Now we're gonna move on to our oh SPF lab,
as depicted in the diagram on the board. I'm gonna create area zero between Router one router to Router three and Router four. I'm gonna create area 51 behind Router two over here, and I'm going to create area one
behind Router one over here.
router one. I'm gonna begin this time on rather one,
and I'm going to enable the SPF process on the router by saying router Oh, SPF and hit Enter.
And now again, it says it is telling me that this is an incomplete command. So I pull up the command again and execute the help feature by saying question Mark.
And now it is asking me for a process i d,
which can range between one and 65 5 35
now with the I g R. P. The number it was asking me was the autonomous system i d. The autonomous system I d is globally significant, which means every router in your network needs the same number.
So we picked 148 g. R p.
The process I d, however, is locally significant, so every router in our network. Me run
a different process, I d And those routers will talk to each other. However, that is bad practice. So we're going to stay consistent and pick 100 again
Are prompt changes to the router prompt.
And now we're ready to do our network statements, just like we have been doing for rip and the A g R P. So I'm going to say network
Next, it is asking me for a while for a wild card mask or a wild card bits.
This works the same as it did in E I g R p.
So, once again, our mask on the 1 50 network is 255255255 to 48.
If we see abstract that from 255255255
255 We get 0.0, not 0.7.
Next. If I execute the help feature, it is asking me for the area I d remember. Between router 123 and four, which is network 1 50 I'm gonna create area zero, so I simply say Area zero.
Next. I'm gonna go ahead and take care off the other side
where I'm gonna have network one. I mean, area one. So I did a network statement for this side on Router one, where Area zero exists. I'm gonna go ahead and do a network statement for this. End the link between router one and router to one,
which is going to be area one.
So let's go to Router One again
And my wild card is going to be 0.0 dot zero dot
three. Since my mask is 255255255
And this is going to be area one.
assure command and see what the SPF has done so far,
we say we do the command Do show i p o S p f
and you see that? Oh, SPF went ahead and picked a router. I d for itself and the router i d was picked as the 202 102 100.1 address.
Now, if I look at router ones show I'd be interface brief. Do show I p
I will see that on fast. Ethernet 00 I had the address 1 51 01 45.1 Command
are 1 51 1 45.1 i p and on serial 000 I had the 200. 202 100.1 i p
Since I did not execute the router, I d command and manually pick around right d
and since nor did I have Lou back interfaces in place over here. As you see, there are no Lou back into faces on rather one.
The router went ahead and picked the highest physical I p.
So the highest I p configured on a physical interface which happened to be 202 102 101.
Now what if I want my router? I d to be to be tied into
a loop back address, which is good practice, because Lou back interfaces don't fail unless the whole router fails. I don't want
at some point serial 000 to fail and then end up taking down my whole SPF.
I'm gonna go ahead and create a loop back address
on router one. I'm going to say I n t
That brought up my lube back interface. And I'm simply going to give it an I p address of 1.1 dot 1.1
with the mask of 255255255255 for Luke back interfaces. This mask or master slashed 32 is allowed.
Did the router changeover do? Sure. I p o S p f process do sh i p o S p f
Did the router change? It's Lou back. I mean, it's router I d. To the loo. Back address? No, I did not. I actually have to clear the SPF process. Bring it down. And then when it goes back up again, it hopefully will pick the 1.1 dot 1.1 address.
That takes down my process and brings it back up again. And now if I live, look at the do show I p o S P f command. My router I d has been picked as 1.1 dot 1.1 because the router prefers the highest configured Luke back
address as it's rounder I d.
Over a physical interface address.
However, it is good practice too hard called this address with the Router I D Command anyways,
I go back into my routing process Router. Oh, SPF 100
and I say Router dash I D or router hyphen i d 1.1 dot 1.1 and hit Enter.
It's asking me to clear the process again
because it thinks that I entered in a new router, I d. So I'll go ahead and comply with it.
