Loading content...
When a packet needs to travel from one end of an enterprise campus to another, or from a data center edge to a core router within the same organization, it doesn't need to understand the complexities of global Internet routing. It doesn't need to know about AS paths, routing policies, or inter-organizational agreements. It simply needs to find the best path within its local domain.
This is the realm of Interior Gateway Protocols (IGPs)—the routing protocols designed to efficiently and automatically determine optimal paths within a single Autonomous System. IGPs are the workhorses of enterprise, data center, and service provider networks, running continuously to ensure that internal connectivity remains optimal even as conditions change.
By the end of this page, you will understand what defines an IGP, the fundamental algorithms they use (distance vector and link state), the major IGP protocols in use today (RIP, OSPF, IS-IS, EIGRP), their comparative strengths and weaknesses, and when to choose each. This knowledge is essential for designing, implementing, and troubleshooting modern networks.
Interior Gateway Protocols share a common purpose: determine the best paths for traffic within a single administrative domain. But what exactly distinguishes an IGP from its exterior counterparts?
Fundamental IGP Characteristics:
IGP vs. EGP Philosophy:
The fundamental difference between IGP and EGP is philosophy:
| Aspect | IGP Philosophy | EGP Philosophy |
|---|---|---|
| Trust | All routers are trusted | Peers may be adversaries |
| Goal | Optimal paths (fastest, shortest) | Policy-compliant paths |
| Scope | Single organization | Multiple organizations |
| Information shared | Complete topology or metrics | Reachability and path info |
| Configuration | Relatively simple | Complex policy configuration |
| Convergence priority | Maximum speed | Stability over speed |
Within your AS, you want the fastest, most efficient paths. Between ASes, you want paths that comply with business agreements, legal requirements, and security policies—even if they're not technically 'optimal.'
IGPs converge rapidly—sometimes in sub-second timeframes. EGPs (specifically BGP) intentionally converge more slowly, using timers and dampening to prevent route flapping from cascading across the Internet. This difference reflects their domains: inside an AS, fast response to failures is paramount; across ASes, stability protects the global routing system from localized instability.
All IGPs are built on one of two fundamental routing algorithms: Distance Vector or Link State. Understanding these algorithms is essential for understanding how different IGPs behave, their strengths, their limitations, and why network architects choose one over another.
Distance Vector Algorithm:
Based on the Bellman-Ford algorithm, distance vector protocols work by:
Key characteristics:
Link State Algorithm:
Based on Dijkstra's Shortest Path First (SPF) algorithm:
Key characteristics:
| Characteristic | Distance Vector | Link State |
|---|---|---|
| Algorithm basis | Bellman-Ford | Dijkstra's SPF |
| Topology knowledge | Only next-hop for destinations | Complete network map |
| Update content | Entire routing table | Link state information only |
| Update trigger | Periodic (+ triggered updates) | Event-driven (topology changes) |
| Convergence speed | Slower (iterative) | Faster (instant recalculation) |
| Bandwidth usage | Higher (full table broadcasts) | Lower (incremental LSA floods) |
| Memory requirements | Lower | Higher (full LSDB) |
| CPU requirements | Lower | Higher (SPF calculation) |
| Loop prevention | Split horizon, poison reverse, holddown | Inherent (complete knowledge) |
| Scalability | Limited (smaller networks) | Better (hierarchical areas) |
| Example protocols | RIP, EIGRP* | OSPF, IS-IS |
Note: EIGRP is sometimes called an "advanced distance vector" or "hybrid" protocol because it incorporates some link-state features like triggered updates and maintaining neighbor relationships, while fundamentally using distance vector principles.
There's actually a third approach: Path Vector, used by BGP. Path vector protocols share the complete AS path to each destination, enabling loop detection and policy-based routing. BGP is sometimes called a "path vector protocol" to distinguish it from pure distance vector (where only metrics are shared) and link state (where topology is shared).
