ccie rs khawar bc rev 3

Copyrights Netmetric Solutions 2006-2010 Website: http://www.netmetric-solutions.com; Email: [email protected]

1 of 229

CCIE R/S Lab Bootcamp Workbook

Authored By:

Khawar Butt CCIE # 12353 (R/S, Security, SP, Voice)

CCIE R/S Lab Bootcamp Workbook

Netmetric Solutions

http://www.netmetric-solutions.com


2 of 229

Module 1 Frame Relay


3 of 229

R1

Frame-Relay

R4

R3

R2

IP addressing and DLCI information Chart

Routers IP address Local DLCI Connecting to: R1 S0/0: 192.1.234.1/24 102

103 104

R2 R3 R4

R2 S0/0: 192.1.234.2 /24 201 R1

R3 S0/0: 192.1.234.3 /24 301

R1

R4 S0/0: 192.1.234.4 /24 401

R1

Lab 1 Hub-n-Spoke using Frame-relay map statements


4 of 229

Task 1

Configure the frame-relay cloud in a hub and spoke topology using frame-relay map statements. The frame-relay switch is configured in a full mesh; these routers should NOT reply to inverse-arp inquiries.

R1

Int S0/0 Ip address 192.1.234.1 255.255.255.0 Encapsulation frame Frame-relay map ip 192.1.234.2 102 b Frame-relay map ip 192.1.234.3 103 b Frame-relay map ip 192.1.234.4 104 b No frame-relay inverse-arp No shut

R2

Int S0/0 Ip address 192.1.234.2 255.255.255.0 Encapsulation frame Frame-relay map ip 192.1.234.1 201 b No frame-relay inverse-arp No shut

R3

Int s0/0 Ip address 192.1.234.3 255.255.255.0 Encapsulation frame Frame-relay map ip 192.1.234.1 301 b No frame-relay inverse-arp No shut

R4

Int s0/0 Ip address 192.1.234.4 255.255.255.0 Encapsulation frame Frame-relay map ip 192.1.234.1 401 b No frame-relay inverse-arp No shut

Task 2

Ensure that every router can ping every address connected to the frame-relay cloud including their own.

R1

Int S0/0 Frame-relay map ip 192.1.234.1 102

R2

Int S0/0 Frame-relay map ip 192.1.234.3 201 Frame-relay map ip 192.1.234.4 201 Frame-relay map ip 192.1.234.2 201

R3


R4



5 of 229

Task 3

Erase the startup config and reload the routers before proceeding to the next lab.


6 of 229

R1

Frame-Relay

R4

R3

R2

IP addressing and DLCI information Chart

Routers IP address Local DLCI Connecting to: R1 S0/0.12: 192.1.12.1/24

S0/0.13: 192.1.13.1/24 S0/0.14: 192.1.14.1/24

102 103 104

R2 R3 R4

R2 S0/0.21: 192.1.12.2/24 201

R1

R3 S0/0.31: 192.1.13.3 /24 301

R1

R4 S0/0.41: 192.1.14.4 /24 401

R1

Lab 2 Configuring Frame-relay point-to-point sub-interfaces


7 of 229

Task 1

Configure the frame-relay cloud in a hub and spoke topology; the routers should be configured in a point-to-point configuration.

R1

Int S0/0 Encap frame-relay No shut Exit ! Int S0/0.12 point-to-point Ip address 192.1.12.1 255.255.255.0 Frame-relay interface-dlci 102 ! Int S0/0.13 point-to-point Ip address 192.1.13.1 255.255.255.0 Frame-relay interface-dlci 103 ! Int S0/0.14 point-to-point Ip address 192.1.14.1 255.255.255.0 Frame-relay interface-dlci 104

R2

Int S0/0 Encap frame-relay No shut Exit ! Int S0/0.21 point-to-point Ip address 192.1.12.2 255.255.255.0 Frame-relay interface-dlci 201

R3


R4



8 of 229

R1

Frame-Relay

R4

R3

R2

Task 1

Configure the routers connected to the frame-relay cloud as follows:

o R1 (The HUB) must be configured with two sub-interfaces, one of the two sub-interfaces must be configured to connect R1 to R4, this sub-interface should be configured in a point-to-point manner using the following IP addressing:

R1 = 192.1.14.1 /24, and R4 = 192.1.14.4 /24. o The second sub-interface on R1 must be configured in a multipoint manner,

and this sub-interface must be configured to connect R1 to routers R2 and R3 using the following IP addressing:

R1 = 192.1.123.1 /24, R2 = 192.1.123.2 /24 and R3 = 192.1.123.3 /24 o Make sure that you are pretending that R1 is not a Cisco router when

configuring the Encapsulation Framing.

Lab 3 Point-to-point and Multipoint


9 of 229

o Routers R2, R3 should not be configured with a sub-interface and these routers should NOT rely on Inverse-arp.

o R4 should be configured with a sub-interface in a point-to-point manner.

o The routers connecting to the frame-relay cloud should be configured in a hub and spoke, with R1 being the hub and R2, R3 and R4 the spokes.

o Ensure that the routers can ping every IP address including their own within their IP address space.

R1

Int S0/0 Encapsulation frame-relay ietf No frame-relay inverse No shut ! Int S0/0.14 point-to-point Ip address 192.1.14.1 255.255.255.0 Frame-relay interface-dlci 104 ! Int S0/0.123 multipoint Ip address 192.1.123.1 255.255.255.0 Frame-relay map ip 192.1.123.1 102 Frame-relay map ip 192.1.123.2 102 b Frame-relay map ip 192.1.123.3 103 b

R2

Int S0/0 Ip address 192.1.123.2 255.255.255.0 Encapsulation frame No frame-relay inverse Frame-relay map ip 192.1.123.1 201 ietf b Frame-relay map ip 192.1.123.3 201 ietf Frame-relay map ip 192.1.123.2 201 ietf No shut Exit

R3

Int S0/0 Encapsulation frame Ip address 192.1.123.3 255.255.255.0 Frame-relay map ip 192.1.123.1 301 ietf b Frame-relay map ip 192.1.123.2 301 ietf Frame-relay map ip 192.1.123.3 301 ietf No frame-relay inverse No shut

R4

Int S0/0 Encap frame No frame-relay inverse No shut ! Inter S0/0.41 point-to-point Ip address 192.1.14.4 255.255.255.0 Frame-relay interface 401 ietf

Task 2

Ensure that R1 and R4 use CHAP authentication using Cisco as the password. These routers must authenticate each other before they can communicate.


10 of 229

R1

Username R4 password Cisco

Interface S0/0.14 No ip address

Inter virtual-template 1 Ip address 192.1.14.1 255.255.255.0 Ppp authentication chap

Int S0/0.14 Frame-relay interface-dlci 104 ppp virtual-template 1

R4

Username R1 password Cisco

Inter S0/0.41 No ip address

Inter virtual-template 1 Ip address 192.1.14.4 255.255.255.0 Ppp authentication chap

Int S0/0.41 Frame-relay interface-dlci 401 ppp virtual-template 1


11 of 229

Module 2 Basic Switching


12 of 229

Task 1

Configure Switch1 as the VTP Server and the other Switch(s) as VTP Clients. Use CCIE as the Domain name. Authenticate the relationship using CCIERS as the password.

Switch1

VTP domain CCIE VTP mode server VTP password CCIERS

Switch2

VTP domain CCIE VTP mode client VTP password CCIERS

Lab 1 Basic 3550 Configuration

SW1

F 0/0 (.2)

F 0/0.1 (.1)

VLAN 40 (.15)

VLAN 30 (.15)

192.1.34.0/24 VLAN 30

192.1.13.0/24 VLAN 20

F 0/0 (.5)

R5

192.1.2.0/24 VLAN 40

R1

R2

192.1.15.0/24 VLAN 10

F 0/0.2 (.1)

F 0/0 (.4)

R4

R3 F0/0.1 (.3)

F0/0.2 (.3)


13 of 229

Switch3


Switch4


Task 2

Ensure that you can enhances network bandwidth use through the trunk ports by reducing the unnecessary traffic flooding of VLANs throughout the switches in your network.

All Switches

Vtp pruning

Task 3

Ensure that the Trunk ports of your Rack are statically configured to trunk using an industry standard protocol. Configure these ports such that they will trunk even if the negotiation fails. Also make sure to disable DTP on the trunk interfaces.

All Switches

Interface range F0/XX XX Switchport trunk encapsulation dot1q Switchport mode trunk Switchport nonegotiate

Task 4

Assign Ports to the appropriate VLANs based on the Network Diagram. Use the physical topology diagram for your rack to accomplish this. Make sure the ports are either set to Trunk or Access statically.

SwitchX

interface F0/XX Switchport mode access Switchport access vlan XX ! interface F0/XX Switchport trunk encapsulation dot1q Swithcport mode trunk

Task 5


14 of 229

Enable flow-control on SW1 interface fa0/2 and make sure that when the router connected to this port announce congestion, the switch should reduce it's throughput for this port.

