Zebra Apricot

8/18/2019 Zebra Apricot

1/111

Zebra/Zebra/QuaggaQuagga Routing SuiteRouting Suite

Anura AbayaratneAnura AbayaratneMTT Network - Sri LankaMTT Network - Sri [email protected]@iee.org

APRICOT 2006APRICOT 2006

2222ndnd Feb – 3Feb – 3rdrd Mar 2006Mar 2006

Pert !e"tern Au"tra#iaPert !e"tern Au"tra#ia

http://www.apricot2006.net/index.php/fuseaction/home.programtutorialshttp://www.apricot2006.net/index.php/fuseaction/home.programtutorialshttp://www.apricot2006.net/index.php/fuseaction/home.programtutorialshttp://www.apricot2006.net/index.php/fuseaction/home.programtutorialshttp://www.apricot2006.net/index.php/fuseaction/home.programtutorialshttp://www.apricot2006.net/index.php/fuseaction/home.programtutorialshttp://www.apricot2006.net/index.php/fuseaction/home.programtutorialshttp://www.apricot2006.net/index.php/fuseaction/home.programtutorialshttp://www.apricot2006.net/index.php/fuseaction/home.programtutorials


2/111

APRICOT 2006 - Perth Western A 2

Agenda Agenda

$%er%iew$%er%iew &n"ta##ation&n"ta##ation

'a"i( (o))and"'a"i( (o))and"Setting u* '+PSetting u* '+P Fi#teringFi#tering


3/111


What is a routing daemon?What is a routing daemon?

So,tware running on "er%erSo,tware running on "er%er &t )aintain" outing &n,or)ation&t )aintain" outing &n,or)ation

Server

+ Daemon

Router


4/111

APRICOT 2006 - Perth Western A

outing dae)on"outing dae)on" –– Low-(o"t "o#utionLow-(o"t "o#ution

–– /*erti"e reuired ,or "et-u*/*erti"e reuired ,or "et-u*

–– La(k o, "u**ortLa(k o, "u**ort 1o))er(ia# router"1o))er(ia# router"

–– Pri(yPri(y

–– 'etter *er,or)an(e'etter *er,or)an(e –– Fu##y "u**ortedFu##y "u**orted

Daemons !s" #ommer#ial RoutersDaemons !s" #ommer#ial Routers


5/111

APRICOT 2006 - Perth Western A $

% ZebraZebra http://www.zebra.org htt

p://www.zebra.org

% QuaggaQuagga http://www.quagga.net htt

p://www.quagga.net

First daemonFirst daemon Wide support: RIP,OSPF,BGPWide support: RIP,OSPF,BGP Certain u!nerabi!itiesCertain u!nerabi!ities

Based on ZebraBased on Zebra Wide support:Wide support:

RIP,OSPF,BGP,ISISRIP,OSPF,BGP,ISIS

"eve!opment !ibraries"eve!opment !ibraries

Routing DaemonsRouting Daemons


6/111

O!er!ie&O!er!ie&


7/111

APRICOT 2006 - Perth Western A '

O!er!ie&O!er!ie&

i"tributed under te +N +enera# Pub#i( Li(en"e 4ebra i" a routing "o,tware *a(kage tat *ro%ide"

T1P5&P ba"ed routing "er%i(e" wit routing*roto(o#" "u**ort "u( a" &P%7 &P%27 &Png7

$SPF%27 $SPF%37 '+P-87 and '+P-89 Su**ort '+P oute e,#e(tor" and oute "er%er

bea%ior &P%6 outing *roto(o#"

4ebra a" intera(ti%e u"er inter,a(e ,or ea(routing *roto(o# and "u**ort" (o))on (#ient(o))and".


8/111

APRICOT 2006 - Perth Western A (

A)out *e)ra A)out *e)ra

A(t a" a dedi(ated "er%erA(t a" a dedi(ated "er%er /(ange routing in,or)ation wit oter router" u"ing routing/(ange routing in,or)ation wit oter router" u"ing routing

*roto(o#"*roto(o#" "e" te"e in,or)ation to u*date kerne# routing tab#e "o tat rigt"e" te"e in,or)ation to u*date kerne# routing tab#e "o tat rigt

data goe" to te rigt *#a(e.data goe" to te rigt *#a(e. 1an dyna)i(a##y (ange te (on,iguration and you )ay %iew1an dyna)i(a##y (ange te (on,iguration and you )ay %iew

routing tab#e ,ro) 4ebra ter)ina# inter,a(erouting tab#e ,ro) 4ebra ter)ina# inter,a(e &, te network i" ")a##7 1on,iguring 4ebra i" %ery ea"y : "etu*&, te network i" ")a##7 1on,iguring 4ebra i" %ery ea"y : "etu*

inter,a(e"7 Add "tati( route" and5or de,au#t route"inter,a(e"7 Add "tati( route" and5or de,au#t route" &, te network i" rater #arge or "tru(ture (ange ,reuent#y7 you&, te network i" rater #arge or "tru(ture (ange ,reuent#y7 you

)ay need to "etu* 4ebra dyna)i( routing *roto(o# : &P7$SPF or)ay need to "etu* 4ebra dyna)i( routing *roto(o# : &P7$SPF or'+P.'+P.

Su**ort uni(a"t routing *roto(o#".Su**ort uni(a"t routing *roto(o#". 4ebra a" di,,erent "y"te) ad)ini"tration )ode : Nor)a# )ode4ebra a" di,,erent "y"te) ad)ini"tration )ode : Nor)a# )ode

and nab#e )odeand nab#e )ode ni/ a((ount inde*endent ,eature wi## be great e#* to te routerni/ a((ount inde*endent ,eature wi## be great e#* to te router

ad)ini"trator.ad)ini"trator.