The Routing Information Protocol (RIP) is one of the oldest routing protocols still in use. First standardized in RFC 1058 (1988), RIP traces its origins to the Xerox PARC network in the 1970s and BSD Unix's routed daemon. While largely superseded in enterprise networks, RIP remains educational as the canonical distance vector implementation.
RIP Versions:
| Feature | RIPv1 | RIPv2 | RIPng |
|---|---|---|---|
| RFC | RFC 1058 (1988) | RFC 2453 (1998) | RFC 2080 (1997) |
| IP Version | IPv4 | IPv4 | IPv6 |
| Subnet support | No (classful) | Yes (VLSM/CIDR) | Yes |
| Authentication | None | Plain/MD5 | IPsec |
| Updates | Broadcast | Multicast (224.0.0.9) | Multicast (FF02::9) |
| Next-hop field | No | Yes | Yes |
RIP Operation:
Metric: Hop count (number of routers to destination). Maximum is 15; 16 means "unreachable."
Updates: Every 30 seconds, routers broadcast/multicast their complete routing table.
Timers:
Loop Prevention Mechanisms:
12345678910111213141516171819
! Basic RIPv2 Configurationrouter rip version 2 network 10.0.0.0 ! Enable RIP on all 10.x.x.x interfaces network 192.168.1.0 ! Enable RIP on this network no auto-summary ! Disable classful summarization passive-interface Gig0/0 ! Don't send RIP on this interface (e.g., user-facing) ! Optional: Authenticationinterface GigabitEthernet0/1 ip rip authentication mode md5 ip rip authentication key-chain RIP_KEYS ! Key chain for authenticationkey chain RIP_KEYS key 1 key-string MySecretKey123 accept-lifetime 00:00:00 Jan 1 2024 infinite send-lifetime 00:00:00 Jan 1 2024 infiniteDespite its limitations, RIP remains useful in very small, simple networks where administrative simplicity trumps performance, in legacy environments that haven't been upgraded, in education as a teaching tool for understanding routing fundamentals, and in certain Unix/Linux environments where routed provides basic routing capability.
Open Shortest Path First (OSPF) is the most widely deployed IGP in enterprise and service provider networks. Standardized in RFC 2328 (OSPFv2 for IPv4) and RFC 5340 (OSPFv3 for IPv6), OSPF provides:
OSPF Fundamentals:
1. Neighbor Discovery and Adjacency Formation:
2. Link State Database (LSDB):
3. SPF Calculation:
| Network Type | DR/BDR Election | Hello Interval | Use Case |
|---|---|---|---|
| Broadcast | Yes | 10s | Ethernet LANs |
| Non-Broadcast (NBMA) | Yes | 30s | Frame Relay, ATM (legacy) |
| Point-to-Point | No | 10s | Serial links, GRE tunnels |
| Point-to-Multipoint | No | 30s | Partial mesh NBMA |
| Point-to-Multipoint Non-Broadcast | No | 30s | Partial mesh, no broadcast |
OSPF Hierarchical Design:
OSPF introduces the concept of areas to enable hierarchical network design:
Areas provide:
12345678910111213141516171819202122
! OSPF Configuration with Multiple Areasrouter ospf 1 router-id 1.1.1.1 ! Manually set router ID auto-cost reference-bandwidth 10000 ! Base for cost calculation (10 Gbps) ! Interface-level configuration (modern approach)interface GigabitEthernet0/0 ip address 10.1.1.1 255.255.255.0 ip ospf 1 area 0 ! Place interface in backbone ip ospf cost 10 ! Manually set cost ip ospf priority 255 ! High priority for DR election interface GigabitEthernet0/1 ip address 10.2.1.1 255.255.255.0 ip ospf 1 area 1 ! Place in Area 1 ip ospf network point-to-point ! Force P2P (no DR election) ! Area configuration for stubrouter ospf 1 area 2 stub ! Make Area 2 a stub area area 2 stub no-summary ! Totally stubby area 1 range 10.2.0.0 255.255.0.0 ! Summarize Area 1 routesOSPF cost = Reference Bandwidth / Interface Bandwidth. The default reference is 100 Mbps, so a 100 Mbps link has cost 1 and a 10 Mbps link has cost 10. With modern high-speed links, you should increase the reference (e.g., to 10 Gbps or 100 Gbps) so that 1 Gbps and 10 Gbps links have different costs. Otherwise, they both calculate as cost 1!
