- Route selection process to install routes in the ISAKMP port - 500
RIB (Routing Information Base): ESP proto- 50
1st - Longest match/prefix AH proto 51 2nd - AD (Administrative Distance): Block size: 0 - Connected AES-128-block 1 - Static 3des-64-bit 5 - EIGRP Summary Route Des-64 bit blcok 20 - eBGP Key Length: 90 - EIGRP AES: 127, 192 or 256 bit 100 - IGRP DES; 56 bit 110 - OSPF 3DES: 115 - IS-IS o 3 different keys 120 - RIP o 2 similler 1 different 160 - ODR o So 3des can have key legnths of 170 - EIGRP external route 168, 112 or 56 bit key lengths. 200 - iBGP 3DES has shorter and weaker encryption keys 255 - unknown compared to AES 3rd - Lowest Metric 3DES encryption takes longer than AES encryption - Exceptions to above Port Numbers: > If two protocols have the same AD (if one was changed) and the router needs to decide which is best, the router will use the default AD as the tie- breaker. UDP 67-DHCP server pot 68-DHCP client port > You CANNOT have two best routes from different protocols installed into the RIB. > If a tie exists between OSPF routes, then O> UDP 1701 L2TP O*IA> E1> E2. > If a tie exists between BGP routes, then the BGP TCP & UDP 80 HTTP best path selection process will be followed. TCP & UDP 443 HTTPS