Professional Documents
Culture Documents
com
RouterToSwitchconnection
CAT1
CAT2
R1
F0/1
F0/1
F0/0F0/1
R2
F0/2
F0/2
F0/0F0/1
R3
R3F0/3
F0/3
F0/0
F0/1
R4
F0/4
F0/0F0/1
F0/4
R5
F0/5
F0/5
F0/0F0/1
R6
F0/6
F0/6
F0/0
F0/1
www.ccieuniversity.com
CAT1
CAT2
F0/20
F0/19
F0/22F0/21
F0/21 F0/22
F0/19
F0/20
SW3
SW4
CAT1
SW4
F0/7
F0/8
CAT2
SW3
F0/7
F0/8
www.ccieuniversity.com
Lab1
Basic3560configurationI
Task1
ConfigurethefirstandthesecondswitchtobeinVTPdomaincalledCCIE
BeforeassigningaVTPdomainname,theremustbeatrunkestablishedbetween
thetwoswitchessotheconfigurationswillbepropagatedtotheotherswitch.
Onboth switches
Switch#Showinterfacetrunk
Switch#
Notethetwo3560sswitchesareconnectedwith 2crossoverethernetcables,ifthese
switcheswere3550s,thetwo portswouldhavenegotiatedanISLtrunk,actually
theywouldshowupasnisl,thisisbecausebydefaulttheportswereconfigured
indesirablemode.With3560switches,theportsarenotindesirablemode,ashow
runintf0/19willrevealthisinformation,andtherefore,theport/smustbe
configuredstaticallytotrunkornegotiateatrunk.
OnBothswitches:
Switch#Showcdpneighbors
CapabilityCodes:RRouter,T TransBridge,BSourceRouteBridge
S Switch,HHost, I IGMP,r Repeater,P Phone
DeviceIDLocalIntrfceHoldtmeCapabilityPlatform
PortID
Switch
Fas0/22
178SI
WSC35602Fas0/22
Switch
Fas0/21
178SI
WSC35602Fas0/21
Switch
Fas0/20
178SI
WSC35602Fas0/20
Switch
Fas0/19
177SI
WSC35602Fas0/19
Switch
Fas0/7
178SI
WSC35602Fas0/7
Switch
Fas0/8
177SI
WSC35602Fas0/8
NotetheShowcdpneighborscommandrevealstheportsconnectingthetwo
switches.Theoutputmaybedifferent.
www.ccieuniversity.com
OnBothswitches:
Switch(config)#intrangef0/1920
Switch(configifrange)#switchporttrunkencapsulationisl
Switch(configifrange)#switchportmodetrunk
Toverifytheconfiguration:
On thefirstswitches:
Switch#Showinttrunk
Port
ModeEncapsulationStatus
Nativevlan
Fa0/19on
isl
trunking1
Fa0/20on
isl
trunking1
PortVlansallowedontrunk
Fa0/1914094
Fa0/2014094
PortVlansallowedandactiveinmanagementdomain
Fa0/191
Fa0/201
PortVlansinspanningtreeforwardingstateandnotpruned
Fa0/191
Fa0/20 none
Nowthatthetrunkisestablishedbetweenthetwoswitches,youcangoonwithVTP
configurationasfollows:
Onthefirstswitch
Switch(config)#VTPdomainCCIE
Bydefaultthe3560switchesarememberofadomaincalledNULL,therefore,after
enteringtheabovecommand,you will getthefollowingmessageunlesstheswitch
wasmemberofanotherdomain:
ChangingVTPdomainnamefromNULLtoCCIE
ThistaskcouldalsobeaccomplishedbyenteringtheVLANdatabaseasfollows:
www.ccieuniversity.com
Switch#Vlandatabase
Switch(vlan)#VtpdomainCCIE
Switch(vlan)#Exit
WhenacommandisenteredintheVlandatabase,youmustperformtheexitor
theapplycommandforthechangestotakeeffect.
NotethedisplaybelowrevealsthatVTPpropagatedtheVTPdomaininformationto
thesecondswitch:
Onthesecondswitch:
Switch#Shvtpstatus
VTPVersion
:2
ConfigurationRevision
:0
MaximumVLANssupportedlocally:1005
NumberofexistingVLANs
:5
VTPOperatingMode
:Server
VTPDomainName
:CCIE
VTPPruningMode
:Disabled
VTPV2Mode
:Disabled
VTPTrapsGeneration
:Disabled
MD5digest
:0x570xCD0x400x650x630x590x470xBD
Configurationlastmodifiedby0.0.0.0at000000:00:00
LocalupdaterIDis0.0.0.0(novalidinterfacefound)
Task2
ThisVTPdomainshouldbepasswordprotectedusingCiscoasthepassword.
On bothswitches
Switch(config)#vtppasswordCisco
Youshouldgetthefollowingmessage:
SettingdeviceVLANdatabasepasswordtoCisco
Note,ifa domainnameisnotassignedtotheswitchesand thedefaultnameof
NULLisused,apasswordcannotbeassigned.
ThisVTPpasswordcommandcanbeenteredinglobalconfigurationmode,
privilegeconfigurationmodeorintheVLANdatabasemode.
www.ccieuniversity.com
Thepasswordcommandmustbeconfiguredstaticallyonbothswitchesbecausethis
changewillNOTgetpropagatedviaVTPmessages.
Toverifytheconfiguration:
OntheFirstswitch
Switch#Showvtpstatus
VTPVersion
:2
ConfigurationRevision
:0
MaximumVLANssupportedlocally:1005
NumberofexistingVLANs:5
VTPOperatingMode:Server
Themodeisserverbydefault
VTPDomainName:CCIE
Thedomainname
VTPPruningMode
:Disabled
VTPV2Mode
:Disabled
VTPTrapsGeneration
:Disabled
MD5digest
:0x140x7D0x150x090xDC0x390x650xC2
Configurationlastmodifiedby0.0.0.0at000000:00:00
LocalupdaterIDis0.0.0.0(novalidinterfacefound)
VTPpasswordcanbechangedinthreeways:
Privilegemode:
Switch#vtppasswordCisco
VlanDatabase:
Vlandatabase
VtppasswordCisco
Exit
Globalconfigmode:
Switch(config)#vtppasswordCisco
OntheSecondswitch
Switch#Showvtpstatus
VTPVersion
:2
ConfigurationRevision:0
MaximumVLANssupportedlocally:1005
NumberofexistingVLANs:5
VTPOperatingMode:Server
Themodeisserverbydefault
www.ccieuniversity.com
VTPDomainName:CCIE
Thedomainname
VTPPruningMode:Disabled
VTPV2Mode
:Disabled
VTPTrapsGeneration:Disabled
MD5digest
:0x570xCD0x400x650x630x590x470xBD
Configurationlastmodifiedby0.0.0.0at000000:00:00
LocalupdaterIDis0.0.0.0(novalidinterfacefound)
Onanyoftheswitches:
Switch#ShowVTPpassword
Thisverifiesthepassword,remember
Spaceswillnotshow
VTPPassword:Cisco
Task3
ThefirstCatalystswitchshouldbeconfiguredwithahostnameof Cat1andthesecond
Catalystshouldhaveahostnameof Cat2.
OnthefirstSwitch
Switch(config)#HostnameCat1
OntheSecondSwitch
Switch(config)#HostnameCat2
Task4
Cat2shouldNOThavetheabilitytocreate,deleteorrenameVLANorVLAN
information.
On Cat2
Cat2(config)#Vtpmodeclient
Thisconfigurationcanbeperformedinthevlandatabaseor globalconfigmode.
www.ccieuniversity.com
Theabovecommanddisplaysthecommandasitwasenteredintheglobalconfig
mode.Ifyouareaskedtoenterthecommandinthevlandatabase,youmustfirst
enterthevtpdatabasecommandintheprivilegemode,thenenter vtpclient
andlastlytheexitcommandmustbeusedforthechangestotakeeffect.
Oncethecommandisenteredyoushouldgetthefollowingmessage:
SettingdevicetoVTPCLIENTmode.
Theswitchescanoperateinthreemodesandtheyareasfollows:
SERVERTheswitchisabletodelete,create,orrenameVLAN
information.Catalyst3560in servermodeparticipatesintheVTP
domainandpropagatestheVLANinformation.
CLIENTInthismodetheswitchisabletoreceiveandprocessthe
VTPmessages,buttheyarenotabletocreate,delete,orrename
VLANinformation.TheycanassignaporttoagivenVLANthat
alreadyexists.Catalyst3560inclientmodeparticipatesintheVTP
domainandpropagatestheVTPmessages.
TransparentInthismodetheswitchisabletocreate,deleteand
modifytheVLANinformationbutitwillnotpropagateitsVLAN
informationtootherswitches.Catalyst3560switchesinthismodedo
NOTparticipateinVTPdomain.ACatalyst3560switchmustbein
thismodeinordertocreatetheextendedrangeVLANs(10064094),
thisconfigurationcanonlybeperformedinthe globalconfigmode
andNOTin the Vlandatabase. Whentheswitchisinthismodethe
VLANinformationispartoftherunningorstartupconfiguration,the
VLANinformationisNOTkeptintheVLANdatabase(vlan.dat).
Task5
CreateandconfigurethefollowingVLANassignmentson Cat1:
RouterInterface
R1F0/0
R2F0/0
R3F0/0
R4F0/0
R5F0/0
R6F0/0
VLANnumber
12
12
34
34
56
56
CATSwitchesPort
SW1F0/1
SW1F0/2
SW1F0/3
SW1F0/4
SW1F0/5
SW1F0/6
www.ccieuniversity.com
On Cat1
Cat1(config)#interfacerangef0/12
Cat1(configif)#switchmodeaccess
Cat1(configif)#switchaccessvlan 12
Cat1(config)#interfacerangef0/34
Cat1(configif)#switchmodeaccess
Cat1(configif)#switch accessvlan 34
Cat1(config)#interfacerangeF0/56
Cat1(configif)#switchmodeaccess
Cat1(configif)#switch accessvlan 56
Cat1(configif)#End
NotetheVlaninformationwillbepropagatedtotheotherswitch(Cat2),because
bothswitchesareinthesameVTPdomainandtheyarebothconfiguredwiththe
samepassword.
On Cat2
Cat2#Showvlanbrie
VLANNameStatusPorts
1defaultactiveFa0/1,Fa0/2,Fa0/3,Fa0/4
Fa0/5,Fa0/6,Fa0/7,Fa0/8
Fa0/9,Fa0/10,Fa0/11,Fa0/12
Fa0/13,Fa0/14,Fa0/15,Fa0/16
Fa0/17,Fa0/18,Fa0/23,Fa0/24
Gi0/1,Gi0/2
12VLAN0012active
34 VLAN0034active
56VLAN0056active
(Therestoftheoutputisomitted)
Cat2#ShowVTPStatus
VTPVersion:2
ConfigurationRevision:3
Maximum VLANssupportedlocally:1005
NumberofexistingVLANs:8
VTPOperatingMode:Client
VTPDomainName:CCIE
www.ccieuniversity.com
VTPPruningMode:Disabled
VTPV2Mode
:Disabled
VTPTrapsGeneration:Disabled
MD5digest:0x970x9D0xF10xF90xFE0x210xCC0x1D
Configurationlastmodifiedby0.0.0.0at319300:06:11
LocalupdaterIDis0.0.0.0(novalidinterfacefound)
On Cat1
Cat1#ShowVTPStatus
VTPVersion:2
ConfigurationRevision:3
MaximumVLANssupportedlocally:1005
NumberofexistingVLANs
:8
VTPOperatingMode:Server
VTPDomainName:CCIE
VTPPruningMode:Disabled
VTPV2Mode:Disabled
VTPTrapsGeneration
:Disabled
MD5digest:0x970x9D0xF10xF90xFE0x210xCC0x1D
Configurationlastmodifiedby0.0.0.0at319300:06:11
LocalupdaterIDis0.0.0.0(novalidinterfacefound)
Note,VTPversionis2,Configurationrevisionis3,numberofexistingVLANsis8
onbothswitches,(becausetheyaresynchronized),andthereasontheVLAN
informationwaspropagatedisbecausetheVTPdomainnameandthepasswordis
identicalonbothswitchesandtheswitchesaretrunked.
Task6
ConfigureLoopback0andLoopback1interfaceson Cat1,usetheIPaddressof1.1.1.1
/8and11.1.1.1/8respectively andensurethatONLY theIPaddressofLoopback1
interfaceisusedasthepreferredsourcefortheVTPIPupdateraddress.
NoteinthepreviousTaskwhentheshowvtpstatuscommandwasenteredon
Cat1, thelastlineoftheoutputdisplayednovalidinterfacefound.
NoteCat1 willalwaysusetheloopback0interfaceasthesourceofallVTP
messages,butthisbehaviorcanbechangebyusingtheVTPinterfaceLoopback1
globalconfigcommand.
On Cat1
www.ccieuniversity.com
Cat1(config)#InterfaceLoopback0
Cat1(configif)#Ipaddress1.1.1.1255.0.0.0
Cat1(config)#InterfaceLoopback1
Cat1(configif)#Ipaddress11.1.1.1255.0.0.0
Cat1#Showvtpstatus
VTPVersion:2
ConfigurationRevision:3
MaximumVLANssupportedlocally:1005
NumberofexistingVLANs:8
VTPOperatingMode
:Server
VTPDomainName:CCIE
VTPPruningMode:Disabled
VTPV2Mode:Disabled
VTPTrapsGeneration:Disabled
MD5digest
:0x970x9D0xF10xF90xFE0x210xCC0x1D
Configurationlastmodifiedby0.0.0.0at319300:06:11
LocalupdaterIDis1.1.1.1oninterfaceLo0(preferredinterface)
Preferredinterfacenameislo0
NoteLoopback0isusedasthesourceofallVTPmessages.Enterthefollowing
commandtochangethesourcetoLoopback1interface:
Cat1(config)#VtpinterfaceLoopback1only
NotetheONLYargumentmakesthisinterfacemandatory.
Toverifytheconfiguration:
On Cat1
Cat1#Showvtpstatus
VTPVersion
:2
ConfigurationRevision: 3
MaximumVLANssupportedlocally:1005
NumberofexistingVLANs:8
VTPOperatingMode:Server
VTPDomainName:CCIE
VTPPruningMode
:Disabled
VTPV2Mode
:Disabled
VTPTrapsGeneration:Disabled
MD5digest
:0x970x9D0xF10xF90xFE0x210xCC0x1D
www.ccieuniversity.com
Configurationlastmodifiedby0.0.0.0at319300:18:54
LocalupdaterIDis11.1.1.1oninterfaceLo1(preferredinterface)
Preferredinterfacenameisloopback1(mandatory)
On Cat2
Cat2#Showvtpstatus
VTPVersion
:2
ConfigurationRevision
:3
MaximumVLANssupportedlocally:1005
NumberofexistingVLANs:8
VTPOperatingMode:Client
VTPDomainName:CCIE
VTPPruningMode
:Disabled
VTPV2Mode
:Disabled
VTPTrapsGeneration
:Disabled
MD5digest
:0x970x9D0xF10xF90xFE0x210xCC0x1D
Configurationlastmodifiedby0.0.0.0at319300:22:29
Notethischangehasnotbeenpropagated,therefore,youmustcreateaVLAN
(VLAN80)on Cat1 soyoucanseethatthechangewasmadebytheLoopback 1
interfacewithanIPaddressof 11.1.1.1onCat2.ThisVLANshouldbedeleted
beforeproceedingtothenexttask.
On Cat1
Cat1(config)#Vlan80
Cat1(configvlan)#Exit
Toverifytheconfiguration:
On Cat2
Cat2#Showvtpstatus
VTPVersion
:2
ConfigurationRevision
:4
MaximumVLANssupportedlocally:1005
NumberofexistingVLANs
:9
VTPOperatingMode
:Client
VTPDomainName
:CCIE
VTPPruningMode
:Disabled
VTPV2Mode
:Disabled
www.ccieuniversity.com
VTPTrapsGeneration
:Disabled
MD5digest
:0x020x050x920x340xF00xC00x350x9D
Configurationlastmodifiedby11.1.1.1at319300:34:33
On Cat1
Cat1(config)#Novlan80
Task7
ConfigureatrunkbetweenthetwoswitchesusingportsF0/19andF0/20.Noneof these
switchesshoulduseDTPtonegotiatethetrunk.
On BothSwitches
(config)#InterfacerangeF0/1920
(configifrange)#Switchportmodetrunk
(configifrange)#Switchportnonegotiate
Notetheportsmustbeintrunkmodebeforethenonegotiatecommandisentered,
otherwiseyouwillreceivethefollowingerrormessage:
Commandrejected:Conflictbetweennonegotiateanddynamicstatus.
Aportcanbeconfiguredasfollows:
StaticAccessThisportcanbelongtoONLYoneVLAN,anditsmanually
assignedtoagivenVLAN.
Trunk AtrunkportbydefaultismemberofallnormalrangeVLANs11005(but
notethatVLANs1,1002 1005areautomaticallycreatedandcannotberemoved,
only2to1001canbemanuallycreated,theseVLANsarekeptintheVLAN.DAT).
ThisalsoincludestheextendedrangeVLANs(10064094),andthismembership
canbelimitedbyconfiguringtheallowedvlancommand.Thisportcanbe
encapsulatedbyISLortaggedby802.1q.
DynamicAccessAdynamicaccessportcanonlybeamemberofonenormal
VLAN,andtheseportsaredynamicallyassignedtoagivenVLANbyaVMPS.
VoiceVLANThisisanaccessportconnectedtoanIPphonesuchasCiscos7960,
andthisVLANisusedforVoicetraffic.
www.ccieuniversity.com
Dot1qTunnel Thesearetunnelportsandareusedfor802.1qtunnelingto
maintaincustomerVLANintegrityacrossaserviceprovidersnetwork.Atunnel
portisconfiguredonanedgeswitchintheserviceprovidersnetworkandits
connectedtoan802.1qtrunkportonacustomerswitchsinterface,atunnelport
belongstoasingleVLANthatisdedicatedtotunneling.
Task8
Configuretheswitchessuchthatfloodedtrafficisrestrictedtothetrunklinksthatthe
trafficmustusetoreachthedestinationdevice.
Toseethedefaultsetting:
On Cat2
Cat2#Show vtpstatus
VTPVersion
:2
ConfigurationRevision
: 5
MaximumVLANssupportedlocally:1005
NumberofexistingVLANs
:8
VTPOperatingMode
:Client
VTPDomainName
:CCIE
VTPPruningMode
:Disabled
VTPV2Mode
:Disabled
Pruningisdisabled
VTPTrapsGeneration
:Disabled
MD5digest
:0x970x9D0xF10xF90xFE0x210xCC0x1D
Configurationlastmodifiedby 11.1.1.1at319300:12:48
NoteVTPPruningisdisabledbydefault,enterthefollowingtoenableVTP
pruning:
On Cat1
Cat1#Vtppruning
Thiscommandcanbeconfiguredinprivilegemode,Globalconfigmode,and/orin
theVlandatabase.Oncethisfeatureisenableditwillgetpropagatedtotheother
switcheswithintheVTPdomain.
Toverifytheconfigurationonbothswitches:
www.ccieuniversity.com
On Cat2
Cat2#Show vtpstatus
VTPVersion
:2
ConfigurationRevision
: 5
MaximumVLANssupportedlocally:1005
NumberofexistingVLANs
:8
VTPOperatingMode
: Client
VTPDomainName
:CCIE
VTPPruningMode:Enabled
VTPV2Mode
:Disabled
VTPTrapsGeneration
:Disabled
MD5digest
:0x970x9D0xF10xF90xFE0x210xCC0x1D
Configurationlastmodifiedby 11.1.1.1at319300:12:48
NoteVTPmessagespropagatethechangethroughtheentireVTPdomain.
Task9
ConfigureCat1andCat2 suchthatonlythetrunkports(F0/19andF0/20)andtheports
thatroutersR1toR6areconnectedtoareinuse,therestoftheportsshouldbe
configuredinadministrativelydownstate.
OnBothSwitches:
(config)#Intrangef0/718,F0/2124
(configifrange)#Shut
Task10
EnsurethatCat1 istherootbridgefortheVLANs12,34andCat2 istherootbridgefor
VLAN56.DoNOTuse theprioritycommandtoaccomplishthistask.
Therearethreecommandsthatcanbeusedto displaytheBIDforagivenswitch:
Showversion
Showspanningtreebridge
www.ccieuniversity.com
On Cat1
Cat1#Showversion
Cat1#Showver
CiscoIOSSoftware,C3560Software(C3560ADVIPSERVICESK9M),Version12.2(25)SEE2,
RELEASESOFTWARE(fc1)
Copyright(c)19862006byCiscoSystems,Inc.
CompiledFri28Jul0612:34byyenanh
Imagetextbase:0x00003000,database:0x012237D0
(Theoutputisomitted)
512Kbytesofflashsimulatednonvolatileconfigurationmemory.
BaseethernetMACAddress:00:19:56:DB:94:00
Motherboardassemblynumber :73989706
Powersupplypartnumber
:341009702
Motherboardserialnumber
:CAT10385ERJ
Powersupplyserialnumber
: DCA103584S4
Modelrevisionnumber
:D0
(Therestoftheoutputisomitted)
ThebaseMAC
ThefollowingcommandrevealsthebaseMACaddressoftheswitch,thecombinationof
priorityandthebase MACaddressistheBIDfor agivenswitch.
Cat1#Showspanningtreebridge
Vlan
VLAN0001
VLAN0012
VLAN0034
VLAN0056
HelloMaxFwd
BridgeID
TimeAge DlyProtocol
32769 (32768,1) 0019.56db.9400 2 20 15 ieee
32780 (32768,12) 0019.56db.9400 2 20 15 ieee
32802 (32768,34) 0019.56db.9400 2 20 15 ieee
32824 (32768,56) 0019.56db.9400 2 20 15 ieee
Notetheprioritystartswith32768,eachVLANthatiscreatedaddsitsVLANnumberto
thedefaultpriorityvalue(IfthebasepriorityandtheVLANnumberisaddedwithinthe
parenthesis,thesumwillbethepriorityforthatgivenVLAN),VLAN12adds12tothe
defaultpriorityvaluethereforethepriorityis32780andVLAN34adds34tothedefault
priorityvalue,therefore,thepriorityis32802.Notethat theMACisthebaseMACaddress
andit remainsthesame,inthiscase(0019.067f.8900).
NoteyourMACaddressmaybedifferent.
TofindouttheBIDandtherootbridgeforagivenVLAN,enterthefollowingShow
command:
On Cat1
www.ccieuniversity.com
Cat1#Showspanningtreevlan12
VLAN0012
Spanningtreeenabledprotocolieee
TheMACaddressoftherootbridge
RootIDPriority32780
Address0019.56db.9400
Thisbridgeistheroot
HelloTime2secMaxAge20secForwardDelay15sec
BridgeIDPriority32780(priority32768sysidext12)
Address0019.56db.9400
HelloTime2secMaxAge20secForwardDelay15sec
AgingTime300
TheMacaddressofthelocalswitch
Interface
Role Sts CostPrio.NbrType
Fa0/19
Desg FWD 19128.21 P2p
Fa0/20Desg FWD 19128.22 P2p
NotetheoutputoftheShowspanningtreevlan12onyourswitchmightshowmoreports.
EnterthefollowingcommandstoconfigureCat1tobetherootbridgeforVLANs12and
34:
On Cat1
Cat1(config)#Spanningtreevlan12,34rootprimary
TheabovecommandconfiguresCat1tobetherootforVLANs12and34theroot
keywordisamacrothatreducestheBIDofthe switchforagivenVLANbyavalueof 8192
(Thelower valueisthepreferredvalue).Therearenospacesbetweenthe12andthecomma
andthe34.
Cat1#Showspanningtreevlan12
VLAN0012
Note32768+128192=24588
Spanningtreeenabledprotocolieee
RootID Priority24588
Address0019.56db.9400
Thisbridgeistheroot
HelloTime2secMaxAge20secForwardDelay15sec
BridgeID Priority24588 (priority24576sysidext12)
Address0019.56db.9400
HelloTime2secMaxAge20secForwardDelay15sec
AgingTime300
www.ccieuniversity.com
InterfaceRoleStsCost
Prio.NbrType
Fa0/19DesgFWD19
128.21P2p
Fa0/20DesgFWD19128.22P2p
On Cat2
Cat2(config)##Spanningtreevlan 56rootprimary
Toverifytheconfiguration:
Cat2
Cat2#Showspanningvlan56
VLAN0056
Spanningtreeenabledprotocolieee
RootID Priority24632
Address001a.2f0a.2000
Thisbridgeistheroot
HelloTime2secMaxAge20secForwardDelay15sec
BridgeID Priority24632 (priority24576sysidext56)
Address001a.2f0a.2000
HelloTime2secMaxAge20secForwardDelay15sec
AgingTime300
InterfaceRoleStsCostPrio.NbrType
Fa0/19DesgFWD19128.21P2p
Fa0/20DesgFWD19128.22P2p
Task 11
ConfigureCat1suchthattheportsthattheroutersareconnectedtobypasslisteningand
learningstate.IfanyoftheseportsreceiveBPDUpackets,they shouldtransitioninto
errdisablestate.Useminimumnumberofcommandstoaccomplishthistask. This
configurationshouldonlybeappliedtotheportsthattheroutersR1 R6areconnected
to.
www.ccieuniversity.com
On Cat1
Cat1(config)#Spanningtreeportfastbpduguarddefault
Cat1(config)#InterfacerangeF0/16
Cat1(configif)#Spanningtreeportfast
Oncetheportfastcommandisenteredyoushouldseethefollowingwarning
message:
%Warning:portfastshouldonlybeenabledonportsconnectedtoasingle
host.Connectinghubs,concentrators,switches,bridges,etc...tothis
Interfacewhenportfastisenabled,cancausetemporarybridgingloops.
UsewithCAUTION
%Portfastwillbeconfiguredin6interfacesduetotherangecommand
butwillonlyhaveeffectwhentheinterfacesareinanontrunkingmode.
