HCIE R&S Day 01
HCIE R&S Day 01
0
VRP Introduction
www.huawei.com
VRP
VRP
inside
⚫ VRP Introduction
◼ VRP (Versatile Routing Platform) is a network OS running in IP devices, similar to iOS and
Windows.
◼ VRP is the brain of IP devices which constructs the global network.
◼ VRP has high reliability which ensures IP network secure and stable operation.
Copyright © 2016 Huawei Technologies Co., Ltd. All rights reserved. Page 3
VRP Serves Multi-product Families
BRAS AR G3
ME60 NGN SGSN/GGSN MAG9811
AR
NE5000E NE80E CE12800
NE40E CE6800/5800
SSP5000 Security IT
IAS WLAN AC
Copyright © 2016 Huawei Technologies Co., Ltd. All rights reserved. Page 4
Hardware Development of Network
Devices
2004 before 2006 2009 future
Copyright © 2016 Huawei Technologies Co., Ltd. All rights reserved. Page 5
Development of VRP
VRP8
VRP5
VRP3
1998-2001
Multi-process,
Centralized Distributed Highly-reliable Multi-chassis,
Multi-core
VRP8 is a new-generation network operating system, which has a distributed, multi-process, and component architecture.
VRP8 supports distributed applications and virtualization techniques
Copyright © 2016 Huawei Technologies Co., Ltd. All rights reserved. Page 7
VRP8 Features
⚫ VRP8 Features
Coarse-
◼ Multi-core CPU or multi-process.
Grained
Modular ◼ Distributed applications.
◼ NSx (NSS, NSR, NSB and NSF) and In-Service
Software Upgrade (ISSU).
Resilient component system
◼ Netconf, and two-phase configuration commit and
VRP8 configuration rollback in the case of a commit
failure to facilitate user management and
enhanced carrier-class management and
Fine-Grained maintenance.
Modular
Copyright © 2016 Huawei Technologies Co., Ltd. All rights reserved. Page 8
Two-Phase Configuration Commit
CLI user/
Phase 1 Phase 2
Netconf user
Configure
commands
Candidate data set Commit Running data set
In two-phase configuration mode, the command will take affect after commit but not immediately.
Copyright © 2016 Huawei Technologies Co., Ltd. All rights reserved. Page 9
CLI Command Line Views
<Huawei>system-view
Enter system view, return user view with Ctrl+Z.
[Huawei]interface GigabitEthernet 0/0/0
[Huawei-GigabitEthernet0/0/0]
Copyright © 2016 Huawei Technologies Co., Ltd. All rights reserved. Page 10
How to Use the CLI?
<Huawei>system-view
Enter system view, return user view with Ctrl+Z.
[~Huawei]interface GigabitEthernet0/0/20
[Huawei-GigabitEthernet0/0/20]display this
#
interface GigabitEthernet0/0/20
#
return
[~Huawei-GigabitEthernet0/0/20]quit
[~Huawei]display current-configuration
#
sysname Huawei
#
cluster enable
……
[~Huawei]aaa
[~Huawei-aaa]return
<Huawei>display history-command
system-view
display current-configuration
interface GigabitEthernet0/0/20
Copyright © 2016 Huawei Technologies Co., Ltd. All rights reserved. Page 11
Common Function Keys
Inserts a character at the current location of the cursor if the editing buffer is not
Common key
full, and the cursor moves to the right.
BackSpace Deletes the character on the left of the cursor and the cursor moves to the left.
Tab Enter an incomplete keyword and press Tab to complete the keyword.
Copyright © 2016 Huawei Technologies Co., Ltd. All rights reserved. Page 12
CLI Help Features
<Huawei> d?
Partial Help
<Huawei> display h?
Command Line Help
<Huawei> ?
Complete Help
<Huawei> display ?
[Huawei]d?
