IP Addresses and Services Configuration Guide for Cisco ASR 9000 Series Routers, IOS XR ...

388 Pages·2017·5.22 MB·English

IP Addresses and Services Configuration Guide for Cisco ASR 9000
Series Routers, IOS XR Release 6.1.x
FirstPublished:2016-11-01
AmericasHeadquarters
CiscoSystems,Inc.
170WestTasmanDrive
SanJose,CA95134-1706
USA
http://www.cisco.com
Tel:[phone]
800553-NETS(6387)
Fax:[phone]
©2016CiscoSystems,Inc.Allrightsreserved.
CONTEN TS
PREFACE Preface xvii
ChangestoThisDocument xvii
Communications,Services,andAdditionalInformation xvii
CHAPTER 1 NewandChangedIPAddressesandServicesFeatures 1
NewandChangedIPAddressesandServicesFeatures 1
CHAPTER 2 ImplementingNetworkStackIPv4andIPv6 3
PrerequisitesforImplementingNetworkStackIPv4andIPv6 4
RestrictionsforImplementingNetworkStackIPv4andIPv6 4
InformationAboutImplementingNetworkStackIPv4andIPv6 4
NetworkStackIPv4andIPv6Exceptions 4
IPv4andIPv6Functionality 4
IPv6forCiscoIOSXRSoftware 5
LargerIPv6AddressSpace 5
IPv6AddressFormats 5
IPv6AddressType:Unicast 6
AggregatableGlobalAddress 7
Link-LocalAddress 8
IPv4-CompatibleIPv6Address 9
SimplifiedIPv6PacketHeader 9
PathMTUDiscoveryforIPv6 12
IPv6NeighborDiscovery 13
IPv6NeighborSolicitationMessage 13
IPv6RouterAdvertisementMessage 15
IPv6NeighborRedirectMessage 16
IPAddressesandServicesConfigurationGuideforCiscoASR9000SeriesRouters,IOSXRRelease6.1.x
iii
Contents
ICMPforIPv6 17
AddressRepositoryManager 17
AddressConflictResolution 17
Route-TagSupportforConnectedRoutes 18
HowtoImplementNetworkStackIPv4andIPv6 19
AssigningIPv4AddressestoNetworkInterfaces 20
IPv4Addresses 20
ConfiguringIPv6Addressing 21
IPv6VirtualAddresses 22
AssigningMultipleIPAddressestoNetworkInterfaces 22
SecondaryIPv4Addresses 22
ConfiguringIPv4andIPv6ProtocolStacks 23
EnablingIPv4ProcessingonanUnnumberedInterface 24
IPv4ProcessingonanUnnumberedInterface 24
ConfiguringICMPRateLimiting 26
IPv4ICMPRateLimiting 26
IPv6ICMPRateLimiting 26
ConfiguringIPARMConflictResolution 27
StaticPolicyResolution 27
LongestPrefixAddressConflictResolution 28
HighestIPAddressConflictResolution 29
GenericRoutingEncapsulation 29
IPv4/IPv6ForwardingoverGRETunnels 30
IPv6forwardingoverGREtunnels 30
DefaultRouterPreferencesandMore-SpecificRoutes(RFC4191) 30
ConfiguringDefaultRouterPreferences 31
ConfiguringMore-SpecificRoutes 33
TroubleshootingDefaultRouterPreferencesandMore-SpecificRoutes 34
IPv6RouterAdvertisementOptionsforDNSConfiguration(RFC6106) 36
ConfiguringDNSServerUsingIPv6RouterAdvertisementOptions 36
ConfiguringDNSSearchListUsingIPv6RouterAdvertisementOptions 38
TroubleshootingDNSServersandDNSSearchLists 39
TCPMSSAdjustment 40
ConfiguringTCPMSSforIPv4packets 41
IPAddressesandServicesConfigurationGuideforCiscoASR9000SeriesRouters,IOSXRRelease6.1.x
iv
Contents
ConfiguringTCPMSSforIPv6packets 41
ConfigurationExamplesforImplementingNetworkStackIPv4andIPv6 42
AssigninganUnnumberedInterface:Example 42
ConfiguringVRFmodebig 42
AdditionalReferences 43
CHAPTER 3 ImplementingARP 45
PrerequisitesforConfiguringARP 45
RestrictionsforConfiguringARP 45
InformationAboutConfiguringARP 46
IPAddressingOverview 46
AddressResolutiononaSingleLAN 46
AddressResolutionWhenInterconnectedbyaRouter 47
ARPandProxyARP 47
ARPCacheEntries 48
DirectAttachedGatewayRedundancy 48
AdditionalGuidelines 49
HowtoConfigureARP 49
DefiningaStaticARPCacheEntry 49
EnablingProxyARP 50
EnablingLocalProxyARP 50
ConfiguringDAGR 51
ConfiguringARPpurge-delay 53
ConfiguringARPtimeout 54
ConfigureLearningofLocalARPEntries 55
ConfigurationExamplesforARPConfigurationonCiscoIOSXRSoftware 56