Thespanningtreeportfastbpduguarddefaultcommandinglobalconfigmode
willshuttheportdowninerrdisablemodeifanyportfastenabledportreceives
BPDUpackets.
Task 12
ConfigureCat2suchthattheportsthattheroutersareconnectedto(F0/1F0/6) bypass
listeningandlearningstate.IfanyoftheseportsreceiveBPDUpackets,they should
loosetheirportfaststate. Thisconfigurationshouldapplytoexistingandfutureportsthat
areconfiguredasportfast.
On Cat2
Cat2(config)#Spanningtreeportfastbpdufilterdefault
Cat2(config)#InterfacerangeF0/16
Cat2(configif)#Spanningtreeportfast
Oncetheportfastcommandisenteredyoushouldseethefollowingwarning
message:
%Warning:portfastshouldonlybeenabledonportsconnectedtoasingle
host.Connectinghubs,concentrators,switches,bridges,etc...tothis
Interfacewhenportfastisenabled,cancausetemporarybridgingloops.
UsewithCAUTION
www.ccieuniversity.com
%Portfastwillbeconfiguredin6interfacesduetotherangecommand
butwillonlyhaveeffectwhentheinterfacesareinanontrunkingmode.
Atthegloballevel,youcanenableBPDUfilteringonPortFastenabledinterfaces
byusingthespanningtreeportfastbpdufilterdefaultglobalconfiguration
command.
Task 13
YoureceivedarequestfromtheITdepartmenttomonitorandanalyzeallthepackets
sentandreceivedbythehostconnectedtoportF0/14on Cat1 youhaveconnectedthe
packetanalyzertoportF0/15onthesameswitch.Configuretheswitchtoaccommodate
thisrequest.
On Cat1
Cat1(config)#monitorsession1sourceinterfaceF0/14both
Cat1(config)#monitorsession1destinationinterfaceF0/15
Notethefollowing:
Therecanonlybetwomonitor sessionsconfiguredonagivenswitch
TheirdirectiontomonitorcanbeconfiguredasRx,Tx,orBoth. Rxis
forreceivedtraffic,TxisforTransmittedtraffic,andbothisinboth
direction.
VLANscanONLYbeconfiguredinRxdirection.
ToverifyEnter theShowmonitorsession1command.
Toverifytheconfiguration:
On Cat1
Cat1#Showmonitorsession1
Session1
Type:LocalSession
SourcePorts:
Both:Fa0/14
Destination Ports:Fa0/15
Encapsulation:Native
Ingress:Disabled
www.ccieuniversity.com
Task14
YoureceivedanotherrequestfromyourITdepartmenttokeeptrackofalltheMAC
addressesthatarelearnedby Cat2portF0/18.Theswitchmustuse theNMSlocatedat
192.168.1.1/24,configuretheswitchtohandlethisrequest. YoushoulduseanIP
addressof2.2.2.2/8toaccomplishthistask.
On Cat2
Cat2(config)#Snmpserverhost192.168.1.1trapprivate
%IP_SNMP3SOCKET:can'topenUDPsocket
Unabletoopensocketonport161
NotesincethisswitchisnotconfiguredwithanIPaddress,itwillfailtoconfigure
theSnmpserver.Therefore,anIPaddressshouldbeconfiguredbeforeenteringthe
snmpservercommandasfollows:
Cat2(config)#Intlo0
Cat2(configif)#Ipaddr2.2.2.2255.0.0.0
Cat2(config)#snmpserverhost192.168.1.1 trapprivate
(TosetuptheSnmpServer)
Cat2(config)#snmpserverenabletrapsmacnotification
ConfigurestheswitchtosendmacaddresstrapstotheNMS
Cat2(config)#macaddresstablenotification
ToenableMACaddressnotification
Cat2(config)#Interf0/18
Cat2(configif)#snmptrapmacnotificationadded
TheabovecommandenablestheSNMPtrapon interfaceF0/18andconfiguresthe
switchtosendMACnotificationtrapswheneveraMACaddressisadded.Ifthe
switchmustbeconfiguredtoreporttheMACaddressesthatarelearntandexpired,
thensnmptrapmacnotificationremovedcommandmustalsobeconfigured.
Toverifytheconfiguration:
Cat2#Showmacaddresstablenotificationinterfacef0/18
MACNotificationFeatureisEnabledontheswitch
Interface
MACAddedTrapMACRemovedTrap
www.ccieuniversity.com
FastEthernet0/18 Enabled
Disabled
Noteifthesnmptrapmacnotificationremovedcommandwasalsoenteredfor
F0/18interface,undertheMACremovedTrapcolumnyouwillalsoseeas
Enabled.
Cat2#Showmacaddresstablenotification
MACNotificationFeatureisEnabledontheswitch
IntervalbetweenNotificationTraps:1secs
NumberofMACAddressesAdded:0
NumberofMACAddressesRemoved:0
NumberofNotificationssenttoNMS:0
MaximumNumberofentriesconfiguredinHistoryTable:1
CurrentHistoryTableLength :0
MACNotificationTrapsareEnabled
HistoryTablecontents
Task15
On Cat2portF0/14configuretheamountofbandwidthutilizationforbroadcasttraffic
to50%.
On Cat2
Cat2(config)#InterfaceF0/14
Cat2(configif)#Stormcontrolbroadcastlevel50.00
StormcontrolcanbeusedforBroadcast,UnicastandMulticasttraffic,this
commandspecifiestrafficsuppressionlevelforagiventypeoftrafficfora
particularinterface.Thelevelcanbefrom0to100andanoptionalfractionofa
levelcanalsobeconfiguredfrom099.Athresholdvalueof100percentmeans
thatnolimitisplacedforthespecifiedtypeoftrafficavalueof0.0meansthatthe
particulartypeoftrafficisblockedalltogether.
On3550switcheswhentherateofMulticasttrafficexceedsapredefinedthreshold,
allincomingtraffic(Broadcast,MulticastandUnicast)isdroppeduntilthelevel of
Multicasttrafficisdroppedbelowthethresholdlevel.Oncethisoccurs,onlythe
Spanningtreepacketsareforwarded.WhenBroadcastor Unicastthresholdsare
exceeded,trafficisblockedforonlythetypeoftrafficthatexceededthethreshold.
Toverifytheconfiguration:
www.ccieuniversity.com
Cat2#Showstormcontrolf0/14broadcast
InterfaceFilterState
Upper
LowerCurrent
Fa0/14Forwarding50.00%50.00%0.00%
Task16
MacaddresseslearntdynamicallybythesetwoswitchesshouldnotstayintheMAC
addresstableiftheyareinactiveforlongerthan10minutes.
BydefaulttheMACaddressesthatareinactivewillexpirewithin300seconds,this
taskisaskingfora10minutesthreshold,10minutesequatesto600seconds,the
followingcommandwill accomplishthistask:
On Cat1andCat2
(config)#Macaddresstableagingtime600
Toverifytheconfiguration:
On Cat1orCat2
Cat1#Shmacaddresstableagingtime
VlanAgingTime
1600
12600
34600
56600
Task17
Formanagementpurposes,assignanIPaddressof10.1.1.11/24toCat1,withadefault
gatewayof10.1.1.2/24.
On Cat1
www.ccieuniversity.com
Cat1(config)#InterVlan1
Cat1(configif)#Ipaddress10.1.1.11255.255.255.0
Cat1(configif)#Noshut
Cat1(configif)#Exit
Cat1(config)#Ipdefaultgateway10.1.1.2
Task18
ConfigureroutersR1andR3usingthefollowingIPaddresses:
R1F0/0=10.1.12.1/24
R3F0/0=10.1.34.3/24
ConfigureCat1 toroutebetweenVLAN12and34suchthattheserouterscanpingeach
other.UseanyIpaddresson Cat1 toaccomplishthistask.
OnR1
R1(config)#InterfaceF0/0
R1(configif)#Ipaddress10.1.12.1255.255.255.0
R1(configif)#Noshut
R1(configif)#Exit
R1(config)#Iproute0.0.0.00.0.0.010.1.12.100
OnR3
R3(config)#InterfaceF0/0
R3(configif)#Ipaddress10.1.34.3255.255.255.0
R3(configif)#Noshut
R3(configif)#Exit
R3(config)#Iproute0.0.0.00.0.0.010.1.34.100
On Cat1
Cat1(config)#Iprouting
Cat1(config)#InterfaceVlan12
Cat1(configif)#Ipaddress10.1.12.100255.255.255.0
Cat1(configif)#Noshut
www.ccieuniversity.com
Cat1(config)#InterfaceVlan34
Cat1(configif)#Ipaddress10.1.34.100255.255.255.0
Cat1(configif)#Noshut
ASwitchVirtualInterface(SVI)representsaVLANofswitchportsasoneinterface
totherouting.OnlyoneSVIcanbeassociatedwithaVLAN.Thisisnecessarywhen
configuringInterVlanrouting.
WhencreatinganSVIforaVLAN,thedesignatednumbermustmatchtheVLAN
number.
Toverifytheconfiguration:
OnR1
R1#Ping10.1.34.100
Typeescapesequencetoabort.
Sending5,100byteICMPEchosto10.1.34.100,timeoutis2seconds:
!!!!!
Successrateis100percent(5/5),roundtripmin/avg/max=1/2/4ms
OnR3
R3#Ping10.1.12.100
Typeescapesequencetoabort.
Sending5,100byteICMPEchosto10.1.12.100,timeoutis2seconds:
!!!!!
Successrateis100percent(5/5),roundtripmin/avg/max=1/2/4ms
Task 19
RemovetheconfigurationfromthepreviousstepandconfigureInterVlanrouting
betweenVLANs12and34.DONOTuseSVIstoaccomplishthistask.F0/1interfaceof
anyroutercanbeusedtoaccomplishthistask.UsetheIPaddressingfromtheprevious
task.Ensuretouseanindustrystandardprotocolforthetrunk.
SinceR5sF0/0ispartofVLAN56,R5sF0/1isusedtoaccomplishthistask.
On Cat1
Cat1(config)#NoInterfaceVlan12
www.ccieuniversity.com
Cat1(config)#NoInterfaceVlan34
On Cat2
Cat2(config)#Iprouting
Cat2(config)#InterfaceF0/5
Cat2(configif)#SwitchporttrunkencapDot1q
Cat2(configif)#Switchportmodetrunk
OnR5
R5(config)#InterfaceF0/1
R5(configif)#Noshut
R5(configif)#Exit
R5(config)#Intf0/1.12
R5(configif)#Encapdot1q12
R5(configif)#Ipaddress10.1.12.100255.255.255.0
R5(config)#Intf0/1.34
R5(configif)#Encapdot1q34
R5(configif)#Ipaddress10.1.34.100255.255.255.0
Toverifytheconfiguration:
OnR1&R3
R1#Cleararp
OnR1
R1#Ping10.1.34.3
Typeescapesequencetoabort.
Sending5,100byteICMPEchosto10.1.34.3,timeoutis2seconds:
!!!!!
Successrateis100percent(5/5), roundtripmin/avg/max=1/1/4ms
OnR3
R3#Ping10.1.12.1
Typeescapesequencetoabort.
www.ccieuniversity.com
Sending5,100byteICMPEchosto10.1.12.1,timeoutis2seconds:
!!!!!
Successrateis100percent(5/5),roundtripmin/avg/max=1/2/4ms
Task20
ConfigureCat1suchthatwhenevertheswitchlearnsorremovesaMACaddressonits
portF0/18,anSNMPnotificationisgeneratedandsenttotheNMSlocatedat
192.168.1.100.Sincetherearemanyuserscomingandgoingfromthenetwork,setupa
trapintervaltimetobundlethenotificationtrapsandreducenetworktrafficusingthe
followingparameters:
Thetrapsshouldbegeneratedevery30minutes.
Thetrapshouldcontainamaximumof150entries.
ThisfeatureenablesustotrackusersonanetworkbystoringtheMacaddress
activityontheswitch.Onceconfigured,everytimeaMACaddressislearnedor
removedanSNMPnotificationisgeneratedandsenttotheNMS.Onaverybusy
networkwhenlotsofuserscomeandgo,thedefaultbehavioristhatanSNMPtrap
issenteverysecond.Becausethiscanconsumebandwidth,therearetwoparameters
thatcanbeconfiguredtoremedythissituationandtheyareasfollows:
Macaddresstablenotificationinterval Thisvaluespecifiesthenotification
trapintervalinsecondsbetweeneachsetoftrapsthataregeneratedtotheNMS.
Defaultvalueisonesecond,andtherangeis02,147,483,647seconds.
MacaddresstablenotificationhistorysizeSpecifiesthemaximumnumberof
entriesintheMACnotificationhistorytable.Thedefaultvalueis1,andtherange
is1500entries.
On Cat1
Cat1(config)#Snmpserverhost192.168.1.100trapsprivate
TheabovecommandidentifiestheNMS
Cat1(config)#Snmpserverenabletrapsmacnotification
ThiscommandenablesSNMPtrapsmacnotification
Cat1(config)#Macaddresstablenotification
Theabovecommandenablesthemacaddresstablenotificationontheswitch
Cat1(config)#Macaddresstablenotificationinterval1800
Thiscommandsetstheinterval
www.ccieuniversity.com
Cat1(config)#Macaddresstablenotificationhistorysize150
Thiscommandsetsthehistorysize
Cat1(config)#Intf0/18
Cat1(configif)#Snmptrapmacnotificationadded
ToenabletheMACnotificationtrapwheneveraMACaddressisadded
Cat1(configif)#Snmptrapmacnotificationremoved
ToenabletheMACnotificationtrapwheneveraMACaddressisremoved
Toverifytheconfiguration:
Cat1#Showmacaddresstablenotificationinterfacef0/18
MACNotificationFeatureisEnabledontheswitch
Interface
MACAddedTrap MACRemovedTrap
FastEthernet0/18
Enabled
Enabled
Cat1#Showmacaddresstablenotification
Cat1#shmacaddresstablenotification
MACNotificationFeatureisEnabledontheswitch
IntervalbetweenNotificationTraps:1800secs
NumberofMACAddressesAdded:0
NumberofMACAddressesRemoved:0
NumberofNotificationssenttoNMS:0
MaximumNumberofentriesconfiguredinHistoryTable:150
CurrentHistoryTableLength:0
MACNotificationTrapsareEnabled
HistoryTablecontents
Task21
OptimizeCat1usingthefollowingpolicies:
Cat1shouldbeconfiguredsuchthatitsmemoryresourcesintheswitchare
optimizedforrouting.
www.ccieuniversity.com
Switchdatabasemanagement(SDM)aretemplatesthatcanbeconfiguredto
allocatememoryresourcesintheswitchforaspecificfeaturedependingonwhatthe
switchisusedforinagivennetwork.
Aswitchcanbeconfiguredtouseoneofthefollowingtemplates:
AccessUsedforQOSclassificationandSecurity.
Routing Usedforrouting
VlanDisablesroutingandsetstheswitchtobealayer2switch.
Extendedmatchreformatsroutingmemoryspacetoallow144bitlayer3
TCAMsupportneededforWCCPand/ormultipleVRFinstances.
On Cat1
Cat1(config)#Sdmpreferrouting
Youmustrebootforthesesettingstotakeeffect.
ToVerifytheconfiguration:
On Cat1
Cat1#Showsdmprefer
Thecurrenttemplateis"desktoprouting"template.
Theselectedtemplateoptimizestheresourcesin
theswitchtosupportthisleveloffeaturesfor
8routedinterfacesand1024VLANs.
numberofunicastmacaddresses:
3K
numberofIPv4IGMPgroups+multicastroutes:1K
numberofIPv4unicastroutes:
11K
numberofdirectlyconnectedIPv4hosts:
3K
numberofindirectIPv4routes:
8K
numberofIPv4policy basedroutingaces:
512
numberofIPv4/MACqosaces:
512
numberofIPv4/MACsecurityaces:
1K
On Cat2
Cat2#Shsdmprefer
Thecurrenttemplateis"desktopdefault"template.
Theselectedtemplateoptimizestheresourcesin
theswitchtosupportthisleveloffeaturesfor
www.ccieuniversity.com
8routedinterfacesand1024VLANs.
numberofunicastmacaddresses:
6K
numberofIPv4IGMPgroups+multicastroutes:1K
numberofIPv4unicastroutes:
8K
numberofdirectlyconnectedIPv4hosts:
6K
numberofindirectIPv4routes:
2K
numberofIPv4policybasedroutingaces:
0
numberofIPv4/MACqosaces:
512
numberofIPv4/MACsecurityaces:
1K
Notethedifferenceinmemoryallocationisrevealedifthebufferallocationof Cat2
iscomparedtothe Cat1.
Task22
CreateVLANs30,31and32on Cat1 andensurethattheseVLANscannottraversethe
trunklinkbetween Cat1andCat2.
BydefaultatrunkportsendsandreceivestrafficfromallVLANs,however,agiven
VLANorVLANscanberemovedfromthetrunklinkinordertopreventtrafficfrom
thatVLAN/sfromtraversingoverthetrunk.
On Cat1
Cat1(config)#Vlan3032
BeforeconfiguringthetaskwehavetochecktoseeiftheVLANsthatwejustcreated
cantraversethetrunklink.
Cat1#Showinterfacetrunk
PortModeEncapsulationStatusNativevlan
Fa0/19onisltrunking1
Fa0/20onisltrunking1
PortVlansallowedontrunk
Fa0/19 14094
Fa0/2014094
PortVlansallowedandactiveinmanagementdomain
Fa0/19 1,12,3032,34,56
Fa0/20 1,12,3032,34,56
www.ccieuniversity.com
PortVlansinspanningtreeforwardingstateandnotpruned
Fa0/19 1,12,34,56
Fa0/20 1
NoteVlans3032areprunedbecausetheseVLANshave
NOPortmembership
ToremovethoseVLANsfromthetrunklinks:
OnBothSwitches
Switch(config)#Interfacerangef0/1920
Switch(configifrange)#Switchporttrunkallowedvlanexcept30,31,32
Noteif anEtherChannelwascreated,thecommandhadtobeconfigureddirectly
under theportchannelinterface.
ToVerifytheconfiguration:
On Cat1
Cat1#Showinttrunk
PortMode
EncapsulationStatusNativevlan
Fa0/19onisltrunking1
Fa0/20onisltrunking1
PortVlansallowedontrunk
Fa0/19129,334094
Fa0/20129,334094
PortVlansallowedandactiveinmanagementdomain
Fa0/19 1,12,34,56
Fa0/20 1,12,34,56
PortVlansinspanningtreeforwardingstateandnotpruned
Fa0/191,12,34,56
Fa0/20 1
NotetheoptionsthatcanbeusedwithSwitchporttrunkallowedVLANcommand
are:Remove,add,all,andexcept.
TheSwitchporttrunkallowedvlanremove30,31,32commandcouldaccomplishthe
sametask.
www.ccieuniversity.com
Task23
ConfigureCat1sportF0/15andF0/16suchthatwhenclientPCsconnecttotheseports,
theyautomaticallybecomememberofagivenVLAN.Cat1shouldbeconfiguredtouse
10.1.1.1astheprimaryand10.1.1.2asthesecondaryVMPSserver.Ensurethatthelocal
switchreconfirmstheVLANmembershipeveryhalfhourandiftheVMPScannotbe
contacted,thelocalswitchwillretry5timesbeforeconsideringtheVMPSunavailable.
VMPS:
The3550switchcantbesetupasaVMPSserver,butitcanbeconfiguredasa
VMPSclient.
TheclientcommunicateswiththeVMPSthroughVlanQueryProtocol(VQP).
WhenaVMPSreceivesaVQPfromtheclient,itsearchesitsdatabaseforaMAC
toVLANmapping,andifthemappingisfound,itconveystheVLANinformation
totheclientandthentheclientassignsthatgivenVLANtotheportthattheclient
isconnectedto.
TheVMPScanoperateinSecuremode,whichmeansthatifaMACtoVLAN
mappingcannotbefoundinitsdatabase,theVMPSwillsendaportshutdown
messagetotheclientandtheclientwillshutdownthatgivenport,however,ifthe
VMPSisnotconfiguredinasecuremode,itwillsendaccessdenymessage,andthe
clientwillconstantlymonitortheportandwillrejectalltrafficfromthatgiven
port.
TheVMPSclientperiodicallyreconfirmstheVLANmembershipinformation
receivedfromtheVMPSserver.Bydefaultthisisperformedevery60minutes,this
intervalcanbechangedusingVMPSreconfirmglobalconfigcommand.
IftheVMPSclientcantcontacttheVMPSserver,itwillretrytoestablishthat
communicationthreetimesandthisvaluecanbechangedusingvmpsretry
commandintheglobalconfigmode.
ThedatabaseisinformofanASCIIfilesavedonaTFTPserver,whichtheVMPS
serveraccesses.
On Cat1
Beforeconfiguringthistask weshouldchecksomeofthedefaultvalues:
Cat1#Showvmps
VQPClientStatus:
www.ccieuniversity.com
VMPSVQPVersion:1
ReconfirmInterval:60min
ServerRetryCount:3
VMPSdomainserver:
Reconfirmationstatus
VMPSAction:
NoDynamicPort
VMPSVQPversionisversion1,andthereconfirmationisatitsdefaultvalueof60
minutes,andtheretryvalueissetto3.TherearenoVMPSservers.
Cat1(config)#intrangef0/1516
Cat1(configifrange)#switchportmodeaccess
Cat1(configifrange)#switchportaccessvlandynamic
Cat1(configifrange)#noshut
TheabovecommandsetsportsF0/15andF0/16toVLANdynamic,whichmeansthatthey
willacquiretheirVLANinformationdynamically.
Cat1(config)#vmpsreconfirm30
Cat1(config)#vmpsretry5
Theabovetwocommandsconfigurethereconfirmationintervalto30minutesandthe
retrycounterto5.
Cat1(config)#vmpsserver10.1.1.1primary
Cat1(config)#vmpsserver10.1.1.2
ThesecommandsconfiguretheprimaryandthesecondaryVMPSservers.
Toverifytheconfiguration:
Cat1#Showvmps
VQPClientStatus:
VMPSVQPVersion:1
ReconfirmInterval: 30min
ServerRetryCount: 5
VMPSdomainserver:10.1.1.2
10.1.1.1(primary,current)
Reconfirmationstatus
VMPSAction:
NoDynamicPort
www.ccieuniversity.com
Task24
PortF0/17 on Cat1 isconnectedtoaCisco7960IPPhone.Voicetrafficthatoriginates
fromthephoneistaggedwithaCoSof5.
APCisconnectedtothe7960IPPhonewhichisgeneratingtrafficwithCoSof3.Ensure
thatthedatatrafficbelongstoVLAN3andtheVoicetrafficbelongstoVLAN5.The
trafficoriginatedbythe7960IPPhoneshouldmaintainitsCoSvalue,whereasthe
trafficthatoriginatedfromthePCconnectedtothe7960IPPhoneshouldberewritten
withaCoSof1.
On Cat1
Cat1(config)#Mlsqos
Cat1(config)#InterfaceF0/17
Cat1(configif)#SwitchportaccessVlan3
Cat1(configif)#SwitchportvoiceVlan 5
Cat1(configif)#Switchportpriorityextendcos1
Cat1(configif)#Mlsqostrustcos
Cat1(configif)#Noshut
Whenthephonegetsconnectedtotheswitchitwillforman802.1qtrunklink.The
trafficdestinedtothePCwillbecarriedintheaccessVLAN,whereasthetraffic
destinedforthe7960IPPhonewillbecarriedinVoiceVLAN.
Bydefaultthe3550doesntprocesstheCoSvalueandrewritesallframeswitha
CoSvalueof0.ToconfigurethephonesuchthatitprocessestheCoSvalues,the
QOSmustbeenabledgloballyusingthemlsqoscommand.
ToconfiguretheswitchsoittruststheincomingCoSvaluefromthe7960IPPhone
themlsqostrustcoscommandisused.
SincethePCconnectedtotheIPPhonecansendtraffictothePhonewithanyCos
valueandthephonewantstoensurethatthevoicetrafficthatitgeneratesgetbetter
priority,itoverridestheCoSforalltrafficthatisoriginatedbythePC.Inthistask
wehavetoconfiguretheswitchsuchthatitrewritesthetrafficwithaCoSof1,
therefore,theSwitchportpriorityextendedcos1commandisused.
Task25
Configuretrunkingbetween Cat1andCat2suchthatVLAN12doesnotgettagged
whenthetrafficforthisVLANtraversesthetrunk.
NotethetrunkingencapsulationonthetrunklinksshouldhavebeenDOT1Qinthe
CCIElab,whenconfiguringagivensection,theentiresectionshouldbereadbefore
configuringtheindividualtaskswithinthatsection.
WhenatrunkisconfiguredwithDot1q,itcanreceivebothtagged anduntagged
www.ccieuniversity.com
traffic.Bydefault,theswitchforwardsuntaggedtrafficinthenativeVLANONLY.
IfagivenVLANshouldNOTbetaggedasittraversesthetrunklinkthen,that
VLANshouldbesetasthenativeVLAN.
WhenthenativeVLANischanged,ensurethatthechangeisconfiguredonboth
switchesorthetrunklinkwillgodown.
