10.1.2 Lab – Implement Multiarea OSPFv3 Answers

Lab – Implement Multiarea OSPFv3 (Answers Version)

Answers Note: Red font color or gray highlights indicate text that appears in the instructor copy only.

Topology

Addressing Table

Device

Interface

IPv4 Address

IPv6 Address

IPv6 Link-Local

R1

G0/0/0

172.16.0.2/30

2001:db8:acad:a001::2/64

fe80::1:2

R1

G0/0/1

10.10.0.1/30

2001:db8:acad:1001::1/64

fe80::1:1

R2

Lo0

209.165.200.225/27

2001:db8:feed:209::1/64

fe80::2:3

R2

G0/0/0

172.16.0.1/30

2001:db8:acad:a001::1/64

fe80::2:1

R2

G0/0/1

172.16.1.1/30

2001:db8:acad:a002::1/64

fe80::2:2

R3

G0/0/0

172.16.1.2/30

2001:db8:acad:a002::2/64

fe80::3:2

R3

G0/0/1

10.10.4.1/30

2001:db8:acad:2001::1/64

fe80::3:1

D1

G1/0/11

10.10.0.2/30

2001:db8:acad:1001::2/64

fe80::d1:2

D1

G1/0/23

10.10.1.0/24

2001:db8:acad:1002::1/64

fe80::d1:1

D2

G1/0/11

10.10.4.2/30

2001:db8:acad:2001::2/64

fe80::d2:2

D2

G1/0/23

10.10.5.1/24

2001:db8:acad:2002::1/64

fe80::d2:1

Objectives

Part 1: Build the Topology and Configure Basic Device Settings and IP Addressing

Part 2: Configure Traditional OSPFv3 for IPv6 on D1

Part 3: Configure OSPFv3 for Address Families (AF) IPv4 and AF IPv6

Part 4: Verify OSPFv3 AF

Part 5: Tune OSPFv3 AF

Background / Scenario

In this lab, you will configure the network with multiarea OSPFv3 routing using the AF feature for both IPv4 and IPv6 in OSPF areas 0, 1 and 2. This lab was specifically designed to use three routers and two Layer 3 switches that support OSPFv3 using AF.

It should be noted that OSPFv3 runs on top of IPv6 and uses IPv6 link local addresses for OSPFv3 control packets.Therefore, it is required that IPv6 be enabled on an OSPFv3 link, although the link may not be participating in any IPv6 AFs. Additionally, OSPFv3 AF for IPv4 unicast is not backwards compatible with OSPFv2.

Note: The routers used with CCNP hands-on labs are Cisco 4221 with Cisco IOS XE Release 16.9.4 (universalk9 image). Other routers and Cisco IOS versions can be used. Depending on the model and Cisco IOS version, the commands available and the output produced might vary from what is shown in the labs.

Note: The switches used with CCNP hands-on labs are Cisco Catalyst 3650s with Cisco IOS XE Release 16.9.4 (universalk9 image). Other switches and Cisco IOS versions can be used. Depending on the model and Cisco IOS version, the commands available and output produced might vary from what is shown in the labs.

Note: Ensure that the routers and switches have been erased and have no startup configurations. If you are unsure contact your instructor.

Answers Note: Refer to the Answers Lab Manual for the procedures to initialize and reload devices.

Required Resources

  • 3 Routers (Cisco 4221 with Cisco IOS XE Release 16.9.4 universal image or comparable)
  • 2 Switches (Cisco 3650 with Cisco IOS XE Release 16.9.4 universal image or comparable)
  • Console cables to configure the Cisco IOS devices via the console ports
  • Ethernet cables as shown in the topology

Instructions

Part 1:Build the Network and Configure Basic Device Settings and Interface Addressing

In Part 1, you will set up the network topology and configure basic settings and interface addressing on routers and switches.

Step 1:Cable the network as shown in the topology.

Attach the devices as shown in the topology diagram, and cable as necessary.

Step 2:Configure basic settings for each router.

  1. Console into each device, enter global configuration mode, and apply the basic settings and interface addressing using the following startup configurations for each device.

Open configuration window

Router R1

hostname R1

no ip domain lookup

line con 0

logging sync

exec-time 0 0

exit

interface g0/0/0

ip add 172.16.0.2 255.255.255.252

ipv6 add 2001:db8:acad:a001::2/64

ipv6 add fe80::1:2 link-local

no shut

exit

interface GigabitEthernet0/0/1

ipv6 add 2001:db8:acad:1001::1/64

ipv6 add fe80::1:1 link-local

no shut

exit

Router R2

hostname R2

no ip domain lookup

line con 0

logging sync

exec-time 0 0

exit

interface g0/0/0

ip add 172.16.0.1 255.255.255.252

ipv6 add 2001:db8:acad:a001::1/64

ipv6 add fe80::2:1 link-local

no shut

exit

interface GigabitEthernet0/0/1

ip address 172.16.1.1 255.255.255.252

ipv6 add 2001:db8:acad:a002::1/64

ipv6 add fe80::2:2 link-local

no shut

exit

int lo0

ip add 209.165.200.225 255.255.255.224

ipv6 add 2001:db8:feed:209::1/64

ipv6 add fe80::2:3 link-local

exit

Router R3

hostname R3

no ip domain lookup

line con 0

logging sync

exec-time 0 0

exit

interface g0/0/0

ip add 172.16.1.2 255.255.255.252

ipv6 add 2001:db8:acad:a002::2/64

ipv6 add fe80::3:2 link-local

no shut

exit

interface GigabitEthernet0/0/1

ip address 10.10.4.1 255.255.255.252

ipv6 add 2001:db8:acad:2001::1/64

ipv6 add fe80::3:1 link-local

no shut

exit

Switch D1

hostname D1

no ip domain lookup

line con 0

exec-timeout 0 0

logging synchronous

exit

interface g1/0/11

no switchport

ipv6 add 2001:db8:acad:1001::2/64

ipv6 add fe80::d1:2 link-local

no shutdown

exit

interface g1/0/23

no switchport

ipv6 add 2001:db8:acad:1002::1/64

ipv6 add fe80::d1:1 link-local

no shutdown

exit

Switch D2

host D2

no ip domain lookup

line con 0

logging sync

exec-time 0 0

exit

interface gi1/0/11

no switchport

ip address 10.10.4.2 255.255.255.252

ipv6 add 2001:db8:acad:2001::2/64

ipv6 add fe80::d2:2 link-local

no shut

exit

interface gi1/0/23

no switchport

ip address 10.10.5.1 255.255.255.0

ipv6 add 2001:db8:acad:2002::1/64

ipv6 add fe80::d2:1 link-local

no shut

exit

  1. Save the running configuration to startup-config.

Close configuration window

Part 2:Configure Traditional OSPFv3 for IPv6 on D1

Step 1:Configure traditional OSPFv3 on D1.

Traditional OSPFv3 implements OSPF routing for IPv6. In this part of the lab, you will configure traditional OSPFv3 for routing IPv6 on D1, which is in the IPv6-only area.

