IP Routing

Routing: The routing is the process taking a packet from source to destination based on ip address. Routed Protocol: Used to update user data through the internet work. Protocols used to support data traffic are called routed protocol. Ex: IP, IPX, Apple Talk. Routing Protocol: Used to update neighboring routers about the networks connected to all routers within the internet work, Protocols that send route update packets are called Routing Protocols. Ex: RIP, IGRP, EIGRP, OSPF, IS-IS, BGP To Route, the router knows, i) Destination Address ii) Neighbor routers. iii) Possible Path iv) Best Path v) To verity and maintained the routing table Types of Routing: i) ii) iii) Static Route Dynamic Route Default Route

Static Route: Uses a route that network administrator enters into the router manually. Advantages of Static Route : o Saves bandwidth and router CPU. o Routing table maintains by administrator. o No overhead in Processing, Sending or Receiving updates. Disadvantages of Static Routes: i) The administrator must really understand in the internet work.

ii) iii) iv)

How each router is connected? The administrator has to add a route to it on the entire router to all. It is no feasible in large network to type in hand.

Static Route Syntax: Ip route [Destination add] [subnet mask] [exit interface / next hop add] Dynamic Route: Uses a route that network routing protocols automatically traffic or topology changes.

Advantages of Dynamic route: Bandwidth is consumed as routing updates are transmitted between routers. Router CPU is used to process, send and receive updates. Routing table is maintained by Routing process.

Default Route: Use default routing to send packet with a remote network but not in the routing table to the next hop router. Ex: Ip route 0.0.0.0 0.0.0.0 192.168.10.5 Distance Vector routing protocol: The distance vector routing finds the best path to a remote network by judging distance. Each time a packet goes through a router that is called hop count. The route with the least number of hops to the network is determined to be best route. The distance vector indicates the direction to the remote network. Note: Distance - How far Vector Direction Link state routing protocol: In link state routing protocols also called shortest path first protocols, the routers each create three tables. Once of these tables keeps track of directly attached neighbor, one determines the topology of the entire internet work, and one is used as the routing table. Link state routers know more about the internet work than any distance vector routing protocol. Note : Distance No Vector -direction

Hybrid Routing protocol: Hybrid protocols use aspects of both distance vector and link state. For example EIGRP. Classful routing: To advertise our routing information to our neighbor without subnet mask. It sends only major network: Ex: RIP V1, IGRP. Classless Routing: To advertise our routing information to our neighbor with subnet mask. Ex: EIGRP, OSPF, RIP V2 Discontinuous Network: It is one that. It has two or more sub network of classful networks connected together by different classful network. It is called discontinuous networks.

Routing Information Protocol (RIP)

RIP: 1. Sends periodic updates every 30 sec by default. 2. Uses hop count as a metric 3. Sends the entire routing table out every interface , minus the routes learned from that interface 4. Has a maximum reachable hop count of 15 ( 16 is the defined maximum ) 5. Sends updates out as a broadcast ( RIP v1 ) 6. RIP v2 uses a multicast address of 224.0.0.9. Rip timers: Update time : 30 Sec Invalid time : 180 Sec Hold down time : 180 Sec Flush time : 240 Sec

To prevent Routing Loops: i) ii) Split Horizon Route Poisoning

iii) iv) v)

Poison Reverse Hold down time Maximum Hop count

Difference Between Rip V1 and V 2 : RIP V1 1. Distance Vector 2.Maximum hop count 15 3.Classful 4.Not Support VLSM and discontinuous Network 5.Not support authentication 6. support Broadcast address Administrative Distance: AD is used to rate of worthiness of routing information received on a router from the neighbor router .It is an Integer 0 to 255. Where 0 means most trusted, 255 means no traffic via this route. Autonomous System Number: AS means group of Router of networks controlled by Single Administrator. Hop Count: The distance vector routing finds the best path to a remote network by judging distance. Each time a packet goes through a router that is called hop count. Interior Gateway Protocol : (IGP) It will share the Routing information having the same Autonomous System Number. Exterior Gateway Protocol: (EGP) It will share the Routing information having the different autonomous System Number. Passive Interface: (In RIP) It will not send routing updates but receive from their recipient. RIP V2 1.Distance Vector 2.Maximum Hop count 15 3.Classless 4.Support VLSM and Discontinuous network 5.Support authentication 6. Support Multicast Address