Switch1

interface F0/2 flowcontrol receive on

Task 6

Test by pinging directly connected interfaces on each router or Switch1.


15 of 229

Module 3 RIP V2


16 of 229

Note: It builds on the topology created in the previous lab.

Lab Objective:

Task 1

Configure Loopback 0 on all routers and Switch1. Use the format of X.X.X.X/8 for the IP address of the loopback. Use 15 for Switch1.

Task 2

Configure RIP V2 on all Devices to advertise all directly connected networks. Disable Auto-summary.

R1

Router Rip Version 2 No auto-summary Network 1.0.0.0 Network 192.1.13.0 Network 192.1.15.0

R2

Router Rip Version 2 No auto-summary Network 2.0.0.0 Network 192.1.2.0

R3

Router Rip Version 2 No auto-summary Network 3.0.0.0 Network 192.1.34.0 Network 192.1.13.0

R4


R5


Switch1

IP Routing ! Router RIP Version 2 No auto-summary Network 15.0.0.0 Network 192.1.2.0 Network 192.1.34.0

Lab 1 Basic RIP V2 Configuration


17 of 229

(Builds on Lab1)

Lab Objective:

Task 1

Configure Clear Text authentication between R1 and R5. Use ccie as the key-string with a key-id of 1.

R1

Key chain AUTH Key 1 Key-string ccie ! Interface F 0/0.1 Ip rip authentication key-chain AUTH

R5

Key chain AUTH Key 1 Key-string ccie ! Interface F 0/0 Ip rip authentication key-chain AUTH

Task 2

Configure MD5 authentication for all links except the previously configured link between R1 and R5. Use the same key and key-string.

R1

Interface F 0/0.2 Ip rip authentication key-chain AUTH IP rip authentication mode MD5

R2

Key chain AUTH Key 1 Key-string ccie ! Interface F 0/0 Ip rip authentication key-chain AUTH Ip rip authentication mode MD5

R3

Key chain AUTH Key 1 Key-string ccie ! Interface F 0/0.1 Ip rip authentication key-chain AUTH IP rip authentication mode MD5 ! Interface F 0/0.2 Ip rip authentication key-chain AUTH IP rip authentication mode MD5

R4

Key chain AUTH Key 1 Key-string ccie ! Interface F 0/0 Ip rip authentication key-chain AUTH Ip rip authentication mode MD5

Lab 2 RIP V2 Authentication


18 of 229

Switch 1

Key chain AUTH Key 1 Key-string ccie ! Interface VLAN 30 Ip rip authentication key-chain AUTH Ip rip authentication mode MD5 ! Interface VLAN 40 Ip rip authentication key-chain AUTH Ip rip authentication mode MD5


19 of 229

(Builds on Lab 2)

Lab Objective:

Task 1

Configure the following Loopback Interfaces on R3 and advertise them under RIP:

Loopback 21: 201.1.1.1/24 Loopback 22: 201.1.2.1/24 Loopback 23: 201.1.3.1/24 Loopback 24: 201.1.4.1/24 Loopback 25: 201.1.5.1/24 Loopback 26: 201.1.6.1/24

R3

Interface loopback 21 Ip address 201.1.1.1 255.255.255.0 Interface loopback 22 Ip address 201.1.2.1 255.255.255.0 Interface loopback 23 Ip address 201.1.3.1 255.255.255.0 Interface loopback 24 Ip address 201.1.4.1 255.255.255.0 Interface loopback 25 Ip address 201.1.5.1 255.255.255.0 Interface loopback 26 Ip address 201.1.6.1 255.255.255.0 ! Router RIP Network 201.1.1.0 Network 201.1.2.0 Network 201.1.3.0 Network 201.1.4.0 Network 201.1.5.0 Network 201.1.6.0

Task 2

R1 should only receive routes from the 201.1.X.0 range that have an even number in the 3rd Octet. Use the minimum number of lines possible to accomplish this task. No

Lab 9 IP RIP Triggered Lab 3 Route Filtering using Distribute Lists


20 of 229

configuration should be done on R1. Make sure R4 and Switch1 receive all 201.1.X.0 routes.

R3

Access-list 2 deny 201.1.1.0 0.0.254.255 Access-list 2 permit any ! Router RIP Distribute-list 2 out F0/0.1


21 of 229

(Builds on Lab 3)

Lab Objective:

Task 1

Configure the following Loopback Interfaces on R5 and advertise them under RIP:


R5

Interface loopback 21 Ip address 150.50.1.1 255.255.255.0 Interface loopback 22 Ip address 150.50.2.1 255.255.255.0 Interface loopback 23 Ip address 150.50.3.1 255.255.255.0 Interface loopback 24 Ip address 205.1.1.33 255.255.255.224 Interface loopback 25 Ip address 206.1.1.1 255.255.255.240 Interface loopback 26 Ip address 107.1.1.1 255.255.0.0 ! Router Rip Network 150.50.0.0 Network 205.1.1.0 Network 206.1.1.0 Network 107.0.0.0

Task 2

R1 should only receive prefixes with a prefix-length of 8 to 24 from R5. Configure the Filtering on R1.

Lab 4 Route Filtering using Prefix-List


22 of 229

R1

ip prefix-list VALID-PREF seq 5 permit 0.0.0.0/0 ge 8 le 24 ! Router RIP distribute-list prefix VALID-PREF in F0/0.1


23 of 229

(Builds on Lab 4)

Lab Objective:

Task 1

Configure the following Loopback Interfaces on Switch1 and advertise them under RIP:

Loopback 41: 154.1.8.1/24 Loopback 42: 154.1.9.1/24 Loopback 43: 154.1.10.1/24 Loopback 44: 154.1.11.1/24 Loopback 45: 154.1.12.1/24 Loopback 46: 154.1.13.1/24 Loopback 47: 154.1.14.1/24 Loopback 48: 154.1.15.1/24

Switch1

Interface loopback 41 Ip address 154.1.8.1 255.255.255.0 Interface loopback 42 Ip address 154.1.9.1 255.255.255.0 Interface loopback 43 Ip address 154.1.10.1 255.255.255.0 Interface loopback 44 Ip address 154.1.11.1 255.255.255.0 Interface loopback 45 Ip address 154.1.12.1 255.255.255.0 Interface loopback 46 Ip address 154.1.13.1 255.255.255.0 Interface loopback 47 Ip address 154.1.14.1 255.255.255.0 Interface loopback 48 Ip address 154.1.15.1 255.255.255.0 ! Router Rip Network 154.1.0.0

Task 2

Lab 5 Route Summarization with RIP


24 of 229

Ensure that all routers except R2 only get a summary route from Switch1 for the new Loopback interfaces that were created in Task 1. R2 should get all the specific routes. Do not eable auto summary on Switch1.

Switch1

int VLAN 30 ip summary-address rip 154.1.8.0 255.255.248.0


25 of 229

Module 4 EIGRP


26 of 229

Interface IP Address Configuration

R1

Interface IP Address Subnet Mask Loopback 0 1.1.1.1 255.0.0.0 E 0/0 192.1.12.1 255.255.255.0

R2

Interface IP Address Subnet Mask Loopback 0 2.2.2.2 255.0.0.0 E 0/0 192.1.12.2 255.255.255.0 S 0/0 192.1.23.2 255.255.255.0

R3

Interface IP Address Subnet Mask Loopback 0 3.3.3.3 255.0.0.0 S 0/0 192.1.23.3 255.255.255.0 E 0/0 192.1.34.3 255.255.255.0

Lab 1 Basic EIGRP Configuration

R2 R1

E 0/0 E 0/0 Loopback 0 Loopback 0

Loopback 0 Loopback 0 E 0/0 E 0/0

S 0/0

S 0/0

R3 R4


27 of 229

R4


Lab Objective:

Task 1

Configure the interfaces with the appropriate addresses. Configure the Serial interfaces between R2 and R3 using Frame Relay. Configure the interface as a Regular Frame Relay interface. Configure the Frame Relay mapping manually.

R1

Interface Loopback 0 Ip address 1.1.1.1 255.0.0.0 Interface E 0/0 Ip address 192.1.12.1 255.255.255.0 No shut

R2

Interface Loopback 0 Ip address 2.2.2.2 255.0.0.0 Interface E 0/0 Ip address 192.1.12.2 255.255.255.0 No shut Interface S 0/0 Ip address 192.1.23.2 255.255.255.0 Encap frame-relay No frame-relay inverse-arp Frame-relay map ip 192.1.23.3 203 broad No shut

R3

Interface Loopback 0 Ip address 3.3.3.3 255.0.0.0 Interface E 0/0 Ip address 192.1.34.3 255.255.255.0 No shut Interface S 0/0 Ip address 192.1.23.3 255.255.255.0 Encap frame-relay No frame-relay inverse-arp Frame-relay map ip 192.1.23.2 302 broad No shut

R4

Interface Loopback 0 Ip address 4.4.4.4 255.0.0.0 Interface E 0/0 Ip address 192.1.34.4 255.255.255.0 No shut

Task 2

Configure EIGRP on all 4 routers in AS 12353. Disable Auto-summary.