9/111


,stem Ar#hite#ture Diagram,stem Ar#hite#ture Diagram

bgpdospfd ripd

zebra

Unix Kernel Routing Table


10/111

APRICOT 2006 - Perth Western A .0

/o& *e)ra1uagga &ors/o& *e)ra1uagga &ors

1o##e(tion o, "e%era# dae)on" tat work togeter1o##e(tion o, "e%era# dae)on" tat work togeterto bui#d te routing tab#e. ;*roto(o# "*e(i,i(to bui#d te routing tab#e. ;*roto(o# "*e(i,i(routing dae)on":routing dae)on": ripd,ospfd,bgpd ripd,ospfd,bgpd 9 kerne#9 kerne#routing )anager:routing )anager: zebrad zebrad


11/111

APRICOT 2006 - Perth Western A ..

,uorted Plat4orm,uorted Plat4orm

Linu/ 2.2./ and igerFree'S 8./ and iger

Net'S .6 and iger$*en'S 2.= and igerSo#ari" 2.6 and iger


12/111


/o& to get *e)ra1uagga/o& to get *e)ra1uagga

tt*:55www.>ebra.org5tt*:55www.>ebra.org5

tt*:55www.uagga.net5tt*:55www.uagga.net5

http://www.zebra.org/http://www.zebra.org/http://www.quagga.net/http://www.quagga.net/http://www.quagga.net/http://www.zebra.org/


13/111

InstallationInstallation


14/111

APRICOT 2006 - Perth Western A .

,tes,tes

Tere are tree "te*" ,or in"ta##ingTere are tree "te*" ,or in"ta##ingte "o,tware :1on,iguration7te "o,tware :1on,iguration71o)*i#ation7 &n"ta##ation1o)*i#ation7 &n"ta##ation

Fir"t un>i*5e/tra(t te "o,twareFir"t un>i*5e/tra(t te "o,twareg>i* –d >ebra-0.?=a.tar.g>g>i* –d >ebra-0.?=a.tar.g>

tar –/%, >ebra-0.?=a.tartar –/%, >ebra-0.?=a.tar

(d >ebra-0.?=a(d >ebra-0.?=a


15/111

APRICOT 2006 - Perth Western A .$

Con4igure the so4t&areCon4igure the so4t&are

4ebra (an dete(t te )o"t o"t4ebra (an dete(t te )o"t o"t(on,iguration auto)ati(a##y. Tere(on,iguration auto)ati(a##y. Tereare additiona# (on,iguration o*tion"are additiona# (on,iguration o*tion"

.5(on,igure --e#*.5(on,igure --e#*

– eg.eg.

.5(on,igure.5(on,igure.5(on,igure –-*re,i/5o)e5>ebra.5(on,igure –-*re,i/5o)e5>ebra.5(on,igure –di"ab#e-ri*d.5(on,igure –di"ab#e-ri*d


16/111


5uild the ,o4t&are5uild the ,o4t&are

A,ter (on,iguring te "o,tware7 youA,ter (on,iguring te "o,tware7 youwi## need to (o)*i#e it ,or yourwi## need to (o)*i#e it ,or your"y"te)"y"te)

&""ue te (o))and&""ue te (o))and makemake in tein teroot o, te "our(e dire(tory.root o, te "our(e dire(tory.

)ake)ake


17/111

APRICOT 2006 - Perth Western A .'

Install the ,o4t&areInstall the ,o4t&are

(o*ying te (o)*i#ed *rogra)" and"u**orting ,i#e" to a "tandard#o(ation.

i""ue te ,o##owing (o))and at your"e## *ro)*t: make install.

)ake in"ta## de,au#t working dire(tory:de,au#t working dire(tory: 5u"r5#o(a#5bin and 5u"r5#o(a#5et( 5u"r5#o(a#5bin and 5u"r5#o(a#5et(


18/111

APRICOT 2006 - Perth Western A .(

Install the ,o4t&are ContdInstall the ,o4t&are Contd

4ebra dae)on" a%e teir own ter)ina# inter,a(eor BTC. A,ter in"ta##ation7 you a%e to "etu* ea(bea"tD" *ort nu)ber to (onne(t to te). P#ea"eadd te ,o##owing entrie" toE5et(5"er%i(e"D.

>ebra"r% 26005t(* >ebra "er%i(e>ebra 2605t(* >ebra %tyri*d 26025t(* &Pd %tyri*ngd 26035t(* &Pngd %tyo"*,d 26085t(* $SPFd %tybg*d 260=5t(* '+Pd %ty

o"*,6d 26065t(* $SPF6d %ty

Additiona##y ,or Guaggao"*,a*i 260H5t(* o"*,a*ii"i"d 260I5t(* &S&Sd %ty


19/111


A##ess the Router A##ess the Router

Te#net to te *ort– te#net Ji*addre""K 260

ports on zebra260 >ebra %ty2602* &Pd %ty2603 &Pngd %ty

2608 $SPFd %ty260= '+Pd %ty2606 $SPF6d %ty

Additiona##y quagga "u**ort:260H o"*,a*i260I &S&Sd %ty

"e BTC "e##"e BTC "e##– To u"e %ty"7 "*e(i,y enab#e-%ty" to (on,igure "(ri*t.– "erna)e "tored in %ty".(on, ,i#e.

u"erna)e testuser no*a""word


20/111

5asi# Commands5asi# Commands


21/111

APRICOT 2006 - Perth Western A 2.