AD Value of all Routing Protocols: i) ii) iii) iv) v) vi) vii) viii) ix) x) Static Route RIP IGRP EIGRP OSPF BGP IS-IS Connected ODR Unknown - 1 - 120 - 100 - 90 - 110 - external 20 , internal 200 - 115 - 0 - 160 - 255

Interior Gateway Routing Protocol

IGRP: 1. Sends periodic updates every 90 sec by default 2. Sends the entire routing table out interface, minus the routes learned from that interface. 3. Uses a composite metric consisting of bandwidth, load, delay, MTU, reliability. 4. Only uses bandwidth and delay by default. 5. Default maximum hop count is 224. 6. Does track hop count but only uses it as a tie-breaker. 7. Sends updates out as a broadcast. Difference between RIP and IGRP: RIP 1.Can be used in Small network 2. Not support Autonomous Sys. Number 3.Administrative Distance 120 4.Metric Hop count IGRP 1.Can be used in Large network 2. Support Autonomous Sys. Number

3.Administrative Distance 100 4. Metric ( bandwidth , load , delay , MTU , Reliability) 5.Route table updates every 90 Sec 5.Route table updates every 30 Sec

Difference between IGRP and EIGRP: IGRP 1.Administrative Distance 100 2. Metric ( bandwidth , load , delay , MTU , Reliability) 3.No internal and external routes 4.Classful routing 5. Not support VLSM EIGRP 1.Administrative Distance 90 2. Metric ( bandwidth , load , delay , MTU , Reliability) 3. Internal and external routes are there 4.Class less routing 5. Support VLSM

Enhanced IGRP

EIGRP: 1. Considered an advanced distance vector routing protocol 2. Uses a DUAL 3. Sends triggered updates when necessary 4. Sends only information that has changed not entire routing table. 5. Uses a composite metric consisting of bandwidth, load, delay, MTU, reliability. 6. Only uses bandwidth and delay by default 7. Default hop count is 100. 8. Default maximum hop count is 224. 9. Does track hop count but only uses it as a tie-breaker. 10. Sends updates out as a multicast. 11. Sends updates out on a multicast address of 224.0.0.10 and 224.0.0.10 Advantages of EIGRP: 1) 2) 3) 4) 5) 6) 7) Support for IP, IPX and Apple Talk via protocol dependent modules. Considered Classless Support VLSM and discontinuous networks Support for summarization Efficient neighbor discovery Communication via Reliable Transport Protocol. Best path selection via DUAL.

EIGRP Packet Types: Hello Update Query Reply Acknowledge

What conditions to form Neighbor? 1. Hello or Acknowledge received 2. AS numbered match 3. K values match ( Identical K values) Successor: A successor route is the best route to a remote network. A successor route is used by EIGRP to forward traffic to destination and is stored in routing table. Feasible Successor: A destination entry is moved from the topology table to the routing table when there is a feasible successor. A Feasible Successor is path whose reported distance is less than the feasible distance, and its considered a backup route. Note: A feasible successor is a backup route and is stored in the topology. A successor route is stored in the topology table and also placed in the routing table. DUAL Algorithm allows for the following: Backup route determination if one is available Support of VLSM Dynamic Route recoveries Queries for an alternate route if no route can be found. Feasible Condition: AD or RD >= FD .Active and Passive State: (EIGRP) If any router interface seems to be down, it sends request to successor. Then its wait for acknowledge from the Successor. At that time the router is in Active State. When it gets acknowledge from successor, the router goes to passive State

Passive Interface: (In EIGRP) It will neither send nor receive routing updates. Stack in Active (SIA): In EIGRP, the neighbor gets the query, then it reply for query message with in three minutes, otherwise the neighbor is fails to reply to query, the route is an SIA and then the router resets the neighbors. OPEN SHORTEST PATH FIRST OSPF: 1. 2. 3. 4. 5. Sends triggered updates when necessary. Sends only information that has changed not entire routing table. Uses a cost metric Interface bandwidth is used to calculate cost ( Cisco ) Uses two multicast address of 224.0.0.5 and 224.0.0.6

Advantages of OSPF: 1) 2) 3) 4) 5) 6) 7) Consists of area and autonomous systems Minimizes the routing updates traffic Allows Scalability Support VLSM and Discontinuous networks. Has un limited Router. Allows multi vendor deployment ( Open standard ) Support hierarchical design (using areas).

