhavetobemet(theAdvertizedDistanceoftheroutecandidatehavetobe
lowerthanthecurrentbestrouteFeasibleDistance).
ForexamplewehaveaprimaryroutewithFD=500andAD=300.Andwehavetwootherroutesto
thesamedestination.Route1withFD=600andAD=400andRoute2withFD=550andAD=
520.
Wechangemultipliervarianceto2.Sothecandidatesforunequalloadbalancinghavetohavecost
lessthanFD=500*2=1000.BothRoute1andRoute2arevalidinthisperspective.However,only
Route1isselectedasitalsoisvalidforthefeasibilitycondition.Route2isinvalidforload
balancingbecauseRoute2AD=520ishigherthanbestrouteFD=500.Thisprotectsfromloopsin
theloadbalancing.
EIGRPIOSXRAuthentication
ForbothIPv4configurationandIPv6configuration,createfirstakeychangewithkeys:
keychain<name>
key1
keystring<key1>
key2
keystring<key2>

ThenyoucanapplytheauthenticationwithkeychaintoeitherIPv4:
routereigrp100
addressfamilyipv4
interfaceGigabitEthernet0/0/0/0
authenticationkeychainPE1chain

OrtoIPv6addressfamily
routereigrp100
addressfamilyipv6
interfaceGigabitEthernet0/0/0/0
authenticationkeychainPE1chain

NOTE:BecauseCiscoIOSXRsupportsonlyMD5authentication,thereisnoneedtodefine
authenticationmode.

4.OSPFandOSPFv3onIOSXRconfigurationexample
FirstofallIwouldliketopointtoexcellentCiscoOSPFonIOSXRdocumentationthatcanbe
foundhere.Soforanythingyoudonotfindhere,gotothatlink.
AsthisarticleisnotintendedtoexplaineverythinginregardstoOSPF,butsomesuperquickIOS
XRlogicwithOSPFwillbepresentedandwillbefollowedimmediatelywithIPv4OSPFexample
configurationforIOSXRandIPv6OSPFexample.
First,onIOSXR,bothOSPFv2(IPv4)andOSPFv3(IPv6)areimplemented.OSPFv2uses224.0.0.5
formulticasthellopacketsandOSPFv3usesFF02::5forhellopackets.Bothversionsuse32bit
routerID(onciscorepresentedinIPv4formatforbetterreadabilityalsoinIPv6environment).
NOTE:InIPv6environmentyouhavetomanuallyenterrouterIDasx.x.x.xtohaverouterID
createdifnoIPv4interfacesexistontherouter.
AddinginterfacestoOSPFinIOS,IOSXEandIOSXDcomparison
CiscoIOSXR:Specifyinterfaceunderrouterconfigurationmode
IOSandIOSXE(IPv4only):Specifynetworkunderrouterconfigurationmode
IOSandIOSXE:SpecifyOSPFprocessunderinterfaceconfigurationmode
ConfigurationexampleofIOSXRwithIPv4network

BasictopologywithASR9000andIOSrouterforOSPFv2routing

Explanation,isthatonIOSrouterwithIPv4,yougotheusualwaybydefiningthenetworksandarea
withthenetworkcommand.Thiscommandspecifiesbothnetworksandinterfacestobeusedby
theospfprocess.
routerospf1
network10.1.10.00.0.0.255area0
network192.168.101.00.0.0.255area0

OnIOSXR,theconfigurationisusedinamoretopologicalway.OnIOSXR,youdefinedirectly
theinterfacesthatshouldworkwithOSPFv2.
routerospf1
routerid192.168.4.3
area0
interfaceLoopback0
interfaceGigabitEthernet0/0/0/0
logadjacencychangesdetailenable

NOTE:OnIOSXR,theneighborsstatesarenotloggedasyouaremaybeusedtoonIOS,toactivate
thisusethelogadjacencychangesdetailenablecommand.
ConfigurationexampleofIOSXRwithIPv6network

