21-CCNP-Route Configure IP SLA Tracking and Path Control
21-CCNP-Route Configure IP SLA Tracking and Path Control
com
CCNPv6 ROUTE
Objectives
• Configure and verify the IP SLA feature.
• Test the IP SLA tracking feature.
• Verify the configuration and operation using show and debug commands.
Background
You want to experiment with the Cisco IP Service Level Agreement (SLA) feature to study how it could be of
value to your organization.
At times, a link to an ISP could be operational, yet users cannot connect to any other outside Internet
resources. The problem might be with the ISP or downstream from them. Although policy-based routing
(PBR) can be implemented to alter path control, you will implement the Cisco IOS SLA feature to monitor this
behavior and intervene by injecting another default route to a backup ISP.
To test this, you have set up a three-router topology in a lab environment. Router R1 represents a branch
office connected to two different ISPs. ISP1 is the preferred connection to the Internet, while ISP2 provides a
backup link. ISP1 and ISP2 can also interconnect, and both can reach the web server. To monitor ISP1 for
Page 1 of 14
CCNPv6 ROUTE
failure, you will configure IP SLA probes to track the reachability to the ISP1 DNS server. If connectivity to the
ISP1 server fails, the SLA probes detect the failure and alter the default static route to point to the ISP2
server.
Note: This lab uses Cisco 1841 routers with Cisco IOS Release 12.4(24)T1 and the Advanced IP Services
image c1841-advipservicesk9-mz.124-24.T1.bin. You can use other routers (such as a 2801 or 2811) and
Cisco IOS Software versions if they have comparable capabilities and features. Depending on the router and
Cisco IOS Software version, the commands available and output produced might vary from what is shown in
this lab.
Required Resources
• 3 routers (Cisco 1841 with Cisco IOS Release 12.4(24)T1 Advanced IP Services or comparable)
• Serial and console cables
Step 1: Prepare the routers and configure the router hostname and interface addresses.
a. Cable the network as shown in the topology diagram. Erase the startup configuration and reload each
router to clear the previous configurations. Using the addressing scheme in the diagram, create the
loopback interfaces and apply IP addresses to them as well as the serial interfaces on R1, ISP1, and
ISP2.
You can copy and paste the following configurations into your routers to begin.
Note: Depending on the router model, interfaces might be numbered differently than those listed. You
might need to alter them accordingly.
Router R1
hostname R1
interface Loopback 0
description R1 LAN
ip address 192.168.1.1 255.255.255.0
interface Serial0/0/0
description R1 --> ISP1
ip address 209.165.201.2 255.255.255.252
clock rate 128000
bandwidth 128
no shutdown
interface Serial0/0/1
description R1 --> ISP2
ip address 209.165.202.130 255.255.255.252
bandwidth 128
no shutdown
Router ISP1 (R2)
hostname ISP1
interface Loopback0
description Simulated Internet Web Server
ip address 209.165.200.254 255.255.255.255
interface Loopback1
description ISP1 DNS Server
ip address 209.165.201.30 255.255.255.255
Page 2 of 14
CCNPv6 ROUTE
interface Serial0/0/0
description ISP1 --> R1
ip address 209.165.201.1 255.255.255.252
bandwidth 128
no shutdown
interface Serial0/0/1
description ISP1 --> ISP2
ip address 209.165.200.225 255.255.255.252
clock rate 128000
bandwidth 128
no shutdown
Router ISP2 (R3)
hostname ISP2
interface Loopback0
description Simulated Internet Web Server
ip address 209.165.200.254 255.255.255.255
interface Loopback1
description ISP2 DNS Server
ip address 209.165.202.158 255.255.255.255
interface Serial0/0/0
description ISP2 --> R1
ip address 209.165.202.129 255.255.255.252
clock rate 128000
bandwidth 128
no shutdown
interface Serial0/0/1
description ISP2 --> ISP1
ip address 209.165.200.226 255.255.255.252
bandwidth 128
no shutdown
b. Verify the configuration by using the show interfaces description command. The output from router R1
is shown here as an example.
R1# show interfaces description
Interface Status Protocol Description
Fa0/0 admin down down
Fa0/1 admin down down
Se0/0/0 up up R1 --> ISP1
Se0/0/1 up up R1 --> ISP2
Lo0 up up R1 LAN
All three interfaces should be active. Troubleshoot if necessary.
c. The current routing policy in the topology is as follows:
• Router R1 establishes connectivity to the Internet through ISP1 using a default static route.
• ISP1 and ISP2 have dynamic routing enabled between them, advertising their respective public
address pools.
• ISP1 and ISP2 both have static routes back to the ISP LAN.
Page 3 of 14
CCNPv6 ROUTE
Note: For the purpose of this lab, the ISPs have a static route to an RFC 1918 private network address
on the branch router R1. In an actual branch implementation, Network Address Translation (NAT) would
be configured for all traffic exiting the branch LAN. Therefore, the static routes on the ISP routers would
be pointing to the provided public pool of the branch office. This is covered in Lab 7-1, “Configure Routing
Facilities to the Branch Office.”
Implement the routing policies on the respective routers. You can copy and paste the following
configurations.
Router R1
ip route 0.0.0.0 0.0.0.0 209.165.201.1
Router ISP1 (R2)
router eigrp 1
network 209.165.200.224 0.0.0.3
network 209.165.201.0 0.0.0.31
no auto-summary
EIGRP neighbor relationship messages on ISP1 and ISP2 should be generated. Troubleshoot if
necessary.
