|
0:00:13
|
In our next section here, we're gonna look at the
|
|
0:00:19
|
that can be used to solve the
|
|
0:00:22
|
where the line protocol status
|
|
0:00:26
|
is not a good indication for
|
|
0:00:30
|
whether connectivity actually
|
|
0:00:35
|
Now, this feature is independent...
|
|
0:00:38
|
of the other processes that could be used
|
|
0:00:44
|
It can be used for things like
|
|
0:00:48
|
Also for the first hop redundancy protocols
|
|
0:00:53
|
Basically, any process that we need to test whether
|
|
0:01:00
|
take some sort of action.
|
|
0:01:02
|
Like in the case of HSRP,
|
|
0:01:03
|
as the result of the enhanced
|
|
0:01:07
|
we can determine which device on the link should
|
|
0:01:13
|
In our case, we'll look at using this
|
|
0:01:17
|
to add reliability and more intelligence
|
|
0:01:24
|
Now, in the Object Tracking feature,
|
|
0:01:28
|
we can either look at things like the route entry
|
|
0:01:34
|
or the routing metric, whether
|
|
0:01:38
|
We could also use it with what's known
|
|
0:01:42
|
or the IP SLA feature.
|
|
0:01:44
|
This was previously known as the
|
|
0:01:51
|
And the "IP Service Assurance
|
|
0:01:56
|
The feature was actually renamed twice. Now,
|
|
0:02:03
|
What's really new about this feature though,
|
|
0:02:06
|
and we'll see, we'll use for a bunch of different
|
|
0:02:10
|
is that we can add application intelligence to
|
|
0:02:18
|
So, application intelligence in terms of things like,
|
|
0:02:22
|
can we actually reach the web server,
|
|
0:02:25
|
not only by pinging the address of the server,
|
|
0:02:28
|
but can we get a web page to make sure
|
|
0:02:33
|
Or in the case of DNS, not only
|
|
0:02:37
|
but can we get some sort of...
|
|
0:02:40
|
record return from them to make sure that the
|
|
0:02:49
|
Okay, same would be true if like DHCP.
|
|
0:02:52
|
I wanna know not only can I ping the DHCP server,
|
|
0:02:57
|
So, it's testing not only
|
|
0:03:01
|
but also whether the application
|
|
0:03:05
|
So, once we define these...
|
|
0:03:09
|
different tracking objects like the IP SLA,
|
|
0:03:12
|
or the embedded event manager,
|
|
0:03:15
|
then, we will reference this from
|
|
0:03:21
|
So, in our design here,
|
|
0:03:24
|
we're gonna be doing this on router 5.
|
|
0:03:27
|
On router 5, we'll say that
|
|
0:03:30
|
out the frame relay link to
|
|
0:03:36
|
If the frame relay link is not up,
|
|
0:03:41
|
to router 4 as the secondary.
|
|
0:03:45
|
What the problem is here,
|
|
0:03:51
|
is not a good indication of whether we actually
|
|
0:03:57
|
So, we could set up router 5
|
|
0:04:02
|
to see if we get a TCP
|
|
0:04:05
|
We could set it up to ping router 4,
|
|
0:04:08
|
to say, "If I don't get a ICMP echo
|
|
0:04:12
|
then, I'm gonna fall over
|
|
0:04:17
|
So, we're no longer relying on just
|
|
0:04:22
|
We're looking at some sort of
|
|
0:04:26
|
whether it's Layer 3 or above.
|
|
0:04:31
|
Now, documentation-wise,
|
|
0:04:33
|
this would be under the configuration guide
|
|
0:04:41
|
so this is where the Enhanced
|
|
0:04:45
|
the...
|
|
0:04:50
|
where the first hop redundancy
|
|
0:04:54
|
So, things like HSRP, GLBP, VRRP,
|
|
0:04:56
|
how those can be used to
|
|
0:05:01
|
We would also want to see the...
|
|
0:05:05
|
IP Service Level Agreement
|
|
0:05:08
|
which I believe has its own...
|
|
0:05:13
|
category which is here under Network
|
|
0:05:20
|
And in the IP SLA,
|
|
0:05:22
|
depending on the particular version
|
|
0:05:25
|
some of the newer platforms and newer feature sets
|
|
0:05:33
|
At a minimum,
|
|
0:05:35
|
most of them should allow you to
|
|
0:05:39
|
which would be just to test basic
|
|
0:05:44
|
But if we want to look
|
|
0:05:47
|
we could check like the HTTP operation.
