User Tools

Site Tools


office

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
office [2023/04/04 07:01] sysadmoffice [2024/05/05 16:51] (current) sysadm
Line 1: Line 1:
 +  * 
 +  * RP/0/RP0/CPU0:JASSDRCR-02#show controllers TenGigE0/0/0/16 phy
 +
 +
 +  * Destination IP table:
 +  *  
 +  * Name
 +  * IP
 +  * Expected Latency(ms)
 +  * EAST-BING
 +  * 13.107.21.200
 +  * 45
 +  * EAST-TWITTER
 +  * 117.18.232.102
 +  * 45
 +  * EAST-ZENLAYER
 +  * 129.227.71.27
 +  * 70
 +  * EAST-FAR-EDGECAST
 +  * 117.18.232.184
 +  * 45
 +  * INDIA-AKAMAI
 +  * 23.9.65.23
 +  * 40
 +  * WEST-UK-VIJU-CLOUD
 +  * 176.58.109.199
 +  * 185
 +  * WEST-USA-IMO
 +  * 192.12.31.101
 +  * 300
 +  * WEST-UK-TELEGRAM
 +  * 149.154.167.151
 +  * 185
 +  * WEST-UK-AMAZON
 +  * 54.239.34.171
 +  * 200
 +
 +
   *    * 
   * CLR LINK P2P check    * CLR LINK P2P check 
Line 199: Line 237:
  
  
-**as-path-set CHINA-TELECOM-EQUINIX-AS-BLOCK +  * as-path-set CHINA-TELECOM-EQUINIX-AS-BLOCK 
-  ios-regex '^12345_', +  *   ios-regex '^12345_', 
-  ios-regex '^32934_', +  *   ios-regex '^32934_', 
-  ios-regex '^15169_', +  *   ios-regex '^15169_', 
-  ios-regex '^174_', +  *   ios-regex '^174_', 
-  ios-regex '^7473_', +  *   ios-regex '^7473_', 
-  ios-regex '^9498_', +  *   ios-regex '^9498_', 
-  ios-regex '^6453_', +  *   ios-regex '^6453_', 
-  ios-regex '^132602_', +  *   ios-regex '^132602_', 
-  ios-regex '^64074_', +  *   ios-regex '^64074_', 
-  ios-regex '^132884_', +  *   ios-regex '^132884_', 
- // ios-regex '^_'// +  *  // ios-regex '^_'// 
-end-set +  end-set 
-!**+  ! 
 + 
 + 
 +  display  ip as-path-filter BTTB-RAMNA-AS-IN 
 +  As path filter name: BTTB-RAMNA-AS-IN 
 +  *     index: 10            permit     ^17494$ 
 +  *     index: 20            permit     ^17494 63932_ 
 +  *     index: 30            permit     ^17494 133890_ 
 +  *     index: 40            permit     ^17494 45532_ 
 +  *     index: 50            permit     ^136759_  
 + 
 + 
 +  * RP/0/RP0/CPU0:SINEQCR-01#show running-config interface TenGigE0/0/0/
 +  * Tue Mar 14 19:54:47.955 BDT 
 +  * interface TenGigE0/0/0/
 +  * description @@ SMW5-LINK20-TO-UTTARA-AGG-VIA-EQUINIX-SG3-SMW5-BSCCL-SCL @@ 
 +  * ipv4 address 103.199.87.72 255.255.255.254 
 +  * ipv6 address 2405:1500:0:2::33d/126 
 +  * ipv6 enable 
 +  * **carrier-delay up 20000 down 20000** 
 +  * shutdown 
 +  * load-interval 30 
 +  * ipv4 access-group BTRC-NEW-BLOCK ingress 
 +  * ipv4 access-group BTRC-NEW-BLOCK egress 
 +  * ! 