Con4ig CommandsCon4ig Commands

1o))and (o))on to a## routing *roto(o#1o))and (o))on to a## routing *roto(o#

1on,ig (o))and are genera##y ,ound in1on,ig (o))and are genera##y ,ound in 5u"r5#o(a#5et(5.(on, or *at "*e(i,ied in 5u"r5#o(a#5et(5.(on, or *at "*e(i,ied in

-–*re,i/ o*tion-–*re,i/ o*tion ;eg. 5o)e5>ebra5et(5.(on,ebra5et(5.(on,<

Te dae)on na)e 9 .(on, i" te de,au#t (on,igTe dae)on na)e 9 .(on, i" te de,au#t (on,ig,i#e na)e,i#e na)e ;eg. 5o)e5>ebra5et(5>ebra.(on,ebra5et(5>ebra.(on,<

1on,ig ,i#e (an be "*e(i,ied u"ing1on,ig ,i#e (an be "*e(i,ied u"ing –f –f or –or –config_fileconfig_file o*tion" wen "tating te dae)ono*tion" wen "tating te dae)on ;eg.;eg.

5o)e5>ebra5"bin5>ebra –d –, 5o)e5>ebra5et(5>ebrate"t.(on,ebra5"bin5>ebra –d –, 5o)e5>ebra5et(5>ebrate"t.(on,<


22/111


5asi# Con4ig Commands5asi# Con4ig Commands

o"tna)e hostname - Set o"tna)e o, terouter.

*a""word password - Set *a""word ,or %ty

inter,a(e. &, tere i" no *a""word7 a %tywonDt a((e*t (onne(tion".

enab#e *a""word password -Set enab#e*a""word.

#og "tdout - Set #ogging out*ut to "tdout. no #og "tdout -


23/111


5asi# Con4ig Commands"5asi# Con4ig Commands"

#og ,i#e filename - &, you want to #oginto a ,i#e *#ea"e "*e(i,y ,i#ena)e a",o##ow".

;eg. #og ,i#e 5u"r5#o(a#5et(5bg*d.#og #og "y"#og - Set #ogging out*ut to

"y"#og.no #og "y"#og


24/111



write ter)ina# - i"*#ay" te (urrent(on,iguration to te %ty inter,a(e.

"ow running-(on,igwrite ,i#e - !rite (urrent

(on,iguration to (on,iguration ,i#e.(o*y running-(on,ig "tartu*-(on,ig(on,igure ter)ina# -1ange to

(on,iguration )ode. Ti" (o))and i"te ,ir"t "te* to (on,iguration.


25/111

APRICOT 2006 - Perth Western A 2$


wo7 #i"t – Li"t (o))andwo7 #i"t – Li"t (o))and "er%i(e *a""word-en(ry*tion – n(ry*t

*a""word

"ow %er"ion - Sow te (urrent %er"ion o,te 4ebra and it" bui#d o"t in,or)ation. #ine %ty - nter %ty (on,iguration )ode. banner )otd de,au#t - Set de,au#t )otd

"tring. no banner )otd - No )otd banner "tring

wi## be *rinted.


26/111



e/e(-ti)eout )inute e/e(-ti)eout )inute "e(ondSet BTC (onne(tion ti)eout %a#ue. !en on#y

one argu)ent i" "*e(i,ied it i" u"ed,or ti)eout %a#ue in )inute". $*tiona# "e(ond

argu)ent i" u"ed ,or ti)eout %a#ue in"e(ond". e,au#t ti)eout %a#ue i" 0)inute". !en ti)eout %a#ue i" >ero7 it

)ean" no ti)eout. no e/e(-ti)eout - o not *er,or) ti)eout

at a##. Ti" (o))and i" a" "a)e a" e/e(-ti)eout 0 0.


27/111

APRICOT 2006 - Perth Western A 2'


a((e""-(#a"" a((e""-#i"t - e"tri(t %ty(onne(tion" wit an a((e"" #i"t.

/a)*#e:access-list log-in permit 192.16.1.!"2#

line $t%

access-class log-in


28/111

APRICOT 2006 - Perth Western A 2(

,amle Con4ig 7ile,amle Con4ig 7ile

,or te >ebra dae)on.o"tna)e outero"tna)e outer

*a""word >ebra*a""word >ebra

enab#e *a""word >ebraenab#e *a""word >ebra

OOinter,a(e #ointer,a(e #o

OO

inter,a(e et0inter,a(e et0

i* addre"" H2.6..2528i* addre"" H2.6..2528

OO

#ine %ty#ine %ty


29/111


,amle Con4ig 7ile,amle Con4ig 7ile

D OD and DD are (o))ent (ara(ter". &, te ,ir"t(ara(ter o, te word i" one o, te(o))ent(ara(ter" ten ,ro) te re"t o, te #ine ,orwardwi## be ignored a" a (o))ent.

*a""word >ebraO*a""word &, a (o))ent (ara(ter i" not te ,ir"t (ara(ter

o, te word7 itD" a nor)a# (ara(ter. So in teabo%e e/a)*#e D OD wi## not be regarded a" a(o))ent and te *a""word i" "et to

D>ebraO*a""wordD.


30/111


Common In!o#ation Otions

"age : >ebra $PT&$N...Q"age : >ebra $PT&$N...Q

ae)on wi( )anage" kerne# routing tab#e )anage)ent andae)on wi( )anage" kerne# routing tab#e )anage)ent andredi"tribution between di,,erent routing *roto(o#".redi"tribution between di,,erent routing *roto(o#".