ddns dhcp
dhcpv6 diagnose
display dns
domain dot1x
Copyright © 2016 Huawei Technologies Co., Ltd. All rights reserved. Page 13
Login to the Device
IP Network IP Network
Copyright © 2016 Huawei Technologies Co., Ltd. All rights reserved. Page 15
Configuring the User Interface
Console VTY
Copyright © 2016 Huawei Technologies Co., Ltd. All rights reserved. Page 16
Immediately Mode and Two Phase Mode
<Huawei>system-view [~Huawei]
Two-stage mode
Immediately mode
Copyright © 2016 Huawei Technologies Co., Ltd. All rights reserved. Page 17
Configuration Rollback
[~RB2]undo ……
[*RB2]undo ……
[*RB2]undo ……
[*RB2]vlan ……
I made a [*RB2]interface ……
mistake
Copyright © 2016 Huawei Technologies Co., Ltd. All rights reserved. Page 18
IPv6 Protocol Basics
www.huawei.com
The IANA department of Internet RIR assigns IP addresses to local ISPs, An ISP assigns IP addresses to
Corporation for Assigned Names for example, China Telecom and China organizations or users. For
and Numbers (ICANN) assigns IP Mobile. example, an ISP assigns Class A
addresses to five regional Internet IPv4 addresses to a super large
registration organizations, such as organization and Class C IPv4
APNIC, which is responsible for IP addresses to a medium-sized
address assignment in the Asia enterprise.
Pacific region.
Five RIRs:
➢ Réseaux IP Européens (RIPE): European IP address
registration center
➢ Latin American and Caribbean Internet Address Registry
(LACNIC)
➢ American Registry for Internet Numbers (ARIN)
➢ Africa Internet Network Information Center (AFRINIC)
➢ Asia-Pacific Network Information Center (APNIC)
Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved. Page 23
Status Quo of International IPv4 Address Assignment
⚫ On February 3, 2011, IANA announced to evenly assign the last 4.68 million IP
addresses to Internet information centers in five regions around the world. Since
then, no IPv4 addresses can be assigned.
Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved. Page 24
Global IPv6 Address Structure
128 Bits
•Global Routing Prefix – issued by IANA or RIR to ISPs at /32 or /35 in length, ISPs then
issue to customers with /48 mask
IPv6 Technical Features
⚫ Vast address space
⚫ Simplified packet structure
⚫ Automatic configuration and readdressing
⚫ Hierarchical network addressing
⚫ End-to-end security
⚫ Better support for QoS
⚫ Mobility
Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved. Page 26
V5 – Experimental Project, Internet Stream Protocol, RFC
Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved. Page 27
IPv6 Packet Format — Basic Header
⚫ Packet format
An IPv6 packet contains an IPv6 basic header, multiple IPv6 extension headers, and an
upper-layer protocol data unit.
An IPv6 basic header has eight fields with a fixed size of 40 bytes. Each IPv6 data packet
must contain a basic header.
Reserved field
New field
Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved. Page 28
IPv6 Packet Format — Extension Header
⚫ The extension header is optional. The data sender adds the corresponding extension
header only when the function of the extension header is required.
⚫ Extension headers are placed between the IPv6 basic header and upper-layer PDU
• Next Header: Indicates the next
header, with the length of 8 bits. The
Version Traffic Class Flow Label
function of this parameter is the same
Payload Length Next Header Hop Limit as that of Next Header in the basic
40 bytes
header, specifying the next extension
Source Address header (if any) or the type of the upper-
layer protocol.
Destination Address • Extension Header Length: Indicates
the length of an extension header,
Next Header Extension header length Extension Head Data
Variable
which is 8 bits (excluding the Next
length
Extension header #1 data Header field).
• Extension Header Data: Indicates the
Next Header
Variable
Extension header length Extension Head Data
length
extension header data, with a variable
Extension header #1 data length. This includes a series of options
and padding fields.
Payload
(For example, TCP/UDP packets)
IPv6 requires that the extension header length be an integer multiple
Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved. of 8 bytes Page 29
IPv6 Packet Format — Types of Extension Headers
⚫ When an IPv6 packet uses more than one extension header, the headers
must be listed in the following order:
Next Header
Header Type Description
Field Value
This option specifies sending parameters for each hop on a transmission path. Each intermediate node on
a transmission path needs to read and process the field. The application scenarios include:
Hop-by-Hop Options
0 Jumbo payload
header
Router prompt
Resource reservation
Destination Options This header carries information that only the destination node of a packet processes. Currently, this
60
header header is used in mobile IPv6.
An IPv6 source node uses this header to specify the intermediate routers that a packet must pass through
Routing header 43
on the way to its destination. This option is similar to the Loose Source and Record Route option in IPv4.
Like IPv4 packets, the length of IPv6 packets to be forwarded cannot exceed the maximum transmission
Fragment header 44 unit (MTU). When the packet length exceeds the MTU, the packet needs to be fragmented. In IPv6, the
Fragment header is used by an IPv6 source node to send a packet larger than the MTU.
Authentication IPsec uses this header to provide data origin authentication, data integrity check, and packet anti-replay
51
header functions. It also protects some fields in the IPv6 basic header.
