Configuring Dynamic Routing Protocol Authentication

Cisco routers support a couple of different approaches to authenticating route advertisements received from a neighboring router:

* Plain text authentication

* Hashing authentication

Both of these approaches require routers to have matching passwords (also referred to as keys ); however, Cisco recommends the use of hashing authentication. Plain text authentication, as the name suggests, simply sends a password from one router to another in clear text. This leads to the security concern of having a malicious user capture authentication traffic containing a password and then injecting her own router, which could use the compromised password to authenticate with one of the network’s production routers.

Hashing authentication is preferred over plain text authentication, because it never sends the password over the network. Instead, a mathematical algorithm is run on the password, and the result of that algorithm (called a hash digest ) is sent from one router to its neighbor. That neighboring router also runs the hashing algorithm on its configured password, and if its hash digest matches the hash digest it receives from the first router, it can conclude that the passwords match. The two hashing algorithms that you can select from (depending on the routing protocol) include Message Digest 5 (MD5) and Secure Hash Algorithm (SHA) . SHA is generally considered to be somewhat more secure than MD5; however, either algorithm is vastly superior to using plain text authentication.

Hashing authentication using MD5 can be configured for the following protocols within Cisco IOS:

* RIPv2

* EIGRP

* OSPFv2

* OSPFv3

* IS-IS

* BGP

SHA authentication is supported by the following protocols:

* RIP next generation (RIPng)

* Named EIGRP

* OSPFv2

R1#conf t

Enter configuration commands, one per line.  End with CNTL/Z.

R1(config)#interface loop 0

R1(config-if)#

*Jul 23 10:06:29.915: %LINEPROTO-5-UPDOWN: Line protocol on Interface Loopback0, changed state to up

R1(config-if)#ip address 192.168.1.1 255.255.255.0

R1(config-if)#interface serial 2/0

R1(config-if)#ip address 10.1.1.1 255.255.255.252

R1(config-if)#no shut

R1(config-if)#

*Jul 23 10:06:54.739: %LINK-3-UPDOWN: Interface Serial2/0, changed state to up

R1(config-if)#

*Jul 23 10:06:55.747: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial2/0, changed state to up

R1(config-if)#end

R1#

*Jul 23 10:06:58.731: %SYS-5-CONFIG_I: Configured from console by console

R2#conf t

Enter configuration commands, one per line.  End with CNTL/Z.

R2(config)#interface serial 2/0

R2(config-if)#ip address 10.1.1.2 255.255.255.252

R2(config-if)#no shut

R2(config-if)#

*Jul 23 10:05:23.347: %LINK-3-UPDOWN: Interface Serial2/0, changed state to up

R2(config-if)#

*Jul 23 10:05:24.355: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial2/0, changed state to up

R2(config-if)#do ping 10.1.1.1 

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.1.1.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 20/28/40 ms

R2(config-if)#

R2(config-if)#interface serial 2/1

R2(config-if)#ip address 10.2.2.1 255.255.255.252

R2(config-if)#no shut

R2(config-if)#

*Jul 23 10:06:14.075: %LINK-3-UPDOWN: Interface Serial2/1, changed state to up

R2(config-if)#

*Jul 23 10:06:15.083: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial2/1, changed state to up

R2(config-if)#end

R2#

R3#conf t

Enter configuration commands, one per line.  End with CNTL/Z.

R3(config)#interface loop 0

R3(config-if)#

*Jul 23 10:06:53.103: %LINEPROTO-5-UPDOWN: Line protocol on Interface Loopback0, changed state to up

R3(config-if)#ip address 192.168.3.1 255.255.255.0

R3(config-if)#

R3(config-if)#interface serial 2/1

R3(config-if)#ip address 10.2.2.2 255.255.255.252

R3(config-if)#no shut

R3(config-if)#

*Jul 23 10:07:18.539: %LINK-3-UPDOWN: Interface Serial2/1, changed state to up

R3(config-if)#

*Jul 23 10:07:19.547: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial2/1, changed state to up

R3(config-if)#do ping 10.2.2.1

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.2.2.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 20/24/28 ms

R3(config-if)#end

R3#

R1#conf t

Enter configuration commands, one per line.  End with CNTL/Z.

R1(config)#router eigrp ?

  <1-65535>  Autonomous System

  WORD       EIGRP Virtual-Instance Name

R1(config)#router eigrp ROUTE      // CONFIGURE NAMED EIGRP

R1(config-router)#?

Router configuration commands:

  address-family  Enter Address Family command mode

  default         Set a command to its defaults

  exit            Exit from routing protocol configuration mode

  no              Negate a command or set its defaults

  service-family  Enter Service Family command mode

  shutdown        Shutdown this instance of EIGRP

R1(config-router)#address-family ?

  ipv4  Address family IPv4

  ipv6  Address family IPv6

R1(config-router)#address-family ipv4 ?

  autonomous-system  Specify Address-Family Autonomous System Number

  multicast          Address Family Multicast

  unicast            Address Family Unicast

  vrf                Specify a specific virtual routing/forwarding instance

R1(config-router)#address-family ipv4 autonomous-system ?

  <1-65535>  Autonomous System

R1(config-router)#address-family ipv4 autonomous-system 1

R1(config-router-af)#network 10.1.1.0 0.0.0.3

R1(config-router-af)#network 192.168.1.0 0.0.0.255

R1(config-router-af)#end

R1#

*Jul 23 10:14:08.843: %DUAL-5-NBRCHANGE: EIGRP-IPv4 1: Neighbor 10.1.1.2 (Serial2/0) is up: new adjacency

R2#conf t

Enter configuration commands, one per line.  End with CNTL/Z.

R2(config)#router eigrp ROUTE

R2(config-router)#address-family ipv4 autonomous-system 1

R2(config-router-af)#network 10.1.1.0 0.0.0.3

R2(config-router-af)#

*Jul 23 10:11:08.475: %DUAL-5-NBRCHANGE: EIGRP-IPv4 1: Neighbor 10.1.1.1 (Serial2/0) is up: new adjacency

R2(config-router-af)#network 10.2.2.0 0.0.0.3

R2(config-router-af)#end

R2#

*Jul 23 10:12:02.783: %DUAL-5-NBRCHANGE: EIGRP-IPv4 1: Neighbor 10.2.2.2 (Serial2/1) is up: new adjacency

R3#conf t

Enter configuration commands, one per line.  End with CNTL/Z.

R3(config)#router eigrp ROUTE

R3(config-router)#address-family ipv4 autonomous-system 1

R3(config-router-af)#network 10.2.2.2 0.0.0.3

R3(config-router-af)#

*Jul 23 10:12:12.347: %DUAL-5-NBRCHANGE: EIGRP-IPv4 1: Neighbor 10.2.2.1 (Serial2/1) is up: new adjacency

R3(config-router-af)#network 192.168.3.0 0.0.0.255

R3(config-router-af)#end

R3#

R1#show ip route eigrp      // VERIFY EIGRP ROUTES

Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP

       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

       E1 - OSPF external type 1, E2 - OSPF external type 2

       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2

       ia - IS-IS inter area, * - candidate default, U - per-user static route

       o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP

       + - replicated route, % - next hop override

Gateway of last resort is not set

      10.0.0.0/8 is variably subnetted, 3 subnets, 2 masks

D        10.2.2.0/30 [90/23796062] via 10.1.1.2, 00:02:22, Serial2/0

D     192.168.3.0/24 [90/23796702] via 10.1.1.2, 00:01:28, Serial2/0

R1#

R1#tclsh        // VERIFY CONNECTIVTY

R1(tcl)#foreach address {

+>(tcl)#192.168.1.1

+>(tcl)#10.1.1.1

+>(tcl)#10.1.1.2

+>(tcl)#10.2.2.1

+>(tcl)#10.2.2.2

+>(tcl)#192.168.3.1

+>(tcl)#} { ping $address }

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 1/3/8 ms

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.1.1.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 36/40/44 ms

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.1.1.2, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 12/18/24 ms

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.2.2.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 8/16/20 ms

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.2.2.2, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 8/34/44 ms

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.168.3.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 8/34/72 ms

R1#conf t

Enter configuration commands, one per line.  End with CNTL/Z.

R1(config)#router eigrp ROUTE        // SECURE NAMED EIGRP PROCESS

R1(config-router)#address-family ipv4 autonomous-system 1

R1(config-router-af)#?

Address Family configuration commands:

  af-interface         Enter Address Family interface configuration

  default              Set a command to its defaults

  eigrp                EIGRP Address Family specific commands

  exit-address-family  Exit Address Family configuration mode

  help                 Description of the interactive help system

  maximum-prefix       Maximum number of prefixes acceptable in aggregate

  metric               Modify metrics and parameters for address advertisement

  neighbor             Specify an IPv4 neighbor router

  network              Enable routing on an IP network

  no                   Negate a command or set its defaults

  shutdown             Shutdown address family

  timers               Adjust peering based timers

  topology             Topology configuration mode

R1(config-router-af)#af-interface ?

  Async              Async interface

  Auto-Template      Auto-Template interface

  BVI                Bridge-Group Virtual Interface

  CDMA-Ix            CDMA Ix interface

  CTunnel            CTunnel interface

  Dialer             Dialer interface

  FastEthernet       FastEthernet IEEE 802.3

  GMPLS              MPLS interface

  Group-Async        Async Group interface

  LISP               Locator/ID Separation Protocol Virtual Interface

  LongReachEthernet  Long-Reach Ethernet interface

  Loopback           Loopback interface

  MFR                Multilink Frame Relay bundle interface

  Multilink          Multilink-group interface

  Port-channel       Ethernet Channel of interfaces

  Serial             Serial

  Tunnel             Tunnel interface

  Vif                PGM Multicast Host interface

  Virtual-PPP        Virtual PPP interface

  Virtual-Template   Virtual Template interface

  Virtual-TokenRing  Virtual TokenRing

  default            Address-family default interface configuration

  vmi                Virtual Multipoint Interface

R1(config-router-af)#af-interface serial 2/0

R1(config-router-af-interface)#?

Address Family Interfaces configuration commands:

  authentication      authentication subcommands

  bandwidth-percent   Set percentage of bandwidth percentage limit

  bfd                 Enable Bidirectional Forwarding Detection

  dampening-change    Percent interface metric must change to cause update

  dampening-interval  Time in seconds to check interface metrics

  default             Set a command to its defaults

  exit-af-interface   Exit from Address Family Interface configuration mode

  hello-interval      Configures hello interval

  hold-time           Configures hold time

  next-hop-self       Configures EIGRP next-hop-self

  no                  Negate a command or set its defaults

  passive-interface   Suppress address updates on an interface

  shutdown            Disable Address-Family on interface

  split-horizon       Perform split horizon

  summary-address     Perform address summarization

R1(config-router-af-interface)#authentication ?

  key-chain  key-chain

  mode       authentication mode

R1(config-router-af-interface)#authentication mode ?

  hmac-sha-256  HMAC-SHA-256 Authentication

  md5           Keyed message digest

R1(config-router-af-interface)#authentication mode hmac-sha-256 ?

  <0-7>  Encryption type (0 to disable encryption, 7 for proprietary)

  LINE   password

R1(config-router-af-interface)#authentication mode hmac-sha-256 cisco123       // ENABLE SHA 256

R1(config-router-af-interface)#

*Jul 23 10:19:57.471: %DUAL-5-NBRCHANGE: EIGRP-IPv4 1: Neighbor 10.1.1.2 (Serial2/0) is down: authentication HMAC-SHA-256 configured

R1(config-router-af-interface)#end

R1#

*Jul 23 10:25:41.283: %DUAL-5-NBRCHANGE: EIGRP-IPv4 1: Neighbor 10.1.1.2 (Serial2/0) is up: new adjacency

*Jul 23 10:16:57.079: %DUAL-5-NBRCHANGE: EIGRP-IPv4 1: Neighbor 10.1.1.1 (Serial2/0) is down: Auth failure

R2#

R2#conf t

Enter configuration commands, one per line.  End with CNTL/Z.