28 of 229

R1

Router EIGRP 12353 No auto-summary Network 1.0.0.0 Network 192.1.12.0

R2

Router EIGRP 12353 No auto-summary Network 2.0.0.0 Network 192.1.12.0 Network 192.1.23.0

R3

Router EIGRP 12353 No auto-summary Network 3.0.0.0 Network 192.1.34.0 Network 192.1.23.0

R4

Router EIGRP 12353 No auto-summary Network 4.0.0.0 Network 192.1.34.0


29 of 229

(Builds on Lab1)

Lab Objective:

Task 1

Configure MD5 authentication for all links. Use ccie as the key-string with a key-id of 1.

R1

Key chain AUTH Key 1 Key-string ccie ! Interface E 0/0 Ip authentication key-chain eigrp 12353 AUTH Ip authentication mode eigrp 12353 MD5

R2

Key chain AUTH Key 1 Key-string ccie ! Interface S 0/0 Ip authentication key-chain eigrp 12353 AUTH Ip authentication mode eigrp 12353 MD5 ! Interface E 0/0 Ip authentication key-chain eigrp 12353 AUTH Ip authentication mode eigrp 12353 MD5

R3

Key chain AUTH Key 1 Key-string ccie ! Interface S 0/0 Ip authentication key-chain eigrp 12353 AUTH Ip authentication mode eigrp 12353 MD5 ! Interface E 0/0 Ip authentication key-chain eigrp 123453 AUTH Ip authentication mode eigrp 12353 MD5

R4

Key chain AUTH Key 1 Key-string ccie ! Interface E 0/0 Ip authentication key-chain eigrp 12353 AUTH Ip authentication mode eigrp 12353 MD5

Lab 2 EIGRP Authentication


30 of 229

(Builds on Lab 2)

Lab Objective:

Task 1

Configure all routers such that they advertise EIGRP routes with greater than 110 hops as unreachable.

R1

router eigrp 12353 metric maximum-hops 110

R2


R3


R4


Task 2

Change the administrative distance of all internal and external EIGRP networks to be 95.

R1

router eigrp 12353 distance eigrp 95 95

R2


R3


R4


Task 3

Ensure that R2 never uses more than 45% of the bandwidth for EIGRP updates; you should use an EIGRP specific command to accomplish this task.

R2

Interface S 0/0 ip bandwidth-percent eigrp 12353 45 Interface E 0/0 ip bandwidth-percent eigrp 12353 45

Lab 9 IP RIP Triggered Lab 3 Advanced EIGRP Configurations


31 of 229

Task 4

The Serial link between R3 and R2 sometimes is experiencing congestion and most of the time R3 declares R2 in Stuck-In-Active. Change the time that R3 will wait after sending a query to R2, before declaring the routes on R2 to be in SIA state to 10 minutes.

R3

Router eigrp 12353 Timers active-time 10


32 of 229

(Builds on Lab 3)

Lab Objective:

Task 1

Configure the following Loopback Interfaces on R2 and advertise them in EIGRP:


R2

Interface loopback 21 Ip address 201.1.1.1 255.255.255.0 Interface loopback 22 Ip address 201.1.2.1 255.255.255.0 Interface loopback 23 Ip address 201.1.3.1 255.255.255.0 Interface loopback 24 Ip address 201.1.4.1 255.255.255.0 Interface loopback 25 Ip address 201.1.5.1 255.255.255.0 Interface loopback 26 Ip address 201.1.6.1 255.255.255.0 ! Router EIGRP 12353 Network 201.1.1.0 Network 201.1.2.0 Network 201.1.3.0 Network 201.1.4.0 Network 201.1.5.0 Network 201.1.6.0

Task 2

R1 should only receive routes from the 201.1.X.0 range that have an even number in the 3rd Octet. Use the minimum number of lines possible to accomplish this task. No configuration should be done on R1. Make sure R3 and R4 receive all 201.1.X.0 routes.

Lab 4 Route Filtering using Distribute Lists


33 of 229

R2

Access-list 2 deny 201.1.1.0 0.0.254.255 Access-list 2 permit any ! Router EIGRP 12353 Distribute-list 2 out E 0/0


34 of 229

(Builds on Lab 4)

Lab Objective:

Task 1

Configure the following Loopback Interfaces on R3 and advertise them under EIGRP:


R3

Interface loopback 21 Ip address 150.50.1.1 255.255.255.0 Interface loopback 22 Ip address 150.50.2.1 255.255.255.0 Interface loopback 23 Ip address 150.50.3.1 255.255.255.0 Interface loopback 24 Ip address 205.1.1.33 255.255.255.224 Interface loopback 25 Ip address 206.1.1.1 255.255.255.240 Interface loopback 26 Ip address 107.1.1.1 255.255.0.0 ! Router EIGRP 12353 Network 150.50.0.0 Network 205.1.1.0 Network 206.1.1.0 Network 107.0.0.0

Task 2

R4 should only receive prefixes with a prefix-length of 8 to 24 from R3.

R4

ip prefix-list VALID-PREF seq 5 permit 0.0.0.0/0 ge 8 le 24



35 of 229

! Router EIGRP 12353 distribute-list prefix VALID-PREF in F0/0


36 of 229

(Builds on Lab 5)

Lab Objective:

Task 1

Configure the following Loopback Interfaces on R3 and advertise them under EIGRP:

Loopback 41: 194.1.8.1/24 Loopback 42: 194.1.9.1/24 Loopback 43: 194.1.10.1/24 Loopback 44: 194.1.11.1/24 Loopback 45: 194.1.12.1/24 Loopback 46: 194.1.13.1/24 Loopback 47: 194.1.14.1/24 Loopback 48: 194.1.15.1/24

R3

Interface loopback 41 Ip address 194.1.8.1 255.255.255.0 Interface loopback 42 Ip address 194.1.9.1 255.255.255.0 Interface loopback 43 Ip address 194.1.10.1 255.255.255.0 Interface loopback 44 Ip address 194.1.11.1 255.255.255.0 Interface loopback 45 Ip address 194.1.12.1 255.255.255.0 Interface loopback 46 Ip address 194.1.13.1 255.255.255.0 Interface loopback 47 Ip address 194.1.14.1 255.255.255.0 Interface loopback 48 Ip address 194.1.15.1 255.255.255.0 ! Router EIGRP 12353 Network 194.1.8.0 Network 194.1.9.0 Network 194.1.10.0 Network 194.1.110 Network 194.1.12.0 Network 194.1.13.0 Network 194.1.14.0 Network 194.1.150

Lab 6 Route Summarization with EIGRP


37 of 229

Task 2

Ensure that all routers only get a summary route from R3 for the new Loopback interfaces that were created in Task 1. R3 should NOT enable auto summary.

R3

int E0/0 ip summary-address eigrp 12353 194.1.8.0 255.255.248.0 ! int S0/0 ip summary-address eigrp 12353 194.1.8.0 255.255.248.0


38 of 229

(Builds on Lab 6)

Task 1

R1 is a low end spoke router that has low bandwith connection to the hub. Ensure that eigrp queries are not sent to the spoke. The hub needs reachibility for the loopback of R1. Do not use the "network" statement to advertise the loopback address on R1.

R1

Route-map REDCON permit 10 Match interface Loopback0

Router EIGRP 12353 No auto-summary Network 192.1.12.0 Eigrp stub connected Redistribute connected route-map REDCON

Lab 7 Route Summarization with EIGRP


39 of 229

Module 5 OSPF


40 of 229


R1


R2


R3


R4


Lab 1 Basic OSPF Configuration on BMA

R2 R1

E 0/0 E 0/0

Loopback 0 Loopback 0

R4 R3

Loopback 0 Loopback 0

E 0/0 E 0/0


41 of 229

Lab Objective:

Configure the Interface IP addresses based on the above table

Task 1

Configure OSPF on a Broadcast Multi-Access(BMA) Ethernet network in Area 0. Advertise all networks on all routers. Hard Code the Router-id based on the following: R1 11.11.11.11 R2 22.22.22.22 R3 33.33.33.33 R4 44.44.44.44

R1

Router OSPF 1 Router-id 11.11.11.11 Network 1.0.0.0 0.255.255.255 area 0 Network 100.0.0.0 0.255.255.255 area 0

R2


R3


R4


Task 2

Configure the routers such that R1 becomes the DR and R2 as the BDR on the 100 Network.

R1

Interface E 0/0 Ip ospf priority 100

R2

Interface E 0/0 Ip ospf priority 50

Note: Shut the Switch interface that connect to the routers using the Interface Range command and bring them back up to reset the DR/BDR setup.


