Table Of Contents
Outputs of the show running-config Command
Base Configuration Viewed at P3
Initial Network Configuration Viewed on P3
Summary of the Fully Configured Network
Cisco IOS XR Network Examples
This document shows sample configurations for a network that is running Release 3.2 of the Cisco IOS XR software on routers in the network core. This document contains the following sections:
•
Outputs of the show running-config Command, for:
–
Base configuration
–
With interfaces
–
With security
–
IS-IS
–
OSPF
–
iBGP
–
Multicast
–
Full configuration
Changes to This Document
Table 1 Changes to This Document
Revision Date Change SummaryOL-10361-01
April 2006
Initial release of this document.
Topology Diagrams
The examples in this document begin with the network topology illustrated in Figure 1. This network has six routers in the core. A core router could be a Cisco CRS-1 router or a Cisco 12000 Series Router, but all the core routers in this document are Cisco 12000 Series Routers. In Figure 1, the core router numbers are P1-P6. The network also contains edge routers labeled PE1-PE6.
In Figure 1, the topology diagram shows Packet-over-SONET/SDH (POS) interfaces.
Figure 1 Topology with POS Interfaces
In Figure 2, the topology diagram shows the added IP addresses and loopback0 addresses. The management network is 172.21.116.0/26, and 172.21.116.1 is a gateway off the management network.
Figure 2 Topology with Addresses and Loopback0s Added
The sections that follow include tables that list the values for POS interface IDs, IP addresses, and so on.
Address Tables
The tables in this section list the following types of addresses:
•
Management Ethernet interfaces
•
Loopback0 addresses
•
Core routers
•
Aggregation routers
•
Loopback addresses
•
POS IDs and IP addresses
•
Intermediate System-to-Intermediate System (IS-IS) Network Services Access Point Addresses
The Management Ethernet addresses for the core routers appear in Table 2.
The addresses of the Management Ethernet interfaces on the aggregation routers appear in Table 3.
The Loopback0 address for each router appears in Table 4.
The POS interface IDs and IP addresses for the core routers appear in Table 5.
The POS interface IDs and IP addresses for the aggregation routers appear in Table 6.
The IS-IS network services access point (NSAP) addresses for the aggregation routers appear in Table 7.
Outputs of the show running-config Command
This section contains the show running-config output from the core router designated P3. (The form for the show running-config command typically is abbreviated to show run.) This section introduces progressive states of the network before the various protocols are enabled and then shows the network with after the protocols are added. These introductory descriptions have three parts:
•
Base configuration
•
Initial configuration of interfaces
•
Security efforts
Base Configuration Viewed at P3
This section contains the show running-config output for the base configuration.
RP/0/0/CPU0:P3# show running-confighostname P3interface MgmtEth0/0/CPU0/0!interface MgmtEth0/0/CPU0/1!interface MgmtEth0/0/CPU0/2!interface MgmtEth0/1/CPU0/0!interface MgmtEth0/1/CPU0/1!interface MgmtEth0/1/CPU0/2!interface POS0/3/0/0!interface POS0/3/0/1!interface POS0/3/0/2!interface POS0/4/0/0!endInitial Network Configuration Viewed on P3
The initial network configuration tasks involve the configuration of the following:
•
Data and time
•
Management Ethernet interfaces
•
Virtual IP addresses (IPv4), consisting of:
–
172.21.116.12 on P1
–
172.21.116.17 on P2
–
172.21.116.22 on P3
–
172.21.116.27 on P4
–
172.21.116.32 on P5
–
172.21.116.37 on P6
•
Loopback0 addresses
•
POS interfaces
The initial network configuration displayed by the show running-config command and viewed at router P3 (172.21.116.22) shows Management Ethernet interfaces, POS interfaces, and IP addresses.