R2(config)#router eigrp ROUTE

R2(config-router)#address-family ipv4 autonomous-system 1

R2(config-router-af)#af-interface serial 2/0

R2(config-router-af-interface)#authentication mode hmac-sha-256 cisco123

R2(config-router-af-interface)#

*Jul 23 10:22:40.859: %DUAL-5-NBRCHANGE: EIGRP-IPv4 1: Neighbor 10.1.1.1 (Serial2/0) is up: new adjacency

R2(config-router-af-interface)#exit

R2(config-router-af)#af-interface serial 2/1

R2(config-router-af-interface)#authentication mode hmac-sha-256 cisco456

R2(config-router-af-interface)#

*Jul 23 10:23:57.835: %DUAL-5-NBRCHANGE: EIGRP-IPv4 1: Neighbor 10.2.2.2 (Serial2/1) is down: authentication HMAC-SHA-256 configured

R2(config-router-af-interface)#end

R2#

*Jul 23 10:26:31.195: %DUAL-5-NBRCHANGE: EIGRP-IPv4 1: Neighbor 10.2.2.2 (Serial2/1) is up: new adjacency

R3#conf t

Enter configuration commands, one per line.  End with CNTL/Z.

R3(config)#router eigrp ROUTE

R3(config-router)#address-family ipv4 autonomous-system 1

R3(config-router-af)#af-interface serial 2/1

R3(config-router-af-interface)#authentication mode hmac-sha-256 cisco456

R3(config-router-af-interface)#

*Jul 23 10:26:40.727: %DUAL-5-NBRCHANGE: EIGRP-IPv4 1: Neighbor 10.2.2.1 (Serial2/1) is up: new adjacency

R3(config-router-af-interface)#end

R3#

R1#show ip route eigrp

Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP

       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

       E1 - OSPF external type 1, E2 - OSPF external type 2

       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2

       ia - IS-IS inter area, * - candidate default, U - per-user static route

       o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP

       + - replicated route, % - next hop override

Gateway of last resort is not set

      10.0.0.0/8 is variably subnetted, 3 subnets, 2 masks

D        10.2.2.0/30 [90/23796062] via 10.1.1.2, 00:05:35, Serial2/0

D     192.168.3.0/24 [90/23796702] via 10.1.1.2, 00:01:43, Serial2/0

R1#

R1#tclsh

R1(tcl)#foreach address {

+>(tcl)#192.168.1.1

+>(tcl)#10.1.1.1

+>(tcl)#10.1.1.2

+>(tcl)#10.2.2.1

+>(tcl)#10.2.2.2

+>(tcl)#192.168.3.1

+>(tcl)#} { ping $address }

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/8 ms

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.1.1.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 16/22/32 ms

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.1.1.2, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 1/10/20 ms

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.2.2.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 8/12/20 ms

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.2.2.2, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 20/26/32 ms

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.168.3.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 12/18/24 ms

R1#conf t

Enter configuration commands, one per line.  End with CNTL/Z.

R1(config)#no router eigrp ROUTE

R1(config)#

R1(config)#router ospf 1

R1(config-router)#network 192.168.1.0 0.0.0.255 area 0

R1(config-router)#network 10.1.1.0 0.0.0.3 area 0

R1(config-router)#end

R1#

*Jul 23 10:39:23.735: %OSPF-5-ADJCHG: Process 1, Nbr 10.2.2.1 on Serial2/0 from LOADING to FULL, Loading Done

*Jul 23 10:29:31.807: %DUAL-5-NBRCHANGE: EIGRP-IPv4 1: Neighbor 10.1.1.1 (Serial2/0) is down: Interface PEER-TERMINATION received

R2#

R2#conf t

Enter configuration commands, one per line.  End with CNTL/Z.

R2(config)#no router eigrp ROUTE       // REMOVE EIGRP ROUTING PROTOCOL

R2(config)#

R2(config)#router ospf 1     // CONFIGURE OSPF ROUTING PROTOCOL

R2(config-router)#network 10.1.1.0 0.0.0.3 area 0

R2(config-router)#

*Jul 23 10:36:23.351: %OSPF-5-ADJCHG: Process 1, Nbr 192.168.1.1 on Serial2/0 from LOADING to FULL, Loading Done

R2(config-router)#network 10.2.2.0 0.0.0.3 area 0

R2(config-router)#end

R2#

*Jul 23 10:37:56.143: %OSPF-5-ADJCHG: Process 1, Nbr 192.168.3.1 on Serial2/1 from LOADING to FULL, Loading Done

*Jul 23 10:29:56.123: %DUAL-5-NBRCHANGE: EIGRP-IPv4 1: Neighbor 10.2.2.1 (Serial2/1) is down: Interface PEER-TERMINATION received

R3#

R3#conf t

Enter configuration commands, one per line.  End with CNTL/Z.

R3(config)#no router eigrp ROUTE

R3(config)#

R3(config)#router ospf 1

R3(config-router)#network 192.168.3.0 0.0.0.255 area 0

R3(config-router)#network 10.2.2.0 0.0.0.3 area 0

R3(config-router)#

*Jul 23 10:38:05.703: %OSPF-5-ADJCHG: Process 1, Nbr 10.2.2.1 on Serial2/1 from LOADING to FULL, Loading Done

R3(config-router)#end

R3#

R1#tclsh

R1(tcl)#foreach address {

+>(tcl)#192.168.1.1

+>(tcl)#10.1.1.1

+>(tcl)#10.1.1.2

+>(tcl)#10.2.2.1

+>(tcl)#10.2.2.2

+>(tcl)#192.168.3.1

+>(tcl)#} { ping $address }

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 1/5/8 ms

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.1.1.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 36/42/48 ms

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.1.1.2, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 16/20/24 ms

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.2.2.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 12/18/24 ms

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.2.2.2, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 16/40/72 ms

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.168.3.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 16/36/64 ms

R1#conf t

R1(config)#interface serial 2/0

R1(config-if)#ip ospf ?

  <1-65535>            Process ID

  authentication       Enable authentication

  authentication-key   Authentication password (key)

  bfd                  Enable BFD on this interface

  cost                 Interface cost

  database-filter      Filter OSPF LSA during synchronization and flooding

  dead-interval        Interval after which a neighbor is declared dead

  demand-circuit       OSPF Demand Circuit

  flood-reduction      OSPF Flood Reduction

  hello-interval       Time between HELLO packets

  lls                  Link-local Signaling (LLS) support

  message-digest-key   Message digest authentication password (key)

  mtu-ignore           Ignores the MTU in DBD packets

  network              Network type

  prefix-suppression   OSPF prefix suppression

  priority             Router priority

  resync-timeout       Interval after which adjacency is reset if oob-resync is

                       not started

  retransmit-interval  Time between retransmitting lost link state

                       advertisements

  shutdown             Set OSPF protocol's state to disable under current

                       interface

  transmit-delay       Link state transmit delay

  ttl-security         TTL security check

R1(config-if)#ip ospf authentication ?

  message-digest  Use message-digest authentication

  null            Use no authentication

  <cr>

R1(config-if)#ip ospf authentication message-digest  // IOS 15.4(1)T OSPFv2 SUPPORTS SHA AUTHENTICATION

R1(config-if)#

*Jul 23 10:48:25.099: %OSPF-5-ADJCHG: Process 1, Nbr 10.2.2.1 on Serial2/0 from FULL to DOWN, Neighbor Down: Dead timer expired

R1(config-if)#ip ospf message-digest-key ?

  <1-255>  Key ID

R1(config-if)#ip ospf message-digest-key 1 ?

  md5  Use MD5 algorithm

R1(config-if)#ip ospf message-digest-key 1 md5 ?

  <0-7>  Encryption type (0 for not yet encrypted, 7 for proprietary)

  LINE   The OSPF password (key) (maximum 16 characters)

R1(config-if)#ip ospf message-digest-key 1 md5 cisco123

R1(config-if)#end

R1#

*Jul 23 10:51:02.715: %OSPF-5-ADJCHG: Process 1, Nbr 10.2.2.1 on Serial2/0 from LOADING to FULL, Loading Done

R2#conf t

Enter configuration commands, one per line.  End with CNTL/Z.

R2(config)#interface serial 2/0

R2(config-if)#ip ospf authentication message-digest

R2(config-if)#ip ospf message-digest-key 1 md5 cisco123

R2(config-if)#

*Jul 23 10:48:02.303: %OSPF-5-ADJCHG: Process 1, Nbr 192.168.1.1 on Serial2/0 from LOADING to FULL, Loading Done

R2(config)#interface serial 2/1

R2(config-if)#ip ospf authentication message-digest

R2(config-if)#ip ospf message-digest-key 1 md5 cisco456

R2(config-if)#

*Jul 23 10:49:40.915: %OSPF-5-ADJCHG: Process 1, Nbr 192.168.3.1 on Serial2/1 from FULL to DOWN, Neighbor Down: Dead timer expired

R2(config-if)#end

R2#

R3#conf t

Enter configuration commands, one per line.  End with CNTL/Z.

R3(config)#interface serial 2/1

R3(config-if)#

*Jul 23 10:49:57.731: %OSPF-5-ADJCHG: Process 1, Nbr 10.2.2.1 on Serial2/1 from FULL to DOWN, Neighbor Down: Dead timer expired

R3(config-if)#ip ospf authentication message-digest

R3(config-if)#ip ospf message-digest-key 1 md5 cisco456

R3(config-if)#

*Jul 23 10:50:25.515: %OSPF-5-ADJCHG: Process 1, Nbr 10.2.2.1 on Serial2/1 from LOADING to FULL, Loading Done

R3(config-if)#end

R3#

R1#show ip route ospf     // VERIFY OSPF ROUTING TABLE

Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP

       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

       E1 - OSPF external type 1, E2 - OSPF external type 2

       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2

       ia - IS-IS inter area, * - candidate default, U - per-user static route

       o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP

       + - replicated route, % - next hop override

Gateway of last resort is not set

      10.0.0.0/8 is variably subnetted, 3 subnets, 2 masks

O        10.2.2.0/30 [110/128] via 10.1.1.2, 00:02:57, Serial2/0

      192.168.3.0/32 is subnetted, 1 subnets

O        192.168.3.1 [110/129] via 10.1.1.2, 00:00:33, Serial2/0

R1#show ip ospf interface serial 2/0      // VERIFY OSPF INTERFACE CONFIG

Serial2/0 is up, line protocol is up

  Internet Address 10.1.1.1/30, Area 0, Attached via Network Statement

  Process ID 1, Router ID 192.168.1.1, Network Type POINT_TO_POINT, Cost: 64

  Topology-MTID    Cost    Disabled    Shutdown      Topology Name

        0           64        no          no            Base

  Transmit Delay is 1 sec, State POINT_TO_POINT

  Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5

    oob-resync timeout 40

    Hello due in 00:00:03

  Supports Link-local Signaling (LLS)

  Cisco NSF helper support enabled

  IETF NSF helper support enabled

  Index 2/2, flood queue length 0

  Next 0x0(0)/0x0(0)

  Last flood scan length is 1, maximum is 1

  Last flood scan time is 0 msec, maximum is 4 msec

  Neighbor Count is 1, Adjacent neighbor count is 1

    Adjacent with neighbor 10.2.2.1

  Suppress hello for 0 neighbor(s)

  Message digest authentication enabled

    Youngest key id is 1

R1#tclsh       // VERIFY FULL CONNECTIVITY

R1(tcl)#foreach address {

+>(tcl)#192.168.1.1

+>(tcl)#10.1.1.1

+>(tcl)#10.1.1.2

+>(tcl)#10.2.2.1

+>(tcl)#10.2.2.2

+>(tcl)#192.168.3.1

+>(tcl)#} { ping $address }

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.1.1.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 36/40/44 ms

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.1.1.2, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 12/17/24 ms

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.2.2.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 12/17/20 ms

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.2.2.2, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 12/35/48 ms

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.168.3.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 20/28/44 ms

Configuring Multiprotocol BGP (MP-BGP)

MP-BGP allows you to consolidate a variety of protocol types under a single BGP configuration. These protocol types are called address families and include (as just a few examples):

* Unicast IPv4

* Multicast IPv4

* Unicast IPv6

* Multicast IPv6

Note: MP-BGP supports several additional address families, largely used to support virtualization
technologies, such as Virtual Private LAN Service (VPLS) and Layer 2 VPN (L2VPN).

MP-BGP contains several new elements and features not found in BGP-4, including:

* Address Family Identifier (AFI): Specifies the type of address being used by an
Address Family.

* Subsequent Address Family Identifier (SAFI): Provides additional address family
information for some address families.

* Multiprotocol Reachable Network Layer Reachability Information (MP_REACH_
NLRI): An attribute that transports a collection of reachable networks, along with
next-hop information.