OSPF Packet types: Hello LSR ( Link State Request ) LSDB (Link State Database ) LSU ( Link State Update ) LSA ( Link State Acknowledge )

Hello protocol: The OSPF Hello packet or protocol provides dynamic neighbor discovery and maintain relationships. Hello packet and Link state Advertisement build and maintain the topological database. Hello packets are addressed to 224.0.0.5

Hello Packet: Hello packet contains a lot of thing, but four things must be matched then only it considers a neighbor. Authentication Password Hello or Dead intervals Stub area Flag Area ID Difference between Autonomous System Number and Process ID: Autonomous System Number 1. Group of Router or networks controlled by single Administrator. 2.It must be same Neighbor? Down state Init state Two way state Exstart State Exchange state Loading state Full state Process ID 1. Used for which area the router is functioning. 2.It may not be same

Backup Designed Router: (BDR) It is an backup route of Designated Router.( Alternate Route ) The BDR Router receives all routing updates from the OSPF adjacencies router, but does not flood LSA updates. Router ID: The Router ID is an ip address used to identify the router. How to select, 1. Highest ip address of Active Interface. 2. Loop back interface. 3. Highest Priority. Process ID: Used for which area the router is functioning.

Dead Intervals: A neighbor is considered lost, if no hello is received with in four times of hello periods. It is called as Dead time. Difference between EIGRP and OSPF: OSPF 1.Difficult to Implement 2.Equal Load Balancing 3.Non Cisco Proprietary 4. Manual Summarization only 5. Supports Authentication OSPF LSA types: Router LSA -1 Network LSA -2 Summary LSA -3 Summary LSA -4 External Summary LSA 5 Multicast LSA -6 NSSA ( Not So Stub Area ) -7 EIGRP 1.Easy to implement 2.Equal and Unequal Load Balancing 3.Cisco Proprietary 4. Auto and Manual Summarization 5. Does not Support Authentication

Link State Advertisement: A Link State Advertisement is an OSPF data packet containing link state and routing information that is shared among OSPF routers. An OSPF router will exchange LSA packet only with routers to which it has established adjacencies. OSPF Topology: Mode 1.NBMA 2.Point to Multipoint 3.Broadcast 4.Point to Multipoint Non broadcast Preferred Topology Fully mesh Partial or Star mesh Fully mesh Partial or Star mesh Subnet Address Same subnet Same subnet Same subnet Same subnet Adjacency Manual , DR and BDR Auto , DR and BDR Auto , DR and BDR Manual , No DR and BDR RFC or CISCO RFC RFC CISCO CISCO

5.Point to Point

Partial or Star mesh

Different for each subnet

Auto , No DR and BDR

CISCO

Difference between All routing Protocols: Concepts 1 Administrative Distance 2.Hop count 3.VLSM and Discontinuous network 4. Types of routing 5.Protocol Type 6.Update time 7.Invalid time 8.Hold down time 9.Flush time 10.Algorithms 11.Autonomous System Number 12.Metric Value RIP 120 15 V1=dont support V2 = support V1-classful V2 classless Distance vector 30 sec 180 sec 180 sec 240 sec Bellmen ford Not Support Hop count IGRP 100 255 Dont support Classful Distance vector 90 sec 270 sec 280 sec 630 sec Diffy Helmen Support Metric ( bandwidth , load , delay , MTU , Reliability) Auto summarization EIGRP V1-90 ,V2 -170 255 Support Classless Hybrid 30 sec 120 sec DUAL Support Metric ( bandwidth , load , delay , MTU , Reliability) Auto summarization. If we need , we will do manual summary Cisco OSPF 110 Unlimited Support Classless Link state 10 sec Wait interval 40 sec Dead time 40 sec Dijkstra ( SPF ) Support Cost =100000000/ bandwidth Only do manual summary

13.Summarization

Auto summarization

14.Properitary BGP: 1. 2. 3. 4.