The reason you want to hard, cold your your router, I d. Is because
let's say I have picked 1.1 dot 1.1 as my router i d. And then at a later date, I create another loop back address
that has the address 201 11
And then that's another later date. The router reboots because there was a power outage. When it comes back, it will come back with
the router. I d off 200.1 dot 1.1 not 1.1 dot 1.1 because it will automatically pick the highest
Lou Back i p address. But if I want to keep it at 1.1, not one, not one. I should hard code it
now. Just a little side tidbit that I want to show you. What if I pull out this router
And remember, this is a brand new router. I pulled out,
and I tried to start the SPF process on it. Remember, this is a brand new router. If I do the show, I mean defence brief command. They are No I p addresses assigned on it
if I try to start. Oh, SPF router. Oh, SPF 100.
It says U S P M process 100 cannot start. There must be at least one up I p interface.
So on a router without any eyepiece. Oh, SPF who refused to start? Why?
Because the first thing was be able Do is go looking for a router. I d And since it can't find itself a name,
it won't begin. It won't start the process.
Let's get rid of this router.
Okay? We're done with the outer one at this point, I'm going to go ahead and do router to
So before I even begin
the always be of process on router to I'm gonna go ahead and create a loop back in the face, Lou back zero
tue dot to dot to dot 2255255255
Then I'm going to begin my oh SPF process
Rato SPF 100 do my network statement for the 1 50 Network network 1 51 a 1 45
Now, this time I'm not going to pick the network address. I'm gonna pick the I P address on Router two's 00 interface
as you remember or should remember from me as your pee when you don't pick the network address
in your network statement. Instead, you picked the I. P address. You use the all zeros wild card
and this goes into area zero
and then network 10 dot Tenn 10.0.10 dollars to 54 which is the f zero slash 1.10 interface address.
And with the old zeros wild card. This I said I'm gonna put an area 51 because I think it's funny,
then Network $20.20. $20 to 54 wild card. 0.0 dot 0.0 and area 51. Again,
oh SPF new show I p o S p f
and you see that my router i d was automatically picked as two dot to dot to 22.214.171.124. I am, however, gonna go ahead and hard code that anyways, because that is best practice
and again asked me to clear the process. Nuclear I'd be or Thea
and move on to Router three.
Quickly get Router three. Done created Lou back address on router three.
zero i p address to eat out of that tree. That 3 to 55255255255
Start the west. We have process.
Give hard code. My router I d.
As $3.3 dollars three.
and followed it up with all zeros.
Since this is the I. P address, not the network address area zero
Go to outer four and do the same interface. Luke back
zero i p address 4444
And then start Mato SPF process.
Do my one network statement 1 51 01 45.0 This time I am picking the network address, not the interface address on F 00 which should be 1 51 1 45 dot for I'm not using that. Instead, I'm choosing or opting to choose the network address.
Hence, my wall card is going to be 0.0 dot seven. Once again, I simply say abstracted my sub net mass, which was 255255255 to 48 from all 255 or from all 255255255255
And I get a 0.0 dot 0.7 wild card,
and finish up router to a one, and then we will look at our work.
interface Lou back zero i p address. If you want to Rwanda to a 12 a 1255255255255 I simply matched the I p addresses for the loot bag. Zero interfaces on each router
to the router number. So one was 11112 was too too, too too.
Three was 3333 and so on and so forth. Now I'm going to start my oh, SPF routing process
and execute my one network network statement, which is network 202 102 $100 0
The mask on this point to point link A CE 255255255 to 5 To subtract that from all to five fives and you get 0.0, not three. And this is going to be area one.
check our stuff from router one.
So I log into outer one
and execute the command shoe. I p o S p f neighbor. So we are on Router One checking our show I p o S P f neighbor command
router. 2222 Which is
about her i d. 2222 which is round or two
shows a priority of one,
it also shows that I am fully adjacent with router to
and router to is the D R
I am also fully adjacent with,
however, Router three is a D R. Other, which means it's not a designated router or a backup designated router.
Same with Router. Four. So where did my backup designated router ago?
Let's look at the topology from Router four or look at the neighbors from Router four.
So if I execute the show, I p o S p f neighbor command
I find out that router one where I was sitting originally is the VD are or the backup designated router.
So in this topology, I do not want a backup designated router usually best practices that you do not let oh SPF elect a backup designated router you do not want
once the d R goes down or if the D. R goes down, you want to be informed off it. You don't want a backup designated router off a sudden picking up the roll off a designated router because the designated router for areas euro will be passing a lot of traffic. So you would have spent a lot of money on that router. If that router goes down,
you want to know about it.