42 of 229

R1

Frame-Relay

R4

R3

R2

Task 1

Configure the following loopback on all the routers: R1 Loopback 0 1.1.1.1/8 R2 Loopback 0 2.2.2.2/8 R3 Loopback 0 3.3.3.3/8 R4 Loopback 0 4.4.4.4/8

R1

Interface Loopback 0 Ip address 1.1.1.1 255.0.0.0

R2


R3


R4


Lab 2 OSPF and Frame Relay


43 of 229

Task 2

Configure the link between R1 and R4 using Frame Relay. Keep in mind that R1 will also be connected to R2 and R3 over a Multipoint interface. Do not create any sub-interfaces on R4. Do not rely on Inverse ARP for Frame Relay mappings. Do not use the Frame-relay map command on R1 for this task. Use 192.1.14.0/24 as the network for this link.

R1

Interface S 0/0 Encap frame-relay No frame-relay inverse-ARP No shut Interface S0/0.4 point-to-point Ip address 192.1.14.1 255.255.255.0 Frame-relay interface-dlci 104

R4

Interface S0/0 Ip address 192.1.14.4 255.255.255.0 Encap frame-relay No frame-relay inverse-arp Frame-relay map ip 192.1.14.1 401 broad No shut

Task 3

Configure the link between R1, R2 and R3 using Frame Relay. This link should be a multipoint link Do not create any sub-interfaces on R2 and R3. Do not rely on Inverse ARP for Frame Relay mappings. Use 192.1.123.0/24 as the network for this link. All routers should be able to ping each other and their own local frame-relay interfaces.

R1

Interface S0/0.23 multipoint Ip address 192.1.123.1 255.255.255.0 Frame-relay map ip 192.1.123.1 102 Frame-relay map ip 192.1.123.2 102 broad Frame-relay map ip 192.1.123.3 103 broad

R2

Interface S0/0 Ip address 192.1.123.2 255.255.255.0 Encap frame-relay No frame-relay inverse-arp Frame-relay map ip 192.1.123.1 201 broad Frame-relay map ip 192.1.123.2 201 Frame-relay map ip 192.1.123.3 201 No shut

R3

Interface S0/0 Ip address 192.1.123.3 255.255.255.0 Encap frame-relay No frame-relay inverse-arp Frame-relay map ip 192.1.123.1 301 broad Frame-relay map ip 192.1.123.2 301 Frame-relay map ip 192.1.123.3 301 No shut


44 of 229

Task 4

Configure OSPF in Area 0 as the routing protocol between R1, R2, R3 and R4. All loopback networks should be visible in all routing tables. They should be using a /8 mask. Hard-code the router ID based on the Loopback 0 addresses. Do not use the OSPF network type broadcast on any of the Frame Relay links. Do not use the Neighbor command for this task.

R1

Interface S0/0.23 Ip ospf network point-to-multipoint ! Interface Loopback 0 Ip ospf network point-to-point ! Router OSPF 1 Router-id 1.1.1.1 Network 1.0.0.0 0.255.255.255 area 0 Network 192.1.123.0 0.0.0.255 area 0 Network 192.1.14.0 0.0.0.255 area 0

R2

Interface S0/0 Ip ospf network point-to-multipoint ! Interface Loopback 0 Ip ospf network point-to-point ! Router OSPF 1 Router-id 2.2.2.2 Network 2.0.0.0 0.255.255.255 area 0 Network 192.1.123.0 0.0.0.255 area 0

R3

Interface S0/0 Ip ospf network point-to-multipoint ! Interface Loopback 0 Ip ospf network point-to-point ! Router OSPF 1 Router-id 3.3.3.3 Network 3.0.0.0 0.255.255.255 area 0 Network 192.1.123.0 0.0.0.255 area 0

R4

Interface S0/0 Ip ospf network point-to-point ! Interface Loopback 0 Ip ospf network point-to-point ! Router OSPF 1 Router-id 4.4.4.4 Network 4.0.0.0 0.255.255.255 area 0 Network 192.1.14.0 0.0.0.255 area 0


45 of 229

R1

Interface IP Address Subnet Mask Loopback 0 1.1.1.1 255.0. 0.0 E 0/0 192.1.12.1 255.255.255.0

R2

Interface IP Address Subnet Mask E 0/0 192.1.12.2 255.255.255.0 S 0/0 192.1.234.2 255.255.255.0 Loopback 0 2.2.2.2 255.0.0.0

R3

Interface IP Address Subnet Mask S 0/0 192.1.234.3 255.255.255.0 E 0/0 192.1.3.3 255.255.255.0 Loopback 0 3.3.3.3 255.0.0.0

Lab 3 Virtual Link

E 0/0

S 0/0

Lo 0 E 0/0 Lo 0

S 0/0

Lo 0 E 0/0 VLAN 3 Lo 0

R1

Switch 1

R3

R2

192.1.12.0/24

192.1.234.0/24

192.1.3.0/24

R4

R5

VLAN 5

192.1.5.0/24


46 of 229

R4

Interface IP Address Subnet Mask Loopback 0 4.4.4.4 255.0.0.0 S 0/0 192.1.234.4 255.255.255.0

R5


Switch 1

Interface IP Address Subnet Mask Loopback 0 55.55.55.55 255.0.0.0 VLAN 3 192.1.3.33 255.255.255.0 VLAN 5 192.1.5.55 255.255.255.0

Interface Configuration

R1

interface Loopback0 ip address 1.1.1.1 255.0.0.0 ! interface Ethernet0/0 ip address 192.1.12.1 255.255.255.0 no shutdown

R2

interface Loopback0 ip address 2.2.2.2 255.0.0.0 ! interface Ethernet0/0 ip address 192.1.12.2 255.255.255.0 no shut down ! interface Serial0/0 ip address 192.1.234.2 255.255.255.0 encapsulation frame-relay frame-relay map ip 192.1.234.3 203 broadcast frame-relay map ip 192.1.234.4 204 broadcast no frame-relay inverse-arp no shutdown

R3

interface Loopback0 ip address 3.3.3.3 255.0.0.0 ! interface Ethernet0/0 ip address 192.1.3.3 255.255.255.0 no shutdown !

R4

interface Loopback0 ip address 4.4.4.4 255.0.0.0 ! interface Serial0/0 ip address 192.1.234.4 255.255.255.0 encapsulation frame-relay frame-relay map ip 192.1.234.2 402 broadcast


47 of 229

interface Serial0/0 ip address 192.1.234.3 255.255.255.0 encapsulation frame-relay frame-relay map ip 192.1.234.2 302 broadcast frame-relay map ip 192.1.234.4 302 no frame-relay inverse-arp no shutdown

frame-relay map ip 192.1.234.3 402 no frame-relay inverse-arp no shutdown

R5


Switch

interface Loopback0 ip address 55.55.55.55 255.0.0.0 ! interface Vlan3 ip address 192.1.3.33 255.255.255.0 no shutdown ! interface Vlan5 ip address 192.1.5.55 255.255.255.0 no shutdown

Lab Objective:

Task 1

Run OSPF as your Routing Protocol on all Routers and the Switch. Advertise the networks in the following areas:

Area 0 R1 Loopback 0, R1 E 0/0, R2 E 0/0, R2 Loopback 0 Area 10 R2 S 0/0, R3 S 0/0, R3 Loopback 0, R4 S 0/0, R4 Loopback 0 Area 100 R3 E 0/0, SW VLAN 3, SW VLAN 5, SW Loopback 0, R5 E 0/0, R5 Loopback 0

Configure a Virtual Link between the appropriate devices.

R1

router ospf 1 network 1.0.0.0 0.255.255.255 area 0 network 192.1.12.0 0.0.0.255 area 0

R2

router ospf 1 router-id 2.2.2.2 area 10 virtual-link 3.3.3.3 network 2.0.0.0 0.255.255.255 area 0 network 192.1.12.0 0.0.0.255 area 0 network 192.1.234.0 0.0.0.255 area 10

interface S 0/0


48 of 229

ip ospf network point-to-mulitpoint R3

router ospf 1 router-id 3.3.3.3 area 10 virtual-link 2.2.2.2 network 3.0.0.0 0.255.255.255 area 10 network 192.1.3.0 0.0.0.255 area 100 network 192.1.234.0 0.0.0.255 area 10 ! interface S 0/0 ip ospf network point-to-mulitpoint

R4

router ospf 1 network 4.0.0.0 0.255.255.255 area 10 network 192.1.234.0 0.0.0.255 area 10 ! interface S 0/0 ip ospf network point-to-mulitpoint

R5


Switch

router ospf 1 network 55.0.0.0 0.255.255.255 area 100 network 192.1.3.0 0.0.0.255 area 100 network 192.1.5.0 0.0.0.255 area 100


49 of 229

(Builds on Lab 3)

Lab Objective:

Task 1

All routers and the switch should Authenticate Routing updates using the most secure authentication method. The Virtual Link should also be authenticated. Use Key 1 with a key-string of ccie. Do not use wide authentication.