Non Cisco

Cisco

Non Cisco

Actually a very advanced distance vector routing protocol Sends triggered updates when necessary Sends only information that has changed not entire routing table. Uses a complex metric system

OSI Model:
Broadcast Domain: A group of devices receiving broadcast frames initiating from any device within the group. Collision Domain: The network area in Ethernet over, which frames that have collided and damaged. Multicasting: Any communication between a single sender and multiple receivers. Layer in OSI: i) ii) iii) iv) v) vi) vii) Application Presentation Session Transport Network Data link Physical

OSI Model: These layers are introduced in ISO. How to transfer the message from source to destination host. MAC: (Media Access Control) Media Access Control is learned by switch. It has hexadecimal format. Here first 24 bits is allocated for OUI (Organizationally Unique Identifier), Remaining 24 bits are allocated for vendor used. LLC: (Logical Link Control) 1) It is a sub layer of data link layer. Where do sent the packet this information tells to data link header. 2) Flow control and Sequence of Control bits.

Difference between TCP and UDP: TCP 1.Connection Oriented 2.Reliable 3.Acknowledged 4. Windowing flow control 5. Virtual Circuit LAN Physical layer: 1. 2. 3. 4. Category 3 Cabling Category 4 Cabling Category 5 Cabling Category 6 Cabling UDP 1. Connectionless 2.Not Reliable 3.Not Acknowledge 4. No Windowing flow control 5. No Virtual Circuit

WAN Physical Layer: 1. EIA / TIA -232 2. EIA / TIA -449 3. V.35 DCE: (Data Communication Equipment) The DCE supplies the physical connection to the network, forward traffic, and providing a clocking signal to synchronize data transmission between DTE and DCE devices. Note: (Service Provider) DTE: (Data Terminal Equipment) Any device located at the end user. Half Duplex: a. Network devices us the same pair of wire to both transmit and receive. b. Used through Hubs (Layer 1 devices) every one shares the available Bandwidth. Full Duplex: a. Uses one pair of wire for sending and another pair for receiving. b. Must be point to point stations, such as Server to switch, or Router to Switch. c. Every one has their own collision domain (Individual Bandwidth) on each switch port.

PDU: (Packet Data Unit) The process at each layer of the OSI model. Layers Transport Network Data link Physical Cisco Three layer Hierarchical Model : i) ii) iii) Core layer High Speed Routers, Multi layer switches. Distribution layer - Routers Access layer Switches , Bridges, Hubs PDU Segments Packets Frames Bits or Bytes

Port Number of Protocols: Application FTP TELNET SMTP DNS DNS SNMP RIP TFTP POP 3 110, HTTP -80 Port 20/21 23 25 53 53 161/162 520 69 HTTPS 443 ,DOOM -666 NEWS-119 Transport TCP TCP TCP TCP UDP UDP UDP UDP Protocol Number TCP -6,UDP-17 IGRP -9 EIGRP -88 OSPF -89 IPV6-41 GRE-47 L2TP-115 ICMP -1 IP in IP -4

ICMP: (Internet Control Message Protocol) Provides control and feedback messages between IP devices. It works at network Layer. It is used by ip for many services. It is one of the Managing protocols. It carries the message by an ip datagram. Some function: i) Unreachable ii) Buffer full iii) Trace route iv) Ping v) Hop count ARP : (Address Resolution Protocol) Traces Physical address using Ip address.

RARP: (Reverse Address Resolution Protocol) Traces the IP address using physical address IP: (Internet Protocol) Provides the logical addressing structure, Offers connectionless, Best effort delivery of packets (datagrams)

Switching:
Switching Services: Switches breaks up the Collision and Create a broadcast domain. Switches use ASIC (Application Specific Integrated Circuits) to build and maintain their filter or forwarding table or Mac database. Layer 2 switches and bridges are faster than routers because they dont take up time looking at the Network layer header information. Instead, they look at the frames hardware addresses before deciding to either forward the frame or drop it. Difference between Switch and Hub : Switch Switches Operate at layer 2 Filtering decision using MAC add Address Learning Create broadcast and breaks up Collision Domain States in Switching: i) ii) iii) iv) v) Listening Learning Forwarding Blocking Disable Hub Hubs operate at layer 1 No Filtering No Address Learning Create broadcast and collision domain

Blocking State: Timer: Max age 20 Sec. Discards frame. Does not learn Mac address, but listens BPDU messages. Listening State: Timer: Forward Delay 15 Sec Discards frame.