You don't want no SPF to automatically elects someone else's the D R and then end up crashing that router because it cannot handle the load.
So I want Router one to be my designated router, and all other routers to be D are other routers. I do not want a BDR in my anthropology or a backup designated router in my anthropology.
Now I could go increase rather ones router priority
to something higher than one. As you see, everybody's default priority is one on area zero,
or the best practice is that I go and change route or 23 and four zo SPF priority to zero to exclude them completely
from the back of designated router and designated router election.
and I go into interface
fast. Internet zero slash zero,
and I changed the router priority with the command I p o S P f
Then I cleared the process
for SPF Do try, take SPF down and when it comes back up, it'll come back up with a priority of zero.
And you see all my all my neighbors were reset.
I go to Router four and do the same. I go into interface fast Ethernet 00
If I can type o s p half priority zero and do a clear i p o S P f process to reset the process. So it comes back with the priority of zero
Do the same on three
interfaced faceted at 00 i p
Oh, SPF priority zero Do clear i p o S p f
And now let's go check
on router one. But before checking on router one, I also have to clear the process here. Make sure
that it becomes the designated router now by default router. Once priority was one, everybody else's priority is set to zero, which means they can't even participate in the
designated router and backup designated router election. So router one should have become the d r. Let's find out. Show I p o S p f
And sure enough, I see that router to is the d r. Other router four is D are other and Router three is a d r other. Also, which means I should be the d. R.
We will go check that in a minute.
And you see that router to Router three? I mean, writer for and Router three's priority has been set to zero.
Now, all of these three routers are fully adjacent with me,
which means they have exchanged the full database or link state database with me.
How about with each other?
Well, let's find out. Let's go to route or four
the show. I p o S p F neighbor Command.
You see that Router four is only fully adjacent or has exchanged its full database on Lee with the d r
with router to and router three. It is on Lee in the two way state in the neighbor change machine.
So are in the neighbor state change machine.
They're in the to a state, which means Router three has seen its own router. I d in hello set from router to
as that iterated before, you only become
fully adjacent with the D. R and the backup D r.
Since there is no backup d are you only become fully adjacent with the designated router.
our routing table on router to a one.
So the routing table on router to a one show I be route
I see Network 10 network 20 and network 1 50 is available to me True Oh SPF This all the way on the left hand side designates
that this is an O SPF route
then this I a that you see
it means that this is an enter I standing for inter is standing for area All these routes are inter area routes
if I look at meant apology off course on router to one I'm sitting in area one These routes are coming from area zero
and area 51 So hence they are inter area routes.
Then in brackets you see the 1 10 as always
is the administrative distance
So this first number is the administrative distance for SPF which is 1 10
The 66 hair is your SPF metric
something called cost as its metric
so SPF uses cost as its metric and cost is defined as
10 to the power eight divided by
Tend to the power eight divided by bandwidth.
So for 100 megabyte link or 100 megabit ling
100 megabits is 100,000 killer bits
and then you add another 34 bits.
So you have a one with 12345678 zeros. If you divide that by 10 to the power eight, which is a one with eight zeros, you end up getting
So the cost of our 100 megabits per second link or 1000 kill a bit per second link is one.
If we look at our show I p o S P f interface serial 010 which is the interface running.
128 K link is 64. Let me go check the cost on router ones at 00 and you will see that it stays One show i p o S P f interface
fast Internet zero size zero.
So over here, the cost say's one. So for 100 megabits per second link, the cost is one
the priority for this interface is one, and we know that is the default priority.
It also shows that my hello timer is 10 seconds. My dead interval is 40 seconds.
So the dead interval is usually set by default to four times the hello timer.
going back to router one.
I also want to point out
if I say show I b o SPF neighbors
on the link with router to a one.
You see, it simply says priorities, your by default. And it's his full slash hyphen
over point to point links. There is no designated router or back back up designated router. Election
doesn't make sense. There are only two routers. There's only gonna be one adjacency between them,
so it doesn't make sense to elect designated routers or backup designated routers. So from the point of view of router to a one, also, you will see that there is no d. R or BDR show I P O S P F
So rather to one is neighbors with router won the priority set to zero,
and there is no d. R or B d. R. I and I am fully adjacent with Router one.
