tag:blogger.com,1999:blog-90559584181305041232024-03-10T20:21:06.305-07:00Networking NotesAnonymoushttp://www.blogger.com/profile/12415082923436051790noreply@blogger.comBlogger6125tag:blogger.com,1999:blog-9055958418130504123.post-60217363009394164242014-05-01T19:09:00.001-07:002014-05-01T19:12:17.054-07:00Anchoring for Guest Access on CT5760<p><strong>Guest Anchor Configuration with WLAN / APs on both WLCs</strong></p><p> </p><p> </p><p> <p>This note is specifically capturing the required configurations for anchoring a CT5760 to another CT5760. The other configuration requirements for setting up webauth, webconsent, central web auth are covered in specific notes about each. Combine for a full solution...</p> <p> </p> <p> </p><p> <hr> <p><strong>Anchor Controller</strong></p> <p>DHCP can be run on devices other than the WLC if desired but if you choose to run it on the WLC for the Guest network this basic template is useful for building it. See the configuration guide for additional options if necessary. </p> <p> </p><table border="1" width="100%" cellpadding="2" cellspacing="0"> <tbody> <tr> <td valign="top"> <div><span style="font-family: 'Andale Mono';">ip dhcp excluded address 192.168.1.1 192.168.1.50</span> <p><font face="Andale Mono">!</font></p> <p><font face="Andale Mono">ip dhcp pool GUEST_VL296</font></p> <p><font face="Andale Mono"> network 192.168.1.0 /24</font></p> <p><font face="Andale Mono"> default-router 192.168.1.1</font></p> <p><font face="Andale Mono"> dns-server 8.8.8.8 4.4.4.4</font></p> <p><font face="Andale Mono"> lease 0 2</font></p><p> </p></p></td> </tr> </tbody> </table><br> </p> <p>Similar to the previous versions of the Wireless LAN Controllers, the mobility domains on the foreign and anchor controllers are different. Below are the CLI configurations for the CT5760 to configure the mobility domains and member relationships. </p> <p> </p> <p> </p><table border="1" width="100%" cellpadding="2" cellspacing="0"> <tbody> <tr> <td valign="top"> <div><font face="Andale Mono">hostname ANCHOR_CONTROLLER</font> <p><font face="Andale Mono">wireless mobility group name ANCHOR_GROUP </font></p> <p><font face="Andale Mono">wireless mobility group member 10.1.1.1 group FOREIGN_GROUP</font></p><p> </p></div></td> </tr> </tbody> </table> </div> <p> </p> <p>Any WLAN that has DHCP required configured will also required DHCP snooping on the client VLAN configured to be enabled. If you miss this step your client will not be able to obtain an IP address and will never pass the IPLEARN state. </p> <p> </p> <p> </p><table border="1" width="100%" cellpadding="2" cellspacing="0"> <tbody> <tr> <td valign="top"> <div><font face="Andale Mono">ip dhcp snooping vlan 296</font> <p><font face="Andale Mono">ip dhcp snooping </font></p> <p><font face="Andale Mono"></font></p> <p><font face="Andale Mono">ip device tracking </font></p><p> </p></div></td> </tr> </tbody> </table> <p> </p> <p>The WLAN configuration security settings will need to match in a similar way as they did in the earlier versions. This example shows the basic WLAN settings to disabled to WPA and AKM settings on the WLAN and enable WebAuth WebConsent which will present the user with a basic Acceptable Use Policy prior to joining the network. <em>(** WebConsent configuration covered in more detail in another entry)</em></p> <p> </p> <p> </p><table border="1" width="100%" cellpadding="2" cellspacing="0"> <tbody> <tr> <td valign="top"> <div><font face="Andale Mono">WLAN GUEST 1 GUEST </font> <p><font face="Andale Mono"> client VLAN 296 </font></p> <p> </p><div><font face="Andale Mono"> no security wpa</font> <p><font face="Andale Mono"> no security wpa akm dot1x</font></p> <p><font face="Andale Mono"> no security wpa wpa2</font></p> <p><font face="Andale Mono"> no security wpa wpa2 ciphers aes</font></p> <p><font face="Andale Mono"> security web-auth</font></p> <p><font face="Andale Mono"> security web-auth parameter-map consent</font></p> <p><font face="Andale Mono"> session-timeout 1800</font></p> <p><font face="Andale Mono"> no shutdown</font></p><p> </p></div> </div></td> </tr> </tbody> </table> <p> </p> <p> </p><hr> <strong>Foreign Controller</strong> <p><font face="Andale Mono"></font></p> <p> </p><table border="1" width="100%" cellpadding="2" cellspacing="0"> <tbody> <tr> <td valign="top"> <div><font face="Andale Mono">hostname FOREIGN_CONTROLLER</font><p> </p></div></td> </tr> </tbody> </table> <p> </p> <p>Mobility groups are created in a similar fashion to the earlier versions. Make sure to specify the mobility group name of the other controller in your CLI like below and not add the controller to your group. <font face="Andale Mono"></font></p> <p> </p> <p> </p><table border="1" width="100%" cellpadding="2" cellspacing="0"> <tbody> <tr> <td valign="top"> <div><font face="Andale Mono">wireless mobility group name FOREIGN_GROUP</font> <p><font face="Andale Mono">wireless mobility group member 20.1.1.1 group ANCHOR_CONTROLLER</font></p><p> </p></div></td> </tr> </tbody> </table> <p> </p> <p>Creating the 'dummy' client VLAN i somewhat counter-intuitive but just pick one that is not in use and that you don't have DHCP snooping enabled on. Do not choose the 'wireless management interface' here.<font face="Andale Mono"></font></p> <p> </p> <p> </p><table border="1" width="100%" cellpadding="2" cellspacing="0"> <tbody> <tr> <td valign="top"> <div><font face="Andale Mono">wlan GUEST 1 GUEST</font> <p><font face="Andale Mono"> client VLAN 1 ! <span style="background-color:rgb(255, 204, 102);-evernote-highlight:true;"><-- This is a dummy VLAN that is not in use and DHCP snooping is not enabled on</span></font></p> <p><font face="Andale Mono"> mobility anchor 20.1.1.1</font> </p><p><span style="-webkit-text-size-adjust: auto; background-color: rgba(255, 255, 255, 0);">no security wpa</span></p><p><span style="-webkit-text-size-adjust: auto; background-color: rgba(255, 255, 255, 0);">no security wpa akm dot1x</span></p><p><span style="-webkit-text-size-adjust: auto; background-color: rgba(255, 255, 255, 0);">no security wpa wpa2</span></p><p><span style="-webkit-text-size-adjust: auto; background-color: rgba(255, 255, 255, 0);">no security wpa wpa2 ciphers aes</span></p><p><span style="-webkit-text-size-adjust: auto; background-color: rgba(255, 255, 255, 0);">security web-auth</span></p><p><span style="-webkit-text-size-adjust: auto; background-color: rgba(255, 255, 255, 0);">security web-auth parameter-map consent</span></p><p><span style="-webkit-text-size-adjust: auto; background-color: rgba(255, 255, 255, 0);">session-timeout 1800</span></p><p><span style="-webkit-text-size-adjust: auto; background-color: rgba(255, 255, 255, 0);">no shutdown</span></p><p> </p></div></td> </tr> </tbody> </table><br> <p> </p>Anonymoushttp://www.blogger.com/profile/12415082923436051790noreply@blogger.com0tag:blogger.com,1999:blog-9055958418130504123.post-5875621026913703142014-05-01T19:00:00.001-07:002014-05-01T19:00:41.523-07:00Jumbo Frames (Nexus7k/5k)<p><div>Enabling jumbo frames in a data center can be somewhat nerve racking when you are trying to ensure you don't take the entire place down. Here are some notes that might help make the project a bit less intimidating. <p> </p> <p><strong>General Caveats/Considerations</strong></p> </p> <p> </p><ul> <li>Understand your topology and know the traffic flows</li> <li>Understand all hardware in your network and it's support of jumbo frames</li> <li>Enable jumbo frames on all switches in the path/environment</li> <li>Be aware of existing QoS policies implemented<br></li> <li style="list-style: none; display: inline"> </li><ul> <li>Overwriting an existing policy could be problematic </li> <li>Order of operations in MQC or 3CPL should be considered</li> </ul> <li>Enabling jumbo frames on a switch simply says "don't discard frames that are equal or less than this value" - nonintrusive</li> <li>Frames are not aggregated and typically are sourced from device other than the network equipment at layer 2</li> <li>Ethernet feature - use care allowing to traverse l3 interfaces</li> <li>Understand your traffic flow and connectivity</li> <li>Enable jumboframes on host interfaces with extreme care<br></li> <li style="list-style: none"> </li><ul> <li>Understand the different vendor's and how they interpret the MTU command</li> <li style="list-style: none"> </li><ul> <li>Does it include the header info or not?</li> </ul> </ul> <li>Enable jumbo frames on all devices in a layer 2 environment that could potentially communicate with each other</li> <li>Pairs of 5ks should be updated simultaneously using secureCRT Chat Window or Config-sync</li> </ul> </div><div></div><strong>Nexus 7k</strong><div> </div><p> </p><hr><br> <p> </p><p>System jumbomtu 9216 is <span style="background-color:rgb(255, 204, 102);-evernote-highlight:true;">default</span> </p><p> </p><p> </p><p> </p><p> </p><table border="1" width="100%" cellpadding="2" cellspacing="0"> <tbody> <tr> <td valign="top"> <div><font face="Andale Mono">N7K-AGG-1# sho run <strong><em>all</em></strong> | inc "jumbomtu"</font> <p><font face="Andale Mono">system jumbomtu 9216</font></p> </div></td> </tr> </tbody> </table> <p> </p><p> </p><p> </p><p>It's a <span style="background-color:rgb(255, 204, 102);-evernote-highlight:true;">default</span> so it doesn't show up in the configuration without the <b style="font-style: italic;">all keyword. </strong></p><p><b style="font-style: italic;"> </strong></p><p><b style="font-style: italic;"> </strong></p><p><b style="font-style: italic;"> </strong></p><p><b style="font-style: italic;">The interface MTU is 1500 bytes by <span style="background-color:rgb(255, 204, 102);-evernote-highlight:true;">default</span>. </strong></p><p><b style="font-style: italic;"> </strong></p><p><b style="font-style: italic;"> </strong></p><p><b style="font-style: italic;"> </strong></p><p><b style="font-style: italic;">With no changes, the MTU will be 1500 on both M-series line cards and F-series Line cards. </strong></p><p><b style="font-style: italic;"> </strong></p><p><b style="font-style: italic;"> </strong></p><p><b style="font-style: italic;"> </strong></p><p><b style="font-style: italic;"><strong>Changes required to enable Jumbo Frames</strong></strong></p><p><b style="font-style: italic;"> </strong></p><p><b style="font-style: italic;"> </strong></p><p><b style="font-style: italic;"> </strong></p><p><b style="font-style: italic;"><strong><em>F-Series Line Cards</em></strong></strong></p><p><b style="font-style: italic;"> </strong></p><p><b style="font-style: italic;"> </strong></p><ul><b style="font-style: italic;"> <li>Modify the network-qos policy-map in the admin VDC</li> <li style="list-style: none; display: inline"> </li><ul> <li>This is a disruptive change and may cause drops on some interfaces</li> </ul> <li>Change the MTU on the individual interfaces</li> <li style="list-style: none; display: inline"> </li><ul> <li>This is non-intrusive</li> <li>Can only be set to either 1500 or the system jumbo MTU - any other value will display an error saying as much</li> </ul> </strong></ul><b style="font-style: italic;"> <p><strong>Example in Admin VDC</strong> </p><p> </p><p> </p><table border="1" width="100%" cellpadding="2" cellspacing="0"> <tbody> <tr> <td valign="top"> <div><font face="Andale Mono">policy-map type network-qos custom-nq-7e</font> <p><font face="Andale Mono"> class type network-qos c-nq-7e-drop</font></p> <p><font face="Andale Mono"> congestion-control tail-drop</font></p> <p><font face="Andale Mono"> mtu 9216</font></p> <p><font face="Andale Mono"> class type network-qos c-nq-7e-ndrop-fcoe</font></p> <p><font face="Andale Mono"> pause</font></p> <p><font face="Andale Mono"> mtu 2112</font></p> <p><font face="Andale Mono">system qos</font></p> <p><font face="Andale Mono"> service-policy type network-qos custom-nq-7e</font></p> </div></td> </tr> </tbody> </table> <p> </p><p> </p><p> </p><p><strong>Example Interface Change</strong><br></p><p> </p><p> </p><table border="1" width="100%" cellpadding="2" cellspacing="0"> <tbody> <tr> <td valign="top"> <div><font face="Andale Mono">interface port-channel1021</font> <p><font face="Andale Mono"> switchport</font></p> <p><font face="Andale Mono"> switchport mode fabricpath</font></p> <p><font face="Andale Mono"> mtu 9216</font></p> </div></td> </tr> </tbody> </table> <p> </p><p> </p><p> </p><p><strong><em>M-Series Line Cards</em></strong></p><p> </p><p> </p><ul> <li>Interface level MTU change with same guideline as above</li> </ul> <p> <table border="1" width="100%" cellpadding="2" cellspacing="0"> <tbody> <tr> <td valign="top"> <div><font face="Andale Mono">interface Ethernet3/1</font> <p><font face="Andale Mono"> mtu 9216</font></p> <p><font face="Andale Mono"> ip address 10.6.1.13/30</font></p> <p><font face="Andale Mono"> ip ospf network point-to-point</font></p> <p><font face="Andale Mono"> ip router ospf 1 area 0.0.0.0</font></p> </p></td> </tr> </tbody> </table> </div> <p> </p> <p style="font-size: 16px;"><strong>Nexus 5k</strong></p> <p> </p><hr><br> <p>MTU is configured in a policy-map of type network-qos and applied to the system QoS. </p> <p> </p><ul> <li>Be careful as only one of each type of policy-map can be applied at a time</li> <li>changing system level MTU can have disruptive impact on vPCs and/or port-channels, update in parallel pairs of Nexus 5ks. </li> </ul> <p><strong>network-qos Policy-Map Example</strong> </p> <p> </p> <p> </p><table border="1" width="100%" cellpadding="2" cellspacing="0"> <tbody> <tr> <td valign="top"> <div><font face="Andale Mono">policy-map type network-qos pmap-marking</font> <p><font face="Andale Mono"> class type network-qos class-fcoe</font></p> <p><font face="Andale Mono"> pause no-drop</font></p> <p><font face="Andale Mono"> mtu 2158</font></p> <p><font face="Andale Mono"> class type network-qos qmap-marking-voicemedia</font></p> <p><font face="Andale Mono"> set cos 5</font></p> <p><font face="Andale Mono"> class type network-qos qmap-marking-videomedia</font></p> <p><font face="Andale Mono"> set cos 4</font></p> <p><font face="Andale Mono"> class type network-qos qmap-marking-ucsignalling</font></p> <p><font face="Andale Mono"> set cos 3</font></p> <p><font face="Andale Mono"> class type network-qos qmap-marking-businesscritical</font></p> <p><font face="Andale Mono"> set cos 2</font></p> <p><font face="Andale Mono"> mtu 9216</font></p> <p><font face="Andale Mono"> class type network-qos class-default</font></p> <p><font face="Andale Mono"> mtu 9216</font></p> <p><font face="Andale Mono"> multicast-optimize</font></p> <p><font face="Andale Mono"> set cos 0</font></p> </div></td> </tr> </tbody> </table><font face="Andale Mono"><br></font> <p><strong>Applying the policy-map to System QoS Example</strong><br></p> <p><strong><br></strong></p> <p> </p><table border="1" width="100%" cellpadding="2" cellspacing="0"> <tbody> <tr> <td valign="top"> <div><font face="Andale Mono">system qos</font> <p><font face="Andale Mono"> service-policy type queuing input pmap-queuing-in</font></p> <p><font face="Andale Mono"> service-policy type queuing output pmap-queuing-out</font></p> <p><font face="Andale Mono"> service-policy type network-qos pmap-marking</font></p> <p><font face="Andale Mono"> service-policy type qos input pmap-classify</font></p> <p><font face="Andale Mono"><br></font></p> </div></td> </tr> </tbody> </table><font face="Andale Mono"><br></font> <p> </p> <p> </p><p> </p><hr><b style="font-size: 16px;">References <p> </p><p><strong><br></strong></p><p> </p><p><a href="http://www.intel.com/support/network/sb/CS-001911.htm">http://www.intel.com/support/network/sb/CS-001911.htm</a><br></p><p> </p><p> </p><p> </p><p><a href="http://www.ccierants.com/2012/11/jumbo-frames-gotchas-you-need-to-know.html">http://www.ccierants.com/2012/11/jumbo-frames-gotchas-you-need-to-know.html</a><br></p><p> </p><p> </p><p> </p><p><a href="http://www.maximumpc.com/article/howtos/how_enable_jumbo_frames">http://www.maximumpc.com/article/howtos/how_enable_jumbo_frames</a><br></p><p> </p><p> </p><p> </p><p><a href="http://www.networkworld.com/community/blog/jumbo-frames">http://www.networkworld.com/community/blog/jumbo-frames</a><br></p><p> </p><p> </p><p> </p><p style="font-size: 16px;"><strong>Nexus 7000</strong></p><p> </p><p><strong>Interface Configuration</strong></p><p> </p><p><a href="http://www.cisco.com/c/en/us/td/docs/switches/datacenter/sw/6_x/nx-os/interfaces/configuration/guide/if_cli/if_basic.html">http://www.cisco.com/c/en/us/td/docs/switches/datacenter/sw/6_x/nx-os/interfaces/configuration/guide/if_cli/if_basic.html</a><br></p><p> </p><p> </p><p> </p><p><strong>QoS Configuration</strong></p><p> </p><p><a href="http://www.cisco.com/c/en/us/td/docs/switches/datacenter/sw/6_x/nx-os/qos/configuration/guide/nx-os_qos_book/nt_qos.html">http://www.cisco.com/c/en/us/td/docs/switches/datacenter/sw/6_x/nx-os/qos/configuration/guide/nx-os_qos_book/nt_qos.html</a><br></p><p> </p><p> </p><p> </p><p style="font-size: 16px;"><strong>Nexus 5500</strong></p><p> </p><p> </p><p> </p><p><strong>QoS Configuration</strong></p><p> </p><p><a href="http://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus5500/sw/qos/6x/b_5500_QoS_Config_6x/b_5500_QoS_Config_602N12_chapter_0110.html">http://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus5500/sw/qos/6x/b_5500_QoS_Config_6x/b_5500_QoS_Config_602N12_chapter_0110.html</a></p><p> </p></strong></strong>Anonymoushttp://www.blogger.com/profile/12415082923436051790noreply@blogger.com1tag:blogger.com,1999:blog-9055958418130504123.post-86428679149419582702013-05-10T11:49:00.000-07:002013-05-10T11:49:28.432-07:00FlexConnect Local Switching - Guest/BYOD<b><span style="font-family: Arial; font-size: 10.0pt;">Overview</span></b><br />
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<span style="font-family: Arial; font-size: 10.0pt;">BYOD is all the rage lately so it is imparative for us to be able to get it working properly. One environment that I found particularly challenging was getting Central Web Authentication working with FlexConnect and locally switched WLANs. In this article I will step through a working configuration from both the ISE (Identity Services Engine) and WLC (Wireless LAN Controller) perspectives. </span></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<b><i><span style="font-family: Arial; font-size: 10.0pt;">NOTE:</span></i></b><i><span style="font-family: Arial; font-size: 10.0pt;"> All components and configurations were performed in a lab environment</span></i><span style="font-family: Arial; font-size: 10.0pt;">. <i>If you are working in a production environment be sure to validate the steps in your scenario.</i></span></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<span style="font-family: Arial; font-size: 10.0pt;">We will cover the configuration requirements in two major sections: WLC Configuration and ISE Configuration</span></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<span style="font-family: Arial; font-size: 10.0pt;">My lab consists of the following components: </span></div>
<div class="MsoNormal" style="margin-left: .5in; mso-layout-grid-align: none; mso-list: l0 level1 lfo1; mso-pagination: none; tab-stops: 11.0pt .5in; text-autospace: none; text-indent: -.5in;">
<span style="font-family: Arial; mso-fareast-font-family: Arial;"><span style="mso-list: Ignore;">•<span style="font: 7.0pt 'Times New Roman';"> </span></span></span><span style="font-family: Arial; font-size: 10.0pt;">Cisco vWLC version 7.5 (beta)</span></div>
<div class="MsoNormal" style="margin-left: .5in; mso-layout-grid-align: none; mso-list: l0 level1 lfo1; mso-pagination: none; tab-stops: 11.0pt .5in; text-autospace: none; text-indent: -.5in;">
<span style="font-family: Arial; mso-fareast-font-family: Arial;"><span style="mso-list: Ignore;">•<span style="font: 7.0pt 'Times New Roman';"> </span></span></span><span style="font-family: Arial; font-size: 10.0pt;">Cisco 1131 AG Access Point</span></div>
<div class="MsoNormal" style="margin-left: .5in; mso-layout-grid-align: none; mso-list: l0 level1 lfo1; mso-pagination: none; tab-stops: 11.0pt .5in; text-autospace: none; text-indent: -.5in;">
<span style="font-family: Arial; mso-fareast-font-family: Arial;"><span style="mso-list: Ignore;">•<span style="font: 7.0pt 'Times New Roman';"> </span></span></span><span style="font-family: Arial; font-size: 10.0pt;">Cisco CSR1000v</span></div>
<div class="MsoNormal" style="margin-left: .5in; mso-layout-grid-align: none; mso-list: l0 level1 lfo1; mso-pagination: none; tab-stops: 11.0pt .5in; text-autospace: none; text-indent: -.5in;">
<span style="font-family: Arial; mso-fareast-font-family: Arial;"><span style="mso-list: Ignore;">•<span style="font: 7.0pt 'Times New Roman';"> </span></span></span><span style="font-family: Arial; font-size: 10.0pt;">Cisco ISE version 1.1.2 in Stand Alone Mode</span></div>
<div class="MsoNormal" style="margin-left: .5in; mso-layout-grid-align: none; mso-list: l0 level1 lfo1; mso-pagination: none; tab-stops: 11.0pt .5in; text-autospace: none; text-indent: -.5in;">
<span style="font-family: Arial; mso-fareast-font-family: Arial;"><span style="mso-list: Ignore;">•<span style="font: 7.0pt 'Times New Roman';"> </span></span></span><span style="font-family: Arial; font-size: 10.0pt;">ESXi 5.1</span></div>
<div class="MsoNormal" style="margin-left: .5in; mso-layout-grid-align: none; mso-list: l0 level1 lfo1; mso-pagination: none; tab-stops: 11.0pt .5in; text-autospace: none; text-indent: -.5in;">