 + 
 +The hold up time and hold down time can be used to prevent routing loops and to improve the stability of the network. For example, if a router has a hold up time of 10 seconds and a hold down time of 20 seconds, and it declares a neighbor down, it will wait 10 seconds for a hello packet from the neighbor before declaring the neighbor down. If the router does not receive a hello packet from the neighbor within 10 seconds, it will wait 20 seconds before trying to re-establish the neighbor adjacency. This helps to prevent routing loops from occurring if the neighbor is only temporarily unavailable. 
 + 
 +The hold up time and hold down time can also be used to improve the stability of the network by preventing flapping. Flapping occurs when a routing loop is created and then broken, and then created again. This can happen if a router is constantly declaring neighbors down and then up again. The hold up time and hold down time can help to prevent flapping by preventing a router from declaring a neighbor down too quickly. 
 + 
 + 
 +  * interface Ethernet1/21 
 +  *   description ICC-NIX_TO-ODF-1 T5 P12_iccc_160220_022_ic 
 +  *   switchport access vlan 777 
 +  *   spanning-tree guard root 
 +  *   switchport port-security 
 +  *   switchport port-security mac-address C4AD.3468.6AC2 
 +  *   no shutdown 
 + 
 +---------------spanning ------------------- 
 + 
 +show  running-config | i spann 
 +no spanning-tree vlan 1565,1933,2389,2463,3029,3442,3826 
 +DHUTRCLSW-01# show  running-config | i spa 
 +no spanning-tree vlan 1565,1933,2389,2463,3029,3442,3826 
 + 
 +HUTRCLSW-01(config)# no spanning-tree vlan 1467,1565,1933,2389,2463,3029,3442,3826 
 + 
 +----------------------------------------Cisco Nexus L2 Switch port-channel configure ---switchport--  
 + 
 +  * DHDHNCLSW-02# show running-config interface port-channel 1 
 +  *  
 +  * !Command: show running-config interface port-channel1 
 +  * !Running configuration last done at: Wed Jul 19 12:58:46 2023 
 +  * !Time: Wed Jul 19 13:53:30 2023 
 +  *  
 +  * version 9.3(4) Bios:version 07.66  
 +  *  
 +  * interface port-channel1 
 +  *   description TO-PALTAN SW1 
 +  *   switchport 
 +  *   switchport mode trunk 
 +  *   switchport trunk allowed vlan 9,12-14 
 +  *  
 +  * DHDHNCLSW-02#  
 +  * DHDHNCLSW-02# show running-config interface Eth1/53 
 +  *  
 +  * !Command: show running-config interface Ethernet1/53 
 +  * !Running configuration last done at: Wed Jul 19 12:58:46 2023 
 +  * !Time: Wed Jul 19 13:54:01 2023 
 +  *  
 +  * version 9.3(4) Bios:version 07.66  
 +  *  
 +  * interface Ethernet1/53 
 +  *   description TO-PALTAN SW1-port-100GE1/4/8,siig_230521_003_ic&siig_230521_004_ic#-DHN-ODF-03-T-1-P-9&10 
 +  *   switchport 
 +  *   switchport mode trunk 
 +  *   switchport trunk allowed vlan 9,12-14 
 +  *   channel-group 1 mode active 
 +  *   no shutdown 
 +  *  
 +  * DHDHNCLSW-02#  
 +  * DHDHNCLSW-02# show running-config interface Eth1/54 
 +  *  
 +  * !Command: show running-config interface Ethernet1/54 
 +  * !Running configuration last done at: Wed Jul 19 12:58:46 2023 
 +  * !Time: Wed Jul 19 13:54:08 2023 
 +  *  
 +  * version 9.3(4) Bios:version 07.66  
 +  *  
 +  * interface Ethernet1/54 
 +  *   description TO-PALTAN SW1-port-100GE1/4/7,siig_230521_001_ic&&siig_230521_002_ic-DHN-ODF-03-T-1-P-7,
 +  *   switchport 
 +  *   switchport mode trunk 
 +  *   switchport trunk allowed vlan 9,12-14 
 +  *   channel-group 1 mode active 
 +  *   no shutdown 
 +  *    
 +---------------------- 
 + 
 + 
 + 
 +  * [*DHUTRAGGR-01]display cur 
 +  * [*DHUTRAGGR-01]display current-configuration | in 10.56.79.30 
 +  * Info: It will take a long time if the content you search is too much or the string you input is too long, you can press CTRL_C to break. 