Encapsulating
Security Payload 50 This header provides the same functions as the Authentication header plus IPv6 packet encryption.
header
Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved. Page 30
Types of IPv6 Addresses
⚫ Unicast address: An identifier for a single interface. A packet sent to a unicast address is delivered to the interface identified by
that address. In IPv6, it is common for an interface to have multiple IPv6 addresses.
⚫ Multicast address: An identifier for a set of interfaces. A packet sent to a multicast address is delivered to all interfaces identified
by that address. Only interfaces that are added to the corresponding multicast group listen to the packets destined for the
multicast address.
⚫ Anycast address: An identifier for a group of network interfaces, which usually belong to different nodes. A packet sent to an
anycast address is delivered to the nearest interface that is identified by the anycast address, depending on routing protocols.
⚫ No broadcast address is defined in IPv6.
IPv6 address
Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved. Page 31
IPv6 Unicast Address — Aggregatable Global
Unicast Address
⚫ The global unicast address definition is used for IPv6 Internet. This address is globally
unique and routable.
Similar to the IPv4 public address.
Composed of the prefix, subnet ID, and interface ID.
64 bits 64 bits
Prefix Interface ID
Global routing prefix Subnet Host
Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved. Page 32
IPv6 Unicast Address — Link-Local Address
⚫ An IPv6 link-local address can be used for communication between nodes on the same
link and is widely used in neighbor discovery and stateless address configuration.
⚫ When IPv6 runs on a node, a link-local address is automatically assigned to each interface
of the node. This mechanism enables two IPv6 nodes on the same link to communicate
without any configuration
A link-local address uses a prefix of FE80: : /10 and an interface ID as the last 64 bits.
Each IPv6 interface must have a link-local address.
64 bits 64 bits
0 Interface ID
Manually specified or
1111 1110 10 generated in EUI-64 format
FE80: : /10
10 bits
Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved. Page 33
IPv6 Unicast Address — Unique Local Address
⚫ Unique local addresses are used only within a site. Site-local addresses, according to RFC 3879,
have been replaced by unique local addresses (RFC4193).
⚫ Unique local addresses are similar to IPv4 private addresses. Any organization that does not
obtain a global unicast address from a service provider can use a unique local address.
However, unique local addresses are routable only within a local network, not the Internet as a
whole.
The fixed prefix of a unique local address is FC00: : /7. The prefix is divided into two parts.
The FC00: : /8 part is not defined, and the other part is FD00: : /8, with the format as follows:
1111 110
FC00: : /7
Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved. Page 34
Generating the Interface ID Based on the MAC
Address According to the EUI-64 Specifications
MAC address
0012-3400-ABCD
(hexadecimal)
Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved. Page 35
OSPF V2 / V3
www.huawei.com
•Main Stream vendors recommends the an area should have no more than
50 routers and a router should not be in more than 3 areas.
