To round out this set of videos on troubleshooting and working
with control plane policing, I thought, let's do this.
Let's go ahead and add in some additional IPv6 content
as well to give you a feel and taste of what that's like.
So let's use R4 in our hands-on lab as the guinea pig.
We'll implement our existing policy.
We'll add on the IPv6, and then we'll
test it to make sure it's working.
Let's take a look at our topology.
So here's our topology.
We're going to focus right here on R4. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
We're going to focus right here on R4.
Let's go to the CLI.
We'll implement the previous control plane policing.
And then we'll add on top of it some IPv6 as well.
So here is R4.
And we're connecting via our management computer, DCnug.
And let's go grab this document here,
CoPP practice, which has the configurations we've been
working with up to this point.
I'm just going to grab all with the Control A,
right-click, copy it.
Let's go back to R4, and right-click,
and put it in place.
So there's our basic policy.
And we could, for the troubleshooting,
do the show access-lists. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
do the show access-lists.
Take a look at what's being hit.
And so far, there's none of this traffic happening.
So it's not marked or not matched yet.
We could do a show class-map, to identify the class map
information.
And we can do a show policy-map, see our policy map.
And then we could also see our policy map
applied to the control plane with show policy-map
control-plane.
Press Enter, and there we have it.
So all of this is IPv4 based on the IPv4 access list.
If we wanted to, we could include IPv6 as well. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
If we wanted to, we could include IPv6 as well.
And so let's do that.
Let's create an access control list.
And what can we match on?
Let's create one that's going to match on EIGRP or IPv6.
And then we can implement it and verify
that we have matches as part of our control plane
policing policy.
So let's create access list.
Actually, it's going to be IPv6--
piv6 access-list.
And the name is going to be the name of the access list
we want to use.
So we'll go ahead and call it eigrpv6, all right? WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
So we'll go ahead and call it eigrpv6, all right?
So then, let's go ahead and do a permit.
And if we're looking for--
this is part of the tricky part.
If we want to do control plane policing on a certain protocol,
we need to know what that protocol is.
So EIGRP for both IPv4 and IPv6 use that Layer 4 protocol 88.
So let's match on EIGRP traffic for IPv6.
And that is protocol 88.
And we can source it from anywhere,
as far as what's going to match. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
as far as what's going to match.
If it's destined to the exact IP address
of the multicast address for EIGRP, which
is an IPv6 ff02::--
OK, that's wrong.
It's 10, but in hex, that's not 10.
So it is 10, which would be A. And that's great.
So we can use this access control list
as part of the class map, which is already being
used as part of our policy.
So let's exit out of access list configuration mode,
and let's take a look at our classes
again that do show class map. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
again that do show class map.
All right.
And we can just tuck it into this one called Routing-Class,
which is currently matching on IPv4 traffic.
Based on the access list, we can just tuck in the IPv6 ACL
as well for a match.
So we'll do a class map, space.
And the routing class is what we want to use,
so we'll copy/paste that, press Enter.
And now we can just do a match access-group,
and a keyword name. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
and a keyword name.
And then we'll just use that access list we just made,
which was called--
scrolling up for it here--
EIGRPv6.
Copy/paste that, and we are good to go.
So now, let's just do a quick show, show access-list.
And there's all of our access lists, including this one right
here.
And if we do a show class-map, we have in this class
map, called Routing-Class, matching on either the IPv4
ACL or the IPv6 ACL.
Great.
And we just show policy-map. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And we just show policy-map.
We're including that class map as part of our policy.
And that is right here, the routing class.
It has policing currently set up for it.
So our last step here is to generate some traffic.
So let's generate some EIGRP traffic.
And we can do that by going to this little document right here
on the management computer.
It's called Route On Route Off.
And let's grab EIGRP for IPv6.
And these commands right here will do it for us.
We'll just paste that on each of the routers.
And we have other labs on videos on configuring WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And we have other labs on videos on configuring
EIGRP and name mode, and classic mode with address
families for name mode.
So here on R1, we'll just right-click,
and 2, and 3, and 4.
That's applying the EIGRP for IPv6.
It's super fast.
It's done.
And if we do a show policy-map--
actually, let's do a show access-lists first--
show access-lists.
And here, we have some hits.
That's a great sign.
And then we'll do a show policy-map and control-plane, WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And then we'll do a show policy-map and control-plane,
like that.
And let's go down just a little bit.
And sure enough, right here, we've
got traffic that's matching this access control
list, 17 packets.
And as far as policing, we've had
17 packets that have conformed and nothing
that's been exceeded.
So in this lab, which I would encourage you to do next time
you're logged onto CBT Nuggets, go ahead and click
on the link for this virtual app and do the practice
with setting up control plane and policing and including
or adding in an additional IPv6 ACL, which is then WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
or adding in an additional IPv6 ACL, which is then
going to be part of a class map, which
is part of our policy for control plane policing,
including IPv4 and IPv6.
Thanks, for joining me in this set of videos,
and I'll see you in the next set.
Meanwhile, I hope this has been informative for you,
and I'd like to thank you for viewing.