  1. OSPFv3 messages are sourced from the router’s IPv6 link-local address. Earlier in this lab, IPv6 GUA and link-local addresses were statically configured on each router’s interface. The link-local addresses were statically configured to make these addresses more recognizable than being automatically created using EUI-64. Issue the show ipv6 interface brief command to verify the GUA and link-local addresses on the router’s interfaces.

Open configuration window

D1# show ipv6 interface brief

<output omitted>

GigabitEthernet1/0/11[up/up]

FE80::D1:2

2001:DB8:ACAD:1001::2

<output omitted>

GigabitEthernet1/0/23[up/up]

FE80::D1:1

2001:DB8:ACAD:1002::1

<output omitted>

  1. IPv6 routing is disabled by default. Enable IPv6 routing using the ipv6 unicast-routing command in global configuration mode.

D1(config)# ipv6 unicast-routing

  1. Most Cisco IOS versions have IPv6 CEF enabled by default when IPv6 routing is enabled. Use the show ipv6 cef command to verify whether IPv6 CEF is enabled. If you need to enable IPv6 CEF, use the ipv6 cef command. If IPv6 CEF is disabled you will see the an IOS message similar to “%IPv6 CEF not running”.

D1# show ipv6 cef

::/0

no route

::/127

discard

2001:DB8:ACAD:1001::/64

attached to GigabitEthernet1/0/11

2001:DB8:ACAD:1001::2/128

receive for GigabitEthernet1/0/11

2001:DB8:ACAD:1002::/64

attached to GigabitEthernet1/0/23

2001:DB8:ACAD:1002::1/128

receive for GigabitEthernet1/0/23

FE80::/10

receive for Null0

FF00::/8

multicast

FF02::/16

receive

  1. Configure the OSPFv3 process on D1. Similar to OSPFv2, the process ID does not have to match other routers to form neighbor adjacencies, although that is considered best practice. Configure the 32-bit OSPFv3 router ID on each router. Enable OSPFv3 directly on the interfaces using the interface ipv6 ospf pid area area command.

D1(config)# ipv6 unicast-routing

D1(config)# ipv6 router ospf 123

D1(config-rtr)# router-id 1.1.1.2

D1(config-rtr)# exit

D1(config)# interface g1/0/11

D1(config-if)# ipv6 ospf 123 area 1

D1(config-if)# exit

D1(config)# interface g1/0/23

D1(config-if)# ipv6 ospf 123 area 1

D1(config-if)# exit

  1. The show ipv6 ospf command can be used to verify the OSPF router ID. If the OSPFv3 router ID is uses a 32-bit value other than the one specified by the router-id command, you can reset the router ID by using the clear ipv6 ospf pid process command and re-verify using the command show ipv6 ospf.

D1# show ipv6 ospf

Routing Process “ospfv3 123” with ID 1.1.1.2

Supports NSSA (compatible with RFC 3101)

Supports Database Exchange Summary List Optimization (RFC 5243)

Event-log enabled, Maximum number of events: 1000, Mode: cyclic

Router is not originating router-LSAs with maximum metric

Initial SPF schedule delay 50 msecs

Minimum hold time between two consecutive SPFs 200 msecs

Maximum wait time between two consecutive SPFs 5000 msecs

Initial LSA throttle delay 50 msecs

Minimum hold time for LSA throttle 200 msecs

Maximum wait time for LSA throttle 5000 msecs

Minimum LSA arrival 100 msecs

LSA group pacing timer 240 secs

Interface flood pacing timer 33 msecs

Retransmission pacing timer 66 msecs

Retransmission limit dc 24 non-dc 24

EXCHANGE/LOADING adjacency limit: initial 300, process maximum 300

Number of external LSA 0. Checksum Sum 0x000000

Number of areas in this router is 1. 1 normal 0 stub 0 nssa

Graceful restart helper support enabled

Reference bandwidth unit is 100 mbps

RFC1583 compatibility enabled

Area 1

Number of interfaces in this area is 2

SPF algorithm executed 5 times

Number of LSA 12. Checksum Sum 0x0486C1

Number of DCbitless LSA 0

Number of indication LSA 0

Number of DoNotAge LSA 0

Flood list length 0

  1. The show ipv6 protocols command can be used to verify general OSPFv3 information such as areas and enabled interfaces.

D1# show ipv6 protocols

IPv6 Routing Protocol is “connected”

IPv6 Routing Protocol is “ND”

IPv6 Routing Protocol is “ospf 123

Router ID 1.1.1.2

Number of areas: 1 normal, 0 stub, 0 nssa

Interfaces (Area 1):

GigabitEthernet1/0/23

GigabitEthernet1/0/11

Redistribution:

None

Close configuration window

Part 3:Configure OSPFv3 for AF IPv4 and AF IPv6

OSPFv3 with the address family (AF) unifies OSPF configuration for both IPv4 and IPv6. Each OSPFv3 AF is a single process, so you may have two processes per interface, but only one process per AF. OSPFv3 messages are sent over IPv6 which requires that IPv6 routing is enabled and that the interface has a link-local IPv6 address. This is the requirement even if only the IPv4 AF is configured.

In this section you will configure OSPFv3 with AF for the IPv4 and IPv6 address families on R1, R2, R3, D1 and D2.

Step 1:Configure OSPFv3 with AF on R1.

  1. After enabling IPv6 unicast routing, configure OSPFv3 with AF on R1 using the router ospfv3 pid command. Use the ? to see the address families available.

Open configuration window

R1(config)# ipv6 unicast-routing

R1(config)# router ospfv3 123

R1(config-router)# address-family ?

ipv4Address family

ipv6Address family

  1. Next, specify the AF for IPv4 and use the ? to see the available options.

R1(config-router)# address-family ipv4 ?

unicastAddress Family modifier

vrfSpecify parameters for a VPN Routing/Forwarding instance

<cr>

  1. Enter the AF for IPv4 unicast using the command address-family ipv4 unicast. Use the ? to examine the options in AF configuration mode. Some of the more common configuration commands are highlighted. Use the router-id command to configure the router ID for the IPv4 AF.

R1(config-router)# address-family ipv4 unicast

R1(config-router-af)# ?

