Return to pluxml

Written by Christophe Lucas - - no comments

Wordpress is so fat and open to the air (script kiddies, ...). So, I came back to PluXML.

Have fun pals,
See you soon.

IPv6 prefix delegation feature

Written by Christophe Lucas - - no comments
We will dive into IPv6 prefix delegation prefix.

First of all, we will make a real simple topology :

ipv6-delegation-simple

R1 acts as a DHCP server and use the prefix delegation feature. But how it works ? How it is configured ?

R1 :
ipv6 unicast-routing
ipv6 cef
ipv6 dhcp pool POOLv6
prefix-delegation pool p lifetime 180 120
domain-name lucas.fr.eu.org

ipv6 local pool p 2001:DB8::/40 48

interface FastEthernet0/0
ip address 10.0.0.1 255.255.255.0
duplex half
ipv6 address 2A02::1/48
ipv6 enable
ipv6 dhcp server POOLv6


R1# show ipv6 dhcp interface
FastEthernet0/0 is in server mode
Using pool: POOLv6
Preference value: 0
Hint from client: ignored
Rapid-Commit: disabled
R1#


R2 :
interface FastEthernet0/0
duplex half
ipv6 address autoconfig default
ipv6 enable
ipv6 dhcp client pd prefix-from-provider

interface FastEthernet1/1
no ip address
duplex auto
speed auto
ipv6 address prefix-from-provider ::1:0:0:0:1/64
ipv6 enable

R2#show ipv6 dhcp interface
FastEthernet0/0 is in client mode
Prefix State is OPEN
Renew will be sent in 00:00:04
Address State is IDLE
List of known servers:
Reachable via address: FE80::C805:ADFF:FE80:0
DUID: 00030001CA05AD800000
Preference: 0
Configuration parameters:
IA PD: IA ID 0x00040001, T1 60, T2 120
Prefix: 2001:DB8::/48
preferred lifetime 120, valid lifetime 180
expires at May 03 2016 10:53 PM (125 seconds)
Domain name: lucas.fr.eu.org
Information refresh time: 0
Prefix name: prefix-from-provider
Prefix Rapid-Commit: disabled
Address Rapid-Commit: disabled
R2#


Debug trace on R2 (debug ipv6 dhcp) :
*May  3 22:36:11.859: IPv6 DHCP: Sending RENEW to FF02::1:2 on FastEthernet0/0
*May 3 22:36:11.859: IPv6 DHCP: DHCPv6 changes state from OPEN to RENEW (TIMEOUT) on FastEthernet0/0
*May 3 22:36:11.879: IPv6 DHCP: Received REPLY from FE80::C805:ADFF:FE80:0 on FastEthernet0/0
*May 3 22:36:11.879: IPv6 DHCP: Processing options
*May 3 22:36:11.879: IPv6 DHCP: Adding prefix 2001:DB8::/48 to prefix-from-provider
*May 3 22:36:11.883: IPv6 DHCP: T1 set to expire in 60 seconds
*May 3 22:36:11.883: IPv6 DHCP: T2 set to expire in 120 seconds
*May 3 22:36:11.883: IPv6 DHCP: DHCPv6 changes state from RENEW to OPEN (REPLY_RECEIVED) on FastEthernet0/0

We have acquired the prefix via PD aka Prefix Delegation feature :
R2#show ipv6 general-prefix 
IPv6 Prefix prefix-from-provider, acquired via DHCP PD
2001:DB8::/48 Valid lifetime 158, preferred lifetime 98
FastEthernet1/1 (Address command)
R2#

On R3 or R4 :
interface FastEthernet0/0
no ip address
duplex half
ipv6 address autoconfig default
ipv6 enable
end


2#show ipv6 dhcp interface
FastEthernet0/0 is in client mode
Prefix State is OPEN
Renew will be sent in 00:00:04
Address State is IDLE
List of known servers:
Reachable via address: FE80::C805:ADFF:FE80:0
DUID: 00030001CA05AD800000
Preference: 0
Configuration parameters:
IA PD: IA ID 0x00040001, T1 60, T2 120
Prefix: 2001:DB8::/48
preferred lifetime 120, valid lifetime 180
expires at May 03 2016 10:53 PM (125 seconds)
Domain name: lucas.fr.eu.org
Information refresh time: 0
Prefix name: prefix-from-provider
Prefix Rapid-Commit: disabled
Address Rapid-Commit: disabled
R2#


