Versions Compared

Version Old Version 1 New Version Current
Changes made by

Jean-luc KRIKER

Jean-luc KRIKER

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

ip route

Local breakout

Remote Breakout

LAN Interface

Code Block
v600JLK2#show running-config interface gigabitethernet 0/1
interface gigabitethernet 0/1
 description l:data,t:lan,o:,c:EKI_Customer,ci:1,p:Pre_Sales,pi:1
 ip verify reverse-path
 ip policy-routing AppPolicy-data in
 ip tic profile profile_tic_data in
 ip forwarding-group 1000
 ip address 172.10.46.1 255.255.255.0
exit

WAN Interface

Code Block
v600JLK2#show running-config interface gigabitethernet 0/0
interface gigabitethernet 0/0
 description l:internet,t:wan,o:,c:EKI_Customer,ci:1,p:Pre_Sales,pi:1
 ip vrf forwarding wan_internet
 ip policy-routing send_to_vasi_internet in
 ip address dhcp
 ip dhcp client ignore-default-route
 ip nat inside overload user-list from_vasi_internet
 ip nat inside bypass-list not_from_vasi_internet
 ip nat static 198.51.100.5 self user-list permitSpecificPortsVrf
exit

Code Block
v600JLK2#show ip vrf brief
VRF Name                          VRF Id                    Interfaces
wan_internet                      2                         GigabitEthernet 0/0
                                                            Vasi 1/1
v600JLK2#show ip route vrf wan_internet

S    default [1/0] via 192.168.0.1, GigabitEthernet 0/0
C    192.168.0.0/24 is directly connected, GigabitEthernet 0/0
C    198.51.100.4/30 is directly connected, Vasi 1/1

Remote Breakout

ip route

tunnel 11

Code Block
v600JLK2#show running-config interface tunnel
interface tunnel 11
 description          l:internet,t:tunnel,o:HandS,c:EKI_Customer,ci:1,p:Pre_Sales,pi:1
 bandwidth-in 1000000
 connection-wait-time 15
 tunnel mode gre
 tunnel source vasi 1/0
 tunnel destination host hub.internet.hub_massy_200.hands.eki_customer.pre_sales.sdwan.ekinops.com
 tunnel forwarding-group 16301
 tunnel protection ipsec profile Ikev2IpsecProfile-1-internet
 ip policy-routing AppPolicyTunnel-HandS in
 ip unnumbered loopback 10011
 ip mtu 1374
 ip load-sharing least-load-first use-interface gigabitethernet 0/0
 ip forwarding-group 1
 ip forwarding-group 10011
exit

loopback 10011

Code Block
v600JLK2#show running-config interface loopback
interface loopback 10011
 ip address 10.10.5.7 255.255.255.255
exit
interface loopback 65535
 ip address 192.0.2.1 255.255.255.255
exit

tunnel

Code Block
v600JLK2#show tunnel endpoint interface status
name                          source                                  destination                             epIndex status tos   ttl   fragBit
=================================================================================================================================================
Tunnel 11                     198.51.100.5                            176.149.235.201                         0       UP     0     64    clr


v600JLK2#show tunnel endpoint interface statistics
interface: tunnel 11
  destination                             active upTime    downTime  startTime stopTime  statusChanges startReq stopReq
  hub.internet.hub_massy_200.hands.eki_customer.pre_sales.sdwan.ekinops.comtrue   2h15m14s  2h15m15s  2h15m15s  2h15m15s  3             2        1

ping tunnel

BGP

Code Block
router bgp 65000
 timers bgp 10 30
 bgp router-id 172.10.46.1
 bgp bestpath as-path ignore
 bgp listen limit 5000
 neighbor 10.10.5.1
  remote-as 65000
  fall-over bfd
  update-source loopback 10011
 exit
 address-family ipv4
  maximum-paths eibgp 16
  network 172.10.46.0/24 route-map data
  neighbor 10.10.5.1 activate
   addpath-tx-all-paths
   next-hop-self all
   allowas-in 1
   route-map nhrp-in-11 in
   route-map nhrp-out-11 out
  exit
 exit