Redistributing a Subset of Routes Using a Route Map
Route maps can be referenced by any redistribute command. The route map may actually let allthe routes through, setting different route attributes (for example, metrics) for different routes. Or,it may match some routes with a deny clause, which prevents the route from being redistributed.(Refer to Figure 11-1 for a review of route map logic.)Figure 11-3 and Example 11-2 show an example of mutual redistribution between EIGRP andOSPF, with some routes being either filtered or ..
RIPng for IPv6 is based on RIPv2, but it is not an extension of RIPv2; it is an entirely separate protocol. RIPng does not support IPv4, so to use RIP to route both IPv4 and IPv6, you must run RIPv1 or v2 for IPv4 and RIPng for IPv6. RIPng uses the same timers, procedures, and message types as RIPv2. For example, like RIPv2 it uses a 30-second update timer jittered to prevent message synchronization, a 180-second timeout period, a 120-second garbage-collection timer, and a 1..
Role of Identity in Secure Networking
Although there are clearly right and wrong ways to deploy security technologies, identity is less obvious. From a network designer's perspective, you must start by deciding where and what kind of identity information you must acquire. Broadly defined, there are three potential network identity paths: 1. Device to network A device authenticates to the network or another device within the network. 2. User to network A user authenticates to t..
Appreciating what QoS tools and methods do to packets in a network is fundamental to appreciating the effect of individual QoS tools discussed in later chapters, and ultimately understanding the network designs and methods that constitute the material in this book. End-to-End QoS Regardless of how it is measured, QoS is a vital element in any converged network. To ensure the highest level of quality, however, QoS must be implemented across all areas of the network. QoS is d..
Port-based authentication can be handled by one or more external Remote Authentication Dial-In User Service (RADIUS) servers. Although many Cisco switch platforms allow other authentication methods to be configured, only RADIUS is supported for 802.1x. The actual RADIUS authentication method must be configured first, followed by 802.1x, as shown in the following steps: Step 1. Enable AAA on the switch. By default, AAA is disabled. You can enable AAA for port-based aut..
