Routing Table Interpretation

The routing table is the fundamental decision-making database that routers use to forward packets toward their destinations. Understanding how to read and interpret routing tables is absolutely critical for the CCNA exam and real-world network troubleshooting. Every router maintains its own routing table, which lists all known networks and the information needed to reach them. When a packet arrives at a router, the device examines the destination IP address and consults its routing table to determine the best forwarding path. A routing table entry contains several essential components that work together to enable intelligent packet forwarding. The destination network identifies the target network using network address and subnet mask notation (for example, 192.168.10.0/24 or 10.1.0.0/16). This tells the router which packets match this particular route. The subnet mask or prefix length determines which bits of the destination IP address must match for this route to apply. Understanding CIDR notation and subnet masks is crucial here—a /24 prefix means the first 24 bits identify the network. The next-hop IP address specifies where the router should forward packets destined for this network. This is typically the IP address of the next router in the path toward the destination. For directly connected networks, there may not be a next-hop address because the router can deliver packets directly. The outgoing interface indicates which physical or logical interface the router should use to forward the packet. This might be shown as GigabitEthernet0/0, Serial0/0/0, or FastEthernet0/1, depending on the router model and interface types. Administrative Distance (AD) is a crucial metric that determines route trustworthiness when multiple routing sources provide paths to the same network. The AD value ranges from 0 to 255, with lower values indicating more trusted sources. For example, if a router learns about network 192.168.1.0/24 from both a static route (AD=1) and OSPF (AD=110), the static route wins because its AD is lower. This allows administrators to prefer certain routing information sources over others. The routing metric measures the cost or desirability of a particular path when multiple routes to the same destination exist from the same routing protocol. Different protocols use different metrics: OSPF uses cost based on interface bandwidth, EIGRP uses a composite metric considering bandwidth, delay, reliability, and load, while RIP simply counts hops. When two OSPF routes exist to the same network, the router selects the one with the lower cost metric. Routing tables also display timestamp information showing how long routes have been known and when they were last updated. This helps troubleshoot routing issues—if a route constantly flaps or has recent timestamp changes, it may indicate network instability. Understanding these components enables you to diagnose connectivity problems, verify routing protocol operation, optimize traffic paths, and troubleshoot network failures efficiently.

Routing codes are single-letter abbreviations displayed at the beginning of each routing table entry, indicating the source or method by which the router learned about that particular route. These codes are essential for quickly identifying how routes entered the routing table and understanding the routing dynamics of your network. Mastering routing codes allows you to instantly recognize whether routes are statically configured, dynamically learned, or directly connected—critical knowledge for both CCNA exam success and practical network administration. The 'C' code represents connected routes, which are networks directly attached to the router's interfaces. These routes appear automatically when you configure an IP address on an interface and bring it to an up/up state. Connected routes have the highest trustworthiness (AD=0) because the router has direct knowledge of these networks. For example, if you configure GigabitEthernet0/0 with IP 192.168.1.1/24, the router automatically adds a connected route for 192.168.1.0/24. These routes form the foundation of your routing table—they represent networks the router can reach without any intermediary devices. The 'L' code indicates local routes, which represent the actual IP addresses configured on the router's interfaces. These appear as /32 (host) routes and allow the router to recognize packets destined for its own interfaces. This code appeared in IOS 15.0 and later versions. While similar to connected routes, local routes specifically identify addresses that belong to the router itself rather than the entire connected subnet. The 'S' code marks static routes that administrators manually configure using the 'ip route' command. Static routes have AD=1, making them highly trusted but requiring manual maintenance. Network administrators use static routes for networks with predictable paths, backup routes, or when dynamic routing protocols are not desired. For example, 'ip route 10.2.0.0 255.255.0.0 10.1.1.2' creates a static route to 10.2.0.0/16 via next-hop 10.1.1.2. Dynamic routing protocol codes indicate routes learned automatically through routing protocol operation. The 'D' code represents EIGRP (Enhanced Interior Gateway Routing Protocol) routes, with AD=90. EIGRP is Cisco's advanced distance-vector protocol using a sophisticated metric calculation. The 'O' code marks OSPF (Open Shortest Path First) routes with AD=110. OSPF is the most common link-state routing protocol in enterprise networks. The 'R' code identifies RIP (Routing Information Protocol) routes with AD=120. RIP is a simple distance-vector protocol using hop count as its metric, though it's largely obsolete in modern networks. The 'B' code represents BGP (Border Gateway Protocol) routes, the protocol that runs the entire internet. External BGP (eBGP) routes have AD=20, while internal BGP (iBGP) routes have AD=200. BGP is typically used for internet routing and large enterprise networks. Additional important codes include 'i' for IS-IS routes, '*' which marks candidate default routes (0.0.0.0/0), and 'EX' suffix for EIGRP external routes. Understanding these codes at a glance enables you to instantly assess your network's routing state, identify which protocols are operating, and troubleshoot routing issues effectively during time-critical situations.

