Adding iBGP Routes to the IP Routing Table

Cisco IOS has the same two requirements for adding iBGP routes to the IP routing table as it does for eBGP routes: ■ The route must be the best BGP route. ■ The route must be the best route (according to the AD) in comparison with other routing sources. Additionally, for iBGP-learned routes, IOS considers the concept of BGP synchronization. With BGP synchronization (often called sync) disabled using the no synchronization command, BGP uses the same logic for iBGP route..

Intrusion Detection System

Cisco SWAN includes the Wireless LAN Threat Defense Solution, which includes an intrusion detection system (IDS) (refer to Figure 23-2). This safeguards the wireless LAN from malicious and unauthorized access. For example, the IDS detects and suppresses rogue access points by disallowing them to authenticate with the network, and identifies unassociated clients through MAC address association tables. The IDS integrates with the Cisco Self-Defending Network, the Cisco vision f..

Adding a Comment to an ACL

You can add a comment to any standard or extended IP ACL by using the remark keyword: Router1#configure terminal Enter configuration commands, one per line.  End with CNTL/Z. Router1(config)#access-list 50 remark Authorizing thy trespass with compare Router1(config)#access-list 50 deny host 10.2.2.2 Router1(config)#access-list 50 permit 10.2.2.0 0.0.0.255 Router1(config)#access-list 50 permit any Router1(config)#end Router1# In addition, you can add a comment to a named..

Classical IP Over ATM

For Classical IP over ATM, you must define at least one ATMARP server: Router1#configure terminal Enter configuration commands, one per line.  End with CNTL/Z. Router1(config)#interface ATM1/0 Router1(config-if)#no ip address Router1(config-if)#atm ilmi-keepalive Router1(config-if)#pvc 0/5 qsaal Router1(config-if-atm-vc)#exit Router1(config-if)#pvc 0/16 ilmi Router1(config-if-atm-vc)#exit Router1(config-if)#exit Router1(config)#interface ATM1/0.1 multipoint Router1(confi..

Load-Balancing with HSRP

You can configure HSRP so that both routers are always in use if they are available. This allows you to use your network resources more efficiently, but it is slightly more complicated to configure. Configure the first router as follows, with two HSRP groups: Router1#configure terminal Enter configuration commands, one per line.  End with CNTL/Z. Router1(config)#interface FastEthernet0/1 Router1(config-if)#ip address 172.22.1.3 255.255.255.0 Router1(config-if)#st..