R1

interface Ethernet0/0 ip ospf authentication message-digest ip ospf message-digest-key 1 md5 ccie R2

interface Ethernet0/0 ip ospf authentication message-digest ip ospf message-digest-key 1 md5 ccie ! interface Serial0/0 ip ospf authentication message-digest ip ospf message-digest-key 1 md5 ccie ! router ospf 1 area 10 virtual-link 3.3.3.3 authentication message-digest area 10 virtual-link 3.3.3.3 message-digest-key 1 md5 ccie R3

interface Ethernet0/0 ip ospf authentication message-digest ip ospf message-digest-key 1 md5 ccie ! interface Serial0/0 ip ospf authentication message-digest ip ospf message-digest-key 1 md5 ccie ! router ospf 1 area 10 virtual-link 2.2.2.2 authentication message-digest area 10 virtual-link 2.2.2.2 message-digest-key 1 md5 ccie

Lab 4 OSPF Authentication


50 of 229

R4

interface Serial0/0 ip ospf authentication message-digest ip ospf message-digest-key 1 md5 ccie

Switch

interface Vlan3 ip ospf authentication message-digest ip ospf message-digest-key 1 md5 ccie ! interface Vlan5 ip ospf authentication message-digest ip ospf message-digest-key 1 md5 ccie

R5

interface Ethernet0/0 ip ospf authentication message-digest ip ospf message-digest-key 1 md5 ccie


51 of 229

R1


R2


R3

Interface IP Address Subnet Mask S 0/0 192.1.234.3 255.255.255.0 E 0/0 192.1.3.3 255.255.255.0

Lab 5 Multi-Area Configurations with Filtering

E 0/0

S 0/0

Lo 0 E 0/0 Lo 0

S 0/0


R1

Switch 1

R3

R2

192.1.12.0/24

192.1.234.0/24

192.1.3.0/24

R4

R5

VLAN 5

192.1.5.0/24


52 of 229

Loopback 0 3.3.3.3 255.0.0.0

R4


R5


Switch 1



R1


R2


R3

interface Loopback0 ip address 3.3.3.3 255.0.0.0 ! interface Ethernet0/0

R4

interface Loopback0 ip address 4.4.4.4 255.0.0.0 ! interface Serial0/0


53 of 229

ip address 192.1.3.3 255.255.255.0 no shutdown ! interface Serial0/0 ip address 192.1.234.3 255.255.255.0 encapsulation frame-relay frame-relay map ip 192.1.234.2 302 broadcast frame-relay map ip 192.1.234.4 302 no frame-relay inverse-arp no shutdown

ip address 192.1.234.4 255.255.255.0 encapsulation frame-relay frame-relay map ip 192.1.234.2 402 broadcast frame-relay map ip 192.1.234.3 402 no frame-relay inverse-arp no shutdown

R5


Switch


Task 1

Run OSPF as your Routing Protocol on all Routers and the Switch. Configure the Frame Relay links as Point-to-multipoint network types. Advertise the networks in the following areas:

Area 0 R2 S 0/0, R3 S 0/0, R3 Loopback 0, R4 S 0/0, R4 Loopback 0 Area 10 R1 Loopback 0, R1 E 0/0, R2 E 0/0, R2 Loopback 0 Area 100 R3 E 0/0, SW VLAN 3, SW Loopback 0

R1

router ospf 1 router-id 1.1.1.1 network 1.0.0.0 0.255.255.255 area 10 network 192.1.12.0 0.0.0.255 area 10

R2

router ospf 1 router-id 2.2.2.2 network 2.0.0.0 0.255.255.255 area 10 network 192.1.12.0 0.0.0.255 area 10 network 192.1.234.0 0.0.0.255 area 0 ! interface S 0/0 ip ospf network point-to-mulitpoint

R3

router ospf 1

R4

router ospf 1


54 of 229

router-id 3.3.3.3 network 3.0.0.0 0.255.255.255 area 100 network 192.1.3.0 0.0.0.255 area 100 network 192.1.234.0 0.0.0.255 area 0 ! interface S 0/0 ip ospf network point-to-mulitpoint

network 4.0.0.0 0.255.255.255 area 0 network 192.1.234.0 0.0.0.255 area 0 ! interface S 0/0 ip ospf network point-to-mulitpoint

Switch


Task 2

Run RIP as a Routing Protocol between R5 and the Switch. Advertise the Loopback on R5 in RIP. Mutually Redistribute RIP and OSPF on the Switch.

R5

router rip network 5.0.0.0 network 192.1.5.0

Switch

router rip network 192.1.5.0 redistribute ospf 1 metric 1 ! router ospf 1 redistribute rip subnets

Task 3

Create the following Loopbacks on R2:

Loopback 21 12.1.1.1/24 Loopback 22 12.1.2.1/24

Advertise these newly created loopbacks in OSPF using the network command. Make sure they appear in the routing table using a /24 mask. Filter these routes going into Area 10. The configuration needs to be done on R2.

R2

interface Loopback21 ip address 12.1.1.1 255.255.255.0 ip ospf network point-to-point ! interface Loopback21 ip address 12.1.2.1 255.255.255.0


55 of 229

ip ospf network point-to-point !

Ip prefix-list A10-IN deny 12.1.1.0/24 Ip prefix-list A10-IN deny 12.1.2.0/24 Ip prefix-list A10-IN permit 0.0.0.0/0 le 32 ! Router OSPF 1 Network 12.1.1.0 0.0.0.255 area 0 Network 12.1.2.0 0.0.0.255 area 0 Area 10 filter-list prefix A10-IN in

Task 4


Loopback 41 44.1.1.1/24 Loopback 42 44.1.2.1/24 Loopback 43 44.1.3.1/24 Loopback 44 44.1.4.1/24

Advertise these newly created loopbacks in OSPF without using the network command.

R4

interface Loopback41 ip address 44.1.1.1 255.255.255.0 ! interface Loopback42 ip address 44.1.2.1 255.255.255.0 ! interface Loopback43 ip address 44.1.3.1 255.255.255.0 ! interface Loopback44 ip address 44.1.4.1 255.255.255.0 ! access-list 1 permit 44.1.1.0 0.0.0.255 access-list 1 permit 44.1.2.0 0.0.0.255 access-list 1 permit 44.1.3.0 0.0.0.255 access-list 1 permit 44.1.4.0 0.0.0.255 ! route-map redcon permit 10 match ip address 1 ! router ospf 1


56 of 229

redistribute connected subnets route-map redcon

Task 5

Area 10 should not receive any Inter Area or External Routes. The devices in Area 10 should have full connectivity to the rest of the network. Do not use any filtering mechanism.

R1

router ospf 1 area 10 stub

R2

router ospf 1 area 10 stub no-summary

Task 6

Area 100 should not receive any Inter Area or External Routes from the Backbone. It should have full connectivity to all routes. It Should maintain connectivity to routes learned via RIP and propagate these routes to other Areas.

Switch

router ospf 1 area 100 nssa

R3

router ospf 1 area 100 nssa no-summary


57 of 229

(Builds on Lab 5)

Task 1



Advertise these newly created loopbacks in OSPF using the network command. Make sure they appear in the routing table using a /24 mask. These routes should be seen as a single summarized route outside of area 10.

R1

interface Loopback 201 ip address 201.1.4.1 255.255.255.0 ip ospf network point-to-point ! interface Loopback 202 ip address 201.1.5.1 255.255.255.0 ip ospf network point-to-point ! interface Loopback 203 ip address 201.1.6.1 255.255.255.0 ip ospf network point-to-point ! interface Loopback 204 ip address 201.1.7.1 255.255.255.0 ip ospf network point-to-point ! Router OSPF 1 Network 201.1.4.0 0.0.0.255 area 10 Network 201.1.5.0 0.0.0.255 area 10 Network 201.1.6.0 0.0.0.255 area 10 Network 201.1.7.0 0.0.0.255 area 10

R2

Router OSPF 1 Area 10 range 201.1.4.0 255.255.252.0

Task 2


Loopback 205 202.1.4.1/24

Lab 6 Summarization Inter-Area and External Routes


58 of 229

Loopback 206 202.1.5.1/24 Loopback 207 202.1.6.1/24 Loopback 208 202.1.7.1/24

Advertise these newly created loopbacks in OSPF without using the network command. Make sure they appear in the routing table using a /24 mask. These routes should be seen be summarized.