RP/0/0/CPU0:P3# show runhostname P3telnet ipv4 server max-servers 5domain ipv4 host p1 172.21.116.12domain ipv4 host p2 172.21.116.17domain ipv4 host p4 172.21.116.27domain ipv4 host p5 172.21.116.32domain ipv4 host p6 172.21.116.37ipv4 virtual address 172.21.116.22 255.255.255.192interface loopback0ipv4 address 100.10.20.3 255.255.255.255!interface MgmtEth0/0/CPU0/0ipv4 address 172.21.116.20 255.255.255.192!interface MgmtEth0/0/CPU0/1!interface MgmtEth0/0/CPU0/2!interface MgmtEth0/1/CPU0/0ipv4 address 172.21.116.21 255.255.255.192!interface MgmtEth0/1/CPU0/1!interface MgmtEth0/1/CPU0/2!interface POS0/3/0/0ipv4 address 142.50.4.3 255.255.255.0!interface POS0/3/0/1ipv4 address 142.50.24.3 255.255.255.0!interface POS0/3/0/2ipv4 address 142.50.12.3 255.255.255.0!interface POS0/4/0/0ipv4 address 142.50.16.3 255.255.255.0!controller SONET0/3/0/0!controller SONET0/3/0/1!controller SONET0/3/0/2!controller SONET0/4/0/0!route ipv4 0.0.0.0/0 172.21.116.1endSecurity Added on the Router
This section contains show running-config output after you add task groups, user groups, users, passwords, and the access control lists (ACLs) named blockacl and blockac2. Configuring task groups and user groups establishes access rights and operational capabilities for individual users, and each user needs a password before he or she can be authorized by the system to log in.
Note
At this point in the configuration example, all POS interfaces have been addressed.
RP/0/0/CPU0:P3# show runhostname P3logging consoletelnet ipv4 server max-servers 6domain ipv4 host p1 172.21.116.12domain ipv4 host p2 172.21.116.17domain ipv4 host p4 172.21.116.27domain ipv4 host p5 172.21.116.32domain ipv4 host p6 172.21.116.37taskgroup igpadmintask write ribtask write isistask write ospf!taskgroup routeadmintask write bgpinherit taskgroup igpadmin!usergroup igp_admintaskgroup igpadmin!usergroup route_admintaskgroup routeadmin!username raoulpassword 7 030F5E05group igp_admin!username dukegroup route_admin!ipv4 virtual address 172.21.116.22 255.255.255.192ipv4 access-list blockacl100 deny ip 134.1.1.0 0.0.0.255 any200 deny ip 134.1.2.0 0.0.0.255 any300 deny ip 134.1.3.0 0.0.0.255 any400 deny ip 134.1.4.0 0.0.0.255 any500 deny ip 134.1.5.0 0.0.0.255 any550 deny ip 134.1.6.0 0.0.0.255 any600 deny ip 135.1.5.0 0.0.0.255 any700 deny ip 135.1.4.0 0.0.0.255 any800 deny ip 135.1.3.0 0.0.0.255 any900 deny ip 135.1.2.0 0.0.0.255 any1000 deny ip 135.1.1.0 0.0.0.255 any1100 deny ip 136.1.1.0 0.0.0.255 any1200 deny ip 136.1.2.0 0.0.0.255 any1300 deny ip 136.1.3.0 0.0.0.255 any1400 deny ip 136.1.4.0 0.0.0.255 any1500 permit ip any any!ipv4 access-list blockacl2100 deny ip 134.1.1.0 0.0.0.255 any200 deny ip 134.1.2.0 0.0.0.255 any300 deny ip 134.1.3.0 0.0.0.255 any400 deny ip 134.1.4.0 0.0.0.255 any500 deny ip 134.1.5.0 0.0.0.255 any550 deny ip 134.1.6.0 0.0.0.255 any600 deny ip 135.1.5.0 0.0.0.255 any700 deny ip 135.1.4.0 0.0.0.255 any800 deny ip 135.1.3.0 0.0.0.255 any900 deny ip 135.1.2.0 0.0.0.255 any1000 deny ip 135.1.1.0 0.0.0.255 any1100 deny ip 136.1.1.0 0.0.0.255 any1200 deny ip 136.1.2.0 0.0.0.255 any1300 deny ip 136.1.3.0 0.0.0.255 any1400 deny ip 136.1.4.0 0.0.0.255 any1500 permit ip any any![Repeated show running-config output deleted.]
endIS-IS
This section contains the show run router isis output on P3 with IS-IS configured. A user in the task group named igpadmin has permission to activate the protocols Routing Information Base (RIB), IS-IS, and OSPF.