<span style="font-family: Arial; mso-fareast-font-family: Arial;"><span style="mso-list: Ignore;">•<span style="font: 7.0pt 'Times New Roman';"> </span></span></span><span style="font-family: Arial; font-size: 10.0pt;">Ubuntu Server for DNS, NTP, etc</span></div>
<div class="MsoNormal" style="margin-left: .5in; mso-layout-grid-align: none; mso-list: l0 level1 lfo1; mso-pagination: none; tab-stops: 11.0pt .5in; text-autospace: none; text-indent: -.5in;">
<span style="font-family: Arial; mso-fareast-font-family: Arial;"><span style="mso-list: Ignore;">•<span style="font: 7.0pt 'Times New Roman';"> </span></span></span><span style="font-family: Arial; font-size: 10.0pt;">Catalyst 2950 Lab for basic connectivity</span></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<b><span style="font-family: Arial; font-size: 10.0pt;">WLC Configuration</span></b><b></b></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<span style="font-family: Arial; font-size: 10.0pt;">Here is a summary of the steps to be performed in this section: </span></div>
<div class="MsoNormal" style="margin-left: .5in; mso-layout-grid-align: none; mso-list: l1 level1 lfo2; mso-pagination: none; tab-stops: 11.0pt .5in; text-autospace: none; text-indent: -.5in;">
<span style="font-family: Arial; mso-fareast-font-family: Arial;"><span style="mso-list: Ignore;">1.</span></span><span style="font-family: Arial; font-size: 10.0pt;">Create the locally switched SSID</span></div>
<div class="MsoNormal" style="margin-left: .5in; mso-layout-grid-align: none; mso-list: l1 level1 lfo2; mso-pagination: none; tab-stops: 11.0pt .5in; text-autospace: none; text-indent: -.5in;">
<span style="font-family: Arial; mso-fareast-font-family: Arial;"><span style="mso-list: Ignore;">2.</span></span><span style="font-family: Arial; font-size: 10.0pt;">Create the access control list for Authenticated users</span></div>
<div class="MsoNormal" style="margin-left: .5in; mso-layout-grid-align: none; mso-list: l1 level1 lfo2; mso-pagination: none; tab-stops: 11.0pt .5in; text-autospace: none; text-indent: -.5in;">
<span style="font-family: Arial; mso-fareast-font-family: Arial;"><span style="mso-list: Ignore;">3.</span></span><span style="font-family: Arial; font-size: 10.0pt;">Create the access control list for web authentication redirect</span></div>
<div class="MsoNormal" style="margin-left: .5in; mso-layout-grid-align: none; mso-list: l1 level1 lfo2; mso-pagination: none; tab-stops: 11.0pt .5in; text-autospace: none; text-indent: -.5in;">
<span style="font-family: Arial; mso-fareast-font-family: Arial;"><span style="mso-list: Ignore;">4.</span></span><span style="font-family: Arial; font-size: 10.0pt;">Define the FlexConnect group</span></div>
<div class="MsoNormal" style="margin-left: .5in; mso-layout-grid-align: none; mso-list: l1 level1 lfo2; mso-pagination: none; tab-stops: 11.0pt .5in; text-autospace: none; text-indent: -.5in;">
<span style="font-family: Arial; mso-fareast-font-family: Arial;"><span style="mso-list: Ignore;">5.</span></span><span style="font-family: Arial; font-size: 10.0pt;">Configure the Access Point</span></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<b><span style="font-family: Arial;">1. Create new SSID named flex-guest</span></b></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<span style="font-family: Arial; font-size: 10.0pt;">You can use any name you choose for your SSID. I chose one that I could use that would be easily identifiable in my lab. The SSID will be flex-guest in this example. </span></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<span style="font-family: Arial; font-size: 10.0pt;"><br /></span></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<span style="font-family: Arial; font-size: 10.0pt;"><span style="font-family: Arial; font-size: 10.0pt;"><img alt="Screen shot 2013 05 09 at 11 46 32 AM" border="0" height="167" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj2B_mAN88_kaYADTuiq03STy8UFUQb0GWY_rxiAFggftxexJBCMjr-SUVN8ONWritdrYLlfU_7T2XHLr_SD1fqy8YD8QifDmRHITIoaMEqtdfmWOkRiLCIM-gkdKE5Wdr345H6YbyLX3o/?imgmax=800" title="Screen shot 2013-05-09 at 11.46.32 AM.png" width="600" /></span></span></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<span style="font-family: Arial; font-size: 10.0pt;"> </span></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<span style="font-family: Arial; font-size: 10.0pt;">Once you have created the WLAN and are in the configuration details screen, set the L2 security to be None and Mac Filtering as shown below. This will allow ISE to treat this as wireless MAB (MAC Authentication Bypass) and it will flow through to the CWA profile to be created later. </span></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<img alt="Screen shot 2013 05 09 at 11 46 48 AM" border="0" height="276" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhh3MjXsfTPMuHXdJYbUVkyprYwIvv10W9YotJyeJ8dPkv-dBKR6ONQWyqfk8Ot8LUEjDb0RTNvHbgVuICpbBJsbuOa7uSjylzbLLoLvFdfTJeISGnAYAW0AT8h1OxJtZ_jo-g8qqCG8lg/?imgmax=800" title="Screen shot 2013-05-09 at 11.46.48 AM.png" width="503" /></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<span style="font-family: Arial; font-size: 10.0pt;"> </span></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<span style="font-family: Arial; font-size: 10.0pt;">Make sure to select your RADIUS servers for authentication and accounting on the AAA Servers tab.</span></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<span style="font-family: Arial; font-size: 10.0pt; mso-no-proof: yes;"><span style="font-family: Arial; font-size: 10.0pt; mso-no-proof: yes;"><img alt="Screen shot 2013 05 09 at 11 46 57 AM" border="0" height="277" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjRa7DJmxbMK-2d4cXV8RI5uieIteyDiTjD_i0-eDourWDg6dEQRUORwu1M2CydMGvItuOjCKDn1Q47iKI30irRa50TUVksejs8k65jr4tbG1gNBajeaFstb6dcw3IisqaTlxSLY6q1Gvs/?imgmax=800" title="Screen shot 2013-05-09 at 11.46.57 AM.png" width="600" /></span></span></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<span style="font-family: Arial; font-size: 10.0pt;">It is required to enable AAA Override and NAC State of “Radius NAC”.</span></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<img alt="Screen shot 2013 05 09 at 11 47 16 AM" border="0" height="329" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg1fDhlaAsrgnNJxh1pNMTuKpbl8YYPakiprCvfZ5LIQXo5NnVdrap0sOaWpCG46ZtSpmZHPb4mc-IalXaL8MsCX0Zmy2cx3asHnHbSDn4d6iDfZptCFEPbiuOj5Gby2W_J0G1Xjj21ovA/?imgmax=800" title="Screen shot 2013-05-09 at 11.47.16 AM.png" width="600" /></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<span style="font-family: Arial; font-size: 10.0pt; mso-no-proof: yes;"><span style="font-family: Arial; font-size: 10.0pt; mso-no-proof: yes;"><br /></span></span></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<span style="font-family: Arial; font-size: 10.0pt;">In the FlexConnect Section will will make this WLAN locally switched. </span></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<img alt="Screen shot 2013 05 09 at 11 47 29 AM" border="0" height="244" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhxcQPzhtw0x8lQcp8a3Y7_TYXTISOPwUKyVHUqAZQRLrhPaAxlfEYOIAhFCx68xdFxpeaprLy5eZwQAIrgMThYaWf2hYJ2LVPmUoDuFJCq8G5E6fyZQMKjqII3MfGi-kuhXHzoshbEaiQ/?imgmax=800" title="Screen shot 2013-05-09 at 11.47.29 AM.png" width="331" /></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<b><span style="font-family: Arial; font-size: 10.0pt;">2. Create the flex-guest FlexConnect</span></b><span style="font-family: Arial; font-size: 10.0pt;"> <b> access control list</b></span></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<span style="font-family: Arial; font-size: 10.0pt;">We will have to configure a couple of ACLs to be used in our solution. The first ACL will be the ACL that is applied to control what the guest users can do once authenticated. This will be referenced in our Authorization Policy by name. </span></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<span style="font-family: Arial; font-size: 10.0pt;">The first ACL can be tailored to support your needs, but I have essentially allowed all traffic accept for ICMP to one of the IP addresses on the CSR1000v router for testing purposes. </span></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<img alt="Screen shot 2013 05 09 at 12 02 56 PM" border="0" height="224" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgU4MlfSNYNPG_-k0ILWfwM3ZIHxBOcLhnhStoLyZ6Xv0cz7mvrafQB9kfs341SZzPGosrUL0kpmTjhgohLLcJMGM7fth3NLa_kCejPI2fbsNkJa56gIxsxi_SYpB03rh9LESrFIQG-WtI/?imgmax=800" title="Screen shot 2013-05-09 at 12.02.56 PM.png" width="600" /></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<b><span style="font-family: Arial; font-size: 10.0pt;">3. Create the WEBAUTH-REDIRECT-ACL access-control list</span></b></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<span style="font-family: Arial; font-size: 10.0pt;">The WEBAUTH-REDIRECT-ACL is a FlexConnect ACL. The FlexConnect ACL is applied to the FlexConnect Group under the Policies tab later.</span></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<b><span style="font-family: Arial; font-size: 10.0pt;">FlexConnect ACL</span></b></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<b><img alt="Screen shot 2013 05 08 at 4 26 30 PM" border="0" height="274" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiQOvViyiccMzutSLLh818JLusFUVl6dU8z573STfRA2vvBDJjJeP-25tyajLX9Y1Zhf2E1ZBumb_U4-nEvGglHeqtsAboVM2oLQ8yDg_DuqDBVM9mwLO8XR2YlKkfUYj0KW4Z0FTyCr50/?imgmax=800" title="Screen shot 2013-05-08 at 4.26.30 PM.png" width="600" /></b></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<span style="font-family: Arial; font-size: 10.0pt;">I created the ACL to be used during central web auth and will identify the traffic that will be let through without being redirected. There are some good examples out there in the Cisco trustsec docs you can copy. I basically allowed any traffic to / from the ISE box and also DNS to get us going. </span></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<b><span style="font-family: Arial; font-size: 10.0pt;">4. Define the FlexConnect Group</span></b></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<span style="font-family: Arial; font-size: 10.0pt;">Create the Group and associate the access point. </span></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<img alt="Screen shot 2013 05 09 at 12 04 51 PM" border="0" height="294" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiDvtIYKMeajNCZtxTBlwr2JDLdmicw7lrlWFzt8KOtLuIadr9f2SD3kNhnXWtpzr8tfhcFbgaYdMVLlpdmCfNTpeJX9XOFPuhAfsCfIOgC3UU87UMUOoeNsWZhLN-DDGs_aT2VHcJjoVg/?imgmax=800" title="Screen shot 2013-05-09 at 12.04.51 PM.png" width="511" /></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<span style="font-family: Arial; font-size: 10.0pt;">Associate the WEBAUTH-REDIRECT-ACL under the ACL Mapping -> Policies tab.</span></div>
<b><img alt="Screen shot 2013 05 08 at 4 26 16 PM" border="0" height="220" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiuIb5Gjpu67H_ArgREVMQ0JVW9QqPgO6iMEjt5l7_k4EcqaSQBc1OqihygSBrcByaXGXCZeR2SAzvyJtuSPuWNBZSALSim1Qw6OeMd5f4-Vv7jX4lodErtOk4zunyJJeJ8HBaHdiqd8Xw/?imgmax=800" title="Screen shot 2013-05-08 at 4.26.16 PM.png" width="600" /></b><br />
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<span style="font-family: Arial; font-size: 10.0pt;">Add the WLAN to VLAN mapping </span></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<img alt="Screen shot 2013 05 09 at 12 06 52 PM" border="0" height="249" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiyhaH30TtJ8btf8IshN7sqwBP0OWmMHUQEjY609RSQoXGVMNR-sKhkvbR9glSkqre0Wa-hQUWhKtVX___fCkSapekd5tnrZ09hZhIMetSFJpw8A8f3M2Sl8sux3MN_W9tsPDXD4RBqtCA/?imgmax=800" title="Screen shot 2013-05-09 at 12.06.52 PM.png" width="600" /></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<b><span style="font-family: Arial; font-size: 10.0pt;">5. Configure the AP for FlexConnect </span></b></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<span style="font-family: Arial; font-size: 10.0pt;">First, ensure the access point is in AP Mode FlexConnect</span></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<img alt="Screen shot 2013 05 09 at 11 51 54 AM" border="0" height="223" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg19SVnQJDsemeccruUm7Lo8HWUFKxVUFe2QESjr7Zzl2qu5ZtnPZ8HZn1hUrkZTrg4SfJkgaq43_NwF9oyRNkUv4AhRKI07SLGXgCsI_-bDp1EFPTx3bMGbcGv72TtHKteYACAjF86mIo/?imgmax=800" title="Screen shot 2013-05-09 at 11.51.54 AM.png" width="600" /></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<span style="font-family: Arial; font-size: 10.0pt;">Enable VLAN Support on the FlexConnect Tab.</span></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<img alt="Screen shot 2013 05 09 at 11 52 43 AM" border="0" height="124" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh6Y97GxBybvVgt7stSh30oDnEocrYZDOj2HMvNuqfP6TZN2II2X0vDEgkB1uDosjaV8HdEd6AjxnvGK4csgUS8fDANrHnje5Oe3-fJoWDrJZG84T6gJW-2uy6v4kYFp2tA1vnaPf-lM3I/?imgmax=800" title="Screen shot 2013-05-09 at 11.52.43 AM.png" width="600" /></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<span style="font-family: Arial; font-size: 10.0pt;">Click the VLAN Mappings Tab and add the VLAN to the AP. </span></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<span style="font-family: Arial; font-size: 10.0pt;">Then at the bottom you will associated the FlexConnect FLEX-GUEST ACL created earlier. </span></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<img alt="Screen shot 2013 05 09 at 11 53 20 AM" border="0" height="600" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEieHDNnPxmZeLORAaLdc-Q4GeBza6UVihG_IpZBE_QNIqybsoUswzlSCSloN4-Iqv8j_PuVRDjZ5sF7HU4_Td1CfIG-h8XyBXQ47lkYoOAkX7LEtFb84e25KbM3hBXj5NJVc-fHaNv_WWg/?imgmax=800" title="Screen shot 2013-05-09 at 11.53.20 AM.png" width="515" /></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="margin-bottom: 6.0pt; mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<b><span style="font-family: Arial; font-size: 10.0pt;">ISE Related Configurations</span></b></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<span style="font-family: Arial; font-size: 10.0pt;">The assumption will be that you have a basic, functional ISE installation. I will talk about only the specific configurations related to the FlexConnect lab I am working on. </span></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="margin-left: .5in; mso-layout-grid-align: none; mso-list: l2 level1 lfo3; mso-pagination: none; tab-stops: 11.0pt .5in; text-autospace: none; text-indent: -.5in;">
<span style="font-family: Arial; mso-fareast-font-family: Arial;"><span style="mso-list: Ignore;">1.</span></span><span style="font-family: Arial; font-size: 10.0pt;">Guest Account Created and Active</span></div>
<div class="MsoNormal" style="margin-left: .5in; mso-layout-grid-align: none; mso-list: l2 level1 lfo3; mso-pagination: none; tab-stops: 11.0pt .5in; text-autospace: none; text-indent: -.5in;">
<span style="font-family: Arial; mso-fareast-font-family: Arial;"><span style="mso-list: Ignore;">2.</span></span><span style="font-family: Arial; font-size: 10.0pt;">Result Element Create for CWA </span></div>
<div class="MsoNormal" style="margin-left: .5in; mso-layout-grid-align: none; mso-list: l2 level1 lfo3; mso-pagination: none; tab-stops: 11.0pt .5in; text-autospace: none; text-indent: -.5in;">
<span style="font-family: Arial; mso-fareast-font-family: Arial;"><span style="mso-list: Ignore;">3.</span></span><span style="font-family: Arial; font-size: 10.0pt;">Result Element Created for FLEX-GUEST</span></div>
<div class="MsoNormal" style="margin-left: .5in; mso-layout-grid-align: none; mso-list: l2 level1 lfo3; mso-pagination: none; tab-stops: 11.0pt .5in; text-autospace: none; text-indent: -.5in;">
<span style="font-family: Arial; mso-fareast-font-family: Arial;"><span style="mso-list: Ignore;">4.</span></span><span style="font-family: Arial; font-size: 10.0pt;">AuthZ Policy created for CWA</span></div>
<div class="MsoNormal" style="margin-left: .5in; mso-layout-grid-align: none; mso-list: l2 level1 lfo3; mso-pagination: none; tab-stops: 11.0pt .5in; text-autospace: none; text-indent: -.5in;">
<span style="font-family: Arial; mso-fareast-font-family: Arial;"><span style="mso-list: Ignore;">5.</span></span><span style="font-family: Arial; font-size: 10.0pt;">AuthZ Policy create for Activated Guest</span></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<span style="font-family: Arial; font-size: 10.0pt;"><b>1. Guest Account Creation </b></span></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<span style="font-family: Arial; font-size: 10.0pt;">Login into your sponsor portal (default <a href="https://ise:8443/"><span style="color: #0000f6;">https://ise:8443</span></a>) and create a guest account to be used during testing</span></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<span style="font-family: Arial; font-size: 10.0pt;"><b>2. Create the Result Policy Element for central web auth</b></span></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<img alt="Screen shot 2013 05 09 at 4 04 10 PM" border="0" height="316" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiPqVlCVfgI9be8efIfCo3qgvvRdfGzX5hXGdplWYw5mJZwLGyXpdSLvAtVYU1uwNpJBjABCKkIXe5IzJn86pqAHNN_zNXWPZZZuFEs8C2k094rCgXS5-Hi-RU6iPRmzjF2l6dpzGPRB3k/?imgmax=800" title="Screen shot 2013-05-09 at 4.04.10 PM.png" width="600" /></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<img alt="Screen shot 2013 05 09 at 4 04 22 PM" border="0" height="80" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgHGPTCtsSxYvtU2F4vbMZ0k4yVWkEfYJDqFe5AJmlBUD-63IzjNtj5qpTDs1WJxq5p7t-dIh6w2wKNL-uNwhGqqixqQiJ96rnT_PXj8-DqRUVIGyWJOSIfYjh82gMbvNfk_GR6Fg22V3U/?imgmax=800" title="Screen shot 2013-05-09 at 4.04.22 PM.png" width="600" /></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<span style="font-family: Arial; font-size: 10.0pt;"><b>3. Create the Result Policy Element for FLEX-GUEST </b></span></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<img alt="Screen shot 2013 05 09 at 4 03 41 PM" border="0" height="366" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgk6lbGVPT3QC-w2GMBtm53xms1CFcXG1g51EKegd0aJ-qb9fNEdHAg9QgU7DfcC8LuKHUnmzERfqRg4ogb_0LsGi9mJyPKIXw6WApx5hJzVWKuzIsnHYlX8eSv5CEI9ex1m5X3bIvkqRM/?imgmax=800" title=" Screen shot 2013-05-09 at 4.03.41 PM.png" width="454" /></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<img alt="Screen shot 2013 05 09 at 4 03 57 PM" border="0" height="93" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgey4myTydpNIF6klonQdkUgkFJ5ji41Nsx8-ubPYUDC9rzr3mFvX54YBVVb2JuBoTrTK6dGFLAORuaUDz-9jehIEGWPoy5H57chGjvnSVuX8fXdjyyL_fcQGQCI8fk3mEX6NqWP6MBGr4/?imgmax=800" title="Screen shot 2013-05-09 at 4.03.57 PM.png" width="278" /></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<span style="font-family: Arial; font-size: 10.0pt;"><b>4. Create the AuthZ policy for CWA</b></span></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<span style="font-family: Arial; font-size: 10.0pt;">I am using the default catch all authorization policy in this example and have associated it with the result, CentralWebAuth, created in a prior step. </span></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<img alt="Screen shot 2013 05 09 at 4 05 05 PM" border="0" height="40" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjbiO-DBahGhH-cMBxunbRdByKPzgLnIonrTJyVmcvhMDR55k4JnzIFx4acmNHUG_h6ZSMjWkffFDezIOif7teLagfW5M7H8amps6CI303E3qPV8UPg1-qTtKw_Z7iYc2D72cejy0sjNzk/?imgmax=800" title="Screen shot 2013-05-09 at 4.05.05 PM.png" width="600" /></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<span style="font-family: Arial; font-size: 10.0pt;"><b>5. Create the AuthZ policy for FLEX-GUEST</b></span></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<span style="font-family: Arial; font-size: 10.0pt;">This rules is using the ActivatedGuest endpoint group for guests and the result of FLEX-GUEST. </span></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<img alt="Screen shot 2013 05 09 at 4 05 17 PM" border="0" height="27" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiAhebMH2r4XNywGFMYlembfHxKAlVFOnoI67TGIaW5gaqaVHpgdp-3i_zvlkyMG_Ww_VC93kGdxmAPx0MPHQbjOIhTNSWQq3dEThz59Ri65yzwQdd028kWhBx8Evklps81hlMSsNGZoak/?imgmax=800" title="Screen shot 2013-05-09 at 4.05.17 PM.png" width="600" /></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
<span style="font-family: Arial; font-size: 10.0pt;"><b>The basic flow will be: </b></span></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="margin-left: .5in; mso-layout-grid-align: none; mso-list: l3 level1 lfo4; mso-pagination: none; tab-stops: 11.0pt .5in; text-autospace: none; text-indent: -.5in;">
<span style="font-family: Arial; mso-fareast-font-family: Arial;"><span style="mso-list: Ignore;">1.</span></span><span style="font-family: Arial; font-size: 10.0pt;">Client Connects to the flex-guest SSID</span></div>
<div class="MsoNormal" style="margin-left: .5in; mso-layout-grid-align: none; mso-list: l3 level1 lfo4; mso-pagination: none; tab-stops: 11.0pt .5in; text-autospace: none; text-indent: -.5in;">
<span style="font-family: Arial; mso-fareast-font-family: Arial;"><span style="mso-list: Ignore;">2.</span></span><span style="font-family: Arial; font-size: 10.0pt;">WLC will send the RADIUS packet to ISE as MAB </span></div>
