Configuring MED: Multiple Adjacent Autonomous Systems

By default, a Cisco router ignores MED when the multiple routes to a single NLRI list different neighboring ASNs. This default action makes sense—normally you would not expect two different neighboring ISPs to have chosen to work together to set MEDs. To override this default and consider the MED in all cases, a router needs to configure the bgp always-compare-med BGP subcommand. If used on one router, all routers inside the same AS should also use the bgp always-compare-me..

LDP/TDP Session Establishment

When you start MPLS on the first interface in a router, the TDP/LDP process is started and the Label Information Base (LIB) structure is created. The router also tries to discover other LSRs on the interfaces running MPLS through TDP hello packets. The TDP hello packets are sent as broadcast or multicast UDP packets, making LSR neighbor discovery automatic. The debug tag tdp transport command can monitor the TDP hellos. Example C-4 shows the TDP process startup and Example C-..

Configuring Shaping by Bandwidth Percent

The shape command allows the shaping rate to be stated as a percentage of the setting of the interface or subinterface bandwidth setting. Configuring based on a simple percentage of the bandwidth command setting seems obvious at first. However, you should keep in mind the following facts when configuring the shape command based on percentage of interface bandwidth: ■ The shape percent command uses the bandwidth of the interface or subinterface under which it is enabled. ..

Using DLSw to Bridge Between Ethernet and Token Ring

DLSw includes the capability to bridge different kinds of media. One common example of this is bridging an Ethernet segment to a Token Ring. dlsw-ether-branch#configure terminal Enter configuration commands, one per line.  End with CNTL/Z. dlsw-ether-branch(config)#interface Loopback0 dlsw-ether-branch(config-if)#ip address 10.1.3.5 255.255.255.252 dlsw-ether-branch(config-if)#exit dlsw-ether-branch(config)#access-list 200 permit 0x0000 0x0D0D dlsw-ether-branch(config)#..

Creating an SSL VPN

We should start by stressing that the Secure Socket Layer (SSL) WebVPN options available on an IOS router are severely limited compared to those available on dedicated VPN concentrator devices, such as the Cisco VPN 3000 series devices. In particular, the IOS version of WebVPN only supports SSL Version 3, and not Transport Layer Security (TLS), it doesn't support Cisco Security Desktop (CSD) or Cisco SSL VPN Client software, and it doesn't support Macromedia Flash URLs. On t..