Documenti di Didattica
Documenti di Professioni
Documenti di Cultura
This demonstration requires familiarity with BGP and Route Reflector operations. Use this demonstration to showcase the
capabilities of the IOS XRv 9000 as a Virtual Route Reflector. It is required that you go through the scenario in consecutive order.
Demonstration Requirements
The table below outlines the requirements for this preconfigured demonstration.
Required Optional
Computer with Internet Access Cisco AnyConnect
Cisco.com login
Demonstration Configuration
This demonstration contains preconfigured users and components to illustrate the capabilities available to you within the VIRL
sandbox.
© 2015 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 1 of 20
All information needed to complete the access components is located in the Topology and Servers menus of your active
demonstration.
Topology Menu. Click on any server in the topology and a popup window will appear with available server options.
Servers Menu. Click on or next to any server name to display the available server options and credentials.
Demonstration Topology
GigabitEthernet0/0/0/0 on vRR is directly connected to eth1 of the CentOS VM that hosts the Routem (Route Emulator) application.
The Routem simulates 10 BGP speakers that each advertises the full 420K routes that were recorded from the Internet and another
10 BGP speakers that advertise 10 prefixes each. The logical topology is shown in Figure 2 below.
192.168.1.2
© 2015 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 2 of 20
Table 1. Router ID
Non-Clients Clients
Demonstration Preparation
BEFORE DEMONSTRATING
We strongly recommend that you go through this process at least once, before presenting in front of a live audience. This will allow
you to become familiar with the structure of the document and the demonstration.
Follow the steps below to schedule your demonstration and configure your demonstration environment.
3. Test your connection from the demonstration location before performing any demonstration scenario. [Show Me How]
4. Verify your demonstration has a status of Active under My Demonstrations on the My Dashboard page in the dCloud UI.
o After connecting to the demonstration via AnyConnect, use your local RDP client to connect to workstation
located at 198.18.133.252.
© 2015 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 3 of 20
NOTE: If you are running RDP, it is highly recommended that you use HTML5 as the default client. [Show Me How].
TIP: If using the dCloud webRDP, you can make your RDP session screen larger. To resize, select the corners of the remote
desktop window and drag to the desired size. Right-click anywhere within the grey space of the remote desktop window and select
Reload.
7. Once connected to the workstation, on the Windows Desktop launch both the sunstone putty (Terminal) session and the
routem putty Session by double-clicking the perspective icons.
9. At the router prompt RP/0/RP0/CPU0:IOS-XRv-9000_vRR#, replace the existing configuration with the vrr base
configuration located in the disk0:vrr_base.cfg. To do this, type the following commands:
RP/0/RP0/CPU0:IOS-XRv-9000_vRR#conf t
RP/0/RP0/CPU0:IOS-XRv-9000_vRR(config)#load disk0:vrr_base.cfg
Loading.
2068 bytes parsed in 1 sec (2065)bytes/sec
RP/0/RP0/CPU0:IOS-XRv-9000_vRR(config)#commit replace
This commit will replace or remove the entire running configuration. This
operation can be service affecting.
Do you wish to proceed? [no]: yes
RP/0/RP0/CPU0:IOS-XRv-9000_vRR(config)#
10. On the Routem Terminal (root@host1:~), start the routem function by typing the following commands
cd vrr_demo
./routem –f routem_demo_conf1
11. Check the status of BGP neighbors to verify convergence using the command:
You should have 11 neighbors up. One neighbor advertising 420,025 prefixes, and 10 neighbors advertising 10 prefixes
each.
NOTE: If the St/PfxRcd does not show 1 entry of 420,025 and 10 entries of 10, wait approximately 1 minute and repeat the
command.
12. Check that InQ and OutQ are zero, using the following command:
Logging into the Routem VM is not required. The Routem is pre-configured to accept BGP peers from the vRR. You would only
need to login to the Routem VM if the status of the BGP neighbors from the vRR are DOWN.
© 2015 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 4 of 20
Scenario 1: vRR Peering with Non-client and Clients
In this scenario, we will have the vRR peer with 1 non-client iBGP neighbor and 10 client iBGP peers.