Administrative Distance (AD) is a fundamental routing concept that determines which route a router will trust and install in its routing table when multiple routing sources provide paths to the same destination network. This trustworthiness metric ranges from 0 (most trusted) to 255 (completely untrusted and ignored), allowing routers to make intelligent decisions when receiving potentially conflicting routing information from different sources. Understanding AD is absolutely crucial for the CCNA exam and becomes essential when implementing complex routing policies in production networks. The AD system establishes a clear hierarchy of routing information trustworthiness. Connected routes receive AD=0 because the router has firsthand knowledge of these directly attached networks—there's no more reliable information than what the router directly observes. This makes perfect sense: if your router's interface is connected to a network, that knowledge is absolutely certain. Local routes (the router's own IP addresses) also have AD=0 for the same reason. Static routes have AD=1, making them the second-most trusted routing source. This high trust level reflects the assumption that network administrators configure static routes deliberately and with full knowledge of the network topology. When you manually configure a static route, you're explicitly telling the router 'I know this path exists and I want you to use it.' Consequently, static routes override all dynamically learned routes by default. This behavior allows administrators to implement policy-based routing or create preferred paths that take precedence over automatically learned routes. Dynamic routing protocols each have assigned AD values that establish preference order. EIGRP routes have AD=90, making EIGRP the most preferred dynamic routing protocol in Cisco's default hierarchy. This preference reflects EIGRP's sophisticated metric calculation and typically fast convergence. OSPF routes carry AD=110, placing them below EIGRP but above most other dynamic protocols. OSPF's link-state algorithm provides excellent scalability and predictable behavior, justifying its moderate trust level. RIP routes have AD=120, reflecting RIP's simplistic hop-count metric and slower convergence compared to more advanced protocols. External BGP (eBGP) routes receive AD=20, making them highly trusted because they typically carry critical internet routing information from directly connected autonomous systems. Internal BGP (iBGP) routes have AD=200, a very low trust level designed to ensure that IGP (Interior Gateway Protocol) routes are preferred within an autonomous system. This prevents routing loops in complex BGP topologies. EIGRP external routes have AD=170, lower than internal EIGRP routes to reflect their less certain nature. Administrators can modify default AD values for specific routing scenarios using administrative commands, though this requires careful planning to avoid routing loops or blackholes. For example, you might increase a static route's AD to 150 to create a floating static route that only activates when dynamic routes fail. Understanding AD becomes critical when troubleshooting why a router chooses one path over another—always check which routing source has the lowest AD to the destination network. The router will always prefer the route with the lowest administrative distance, regardless of metric values, making AD the first-level tiebreaker in route selection.

Routing metrics are quantitative values that routing protocols use to determine the best path to a destination when multiple routes exist from the same routing source. While Administrative Distance determines which routing protocol to trust when different protocols provide routes to the same network, metrics determine which specific route to choose when a single protocol offers multiple paths. Understanding how different routing protocols calculate and use metrics is essential for CCNA success and for designing efficient, predictable networks in production environments. The complete route selection process follows a specific hierarchy. First, routers identify all available routes to the destination network by examining the routing table. Second, they eliminate routes from less trusted sources by comparing Administrative Distance values—only the routes with the lowest AD proceed to the next stage. Third, if multiple routes remain from the same routing source (same AD), the router compares their metric values and selects the route with the lowest metric. Finally, if multiple routes have identical AD and metrics, the router may install all equal-cost paths and load-balance traffic across them, depending on the routing protocol's capabilities. RIP (Routing Information Protocol) uses the simplest metric: hop count. Each router a packet traverses represents one hop, and RIP prefers paths with fewer hops. The maximum hop count is 15; any route requiring 16 or more hops is considered unreachable. While simple, this metric has significant limitations—RIP cannot distinguish between a path crossing three high-speed Gigabit Ethernet links and a path crossing three slow 56Kbps serial links. Both show as three hops despite drastically different performance characteristics. This limitation contributed to RIP's obsolescence in modern networks. OSPF (Open Shortest Path First) uses cost as its metric, calculated based on interface bandwidth. The default formula is: Cost = 100,000,000 / bandwidth in bps. A FastEthernet interface (100 Mbps) has cost 1, while a Gigabit Ethernet interface (1,000 Mbps) has cost 1 (rounded down from 0.1). Serial links at 1.544 Mbps have cost 64. OSPF sums the costs of all outgoing interfaces along the path to calculate total path cost. This bandwidth-aware metric makes OSPF much more intelligent than RIP—OSPF automatically prefers higher-bandwidth paths. Administrators can manually adjust interface costs using the 'ip ospf cost' command to influence path selection for traffic engineering purposes. EIGRP (Enhanced Interior Gateway Routing Protocol) employs the most sophisticated metric calculation, using a composite formula that can consider bandwidth, delay, reliability, load, and MTU. By default, EIGRP uses only bandwidth and delay in its metric calculation: Metric = [K1 × bandwidth + (K2 × bandwidth) / (256 - load) + K3 × delay] × [K5 / (reliability + K4)]. With default K values (K1=1, K3=1, others=0), this simplifies to bandwidth and delay components. EIGRP's metric provides fine-grained path differentiation and typically results in optimal path selection. Understanding metrics helps you predict router behavior and troubleshoot unexpected traffic paths. When investigating why traffic takes a particular route, first verify the routing source (check AD), then examine the metric if multiple routes exist from that source. You can use commands like 'show ip route' to view metrics, 'show ip ospf interface' to see OSPF costs, and 'show ip eigrp topology' to examine EIGRP metrics. This knowledge enables effective network design and rapid troubleshooting of suboptimal routing decisions.