IP Fragment Handling..................................................................................................................................................... 112
IP Fragments ACL Examples....................................................................................................................................112
Layer 4 ACL Rules Examples................................................................................................................................... 113
Congure a Standard IP ACL.........................................................................................................................................114
Conguring a Standard IP ACL Filter......................................................................................................................115
Congure an Extended IP ACL......................................................................................................................................115
Conguring Filters with a Sequence Number........................................................................................................116
Conguring Filters Without a Sequence Number................................................................................................. 118
Congure Layer 2 and Layer 3 ACLs............................................................................................................................ 119
Assign an IP ACL to an Interface..................................................................................................................................120
Applying an IP ACL.........................................................................................................................................................120
Counting ACL Hits.....................................................................................................................................................121
Congure Ingress ACLs.................................................................................................................................................. 121
Congure Egress ACLs...................................................................................................................................................121
Applying Egress Layer 3 ACLs (Control-Plane).................................................................................................... 122
Conguring UDF ACL.....................................................................................................................................................123
IP Prex Lists.................................................................................................................................................................. 125
Implementation Information.................................................................................................................................... 126
Conguration Task List for Prex Lists.................................................................................................................. 126
ACL Resequencing......................................................................................................................................................... 129
Resequencing an ACL or Prex List.......................................................................................................................130
Route Maps......................................................................................................................................................................131
Implementation Information..................................................................................................................................... 131
Flow-Based Monitoring Support for ACLs...................................................................................................................131
Behavior of Flow-Based Monitoring.......................................................................................................................132
Enabling Flow-Based Monitoring............................................................................................................................133
Conguring IP Mirror Access Group............................................................................................................................ 133
Sample Conguration...............................................................................................................................................134
Example of viewing IP mirror–access–group applied to an Interface................................................................135
8 Bidirectional Forwarding Detection (BFD).................................................................................................. 136
How BFD Works............................................................................................................................................................. 136
BFD Packet Format..................................................................................................................................................137
BFD Sessions............................................................................................................................................................ 138
BFD Three-Way Handshake.................................................................................................................................... 139
Session State Changes.............................................................................................................................................141
Important Points to Remember..................................................................................................................................... 141
Congure BFD................................................................................................................................................................. 141
Congure BFD for Physical Ports...........................................................................................................................142
Congure BFD for Static Routes............................................................................................................................143
Congure BFD for OSPF.........................................................................................................................................146
Congure BFD for OSPFv3......................................................................................................................................151
Congure BFD for IS-IS...........................................................................................................................................154
Congure BFD for BGP........................................................................................................................................... 157
Congure BFD for VRRP.........................................................................................................................................163
Conguring Protocol Liveness................................................................................................................................ 166
6
Contents