-b7 --bat( un" in bat( )ode-b7 --bat( un" in bat( )ode

-d7 --dae)on un" in dae)on )ode-d7 --dae)on un" in dae)on )ode -,7 --(on,igR,i#e Set (on,iguration ,i#e na)e-,7 --(on,igR,i#e Set (on,iguration ,i#e na)e -i7 --*idR,i#e Set *ro(e"" identi,ier ,i#e na)e-i7 --*idR,i#e Set *ro(e"" identi,ier ,i#e na)e -k7 --kee*Rkerne# ont de#ete o#d route" wi( in"ta##ed by >ebra.-k7 --kee*Rkerne# ont de#ete o#d route" wi( in"ta##ed by >ebra. -#7 --#ogR)ode Set %erbo"e #og )ode ,#ag-#7 --#ogR)ode Set %erbo"e #og )ode ,#ag -A7 --%tyRaddr Set %ty" bind addre""-A7 --%tyRaddr Set %ty" bind addre"" -P7 --%tyR*ort Set %ty" *ort nu)ber-P7 --%tyR*ort Set %ty" *ort nu)ber -r7 --retain !en *rogra) ter)inate"7 retain added route by >ebra.-r7 --retain !en *rogra) ter)inate"7 retain added route by >ebra. -%7 --%er"ion Print *rogra) %er"ion-%7 --%er"ion Print *rogra) %er"ion -7 --e#* i"*#ay ti" e#* and e/it-7 --e#* i"*#ay ti" e#* and e/it

/a)*#e: 5o)e5>ebra5"bin5>ebra -d/a)*#e: 5o)e5>ebra5"bin5>ebra -d


31/111


8irtual Terminal Inter4a#es8irtual Terminal Inter4a#es

BTC – Birtua# Ter)ina# &nter,a(e i" a(o))and #ine inter,a(e ;1L&< ,oru"er intera(tion wit te routing

dae)on.To enab#e a BTC inter,a(e7 you a%e

to "etu* a BTC *a""word. &, tere i"

no BTC *a""word7 one (annot(onne(t to te BTC inter,a(e at a##.


32/111


8T9 O!er!ie&8T9 O!er!ie&

te#net ?2.6I.I.? 260

e##o7 ti" i" >ebra ;%er"ion 0.?=a>>>>>outer;(on,ig


33/111


8T9 :odes8T9 :odes

Tree BTC )ode"Tree BTC )ode"BTC Biew Mode : ead-$n#y a((e""BTC Biew Mode : ead-$n#y a((e""

to te 1L&to te 1L&BTC nab#e )ode : ead-writeBTC nab#e )ode : ead-write

a((e"" to te 1L&a((e"" to te 1L&

BTC $ter )ode"BTC $ter )ode"


34/111

*e)ra Daemon*e)ra Daemon


35/111


Inter4a#e CommandsInter4a#e Commands

inter,a(einter,a(e ifnameifname "utdown 7 no "utdown – u* or down te"utdown 7 no "utdown – u* or down te

(urrent inter,a(e(urrent inter,a(e

i* addre""i* addre"" address &e.g. 1!.!.!.1"'address &e.g. 1!.!.!.1"' de"(ri*tionde"(ri*tion descriptiondescription WWWW )u#ti(a"t 7 no )u#ti(a"t - nab#e or)u#ti(a"t 7 no )u#ti(a"t - nab#e or

di"ab#e )u#ti(a"t ,#ag ,or te inter,a(edi"ab#e )u#ti(a"t ,#ag ,or te inter,a(e bandwidt J-0000000Kbandwidt J-0000000K 'andwidt in ki#obit"'andwidt in ki#obit" no bandwidt J-0000000Kno bandwidt J-0000000K


36/111


;


37/111


,tati# Route Commands

&t de,ine" "tati( *re,i/ and gateway. i* route networ( gatewa% i* route networ( netmas( gatewa%

i* route 0.0.0.05I 0.0.0.2

i* route 0.0.0.05I ***0

i* route 0.0.0.0 2==.2==.2==.0 0.0.0.2

i* route networ( gatewa% distance

i* route 0.0.0.0 2==.2==.2==.0 0.0.0.3 =0


38/111


,tati# Route C

outer "ow i* routeouter "ow i* route 1ode": U - kerne# route7 1 - (onne(ted7 S - "tati(7 - &P71ode": U - kerne# route7 1 - (onne(ted7 S - "tati(7 - &P7

$ - $SPF7$ - $SPF7 ' - '+P7 K - "e#e(ted route7 - F&' route' - '+P7 K - "e#e(ted route7 - F&' route

UK 0.0.0.050 %ia ?2.6I.I.7 et0UK 0.0.0.050 %ia ?2.6I.I.7 et0 S 0.0.0.0528 50Q %ia 0.0.0.3 ina(ti%eS 0.0.0.0528 50Q %ia 0.0.0.3 ina(ti%e SK 0..0.0528 0050Q %ia ?2.6I.I.37 et0SK 0..0.0528 0050Q %ia ?2.6I.I.37 et0 SK 0.2.3.0528 050Q %ia ?2.6I.I.7 et0SK 0.2.3.0528 050Q %ia ?2.6I.I.7 et0 U 2H.0.0.05I i" dire(t#y (onne(ted7 #oU 2H.0.0.05I i" dire(t#y (onne(ted7 #o

1K 2H.0.0.05I i" dire(t#y (onne(ted7 #o1K 2H.0.0.05I i" dire(t#y (onne(ted7 #o U ?2.6I.I.0528 i" dire(t#y (onne(ted7 et0U ?2.6I.I.0528 i" dire(t#y (onne(ted7 et0 1K ?2.6I.I.0528 i" dire(t#y (onne(ted7 et01K ?2.6I.I.0528 i" dire(t#y (onne(ted7 et0


39/111


*e)ra Terminal :ode Commands

"ow inter,a(e"ow inter,a(e "ow i* ,orward -"ow i* ,orward - i"*#ay weter te

o"tD" &P ,orwarding ,un(tion i" enab#ed or

not. A#)o"t any N&V kerne# (an be(on,igured wit &P ,orwarding di"ab#ed. &,"o7 te bo/ (anDt work a" a router.