Intermediate System to Intermediate System (IS-IS) is a link state IGP that, while less common in enterprises, dominates major service provider and hyperscale networks. Originally designed for the OSI protocol stack (ISO 10589), IS-IS was extended to support IP ("Integrated IS-IS") and later IPv6.
Why Service Providers Prefer IS-IS:
IS-IS Fundamentals:
Addressing: IS-IS uses Network Entity Titles (NETs) to identify routers:
49.0001.0000.0000.0001.0049.0001 (variable length)0000.0000.0001 (6 bytes, like MAC address format)00 (always 00 for routers)Hierarchy:
Unlike OSPF, there's no requirement for a contiguous backbone. Any chain of L2-capable routers forms the backbone.
PDU Types:
| Aspect | OSPF | IS-IS |
|---|---|---|
| Runs over | IP (protocol 89) | Layer 2 directly |
| Hierarchy | Areas (Area 0 backbone) | Two levels (L1, L2) |
| Backbone requirement | Contiguous Area 0 | Any L2 path |
| Router types | Internal, ABR, ASBR | L1, L2, L1/L2 |
| Hello destination | 224.0.0.5 / 224.0.0.6 | Multicast MAC addresses |
| Database | LSDB with LSA types | LSDB with TLVs |
| Extension mechanism | New LSA types (complex) | New TLVs (simple) |
| Metric range | 1-65,535 (16-bit) | 1-16,777,215 (24-bit wide) |
| MD5 authentication | LSA-level | PDU-level |
| Multi-topology | Requires MT-OSPF (limited) | Native support |
12345678910111213141516171819202122232425
! IS-IS Configuration for Service Provider Corerouter isis CORE net 49.0001.0000.0000.0001.00 ! NET address is-type level-2-only ! Core routers often L2-only metric-style wide ! Use 24-bit metrics log-adjacency-changes ! IPv4 and IPv6 address families address-family ipv4 unicast metric-style wide mpls traffic-eng router-id Loopback0 mpls traffic-eng level-2 exit-address-family address-family ipv6 unicast multi-topology ! Separate IPv6 SPF calculation exit-address-family ! Interface configurationinterface GigabitEthernet0/0 ip router isis CORE ipv6 router isis CORE isis circuit-type level-2-only isis network point-to-point ! P2P for core links isis metric 100 level-2 ! Set explicit metricChoose IS-IS for large-scale service provider networks, environments requiring MPLS Traffic Engineering, networks that need IPv4 and IPv6 with independent topologies, and when you want simpler extensibility for future protocols. Choose OSPF for enterprises with OSPF expertise, smaller networks where OSPF's rich feature set adds value, and environments where IP-based operation is preferred.
Enhanced Interior Gateway Routing Protocol (EIGRP) is Cisco's proprietary (now partially open-standard) routing protocol that combines distance vector simplicity with link state-like features. Often called a "hybrid" or "advanced distance vector" protocol, EIGRP offers:
The DUAL Algorithm:
EIGRP's Diffusing Update Algorithm (DUAL) is what sets it apart from traditional distance vector protocols:
Feasibility Condition: A route is "feasible" (loop-free) if the neighbor's reported distance to a destination is less than the router's current feasible distance. This mathematical guarantee prevents loops without waiting for holddown timers.