OnBothSwitches
(config)#InterfacerangeF0/1920
(configifrange)#Switchporttrunkencapdot1q
(configifrange)#Switchportmodetrunk
ToVerifytheconfiguration:
On Cat1
PortModeEncapsulationStatusNativevlan
Fa0/19on802.1qtrunking1
Fa0/20on802.1qtrunking1
PortVlansallowedontrunk
Fa0/19129,334094
Fa0/20129,334094
PortVlansallowedandactiveinmanagementdomain
Fa0/191,3,12,34,56
Fa0/201,3,12,34,56
PortVlansinspanningtreeforwardingstateandnotpruned
Fa0/191,3,12,34,56
Fa0/201
ToconfigurethenativeVLAN:
OnBothSwitches
(config)#InterfacerangeF0/1920
(configifrange)#SwitchporttrunknativeVLAN12
Toverifytheconfiguration:
On Cat1
Cat1#Showinterfacetrunk
www.ccieuniversity.com
PortModeEncapsulationStatus
Fa0/19on
802.1qtrunking
Fa0/20on802.1qtrunking
Nativevlan
12
12
PortVlansallowedontrunk
Fa0/19129,334094
Fa0/20129,334094
PortVlansallowedandactiveinmanagementdomain
Fa0/19 1,3,12,34,56
Fa0/201,3,12,34,56
PortVlansinspanningtreeforwardingstateandnotpruned
Fa0/191,3,12,34,56
Fa0/201
On Cat2
Cat2#Showinterfacetrunk
PortModeEncapsulationStatus
Nativevlan
Fa0/5on802.1qtrunking1
Fa0/19on802.1qtrunking 12
Fa0/20on802.1qtrunking 12
PortVlansallowedontrunk
Fa0/514094
Fa0/19129,334094
Fa0/20129,334094
PortVlansallowedandactiveinmanagementdomain
Fa0/51,3,12,3032,34,56
Fa0/191,3,12,34,56
Fa0/201,3,12,34,56
PortVlansinspanningtreeforwardingstateandnotpruned
Fa0/51,3,12,3032,34,56
Fa0/191,12,34
Fa0/20none
Task26
ConfigureMultiinstanceofSpanningTreeontheswitchesusingthefollowspolicy:
www.ccieuniversity.com
ThereshouldbetwoinstancesofSTP,instance1and2
Instance1shouldhandleVLANs12and34
Instance2shouldhandleVLAN56
AllfutureVLANsshoulduseinstance0
Instance1shoulduseF0/19
Instance2shoulduseF0/20
Cat1shouldbetherootbridgeforthefirstinstance
Cat2shouldbetherootbridgeforthesecondinstance
Thenameofthisconfiguration shouldbeCCIE
Therevisionnumbershouldbe1
OnBothSwitches
ThedefaultmodeforspanningtreeisPVST,thefollowingShowcommandverifies
thisinformation:
Showspanningtreesummary
Switchisinpvstmode
Rootbridgefor:none
ExtendedsystemIDisenabled
(Therestoftheoutputisomitted)
OnBothSwitches
(config)#Spanningtreemodemst
ThiscommandchangesthemodeoftheswitchtoMST.
(config)#Spanningtreemstconfiguration
(configmst)#Revision1
(configmst)#NameCCIE
(configmst)#Instance1vlan 12,34
(configmst)#Instance2vlan56
ThefirstcommandallowsustoenterintheMSTconfigurationmode.Thesecond
commandspecifiestheconfigurationrevisionnumbertherangeforthisnumberis
165535.Thethirdcommandspecifiesthenameforthisconfigurationinthiscase
CCIE.TheforthandfifthcommandsmaptherequestedVLANstothespecified
instances,MSTsupports16instances,bydefaultallthefutureVLANswillbe
assignedtoinstance0,instance0isthecatchallinstance).
Toverifythisconfiguration:
www.ccieuniversity.com
OnbothSwitches
#Showspanningtreemstconfiguration
Name[CCIE]
Revision1
InstanceVlansmapped
0111,1333,3555,574094
1
12,34
256
Noteinstance0handlestherestoftheVLANsthatarenotassignedtoagiven
instanceinstance0isthecatchallinstance.
ToVerifytheconfiguration beforeconfiguringthenextportionofthe
task:
On Cat1
Cat1#Showspanningtreebridge
Hello Max Fwd
MSTInstanceBridgeID
Time Age Dly Protocol
MST0
32768(32768,0) 0019.56db.9400 2
20
15
mstp
MST1
32769(32768,1) 0019.56db.9400 2
20
15
mstp
MST2
32770(32768,2) 0019.56db.9400 2
20
15
mstp
NotethiscommanddisplaystheBIDforyourswitch,andinsteadofassigningaBID
toeachVLAN,thereisaBIDforeachinstance.
On Cat1
Cat1#Showspanningtreeroot
Root
Hello Max
MSTInstanceRootID
Cost
Time Age
MST0
32768 0019.56db.9400
0
220
MST1
327690019.56db.9400
0220
MST2
327700019.56db.9400
0
2
20
Fwd
DlyRootPort
15
15
15
TheabovecommanddisplaystheBIDoftherootbridgefordifferentinstances.
NoteinthiscaseCat1 istherootforallinstances.
www.ccieuniversity.com
On Cat1
Cat1(config)#Spanningtreemst1priority0
Cat1(config)#Spanningtreemst2priority4096
On Cat2
Cat2(config)#Spanningtreemst1priority4096
Cat2(config)#Spanningtreemst2priority0
Theabovecommandswillchangetheswitchpriorityandmakeitmorelikelythat
Cat1willbechosenastherootswitchforinstance1and Cat2 willbechosenasthe
rootbridgeforinstance2.
Thisnumbermustbeinincrementsof4096.Rememberthelowervaluehashigher
preference.
Toverifytheconfiguration:
On Cat1
Cat1#Showspanningroot
Root
Hello Max Fwd
MSTInstance
RootID
Cost
Time Age Dly
MST0
32768 0019.56db.9400
0 2
20 15
MST1
1 0019.56db.9400
0 2
20 15
MST2
2 001a.2f0a.2000 200000
2
20 15
RootPort
Fa0/19
Notethelocalswitch(Cat1)istherootbridgeforinstance0&1,whereas,Cat2 is
therootforinstances2.
On Cat2
Cat2#Showspanningroot
Root
Hello Max Fwd
MSTInstance
RootID
Cost
Time Age Dly
MST0327680019.56db.9400022015
RootPort
Fa0/19
MST110019.56db.9400 2000002
2015Fa0/19
MST2
2 001a.2f0a.2000
0 2
20
15
NoteCat2 istherootbridgeforinstance2,whereas,Cat1istherootforinstances
0and1.
www.ccieuniversity.com
Toconfigurethelastportionofthistask,portpriorityfeatureisusedasfollows:
OnBothSwitches
(config)#IntF0/19
(configif)#Spanningtreemst1portpriority0
(configif)#Spanningtreemst2portpriority128
Highpriority
(config)#IntF0/20
(configif)#Spanningtreemst1portpriority128
(configif)#Spanningtreemst2portpriority 0
InthistaskPortpriorityisusedwhenselectinganinterfacetoputintothe
forwardingstateforagiveninstancealowervaluehasahigherpriority.Inthis
caseportF0/19willbeusedbyalltheVLANsthatareassignedtoinstances0&1,
becauseithasahigherpriority(Lowervalue),andinstance2 willuseportF0/20
becauseithasbeenconfiguredwithahigherpriority(Lowervalue).
Toverifytheconfiguration:
On Cat1
Cat1#Showspanningtreeintf0/19
MstInstanceRoleSts
CostPrio.NbrType
MST0
DesgFWD200000128.21
P2p
MST1
DesgFWD200000128.21
P2p
MST2
AltnBLK200000128.21
P2p
Cat1#Shspanningtreeintf0/20
MstInstanceRoleStsCostPrio.NbrType
MST0
Desg FWD 200000128.22P2p
MST1DesgFWD200000128.22P2p
MST2
RootFWD200000128.22
P2p
On Cat2
Cat2#Showspanningtreeintf0/19
MstInstanceRoleStsCostPrio.NbrType
www.ccieuniversity.com
MST0
Root FWD200000128.21P2p
MST1RootFWD2000000.21P2p
MST2DesgFWD 200000128.21P2p
Cat2#Shspanningtreeintf0/20
MstInstanceRoleStsCostPrio.NbrType
MST0
Altn BLK 200000 128.22P2p
MST1AltnBLK200000128.22P2p
MST2DesgFWD2000000.22P2p
Noteinstances0&1isblockedonportF0/20butforwardedonF0/19andinstance
2isblockedoninterfaceF0/19andforwardedonF0/20.
Task27
TheITdepartmentdecidedtostopmonitoringportF0/14fromTask13,youhave
receivedanewrequesttomonitorportF0/14on Cat1 buttheprotocolanalyzeris
connectedtoportF0/18on Cat2. Configuretheswitchestoaccommodatethisrequest.
On Cat1
Cat1(config)#nomonitorsession1
Cat1(config)#Vlan90
Cat1(configvlan)#Remotespan
Cat1(configvlan)#Exit
ThecreationofthisVLANcanonlybedoneintheglobalconfigurationmode,
becausethisistheonlymodethatallowsustosettheVLANasremotespan.Ensure
thatthisVLANispropagatedtoCat4.
Toverifytheconfiguration:
On Cat1:
Cat1#Sh vlanbrie
VLANNameStatusPorts
1defaultactiveFa0/7,Fa0/8,Fa0/9,Fa0/10
www.ccieuniversity.com
Fa0/11,Fa0/12,Fa0/13,Fa0/14
Fa0/18,Fa0/21,Fa0/22,Fa0/23
Fa0/24,Gi0/1,Gi0/2
3VLAN0003activeFa0/17
12VLAN0012activeFa0/1,Fa0/2
30VLAN0030active
31VLAN0031active
32VLAN0032active
34VLAN0034activeFa0/3,Fa0/4
56VLAN0056activeFa0/5,Fa0/6
90VLAN0090active
EnsurethatthisVLANispropagated
(Therestoftheoutputisomitted)
toCat2
On Cat2
Cat2#Shvlanbrie
VLANName
StatusPorts
1default
activeFa0/1,Fa0/2,Fa0/3,Fa0/4
Fa0/6,Fa0/7,Fa0/8,Fa0/9
Fa0/10,Fa0/11,Fa0/12,Fa0/13
Fa0/14,Fa0/15,Fa0/16,Fa0/17
Fa0/18,Fa0/21,Fa0/22,Fa0/23
Fa0/24,Gi0/1,Gi0/2
3VLAN0003active
12VLAN0012active
30VLAN0030
active
31VLAN0031active
32VLAN0032active
34VLAN0034active
56VLAN0056active
90VLAN0090active
NotetheVLANispropagated.
(Therestoftheoutputisomitted)
On Cat1
Cat1#Showvlanremotespan
RemoteSPANVLANs
90
On Cat2
Cat2#Showvlan remotespan
www.ccieuniversity.com
RemoteSPANVLANs
90
NoteVLAN90shouldbedisplayedasremotespanonbothswitches.
On Cat1
Cat1(config)#Monitorsession1sourceinterfaceF0/14
Cat1(config)#Monitorsession1destinationremotevlan90
Toverifytheconfiguration:
On Cat1
Cat1#Show monitorsession1
Session1
Type
:RemoteSourceSession
SourcePorts
:
Both
:Fa0/14
DestRSPANVLAN: 90
On Cat2
Cat2(config)#Monitorsession1sourceremotevlan90
Cat4(config)#Monitorsession1destinationinterfaceF0/18
PortF0/18iswheretheprotocolanalyzerisconnected.
Toverifytheconfiguration:
On Cat2
Cat2#Shmonitorsession1
Session1
Type:RemoteDestinationSession
SourceRSPANVLAN:90
DestinationPorts:Fa0/18
www.ccieuniversity.com
Encapsulation:Native
Ingress:Disabled
RSPANextendsSPANbyenablingremotemonitoringofmultipleswitchesacrossyour
network.ThetrafficforRSPANtraversesoverauserdefinedRSPANVLAN(remote
vlan),inthiscaseVLAN90.TheSPANtrafficfromportF0/14isreflectedtoVLAN90
(TheRSPANVLAN)andthenforwardedoverthetrunktoportF0/18anRSPAN
destination.
Task 28
ConfigurethehostnameofthethirdswitchtobeCat3.
OnthethirdSwitch
Switch(config)#HostnameCat3
Task29
ConfigureportsF0/21andF0/22on Cat3andCat1astrunklinksusinganindustry
standardprotocol,theselinksshouldappeartoSTPasasinglelink.Ifoneofthelinks
fails,thetrafficshouldusetheotherlinkwithoutanyinterruption.
EtherChannelsprovidethefollows:
Faulttolerant,highspeedlinksbetweenswitchesandrouters.
EtherChannelprovidesanautomaticrecoveryforthelossofalinkby
redistributingthetrafficacrosstheremaininglink/s.
STPwillnotblockoneofthelinksinthebundlebecausetoSTP,thebundlelooks
likeasinglelink.
Upto8linkscanbecombinedtoprovidemorebandwidth.
Thelinkswithinthebundlemusthavethesamecharacteristicssuchasduplexing,
speedandetc.
EtherChannelcanbeconfiguredaslayer2orlayer3.
WithLayer3,alogicalinterface(PortChannel)isstaticallyconfiguredandall
Layer3configurationsareperformedunderthatinterface.
WithLayer2,thelogicalinterfaceiscreatedautomatically.
WithbothLayer2andLayer3,physicalinterfacesmustbemanuallyassignedto
thelogicalinterfaceusingchannelgroupconfigurationcommand.
EtherChannelscanbeconfiguredautomaticallyusingPortaggregationprotocol
(PAgP)orLinkAggregationprotocol(LACP).
PAgPisaCiscoproprietaryprotocol,whereasLACPisanindustrystandard
www.ccieuniversity.com
IEEE802.3adprotocol.
SwitchescanbeconfiguredtousePAgPbyconfiguringtheminAUTOor
DESIRABLEmode.
SwitchescanbeconfiguredtouseLACPbyconfiguringtheminACTIVEor
PASSIVEmode.
IftheswitchesareconfiguredinONmode,theywillnotexchangeLACPor
PAgPpackets.
Thereare5modesthattheswitchescanbeconfiguredin:
ONForcestheinterfaceintoanEtherChannelwithoutPAgPorLACPpackets,
bothswitchesmustbeconfiguredinONmodefortheEtherChanneltobe
established.
ACTIVEUsedinLACP,theswitcheswillactivelynegotiateanEtherChannel
link.
PASSIVEUsedinLACP,itplacestheinterfaceinapassivenegotiationmode
whereitonlyrespondstoLACPpacketsthatitreceives.Inthismodetheswitch
willnotstartthenegotiationprocessthissettingminimizesthetransmissionof
LACPpackets.
AUTOUsedinPAgP,itplacestheinterfaceinapassivenegotiationmodeIt
onlyrespondstoPAgPpacketsthatitreceives.Inthismodetheswitchwillnot
startthenegotiationprocessthissettingminimizesthetransmissionofPAgP
packets.
DESIRABLEUsedinPAgP,theswitcheswillactivelynegotiatean
EtherChannellink.
ThefollowingtableisveryimportantwhenconfiguringEtherChannels:
Switchoneisconfiguredas Switchtwoisconfiguredas WillanEtherChannel
beestablished?
Desirable
Desirable
YES
Desirable
Auto
YES
Auto
Auto
NO
Active
Active
YES
Active
Passive
YES
Passive
Passive
NO
BeforeconfiguringEtherChannel,youshouldchecktoensurethattheinterfacesare
configuredwiththesamecharacteristics.
On Cat1andSwitch3
(config)#Intrangef0/2122
www.ccieuniversity.com
(configifrange)#Switchporttrunkencapdot1q
(configifrange)#Switchportmodetrunk
(configifrange)#Channelgroup1mode on
(configifrange)#noshut
Notetheswitchwilldisplaythefollowingmessagethatthelogicalinterfacewillbe
created.
CreatingaportchannelinterfacePortchannel1
Toverifytheconfiguration:
On Cat1
Cat1#Showinttrunk
Port
ModeEncapsulationStatusNativevlan
Fa0/19on802.1qtrunking112
Fa0/20on802.1qtrunking112
Po1on802.1qtrunking1
PortVlansallowedontrunk
Fa0/19129,334094
Fa0/20129,334094
Po114094
PortVlansallowedandactiveinmanagementdomain
Fa0/19 1,3,12,34,56,90
Fa0/20 1,3,12,34,56,90
Po1
1,3,12,3032,34,56,90
PortVlansinspanningtreeforwardingstateandnotpruned
Fa0/191,3,12,34,90
Fa0/201,56
Po11,3,12,3032,34,56,90
OnCat3
Cat3#Shinttrunk
PortModeEncapsulationStatusNativevlan
Po1
on802.1qtrunking1
PortVlansallowedontrunk
www.ccieuniversity.com
Po114094
PortVlansallowedandactiveinmanagementdomain
Po11
PortVlansinspanningtreeforwardingstateandnotpruned
Po1
1
On Cat1
Cat1#Showspanningtreeintf0/21
MstInstanceRoleStsCostPrio.NbrType
MST00DesgFWD100000128.616P2pBound(STP)
MST01BounFWD100000128.616P2pBound(STP)
MST02BounFWD100000128.616P2pBound(STP)
Cat1#Showspanningtreeintf0/22
MstInstanceRoleStsCostPrio.NbrType
MST00DesgFWD100000128.616P2pBound(STP)
MST01BounFWD100000128.616P2pBound(STP)
MST02BounFWD100000128.616P2pBound(STP)
OnCat3
Cat3#Showspanningtreeintf0/21
VlanRoleStsCostPrio.NbrType
VLAN0001RootFWD12128.65P2p
Cat3#Showspanningtreeintf0/22
Vlan
RoleStsCostPrio.NbrType
VLAN0001RootFWD12128.65P2p
Noteallinterfacesareinforwardingstatebecausetospanningtree,theport
channelappearsasasingleinterface.
Ashowetherchannel1detailcommandcanrevealthattheinterfacesareworking
inthebundle.
www.ccieuniversity.com
Task30
EnsurethattheEtherChannelcreatedinthepreviousstepusesdestinationMAC
addressestoloadbalancethetrafficload.
Loadbalancingcanbedonebasedonthefollowing:
SourceMACaddressPacketsforwardedtoanEtherChannelaredistributedacrossthe
portsinthechannelbasedonthesourceMACaddressoftheincomingpackets.When
sourceMACaddressloadbalancingisenabled,theloaddistributionbasedonthesource
anddestinationIPaddressisalsoenabled
DestinationMACaddressIftheEtherChannelisbetweenarouterandaswitchand
sincetherouterhasasingleMACaddress,destinationbasedloadbalancingisthebest
way.
Toseethedefaultloadbalancing:
On Cat1
Notethedefaultloadbalancingisbasedonthe
SourceMacaddress
Cat1#showetherchannelload
EtherChannelLoadBalancingOperationalState(srcmac):
NonIP:SourceMACaddress
IPv4:SourceMACaddress
IPv6:SourceIPaddress
ToconfiguretheloadbalancingbasedonthedestinationMacaddresses:
On Cat1andCat3
(config)#portchannelloadbalancedstmac
Toverifytheconfiguration:
Cat1#showetherchannelload
EtherChannelLoadBalancingOperationalState(dstmac):
NonIP:DestinationMACaddress
IPv4:DestinationMACaddress
IPv6:DestinationIPaddress
www.ccieuniversity.com
Task31
ErasethestartupconfigurationandVLAN.datbeforeproceedingtothenextlab
www.ccieuniversity.com
Lab1HubnSpokeusingFramerelaymap
statements
R1
FrameRelay
R4
R2
R3
www.ccieuniversity.com
IPaddressingandDLCIinformationChart
Routers
IPaddress
LocalDLCI
Connectingto:
R1sFramerelayinterfaceS0/0
150.1.100.1/24
R2sFramerelayinterfaceS0/0
150.1.100.2/24
R3sFramerelayinterfaceS0/0
150.1.100.3/24
R4sFramerelayinterfaceS0/0
150.1.100.4/24
102
103
104
201
203
204
301
302
304
401
402
403
R2
R3
R4
R1
R3
R4
R1
R2
R4
R1
R2
R3
Task1
ConfigureaframerelayHubandspokeusingframerelaymapstatements.UsetheIP
addressingintheabovechart.
Disableinversearpsuchthattheroutersdonotgenerateinversearprequestpackets,and
ensurethatonlytheassignedDLCIsareused,theseDLCIsshouldbeasfollows:
OnR1:102,103and104shouldbeusedforconnectionstoR2,R3andR4
respectively.
OnR2,R3andR4:DLCIs201,301and401shouldbeusedonR2,R3andR4
respectivelyfortheirconnectiontoR1(Thehub).
InthefutureOSPFroutingprotocolwillberunningontheserouters,ensurethatthe
routerscanhandletheMulticasttrafficgeneratedbytheOSPFroutingprotocol.
www.ccieuniversity.com
OnR1
R1(config)#IntS0/0
R1(configif)#Ipaddress150.1.100.1255.255.255.0
R1(configif)#Encapsulationframe
R1(configif)#Framerelaymapip150.1.100.2102 b
R1(configif)#Framerelaymapip150.1.100.3103 b
R1(configif)#Framerelaymapip150.1.100.4104 b
R1(configif)#Noframerelayinversearp
R1(configif)#Noshut
Toverifytheconfiguration:
OnR1
R1#showframemap
Serial0/0(up):ip0.0.0.0dlci110(0x6E,0x18E0)
broadcast,
CISCO,statusdefined,inactive
Serial0/0(up):ip0.0.0.0dlci109(0x6D,0x18D0)
broadcast,
CISCO,statusdefined,inactive
Serial0/0(up):ip0.0.0.0dlci108(0x6C,0x18C0)
broadcast,
CISCO,statusdefined,inactive
Serial0/0(up):ip0.0.0.0dlci107(0x6B,0x18B0)
broadcast,
CISCO,statusdefined,inactive
Serial0/0(up):ip0.0.0.0dlci106(0x6A,0x18A0)
broadcast,
CISCO,statusdefined,inactive
Serial0/0(up):ip0.0.0.0dlci105(0x69,0x1890)
broadcast,
CISCO,statusdefined,inactive
Serial0/0(up):ip150.1.100.2dlci102(0x66,0x1860),static,
broadcast,
CISCO,statusdefined,inactive
Serial0/0(up):ip150.1.100.3dlci103(0x67,0x1870),static,
broadcast,
CISCO,statusdefined,inactive
Serial0/0(up):ip150.1.100.4dlci104(0x68,0x1880),static,
broadcast,
CISCO,statusdefined,inactive
www.ccieuniversity.com
NoteDLCIs105,106,107,108,109and110aremappedto0.0.0.0IPaddress,these
maynotaffectUnicasttraffic,butitcanaffectMulticastand/orBroadcasttraffic,
therefore,theyshouldberemovedfromthemappingtable.Theclearframerelay
inarpcommandcanbeused,butitmaynotclearthetable,whereassavingthe
configurationandthenreloadingtherouterwilldefinitelyclearthe0.0.0.0
mappings.
OnR1
R1#Wr
R1#Reload
R1#Showframemap
Serial0/0(up):ip150.1.100.2dlci102(0x66,0x1860),static,
broadcast,
CISCO,statusdefined,inactive
Serial0/0(up):ip150.1.100.3dlci103(0x67,0x1870),static,
broadcast,
CISCO,statusdefined,inactive
Serial0/0(up):ip150.1.100.4dlci104(0x68,0x1880),static,
broadcast,
CISCO,statusdefined,inactive
OnR2
R2(config)#IntS0/0
R2(configif)#Ipaddress150.1.100.2255.255.255.0
R2(configif)#Encapsulationframe
R2(configif)#Framerelaymapip150.1.100.1 201b
R2(configif)#Noframerelayinversearp
R2(configif)#Noshut
Toverifytheconfiguration:
OnR2
R2#Ping150.1.100.1
Typeescapesequencetoabort.
Sending5,100byteICMPEchosto150.1.100.1,timeoutis2seconds:
!!!!!
Successrateis100percent(5/5),roundtripmin/avg/max=56/56/60ms
www.ccieuniversity.com
R2#Showframemap
Serial0/0(up):ip150.1.100.1dlci201(0xC9,0x3090),static,
broadcast,
CISCO,statusdefined,active
OnR3
R3(config)#IntS0/0
R3(configif)#Ipaddress150.1.100.3255.255.255.0
R3(configif)#Encapsulationframe
R3(configif)#Framerelaymapip150.1.100.1301b
R3(configif)#Noframerelayinversearp
R3(configif)#Noshut
Toverifytheconfiguration:
OnR3
R3#Ping150.1.100.1
Typeescapesequencetoabort.
Sending5,100byteICMPEchosto150.1.100.1,timeoutis2seconds:
!!!!!
Successrateis100percent(5/5),roundtripmin/avg/max=56/56/60ms
R3#Showframemap
Serial0/0(up):ip150.1.100.1dlci301(0x12D,0x48D0),static,
broadcast,
CISCO,statusdefined,active
OnR4
R4(config)#IntS0/0
R4(config)#Ipaddress150.1.100.4255.255.255.0
R4(config)#Encapsulationframe
R4(config)#Framerelaymapip150.1.100.1401b
R4(config)#Noframerelayinversearp
R4(config#Noshut
www.ccieuniversity.com
Toverifytheconfiguration:
OnR4
R4#Showframemap
Serial0/0(up):ip150.1.100.1dlci401(0x191,0x6410),static,
broadcast,
CISCO,statusdefined,inactive
R4#Ping150.1.100.1
Typeescapesequencetoabort.
Sending5,100byteICMPEchosto150.1.100.1,timeoutis2seconds:
!!!!!
Successrateis100percent(5/5),roundtripmin/avg/max=56/57/60ms
Task2
EnsurethateveryroutercanpingeveryIPaddressconnectedtothecloud.
Ensurethatthehub routerdoesnotreceiveredundantroutingtraffic.
OnR1
Totesttheexistingconfiguration:
R1#Ping150.1.100.1
Typeescapesequencetoabort.
Sending5,100byteICMPEchosto150.1.100.1,timeoutis2seconds:
.....
Successrateis0percent(0/5)
Noteinamultipointframerelayconfiguration,twoissuesmustberesolvedbefore
anIPaddresscanbereached:
A. ThedestinationIPaddressmustbeintheroutingtablewithavalidnext
hop.