CreatingaStaticARPCacheEntry:Example 56
EnablingProxyARP:Example 57
DisplayingtheARPTable:Example 57
EnablingDAGRandConfiguringaDAGRGroup:Example 57
DisplayingtheOperationalStateofDAGRGroups:Example 58
AdditionalReferences 58
CHAPTER 4 ImplementingtheDynamicHostConfigurationProtocol 61
IPAddressesandServicesConfigurationGuideforCiscoASR9000SeriesRouters,IOSXRRelease6.1.x
v
Contents
PrerequisitesforConfiguringDHCPRelayAgent 62
InformationAboutDHCPRelayAgent 62
SecureARP 63
HowtoConfigureandEnableDHCPRelayAgent 63
ConfiguringandEnablingDHCPRelayAgentwithDHCPMACAddressVerification 63
ConfiguringtheDHCPv6(Stateless)RelayAgent 64
EnablingDHCPRelayAgentonanInterface 65
DisablingDHCPRelayonanInterface 66
EnablingDHCPRelayonaVRF 66
ConfiguringtheRelayAgentInformationFeature 67
ConfiguringRelayAgentGiaddrPolicy 69
ConfiguringaDHCPProxyProfile 70
DHCPv4Server 71
ConfiguringDHCPv4ServerProfile 72
ConfiguringMultipleClasseswithaPool 74
ConfiguringaserverprofileDAPSwithclassmatchoption 77
ConfiguringServerProfilewithoutdapspoolmatchoption 80
ConfiguringanaddresspoolforeachISPonDAPS 82
DHCPv4Client 84
EnablingDHCPClientonanInterface 84
DHCPv6RelayAgentNotificationforPrefixDelegation 85
ConfiguringDHCPv6StatefulRelayAgentforPrefixDelegation 85
EnablingSecureARP 87
ConfigurationExamplesfortheDHCPRelayAgent 88
DHCPRelayProfile:Example 88
DHCPRelayonanInterface:Example 88
DHCPRelayonaVRF:Example 88
RelayAgentInformationOptionSupport:Example 89
RelayAgentGiaddrPolicy:Example 89
ImplementingDHCPSnooping 89
PrerequisitesforConfiguringDHCPSnooping 89
InformationaboutDHCPSnooping 89
TrustedandUntrustedPorts 90
DHCPSnoopinginaBridgeDomain 90
IPAddressesandServicesConfigurationGuideforCiscoASR9000SeriesRouters,IOSXRRelease6.1.x
vi
Contents
AssigningProfilestoaBridgeDomain 90
RelayInformationOptions 91
HowtoConfigureDHCPSnooping 91
EnablingDHCPSnoopinginaBridgeDomain 91
DisablingDHCPSnoopingonaSpecificBridgePort 93
UsingtheRelayInformationOption 95
ConfigurationExamplesforDHCPSnooping 96
AssigningaDHCPProfiletoaBridgeDomain:Example 96
DisablingDHCPSnoopingonaSpecificBridgePort:Example 96
ConfiguringaDHCPProfileforTrustedBridgePorts:Example 96
ConfiguringanUntrustedProfileonaBridgeDomain:Example 97
ConfiguringaTrustedBridgePort:Example 97
DHCPv6ProxyBindingTableReloadPersistency 97
ConfiguringDHCPv6ProxyBindingDatabaseWritetoSystemPersistentMemory 97
DHCPSessionMACThrottle 98
AdditionalReferences 99
CHAPTER 5 ImplementingHostServicesandApplications 101
PrerequisitesforImplementingHostServicesandApplications 101
InformationAboutImplementingHostServicesandApplications 102
NetworkConnectivityTools 102
Ping 102
Traceroute 102
DomainServices 103
TFTPServer 103
FileTransferServices 103
RCP 103
FTP 104
TFTP 104
SCP 104
Ciscoinetd 104
Telnet 105
HowtoImplementHostServicesandApplications 105
CheckingNetworkConnectivity 105
IPAddressesandServicesConfigurationGuideforCiscoASR9000SeriesRouters,IOSXRRelease6.1.x
vii
Contents
CheckingNetworkConnectivityforMultipleDestinations 105
CheckingPacketRoutes 106
ConfiguringDomainServices 107
ConfiguringaRouterasaTFTPServer 108
ConfiguringaRoutertoUsercpConnections 109
ConfiguringaRoutertoUseFTPConnections 110
ConfiguringaRoutertoUseTFTPConnections 112
ConfiguringTelnetServices 113
TransferringFilesUsingSCP 114
Configuringsyslogsource-interface 114
IPv6SupportforIPSLAICMPEchoOperation 115
ConfiguringanIPSLAICMPechooperation 115
ConfigurationExamplesforImplementingHostServicesandApplications 117
CheckingNetworkConnectivity:Example 117
ConfiguringDomainServices:Example 118
ConfiguringaRoutertoUsercp,FTP,orTFTPConnections:Example 119