BasicIPv6topologywithASR9000andIOSrouterforOSPFv3routing
AgainexplanationisthatonIOS,theIPv6routingprotocolsareconfigureddirectlyunderinterfaces
(withcommonconfigurationunderipv6routerospf1.Pleasenotethatifyouhavecompletely
IPv6environment,ergonointerfacehasIPv4address,thenyouneedtomanuallyconfigurethe
routerid.
ipv6unicastrouting
!
ipv6routerospf1
routerid192.168.4.3
!
interfaceLoopback0
ipv6ospf1area0
!
interfaceGigabiteEthernet0/0/0/0
ipv6ospf1area0

OnIOSXR,thisisnicethattheconfigurationisextremelyidenticalexceptthatyoumustusethe
ospfv3keyword.
routerospfv31
routerid192.168.4.3
area0
interfaceLoopback0
interfaceGigabitEthernet0/0/0/0
logadjacencychangesdetailenable

VerificationonIOSXR
YoucandoshowprotocolsonIOSXRasanalternativeforIOSshowipprotocols.
RP/0/RSP0/CPU0:P2#showprotocols
RoutingProtocolOSPF1
RouterId:192.168.4.2
Distance:110
NonStopForwarding:Disabled
Redistribution:
None
Area0
Loopback0
GigabitEthernet0/0/0/0

IfyouwanttocheckifyourOSPFhavefoundanyneighborsalready,havealooktoshowospf
neighborsforIPv4OSPFv2orshowospfv3neighborsforIPv6OSPFv3neighbors.
RP/0/RSP0/CPU0:PE1#showospfneighbor
NeighborsforOSPF1
NeighborIDPriStateDeadTimeAddressInterface
192.168.4.21FULL/BDR00:00:36192.168.101.1GigabitEthernet0/0/0/0
Neighborisupfor05:54:11
Totalneighborcount:1

RP/0/RSP0/CPU0:PE1#showospfv3neighbor
TueOct1911:58:00.240UTC
NeighborsforOSPFv31
NeighborIDPriStateDeadTimeInterfaceIDInterface
192.168.4.21FULL/DR00:00:337GigabitEthernet0/0/0/0
Neighborisupfor00:45:41

Thesamelogicappliestoverificationofroutingtables,youcanuseshowrouteforIPv4routing
andshowrouteipv6forIPv6routing.
OSPFequalcostloadbalancing
OnIOSyouknowthatOSFPmanagesbydefaultequalcostloadbalancingofmaximum4pathsby
defaut,andby8istheconfigurablelimit.OnIOSXR,theloadbalancingmaximumis32paths,but
dependingontheplatform,itcanbereduced:
ASR9000hasbydefaut8,whilemaximumconfiguratbleisalso8
ASR12000hasbydefault16andmaximumconfigurableisalso16
CSR1hasbydefault32andmaximumconfigurableisalso32
OSPFv2andOSPFv3AuthenticationonIOSXRandIOS
ThereisabigdifferencebetweenOSPFv2(IPv4)versionandOSPFv3(IPv6)versionbynature.
OSPFv2usesplaintextorMD5hasthatisinternallycalculatedandaddedforeveryOSPFpacket
andcheckedinternallyinOSPFprocess.
OnIOSXR,theOSPFv2securitycanbeconfiguredindifferentplaces.Itcanbeconfiguredunder
routingprocess,underareaconfigurationorunderinterface.Thelowestconfigurationisusedinthe
hierarchyprocess>area>interface.Iflowerconfigurationdoesntexist,itinheritsconfiguration
fromabove.
Example:
routerospf1
area0
interfaceGigabitEthernet0/0/0/0
authenticationmessagedigest
messagedigestkey1md5networkgeekstuffRulez