<div class="MsoNormal" style="margin-left: .5in; mso-layout-grid-align: none; mso-list: l3 level1 lfo4; mso-pagination: none; tab-stops: 11.0pt .5in; text-autospace: none; text-indent: -.5in;">
<span style="font-family: Arial; mso-fareast-font-family: Arial;"><span style="mso-list: Ignore;">3.</span></span><span style="font-family: Arial; font-size: 10.0pt;">Since there is not an endpoint with the MAC address in the database we will allow authentication to “Continue” through to Authorization. </span></div>
<div class="MsoNormal" style="margin-left: .5in; mso-layout-grid-align: none; mso-list: l3 level1 lfo4; mso-pagination: none; tab-stops: 11.0pt .5in; text-autospace: none; text-indent: -.5in;">
<span style="font-family: Arial; mso-fareast-font-family: Arial;"><span style="mso-list: Ignore;">4.</span></span><span style="font-family: Arial; font-size: 10.0pt;">There will also not be a match in the Authorization rules yet so it will end up at the default rule (CWA policy from above)</span></div>
<div class="MsoNormal" style="margin-left: .5in; mso-layout-grid-align: none; mso-list: l3 level1 lfo4; mso-pagination: none; tab-stops: 11.0pt .5in; text-autospace: none; text-indent: -.5in;">
<span style="font-family: Arial; mso-fareast-font-family: Arial;"><span style="mso-list: Ignore;">5.</span></span><span style="font-family: Arial; font-size: 10.0pt;">ISE returns RADIUS packet with the ACL name for webauth-redirect to be used and access-accept</span></div>
<div class="MsoNormal" style="margin-left: .5in; mso-layout-grid-align: none; mso-list: l3 level1 lfo4; mso-pagination: none; tab-stops: 11.0pt .5in; text-autospace: none; text-indent: -.5in;">
<span style="font-family: Arial; mso-fareast-font-family: Arial;"><span style="mso-list: Ignore;">6.</span></span><span style="font-family: Arial; font-size: 10.0pt;">WLC will use the webauth redirect ACL created locally to determine what traffic will qualify for redirect and send browser traffic to the ISE guest portal</span></div>
<div class="MsoNormal" style="margin-left: .5in; mso-layout-grid-align: none; mso-list: l3 level1 lfo4; mso-pagination: none; tab-stops: 11.0pt .5in; text-autospace: none; text-indent: -.5in;">
<span style="font-family: Arial; mso-fareast-font-family: Arial;"><span style="mso-list: Ignore;">7.</span></span><span style="font-family: Arial; font-size: 10.0pt;">User will enter the guest username and password created in the sponsor portal</span></div>
<div class="MsoNormal" style="margin-left: .5in; mso-layout-grid-align: none; mso-list: l3 level1 lfo4; mso-pagination: none; tab-stops: 11.0pt .5in; text-autospace: none; text-indent: -.5in;">
<span style="font-family: Arial; mso-fareast-font-family: Arial;"><span style="mso-list: Ignore;">8.</span></span><span style="font-family: Arial; font-size: 10.0pt;">Following success authentication the COA is issued and the ACL from (FLEX-GUEST) will replace the webauth redirect and the client will enter the run state. </span></div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="margin-bottom: 6.0pt; mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
<div class="MsoNormal" style="mso-layout-grid-align: none; mso-pagination: none; text-autospace: none;">
</div>
Anonymoushttp://www.blogger.com/profile/12415082923436051790noreply@blogger.com1tag:blogger.com,1999:blog-9055958418130504123.post-41868436673062078392013-01-24T15:16:00.000-08:002013-01-24T15:32:27.449-08:00Multicast VPN<span class="Apple-style-span" style="-webkit-border-horizontal-spacing: 2px; -webkit-border-vertical-spacing: 2px;">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]--><!--[if gte mso 9]><xml>
<o:DocumentProperties>
<o:Revision>0</o:Revision>
<o:TotalTime>0</o:TotalTime>
<o:Pages>1</o:Pages>
<o:Words>2527</o:Words>
<o:Characters>14410</o:Characters>
<o:Company>OEM User</o:Company>
<o:Lines>120</o:Lines>
<o:Paragraphs>33</o:Paragraphs>
<o:CharactersWithSpaces>16904</o:CharactersWithSpaces>
<o:Version>14.0</o:Version>
</o:DocumentProperties>
<o:OfficeDocumentSettings>
<o:AllowPNG/>
</o:OfficeDocumentSettings>
</xml><![endif]-->
<!--[if gte mso 9]><xml>
<w:WordDocument>
<w:View>Normal</w:View>
<w:Zoom>0</w:Zoom>
<w:TrackMoves>false</w:TrackMoves>
<w:TrackFormatting/>
<w:PunctuationKerning/>
<w:ValidateAgainstSchemas/>
<w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
<w:IgnoreMixedContent>false</w:IgnoreMixedContent>
<w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
<w:DoNotPromoteQF/>
<w:LidThemeOther>EN-US</w:LidThemeOther>
<w:LidThemeAsian>JA</w:LidThemeAsian>
<w:LidThemeComplexScript>X-NONE</w:LidThemeComplexScript>
<w:Compatibility>
<w:BreakWrappedTables/>
<w:SnapToGridInCell/>
<w:WrapTextWithPunct/>
<w:UseAsianBreakRules/>
<w:DontGrowAutofit/>
<w:SplitPgBreakAndParaMark/>
<w:EnableOpenTypeKerning/>
<w:DontFlipMirrorIndents/>
<w:OverrideTableStyleHps/>
<w:UseFELayout/>
</w:Compatibility>
<m:mathPr>
<m:mathFont m:val="Cambria Math"/>
<m:brkBin m:val="before"/>
<m:brkBinSub m:val="--"/>
<m:smallFrac m:val="off"/>
<m:dispDef/>
<m:lMargin m:val="0"/>
<m:rMargin m:val="0"/>
<m:defJc m:val="centerGroup"/>
<m:wrapIndent m:val="1440"/>
<m:intLim m:val="subSup"/>
<m:naryLim m:val="undOvr"/>
</m:mathPr></w:WordDocument>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:LatentStyles DefLockedState="false" DefUnhideWhenUsed="true"
DefSemiHidden="true" DefQFormat="false" DefPriority="99"
LatentStyleCount="276">
<w:LsdException Locked="false" Priority="0" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Normal"/>
<w:LsdException Locked="false" Priority="9" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="heading 1"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 2"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 3"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 4"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 5"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 6"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 7"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 8"/>
<w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 9"/>
<w:LsdException Locked="false" Priority="39" Name="toc 1"/>
<w:LsdException Locked="false" Priority="39" Name="toc 2"/>
<w:LsdException Locked="false" Priority="39" Name="toc 3"/>
<w:LsdException Locked="false" Priority="39" Name="toc 4"/>
<w:LsdException Locked="false" Priority="39" Name="toc 5"/>
<w:LsdException Locked="false" Priority="39" Name="toc 6"/>
<w:LsdException Locked="false" Priority="39" Name="toc 7"/>
<w:LsdException Locked="false" Priority="39" Name="toc 8"/>
<w:LsdException Locked="false" Priority="39" Name="toc 9"/>
<w:LsdException Locked="false" Priority="35" QFormat="true" Name="caption"/>
<w:LsdException Locked="false" Priority="10" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Title"/>
<w:LsdException Locked="false" Priority="1" Name="Default Paragraph Font"/>
<w:LsdException Locked="false" Priority="11" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtitle"/>
<w:LsdException Locked="false" Priority="22" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Strong"/>
<w:LsdException Locked="false" Priority="20" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Emphasis"/>
<w:LsdException Locked="false" Priority="59" SemiHidden="false"
UnhideWhenUsed="false" Name="Table Grid"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Placeholder Text"/>
<w:LsdException Locked="false" Priority="1" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="No Spacing"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 1"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 1"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 1"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 1"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 1"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 1"/>
<w:LsdException Locked="false" UnhideWhenUsed="false" Name="Revision"/>
<w:LsdException Locked="false" Priority="34" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="List Paragraph"/>
<w:LsdException Locked="false" Priority="29" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Quote"/>
<w:LsdException Locked="false" Priority="30" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Quote"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 1"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 1"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 1"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 1"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 1"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 1"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 1"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 1"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 2"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 2"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 2"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 2"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 2"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 2"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 2"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 2"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 2"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 2"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 2"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 2"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 2"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 2"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 3"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 3"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 3"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 3"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 3"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 3"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 3"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 3"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 3"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 3"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 3"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 3"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 3"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 3"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 4"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 4"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 4"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 4"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 4"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 4"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 4"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 4"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 4"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 4"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 4"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 4"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 4"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 4"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 5"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 5"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 5"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 5"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 5"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 5"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 5"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 5"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 5"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 5"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 5"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 5"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 5"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 5"/>
<w:LsdException Locked="false" Priority="60" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Shading Accent 6"/>
<w:LsdException Locked="false" Priority="61" SemiHidden="false"
UnhideWhenUsed="false" Name="Light List Accent 6"/>
<w:LsdException Locked="false" Priority="62" SemiHidden="false"
UnhideWhenUsed="false" Name="Light Grid Accent 6"/>
<w:LsdException Locked="false" Priority="63" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 1 Accent 6"/>
<w:LsdException Locked="false" Priority="64" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Shading 2 Accent 6"/>
<w:LsdException Locked="false" Priority="65" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 1 Accent 6"/>
<w:LsdException Locked="false" Priority="66" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium List 2 Accent 6"/>
<w:LsdException Locked="false" Priority="67" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 1 Accent 6"/>
<w:LsdException Locked="false" Priority="68" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 2 Accent 6"/>
<w:LsdException Locked="false" Priority="69" SemiHidden="false"
UnhideWhenUsed="false" Name="Medium Grid 3 Accent 6"/>
<w:LsdException Locked="false" Priority="70" SemiHidden="false"
UnhideWhenUsed="false" Name="Dark List Accent 6"/>
<w:LsdException Locked="false" Priority="71" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Shading Accent 6"/>
<w:LsdException Locked="false" Priority="72" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful List Accent 6"/>
<w:LsdException Locked="false" Priority="73" SemiHidden="false"
UnhideWhenUsed="false" Name="Colorful Grid Accent 6"/>
<w:LsdException Locked="false" Priority="19" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Emphasis"/>
<w:LsdException Locked="false" Priority="21" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Emphasis"/>
<w:LsdException Locked="false" Priority="31" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Subtle Reference"/>
<w:LsdException Locked="false" Priority="32" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Intense Reference"/>
<w:LsdException Locked="false" Priority="33" SemiHidden="false"
UnhideWhenUsed="false" QFormat="true" Name="Book Title"/>
<w:LsdException Locked="false" Priority="37" Name="Bibliography"/>
<w:LsdException Locked="false" Priority="39" QFormat="true" Name="TOC Heading"/>
</w:LatentStyles>
</xml><![endif]-->
<!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-parent:"";
mso-padding-alt:0in 5.4pt 0in 5.4pt;
mso-para-margin:0in;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:Cambria;
mso-ascii-font-family:Cambria;
mso-ascii-theme-font:minor-latin;
mso-hansi-font-family:Cambria;
mso-hansi-theme-font:minor-latin;}
</style>
<![endif]-->
<!--StartFragment-->
</span><br />
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<b><span style="color: #535353; font-family: Arial; font-size: 18.0pt;">MPLS Multicast Routing (IOS)</span></b><span style="color: #535353; font-family: Verdana; font-size: 11.0pt; mso-bidi-font-family: Verdana;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Arial; font-size: 13.0pt;">Here are my notes for configuring multicast in an MPLS
environment from a recent training. This will be broken down into four
major sections with output samples for each configuration step and validation:<o:p></o:p></span></div>
<div class="MsoNormal" style="margin-left: 0.5in; text-indent: -0.5in;">
</div>
<ol style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<li><span style="color: #535353; font-family: Arial; font-size: 13.0pt;">MPLS in the Core</span></li>
<li><span style="color: #535353; font-family: Arial; font-size: 13.0pt;">Multicast between the PE/CE</span></li>
<li><span style="color: #535353; font-family: Arial; font-size: 13.0pt;">Multicast Distribution Tree</span></li>
<li><span style="color: #535353; font-family: Arial; font-size: 13.0pt;">Final Validations and Test</span></li>
</ol>
<!--[if !supportLists]--><br />
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<b><span style="color: #535353; font-family: Arial; font-size: 15.0pt;">BASIC TOPOLOGY<o:p></o:p></span></b></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgOxzj5ScFVxLik2NZM3rbTmNQwxev-pEC-uu9h8MVjUk1TbUOs2HS9uMO9yoPgmg4VVzJDBiQOSQ3e047nvZrceR48cWx5a-hO8g-qFX_tFlC8KxEQm9n0GJWixkrLpwhErJMt_0jQPFI/s1600/mpls-mcase-basic-topo.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="332" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgOxzj5ScFVxLik2NZM3rbTmNQwxev-pEC-uu9h8MVjUk1TbUOs2HS9uMO9yoPgmg4VVzJDBiQOSQ3e047nvZrceR48cWx5a-hO8g-qFX_tFlC8KxEQm9n0GJWixkrLpwhErJMt_0jQPFI/s640/mpls-mcase-basic-topo.png" width="640" /></a></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<b><span style="color: #535353; font-family: Arial; font-size: 15.0pt;"><o:p><br /></o:p></span></b></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Arial; font-size: 15.0pt; mso-no-proof: yes;"><!--[if gte vml 1]><v:shapetype id="_x0000_t75"
coordsize="21600,21600" o:spt="75" o:preferrelative="t" path="m@4@5l@4@11@9@11@9@5xe"
filled="f" stroked="f">
<v:stroke joinstyle="miter"/>
<v:formulas>
<v:f eqn="if lineDrawn pixelLineWidth 0"/>
<v:f eqn="sum @0 1 0"/>
<v:f eqn="sum 0 0 @1"/>
<v:f eqn="prod @2 1 2"/>
<v:f eqn="prod @3 21600 pixelWidth"/>
<v:f eqn="prod @3 21600 pixelHeight"/>
<v:f eqn="sum @0 0 1"/>
<v:f eqn="prod @6 1 2"/>
<v:f eqn="prod @7 21600 pixelWidth"/>
<v:f eqn="sum @8 21600 0"/>
<v:f eqn="prod @7 21600 pixelHeight"/>
<v:f eqn="sum @10 21600 0"/>
</v:formulas>
<v:path o:extrusionok="f" gradientshapeok="t" o:connecttype="rect"/>
<o:lock v:ext="edit" aspectratio="t"/>
</v:shapetype><v:shape id="Picture_x0020_1" o:spid="_x0000_i1025" type="#_x0000_t75"
style='width:6in;height:226pt;visibility:visible;mso-wrap-style:square'>
<v:imagedata src="file://localhost/Users/jandiorio/Library/Caches/TemporaryItems/msoclip/0/clip_image001.emz"
o:title=""/>
</v:shape><![endif]--><!--[if !vml]--><!--[endif]--></span><span style="color: #535353; font-family: Arial; font-size: 15.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<b><span style="color: #535353; font-family: Arial; font-size: 16.0pt;">MPLS IN THE CORE</span></b></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<b><span style="color: #535353; font-family: Arial; font-size: 15.0pt;">Core Network Setup Steps</span></b><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Arial; font-size: 13.0pt;">The assumption is that you already have a fully configured and
functioning IGP. These configuration steps are performed on the 'P'
routers within the core of the MPLS network.</span><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="margin-left: 0.5in; text-indent: -0.5in;">
</div>
<ol>
<li><span class="Apple-style-span" style="color: #535353; font-family: Arial; font-size: 17px;">Enable multicast routing</span></li>
<li><span style="color: #535353; font-family: Arial; font-size: 13.0pt;">Configure PIM on the Interface</span></li>
<li><span style="color: #535353; font-family: Arial; font-size: 13.0pt;">If using sparse-mode, configure rendezvous point in the core</span></li>
</ol>
<!--[if !supportLists]--><br />
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Arial; font-size: 16.0pt;">1. </span><span style="color: #535353; font-family: Arial; font-size: 13.0pt;"> <u>Enable Multicast routing</u></span><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> ip
multicast-routing<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Arial; font-size: 16.0pt;">2.</span><span style="color: #535353; font-family: Arial; font-size: 13.0pt;"> <u>Configure PIM on the Interface</u></span><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> interface x/y<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span class="Apple-style-span" style="color: #535353; font-family: Courier; font-size: 15px;"> ip pim
sparse-mode</span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Arial; font-size: 16.0pt;"> <o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Arial; font-size: 13.0pt;">The easiest way to avoid trouble with the RPF check and
multicast forwarding is to maintain a 1:1 ratio between your PIM enabled
interfaces and your IGP enabled interfaces. <o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Arial; font-size: 11.0pt;"> <o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Arial; font-size: 16.0pt;">3.</span><span style="color: #535353; font-family: Arial; font-size: 13.0pt;"> <u> Configure the rendezvous point</u></span><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Arial; font-size: 13.0pt;">The configuration of the RP can be auto-rp, bootstrap router or
static. I chose bsr in this case.<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 16.0pt; mso-bidi-font-family: Courier;"> </span><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">ip pim bsr-candidate loopback0</span><span style="color: #535353; font-family: Courier; font-size: 16.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> ip pim
rp-candidate loopback0<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px; margin-bottom: 8pt;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<b><span style="color: #535353; font-family: Arial; font-size: 15.0pt;">Core Network Validation Steps</span></b><span style="color: #535353; font-family: Arial; font-size: 15.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="margin-left: 0.5in; text-indent: -0.5in;">
</div>
<ol style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<li><span style="color: #535353; font-family: Arial; font-size: 16.0pt; mso-fareast-font-family: Arial;"><span style="mso-list: Ignore;"><span style="font: 7.0pt "Times New Roman";"> </span></span></span><span style="color: #535353; font-family: Arial; font-size: 13.0pt;">Validate the appropriate interfaces are configured with PIM</span></li>