B. Theremustbeaframerelaymappingtothatdestination.
InthiscasethedestinationIPaddressisintheroutingtable,buttheframerelay
www.ccieuniversity.com
mappingismissing.Configuretheframerelaymappingasfollows:
OnR1
R1(config)#InterfaceS0/0
R1(configif)#Framerelaymapip150.1.100.1102
Toverifytheconfiguration:
OnR1
R1#Showframemap
Serial0/0(up):ip150.1.100.1dlci102(0x66,0x1860),static,
CISCO,statusdefined,active
Serial0/0(up):ip150.1.100.2dlci102(0x66,0x1860),static,
broadcast,
CISCO,statusdefined,active
Serial0/0(up):ip150.1.100.3dlci103(0x67,0x1870),static,
broadcast,
CISCO,statusdefined,active
Serial0/0(up):ip150.1.100.4dlci104(0x68,0x1880),static,
broadcast,
CISCO,statusdefined,active
R1#Ping150.1.100.1
Typeescapesequencetoabort.
Sending5,100byteICMPEchosto150.1.100.1,timeoutis2seconds:
!!!!!
Successrateis100percent(5/5),roundtripmin/avg/max=112/115/124ms
OnR2
R2(configif)#InterfaceS0/0
R2(configif)#Framerelaymapip150.1.100.3201
R2(configif)#Framerelaymapip150.1.100.4201
R2(configif)#Framerelaymapip150.1.100.2201
Toverifytheconfiguration:
OnR2
R2#Ping150.1.100.2
www.ccieuniversity.com
Typeescapesequencetoabort.
Sending5,100byteICMPEchosto150.1.100.2,timeoutis2seconds:
!!!!!
Successrateis100percent(5/5),roundtripmin/avg/max=112/114/120ms
OnR3
R3(config)#InterfaceS0/0
R3(configif)#Framerelaymapip150.1.100.2301
R3(configif)#Framerelaymapip150.1.100.4301
R3(configif)#Framerelaymapip150.1.100.3301
Toverifytheconfiguration:
OnR3
R3#Ping150.1.100.3
Typeescapesequencetoabort.
Sending5,100byteICMPEchosto150.1.100.3,timeoutis2seconds:
!!!!!
Successrateis100percent(5/5),roundtripmin/avg/max=112/114/120ms
OnR4
R4(config)#InterfaceS0/0
R4(configif)#Framerelaymapip150.1.100.2401
R4(configif)#Framerelaymapip150.1.100.3401
R4(configif)#Framerelaymapip150.1.100.4401
Notewhenconfiguringtheframerelaymappingfromonespoketoanotherspoke,
thebroadcastargumentshouldnotbeused,ifthiskeywordisused,thehub
routerwillreceiveredundantroutingtraffic.ThiscanbeverifiedbyrunningRIPv2
andperformingadebugipripcommandonthehubrouter.
Toverifytheconfiguration:
OnR4
R4#Ping150.1.100.2
Typeescapesequencetoabort.
Sending5,100byteICMPEchosto150.1.100.2,timeoutis2seconds:
!!!!!
www.ccieuniversity.com
Successrateis100percent(5/5),roundtripmin/avg/max=112/112/116ms
R4#
R4#Ping150.1.100.3
Typeescapesequencetoabort.
Sending5,100byteICMPEchosto150.1.100.3,timeoutis2seconds:
!!!!!
Successrateis100percent(5/5),roundtripmin/avg/max=112/112/116ms
R4#Ping150.1.100.4
Typeescapesequencetoabort.
Sending5,100byteICMPEchosto150.1.100.4,timeoutis2seconds:
!!!!!
Successrateis100percent(5/5),roundtripmin/avg/max=112/113/120ms
OnR3
R3#Ping150.1.100.2
Typeescapesequencetoabort.
Sending5,100byteICMPEchosto150.1.100.2,timeoutis2seconds:
!!!!!
Successrateis100percent(5/5),roundtripmin/avg/max=112/112/116ms
R3#
Task3
ConfiguretherouterssuchthattheLMIstatusinquiriesaresentevery5secondsandFull
StatusLMIrequestsaresentevery 3cyclesinsteadof6.
BydefaultframerelayrouterssendtheirLMIStatusinquiries,every10seconds,
andafullstatusinquiryevery6th cycle(Every60seconds).Thestatusinquiriescan
bechangedusingtheKeepalivecommand,whereastheFramerelaylmi
n391dtecommandcanbeusedtochangetheintervalforthecompletestatus
inquiry.Notethestatusinquiriesaresentevery10seconds,andacompletestatus
inquiryissentevery6thcycleasfollows:
OnR1
R1#Debugframelmi
www.ccieuniversity.com
*Nov2419:59:57.407:Serial0/0(out):StEnq,myseq125,yourseen124,DTEup
*Nov2419:59:57.407:datagramstart=0x3F401ED4,datagramsize=14
*Nov2419:59:57.407:FRencap=0x00010308
*Nov2419:59:57.407:00759501010103027D7C
*Nov2419:59:57.407:
*Nov2419:59:57.411:Serial0/0(in):Status,myseq125,paksize14
*Nov2419:59:57.411:RTIE1,length1,type1
*Nov2419:59:57.411:KAIE3,length2,yourseq125,myseq125
*Nov2420:00:07.407:Serial0/0(out):StEnq,myseq126,yourseen125,DTEup
*Nov2420:00:07.407:datagramstart=0x3F6B0294,datagramsize=14
*Nov2420:00:07.407:FRencap=0x00010308
*Nov2420:00:07.407:00759501010103027E7D
*Nov2420:00:07.407:
*Nov2420:00:07.411:Serial0/0(in):Status,myseq126,paksize14
*Nov 2420:00:07.411:RTIE1,length1,type1
*Nov2420:00:07.411:KAIE3,length2,yourseq126,myseq126
*Nov2420:00:17.407:Serial0/0(out):StEnq,myseq127,yourseen126,DTEup
*Nov2420:00:17.407:datagramstart=0x3F400C14,datagramsize=14
*Nov2420:00:17.407:FRencap=0x00010308
*Nov2420:00:17.407:00759501010103027F7E
*Nov2420:00:17.407:
*Nov2420:00:17.411:Serial0/0(in):Status,myseq127,paksize14
*Nov2420:00:17.411:RTIE1,length1,type1
*Nov2420:00:17.411:KAIE3,length2,yourseq127,myseq127
*Nov2420:00:27.407:Serial0/0(out):StEnq,myseq128,yourseen127,DTEup
*Nov2420:00:27.407:datagramstart=0x3F6AF394,datagramsize=14
*Nov2420:00:27.407:FRencap=0x00010308
*Nov2420:00:27.407:00 75950101010302807F
*Nov2420:00:27.407:
*Nov2420:00:27.411:Serial0/0(in):Status,myseq128,paksize14
*Nov2420:00:27.411:RTIE1,length1,type1
*Nov2420:00:27.411:KAIE3,length2,yourseq128,myseq128
*Nov2420:00:37.407:Serial0/0(out):StEnq,myseq129,yourseen128,DTEup
*Nov2420:00:37.407:datagramstart=0x3F644ED4,datagramsize=14
*Nov2420:00:37.407:FRencap=0x00010308
*Nov2420:00:37.407:00759501010103028180
*Nov2420:00:37.407:
*Nov2420:00:37.411:Serial0/0(in):Status,myseq129,paksize14
*Nov2420:00:37.411:RTIE1,length1,type1
*Nov2420:00:37.411:KAIE3,length2,yourseq129,myseq129
www.ccieuniversity.com
*Nov2420:00:47.407:Serial0/0(out):StEnq,myseq130,yourseen129,DTEup
*Nov2420:00:47.407:datagramstart=0x3F6B03D4,datagramsize=14
*Nov2420:00:47.407:FRencap=0x00010308
*Nov2420:00:47.407:00759501010003028281
*Nov2420:00:47.407:
*Nov2420:00:47.419:Serial0/0(in):Status,myseq130,paksize59
*Nov2420:00:47.419:RTIE1,length1,type0
*Nov2420:00:47.419:KAIE3,length2,yourseq130,myseq130
*Nov2420:00:47.419:PVCIE0x7,length0x3,dlci102,status0x2
*Nov2420:00:47.419:PVCIE0x7,length0x3,dlci103,status0x2
*Nov2420:00:47.419:PVCIE0x7,length0x3,dlci104,status0x2
*Nov2420:00:47.419:PVCIE0x7,length0x3,dlci105,status0x0
*Nov2420:00:47.419:PVCIE0x7,length0x3,dlci106,status0x0
*Nov2420:00:47.423:PVCIE0x7,length0x3,dlci107,status0x0
*Nov2420:00:47.423:PVCIE0x7,length0x3,dlci108,status0x0
*Nov2420:00:47.423:PVCIE0x7,length0x3,dlci109,status0x0
*Nov2420:00:47.423:PVCIE0x7,length0x3,dlci110,status0x0
R1#
Notewhentheswitchreceivesthecompletestatusinquiry,itrespondsbackwithall
theDLCIsthatareconfiguredforthatgivenrouter.
Tochangethesetimers:
Onallrouters
(config)#InterfaceS0/0
(configif)#Keepalive5
(configif)#Framerelaylmin391dte3
Totesttheconfiguration:
Rx#DebugframeLMI
*Nov2420:13:52.411:Serial0/0(out):StEnq,myseq221,yourseen220,DTEup
*Nov2420:13:52.411:datagramstart=0x3F6AEFD4,datagramsize=14
*Nov2420:13:52.411:FRencap=0x00010308
*Nov2420:13:52.411:0075950101 010302DDDC
*Nov2420:13:52.411:
*Nov2420:13:52.415:Serial0/0(in):Status,myseq221,paksize14
*Nov2420:13:52.415:RTIE1,length1,type1
*Nov2420:13:52.415:KAIE3,length2,yourseq221,myseq221
www.ccieuniversity.com
*Nov2420:13:57.411:Serial0/0(out):StEnq,myseq222,yourseen221,DTEup
*Nov2420:13:57.411:datagramstart=0x3F400D54,datagramsize=14
*Nov2420:13:57.411:FRencap=0x00010308
*Nov2420:13:57.411:0075950101 010302DEDD
*Nov2420:13:57.411:
*Nov2420:13:57.415:Serial0/0(in):Status,myseq222,paksize14
*Nov2420:13:57.415:RTIE1,length1,type1
*Nov2420:13:57.415:KAIE3,length2,yourseq222,myseq222
*Nov2420:14:02.411:Serial0/0(out):StEnq,myseq223,yourseen222,DTEup
*Nov2420:14:02.411:datagramstart=0x3F6AF394,datagramsize=14
*Nov2420:14:02.411:FRencap=0x00010308
*Nov2420:14:02.411:0075950101 000302DFDE
*Nov2420:14:02.411:
*Nov2420:14:02.423:Serial0/0(in):Status,myseq223,paksize59
*Nov2420:14:02.423:RTIE1,length1,type0
*Nov2420:14:02.423:KAIE3,length2,yourseq223,myseq223
*Nov2420:14:02.423:PVCIE0x7,length0x3,dlci102,status0x2
*Nov2420:14:02.423:PVCIE0x7,length0x3,dlci103,status0x2
*Nov2420:14:02.423:PVCIE0x7,length0x3,dlci104,status0x2
*Nov2420:14:02.423:PVCIE0x7,length0x3,dlci105,status0x0
*Nov2420:14:02.423:PVCIE0x7,length0x3,dlci106,status0x0
*Nov2420:14:02.427:PVCIE0x7,length0x3,dlci107,status0x0
*Nov2420:14:02.427:PVC IE0x7,length0x3,dlci108,status0x0
*Nov2420:14:02.427:PVCIE0x7,length0x3,dlci109,status0x0
*Nov2420:14:02.427:PVCIE0x7,length0x3,dlci110,status0x0
Noteinitiallytheroutersendsouttwotype1inquiries,andthethirdmessagethat
theroutersendsoutismessagetype0,whichtellstheswitchtorespondwithallthe
DLCIsthatareconfiguredforthatgivenrouter.
Task4
Reconfiguretheroutersinafullmeshconfigurationandtest/verifytheconfiguration.In
thisconfigurationtherouterswillnotberunningaroutingprotocol.
Task5
Erasethestartupconfigurationandreloadtheroutersbeforeproceedingtothenextlab.
www.ccieuniversity.com
Lab2HubnSpokeusingFramerelayPoint
toPointconfiguration
R1
FrameRelay
R4
R2
R3
www.ccieuniversity.com
IPaddressingandDLCIinformationChart
Routers
IPaddress
LocalDLCI
Connectingto:
R1sFramerelayinterface
R2sFramerelayinterface
150.1.12.1/24
150.1.13.1/24
150.1.14.1/24
150.1.12.2/24
R3sFramerelayinterface
150.1.13.3/24
R4sFramerelayinterface
150.1.14.4/24
102
103
104
201
203
204
301
302
304
401
402
403
R2
R3
R4
R1
R3
R4
R1
R2
R4
R1
R2
R3
Task1
ConfiguretheroutersinahubandspokemannerusingtheIPaddressingintheabove
chart.
Disableinversearpsuchthattheroutersdonotgenerateinversearppackets,andensure
thatonlytheassignedDLCIsareused,theseDLCIsshouldbeasfollows:
OnR1:102,103and104shouldbeusedforconnectionstoR2,R3andR4
respectively.
OnR2,R3andR4:DLCIs201,301and401shouldbeusedonR2,R3andR4
respectivelyfortheirconnectiontoR1(Thehub).
TheseroutersshouldbeabletopingeveryIPaddresswithintheirIPaddressspace.
OnR1
R1(config)#InterfaceS0/0
R1(configif)#Encapframe
R1(configif)#Noshut
R1(configif)#Exit
R1(config)#InterfaceS0/0.12pointtopoint
R1(configsubif)#Ipaddress150.1.12.1255.255.255.0
R1(configsubif)#Framerelayinterfacedlci102
R1(configsubif)#Exit
www.ccieuniversity.com
R1(configsubif)#InterfaceS0/0.13pointtopoint
R1(configsubif)#Ipaddress150.1.13.1255.255.255.0
R1(configsubif)#Framerelayinterfacedlci 103
R1(configsubif)#Exit
R1(configsubif)#InterfaceS0/0.14pointtopoint
R1(configsubif)#Ipaddress150.1.14.1255.255.255.0
R1(configsubif)#Framerelayinterfacedlci104
R1(configsubif)#Exit
Toverifytheconfiguration:
OnR1
R1#Showframemap
Serial0/0.12(up):pointtopointdlci,dlci102(0x66,0x1860),broadcast
statusdefined,active
Serial0/0.14(up):pointtopointdlci,dlci104(0x68,0x1880),broadcast
statusdefined,active
Serial0/0.13(up):pointtopointdlci,dlci103(0x67,0x1870),broadcast
statusdefined,active
Notewhenframerelayisconfiguredinapointtopointmanneritsimportantto
understandthefollowingtwobehaviors:
A. Thereisnoneedtodisablesendinginversearppackets,becauseinversearp
isdisabledwhenframerelayisconfiguredinapointtopointmanner.
B. Noneedforframerelaymapping/s,becausetherecanonlybeanotherrouter
ontheotherendofthePVC,therefore,allIPaddresses(Thisincludesthe
localroutersIPaddress)arereachableaslongasthedestinationIPaddress
isintheroutingtablewithavalidnexthopIPaddress.
OnR2
R2(config)#IntS0/0
R2(configif)#Encapframe
R2(configif)#Noshut
R2(configif)#Exit
R2(config)#IntS0/0.21pointtopoint
R2(configsubif)#Ipaddress150.1.12.2255.255.255.0
R2(configsubif)#Framerelayinterfacedlci201
R2(configsubif)#Exit
www.ccieuniversity.com
Toverifyandtesttheconfiguration:
OnR2
R2#Showframemap
Serial0/0.21(up):pointtopointdlci,dlci201(0xC9,0x3090),broadcast
statusdefined,active
R2#Ping150.1.12.1
Typeescapesequencetoabort.
Sending5,100byteICMPEchosto150.1.12.1,timeoutis2seconds:
!!!!!
Successrateis100percent(5/5),roundtripmin/avg/max=56/56/60ms
R2#Ping150.1.12.2
Typeescapesequencetoabort.
Sending5,100byteICMPEchosto150.1.12.2,timeoutis2seconds:
!!!!!
Successrateis100percent(5/5),roundtripmin/avg/max=112/114/120ms
OnR3
R3(config)#IntS0/0
R3(configif)#Encapframe
R3(configif)#Noshut
R3(configif)#Exit
R3(config)#IntS0/0.31pointtopoint
R3(configsubif)#Ipaddress150.1.13.3255.255.255.0
R3(configsubif)#Framerelayinterfacedlci301
Toverifyandtesttheconfiguration:
OnR3
R3#Showframemap
Serial0/0.31(up):pointtopointdlci,dlci 301(0x12D,0x48D0),broadcast
statusdefined,active
R3#Ping150.1.13.1
www.ccieuniversity.com
Typeescapesequencetoabort.
Sending5,100byteICMPEchosto150.1.13.1,timeoutis2seconds:
!!!!!
Successrateis100percent(5/5),roundtripmin/avg/max=56/56/60ms
R3#Ping150.1.13.3
Typeescapesequencetoabort.
Sending5,100byteICMPEchosto150.1.13.3,timeoutis2seconds:
!!!!!
Successrateis100percent(5/5),roundtripmin/avg/max=112/114/120ms
OnR4
R4(config)#IntS0/0
R4(configif)#Encapframe
R4(configif)#Noshut
R4(configif)#Exit
R4(config)#IntS0/0.41pointtopoint
R4(configsubif)#Ipaddress150.1.14.4255.255.255.0
R4(configsubif)#Framerelayinterfacedlci401
Toverifyandtesttheconfiguration:
OnR4
R4#Showframemap
Serial0/0.41(up):pointtopointdlci,dlci 401(0x191,0x6410),broadcast
statusdefined,active
R4#Ping150.1.14.1
Typeescapesequencetoabort.
Sending5,100byteICMPEchosto150.1.14.1,timeoutis2seconds:
!!!!!
Successrateis100percent(5/5),roundtripmin/avg/max=56/56/60ms
R4#Ping150.1.14.4
Typeescapesequencetoabort.
Sending5,100byteICMPEchosto150.1.14.4,timeoutis2seconds:
!!!!!
Successrateis100percent(5/5),roundtripmin/avg/max=112/114/120ms
www.ccieuniversity.com
Task2
ReconfiguretheroutersinafullmeshconfigurationusingtheDLCIsintheIP
addressingandDLCIinformationchart.YoushoulduseanIPaddressingschemeof
yourchoicetoaccomplishthistask.
Task3
Erasethestartupconfigurationandreloadtheroutersbeforeproceedingtothenextlab.
www.ccieuniversity.com
Lab3 MixtureofPointtopointandMultipoint
framerelay
R1
FrameRelay
R4
R2
R3
www.ccieuniversity.com
IPaddressingandDLCIinformationChart
Routers
IPaddress
LocalDLCI
Connectingto:
R1sFramerelayinterface
R2sFramerelayinterface
150.1.123.1/24
150.1.123.1/24
150.1.14.1/24
150.1.123.2/24
R3sFramerelayinterface
150.1.123.3/24
R4sFramerelayinterface
150.1.14.4/24
102
103
104
201
203
204
301
302
304
401
402
403
R2
R3
R4
R1
R3
R4
R1
R2
R4
R1
R2
R3
Task1
Configureframerelayontheroutersasfollows:
R1:
Thisroutershouldbeconfiguredinapointtopointmannerforitsconnectionto
R4usingtheIPaddressingandDLCIinformationintheabovechart.
ThisroutershouldalsobeconfiguredforitsconnectiontoroutersR2andR3
usingtheIPaddressingandtheDLCIinformationintheabovechart.
R2:
ThisroutershouldbeconfiguredusingtheIPaddressingandtheDLCI
informationintheabovechart.Thisroutermustbeconfiguredinapointtopoint
mannerforitsconnectiontoR1.
R3:
ThisroutershouldbeconfiguredusingtheIPaddressingandtheDLCI
informationintheabovechart.ThisroutermustNOTbeconfiguredwithasub
interfaceforitsconnectiontoR1.
R4:
ThisroutershouldbeconfiguredusingtheIPaddressingandtheDLCI
informationintheabovechart.Thisroutermustbeconfiguredinapointtopoint
mannerforitsconnectiontoR1.
Disableinversearpsuchthattheroutersdonotgenerateinversearppackets,andensure
thatonlytheassignedDLCIsfortheirconnection/sareused.
TheseroutersshouldbeabletopingeveryIPaddresswithintheirIPaddressspace.
www.ccieuniversity.com
OnR1
R1(config)#IntS0/0
R1(configif)#Encapframe
R1(configif)#Noshut
R1(configif)#Exit
R1(configsubif)#IntS0/0.123multipoint
R1(configsubif)#Ipaddress150.1.123.1255.255.255.0
R1(configsubif)#Framerelaymapip150.1.123.2102b
R1(configsubif)#Framerelaymapip150.1.123.3103b
R1(configsubif)#Noframerelayinversearp
R1(config)#IntS0/0.14pointtopoint
R1(configsubif)#Ipaddress150.1.14.1255.255.255.0
R1(configsubif)#Framerelayinterfacedlci104
OnR2
R2(config)#IntS0/0
R2(configif)#Encapframe
R2(configif)#Noshut
R2(configif)#Exit
R2(config)#IntS0/0.21pointtopoint
R2(configsubif)#Ipaddress150.1.123.2255.255.255.0
R2(configsubif)#Framerelayinterfacedlci201
Notethereisnoneedtodisablesendinginversearp,becauseitsdisabledbydefault
inapointtopointconfiguration.
Totestandverifytheconfiguration:
OnR2
R2#Showframerelaymap
Serial0/0.21(up):pointtopointdlci,dlci201(0xC9,0x3090),broadcast
statusdefined,active
R2#Ping150.1.123.1
Typeescapesequencetoabort.
Sending5,100byteICMPEchosto150.1.123.1,timeoutis2seconds:
www.ccieuniversity.com
!!!!!
Successrateis100percent(5/5),roundtripmin/avg/max=56/57/60ms
OnR3
R3(config)#IntS0/0
R3(configif)#Encapframe
R3(configif)#Ipaddress150.1.123.3255.255.255.0
R3(configif)#Framerelaymapip150.1.123.1301b
R3(configif)#Framerelaymapip150.1.123.2301
R3(configif)#Framerelaymapip150.1.123.3301
R3(configif)#Noframerelayinversearp
R3(configif)#Noshut
Toverifyandtesttheconfiguration:
OnR3
R3#Showframemap
Serial0/0(up):ip150.1.123.1dlci301(0x12D,0x48D0),static,
broadcast,
CISCO,statusdefined,active
Serial0/0(up):ip150.1.123.2dlci301(0x12D,0x48D0),static,
CISCO,statusdefined,active
Serial0/0(up):ip150.1.123.3dlci301(0x12D,0x48D0),static,
CISCO,statusdefined,active
R3#Ping150.1.123.2
Typeescapesequencetoabort.
Sending5,100byteICMPEchosto150.1.123.2,timeoutis2seconds:
!!!!!
Successrateis100percent(5/5),roundtripmin/avg/max=112/113/116ms
R3#Ping150.1.123.3
Typeescapesequencetoabort.
Sending5,100byteICMPEchosto150.1.123.3,timeoutis2seconds:
!!!!!
Successrateis100percent(5/5),roundtripmin/avg/max=112/114/120ms
R3#Ping150.1.123.1
Typeescapesequencetoabort.
www.ccieuniversity.com
Sending5,100byteICMPEchosto150.1.123.1,timeoutis2seconds:
!!!!!
Successrateis100percent(5/5),roundtripmin/avg/max=56/56/60ms
OnR4
R4(config)#IntS0/0
R4(configif)#Encapframe
R4(configif)#Noshut
R4(configif)#Exit
R4(config)#IntS0/0.41pointtopoint
R4(configsubif)#Ipaddress150.1.14.4255.255.255.0
R4(configsubif)#Framerelayinterfacedlci401
Toverifyandtesttheconfiguration:
OnR4
R4#Showframemap
Serial0/0.41(up):pointtopointdlci,dlci401(0x191,0x6410),broadcast
statusdefined,active
R4#Ping150.1.14.1
Typeescapesequencetoabort.
Sending5,100byteICMPEchosto150.1.14.1,timeoutis2seconds:
!!!!!
Successrateis100percent(5/5),roundtripmin/avg/max=56/56/60ms
R4#Ping150.1.14.4
Typeescapesequencetoabort.
Sending5,100byteICMPEchosto150.1.14.4,timeoutis2seconds:
!!!!!
Successrateis100percent(5/5),roundtripmin/avg/max=112/114/120ms
Task2
Erasethestartupconfigurationandreloadtheroutersbeforeproceedingtothenextlab.
www.ccieuniversity.com
Lab1PrefixLists
R1
R2
.1
.2
10.1.12.0/24
LabSetup:
TheF0/0interfaceofR1andR2shouldbeconfiguredinVLAN12.
ConfigureRIPv2onbothrouters,thesetworoutersshouldadvertisetheirdirectly
connectedinterfacesensurethatautomaticsummarizationisdisabled.
IPAddressing:
Routers
Interface/IPaddress
R1
F0/0=10.1.12.1/24
Lo0=1.1.1.1/8
Lo1=2.2.2.2/8
Lo2=3.3.3.3/8
Lo3=125.1.1.1/8
Lo4=128.1.1.1/16
Lo5=131.1.1.1/16
Lo6=191.1.1.1/16
Lo7=192.1.1.1/24
Lo8=195.1.1.1/24
Lo9=200.1.1.1/24
Lo10=223.1.1.1/24
Lo11=4.4.4.4/16
Lo12=5.5.5.5/24
Lo13=6.6.6.6/26
Lo14=132.1.1.1/24
Lo15=133.1.1.1/25
Lo16=193.1.1.1/25
Lo17=194.1.1.1/26
F0/0=10.1.12.2/24
R2
www.ccieuniversity.com
Task1
ConfigureR2suchthatONLYNetwork194.1.1.0/27isallowedinR2sroutingtable.