* Multiprotocol Unreachable Network Layer Reachability Information (MP_
UNREACH_NLRI): An attribute that transports a collection of unreachable networks
(used to indicate that specific previously reachable networks are no longer
reachable).

* BGP Capabilities Advertisement: Used by a router to tell a neighboring router its
BGP capabilities—used during BGP session negotiation.

Note that the multiprotocol extensions making up MP-BGP are backward compatible with traditional BGP-4. As a result, a traditional BGP-4 router can form a neighborship with an MP-BGP router, and simply ignore any received BGP messages containing unrecognized extensions.

R1#conf t

Enter configuration commands, one per line.  End with CNTL/Z.

R1(config)#interface loop 0

R1(config-if)#

*Jul 21 07:49:32.203: %LINEPROTO-5-UPDOWN: Line protocol on Interface Loopback0, changed state to up

R1(config-if)#ip address 10.0.0.1 255.255.255.0

R1(config-if)#ipv6 address 2001:db8:beef:11::1/64

R1(config-if)#

R1(config-if)#interface loop 1

R1(config-if)#

*Jul 21 07:51:03.207: %LINEPROTO-5-UPDOWN: Line protocol on Interface Loopback1, changed state to up

R1(config-if)#ip address 10.1.0.1 255.255.0.0

R1(config-if)#ipv6 address 2001:db8:beef:1::1/64

R1(config-if)#

R1(config-if)#interface serial 2/0

R1(config-if)#ip address 192.168.1.1 255.255.255.252

R1(config-if)#ipv6 address 2001:db8:feed:1::1/64

R1(config-if)#no shut

R1(config-if)#

*Jul 21 07:52:34.911: %LINK-3-UPDOWN: Interface Serial2/0, changed state to up

R1(config-if)#

*Jul 21 07:52:35.923: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial2/0, changed state to up

R1(config-if)#end

R1#

R2#conf t

Enter configuration commands, one per line.  End with CNTL/Z.

R2(config)#interface loop 0

R2(config-if)#

*Jul 21 07:55:01.503: %LINEPROTO-5-UPDOWN: Line protocol on Interface Loopback0, changed state to up

R2(config-if)#ip address 172.17.2.1 255.255.255.0

R2(config-if)#ipv6 address 2001:db8:cafe:22::1/64

R2(config-if)#

R2(config-if)#interface loop 1

R2(config-if)#

*Jul 21 07:55:51.731: %LINEPROTO-5-UPDOWN: Line protocol on Interface Loopback1, changed state to up

R2(config-if)#ip address 172.16.2.1 255.255.255.0

R2(config-if)#ipv6 address 2001:db8:cafe:2::1/64

R2(config-if)#

R2(config-if)#interface serial 2/0

R2(config-if)#ip address 192.168.1.2 255.255.255.252

R2(config-if)#ipv6 address 2001:db8:feed:1::2/64

R2(config-if)#no shut

R2(config-if)#

*Jul 21 07:57:19.399: %LINK-3-UPDOWN: Interface Serial2/0, changed state to up

R2(config-if)#

*Jul 21 07:57:20.411: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial2/0, changed state to up

R2(config-if)#do ping 192.168.1.1

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 8/29/44 ms

R2(config-if)#

R2(config-if)#do ping 2001:db8:feed:1::1

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 2001:DB8:FEED:1::1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 12/15/16 ms

R2(config-if)# 

R2(config-if)#interface serial 2/1

R2(config-if)#ip address 172.16.1.1 255.255.255.252

R2(config-if)#ipv6 address 2001:db8:cafe:1::1/64

R2(config-if)#no shut

R2(config-if)#

*Jul 21 07:59:37.451: %LINK-3-UPDOWN: Interface Serial2/1, changed state to up

R2(config-if)#

*Jul 21 07:59:38.463: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial2/1, changed state to up

R2(config-if)#end

R2#

R3#conf t

Enter configuration commands, one per line.  End with CNTL/Z.

R3(config)#interface loop 0

R3(config-if)#

*Jul 21 08:00:05.927: %LINEPROTO-5-UPDOWN: Line protocol on Interface Loopback0, changed state to up

R3(config-if)#ip address 172.17.3.1 255.255.255.0

R3(config-if)#ipv6 address 2001:db8:cafe:33::1/64

R3(config-if)#

R3(config-if)#interface loop 1

R3(config-if)#

*Jul 21 08:01:03.951: %LINEPROTO-5-UPDOWN: Line protocol on Interface Loopback1, changed state to up

R3(config-if)#ip address 172.16.3.1 255.255.255.0

R3(config-if)#ipv6 address 2001:db8:cafe:3::1/64

R3(config-if)#

R3(config-if)#interface serial 2/1

R3(config-if)#ip address 172.16.1.2 255.255.255.252

R3(config-if)#ipv6 address 2001:db8:cafe:1::2/64

R3(config-if)#no shut

R3(config-if)#

*Jul 21 08:02:27.059: %LINK-3-UPDOWN: Interface Serial2/1, changed state to up

R3(config-if)#

*Jul 21 08:02:28.071: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial2/1, changed state to up

R3(config-if)#do ping 172.16.1.1

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 172.16.1.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 8/17/24 ms

R3(config-if)#

R3(config-if)#do ping 2001:db8:cafe:1::1

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 2001:DB8:CAFE:1::1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 16/18/20 ms

R3(config-if)#end

R2#conf t     // CONFIGURE EIGRP FOR IPv4 AND IPv6 ON CUSTOMER NETWORK

Enter configuration commands, one per line.  End with CNTL/Z.

R2(config)#ipv6 unicast-routing

R2(config)#router eigrp 1

R2(config-router)#eigrp router-id 2.2.2.2

R2(config-router)#network 172.16.0.0

R2(config-router)#network 172.17.0.0

R2(config-router)#

R2(config-router)#ipv6 router eigrp 2

R2(config-rtr)#eigrp router-id 2.2.2.2

R2(config-rtr)#

R2(config-rtr)#interface loop 0

R2(config-if)#ipv6 eigrp 2

R2(config-if)#               

R2(config-if)#interface loop 1

R2(config-if)#ipv6 eigrp 2   

R2(config-if)#

R2(config-if)#interface serial 2/1

R2(config-if)#ipv6 eigrp 2       

R2(config-if)#end

R2#

*Jul 21 08:07:36.683: %DUAL-5-NBRCHANGE: EIGRP-IPv4 1: Neighbor 172.16.1.2 (Serial2/1) is up: new adjacency

R2#

*Jul 21 08:10:00.775: %DUAL-5-NBRCHANGE: EIGRP-IPv6 2: Neighbor FE80::C803:1CFF:FE48:0 (Serial2/1) is up: new adjacency

R3#conf t     

Enter configuration commands, one per line.  End with CNTL/Z.

R3(config)#ipv6 unicast

R3(config)#router eigrp 1

R3(config-router)#eigrp router-id 3.3.3.3

R3(config-router)#network 172.16.0.0

*Jul 21 08:07:36.631: %DUAL-5-NBRCHANGE: EIGRP-IPv4 1: Neighbor 172.16.1.1 (Serial2/1) is up: new adjacency

R3(config-router)#network 172.17.0.0

R3(config-router)#

R3(config-router)#ipv6 router eigrp 2

R3(config-rtr)#interface loop 0

R3(config-if)#ipv6 eigrp 2

R3(config-if)#

R3(config-if)#interface loop 1

R3(config-if)#ipv6 eigrp 2   

R3(config-if)#

R3(config-if)#interface serial 2/1

R3(config-if)#ipv6 eigrp 2       

R3(config-if)#

*Jul 21 08:10:00.703: %DUAL-5-NBRCHANGE: EIGRP-IPv6 2: Neighbor FE80::C802:23FF:FE24:0 (Serial2/1) is up: new adjacency

R3(config-if)#end

R3#

R1#conf t      // CONFIGURE MP-BGP ON ISP (EBGP WITH R2)

Enter configuration commands, one per line.  End with CNTL/Z.

R1(config)#ipv6 unicast

R1(config)#router bgp 65100

R1(config-router)#bgp router-id 1.1.1.1

R1(config-router)#neighbor 192.168.1.2 remote-as 65000

R1(config-router)#

R1(config-router)#?           

Router configuration commands:

  address-family        Enter Address Family command mode

  aggregate-address     Configure BGP aggregate entries

  auto-summary          Enable automatic network number summarization

  bgp                   BGP specific commands

  default               Set a command to its defaults

  default-information   Control distribution of default information

  default-metric        Set metric of redistributed routes

  distance              Define an administrative distance

  distribute-list       Filter networks in routing updates

  exit                  Exit from routing protocol configuration mode

  help                  Description of the interactive help system

  maximum-paths         Forward packets over multiple paths

  neighbor              Specify a neighbor router

  network               Specify a network to announce via BGP

  no                    Negate a command or set its defaults

  redistribute          Redistribute information from another routing protocol

  route-server-context  Enter route server context command mode

  scope                 Enter scope command mode

  snmp                  Modify snmp parameters

  synchronization       Perform IGP synchronization

  table-map             Map external entry attributes into routing table

  template              Enter template command mode

  timers                Adjust routing timers

R1(config-router)#address-family ?

  ipv4      Address family

  ipv6      Address family

  l2vpn     Address family

  nsap      Address family

  rtfilter  Address family

  vpnv4     Address family

  vpnv6     Address family

R1(config-router)#address-family ipv4 ?

  mdt        Address Family modifier

  multicast  Address Family modifier

  mvpn       Address Family modifier

  unicast    Address Family modifier

  vrf        Specify parameters for a VPN Routing/Forwarding instance

  <cr>

R1(config-router)#address-family ipv4 unicast        // CONFIGURE IPv4 ADDRESS FAMILY (AF)

R1(config-router-af)#?

Router Address Family configuration commands:

  aggregate-address    Configure BGP aggregate entries

  auto-summary         Enable automatic network number summarization

  bgp                  BGP specific commands

  default              Set a command to its defaults

  default-information  Control distribution of default information

  default-metric       Set metric of redistributed routes

  distance             Define an administrative distance

  distribute-list      Filter networks in routing updates

  exit-address-family  Exit from Address Family configuration mode

  help                 Description of the interactive help system

  maximum-paths        Forward packets over multiple paths

  neighbor             Specify a neighbor router

  network              Specify a network to announce via BGP

  no                   Negate a command or set its defaults

  redistribute         Redistribute information from another routing protocol

  snmp                 Modify snmp parameters

  synchronization      Perform IGP synchronization

  table-map            Map external entry attributes into routing table

R1(config-router-af)#network 10.1.0.0 mask 255.255.0.0

R1(config-router-af)#neighbor 192.168.1.2 activate

R1(config-router-af)#exit-address-family

R1(config-router)#address-family ipv6 unicast       // CONFIGURE IPv6 AF

R1(config-router-af)#network 2001:db8:beef:1::/64

R1(config-router-af)#neighbor 192.168.1.2 activate

R1(config-router-af)#neighbor 192.168.1.2 route-map HOPv6 out      // CONFIGURE A ROUTE MAP FOR IPv6 OUTBOUND EBGP UPDATES TO R2

R1(config-router-af)#exit  

R1(config-router)#route-map HOPv6 permit 10

R1(config-route-map)#set ?

  as-path           Prepend string for a BGP AS-path attribute

  automatic-tag     Automatically compute TAG value

  clns              OSI summary address

  comm-list         set BGP community list (for deletion)

  community         BGP community attribute

  dampening         Set BGP route flap dampening parameters

  default           Set default information

  extcomm-list      Set BGP/VPN extended community list (for deletion)

  extcommunity      BGP extended community attribute

  global            Set to global routing table

  interface         Output interface

  ip                IP specific information

  ipv6              IPv6 specific information

  level             Where to import route

  local-preference  BGP local preference path attribute

  metric            Metric value for destination routing protocol

  metric-type       Type of metric for destination routing protocol

  mpls-label        Set MPLS label for prefix

  origin            BGP origin code

  tag               Tag value for destination routing protocol

  traffic-index     BGP traffic classification number for accounting

  vrf               Define VRF name

  weight            BGP weight for routing table

R1(config-route-map)#set ipv6 ?

  address     IPv6 address

  default     Set default information

  next-hop    IPv6 Next hop

  precedence  IPv6 Precedence

R1(config-route-map)#set ipv6 next-hop ?