<li><span class="Apple-style-span" style="color: #535353; font-family: Arial; font-size: 17px;">Validate the PIM neighbors are seen
successfully</span></li>
<li><span class="Apple-style-span" style="color: #535353; font-family: Arial; font-size: 17px;">Validate the RP is seen on all multicast
enabled core routers</span></li>
<li><span class="Apple-style-span" style="color: #535353; font-family: Arial; font-size: 17px;">Enable a multicast receiver in the core</span></li>
<li><span class="Apple-style-span" style="color: #535353; font-family: Arial; font-size: 17px;">Compare the unicast routing table, rpf for the
rp and the outgoing interfaces list</span></li>
<li><span class="Apple-style-span" style="color: #535353; font-family: Arial; font-size: 17px;">Source multicast traffic to the receiver from another device</span></li>
</ol>
<br />
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Arial; font-size: 16.0pt;">1. <u>Validate PIM Interfaces</u></span><b><span style="color: #535353; font-family: Arial; font-size: 15.0pt;"><o:p></o:p></span></b></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Arial; font-size: 16.0pt;">Compare the output of the '</span><span style="color: #535353; font-family: Arial; font-size: 11.0pt;">show ip pim interface' </span><span style="color: #535353; font-family: Arial; font-size: 13.0pt;">command to your
diagram to ensure all required interfaces have been configured. Perform
this step on all routers in the MPLS core.</span><b><span style="color: #535353; font-family: Arial; font-size: 15.0pt;"><o:p></o:p></span></b></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">P5#sho ip pim int <o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">Address Interface Ver/ Nbr Query DR
DR<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">
Mode Count Intvl Prior<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">20.4.5.5 FastEthernet0/0 v2/S 1 30
1 20.4.5.5<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">20.5.6.5 FastEthernet0/1 v2/S 1 30
1 20.5.6.6<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">20.3.5.5 FastEthernet1/0 v2/S 0 30
1 0.0.0.0<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">20.5.19.5 FastEthernet1/1 v2/S 1 30
1 20.5.19.19<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">5.5.5.5 Loopback0 v2/S 0 30 1
5.5.5.5<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<b><span style="color: #535353; font-family: Arial; font-size: 15.0pt;">2. <u>Validate PIM Neighbors</u><o:p></o:p></span></b></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Arial; font-size: 13.0pt;">Perform this test on all multicast enabled routers and validate
all interfaces are appropriately configured. In the sample topology all
interfaces have been PIM enabled.</span><span style="color: #535353; font-family: Arial; font-size: 15.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<b><span style="color: #535353; font-family: Arial; font-size: 15.0pt;"> </span></b><b><span style="color: #535353; font-family: Courier; font-size: 15.0pt; mso-bidi-font-family: Courier;"> </span></b><b><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">show ip pim neighbor</span></b><b><span style="color: #535353; font-family: Arial; font-size: 15.0pt;"><o:p></o:p></span></b></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<b><span style="color: #535353; font-family: Arial; font-size: 11.0pt;">SAMPLE OUTPUT<o:p></o:p></span></b></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">P5#sho ip pim neighbor <o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">PIM Neighbor Table<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">Mode: B - Bidir Capable, DR -
Designated Router, N - Default DR Priority,<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> P - Proxy
Capable, S - State Refresh Capable, G - GenID Capable<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">Neighbor Interface Uptime/Expires
Ver DR<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">Address Prio/Mode<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">20.4.5.4 FastEthernet0/0
00:25:59/00:01:35 v2 1 / S P G<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">20.5.6.6 FastEthernet0/1
00:39:45/00:01:44 v2 1 / DR S P G<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">20.5.19.19 FastEthernet1/1
00:38:53/00:01:15 v2 1 / DR S P G<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<b><span style="color: #535353; font-family: Arial; font-size: 16.0pt;">3. <u>Validate RP Assignment</u></span></b><b><span style="color: #535353; font-family: Arial; font-size: 11.0pt;"><o:p></o:p></span></b></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Arial; font-size: 13.0pt;">Execute this check on all core routers that are going to be
multicast enabled.<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">show ip pim rp mapping</span><span style="color: #535353; font-family: Courier; font-size: 9.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">P5#show ip pim rp mapping</span><span style="color: #535353; font-family: Courier; font-size: 9.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">PIM Group-to-RP Mappings</span><span style="color: #535353; font-family: Courier; font-size: 9.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">Group(s) 224.0.0.0/4</span><span style="color: #535353; font-family: Courier; font-size: 9.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> RP 4.4.4.4 (?), v2</span><span style="color: #535353; font-family: Courier; font-size: 9.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> Info source: 4.4.4.4
(?), via bootstrap, priority 0, holdtime 150</span><span style="color: #535353; font-family: Courier; font-size: 9.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">
Uptime: 00:37:23, expires: 00:01:46</span><span style="color: #535353; font-family: Courier; font-size: 9.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<b><span style="color: #535353; font-family: Arial; font-size: 15.0pt;">4. <u>Enable Multicast Receiver</u><o:p></o:p></span></b></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">interface Loopback0<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> ip address 6.6.6.6
255.255.255.255<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> ip router isis 1<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> ip pim sparse-mode<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> ip igmp join-group 224.1.1.1<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<b><span style="color: #535353; font-family: Arial; font-size: 15.0pt;">5. <u>Unicast routing, rpf check and OIL</u><o:p></o:p></span></b></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Arial; font-size: 15.0pt;">Validate the unicast route to the RP address and the rpf are in
agreement<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">P5#sho ip route 4.4.4.4<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">Routing entry for 4.4.4.4/32<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> Known via "isis",
distance 115, metric 10, type level-2<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> Redistributing <a href="http://www.blogger.com/blogger.g?blogID=9055958418130504123"><span style="color: #1000c1;">via isis 1</span></a><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> <a href="http://www.blogger.com/blogger.g?blogID=9055958418130504123"><span style="color: #1000c1;">Last</span></a> update from 20.4.5.4 on FastEthernet0/0,
01:05:42 ago<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> Routing Descriptor Blocks:<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> * 20.4.5.4, from 4.4.4.4,
01:05:42 ago, via FastEthernet0/0<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> Route metric
is 10, traffic share count is 1<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">P5#sho ip rpf 4.4.4.4<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">RPF information for ? (4.4.4.4)<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> RPF interface:
FastEthernet0/0<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> RPF neighbor: ? (20.4.5.4)<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> RPF route/mask: 4.4.4.4/32<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> RPF type: unicast (isis 1)<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> Doing distance-preferred
lookups across tables<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> RPF topology: ipv4 multicast
base, originated from ipv4 unicast base<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">P5#sho ip mroute <o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">IP Multicast Routing Table<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">Flags: D - Dense, S - Sparse, B -
Bidir Group, s - SSM Group, C - Connected,<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> L -
Local, P - Pruned, R - RP-bit set, F - Register flag,<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> T -
SPT-bit set, J - Join SPT, M - MSDP created entry, E - Extranet,<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> X -
Proxy Join Timer Running, A - Candidate for MSDP Advertisement,<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> U - URD,
I - Received Source Specific Host Report, <o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> Z -
Multicast Tunnel, z - MDT-data group sender, <o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> Y -
Joined MDT-data group, y - Sending to MDT-data group, <o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> V - RD
& Vector, v - Vector<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">Outgoing interface flags: H -
Hardware switched, A - Assert winner<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> Timers: Uptime/Expires<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> Interface state: Interface,
Next-Hop or VCD, State/Mode<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">(*, 224.1.1.1), 01:04:13/00:03:20,
RP 4.4.4.4, flags: S<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> Incoming interface:
FastEthernet0/0, RPF nbr 20.4.5.4<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> Outgoing interface list:<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> FastEthernet0/1,
Forward/Sparse, 01:04:13/00:03:20<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">(*, 224.0.1.40), 01:20:58/00:02:16,
RP 0.0.0.0, flags: DCL<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> Incoming interface: Null,
RPF nbr 0.0.0.0<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> Outgoing interface list:<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> FastEthernet0/0,
Forward/Sparse, 01:20:56/00:02:16<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px; margin-left: 0.5in; text-indent: -0.5in;">
<!--[if !supportLists]--><span style="color: #535353; font-family: Arial; font-size: 15.0pt; mso-fareast-font-family: Arial;"><span style="mso-list: Ignore;">•<span style="font: 7.0pt "Times New Roman";">
</span></span></span><!--[endif]--><span style="color: #535353; font-family: Arial; font-size: 13.0pt;">The incoming interface should match the RPF interfaces toward
the RP</span><span style="color: #535353; font-family: Arial; font-size: 15.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px; margin-left: 0.5in; text-indent: -0.5in;">
<!--[if !supportLists]--><span style="color: #535353; font-family: Arial; font-size: 15.0pt; mso-fareast-font-family: Arial;"><span style="mso-list: Ignore;">•<span style="font: 7.0pt "Times New Roman";">
</span></span></span><!--[endif]--><span style="color: #535353; font-family: Arial; font-size: 13.0pt;">The outgoing interface list (OIL) should contain the interface
toward the router with the igmp join statement</span><span style="color: #535353; font-family: Arial; font-size: 15.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px; margin-bottom: 8pt;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<b><span style="color: #535353; font-family: Arial; font-size: 16.0pt;">MULTICAST BETWEEN THE PE/CE</span></b><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px; margin-bottom: 8pt;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<b><span style="color: #535353; font-family: Arial; font-size: 15.0pt;">CE Router Configuration</span></b><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Arial; font-size: 13.0pt;">The multicast configuration on the CE router will be the
standard type of enterprise multicast configuration. The same practice of
maintaining a 1:1 ratio of IGP enabled to multicast enabled interface parity
will help avoid RPF issues later. <o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span class="Apple-style-span" style="color: #535353; font-family: Arial; font-size: 17px;"><br /></span></div>
<div class="MsoNormal">
</div>
<ol style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<li><span class="Apple-style-span" style="color: #535353; font-family: Arial; font-size: 17px;">Enable Multicast Routing</span></li>
<li><span class="Apple-style-span" style="color: #535353; font-family: Arial; font-size: 17px;">Enabled PIM on the interfaces</span></li>
<li><span style="color: #535353; font-family: Arial; font-size: 16.0pt; mso-fareast-font-family: Arial;"><span style="mso-list: Ignore;"><span style="font: 7.0pt "Times New Roman";"> </span></span></span><span style="color: #535353; font-family: Arial; font-size: 13.0pt;">Configure an rendezvous point for sparse mode multicast networks</span></li>
</ol>
<br />
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<b><span style="color: #535353; font-family: Arial; font-size: 15.0pt;"><br /></span></b></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<b><span style="color: #535353; font-family: Arial; font-size: 15.0pt;"><br /></span></b></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<b><span style="color: #535353; font-family: Arial; font-size: 15.0pt;">Validate CE Multicast Configuration</span></b><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="margin-left: 0.5in; text-indent: -0.5in;">
</div>
<ol style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<li><span class="Apple-style-span" style="color: #535353; font-family: Arial; font-size: 17px;">Validate PIM interfaces</span></li>
<li><span class="Apple-style-span" style="color: #535353; font-family: Arial; font-size: 17px;">Validate PIM neighbors</span></li>
<li><span class="Apple-style-span" style="color: #535353; font-family: Arial; font-size: 17px;">Validate RP within the local site with the RP (other sites won't
see it until you configure the MDT piece)</span></li>
</ol>
<br />
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<i><span style="color: #535353; font-family: Arial; font-size: 13.0pt;"><br /></span></i></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<i><span style="color: #535353; font-family: Arial; font-size: 13.0pt;">** For brevity I have omitted the output of these commands as
the are the same as the previous and repeated again later.</span></i><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"> <o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px; margin-bottom: 8pt;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Arial; font-size: 16.0pt;"> <o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<b><span style="color: #535353; font-family: Arial; font-size: 15.0pt;">PE to CE Configuration</span></b><span style="color: #535353; font-family: Arial; font-size: 15.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="margin-left: 0.5in; text-indent: -0.5in;">
</div>
<ol style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<li><span class="Apple-style-span" style="color: #535353; font-family: Arial; font-size: 17px;">Enable multicast routing</span></li>
<li><span class="Apple-style-span" style="color: #535353; font-family: Arial; font-size: 17px;">Enable multicast routing for the customer
vrf </span></li>
<li><span class="Apple-style-span" style="color: #535353; font-family: Arial; font-size: 17px;">Configure pim on the CE interface</span></li>
</ol>
<br />
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Arial; font-size: 16.0pt;">1. </span><span style="color: #535353; font-family: Arial; font-size: 13.0pt;"> <u>Enable multicast routing</u></span><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">ip multicast-routing <o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Arial; font-size: 16.0pt;">2. </span><u><span style="color: #535353; font-family: Arial; font-size: 13.0pt;">Enable multicast routing on the customer VRF</span></u><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">ip multicast-routing vrf A <o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Arial; font-size: 16.0pt;">3. </span><u><span style="color: #535353; font-family: Arial; font-size: 13.0pt;">PIM on the CE</span></u><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">interface FastEthernet0/0<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> vrf forwarding A<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> ip address 10.1.2.2
255.255.255.0<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<b><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> ip pim sparse-mode</span></b><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<b><span style="color: #535353; font-family: Arial; font-size: 15.0pt;">Validations</span></b><span style="color: #535353; font-family: Arial; font-size: 15.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="margin-left: 0.5in; text-indent: -0.5in;">
</div>
<ol style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<li><span class="Apple-style-span" style="color: #535353; font-family: Arial; font-size: 17px;">Validate PIM interfaces in the VRF</span></li>
<li><span class="Apple-style-span" style="color: #535353; font-family: Arial; font-size: 17px;">Validate the PIM neighbors in the VRF</span></li>
<li><span class="Apple-style-span" style="color: #535353; font-family: Arial; font-size: 17px;">At the site where the RP exists, verify the PE sees the RP in
the VRF</span></li>
</ol>
<br />
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Arial; font-size: 16.0pt;">1. </span><u><span style="color: #535353; font-family: Arial; font-size: 13.0pt;">PIM Interfaces</span></u><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Arial; font-size: 11.0pt;">PE1#<b>show ip pim vrf A interface</b> <o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Arial; font-size: 11.0pt;">Address Interface Ver/ Nbr Query DR DR<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Arial; font-size: 11.0pt;">
Mode Count Intvl Prior<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Arial; font-size: 11.0pt;">10.1.2.2 FastEthernet0/0 v2/S 1 30 1 10.1.2.2<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Arial; font-size: 16.0pt;">2. <u> </u></span><span style="color: #535353; font-family: Arial; font-size: 13.0pt;">PIM Neighbors</span><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">PE1#<b>sho ip pim vrf A neighbor</b> <o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">PIM Neighbor Table<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">Mode: B - Bidir Capable, DR -
Designated Router, N - Default DR Priority,<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> P - Proxy
Capable, S - State Refresh Capable, G - GenID Capable<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">Neighbor Interface Uptime/Expires
Ver DR<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">Address Prio/Mode<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<b><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">10.1.2.1</span></b><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> FastEthernet0/0 00:55:20/00:01:38 v2 1 / S P G<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Arial; font-size: 16.0pt;">3. </span><u><span style="color: #535353; font-family: Arial; font-size: 13.0pt;">Validate the RP is seen on PE1 (connected to site with RP)</span></u><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">PE1#sho ip pim vrf A rp mapping<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">PIM Group-to-RP Mappings<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">Group(s) 224.0.0.0/4<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> RP 1.1.1.1 (?), v2<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> Info source: 1.1.1.1
(?), via bootstrap, priority 0, holdtime 150<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">
Uptime: 01:29:19, expires: 00:01:56<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px; margin-bottom: 8pt;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<b><span style="color: #535353; font-family: Arial; font-size: 16.0pt;">MULTICAST DISTRIBUTION TREE</span></b><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal">
<span class="Apple-style-span" style="color: #535353; font-family: Courier;"><span class="Apple-style-span" style="font-size: 15px;"><br /></span></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Arial; font-size: 13.0pt;">The MDT (multicast distribution tree) is the solution that
utilizes PIM in the core of the network (ASM, bidir, or SSM) and builds
multicast trees per VPN. The state information maintained in the core of
the network is limited to the information specifically required to maintain the
trees. The VRF default MDT configuration enables the automatic discover
of PE routers participating in the VPN (based on default mdt group) for ASM.