|
|
0:05:52
|
We could say that we want to get an
|
|
0:06:01
|
So, we could say that "The URL is...
|
|
0:06:04
|
198.133 whatever the address they have here."
|
|
0:06:08
|
And in this case, they're trying to get...
|
|
0:06:11
|
just the...
|
|
0:06:13
|
whatever the top index is,
|
|
0:06:16
|
In this case, the next one,
|
|
0:06:20
|
which then, you would have to know what is the
|
|
0:06:27
|
So, probably, this would most likely
|
|
0:06:32
|
or if you were testing on this,
|
|
0:06:34
|
it would be something very basic that you could
|
|
0:06:40
|
In our case, we'll just look at the basic ICMP
|
|
0:06:47
|
But you can see that you could do...
|
|
0:06:49
|
FTP, if you wanna make sure if
|
|
0:06:53
|
TCP Connect...
|
|
0:06:55
|
would be for some sort of TCP application
|
|
0:07:00
|
Like, I wanna know,
|
|
0:07:04
|
Or can I associate to them?
|
|
0:07:05
|
So, we could just tell TCP Connect
|
|
0:07:07
|
to send the syn on that particular port.
|
|
0:07:13
|
So in this case, they're saying that...
|
|
0:07:17
|
"I'm connecting to address 10.0.0.1
|
|
0:07:23
|
If this is correct,
|
|
0:07:26
|
then...
|
|
0:07:27
|
the other side, which is...
|
|
0:07:31
|
the sender.
|
|
0:07:37
|
It should say that the...
|
|
0:07:39
|
the connection is up.
|
|
0:07:41
|
So, 23 here, this would be whatever
|
|
0:07:47
|
So once we define the IP SLA,
|
|
0:07:50
|
then, we're gonna define
|
|
0:07:54
|
So again, this is under the Application
|
|
0:07:58
|
There's a couple different
|
|
0:08:01
|
You could just look at
|
|
0:08:04
|
Like we were before with the Backup Interface
|
|
0:08:08
|
But again, the issue with this
|
|
0:08:11
|
is not a good indication of
|
|
0:08:15
|
We could look at whether a particular
|
|
0:08:20
|
So, if you have some router that you're tracking in
|
|
0:08:27
|
you can take an action based on that.
|
|
0:08:29
|
You could say the if the metric of a prefix changes,
|
|
0:08:34
|
the state of an IP SLA operation which is what
|
|
0:08:42
|
you could also do multiples of these at the same time,
|
|
0:08:49
|
this would allow us to do
|
|
0:08:56
|
where if I create multiple...
|
|
0:09:07
|
multiple conditions of the object,
|
|
0:09:11
|
it says, "Track 100 list boolean and."
|
|
0:09:14
|
Then, what are the other
|
|
0:09:19
|
We could say for example that
|
|
0:09:24
|
the line protocol is up,
|
|
0:09:26
|
and that I can ping
|
|
0:09:29
|
but also that the route to them is
|
|
0:09:34
|
So, you can combine a different list
|
|
0:09:38
|
Using the logical and or the logical or.
|
|
0:09:40
|
In our case, we'll just look at a
|
|
0:09:45
|
So, the first things I'm
|
|
0:09:48
|
I'm going to remove the previous...
|
|
0:09:53
|
backup configuration and the
|
|
0:09:57
|
So, on router 4,
|
|
0:09:59
|
we are no longer doing
|
|
0:10:06
|
If we go to router 5,
|
|
0:10:10
|
the frame relay interface,
|
|
0:10:14
|
It was previously shutdown.
|
|
0:10:15
|
Then, let's say, Do Show
|
|
0:10:24
|
Now, the...
|
|
0:10:26
|
top route, this is my backup route.
|
|
0:10:30
|
The bottom one is my primary route.
|
|
0:10:34
|
So, I'm going to...
|
|
0:10:37
|
remove both of these.
|
|
0:10:40
|
And we'll recreate them with
|
|
0:10:43
|
So that one is a floating static route;
|
|
0:10:47
|
The bottom one, this
|
|
0:10:52
|
I'll say, just for clarity,
|
|
0:10:55
|
The one above it,
|
|
0:10:58
|
that goes to the
|
|
0:11:02
|
This will have a distance of 20.