  X:X:X:X::X    Next hop address

  encapsulate   Encapsulation profile for VPN nexthop

  peer-address  Use peer address (for BGP only)

R1(config-route-map)#set ipv6 next-hop 2001:db8:feed:1::1     // NOTICE IPv6 NEX HOP IS R1 SERIAL 2/0

R1(config-route-map)#end

R1#

*Jul 21 08:19:10.159: %BGP_SESSION-5-ADJCHANGE: neighbor 192.168.1.2 IPv6 Unicast topology base removed from session  Capability changed

*Jul 21 08:19:10.163: %BGP-5-ADJCHANGE: neighbor 192.168.1.2 Up

R1#

*Jul 21 08:22:44.635: %BGP-5-ADJCHANGE: neighbor 192.168.1.2 Down Peer closed the session

*Jul 21 08:22:44.639: %BGP_SESSION-5-ADJCHANGE: neighbor 192.168.1.2 IPv4 Unicast topology base removed from session  Peer closed the session

*Jul 21 08:22:45.447: %BGP-5-ADJCHANGE: neighbor 192.168.1.2 Up

R1#

R2#conf t       // CONFIGURE MP-BGP ON R2 (EBGP WITH R1 AND IBGP WITH R3)

Enter configuration commands, one per line.  End with CNTL/Z.

R2(config)#router bgp 65000

R2(config-router)#bgp router-id 2.2.2.2

R2(config-router)#neighbor 192.168.1.1 remote-as 65100

R2(config-router)#

*Jul 21 08:19:10.315: %BGP-5-ADJCHANGE: neighbor 192.168.1.1 Up

R2(config-router)#

R2(config-router)#neighbor 172.17.3.1 remote-as 65000       // IPv4 IBGP PEER

R2(config-router)#neighbor 172.17.3.1 update-source loop 0    // USE LOOPBACK 0 AS SOURCE IP FOR BGP UPDATES

R2(config-router)#

R2(config-router)#neighbor 2001:db8:cafe:33::1 remote-as 65000       // IPv6 IBGP PEER

R2(config-router)#neighbor 2001:db8:cafe:33::1 update-source loop 0  

R2(config-router)#address-family ipv4 unicast

R2(config-router-af)#network 172.16.2.0 mask 255.255.255.0

R2(config-router-af)#neighbor 192.168.1.1 activate

R2(config-router-af)#

R2(config-router-af)#neighbor 172.17.3.1 activate

R2(config-router-af)#neighbor 172.17.3.1 next-hop-self    // USE R2 AS NEXT HOP FOR EBGP LEARNED ROUTES

R2(config-router-af)#exit

R2(config-router)#address-family ipv6 unicast         

R2(config-router-af)#network 2001:db8:cafe:2::/64

R2(config-router-af)#neighbor 192.168.1.1 activate

R2(config-router-af)#

*Jul 21 08:22:44.751: %BGP-5-ADJCHANGE: neighbor 192.168.1.1 Down Capability changed

*Jul 21 08:22:44.755: %BGP_SESSION-5-ADJCHANGE: neighbor 192.168.1.1 IPv4 Unicast topology base removed from session  Capability changed

*Jul 21 08:22:45.587: %BGP-5-ADJCHANGE: neighbor 192.168.1.1 Up

R2(config-router-af)#neighbor 192.168.1.1 route-map HOPv6 out     // SIMILAR ROUTE MAP IN R1

R2(config-router-af)#  

R2(config-router-af)#neighbor 2001:db8:cafe:33::1 activate

R2(config-router-af)#neighbor 2001:db8:cafe:33::1 next-hop-self

R2(config-router-af)#exit

R2(config-router)#route-map HOPv6

R2(config-route-map)#set ipv6 next-hop 2001:db8:feed:1::2       // USE R2 IPv6 WAN IP (SERIAL 2/0)

R2(config-route-map)#end

R2#

*Jul 21 08:28:48.047: %BGP-5-ADJCHANGE: neighbor 172.17.3.1 Up

R2#

*Jul 21 08:31:54.431: %BGP-5-ADJCHANGE: neighbor 2001:DB8:CAFE:33::1 Up

R2#

R3#conf t       // CONFIGURE MP-BGP ON R3 (IBGP WITH R2)

Enter configuration commands, one per line.  End with CNTL/Z.

R3(config)#router bgp 65000

R3(config-router)#bgp router-id 3.3.3.3

R3(config-router)#neighbor 2001:db8:cafe:22::1 remote-as 65000

R3(config-router)#neighbor 2001:db8:cafe:22::1 update-source loop 0

R3(config-router)#

R3(config-router)#neighbor 172.17.2.1 remote-as 65000

R3(config-router)#

*Jul 21 08:28:47.971: %BGP-5-ADJCHANGE: neighbor 172.17.2.1 Up

R3(config-router)#                                  

R3(config-router)#neighbor 172.17.2.1 update-source loop 0        

R3(config-router)# 

R3(config-router)#address-family ipv4 unicast

R3(config-router-af)#network 172.16.3.0 mask 255.255.0.0

% BGP: Incorrect network or mask/prefix-length configured

R3(config-router-af)#network 172.16.3.0 mask 255.255.255.0

R3(config-router-af)#neighbor 172.17.2.1 activate

R3(config-router-af)#exit

R3(config-router)#address-family ipv6 unicast

R3(config-router-af)#network 2001:db8:cafe:3::/64

R3(config-router-af)#neighbor 2001:db8:cafe:22::1 activate

R3(config-router-af)#

*Jul 21 08:31:54.359: %BGP-5-ADJCHANGE: neighbor 2001:DB8:CAFE:22::1 Up

R3(config-router-af)#end

R3#

R2#show bgp ?

  *         All scopes

  all       All address families

  ipv4      Address family

  ipv6      Address family

  l2vpn     Address family

  nsap      Address family

  rtfilter  Address family

  vpnv4     Address family

  vpnv6     Address family

  vrf       VRF scope

R2#show bgp all ?

  community          Display routes matching the communities

  community-list     Display routes matching the community-list

  dampening          Display detailed information about dampening

  extcommunity-list  Display routes matching the extcommunity-list

  filter-list        Display routes conforming to the filter-list

  inconsistent-as    Display only routes with inconsistent origin ASs

  neighbors          Detailed information on TCP and BGP neighbor connections

  nexthops           Nexthop address table

  paths              Path information

  peer-group         Display information on peer-groups

  pending-prefixes   Display prefixes pending deletion

  quote-regexp       Display routes matching the AS path "regular expression"

  regexp             Display routes matching the AS path regular expression

  replication        Display replication status of update-group(s)

  rib-failure        Display bgp routes that failed to install in the routing

                     table (RIB)

  summary            Summary of BGP neighbor status

  update-group       Display information on update-groups

  update-sources     Update source interface table

  version            Display prefixes with matching version numbers

  |                  Output modifiers

  <cr>

         

R2#show bgp all neighbors      // VERIFY IPv4 AND IPv4 BGP PEERING

For address family: IPv4 Unicast

BGP neighbor is 172.17.3.1,  remote AS 65000, internal link      // INTERNAL LINK REFERS IBGP

  BGP version 4, remote router ID 3.3.3.3

  BGP state = Established, up for 00:06:16

  Last read 00:00:46, last write 00:00:02, hold time is 180, keepalive interval is 60 seconds

  Neighbor sessions:

    1 active, is not multisession capable (disabled)

  Neighbor capabilities:

    Route refresh: advertised and received(new)

    Four-octets ASN Capability: advertised and received

    Address family IPv4 Unicast: advertised and received

    Enhanced Refresh Capability: advertised and received

    Multisession Capability:

    Stateful switchover support enabled: NO for session 1

  Message statistics:

    InQ depth is 0

    OutQ depth is 0

   

                         Sent       Rcvd

    Opens:                  1          1

    Notifications:          0          0

    Updates:                3          2

    Keepalives:             9          8

    Route Refresh:          0          0

    Total:                 13         11

  Default minimum time between advertisement runs is 0 seconds

  Address tracking is enabled, the RIB does have a route to 172.17.3.1

  Connections established 1; dropped 0

  Last reset never

  Transport(tcp) path-mtu-discovery is enabled

  Graceful-Restart is disabled

Connection state is ESTAB, I/O status: 1, unread input bytes: 0           

Connection is ECN Disabled, Mininum incoming TTL 0, Outgoing TTL 255

Local host: 172.17.2.1, Local port: 26767

Foreign host: 172.17.3.1, Foreign port: 179

Connection tableid (VRF): 0

Maximum output segment queue size: 50

Enqueued packets for retransmit: 0, input: 0  mis-ordered: 0 (0 bytes)

Event Timers (current time is 0x2D079C):

Timer          Starts    Wakeups            Next

Retrans            11          0             0x0

TimeWait            0          0             0x0

AckHold            10          7             0x0

SendWnd             0          0             0x0

KeepAlive           0          0             0x0

GiveUp              0          0             0x0

PmtuAger            1          0        0x307090

DeadWait            0          0             0x0

Linger              0          0             0x0

ProcessQ            0          0             0x0

iss: 1372476788  snduna: 1372477155  sndnxt: 1372477155

irs: 2428860457  rcvnxt: 2428860745

sndwnd:  16018  scale:      0  maxrcvwnd:  16384

rcvwnd:  16097  scale:      0  delrcvwnd:    287

SRTT: 770 ms, RTTO: 2360 ms, RTV: 1590 ms, KRTT: 0 ms

minRTT: 16 ms, maxRTT: 1000 ms, ACK hold: 200 ms

Status Flags: active open

Option Flags: nagle, path mtu capable

IP Precedence value : 6

         

Datagrams (max data segment is 1460 bytes):

Rcvd: 21 (out of order: 0), with data: 11, total data bytes: 287

Sent: 22 (retransmit: 0, fastretransmit: 0, partialack: 0, Second Congestion: 0), with data: 11, total data bytes: 366

 Packets received in fast path: 0, fast processed: 0, slow path: 0

 fast lock acquisition failures: 0, slow path: 0

TCP Semaphore      0x6A359FDC  FREE

BGP neighbor is 192.168.1.1,  remote AS 65100, external link      // EXTERNAL LINK REFERS EBGP

  BGP version 4, remote router ID 1.1.1.1

  BGP state = Established, up for 00:12:18

  Last read 00:00:40, last write 00:00:37, hold time is 180, keepalive interval is 60 seconds

  Neighbor sessions:

    1 active, is not multisession capable (disabled)

  Neighbor capabilities:

    Route refresh: advertised and received(new)

    Four-octets ASN Capability: advertised and received

    Address family IPv4 Unicast: advertised and received

    Address family IPv6 Unicast: advertised and received

    Enhanced Refresh Capability: advertised and received

    Multisession Capability:

    Stateful switchover support enabled: NO for session 1

  Message statistics:

    InQ depth is 0

    OutQ depth is 0

   

                         Sent       Rcvd

    Opens:                  1          1

    Notifications:          0          0

    Updates:                9          4

    Keepalives:            13         15

    Route Refresh:          0          0

    Total:                 25         20

  Default minimum time between advertisement runs is 30 seconds

  Address tracking is enabled, the RIB does have a route to 192.168.1.1

  Connections established 2; dropped 1

  Last reset 00:12:19, due to Capability changed of session 1

  Transport(tcp) path-mtu-discovery is enabled

  Graceful-Restart is disabled

Connection state is ESTAB, I/O status: 1, unread input bytes: 0           

Connection is ECN Disabled, Mininum incoming TTL 0, Outgoing TTL 1

Local host: 192.168.1.2, Local port: 20972

Foreign host: 192.168.1.1, Foreign port: 179

Connection tableid (VRF): 0

Maximum output segment queue size: 50

Enqueued packets for retransmit: 0, input: 0  mis-ordered: 0 (0 bytes)

Event Timers (current time is 0x2D07A0):

Timer          Starts    Wakeups            Next

Retrans            20          0             0x0

TimeWait            0          0             0x0

AckHold            17         14             0x0

SendWnd             0          0             0x0

KeepAlive           0          0             0x0

GiveUp              0          0             0x0

PmtuAger           92         91        0x2D0B94

DeadWait            0          0             0x0

Linger              0          0             0x0

ProcessQ            0          0             0x0

iss: 3419991927  snduna: 3419992768  sndnxt: 3419992768

irs: 2818091020  rcvnxt: 2818091568

sndwnd:  15544  scale:      0  maxrcvwnd:  16384

rcvwnd:  15837  scale:      0  delrcvwnd:    547

SRTT: 931 ms, RTTO: 1468 ms, RTV: 537 ms, KRTT: 0 ms

minRTT: 8 ms, maxRTT: 1000 ms, ACK hold: 200 ms

Status Flags: active open

Option Flags: nagle, path mtu capable

IP Precedence value : 6

Datagrams (max data segment is 1460 bytes):