RP/0/0/CPU0:P3# show run router isisrouter isis labis-type level-1net 49.0001.0000.0000.0003.00nsf ietfinterface Loopback0passiveaddress-family ipv4 unicast!!interface POS0/3/0/1hello-password text encrypted 05080F1C2243address-family ipv4 unicast!!interface POS0/3/0/2hello-password text encrypted 01100F175804address-family ipv4 unicast!!interface POS0/4/0/0hello-password text encrypted 030752180500address-family ipv4 unicastOSPF
This section contains the show run router ospf output on P3 with OSPF configured. For the OSPF instance 6000, the following items are configured:
•
Nonstop Forwarding (NSF).
•
Its inclusion in area 0.
•
All three interfaces for router P3 (as seen in Figure 1).
•
Authentication by Message Digest Algorithm 5 (MD5). Encrypted password is 01100f175804.
•
Loopback interface configured in the same area as passive.
RP/0/0/CPU0:P3# show run router ospfrouter ospf 60000router-id Loopback0nsf ietfarea 0authentication message-digestmessage-digest-key 1 md5 encrypted 01100F175804interface Loopback0passive enable!interface POS0/3/0/1!interface POS0/3/0/2!interface POS0/4/0/0iBGP
This section contains the show run router ibgp output for the items on P3 that have been configured for BGP instance 65000. The configuration for BGP instance 65000 includes the following items:
•
The address family is IPv4 unicast.
•
A neighbor group with the name "internal" is configured.
•
The encrypted version of the password for a peering session between these neighbors is displayed as 030752180500.
•
The remote AS identifier is 6500 (equals the local AS).
•
The update source in this neighbor group is each router's loopback address.
•
The ASCII descriptions have the format "pod-n," where n can be 1, 2, 4, 5, or 6.
RP/0/0/CPU0:P3# show run router ibgprouter bgp 65000bgp router-id Loopback0address-family ipv4 unicast!neighbor-group internalremote-as 65000password encrypted 030752180500update-source Loopback0address-family ipv4 unicast!!neighbor 100.10.20.1use neighbor-group internaldescription pod-1!neighbor 100.10.20.2use neighbor-group internaldescription pod-2!neighbor 100.10.20.4use neighbor-group internaldescription pod-4!neighbor 100.10.20.5use neighbor-group internaldescription pod-5!neighbor 100.10.20.6use neighbor-group internaldescription pod-6!Multicast
This section shows the running configuration with multicast configured on P3. It shows only the portion of the running configuration after multicast and PIM have been committed.