|
|
0:11:07
|
At this point, we would then be
|
|
0:11:11
|
to figure out which one of
|
|
0:11:14
|
So, assuming that the first link
|
|
0:11:17
|
can be installed in the routing table,
|
|
0:11:20
|
If the first link is not installed, then, it
|
|
0:11:27
|
So, essentially what I would wanna add here
|
|
0:11:32
|
I wanna make sure that
|
|
0:11:35
|
And if it says that connectivity
|
|
0:11:38
|
then, we're gonna fall back over
|
|
0:11:44
|
So next, I'll define
|
|
0:11:48
|
and then the enhanced object to
|
|
0:11:52
|
So, we'll say, IP SLA,
|
|
0:11:55
|
give it a number, we'll say 1.
|
|
0:11:58
|
Now, I choose, what is the type
|
|
0:12:03
|
In this case, we'll do just an
|
|
0:12:08
|
I want to ping...
|
|
0:12:10
|
the frame relay interface of router 4.
|
|
0:12:14
|
I will source this...
|
|
0:12:18
|
from my own frame relay interface.
|
|
0:12:25
|
Then, depending on the individual
|
|
0:12:29
|
you'll see different sub-options here.
|
|
0:12:31
|
So, the HTTP operation is gonna be
|
|
0:12:36
|
Really, the only thing
|
|
0:12:38
|
the frequency...
|
|
0:12:41
|
and the time-out.
|
|
0:12:44
|
I'll say, "How often do I
|
|
0:12:46
|
Let's say, "Every 5 seconds."
|
|
0:12:50
|
Now, what's the time-out
|
|
0:12:53
|
to figure out, was this
|
|
0:12:56
|
I'll say, "The time-out
|
|
0:12:59
|
So, I'm giving the other side of the link 2
|
|
0:13:05
|
We could then say...
|
|
0:13:07
|
"How many...
|
|
0:13:10
|
subsequent failed operations...
|
|
0:13:13
|
need to occur before the
|
|
0:13:18
|
Here, we'll just use the default.
|
|
0:13:19
|
So, you'll see, there's a lot of different sub-options
|
|
0:13:23
|
and with the tracking feature.
|
|
0:13:28
|
Now, I'm going to start the process.
|
|
0:13:31
|
IP SLA 1 Schedule,
|
|
0:13:34
|
or actually, IP SLA Schedule 1.
|
|
0:13:38
|
I want to start now,
|
|
0:13:42
|
and the lifetime is forever.
|
|
0:13:47
|
So, if the router reboots, then,
|
|
0:13:51
|
If I want it to be sort of timed operation,
|
|
0:13:55
|
But I just want this to go forever.
|
|
0:13:59
|
Now, if I were to look
|
|
0:14:04
|
the...
|
|
0:14:10
|
statistics for entry number 1,
|
|
0:14:14
|
the only thing I really care about here...
|
|
0:14:18
|
is what's the return code?
|
|
0:14:22
|
If the return code is "OK",
|
|
0:14:29
|
If the return code is anything besides
|
|
0:14:35
|
Ultimately, what should happen...
|
|
0:14:37
|
is that if the object goes down,
|
|
0:14:40
|
the static route will then be
|
|
0:14:44
|
which means we will fall
|
|
0:14:49
|
If we continue to look at this,
|
|
0:14:52
|
we should see that the...
|
|
0:14:55
|
number of successes keep going up,
|
|
0:14:57
|
and the number of
|
|
0:15:00
|
Because at this point, there's nothing wrong with
|
|
0:15:04
|
not getting responses
|
|
0:15:07
|
So, if we were to look at router 4,
|
|
0:15:10
|
and say, Debug IP ICMP,
|
|
0:15:13
|
we would see that every 5 seconds,
|
|
0:15:15
|
we should be receiving the ping in from router 5
|
|
0:15:25
|
So next, let's see...
|
|
0:15:27
|
what's gonna happen...
|
|
0:15:30
|
once the pings stop working?
|
|
0:15:32
|
This is where we define
|
|
0:15:35
|
So, on global config.,
|
|
0:15:38
|
Give it a number. I'll say,
|
|
0:15:41
|
I am wanting to track
|
|
0:15:47
|
So, you can see, there's other
|
|
0:15:49
|
the interface line protocol status.
|
|
0:15:52
|
The IP route, whether that's in the table,
|
|
0:15:55
|
the list would be for the boolean
|
|
0:15:59
|
A stub object would be for the
|
|
0:16:05
|
We'll take a look at EEM
|
|
0:16:08
|
We're not gonna go into a
|
|
0:16:11
|
but there's a lot of different flexibility
|
|
0:16:16
|
from a...
|
|
0:16:18
|
like a scripting programming point of view.
|
|
0:16:20
|
So, I could configure some...
|
|
0:16:23
|
script that says...