(at 5*ro(5"y"5net5i*%85i*R,orward(at 5*ro(5"y"5net5i*%85i*R,orward To enab#e i* ,orward on Linu/ bo/To enab#e i* ,orward on Linu/ bo/

"y"(t# -w net.i*%8.i*R,orward"y"(t# -w net.i*%8.i*R,orward


40/111

5=P5=P'order +ateway Proto(o#'order +ateway Proto(o#


41/111


Introdu#tion to 5=PIntrodu#tion to 5=P

outing Proto(o# u"ed to e/(angerouting in,or)ation betweennetwork" - /terior gateway *roto(o#/terior gateway *roto(o#

Pat Be(tor Proto(o# &n(re)enta# *date" Many o*tion" ,or *o#i(y en,or(e)ent 1#a""#e"" &nter o)ain outing ;1&<

!ide#y u"ed ,or &nternet ba(kbone '+P u"ed interna##y ;i'+P< and e/terna##y

;e'+P<


42/111


Autonomous ,stem Autonomous ,stem

&t i" u"ed to uniue#y identi,y network"wit (o))on routing *o#i(y

"ua##y under "ing#e owner"i*7 tru"t andad)ini"trati%e (ontro#

AS100


43/111


Autonomous ,stem >um)er

AS nu)ber i" an identi,i(ation o,autono)ou" "y"te).

'+P *roto(o# u"e" te AS nu)ber ,ordete(ting weter te '+P (onne(tion i"

interna# one or e/terna# one. An ASN i" a 6 bit nu)ber Pub#i( AS nu)ber" - 68= Pri%ate AS nu)ber" 68=2 – 6==3= 0 and 6==3= are re"er%ed ASN" are di"tributed by te egiona#

&nternet egi"trie"


44/111


45/111


Con4iguring the router Con4iguring the router

nab#e '+Pnab#e '+PAdd te addre"" to be announ(edAdd te addre"" to be announ(edAdd te addre"" and AS nu)ber" o,Add te addre"" and AS nu)ber" o,

neigboring router" ;*eer"


46/111


5=P Router 5=P Router

1on,igure '+P router wit router bgp (o))and.To (on,igure '+P router7 you need AS nu)ber.

router bg* a"n

nab#e a '+P *roto(o# *ro(e"" wit te "*e(i,ied

a"n. A,ter ti" "tate)ent you (an in*ut any '+P1o))and". Cou (an not (reate di,,erent '+P*ro(e"" under di,,erent a"n witout "*e(i,yingmultiple-instance

no router bg* a"n

e"troy a '+P *roto(o# *ro(e"" wit te "*e(i,ieda"n.


47/111


Con4iguration e


48/111


bg* router-id A.'.1.

Ti" (o))and "*e(i,ie" te router-&. &, bg*d(onne(t" to >ebra it get" inter,a(e and addre""in,or)ation. &n tat (a"e de,au#t router & %a#ue

i" "e#e(ted a" te #arge"t &P Addre"" o, teinter,a(e". !en router >ebra i" not enab#ed bg*d(anDt get inter,a(e in,or)ation "o router-id i" "etto 0.0.0.0. So "et router-id by and.

outerA(on,igure ter)ina#RouterA!on"i#$%router ' 100

RouterA!on"i#-router$%' router-i) 1*2.16.1.1


49/111






50/111

APRICOT 2006 - Perth Western A $0

Inserting pre#i$es into BGP To add addre"" *re,i/ to be announ(ed Two way" :

– redi"tributing interna# routing *roto(o#

– network (o))and

network A.'.1.5M

router bg* 00

network 0..0.056

no network H2.6.0.056


51/111

APRICOT 2006 - Perth Western A $.

AS00 AS200

Con4iguration e


52/111


Redistri)ute to 5=P

redi"tribute kerne#– edi"tribute kerne# route to '+P *ro(e"".

redi"tribute "tati(

– edi"tribute "tati( route to '+P *ro(e"". redi"tribute (onne(ted

– edi"tribute (onne(ted route to '+P *ro(e"".

redi"tribute ri*

– edi"tribute &P route to '+P *ro(e"". redi"tribute o"*,

– edi"tribute $SPF route to '+P *ro(e"".


53/111


Con4iguration e


54/111






55/111

APRICOT 2006 - Perth Western A $$

5=P Peers

neigbor peer re)ote-a" asn

–1reate" a new neigbor wo"e re)ote-a" i" a"n. *eer (an be an &P addre""

router bg*

neigbor 0.0.0. re)ote-a" 2


56/111


Con4iguration e


57/111

APRICOT 2006 - Perth Western A $'

Con4iguration e


58/111

APRICOT 2006 - Perth Western A $(

5=P Peer #ommands

neigbor peer "utdown no neigbor peer "utdown

Sutdown te *eer. !e (an de#ete te

neigborD" (on,iguration by no neigbor*eer re)ote-a" a"-nu)ber but a##(on,iguration o, te neigbor wi## bede#eted. !en you want to *re"er%e te

(on,iguration7 but want to dro* te '+P*eer7 u"e ti" "ynta/.


59/111


60/111


Con4iguration e


61/111


5=P Peer #ommands"

neigbor peer ne/t-o*-"e#, – Ti" (o))and "*e(i,ie" an announ(ed routeD"

ne/to* a" being eui%a#ent to te addre"" o,te bg* router. &n e'+P7 (anging te ne/t-o*i" and#ed auto)ati(a##y. 'ut not in i'+P

no neigbor peer ne/t-o*-"e#, neigbor peer u*date-"our(e interface no neigbor peer u*date-"our(e

neigbor peer de,au#t-originate– announ(e de,au#t route" to te *eer no neigbor peer de,au#t-originate

5=P P d


62/111


5=P Peer #ommands"

neigbor peer "end-(o))unityneigbor peer weigt weight

–"*e(i,ie" a de,au#t weigt %a#ue ,or teneigborD" route". Lo(a# to te router

–iger weigt win"


63/111


Con4iguration e


64/111


Con4iguration e


65/111






66/111


Poli# ControlPoli# Control

Po#i(y ba"ed on AS *at7 (o))unity andPo#i(y ba"ed on AS *at7 (o))unity and*re,i/e"*re,i/e"

eZe(ting7 a((e*ting "e#e(ted route"eZe(ting7 a((e*ting "e#e(ted route"

Set attribute to in,#uen(e *at "e#e(tionSet attribute to in,#uen(e *at "e#e(tion

4ebra *ro%ide" )any %ery ,#e/ib#e ,i#tering,eature". Fi#tering i" u"ed ,or bot in*ut

and out*ut o, te routing in,or)ation.$n(e ,i#tering i" de,ined7 it (an be a**#iedin any dire(tion.