Router Address Family configuration commands:

adjacencyControl adjacency formation

areaOSPF area parameters

authenticationAuthentication parameters

auto-costCalculate OSPF interface cost according to bandwidth

auto-cost-determinationCalculate OSPF interface cost according to bandwidth

bfdBFD configuration commands

compatibleCompatibility list

defaultSet a command to its defaults

default-informationControl distribution of default information

default-metricSet metric of redistributed routes

discard-routeEnable or disable discard-route installation

distanceDefine an administrative distance

distribute-listFilter networks in routing updates

event-logEvent Logging

exit-address-familyExit from Address Family configuration mode

graceful-restartGraceful-restart options

helpDescription of the interactive help system

ignoreDo not complain about specific event

interface-idSource of the interface ID

limitLimit a specific OSPF feature

local-rib-criteriaEnable or disable usage of local RIB as route

criteria

log-adjacency-changesLog changes in adjacency state

manetSpecify MANET OSPF parameters

max-lsaMaximum number of non self-generated LSAs to accept

max-metricSet maximum metric

maximum-pathsForward packets over multiple paths

mplsMPLS Traffic Engineering configs

noNegate a command or set its defaults

passive-interfaceSuppress routing updates on an interface

prefix-suppressionEnable prefix suppression

process-min-timePercentage of quantum to be used before releasing

CPU

queue-depthHello/Router process queue depth

redistributeRedistribute information from another routing

protocol

router-idrouter-id for this OSPF process

shutdownShutdown the router process

snmpModify snmp parameters

statisticsEnable or disable OSPF statistics options

summary-addressConfigure IP address summaries

summary-prefixConfigure IP address summaries

timersAdjust routing timers

R1(config-router-af)#

R1(config-router-af)# router-id 1.1.1.1

  1. Exit the IPv4 AF configuration mode and enter the AF IPv6 configuration mode. The exit-address-family (or a shorter version of exit) command is used exit address family configuration mode. Issue the address-family ipv6 unicast command to enter the IPv6 AF. For the IPv6 AF, use the router-id command to configure the router ID. It isn’t necessary to configure a different router ID for IPv6 AF but it is a valid option. The exit command is used to return to global configuration mode.

R1(config-router-af)# exit-address-family

R1(config-router)# address-family ipv6 unicast

R1(config-router-af)# router-id 1.1.1.1

R1(config-router-af)# exit-address-family

R1(config-router)# exit

  1. OSPFv3 is enabled directly on the interfaces for both IPv4 and IPv6 AFs using the ospfv3 pid [ ipv4 | ipv6 ] area area-id interface command. Use this command to enable OSPFv3 on both of R1’s interfaces.

R1(config)# interface g0/0/0

R1(config-if)# ospfv3 123 ipv4 area 0

R1(config-if)# ospfv3 123 ipv6 area 0

R1(config-if)# exit

R1(config)# interface g0/0/1

R1(config-if)# ospfv3 123 ipv4 area 1

R1(config-if)# ospfv3 123 ipv6 area 1

Close configuration window

Step 2:Configure OSPFv3 with AF IPv4 and AF IPv6 on R2.

Enable IPv6 unicast routing and configure the OSPFv3 with AF for both IPv4 and IPv6 on R2, similar to the configuration for R1.

Open configuration window

R2(config)# ipv6 unicast-routing

R2(config)# router ospfv3 123

R2(config-router)# address-family ipv4 unicast

R2(config-router-af)# router-id 2.2.2.1

R2(config-router-af)# exit-address-family

R2(config-router)# address-family ipv6 unicast

R2(config-router-af)# router-id 2.2.2.1

R2(config-router-af)# exit-address-family

R2(config-router)# exit

R2(config)# interface g0/0/0

R2(config-if)# ospfv3 123 ipv4 area 0

R2(config-if)# ospfv3 123 ipv6 area 0

R2(config-if)# exit

R2(config)# interface g0/0/1

R2(config-if)# ospfv3 123 ipv4 area 0

R2(config-if)# ospfv3 123 ipv6 area 0

Close configuration window

Step 3:Configure OSPFv3 with IPv4 AF and IPv6 AF on R3.

Enable IPv6 unicast routing and configure the OSPFv3 with AF for both IPv4 and IPv6 on R3, similar to the configurations for R1 and R2. On R3, set the router ID for both IPv4 AF and IPv6 AF with a single command as shown.

Open configuration window

R3(config)# ipv6 unicast-routing

R3(config)# router ospfv3 123

R3(config-router)# router-id 3.3.3.1

R3(config-router)# address-family ipv4 unicast

R3(config-router-af)# exit-address-family

R3(config-router)# address-family ipv6 unicast

R3(config-router-af)# exit-address-family

R3(config-router)# exit

R3(config)# interface g0/0/0

R3(config-if)# ospfv3 123 ipv4 area 0

R3(config-if)# ospfv3 123 ipv6 area 0

R3(config-if)# exit

R3(config)# interface g0/0/1

R3(config-if)# ospfv3 123 ipv4 area 2

R3(config-if)# ospfv3 123 ipv6 area 2

Close configuration window

Step 4:Configure OSPFv3 with AF on D2.

  1. Enter the following command to enable routing for IPv4. (This may not be required on depending on model and IOS.)

Open configuration window

D2(config)# ip routing

  1. Enter the following command to enable routing for IPv6. (This may not be required on depending on model and IOS.)

D2(config)# ipv6 unicast-routing

Note: By default, the 3650 supports IPv6 interface configuration.

  1. Configure the OSPFv3 with AF for both IPv4 and IPv6 on D2, similar to the configurations for R1, R2 and R3.

D2(config)# router ospfv3 123

D2(config-router)# address-family ipv4 unicast

D2(config-router-af)# router-id 3.3.3.2

D2(config-router-af)# exit-address-family

D2(config-router)# address-family ipv6 unicast

D2(config-router-af)# router-id 3.3.3.2

D2(config-router-af)# exit-address-family

D2(config-router)# exit

D2(config)# interface g1/0/11

D2(config-if)# ospfv3 123 ipv4 area 2

D2(config-if)# ospfv3 123 ipv6 area 2

D2(config-if)# exit

D2(config)# interface g 1/0/23

D2(config-if)# ospfv3 123 ipv4 area 2

D2(config-if)# ospfv3 123 ipv6 area 2

Close configuration window

Part 4:Verify OSPFv3

The commands to verify traditional OSPFv3 and OSPFv3 with AF may differ. This is because OSPFv3 with AF commands include information for both IPv4 and IPv6 address families, whereas traditional OSPFv3 is for IPv6 only.

Step 1:Verifying neighbor adjacencies.

  1. Use the show ipv6 ospf neighbor command on D1 to display OSPFv3 neighbors. This is a command used for routers configured with traditional OSPFv3. The equivalent command for OSPFv2 would be show ip ospf neighbor.

Open configuration window

D1# show ipv6 ospf neighbor

OSPFv3 Router with ID (1.1.1.2) (Process ID 123)

Neighbor IDPriStateDead TimeInterface IDInterface

1.1.1.11FULL/DR00:00:396GigabitEthernet1/0/11

  1. This same command on a router running OSPFv3 with AF would generate similar output. For example, on R1 issue the same show ipv6 ospf neighbor command. Notice the output is only OSPFv3 for the IPv6 AF.

R1# show ipv6 ospf neighbor

OSPFv3 Router with ID (1.1.1.1) (Process ID 123)

Neighbor IDPriStateDead TimeInterface IDInterface

2.2.2.11FULL/BDR00:00:315GigabitEthernet0/0/0

1.1.1.21FULL/BDR00:00:38471GigabitEthernet0/0/1

  1. Now, issue the show ospfv3 neighbor command on R1. This is a command used for routers configured for OSPFv3 with AF. Notice the output includes neighbors for both IPv4 and IPv6 address families.