If we debug we will see (debug ipv6 interface, debug ipv6 dhcp, debug ipv6 nd) :
May  3 22:05:01.335: ICMPv6-ND: Neighbour FE80::C806:ADFF:FE81:1D on FastEthernet0/0 : LLA ca06.ad81.001d
*May 3 22:05:01.335: ICMPv6-ND: INCMP -> STALE: FE80::C806:ADFF:FE81:1D
*May 3 22:05:01.335: IPv6-Address: intfid_algo is notactive on intf 4
*May 3 22:05:01.339: IPv6-Address: intfid_algo is active on intf 4
*May 3 22:05:01.339: IPv6-Address: Generating IntfID rc 0, prefix: 2001:DB8:0:1::/64, address 2001:DB8:0:1:C808:ADFF:FE85:0
*May 3 22:05:01.343: IPv6-Address: Prefix Information change for 2001:DB8:0:1::/64, 0x0 -> 0x1E0
*May 3 22:05:01.343: IPv6-Address: Adding prefix 2001:DB8:0:1::/64 to FastEthernet0/0
*May 3 22:05:01.343: IPv6-Address: Adding operating owner prefix configured on FastEthernet0/0
*May 3 22:05:01.347: IPv6-Address: Adding operating owner address configured on FastEthernet0/0
*May 3 22:05:01.347: IPv6-Address: Address 2001:DB8:0:1:C808:ADFF:FE85:0 configured on FastEthernet0/0
*May 3 22:05:01.347: IPv6-Addrmgr-
R4(config-if)#ND: DAD request for 2001:DB8:0:1:C808:ADFF:FE85:0 on FastEthernet0/0
*May 3 22:05:01.347: ICMPv6-ND: Sending NS for 2001:DB8:0:1:C808:ADFF:FE85:0 on FastEthernet0/0
*May 3 22:05:01.351: ICMPv6-ND: Autoconfiguring 2001:DB8:0:1:C808:ADFF:FE85:0 on FastEthernet0/0
*May 3 22:05:02.351: IPv6-Addrmgr-ND: DAD: 2001:DB8:0:1:C808:ADFF:FE85:0 is unique.
*May 3 22:05:02.351: ICMPv6-ND: Sending NA for 2001:DB8:0:1:C808:ADFF:FE85:0 on FastEthernet0/0
*May 3 22:05:02.355: IPv6-Address: Address 2001:DB8:0:1:C808:ADFF:FE85:0/64 is up on FastEthernet0/0

Finally, we are able to ping the DHCPv6 server :
R4#ping ipv6 2A02::1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 2A02::1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 32/45/96 ms
R4#traceroute 2A02::1

Type escape sequence to abort.
Tracing the route to 2A02::1

1 2001:DB8:0:1::1 12 msec 36 msec 12 msec
2 2A02::1 8 msec 56 msec 36 msec
R4#
Classified in : Cisco - Tags : none

IP SLA operation

Written by Christophe Lucas - - no comments
IP SLA is a great tool to automation some treatment. You could do great things with it. We will work on IP SLA Reaction here.

What is it ? You could launch some action on some state of an IP SLA. Such as (Even if it is not a good example) : some nested ping.

ip-sla-reaction

 

 

 

 

 

 

 

The job here, is to check R4 - R3 and R4 - R2 if IP SLA beetween R1 - R4 is awful.

We could do this such as :
R4 :
ip sla 1
udp-jitter 10.1.12.1 3200 source-ip 10.1.43.4 source-port 6565 codec g711ulaw codec-size 128
frequency 5
ip sla schedule 1 start now life forever

ip sla 43
icmp-echo 10.1.43.3 source-ip 10.1.43.4
frequency 5
ip sla schedule 43 start pending life 60

ip sla 42
icmp-echo 10.1.32.2 source-ip 10.1.43.4
frequency 5
ip sla schedule 42 start pending life 60

ip sla reaction-trigger 1 43
ip sla reaction-trigger 43 42
ip sla reaction-configuration 1 react MOS threshold-type consecutive 4 threshold-value 390 220 action-type trapAndTrigger
ip sla reaction-configuration 43 react rtt threshold-value 100 50 threshold-type immediate action-type trapAndTrigger
ip sla reaction-configuration 42 react rtt threshold-value 100 50 threshold-type immediate action-type trapOnly

snmp-server host 10.1.1.1
snmp-server enable traps syslog

We do an analyze on each segment of path and if it fails on our condition, it traps it.

Obvisouly on R1 :
ip sla responder
Classified in : Cisco - Tags : none

CCIE R&S studies planner

Written by Christophe Lucas - - 1 comment
I don't know if it will really help someone but you can download here my CCIE planner spreadsheet : CCIE_Planner

It will provide you :

  • Monthly review based on CCIEv5 R&S blueprint ;

  • Planner from beginning point to your deadline lab attempt : it calculates how to organize your studies based on your initial self assessment ;

  • Daily organization ;

  • Weekly organization ;

  • Monthly organization ;

  • Yearly organization ;

  • Calculate your study time ;

  • IpExpert vol1 lab & topics ;

  • Logistics ;


It is provided as is and under GPLv2.

Have fun with your studies.
Classified in : Humeur - Tags : none
Rss feed of the articles