R4

interface Loopback 205 ip address 202.1.4.1 255.255.255.0 ip ospf network point-to-point ! interface Loopback 206 ip address 202.1.5.1 255.255.255.0 ip ospf network point-to-point ! interface Loopback 207 ip address 202.1.6.1 255.255.255.0 ip ospf network point-to-point ! interface Loopback 208 ip address 202.1.7.1 255.255.255.0 ip ospf network point-to-point ! access-list 5 permit 202.1.4.0 0.0.0.255 access-list 5 permit 202.1.5.0 0.0.0.255 access-list 5 permit 202.1.6.0 0.0.0.255 access-list 5 permit 202.1.7.0 0.0.0.255 ! route-map redcon permit 10 match ip address 5 ! Router OSPF 1 Redistribute connected route-map redcon Summary-address 202.1.4.0 255.255.252.0


59 of 229

R1


R2


R3

Interface IP Address Subnet Mask S 0/0 192.1.234.3 255.255.255.0 E 0/0 192.1.3.3 255.255.255.0 Loopback 0 3.3.3.3 255.0.0.0

Lab 7 Redistribution

E 0/0

S 0/0

Lo 0 E 0/0 Lo 0

S 0/0


R1

Switch 1

R3

R2

192.1.12.0/24

192.1.234.0/24

192.1.3.0/24

R4

R5

VLAN 5

192.1.5.0/24


60 of 229

R4


R5


Switch 1



R1


R2


R3


R4

interface Loopback0 ip address 4.4.4.4 255.0.0.0 ! interface Serial0/0 ip address 192.1.234.4 255.255.255.0 encapsulation frame-relay


61 of 229

! interface Serial0/0 ip address 192.1.234.3 255.255.255.0 encapsulation frame-relay frame-relay map ip 192.1.234.2 302 broadcast frame-relay map ip 192.1.234.4 302 no frame-relay inverse-arp no shutdown

frame-relay map ip 192.1.234.2 402 broadcast frame-relay map ip 192.1.234.3 402 no frame-relay inverse-arp no shutdown

R5


Switch


Lab Objective:

Task 1

Create the following Loopbacks on R1. Run RIP V2 as the Routing Protocol between R1 and R2. Advertise all directly connected networks including the newly created loopbacks in RIP. Advertise the Loopback and the E 0/0 Interface on R2 in RIP.

Loopback 1 192.2.1.1/24 Loopback 2 192.2.2.1/24 Loopback 3 192.2.3.1/24 Loopback 4 192.2.4.1/24 Loopback 5 192.2.5.1/24 Loopback 6 192.2.6.1/24 Loopback 7 192.2.7.1/24 Loopback 8 192.2.8.1/24

R1

interface Loopback1 ip address 192.2.1.1 255.255.255.0 ! interface Loopback2 ip address 192.2.2.1 255.255.255.0 !

R2

router rip version 2 network 2.0.0.0 network 192.1.12.0 no auto-summary


62 of 229

interface Loopback3 ip address 192.2.3.1 255.255.255.0 ! interface Loopback4 ip address 192.2.4.1 255.255.255.0 ! interface Loopback5 ip address 192.2.5.1 255.255.255.0 ! interface Loopback6 ip address 192.2.6.1 255.255.255.0 ! interface Loopback7 ip address 192.2.7.1 255.255.255.0 ! interface Loopback8 ip address 192.2.8.1 255.255.255.0 ! router rip version 2 network 1.0.0.0 network 192.1.12.0 network 192.2.1.0 network 192.2.2.0 network 192.2.3.0 network 192.2.4.0 network 192.2.5.0 network 192.2.6.0 network 192.2.7.0 network 192.2.8.0 no auto-summary

Task 2

Run EIGRP in AS 234 as the Routing Protocol between R2, R3 and R4. Advertise all directly connected networks on R4 in EIGRP. Advertise the S 0/0 interfaces on R2 and R3 in EIGRP. Also advertise the Loopback 0 network of R3 in EIGRP.

R2

router eigrp 234 network 192.1.234.0 no auto-summary

R3

router eigrp 234 network 3.0.0.0 network 192.1.234.0 no auto-summary

R4


63 of 229

router eigrp 234 network 4.0.0.0 network 192.1.234.0 no auto-summary

Task 3

Run OSPF in Area 0 as the Routing Protocol between R3, the Switch and R5. Advertise all directly connected networks on R5 in OSPF. Advertise the 2 VLAN interfaces and the Loopback on the Switch in OSPF. Advertise the E 0/0 network in OSPF on R3.

R3

router ospf 1 network 192.1.3.0 0.0.0.255 area 0

R5


Switch

router ospf 1 network 55.0.0.0 0.255.255.255 area 0 network 192.1.3.0 0.0.0.255 area 0 network 192.1.5.0 0.0.0.255 area 0

Task 4

Configure Mutual redistribution between RIP and EIGRP at the appropriate router. Configure Mutual redistribution between EIGRP and OSPF at the appropriate router. Make sure OSPF adds the cost of the links in the OSPF metric for the External Routes.

R2

router eigrp 234 redistribute rip metric 1 1 1 1 1 ! router rip redistribute eigrp 234 metric 5

R3

router eigrp 234 redistribute ospf 1 metric 1 1 1 1 1 ! router ospf 1 redistribute eigrp 234 metric 150 metric-type 1 subnets

Task 5

The RIP routes should not be leaked to OSPF and OSPF routes should not be leaked to RIP. Do not use the Distribute-list or Prefix-list command to accomplish this task. You might have to re-configure the redistribution from the previous task to accomplish this.

R2

Route-map STAG per 10


64 of 229

Set tag 120 ! Route-map MTAG deny 10 Match tag 110 Route-map MTAG permit 20 ! router eigrp 234 redistribute rip metric 1 1 1 1 1 route-map STAG ! router rip redistribute eigrp 234 metric 5 route-map MTAG R3

Route-map STAG per 10 Set tag 110 ! Route-map MTAG deny 10 Match tag 120 Route-map MTAG permit 20 !

router eigrp 234 redistribute ospf 1 metric 1 1 1 1 1 route-map STAG ! router ospf 1 redistribute eigrp 234 metric 150 metric-type 1 route-map MTAG subnets


65 of 229

Module 6 BGP


66 of 229

Physical Layout

Logical Layout

Lab 1 Connecting EBGP

AS 1

R1

AS 2

R2

R3

AS 3

R4

AS 4

R2 R1

E 0/0 E 0/0 Loopback 0

Loopback 0 E 0/0 E 0/0

S 0/0

S 0/0

R3 R4 Loopback 0

Loopback 0

Loopback 1

Loopback 1

Loopback 1

Loopback 1


67 of 229


R1

Interface IP Address Subnet Mask Loopback 0 1.1.1.1 255.0.0.0 Loopback 1 11.1.0.1 255.255.0.0 E 0/0 192.1.12.1 255.255.255.0

R2

Interface IP Address Subnet Mask Loopback 0 2.2.2.2 255.0.0.0 Loopback 1 12.1.0.1 255.255.0.0 E 0/0 192.1.12.2 255.255.255.0 S 0/0 192.1.23.2 255.255.255.0

R3

Interface IP Address Subnet Mask Loopback 0 3.3.3.3 255.0.0.0 Loopback 1 13.1.0.1 255.255.0.0 S 0/0 192.1.23.3 255.255.255.0 E 0/0 192.1.34.3 255.255.255.0

R4


Lab Objective:

Task 1

Configure a BGP neighbor relationship between R1 and R2. R1 should be in AS 1 and R2 should be in AS 2. Advertise the loopback networks in BGP. Hard-code the Router ID for the BGP routers as 11.11.11.11 for R1 and 22.22.22.22 for R2.

R1

Router BGP 1 no auto-summary

R2



68 of 229

no sync bgp router-id 11.11.11.11 Network 1.0.0.0 Network 11.1.0.0 mask 255.255.0.0 Neighbor 192.1.12.2 remote-as 2


Task 2

Configure a BGP neighbor relationship between R2 and R3. R2 should already be configured in AS 2 and R3 should be in AS 3. Advertise the loopback network of R3 in BGP. Hard-code the Router ID for R3 as 33.33.33.33

R2

Router BGP 2 Neighbor 192.1.23.3 remote-as 3

R3

Router BGP 3 no auto-summary no sync bgp router-id 33.33.33.33 Network 3.0.0.0 Network 13.1.0.0 mask 255.255.0.0 Neighbor 192.1.23.2 remote-as 2

Task 3

Configure a BGP neighbor relationship between R3 and R4. R# should already be configured in AS 3 and R4 should be in AS 4. Advertise the loopback network of R4 in BGP. Hard-code the Router ID for R4 as 44.44.44.44. Establish the neighbor relationship based on Loopback 0 addresses. You are allowed to create a static route on each router to accomplish this task.

R3

Ip route 4.0.0.0 255.0.0.0 192.1.34.4 ! Router BGP 3 Neighbor 4.4.4.4 remote-as 4 Neighbor 4.4.4.4 update-source loop 0 Neighbor 4.4.4.4 ebgp-multihop

R4

Ip route 3.0.0.0 255.0.0.0 192.1.34.3 ! Router BGP 4 no auto-summary no sync bgp router-id 44.44.44.44 Network 4.0.0.0 Network 14.1.0.0 mask 255.255.0.0 Neighbor 3.3.3.3 remote-as 3 Neighbor 3.3.3.3 update-source loop 0 Neighbor 3.3.3.3 ebgp-mulithop


69 of 229

(Builds on Lab 1)

Lab Objective:

Task 1

Configure MD5 Authentication between R1 and R2 using a password of cciers.

R1

Router BGP 1 Neighbor 192.1.12.2 password cciers

R2


Task 2

Configure MD5 Authentication between R2 and R3 using a password of cciesec.

R2

Router BGP 2 Neighbor 192.1.23.3 password cciesec

R3

Router BGP 3 Neighbor 192.1.23.2 password cciesec

Task 3

Configure MD5 Authentication between R3 and R4 using a password of cciers.