The non-client (simulated by Routem) will advertise around 420K prefixes, which is replayed from a capture of the full
internet routing table that were recorded sometime in early 2013. The vRR then takes this and reflects to its 10 clients.
Each client advertises 10 routes and the vRR reflects these routes to other clients. See Table 2.
192.168.1.
2
© 2015 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 5 of 20
Demonstration Steps
1. On the IOS XRv vRR router node, show the relevant configurations (BGP, session group, address-family group, neighbor
group, route-policy, table-policy)
show run
show run router bgp
2. To show the state of the iBGP neighbors and number of routes received, use the following command:
3. To show all the BGP prefixes received by the vRR, use the following command:
show bgp
IMPORTANT: The output of this command is really long (~420K lines). Your terminal length should not be qset to 0 (no page
breaks) before executing this command. If you have not modified the terminal length, do not worry about this.
4. To show the amount of memory being used by BGP, use the following command:
monitor processes
Type m to sort it from highest to lowest memory usage, then look for ‘bgp’. Note the amount of memory used.
NOTE: The monitor process command displays the top 10 processes of CPU in descending order. This list updates constantly. In
scenario 1, BGP may not initially show as one of the top 10 processes consuming memory, so you may not notice it initially. If you
do not see it, you can choose to monitor the output for approximately one minute to see if it comes up, otherwise, simply move on.
5. To show what is being advertised to a client iBGP peer (choose from 192.168.1.[12-21]), use the following command:
show bgp advertised neighbor 192.168.1.12 summary (See sample output in Appendix A: Figure 7)
6. To show what is being advertised to the non-client iBGP peer, use the following command:
show bgp advertised neighbor 192.168.1.1 summary (See sample output in Appendix A: Figure 8)
© 2015 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 6 of 20
Scenario 2: Add additional Non-client iBGP Peers to the vRR
From Scenario 1, we have one non-client iBGP peer to the vRR. In this scenario, we will add an additional nine non-client peerings.
Each will advertise the full 420K Internet routing table to the vRR. On the vRR, it will then have a total of approximately 4.2M
prefixes across 10 paths.
Figure 4. Logical Diagram of vRR, 10 non-clients, and 10 clients
192.168.1.
2
Demonstration Steps
1. Configure additional iBGP neighbors as non-client (IP: 192.168.1.[3-11]), use the following configuration to configure a peer:
NOTE: For reference on how to load the configuration, please refer to step 9 in the Demonstration Preparation section.
All the ~3.7M (9*420K) prefixes will be advertised by the Routem to the vRR. In the dCloud environment, this process takes
approximately three minutes for convergence.
NOTE: The convergence time of three minutes is specific to this setup in dCloud. It is due to the heavily used virtual environment
that leads to CPU contention among VMs. Average convergence time for most deployments should be significantly lower.
2. Check for convergence using the following commands: (response will be slow while convergence is happening):
© 2015 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 7 of 20
It is converged when the vRR has received all 420,025 routes from each of the non-clients peers
3. After BGP is converged, show the current prefixes that vRR has received from all the iBGP peers (non-clients and clients):
show bgp
4. Show the total memory that BGP is currently using with all ~4.2M prefixes in its RIB, by typing following command:
monitor processes
Type ‘m’ to sort it from highest to lowest memory usage, then look for ‘bgp’. Type ‘q’ to exit from the ‘monitor process’
screen.
Compare to the previous memory consumption by BGP when it was only receiving 420K prefixes versus the current 4.2M.
5. To show what is being advertised to a client iBGP peer (choose from 192.168.1.[12-21]), use the following command:
show bgp advertised neighbor 192.168.1.12 summary (See sample output in Appendix A: Figure 10)
NOTE: The output of this command is really long (~420K lines). Make sure your terminal length is not set to 0 (no page breaks)
before executing this command. If you haven’t modified the terminal length, you shouldn’t worry about this.
© 2015 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 8 of 20
Scenario 3: Filtering the prefixes advertised to the RR Clients
Consider this scenario: What if the RR Clients do not need the full internet routing table? It is possible to filter the prefixes that are
being reflected to the clients by the vRR.