|
|
0:16:25
|
"Look at the...
|
|
0:16:28
|
the load on the interface of router 5.
|
|
0:16:32
|
Or maybe look at some sort of errors.
|
|
0:16:37
|
Or look at basically, any other variable
|
|
0:16:44
|
the number of resets, if there's
|
|
0:16:48
|
Then, if this has exceeded,
|
|
0:16:50
|
then, I could report the tracked object down,
|
|
0:16:55
|
So, there's a lot of flexibility
|
|
0:16:58
|
it's basically full-blown
|
|
0:17:05
|
So, I just wanna track the
|
|
0:17:10
|
I want to track the state of this...
|
|
0:17:14
|
whether it's up or down.
|
|
0:17:17
|
In here, I could say, what is the delay
|
|
0:17:22
|
between up and down?
|
|
0:17:23
|
At this point, I'll just
|
|
0:17:29
|
If we now look at the Show
|
|
0:17:34
|
it says that "The state of the
|
|
0:17:37
|
because the SLA instance number 1
|
|
0:17:45
|
If we report anything besides OK,
|
|
0:17:51
|
which then in turn will remove our
|
|
0:17:56
|
because the tracked object is going to
|
|
0:18:01
|
So, this is our last piece of the
|
|
0:18:05
|
we need to say that for our static route
|
|
0:18:09
|
Which is the top one.
|
|
0:18:16
|
We're going to track object number 2.
|
|
0:18:26
|
We can now look at the Debug Track,
|
|
0:18:30
|
which would show us
|
|
0:18:35
|
And let's now go to router 4.
|
|
0:18:40
|
And we will shut the frame
|
|
0:18:44
|
So now, on router 4, they loose
|
|
0:18:49
|
Again, from router 5's perspective,
|
|
0:18:54
|
this is not going to update
|
|
0:19:02
|
Since the ping timed out, now,
|
|
0:19:06
|
which implies that now,
|
|
0:19:12
|
If we look at the result of
|
|
0:19:16
|
we see that now the route that
|
|
0:19:21
|
is installed as opposed
|
|
0:19:26
|
So if we trace the route to
|
|
0:19:32
|
we see that we're going over the secondary
|
|
0:19:38
|
Once router 4...
|
|
0:19:41
|
brings the link back up,
|
|
0:19:48
|
we should see after the LMI converges,
|
|
0:19:52
|
and router 4 starts to receive...
|
|
0:19:54
|
the pings and then send the replies back,
|
|
0:19:57
|
the tracked object should
|
|
0:20:00
|
which means that we will insert the
|
|
0:20:20
|
We could see now, the object
|
|
0:20:24
|
if we look at the Show IP Route Static,
|
|
0:20:26
|
we could see now, the
|
|
0:20:30
|
If we look at the Traceroute, we can see packets
|
|
0:20:34
|
not over the backup link.
|
|
0:20:40
|
So, this type of feature is very useful...
|
|
0:20:43
|
in any of environment where you
|
|
0:20:47
|
So, you don't wanna use OSPF for
|
|
0:20:52
|
or anything else in a
|
|
0:20:55
|
but you still wanna add some sort of intelligence out
|
|
0:21:03
|
So, a very common
|
|
0:21:06
|
is when you're using
|
|
0:21:09
|
So, if I have router 1 here...
|
|
0:21:13
|
that connects to the DSL modem,
|
|
0:21:18
|
where the DSL modem again is a
|
|
0:21:25
|
Then, the modem connects to the...
|
|
0:21:28
|
"DSL Aggregation Multiplexer", the DSLAM,
|
|
0:21:32
|
which then goes on to
|
|
0:21:39
|
The problem in this design..
|
|
0:21:42
|
is that if the ATM PVC is down,
|
|
0:21:47
|
this will not update the
|
|
0:21:50
|
between the router and...
|
|
0:21:53
|
the modem.
|
|
0:21:55
|
So, router 2 says the link is up.
|
|
0:21:57
|
If I have a static route that
|
|
0:22:01
|
just the default route out to the Internet,
|
|
0:22:03
|
then, all those packets
|
|
0:22:06
|
So, on router 1, what we could do is say,
|
|
0:22:11
|
then, I'm gonna ping the
|
|
0:22:15
|
If I get an echo response
|
|
0:22:18
|
I can assume that everything along
|
|
0:22:24
|
So, not just my local link status, the actual end
|
|
0:22:31
|
Then, if for some reason
|
|
0:22:33
|
we can reroute maybe out some...
|
|
0:22:35
|
secondary link.
|