OnR2
R2(config)#ipprefixlistNet194seq5permit194.1.1.0/27
R2(config)#routerrip
R2(configrouter)#distributelistprefixNet194inf0/0
R2#cleariproute*
R2#Shiprouterip
194.1.1.0/27issubnetted,1subnets
R194.1.1.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
NotetheIPPrefixlistonlyallowsnetwork194.1.1.0/26anddeniestherestofthe
networksinthroughitsF0/0interface.
Task2
Removethecommandsfromtheprevioustaskandensurethatallthenetworksarein
R2sroutingtable.
OnR2
R2(config)#NoipprefixlistNet194seq5permit194.1.1.0/27
R2(config)#routerrip
R2(configrouter)#Nodistributelistprefix Net194inf0/0
Toverifytheconfiguration:
OnR2
R2#Showiprouterip
R1.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R2.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R3.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
www.ccieuniversity.com
R223.1.1.0/24[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
4.0.0.0/16issubnetted,1subnets
R4.4.0.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R191.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
5.0.0.0/24issubnetted,1subnets
R5.5.5.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R200.1.1.0/24[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
6.0.0.0/27issubnetted,1subnets
R6.6.6.0[120/1]via10.1.12.1,00:00:03, FastEthernet0/0
R128.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R125.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R131.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
193.1.1.0/25issubnetted,1subnets
R193.1.1.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
132.1.0.0/24issubnetted,1subnets
R132.1.1.0[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
R192.1.1.0/24[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
133.1.0.0/25issubnetted,1subnets
R133.1.1.0[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
R195.1.1.0/24[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
194.1.1.0/27issubnetted,1subnets
R194.1.1.0[120/1]via10.1.12.1,00:00:06,FastEthernet0/0
Task3
ConfigureR2suchthatitonlyallowsClassAnetworksthatarenotsubnetted.
OnR2
R2(config)#ipprefixlistClassAseq5permit0.0.0.0/1ge8le8
R2(config)#routerrip
R2(configrouter)#distributelistprefixClassAinf0/0
R2#Cleariproute*
Toverifytheconfiguration:
OnR2
R2#Showiprouterip
www.ccieuniversity.com
R1.0.0.0/8[120/1]via10.1.12.1,00:00:01,FastEthernet0/0
R2.0.0.0/8[120/1]via10.1.12.1,00:00:01,FastEthernet0/0
R3.0.0.0/8[120/1]via10.1.12.1,00:00:01,FastEthernet0/0
R125.0.0.0/8[120/1]via10.1.12.1,00:00:01,FastEthernet0/0
ClassAnetworkareidentifiedasfollows:
Wherenidentifiesthenetworkbitsandhidentifiesthehostbits.
0nnnnnnnhhhhhhhhhhhhhhhhhhhhhhhh
Firstbitissetto0Thereforethereare7networkbits24hostbits
Initialbyte:0 127
126ClassAsexist(0and127arereserved)
16,777,214hostsoneachClassA
Notethemostsignificantbitofthefirstoctetissettoabinary0,therestofthe
bitsinthefirstoctetcanbezerosorones,therefore,ifthemostsignificantbitofthe
firstoctetis0itmustbeclassA.Theprefixlistpicksonthefirstbitbyusinga
/1prefixlength.
Task4
Removethecommandsfromtheprevioustaskandensurethatallthenetworksarein
R2sroutingtable.
OnR2
R2(config)#NoipprefixlistClassAseq5permit0.0.0.0/1ge8le8
R2(config)#routerrip
R2(configrouter)#NodistributelistprefixClassAinf0/0
R2#Cleariproute*
Toverifytheconfiguration:
OnR2
R2#Showiprouterip
R1.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R2.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
www.ccieuniversity.com
R3.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R223.1.1.0/24 [120/1]via10.1.12.1,00:00:03,FastEthernet0/0
4.0.0.0/16issubnetted,1subnets
R4.4.0.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R191.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
5.0.0.0/24issubnetted,1subnets
R5.5.5.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R200.1.1.0/24[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
6.0.0.0/27issubnetted,1subnets
R6.6.6.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R128.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R125.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R131.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
193.1.1.0/25issubnetted,1subnets
R193.1.1.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
132.1.0.0/24issubnetted,1subnets
R132.1.1.0[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
R192.1.1.0/24[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
133.1.0.0/25issubnetted,1 subnets
R133.1.1.0[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
R195.1.1.0/24[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
194.1.1.0/27issubnetted,1subnets
R194.1.1.0[120/1]via10.1.12.1,00:00:06,FastEthernet0/0
Task5
ConfigureR2suchthatitonlyallowsClassBnetworksthatarenotsubnetted.
OnR2
R2(config)#ipprefixlistClassBseq5permit128.0.0.0/2ge16le16
R2(config)#routerrip
R2(configrouter)#distributelistprefixClassBinf0/0
R2#Cleariproute*
Toverifytheconfiguration:
OnR2
R2#Showiprouterip
www.ccieuniversity.com
R191.1.0.0/16[120/1]via10.1.12.1,00:00:05,FastEthernet0/0
R128.1.0.0/16[120/1]via10.1.12.1,00:00:05,FastEthernet0/0
R131.1.0.0/16[120/1]via10.1.12.1,00:00:05,FastEthernet0/0
10nnnnnnnnnnnnnnhhhhhhhhhhhhhhhh
Firsttwobitsaresetto10therefore,thereare14networkbitsleft
toidentifythenetworksandtheremaining16bitsidentifythehost
bits.
Initialbyte:128 191
16,384ClassBsexist
65,532hostsoneachClassB
Notethefirst&secondmostsignificantbitsofthefirstoctetissettoabinary10,
sincethefirsttwooctetsarereservedfornetworks,therestofthebitsinthefirst&
secondoctetcanbezerosorones,therefore,if thetwomostsignificantbitsofthe
firstoctetis10itmustbeclassB.Theprefixlistpicksonthefirsttwobitsby
usinga/2prefixlength,withanetworkaddressof128.0.0.0.Sincethetaskstates
thatitshouldONLYallowclassBnetworksthatareNOTsubnetted,theprefix
lengthspecifiesGE16andLE16.
Task6
Removethecommandsfromtheprevioustaskandensurethatallthenetworksarein
R2sroutingtable.
OnR2
R2(config)#NoipprefixlistClassBseq5permit128.0.0.0/2ge16le16
R2(config)#routerrip
R2(configrouter)#NodistributelistprefixClassBinf0/0
R2#Cleariproute*
Toverifytheconfiguration:
OnR2
R2#Showiprouterip
www.ccieuniversity.com
R1.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R2.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R3.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R223.1.1.0/24[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
4.0.0.0/16issubnetted,1subnets
R4.4.0.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R191.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
5.0.0.0/24issubnetted,1subnets
R5.5.5.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R200.1.1.0/24[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
6.0.0.0/27issubnetted,1subnets
R6.6.6.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R128.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R125.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R131.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
193.1.1.0/25issubnetted,1subnets
R193.1.1.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
132.1.0.0/24issubnetted,1subnets
R132.1.1.0[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
R192.1.1.0/24[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
133.1.0.0/25issubnetted,1subnets
R133.1.1.0[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
R195.1.1.0/24[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
194.1.1.0/27issubnetted,1subnets
R194.1.1.0[120/1]via10.1.12.1,00:00:06,FastEthernet0/0
Task7
ConfigureR2suchthatitonlyallowsClassCnetworksthatarenotsubnetted.
OnR2
R2(config)#ipprefixlistClassCpermit192.0.0.0/3ge24le24
R2(config)#routerrip
R2(configrouter)#distributelistprefixClassCinf0/0
R2#Cleariproute*
Toverifytheconfiguration:
OnR2
www.ccieuniversity.com
R2#Shiprouterip
R223.1.1.0/24[120/1]via10.1.12.1,00:00:07,FastEthernet0/0
R 200.1.1.0/24[120/1]via10.1.12.1,00:00:07,FastEthernet0/0
R192.1.1.0/24[120/1]via10.1.12.1,00:00:07,FastEthernet0/0
R195.1.1.0/24[120/1]via10.1.12.1,00:00:07,FastEthernet0/0
110nnnnnnnnnnnnnnnnnnnnnhhhhhhhh
Firstthreebitsof thefirstoctetisreservedas110Sincethefirst
threeoctetsbelongtonetworks,thereare21networkbitsleftto
identifythenetworksthereforetheremaining8bitsidentifythehost
bits
Initialbyte:192 223
2,097,152ClassCsexist
254hostsoneachClassC
Task8
Removethecommandsfromtheprevioustaskandensurethatallthenetworksarein
R2sroutingtable.
OnR2
R2(config)#NoipprefixlistClassCseq5permit192.0.0.0/3ge24le24
R2(config)#routerrip
R2(configrouter)#NodistributelistprefixClassCinf0/0
R2#Cleariproute*
Toverifytheconfiguration:
OnR2
R2#Showiprouterip
R1.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R2.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R 3.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
www.ccieuniversity.com
R223.1.1.0/24[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
4.0.0.0/16issubnetted,1subnets
R4.4.0.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R191.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
5.0.0.0/24issubnetted,1subnets
R5.5.5.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R200.1.1.0/24[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
6.0.0.0/27issubnetted,1 subnets
R6.6.6.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R128.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R125.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R131.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
193.1.1.0/25issubnetted,1subnets
R193.1.1.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
132.1.0.0/24issubnetted,1subnets
R132.1.1.0[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
R192.1.1.0/24[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
133.1.0.0/25issubnetted,1subnets
R133.1.1.0[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
R195.1.1.0/24[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
194.1.1.0/27issubnetted,1 subnets
R194.1.1.0[120/1]via10.1.12.1,00:00:06,FastEthernet0/0
Task9
ConfigureR2suchthatitonlyallowsClassAnetworksthatareorarenotsubnetted.
OnR2
R2(config)#ipprefixlistClassAseq5permit0.0.0.0/1ge8le32
R2(config)#routerrip
R2(configrouter)#distributelistprefixClassAinf0/0
R2#Cleariproute*
Toverifytheconfiguration:
OnR2
R2#Showiprouterip
www.ccieuniversity.com
R1.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R2.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R3.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
4.0.0.0/16issubnetted,1subnets
R4.4.0.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
5.0.0.0/24issubnetted,1subnets
R5.5.5.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
6.0.0.0/27issubnetted,1subnets
R6.6.6.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R125.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
NoteinthiscasetheprefixlistpicksonclassA,withaprefixlengthofgreaterthan
orequal8andlessthanorequal32,whichmeansthatallclassAplusallclassA
networksthataresubnetted.
Task10
Removethecommandsfromtheprevioustaskandensurethatallthenetworksarein
R2sroutingtable.
OnR2
R2(config)#NoipprefixlistClassAseq5permit0.0.0.0/1ge8le32
R2(config)#routerrip
R2(configrouter)#NodistributelistprefixClassAinf0/0
R2#Cleariproute*
Toverifytheconfiguration:
OnR2
R2#Showiprouterip
R1.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R2.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R3.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R223.1.1.0/24[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
4.0.0.0/16issubnetted,1subnets
R4.4.0.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
www.ccieuniversity.com
R191.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
5.0.0.0/24issubnetted,1subnets
R5.5.5.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R200.1.1.0/24[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
6.0.0.0/27issubnetted,1subnets
R6.6.6.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R128.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R125.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R131.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
193.1.1.0/25issubnetted,1subnets
R193.1.1.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
132.1.0.0/24issubnetted,1subnets
R132.1.1.0[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
R192.1.1.0/24[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
133.1.0.0/25issubnetted,1subnets
R133.1.1.0[120/1] via10.1.12.1,00:00:04,FastEthernet0/0
R195.1.1.0/24[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
194.1.1.0/27issubnetted,1subnets
R194.1.1.0[120/1]via10.1.12.1,00:00:06,FastEthernet0/0
Task11
ConfigureR2suchthatitonlyallowsClassBnetworksthatareorarenotsubnetted.
OnR2
R2(config)#ipprefixlistClassBseq5permit128.0.0.0/2ge16le32
R2(config)#routerrip
R2(configrouter)#distributelistprefixClassBinf0/0
R2#Cleariproute*
R2#Shiproute rip
R191.1.0.0/16[120/1]via10.1.12.1,00:00:05,FastEthernet0/0
R128.1.0.0/16[120/1]via10.1.12.1,00:00:05,FastEthernet0/0
R131.1.0.0/16[120/1]via10.1.12.1,00:00:05,FastEthernet0/0
132.1.0.0/24issubnetted,1subnets
R
132.1.1.0[120/1]via10.1.12.1,00:00:05,FastEthernet0/0
133.1.0.0/25issubnetted,1subnets
R133.1.1.0[120/1]via10.1.12.1,00:00:05,FastEthernet0/0
www.ccieuniversity.com
Task12
Removethecommandsfromtheprevioustaskandensurethatallthenetworksarein
R2sroutingtable.
OnR2
R2(config)#NoipprefixlistClassBseq5permit128.0.0.0/2ge16le32
R2(config)#routerrip
R2(configrouter)#NodistributelistprefixClassBinf0/0
R2#Cleariproute*
Toverifytheconfiguration:
OnR2
R2#Showiprouterip
R1.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R2.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R3.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R223.1.1.0/24[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
4.0.0.0/16issubnetted,1subnets
R4.4.0.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R191.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
5.0.0.0/24issubnetted,1subnets
R5.5.5.0[120/1] via10.1.12.1,00:00:03,FastEthernet0/0
R200.1.1.0/24[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
6.0.0.0/27issubnetted,1subnets
R6.6.6.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R128.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R125.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R131.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
193.1.1.0/25issubnetted,1subnets
R193.1.1.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
132.1.0.0/24issubnetted,1subnets
R132.1.1.0[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
R192.1.1.0/24[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
133.1.0.0/25issubnetted,1subnets
R133.1.1.0[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
R195.1.1.0/24[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
194.1.1.0/27issubnetted,1subnets
R194.1.1.0[120/1]via10.1.12.1,00:00:06,FastEthernet0/0
www.ccieuniversity.com
Task13
ConfigureR2suchthatitonly allowsClassCnetworksthatareorarenotsubnetted.
OnR2
R2(config)#ipprefixlistClassCseq5permit192.0.0.0/3ge24le32
R2(config)#Routerrip
R2(configrouter)#distributelistprefixClassCinf0/0
R2#cleariproute*
Toverifytheconfiguration:
OnR2
R2#Showiprouterip
R223.1.1.0/24[120/1]via10.1.12.1,00:00:05,FastEthernet0/0
R200.1.1.0/24[120/1]via10.1.12.1,00:00:05,FastEthernet0/0
193.1.1.0/25issubnetted,1subnets
R193.1.1.0[120/1]via10.1.12.1,00:00:05,FastEthernet0/0
R192.1.1.0/24[120/1]via10.1.12.1,00:00:05,FastEthernet0/0
R195.1.1.0/24[120/1]via10.1.12.1,00:00:05,FastEthernet0/0
194.1.1.0/27issubnetted,1subnets
R194.1.1.0[120/1]via10.1.12.1,00:00:05,FastEthernet0/0
Task14
Removethecommandsfromtheprevioustaskandensurethatallthenetworksarein
R2sroutingtable.
OnR2
R2(config)#NoipprefixlistClassCseq5permit192.0.0.0/3ge24le32
R2(config)#routerrip
R2(configrouter)#NodistributelistprefixClassCinf0/0
R2#Cleariproute*
www.ccieuniversity.com
Toverifytheconfiguration:
OnR2
R2#Showiprouterip
R1.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R2.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R3.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R223.1.1.0/24[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
4.0.0.0/16issubnetted,1subnets
R4.4.0.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R191.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
5.0.0.0/24issubnetted,1subnets
R5.5.5.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R200.1.1.0/24[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
6.0.0.0/27issubnetted,1subnets
R
6.6.6.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R128.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R125.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R131.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
193.1.1.0/25issubnetted,1subnets
R193.1.1.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
132.1.0.0/24issubnetted,1subnets
R132.1.1.0[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
R192.1.1.0/24[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
133.1.0.0/25issubnetted,1subnets
R133.1.1.0[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
R195.1.1.0/24[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
194.1.1.0/27issubnetted,1subnets
R
194.1.1.0[120/1]via10.1.12.1,00:00:06,FastEthernet0/0
Task15
ConfigureR2suchthatitonlyallowsnetworkswithaprefixlengthof25orgreaterinits
routingtable.
OnR2
R2(config)#ipprefixlistTSTseq5permit0.0.0.0/0ge25
R2(config)#routerrip
www.ccieuniversity.com
R2(configrouter)#distributelistprefixTSTinf0/0
R2#Cleariproute*
Noteinthiscasethecombinationofthepermit0.0.0.0/0andthege25tellsthe
routerthatanynetworkthathasaprefixlengthof25orgreaterisapermitted.
Toverifytheconfiguration:
OnR2
R2#Shiprouterip
6.0.0.0/27issubnetted,1subnets
R6.6.6.0[120/1]via10.1.12.1,00:00:06,FastEthernet0/0
193.1.1.0/25issubnetted,1subnets
R193.1.1.0[120/1]via10.1.12.1,00:00:06,FastEthernet0/0
133.1.0.0/25issubnetted,1subnets
R133.1.1.0[120/1]via10.1.12.1,00:00:06,FastEthernet0/0
194.1.1.0/27issubnetted,1subnets
R194.1.1.0[120/1]via10.1.12.1,00:00:06,FastEthernet0/0
Task16
Removethecommandsfromtheprevioustaskandensurethatallthenetworksarein
R2sroutingtable.
OnR2
R2(config)#NoipprefixlistTSTseq5permit0.0.0.0/0ge25
R2(config)#routerrip
R2(configrouter)#NodistributelistprefixTSTinf0/0
R2#Cleariproute*
Toverifytheconfiguration:
OnR2
R2#Showiprouterip
www.ccieuniversity.com
R1.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R2.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R3.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R223.1.1.0/24[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
4.0.0.0/16issubnetted,1subnets
R4.4.0.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R191.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
5.0.0.0/24issubnetted,1subnets
R5.5.5.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R200.1.1.0/24[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
6.0.0.0/27issubnetted,1subnets
R6.6.6.0[120/1]via10.1.12.1,00:00:03, FastEthernet0/0
R128.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R125.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R131.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
193.1.1.0/25issubnetted,1subnets
R193.1.1.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
132.1.0.0/24issubnetted,1subnets
R132.1.1.0[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
R192.1.1.0/24[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
133.1.0.0/25issubnetted,1subnets
R133.1.1.0[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
R195.1.1.0/24[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
194.1.1.0/27issubnetted,1subnets
R194.1.1.0[120/1]via10.1.12.1,00:00:06,FastEthernet0/0
Task17
ConfigureR2suchthatitonlyallowsnetworkswithaprefixlengthof16orlessinits
routingtable.
OnR2
R2(config)#ipprefixlistTSTseq5permit0.0.0.0/0le16
R2(config)#routerrip
R2(configrouter)#distributelistprefixTSTinf0/0
R2#Cleariproute*
Noteinthiscasethecombinationofthepermit0.0.0.0/0andthele16tellsthe
routerthatanynetworkthathasaprefixlengthof16orlessisapermitted.
www.ccieuniversity.com
Toverifytheconfiguration:
OnR2
R2#Shiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPF externaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
R1.0.0.0/8[120/1]via10.1.12.1,00:00:08,FastEthernet0/0
R2.0.0.0/8[120/1]via10.1.12.1,00:00:08,FastEthernet0/0
R3.0.0.0/8[120/1]via10.1.12.1,00:00:08,FastEthernet0/0
4.0.0.0/16issubnetted,1subnets
R4.4.0.0[120/1]via10.1.12.1,00:00:08,FastEthernet0/0
R191.1.0.0/16[120/1]via10.1.12.1,00:00:08,FastEthernet0/0
R128.1.0.0/16[120/1]via10.1.12.1,00:00:08,FastEthernet0/0
10.0.0.0/24issubnetted,1subnets
C10.1.12.0isdirectlyconnected,FastEthernet0/0
R125.0.0.0/8[120/1]via10.1.12.1,00:00:09,FastEthernet0/0
R131.1.0.0/16[120/1]via10.1.12.1,00:00:09,FastEthernet0/0
Task18
Removethecommandsfromtheprevioustaskandensurethatallthenetworksarein
R2sroutingtable.
OnR2
R2(config)#NoipprefixlistTSTseq5permit0.0.0.0/0le16
R2(config)#routerrip
R2(configrouter)#NodistributelistprefixTSTinf0/0
R2#Cleariproute*
www.ccieuniversity.com
Toverifytheconfiguration:
OnR2
R2#Showiprouterip
R1.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R2.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R3.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R223.1.1.0/24[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
4.0.0.0/16issubnetted,1subnets
R4.4.0.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R191.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
5.0.0.0/24issubnetted,1subnets
R5.5.5.0[120/1]via10.1.12.1,00:00:03, FastEthernet0/0
R200.1.1.0/24[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
6.0.0.0/27issubnetted,1subnets
R6.6.6.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R128.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R 125.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R131.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
193.1.1.0/25issubnetted,1subnets
R193.1.1.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
132.1.0.0/24issubnetted,1subnets
R132.1.1.0[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
R192.1.1.0/24[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
133.1.0.0/25issubnetted,1subnets
R133.1.1.0[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
R195.1.1.0/24[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
194.1.1.0/27issubnetted,1subnets
R194.1.1.0[120/1]via10.1.12.1,00:00:06,FastEthernet0/0
Task19
ConfigureR2suchthatitonlyallowsnetworkswithaprefixlengthof16to25inits
routingtable.
OnR2
R2(config)#ipprefixlistTSTpermit0.0.0.0/0ge16le25
www.ccieuniversity.com
R2(config)#routerrip
R2(configrouter)#distributelistprefixTSTinf0/0
R2#Cleariproute*
R2#Showiprouterip
R223.1.1.0/24 [120/1]via10.1.12.1,00:00:03,FastEthernet0/0
4.0.0.0/16issubnetted,1subnets
R4.4.0.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R191.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
5.0.0.0/24issubnetted,1subnets
R5.5.5.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R200.1.1.0/24[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R128.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R131.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
193.1.1.0/25issubnetted,1subnets
R193.1.1.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
132.1.0.0/24issubnetted,1subnets
R132.1.1.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R192.1.1.0/24[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
133.1.0.0/25issubnetted,1subnets
R133.1.1.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R195.1.1.0/24[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
Task20
Removethecommandsfrom theprevioustaskandensurethatallthenetworksarein
R2sroutingtable.
OnR2
R2(config)#NoipprefixlistTSTpermit0.0.0.0/0ge16le25
R2(config)#routerrip
R2(configrouter)#NodistributelistprefixTSTinf0/0
R2#Cleariproute*
Toverifytheconfiguration:
www.ccieuniversity.com
OnR2
R2#Showiprouterip
R1.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R2.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R3.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R223.1.1.0/24[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
4.0.0.0/16issubnetted,1subnets
R4.4.0.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R191.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
5.0.0.0/24issubnetted,1subnets
R5.5.5.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R200.1.1.0/24[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
6.0.0.0/27issubnetted,1subnets
R6.6.6.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R 128.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R125.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R131.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
193.1.1.0/25issubnetted,1subnets
R193.1.1.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
132.1.0.0/24issubnetted,1subnets
R132.1.1.0[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
R192.1.1.0/24[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
133.1.0.0/25issubnetted,1subnets
R133.1.1.0[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
R195.1.1.0/24[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
194.1.1.0/27issubnetted,1subnets
R194.1.1.0[120/1]via10.1.12.1,00:00:06,FastEthernet0/0
Task21
ErasethestartupconfigurationofR1andreloadthisrouter.Whentheroutercomesup,
copyandpastetheconfigurationfromtheCDprovidedforTask21
VerifythatR2isreceivingthefollowingroutesfromR1:
R2#Shiprouterip
10.0.0.0/8isvariablysubnetted,11subnets,7masks
R10.4.2.8/29[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
R10.4.1.4/30[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
R10.7.1.0/24[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
R
10.7.0.0/24[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
www.ccieuniversity.com
R10.7.3.0/24[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
R10.7.2.0/24[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
R10.4.3.16/28[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
R10.4.4.32/27[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
R10.4.5.64/26[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
R10.4.6.128/25[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
Task22
ConfigureR2toONLYpermitthe10.7.0.0subnetsinitsroutingtableyoushould
configureoneprefixlisttoaccomplishthistask.
OnR2
R2(config)#ipprefixlistTSTpermit10.7.0.0/22ge23le24
R2(config)#routerrip
R2(configrouter)#distributelistprefixTSTinf0/0
R2#Cleariproute*
Toverifytheconfiguration
OnR2
R2#Showiprouterip
10.0.0.0/24issubnetted,5subnets
R10.7.1.0[120/1]via10.1.12.1,00:00:07,FastEthernet0/0
R10.7.0.0[120/1]via10.1.12.1,00:00:07,FastEthernet0/0
R10.7.3.0[120/1]via10.1.12.1,00:00:07,FastEthernet0/0
R10.7.2.0[120/1]via10.1.12.1,00:00:07,FastEthernet0/0
Notetheprefixlistchecksthefirst22bitstoensureamatch,then,thesubnetmask
mustbeGEto23andLE24,whichwillONLYpickonthefournetworksin
10.7.0.0thatR1isadvertising.