AdditionalReferences 119
CHAPTER 6 ImplementingAccessListsandPrefixLists 121
PrerequisitesforImplementingAccessListsandPrefixLists 122
RestrictionsforImplementingAccessListsandPrefixLists 122
RestrictionsforImplementingACL-BasedForwarding 123
HardwareLimitations 124
InformationAboutImplementingAccessListsandPrefixLists 124
AccessListsandPrefixListsFeatureHighlights 124
PurposeofIPAccessLists 124
HowanIPAccessListWorks 125
IPAccessListProcessandRules 125
HelpfulHintsforCreatingIPAccessLists 126
SourceandDestinationAddresses 126
WildcardMaskandImplicitWildcardMask 126
TransportLayerInformation 127
IPAccessListEntrySequenceNumbering 127
SequenceNumberingBehavior 127
IPAddressesandServicesConfigurationGuideforCiscoASR9000SeriesRouters,IOSXRRelease6.1.x
viii
Contents
UnderstandingIPAccessListLoggingMessages 127
ExtendedAccessListswithFragmentControl 128
PolicyRouting 130
CommentsAboutEntriesinAccessLists 130
AccessControlListCounters 130
BGPFilteringUsingPrefixLists 131
HowtheSystemFiltersTrafficbyPrefixList 131
InformationAboutImplementingACL-basedForwarding 132
ACL-basedForwardingOverview 132
ABF-OT 132
IPv6ACLBasedForwardingObjectTracking 132
IPSLAsupportforObjecttracking 132
ACLCountersUsingSNMP 132
HowtoImplementAccessListsandPrefixLists 133
ConfiguringExtendedAccessLists 133
ApplyingAccessLists 136
ControllingAccesstoanInterface 136
ControllingAccesstoaLine 137
ConfiguringPrefixLists 138
ConfiguringStandardAccessLists 140
CopyingAccessLists 141
SequencingAccess-ListEntriesandRevisingtheAccessList 142
CopyingPrefixLists 144
SequencingPrefixListEntriesandRevisingthePrefixList 145
HowtoImplementACL-basedForwarding 146
ConfiguringACL-basedForwardingwithSecurityACL 146
ImplementingIPSLA-OT 148
Enablingtrackmode 148
Configuringtracktype 148
Configuringtrackingtype(lineprotocol) 149
Configuringtracktype(list) 149
Configuringtrackingtype(route) 150
Configuringtrackingtype(rtr) 151
ConfiguringPureACL-BasedForwardingforIPv6ACL 151
IPAddressesandServicesConfigurationGuideforCiscoASR9000SeriesRouters,IOSXRRelease6.1.x
ix
Contents
ACL-Chaining 152
ACL-ChainingOverview 152
RestrictionsforCommonACL 153
ConfiguringanInterfacetoacceptCommonACL 153
ConfiguringanInterfacetoAcceptMultipleACLsonCiscoASR9000HighDensity100GEEthernet
LineCards 154
ACLScaleEnhancements 155
ACLScaleEnhancements:BackwardCompatibility 155
ConfiguringaNetworkObject-Group 156
ConfiguringaPortObject-Group 157
ConfiguringACLwithObject-Groups 158
AtomicACLUpdatesByUsingtheDisableOption 161
ModifyingACLswhenAtomicACLUpdatesareDisabled 161
ConfiguringACLCountersforSNMPQuery 163
ConfigurationExamplesforImplementingAccessListsandPrefixLists 165
ResequencingEntriesinanAccessList:Example 165
AddingEntrieswithSequenceNumbers:Example 166
AddingEntriesWithoutSequenceNumbers:Example 166
AtomicACLUpdatesByUsingtheDisableOption 167
ModifyingACLswhenAtomicACLUpdatesareDisabled 167
IPv4/IPv6ACLoverBVIinterface 169
ConfiguringIPv4ACLoverBVIinterface-AnExample 169
ConfiguringABFv4/v6overIRB/BVIinterface 170
ConfiguringABFv4overIRB/BVIinterface:Example 172
ConfiguringABFv6overIRB/BVIinterface:Example 173
ConfiguringanInterfacetoacceptCommonACL-Examples 174
ConfiguringACLCountersforSNMPQuery:Example 175
AdditionalReferences 176
CHAPTER 7 ImplementingEnhancedPolicyBasedRouting 179
ConfiguringACLswithEnhancedPolicyBasedRouting 179
UsingePBRforMPLSPacketsonSubscriberInterfaces 180
UseCase:UsingePBRforMPLSPacketsonSubscriberInterfaces 181
ConfiguringePBR-BasedMPLSRedirection 182
IPAddressesandServicesConfigurationGuideforCiscoASR9000SeriesRouters,IOSXRRelease6.1.x
x