Hot answers tagged

4

Should the routes crash when more than 4M routes is being sent to FIB, considering no policies have been defined to limit the routes FIB can hold? If your concern is related to hardware limitation, then the first 4 million FIB entries will be installed and anything after that will not. You should also be receiving quite a lot of alarms indicating you are ...


4

Yes, directly connected interface have a higher priority than a static route. Have a look at this table: You can use the command show ip route and you will see, that the static route is not in the routing table because a directly connected entry is taking its place for this subnet. Usually static routes are in place as a 'backup' path. Once the interface ...


3

Putting aside the impossibility of 100% security, your plan seems sound. Of course, everything depends on the policies on the firewall. To answer your specific questions, yes, the switch ports to the firewall are promiscuous, and configuring a VLAN on (most) firewalls creates a separate logical interface.


2

I think you are misunderstanding a fundamental concept of routing protocols. Routing protocols do not route packets. They exchange routing information (reachability) with other routers. You run a routing protocol on two or more routers so they can exchange routing information. If you only have one router, you don't need a rotuing protocol, because there ...


2

I want to know that it is a must for ISP routers to cache all these million IPv4 entries? No. However, ISP's & CDN's wanting to run within a DFZ (Default Free Zone) will usually hold all of these prefixes. Do any differences exist between tier 1 or tier 2 ISPs when answering this question? The only difference you may see here is the source of the ...


2

Speaker simply means that your router "speak" in BGP so there is BGP running on your router. SendTblVer mean that your router send BGP table version 1180898 (its starting from one and rising when changes or new paths are being added). (If you want to read more) Best #1 means that out of your 12 possible paths the path that is number (#)1 is the best one ...


2

Static routes on each router will allow both sites to reach each other's resources. Unfortunately, you can't "combine" or "load balance" your Internet connections.


2

The directly connected network (administrative distance of 0) should take precedence over the static route (administrative distance of 1), unless the static route is set to be followed through policy based routing.


2

Your question is indeed vague and since it will generate mostly opinions, is also probably off topic. I did want to address one point. The "Traveling Salesman Problem" isn't really applicable to data center topologies, whether it's just a handful of racks or a Facebook-sized organization. Data doesn't need to pass through every node. It only has to get ...


1

It it not a big or complicated concepts. Those are just marketing term but feature set can be different. Generally Core mean if your entire network connected to central switch or router it will be core switch or router. If you use same modal device in branch office it will be branch office router. WAN also same but enterprise level devices mean it can handle ...


1

I want to segregate flows at a router. I can do this by using the destination IP on the header. Forwarding by destination IP is what routing is about. I also want to make sure that my router does not forward any other packet for the time being I am sure the transmission was successful(I know the average time it takes to the destination). A router doesn'...


1

Configuring a single router with OSPF does nothing but waste CPU cycles on a router. Routing protocols do not route, they exchange routing information with other routers running the same routing protocol. Also, if all you have is a single network, then routing is completely unnecessary because routers route packets between networks, not from a network back ...


1

In common case balancing of two ISP is possible, but there many depends on... One TCP (and in most cases other protocols) connection absolutely impossible to balance Because of IP security on some sites one client must not change IP (at least on the go), so for flawless Internet you must lock HTTP of one client to one ISP. Is possible to overcome this ...


1

Your configuration doesn’t add any community, you have to use a route-map to do this. For exemple: ! neighbor GRIF-iBGP-IPv4 route-map SET-iBGP-COMM out ! route-map SET-iBGP-COMM permit 10 set community 64496:2150 additive ! This is a peer-group but it’s easily adaptable to a single neighbor.


Only top voted, non community-wiki answers of a minimum length are eligible