What Is LISP Protocol in Networking?

Imagine you move to a new city but want people to keep sending you letters without giving them your new address every time. You set up a system where everyone sends mail to a central post office, which knows your current location and forwards the mail to you. LISP does something similar for computer networks.

Normally, when data is sent across the internet, the destination IP address tells both who a device is and where it is located. This works fine for small networks, but on a massive scale it becomes inefficient. LISP splits that dual role.

It assigns an Endpoint Identifier (EID) to each device, which is like a permanent ID card or name. It also assigns a Routing Locator (RLOC) to each network attachment point, which is like a temporary home address. When data is sent, it first goes to a mapping system that looks up the current RLOC for the destination EID.

Then the data is tunneled directly to that location. This separation allows devices to move to different networks without changing their IP address. It also reduces the number of routes that core internet routers must remember, because the core only needs to know about locations (RLOCs), not every individual device.

For IT professionals, LISP is a tool for creating more efficient, scalable, and mobile-friendly networks.

LISP is defined in RFC 6830 and related RFCs. It operates as a control plane and data plane protocol that separates the identity of a host (its Endpoint Identifier or EID) from its location (the Routing Locator or RLOC). In traditional IP routing, an IP address serves as both the identity and the locator.

LISP breaks this coupling by introducing two distinct address spaces. EIDs are IP addresses assigned to end-hosts, but they are not used for routing in the global internet core. RLOCs are IP addresses assigned to routers that connect to the global internet.

LISP requires a mapping system that correlates EIDs to RLOCs. This mapping is stored in a distributed database, often using a system like LISP+ALT (Alternative Logical Topology) or LISP-DDT (Delegated Database Tree). When a LISP-capable router, called an Ingress Tunnel Router (ITR), receives a packet destined for an EID, it queries the mapping system to find the corresponding RLOC.

The ITR then encapsulates the original packet with a LISP header and sends it to an Egress Tunnel Router (ETR) that owns the RLOC. The ETR decapsulates the packet and delivers it to the destination host. LISP supports several encapsulation formats, including LISP-over-UDP and LISP-over-GRE.

It also supports features like multihoming, traffic engineering, and mobility. In enterprise networks, LISP can be used for data center interconnect, network virtualization, and seamless roaming. In service provider networks, LISP helps reduce the global routing table size by allowing provider-independent address space to be moved without renumbering.

LISP is a key technology in Cisco's SD-Access architecture, where it provides the control plane for fabric overlay networks.

LISP matters because IP networks currently face serious scaling challenges. The global internet routing table continues to grow, and core routers struggle to keep up. LISP reduces the number of routes that core routers must store by keeping host-specific routes in a separate mapping system.

This makes the internet more efficient and sustainable. For enterprises, LISP enables seamless mobility. Devices can move between different network segments or even different geographic locations without changing their IP address.

This is critical for modern workplaces where employees use laptops and phones that move between offices, home networks, and public Wi-Fi. LISP also simplifies network design. Instead of complex routing policies across multiple sites, networking teams can set up a LISP overlay that handles traffic engineering automatically.

It supports multihoming, which allows a site to connect to multiple internet providers with ease. For data center operators, LISP can be used to manage virtual machine mobility across data centers. When a VM moves, its IP address stays the same, and LISP updates the mapping to point traffic to the new location.

This reduces downtime and simplifies operations. LISP also plays a role in network security. By hiding internal EID address space from the global routing table, it reduces exposure to certain types of attacks.

Overall, LISP is a practical tool for building networks that are scalable, flexible, and ready for future growth.

Exam questions often start with a scenario. For example: A company wants to allow its virtual machines to move between two data centers without changing their IP addresses. Which technology should be used?

The correct answer would be LISP. Another common pattern is a configuration question where you need to complete a command to enable LISP on a Cisco router. For instance, you might be given a snippet and asked which command configures the router as an ITR.

Troubleshooting questions may show a show lisp session command output and ask you to identify why a remote EID is unreachable. Architecture questions might ask: In LISP, what is the role of the Map Server? or What is the difference between EID and RLOC?

You may also see comparison questions like: Which statement about LISP is true? followed by options that mix up its features with those of other technologies. Some questions focus on the benefits: How does LISP reduce the global routing table size?

The answer involves the separation of identity and location, which removes host-specific routes from the core. There may be questions about the encapsulation used by LISP, asking which protocol and port number it uses (UDP port 4341 for control plane and 4342 for data plane). Be ready for questions that ask how LISP supports mobility, such as: When a host moves to a new site, what must be updated in the LISP mapping system?

The answer is the RLOC mapping for the host's EID. Overall, LISP questions require both conceptual understanding and some operational knowledge.

LISP is not a protocol you configure every day in small networks, but for enterprise and service provider environments, it is a powerful tool. To implement LISP, you need to identify which routers will act as ITR/ETR, and which will serve as Map Servers and Map Resolvers. In a typical Cisco network, you run LISP on routers or switches running IOS XE or IOS XR.

Configuration involves entering the lisp control-plane configuration mode. For example, to set up a router as an ITR/ETR, you use commands like router lisp and then specify the EID prefix and RLOC interface. You also need to configure the Map Server and Map Resolver endpoints.

A common choice is to use multiple MS/MR for redundancy. LISP can also integrate with multicast for efficient traffic forwarding. One thing that often goes wrong is forgetting to configure the route import and export policies.

Without proper connectivity between ITR/ETR and the mapping system, LISP fails. Another issue is incorrect mapping TTL values, which can cause stale entries and blackholing. Monitoring is done with commands like show lisp session, show lisp map-cache, and show lisp statistics.

LISP is closely tied to Cisco's SD-Access fabric. In that architecture, LISP handles the control plane, while VXLAN handles the data plane. As a network professional, you should be able to design a LISP overlay that supports mobility, multihoming, and network virtualization.

Understanding LISP also helps you grasp how the internet could evolve toward a more scalable model. If you work with cloud or hybrid networks, LISP can simplify connectivity between on-premises and cloud environments by providing consistent addressing. The key is to remember that LISP is about breaking the identity-location binding to make networks more flexible and efficient.