R3


R4


Lab 2 BGP Neighbor MD5 Authentication


70 of 229

Physical Layout

Logical Layout

Lab 3 Configuring Route Reflectors

R2 R1



S 0/0

S 0/0

R3 R4 Loopback 0

Loopback 0

AS 1

R1 R2

R3

R3

R4

AS 234


71 of 229


R1


R2


R3


R4


Lab Objective:

Task 1

Configure a neighbor relationship between R1 and R2 based on the Logical diagram. Advertise the Loopback networks on both Routers. Hard-code the Router ID for the BGP routers as 11.11.11.11 for R1 and 22.22.22.22 for R2.

R1


R2



72 of 229



Task 2

Configure RIP V2 as the routing protocol within AS 234. Only advertise the internal physical link in RIP on R2, R3 and R4. Do not advertise the link between R1 and R2 in RIP.

R2

Router RIP Version 2 no auto-summary Network 192.1.23.0

R3

Router RIP Version 2 no auto-summary Network 192.1.23.0 Network 192.1.34.0

R4

Router RIP no auto-summary Network 192.1.34.0

Task 3

Configure neighbor relationships between R2 and R3 and another one between R3 and R4. Do not configure a neighbor relationship between R2 and R4. Advertise the Loopback networks under BGP. Make sure routes from R1 can get propagated to R3 and R4. Do not use a Confederation to accomplish this.

R2

Router BGP 234 no auto-summary no sync Network 2.0.0.0 Network 12.1.0.0 mask 255.255.0.0 Neighbor 192.1.23.3 remote-as 234 Neighbor 192.1.23.3 next-hop-self

R3

Router BGP 234 no auto-summary no sync Network 3.0.0.0 Network 13.1.0.0 mask 255.255.0.0 Neighbor 192.1.23.2 remote-as 234 Neighbor 192.1.23.2 route-reflector-client Neighbor 192.1.34.4 remote-as 234 Neighbor 192.1.34.4 route-reflector-client

R4


73 of 229

Router BGP 234 no auto-summary no sync Network 4.0.0.0 Network 14.1.0.0 mask 255.255.0.0 Neighbor 192.1.34.3 remote-as 234


74 of 229

(Builds on R3)

Lab Objective:

Task 1

Create the following Loopbacks on R2

Loopback 1 192.2.1.1/24 Loopback 2 192.2.2.1/24 Loopback 3 192.2.3.1/24 Loopback 4 192.2.4.1/24 Loopback 5 192.2.5.1/24 Loopback 6 192.2.6.1/24 Loopback 7 192.2.7.1/24 Loopback 8 192.2.8.1/24

R2

interface Loopback1 ip address 192.2.1.1 255.255.255.0 ! interface Loopback2 ip address 192.2.2.1 255.255.255.0 ! interface Loopback3 ip address 192.2.3.1 255.255.255.0 ! interface Loopback4 ip address 192.2.4.1 255.255.255.0 ! interface Loopback5 ip address 192.2.5.1 255.255.255.0 ! interface Loopback6 ip address 192.2.6.1 255.255.255.0 ! interface Loopback7 ip address 192.2.7.1 255.255.255.0 ! interface Loopback8 ip address 192.2.8.1 255.255.255.0

Lab 4 Route Filtering using Distribute List


75 of 229

Task 2

Advertise the newly created routes in BGP. Do not use the network command to accomplish this. These routes should have an origin code of igp.

R2

Access-list 1 permit 192.2.1.1 0.0.0.255 Access-list 1 permit 192.2.2.1 0.0.0.255 Access-list 1 permit 192.2.3.1 0.0.0.255 Access-list 1 permit 192.2.4.1 0.0.0.255 Access-list 1 permit 192.2.5.1 0.0.0.255 Access-list 1 permit 192.2.6.1 0.0.0.255 Access-list 1 permit 192.2.7.1 0.0.0.255 Access-list 1 permit 192.2.8.1 0.0.0.255 ! Route-map redcon permit 10 Match address 1 Set origin igp ! Router bgp 234 Redistribute connected route-map redcon

Task 3

Configure R2 such that it blocks all the 192.2.X.0 routes that have an odd number in the third octet from propagating outside the local AS. Use the distribute-list command to accomplish this task.

R2

Access-list 1 deny 192.2.1.0 0.0.254.255 Access-list 1 permit any ! Router bgp 234 Neighbor 192.1.12.1 distribute-list 1 out

Task 4

Configure R4 such that it blocks all the 192.2.X.0 routes that have an even number in the third octet from coming in. Make sure that even if in the future that a neighbor relationship is established between R2 and R4 these routes dont come into R4. Use the distribute-list command to accomplish this task.


76 of 229

R4

Access-list 1 deny 192.2.0.0 0.0.254.255 Access-list 1 permit any ! Router bgp 234 distribute-list 1 in


77 of 229

(Builds on R4)

Task 1

Create the following Loopbacks on R3

Loopback 1 150.3.16.1/20 Loopback 2 150.3.36.1/22 Loopback 3 150.3.40.1/22 Loopback 4 150.3.50.1/23 Loopback 5 150.3.65.1/24 Loopback 6 150.13.0.1/16 Loopback 7 150.14.64.1/18

R3

interface Loopback1 ip address 150.3.16.1 255.255.240.0 ! interface Loopback2 ip address 150.3.36.1 255.255.252.0 ! interface Loopback3 ip address 150.3.40.1 255.255.252.0 ! interface Loopback4 ip address 150.3.50.1 255.255.254.0 ! interface Loopback5 ip address 150.3.65.1 255.255.255.0 ! interface Loopback6 ip address 150.13.0.1 255.255.0.0 ! interface Loopback7 ip address 150.14.64.1 255.255.192.0

Task 2

Advertise the newly created routes in BGP using the Network command.

R3



78 of 229

Router bgp 234 Network 150.3.16.0 mask 255.255.240.0 Network 150.3.36.0 mask 255.255.252.0 Network 150.3.40.0 mask 255.255.252.0 Network 150.3.50.0 mask 255.255.254.0 Network 150.3.65.0 mask 255.255.255.0 Network 150.13.0.0 Network 150.14.64.0 mask 255.255.192.0

Task 3

Configure R2 such that it blocks all the 150.X.X.0 routes that have a subnet mask between 17 and 23 bits.

R2

IP Prefix-list PLIST deny 150.0.0.0/8 ge 17 le 23 IP Prefix-list PLIST permit 0.0.0.0/0 le 32 ! Router bgp 234 Neighbor 192.1.23.3 prefix-list PLIST in


79 of 229

Physical Layout

Logical Layout

Lab 6 AS Path-Filter

R2 R1



S 0/0

S 0/0

R3 R4 Loopback 0

Loopback 0

AS 1

R1

R2

R3 R4

AS 4

AS 23


80 of 229


R1


R2


R3


R4


Lab Objective:

Task 1

Configure a neighbor relationship between R1 and R2 based on the Logical diagram. Advertise the Loopback networks on both Routers. Hard-code the Router ID for the BGP routers as 11.11.11.11 for R1 and 22.22.22.22 for R2.

R1

Router BGP 1

R2

Router BGP 23


81 of 229

no auto-summary no sync bgp router-id 11.11.11.11 Network 1.0.0.0 Network 11.1.0.0 mask 255.255.0.0 Neighbor 192.1.12.2 remote-as 23

no auto-summary no sync bgp router-id 22.22.22.22 Network 2.0.0.0 Network 12.1.0.0 mask 255.255.0.0 Neighbor 192.1.12.1 remote-as 1

Task 2

Configure a neighbor relationship between R3 and R4 based on the Logical diagram. Advertise the Loopback networks on both Routers. Hard-code the Router ID for the BGP routers as 33.33.33 for R3 and 44.44.44.44 for R4.

R3


R4


Task 3

Configure a neighbor relationship between R2 and R3 based on the Logical diagram. When R2 sends routes that it learns from R1, it should sent 192.1.23.2 as the next hop for those routes. When R3 sends routes that it learns from R4, it should sent 192.1.23.3 as the next hop for those routes.

R2

Router BGP 23 Neighbor 192.1.23.3 remote-as 23 Neighbor 192.1.23.3 next-hop-self

R3

Router BGP 23 Neighbor 192.1.23.2 remote-as 23 Neighbor 192.1.23.2 next-hop-self

Task 4

Configure BGP such that AS 4 does not use AS 23 to get AS 1 routes. Configuration should be done in AS 4.

R4

Ip as-path access-list 1 deny _1$ Ip as-path access-list 1 permit .* !


82 of 229

Router BGP 4 Neighbor 192.1.34.3 filter-list 1 in

Task 5

Configure BGP such that AS 1 does not use AS 23 to get AS 4 routes. Configuration should be done in AS 23. You are only allowed a single line in the AS-path filter.