Successor and Feasible Successor:
Active vs. Passive State:
The DUAL algorithm provides mathematical correctness guarantees that traditional distance vector protocols lack, while avoiding the computational overhead of full SPF recalculation.
| Component | Description | K-value | Default |
|---|---|---|---|
| Bandwidth | Minimum bandwidth along path | K1 | Enabled |
| Delay | Cumulative delay along path | K3 | Enabled |
| Reliability | % of successfully transmitted packets | K4, K5 | Disabled |
| Load | % utilization of link | K2 | Disabled |
| MTU | Minimum MTU along path | — | Not in metric |
EIGRP Metric Calculation (Simplified):
Metric = 256 × (K1×Bandwidth + K2×Bandwidth/(256-Load) + K3×Delay)
× K5/(Reliability + K4)
With default K-values (K1=1, K2=0, K3=1, K4=0, K5=0), this simplifies to:
Metric = 256 × (Bandwidth + Delay)
Where:
Wide Metrics (RFC 7868): Modern EIGRP uses 64-bit wide metrics to handle high-speed interfaces properly, avoiding the issue where all high-speed links calculate identical metrics.
1234567891011121314151617181920212223242526272829
! EIGRP Named Mode Configuration (Modern)router eigrp ENTERPRISE ! address-family ipv4 unicast autonomous-system 100 ! af-interface default passive-interface ! Default all interfaces to passive authentication mode md5 authentication key-chain EIGRP_KEYS exit-af-interface ! af-interface GigabitEthernet0/0 no passive-interface ! Enable EIGRP on this interface summary-address 10.0.0.0 255.0.0.0 ! Summarize at this interface exit-af-interface ! topology base variance 2 ! Allow unequal cost load balancing redistribute static metric 100000 1000 255 1 1500 exit-af-topology ! network 10.0.0.0 0.255.255.255 ! Enable on 10.x.x.x networks eigrp router-id 1.1.1.1 exit-address-family ! Key chain for authentication key chain EIGRP_KEYS key 1 key-string EIGRP_Secret_2024While EIGRP remains popular in Cisco-only enterprise environments, the industry trend toward multi-vendor networks, automation, and software-defined approaches increasingly favors OSPF and IS-IS. If building a new network, consider whether EIGRP's Cisco-centric nature aligns with your long-term strategy. For Cisco shops with existing EIGRP deployments, it remains an excellent, highly performant choice.
Selecting an IGP is one of the most important network design decisions. The right choice depends on network size, vendor environment, required features, and operational expertise. Here's a decision framework:
| Scenario | Recommended IGP | Rationale |
|---|---|---|
| Enterprise, <100 routers, Cisco | EIGRP or OSPF | EIGRP simpler if Cisco-only; OSPF if multi-vendor planned |
| Enterprise, multi-vendor | OSPF | Industry standard, excellent interoperability |
| Service provider core | IS-IS | Proven at scale, MPLS-TE support, extensibility |
| Data center fabric | OSPF or IS-IS | OSPF for simplicity; IS-IS for hyperscale |
| Small branch (<10 routers) | OSPF or even RIP | Keep it simple; complexity isn't justified |
| Greenfield SP network | IS-IS | Future-proof, segment routing ready |
| IPv6 primary | OSPFv3 or IS-IS | Both have excellent IPv6 support |
Key Decision Factors:
1. Network Scale:
2. Vendor Mix:
3. Existing Expertise:
4. Future Requirements:
5. Convergence Requirements:
In practice, large networks often run multiple IGPs. A service provider might run IS-IS in the core and OSPF in customer-facing segments. An enterprise might have EIGRP in the campus and OSPF in the data center. Redistribution between protocols adds complexity but enables the right tool for each domain. Design redistribution points carefully to avoid routing loops and optimal path issues.
We've explored the rich landscape of Interior Gateway Protocols. Let's consolidate the essential knowledge:
What's Next:
Having mastered IGP protocols, we'll now turn to EGP protocols—specifically BGP, the protocol that glues the Internet together. Understanding how traffic moves between Autonomous Systems is essential for anyone working with Internet-connected infrastructure.
You now have comprehensive knowledge of Interior Gateway Protocols—the workhorses that route traffic within Autonomous Systems. From RIP's simplicity to OSPF's enterprise dominance to IS-IS's service provider strength, you understand the landscape. Next, we'll explore EGP protocols and the critical role BGP plays in Internet routing.