R1# show ospfv3 neighbor

OSPFv3 123 address-family ipv4 (router-id 1.1.1.1)

Neighbor IDPriStateDead TimeInterface IDInterface

2.2.2.11FULL/BDR00:00:385GigabitEthernet0/0/0

OSPFv3 123 address-family ipv6 (router-id 1.1.1.1)

Neighbor IDPriStateDead TimeInterface IDInterface

2.2.2.11FULL/BDR00:00:325GigabitEthernet0/0/0

1.1.1.21FULL/BDR00:00:30471GigabitEthernet0/0/1

Traditional OSPFv3 commands are similar to those for OSPFv2, except ipv6 is used as an argument instead of ip, for example show ip ospf neighbor and show ipv6 ospf neighbor. OSPFv3 with AF uses the argument ospfv3 which includes both OSPF for IPv4 and IPv6 AFs. For example, show ospfv3 neighbor.

Traditional OSPFv3 commands can be used when a router is configured for OSPFv3 with AF, but the OSPFv3 AF router will only show OSPF for IPv6 AF information. OSPFv3 with AF commands cannot be used on routers configured with traditional OSPFv3.

To summarize the show command arguments:

  • OSPFv2: Use show ip ospf (IPv4 only)
  • Traditional OSPFv3: Use show ipv6 ospf (IPv6 only)
  • OSPFv3 with AF: Use show ospfv3 (IPv4 and IPv6 AF) or show ipv6 ospf (IPv6 only)

Question:

Why does the show ipv6 ospf neighbor command only display OSPFv3 neighbors in the IPv6 AF?

Type your answers here.

The show ipv6 ospf neighbor command is used to display OSPFv3 neighbor adjacencies, specifically for IPv6 indicated by the ipv6 keyword in the command. The router ID 1.1.1.6 and 3.3.3.6 are associated with the IPv6 AF.

Close configuration window

Step 2:Examining the IP routing tables.

  1. Use the show ipv6 route ospf command on D1 to display OSPFv3 routing entries in the IPv6 routing table.

Open configuration window

D1# show ipv6 route ospf

IPv6 Routing Table – default – 9 entries

Codes: C – Connected, L – Local, S – Static, U – Per-user Static route

B – BGP, R – RIP, H – NHRP, I1 – ISIS L1

I2 – ISIS L2, IA – ISIS interarea, IS – ISIS summary, D – EIGRP

EX – EIGRP external, ND – ND Default, NDp – ND Prefix, DCE – Destination

NDr – Redirect, RL – RPL, O – OSPF Intra, OI – OSPF Inter

OE1 – OSPF ext 1, OE2 – OSPF ext 2, ON1 – OSPF NSSA ext 1

ON2 – OSPF NSSA ext 2, la – LISP alt, lr – LISP site-registrations

ld – LISP dyn-eid, lA – LISP away, le – LISP extranet-policy

OI2001:DB8:ACAD:2001::/64 [110/4]

via FE80::1:1, GigabitEthernet1/0/11

OI2001:DB8:ACAD:2002::/64 [110/5]

via FE80::1:1, GigabitEthernet1/0/11

OI2001:DB8:ACAD:A001::/64 [110/2]

via FE80::1:1, GigabitEthernet1/0/11

OI2001:DB8:ACAD:A002::/64 [110/3]

via FE80::1:1, GigabitEthernet1/0/11

Question:

Display the routes using the show ip route ospf. Why are there no routes displayed using this command?

Type your answers here.

D1 is in an IPv6-only area. D1 is only implementing traditional OSPFv3 for IPv6 and has not been configured for OSPFv2 for IPv4.

  1. Understanding the difference between commands associated with OSPFv2 and OSPFv3 can seem challenging at times. The show ip route ospfv3 command is used to view OSPFv3 routes in the IPv4 routing table. The show ipv6 route ospf command is used to view OSPFv3 routes in the IPv6 routing table. The show ipv6 route ospf command is the same command used with traditional OSPFv3 for IPv6.

R1# show ip route ospf

R1# show ip route ospfv3

Codes: L – local, C – connected, S – static, R – RIP, M – mobile, B – BGP

D – EIGRP, EX – EIGRP external, O – OSPF, IA – OSPF inter area

N1 – OSPF NSSA external type 1, N2 – OSPF NSSA external type 2

E1 – OSPF external type 1, E2 – OSPF external type 2

i – IS-IS, su – IS-IS summary, L1 – IS-IS level-1, L2 – IS-IS level-2

ia – IS-IS inter area, * – candidate default, U – per-user static route

o – ODR, P – periodic downloaded static route, H – NHRP, l – LISP

a – application route

+ – replicated route, % – next hop override, p – overrides from PfR

Gateway of last resort is not set

10.0.0.0/8 is variably subnetted, 4 subnets, 3 masks

O IA10.10.4.0/30 [110/3] via 172.16.0.1, 00:17:34, GigabitEthernet0/0/0

O IA10.10.5.0/24 [110/4] via 172.16.0.1, 00:17:34, GigabitEthernet0/0/0

172.16.0.0/16 is variably subnetted, 3 subnets, 2 masks

O172.16.1.0/30 [110/2] via 172.16.0.1, 00:17:34, GigabitEthernet0/0/0

R1# show ipv6 route ospfv3

^

% Invalid input detected at ‘^’ marker.

R1# show ipv6 route ospf

IPv6 Routing Table – default – 9 entries

Codes: C – Connected, L – Local, S – Static, U – Per-user Static route

B – BGP, R – RIP, H – NHRP, I1 – ISIS L1

I2 – ISIS L2, IA – ISIS interarea, IS – ISIS summary, D – EIGRP

EX – EIGRP external, ND – ND Default, NDp – ND Prefix, DCE – Destination

NDr – Redirect, RL – RPL, O – OSPF Intra, OI – OSPF Inter

OE1 – OSPF ext 1, OE2 – OSPF ext 2, ON1 – OSPF NSSA ext 1

ON2 – OSPF NSSA ext 2, a – Application

O2001:DB8:ACAD:1002::/64 [110/2]

via FE80::D1:2, GigabitEthernet0/0/1

OI2001:DB8:ACAD:2001::/64 [110/3]

via FE80::2:1, GigabitEthernet0/0/0

OI2001:DB8:ACAD:2002::/64 [110/4]

via FE80::2:1, GigabitEthernet0/0/0

O2001:DB8:ACAD:A002::/64 [110/2]

via FE80::2:1, GigabitEthernet0/0/0

Question:

Why doesn’t the show ip route ospf command display any routes on R1?

Type your answers here.

The show ip route ospf command is used to display OSPFv2 routes in the IPv4 routing table. R1 is implementing OSPFv3.

Close configuration window

Step 3:Examining the OSPF LSDB.

  1. D1 is running traditional OSPFv3. The show ipv6 ospf database command is used to display a summary of the OSPFv3 LSDB.