Customer (VPN) multicast traffic is encapsulated in provider multicast
groups. </span><span style="color: #535353; font-family: Arial; font-size: 11.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Arial; font-size: 13.0pt;">This basic configuration example only shows the use of the
default mdt group. MDT data groups can be used to further optimize the
multicast traffic. ** See the reference links at the bottom for
additional info. </span><span style="color: #535353; font-family: Arial; font-size: 11.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<b><span style="color: #535353; font-family: Arial; font-size: 15.0pt;">Configure MDT - Multicast Distribution Tree</span></b><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="margin-left: 0.5in; text-indent: -0.5in;">
</div>
<ol style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<li><span class="Apple-style-span" style="color: #535353; font-family: Arial; font-size: 17px;">Enable MDT address family in BGP and activate ipv4 vpnv4
neighbors</span></li>
<li><span class="Apple-style-span" style="color: #535353; font-family: Arial; font-size: 17px;">Configure the MDT address parameters in the
vrf</span></li>
<li><span class="Apple-style-span" style="color: #535353; font-family: Arial; font-size: 17px;">Ensure PIM is enabled on Loopbacks used for BGP neighbors</span></li>
</ol>
<br />
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Arial; font-size: 16.0pt;">1. </span><u><span style="color: #535353; font-family: Arial; font-size: 13.0pt;">Enable the MDT address family in BGP</span></u><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> address-family ipv4 mdt<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> neighbor 19.19.19.19
activate<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> neighbor 19.19.19.19
send-community both<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> exit-address-family<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 16.0pt; mso-bidi-font-family: Courier;">2. </span><span style="color: #535353; font-family: Courier; font-size: 13.0pt; mso-bidi-font-family: Courier;"> </span><u><span style="color: #535353; font-family: Arial; font-size: 13.0pt;">Configure the MDT VRF default address</span></u><span style="color: #535353; font-family: Courier; font-size: 16.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">vrf definition A<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> rd 100:1<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> !<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> address-family ipv4<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> <b>mdt default
239.255.255.255</b><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> route-target export 100:1<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> route-target import 100:1<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> route-target import 100:2<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> exit-address-family<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Arial; font-size: 11.0pt;"> !</span><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Arial; font-size: 16.0pt;">3. </span><u><span style="color: #535353; font-family: Arial; font-size: 13.0pt;">Enable PIM on the loopbacks</span></u><span style="color: #535353; font-family: Arial; font-size: 13.0pt;"> </span><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 16.0pt; mso-bidi-font-family: Courier;">i</span><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">nterface
Loopback0</span><span style="color: #535353; font-family: Courier; font-size: 16.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> ip address 2.2.2.2
255.255.255.255<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> ip pim sparse-mode<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">end<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<b><span style="color: #535353; font-family: Arial; font-size: 15.0pt;">Final Validation Steps</span></b><span style="color: #535353; font-family: Arial; font-size: 17.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="margin-left: 0.5in; text-indent: -0.5in;">
</div>
<ol style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<li><span class="Apple-style-span" style="color: #535353; font-family: Arial; font-size: 17px;">Validate on PE the global s,g pairs for each PE</span></li>
<li><span class="Apple-style-span" style="color: #535353; font-family: Arial; font-size: 17px;">Validate on PE the sho ip pim mdt</span></li>
<li><span class="Apple-style-span" style="color: #535353; font-family: Arial; font-size: 17px;">Validate in core the s,g with shortest path tree flag</span></li>
<li><span class="Apple-style-span" style="color: #535353; font-family: Arial; font-size: 17px;">Validate PEs see each other as neighbors within the vrf over
tunnel</span></li>
<li><span class="Apple-style-span" style="color: #535353; font-family: Arial; font-size: 17px;">Validate the non-RP customer sites now see the RP appropriately</span></li>
<li><span class="Apple-style-span" style="color: #535353; font-family: Arial; font-size: 17px;">Configure a multicast receiver</span></li>
<li><span class="Apple-style-span" style="color: #535353; font-family: Arial; font-size: 17px;">Source multicast traffic and review results</span></li>
</ol>
<br />
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Arial; font-size: 13.0pt;">1. <u>Global S,G pairs for PE routers</u></span><span style="color: #535353; font-family: Arial; font-size: 15.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">PE1#sho ip mroute</span><span style="color: #535353; font-family: Courier; font-size: 9.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">IP Multicast Routing Table</span><span style="color: #535353; font-family: Courier; font-size: 9.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">Flags: D - Dense, S - Sparse, B -
Bidir Group, s - SSM Group, C - Connected,</span><span style="color: #535353; font-family: Courier; font-size: 9.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> L - Local,
P - Pruned, R - RP-bit set, F - Register flag,</span><span style="color: #535353; font-family: Courier; font-size: 9.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> T -
SPT-bit set, J - Join SPT, M - MSDP created entry, E - Extranet,</span><span style="color: #535353; font-family: Courier; font-size: 9.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> X -
Proxy Join Timer Running, A - Candidate for MSDP Advertisement,</span><span style="color: #535353; font-family: Courier; font-size: 9.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> U - URD,
I - Received Source Specific Host Report, </span><span style="color: #535353; font-family: Courier; font-size: 9.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> Z -
Multicast Tunnel, z - MDT-data group sender, </span><span style="color: #535353; font-family: Courier; font-size: 9.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> Y -
Joined MDT-data group, y - Sending to MDT-data group, </span><span style="color: #535353; font-family: Courier; font-size: 9.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> V - RD
& Vector, v - Vector</span><span style="color: #535353; font-family: Courier; font-size: 9.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">Outgoing interface flags: H -
Hardware switched, A - Assert winner</span><span style="color: #535353; font-family: Courier; font-size: 9.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> Timers: Uptime/Expires</span><span style="color: #535353; font-family: Courier; font-size: 9.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> Interface state: Interface,
Next-Hop or VCD, State/Mode</span><span style="color: #535353; font-family: Courier; font-size: 9.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">(*, 239.255.255.255),
00:04:39/stopped, RP 4.4.4.4, flags: SJCFZ</span><span style="color: #535353; font-family: Courier; font-size: 9.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> Incoming interface:
FastEthernet1/0, RPF nbr 20.5.19.5</span><span style="color: #535353; font-family: Courier; font-size: 9.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> Outgoing interface list:</span><span style="color: #535353; font-family: Courier; font-size: 9.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> MVRF A,
Forward/Sparse, 00:04:37/00:01:22</span><span style="color: #535353; font-family: Courier; font-size: 9.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<b><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">(2.2.2.2, 239.255.255.255),
00:01:23/00:01:36, flags: JTZ</span></b><span style="color: #535353; font-family: Courier; font-size: 9.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<b><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> Incoming interface:
FastEthernet0/0, RPF nbr 20.6.19.6</span></b><span style="color: #535353; font-family: Courier; font-size: 9.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<b><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> Outgoing interface list:</span></b><span style="color: #535353; font-family: Courier; font-size: 9.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<b><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> MVRF A,
Forward/Sparse, 00:01:23/00:01:36</span></b><span style="color: #535353; font-family: Courier; font-size: 9.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<b><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">(19.19.19.19, 239.255.255.255),
00:04:39/00:03:00, flags: FT</span></b><span style="color: #535353; font-family: Courier; font-size: 9.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<b><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> Incoming interface:
Loopback0, RPF nbr 0.0.0.0</span></b><span style="color: #535353; font-family: Courier; font-size: 9.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<b><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> Outgoing interface list:</span></b><span style="color: #535353; font-family: Courier; font-size: 9.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<b><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> FastEthernet1/0,
Forward/Sparse, 00:02:28/00:02:50</span></b><span style="color: #535353; font-family: Courier; font-size: 9.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">(*, 224.0.1.40), 01:14:14/00:02:35,
RP 0.0.0.0, flags: DCL</span><span style="color: #535353; font-family: Courier; font-size: 9.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> Incoming interface: Null,
RPF nbr 0.0.0.0</span><span style="color: #535353; font-family: Courier; font-size: 9.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> Outgoing interface list:</span><span style="color: #535353; font-family: Courier; font-size: 9.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> FastEthernet0/0,
Forward/Sparse, 01:14:12/00:02:35</span><span style="color: #535353; font-family: Courier; font-size: 9.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Arial; font-size: 13.0pt;">2. <u>Validate the MDT with</u></span><span style="color: #535353; font-family: Arial; font-size: 11.0pt;"> <u>'show ip pim
mdt'</u></span><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">PE1#sho ip pim mdt</span><span style="color: #535353; font-family: Courier; font-size: 16.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> * implies mdt is the default
MDT</span><span style="color: #535353; font-family: Courier; font-size: 16.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> MDT Group/Num Interface
Source VRF</span><span style="color: #535353; font-family: Courier; font-size: 16.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">* 239.255.255.255 Tunnel2 Loopback0
A</span><span style="color: #535353; font-family: Courier; font-size: 16.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<b><span style="color: #535353; font-family: Arial; font-size: 11.0pt;">PIM Neighbors</span></b><span style="color: #535353; font-family: Arial; font-size: 9.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">PE1#sho ip pim vrf A neighbor </span><span style="color: #535353; font-family: Courier; font-size: 9.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">PIM Neighbor Table</span><span style="color: #535353; font-family: Courier; font-size: 9.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">Mode: B - Bidir Capable, DR -
Designated Router, N - Default DR Priority,</span><span style="color: #535353; font-family: Courier; font-size: 9.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> P - Proxy
Capable, S - State Refresh Capable, G - GenID Capable</span><span style="color: #535353; font-family: Courier; font-size: 9.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">Neighbor Interface Uptime/Expires
Ver DR</span><span style="color: #535353; font-family: Courier; font-size: 9.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">Address Prio/Mode</span><span style="color: #535353; font-family: Courier; font-size: 9.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">10.1.2.1 FastEthernet0/0
00:18:11/00:01:35 v2 1 / S P G</span><span style="color: #535353; font-family: Courier; font-size: 9.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">19.19.19.19 <b>Tunnel2</b> 00:00:48/00:01:24
v2 1 / DR S P G</span><span style="color: #535353; font-family: Courier; font-size: 9.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Arial; font-size: 11.0pt;">3. <u>Validate the P routers in the core of the network
see the (S,G) mroute entries for the PE routers</u></span><span style="color: #535353; font-family: Arial; font-size: 13.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">P4#sho ip mroute<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">IP Multicast Routing Table<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">Flags: D - Dense, S - Sparse, B -
Bidir Group, s - SSM Group, C - Connected,<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> L -
Local, P - Pruned, R - RP-bit set, F - Register flag,<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> T -
SPT-bit set, J - Join SPT, M - MSDP created entry, E - Extranet,<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> X -
Proxy Join Timer Running, A - Candidate for MSDP Advertisement,<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> U - URD,
I - Received Source Specific Host Report, <o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> Z -
Multicast Tunnel, z - MDT-data group sender, <o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> Y -
Joined MDT-data group, y - Sending to MDT-data group, <o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> V - RD
& Vector, v - Vector<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">Outgoing interface flags: H -
Hardware switched, A - Assert winner<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> Timers: Uptime/Expires<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> Interface state: Interface,
Next-Hop or VCD, State/Mode<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">(*, 239.255.255.255),
00:53:11/00:03:22, RP 4.4.4.4, flags: S<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> Incoming interface: Null,
RPF nbr 0.0.0.0<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> Outgoing interface list:<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> FastEthernet1/1,
Forward/Sparse, 00:50:49/00:03:14<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> FastEthernet0/1,
Forward/Sparse, 00:53:11/00:03:22<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<b><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">(2.2.2.2, 239.255.255.255),
00:49:26/00:01:57, flags: PT</span></b><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<b><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> Incoming interface:
FastEthernet1/1, RPF nbr 20.2.4.2</span></b><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<b><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> Outgoing interface list:
Null</span></b><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<b><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">(19.19.19.19, 239.255.255.255),
00:52:09/00:03:00, flags: T</span></b><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<b><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> Incoming interface:
FastEthernet0/1, RPF nbr 20.4.5.5</span></b><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<b><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> Outgoing interface list:</span></b><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<b><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> FastEthernet1/1,
Forward/Sparse, 00:50:49/00:03:29</span></b><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">(*, 224.1.1.1), 01:57:34/00:03:04,
RP 4.4.4.4, flags: S<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> Incoming interface: Null,
RPF nbr 0.0.0.0<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> Outgoing interface list:<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> FastEthernet0/1,
Forward/Sparse, 01:57:34/00:03:04<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">(*, 224.0.1.40), 02:16:06/00:02:40,
RP 0.0.0.0, flags: DCL<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> Incoming interface: Null,
RPF nbr 0.0.0.0<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> Outgoing interface list:<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> FastEthernet0/0,
Forward/Sparse, 02:16:04/00:02:24<o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Arial; font-size: 15.0pt;">4. </span><span style="color: #535353; font-family: Arial; font-size: 13.0pt;"> <u>Validate the PEs see each other as neighbors in the
customer VRF </u></span><span style="color: #535353; font-family: Arial; font-size: 11.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">PE1#s<b>ho ip pim vrf A
neighbor </b></span><span style="color: #535353; font-family: Arial; font-size: 9.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">PIM Neighbor Table</span><span style="color: #535353; font-family: Arial; font-size: 9.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">Mode: B - Bidir Capable, DR -
Designated Router, N - Default DR Priority,</span><span style="color: #535353; font-family: Arial; font-size: 9.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> P - Proxy
Capable, S - State Refresh Capable, G - GenID Capable</span><span style="color: #535353; font-family: Arial; font-size: 9.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">Neighbor Interface Uptime/Expires
Ver DR</span><span style="color: #535353; font-family: Arial; font-size: 9.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">Address Prio/Mode</span><span style="color: #535353; font-family: Arial; font-size: 9.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">10.1.2.1 FastEthernet0/0
01:01:10/00:01:34 v2 1 / S P G</span><span style="color: #535353; font-family: Arial; font-size: 9.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<b><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">19.19.19.19 Tunnel2
00:43:47/00:01:40 v2 1 / DR S P G</span></b><span style="color: #535353; font-family: Arial; font-size: 9.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 13.0pt; mso-bidi-font-family: Courier;">5. <u>Validate RP Mapping at
non-RP sites</u></span><span style="color: #535353; font-family: Arial; font-size: 15.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">CE2#sho ip pim rp mapping</span><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">PIM Group-to-RP Mappings</span><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">Group(s) 224.0.0.0/4</span><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> RP 1.1.1.1 (?), v2</span><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> Info source: 1.1.1.1
(?), via bootstrap, priority 0, holdtime 150</span><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">
Uptime: 00:52:27, expires: 00:01:37</span><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 13.0pt; mso-bidi-font-family: Courier;">6. <u>Configure a multicast
receiver</u></span><span style="color: #535353; font-family: Arial; font-size: 15.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 13.0pt; mso-bidi-font-family: Courier;">The RP is located on CE1 so I will
join the 228.1.1.1 group on the CE3 router. </span><span style="color: #535353; font-family: Arial; font-size: 15.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Arial; font-size: 13.0pt;">i</span><span style="color: #535353; font-family: Arial; font-size: 11.0pt;">nterface Loopback0</span><span style="color: #535353; font-family: Arial; font-size: 15.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Arial; font-size: 11.0pt;"> ip address 8.8.8.8 255.255.255.255</span><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Arial; font-size: 11.0pt;"> ip pim sparse-mode</span><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Arial; font-size: 11.0pt;"> ip igmp join-group 228.1.1.1</span><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Arial; font-size: 11.0pt;">end</span><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Arial; font-size: 13.0pt;">Mroute output from PE1:</span><span style="color: #535353; font-family: Arial; font-size: 15.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Arial; font-size: 13.0pt;">We see the join from CE3 has traversed the MPLS core and the *,G
is seen on the PE router. <o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">PE1#sho ip mroute vrf A</span><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">IP Multicast Routing Table</span><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">Flags: D - Dense, S - Sparse, B -
Bidir Group, s - SSM Group, C - Connected,</span><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> L -
Local, P - Pruned, R - RP-bit set, F - Register flag,</span><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> T -
SPT-bit set, J - Join SPT, M - MSDP created entry, E - Extranet,</span><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> X -
Proxy Join Timer Running, A - Candidate for MSDP Advertisement,</span><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> U - URD,
I - Received Source Specific Host Report, </span><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> Z -
Multicast Tunnel, z - MDT-data group sender, </span><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> Y -
Joined MDT-data group, y - Sending to MDT-data group, </span><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> V - RD
& Vector, v - Vector</span><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">Outgoing interface flags: H -
Hardware switched, A - Assert winner</span><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> Timers: Uptime/Expires</span><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> Interface state: Interface,
Next-Hop or VCD, State/Mode</span><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<b><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">(*, 228.1.1.1), 00:21:47/00:03:24,
RP 1.1.1.1, flags: S</span></b><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<b><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> Incoming interface:
FastEthernet0/0, RPF nbr 10.1.2.1</span></b><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<b><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> Outgoing interface list:</span></b><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<b><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> Tunnel2,
