IOS XR - Category - Fryguy's Blog

Cisco IOS-XRv (V as in Virtual!)

Fryguy — Sun, 09 Feb 2014 02:50:25 +0000

There was a tweet on Friday that some may have missed, but it is one that you do not want to miss. It was a subtle little announcement from @CiscoIOSXR about IOS XRv!

Your wait for IOS XR is over! Download IOS XRv here! 🙂 http://t.co/0WVMAuHqU1 #IWantIOSXR #IOSXR
— IOS XR (@CiscoIOSXR) February 7, 2014

Note: On Tuesday, February 11th there was an update that they are still working on the entitlement issue. Tweet is included below as well.

@fryguy_pa @steve We have a plan to resolve the entitlement checking issue, but this means images will be pulled off CCO for 3 days 🙁
— IOS XR (@CiscoIOSXR) February 11, 2014

So yes, that is a V as in Virtual! Finally, IOS XRv has been released – and on the latest IOS-XR code, 5.1.1!

So a few things about IOS XRv – first of all, it is a 32–bit softwrae version running on the QNX microkernel. The VM contains a single RP and a some LC Interfaces.
The demo version of the software is FREE for users, has AAA hard-coded users in it, and is rate-limited to 2 Mbps. There is also a Simulation Image available and has no hard-coded users and is rate-limited to 50 Mbps. Finally there is a Production Image that has no hard-coded users and no rate-limit.
To run the IOX XRv Router you will need:

IOS XR – Cisco Videos and Training

Fryguy — Tue, 06 Nov 2012 15:02:15 +0000

Ok, I know I said I was done with the IOS XR stuff, but just had to share this.
Cisco has posted some Videos on YouTube, they are below for your enjoyment.

Also, if you are looking for an IOS XR book – here is a link to the one on Amazon.

Introduction to IOS XR CLI and Configuration

[youtube=http://youtu.be/v16-jJE5_yA]

IOS XR – Workbook – all 105 pages of it!

Fryguy — Fri, 19 Oct 2012 12:30:43 +0000

After many individual posts and changes on IOS XR, here is the Cisco IOS XR Training Workbook in its entirety.
The workbook is 105 pages long, so enjoy!

Cisco IOS XR Introduction Ver 1

It has been mentioned to me a few times that I should charge for some things, especially these large workbooks. I do not feel that way, I would rather share my knowledge so that I can continue to learn and grow. If you appreciate this information that I have provided and wish to give me some of your money, here is a donation button for that.

IOS XR – TACACS (default and non-default VRF)

Fryguy — Thu, 18 Oct 2012 12:04:07 +0000

Ok, final post on IOS-XR before the workbook is published in its entirety.

So you want to secure your IOS-XR device using TACACS.
The first example I will use will be using the default VRF for TACACS authorization and the second will be using a different VRF. For these examples, the tacacs server is at IP 192.168.100.100 and the password is TacacsPassword
First up, we need to configure our source interface for TACACS, here we will use loopback0 and the default VRF.
RP/0/RSP0/CPU0:PE2(config)#tacacs source-interface Loopback0 vrf default
Now we can configure our TACACS server and Password
RP/0/RSP0/CPU0:PE2(config)#tacacs-server host 192.168.100.100
RP/0/RSP0/CPU0:PE2(config-tacacs-host)#key 0 TacacsPassword
RP/0/RSP0/CPU0:PE2(config-tacacs-host)#exit
RP/0/RSP0/CPU0:PE2(config)#
Time to create a local console authenticaion method, this way console does not rely on TACACS.
You may or may not want to do this, but I am showing it for these examples.
RP/0/RSP0/CPU0:PE2(config)#aaa authentication login console local
RP/0/RSP0/CPU0:PE2(config)#aaa authorization commands console none
Apply the console loging to the line console
RP/0/RSP0/CPU0:PE2(config)#line console
RP/0/RSP0/CPU0:PE2(config-line)#login authentication console
RP/0/RSP0/CPU0:PE2(config-line)#authorization commands console
RP/0/RSP0/CPU0:PE2(config-line)#exit
RP/0/RSP0/CPU0:PE2(config)#

IOS XR – Loading Configs and Replacing Configs

Fryguy — Tue, 16 Oct 2012 18:06:50 +0000

One last IOS XR post and then it will be time to post the IOS XR workbook.
Ok, let’s quickly look at loading a configuration from the disk and overwriting an existing configuration.
I have copied a config to disk0a: called newconfig.txt. What I want to do is install this configuration as the running config on the router.
1626 -rwx 204 Wed Oct 17 01:21:30 2012 newconfig.txt
So to start, lets delete the existing configuration
RP/0/RSP0/CPU0:R1(config)#commit replace
Wed Oct 17 01:21:43.406 UTC
This commit will replace or remove the entire running configuration. This
operation can be service affecting.
Do you wish to proceed? [no]: y
RP/0/RSP0/CPU0:ios(config)#
RP/0/RSP0/CPU0:ios(config)#exit
Ok, so now we are at an unconfigured device. Now we can load the config on the disk to the running config.
RP/0/RSP0/CPU0:ios(config)#load disk0a:/newconfig.txt
Loading.
204 bytes parsed in 1 sec (203)bytes/sec