Does not learn Mac address, but receives BPDU messages to determine its role in the network. Learning State: Timer: Forward Delay 15 Sec Discards frame. Does learn Mac address, but receives and transmits BPDU messages. Forwarding State: Timer: no timer Accepts Frames. Does learn Mac address, but receives and transmits BPDU messages. Switch Function: i) ii) iii) Address learning Forward or filter decision Loop avoidance

Difference between Switch and Bridge: Bridge 1. has 16 ports 2.Software based 3.learns Mac address 4.works at layer 2 5.One STP per Bridge 6. Relatively slow STP: (Spanning Tree Protocol) It is a bridge protocol. STP is used to select best path. STP is used to find redundancy link dynamically and create topology database. It stop loop occurrence by shutting any redundancy links. BPDU: (Bridge Protocol Data Unit) Each switch compares the parameter in the BPDU that they sent to the one neighbors with one that receive from another neighbors. It is used to select the root bridge. How do we select the Root Bridge? Lowest MAC address Lowest Priority Switch 1. has 24, 48 , 100 ports 2.Hardware based ( ASIC ) 3.Learns Mac address 4. works at layer 2 5. Many STP per Bridge 6.Fast

Types of Switch: i) ii) iii) Cut Through Fragment Free ( Modify Cut Through ) Store and Forward.

Which of the three switching methods is fastest, and why? Cut through switching is the fastest method because the switches read only the first six bytes of the frame before forwarding it. VLAN: VLAN is a logical group of user and resources administratively defined on switch ports. It is reduced the broadcast domain. VTP: (VLAN Trunking Protocol) It is used to update switch database with VLAN information and how trunking used in send information from all VLAN across only. Features: To increase broadcast, Security, mobility, and scalability. VTP Pruning: VTP provide way for you to preserve bandwidth by confically. VTP pruning send to broadcast to trunk link. In all catalyst switches VTP pruning is disable then to reduce the unicast, broadcast, multicast. If we enable the vtp pruning, broadcast, unicast and multicast are increased in switch. Modes in VTP: i) ii) iii) Server mode Client mode Transparent mode

Advantages of VTP: 1. Consistent VLAN configure across all switches in the network. 2. Allows VLANs to be trunked over mixed networks 3. Accurate tracking and monitoring of VLANs

4. Dynamic reporting of added VLAN to all switches in the VTP domain. 5. Plug and Play VLAN adding. What encapsulation used in Trunk Links? ISL ( Cisco proprietary) IEEE 802.1q ( Non Cisco Proprietary )

Client mode: i) ii) Dont create, modify, remove (Cant make any changes). Not saved in NVRAM.

Server Mode: i) ii) iii) To create, modify, remove, and rename VLAN. Saved in NVRAM VTP advertise to all Switches.

Transparent Mode: 1. In switches transparent mode dont participate in the VTP domain. 2. Does not get any VLAN creation from domain. 3. But it gets the VTP advertisement from domain and then forward to who are directly attached to transparent switches. 4. To create VLAN only local significant but it cant advertise to server domain switches. 5. Saved in NVRAM

Note:
Sub netting: a. Used in IP networks to break up large network into smaller sub networks. b. It is used to reduce network traffic. Subnet: A subdivision of an IP network. ROUTING PROTOCOLS: 1. 2. 3. 4. RIP V1 Broadcast Address 255.255.255.255 RIP V2 Multicast Address 224.0.0.9 IGRP Broadcast Address 255.255.255.255 EIGRP Multicast Address 224.0.0.10 and 224.0.0.11

5. OSPF Multicast Address 224.0.0.5 (DR) and 224.0.0.6 (NBMA)

VLSM: Type Class A Class B Class C Class D Class E Range 1 -126 128-191 192-223 224-239 240-255 Start ip add 10.0.0.0 172.16.0.0 192.168.0.0 Multicasting Research End ip add 10.255.255.255 172.31.255.255 192.168.255.255 Format N.H.H.H N.N.H.H N.N.N.H To Find range ( First binary bits) 0 10 110 111 1110

EIGRP: LAN Link: Hello time: 5 Sec Hold down time: 15 Sec WAN Link: Hello time: 60 Sec Hold down time: 180 Sec. OSPF: LAN Link: Hello time: 10 Sec Hold down time: 40 Sec WAN Link: Hello time: 30 Sec Hold down time: 120 Sec.