Forward/Sparse, 00:21:47/00:03:24</span></b><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">(20.20.20.20, 228.1.1.1),
00:00:22/00:02:37, flags: </span><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> Incoming interface: Tunnel2,
RPF nbr 19.19.19.19</span><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> Outgoing interface list:</span><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> FastEthernet0/0,
Forward/Sparse, 00:00:22/00:03:07</span><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">(10.19.20.20, 228.1.1.1),
00:00:22/00:02:37, flags: </span><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> Incoming interface: Tunnel2,
RPF nbr 19.19.19.19</span><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> Outgoing interface list:</span><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> FastEthernet0/0,
Forward/Sparse, 00:00:22/00:03:07</span><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">(*, 224.0.1.40), 01:34:10/00:02:27,
RP 0.0.0.0, flags: DCL</span><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> Incoming interface: Null,
RPF nbr 0.0.0.0</span><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> Outgoing interface list:</span><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"> FastEthernet0/0,
Forward/Sparse, 01:34:08/00:02:27</span><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Arial; font-size: 13.0pt;">7. <u>Ping from CE2 to 228.1.1.1 and Validate</u></span><span style="color: #535353; font-family: Arial; font-size: 15.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">CE2#ping 228.1.1.1
</span><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">Type escape sequence to abort.</span><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">Sending 1, 100-byte ICMP Echos to
228.1.1.1, timeout is 2 seconds:</span><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<b><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;">Reply to request 0 from 8.8.8.8,
512 ms</span></b><span style="color: #535353; font-family: Arial; font-size: 16.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<b><span style="color: #535353; font-family: Arial; font-size: 20.0pt;">SUMMARY OUTLINE of STEPS</span></b><span style="color: #535353; font-family: Arial; font-size: 11.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px; margin-left: 0.5in; text-indent: -0.5in;">
<!--[if !supportLists]--><span style="color: #535353; font-family: Arial; font-size: 11.0pt; mso-fareast-font-family: Arial;"><span style="mso-list: Ignore;">•<span style="font: 7.0pt "Times New Roman";">
</span></span></span><!--[endif]--><span style="color: #535353; font-family: Courier; font-size: 13.0pt; mso-bidi-font-family: Courier;">
</span><span style="color: #535353; font-family: Arial; font-size: 13.0pt;"> Configure the Core
</span><span style="color: #535353; font-family: Courier; font-size: 13.0pt; mso-bidi-font-family: Courier;">
</span><span style="color: #535353; font-family: Arial; font-size: 11.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px; margin-left: 1in; text-indent: -1in;">
<!--[if !supportLists]--><span style="color: #535353; font-family: Arial; font-size: 11.0pt; mso-fareast-font-family: Arial;"><span style="mso-list: Ignore;">◦<span style="font: 7.0pt "Times New Roman";">
</span></span></span><!--[endif]--><span style="color: #535353; font-family: Courier; font-size: 13.0pt; mso-bidi-font-family: Courier;">
</span><span style="color: #535353; font-family: Arial; font-size: 13.0pt;">Enable multicast routing
</span><span style="color: #535353; font-family: Courier; font-size: 13.0pt; mso-bidi-font-family: Courier;">
</span><span style="color: #535353; font-family: Arial; font-size: 11.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px; margin-left: 1in; text-indent: -1in;">
<!--[if !supportLists]--><span style="color: #535353; font-family: Arial; font-size: 11.0pt; mso-fareast-font-family: Arial;"><span style="mso-list: Ignore;">◦<span style="font: 7.0pt "Times New Roman";">
</span></span></span><!--[endif]--><span style="color: #535353; font-family: Courier; font-size: 13.0pt; mso-bidi-font-family: Courier;">
</span><span style="color: #535353; font-family: Arial; font-size: 13.0pt;">Enable PIM on the interfaces
</span><span style="color: #535353; font-family: Courier; font-size: 13.0pt; mso-bidi-font-family: Courier;">
</span><span style="color: #535353; font-family: Arial; font-size: 11.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px; margin-left: 1in; text-indent: -1in;">
<!--[if !supportLists]--><span style="color: #535353; font-family: Arial; font-size: 11.0pt; mso-fareast-font-family: Arial;"><span style="mso-list: Ignore;">◦<span style="font: 7.0pt "Times New Roman";">
</span></span></span><!--[endif]--><span style="color: #535353; font-family: Courier; font-size: 13.0pt; mso-bidi-font-family: Courier;">
</span><span style="color: #535353; font-family: Arial; font-size: 13.0pt;">Configure the rendezvous point
</span><span style="color: #535353; font-family: Courier; font-size: 13.0pt; mso-bidi-font-family: Courier;">
</span><span style="color: #535353; font-family: Arial; font-size: 11.0pt;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px; margin-left: 0.5in; text-indent: -0.5in;">
<!--[if !supportLists]--><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier; mso-fareast-font-family: Courier;"><span style="mso-list: Ignore;">•<span style="font: 7.0pt "Times New Roman";">
</span></span></span><!--[endif]--><span style="color: #535353; font-family: Arial; font-size: 13.0pt;">Configure the PE/CE</span><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px; margin-left: 1in; text-indent: -1in;">
<!--[if !supportLists]--><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier; mso-fareast-font-family: Courier;"><span style="mso-list: Ignore;">◦<span style="font: 7.0pt "Times New Roman";">
</span></span></span><!--[endif]--><span style="color: #535353; font-family: Arial; font-size: 13.0pt;">CE</span><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px; margin-left: 1.5in; text-indent: -1.5in;">
<!--[if !supportLists]--><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier; mso-fareast-font-family: Courier;"><span style="mso-list: Ignore;">▪<span style="font: 7.0pt "Times New Roman";">
</span></span></span><!--[endif]--><span style="color: #535353; font-family: Arial; font-size: 13.0pt;">Enable multicast routing </span><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px; margin-left: 1.5in; text-indent: -1.5in;">
<!--[if !supportLists]--><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier; mso-fareast-font-family: Courier;"><span style="mso-list: Ignore;">▪<span style="font: 7.0pt "Times New Roman";">
</span></span></span><!--[endif]--><span style="color: #535353; font-family: Arial; font-size: 13.0pt;">Enable PIM on the interfaces</span><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px; margin-left: 1.5in; text-indent: -1.5in;">
<!--[if !supportLists]--><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier; mso-fareast-font-family: Courier;"><span style="mso-list: Ignore;">▪<span style="font: 7.0pt "Times New Roman";">
</span></span></span><!--[endif]--><span style="color: #535353; font-family: Arial; font-size: 13.0pt;">Configure the rendezvous point</span><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px; margin-left: 1in; text-indent: -1in;">
<!--[if !supportLists]--><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier; mso-fareast-font-family: Courier;"><span style="mso-list: Ignore;">◦<span style="font: 7.0pt "Times New Roman";">
</span></span></span><!--[endif]--><span style="color: #535353; font-family: Arial; font-size: 13.0pt;">PE</span><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px; margin-left: 1.5in; text-indent: -1.5in;">
<!--[if !supportLists]--><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier; mso-fareast-font-family: Courier;"><span style="mso-list: Ignore;">▪<span style="font: 7.0pt "Times New Roman";">
</span></span></span><!--[endif]--><span style="color: #535353; font-family: Arial; font-size: 13.0pt;">Enable multicast routing</span><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px; margin-left: 1.5in; text-indent: -1.5in;">
<!--[if !supportLists]--><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier; mso-fareast-font-family: Courier;"><span style="mso-list: Ignore;">▪<span style="font: 7.0pt "Times New Roman";">
</span></span></span><!--[endif]--><span style="color: #535353; font-family: Arial; font-size: 13.0pt;">Enable multicast routing in the vrf</span><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px; margin-left: 1.5in; text-indent: -1.5in;">
<!--[if !supportLists]--><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier; mso-fareast-font-family: Courier;"><span style="mso-list: Ignore;">▪<span style="font: 7.0pt "Times New Roman";">
</span></span></span><!--[endif]--><span style="color: #535353; font-family: Arial; font-size: 13.0pt;">Enable PIM on the VRF interfaces</span><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px; margin-left: 0.5in; text-indent: -0.5in;">
<!--[if !supportLists]--><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier; mso-fareast-font-family: Courier;"><span style="mso-list: Ignore;">•<span style="font: 7.0pt "Times New Roman";">
</span></span></span><!--[endif]--><span style="color: #535353; font-family: Arial; font-size: 13.0pt;">Configure MDT </span><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px; margin-left: 1in; text-indent: -1in;">
<!--[if !supportLists]--><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier; mso-fareast-font-family: Courier;"><span style="mso-list: Ignore;">◦<span style="font: 7.0pt "Times New Roman";">
</span></span></span><!--[endif]--><span style="color: #535353; font-family: Arial; font-size: 13.0pt;">Configure the MDT address family in BGP</span><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px; margin-left: 1in; text-indent: -1in;">
<!--[if !supportLists]--><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier; mso-fareast-font-family: Courier;"><span style="mso-list: Ignore;">◦<span style="font: 7.0pt "Times New Roman";">
</span></span></span><!--[endif]--><span style="color: #535353; font-family: Arial; font-size: 13.0pt;">Configure MDT group addresses in the VRF</span><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px; margin-left: 1in; text-indent: -1in;">
<!--[if !supportLists]--><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier; mso-fareast-font-family: Courier;"><span style="mso-list: Ignore;">◦<span style="font: 7.0pt "Times New Roman";">
</span></span></span><!--[endif]--><span style="color: #535353; font-family: Arial; font-size: 13.0pt;">Configure PIM on the peering loopbacks. </span><span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal">
<span class="Apple-style-span" style="color: #535353; font-family: Courier;"><span class="Apple-style-span" style="font-size: 27px;"><br /></span></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<b><span style="color: #535353; font-family: Courier; font-size: 15.0pt; mso-bidi-font-family: Courier;">REFERENCES and ADDITIONAL READING</span></b><span style="color: #535353; font-family: Courier; font-size: 14.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px; margin-bottom: 10pt;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #102388; font-family: Courier; font-size: 20.0pt; mso-bidi-font-family: Courier;"><a href="http://www.cisco.com/en/US/docs/ios-xml/ios/ipmulti_mvpn/configuration/12-4/imc_cfg_mc_vpn.html#GUID-603F5387-D403-46E3-B7FC-3E75AABF50FF"><span style="color: #205daf; font-size: 14.0pt; text-decoration: none; text-underline: none;">Configuring
Multicast VPN</span></a></span><span style="color: #535353; font-family: Courier; font-size: 20.0pt; mso-bidi-font-family: Courier;"><o:p></o:p></span></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<br /></div>
<div class="MsoNormal" style="color: #676767; font-family: Verdana, Arial, sans-serif; font-size: 11px;">
<span style="color: #535353; font-family: Courier; font-size: 11.0pt; mso-bidi-font-family: Courier;"><a href="http://tools.ietf.org/html/rfc6037#section-4.4.1"><span style="color: #205daf; font-size: 14.0pt; text-decoration: none; text-underline: none;">Cisco Systems'
Solution for Multicast in BGP/MPLS IP VPNs </span></a></span><o:p></o:p></div>
<!--EndFragment--><br />
<div class="ms-PostBody" style="-webkit-border-horizontal-spacing: 2px; -webkit-border-vertical-spacing: 2px; color: #4c4c4c; font-family: Verdana, Arial, sans-serif; font-size: 8pt; line-height: 1.7em; padding-bottom: 12px; padding-top: 6px;">
<div>
<div class="ms-rtestate-field" dir="" style="color: #666666; word-wrap: break-word;">
<div class="ExternalClassF552EF74398443E896844479892C8924">
<div>
<div>
<div>
<div>
<div class="ms-rteFontFace-2" style="font-family: courier, monospace;">
<span class="ms-rteFontFace-2" style="font-family: courier, monospace;"></span><br />
<div>
<span class="ms-rteFontFace-2" style="font-family: courier, monospace;"><span class="ms-rteFontFace-2" style="font-family: courier, monospace;"></span></span><br />
<div>
<span class="ms-rteFontFace-2" style="font-family: courier, monospace;"><span class="ms-rteFontFace-2" style="font-family: courier, monospace;"><span class="ms-rteFontFace-2" style="font-family: courier, monospace;">
</span></span></span></div>
<span class="ms-rteFontFace-2" style="font-family: courier, monospace;"><span class="ms-rteFontFace-2" style="font-family: courier, monospace;">
</span></span></div>
<span class="ms-rteFontFace-2" style="font-family: courier, monospace;">
</span></div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
Anonymoushttp://www.blogger.com/profile/12415082923436051790noreply@blogger.com1tag:blogger.com,1999:blog-9055958418130504123.post-56577084688170956772012-10-04T17:29:00.000-07:002012-10-05T10:44:49.232-07:00Nexus 7000 VPC Dual Failure TestingI recently worked with a customer who experienced an issue in their data center which raised some questions about the vPC failure/recovery scenarios. The root cause of the outage was a self inflicted configuration issue but the customer still wanted an answer to why the environment didn't recover and restore service "properly". <br />
<br />
Without getting into the nitty gritty details of the actual configurations that were applied, suffice it to say that spanning tree loops had caused many bad things to happen including; the errDisable of the peer link due to UDLD messages being dropped in the control plane, route peer relationships dropped, etc. The sequence of events was like this:<br />
<br />
<ol>
<li>spanning-tree loop created</li>
<li>EIGRP peer relationships failed</li>
<li>UDLD error disabled peer-link</li>
<li>console access unavailable to primary vPC peer switch</li>
<li>looping links physically disconnected</li>
<li>primary peer switch powered down</li>
</ol>
<h2>
Scenarios</h2>
<div>
All of these tests were performed with NXOS version 5.1(3) and then again with NXOS version 5.2(5). The results for 5.2(5) are included within with some notes about the 5.1(3) results where applicable. </div>
<div>
<br /></div>
<div>
The tests are focused on the behavior of both the failure and recovery of the vPC system for dual failures. I performed the following failure testing scenarios to provide the customer with some knowledge about what type of outages they can expect during the initial failures and also during the recovery from the outages. All reachability testing was performed with a simple ping test from the access layer Nexus 5000 to the Core layer through the vPC environment. </div>
<ol>
<li>Fail peer keep-alive link, fail peer link, restore peer keep-alive, restore peer link</li>
<li><span style="-webkit-text-size-adjust: auto; background-color: rgba(255, 255, 255, 0);">Fail peer keep-alive link, fail peer link, restore peer link, </span><span style="-webkit-composition-fill-color: rgba(175, 192, 227, 0.230469); -webkit-composition-frame-color: rgba(77, 128, 180, 0.230469); -webkit-tap-highlight-color: rgba(26, 26, 26, 0.296875); -webkit-text-size-adjust: auto;">restore peer-keep alive</span></li>
<li><span style="-webkit-composition-fill-color: rgba(175, 192, 227, 0.230469); -webkit-composition-frame-color: rgba(77, 128, 180, 0.230469); -webkit-tap-highlight-color: rgba(26, 26, 26, 0.296875); -webkit-text-size-adjust: auto;">Fail peer link, fail peer-keep alive link, restore peer-keep alive link, restore peer link </span></li>
<li><span style="-webkit-text-size-adjust: auto; background-color: rgba(255, 255, 255, 0);">Fail peer link, fail peer-keep alive link, restore peer link, restore peer-keep alive</span></li>
<li>Enabled auto-recovery, then repeated #4</li>
</ol>
<div>
The tests performed can be grouped into 3 categories because the results for each test were the same within the groups: </div>
<div>
<ol>
<li>peer keep-alive first failures - tests 1 & 2</li>
<li>peer link first failures - tests 3 & 4 </li>
<li>peer link first failures with auto-recovery - test 5</li>
</ol>
<div>
I will provide the results only for tests 1, 3, 5.</div>
</div>
<h1 style="-webkit-composition-fill-color: rgba(175, 192, 227, 0.230469); -webkit-composition-frame-color: rgba(77, 128, 180, 0.230469); -webkit-tap-highlight-color: rgba(26, 26, 26, 0.292969); font-size: 27px; line-height: 40px;">
Topology</h1>
<div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhyLAjTSs5ER8MXdIRJB8Qh2U6LFH6bihXxxcOtf6ItP8HiU1-mLL3gWhKeA-7AwmHJwKMvysyjas5aW8tqzpZ7CaOpgP37ej_PYP7wKx0tE_Vv27Z5bllsqPdZ1vwv6DESTFF78ThE5GI/s1600/vPC-auto-recovery-topology.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="640" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhyLAjTSs5ER8MXdIRJB8Qh2U6LFH6bihXxxcOtf6ItP8HiU1-mLL3gWhKeA-7AwmHJwKMvysyjas5aW8tqzpZ7CaOpgP37ej_PYP7wKx0tE_Vv27Z5bllsqPdZ1vwv6DESTFF78ThE5GI/s640/vPC-auto-recovery-topology.png" width="484" /></a></div>
<br />
<br />
<br />
<h2>
<span style="-webkit-text-size-adjust: auto;">Tests</span></h2>
<h3>
<span style="-webkit-text-size-adjust: auto;">Test #1 - </span><span style="font-weight: normal;">Fail peer keep-alive, fail peer link, restore peer keep-alive, restore peer link</span></h3>
</div>
<h4>
<span style="-webkit-text-size-adjust: auto;">Validate</span></h4>
<div>
<span style="-webkit-text-size-adjust: auto;">First we need to validate all is good to start with.</span></div>
<div>
<span style="font-family: Courier New, Courier, monospace;"></span><br />
<div style="font-size: x-small;">
<span style="font-family: Courier New, Courier, monospace;"><br /></span></div>
<span style="font-family: Courier New, Courier, monospace;">
</span>
<br />
<div>
<span style="font-family: Courier New, Courier, monospace;">vPC domain id : 1 </span></div>
<span style="font-family: Courier New, Courier, monospace;">
</span>
<br />
<div>
<span style="font-family: Courier New, Courier, monospace;">Peer status : <span style="background-color: lime;">peer adjacency formed ok</span> </span></div>
<span style="font-family: Courier New, Courier, monospace;">
</span>
<br />
<div>
<span style="font-family: Courier New, Courier, monospace;">vPC keep-alive status : <span style="background-color: lime;">peer is alive </span> </span></div>
<span style="font-family: Courier New, Courier, monospace;">
</span>
<br />
<div>
<span style="font-family: Courier New, Courier, monospace;">Configuration consistency status : success </span></div>
<span style="font-family: Courier New, Courier, monospace;">
</span>
<br />
<div>
<span style="font-family: Courier New, Courier, monospace;">Per-vlan consistency status : success </span></div>
<span style="font-family: Courier New, Courier, monospace;">
</span>
<br />
<div>
<span style="font-family: Courier New, Courier, monospace;">Type-2 consistency status : success </span></div>
<span style="font-family: Courier New, Courier, monospace;">
</span>
<div>
<span style="font-family: Courier New, Courier, monospace;">vPC role : primary, operational secondary</span></div>
<span style="font-family: Courier New, Courier, monospace;">
<div>
Number of vPCs configured : 1 </div>
<div>
Peer Gateway : Disabled</div>
<div>
Dual-active excluded VLANs : -</div>
<div>
Graceful Consistency Check : Enabled</div>
<div>
Auto-recovery status : Disabled</div>
<div>
<br /></div>
<div>
vPC Peer-link status</div>
<div>
---------------------------------------------------------------------</div>
<div>
id Port Status Active vlans </div>
<div>
-- ---- ------ --------------------------------------------------</div>
<div>
1 Po1 up 1,10-11,13-14,65-67,70,84,86-88,92,94,96,98,100,10 </div>
<div>
3-104,114-118,120,122,130-133,200 </div>
<div>
<br /></div>
<div>
vPC status</div>
<div>
----------------------------------------------------------------------</div>
<div>
id Port Status Consistency Reason Active vlans</div>
<div>
-- ---- ------ ----------- ------ ------------</div>
<div>
8 Po8 up success success 1,10-11,13- </div>
<div>
14,65-67,70 </div>
<div>
,84,86-88,9 </div>
<div>
2,94,96,98, </div>
<div>
100,103-104 ....</div>
<div>
N7KA-AGG(config-vpc-domain)# </div>
<div>
<br /></div>
<div>
<br /></div>
<div>
<br /></div>
<div>
<div>
vPC domain id : 1 </div>
<div>
Peer status : <span style="background-color: lime;">peer adjacency formed ok </span> </div>
<div>
vPC keep-alive status : <span style="background-color: lime;">peer is alive</span> </div>
<div>
Configuration consistency status : success </div>
<div>
Per-vlan consistency status : success </div>
<div>
Type-2 consistency status : success </div>
<div>
vPC role : secondary, operational primary</div>
<div>
Number of vPCs configured : 1 </div>
<div>
Peer Gateway : Disabled</div>
<div>
Dual-active excluded VLANs : -</div>
<div>
Graceful Consistency Check : Enabled</div>
<div>
Auto-recovery status : Disabled</div>
<div>
<br /></div>
<div>
vPC Peer-link status</div>
<div>
---------------------------------------------------------------------</div>
<div>
id Port Status Active vlans </div>
<div>
-- ---- ------ --------------------------------------------------</div>
<div>
1 Po1 up 1,10-11,13-14,65-67,70,84,86-88,92,94,96,98,100,10 </div>
<div>
3-104,114-118,120,122,130-133,200 </div>
<div>
<br /></div>
<div>
vPC status</div>
<div>
----------------------------------------------------------------------</div>
<div>
id Port Status Consistency Reason Active vlans</div>
<div>
-- ---- ------ ----------- ------ ------------</div>
<div>
8 Po8 up success success 1,10-11,13- </div>
<div>
14,65-67,70 </div>
<div>
,84,86-88,9 </div>
<div>
2,94,96,98, </div>
<div>
100,103-104 ....</div>
<div>
N7KB-AGG(config-vpc-domain)# </div>
</div>
</span></div>
<div>
<div>
<br />
<div>
<span style="font-family: Courier New, Courier, monospace; font-size: xx-small;"><br /></span></div>
<div>
<span style="font-family: Times, Times New Roman, serif;"><br /></span></div>
<div>
<span style="font-family: Times, Times New Roman, serif;">Everything appears to be in order so let's get started with the tests.</span></div>
<h4>
<span style="font-family: Times, Times New Roman, serif;">Failures</span></h4>
<div>
<span style="font-family: Times, Times New Roman, serif;">The first failure is the the peer keep</span>-<span style="font-family: Times, 'Times New Roman', serif;">alive link. This link's purpose is to provide detection of dual active scenarios. The failure of this link will not impact the vPC environment. The message below is seen on both vPC peers.</span></div>
<div>