 +  *  peer 10.56.79.30 as-number 134371 
 +  *  peer 10.56.79.30 description CIRCLE_NETWORK 
 +  *   peer 10.56.79.30 enable 
 +  *   peer 10.56.79.30 route-policy CIRCLE_NETWORK import 
 +  *   peer 10.56.79.30 route-policy ALL-ROUTE export 
 +  *   peer 10.56.79.30 route-limit accept-prefix 100 
 +  *   peer 10.56.79.30 advertise-community 
 +  * [*DHUTRAGGR-01] 
 +  * [*DHUTRAGGR-01]display current-configuration | in 10.56.79.50 
 +  * Info: It will take a long time if the content you search is too much or the string you input is too long, you can press CTRL_C to break. 
 +  *  peer 10.56.79.50 as-number 134371 
 +  *  peer 10.56.79.50 description @@CIRCL-NETWORk-SAVAR-2 
 +  *   peer 10.56.79.50 enable 
 +  *   peer 10.56.79.50 route-policy CIRCLE_NETWORK import 
 +  *   peer 10.56.79.50 route-policy CIRCLE-OUT export 
 +  *   peer 10.56.79.50 route-limit accept-prefix 100 
 +  *   peer 10.56.79.50 advertise-community 
 +  * [*DHUTRAGGR-01] 
 +  * [*DHUTRAGGR-01]display current-configuration | in 10.123.235.46 
 +  * Info: It will take a long time if the content you search is too much or the string you input is too long, you can press CTRL_C to break. 
 +  *  peer 10.123.235.46 as-number 134371 
 +  *  peer 10.123.235.46 description @@CIRCLE-DDOS-BLACKHOLE@@ 
 +  *   peer 10.123.235.46 enable 
 +  *   peer 10.123.235.46 route-policy CIRCLE-DDOS import 
 +  *   peer 10.123.235.46 route-policy BLACKHOLE-OUT export 
 +  *   peer 10.123.235.46 route-limit accept-prefix 100 
 +  *   peer 10.123.235.46 advertise-community 
 +  * [*DHUTRAGGR-01] 
 +  * [*DHUTRAGGR-01]dis 
 +  * [*DHUTRAGGR-01]display cur 
 +  * [*DHUTRAGGR-01]display current-configuration | in CIRCLE-OUT 
 +  * Info: It will take a long time if the content you search is too much or the string you input is too long, you can press CTRL_C to break. 
 +  *   peer 10.56.79.50 route-policy CIRCLE-OUT export 
 +  *   peer 10.56.79.54 route-policy CIRCLE-OUT export 
 +  * route-policy CIRCLE-OUT permit node 10 
 +  * route-policy CIRCLE-OUT permit node 20 
 +  * route-policy CIRCLE-OUT permit node 30 
 +  * route-policy CIRCLE-OUT deny node 40 
 +  * [*DHUTRAGGR-01] 
 +  * [*DHUTRAGGR-01]dis 
 +  * [*DHUTRAGGR-01]display route-policy CIRCLE-OUT 
 +  * Route-policy: CIRCLE-OUT 
 +  *   permit : 10 (matched counts: 0) 
 +  *     Match clauses:  
 +  *       if-match ip-prefix CIRCLE-PREFIX-BLOCK 
 +  *   permit : 20 (matched counts: 4405712) 
 +  *     Match clauses:  
 +  *       if-match as-path-filter CIRCLE-AS-OUT 
 +  *   permit : 30 (matched counts: 242) 
 +  *     Match clauses:  
 +  *       if-match ip-prefix DEFAULT-ONLY 
 +  *   deny : 40 (matched counts: 510466528) 
 +  * [*DHUTRAGGR-01] 
 +  * [*DHUTRAGGR-01]dis 
 +  * [*DHUTRAGGR-01]display cur 
 +  * [*DHUTRAGGR-01]display current-configuration | in CIRCLE-AS-OUT 
 +  * Info: It will take a long time if the content you search is too much or the string you input is too long, you can press CTRL_C to break. 