Task23
Removethecommandsfromtheprevioustaskandensurethatallthenetworksarein
R2sroutingtable.
www.ccieuniversity.com
OnR2
R2(config)#NoipprefixlistTSTpermit10.7.0.0/22ge23le24
R2(config)#routerrip
R2(configrouter)#NodistributelistprefixTSTinf0/0
R2#Cleariproute*
Toverifytheconfiguration:
OnR2
R2#Showiprouterip
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
10.0.0.0/8isvariablysubnetted,11subnets,7masks
R10.4.2.8/29[120/1]via10.1.12.1,00:00:08,FastEthernet0/0
C10.1.12.0/24isdirectlyconnected,FastEthernet0/0
R10.4.1.4/30[120/1]via10.1.12.1,00:00:08,FastEthernet0/0
R10.7.1.0/24[120/1]via10.1.12.1,00:00:08,FastEthernet0/0
R10.7.0.0/24 [120/1]via10.1.12.1,00:00:08,FastEthernet0/0
R10.7.3.0/24[120/1]via10.1.12.1,00:00:08,FastEthernet0/0
R10.7.2.0/24[120/1]via10.1.12.1,00:00:09,FastEthernet0/0
R10.4.3.16/28[120/1]via10.1.12.1,00:00:09,FastEthernet0/0
R10.4.4.32/27[120/1]via10.1.12.1,00:00:09,FastEthernet0/0
R10.4.5.64/26[120/1]via10.1.12.1,00:00:09,FastEthernet0/0
R10.4.6.128/25[120/1]via10.1.12.1,00:00:09,FastEthernet0/0
Task24
ConfigureR2suchthatitONLYallowsthefollowingtwoprefixesinitsroutingtable:
10.4.4.32/27and10.4.5.64/26
www.ccieuniversity.com
OnR2
R2(config)#ipprefixlistTSTpermit10.4.4.0/23ge24le27
R2(config)#routerrip
R2(configrouter)#distributelistprefixTSTinf0/0
R2#Cleariproute*
Toverifytheconfiguration:
OnR2
R2#Showiprouterip
10.0.0.0/8isvariablysubnetted,3subnets,3masks
R10.4.4.32/27[120/1]via10.1.12.1,00:00:06,FastEthernet0/0
R10.4.5.64/26[120/1]via10.1.12.1,00:00:06,FastEthernet0/0
Notetheprefixliststartswith10.4.4.0/23,becausethefirst23bitsareidenticalin
bothprefixes,therefore,thebitsmustspecify/23.Thesubnetmaskofthenetwork
shouldbeGE26andLE27,whichpicksonlyonthetwoprefixes.
Task25
Removethecommandsfromtheprevioustaskandensurethatallthenetworksarein
R2sroutingtable.
OnR2
R2(config)#NoipprefixlistTSTpermit10.4.4.0/23ge24le27
R2(config)#routerrip
R2(configrouter)#NodistributelistprefixTSTinf0/0
R2#Cleariproute*
Toverifytheconfiguration:
OnR2
R2#Showiprouterip
www.ccieuniversity.com
Task26
ConfigureR2toallowallsubnetsof10.4.0.0network.Youshouldbeveryspecificwhen
configuringtheprefixlist/s,youshouldNOTallowotherprefixesexcepttheonesinyour
routingtable.Useminimumnumberofprefixliststoaccomplishthistask.
OnR2
R2(config)#ipprefixlistTSTpermit10.4.0.0/22ge23le30
R2(config)#ipprefixlistTSTpermit10.4.4.0/22ge23le28
R2(config)#routerrip
R2(configrouter)#distributelistprefixTSTinf0/0
R2#Cleariproute*
Toverifytheconfiguration:
www.ccieuniversity.com
OnR2
R2#Showiprouterip
10.0.0.0/8isvariablysubnetted,7subnets,7masks
R10.4.2.8/29[120/1]via10.1.12.1,00:00:10,FastEthernet0/0
R10.4.1.4/30[120/1]via10.1.12.1,00:00:10,FastEthernet0/0
R10.4.3.16/28[120/1]via10.1.12.1,00:00:10,FastEthernet0/0
R10.4.4.32/27[120/1]via10.1.12.1,00:00:10,FastEthernet0/0
R10.4.5.64/26[120/1]via10.1.12.1,00:00:10,FastEthernet0/0
R10.4.6.128/25[120/1]via10.1.12.1,00:00:10,FastEthernet0/0
Task27
Removethecommandsfromtheprevioustaskandensurethatallthenetworksarein
R2sroutingtable.
OnR2
R2(config)#NoipprefixlistTSTpermit10.4.0.0/22ge23le30
R2(config)#NoipprefixlistTSTpermit10.4.4.0/22ge23le28
R2(config)#routerrip
R2(configrouter)#NodistributelistprefixTSTinf0/0
R2#Cleariproute*
Toverifytheconfiguration:
OnR2
R2#Showiprouterip
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gateway oflastresortisnotset
www.ccieuniversity.com
10.0.0.0/8isvariablysubnetted,11subnets,7masks
R10.4.2.8/29[120/1]via10.1.12.1,00:00:08,FastEthernet0/0
C10.1.12.0/24isdirectlyconnected,FastEthernet0/0
R10.4.1.4/30[120/1]via10.1.12.1,00:00:08,FastEthernet0/0
R10.7.1.0/24[120/1]via10.1.12.1,00:00:08,FastEthernet0/0
R10.7.0.0/24[120/1]via10.1.12.1,00:00:08,FastEthernet0/0
R10.7.3.0/24[120/1]via10.1.12.1,00:00:08,FastEthernet0/0
R10.7.2.0/24 [120/1]via10.1.12.1,00:00:09,FastEthernet0/0
R10.4.3.16/28[120/1]via10.1.12.1,00:00:09,FastEthernet0/0
R10.4.4.32/27[120/1]via10.1.12.1,00:00:09,FastEthernet0/0
R10.4.5.64/26[120/1]via10.1.12.1,00:00:09,FastEthernet0/0
R10.4.6.128/25[120/1]via10.1.12.1,00:00:09,FastEthernet0/0
Task28
Erasethestartupconfigurationandreloadtheroutersbeforeproceedingtothenextlab.
www.ccieuniversity.com
Lab1
ConfiguringRIPv2
R1
R2
.1.2
S0/0
FrameRelay
S0/0
F0/0.2
.3
F0/0
.3
.4
FrameRelay
S0/0
R4
S0/0
R3
LabSetup
R2andR3sF0/0interfaceshouldbeconfiguredinVLAN23.
R1andR2shouldbeconfiguredinaframerelaypointtopoint.
R3andR4shouldbeconfiguredinaframerelaypointtopoint.
www.ccieuniversity.com
IPAddressing
Router
R1
R2
R3
R4
Interface
Lo0
S0/0
Lo0
S0/0
F0/0
Lo0
S0/0
F0/0
Lo0
S0/0
IPaddress
1.1.1.1/8
131.1.12.1/24
2.2.2.2/8
131.1.12.2/24
131.1.23.2/24
3.3.3.3/8
131.1.34.3/24
131.1.23.3/24
4.4.4.4/8
131.1.34.4/24
Task1
ConfigureRIPv2onallroutersandadvertisetheirdirectlyconnectednetworks.When
configuringRIP,ensurethatautosummarizationisdisabled.
OnR1
R1(config)#routerrip
R1(configrouter)#noau
R1(configrouter)#ver2
R1(configrouter)#network131.1.0.0
R1(configrouter)#network1.0.0.0
OnR2
R2(config)#routerrip
R2(configrouter)#noau
R2(configrouter)#ver2
R2(configrouter)#network131.1.0.0
R2(configrouter)#network2.0.0.0
OnR3
R3(config)#routerrip
R3(configrouter)#noau
R3(configrouter)#ver2
R3(configrouter)#network131.1.0.0
www.ccieuniversity.com
R3(configrouter)#network3.0.0.0
OnR4
R4(config)#routerrip
R4(configrouter)#noau
R4(configrouter)#ver2
R4(configrouter)#network131.1.0.0
R4(configrouter)#network4.0.0.0
Task2
Configuretheserouterssuch thatupdateinterval,invalidationtimer,Holddowntimerand
flushtimersaredoublethedefaultvalue.
Tofindoutthedefaultparameters:
OnR1
Showipprotocols
RoutingProtocolis"rip"
Outgoingupdatefilterlistforallinterfacesisnotset
Incomingupdatefilterlistforallinterfacesisnotset
Sendingupdatesevery30seconds,nextduein22seconds
Invalidafter180seconds,holddown180, flushedafter240
Redistributing:rip
Defaultversioncontrol:sendversion2,receiveversion2
InterfaceSendRecvTriggeredRIPKeychain
Serial0/0.12
22
Loopback0
22
Automaticnetworksummarizationisnotineffect
Maximumpath:4
RoutingforNetworks:
1.0.0.0
131.1.0.0
RoutingInformationSources:
GatewayDistanceLastUpdate
131.1.12.212000:00:19
Distance:(defaultis120)
OnR1
Routerrip
www.ccieuniversity.com
TimersBasic?
<04294967295> Intervalbetweenupdates
R1(configrouter)#timersbasic60?
<14294967295> Invalid
R1(configrouter)#timersbasic60360?
<04294967295> Holddown
R1(configrouter)#timersbasic60360360?
<14294967295> Flush
R1(configrouter)#timersbasic60360360480
OnAllRouters
(config)#Routerrip
(configrouter)#Timersbasic60360360480
Task3
Theseroutersshouldsuppressaflashupdateiftheregularupdateisduein10secondsor
less.
On AllRouter
(config)#routerrip
(configrouter)#flashupdatethreshold10
TheFlashupdatethresholdcommandsuppressesflashupdateswhenthearrivalof
aregularlyscheduledupdatematches,orislessthanthenumberofsecondsthatis
configured,inthiscase10seconds.Therangeis0 30seconds.
Theaboveconfigurationconfiguresallfourrouterstosuppressaregularly
scheduledflashupdate,iftheregularupdateisduein10secondsorless.
Toverifytheconfiguration:
Showipprotocols
RoutingProtocolis"rip"
Outgoingupdatefilterlistforallinterfacesisnotset
Incomingupdatefilterlistforallinterfacesisnotset
www.ccieuniversity.com
Sendingupdatesevery60seconds,nextduein35seconds
Flashupdateissuppressedwhennextupdateduewithin10seconds
Invalidafter360seconds,holddown360,flushedafter480
(Therestoftheoutputisomitted)
Task4
R1isahighspeedroutersendingupdatestoR2whichisalowspeedrouter.Becauseof
this,factR2mightnotbeabletoreceiveandprocessupdatesattheratethatR1operates,
therefore,configureR1suchthatwhenithasmultipleRIPpacketstosendtoR2,itwill
wait10millisecondsbetweenthepackets.Tofurtherremedythesesituations,configure
R2toincreaseitsRIPqueuedepthto75.
On R1
(config)#routerrip
(configrouter)#outputdelay10
TheaboveconfigurationwillhelpR2fromlosingroutinginformationbecausethis
commandintroducesadelayof10millisecondsbetweenpacketsinamultiplepacket
RIPupdates.Bydefaultthereisnointerpacketdelayandtherangeforthisdelayis
(850milliseconds).
On R2
(configrouter)#inputqueue75
ThiscommandwillalsohelptopreventroutinginformationfrombeinglostThe
valuespecifiesthedepthoftheinput queue,thelargerthevalue,thelargerthe
depthofthequeue.Therangeis(0 1024)andthedefaultvalueis50.
Donoterasetheconfiguration,proceedtothenextlab.
www.ccieuniversity.com
Lab2
RIPv2Authentication
(Thislabbuildsonthepreviouslab)
Task1
ConfigurecleartextauthenticationbetweenR1andR2andMD5authenticationbetween
R3andR4.Useciscotobethepassword.
ToenableauthenticationforRIPversion2,akeymustbedefinedandthenappliedto
theinterface.
RIPandEIGRPusekeychainauthentication,inwhichakeychainisconfigured.
Withinthatkeychainakeyisdefinedandakeystring(Password)isassignedtothe
definedkey.Lastlythekeychainisassignedtotheinterfaceandtheauthentication
typeisconfigured.RIPcanbeconfiguredtoauthenticatewithcleartextorMD5
OnR1
R1(config)#keychainTEST
R1(configkeychain)#key1
R1(configkeychainkey)#keystringcisco
R1(config)#intS0/0.12
R1(configif)#ipripauthenticationkeychainTEST
OnR2
R2(config)#keychainTEST
R2(configkeychain)#key1
R2(configkeychainkey)#keystringcisco
R2(config)#intS0/0.21
R2(configif)#ipripauthenticationkeychainTEST
OnR3
R3(config)#keychainTEST
R3(configkeychain)#key1
www.ccieuniversity.com
R3(configkeychainkey)#keystringcisco
R3(config)#intS0/0.34
R3(configsubif)#ipripauthenticationkeychainTEST
R3(configsubif)#ipripauthenticationmodemd5
OnR4
R4(config)#keychainTEST
R4(configkeychain)#key1
R4(configkeychainkey)#keystringcisco
R4(configkeychainkey)#intS0/0.43
R4(configsubif)#ipripauthenticationkeychainTEST
R4(configsubif)#ipripauthenticationmodemd5
Toverifytheconfiguration:
OnR1
RoutingProtocolis"rip"
Outgoingupdatefilterlistforallinterfacesisnotset
Incomingupdatefilterlistforallinterfacesisnotset
Sendingupdatesevery60seconds,nextduein35seconds
Flashupdateissuppressedwhennextupdateduewithin10seconds
Invalidafter360seconds,holddown360,flushedafter480
Redistributing:rip
Defaultversioncontrol:sendversion2,receiveversion2
InterfaceSendRecvTriggeredRIP Keychain
FastEthernet0/022
Notethekeychainin
Serial0/0.2122
TEST
UseisTEST
Loopback022
Task2
Removetheconfigurationcommandsfromthislabbeforeproceedingtothenextlab.
www.ccieuniversity.com
Lab3
ConfiguringRIPv2Updates
UsethetopologyandIPaddressingfromLab1
Task1
ConfigureRIPv2onR1,R2,R3,andR4andadvertisetheirdirectlyconnectednetworks,
ensurethatautosummarizationisdisabledonallrouters.
Task2
R1andR2shouldexchangetheirupdatesusingtheMulticastdestinationof224.0.0.9,
whereasR2andR3shouldexchangetheirupdatesviaUnicast.
RIPv2bydefaultsendsitsupdatestothedestinationaddressof224.0.0.9,this
behaviorcanbechangedsuchthattheupdatesaresenttotheneighborsIPaddress
(Unicast)ortothebroadcast(255.255.255.255)address,inthistaskweonlyneedto
beconcernedwithR2andR3sconfiguration,sinceR1andR2willsendtheir
updatesto224.0.0.9(Multicast)addressbydefault.
OnR2
R2(config)#routerrip
R2(configrouter)#passiveinterfaceF0/0
ThepassiveinterfacecommandstopsRIPfromsendingupdatesoutofaspecified
interface.ThisrouterwillstillprocesstheupdatesthatitreceivesthroughF0/0
interface.Anotherwaytohandlethistaskistoconfigurepassiveinterface
default.ThiscommandstopssendingRIPupdatesoutofallinterfaces,andthenwe
canconfigureneighborcommandtosendupdatesONLYtothespecified
neighbor.Iftheneighborcommandisusedwithoutthepassiveinterfacecommand,
RIPwillsendtwoupdates,onetoMulticastandanothertoaUnicastdestination.
R2(configrouter)#neighbor131.1.23.3
OnR3
R3(config)#routerrip
R3(configrouter)#passiveinterfaceF0/0
R3(configrouter)#neighbor131.1.23.2
www.ccieuniversity.com
Task 3
R3andR4shouldexchangeupdatesviaBroadcast.
OnR3
R3(config)#ints0/0.34
R3(configsubif)#ipripv2broadcast
OnR4
R4(config)#ints0/0.43
R4(configsubif)#ipripv2broadcast
TheIPripv2broadcastisusedtosendversion2updatestoadestinationaddress
of255.255.255.255forhosts/routersthatdonotlistentoMulticastaddresses.
Task 4
Removetheconfigurationcommandsformthislabbeforeproceedingtothenextlab.
www.ccieuniversity.com
Lab4
ConfiguringDefaultroutes
UsethetopologyandIPaddressingfrom Lab1
Task1
R1shouldNOTbeconfiguredwithanyroutingprotocol.Configureastaticroutefor
network1.0.0.0/8onR2withanexthopIPaddressof131.1.12.1,andconfigureastatic
defaultrouteonR1pointingtoR2sS0/0.21IPaddress(131.1.12.2).
OnR1
R1(config)#iproute0.0.0.00.0.0.0131.1.12.2
OnR2
R2(config)#iproute1.0.0.0255.0.0.0131.1.12.1
Task2
ConfigureRIPv2onR2,R3andR4andadvertisetheirconnectednetworks.Ensurethat
autosummarizationisdisabled.
OnR2
R2(config)#routerrip
R2(configrouter)#netw131.1.0.0
R2(configrouter)#netw2.0.0.0
R2(configrouter)#ver2
R2(configrouter)#noau
OnR3
R3(config)#routerrip
R3(configrouter)#netw131.1.0.0
R3(configrouter)#netw3.0.0.0
www.ccieuniversity.com
R3(configrouter)#ver2
R3(configrouter)#noau
OnR4
R2(config)#routerrip
R4(configrouter)#netw131.1.0.0
R4(configrouter)#noau
R4(configrouter)#ver2
R4(configrouter)#netw4.0.0.0
Task3
ConfigureR2toinjectadefaultrouteintoRIProutingdomain.Thisconfigurationshould
betestedinthreedifferentways.
Defaultrouteinjectioncanbeconfiguredinthreewaysasfollows:
Defaultinformationoriginate
ConfiguringaStaticdefaultroute,andthenredistributingthestaticroute
intoRIProutingdomain.
IPdefaultnetworkcommand.
Firstmethod:
OnR2
R2(config)#routerrip
R2(configrouter)#defaultinformationoriginate
Toverifytheconfiguration:
Ping1.1.1.1
Youshouldbesuccessful
www.ccieuniversity.com
Thesecondmethod:
RemovethepreviouscommandfromR2.
OnR2
R2(configrouter)#nodefaultinformationoriginate
Removethestaticroutefornetwork1.0.0.0fromR2.
R2(config)#noiproute1.0.0.0255.0.0.0131.1.12.1
Configureastaticdefaultroutepointingto131.1.12.1andthenredistributestatic
routesintoRIProutingdomain.
R2(config)#iproute0.0.0.00.0.0.0131.1.12.1
R2(config)#routerrip
R2(configrouter)#redistributestatic
Note,thismethodcanalsobeconfiguredusingthefollowingsteps:
DonotremovethestaticroutefromR2fornetwork1.0.0.0/8.
CreateastaticdefaultroutepointingtoNULL0
RedistributestaticintoRIP.
Thethirdmethod:
RemovethestaticdefaultroutethatwasconfiguredinthepreviousstepfromR2:
R2(config)#Noiproute0.0.0.00.0.0.0131.1.12.1
RemovetheredistributestaticthatwasconfiguredinthepreviousstepfromR2:
R2(config)#routerrip
R2(configrouter)#Noredistributestatic
ConfigureipdefaultnetworkcommandtoinjectadefaultrouteintoRIPsrouting
domain.
OnR2
R2(config)#ipdefaultnetwork 2.0.0.0
www.ccieuniversity.com
TheabovecommandinjectsadefaultrouteintoRIPsroutingdomain.Thistellsthe
otherroutersthatiftheyarenotawareofanyroutes,theyshouldsendittoR2.
Toverifytheconfiguration:
OnR4
Ping1.1.1.1
Note,youshouldbegettingunreachablemessagesandyourpingshouldnotbe
successful.TheactualechomessagesaregettingtoR2,butR2doesnothavearoute
tonetwork1.0.0.0/8,therefore,torectifythisproblemwehavetoconfigureastatic
routeonR2thatispointingto131.1.12.1asfollows:
OnR2
Iproute1.0.0.0255.0.0.0131.1.12.1
Task4
Removethecommand/sfromTask1andTask3beforeproceedingtothenexttask.
OnR2
R2(config)#NoIproute1.0.0.0255.0.0.0131.1.12.1
R2(config)#Noipdefaultnetwork2.0.0.0
OnR1
R1(config)#Noiproute0.0.0.00.0.0.0131.1.12.2
Task5
ConfigureEIGRPAS100onR1andR2andadvertisethefollowingnetworksinthis
routingdomain:
OnR1Advertiseitsdirectlyconnectednetworksandremovethestaticdefault
routethatpointsto131.1.12.2.
www.ccieuniversity.com
OnR2Advertisenetwork131.1.12.0/24.
OnR1
Routereigrp100
Noau
Netw1.0.0.0
Netw131.1.12.00.0.0.255
Exit
Noiproute0.0.0.00.0.0.0131.1.12.2
OnR2
Routereigrp100
Noau
Netw131.1.12.00.0.0.255
Task6
DonotredistributebetweentheroutingprotocolsandinsteadconfigureR2toinjecta
defaultrouteintoRIPsroutingdomain.Chooseanymethodtoaccomplishthistask.R3
andR4mustusethedefaultroutetoreachnetwork1.0.0.0/8.
OnR2
Routerrip
Defaultinformationoriginate
Task7
SincetheusersthatareconnectedtoR3andR4willONLYusethedefaultroutefromthe
previoussteptoreachnetwork1.0.0.0/8,configureR2suchthatitinjectsthedefault
routeonlyifnetwork1.0.0.0isinR2sroutingtable.
OnR2
R2(config)#accesslist1permit1.0.0.00.255.255.255
R2(config)#routemapTESTpermit10
www.ccieuniversity.com
R2(configroutemap)#matchipaddr1
R2(config)#routerrip
R2(configrouter)#defaultinformationoriginateroutemapTEST
Thisconfigurationiscalledconditionaldefaultrouteinjection.Applyinga
condition,inthiscasearoutemap,candeterminewhentheroutemapisoriginated.
Theroutemapcanalsobeconfiguredtomatchanaccesslist,then,setinterface
F0/0,tobemorespecificastowhereandwhatinterfacethedefaultroutewillbe
originated.
Task8
Erasethestartupconfigandreloadtheroutersbeforeproceedingtothenextlab.
www.ccieuniversity.com
Lab5
Filteringroutes
UsethetopologyfromLab1
LabSetup:
ConfigurethefollowingIPaddressingontherouters:
Router
R1
R2
R3
R4
Interface
Lo0
S0/0.12
S0/0.21
F0/0
Lo0
S0/0.34
F0/0
Lo0
S0/0.43
IPaddress
1.1.1.1/8
131.1.12.1/24
131.1.12.2/24
131.1.23.2/24
3.3.3.3/8
131.1.34.3/24
131.1.23.3/24
4.4.4.4/8
131.1.34.4/24
ConfigurethefollowingLoopbackinterfacesonR2:
Lo02.2.0.2/24
Lo12.2.1.2/24
Lo22.2.2.2/24
Lo32.2.3.2/24
Lo42.2.4.2/24
Lo52.2.5.2/24
Lo62.2.6.2/24
Lo7 2.2.7.2/24
Lo82.2.8.2/24
Lo92.2.9.2/24
Task1
ConfigureRIPv2routingprotocolonalltheroutersandadvertisetheirdirectlyconnected
interfaces.Ensurethatautosummarizationisdisabledonallrouters.
OnR1
R1(config)#routerrip
R1(configrouter)#netw1.0.0.0
R1(configrouter)#netw131.1.0.0
R1(configrouter)#noau
www.ccieuniversity.com
R1(configrouter)#ver2
OnR2
R2(config)#routerrip
R2(configrouter)#netw131.1.0.0
R2(configrouter)#netw2.0.0.0
R2(configrouter)#noau
R2(configrouter)#ver2
OnR3
R3(config)#routerrip
R3(configrouter)#noau
R3(configrouter)#ver2
R3(configrouter)#netw131.1.0.0
R3(configrouter)#netw3.0.0.0
OnR4
R4(config)#routerrip
R4(configrouter)#noau
R4(configrouter)#ver2
R4(configrouter)#netw131.1.0.0
R4(configrouter)#netw4.0.0.0
Task2
EnsurethatR1onlyreceivestheevennumberedsubnets(2.2.0.0,2.2.2.0,2.2.4.0,2.2.6.0,
2.2.8.0)ofmajornetwork2.0.0.0fromR2.Useminimumnumberofcommandlinesto
accomplishthistask
OnR1
Beforeweconfigurethetask,weshouldchecktheroutingtableonthisrouter:
R1#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
www.ccieuniversity.com
OnR1
R1(config)#accesslist1deny2.2.1.00.0.254.255
R1(config)#accesslist1permitany
R1(config)#routerrip
R1(configrouter)#distributelist1inS0/0.12
Explanationoftheaccesslist:
Example:
Accesslist1permit2.0.0.00.255.255.255
Inthisaccesslistwearepermittinganynetworkthatmatchestheresultofthe
andingofnetwork 2.0.0.0withaninversemaskof0.255.255.255.Inorderforusto
dotheandingwemustgettheregularmask,togettheregularmask,weshould
subtract0.255.255.255from255.255.255.255,whichresultsto255.0.0.0
Therefore,theandingisasfollows:
www.ccieuniversity.com
00000010.00000000.00000000.00000000Network(Inthiscase2.0.0.0)
11111111.11111111.11111111.00000000RegularMask(Inthiscase255.255.255.0)
Theresultofthisandingis2.0.0.0,thereforeiftheresultoftheANDmatches
network2.0.0.0,itispermitted,ifNOT,itsdenied.
Inthistasktheaccesslistis:
Accesslist1deny2.2.1.00.0.254.255
Therefore,inorderforustodotheanding,wehavetogettheregularmaskforthe
inversemaskof0.0.254.255,whichis255.255.255.255minus0.0.254.255equalsto
255.255.1.0
00000010.00000010.00000000.00000000(Network)
11111111.11111111.00000001.00000000(Regularmask)
TheresultofthisANDis2.2.0.0,therefore,ifitmatches2.2.0.0,itshouldbedenied,
ifthenetworkisreplacedwithothersubnetsofnetwork2.2.0.0,wewillseethatthe
ODDnumberednetworksarealldenied.
LastlyiftheaccesslistwaswrittentopermittheevennumberednetworksONLY,
theothernetworks(131.1.34.0/24,131.1.23.0/24,4.0.0.0/8,3.0.0.0.0/8)wouldnt
havebeenadvertised.