And you see that hellos are being sent itude to address to 24 005
What happens if I turn off the bugging and then a debug i p o s p f events? And Claire
this process clear the SPF process so clear I p West pf
Did I not turn off the bugging you space all
okay? Now I turn off debugging for debug i p o S p f events
Oh, the events. I'm going to see the Hollows. Of course. Clear i p o S p f process
Now those neighbor states that you saw that I discussed earlier You can catch some of from here.
I was able to catch a few if, um so I cleared the process.
As you see, I cleared the process and then you see two way communication
and then you see X start
and did of his description packets being exchanged.
Then you see X start.
Then you see exchange
and at some point it was should say full.
So you have elected the d R and B D r
you still in X starts?
Well, we didn't get to see the full state, but at least we got to see some of the ST changes.
Oh, here we go. Full.
So when you're fully synchronised your database with
Router three withdraw variety three days without without three, it went to four. Or from loading too full.
We even got to see the loading state.
The next command we're gonna look at is
the show I p o S p f data base command.
this is your link State database for area zero over here. The links their database for area one starts. So let's look at the link State database for area zero.
This first stands up
is your router l Essays or your tight one l essays.
network. Ellis is our type to el essays,
and this third stands up.
Is your type three l essays or summary l essays.
Okay, for the type one l essays. You see, each router
is the advertising router. Is each router produces one type one. L s a
okay. And the link it's advertising is the 200 link and,
well, the link it's advertising is represented in the routers Router I d.
Then you have the network link states, which is your type, too. L essays and the advertising router is the d r of that network, which is router one.
Then you also see that
the to a be ours, which is router one
and router to this 202 102 101 is rather one
router to are producing
your summary, Ellis is because they are the a b ours and they're injecting networks from one area into another area.
We do not see a type four or a tight five l s a in our database because we do not have external routes. That is not part of C C. N A.
The last thing I'm going to do with the SPF
is to show you how low SPF authentication works.
So we're going to authenticate area zero.
So I go into outer one
the SPF process by seeing Roger Oh, SPF 100
and then I say area one
Then I go to the interface facing router to one. So interface
serial 000 because area one exists between router one and router to a one. I go into this interface and I say I'd be Oh, SPF
I can either do simple
text authentication, clear text authentication. Or I could do message digest authentication, which is a lot more secure.
Clear text with Indication will send my password
across the link in clear text Message Digest will encrypt my password before sending it over. Or actually, the actual password is never sent on. Lee, a hash of the password is sent.
You see that? As soon as I turned on authentication and the debt timer expired on the on the other side or on my side, the debt timer for router to a one row 21 was brought down. So the neighbor is down
because now I locally on router one, I have authentication but no authentication configured on the other side.
So on this end, I'm going to say i p o S p f
and I'm gonna pick a number for the key. He won
nd five the word MD five and then a password. I'm going to simply pick it to be
I'm gonna save my work and go do the same for router to a one.
I'm gonna go into the writing process
Area one authentication message digest.
I did do that on Router One now. Deny.
Let me just make sure
you check my show. Run.
Actually, I did not do that on Roger one. Let me go ahead and change that. I did not say message digest on Router one. I just said area one with Indication, which is clear text with Indication which I don't want.
no area one authentication to take it away. Then area one authentication
go back to router to a one.
And I already have Area one authentication message digest on this end. Now, I just have to enable the authentication on my interface. So
interface serial zero slash one slash zero. The interface facing rather one.
And then I said I'd be Oh, SPF message digest. Ki won. This key has to match on both sides
MD five and the password has to match on both sides.
And pretty soon I should see
debug my i p o s P f events
magicians. He came up Show I p O S P f
So I p o S p f neighbor, I mean and rather one is up, and rather one and two are authenticating each other so that nobody else can unplug that device and plug in their own device and then get all your data.
If I say debug i p o S p f events.
See, now you're sending authentication information because now the debug
command shows that you're sending the youngest key, which is Cisco.
Turn off my debugging and this concludes, Oh, SPF.