Concept Guide

Conguring a Static Route....................................................................................................................................1086
Sample VRF Conguration..........................................................................................................................................1086
Route Leaking VRFs..................................................................................................................................................... 1091
Dynamic Route Leaking...............................................................................................................................................1092
Conguring Route Leaking without Filtering Criteria.........................................................................................1092
Conguring Route Leaking with Filtering............................................................................................................1095
63 Virtual Router Redundancy Protocol (VRRP)......................................................................................... 1098
VRRP Overview........................................................................................................................................................... 1098
VRRP Benets..............................................................................................................................................................1099
VRRP Implementation................................................................................................................................................. 1099
VRRP Conguration..................................................................................................................................................... 1100
Conguration Task List...........................................................................................................................................1100
Setting VRRP Initialization Delay.......................................................................................................................... 1109
Sample Congurations.................................................................................................................................................. 1110
VRRP for an IPv4 Conguration............................................................................................................................1110
VRRP in a VRF Conguration.................................................................................................................................1113
VRRP for IPv6 Conguration................................................................................................................................. 1118
64 X.509v3.................................................................................................................................................. 1122
Introduction to X.509v3 certicates...........................................................................................................................1122
X.509v3 certicates............................................................................................................................................... 1122
Certicate authority (CA)...................................................................................................................................... 1122
Certicate signing requests (CSR)....................................................................................................................... 1122
How certicates are requested............................................................................................................................. 1122
Advantages of X.509v3 certicates..................................................................................................................... 1123
X.509v3 support in ...................................................................................................................................................... 1123
Information about installing CA certicates...............................................................................................................1125
Installing CA certicate...........................................................................................................................................1125
Information about Creating Certicate Signing Requests (CSR)........................................................................... 1125
Creating Certicate Signing Requests (CSR)..................................................................................................... 1126
Information about installing trusted certicates........................................................................................................1127
Installing trusted certicates..................................................................................................................................1127
Transport layer security (TLS).....................................................................................................................................1127
Syslog over TLS...................................................................................................................................................... 1128
Online Certicate Status Protocol (OSCP)............................................................................................................... 1128
Conguring OCSP setting on CA..........................................................................................................................1128
Conguring OCSP behavior...................................................................................................................................1129
Conguring Revocation Behavior......................................................................................................................... 1129
Conguring OSCP responder preference............................................................................................................ 1129
Verifying certicates.....................................................................................................................................................1129
Verifying Server certicates.................................................................................................................................. 1130
Verifying Client Certicates...................................................................................................................................1130
Event logging.................................................................................................................................................................1130
65 Debugging and Diagnostics......................................................................................................................1131
Contents
33