%DUAL-5-NBRCHANGE: IP-EIGRP(0) 1: Neighbor 209.165.200.225 (Serial0/0/1) is
up: new adjacency
Page 4 of 14
CCNPv6 ROUTE
+>(tcl)# 209.165.201.30
+>(tcl)# 209.165.202.158
+>(tcl)# } {
+>(tcl)# ping $address source 192.168.1.1
+>(tcl)#}
Page 5 of 14
CCNPv6 ROUTE
Page 6 of 14
CCNPv6 ROUTE
The output lists the details of the configuration of operation 11. The operation is an ICMP echo to
209.165.201.30, with a frequency of 10 seconds, and it has already started (the start time has already
passed).
c. Issue the show ip sla statistics command to display the number of successes, failures, and results of
the latest operations.
Note: With Cisco IOS Release 12.4(4)T, 12.2(33)SB, and 12.2(33)SXI, the show ip sla statistics
command has replaced the show ip sla monitor statistics command.
R1# show ip sla statistics
IPSLAs Latest Operation Statistics
Page 7 of 14
CCNPv6 ROUTE
Page 8 of 14
CCNPv6 ROUTE
c. Use the track 1 ip sla 11 reachability command to enter the config-track subconfiguration mode.
Note: With Cisco IOS Release 12.4(20)T, 12.2(33)SXI1, and 12.2(33)SRE and Cisco IOS XE Release
2.4, the track ip sla command has replaced the track rtr command.
R1(config)# track 1 ip sla 11 reachability
R1(config-track)#
d. Specify the level of sensitivity to changes of tracked objects to 10 seconds of down delay and 1 second of
up delay using the delay down 10 up 1 command. The delay helps to alleviate the effect of flapping
objects—objects that are going down and up rapidly. In this situation, if the DNS server fails momentarily
and comes back up within 10 seconds, there is no impact.
R1(config-track)# delay down 10 up 1
R1(config-track)# exit
R1(config)#
e. Configure the floating static route that will be implemented when tracking object 1 is active. To view
routing table changes as they happen, first enable the debug ip routing command. Next, use the ip
route 0.0.0.0 0.0.0.0 209.165.201.1 2 track 1 command to create a floating static default route via
209.165.201.1 (ISP1). Notice that this command references the tracking object number 1, which in turn
references IP SLA operation number 11.
R1# debug ip routing
IP routing debugging is on
R1#
*Apr 2 21:26:46.171: RT: NET-RED 0.0.0.0/0
R1# conf t
Enter configuration commands, one per line. End with CNTL/Z.
R1(config)# ip route 0.0.0.0 0.0.0.0 209.165.201.1 2 track 1
R1(config)#
*Apr 2 21:27:02.851: RT: closer admin distance for 0.0.0.0, flushing 1
routes
*Apr 2 21:27:02.851: RT: NET-RED 0.0.0.0/0
*Apr 2 21:27:02.851: RT: add 0.0.0.0/0 via 209.165.201.1, static metric
[2/0]
*Apr 2 21:27:02.851: RT: NET-RED 0.0.0.0/0
*Apr 2 21:27:02.851: RT: default path is now 0.0.0.0 via 209.165.201.1
*Apr 2 21:27:02.855: RT: new default network 0.0.0.0
*Apr 2 21:27:02.855: RT: NET-RED 0.0.0.0/0
*Apr 2 21:27:07.851: RT: NET-RED 0.0.0.0/0
Notice that the default route with an administrative distance of 5 has been immediately flushed because
of a route with a better admin distance. It then adds the new default route with the admin distance of 2.
f. Repeat the steps for operation 22, track number 2, and assign the static route an admin distance higher
than track 1 and lower than 5. On R1, copy the following configuration, which sets an admin distance of 3.
track 2 ip sla 22 reachability
delay down 10 up 1
exit
ip route 0.0.0.0 0.0.0.0 209.165.202.129 3 track 2
g. Verify the routing table again.
R1# show ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
Page 9 of 14
CCNPv6 ROUTE
Page 10 of 14
CCNPv6 ROUTE
Page 11 of 14
CCNPv6 ROUTE
e. To examine the routing behavior when connectivity to the ISP1 DNS is restored, re-enable the DNS
address on ISP1 (R2) by issuing the no shutdown command on the loopback 1 interface on ISP2.
ISP1(config-if)# no shutdown
*Apr 2 15:56:24.655: %LINK-3-UPDOWN: Interface Loopback1, changed state to
up
*Apr 2 15:56:25.655: %LINEPROTO-5-UPDOWN: Line protocol on Interface
Loopback1, changed state to up
Notice the output of the debug ip routing command on R1.
R1#
*Apr 2 21:35:34.327: %TRACKING-5-STATE: 1 ip sla 11 reachability Down->Up
*Apr 2 21:35:34.327: RT: closer admin distance for 0.0.0.0, flushing 1
routes
*Apr 2 21:35:34.327: RT: NET-RED 0.0.0.0/0
*Apr 2 21:35:34.327: RT: add 0.0.0.0/0 via 209.165.201.1, static metric
[2/0]
*Apr 2 21:35:34.327: RT: NET-RED 0.0.0.0/0
*Apr 2 21:35:34.327: RT: default path is now 0.0.0.0 via 209.165.201.1
*Apr 2 21:35:34.327: RT: new default network 0.0.0.0
*Apr 2 21:35:34.327: RT: NET-RED 0.0.0.0/0
*Apr 2 21:35:39.327: RT: NET-RED 0.0.0.0/0
*Apr 2 21:35:46.171: RT: NET-RED 0.0.0.0/0
Now the IP SLA 11 operation transitions back to an up state and reestablishes the default static route to
ISP1 with an administrative distance of 2.
f. Again examine the IP SLA statistics.
R1# show ip sla statistics
IPSLAs Latest Operation Statistics
Page 12 of 14
CCNPv6 ROUTE
Page 13 of 14
CCNPv6 ROUTE
Page 14 of 14