 +  *  if-match as-path-filter CIRCLE-AS-OUT 
 +  * ip as-path-filter CIRCLE-AS-OUT index 10 permit ^15169_ 
 +  * ip as-path-filter CIRCLE-AS-OUT index 20 permit ^32934_ 
 +  * ip as-path-filter CIRCLE-AS-OUT index 30 permit ^132203_ 
 +  * ip as-path-filter CIRCLE-AS-OUT index 40 permit ^13335_ 
 +  * ip as-path-filter CIRCLE-AS-OUT index 50 permit ^9498 32934_ 
 +  * ip as-path-filter CIRCLE-AS-OUT index 60 permit ^9498 15169_ 
 +  * ip as-path-filter CIRCLE-AS-OUT index 70 permit ^2914 10075 13335_ 
 +  * ip as-path-filter CIRCLE-AS-OUT index 80 permit ^9498 132203_ 
 +  * ip as-path-filter CIRCLE-AS-OUT index 90 permit ^16509_ 
 +  * [*DHUTRAGGR-01] 
 +  * [*DHUTRAGGR-01]display current-configuration | in CIRCLE-PREFIX-BLOCK 
 +  * Info: It will take a long time if the content you search is too much or the string you input is too long, you can press CTRL_C to break. 
 +  *  if-match ip-prefix CIRCLE-PREFIX-BLOCK 
 +  * ip ip-prefix CIRCLE-PREFIX-BLOCK index 10 permit 192.168.29.1 32 
 + 
 +--------------------- 
 +  *  
 +  *  
 +  * [~DHUTRAGGR-01-route-policy]display this  
 +  * # 
 +  * route-policy SPEED-PLUS-TANGAIL permit node 10 
 +  *  if-match ip-prefix SPEED-PLUS-TANGAIL-IPv4 
 +  *  apply local-preference 1000 
 +  *  apply community 58717:100 58717:830 58717:1100 
 +  * # 
 +  * route-policy SPEED-PLUS-TANGAIL deny node 20 
 +  * # 
 +  * return 
 + 
 + 
 + 
 +violate-action drop to avoid P2P loss issue in cisco ASR9K 
 + 
 +policy-map 689mb 
 + class POLICER 
 +  police rate 689 mbps  
 +   exceed-action drop 
 +  !  
 + !  
 + class class-default 
 + !  
 + end-policy-map 
 +!  
 + 
 +RP/0/RSP0/CPU0:CTGSDRAGGR-02#conf terminal         
 +Sun May  5 22:41:21.508 UTC 
 +RP/0/RSP0/CPU0:CTGSDRAGGR-02(config)#policy-map 689mb 
 +RP/0/RSP0/CPU0:CTGSDRAGGR-02(config-pmap)# class POLICER 
 +RP/0/RSP0/CPU0:CTGSDRAGGR-02(config-pmap-c)#  police rate 689 mbps 
 +RP/0/RSP0/CPU0:CTGSDRAGGR-02(config-pmap-c-police)#no  exceed-action drop 
 +RP/0/RSP0/CPU0:CTGSDRAGGR-02(config-pmap-c-police)#**violate-action drop**  
 +RP/0/RSP0/CPU0:CTGSDRAGGR-02(config-pmap-c-police)#commit  
 + 
 +RP/0/RSP0/CPU0:CTGSDRAGGR-02#show  running-config policy-map 689mb   
 +Sun May  5 22:41:44.708 UTC 
 +policy-map 689mb 
 + class POLICER 
 +  police rate 689 mbps  
 +   violate-action drop 
 +  !  
 + !  
 + class class-default 
 + !  
 + end-policy-map 
 +
 + 
 +=======================
office.1680591707.txt.gz · Last modified: 2023/04/04 07:01 by sysadm