R2

Ip as-path access-list 1 permit ^$ ! Router BGP 23 Neighbor 192.1.12.1 filter-list 1 out


83 of 229

(Builds on Lab 6)

Task 1

Create the following Loopbacks on R3 and advertise them under BGP:


R3

interface Loopback1 ip address 203.1.4.1 255.255.255.0 ! interface Loopback2 ip address 203.1.5.1 255.255.255.0 ! interface Loopback3 ip address 203.1.6.1 255.255.255.0 ! interface Loopback4 ip address 203.1.7.1 255.255.255.0 ! Router BGP 23 Network 203.1.4.0 Network 203.1.5.0 Network 203.1.6.0 Network 203.1.7.0

Task 2

Configure Route Aggregation on R3 such that these routes are summarized as a single route. Only the Summary route should be send to R3s neighbors.

R3

Router bgp 234 Aggregate-address 203.1.4.0 255.255.252.0 summary-only

Task 3

Lab 7 Route Aggregation


84 of 229



R4


Task 4

Configure Route Aggregation on R4 such that these routes are summarized as a single route. Only the Summary route should be send to R4s neighbor. The routes should not be seen as suppressed on R4. Use the minimum number of lines in your filtering mechanism.

R4

IP Prefix-list PLIST deny 204.1.4.0/22 ge 24 IP Prefix-list PLIST permit 0.0.0.0/0 le 32 ! Router bgp 4 Aggregate-address 204.1.4.0 255.255.252.0 Neighbor 192.1.34.3 prefix-list PLIST out

Task 5


85 of 229



R2


Task 6

Configure Route Aggregation on R2 such that these routes are summarized as a single route. Only the Summary route and the 202.1.5.0 route should be send to R2s neighbor.

R2

Access-list 5 permit 202.1.5.0 0.0.0.255 ! Route-map SUPMAP deny 10 Match address 5 Route-map SUPMAP permit 20 ! Router bgp 4 Aggregate-address 202.1.4.0 255.255.252.0 supress-map SUPMAP


86 of 229

Physical Layout

Logical Layout


Lab 8 Working with AS #s

R2 R1


S 0/0

S 0/0

R3 Loopback 0

Loopback 0

AS 1

R1

AS 2

R2

R3

AS 65500


87 of 229

R1


R2


R3


Lab Objective:

Task 1

Configure R2 for BGP under AS 2. Hard-code the Router-id as 22.22.22.22. Advertise the Loopback 0 network under BGP.

R2

Router bgp 2 No auto-summary No Sync Bgp router-id 22.22.22.22 Network 2.0.0.0

Task 2

Configure R1 for BGP under AS 1. Hard-code the Router-id as 11.11.11.11. Advertise the Loopback 0 network under BGP. Setup a neighbor relationship between R1 and R2. R1 sees R2 in AS 12. You cannot change the AS # on R2 to accomplish this task.

R1

Router BGP 1 No auto-summary No Sync

R2

Router BGP 2 Neighbor 192.1.12.1 remote-as 1 Neighbor 192.1.12.1 local-as 12


88 of 229

Bgp router-id 11.11.11.11 Network 1.0.0.0 Neighbor 192.1.12.2 remote-as 12

Task 3

Configure R3 for BGP under AS 65500. Hard-code the Router-id as 33.33.33.33. Advertise the Loopback 0 network under BGP. Setup a neighbor relationship between R3 and R2. R3 sees R2 in AS 23. You cannot change the AS # on R2 to accomplish this task.

R3

Router BGP 65500 No auto-summary No Sync Bgp router-id 33.33.33.33 Network 3.0.0.0 Neighbor 192.1.23.2 remote-as 23

R2

Router BGP 2 Neighbor 192.1.23.3 remote-as 65500 Neighbor 192.1.23.3 local-as 23

Task 4

Reconfigure R1, R2 and R3 such that they use the actual AS number for R2 (2).

R1

Router BGP 1 No Neighbor 192.1.12.2 remote-as 12 Neighbor 192.1.12.2 remote-as 2 R3

Router BGP 65500 No Neighbor 192.1.23.2 remote-as 23 Neighbor 192.1.23.2 remote-as 2 R2

Router BGP 1 No Neighbor 192.1.12.1 local-as 12 No Neighbor 192.1.23.3 local-as 23

Task 5

Configure R2 such that the Private AS number is removed from the AS Path when 3.0.0.0 gets send to R1. You are only allowed a single command to accomplish this task.

R2


89 of 229

Router BGP 2 Neighbor 192.1.12.1 remove-private-as


90 of 229

Physical Layout

Logical Layout

Lab 9 Confederations

R2 R1



S 0/0

S 0/0

R3 R4 Loopback 0

Loopback 0

AS 4

R4 R1

R2

R3

AS 123

AS 2

AS 1 AS 3


91 of 229


R1


R2


R3


R4


Lab Objective:

Task 1

Configure RIP V2 as the routing protocol between R1, R2 and R3. Only advertised the R1-R2 and R2-R3 links in RIP on the appropriate routers.

R1

Router RIP No auto-summary Version 2 Network 192.1.12.0

R2

Router RIP No auto-summary Version 2 Network 192.1.12.0 Network 192.1.23.0

R3


92 of 229

Router RIP No auto-summary Version 2 Network 192.1.23.0

Task 2

Configure AS 1, AS 2 and AS 3 are Sub Autonomous Systems of a Larger AS 123 using Confederations. Advertise the Loopback 0 networks under BGP in AS 1, AS 2 and AS 3. Configure a Neighbor relationship between AS 1 and AS 2 and another Neighbor relationship between AS 2 and AS 3.

R1

Router BGP 1 No auto-summary No Sync Network 1.0.0.0 Neighbor 192.1.12.2 remote-as 2 bgp confederation identifier 123 bgp confederation peers 2

R2

Router BGP 2 No auto-summary No Sync Network 2.0.0.0 Neighbor 192.1.12.1 remote-as 1 Neighbor 192.1.23.3 remote-as 3 bgp confederation identifier 123 bgp confederation peers 1 3

R3

Router BGP 3 No auto-summary No Sync Network 3.0.0.0 Neighbor 192.1.23.2 remote-as 2 bgp confederation identifier 123 bgp confederation peers 2

Task 3

Configure a neighbor relationship between R3 and R4. R4 is in AS 4. It peers with R3 in the confederation AS 123. Advertise the loopback 0 interface under BGP in AS 4.

R3

Router BGP 3 Neighbor 192.1.34.4 remote-as 4

R4

Router BGP 4 No auto-summary No Sync Network 4.0.0.0 Neighbor 192.1.34.3 remote-as 123


93 of 229

Physical Layout

Logical Layout

Lab 10 Configuring MED

R2 R1



S 0/0

S 0/0

R3 R4 Loopback 0

Loopback 0

S 0/0

S 0/0

AS 1

R1

R4

R2

R3

AS 234


94 of 229


R1


R2


R3


R4


Task 1

Run RIP V2 as the IGP in AS 234. Advertise the directly connected links under RIP. Do not advertise the external links (192.1.12.0, 192.1.14.0) or the Loopbacks in RIP.

R2

Router RIP Version 2 No auto-summary Network 192.1.23.0

R3

Router RIP Version 2 No auto-summary Network 192.1.23.0 Network 192.1.34.0

R4


95 of 229

Router RIP Version 2 No auto-summary Network 194.1.34.0

Task 2

Configure the routers under BGP based on the Logical diagram. Configure the Neighbor relationships also based on the Logical diagram. Advertise Loopback 0 Networks on all routers under BGP. Make sure the 1.0.0.0 gets put into the routing table of R3. Also make sure that Routes from R2 are getting propagated to R4 and vice versa.

R1

Router BGP 1 No auto-summary No sync Network 1.0.0.0 Neighbor 192.1.12.2 remote-as 234 Neighbor 192.1.14.4 remote-as 234

R2

Router BGP 234 No auto-summary No sync Network 2.0.0.0 Neighbor 192.1.12.1 remote-as 1 Neighbor 192.1.23.3 remote-as 234 Neighbor 192.1.23.3 next-hop-self

R3

Router BGP 234 No auto-summary No sync Network 3.0.0.0 Neighbor 192.1.23.2 remote-as 234 Neighbor 192.1.23.2 route-reflector-client Neighbor 192.1.34.4 remote-as 234 Neighbor 192.1.34.4 route-reflector-client

R4

Router BGP 234 No auto-summary No sync Network 4.0.0.0 Neighbor 192.1.34.3 remote-as 234 Neighbor 192.1.34.3 next-hop-self Neighbor 192.1.14.1 remote-as 1

Task 3

All ingress (incoming) traffic to AS 234 should use the path thru R4 using the MED attribute. Configure the MED on R2 to 100. R4s MED is 0 by default. Lower MED will be preferred.

R2

Route-map SETMED permit 10 Set metric 100 ! Router BGP 234 Neighbor 192.1.12.1 route-map SETMED out


96 of 229

(Builds on Lab 10)

Lab Objective:

Task 1

Configure AS 234 such that all traffic destined for AS 1 should go through R2 in the outbound direction.Use Local-Preference Attribute to accomplish this.

R2

Route-map SETLP permit 10 Set Local-preference 200 ! Router BGP 234 N

ccie rs khawar bc rev 3

Documents