67/111


Tools 4or oli# #ontrolTools 4or oli# #ontrol

Pre,i/-#i"t ;Fi#ter *re,i/e"< Fi#ter-#i"t ;Fi#ter ASe"< oute-)a* and (o))unitie"

neigbor peer di"tribute-#i"t name in[outQ– Ti" (o))and "*e(i,ie" a di"tribute-#i"t ,or te

*eer. dire(t i" EinD or EoutD.

neigbor peer *re,i/-#i"t name in[outQ neigbor peer ,i#ter-#i"t name in[outQ neigbor peer route-)a* name in[outQ


68/111


Pre4i< istPre4i< ist

i* *re,i/-#i"t *ro%ide" te )o"t *ower,u#*re,i/ ba"ed ,i#tering )e(ani").

add or de#ete *re,i/ ba"ed ,i#ter" to

arbitrary *oint" o, *re,i/-#i"t u"ing"euentia# nu)ber "*e(i,i(ation. &, no i* *re,i/-#i"t i" "*e(i,ied7 it a(t" a"

*er)it. &, i* *re,i/-#i"t i" de,ined7 and no

)at( i" ,ound7 de,au#t deny i" a**#ied.


69/111


Pre4i< ist #ommandPre4i< ist #ommand

i* *re,i/-#i"t na)e ;*er)it[deny< *re,i/ #e #enQge #enQ

i* *re,i/-#i"t na)e "e-nu)ber ;*er)it[deny<*re,i/ #e #enQ ge #enQ

i* *re,i/-#i"t na)e de"(ri*tion de"( no i* *re,i/-#i"t na)e no i* *re,i/-#i"t na)e de"(ri*tion de"(Q

"ow i* *re,i/-#i"t

– i"*#ay a## &P *re,i/ #i"t". "ow i* *re,i/-#i"t na)e

– Sow &P *re,i/ #i"t (an be u"ed wit a *re,i/ #i"t na)e. "ow i* *re,i/-#i"t na)e "e nu)


70/111

APRICOT 2006 - Perth Western A '0

Con4iguration e


71/111

APRICOT 2006 - Perth Western A '.

7ilter ist7ilter ist

Fi#ter route" ba"ed on AS *at'ot dire(tion – in5out'ot dire(tion – in5out


72/111


Con4iguration e


73/111


Regular ;


74/111


;


75/111

APRICOT 2006 - Perth Western A '$

A, Path A##ess ist

AS *at a((e"" #i"t i" u"er de,ined AS*at.

i* a"-*at a((e""-#i"t word ]*er)it[

deny^ line–Ti" (o))and de,ine" a new AS *at

a((e"" #i"t.

no i* a"-*at a((e""-#i"tword

no i* a"-*at a((e""-#i"t word]*er)it[deny^ line


76/111


;


77/111


78/111

APRICOT 2006 - Perth Western A '(

;


79/111


;


80/111

APRICOT 2006 - Perth Western A (0

;


81/111

;


82/111


;


83/111


;


84/111


Route Aggregation oli#ies

aggregate-addre"" A.'.1.5M– Ti" (o))and "*e(i,ie" an aggregate addre"".

no aggregate-addre"" A.'.1.5M aggregate-addre"" A.'.1.5M "u))ary-

on#y– Ti" (o))and "*e(i,ie" an aggregate addre"".

Aggregated route" wi## not be announ(e.

C 4i i th tC 4i i th t


85/111

APRICOT 2006 - Perth Western A ($



neigboring router" ;*eer" t ; l > t


86/111


AS200

AS300

AS100

C(

A

0..0.056

0.2.0.056 0.2.0.056

192.168.1.2

192.168.2.2

192.168.1.1 192.168.2.1

AS00

;et&or;et&or

AS00


87/111

APRICOT 2006 - Perth Western A ('

AS200AS300

AS100

C (

A

0..0.056

0.2.0.056 0.2.0.056

192.168.1.2192.168.2.2

192.168.1.1 192.168.2.1

outerAouterA

router bg* 00router bg* 00 network 0..0.056network 0..0.056 neigbor ?2.6I..2 re)ote-a" 200neigbor ?2.6I..2 re)ote-a" 200 neigbor ?2.6I..2 *re,i/-#i"t P1-$T outneigbor ?2.6I..2 *re,i/-#i"t P1-$T out

neigbor ?2.6I.2.2 re)ote-a" 300neigbor ?2.6I.2.2 re)ote-a" 300 neigbor ?2.6I.2.2 *re,i/-#i"t P'-$T outneigbor ?2.6I.2.2 *re,i/-#i"t P'-$T out neigbor ?2.6I.2.2 route-)a* "et-a"-*at outneigbor ?2.6I.2.2 route-)a* "et-a"-*at out

i* *re,i/-#i"t P'-$T *er)it 0..0.056i* *re,i/-#i"t P'-$T *er)it 0..0.056i* *re,i/-#i"t P1-$T *er)it 0..0.056i* *re,i/-#i"t P1-$T *er)it 0..0.056i* *re,i/-#i"t #i"t-3 *er)it 0..0.056i* *re,i/-#i"t #i"t-3 *er)it 0..0.056

route-)a* "et-a"-*at *er)it 0route-)a* "et-a"-*at *er)it 0 )at( i* addre"" *re,i/-#i"t #i"t-3)at( i* addre"" *re,i/-#i"t #i"t-3"et a"-*at *re*end 00 00"et a"-*at *re*end 00 00

