Create and use a single Loopback Address for Routing Protocol Peering

낮음레벨 2수동 검토cisco-nxos

설명

The use of a loopback interface is recommended for use in all routing protocols. This recommendation describes the configuration of the loopback interface. Routing protocol specific configurations are described under the respective routing protocols. Loopback interfaces are always up, and so are not dependent on physical interface link state issues (cabling or other link issues for instance). This means traffic sourced from a loopback interface can take any valid path to establish a routing relationship ... CIS assessment: Manual. Reported as SKIP with review instructions.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

CIS assessment: Manual. switch# sho ip int brief | i Lo Lo0 10.11.11.1 protocol-up/link-up/admin-up

조치 방법

조치 방식: 가이드 또는 인프라 패치

! Creating the loopback interface is a simple process. Addressing the loopback, in particular computing the subnet mask will vary by the organization and application. Often smaller subnets can be used for loopbacks, depending on how many potential peers are possible. int loopback 0 ip address 10.11.11.1 255.255.255.252 In order to use the loopback interface (rather than the closest interface to the routing peer), it must be explicitly configured in the routing protocol. This is described in the recommendations for each respective routing protocol.

속성

운영 체제: 모두
태그: cisco-nxosnetworkrouting
참고 자료: CIS Cisco NX-OS Benchmark v1.2.0 - 3.1.4.2 Create and use a single Loopback Address for Routing Protocol Peering