RP/0/0/CPU0:P3# show running-config!... (most of display omitted.)!router pim address-family ipv4auto-rp mapping-agent Loopback0 scope 3 interval 60auto-rp candidate-rp Loopback0 scope 3 group-list 224/4interval 60!multicast-routing address-family ipv4interface all enable!endMPLS
This section contains the output on P3 of the show run router mpls command with MPLS configured. This configuration display includes previous OSPF configurations for passwords, area, authentication (MD5), and router ID (which is specified to be the loopback address). The configuration also reflects additional configurations for MPLS:
•
The MPLS router ID is the loopback address
•
The number of seconds that the router keeps the record of a neighbor without receiving a hello packet from that neighbor (30 seconds in this example)
•
The number of seconds from one transmission of a hello packet to the next transmission of a hello packet
RP/0/0/CPU0:P3# show run router mplsrouter ospf 60000nsf ietflog adjacency changes detailarea 0authentication message-digestinterface Loopback0passive enable!interface POS0/3/0/1message-digest-key 1 md5 encrypted 104D000A0618!interface POS0/3/0/2message-digest-key 1 md5 encrypted 060506324F41!interface POS0/4/0/0message-digest-key 1 md5 encrypted 045802150C2E!!mpls traffic-eng router-id Loopback0mpls traffic-eng area 0!mpls traffic-enginterface POS0/3/0/1!interface POS0/3/0/2!interface POS0/4/0/0!!mpls ldprouter-id Loopback0discovery hello holdtime 30discovery hello interval 15graceful-restartinterface POS0/3/0/1!interface POS0/3/0/2!interface POS0/4/0/0!!rsvpinterface POS0/3/0/1bandwidth!interface POS0/3/0/2bandwidth!interface POS0/4/0/0bandwidth!!Summary of the Fully Configured Network
The following output shows the complete configuration for the network as configured for the example in this document. In this configuration, the routing domain consists of only a backbone area (0) and uses OSPF for the protocol.
RP/0/0/CPU0:P3# show running-confighostname P3logging consoletelnet ipv4 server max-servers 6domain ipv4 host p1 172.21.116.12domain ipv4 host p2 172.21.116.17domain ipv4 host p3 172.21.116.22domain ipv4 host p4 172.21.116.27domain ipv4 host p5 172.21.116.32domain ipv4 host p6 172.21.116.37taskgroup igpadmintask write ribtask write isistask write ospf!taskgroup routeadmintask write bgpinherit taskgroup igpadmin!usergroup igp_admintaskgroup igpadmin!usergroup route_admintaskgroup routeadmin!username raoulsecret 5 $1$8Gwd$WFGLQa09SGl9A/WlrBiJM0group route_admin!username dukesecret 5 $1$EAp8$hWPK3CpBYSL50apOLQmlF0group operator!username classioussecret 5 $1$BzAl$yKAqOdOC02vn5xgXmy5Eu/group igp_admin!ipv4 virtual address 172.21.116.22 255.255.255.192ipv4 access-list blockacl10 deny ip 134.1.1.0 0.0.0.255 any20 deny ip 134.1.2.0 0.0.0.255 any30 deny ip 134.1.3.0 0.0.0.255 any40 deny ip 134.1.4.0 0.0.0.255 any50 deny ip 134.1.5.0 0.0.0.255 any55 deny ip 134.1.6.0 0.0.0.255 any60 deny ip 135.1.1.0 0.0.0.255 any70 deny ip 135.10.2.0 0.0.0.255 any80 deny ip 135.1.3.0 0.0.0.255 any90 deny ip 135.1.4.0 0.0.0.255 any110 deny ip 136.1.1.0 0.0.0.255 any120 deny ip 136.1.2.0 0.0.0.255 any130 deny ip 136.1.3.0 0.0.0.255 any140 deny ip 136.1.4.0 0.0.0.255 any150 permit ip any any!ipv4 access-list blockacl210 deny ip 134.1.1.0 0.0.0.255 any20 deny ip 134.1.2.0 0.0.0.255 any30 deny ip 134.1.3.0 0.0.0.255 any40 deny ip 134.1.4.0 0.0.0.255 any50 deny ip 134.1.5.0 0.0.0.255 any60 deny ip 135.1.1.0 0.0.0.255 any80 deny ip 135.1.3.0 0.0.0.255 any90 deny ip 135.1.4.0 0.0.0.255 any110 deny ip 136.1.1.0 0.0.0.255 any120 deny ip 136.1.2.0 0.0.0.255 any130 deny ip 136.1.3.0 0.0.0.255 any140 deny ip 136.1.4.0 0.0.0.255 any150 permit ip any any!interface