route-)a* "et-a"-*at *er)it 20route-)a* "et-a"-*at *er)it 20

outer1outer1

router bg* 200router bg* 200 network 0.2.0.056network 0.2.0.056 neigbor ?2.6I.. re)ote-a" 00neigbor ?2.6I.. re)ote-a" 00 neigbor ?2.6I.. *re,i/-#i"t PA-&N inneigbor ?2.6I.. *re,i/-#i"t PA-&N in

neigbor ?2.6I.. ,i#ter-#i"t = inneigbor ?2.6I.. ,i#ter-#i"t = ini* *re,i/-#i"t PA-&N *er)it 0..0.056 #e 32i* *re,i/-#i"t PA-&N *er)it 0..0.056 #e 32i* a"-*at a((e""-#i"t = *er)it X00i* a"-*at a((e""-#i"t = *er)it X00

outer'outer'

router bg* 300router bg* 300 network 0.3.0.056network 0.3.0.056

neigbor ?2.6I.2. re)ote-a" 00neigbor ?2.6I.2. re)ote-a" 00 neigbor ?2.6I.2. *re,i/-#i"t PA-&N inneigbor ?2.6I.2. *re,i/-#i"t PA-&N in neigbor ?2.6I.. ,i#ter-#i"t = inneigbor ?2.6I.. ,i#ter-#i"t = in

i* *re,i/-#i"t PA-&N *er)it 0..0.056 #e 32i* *re,i/-#i"t PA-&N *er)it 0..0.056 #e 32i* a"-*at a((e""-#i"t = *er)it X00i* a"-*at a((e""-#i"t = *er)it X00

5=P , li T h i5=P , li T h i


88/111

APRICOT 2006 - Perth Western A ((

5=P ,#aling Te#hniues5=P ,#aling Te#hniues

oute e,re" and So,te(on,iguration

Peer +rou*"Peer +rou*"

R t R 4 hR t R 4 h


89/111


Route Re4reshRoute Re4resh

'+P "e""ion to tat neigbor a" to be (#eared "o'+P "e""ion to tat neigbor a" to be (#eared "otat itD" reinitia#i>ed a,ter e%ery *o#i(y (angetat itD" reinitia#i>ed a,ter e%ery *o#i(y (angebe(au"e te router doe" not "tore *re,i/e" tatare reZe(ted by *o#i(y

ard '+P re"etard '+P re"et– Tear down '+P *eeringTear down '+P *eering

– 1on"u)e 1P1on"u)e 1P

– i"ru*t" (onne(ti%ity ,or a## networki"ru*t" (onne(ti%ity ,or a## network

(#ear i* bg* peer (#ear i* bg*

Peer &P addre""5ASN

R t R 4 h C )ilitR t R 4 h C )ilit


90/111


Route Re4resh Caa)ilitRoute Re4resh Caa)ilit

No di"ru*t" (onne(ti%ityNo di"ru*t" (onne(ti%ity No additiona# )e)ory i" u"ed No (on,iguration i" needed

euire" *eering router" to "u**ort routere,re" (a*abi#ity – F12?I

(#ear i* bg* /./././ in

– a"k te *eer to re"end ,u## '+P announ(e)ent (#ear i* bg* /./././ out

– to re"end ,u## '+P announ(e)ent to *eer

,o4t Re#on4iguration


91/111


,o4t Re#on4iguration

1o*ie" o, a## route" re(ei%ed ,ro) tat *eer are1o*ie" o, a## route" re(ei%ed ,ro) tat *eer are"tored "e*arate#y ,ro) te regu#ar '+P tab#e."tored "e*arate#y ,ro) te regu#ar '+P tab#e.

A,ter (on,iguring te *o#i(y (ange7 &t i" *o""ib#eA,ter (on,iguring te *o#i(y (ange7 &t i" *o""ib#eto a**#y te new *o#i(y to te "tored (o*ie" o, teto a**#y te new *o#i(y to te "tored (o*ie" o, te'+P in,or)ation witout a%ing to re"et te'+P in,or)ation witout a%ing to re"et te

"e""ion."e""ion.

router bg* 00 network 0..0.056 neigbor ?2.6I.I.80 re)ote-a" 200

neigbor ?2.6I.I.80 "o,t-re(on,iguration inbound

(#ear i* bg* ?2.6I.I.80 "o,t in [ outQ

5=P , li T h i5=P , li T h i


92/111





5=P Peer =rous


93/111


5=P Peer =rous

So)e router" a%e #ong #i"t o, neigbor". &tD" i"ten (o))on to a%e "e%era# "etting tat are"a)e ,or ea( neigbor".

Make" (on,iguration ea"ier Make" (on,iguration #e"" *rone to error Make" (on,iguration )ore readab#e

neigbor word *eer-grou*

– Ti" (o))and de,ine" a new *eer grou*. neigbor peer *eer-grou* word

– Ti" (o))and bind "*e(i,i( *eer to *eer grou* word.

Con4iguration e


94/111


Con4iguration e


95/111


BWith eer grousBWith eer grous

router bg* 00 network 0..0.056

neigbor ebg* *eer-grou*

neigbor ebg* ,i#ter-#i"t 6 in

neigbor ebg* ,i#ter-#i"t = out neigbor ebg* *re,i/-#i"t P-&N in

neigbor ebg* *re,i/-#i"t P-$T out

neigbor ?2.6I.I.80 re)ote-a" 200

neigbor ?2.6I.I.80 *eer-grou* ebg* neigbor ?2.6I.I.=0 re)ote-a" =0

neigbor ?2.6I.I.=0 *eer-grou* ebg*



96/111





Disla 5=P Routes


97/111


Disla 5=P Routes

"ow i* bg* rege/* line– Ti" (o))and" di"*#ay '+P route" tat )at(e" AS *at

regu#ar e/*re""ion #ine.