OnIOS,theconfigurationofOSPFv2wasdoneeitherinareaorinterfaceconfigurationandthe
samehierarchylogicapplied,howeverthekeycouldonlybeconfiguredunderinterface.
Example:
interfaceFastEthernet0/0
ipospfauthenticationmessagedigest
ipospfmessagedigestkey1md5networkgeekstuffRulez

OSPFv3reliesonIPv6nativesecurityviaIPSecurity(IPSec).Forthisyouneedthekey,butalso
somethingcalledSPI(SecurityParameterIndex).SPIissomethinglikeaportnumberforIPSec
packetsbecauseinIPSec,theAHorESPheadergoesdirectlybehindIPv6headerandTCP/UDP
portsarenotknown.WhenyouspecifySPIyouaretellingyourrouterwhatSPIpacketstocheckfor
OSPF,otherwiseitwouldhavetocheckallIPSecpacketshegets.
OnIOSXRtheOSPFv3authenticationandencryptioncanbeconfiguredatthesamelevelsas
OSPFv2.
Example:
routerospfv31
area0
interfaceGigabitEthernet0/0/0/0
authenticationipsecspi256sha1networkgeekstuffRulez

OnIOStheauthenticationofOSPFv3canbeonlyconfiguredunderareaconfiguration.
Example:
interfaceFastEthernet0/0
ipv6ospfauthenticationipsecspi256sha1networkgeekstuffRulez

5.ISISBasicsonIOSXR
IntermediateSystemtoIntermediateSystems(ISIS)isagreatprotocol,myfavoriteactually.In
summarytoitstheory,itisalinkstateprotocol(likeOSPF)anditusesdijkstraforpathcalculation.
Whatisinterestingaboutitisthatinrunsoverastandaloneroutedprotocolwithitsownaddressing
calledConnectionlessNetworkService(CLNS).Soyouwillnotseepacketsofthisprotocoluseany
formofIPv4/IPv6.Ithasitsown.Thismakesthisprotocolseasilyextendableandnowsupportsboth
IPv4andIPv6easily.
Alsofromarchitecturepointofview,italsousestwolayerscalledLevel1andLevel2.Level2is
somethinglikeadistributedbackboneandLayer1islikeanareainOSPF,ithostsallothernoncore
subnets.Thisconceptthenalsomovestorouterspositionwithingthehierarchy,unlikeOSPFwhere
borderswhereplaceonrouters(oneinterfaceinareaxandanotherinareay),inISISthebordersare
onlinks.
ThiscreatesforusroutersthatcanbedesignatedbasedontheirpositionintheLevel1Level2
hierarchyasfollows:
Level1routerslearnaboutpathswithingtheareathattheyconnectto(thatisintraarea)
Level2routersareroutespropagatingpathsbetweenareas(thatis,interarea)
Level12routersthathavepathsbothinterareaandintraarea.
Thefollowingdiagramshouldmakeyouunderstandquicklytheprinciples:

ISISLevel1Level2architecturehierarchy
NOTE:Asboundariesareonlinks,eachISISrouterbelongstoexactlyonearea.
CLNSAddresses
Ok,Ipromisednotheorybutthispieceisimportant.ISISrequirestheuseofCLNSaddressingto
communicatebetweenrouters,thereforeitisnecessarytounderstandthemalittle.Themost
commonformatforCLNSaddressesiscalledNSAPandisasfollows:
First2bytessetto49>identifiesprivateaddressesinsideCLNS(like10.0.0.0/8inIPv4)
4bytesconsideredAreaID>yougivenumericalIDoftheISISareanumberhere
6bytesconsideredSystemID>mostoftenpeopleputheretheIPv4addresstohavelinkto
theIPv4addressofaroutereasilyrecognizable
NSEL(2bytes)>thisisCLNSintegratedalternativetoTCP/UDPports.Normally.00
meansthesystemmanagementplaneandiscalledNETaddress
Example:
49.0001.1921.6800.1001.00
ISISMetric
ThereisabsolutelynometriccalculationforalinkinISIS,everylinkisbydefaultofmetric10.If
youwantsomethingelse,youwillconfigureitmanually.ThisisactuallyverygoodformostISP
networks.Bydefaultthemetricis6bitvalueforinterfacemetricand10bitvalueforcompletepath
metric(callednarrowstyle).Optionallyyoucanswitchto24bitinterfacemetricand32bitpath
metriccalled(widestyle).
ISISConfigurationexampleforIOSandIOSXR
Followingthetopologyusedinallexamples,hereisbothIOSXRandIOSconfigurationforavery
limitedISISfunctionality.

