Layer 3-Switched Multicast Packet Rewrite
When a multicast packet is Layer 3 switched from a multicast source to a destination multicast group, the PFC and the DFCs perform a packet rewrite that is based on information learned from the RP and stored in the adjacency table. For example, Server A sends a multicast packet addressed to IP multicast group G1. If there are members of group G1 on VLANs other than the source VLAN, the PFC must perform a packet rewrite when it replicates the traffic to the other VLANs (the sw..
The steps for configuring RIPng are the same as RIPv1 and v2: Create the routing process, enable the routing protocol on interfaces, and perform any desired customization. The commands, however, are very different. In fact, the creation of the routing process and enabling the routing protocol on the first interface is accomplished in one step, using an interface command. The case studies for RIPng will be similar to those of RIPv1 and v2 to illustrate the similarities in the ..
IPsec Modes of Operation and Security Options
IPsec has many protocol options. This section provides a brief look at the main elements. One concept that's important to understand for IPsec is the concept of security associations, or SAs. An SA is simply a connection that provides security services to the traffic carried by it. When you use IPsec, you build SAs between the communicating devices. The SA contains information about which data traffic is going to be encrypted, how it is encrypted, whether and how it is authen..
Comparison of the IS-IS Restart Mechanisms
The advantages of the IETF IS-IS restart approach include scalability (does not require IS-ISrelated state preservation across the restart) and standards-based implementation. Disadvantages of this approach are that it requires IS-IS protocol extensions and support from its neighbors (helper nodes). To elaborate on this further, consider a router R1 in a provider's network that is peering with an R2 that might be managed by another provider or a customer. The IETF IS-IS resta..
Creating an Encrypted Router-to-Router VPN in a GRE Tunnel
There are several steps to these configurations, but they are the same on both routers. The first step is to create an appropriate key exchange policy using ISAKMP. The following set of commands defines the policy with priority 10. When ISAKMP negotiates the security association (SA) parameters, it starts with the lowest priority and goes to the highest. The highest possible priority value is 10,000: Router1(config)#crypto isakmp policy 10 Router1(config-isakmp)#encr aes 256..