Loopback0ipv4 address 100.10.20.3 255.255.255.255!interface tunnel-te1ipv4 unnumbered Loopback0priority 0 0bandwidth 1000autoroute announcedestination 100.10.20.1path-option 1 dynamic!interface tunnel-te2ipv4 unnumbered Loopback0priority 0 0bandwidth 1000autoroute announcedestination 100.10.20.2path-option 1 dynamic!interface tunnel-te4ipv4 unnumbered Loopback0priority 0 0bandwidth 1000autoroute announcedestination 100.10.20.4path-option 1 dynamic!interface tunnel-te5ipv4 unnumbered Loopback0priority 0 0bandwidth 1000autoroute announcedestination 100.10.20.5path-option 1 dynamic!interface tunnel-te6ipv4 unnumbered Loopback0priority 0 0bandwidth 1000autoroute announcedestination 100.10.20.6path-option 1 dynamic!interface MgmtEth0/0/CPU0/0ipv4 address 172.21.116.20 255.255.255.192!interface MgmtEth0/0/CPU0/1shutdown!interface MgmtEth0/0/CPU0/2shutdown!interface MgmtEth0/1/CPU0/0ipv4 address 172.21.116.21 255.255.255.192!interface MgmtEth0/1/CPU0/1shutdown!interface MgmtEth0/1/CPU0/2shutdown!interface POS0/3/0/0ipv4 address 142.50.4.3 255.255.255.0ipv4 access-group blockacl ingress!interface POS0/3/0/1ipv4 address 142.50.24.3 255.255.255.0!interface POS0/3/0/2ipv4 address 142.50.12.3 255.255.255.0!interface POS0/3/0/3shutdown!interface POS0/4/0/0ipv4 address 142.50.16.3 255.255.255.0!controller SONET0/3/0/0!controller SONET0/3/0/1!controller SONET0/3/0/2!controller SONET0/3/0/3!controller SONET0/4/0/0!route ipv4 0.0.0.0/0 172.21.116.1!router bgp 65000address-family ipv4 unicastnetwork 0.0.0.0/0!neighbor-group internalremote-as 65000password encrypted 13061E010803update-source Loopback0address-family ipv4 unicast!!neighbor 100.10.20.1use neighbor-group internaldescription P1!neighbor 100.10.20.2use neighbor-group internaldescription P2!neighbor 100.10.20.4use neighbor-group internaldescription P4!neighbor 100.10.20.5use neighbor-group internaldescription P5!neighbor 100.10.20.6use neighbor-group internaldescription P6!!rsvpinterface POS0/3/0/1bandwidth!interface POS0/3/0/2bandwidth!interface POS0/4/0/0bandwidth!!mpls traffic-enginterface POS0/3/0/1!interface POS0/3/0/2!interface POS0/4/0/0!!mpls ldprouter-id Loopback0discovery hello holdtime 30discovery hello interval 15graceful-restartinterface POS0/3/0/1!interface POS0/3/0/2!interface POS0/4/0/0!!router pim address-family ipv4auto-rp mapping-agent Loopback0 scope 16 interval 60auto-rp candidate-rp Loopback0 scope 16 group-list 224/4 interval 60!multicast-routing address-family ipv4interface tunnel-te1disable!interface tunnel-te2disable!interface tunnel-te4disable!interface tunnel-te5disable!interface tunnel-te6disable!interface all enable!endVerification Commands
This section contains tables of commands that you can use to view the configurations for the protocols.
You can use the commands in Table 8 to view the BGP configuration.
You can use the commands in Table 9 to verify the IS-IS configuration.
You can use the commands in Table 10 to verify the OSPF configuration.
You can use the commands in Table 11 to verify the OSPFv3 configuration.
Troubleshooting Commands
Table 12 contains some troubleshooting commands that you can use to locate problems in the network configuration.
Additional References
The following sections provide references related to configuring Cisco IOX-XR software on networks.
Related Documents
Technical Assistance
Any Internet Protocol (IP) addresses used in this document are not intended to be actual addresses. Any examples, command display output, and figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses in illustrative content is unintentional and coincidental.
Cisco IOS XR Network Examples
Copyright © 2006 Cisco Systems, Inc. All rights reserved