BasictopologywithASR9000andIOSrouterforISISrouting
Explanation,
Onbothroutersweenteredrouterisis1where1istheprocessdesignation.Configurationof
CLNSNETaddressesisdonehere,doesnthavetooccuroninterfacesasCLNSaddressinglogic
doesntaddressinterfacesbutwholenodes.OnnormalIOSrouter,ISISisconfigured,assignedNET
address,settolevel2onlymodeandmetricssettowidestyle,alsoonIOS,theinterfaceshavetobe
explicitellyenabledforISIS:
routerisis1
net49.0000.1921.6810.1011.00
istypelevel2only
metricstylewide
!

!
interfaceGigabitEthernet0/0
iprouterisis1
!
interfaceLoopback0
iprouterisis1

OnIOSXR,thesameconfigurationisshown,theonlydifferentisthatonIOSXR,theconceptof
addressfamilieswasadded,youwillseethebenefitswhenwemovetoIPv6forthis.
routerisis1
net49.0000.1921.6810.1011.00
istypelevel2only
addressfamilyipv4unicast
metricstylewide
!
interfaceLoopback0
addressfamilyipv4unicast
!
interfaceGigabitEthernet0/0/0/0
addressfamilyipv4unicast

Forverification,Iwouldrecomentshowprotocolsisis,showisisneighborsandshowrouteon
IOSXR:
RP/0/RSP0/CPU0:PE#showprotocolsisis
ISISRouter:1
SystemId:1921.6810.1011
ISLevels:level2only
Manualareaaddress(es):
49.0000
Routingforareaaddress(es):
49.0000
Nonstopforwarding:Disabled
Mostrecentstartupmode:ColdRestart
TopologiessupportedbyISIS:
IPv4Unicast
Level2
Metricstyle(generate/accept):Wide/Wide
Metric:10
ISPFstatus:Disabled
Noprotocolsredistributed
Distance:115
InterfacessupportedbyISIS:
Loopback0isrunningactively(activeinconfiguration)
GigabitEthernet0/0/00/isrunningactively(activeinconfiguration)

RP/0/RSP0/CPU0:PE1#showisisneighbors
ISIS1neighbors:
SystemIdInterfaceSNPAStateHoldtimeTypeIETFNSF
R1Gi0/0/0/0cc47.567c.4ac0Up26L2Capable

RP/0/RSP0/CPU0:PE1#showrouteisis
TueOct1917:57:00.240UTC
Codes:Cconnected,Sstatic,RRIP,BBGP
DEIGRP,EXEIGRPexternal,OOSPF,IAOSPFinterarea
N1OSPFNSSAexternaltype1,N2OSPFNSSAexternaltype2
E1OSPFexternaltype1,E2OSPFexternaltype2,EEGP
iISIS,L1ISISlevel1,L2ISISlevel2
iaISISinterarea,suISISsummarynull,*candidatedefault
Uperuserstaticroute,oODR,Llocal,GDAGR
Aaccess/subscriber,(!)FRRBackuppath
Gatewayoflastresortisnotset
iL210.1.10.0/24[115/20]via192.168.101.11,1:27:24,GigabitEthernet0/0/0/0