Toverifytheconfiguration:
Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
C1.0.0.0/8isdirectlyconnected,Loopback0
2.0.0.0/24issubnetted,5subnets
R2.2.0.0[120/1]via131.1.12.2,00:00:08,Serial0/0.12
R2.2.2.0[120/1]via131.1.12.2,00:00:08,Serial0/0.12
R2.2.4.0[120/1]via131.1.12.2,00:00:08,Serial0/0.12
R2.2.6.0[120/1]via131.1.12.2,00:00:08,Serial0/0.12
www.ccieuniversity.com
R2.2.8.0[120/1]via131.1.12.2,00:00:08,Serial0/0.12
R3.0.0.0/8[120/2]via131.1.12.2,00:00:08,Serial0/0.12
R4.0.0.0/8[120/3]via131.1.12.2,00:00:09,Serial0/0.12
131.1.0.0/24issubnetted,3subnets
C131.1.12.0isdirectlyconnected,Serial0/0.12
R131.1.23.0[120/1]via131.1.12.2,00:00:09,Serial0/0.12
R131.1.34.0[120/2]via131.1.12.2,00:00:09,Serial0/0.12
Task3
ConfigureR3suchthatitonlyreceivestheoddroutes.Useminimumnumberof
commandlinestoaccomplishthistask
OnR3
R3(config)#accesslist1deny2.2.0.00.0.254.255
R3(config)#accesslist1permitany
R3(config)#routerrip
R3(configrouter)#distributelist1inF0/0
ToVerifytheconfiguration:
Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
R1.0.0.0/8[120/2]via131.1.23.2,00:00:01,FastEthernet0/0
2.0.0.0/24issubnetted,5subnets
R2.2.1.0[120/1] via131.1.23.2,00:00:01,FastEthernet0/0
R2.2.3.0[120/1]via131.1.23.2,00:00:01,FastEthernet0/0
R2.2.5.0[120/1]via131.1.23.2,00:00:01,FastEthernet0/0
R2.2.7.0[120/1]via131.1.23.2,00:00:01,FastEthernet0/0
R2.2.9.0 [120/1]via131.1.23.2,00:00:01,FastEthernet0/0
C3.0.0.0/8isdirectlyconnected,Loopback0
R4.0.0.0/8[120/1]via131.1.34.4,00:00:02,Serial0/0.34
www.ccieuniversity.com
131.1.0.0/24issubnetted,3subnets
R131.1.12.0[120/1]via131.1.23.2,00:00:02,FastEthernet0/0
C131.1.23.0isdirectlyconnected,FastEthernet0/0
C131.1.34.0isdirectlyconnected,Serial0/0.34
Task4
R2shouldbeconfiguredsuchthatR4filtersnetwork1.0.0.0/8
OnR2
R2(config)#accesslist1permit1.0.0.00.255.255.255
R2(config)#routerrip
R2(configrouter)#offsetlist1out13f0/0
ToVerifytheconfiguration
OnR4
Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
2.0.0.0/24issubnetted,5subnets
R2.2.1.0[120/2]via131.1.34.3,00:00:11,Serial0/0.43
R2.2.3.0[120/2]via131.1.34.3,00:00:11,Serial0/0.43
R2.2.5.0[120/2]via131.1.34.3,00:00:11,Serial0/0.43
R2.2.7.0[120/2]via131.1.34.3,00:00:11,Serial0/0.43
R2.2.9.0[120/2]via131.1.34.3,00:00:11,Serial0/0.43
R3.0.0.0/8[120/1]via131.1.34.3,00:00:11,Serial0/0.43
C4.0.0.0/8isdirectlyconnected,Loopback0
131.1.0.0/24issubnetted,3subnets
R131.1.12.0[120/2]via131.1.34.3,00:00:12,Serial0/0.43
R131.1.23.0[120/1]via131.1.34.3,00:00:12,Serial0/0.43
C
131.1.34.0isdirectlyconnected,Serial0/0.43
www.ccieuniversity.com
Thingstorememberaboutoffsetlists:
1.
2.
3.
4.
ItonlyworkswithRIPandEigrproutingprotocols.
InRIP,itsusedtoaddtotheexistinghopcount.
InEigrpitsusedtoaddtotheexistingdelayvalue.
Ifanaccesslistisused,theoffsetlistwilloffsetthehopcountorthedelay
valueforthenetworksthatarepermittedintheaccesslist.
5. Ifallnetworksaretobeaffected,thenoffsetlist0shouldbeused.
Task5
Erasetheconfigurationfromthislabbeforeproceedingtothenextlab.
www.ccieuniversity.com
Lab6
AdvancedRIPv2configuration
R1
F0/0
F0/0
R2
S0/0
FrameRelay
S0/0
S0/0
R4
R3
F0/0
F0/0
R5
www.ccieuniversity.com
LabSetup:
Configuretheroutersbasedonthetopologyandipaddressingchart
R1andR2sF0/0interfaceshouldbeconfiguredinVLAN12.
R4andR5sF0/0interfaceshouldbeconfiguredinVLAN45
ConfiguretheFrameRelaycloudusingthefollowingpolicy:
a) RoutersR2,R3andR4shouldbeconfiguredinahubandspokemanner.R2
shouldbeconfiguredtobethehubwhereasR3andR4shouldbeconfigured
asspokes.
b) R2andR3shouldbeconfiguredinapointtopointmanner,whereasthe
connectionbetweenR2andR4shouldbeconfiguredinamultipointmanner.
c) R4shouldNOTbeconfiguredwithasubinterface.
IPaddressing:
Router
R1
R2
R3
R4
R5
Interface
Lo0
Lo1
Lo2
Lo3
Lo4
Lo5
F0/0
Lo0
F0/0
FramerelayconnectiontoR3
FramerelayconnectiontoR4
Lo0
FramerelayconnectiontoR2
Lo0
FramerelayconnectiontoR2
F0/0
Lo0
F0/0
IPAddress
10.1.1.1/24
10.1.2.1/24
100.0.0.1/24
111.1.1.33/27
211.1.1.65/26
111.1.1.17/28
200.1.12.1/24
2.2.2.2/8
131.1.12.2/24
131.1.23.2/24
131.1.24.2/24
3.3.3.3/8
131.1.23.3/24
4.4.4.4/8
131.1.24.4/24
131.1.45.4/24
5.5.5.5/8
131.1.45.5/24
www.ccieuniversity.com
Task1
ConfigureRIPv2betweenR1andR2andadvertisetheirdirectlyconnectednetworks.If
thisconfigurationissuccessful,R2shouldreceivetheLoopbacknetworkaddresses
advertisedbyR1.
OnR1
R1(config)#routerrip
R1(configrouter)#netw200.1.12.0
R1(configrouter)#netw10.0.0.0
R1(configrouter)#netw100.0.0.0
R1(configrouter)#netw111.0.0.0
R1(configrouter)#netw211.1.1.0
R1(configrouter)#ver2
R1(configrouter)#noau
R1(configrouter)#novalidateupdatesource
OnR2
R2(config)#routerrip
R2(configrouter)#netw2.0.0.0
R2(configrouter)#netw131.1.0.0
R2(configrouter)#noau
R2(configrouter)#ver2
R2(configrouter)#novalidateupdatesource
RIPandIGRParetheONLYtworoutingprotocolsthatvalidatethesourceIP
addressofincomingupdates.
BeforeRIPand/orIGRProutingprotocolsacceptroutesfromagivenneighbor,
theywanttomakesurethatthesourceIPaddressoftheadvertisingrouterisfrom
thesameIPaddressspaceasthelinkthatthetworoutersareconnectedto.
IftheroutersthathavetoexchangeroutinginformationarefromdifferentIP
addressspaces,thenthesourcevalidationshouldbenegatedusingnovalidate
updatesource
ToVerifytheconfiguration:
OnR2
R2#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
www.ccieuniversity.com
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
C2.0.0.0/8isdirectlyconnected,Loopback0
100.0.0.0/24issubnetted,1subnets
R100.0.0.0[120/1]via200.1.12.1,00:00:00
111.0.0.0/8isvariablysubnetted,2subnets,2masks
R111.1.1.32/27[120/1]via200.1.12.1,00:00:00
R111.1.1.16/28[120/1]via200.1.12.1,00:00:00
10.0.0.0/24issubnetted,2subnets
R10.1.2.0[120/1]via200.1.12.1,00:00:00
R10.1.1.0 [120/1]via200.1.12.1,00:00:00
131.1.0.0/24issubnetted,3subnets
C131.1.12.0isdirectlyconnected,FastEthernet0/0
C131.1.23.0isdirectlyconnected,Serial0/0.23
C131.1.24.0isdirectlyconnected,Serial0/0.24
211.1.1.0/26issubnetted,1subnets
R211.1.1.64[120/1]via200.1.12.1,00:00:02
Note,eventhoughthenetworksareintheroutingtableofR2,theyareNOT
reachable,becauseR2doesNOThaveNLRI(NetworkLayerReachability
Information)tothenexthopIPaddress(200.1.12.1)thatisadvertised.
Task2
R2shouldonlyreceiveprefixeswithaprefixlengthof8to24andtheseprefixesshould
ONLYbereceivedfromR1andnootherrouter.DoNOTuseaneighborcommand,NAT
oranaccesslisttoaccomplishthistask.
OnR2
R2(config)#ipprefixlistTESTseq5permit0.0.0.0/0ge8le24
TheIPPrefixListcommandthatisnamedTESTstatesthatstartingwith0.0.0.0/0
(Anynetworkaddress)withaprefixlengthofGreaterthanorEqualto8,andLess
thanorequalto24.
www.ccieuniversity.com
R2(config)#ipprefixlistALLOWseq5permit200.1.12.1/32
ThisIPPrefixListcommandthatsnamedALLOW,permits200.1.12.1/32IP
address.
R2(config)#routerrip
R2(configrouter)#distributelistprefixTESTgatewayALLOWinF0/0
Thegatewaykeywordidentifiestherouterthatyouwillbeacceptingroutesfrom.
ThisrouterisidentifiedinaPrefixListcalledALLOW.Theroutesthatyouare
acceptingisidentifiedinthePrefixListcalledTEST.
ToVerifytheconfiguration:
OnR2
R2#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternal type1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayof lastresortisnotset
C2.0.0.0/8isdirectlyconnected,Loopback0
100.0.0.0/24 issubnetted,1subnets
R
100.0.0.0 [120/1]via200.1.12.1,00:00:18
10.0.0.0/24 issubnetted,2subnets
R
10.1.2.0 [120/1]via200.1.12.1,00:00:18
R
10.1.1.0 [120/1]via200.1.12.1,00:00:18
131.1.0.0/24issubnetted,3subnets
C131.1.12.0isdirectlyconnected,FastEthernet0/0
C131.1.23.0isdirectlyconnected,Serial0/0.23
C131.1.24.0isdirectlyconnected,Serial0/0.24
www.ccieuniversity.com
Task 3
EnsurethatR2canpingR1andallthenetworksadvertisedbyR1.DoNOTusea
secondaryIPaddressorNATtoaccomplishthistask.Youareallowedonestaticroute
perroutertoaccomplishthistask.
InorderforR2topingthesenetworks,thenexthopIPaddressofallthenetworks
advertisedbyR1shouldbereachable,thiscanbeaccomplishedasfollows:
OnR2
R2(config)#iproute200.1.12.1255.255.255.255f0/0
OnR1
R1(config)#iproute131.1.12.2255.255.255.255f0/0
Task 4
ConfigureRIPv2betweenR2andR3R3shouldadvertiseitsdirectlyconnectednetwork
intotheRIPv2routingdomain.
R2shouldbeconfiguredsothatitonlysendsitsupdateswhenthereisatopologychange.
IftherearenotopologychangesR2shouldsuppressitsregularperiodicupdates.
ToaccomplishthistaskweneedtoenabletriggeredextensionstoRIP.Thisfeature
willsuppressregularupdatesunlessthereisatopologychange.Toverifythis
configurationwecanusedebugipripcommand.
On R2
R2(config)#intS0/0.23
R2(configsubif)#ipriptriggered
OnR3
R3(config)#intS0/0.32
R3(configsubif)#ipriptriggered
R3(configsubif)#routerrip
R2(configrouter)#netw3.0.0.0
R2(configrouter)#netw131.1.0.0
R2(configrouter)#noau
www.ccieuniversity.com
R2(configrouter)#ver2
Toverifytheconfigurationandensurethattheseroutersare
exchangingroutes:
OnR2
R2#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
C2.0.0.0/8isdirectlyconnected,Loopback0
100.0.0.0/24issubnetted,1subnets
R100.0.0.0[120/1]via200.1.12.1,00:00:12
R3.0.0.0/8[120/1]via131.1.23.3,00:01:20,Serial0/0.23
200.1.12.0/32issubnetted,1subnets
S200.1.12.1isdirectlyconnected,FastEthernet0/0
10.0.0.0/24issubnetted,2subnets
R10.1.2.0[120/1]via200.1.12.1,00:00:12
R10.1.1.0[120/1]via200.1.12.1,00:00:12
131.1.0.0/24issubnetted,3subnets
C131.1.12.0isdirectlyconnected,FastEthernet0/0
C131.1.23.0isdirectlyconnected,Serial0/0.23
C131.1.24.0isdirectlyconnected,Serial0/0.24
R2#
Task 5
ConfigurethefollowingloopbackinterfacesonR4andadvertiseitsdirectlyconnected
networksinRIPv2.Thisroutershoulddisableautosummary.
Lo4040.1.0.4/24,Lo41 40.1.1.4/24,Lo42 40.1.2.4,Lo43 40.1.3.4/24
OnR4
R4(config)#intlo40
www.ccieuniversity.com
R4(configif)#ipaddr40.1.0.4255.255.255.0
R4(configif)#intlo41
R4(configif)#ipaddr40.1.1.4255.255.255.0
R4(configif)#intlo42
R4(configif)#ipaddr40.1.2.4255.255.255.0
R4(configif)#intlo43
R4(configif)#ipaddr40.1.3.4255.255.255.0
R4(config)#routerrip
R4(configrouter)#netw40.0.0.0
R4(configrouter)#netw4.0.0.0
R4(configrouter)#netw131.1.0.0
R4(configrouter)#noau
R4(configrouter)#ver2
Toverifytheconfiguration:
OnR4
Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
R2.0.0.0/8[120/1]via131.1.24.2,00:00:19,Serial0/0
100.0.0.0/24issubnetted,1subnets
R100.0.0.0[120/2]via131.1.24.2,00:00:19,Serial0/0
R3.0.0.0/8[120/2]via131.1.24.2,00:00:19,Serial0/0
C4.0.0.0/8isdirectlyconnected,Loopback0
40.0.0.0/24issubnetted,4subnets
C40.1.1.0isdirectlyconnected,Loopback41
C40.1.0.0isdirectlyconnected,Loopback40
C40.1.3.0isdirectlyconnected,Loopback43
C40.1.2.0isdirectlyconnected,Loopback42
www.ccieuniversity.com
10.0.0.0/24issubnetted,2subnets
R10.1.2.0[120/2]via131.1.24.2,00:00:21,Serial0/0
R10.1.1.0[120/2]via131.1.24.2,00:00:21,Serial0/0
131.1.0.0/24issubnetted,4subnets
R131.1.12.0[120/1]via131.1.24.2,00:00:21,Serial0/0
R
131.1.23.0[120/1]via131.1.24.2,00:00:21,Serial0/0
C131.1.24.0isdirectlyconnected,Serial0/0
C131.1.45.0isdirectlyconnected,FastEthernet0/0
R4#
Task 6
ConfigureRIPv2betweenR4andR5.R5shouldadvertiseitsdirectlyconnected
networks.EnsurethatR5getsasummaryroutefromR4fortheLoopbackinterfacesthat
werecreatedintheprevioustask(Task5).R4shouldNOTenableautosummary.
OnR5
R5(config)#routerrip
R5(configrouter)#ver2
R5(configrouter)#noau
R5(configrouter)#netw131.1.0.0
R5(configrouter)#netw5.0.0.0
Toverifytheconfiguration:
Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
R2.0.0.0/8[120/2]via131.1.45.4,00:00:25,FastEthernet0/0
100.0.0.0/24issubnetted,1subnets
R100.0.0.0[120/3]via131.1.45.4,00:00:25,FastEthernet0/0
R3.0.0.0/8[120/3]via131.1.45.4,00:00:25,FastEthernet0/0
R4.0.0.0/8[120/1]via131.1.45.4,00:00:25,FastEthernet0/0
C5.0.0.0/8isdirectlyconnected,Loopback0
www.ccieuniversity.com
40.0.0.0/24issubnetted,4subnets
R40.1.1.0 [120/1]via131.1.45.4,00:00:25,FastEthernet0/0
R40.1.0.0[120/1]via131.1.45.4,00:00:00,FastEthernet0/0
R40.1.3.0[120/1]via131.1.45.4,00:00:00,FastEthernet0/0
R40.1.2.0[120/1]via131.1.45.4,00:00:00,FastEthernet0/0
10.0.0.0/24issubnetted,2subnets
R10.1.2.0[120/3]via131.1.45.4,00:00:00,FastEthernet0/0
R10.1.1.0[120/3]via131.1.45.4,00:00:00,FastEthernet0/0
131.1.0.0/24issubnetted,4subnets
R131.1.12.0[120/2]via131.1.45.4,00:00:00,FastEthernet0/0
R131.1.23.0[120/2]via131.1.45.4,00:00:00,FastEthernet0/0
R131.1.24.0[120/1]via131.1.45.4,00:00:00,FastEthernet0/0
C131.1.45.0isdirectlyconnected,FastEthernet0/0
Tosummarizeallthe40.1.0.0subnets:
OnR4
R4(config)#intf0/0
R4(configif)#ipsummaryaddressrip40.1.0.0255.255.252.0
ToVerifytheconfiguration:
OnR5
R5#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
R2.0.0.0/8[120/2]via131.1.45.4,00:00:02,FastEthernet0/0
100.0.0.0/24issubnetted,1subnets
R
100.0.0.0[120/3]via131.1.45.4,00:00:02,FastEthernet0/0
R3.0.0.0/8[120/3]via131.1.45.4,00:00:02,FastEthernet0/0
R4.0.0.0/8[120/1]via131.1.45.4,00:00:02,FastEthernet0/0
C5.0.0.0/8isdirectlyconnected,Loopback0
40.0.0.0/22issubnetted,1subnets
R40.1.0.0[120/1]via131.1.45.4,00:00:02,FastEthernet0/0
10.0.0.0/24issubnetted,2subnets
www.ccieuniversity.com
R10.1.2.0[120/3]via131.1.45.4,00:00:03,FastEthernet0/0
R10.1.1.0[120/3]via131.1.45.4,00:00:03,FastEthernet0/0
131.1.0.0/24issubnetted,4subnets
R131.1.12.0[120/2]via131.1.45.4,00:00:03,FastEthernet0/0
R131.1.23.0[120/2]via131.1.45.4,00:00:05,FastEthernet0/0
R131.1.24.0[120/1]via131.1.45.4,00:00:05,FastEthernet0/0
C131.1.45.0isdirectlyconnected,FastEthernet0/0
Task 7
Erasethestartupconfigandreloadtheroutersbeforeproceedingtothenextsection.
www.ccieuniversity.com
Lab1
ConfiguringEIGRPandadjustingtimers
R1
R2
.1.2
S0/0
FrameRelay
S0/0
F0/0 .2
.3
F0/0
.3
R4
.4
. R3
FrameRelay
S0/0
S0/0
LabSetup:
R2andR3sF0/0interfaceshouldbeconfiguredtobeinVLAN23.
R1andR2,R3andR4shouldbeconfiguredinaframerelaymultipointmanner.
Donotuseasubinterfacetoaccomplishthistask.
www.ccieuniversity.com
IPAddressing
Router
R1
R2
R3
R4
Interface
Lo0
F/RinterfacetoR2
Lo0
F/RinterfacetoR1
F0/0interfacetoR3
Lo0
F/RinterfacetoR4
F0/0interfacetoR2
Lo0
F/RinterfacetoR3
IPaddress
1.1.1.1/8
131.1.12.1/24
2.2.2.2/8
131.1.12.2/24
131.1.23.2/24
3.3.3.3/8
131.1.34.3/24
131.1.23.3/24
4.4.4.4/8
131.1.34.4/24
Task1
ConfigureEIGRPAS100onallroutersandadvertisetheirdirectly connectednetworks.
OnR1
R1(config)#routereigrp100
R1(configrouter)#noau
R1(configrouter)#netw131.1.12.00.0.0.255
R1(configrouter)#netw1.1.1.1255.255.255.255
OnR2
R2(config)#routereigrp100
R2(configrouter)#noau
R2(configrouter)#netw131.1.12.00.0.0.255
R2(configrouter)#netw2.0.0.00.255.255.255
R2(configrouter)#netw131.1.23.00.0.0.255
OnR3
R3(configif)#routereigrp100
R3(configrouter)#noau
R3(configrouter)#netw131.1.23.00.0.0.255
R3(configrouter)#netw131.1.34.00.0.0.255
R3(configrouter)#netw3.3.3.3255.255.255.255
OnR4
www.ccieuniversity.com
R4(config)#routereigrp100
R4(configrouter)#noau
R4(configrouter)#netw131.1.34.00.0.0.255
R4(configrouter)#netw4.0.0.0
Task2
Theseroutersshouldsendtheirhellosevery30secondsandiftheydontreceiveahello
fromtheirneighboringrouterfor120seconds,theneighboradjacencyshouldbe
terminated.
On R1
IntS0/0.12
R1(configsubif)#iphellointervaleigrp10030
R1(configsubif)#ipholdtimeeigrp100120
OnR2
IntS0/0.21
R2(configsubif)#iphellointervaleigrp10030
R2(configsubif)#ipholdtimeeigrp100120
IntF0/0
R2(configsubif)#iphellointervaleigrp10030
R2(configsubif)#ipholdtimeeigrp100120
OnR3
IntS0/0.34
R3(configsubif)#iphellointervaleigrp10030
R3(configsubif)#ipholdtimeeigrp100120
IntF0/0
R3(configsubif)#iphellointervaleigrp10030
R3(configsubif)#ipholdtimeeigrp100120
OnR4
IntS0/0.43
R4(configsubif)#iphellointervaleigrp10030
R4(configsubif)#ipholdtimeeigrp100120
www.ccieuniversity.com
Task3
EnsurethattheseroutersusebandwidthonlyandNOTbandwidth+delaytocalculate
theircompositemetricforagivennetwork.
ThistaskisaccomplishedbysettingtheKvalues,thecommandtoconfiguredtheK
valuesis:
Metricweighttosk1k2k3k4k5
ThiscommandisenteredinrouterEigrpconfigmode,wheretosvalueisalwaysset
to0,andthe defaultKvaluesareasfollows:
K1=1,K2=0,K3=1,K4=0,K50
TheKvalueseffecttheresultofthefollowingformula:
[(K1*Bandwidth)+(K2*bandwidth/256 load)+(K3*delay)]*256
IfK5doesnotequaltozero,thenanadditionaloperationisperformedasfollows:
[K5/K4+reliability]
Therefore,ifonlythebandwidthiswhatshouldbeconsidered,thenwemustsetthe
valueofK3tozero.Butrememberthatthischangemustoccuronallroutersorelse
therouterswontestablishneighboradjacency.
TodisplaythedefaultvaluesfortheKvariables,enterthefollowingcommand:
Showipprotocols
RoutingProtocolis"eigrp100"
Outgoingupdatefilterlistforallinterfacesisnotset
Incomingupdatefilterlistforallinterfacesisnotset
Defaultnetworksflaggedinoutgoingupdates
Defaultnetworksacceptedfromincomingupdates
EIGRPmetricweightK1=1,K2=0,K3=1,K4=0,K5=0
EIGRPmaximumhopcount100
EIGRPmaximummetricvariance1
Redistributing:eigrp100
EIGRPNSFawarerouteholdtimeris240s
Automaticnetworksummarizationisnotineffect
ThedefaultvaluesfortheK
Maximumpath:4
Variables
RoutingforNetworks:
4.0.0.0
131.1.34.0/24
RoutingInformationSources:
GatewayDistanceLastUpdate
131.1.34.39000:14:15
Distance:internal90external170
On AllRouters
www.ccieuniversity.com
(configrouter)#metricweights010000
ToVerifytheconfiguration:
Showipprotocols
RoutingProtocolis"eigrp100"
Outgoingupdatefilterlistforallinterfacesisnotset
Incomingupdatefilterlistforallinterfacesisnot set
Defaultnetworksflaggedinoutgoingupdates
Defaultnetworksacceptedfromincomingupdates
EIGRPmetricweightK1=1,K2=0,K3=0,K4=0,K5=0
EIGRPmaximumhopcount100
EIGRPmaximummetricvariance1
Redistributing:eigrp100
EIGRPNSFawarerouteholdtimeris240s
Automaticnetworksummarizationisnotineffect
Maximumpath:4
RoutingforNetworks:
4.0.0.0
131.1.34.0/24
RoutingInformationSources:
GatewayDistanceLastUpdate
131.1.34.3
9000:00:05
Distance:internal90external170
Task4
Erasethestartupconfigandreloadtheroutersbeforeproceedingtothenextlab.
www.ccieuniversity.com
Lab2
EIGRPMetric
UsethetopologyandIPaddressingfromLab1
Task1
RunRIPv2onR1andadvertiseitsdirectly connectednetworks.
OnR1
R1(config)#routerrip
R1(configrouter)#noau
R1(configrouter)#netw131.1.0.0
R1(configrouter)#netw1.0.0.0
R1(configrouter)#ver2
Task2
R2shouldadvertiseitsframerelayandLoopback0interfaceinRIPv2andLoopback1
(22.2.2.2/8)andF0/0interfaceinEIGRP100.