Rcvd: 37 (out of order: 0), with data: 18, total data bytes: 547

Sent: 39 (retransmit: 0, fastretransmit: 0, partialack: 0, Second Congestion: 0), with data: 21, total data bytes: 840

 Packets received in fast path: 0, fast processed: 0, slow path: 0

 fast lock acquisition failures: 0, slow path: 0

TCP Semaphore      0x6A359E8C  FREE

For address family: IPv6 Unicast

BGP neighbor is 2001:DB8:CAFE:33::1,  remote AS 65000, internal link

  BGP version 4, remote router ID 3.3.3.3

  BGP state = Established, up for 00:03:10

  Last read 00:00:38, last write 00:00:17, hold time is 180, keepalive interval is 60 seconds

  Neighbor sessions:

    1 active, is not multisession capable (disabled)

  Neighbor capabilities:

    Route refresh: advertised and received(new)

    Four-octets ASN Capability: advertised and received

    Address family IPv6 Unicast: advertised and received

    Enhanced Refresh Capability: advertised and received

    Multisession Capability:

    Stateful switchover support enabled: NO for session 1

  Message statistics:

    InQ depth is 0

    OutQ depth is 0

   

                         Sent       Rcvd

    Opens:                  1          1

    Notifications:          0          0

    Updates:                3          2

    Keepalives:             5          5

    Route Refresh:          0          0

    Total:                  9          8

  Default minimum time between advertisement runs is 0 seconds

  Address tracking is enabled, the RIB does have a route to 2001:DB8:CAFE:33::1

  Connections established 1; dropped 0

  Last reset never

  Transport(tcp) path-mtu-discovery is enabled

  Graceful-Restart is disabled

Connection state is ESTAB, I/O status: 1, unread input bytes: 0           

Connection is ECN Disabled, Mininum incoming TTL 0, Outgoing TTL 255

Local host: 2001:DB8:CAFE:22::1, Local port: 59230

Foreign host: 2001:DB8:CAFE:33::1, Foreign port: 179

Connection tableid (VRF): 0

Maximum output segment queue size: 50

Enqueued packets for retransmit: 0, input: 0  mis-ordered: 0 (0 bytes)

Event Timers (current time is 0x2D07A0):

Timer          Starts    Wakeups            Next

Retrans             7          0             0x0

TimeWait            0          0             0x0

AckHold             6          3             0x0

SendWnd             0          0             0x0

KeepAlive           0          0             0x0

GiveUp              0          0             0x0

PmtuAger            1          0        0x334898

DeadWait            0          0             0x0

Linger              0          0             0x0

ProcessQ            0          0             0x0

iss: 4247843150  snduna: 4247843492  sndnxt: 4247843492

irs: 3469059070  rcvnxt: 3469059329

sndwnd:  16043  scale:      0  maxrcvwnd:  16384

rcvwnd:  16126  scale:      0  delrcvwnd:    258

SRTT: 607 ms, RTTO: 2949 ms, RTV: 2342 ms, KRTT: 0 ms

minRTT: 8 ms, maxRTT: 1000 ms, ACK hold: 200 ms

Status Flags: active open

Option Flags: nagle, path mtu capable

IP Precedence value : 6

Datagrams (max data segment is 1440 bytes):

Rcvd: 13 (out of order: 0), with data: 7, total data bytes: 258

Sent: 14 (retransmit: 0, fastretransmit: 0, partialack: 0, Second Congestion: 0), with data: 14, total data bytes: 909

 Packets received in fast path: 0, fast processed: 0, slow path: 0

 fast lock acquisition failures: 0, slow path: 0

TCP Semaphore      0x6AAED7A0  FREE

         

BGP neighbor is 192.168.1.1,  remote AS 65100, external link

  BGP version 4, remote router ID 1.1.1.1

  BGP state = Established, up for 00:12:18

  Last read 00:00:40, last write 00:00:37, hold time is 180, keepalive interval is 60 seconds

  Neighbor sessions:

    1 active, is not multisession capable (disabled)

  Neighbor capabilities:

    Route refresh: advertised and received(new)

    Four-octets ASN Capability: advertised and received

    Address family IPv4 Unicast: advertised and received

    Address family IPv6 Unicast: advertised and received

    Enhanced Refresh Capability: advertised and received

    Multisession Capability:

    Stateful switchover support enabled: NO for session 1

  Message statistics:

    InQ depth is 0

    OutQ depth is 0

   

                         Sent       Rcvd

    Opens:                  1          1

    Notifications:          0          0

    Updates:                9          4

    Keepalives:            13         15

    Route Refresh:          0          0

    Total:                 25         20

  Default minimum time between advertisement runs is 30 seconds

  Address tracking is enabled, the RIB does have a route to 192.168.1.1

  Connections established 2; dropped 1

  Last reset 00:12:21, due to Capability changed of session 1

  Transport(tcp) path-mtu-discovery is enabled

  Graceful-Restart is disabled

Connection state is ESTAB, I/O status: 1, unread input bytes: 0           

Connection is ECN Disabled, Mininum incoming TTL 0, Outgoing TTL 1

Local host: 192.168.1.2, Local port: 20972

Foreign host: 192.168.1.1, Foreign port: 179

Connection tableid (VRF): 0

Maximum output segment queue size: 50

Enqueued packets for retransmit: 0, input: 0  mis-ordered: 0 (0 bytes)

Event Timers (current time is 0x2D10C8):

Timer          Starts    Wakeups            Next

Retrans            20          0             0x0

TimeWait            0          0             0x0

AckHold            17         14             0x0

SendWnd             0          0             0x0

KeepAlive           0          0             0x0

GiveUp              0          0             0x0

PmtuAger           93         92        0x2D1150

DeadWait            0          0             0x0

Linger              0          0             0x0

ProcessQ            0          0             0x0

iss: 3419991927  snduna: 3419992768  sndnxt: 3419992768

irs: 2818091020  rcvnxt: 2818091568

sndwnd:  15544  scale:      0  maxrcvwnd:  16384

rcvwnd:  15837  scale:      0  delrcvwnd:    547

SRTT: 931 ms, RTTO: 1468 ms, RTV: 537 ms, KRTT: 0 ms

minRTT: 8 ms, maxRTT: 1000 ms, ACK hold: 200 ms

Status Flags: active open

Option Flags: nagle, path mtu capable

IP Precedence value : 6

Datagrams (max data segment is 1460 bytes):

Rcvd: 37 (out of order: 0), with data: 18, total data bytes: 547

Sent: 39 (retransmit: 0, fastretransmit: 0, partialack: 0, Second Congestion: 0), with data: 21, total data bytes: 840

 Packets received in fast path: 0, fast processed: 0, slow path: 0

 fast lock acquisition failures: 0, slow path: 0

TCP Semaphore      0x6A359E8C  FREE

         

For address family: IPv4 Multicast

R2#show ip bgp neighbors      // ALTERNATIVE VERIFICATION COMMAND

BGP neighbor is 172.17.3.1,  remote AS 65000, internal link

  BGP version 4, remote router ID 3.3.3.3

  BGP state = Established, up for 00:11:20

  Last read 00:00:19, last write 00:00:45, hold time is 180, keepalive interval is 60 seconds

  Neighbor sessions:

    1 active, is not multisession capable (disabled)

  Neighbor capabilities:

    Route refresh: advertised and received(new)

    Four-octets ASN Capability: advertised and received

    Address family IPv4 Unicast: advertised and received

    Enhanced Refresh Capability: advertised and received

    Multisession Capability:

    Stateful switchover support enabled: NO for session 1

  Message statistics:

    InQ depth is 0

    OutQ depth is 0

   

                         Sent       Rcvd

    Opens:                  1          1

    Notifications:          0          0

    Updates:                3          2

    Keepalives:            14         14

    Route Refresh:          0          0

    Total:                 18         17

  Default minimum time between advertisement runs is 0 seconds

 For address family: IPv4 Unicast

  Session: 172.17.3.1

  BGP table version 6, neighbor version 6/0

  Output queue size : 0

  Index 3, Advertise bit 1

  3 update-group member

  NEXT_HOP is always this router for eBGP paths

  Slow-peer detection is disabled

  Slow-peer split-update-group dynamic is disabled

                                 Sent       Rcvd

  Prefix activity:               ----       ----

    Prefixes Current:               2          1 (Consumes 64 bytes)

    Prefixes Total:                 2          1

    Implicit Withdraw:              0          0

    Explicit Withdraw:              0          0

    Used as bestpath:             n/a          1

    Used as multipath:            n/a          0

                                   Outbound    Inbound

  Local Policy Denied Prefixes:    --------    -------

    Bestpath from this peer:              1        n/a

    Total:                                1          0

  Number of NLRIs in the update sent: max 1, min 0

  Last detected as dynamic slow peer: never

  Dynamic slow peer recovered: never

  Refresh Epoch: 1

  Last Sent Refresh Start-of-rib: never

  Last Sent Refresh End-of-rib: never

  Last Received Refresh Start-of-rib: never

  Last Received Refresh End-of-rib: never

                                       Sent       Rcvd

        Refresh activity:              ----       ----

          Refresh Start-of-RIB          0          0

          Refresh End-of-RIB            0          0

  Address tracking is enabled, the RIB does have a route to 172.17.3.1

  Connections established 1; dropped 0

  Last reset never

  Transport(tcp) path-mtu-discovery is enabled

  Graceful-Restart is disabled

Connection state is ESTAB, I/O status: 1, unread input bytes: 0           

Connection is ECN Disabled, Mininum incoming TTL 0, Outgoing TTL 255

Local host: 172.17.2.1, Local port: 26767

Foreign host: 172.17.3.1, Foreign port: 179

Connection tableid (VRF): 0

Maximum output segment queue size: 50

Enqueued packets for retransmit: 0, input: 0  mis-ordered: 0 (0 bytes)

Event Timers (current time is 0x31AF88):

Timer          Starts    Wakeups            Next

Retrans            16          0             0x0

TimeWait            0          0             0x0

AckHold            16         13             0x0

SendWnd             0          0             0x0

KeepAlive           0          0             0x0

GiveUp              0          0             0x0

PmtuAger           47         46        0x31B5AC

DeadWait            0          0             0x0

Linger              0          0             0x0

ProcessQ            0          0             0x0

iss: 1372476788  snduna: 1372477250  sndnxt: 1372477250

irs: 2428860457  rcvnxt: 2428860859

sndwnd:  15923  scale:      0  maxrcvwnd:  16384

rcvwnd:  15983  scale:      0  delrcvwnd:    401

SRTT: 882 ms, RTTO: 1768 ms, RTV: 886 ms, KRTT: 0 ms

minRTT: 16 ms, maxRTT: 1000 ms, ACK hold: 200 ms

Status Flags: active open

Option Flags: nagle, path mtu capable

IP Precedence value : 6

Datagrams (max data segment is 1460 bytes):

Rcvd: 32 (out of order: 0), with data: 17, total data bytes: 401

Sent: 33 (retransmit: 0, fastretransmit: 0, partialack: 0, Second Congestion: 0), with data: 16, total data bytes: 461

 Packets received in fast path: 0, fast processed: 0, slow path: 0

 fast lock acquisition failures: 0, slow path: 0

TCP Semaphore      0x6A359FDC  FREE

         

BGP neighbor is 192.168.1.1,  remote AS 65100, external link

  BGP version 4, remote router ID 1.1.1.1

  BGP state = Established, up for 00:17:24

  Last read 00:00:22, last write 00:00:17, hold time is 180, keepalive interval is 60 seconds

  Neighbor sessions:

    1 active, is not multisession capable (disabled)

  Neighbor capabilities:

    Route refresh: advertised and received(new)

    Four-octets ASN Capability: advertised and received

    Address family IPv4 Unicast: advertised and received

    Address family IPv6 Unicast: advertised and received

    Enhanced Refresh Capability: advertised and received

    Multisession Capability:

    Stateful switchover support enabled: NO for session 1

  Message statistics:

    InQ depth is 0

    OutQ depth is 0

   