ISISLoadBalancing
OnISIStoloadbalance,coststodestinationviamorepathshavetobeequal.Maximumpathsare
thenlimitedbasedonplatformandthesametableasonOSPFapplieshere:
ASR9000hasbydefaut8,whilemaximumconfiguratbleisalso8
ASR12000hasbydefault16andmaximumconfigurableisalso16
CSR1hasbydefault32andmaximumconfigurableisalso32
ToconfiguremaximumpathsonIOSXR,youcanusethisexample:
routerisis1
addressfamilyipv4unicast
maximumpaths2

OnIOSrouterstheexampleisabitlesscomplex:
routerisis1
maximumpaths2

ISISAuthentication
ISISsupportsbothplaintextandmd5authentication,asusualplaintextistobeavoidedatalltimes.
WhatisinterestingisthatinISIS,youcanconfigureauthenticationofHellopacketsseparately
toLSPpackets.
ConfigurationexamleofIOSrouterISISauthenticationforbothHellopacketsandLSPpackets
authenticationlookslikethis:
keychainNetworkGeek_ISIS
key1
keystringnetworkgeekrulez
!
interfaceFastEthernet0/0
isisauthenticationmodemd5

isisauthenticationmodemd5
isisauthenticationkeychainNetworkGeek_ISIS
!
routerisis1
authenticationmodemd5
authenticationkeychainNetworkGeek_ISIS

ConfigurationexampleofIOSXRISISauthenticationlooksmuchmoresimleastheinterfacelevel
configurationswereaggregatedundertheisisprocess.
routerisis1
lsppasswordhmacmd5networkgeekrulez
interfaceGigabitEthernet0/0/0/0
hellopasswordhmacmd5networkgeekrulez

BasicIOSXRroutersecurity,UserGroupsandTaskGroups
Thissectionisthemostboringaswedonotgotomuchdetails,simplyputthesewellknownIOS
commandsstillworkasexpected,butdonotforgettousecommit.
lineconsole0
login
passwordcisco
!
linevty04
login
passwordsanjose
!
enablepasswordcisco
enablesecretcisco!enablesecretnegatesthe"enablepassword"abilitytologin
!
servicepasswordencryption
!
bannerlogin#Accessforauthorizedusersonly.#
bannermotd#Maintenancescheduledfor4:00amtomorrow#

EnableSSHaccesstotheIOSXRrouterisalsonothingnew:
RP/0/RSP0/CPU0:IOSXRRouter(config)#usernameciscopasswordcisco
RP/0/RSP0/CPU0:IOSXRRouter(config)#domainnamecisco.com
RP/0/RSP0/CPU0:IOSXRRouter#cryptokeygeneratersageneralkeys
Thenameforthekeyswillbe:the_default
Choosethesizeofthekeymodulusintherangeof512to2048foryourGeneral
PurposeKeypair.Choosingakeymodulusgreaterthan512maytakeafewminutes.
Howmanybitsinthemodulus[1024]:&lt;Enter&gt;
GeneratingRSAkeys...
Donew/cryptogeneratekeypair
[OK]
RP/0/RSP0/CPU0:IOSXRRouter(config)#sshserverv2
RP/0/RSP0/CPU0:IOSXRRouter(config)#linedefaulttransportinputssh
RP/0/RSP0/CPU0:IOSXRRouter(config)#commit

TaskGroupsandUserGroups
Nowcomesthefunpart.OnIOSXRyoucandefine:
Usergroupagroupofuserswithsimilarlevelofauthorizationtoagroupoftasks
TaskgroupCollectionoftasksthatareidentifiedbyuniquetaskIDforeachclassofactions
TaskIDsPermissiontoperformagiventask.Thisisgroupedintoataskgroupandassigned
toagroupofusers.
Bydiagram,itcanlooksomethinglikethis:

UsertoUserGrouptoTaskGrouptoTaskIDhierarchy
ConfigurationExampleofTaskGroups,TasksandUsersinUserGroups
LetsstartwithwhatispredefinedalreadyintheIOSXRsystem.InafreshlybootedIOSXR,these
usergroupsalreadyexistwithpredefinedtaskgroupsassigned.
rootsystemDisplaysandexecuteallcommandsforallRSPsinthesystem.
rootlrDisplaysandexecuteallcommandswithasimpleRSP.
netadminConfigurenetworkprotocolsasBGPandOSPF(usedbynetworkadministrators)
sysadminPerformsystemadministrationtasksfortherouter,asmaintainingcoredumpsand
settingsystemcoreprotocolsasNTP.
operatorCanperformmonitoringactivitiestothesystem(cannotmodifyconfig,cannotdo
extensivedebugging).
ciscosupportCandebyandtroubleshootfeatures(usuallyneededbyCiscoTACpeople).

Youcanaddyournewusertooneoftheexistinggroups,orcreateaspecificgroupallyouself.Inthe
nextexamplethiswillconfiguretaskgroup,usergroupandassignnewusertoanewusergroupto
havemodificationpowersoverOSPF,ISISandBGP.
taskgroupBGP
taskexecutebgp
taskreadbgp
taskwritebgp
!
taskgroupOSPF
taskexecuteospf
taskreadospf
taskwriteospf
!
taskgroupISIS
taskexecuteisis
taskreadisis
taskwriteisis
!
taskgroupBGPISISOSPFTasks
inherittaskgroupOSPF
inherittaskgroupBGP
inherittaskgroupISIS
!
usergroupBGPISISOSPFAdmins
taskgroupBGPISISOSPFTasks
!
usernamezerxen
groupBGPISISOSPFAdmins
secretahoj

ConfiguringAAA,RADIUSandTACACS+
BasicAAAconfigurationisnearlyidenticaltotheIOSflavor,thereforeonlyexamplebelowfrom
ASR9000IOSXRconfig:
radiusserverhost192.168.1.1
keyradiuskey
radiussourceinterfaceGi0/1/0/1
!
tacacsserverhost192.168.1.2
keytacacskey2
tacacssourceinterfaceGi0/1/0/1
!
tacacsserverhost192.168.1.3
keytacacskey3
tacacssourceinterfaceGi0/1/0/1
!
aaagroupserverradiusRADIUS
server192.168.1.1
aaagroupservertacacs+TACACS
server192.168.1.2
server192.168.1.3
!
aaaauthenticationloginRADIUSloginsgroupradiusRADIUSlinenone
aaaauthorizationexecEXECgroupTACACSlocal
aaaaccountingcommandsdefaultstoponlygrouptacacs+TACACS
!
linevty04
authorizationexecEXEC
loginauthenticationLOGIN

ConfiguringSyslogandSNMPlogging
AgainveryidenticaltoIOSasonlyasreference:
loggingon
loggingbuffered200000
logging192.0.2.65
logging192.0.2.66
loggingtrapwarnings
loggingmonitornotifications
loggingconsoledisable

OnIOSXR,youcanalsoperiodicallystorelogsfromlogbuffertofilesonflash:orharddrives:with
featurecalledlocalarchive.Theexamplebelowcreatesweaklyfilestorageforlogsonharddrive.
loggingarchive
archivesize100
archivelength52
filesize1
frequencyweekly
deviceharddisk

SNMPv1ansSNMPv2areaseasilyconfiguredasonelineofconfiguration:
snmpservercommunitypublickeyRO
snmpservercommunityprivatekeyRW
snmpservertrapsbgp
snmpserverhost10.1.1.254version2ccisco

SNMPv3ismorecomplexasitincorporatesusernames,groupsansTreeViewlimits.SoIwillomit
thisnowforspaceconservation.IOSXRconfigguideoncisco.comhasmuchmoredetailifyouare
interestedinhavingsecureSNMPv3.