IOS XR – HSRP and VRRP

Fryguy — Mon, 08 Oct 2012 12:29:31 +0000

Next Hop Resolution Protocol comes in two fashions on the IOS XR. The first is Cisco proprietary and called Hot-Standby Router Protocol or HSRP and the other is the industry standard called Virtual Router Redundancy Protocol or VRRP.
This is something that many customers use in order to maintain the availability of a default gateway on the network. If your customer uses a static route to a next hop, you might be using this as well.
Like everything else with IOS XR, NHRP is handled a little differently. With IOS, you configure your standby commands under the interfaces; in IOS XR you use ROUTER HSRP or Router VRRP.
For this lab we will use interface Te0/1/0/0 and a subnet of 150.1.12.0/24.
First up R1:
RP/0/RSP0/CPU0:R1(config)#int tenGigE 0/1/0/0
RP/0/RSP0/CPU0:R1(config-if)#ip add 150.1.12.1/24
RP/0/RSP0/CPU0:R1(config-if)#no shut
RP/0/RSP0/CPU0:R1(config-if)#commit
RP/0/RSP0/CPU0:R1(config-if)#
Now R2:
RP/0/RSP0/CPU0:R2(config)#int tenGigE 0/1/0/0
RP/0/RSP0/CPU0:R2(config-if)#ip add 150.1.12.2/24
RP/0/RSP0/CPU0:R2(config-if)#no shut
RP/0/RSP0/CPU0:R2(config-if)#commit

IOS XR – L2VPN

Fryguy — Thu, 04 Oct 2012 12:09:07 +0000

Ok, now it is time for some L2VPN. Here we will use the same diagram as before, but instead of providing MPLS VPN between CE1 and CE2, we are going to create a L2VPN so that CE1 and CE2 think that they are directly connected to each other. This lab builds off the previous post, so the routers where already configured.

First up, CE1
CE1(config-if)#int f0/0
CE1(config-if)#ip add 10.1.34.3 255.255.255.0
CE1(config-if)#int l0
CE1(config-if)#ip add 10.1.3.3 255.255.255.255
CE1(config-if)#router ospf 1
CE1(config-router)#net 10.0.0.0 0.255.255.255 a 0
CE1(config-router)#
Now CE2
CE2(config-if)#ip add 10.1.34.4 255.255.255.0
CE2(config-if)#int l0
CE2(config-if)#ip add 10.4.4.4 255.255.255.255
CE2(config-if)#router ospf 1
CE2(config-router)#net 10.0.0.0 0.255.255.255 a 0
CE2(config-router)#

IOS XR – MPLS VPN

Fryguy — Tue, 02 Oct 2012 12:41:26 +0000

Next up is MPLS VPN; actually VPNv4 routes are what these actually are since we are only passing IPv4 traffic in this example.
So we have this diagram below – CE1 and CE2 are the customer routers and both are running OSPF in Area 0. They need to talk to each other but do not have a direct connection available, so they have contracted us to provide connectivity via MPLS between them. What we will now do is build a pseudo MPLS network between PE1 and PE2, establish an iBGP peering, create the associated customer VRF and then peer with the customer via OSPF Area 0.

So, first up lets configure CE1 using an IP of 10.3.3.3/32 for the loopback and 10.1.13.3/24 for the link facing PE1.
CE1#conf t
Enter configuration commands, one per line. End with CNTL/Z.

IOS XR – Basic MPLS and LDP (LDP Auth, OSPF, and ISIS)

Fryguy — Mon, 01 Oct 2012 12:37:52 +0000

Ok, time for some MPLS! For this lab I will be using the OSPF routing protocol first, then we can move to IS-IS next. All we will be doing here is configuring LDP
First up, lets enabled LDP on all OSPF interfaces. Normally you would do this under each interface, but here we will use the MPLS LDP AUTOCONFIG command. This is a good command to use as it ensures that you do not miss configuring LDP on an interface.
RP/0/7/CPU0:R1#conf t
Sun Apr 1 18:58:04.084 UTC
RP/0/7/CPU0:R1(config)#router ospf LAB
Under the OSPF LAB process, we need to configure mpls ldp autoconfig and then commit it.
RP/0/7/CPU0:R1(config-ospf)#mpls ldp auto
RP/0/7/CPU0:R1(config-ospf)#commit
Sun Apr 1 18:58:12.277 UTC
RP/0/7/CPU0:R1(config-ospf)#exit
RP/0/7/CPU0:R1(config)#exit
Ok, now lets see what interfaces have LDP on them
RP/0/7/CPU0:R1#sh mpls ldp int
Sun Apr 1 18:58:18.902 UTC
MPLS LDP application must be enabled to use this command

IOS XR – VRF lite and dot1q Trunks

Fryguy — Fri, 28 Sep 2012 12:54:36 +0000

Ok, time for some VRF lite basics and we can throw in some Dot1Q trunks to go with it.
First, let’s create our VRF called LAB
RP/0/7/CPU0:R1(config)#vrf LAB
Now we need to enable the address family for this VRF, there IPv4 Unicast
RP/0/7/CPU0:R1(config-vrf)#address-family ipv4 un
RP/0/7/CPU0:R1(config-vrf-af)#exit
Now we need to enable the IPv6 address family for this VRF
RP/0/7/CPU0:R1(config-vrf)#address-family ipv6 unicast
Now we can create our Dot1Q trunk to the other router:
RP/0/7/CPU0:R1(config-vrf-af)#int g0/3/0/3.100
Little different then IOS, but this actually makes more sense
RP/0/7/CPU0:R1(config-subif)#dot1q vlan 100
RP/0/7/CPU0:R1(config-subif)#ip add 150.1.21.1/24
RP/0/7/CPU0:R1(config-subif)#ipv6 add 2001:1:1:21::1/64
RP/0/7/CPU0:R1(config-subif)#vrf LAB