Please enable JavaScript.

Coggle requires JavaScript to display documents.

day 3 - Coggle Diagram

- - - - https://www.cisco.com/c/en/us/solutions/enterprise-networks/next-generation-encryption/index.html
- - - - Outbound
        
        Weight, local preference
      - Inbound
        
        Prepend AS path to make it less prefered
        
        Also use MED
        
        Not recommended
        
        It is weak metric
  - - - 0: reserved.
        
        1-64.495: public AS numbers.
        
        64.496 – 64.511 – reserved to use in documentation.
        
        64.512 – 65.534 – private AS numbers.
        
        65.535 – reserved.
  - - - Well-known mandatory: Must be recognized by all BGP routers, present in all BGP updates, and passed on to other BGP routers. For example, AS path, origin, and next hop.
      - Well-known discretionary: Must be recognized by all BGP routers and passed on to other BGP routers but need not be present in an update, for example, local preference.
      - Optional transitive: Might or might not be recognized by a BGP router but is passed on to other BGP routers. If not recognized, it is marked as partial, for example, aggregator, community.
      - Optional nontransitive: Might or might not be recognized by a BGP router and is not passed on to other routers, for example, Multi-Exit Discriminator (MED), originator ID.
- - - - Multipoint GRE (mGRE) tunnel interface: Allows a single GRE interface to support multiple IPsec tunnels, simplifying the size and complexity of the configuration.
      - ● Dynamic discovery of IPsec tunnel endpoints and crypto profiles: Eliminates the need to configure static crypto maps defining every pair of IPsec peers, further simplifying the configuration.
      - ● NHRP: Allows spokes to be deployed with dynamically assigned public IP addresses (i.e., behind an ISP’s router). The hub maintains an NHRP database of the public interface addresses of the each spoke. Each spoke registers its real address when it boots; when it needs to build direct tunnels with other spokes, it queries the NHRP database for real addresses of the destination spokes.
      - Features and Benefits
- - - - pre-empt
        
        without tracking, only configure on router with higher priority
        
        Need to enable on both side if enable tracking
      - traffic flow
        
        when PC want to communicate intervlan, then it will ARP for router IP
        
        Will be ARP GW Virtual IP
        
        Will be respond with virtual MAC address when receive ARP request from client
        
        Virtual MAC address last 2 digit is derived from HSRP group number
      - hello timer
        
        Hello time 3 sec, hold time 10 sec.
  - - - this is refer to IP address owner
    - - Pre-empt is on by default
      - Master router forward traffic
      - slave router is the backup
      - Priority, authentication, tracking
    - - Hello timer 1 second, hold time 3 seconds.
- - - - ! private IP translate to 1 public IP
      - For servers
    - - Many private IP will be translated to many public IP
    - - Many private IP translate to same public IP
      - you can use public IP on interface connecting to SIP
      - For internal users
    - - process
        
        routing
        
        NAT
        
        routing
      - traditional process
        
        routing
        
        NAT