Principles Commands Troubleshooting Cases Suggestions
IS-IS
ASBR
Area 3
Area 1
Internal Router
Backbone Router
Area 0
Area 2 Area 4
ABR
R3 DR R4 R3 DR
•Criteria:-
1. Set using the Router-ID command (recommended).
2. Highest loopback interface IP address.
3. Highest physical interface IP address.
Criteria
•Router-ID
•Highest Loopback Address
•Highest Physical Address
Criteria
•Router-ID
•Highest Loopback Address
•Highest Physical Address
Criteria
•Router-ID
•Highest Loopback Address
•Highest Physical Address
▪Neighbor
▪Adjacency
Instead of flooding R5 - LSA R5 - LSA
224.0.0.6 224.0.0.6
LSAs to all routers DR
in the network, BDR
DROthers only R1 R5 - LSA
send their LSAs to R2
224.0.0.5
the DR and BDR
using the multicast
address 224.0.0.6
R5
DRother R5 - LSA
R3 224.0.0.5
The DR is responsible for DRother
forwarding the LSAs from R1
to all other routers. The DR R4
R5 - LSA
DRother
uses the multicast address 224.0.0.5
224.0.0.5
Terminology
Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved. Page 67
Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved. Page 68
OSPFv2 Basic Concepts - Route Types
Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved. Page 69
Virtual Link
Area 1
Area 0 Area 2
RTA RTB
RTB RTC
Area 1
Loopback0 E0/1 E0/0 Loopback0
2.2.2.2/32 .1 10.1.2.0/24 .2 3.3.3.3/32
E0/0
.1 10.1.1.0/24 .2
E0/1
.1 10.1.3.0/24 .2
Area 0 Area 2
E0/0
E0/0
Loopback0 Loopback0
1.1.1.1/32 4.4.4.4/32
RTA RTD
[RTA]router id 1.1.1.1
[RTA]ospf
[RTA-ospf-1]area 0
[RTA-ospf-1-area-0.0.0.0]network 1.1.1.1 0.0.0.0
[RTA-ospf-1-area-0.0.0.0]network 10.1.1.0 0.0.0.255
[RTA-ospf-1-area-0.0.0.0]return
<RTA>
RTB RTC
Area 1
Loopback0 E0/1 E0/0 Loopback0
2.2.2.2/32 .1 10.1.2.0/24 .2 3.3.3.3/32
E0/0
.1 10.1.1.0/24 .2
E0/1
.1 10.1.3.0/24 .2
Area 0 Area 2
E0/0
E0/0
Loopback0 Loopback0
RTA RTD
1.1.1.1/32 4.4.4.4/32
[RTB]router id 2.2.2.2
[RTB]ospf
[RTB-ospf-1]area 0
[RTB-ospf-1-area-0.0.0.0]network 2.2.2.2 0.0.0.0
[RTB-ospf-1-area-0.0.0.0]network 10.1.1.0 0.0.0.255
[RTB-ospf-1]area 1
[RTB-ospf-1-area-0.0.0.1]network 10.1.2.0 0.0.0.255
[RTB-ospf-1-area-0.0.0.1]vlink-peer 3.3.3.3
[RTB-ospf-1-area-0.0.0.1]return
<RTB>
RTB RTC
Area 1
Loopback0 E0/1 E0/0 Loopback0
2.2.2.2/32 .1 10.1.2.0/24 .2 3.3.3.3/32
E0/0
.1 10.1.1.0/24 .2
E0/1
.1 10.1.3.0/24 .2
Area 0 Area 2
E0/0
E0/0
Loopback0 Loopback0
RTA RTD
1.1.1.1/32 4.4.4.4/32
[RTC]router id 3.3.3.3
[RTC]ospf
[RTC-ospf-1]area 1
[RTC-ospf-1-area-0.0.0.1]network 10.1.2.0 0.0.0.255
[RTC-ospf-1-area-0.0.0.1]vlink-peer 2.2.2.2
[RTC-ospf-1]area 2
[RTC-ospf-1-area-0.0.0.2]network 3.3.3.3 0.0.0.0
[RTC-ospf-1-area-0.0.0.2]network 10.1.3.0 0.0.0.255
[RTC-ospf-1-area-0.0.0.2]return
<RTC>
RTB RTC
Area 1
Loopback0 E0/1 E0/0 Loopback0
2.2.2.2/32 .1 10.1.2.0/24 .2 3.3.3.3/32
E0/0
.1 10.1.1.0/24 .2
E0/1
.1 10.1.3.0/24 .2
Area 0 Area 2
E0/0
E0/0
Loopback0 Loopback0
RTA RTD
1.1.1.1/32 4.4.4.4/32
[RTD]router id 4.4.4.4
[RTD]ospf
[RTD-ospf-1]area 2
[RTD-ospf-1-area-0.0.0.2]network 4.4.4.4 0.0.0.0
[RTD-ospf-1-area-0.0.0.2]network 10.1.3.0 0.0.0.255
[RTD-ospf-1-area-0.0.0.2]return
<RTD>
[RTD]display ip routing-table
Routing Table: public net
Destination/Mask Protocol Pre Cost Nexthop Interface
1.1.1.1/32 OSPF 10 4 10.1.3.1 Ethernet0/0
2.2.2.2/32 OSPF 10 3 10.1.3.1 Ethernet0/0
3.3.3.3/32 OSPF 10 2 10.1.3.1 Ethernet0/0
4.4.4.4/32 DIRECT 0 0 127.0.0.1 InLoopBack0
10.1.1.0/24 OSPF 10 3 10.1.3.1 Ethernet0/0
10.1.2.0/24 OSPF 10 2 10.1.3.1 Ethernet0/0
10.1.3.0/24 DIRECT 0 0 10.1.3.2 Ethernet0/0
10.1.3.2/32 DIRECT 0 0 127.0.0.1 InLoopBack0
127.0.0.0/8 DIRECT 0 0 127.0.0.1 InLoopBack0
127.0.0.1/32 DIRECT 0 0 127.0.0.1 InLoopBack0