<span style="font-family: Times, Times New Roman, serif;"><br /></span></div>
<div>
<div>
<span style="font-family: Courier New, Courier, monospace;">N7KB-AGG(config-vpc-domain)# 2012 Oct 3 17:32:17.864 N7KB-AGG %$ VDC-3 %$ <span style="background-color: yellow;">%VPC-2-PEER_KEEP_ALIVE_RECV_FAIL</span>: In domain 1, VPC peer keep-alive receive has failed</span></div>
<div style="font-family: Times, 'Times New Roman', serif;">
<br /></div>
</div>
</div>
The second failure in this test is the peer link. When this link is failed following a failure of the peer keep-alive link both peer switches keep the vPCs/SVIs active and continue to forward actively. The peer switches cannot distinguish multiple link failures from a complete loss of the peer switch so to keep things moving vPCs/SVIs are left intact. This would also be the case for simultaneous failure of the peer link and peer keep-alive links.<br />
<br />
The output below show that the peer link and peer keep-alive link are both down, but the vPCs are up on the primary and secondary. At this point there is no communication between the two peer switches.<br />
<br />
<br />
<span style="font-family: Courier New, Courier, monospace;">vPC domain id : 1 </span><br />
<span style="font-family: Courier New, Courier, monospace;">Peer status : <span style="background-color: yellow;">peer link is down </span> </span><br />
<span style="font-family: Courier New, Courier, monospace;">vPC keep-alive status : <span style="background-color: yellow;">Suspended (Destination IP not reachable)</span></span><br />
<span style="font-family: Courier New, Courier, monospace;">Configuration consistency status : success </span><br />
<span style="font-family: Courier New, Courier, monospace;">Per-vlan consistency status : success </span><br />
<span style="font-family: Courier New, Courier, monospace;">Type-2 consistency status : success </span><br />
<span style="font-family: Courier New, Courier, monospace;">vPC role : primary </span><br />
<span style="font-family: Courier New, Courier, monospace;">Number of vPCs configured : 1 </span><br />
<span style="font-family: Courier New, Courier, monospace;">Peer Gateway : Disabled</span><br />
<span style="font-family: Courier New, Courier, monospace;">Dual-active excluded VLANs : -</span><br />
<span style="font-family: Courier New, Courier, monospace;">Graceful Consistency Check : Enabled</span><br />
<span style="font-family: Courier New, Courier, monospace;">Auto-recovery status : Disabled</span><br />
<span style="font-family: Courier New, Courier, monospace;"><br /></span>
<span style="font-family: Courier New, Courier, monospace;">vPC Peer-link status</span><br />
<span style="font-family: Courier New, Courier, monospace;">---------------------------------------------------------------------</span><br />
<span style="font-family: Courier New, Courier, monospace;">id Port Status Active vlans </span><br />
<span style="font-family: Courier New, Courier, monospace;">-- ---- ------ --------------------------------------------------</span><br />
<span style="font-family: Courier New, Courier, monospace;">1 Po1 down - </span><br />
<span style="font-family: Courier New, Courier, monospace;"><br /></span>
<span style="font-family: Courier New, Courier, monospace;">vPC status</span><br />
<span style="font-family: Courier New, Courier, monospace;">----------------------------------------------------------------------</span><br />
<span style="font-family: Courier New, Courier, monospace;">id Port Status Consistency Reason Active vlans</span><br />
<span style="font-family: Courier New, Courier, monospace;">-- ---- ------ ----------- ------ ------------</span><br />
<span style="font-family: Courier New, Courier, monospace;"><span style="background-color: lime;">8 Po8 up success success</span> 1,10-11,13- </span><br />
<span style="font-family: Courier New, Courier, monospace;"> 14,65-67,70 </span><br />
<span style="font-family: Courier New, Courier, monospace;"> ,84,86-88,9 </span><br />
<span style="font-family: Courier New, Courier, monospace;"> 2,94,96,98, </span><br />
<span style="font-family: Courier New, Courier, monospace;"> 100,103-104 ....</span><br />
<span style="font-family: Courier New, Courier, monospace;">N7KA-AGG(config-vpc-domain)# </span><br />
<span style="font-family: Courier New, Courier, monospace;"><br /></span>
<span style="font-family: Courier New, Courier, monospace;"><br /></span>
<span style="font-family: Courier New, Courier, monospace;"><br /></span>
<span style="font-family: Courier New, Courier, monospace;">vPC domain id : 1 </span><br />
<span style="font-family: Courier New, Courier, monospace;">Peer status :<span style="background-color: white;"> </span><span style="background-color: yellow;">peer link is down</span> </span><br />
<span style="font-family: Courier New, Courier, monospace;">vPC keep-alive status : <span style="background-color: yellow;">Suspended (Destination IP not reachable)</span></span><br />
<span style="font-family: Courier New, Courier, monospace;">Configuration consistency status : success </span><br />
<span style="font-family: Courier New, Courier, monospace;">Per-vlan consistency status : success </span><br />
<span style="font-family: Courier New, Courier, monospace;">Type-2 consistency status : success </span><br />
<span style="font-family: Courier New, Courier, monospace;">vPC role : secondary, operational primary</span><br />
<span style="font-family: Courier New, Courier, monospace;">Number of vPCs configured : 1 </span><br />
<span style="font-family: Courier New, Courier, monospace;">Peer Gateway : Disabled</span><br />
<span style="font-family: Courier New, Courier, monospace;">Dual-active excluded VLANs : -</span><br />
<span style="font-family: Courier New, Courier, monospace;">Graceful Consistency Check : Enabled</span><br />
<span style="font-family: Courier New, Courier, monospace;">Auto-recovery status : Disabled</span><br />
<span style="font-family: Courier New, Courier, monospace;"><br /></span>
<span style="font-family: Courier New, Courier, monospace;">vPC Peer-link status</span><br />
<span style="font-family: Courier New, Courier, monospace;">---------------------------------------------------------------------</span><br />
<span style="font-family: Courier New, Courier, monospace;">id Port Status Active vlans </span><br />
<span style="font-family: Courier New, Courier, monospace;">-- ---- ------ --------------------------------------------------</span><br />
<span style="font-family: Courier New, Courier, monospace;">1 Po1 down - </span><br />
<span style="font-family: Courier New, Courier, monospace;"><br /></span>
<span style="font-family: Courier New, Courier, monospace;">vPC status</span><br />
<span style="font-family: Courier New, Courier, monospace;">----------------------------------------------------------------------</span><br />
<span style="font-family: Courier New, Courier, monospace;">id Port Status Consistency Reason Active vlans</span><br />
<span style="font-family: Courier New, Courier, monospace;">-- ---- ------ ----------- ------ ------------</span><br />
<span style="font-family: Courier New, Courier, monospace;"><span style="background-color: lime;">8 Po8 up success success</span> 1,10-11,13- </span><br />
<span style="font-family: Courier New, Courier, monospace;"> 14,65-67,70 </span><br />
<span style="font-family: Courier New, Courier, monospace;"> ,84,86-88,9 </span><br />
<span style="font-family: Courier New, Courier, monospace;"> 2,94,96,98, </span><br />
<span style="font-family: Courier New, Courier, monospace;"> 100,103-104 ....</span><br />
<span style="font-family: Courier New, Courier, monospace;">N7KB-AGG(config-vpc-domain)# </span><br />
<h4>
Recovery</h4>
The order the links were restored in test#1 were peer keep-alive, then peer link. Restoring the links in version 5.2(5) showed no interruption to the traffic using a simple ping test from a downstream host. <br />
<i><span style="font-size: x-small;"><br /></span></i>
<i>NOTE: <u style="background-color: yellow;">Under version 5.1(3) the downstream client experienced an outage of between 25 - 60 seconds.</u></i><br />
<br />
<h4>
Impact</h4>
Ping test results - indicate that there were no drops in the pings while we performed all failures and also during the restores.<br />
<br />
<br />
<span style="font-family: Courier New, Courier, monospace;">---omitted---</span><br />
<span style="font-family: Courier New, Courier, monospace;">64 bytes from 10.65.1.5: icmp_seq=5982 ttl=253 time=9.597 ms</span><br />
<span style="font-family: Courier New, Courier, monospace;">64 bytes from 10.65.1.5: icmp_seq=5983 ttl=253 time=9.591 ms</span><br />
<span style="font-family: Courier New, Courier, monospace;">64 bytes from 10.65.1.5: icmp_seq=5984 ttl=253 time=9.587 ms</span><br />
<span style="font-family: Courier New, Courier, monospace;">64 bytes from 10.65.1.5: icmp_seq=5985 ttl=253 time=9.592 ms</span><br />
<span style="font-family: Courier New, Courier, monospace;">64 bytes from 10.65.1.5: icmp_seq=5986 ttl=253 time=9.61 ms</span><br />
<span style="font-family: Courier New, Courier, monospace;">64 bytes from 10.65.1.5: icmp_seq=5987 ttl=253 ^C</span><br />
<span style="font-family: Courier New, Courier, monospace;">--- 10.65.1.5 ping statistics ---</span><br />
<span style="font-family: Courier New, Courier, monospace;"><span style="background-color: lime;">6020 packets transmitted, 6020 packets received, 0.00% packet </span>loss</span><br />
<span style="font-family: Courier New, Courier, monospace;">round-trip min/avg/max = 0.685/9.218/71.57 ms</span><br />
<span style="font-family: Courier New, Courier, monospace;">SB-N5K-A# </span><br />
<h3>
<strong>Test #3 - </strong><span style="font-weight: normal;">Fail peer link, fail peer-keep alive, restore peer keep-alive, restore peer link</span></h3>
<h4>
<strong>Validate</strong></h4>
<br />
<span style="font-family: Courier New, Courier, monospace;">vPC domain id : 1 </span><br />
<span style="font-family: Courier New, Courier, monospace;">Peer status : peer adjacency formed ok </span><br />
<span style="font-family: Courier New, Courier, monospace;">vPC keep-alive status : peer is alive </span><br />
<span style="font-family: Courier New, Courier, monospace;">Configuration consistency status : success </span><br />
<span style="font-family: Courier New, Courier, monospace;">Per-vlan consistency status : success </span><br />
<span style="font-family: Courier New, Courier, monospace;">Type-2 consistency status : success </span><br />
<span style="font-family: Courier New, Courier, monospace;">vPC role : primary, operational secondary</span><br />
<span style="font-family: Courier New, Courier, monospace;">Number of vPCs configured : 1 </span><br />
<span style="font-family: Courier New, Courier, monospace;">Peer Gateway : Disabled</span><br />
<span style="font-family: Courier New, Courier, monospace;">Dual-active excluded VLANs : -</span><br />
<span style="font-family: Courier New, Courier, monospace;">Graceful Consistency Check : Enabled</span><br />
<span style="font-family: Courier New, Courier, monospace;">Auto-recovery status : Disabled</span><br />
<span style="font-family: Courier New, Courier, monospace;"><br /></span>
<span style="font-family: Courier New, Courier, monospace;">vPC Peer-link status</span><br />
<span style="font-family: Courier New, Courier, monospace;">---------------------------------------------------------------------</span><br />
<span style="font-family: Courier New, Courier, monospace;">id Port Status Active vlans </span><br />
<span style="font-family: Courier New, Courier, monospace;">-- ---- ------ --------------------------------------------------</span><br />
<span style="font-family: Courier New, Courier, monospace;">1 Po1 up 1,10-11,13-14,65-67,70,84,86-88,92,94,96,98,100,10 </span><br />
<span style="font-family: Courier New, Courier, monospace;"> 3-104,114-118,120,122,130-133,200 </span><br />
<span style="font-family: Courier New, Courier, monospace;"><br /></span>
<span style="font-family: Courier New, Courier, monospace;">vPC status</span><br />
<span style="font-family: Courier New, Courier, monospace;">----------------------------------------------------------------------</span><br />
<span style="font-family: Courier New, Courier, monospace;">id Port Status Consistency Reason Active vlans</span><br />
<span style="font-family: Courier New, Courier, monospace;">-- ---- ------ ----------- ------ ------------</span><br />
<span style="font-family: Courier New, Courier, monospace;">8 Po8 up success success 1,10-11,13- </span><br />
<span style="font-family: Courier New, Courier, monospace;"> 14,65-67,70 </span><br />
<span style="font-family: Courier New, Courier, monospace;"> ,84,86-88,9 </span><br />
<span style="font-family: Courier New, Courier, monospace;"> 2,94,96,98, </span><br />
<span style="font-family: Courier New, Courier, monospace;"> 100,103-104 ....</span><br />
<br />
<br />
<h4>
<span style="font-family: Times, Times New Roman, serif;">Failures</span></h4>
Tests 3 and 4 both fail the peer link first, then the peer keep-alive link. How the vPC system handles the two failures is different in these cases.<br />
<br />
In Tests 1 and 2 the failure of the peer keep-alive link followed by the peer link resulted in a dual active or split brain scenario where both sides remain active and forwarding traffic. In tests 3 and 4 the peer link is failed first which results in the SVIs/vPCs being shutdown on the secondary peer switch.<br />
<br />
When the peer link is failed the following message is logged:<br />
<br />
<br />
<span style="font-family: Courier New, Courier, monospace;">N7KA-AGG(config-vpc-domain)# </span><br />
<span style="font-family: Courier New, Courier, monospace;">N7KA-AGG(config-vpc-domain)# 2012 Oct 3 21:41:00.672 N7KA-AGG %$ VDC-3 %$ %VPC-2-VPC_SUSP_ALL_VPC: Peer-link going down, suspending all vPCs on secondary</span><br />
<br />
<br />
<br />
<span style="font-family: Courier New, Courier, monospace;">vPC domain id : 1 </span><br />
<span style="font-family: Courier New, Courier, monospace;">Peer status : <span style="background-color: yellow;">peer link is down </span> </span><br />
<span style="font-family: Courier New, Courier, monospace;">vPC keep-alive status : peer is alive </span><br />
<span style="font-family: Courier New, Courier, monospace;">Configuration consistency status : success </span><br />
<span style="font-family: Courier New, Courier, monospace;">Per-vlan consistency status : success </span><br />
<span style="font-family: Courier New, Courier, monospace;">Type-2 consistency status : success </span><br />
<span style="font-family: Courier New, Courier, monospace;">vPC role : primary, operational secondary</span><br />
<span style="font-family: Courier New, Courier, monospace;">Number of vPCs configured : 1 </span><br />
<span style="font-family: Courier New, Courier, monospace;">Peer Gateway : Disabled</span><br />
<span style="font-family: Courier New, Courier, monospace;">Dual-active excluded VLANs : -</span><br />
<span style="font-family: Courier New, Courier, monospace;">Graceful Consistency Check : Enabled</span><br />
<span style="font-family: Courier New, Courier, monospace;">Auto-recovery status : Disabled</span><br />
<span style="font-family: Courier New, Courier, monospace;"><br /></span>
<span style="font-family: Courier New, Courier, monospace;">vPC Peer-link status</span><br />
<span style="font-family: Courier New, Courier, monospace;">---------------------------------------------------------------------</span><br />
<span style="font-family: Courier New, Courier, monospace;">id Port Status Active vlans </span><br />
<span style="font-family: Courier New, Courier, monospace;">-- ---- ------ --------------------------------------------------</span><br />
<span style="font-family: Courier New, Courier, monospace;"><span style="background-color: yellow;">1 Po1 down</span> - </span><br />
<span style="font-family: Courier New, Courier, monospace;"><br /></span>
<span style="font-family: Courier New, Courier, monospace;">vPC status</span><br />
<span style="font-family: Courier New, Courier, monospace;">----------------------------------------------------------------------</span><br />
<span style="font-family: Courier New, Courier, monospace;">id Port Status Consistency Reason Active vlans</span><br />
<span style="font-family: Courier New, Courier, monospace;">-- ---- ------ ----------- ------ ------------</span><br />
<span style="font-family: Courier New, Courier, monospace;">8 Po8 <span style="background-color: yellow;">down</span> success success - </span><br />
<br />
<br />
The subsequent failure of the peer keep-alive link doesn't impact the current state of the vPC environment. In the current configuration without auto-recovery disabled the SVIs/vPCs are left down even during a dual failure. The down side of this is if you then lose the primary switch for any reason all traffic will be black holed until the vPC environment is restored.<br />
<br />
<br />
<span style="font-family: Courier New, Courier, monospace;">---omitted---</span><br />
<span style="font-family: Courier New, Courier, monospace;">Graceful Consistency Check : Enabled</span><br />
<span style="font-family: Courier New, Courier, monospace;">Auto-recovery status : <span style="background-color: yellow;">Disabled</span></span><br />
<span style="font-family: Courier New, Courier, monospace;">---omitted---</span><br />
<h4>
Recovery </h4>
The VPCs and SVIs were not restored until both the peer link and PkA links are restored.<br />
<h4>
Impact</h4>
Ping results show that only 2 requests were lost during all of the failures and restores.<br />
<br />
<span style="font-family: Courier New, Courier, monospace;">64 bytes from 10.65.1.5: icmp_seq=4942 ttl=253 time=9.588 ms</span><br />
<span style="font-family: Courier New, Courier, monospace;">64 bytes from 10.65.1.5: icmp_seq=4943 ttl=253 time=9.602 ms</span><br />
<span style="font-family: Courier New, Courier, monospace;">64 bytes from 10.65.1.5: icmp_seq=4944 ttl=253 time=9.576 ms</span><br />
<span style="font-family: Courier New, Courier, monospace;">64 bytes from 10.65.1.5: icmp_seq=4945 ttl=253 time=0.935 ms</span><br />
<span style="font-family: Courier New, Courier, monospace;">64 bytes from 10.65.1.5: icmp_seq=4946 ttl=253 time=0.759 ms</span><br />
<span style="font-family: Courier New, Courier, monospace;">64 bytes from 10.65.1.5: icmp_seq=4947 ttl=253^C</span><br />
<span style="font-family: Courier New, Courier, monospace;">--- 10.65.1.5 ping statistics ---</span><br />
<span style="background-color: lime; font-family: Courier New, Courier, monospace;">4997 packets transmitted, 4995 packets received, 0.04% packet loss</span><br />
<span style="font-family: Courier New, Courier, monospace;">round-trip min/avg/max = 0.655/9.22/68.86 ms</span><br />
<span style="font-family: Courier New, Courier, monospace;">SB-N5K-A# </span><br />
<h3>
Test #5 - <span style="font-weight: normal;">Fail peer link, fail peer keep-alive, restore peer link, restore peer keep-alive (<i>with auto-recovery enabled available in 5.2(1) )</i></span></h3>
I performed the same exact steps in test 5 as in test 3/4 to see the behavior of the vPC environment with the auto-recovery feature enabled. <br />
<h4>
Validate</h4>
Here is the configuration and validation that the environment is up and has the feature enabled.<br />
<br />
<span style="font-family: Courier New, Courier, monospace;">vpc domain 1</span><br />
<span style="font-family: Courier New, Courier, monospace;"> role priority 2000</span><br />
<span style="font-family: Courier New, Courier, monospace;"> peer-keepalive destination 192.168.99.9 source 192.168.99.10 vrf vpc-keepalive</span><br />
<span style="background-color: yellow; font-family: Courier New, Courier, monospace;"> auto-recovery</span><br />
<span style="font-family: Courier New, Courier, monospace;"><br /></span>
<span style="font-family: Courier New, Courier, monospace;">interface port-channel1</span><br />
<span style="font-family: Courier New, Courier, monospace;"> vpc peer-link</span><br />
<span style="font-family: Courier New, Courier, monospace;"><br /></span>
<span style="font-family: Courier New, Courier, monospace;">interface port-channel8</span><br />
<span style="font-family: Courier New, Courier, monospace;"> vpc 8</span><br />
<div>
<br /></div>
<br />
<br />
<span style="font-family: Courier New, Courier, monospace;">vPC domain id : 1 </span><br />
<span style="font-family: Courier New, Courier, monospace;">Peer status : peer adjacency formed ok </span><br />
<span style="font-family: Courier New, Courier, monospace;">vPC keep-alive status : peer is alive </span><br />
<span style="font-family: Courier New, Courier, monospace;">Configuration consistency status : success </span><br />
<span style="font-family: Courier New, Courier, monospace;">Per-vlan consistency status : success </span><br />
<span style="font-family: Courier New, Courier, monospace;">Type-2 consistency status : success </span><br />
<span style="font-family: Courier New, Courier, monospace;">vPC role : secondary, operational primary</span><br />
<span style="font-family: Courier New, Courier, monospace;">Number of vPCs configured : 1 </span><br />
<span style="font-family: Courier New, Courier, monospace;">Peer Gateway : Disabled</span><br />
<span style="font-family: Courier New, Courier, monospace;">Dual-active excluded VLANs : -</span><br />
<span style="font-family: Courier New, Courier, monospace;">Graceful Consistency Check : Enabled</span><br />
<span style="font-family: Courier New, Courier, monospace;"><span style="background-color: lime;">Auto-recovery status : Enabled (timeout = 240 </span>seconds)</span><br />
<span style="font-family: Courier New, Courier, monospace;"><br /></span>
<span style="font-family: Courier New, Courier, monospace;">vPC Peer-link status</span><br />
<span style="font-family: Courier New, Courier, monospace;">---------------------------------------------------------------------</span><br />
<span style="font-family: Courier New, Courier, monospace;">id Port Status Active vlans </span><br />
<span style="font-family: Courier New, Courier, monospace;">-- ---- ------ --------------------------------------------------</span><br />
<span style="font-family: Courier New, Courier, monospace;">1 Po1 up 1,10-11,13-14,65-67,70,84,86-88,92,94,96,98,100,10 </span><br />
<span style="font-family: Courier New, Courier, monospace;"> 3-104,114-118,120,122,130-133,200 </span><br />
<span style="font-family: Courier New, Courier, monospace;"><br /></span>
<span style="font-family: Courier New, Courier, monospace;">vPC status</span><br />
<span style="font-family: Courier New, Courier, monospace;">----------------------------------------------------------------------</span><br />
<span style="font-family: Courier New, Courier, monospace;">id Port Status Consistency Reason Active vlans</span><br />
<span style="font-family: Courier New, Courier, monospace;">-- ---- ------ ----------- ------ ------------</span><br />
<span style="font-family: Courier New, Courier, monospace;">8 Po8 up success success 1,10-11,13- </span><br />
<span style="font-family: Courier New, Courier, monospace;"> 14,65-67,70 </span><br />
<span style="font-family: Courier New, Courier, monospace;"> ,84,86-88,9 </span><br />