                         Sent       Rcvd

    Opens:                  1          1

    Notifications:          0          0

    Updates:                9          4

    Keepalives:            19         21

    Route Refresh:          0          0

    Total:                 31         26

  Default minimum time between advertisement runs is 30 seconds

 For address family: IPv4 Unicast

  Session: 192.168.1.1

  BGP table version 6, neighbor version 6/0

  Output queue size : 0

  Index 2, Advertise bit 0

  2 update-group member

  Slow-peer detection is disabled

  Slow-peer split-update-group dynamic is disabled

                                 Sent       Rcvd

  Prefix activity:               ----       ----

    Prefixes Current:               2          1 (Consumes 64 bytes)

    Prefixes Total:                 2          1

    Implicit Withdraw:              0          0

    Explicit Withdraw:              0          0

    Used as bestpath:             n/a          1

    Used as multipath:            n/a          0

                                   Outbound    Inbound

  Local Policy Denied Prefixes:    --------    -------

    Bestpath from this peer:              1        n/a

    Invalid Path:                         1        n/a

    Total:                                2          0

  Number of NLRIs in the update sent: max 1, min 0

  Last detected as dynamic slow peer: never

  Dynamic slow peer recovered: never

  Refresh Epoch: 1

  Last Sent Refresh Start-of-rib: never

  Last Sent Refresh End-of-rib: never

  Last Received Refresh Start-of-rib: never

  Last Received Refresh End-of-rib: never

                                       Sent       Rcvd

        Refresh activity:              ----       ----

          Refresh Start-of-RIB          0          0

          Refresh End-of-RIB            0          0

 For address family: IPv6 Unicast

  Session: 192.168.1.1

  BGP table version 4, neighbor version 4/0

  Output queue size : 0

  Index 2, Advertise bit 0

  2 update-group member

  Outbound path policy configured

  Route map for outgoing advertisements is HOPv6

  Slow-peer detection is disabled

  Slow-peer split-update-group dynamic is disabled

                                 Sent       Rcvd

  Prefix activity:               ----       ----

    Prefixes Current:               2          1 (Consumes 88 bytes)

    Prefixes Total:                 2          1

    Implicit Withdraw:              0          0

    Explicit Withdraw:              2          0

    Used as bestpath:             n/a          1

    Used as multipath:            n/a          0

                                   Outbound    Inbound

  Local Policy Denied Prefixes:    --------    -------

    Bestpath from this peer:              1        n/a

    Other Policies:                       2        n/a

    Total:                                3          0

  Number of NLRIs in the update sent: max 1, min 0

  Last detected as dynamic slow peer: never

  Dynamic slow peer recovered: never

  Refresh Epoch: 1

  Last Sent Refresh Start-of-rib: 00:14:09

  Last Sent Refresh End-of-rib: 00:14:09

  Refresh-Out took 0 seconds

  Last Received Refresh Start-of-rib: never

  Last Received Refresh End-of-rib: never

                                       Sent       Rcvd

        Refresh activity:              ----       ----

          Refresh Start-of-RIB          1          0

          Refresh End-of-RIB            1          0

  Address tracking is enabled, the RIB does have a route to 192.168.1.1

  Connections established 2; dropped 1

  Last reset 00:17:25, due to Capability changed of session 1

  Transport(tcp) path-mtu-discovery is enabled

  Graceful-Restart is disabled

Connection state is ESTAB, I/O status: 1, unread input bytes: 0           

Connection is ECN Disabled, Mininum incoming TTL 0, Outgoing TTL 1

Local host: 192.168.1.2, Local port: 20972

Foreign host: 192.168.1.1, Foreign port: 179

Connection tableid (VRF): 0

Maximum output segment queue size: 50

Enqueued packets for retransmit: 0, input: 0  mis-ordered: 0 (0 bytes)

Event Timers (current time is 0x31B41C):

Timer          Starts    Wakeups            Next

Retrans            26          0             0x0

TimeWait            0          0             0x0

AckHold            23         20             0x0

SendWnd             0          0             0x0

KeepAlive           0          0             0x0

GiveUp              0          0             0x0

PmtuAger          323        322        0x31B518

DeadWait            0          0             0x0

Linger              0          0             0x0

ProcessQ            0          0             0x0

iss: 3419991927  snduna: 3419992882  sndnxt: 3419992882

irs: 2818091020  rcvnxt: 2818091682

sndwnd:  15430  scale:      0  maxrcvwnd:  16384

rcvwnd:  15723  scale:      0  delrcvwnd:    661

SRTT: 969 ms, RTTO: 1216 ms, RTV: 247 ms, KRTT: 0 ms

minRTT: 8 ms, maxRTT: 1000 ms, ACK hold: 200 ms

Status Flags: active open

Option Flags: nagle, path mtu capable

IP Precedence value : 6

Datagrams (max data segment is 1460 bytes):

Rcvd: 49 (out of order: 0), with data: 24, total data bytes: 661

Sent: 51 (retransmit: 0, fastretransmit: 0, partialack: 0, Second Congestion: 0), with data: 27, total data bytes: 954

 Packets received in fast path: 0, fast processed: 0, slow path: 0

 fast lock acquisition failures: 0, slow path: 0

TCP Semaphore      0x6A359E8C  FREE

         

R2#show bgp ?

  *         All scopes

  all       All address families

  ipv4      Address family

  ipv6      Address family

  l2vpn     Address family

  nsap      Address family

  rtfilter  Address family

  vpnv4     Address family

  vpnv6     Address family

  vrf       VRF scope

R2#show bgp ipv6 ?

  multicast  Address Family modifier

  mvpn       Address Family modifier

  unicast    Address Family modifier

R2#show bgp ipv6 unicast ?

  X:X:X:X::X/<0-128>  IPv6 prefix <network>/<length>

  community           Display routes matching the communities

  community-list      Display routes matching the community-list

  dampening           Display detailed information about dampening

  extcommunity-list   Display routes matching the extcommunity-list

  filter-list         Display routes conforming to the filter-list

  inconsistency       Display all inconsistent paths

  inconsistent-as     Display only routes with inconsistent origin ASs

  injected-paths      Display all injected paths

  labels              Display BGP labels for prefixes

  neighbors           Detailed information on TCP and BGP neighbor connections

  nexthops            Nexthop address table

  paths               Path information

  peer-group          Display information on peer-groups

  pending-prefixes    Display prefixes pending deletion

  prefix-list         Display routes matching the prefix-list

  quote-regexp        Display routes matching the AS path "regular expression"

  regexp              Display routes matching the AS path regular expression

  replication         Display replication status of update-group(s)

  rib-failure         Display bgp routes that failed to install in the routing

                      table (RIB)

  route-map           Display routes matching the route-map

  route-server        Route server information

  rpki                Display RPKI Neighbor Cache

  summary             Summary of BGP neighbor status

  update-group        Display information on update-groups

  update-sources      Update source interface table

  version             Display prefixes with matching version numbers

  |                   Output modifiers

  <cr>

R2#show bgp ipv6 unicast neighbors      // VERIFY IPv6 BGP PEER

BGP neighbor is 2001:DB8:CAFE:33::1,  remote AS 65000, internal link

  BGP version 4, remote router ID 3.3.3.3

  BGP state = Established, up for 00:10:38

  Last read 00:00:53, last write 00:00:16, hold time is 180, keepalive interval is 60 seconds

  Neighbor sessions:

    1 active, is not multisession capable (disabled)

  Neighbor capabilities:

    Route refresh: advertised and received(new)

    Four-octets ASN Capability: advertised and received

    Address family IPv6 Unicast: advertised and received

    Enhanced Refresh Capability: advertised and received

    Multisession Capability:

    Stateful switchover support enabled: NO for session 1

  Message statistics:

    InQ depth is 0

    OutQ depth is 0

   

                         Sent       Rcvd

    Opens:                  1          1

    Notifications:          0          0

    Updates:                3          2

    Keepalives:            13         13

    Route Refresh:          0          0

    Total:                 17         16

  Default minimum time between advertisement runs is 0 seconds

 For address family: IPv6 Unicast

  Session: 2001:DB8:CAFE:33::1

  BGP table version 4, neighbor version 4/0

  Output queue size : 0

  Index 3, Advertise bit 1

  3 update-group member

  NEXT_HOP is always this router for eBGP paths

  Slow-peer detection is disabled

  Slow-peer split-update-group dynamic is disabled

                                 Sent       Rcvd

  Prefix activity:               ----       ----

    Prefixes Current:               2          1 (Consumes 88 bytes)

    Prefixes Total:                 2          1

    Implicit Withdraw:              0          0

    Explicit Withdraw:              0          0

    Used as bestpath:             n/a          1

    Used as multipath:            n/a          0

                                   Outbound    Inbound

  Local Policy Denied Prefixes:    --------    -------

    Bestpath from this peer:              1        n/a

    Total:                                1          0

  Number of NLRIs in the update sent: max 1, min 0

  Last detected as dynamic slow peer: never

  Dynamic slow peer recovered: never

  Refresh Epoch: 1

  Last Sent Refresh Start-of-rib: never

  Last Sent Refresh End-of-rib: never

  Last Received Refresh Start-of-rib: never

  Last Received Refresh End-of-rib: never

                                       Sent       Rcvd

        Refresh activity:              ----       ----

          Refresh Start-of-RIB          0          0

          Refresh End-of-RIB            0          0

  Address tracking is enabled, the RIB does have a route to 2001:DB8:CAFE:33::1

  Connections established 1; dropped 0

  Last reset never

  Transport(tcp) path-mtu-discovery is enabled

  Graceful-Restart is disabled

Connection state is ESTAB, I/O status: 1, unread input bytes: 0           

Connection is ECN Disabled, Mininum incoming TTL 0, Outgoing TTL 255

Local host: 2001:DB8:CAFE:22::1, Local port: 59230

Foreign host: 2001:DB8:CAFE:33::1, Foreign port: 179

Connection tableid (VRF): 0

Maximum output segment queue size: 50

Enqueued packets for retransmit: 0, input: 0  mis-ordered: 0 (0 bytes)

Event Timers (current time is 0x33F368):

Timer          Starts    Wakeups            Next

Retrans            15          0             0x0

TimeWait            0          0             0x0

AckHold            14         11             0x0

SendWnd             0          0             0x0

KeepAlive           0          0             0x0

GiveUp              0          0             0x0

PmtuAger           24         23        0x33F57A

DeadWait            0          0             0x0

Linger              0          0             0x0

ProcessQ            0          0             0x0

iss: 4247843150  snduna: 4247843644  sndnxt: 4247843644

irs: 3469059070  rcvnxt: 3469059481

sndwnd:  15891  scale:      0  maxrcvwnd:  16384

rcvwnd:  15974  scale:      0  delrcvwnd:    429

SRTT: 865 ms, RTTO: 1866 ms, RTV: 1001 ms, KRTT: 0 ms

minRTT: 8 ms, maxRTT: 1000 ms, ACK hold: 200 ms

Status Flags: active open

Option Flags: nagle, path mtu capable

IP Precedence value : 6

Datagrams (max data segment is 1440 bytes):

Rcvd: 30 (out of order: 0), with data: 16, total data bytes: 429

Sent: 31 (retransmit: 0, fastretransmit: 0, partialack: 0, Second Congestion: 0), with data: 31, total data bytes: 1741

 Packets received in fast path: 0, fast processed: 0, slow path: 0

 fast lock acquisition failures: 0, slow path: 0

TCP Semaphore      0x6AAED7A0  FREE

         

BGP neighbor is 192.168.1.1,  remote AS 65100, external link

  BGP version 4, remote router ID 1.1.1.1

  BGP state = Established, up for 00:19:55

  Last read 00:00:15, last write 00:00:59, hold time is 180, keepalive interval is 60 seconds

  Neighbor sessions:

    1 active, is not multisession capable (disabled)

  Neighbor capabilities:

    Route refresh: advertised and received(new)

    Four-octets ASN Capability: advertised and received

    Address family IPv4 Unicast: advertised and received

    Address family IPv6 Unicast: advertised and received

    Enhanced Refresh Capability: advertised and received

    Multisession Capability:

    Stateful switchover support enabled: NO for session 1

  Message statistics:

    InQ depth is 0

    OutQ depth is 0

   