Open configuration window

D1# show ipv6 ospf database

OSPFv3 Router with ID (1.1.1.2) (Process ID 123)

Router Link States (Area 1)

ADV RouterAgeSeq#Fragment IDLink countBits

1.1.1.110960x8000000901B

1.1.1.211100x8000000501None

Net Link States (Area 1)

ADV RouterAgeSeq#Link IDRtr count

1.1.1.111520x8000000162

Inter Area Prefix Link States (Area 1)

ADV RouterAgeSeq#Prefix

1.1.1.110960x800000032001:DB8:ACAD:A001::/64

1.1.1.110960x800000032001:DB8:ACAD:A002::/64

1.1.1.18330x800000052001:DB8:ACAD:2001::/64

1.1.1.114970x800000022001:DB8:ACAD:2002::/64

Link (Type-8) Link States (Area 1)

ADV RouterAgeSeq#Link IDInterface

1.1.1.211500x8000000139Gi1/0/23

1.1.1.110960x800000066Gi1/0/11

1.1.1.211510x8000000138Gi1/0/11

Intra Area Prefix Link States (Area 1)

ADV RouterAgeSeq#Link IDRef-lstypeRef-LSID

1.1.1.111520x8000000161440x20026

1.1.1.211500x8000000300x20010

  1. R1 is running OSPFv3 with AF. The show ospfv3 database command is used to display a summary of the OSPFv3 LSDB for both the IPv4 and IPv6 AFs.

R1# show ospfv3 database

OSPFv3 123 address-family ipv4 (router-id 1.1.1.1)

Router Link States (Area 0)

ADV RouterAgeSeq#Fragment IDLink countBits

1.1.1.15320x8000000501None

2.2.2.15080x8000000802None

3.3.3.15070x8000000601B

Net Link States (Area 0)

ADV RouterAgeSeq#Link IDRtr count

2.2.2.15390x8000000152

3.3.3.15120x8000000152

Inter Area Prefix Link States (Area 0)

ADV RouterAgeSeq#Prefix

3.3.3.15530x8000000110.10.4.0/30

3.3.3.15130x8000000110.10.5.0/24

Link (Type-8) Link States (Area 0)

ADV RouterAgeSeq#Link IDInterface

1.1.1.15790x800000015Gi0/0/0

2.2.2.15790x800000015Gi0/0/0

Intra Area Prefix Link States (Area 0)

ADV RouterAgeSeq#Link IDRef-lstypeRef-LSID

2.2.2.15390x8000000151200x20025

3.3.3.15120x8000000151200x20025

Router Link States (Area 1)

ADV RouterAgeSeq#Fragment IDLink countBits

1.1.1.16020x8000000100None

OSPFv3 123 address-family ipv6 (router-id 1.1.1.1)

Router Link States (Area 0)

ADV RouterAgeSeq#Fragment IDLink countBits

1.1.1.15300x8000000501B

2.2.2.15080x8000000902None

3.3.3.15080x8000000601B

Net Link States (Area 0)

ADV RouterAgeSeq#Link IDRtr count

2.2.2.15390x8000000152

3.3.3.15110x8000000152

Inter Area Prefix Link States (Area 0)

ADV RouterAgeSeq#Prefix

1.1.1.15790x800000012001:DB8:ACAD:1001::/64

1.1.1.15590x800000012001:DB8:ACAD:1002::/64

3.3.3.15510x800000012001:DB8:ACAD:2001::/64

3.3.3.15120x800000012001:DB8:ACAD:2002::/64

Link (Type-8) Link States (Area 0)

ADV RouterAgeSeq#Link IDInterface

1.1.1.15780x800000025Gi0/0/0

2.2.2.15780x800000025Gi0/0/0

Intra Area Prefix Link States (Area 0)

ADV RouterAgeSeq#Link IDRef-lstypeRef-LSID

2.2.2.15390x8000000151200x20025

3.3.3.15110x8000000151200x20025

Router Link States (Area 1)

ADV RouterAgeSeq#Fragment IDLink countBits

1.1.1.15530x8000000601B

1.1.1.25520x8000002501None

Net Link States (Area 1)

ADV RouterAgeSeq#Link IDRtr count

1.1.1.25600x80000001382

Inter Area Prefix Link States (Area 1)

ADV RouterAgeSeq#Prefix

1.1.1.15780x800000012001:DB8:ACAD:A001::/64

1.1.1.15380x800000012001:DB8:ACAD:A002::/64

1.1.1.15060x800000012001:DB8:ACAD:2002::/64

1.1.1.15060x800000012001:DB8:ACAD:2001::/64

Link (Type-8) Link States (Area 1)

ADV RouterAgeSeq#Link IDInterface

1.1.1.15590x8000000C6Gi0/0/1

1.1.1.25980x8000000238Gi0/0/1

Intra Area Prefix Link States (Area 1)

ADV RouterAgeSeq#Link IDRef-lstypeRef-LSID

1.1.1.24810x8000001600x20010

1.1.1.25600x80000001389120x200238

Question:

What would the show ipv6 route database command display on R1, if anything?

Type your answers here.

The show ipv6 ospf database command can also be used on R1, but it will only display OSPFv3 IPv6 AF information.

Close configuration window

Part 5:Tune OSPFv3

Step 1:Configuring a passive interface.

  1. To configure a passive interface in traditional OSPFv3, use the passive-interface command in OSPFv3 router mode.

Open configuration window

D1(config)# ipv6 router ospf 123

D1(config-rtr)# passive-interface g1/0/23

  1. To configure a passive interface in OSPFv3 with AF, you can use the passive-interface command in OSPFv3 router mode to configure the passive interface for both IPv4 and IPv6 AFs.

D2(config)# router ospfv3 123

D2(config-router)# passive-interface g1/0/23

  1. As an alternative, you can use the passive-interface command within AF configuration mode to configure the passive interface for a specific AFs.

D2(config-router)# no passive-interface g1/0/23

D2(config-router)# address-family ipv4 unicast

D2(config-router-af)# passive-interface g1/0/23

D2(config-router-af)# exit-address-family

D2(config-router)# address-family ipv6 unicast

D2(config-router-af)# passive-interface g1/0/23

D2(config-router-af)# exit-address-family

Close configuration window

Step 2:Configuring summarization.

  1. The area area range ipv6-summary-address command is used to summarize prefixes from one are into another. The area is the area from which the prefixes are summarized.

Open configuration window

R1(config)# router ospfv3 123

R1(config-router)# address-family ipv6 unicast

R1(config-router-af)# area 1 range 2001:db8:acad:1000::/52

R3(config)# router ospfv3 123

R3(config-router)# address-family ipv6 unicast

R3(config-router-af)# area 2 range 2001:db8:acad:2000::/52

  1. Notice that R2 is now receiving the summarized prefixes.

R2# show ipv6 route ospf

<output omitted>

OI2001:DB8:ACAD:1000::/52 [110/3]

via FE80::1:2, GigabitEthernet0/0/0

OI2001:DB8:ACAD:2000::/52 [110/3]

via FE80::3:2, GigabitEthernet0/0/1

Question:

Why is prefix summarization considered desirable? How does it stabilize routing?