Create a prefix-list or prefix-set to filter only certain prefixes to be reflected to the clients
Figure 5. Filter the prefixes advertised by non-clients to reflect only certain prefixes to clients
192.168.1.2
Demonstration Steps
1. As shown in Scenario 1 and 2, the clients are currently receiving the full internet routing table from the vRR. To create a p refix-
list or a prefix-set, use the following configuration:
prefix-set ADV_SET
1.22.0.0/16 le 32
end-set
!
2. Use the newly configured prefix-set in a route-policy. Use the following configuration:
route-policy ADV_FILTER
if destination in ADV_SET then
pass
else
drop
endif
end-policy
!
3. Apply the route-policy into the Address-family-group configuration for the RR Clients. Use the following configuration:
© 2015 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 9 of 20
router bgp 65000
af-group CLIENT address-family ipv4 unicast
route-policy ADV_FILTER out
!
!
Alternatively, for steps 1 through 3, you can load the configuration stored as disk0:vrr_scenario3.cfg.
NOTE: For reference on how to load the configuration, please refer to step 8.f.b in the Demonstration Preparation section.
4. The filter should take effect on all RR clients after committing the configurations. To show the effect of the filter, show w hat is
advertised to one of the clients (choose from 192.168.1.[12-21]) using the following command:
show bgp advertised neighbor 192.168.1.12 summary (See sample output in Appendix A: Figure 11)
The only prefixes that you should see are the 1.22.x.x.
5. The non-clients should still be getting the routes advertised by the clients. To show this, use the following command:
© 2015 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 10 of 20
Figure 6. ‘show bgp summary’ output with the 1 non-client and 10 clients
Return to Scenario 1
© 2015 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 11 of 20
Figure 7. show bgp advertised neighbor 192.168.1.12 summary
<snipped>
Return to Scenario 1
© 2015 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 12 of 20
Figure 8. ‘show bgp advertised neighbor 192.168.1.1 summary’
<snipped>
Return to Scenario 1
© 2015 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 13 of 20
Figure 9. ‘show bgp summary’
Return to Scenario 2
© 2015 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 14 of 20
Figure 10. ‘show bgp advertised neighbor 192.168.1.12 summary’ without filter
<snipped>
Return to Scenario 2
© 2015 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 15 of 20
Figure 11. ‘show bgp advertised neighbor 192.168.1.12 summary’ after applying the filter
<Snipped>
Return to Scenario 3
© 2015 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 16 of 20
Appendix B. Configurations used in each Scenarios in this demo
Figure 12. Base Configuration – disk0:vrr_base.cfg
! maximum-prefix 4294967295 75
© 2015 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 17 of 20
neighbor 192.168.1.1
use neighbor-group RR_NONCLIENT
!
neighbor 192.168.1.12
use neighbor-group RR_CLIENT
!
neighbor 192.168.1.13
use neighbor-group RR_CLIENT
!
neighbor 192.168.1.14
use neighbor-group RR_CLIENT
!
neighbor 192.168.1.15
use neighbor-group RR_CLIENT
!
neighbor 192.168.1.16
use neighbor-group RR_CLIENT
!
neighbor 192.168.1.17
use neighbor-group RR_CLIENT
!
neighbor 192.168.1.18
use neighbor-group RR_CLIENT
!
neighbor 192.168.1.19
use neighbor-group RR_CLIENT
!
neighbor 192.168.1.20
use neighbor-group RR_CLIENT
!
neighbor 192.168.1.21
use neighbor-group RR_CLIENT
!
!
© 2015 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 18 of 20
Figure 13. Incremental Configuration for Scenario2 – disk0:vrr_scenario2.cfg
prefix-set ADV_SET
1.22.0.0/16 le 32
end-set
!
route-policy ADV_FILTER
if destination in ADV_SET then
pass
else
drop
endif
end-policy
!
router bgp 65000
af-group CLIENT address-family ipv4 unicast
route-policy ADV_FILTER out
!
© 2015 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 19 of 20
© 2015 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information. Page 20 of 20