                         Sent       Rcvd

    Opens:                  1          1

    Notifications:          0          0

    Updates:                9          4

    Keepalives:            22         24

    Route Refresh:          0          0

    Total:                 34         29

  Default minimum time between advertisement runs is 30 seconds

 For address family: IPv4 Unicast

  Session: 192.168.1.1

  BGP table version 6, neighbor version 6/0

  Output queue size : 0

  Index 2, Advertise bit 0

  2 update-group member

  Slow-peer detection is disabled

  Slow-peer split-update-group dynamic is disabled

                                 Sent       Rcvd

  Prefix activity:               ----       ----

    Prefixes Current:               2          1 (Consumes 64 bytes)

    Prefixes Total:                 2          1

    Implicit Withdraw:              0          0

    Explicit Withdraw:              0          0

    Used as bestpath:             n/a          1

    Used as multipath:            n/a          0

                                   Outbound    Inbound

  Local Policy Denied Prefixes:    --------    -------

    Bestpath from this peer:              1        n/a

    Invalid Path:                         1        n/a

    Total:                                2          0

  Number of NLRIs in the update sent: max 1, min 0

  Last detected as dynamic slow peer: never

  Dynamic slow peer recovered: never

  Refresh Epoch: 1

  Last Sent Refresh Start-of-rib: never

  Last Sent Refresh End-of-rib: never

  Last Received Refresh Start-of-rib: never

  Last Received Refresh End-of-rib: never

                                       Sent       Rcvd

        Refresh activity:              ----       ----

          Refresh Start-of-RIB          0          0

          Refresh End-of-RIB            0          0

 For address family: IPv6 Unicast

  Session: 192.168.1.1

  BGP table version 4, neighbor version 4/0

  Output queue size : 0

  Index 2, Advertise bit 0

  2 update-group member

  Outbound path policy configured

  Route map for outgoing advertisements is HOPv6

  Slow-peer detection is disabled

  Slow-peer split-update-group dynamic is disabled

                                 Sent       Rcvd

  Prefix activity:               ----       ----

    Prefixes Current:               2          1 (Consumes 88 bytes)

    Prefixes Total:                 2          1

    Implicit Withdraw:              0          0

    Explicit Withdraw:              2          0

    Used as bestpath:             n/a          1

    Used as multipath:            n/a          0

                                   Outbound    Inbound

  Local Policy Denied Prefixes:    --------    -------

    Bestpath from this peer:              1        n/a

    Other Policies:                       2        n/a

    Total:                                3          0

  Number of NLRIs in the update sent: max 1, min 0

  Last detected as dynamic slow peer: never

  Dynamic slow peer recovered: never

  Refresh Epoch: 1

  Last Sent Refresh Start-of-rib: 00:16:47

  Last Sent Refresh End-of-rib: 00:16:47

  Refresh-Out took 0 seconds

  Last Received Refresh Start-of-rib: never

  Last Received Refresh End-of-rib: never

                                       Sent       Rcvd

        Refresh activity:              ----       ----

          Refresh Start-of-RIB          1          0

          Refresh End-of-RIB            1          0

  Address tracking is enabled, the RIB does have a route to 192.168.1.1

  Connections established 2; dropped 1

  Last reset 00:20:03, due to Capability changed of session 1

  Transport(tcp) path-mtu-discovery is enabled

  Graceful-Restart is disabled

Connection state is ESTAB, I/O status: 1, unread input bytes: 0           

Connection is ECN Disabled, Mininum incoming TTL 0, Outgoing TTL 1

Local host: 192.168.1.2, Local port: 20972

Foreign host: 192.168.1.1, Foreign port: 179

Connection tableid (VRF): 0

Maximum output segment queue size: 50

Enqueued packets for retransmit: 0, input: 0  mis-ordered: 0 (0 bytes)

Event Timers (current time is 0x341DC8):

Timer          Starts    Wakeups            Next

Retrans            29          0             0x0

TimeWait            0          0             0x0

AckHold            26         23             0x0

SendWnd             0          0             0x0

KeepAlive           0          0             0x0

GiveUp              0          0             0x0

PmtuAger          456        455        0x341DDA

DeadWait            0          0             0x0

Linger              0          0             0x0

ProcessQ            0          0             0x0

iss: 3419991927  snduna: 3419992939  sndnxt: 3419992939

irs: 2818091020  rcvnxt: 2818091739

sndwnd:  15373  scale:      0  maxrcvwnd:  16384

rcvwnd:  15666  scale:      0  delrcvwnd:    718

SRTT: 979 ms, RTTO: 1146 ms, RTV: 167 ms, KRTT: 0 ms

minRTT: 8 ms, maxRTT: 1000 ms, ACK hold: 200 ms

Status Flags: active open

Option Flags: nagle, path mtu capable

IP Precedence value : 6

Datagrams (max data segment is 1460 bytes):

Rcvd: 55 (out of order: 0), with data: 27, total data bytes: 718

Sent: 57 (retransmit: 0, fastretransmit: 0, partialack: 0, Second Congestion: 0), with data: 30, total data bytes: 1011

 Packets received in fast path: 0, fast processed: 0, slow path: 0

 fast lock acquisition failures: 0, slow path: 0

TCP Semaphore      0x6A359E8C  FREE

         

R1#show bgp ipv4 ?

  mdt        Address Family modifier

  multicast  Address Family modifier

  mvpn       Address Family modifier

  unicast    Address Family modifier

R1#show bgp ipv4 unicast ?

  A.B.C.D            Network in the BGP routing table to display

  A.B.C.D/nn         IP prefix <network>/<length>, e.g., 35.0.0.0/8

  cidr-only          Display only routes with non-natural netmasks

  community          Display routes matching the communities

  community-list     Display routes matching the community-list

  dampening          Display detailed information about dampening

  extcommunity-list  Display routes matching the extcommunity-list

  filter-list        Display routes conforming to the filter-list

  import             Display route topology import / export activity

  inconsistency      Display all inconsistent paths

  inconsistent-as    Display only routes with inconsistent origin ASs

  injected-paths     Display all injected paths

  labels             Display Labels for IPv4 NLRI specific information

  neighbors          Detailed information on TCP and BGP neighbor connections

  nexthops           Nexthop address table

  oer-paths          Display all oer controlled paths

  paths              Path information

  peer-group         Display information on peer-groups

  pending-prefixes   Display prefixes pending deletion

  prefix-list        Display routes matching the prefix-list

  quote-regexp       Display routes matching the AS path "regular expression"

  regexp             Display routes matching the AS path regular expression

  replication        Display replication status of update-group(s)

  rib-failure        Display bgp routes that failed to install in the routing

                     table (RIB)

  route-map          Display routes matching the route-map

  route-server       Route server information

  rpki               Display RPKI Neighbor Cache

  summary            Summary of BGP neighbor status

  template           Display peer-policy/peer-session templates

  topology           Routing topology instance

  update-group       Display information on update-groups

  update-sources     Update source interface table

  va                 Display virtual aggregation prefixes

  version            Display prefixes with matching version numbers

  |                  Output modifiers

  <cr>

R1#show bgp ipv4 unicast summary      // VERIFY IPv4 BGP PEER

BGP router identifier 1.1.1.1, local AS number 65100

BGP table version is 6, main routing table version 6

3 network entries using 444 bytes of memory

3 path entries using 192 bytes of memory

3/3 BGP path/bestpath attribute entries using 408 bytes of memory

1 BGP AS-PATH entries using 24 bytes of memory

0 BGP route-map cache entries using 0 bytes of memory

0 BGP filter-list cache entries using 0 bytes of memory

BGP using 1068 total bytes of memory

BGP activity 7/1 prefixes, 8/2 paths, scan interval 60 secs

Neighbor        V           AS MsgRcvd MsgSent   TblVer  InQ OutQ Up/Down  State/PfxRcd

192.168.1.2     4        65000      37      32        6    0    0 00:22:43        2

R1#

R1#show bgp ipv6 unicast summary

BGP router identifier 1.1.1.1, local AS number 65100

BGP table version is 4, main routing table version 4

3 network entries using 516 bytes of memory

3 path entries using 264 bytes of memory

3/3 BGP path/bestpath attribute entries using 408 bytes of memory

1 BGP AS-PATH entries using 24 bytes of memory

0 BGP route-map cache entries using 0 bytes of memory

0 BGP filter-list cache entries using 0 bytes of memory

BGP using 1212 total bytes of memory

BGP activity 7/1 prefixes, 8/2 paths, scan interval 60 secs

Neighbor        V           AS MsgRcvd MsgSent   TblVer  InQ OutQ Up/Down  State/PfxRcd

192.168.1.2     4        65000      37      32        4    0    0 00:22:47       // NOTICE IPv4 IS USED FOR EBGP TRANSPORT

R2#show bgp ipv4 unicast summary

BGP router identifier 2.2.2.2, local AS number 65000

BGP table version is 6, main routing table version 6

3 network entries using 444 bytes of memory

3 path entries using 192 bytes of memory

3/3 BGP path/bestpath attribute entries using 408 bytes of memory

1 BGP AS-PATH entries using 24 bytes of memory

0 BGP route-map cache entries using 0 bytes of memory

0 BGP filter-list cache entries using 0 bytes of memory

BGP using 1068 total bytes of memory

BGP activity 6/0 prefixes, 7/1 paths, scan interval 60 secs

Neighbor        V           AS MsgRcvd MsgSent   TblVer  InQ OutQ Up/Down  State/PfxRcd

172.17.3.1      4        65000      24      26        6    0    0 00:18:03        1

192.168.1.1     4        65100      34      38        6    0    0 00:24:06        1

R2#

R2#show bgp ipv6 unicast summary

BGP router identifier 2.2.2.2, local AS number 65000

BGP table version is 4, main routing table version 4

3 network entries using 516 bytes of memory

3 path entries using 264 bytes of memory

3/3 BGP path/bestpath attribute entries using 408 bytes of memory

1 BGP AS-PATH entries using 24 bytes of memory

0 BGP route-map cache entries using 0 bytes of memory

0 BGP filter-list cache entries using 0 bytes of memory

BGP using 1212 total bytes of memory

BGP activity 6/0 prefixes, 7/1 paths, scan interval 60 secs

Neighbor        V           AS MsgRcvd MsgSent   TblVer  InQ OutQ Up/Down  State/PfxRcd

2001:DB8:CAFE:33::1

                4        65000      22      22        4    0    0 00:15:03        1

192.168.1.1     4        65100      34      38        4    0    0 00:24:12

R1#show bgp ipv4 unicast      // VIEW IPv4 BGP TABLE

BGP table version is 6, local router ID is 1.1.1.1

Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,

              r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter,

              x best-external, a additional-path, c RIB-compressed,

Origin codes: i - IGP, e - EGP, ? - incomplete

RPKI validation codes: V valid, I invalid, N Not found

     Network          Next Hop            Metric LocPrf Weight Path

 *>  10.1.0.0/16      0.0.0.0                  0         32768 i

 *>  172.16.2.0/24    192.168.1.2              0             0 65000 i

 *>  172.16.3.0/24    192.168.1.2                            0 65000 i

R1#

R1#show ip bgp     // SIMILAR COMMAND TO show bgp ipv4 unicast

BGP table version is 6, local router ID is 1.1.1.1

Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,

              r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter,

              x best-external, a additional-path, c RIB-compressed,

Origin codes: i - IGP, e - EGP, ? - incomplete

RPKI validation codes: V valid, I invalid, N Not found

     Network          Next Hop            Metric LocPrf Weight Path

 *>  10.1.0.0/16      0.0.0.0                  0         32768 i

 *>  172.16.2.0/24    192.168.1.2              0             0 65000 i

 *>  172.16.3.0/24    192.168.1.2                            0 65000 i

R1#show bgp ipv6 unicast     // VIEW IPv6 BGP TABLE

BGP table version is 4, local router ID is 1.1.1.1

Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,

              r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter,

              x best-external, a additional-path, c RIB-compressed,

Origin codes: i - IGP, e - EGP, ? - incomplete

RPKI validation codes: V valid, I invalid, N Not found

     Network          Next Hop            Metric LocPrf Weight Path

 *>  2001:DB8:BEEF:1::/64

                       ::                       0         32768 i

 *>  2001:DB8:CAFE:2::/64

                       2001:DB8:FEED:1::2      // NOTICE USING R2 EBGP NEXT HOP

                                                0             0 65000 i

 *>  2001:DB8:CAFE:3::/64

                       2001:DB8:FEED:1::2

                                                              0 65000 i

R2#show bgp ipv4 unicast

BGP table version is 6, local router ID is 2.2.2.2

Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,

              r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter,

              x best-external, a additional-path, c RIB-compressed,

Origin codes: i - IGP, e - EGP, ? - incomplete

RPKI validation codes: V valid, I invalid, N Not found

     Network          Next Hop            Metric LocPrf Weight Path

 *>  10.1.0.0/16      192.168.1.1              0             0 65100 i

 *>  172.16.2.0/24    0.0.0.0                  0         32768 i

 r>i 172.16.3.0/24    172.17.3.1               0    100      0 i      // NOTICE r SINCE 172.16.3.0/24 IS LEARNED AND INSTALLING IN THE ROUTING TABLE VIA EIGRP (LOWER AD 90 vs AD 200)