Type your answers here.

It reduces the number of routes in the routing table and stabilizes routing performance. As long as at least one subnet is still available within the summarized prefix, the aggregated route will continue to be advertised.

Close configuration window

Step 3:Modifying the network type.

  1. OSPFv3 supports the same network types as OSPFv2. Notice that the Ethernet interfaces between R2 and R1, and R2 and R3, elect a DR and a BDR. This is because Ethernet is a multiaccess network. However, these are point-to-point links and there is no need for a DR or BDR.

Open configuration window

R2# show ospfv3 interface brief

InterfacePIDAreaAFCostState Nbrs F/C

Gi0/0/11230ipv41BDR1/1

Gi0/0/01230ipv41DR1/1

Gi0/0/11230ipv61BDR1/1

Gi0/0/01230ipv61DR1/1

  1. These connections can be changed to point-to-point using the ospfv3 network point-to-point interface command. This command needs to be configured one both sides of the point to point interface.

R2(config)# interface g0/0/1

R2(config-if)# ospfv3 network point-to-point

R2(config-if)# exit

R2(config)# interface g0/0/0

R2(config-if)# ospfv3 network point-to-point

R1(config)# interface g0/0/0

R1(config-if)# ospfv3 network point-to-point

R3(config)# interface g0/0/0

R3(config-if)# ospfv3 network point-to-point

  1. Notice that the links have now change to P2P.

R2# show ospfv3 interface brief

InterfacePIDAreaAFCostState Nbrs F/C

Gi0/0/11230ipv41P2P1/1

Gi0/0/01230ipv41P2P1/1

Gi0/0/11230ipv61P2P1/1

Gi0/0/01230ipv61P2P1/1

Question:

What is the effect on the state of the interface when changing a broadcast network to point-to-point?

Type your answers here.

There is no longer a DR or BDR on the multiaccess network.

Close configuration window

Step 4:Advertising a default route.

  1. Similar to OSPFv2, an ASBR in OSPFv3 advertises using the default-information command.Configure a static default route for IPv4 and IPv6 on R2.

Note: Without a default route in the routing table, OSPF would require the default-information originate always command to advertise a default route.

Open configuration window

R2(config)# ipv6 route ::/0 lo0

R2(config)# ip route 0.0.0.0 0.0.0.0 lo0

R2(config)# router ospfv3 123

R2(config-router)# address-family ipv6 unicast

R2(config-router-af)# default-information originate

R2(config-router-af)# exit

R2(config-router)# address-family ipv4 unicast

R2(config-router-af)# default-information originate

R2(config-router-af)# exit

  1. Verify D1 is receiving an IPv6 default route via OSPFv3.

D1# show ipv6 route ospf

<output omitted>

OE2 ::/0 [110/1], tag 123

via FE80::1:1, GigabitEthernet1/0/11

OI2001:DB8:ACAD:2000::/52 [110/5]

via FE80::1:1, GigabitEthernet1/0/11

OI2001:DB8:ACAD:A001::/64 [110/2]

via FE80::1:1, GigabitEthernet1/0/11

OI2001:DB8:ACAD:A002::/64 [110/3]

via FE80::1:1, GigabitEthernet1/0/11

  1. Verify D2 is receiving an IPv4 default route via OSPFv3.

D2# show ip route ospfv3

<output omitted>

Gateway of last resort is 10.10.4.1 to network 0.0.0.0

O*E20.0.0.0/0 [110/1] via 10.10.4.1, 00:01:13, GigabitEthernet1/0/11

172.16.0.0/30 is subnetted, 2 subnets

O IA172.16.0.0 [110/3] via 10.10.4.1, 00:02:55, GigabitEthernet1/0/11

O IA172.16.1.0 [110/2] via 10.10.4.1, 00:20:22, GigabitEthernet1/0/11

Close configuration window

Router Interface Summary Table

Router Model

Ethernet Interface #1

Ethernet Interface #2

Serial Interface #1

Serial Interface #2

1800

Fast Ethernet 0/0 (F0/0)

Fast Ethernet 0/1 (F0/1)

Serial 0/0/0 (S0/0/0)

Serial 0/0/1 (S0/0/1)

1900

Gigabit Ethernet 0/0 (G0/0)

Gigabit Ethernet 0/1 (G0/1)

Serial 0/0/0 (S0/0/0)

Serial 0/0/1 (S0/0/1)

2801

Fast Ethernet 0/0 (F0/0)

Fast Ethernet 0/1 (F0/1)

Serial 0/1/0 (S0/1/0)

Serial 0/1/1 (S0/1/1)

2811

Fast Ethernet 0/0 (F0/0)

Fast Ethernet 0/1 (F0/1)

Serial 0/0/0 (S0/0/0)

Serial 0/0/1 (S0/0/1)

2900

Gigabit Ethernet 0/0 (G0/0)

Gigabit Ethernet 0/1 (G0/1)

Serial 0/0/0 (S0/0/0)

Serial 0/0/1 (S0/0/1)

4221

Gigabit Ethernet 0/0/0 (G0/0/0)

Gigabit Ethernet 0/0/1 (G0/0/1)

Serial 0/1/0 (S0/1/0)

Serial 0/1/1 (S0/1/1)

4300

Gigabit Ethernet 0/0/0 (G0/0/0)

Gigabit Ethernet 0/0/1 (G0/0/1)

Serial 0/1/0 (S0/1/0)

Serial 0/1/1 (S0/1/1)

Note: To find out how the router is configured, look at the interfaces to identify the type of router and how many interfaces the router has. There is no way to effectively list all the combinations of configurations for each router class. This table includes identifiers for the possible combinations of Ethernet and Serial interfaces in the device. The table does not include any other type of interface, even though a specific router may contain one. An example of this might be an ISDN BRI interface. The string in parenthesis is the legal abbreviation that can be used in Cisco IOS commands to represent the interface.