– "ow i* bg* rege/* R00R

"ow i* bg* "u))ary "ow i* bg* "ow i* bg* A.'.1. "ow i* route bg* "ow i* bg* neigbor" J*eer&PAddrK ad%erti"ed-

route" "ow i* bg* neigbor" J*eer&PAddrK route"

Route ,er!er


98/111


Route ,er!er

At an &nternet /(ange *oint7 )any &SP"are (onne(ted to ea( oter by e/terna#'+P *eering. Nor)a##y te"e e/terna# '+P(onne(tion are done by ,u## )e" )etod.

A" wit interna# '+P ,u## )e" ,or)ation7ti" )etod a" a "(a#ing *rob#e). oute Ser%er i" a )etod to re"o#%e te

*rob#e). a( &SPD" '+P router on#y *eer" to oute

Ser%er. oute Ser%er "er%e" a" '+P in,or)ation

e/(ange to oter '+P router".


99/111


"e%era# routing tab#e" ,or )anagingdi,,erent routing *o#i(ie" ,or ea('+P "*eaker ;i,,erent %iew"<

') (an work a" nor)a# '+P routeror oute Ser%er or bot at te "a)eti)e.

:ultile instan#e


100/111


To enab#e )u#ti*#e %iew ,un(tion o, bg*d7 you )u"t turn on)u#ti*#e in"tan(e ,eature be,oreand.

bg* )u#ti*#e-in"tan(e no bg* )u#ti*#e-in"tan(e bg* (on,ig-ty*e >ebra

– 4ebra "ty#e '+P (on,iguration. Ti" i" de,au#t. bg* (on,ig-ty*e (i"(o

– 1i"(o (o)*atib#e '+P (on,iguration out*ut.– !en bg* (on,ig-ty*e (i"(o i" "*e(i,ied7

no "yn(roni>ation i" di"*#ayed. no auto-"u))ary i"de"*#ayed.

network and aggregate-addre"" argu)ent i" di"*#ayed a" A.'.1. M.M.M.M 4ebra: network 0.0.0.05I 1i"(o: network 0.0.0.04ebra: aggregate-addre"" ?2.6I.0.0528 1i"(o: aggregate-

addre"" ?2.6I.0.0 2==.2==.2==.0


101/111

APRICOT 2006 - Perth Western A .0.

– &n (a"e o, bg* (on,ig-ty*e (i"(o i""*e(i,ied7 (o))unity attribute i" not"ent to te neigbor by de,au#t. To "end(o))unity attribute u"er a" to "*e(i,y

neigbor A.'.1. "end-(o))unity(o))and.

– router bg*

neigbor 0.0.0. re)ote-a" neigbor 0.0.0. "end-(o))unity

;


102/111


;


103/111


104/111

Routing oli#


105/111

APRICOT 2006 - Perth Western A .0$

g

Cou (an "et di,,erent routing *o#i(y ,or a *eer. For e/a)*#e7 you (an "etdi,,erent ,i#ter ,or a *eer.bg* )u#ti*#e-in"tan(eOrouter bg* %iew neigbor 0.0.0. re)ote-a" 2neigbor 0.0.0. di"tribute-#i"t inO

router bg* %iew 2neigbor 0.0.0. re)ote-a" 2neigbor 0.0.0. di"tribute-#i"t 2 in

a((e""-#i"t *er)it ?2.6I..0 0.0.0.2==a((e""-#i"t 2 *er)it ?2.6I.2.0 0.0.0.2==

Ti" )ean" '+P u*date ,ro) a *eer 0.0.0. goe" to bot '+P %iew and%iew 2. !en te u*date i" in"erted into %iew 7 di"tribute-#i"t i" a**#ied.$n te oter and7 wen te u*date i" in"erted into %iew 27 di"tribute-#i"t 2i" a**#ied.

8ie&ing the !ie&s


106/111


g

"ow i* bg* %iew name–i"*#ay routing tab#e o, '+P %iew na)e.


107/111

7iltering7iltering


108/111

IP A##ess ist


109/111


IP A##ess ist

a((e""-#i"t na)e *er)it i*%8-network a((e""-#i"t na)e deny i*%8-network 'a"i( ,i#tering i" done by a((e""-#i"t a"

"own in te ,o##owing e/a)*#e.

a((e""-#i"t ,i#ter deny 0.0.0.05?a((e""-#i"t ,i#ter *er)it 0.0.0.05Ia((e""-#i"t 00 *er)it i* any ?2.6I..0

0.0.0.2==

a((e""-#i"t ?0 *er)it ?2.6I..0 0.0.0.2== /a)*#e %ty a((e"" re"tri(t7 route-)a*)at( "tate)ent7 di"tribute-#i"t


110/111

Zebra/Zebra/QuaggaQuagga Routing SuiteRouting Suite

Tank youTank you

http://www.apricot2006.net/index.php/fuseaction/home.programtutorialshttp://www.apricot2006.net/index.php/fuseaction/home.programtutorialshttp://www.apricot2006.net/index.php/fuseaction/home.programtutorialshttp://www.apricot2006.net/index.php/fuseaction/home.programtutorialshttp://www.apricot2006.net/index.php/fuseaction/home.programtutorialshttp://www.apricot2006.net/index.php/fuseaction/home.programtutorialshttp://www.apricot2006.net/index.php/fuseaction/home.programtutorialshttp://www.apricot2006.net/index.php/fuseaction/home.programtutorialshttp://www.apricot2006.net/index.php/fuseaction/home.programtutorials


111/111

Date post:	06-Jul-2018
Category:	Documents
Upload:	pravin-bhandarkar
View:	222 times
Download:	0 times

Zebra Apricot

Documents