R2#show ip bgp r?

regexp        replication  rib-failure  route-map

route-server  rpki         rtfilter    

R2#show ip bgp rib-failure

  Network            Next Hop                      RIB-failure   RIB-NH Matches

172.16.3.0/24      172.17.3.1          Higher admin distance              n/a

R2#show bgp ipv6 unicast

BGP table version is 4, local router ID is 2.2.2.2

Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,

              r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter,

              x best-external, a additional-path, c RIB-compressed,

Origin codes: i - IGP, e - EGP, ? - incomplete

RPKI validation codes: V valid, I invalid, N Not found

     Network          Next Hop            Metric LocPrf Weight Path

 *>  2001:DB8:BEEF:1::/64

                       2001:DB8:FEED:1::1       // NOTICE USING R2 EBGP NEXT HOP

                                                0             0 65100 i

 *>  2001:DB8:CAFE:2::/64

                       ::                       0         32768 i

 r>i 2001:DB8:CAFE:3::/64

                       2001:DB8:CAFE:33::1

                                                0    100      0 i

R3#show bgp ipv4 unicast

BGP table version is 4, local router ID is 3.3.3.3

Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,

              r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter,

              x best-external, a additional-path, c RIB-compressed,

Origin codes: i - IGP, e - EGP, ? - incomplete

RPKI validation codes: V valid, I invalid, N Not found

     Network          Next Hop            Metric LocPrf Weight Path

 *>i 10.1.0.0/16      172.17.2.1               0    100      0 65100 i        // R2 NEXT HOP DUE TO next-hop-self

 r>i 172.16.2.0/24    172.17.2.1               0    100      0 i

 *>  172.16.3.0/24    0.0.0.0                  0         32768 i

R3#

R3#show bgp ipv6 unicast

BGP table version is 4, local router ID is 3.3.3.3

Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,

              r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter,

              x best-external, a additional-path, c RIB-compressed,

Origin codes: i - IGP, e - EGP, ? - incomplete

RPKI validation codes: V valid, I invalid, N Not found

     Network          Next Hop            Metric LocPrf Weight Path

 *>i 2001:DB8:BEEF:1::/64

                       2001:DB8:CAFE:22::1

                                                0    100      0 65100 i

 r>i 2001:DB8:CAFE:2::/64

                       2001:DB8:CAFE:22::1

                                                0    100      0 i

 *>  2001:DB8:CAFE:3::/64

                       ::                       0         32768 i

R1#show ip route

Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP

       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

       E1 - OSPF external type 1, E2 - OSPF external type 2

       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2

       ia - IS-IS inter area, * - candidate default, U - per-user static route

       o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP

       + - replicated route, % - next hop override

Gateway of last resort is not set

      10.0.0.0/8 is variably subnetted, 4 subnets, 3 masks

C        10.0.0.0/24 is directly connected, Loopback0

L        10.0.0.1/32 is directly connected, Loopback0

C        10.1.0.0/16 is directly connected, Loopback1

L        10.1.0.1/32 is directly connected, Loopback1

      172.16.0.0/24 is subnetted, 2 subnets

B        172.16.2.0 [20/0] via 192.168.1.2, 00:31:23       // EBGP AD 20

B        172.16.3.0 [20/0] via 192.168.1.2, 00:23:18

      192.168.1.0/24 is variably subnetted, 2 subnets, 2 masks

C        192.168.1.0/30 is directly connected, Serial2/0

L        192.168.1.1/32 is directly connected, Serial2/0

R1#

R1#show ipv6 route

IPv6 Routing Table - default - 9 entries

Codes: C - Connected, L - Local, S - Static, U - Per-user Static route

       B - BGP, HA - Home Agent, MR - Mobile Router, R - RIP

       H - NHRP, I1 - ISIS L1, I2 - ISIS L2, IA - ISIS interarea

       IS - ISIS summary, D - EIGRP, EX - EIGRP external, ND - ND Default

       NDp - ND Prefix, DCE - Destination, NDr - Redirect, O - OSPF Intra

       OI - OSPF Inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2, ON1 - OSPF NSSA ext 1

       ON2 - OSPF NSSA ext 2, l - LISP

C   2001:DB8:BEEF:1::/64 [0/0]

     via Loopback1, directly connected

L   2001:DB8:BEEF:1::1/128 [0/0]

     via Loopback1, receive

C   2001:DB8:BEEF:11::/64 [0/0]

     via Loopback0, directly connected

L   2001:DB8:BEEF:11::1/128 [0/0]

     via Loopback0, receive

B   2001:DB8:CAFE:2::/64 [20/0]            // EBGP AD 20

     via FE80::C802:23FF:FE24:0, Serial2/0

B   2001:DB8:CAFE:3::/64 [20/0]

     via FE80::C802:23FF:FE24:0, Serial2/0

C   2001:DB8:FEED:1::/64 [0/0]

     via Serial2/0, directly connected

L   2001:DB8:FEED:1::1/128 [0/0]

     via Serial2/0, receive

L   FF00::/8 [0/0]

     via Null0, receive

R2#show ip route

Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP

       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

       E1 - OSPF external type 1, E2 - OSPF external type 2

       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2

       ia - IS-IS inter area, * - candidate default, U - per-user static route

       o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP

       + - replicated route, % - next hop override

Gateway of last resort is not set

      10.0.0.0/16 is subnetted, 1 subnets

B        10.1.0.0 [20/0] via 192.168.1.1, 00:32:57

      172.16.0.0/16 is variably subnetted, 5 subnets, 3 masks

C        172.16.1.0/30 is directly connected, Serial2/1

L        172.16.1.1/32 is directly connected, Serial2/1

C        172.16.2.0/24 is directly connected, Loopback1

L        172.16.2.1/32 is directly connected, Loopback1

D        172.16.3.0/24 [90/2297856] via 172.16.1.2, 00:48:06, Serial2/1      // EIGRP (INTERNAL AD 90) LEARNED ROUTES FROM R3

      172.17.0.0/16 is variably subnetted, 3 subnets, 2 masks

C        172.17.2.0/24 is directly connected, Loopback0

L        172.17.2.1/32 is directly connected, Loopback0

D        172.17.3.0/24 [90/2297856] via 172.16.1.2, 00:48:02, Serial2/1

      192.168.1.0/24 is variably subnetted, 2 subnets, 2 masks

C        192.168.1.0/30 is directly connected, Serial2/0

L        192.168.1.2/32 is directly connected, Serial2/0

R2#

R2#show ipv6 route

IPv6 Routing Table - default - 12 entries

Codes: C - Connected, L - Local, S - Static, U - Per-user Static route

       B - BGP, HA - Home Agent, MR - Mobile Router, R - RIP

       H - NHRP, I1 - ISIS L1, I2 - ISIS L2, IA - ISIS interarea

       IS - ISIS summary, D - EIGRP, EX - EIGRP external, ND - ND Default

       NDp - ND Prefix, DCE - Destination, NDr - Redirect, O - OSPF Intra

       OI - OSPF Inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2, ON1 - OSPF NSSA ext 1

       ON2 - OSPF NSSA ext 2, l - LISP

B   2001:DB8:BEEF:1::/64 [20/0]

     via FE80::C801:27FF:FE70:0, Serial2/0

C   2001:DB8:CAFE:1::/64 [0/0]

     via Serial2/1, directly connected

L   2001:DB8:CAFE:1::1/128 [0/0]

     via Serial2/1, receive

C   2001:DB8:CAFE:2::/64 [0/0]

     via Loopback1, directly connected

L   2001:DB8:CAFE:2::1/128 [0/0]

     via Loopback1, receive

D   2001:DB8:CAFE:3::/64 [90/2297856]

     via FE80::C803:1CFF:FE48:0, Serial2/1

C   2001:DB8:CAFE:22::/64 [0/0]

     via Loopback0, directly connected

L   2001:DB8:CAFE:22::1/128 [0/0]

     via Loopback0, receive

D   2001:DB8:CAFE:33::/64 [90/2297856]

     via FE80::C803:1CFF:FE48:0, Serial2/1

C   2001:DB8:FEED:1::/64 [0/0]

     via Serial2/0, directly connected

L   2001:DB8:FEED:1::2/128 [0/0]

     via Serial2/0, receive

L   FF00::/8 [0/0]

     via Null0, receive

R3#show ip route

Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP

       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

       E1 - OSPF external type 1, E2 - OSPF external type 2

       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2

       ia - IS-IS inter area, * - candidate default, U - per-user static route

       o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP

       + - replicated route, % - next hop override

Gateway of last resort is not set

      10.0.0.0/16 is subnetted, 1 subnets

B        10.1.0.0 [200/0] via 172.17.2.1, 00:28:14      // IBGP (AD 200) LEARNED ROUTE FROM R2

      172.16.0.0/16 is variably subnetted, 5 subnets, 3 masks

C        172.16.1.0/30 is directly connected, Serial2/1

L        172.16.1.2/32 is directly connected, Serial2/1

D        172.16.2.0/24 [90/2297856] via 172.16.1.1, 00:49:25, Serial2/1        // EIGRP (AD 90) LEARNED ROUTE FROM R2

C        172.16.3.0/24 is directly connected, Loopback1

L        172.16.3.1/32 is directly connected, Loopback1

      172.17.0.0/16 is variably subnetted, 3 subnets, 2 masks

D        172.17.2.0/24 [90/2297856] via 172.16.1.1, 00:49:25, Serial2/1

C        172.17.3.0/24 is directly connected, Loopback0

L        172.17.3.1/32 is directly connected, Loopback0

R3#

R3#show ipv6 route

IPv6 Routing Table - default - 10 entries

Codes: C - Connected, L - Local, S - Static, U - Per-user Static route

       B - BGP, HA - Home Agent, MR - Mobile Router, R - RIP

       H - NHRP, I1 - ISIS L1, I2 - ISIS L2, IA - ISIS interarea

       IS - ISIS summary, D - EIGRP, EX - EIGRP external, ND - ND Default

       NDp - ND Prefix, DCE - Destination, NDr - Redirect, O - OSPF Intra

       OI - OSPF Inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2, ON1 - OSPF NSSA ext 1

       ON2 - OSPF NSSA ext 2, l - LISP

B   2001:DB8:BEEF:1::/64 [200/0]         // IBGP (AD 200) LEARNED ROUTE FROM R2

     via 2001:DB8:CAFE:22::1

C   2001:DB8:CAFE:1::/64 [0/0]

     via Serial2/1, directly connected

L   2001:DB8:CAFE:1::2/128 [0/0]

     via Serial2/1, receive

D   2001:DB8:CAFE:2::/64 [90/2297856]     // EIGRP (AD 90) LEARNED ROUTE

     via FE80::C802:23FF:FE24:0, Serial2/1

C   2001:DB8:CAFE:3::/64 [0/0]

     via Loopback1, directly connected

L   2001:DB8:CAFE:3::1/128 [0/0]

     via Loopback1, receive

D   2001:DB8:CAFE:22::/64 [90/2297856]

     via FE80::C802:23FF:FE24:0, Serial2/1

C   2001:DB8:CAFE:33::/64 [0/0]

     via Loopback0, directly connected

L   2001:DB8:CAFE:33::1/128 [0/0]

     via Loopback0, receive

L   FF00::/8 [0/0]

     via Null0, receive

R3#ping 10.1.0.1 source 172.16.3.1        // VERIFY IPv4 CONNECTIIVTY TO R1 (ISP)

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.1.0.1, timeout is 2 seconds:

Packet sent with a source address of 172.16.3.1

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 16/35/64 ms

R3#

R3#ping 2001:db8:beef:1::1 source loop 1      // VERIFY IPv6 CONNECTIIVTY TO R1 (ISP)

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 2001:DB8:BEEF:1::1, timeout is 2 seconds:

Packet sent with a source address of 2001:DB8:CAFE:3::1

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 36/40/48 ms