End of document

Device Configs – Final

Router R1

R1# show run

Building configuration…

Current configuration : 3836 bytes

!

version 16.9

service timestamps debug datetime msec

service timestamps log datetime msec

platform qfp utilization monitor load 80

no platform punt-keepalive disable-kernel-core

!

hostname R1

!

boot-start-marker

boot-end-marker

!

no aaa new-model

!

no ip domain lookup

!

login on-success log

!

subscriber templating

!

ipv6 unicast-routing

multilink bundle-name authenticated

!

spanning-tree extend system-id

!

redundancy

mode none

!

interface GigabitEthernet0/0/0

ip address 172.16.0.2 255.255.255.252

negotiation auto

ipv6 address FE80::1:2 link-local

ipv6 address 2001:DB8:ACAD:A001::2/64

ospfv3 network point-to-point

ospfv3 123 ipv6 area 0

ospfv3 123 ipv4 area 0

!

interface GigabitEthernet0/0/1

no ip address

negotiation auto

ipv6 address FE80::1:1 link-local

ipv6 address 2001:DB8:ACAD:1001::1/64

ospfv3 123 ipv6 area 1

ospfv3 123 ipv4 area 1

!

interface Serial0/1/0

!

interface Serial0/1/1

!

router ospfv3 123

!

address-family ipv4 unicast

router-id 1.1.1.1

exit-address-family

!

address-family ipv6 unicast

router-id 1.1.1.1

area 1 range 2001:DB8:ACAD:1000::/52

exit-address-family

!

ip forward-protocol nd

ip http server

ip http authentication local

ip http secure-server

!

control-plane

!

line con 0

exec-timeout 0 0

logging synchronous

transport input none

stopbits 1

line aux 0

stopbits 1

line vty 0 4

login

!

end

Router R2

R2# show run

Building configuration…

Current configuration : 4068 bytes

!

version 16.9

service timestamps debug datetime msec

service timestamps log datetime msec

platform qfp utilization monitor load 80

no platform punt-keepalive disable-kernel-core

!

hostname R2

!

boot-start-marker

boot-end-marker

!

no aaa new-model

!

no ip domain lookup

!

login on-success log

!

subscriber templating

!

ipv6 unicast-routing

multilink bundle-name authenticated

!

spanning-tree extend system-id

!

redundancy

mode none

!

interface Loopback0

ip address 209.165.200.225 255.255.255.224

ipv6 address FE80::2:3 link-local

ipv6 address 2001:DB8:FEED:209::1/64

!

interface GigabitEthernet0/0/0

ip address 172.16.0.1 255.255.255.252

negotiation auto

ipv6 address FE80::2:1 link-local

ipv6 address 2001:DB8:ACAD:A001::1/64

ospfv3 network point-to-point

ospfv3 123 ipv6 area 0

ospfv3 123 ipv4 area 0

!

interface GigabitEthernet0/0/1

ip address 172.16.1.1 255.255.255.252

negotiation auto

ipv6 address FE80::2:2 link-local

ipv6 address 2001:DB8:ACAD:A002::1/64

ospfv3 network point-to-point

ospfv3 123 ipv6 area 0

ospfv3 123 ipv4 area 0

!

router ospfv3 123

!

address-family ipv4 unicast

default-information originate

router-id 2.2.2.1

exit-address-family

!

address-family ipv6 unicast

default-information originate

router-id 2.2.2.1

exit-address-family

!

ip forward-protocol nd

no ip http server

ip http secure-server

ip route 0.0.0.0 0.0.0.0 Loopback0

!

ipv6 route ::/0 Loopback0

!

control-plane

!

line con 0

exec-timeout 0 0

logging synchronous

transport input none

stopbits 1

line aux 0

stopbits 1

line vty 0 4

login

!

end

Router R3

R3# show run

Building configuration…

Current configuration : 3859 bytes

!

version 16.9

service timestamps debug datetime msec

service timestamps log datetime msec

platform qfp utilization monitor load 80

no platform punt-keepalive disable-kernel-core

!

hostname R3

!

boot-start-marker

boot-end-marker

!

no aaa new-model

!

no ip domain lookup

!

login on-success log

!

subscriber templating

!

ipv6 unicast-routing

multilink bundle-name authenticated

!

spanning-tree extend system-id

!

redundancy

mode none

!

interface GigabitEthernet0/0/0

ip address 172.16.1.2 255.255.255.252

negotiation auto

ipv6 address FE80::3:2 link-local

ipv6 address 2001:DB8:ACAD:A002::2/64

ospfv3 network point-to-point

ospfv3 123 ipv6 area 0

ospfv3 123 ipv4 area 0

!

interface GigabitEthernet0/0/1

ip address 10.10.4.1 255.255.255.252

negotiation auto

ipv6 address FE80::3:1 link-local

ipv6 address 2001:DB8:ACAD:2001::1/64

ospfv3 123 ipv6 area 2

ospfv3 123 ipv4 area 2

!

interface Serial0/1/0

!

interface Serial0/1/1

!

router ospfv3 123

router-id 3.3.3.1

!

address-family ipv4 unicast

exit-address-family

!

address-family ipv6 unicast

area 2 range 2001:DB8:ACAD:2000::/52

exit-address-family

!

ip forward-protocol nd

ip http server

ip http authentication local

ip http secure-server

!

control-plane

!

line con 0

exec-timeout 0 0

logging synchronous

transport input none

stopbits 1

line aux 0

stopbits 1

line vty 0 4

login

!

end

Switch D1

D1# show run

Building configuration…

Current configuration : 6542 bytes

!

version 16.9

no service pad

service timestamps debug datetime msec

service timestamps log datetime msec

! Call-home is enabled by Smart-Licensing.

service call-home

no platform punt-keepalive disable-kernel-core

!

hostname D1

!

vrf definition Mgmt-vrf

!

address-family ipv4

exit-address-family

!

address-family ipv6

exit-address-family

!

no aaa new-model

switch 1 provision ws-c3650-24ps

!

no ip domain lookup

!

login on-success log

ipv6 unicast-routing

!

license boot level ipservicesk9

!

diagnostic bootup level minimal

!

spanning-tree mode rapid-pvst

spanning-tree extend system-id

!

redundancy

mode sso

!

transceiver type all

monitoring

!

class-map match-any system-cpp-police-topology-control

description Topology control

class-map match-any system-cpp-police-sw-forward

description Sw forwarding, L2 LVX data, LOGGING

class-map match-any system-cpp-default

description Inter FED, EWLC control, EWLC data

class-map match-any system-cpp-police-sys-data

description Learning cache ovfl, High Rate App, Exception, EGR Exception, NFLSAMPLED DATA, RPF Failed

class-map match-any system-cpp-police-punt-webauth

description Punt Webauth

class-map match-any system-cpp-police-l2lvx-control

description L2 LVX control packets

class-map match-any system-cpp-police-forus

description Forus Address resolution and Forus traffic

class-map match-any system-cpp-police-multicast-end-station

description MCAST END STATION

class-map match-any system-cpp-police-multicast

description Transit Traffic and MCAST Data

class-map match-any system-cpp-police-l2-control

description L2 control

class-map match-any system-cpp-police-dot1x-auth

description DOT1X Auth

class-map match-any system-cpp-police-data

description ICMP redirect, ICMP_GEN and BROADCAST

class-map match-any system-cpp-police-stackwisevirt-control

description Stackwise Virtual

class-map match-any non-client-nrt-class

class-map match-any system-cpp-police-routing-control

description Routing control and Low Latency

class-map match-any system-cpp-police-protocol-snooping

description Protocol snooping

class-map match-any system-cpp-police-dhcp-snooping

description DHCP snooping

class-map match-any system-cpp-police-system-critical

description System Critical and Gold Pkt

!

policy-map system-cpp-policy

!