<span style="font-family: Courier New, Courier, monospace;"> 2,94,96,98, </span><br />
<span style="font-family: Courier New, Courier, monospace;"> 100,103-104 ....</span><br />
<span style="font-family: Courier New, Courier, monospace;">N7KB-AGG(config-vpc-domain)# </span><br />
<br />
<h4>
Failures</h4>
When the peer link is failed first the SVIs/vPCs are suspended on the vPC secondary switch and the following message is logged:<br />
<span style="font-family: 'Courier New', Courier, monospace;"><br /></span>
<span style="font-family: 'Courier New', Courier, monospace;">N7KA-AGG(config-vpc-domain)# 2012 Oct 3 21:49:35.730 N7KA-AGG %$ VDC-3 %$ %VPC-2-VPC_SUSP_ALL_VPC: Peer-link going down, suspending all vPCs on secondary</span><br />
<br />
The next step is to fail the peer keep-alive link and we see confirmation of this:<br />
<br />
<span style="font-family: Courier New, Courier, monospace;"><br /></span>
<span style="font-family: Courier New, Courier, monospace;">N7KA-AGG(config-vpc-domain)# 2012 Oct 3 21:50:34.931 N7KA-AGG %$ VDC-3 %$ %VPC-2-PEER_KEEP_ALIVE_RECV_FAIL: In domain 1, VPC peer keep-alive receive has failed</span><br />
<div>
<br /></div>
<div>
The main difference between test 4 and test 5 is that with the auto-recovery feature enabled a timer is started when peer keep-alive link fails following the peer link failure. The log messages look like this: </div>
<div>
<div>
<span style="font-family: Courier New, Courier, monospace;"><br /></span></div>
<div>
<span style="font-family: Courier New, Courier, monospace;">2012 Oct 3 21:54:52.952 N7KA-AGG %VPC-5-VPC_DELAY_SVI_BUP_TIMER_START: vPC restore, delay interface-vlan bringup timer started</span></div>
<div>
<span style="font-family: Courier New, Courier, monospace;">2012 Oct 3 21:55:02.955 N7KA-AGG %VPC-5-VPC_DELAY_SVI_BUP_TIMER_EXPIRED: vPC restore, delay interface-vlan bringup timer expired, reiniting interface-vlans</span></div>
<div>
<span style="font-family: Courier New, Courier, monospace;">2012 Oct 3 21:55:02.958 N7KA-AGG %VPC-5-VPC_RESTORE_TIMER_START: vPC restore timer started to reinit vPCs</span></div>
<div>
<span style="font-family: Courier New, Courier, monospace;">2012 Oct 3 21:55:32.961 N7KA-AGG %VPC-5-VPC_RESTORE_TIMER_EXPIRED: vPC restore timer expired, reiniting vPCs</span></div>
</div>
<div>
<br /></div>
<div>
Both the SVIs and the vPCs are brought back online on the secondary vPC peer during this dual failure. This will allow traffic to continue to flow in the event that following the dual failure you lost the primary switch as well. </div>
<br />
<br />
The vPC environment on the secondary will be in this state:<br />
<br />
<br />
<span style="font-family: Courier New, Courier, monospace;">vPC domain id : 1 </span><br />
<span style="font-family: Courier New, Courier, monospace;">Peer status : <span style="background-color: yellow;">peer link is down </span> </span><br />
<span style="font-family: Courier New, Courier, monospace;"> (peer-keepalive not operational, </span><br />
<span style="font-family: Courier New, Courier, monospace;"> peer never alive) </span><br />
<span style="font-family: Courier New, Courier, monospace;">vPC keep-alive status : <span style="background-color: yellow;">peer is not reachable through peer-keepalive</span></span><br />
<span style="font-family: Courier New, Courier, monospace;">Configuration consistency status : success </span><br />
<span style="font-family: Courier New, Courier, monospace;">Per-vlan consistency status : success </span><br />
<span style="font-family: Courier New, Courier, monospace;">Type-2 consistency status : success </span><br />
<span style="font-family: Courier New, Courier, monospace;">vPC role : primary </span><br />
<span style="font-family: Courier New, Courier, monospace;">Number of vPCs configured : 1 </span><br />
<span style="font-family: Courier New, Courier, monospace;">Peer Gateway : Disabled</span><br />
<span style="font-family: Courier New, Courier, monospace;">Dual-active excluded VLANs : -</span><br />
<span style="font-family: Courier New, Courier, monospace;">Graceful Consistency Check : Enabled</span><br />
<span style="font-family: Courier New, Courier, monospace;"><span style="background-color: lime;">Auto-recovery status : Enabled (timeout = 240 </span>seconds)</span><br />
<span style="font-family: Courier New, Courier, monospace;"><br /></span>
<span style="font-family: Courier New, Courier, monospace;">vPC Peer-link status</span><br />
<span style="font-family: Courier New, Courier, monospace;">---------------------------------------------------------------------</span><br />
<span style="font-family: Courier New, Courier, monospace;">id Port Status Active vlans </span><br />
<span style="font-family: Courier New, Courier, monospace;">-- ---- ------ --------------------------------------------------</span><br />
<span style="font-family: Courier New, Courier, monospace;">1 Po1 up - </span><br />
<span style="font-family: Courier New, Courier, monospace;"><br /></span>
<span style="font-family: Courier New, Courier, monospace;">vPC status</span><br />
<span style="font-family: Courier New, Courier, monospace;">----------------------------------------------------------------------</span><br />
<span style="font-family: Courier New, Courier, monospace;">id Port Status Consistency Reason Active vlans</span><br />
<span style="font-family: Courier New, Courier, monospace;">-- ---- ------ ----------- ------ ------------</span><br />
<span style="font-family: Courier New, Courier, monospace;">8 Po8 up success <span style="background-color: yellow;">Type checks were bypassed</span> 1,10-11,13- </span><br />
<span style="font-family: Courier New, Courier, monospace;"> <span style="background-color: yellow;">for the vPC</span> 14,65-67,70 </span><br />
<span style="font-family: Courier New, Courier, monospace;"> ,84,86-88,9 </span><br />
<span style="font-family: Courier New, Courier, monospace;"> 2,94,96,98, </span><br />
<span style="font-family: Courier New, Courier, monospace;"> 100,103-104 ....</span><br />
<span style="font-family: Courier New, Courier, monospace;">N7KA-AGG(config-vpc-domain)# </span><br />
<h4>
Recovery</h4>
<div>
The peer keep-alive and peer link restore order is irrelevant as both are required to restore the system to normal operations.</div>
<h4>
Impact</h4>
Although not extremely bad, the recovery of the links with auto-recovery enabled was the most impactful with about 10-15 seconds of service interruption experienced from the downstream device.<br />
<br />
<br />
<span style="font-family: Courier New, Courier, monospace;">64 bytes from 10.65.1.5: icmp_seq=6335 ttl=253 time=9.599 ms</span><br />
<span style="font-family: Courier New, Courier, monospace;">64 bytes from 10.65.1.5: icmp_seq=6336 ttl=253 time=9.596 ms</span><br />
<span style="font-family: Courier New, Courier, monospace;">64 bytes from 10.65.1.5: icmp_seq=6337 ttl=253 time=9.591 ms</span><br />
<span style="font-family: Courier New, Courier, monospace;">64 bytes from 10.65.1.5: icmp_seq=6338 ttl=253 time=9.603 ms</span><br />
<span style="font-family: Courier New, Courier, monospace;">64 bytes from 10.65.1.5: icmp_seq=6339 ttl=253 t^C</span><br />
<span style="font-family: Courier New, Courier, monospace;">--- 10.65.1.5 ping statistics ---</span><br />
<span style="background-color: yellow; font-family: Courier New, Courier, monospace;">6349 packets transmitted, 6336 packets received, 0.20% packet loss</span><br />
<span style="font-family: Courier New, Courier, monospace;">round-trip min/avg/max = 0.643/9.245/73.496 ms</span><br />
<span style="font-family: Courier New, Courier, monospace;">SB-N5K-A# </span><br />
<h2>
<strong>Summary</strong></h2>
<div>
If either the peer link and the peer keep-alive links fail simultaneously or the peer keep-alive fails followed by a peer link failure you will have and active/active situation. </div>
<div>
<br /></div>
<div>
If the peer link fails first then the secondary peer switch will shut down the vPCs/SVIs to protect against a split brain situation. </div>
<div>
<br /></div>
<div>
If the peer link fails first, auto-recovery is enabled, then the peer keep-alive link fails, the vPCs/SVIs will be brought back up following the expiration of the related timers.</div>
<h2>
<strong>References and Further Reading</strong></h2>
<b>Auto-Recovery feature explaination</b><br />
<a href="https://supportforums.cisco.com/docs/DOC-24939">https://supportforums.cisco.com/docs/DOC-24939</a><br />
<br />
<b>vPC Design Guide</b><br />
<a href="http://www.cisco.com/en/US/prod/collateral/switches/ps9441/ps9670/C07-572835-00_NX-OS_vPC_DG.pdf">http://www.cisco.com/en/US/prod/collateral/switches/ps9441/ps9670/C07-572835-00_NX-OS_vPC_DG.pdf</a></div>
Anonymoushttp://www.blogger.com/profile/12415082923436051790noreply@blogger.com2tag:blogger.com,1999:blog-9055958418130504123.post-29099391173194181842012-09-16T19:07:00.000-07:002012-10-24T14:51:08.110-07:00SNMPv3 Configuration Basics on IOSI was asked to assemble the configuration for SNMPv3 to be applied to our demo center. The requirements were that we use SNMPv3 with authPriv security level. Configuring SNMP communities (version 2c) is very straight forward and also very well known. The concerns that I have heard about SNMPv3 is that it is difficult to configure. I am not convinced so lets take a look.<br />
<br />
<h3 style="border-bottom: medium none; border-left: medium none; border-right: medium none; border-top: medium none;">
A basic background...</h3>
<a href="http://www.blogger.com/blogger.g?blogID=9055958418130504123" imageanchor="1" style="clear: right; cssfloat: right; float: right; margin-bottom: 1em; margin-left: 1em;"></a>SNMPv3 is based on a USM (User Security Model) meaning all security levels associated with the solution are based on the creation of an SNMP user in one form or another. OK. So what are the security levels and what do they mean?<br />
<br />
<ol>
<li style="border-bottom: medium none; border-left: medium none; border-right: medium none; border-top: medium none;"><strong>noAuthNoPriv</strong> - This security level simply means that there is no authentication password exchanged and the communications between the agent and the server are not encrypted. The SNMP requests are authorized based on a simple username string match. </li>
<li style="border-bottom: medium none; border-left: medium none; border-right: medium none; border-top: medium none;"><strong>authNoPriv</strong> - password authentication is used based on either MD5 or SHA hash authentication and no encryption is used for communications between the devices.</li>
<li><strong>authPriv </strong>- authentication is hash based the same as #2 but the communications between the agent and the server are also encrypted. the encryption of the traffic between the two nodes will required a crypto software image on the devices. </li>
</ol>
That seems pretty simple.<br />
<br />
The SNMP user provides the mechanism for authenticating the session where the SNMP group is utilized to control what the user can access.<br />
<br />
SNMP views can be created to include or exclude various portions of the MIBs. These SNMP views are then associated with the SNMP groups. Users are associated with groups. <br />
<br />
<br />
The security level noAuthNoPriv is actually very similar to the communities that we are used to already. They use the simple string match so the username is analogous to the community in this case. You can restrict who can access the device with that username via access lists just like communities and what they can access with customized SNMP views.<br />
<br />
So how is v3 better? The enhancements are evident in the other security levels (authNoPriv and authPriv) that add a hash based password exchange and potentially encrypt the communications.<br />
<br />
The configurations for SNMPv3 are actually very simple and straight forward. I will demonstrate the basic configurations and also how you can easily validate what you have done to ensure all is working as you intended.<br />
<br />
<h3>
Environment </h3>
I will utilize a simple single router in GNS3 connected to by local machine via a loopback interface. Validation tests will utilize a simple SNMP get request using snmpwalk and the OID = .1.3.6.1.4.1.9.3.6.5.0 which will display the IOS version information for the router.<br />
<br />
<table align="center" cellpadding="0" cellspacing="0" class="tr-caption-container" style="margin-left: auto; margin-right: auto; text-align: center;"><tbody>
<tr><td><img alt="basic-net-topology" class="" height="400" id="blogsy-1347764827435.166" src="data:image/png;base64,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" width="400" /></td></tr>
<tr><td class="tr-caption" style="font-size: 13px;">Basic Network Configuration<br />
<div>
<br /></div>
</td></tr>
</tbody></table>
<em>Note: Syntax will vary from platform to platform by the concepts will remain the same.</em><br />
<br />
<br />
<h3>
Let's Go</h3>
<h4>
noAuthNoPriv</h4>
Steps:<br />
<br />
<ol>
<li>Create an SNMPv3 Group</li>
<li>Create an SNMPv3 User</li>
<li>Validate noAuthNoPriv</li>
</ol>
<span style="font-family: "Courier New",Courier,monospace;"><span style="font-family: Times,"Times New Roman",serif;">Here are the router commands that I entered:</span> </span><br />
<br />
<span class="Apple-style-span" style="font-family: 'Courier New';">snmp-server group noAuthNoPriv v3 noauth</span><br />
<br />
<span class="Apple-style-span" style="font-family: 'Courier New';"><span style="font-family: "Courier New",Courier,monospace;">snmp-server user noAuthNoPriv noAuthNoPriv v3 </span><br />
</span><br />
<span style="font-family: "Courier New",Courier,monospace;"></span><span style="font-family: "Courier New",Courier,monospace;"></span><span style="font-family: "Courier New",Courier,monospace;"><span style="font-family: Times,"Times New Roman",serif;">The group parameters used specify the name of the group (</span></span><span class="Apple-style-span" style="font-family: 'Courier New';">noAuthNoPriv</span>), the security model (<span class="Apple-style-span" style="font-family: 'Courier New';">v3</span>) and the security level (<span class="Apple-style-span" style="font-family: 'Courier New';">noauth</span>).<br />
<br />
The user command then specifies the username (<span class="Apple-style-span" style="font-family: 'Courier New';">noAuthNoPriv</span>), the group name to associate this user with (<span class="Apple-style-span" style="font-family: 'Courier New';">noAuthNoPriv</span>) and the security model (<span class="Apple-style-span" style="font-family: 'Courier New';">v3</span>).<br />
<br />
Here is the snmpwalk command used for validation:<br />
<br />
<span style="font-family: "Courier New",Courier,monospace;"><span style="font-family: Times,"Times New Roman",serif;"><span style="font-family: "Courier New", Courier, monospace;"><span class="Apple-style-span" style="font-family: 'Courier New';">snmpwalk -v3 -u noAuthNoPriv 10.254.254.253 .1.3.6.1.4.1.9.3.6.5.0</span></span></span></span><br />
<br />
<br />
<div style="text-align: left;">
<em><br />
</em></div>
<div style="text-align: left;">
<em><u>Command line switches </u></em></div>
<div style="text-align: left;">
<em>-u = username</em></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEinCna1D0ryexDpYyhbUHsFokcGzf_M6zWBt0ijBn5-UtACOFxXZcAbY0Ay4IS-kLH3XVmUxTkiFUJbqP8H_KN-gTCCha8tVcbcgzhEb7b087pN095H6O6zd9_uWbmsz-7eGAA-DMv2qoA/s1600/snmpv3-basic-noAuthNoPriv-walk.gif" imageanchor="1" style="margin-left: 1em; margin-right: 1em;" target=""><img alt="" class="" height="122" id="blogsy-1347764827449.384" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEinCna1D0ryexDpYyhbUHsFokcGzf_M6zWBt0ijBn5-UtACOFxXZcAbY0Ay4IS-kLH3XVmUxTkiFUJbqP8H_KN-gTCCha8tVcbcgzhEb7b087pN095H6O6zd9_uWbmsz-7eGAA-DMv2qoA/s1600/snmpv3-basic-noAuthNoPriv-walk.gif" width="574" /></a></div>
<h4>
AuthNoPriv</h4>
<ol>
<li>Create an SNMPv3 Group</li>
<li>Create an SNMPv3 User</li>
<li>Validate authNoPriv </li>
</ol>
<span style="font-family: Times,"Times New Roman",serif;">Here are the commands that I entered on the router: </span><br />
<br />
<span class="Apple-style-span" style="font-family: 'Courier New';"><span style="font-family: "Courier New",Courier,monospace;">snmp-server group authNoPriv v3 auth</span><br />
<span style="font-family: "Courier New",Courier,monospace;">snmp-server user authNoPriv authNoPriv v3 auth md5 test1234</span></span><br />
<br />
<span style="font-family: "Courier New",Courier,monospace;"><span style="font-family: Times, "Times New Roman", serif;">The group command used here has the same commandline parameters as the first example, but we have changed from <span class="Apple-style-span" style="font-family: 'Courier New';">noauth</span> to <span class="Apple-style-span" style="font-family: 'Courier New';">auth</span>. </span></span>This means that the users associated with this group will be required to authenticate before accessing the permitted MIBs.<br />
<br />
<span style="font-family: "Courier New",Courier,monospace;"><span style="font-family: Times, "Times New Roman", serif;">The additional options on the username specify that <span class="Apple-style-span" style="font-family: 'Courier New';">auth</span>entication protocol <span class="Apple-style-span" style="font-family: 'Courier New';">MD5</span> will be used and the password of <span class="Apple-style-span" style="font-family: 'Courier New';">test1234</span>. Passwords of less an 8 characters will be rejected </span></span>during the snmp request although the command would be allowed in the CLI.<br />
<br />
<span style="font-family: "Courier New",Courier,monospace;"><span style="font-family: Times, "Times New Roman", serif;">Here is the snmpwalk validation command that I will use to test: </span></span><br />
<span style="font-family: "Courier New",Courier,monospace;"><span style="font-family: Times, "Times New Roman", serif;"><span class="Apple-style-span" style="font-family: 'Courier New';"><span style="font-family: "Courier New", Courier, monospace;">snmpwalk -v3 -u authNoPriv -A test1234 -l authNoPriv -a MD5 10.254.254.253 .1.3.6.1.4.1.9.3.6.5.0</span></span></span></span><span style="font-family: "Courier New",Courier,monospace;"><span style="font-family: Times, "Times New Roman", serif;"><span class="Apple-style-span" style="font-family: 'Courier New';"> </span></span> </span><br />
<br />
<span class="Apple-style-span" style="font-family: 'Courier New';"><em style="font-style: italic; font-weight: normal;"><u>Command line switches </u></em><br />
</span><em><span style="font-family: "Courier New",Courier,monospace;">-u = username</span><br />
<span style="font-family: "Courier New",Courier,monospace;">-A = password</span><br />
<span style="font-family: "Courier New",Courier,monospace;">-l = security level</span><br />
<span style="font-family: "Courier New",Courier,monospace;">-a = authentication protocol</span></em><br />
<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhigH7WCvS1fxOT0amw2P8hu2mLe3YcDcU6Y-JGBCplFL1XX3hGFqF_RFhVyI5P4sS0DkhPLUSHs96ugbjOHTUr-c1TcteZwCIJkfjzuqixSr4NrsZSof2hwhSgNNzQrA7cmsRYQ4bZtZw/s1600/snmpv3-basic-authNoPriv-walk.gif" imageanchor="1" style="margin-left: 1em; margin-right: 1em;" target=""><img alt="" class="" height="167" id="blogsy-1347764827507.6787" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhigH7WCvS1fxOT0amw2P8hu2mLe3YcDcU6Y-JGBCplFL1XX3hGFqF_RFhVyI5P4sS0DkhPLUSHs96ugbjOHTUr-c1TcteZwCIJkfjzuqixSr4NrsZSof2hwhSgNNzQrA7cmsRYQ4bZtZw/s1600/snmpv3-basic-authNoPriv-walk.gif" width="552" /></a></div>
<strong> Success!</strong><br />
<br />
<h4 style="border-bottom: medium none; border-left: medium none; border-right: medium none; border-top: medium none;">
authPriv</h4>
<ol>
<li style="border-bottom: medium none; border-left: medium none; border-right: medium none; border-top: medium none;">Create an SNMPv3 Group</li>
<li style="border-bottom: medium none; border-left: medium none; border-right: medium none; border-top: medium none;">Create an SNMPv3 User</li>
<li style="border-bottom: medium none; border-left: medium none; border-right: medium none; border-top: medium none;">Validate authPriv </li>
</ol>
Here are the router commands that were entered:<br />
<br />
<span style="font-family: "Courier New",Courier,monospace;"><span class="Apple-style-span" style="font-family: 'Courier New';"> snmp-server group authPriv v3 priv</span></span><br />
<br />
<span class="Apple-style-span" style="font-family: 'Courier New';">snmp-server user authPriv authPriv v3 auth md5 test1234 priv des56 test1234</span><br />
<br />
This final example is using the most secure security model and level. The group command option, <span class="Apple-style-span" style="font-family: 'Courier New';">priv</span>, indicates the authPriv security level.<br />
<br />
The new options on the user command here configure this user for <span class="Apple-style-span" style="font-family: 'Courier New';">priv</span> security level with <span class="Apple-style-span" style="font-family: 'Courier New';">des56</span> encryption and a passphrase of <span class="Apple-style-span" style="font-family: 'Courier New';">test1234</span>. This additional configuration is what requires encryption of the messages between the SNMP agent and management station.<br />
<br />
Here is the snmpwalk command used for validation:<br />
<br />
<br />
<span style="font-family: "Courier New",Courier,monospace;"><span class="Apple-style-span" style="font-family: 'Courier New';">snmpwalk -v3 -u authPriv -A test1234 -l authPriv -a MD5 -x DES -X test1234 10.254.254.253 .1.3.6.1.4.1.9.3.6.5.0</span></span><br />
<br />
<em><em style="font-style: italic; font-weight: normal;"><u>Command line switches </u></em><br />
</em><br />
<br />
<em>-u = username<br />
-A = password<br />
-l = security level<br />
-a = authentication protocol<br />
-x = encryption protocol<br />
-X = privacy passphrase used for encryption </em><br />
<br />
<br />
<div class="separator" style="border-bottom: medium none; border-left: medium none; border-right: medium none; border-top: medium none; clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEisv-J8NUNmfhvifUqYCMiQ59HYmToIgsRX2B2A3r5TJmL7v-xT_WZ836LiO8mBMMZKNYt4g7IuVIOYyLHkRUy77ZqzCbU0SaNbyEHkv9k57YGYxuUiH_Z-knlyybc9vrHObrHY5J6UdAs/s1600/snmpv3-basic-authPriv-walk.gif" imageanchor="1" style="margin-left: 1em; margin-right: 1em;" target=""><img alt="" class="" height="111" id="blogsy-1347764827451.4028" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEisv-J8NUNmfhvifUqYCMiQ59HYmToIgsRX2B2A3r5TJmL7v-xT_WZ836LiO8mBMMZKNYt4g7IuVIOYyLHkRUy77ZqzCbU0SaNbyEHkv9k57YGYxuUiH_Z-knlyybc9vrHObrHY5J6UdAs/s1600/snmpv3-basic-authPriv-walk.gif" width="530" /></a></div>
<strong> Success!</strong><br />
<br />
<strong>Conclusion </strong><br />
<br />
Configuring SNMPv3 versus SNMPv2c is highly recommended due the increased security capabilities. Since the configurations are very straight forward, there is no reason not to. <br />
<br />
<strong></strong><br />
<a name='more'></a><br />
<br />
<br />
<strong>Additional Reading</strong><br />
<br />
http://www.cisco.com/en/US/docs/ios-xml/ios/snmp/configuration/12-4t/nm-snmp-cfg-snmp-support.html<br />
<br />
http://tools.cisco.com/Support/SNMP/do/BrowseOID.do?local=en<br />
<br />
http://www.net-snmp.org/docs/man/snmpwalk.html<br />
<br />Anonymoushttp://www.blogger.com/profile/12415082923436051790noreply@blogger.com8