Suspending,Resuming,andclosingaTelnetsessions.
AgaintheusualasonIOSdevices.IfyouaretelnetingfromIOSXRtoaremotedestinationandyou
wanttoreturnbacktotheIOSXRsourceboxwithoutterminatingyoutelnetsession,youcanpres
Ctrl+Shift+6(orCtrl+^)followedbyx.
Toresumeasuspendedsessionyoucanuseresume<number>command.Tocancelaconnection
inthebackgroundyoucanusedisconnect<number>.Tofindoutwhatisthenumberofall
currentlyrunning/suspendedsessions,youcanissueshowsessions.

CiscoDiscoveryProtocolonIOSXR

BydefaultbothonglobalandoninterfaceleveltheCDPisDISABLEDonIOSXRplatforms.
ToenableCDPonIOSXRplatforms,youhavetoenableCDPglobalywiththecdpcommandand
alsoenablecdponanyinterfacewithcdpcommandasinthefollowingexample:
cdp
!
interfaceGigabitEthernet0/0/0/0
cdp

Verificationcanbeassimpleasshowingcdpconfiguration(times,etc)withtheshowcdpcommand
anddisplayingneighborswithshowcdpneighborscommand:
RP/0/RSP0/CPU0:PE1#showcdp
TueOct1612:52:54.828UTC
GlobalCDPinformation:
SendingCDPpacketsevery60seconds
Sendingaholdtimevalueof180seconds
SendingCDPv2advertisementsisenabled
RP/0/RSP0/CPU0:PE1#showcdpneighbors
TueOct1608:29:50.994UTC
CapabilityCodes:RRouter,TTransBridge,BSourceRouteBridge
SSwitch,HHost,IIGMP,rRepeater
DeviceIDLocalIntrfceHoldtmeCapabilityPlatformPortID
SW1Gi0/0/0/0123SIME3400EFa0/2

NetFlowIOSXRconfiguration
Netflowisalifesavioursometimesasthisistheonlythingtoallowyoutoseethetrafficgoingover
yourIOSXRandIOSrouters.CiscoIOSXRsupportsonlyNetFlowversion9andupandbasic
configurationisasfollowsforexternalcollector:
ipflowexportdestination10.1.1.19991
ipflowexportversion9
interfaceFastEthernet0/0/0
ipflow{ingress|egress}

Summary
Well,Ihopeyoulikedthisarticle,Idefinitelyhadagreattimerememberingallthesethingsand
learningafewaboutIOSXR.Itriedtomakethisarticleasbeststructuredaspossibleasitwillbe
servingasareferenceformetosearchinfromtimetotime.NextinthelineisthemightyMPLS,
BGPandsomemorefeaturesthatneedstobementionedforIOSXR,butfortheextensivecoverage
ofMPLSandBGP,IwillleavethattoseparateanotherarticleasMPLSandBGParebiginscale.
PART2/2ofthisIOSXRGettingStartedExamplesGuideavailablehere.

If you enjoyed this blog, please share.

Tweet

10

Share

52

AboutPeterHavrila
Author'sProfile

MULTIHOMINGacompletestepbystepguide[DownloadeBook]
16Comments
1.shailenderKaushal
PostedJanuary28,2013at2:39AM
Veryusefulandwellplanneddocument.Coversallthebasicconfigurations.mustforsomeone
whoisnewtoXR.
2.MohammadThanveer
PostedApril28,2013at12:36AM
Itsaverynicedocument
3.Carlos
PostedMay2,2013at8:09PM
Thanksforyourinitiativeandpostthisonyourblog!ithasbeenhelpfulformyCCNASP
Study!
4.Mashrur
PostedMay30,2013at1:16PM
Excellent!!!
5.Greg
PostedMay30,2013at4:19PM
Goodstuff.Definitelybookmarkedthispageasreference.
6.MohamedJaziri
PostedJune1,2013at9:14PM
Veryexcellentarticleandanobvioushugeeffortexerted.Thankyouverymuchforthisprecious
help.
MohamedNidhalBeyremJaziri
CCIE#38232