interface GigabitEthernet0/0

vrf forwarding Mgmt-vrf

no ip address

negotiation auto

!

interface GigabitEthernet1/0/1

!

interface GigabitEthernet1/0/2

!

interface GigabitEthernet1/0/3

!

interface GigabitEthernet1/0/4

!

interface GigabitEthernet1/0/5

!

interface GigabitEthernet1/0/6

!

interface GigabitEthernet1/0/7

!

interface GigabitEthernet1/0/8

!

interface GigabitEthernet1/0/9

!

interface GigabitEthernet1/0/10

!

interface GigabitEthernet1/0/11

no switchport

no ip address

ipv6 address FE80::D1:2 link-local

ipv6 address 2001:DB8:ACAD:1001::2/64

ipv6 ospf 123 area 1

!

interface GigabitEthernet1/0/12

!

interface GigabitEthernet1/0/13

!

interface GigabitEthernet1/0/14

!

interface GigabitEthernet1/0/15

!

interface GigabitEthernet1/0/16

!

interface GigabitEthernet1/0/17

!

interface GigabitEthernet1/0/18

!

interface GigabitEthernet1/0/19

!

interface GigabitEthernet1/0/20

!

interface GigabitEthernet1/0/21

!

interface GigabitEthernet1/0/22

!

interface GigabitEthernet1/0/23

no switchport

no ip address

ipv6 address FE80::D1:1 link-local

ipv6 address 2001:DB8:ACAD:1002::1/64

ipv6 ospf 123 area 1

!

interface GigabitEthernet1/0/24

!

interface GigabitEthernet1/1/1

!

interface GigabitEthernet1/1/2

!

interface GigabitEthernet1/1/3

!

interface GigabitEthernet1/1/4

!

interface Vlan1

no ip address

!

ip forward-protocol nd

ip http server

ip http secure-server

!

ipv6 router ospf 123

router-id 1.1.1.2

passive-interface GigabitEthernet1/0/23

!

control-plane

service-policy input system-cpp-policy

!

line con 0

exec-timeout 0 0

logging synchronous

stopbits 1

line aux 0

stopbits 1

line vty 0 4

login

line vty 5 15

login

!

end

Switch D2

D2# show run

Building configuration…

Current configuration : 8968 bytes

!

version 16.9

no service pad

service timestamps debug datetime msec

service timestamps log datetime msec

service call-home

no platform punt-keepalive disable-kernel-core

!

hostname D2

!

!

vrf definition Mgmt-vrf

!

address-family ipv4

exit-address-family

!

address-family ipv6

exit-address-family

!

!

no aaa new-model

switch 1 provision ws-c3650-24ps

!

ip routing

!

no ip domain lookup

!

login on-success log

ipv6 unicast-routing

!

license boot level ipservicesk9

!

diagnostic bootup level minimal

!

spanning-tree mode rapid-pvst

spanning-tree extend system-id

!

redundancy

mode sso

!

transceiver type all

monitoring

!

class-map match-any system-cpp-police-topology-control

description Topology control

class-map match-any system-cpp-police-sw-forward

description Sw forwarding, L2 LVX data, LOGGING

class-map match-any system-cpp-default

description Inter FED, EWLC control, EWLC data

class-map match-any system-cpp-police-sys-data

description Learning cache ovfl, High Rate App, Exception, EGR Exception, NFLSAMPLED DATA, RPF Failed

class-map match-any system-cpp-police-punt-webauth

description Punt Webauth

class-map match-any system-cpp-police-l2lvx-control

description L2 LVX control packets

class-map match-any system-cpp-police-forus

description Forus Address resolution and Forus traffic

class-map match-any system-cpp-police-multicast-end-station

description MCAST END STATION

class-map match-any system-cpp-police-multicast

description Transit Traffic and MCAST Data

class-map match-any system-cpp-police-l2-control

description L2 control

class-map match-any system-cpp-police-dot1x-auth

description DOT1X Auth

class-map match-any system-cpp-police-data

description ICMP redirect, ICMP_GEN and BROADCAST

class-map match-any system-cpp-police-stackwisevirt-control

description Stackwise Virtual

class-map match-any non-client-nrt-class

class-map match-any system-cpp-police-routing-control

description Routing control and Low Latency

class-map match-any system-cpp-police-protocol-snooping

description Protocol snooping

class-map match-any system-cpp-police-dhcp-snooping

description DHCP snooping

class-map match-any system-cpp-police-system-critical

description System Critical and Gold Pkt

!

policy-map system-cpp-policy

!

interface GigabitEthernet0/0

vrf forwarding Mgmt-vrf

no ip address

negotiation auto

!

interface GigabitEthernet1/0/1

!

interface GigabitEthernet1/0/2

!

interface GigabitEthernet1/0/3

!

interface GigabitEthernet1/0/4

!

interface GigabitEthernet1/0/5

!

interface GigabitEthernet1/0/6

!

interface GigabitEthernet1/0/7

!

interface GigabitEthernet1/0/8

!

interface GigabitEthernet1/0/9

!

interface GigabitEthernet1/0/10

!

interface GigabitEthernet1/0/11

no switchport

ip address 10.10.4.2 255.255.255.252

ipv6 address FE80::D2:2 link-local

ipv6 address 2001:DB8:ACAD:2001::2/64

ospfv3 123 ipv4 area 2

ospfv3 123 ipv6 area 2

!

interface GigabitEthernet1/0/12

!

interface GigabitEthernet1/0/13

!

interface GigabitEthernet1/0/14

!

interface GigabitEthernet1/0/15

!

interface GigabitEthernet1/0/16

!

interface GigabitEthernet1/0/17

!

interface GigabitEthernet1/0/18

!

interface GigabitEthernet1/0/19

!

interface GigabitEthernet1/0/20

!

interface GigabitEthernet1/0/21

!

interface GigabitEthernet1/0/22

!

interface GigabitEthernet1/0/23

no switchport

ip address 10.10.5.1 255.255.255.0

ipv6 address FE80::D2:1 link-local

ipv6 address 2001:DB8:ACAD:2002::1/64

ospfv3 123 ipv4 area 2

ospfv3 123 ipv6 area 2

!

interface GigabitEthernet1/0/24

!

interface GigabitEthernet1/1/1

!

interface GigabitEthernet1/1/2

!

interface GigabitEthernet1/1/3

!

interface GigabitEthernet1/1/4

!

interface Vlan1

no ip address

!

router ospfv3 123

!

address-family ipv4 unicast

passive-interface GigabitEthernet1/0/23

router-id 3.3.3.2

exit-address-family

!

address-family ipv6 unicast

passive-interface GigabitEthernet1/0/23

router-id 3.3.3.2

exit-address-family

!

ip forward-protocol nd

ip http server

ip http secure-server

!

control-plane

service-policy input system-cpp-policy

!

line con 0

exec-timeout 0 0

logging synchronous

stopbits 1

line aux 0

stopbits 1

line vty 0 4

login

line vty 5 15

login

!

end