OnR2
R2(configsubif)#routerrip
R2(configrouter)#netw131.1.0.0
R2(configrouter)#netw2.0.0.0
R2(configrouter)#ver2
R2(configrouter)#noau
R2(configrouter)#passiveinterfaceF0/0
R2(configrouter)#routereigrp100
R2(configrouter)#netw22.0.0.0
R2(configrouter)#netw131.1.23.00.0.0.255
www.ccieuniversity.com
Task3
R3andR4shouldrunEIGRP100andadvertisetheirdirectlyconnectednetworksinthe
EIGRProutingdomain.
OnR3
R3(config)#routereigrp100
R3(configrouter)#noau
R3(configrouter)#netw131.1.23.00.0.0.255
R3(configrouter)#netw131.1.34.00.0.0.255
R3(configrouter)#netw3.0.0.0
OnR4
R4(configrouter)#routereigrp100
R4(configrouter)#netw4.0.0.0
R4(configrouter)#netw131.1.34.00.0.0.255
R4(configrouter)#noau
Task4
PerformamutualredistributionbetweenRIPv2andEIGRPsuchthatR1seestheEIGRP
routeswiththecorrecthopcount.Forexample,R1shouldseenetwork3.0.0.0twohops
away,andnetwork4.0.0.0threehopsaway.
On R2
R2(config)#accesslist3permit3.0.0.00.255.255.255
R2(config)#accesslist4permit4.0.0.00.255.255.255
R2(config)#accesslist34permit131.1.34.00.0.0.255
R2(config)#accesslist23permit131.1.23.00.0.0.255
R2(config)#accesslist22permit22.0.0.00.255.255.255
R2(config)#routemapTESTpermit10
R2(configroutemap)#matchipaddr3
R2(configroutemap)#setmetric2
R2(config)#routemapTESTpermit20
R2(configroutemap)#matchipaddr4
R2(configroutemap)#setmetric3
www.ccieuniversity.com
R2(config)#routemapTESTpermit30
R2(configroutemap)#matchipaddr23
R2(configroutemap)#setmetric1
R2(config)#routemapTESTpermit40
R2(configroutemap)#matchipaddr34
R2(configroutemap)#setmetric2
R2(config)#routemapTESTpermit50
R2(configroutemap)#matchipaddr22
R2(configroutemap)#setmetric1
R2(config)#routemapTESTpermit50
R2(configroutemap)#setmetric1
Note,routemapTESTpermit50mustbeconfiguredforthefuturenetworksthat
mayberedistributedintoRIP.
R2(configrouter)#routerrip
R2(configrouter)#redistributeeigrp100routemapTEST
R2(config)#routereigrp100
R2(configrouter)#redistributeripmetric15002000025511500
Task5
Erasestartupconfigandreloadtheroutersbeforeproceedingtothenextlab.
www.ccieuniversity.com
Lab3
EIGRPSummarization&Advanced
Summarization
R1
R2
.1.2
F0/0
S0/0 .2
F0/0
FrameRelay
.3
R4
S0/0
.3
.4
F0/0
. R3
F0/0
IPAddressing
Router
R1
R2
Interface
Lo0
Lo1
Lo2
Lo3
F0/0interfacetoR2
Lo0
Lo1
Lo2
Lo3
F0/0interfacetoR1
S0/0interfacetoR3
IPaddress
1.1.0.1/24
1.1.1.1/24
1.1.2.1/24
1.1.3.1/24
131.1.12.1/24
2.2.4.2/24
2.2.5.2/24
2.2.6.2/24
2.2.7.2/24
131.1.12.2/24
131.1.23.2/24
www.ccieuniversity.com
R3
Lo0
Lo1
Lo2
Lo3
S0/0interfacetoR2
F0/0interfacetoR4
Lo0
Lo1
Lo2
Lo3
F0/0interfacetoR3
R4
3.3.8.3/24
3.3.9.3/24
3.3.10.3/24
3.3.11.3/24
131.1.23.3/24
131.1.34.3/24
4.4.12.4/24
4.4.13.4/24
4.4.14.4/24
4.4.15.4/24
131.1.34.4/24
LabSetup:
R1andR2sF0/0interfaceshouldbeconfiguredinVLAN12.
R3andR4sF0/0interfaceshouldbeconfiguredinVLAN34.
R2andR3sFramerelayconnectionshouldbeconfiguredinamultipoint
manner.Donotuseasubinterfacetoaccomplishthistask.
Task1
ConfigureEIGRPAS100onallroutersandadvertisetheirdirectlyconnectednetworks.
OnR1
R1(config)#routereigrp100
R1(configrouter)#noau
R1(configrouter)#netw131.1.0.0
R1(configrouter)#netw1.0.0.0
OnR2
R2(config)#routereigrp100
R2(configrouter)#noau
R2(configrouter)#netw131.1.0.0
R2(configrouter)#netw2.0.0.0
OnR3
R3(configif)#routereigrp100
www.ccieuniversity.com
R3(configrouter)#noau
R3(configrouter)#netw131.1.0.0
R3(configrouter)#netw3.0.0.0
OnR4
R4(configif)#routereigrp100
R4(configrouter)#noau
R4(configrouter)#netw131.1.0.0
R4(configrouter)#netw4.0.0.0
Task2
ConfigureR2suchthatitadvertisesasummaryrouteforitsLoopbackinterfacestoR3.
InEigrproutingprotocol,summarizationcanbeperformedonanyrouter,inEigrp
summarizationmustbeperformedintheinterfaceconfigurationmode.
OnR2
R2(configrouter)#intS0/0
R2(configif)#ipsummaryaddresseigrp1002.2.4.0255.255.252.0
Toverifytheconfiguration:
OnR2
R2#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
1.0.0.0/24issubnetted,4subnets
D1.1.0.0[90/156160]via131.1.12.1,00:01:17,FastEthernet0/0
D1.1.1.0[90/156160] via131.1.12.1,00:01:17,FastEthernet0/0
D1.1.2.0[90/156160]via131.1.12.1,00:01:17,FastEthernet0/0
www.ccieuniversity.com
D1.1.3.0[90/156160]via131.1.12.1,00:01:17,FastEthernet0/0
2.0.0.0/8isvariablysubnetted,5subnets,2masks
C2.2.4.0/24isdirectlyconnected,Loopback0
D2.2.4.0/22isasummary,00:01:17,Null0
Note,whensummarizationis
C2.2.5.0/24isdirectlyconnected,Loopback1
configured,Eigrpwillinjecta
C2.2.6.0/24isdirectlyconnected,Loopback2
discardrouteforloopavoidance
C2.2.7.0/24isdirectlyconnected,Loopback3
3.0.0.0/24issubnetted,4subnets
D3.3.8.0[90/2297856]via131.1.23.3,00:01:18,Serial0/0
D3.3.9.0[90/2297856]via131.1.23.3,00:01:18,Serial0/0
D
3.3.10.0[90/2297856]via131.1.23.3,00:01:18,Serial0/0
D3.3.11.0[90/2297856]via131.1.23.3,00:01:18,Serial0/0
4.0.0.0/24issubnetted,4subnets
D4.4.12.0[90/2300416]via131.1.23.3,00:01:18,Serial0/0
D4.4.13.0[90/2300416]via131.1.23.3,00:01:18,Serial0/0
D4.4.14.0[90/2300416]via131.1.23.3,00:01:18,Serial0/0
D4.4.15.0[90/2300416]via131.1.23.3,00:01:18,Serial0/0
131.1.0.0/24issubnetted,3subnets
C131.1.12.0isdirectlyconnected,FastEthernet0/0
C131.1.23.0isdirectlyconnected,Serial0/0
D131.1.34.0[90/2172416]via131.1.23.3,00:01:18,Serial0/0
R2#
OnR3
R3#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
1.0.0.0/24issubnetted,4subnets
D1.1.0.0[90/2300416]via131.1.23.2,00:11:26,Serial0/0
D1.1.1.0[90/2300416]via131.1.23.2,00:11:26,Serial0/0
D1.1.2.0[90/2300416]via131.1.23.2,00:11:26,Serial0/0
D1.1.3.0[90/2300416]via131.1.23.2,00:11:26,Serial0/0
2.0.0.0/22issubnetted,1subnets
D
2.2.4.0[90/2297856]via131.1.23.2,00:03:55,Serial0/0
3.0.0.0/24issubnetted,4subnets
www.ccieuniversity.com
C3.3.8.0isdirectlyconnected,Loopback0
C3.3.9.0isdirectlyconnected,Loopback1
C3.3.10.0isdirectlyconnected,Loopback2
C
3.3.11.0isdirectlyconnected,Loopback3
4.0.0.0/24issubnetted,4subnets
D4.4.12.0[90/156160]via131.1.34.4,00:11:05,FastEthernet0/0
D4.4.13.0[90/156160]via131.1.34.4,00:11:05,FastEthernet0/0
D4.4.14.0[90/156160]via131.1.34.4,00:11:05,FastEthernet0/0
D4.4.15.0[90/156160]via131.1.34.4,00:11:05,FastEthernet0/0
131.1.0.0/24issubnetted,3subnets
D131.1.12.0[90/2172416]via131.1.23.2,00:11:27,Serial0/0
C131.1.23.0isdirectlyconnected,Serial0/0
C131.1.34.0isdirectlyconnected,FastEthernet0/0
Task3
R2shouldsummarizeitsloopbackinterfacesandadvertiseasinglesummaryrouteplus
allthespecificroutestoR1.
TheleakmapwasintroducedinIOS12.3(14)T anditmustbeconfiguredunderthe
physicalinterfaceandNOTasubinterface.
Configuringleakmapoptionallowsustoadvertiseacomponentroute(Oneor
morespecificnetworksofasummaryroute)thatwouldotherwisebesuppressedby
themanualsummarization.
Therearethreerulestoremember:
Iftheleakmapisconfiguredtoreferencearoutemapthatdoesnotexist,
onlythesummaryrouteisadvertisedandthemorespecificroutesare
suppressed.
Iftheleakmapisconfiguredtoreferencearoutemapandtheroutemapis
referencinganaccesslistthatdoesNOTexist,thenthesummaryrouteplus
allthespecificroutesareadvertised.
Iftheleakmapisconfiguredtoreferencearoutemapandtheroutemap
matchesonanaccesslist,allthepermittednetworksbytheaccesslistwillbe
advertisedalongwiththesummaryroute.
OnR2
R2(config)#intF0/0
R2(configif)#ipsummaryaddresseigrp1002.2.4.0255.255.252.0leakmapTEST21
R2(config)#routemapTEST21permit10
R2(configroutemap)#matchipaddr99
www.ccieuniversity.com
R2(configroutemap)#exit
Note,theleakmapisreferencingaroutemapandtheroutemapismatchingonan
accesslistthatdoesnotexist,therefore,thesummaryrouteplusallthespecific
routesareadvertised.Iftheroutemapdoesnot haveamatchcommandconfigured
thesamewillresult.
ToVerifytheconfiguration:
OnR1
R1#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
Notethesummaryroute+
allthespecificroutes
areadvertisedtoR1
1.0.0.0/24issubnetted,4subnets
C1.1.0.0isdirectlyconnected,Loopback0
C1.1.1.0isdirectlyconnected,Loopback1
C1.1.2.0isdirectlyconnected,Loopback2
C1.1.3.0isdirectlyconnected,Loopback3
2.0.0.0/8isvariablysubnetted,5subnets,2masks
D2.2.4.0/24[90/156160]via131.1.12.2,00:00:47,FastEthernet0/0
D2.2.4.0/22[90/156160]via131.1.12.2,00:01:15,FastEthernet0/0
D2.2.5.0/24[90/156160]via131.1.12.2,00:00:47,FastEthernet0/0
D2.2.6.0/24[90/156160]via131.1.12.2,00:00:48,FastEthernet0/0
D
2.2.7.0/24[90/156160]via131.1.12.2,00:00:48,FastEthernet0/0
3.0.0.0/24issubnetted,4subnets
D3.3.8.0[90/2300416]via131.1.12.2,00:18:00,FastEthernet0/0
D3.3.9.0[90/2300416]via131.1.12.2,00:18:01,FastEthernet0/0
D
3.3.10.0[90/2300416]via131.1.12.2,00:18:01,FastEthernet0/0
D3.3.11.0[90/2300416]via131.1.12.2,00:18:01,FastEthernet0/0
4.0.0.0/24issubnetted,4subnets
D4.4.12.0[90/2302976]via131.1.12.2,00:17:40,FastEthernet0/0
D
4.4.13.0[90/2302976]via131.1.12.2,00:17:40,FastEthernet0/0
D4.4.14.0[90/2302976]via131.1.12.2,00:17:40,FastEthernet0/0
D4.4.15.0[90/2302976]via131.1.12.2,00:17:40,FastEthernet0/0
131.1.0.0/24issubnetted,3subnets
C
131.1.12.0isdirectlyconnected,FastEthernet0/0
www.ccieuniversity.com
D131.1.23.0[90/2172416]via131.1.12.2,00:18:15,FastEthernet0/0
D131.1.34.0[90/2174976]via131.1.12.2,00:18:02,FastEthernet0/0
R1#
Task4
ConfigureR4tosummarizeitsloopbackinterfacesandadvertiseasummaryrouteplus
network4.4.13.0/24toR3.
OnR4
R4(config)#IntF0/0
R4(configif)#ipsummaryaddresseigrp1004.4.12.0255.255.252.0leakmapTEST43
R4(config)#routemapTEST43permit10
R4(configroutemap)#matchipaddr43
R4(config)#accesslist43permit4.4.13.00.0.0.255
Toverifytheconfiguration:
OnR3
R3#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
1.0.0.0/24issubnetted,4subnets
D1.1.0.0[90/2300416]via131.1.23.2,01:47:09,Serial0/0
D1.1.1.0[90/2300416]via131.1.23.2,01:47:09,Serial0/0
D1.1.2.0[90/2300416]via131.1.23.2,01:47:09,Serial0/0
D1.1.3.0[90/2300416]via131.1.23.2,01:47:09,Serial0/0
2.0.0.0/22issubnetted,1subnets
D2.2.4.0[90/2297856]via131.1.23.2,01:39:38,Serial0/0
www.ccieuniversity.com
3.0.0.0/24issubnetted,4subnets
C3.3.8.0isdirectlyconnected,Loopback0
C3.3.9.0isdirectlyconnected,Loopback1
C3.3.10.0isdirectlyconnected,Loopback2
C3.3.11.0isdirectlyconnected,Loopback3
4.0.0.0/8isvariablysubnetted,2subnets,2masks
D4.4.12.0/22[90/156160]via131.1.34.4,00:01:35,FastEthernet0/0
D4.4.13.0/24[90/156160]via131.1.34.4,00:01:05,FastEthernet0/0
131.1.0.0/24issubnetted,3subnets
D131.1.12.0 [90/2172416]via131.1.23.2,01:47:12,Serial0/0
C131.1.23.0isdirectlyconnected,Serial0/0
C131.1.34.0isdirectlyconnected,FastEthernet0/0
R3#
Task5
ConfigureR3tosummarizeitsloopbackinterfacesandadvertiseasinglesummary plus
3.3.10.0/24and3.3.11.0/24toR4.
OnR3
R3(config)#intF0/0
R3(configif)#ipsummaryaddresseigrp1003.3.8.0255.255.252.0leakmapTEST34
R3(config)#routemapTEST34permit10
R3(configroutemap)#matchipaddr34
R3(config)#accesslist34permit3.3.10.00.0.0.255
R3(config)#accesslist34permit3.3.11.00.0.0.255
Toverifytheconfiguration:
OnR4
R4#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
www.ccieuniversity.com
Gatewayoflastresortisnotset
1.0.0.0/24issubnetted,4subnets
D1.1.0.0[90/2302976]via131.1.34.3,00:07:13,FastEthernet0/0
D1.1.1.0[90/2302976]via131.1.34.3,00:07:13,FastEthernet0/0
D1.1.2.0[90/2302976]via131.1.34.3,00:07:13,FastEthernet0/0
D1.1.3.0[90/2302976]via131.1.34.3,00:07:13,FastEthernet0/0
2.0.0.0/22issubnetted,1subnets
D2.2.4.0 [90/2300416]via131.1.34.3,00:07:13,FastEthernet0/0
3.0.0.0/8isvariablysubnetted,3subnets,2masks
D3.3.8.0/22[90/156160]via131.1.34.3,00:00:41,FastEthernet0/0
D3.3.10.0/24[90/156160]via131.1.34.3,00:07:14,FastEthernet0/0
D3.3.11.0/24[90/156160]via131.1.34.3,00:07:14,FastEthernet0/0
4.0.0.0/8isvariablysubnetted,5subnets,2masks
C4.4.12.0/24isdirectlyconnected,Loopback0
D4.4.12.0/22isasummary,00:07:17,Null0
C4.4.13.0/24isdirectlyconnected,Loopback1
C4.4.14.0/24isdirectlyconnected,Loopback2
C4.4.15.0/24isdirectlyconnected,Loopback3
131.1.0.0/24issubnetted,3subnets
D131.1.12.0[90/2174976]via131.1.34.3,00:07:17,FastEthernet0/0
D131.1.23.0[90/2172416]via131.1.34.3,00:07:17,FastEthernet0/0
C131.1.34.0isdirectlyconnected,FastEthernet0/0
R4#
Task6
ConfigureR4toinjectadefaultrouteintoEigrp100routingdomain.DoNOTuseany
globalorrouterconfigurationcommandtoaccomplishthistask.
OnR4
R4(config)#intF0/0
R4(configif)#ipsummaryaddresseigrp1000.0.0.00.0.0.0
ToVerifytheconfiguration:
OnR3
R3#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
www.ccieuniversity.com
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortis131.1.34.4tonetwork0.0.0.0
1.0.0.0/24issubnetted,4subnets
D1.1.0.0[90/2300416]via131.1.23.2,00:10:40,Serial0/0
D1.1.1.0[90/2300416]via131.1.23.2,00:10:40,Serial0/0
D1.1.2.0[90/2300416]via131.1.23.2,00:10:40,Serial0/0
D1.1.3.0[90/2300416]via131.1.23.2,00:10:40,Serial0/0
2.0.0.0/22issubnetted,1subnets
D2.2.4.0[90/2297856]via131.1.23.2,00:10:40,Serial0/0
3.0.0.0/8isvariablysubnetted,5subnets,2masks
C3.3.8.0/24isdirectlyconnected,Loopback0
D3.3.8.0/22isasummary,00:10:41,Null0
C
3.3.9.0/24isdirectlyconnected,Loopback1
C3.3.10.0/24isdirectlyconnected,Loopback2
C3.3.11.0/24isdirectlyconnected,Loopback3
4.0.0.0/8isvariablysubnetted,2subnets,2masks
D4.4.12.0/22[90/156160]via131.1.34.4,00:10:42,FastEthernet0/0
D4.4.13.0/24[90/156160]via131.1.34.4,00:10:42,FastEthernet0/0
131.1.0.0/24issubnetted,3subnets
D131.1.12.0[90/2172416]via131.1.23.2,00:10:42,Serial0/0
C131.1.23.0isdirectlyconnected,Serial0/0
C131.1.34.0isdirectlyconnected,FastEthernet0/0
D*0.0.0.0/0[90/30720]via131.1.34.4,00:00:11,FastEthernet0/0
R3#
Task7
Erasethestartupconfigandreloadtheroutersbeforeproceedingtothenextlab.
www.ccieuniversity.com
Lab4
EIGRPLoadBalancing
R1
F0/0
F0/0
R2
S0/0
FrameRelay
S0/0
S0/0
R3
R4
F0/0
F0/0
F0/0
R5
www.ccieuniversity.com
LabSetup:
R1andR2sF0/0interfaceshouldbeinVLAN12
R3,R4andR5sF0/0interfaceshouldbeinVLAN345
Theframerelaycloudshouldbeconfiguredinahubandspokemanner,withR2
beingthehubandR3andR4asthespokes,R2shouldbeconfiguredwithtwo
subinterfacesinamultipointmanner,DLCI203connectingR2toR3andDLCI
204connectingR2toR4.
R3andR4shouldbeconfiguredinamultipointmannerthesetworoutersshould
notbeconfiguredwithasubinterface.
IPAddressing
Router
R1
R2
R3
R4
R5
Interface
Lo0
F0/0interfacetoR2
Lo0
F/RinterfacetoR3
F/RinterfacetoR4
F0/0interfacetoR1
Lo0
F/RinterfacetoR2
F0/0interfacetoR4andR5
Lo0
F/RinterfacetoR2
F0/0interfacetoR3andR5
Lo0
F0/0interfacetoR3andR4
IPaddress
1.1.1.1/8
131.1.12.1/24
2.2.2.2/8
131.1.23.2/24
131.1.24.2/24
131.1.12.2/24
3.3.3.3/8
131.1.23.3/24
131.1.100.3/24
4.4.4.4/8
131.1.24.4/24
131.1.100.4/24
5.5.5.5/8
131.1.100.5/24
Task1
ConfigureEigrp100onallroutersandadvertisetheirdirectlyconnectednetworks.
EnsurethattheseroutershaveNLRItoalltheprefixesadvertisedinthistopology.
TheseroutersshouldNOTtakesuboptimalroutestoreachanynetwork.
OnR1
R1(config)#routereigrp100
R1(configrouter)#noau
www.ccieuniversity.com
R1(configrouter)#netw131.1.0.0
R1(configrouter)#netw1.0.0.0
OnR2
R2(config)#routereigrp100
R2(configrouter)#noau
R2(configrouter)#netw131.1.0.0
R2(configrouter)#netw2.0.0.0
OnR3
R3(config)#routereigrp100
R3(configrouter)#netw131.1.0.0
R3(configrouter)#netw3.0.0.0
R3(configrouter)#noau
OnR4
R4(config)#routereigrp100
R4(configrouter)#noau
R4(configrouter)#netw131.1.0.0
R4(configrouter)#netw4.0.0.0
OnR5
R5(config)#routereigrp100
R5(configrouter)#noau
R5(configrouter)#netw131.1.0.0
R5(configrouter)#netw5.0.0.0
Toverifytheconfiguration:
OnR3
R3#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
www.ccieuniversity.com
Gatewayoflastresortisnotset
D1.0.0.0/8[90/2300416]via131.1.23.2,00:00:44,Serial0/0
D2.0.0.0/8[90/2297856]via131.1.23.2,00:00:44,Serial0/0
C3.0.0.0/8isdirectlyconnected,Loopback0
D4.0.0.0/8[90/156160]via131.1.100.4,00:00:42,FastEthernet0/0
D5.0.0.0/8[90/156160]via131.1.100.5,00:00:23,FastEthernet0/0
131.1.0.0/24issubnetted,4subnets
D131.1.12.0[90/2172416]via131.1.23.2,00:00:44,Serial0/0
C131.1.23.0isdirectlyconnected,Serial0/0
D131.1.24.0[90/2172416]via131.1.100.4,00:00:46,FastEthernet0/0
C131.1.100.0isdirectlyconnected,FastEthernet0/0
Task2
ConfigureR2suchthatitwaits60minutesbeforedeclaringaroutetobeSIA.
OnR2
R2(configif)#routereigrp100
R2(configrouter)#timersactivetime60
Task3
ConfigureR5suchthattherouterdisablestheSIAtimersandpermitstheroutingwait
timetoremainactiveindefinitely
On R5
R5(configif)#routereigrp100
R5(configrouter)#timersactivetimedisabled
Task4
OnR2,changethebandwidthoftheserialsubinterfaceconnectiontoR3tohalfofits
defaultvalue.
OnR2
www.ccieuniversity.com
R2(config)#intS0/0.23
R2(configsubif)#bandwidth772
Task5
EnsurethatR2performsunequalcostloadbalancingforallthedownstreamnetworks.
TheVariancecommandallowsustoperformunequalcostloadbalancingifthe
feasibilityconditionismet.Onlypathsthatarefeasiblecanbeusedforload
balancingandincludedintheroutingtable.Alwaysrememberthefollowingrules:
Theadvertiseddistancemustbelowerthanthelocalroutersfeasibledistance.
Themultiplier(Variancecommandsvalue)timesthelocalbestmetricforthe
destinationmustbegreaterthanorequaltothemetricthroughthenextrouter.
Thepathmustbeintheroutingtablefortheroutertouseit.
Inthiscasethebestpathtonetworks5.0.0.0/8and131.1.100.0/24isreachable
throughR4.Wehavetofindout thecompositemetricthroughR4asfollows:
OnR2
R2#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSA externaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
D1.0.0.0/8[90/156160]via131.1.12.1,00:02:18,FastEthernet0/0
C2.0.0.0/8isdirectlyconnected,Loopback0
D3.0.0.0/8[90/2300416]via131.1.24.4,00:02:18,Serial0/0.24
D4.0.0.0/8[90/2297856]via131.1.24.4,00:02:18,Serial0/0.24
D5.0.0.0/8[90/2300416]via131.1.24.4,00:02:18,Serial0/0.24
131.1.0.0/24issubnetted,4subnets
C131.1.12.0isdirectlyconnected,FastEthernet0/0
C131.1.23.0isdirectlyconnected,Serial0/0.23
C131.1.24.0isdirectlyconnected,Serial0/0.24
D131.1.100.0[90/2172416]via131.1.24.4,00:02:20,Serial0/0.24
R2#
www.ccieuniversity.com
Note,thecostofthepaththroughR4toreachnetwork5.0.0.0/8is2300416and
network131.1.100.0/24is2172416.
ThenextstepistofigureoutthecostoftheroutethroughR3,thefollowing
commandwillrevealthatinformation:
OnR2
R2#Showipeigrptopology5.0.0.0/8
IPEIGRP(AS100):Topologyentryfor5.0.0.0/8
StateisPassive,Query originflagis1,1Successor(s),FDis2300416
RoutingDescriptorBlocks:
131.1.24.4(Serial0/0.24),from131.1.24.4,Sendflagis0x0
Compositemetricis(2300416/156160),RouteisInternal
Vectormetric:
Minimumbandwidthis1544Kbit
Totaldelayis25100microseconds
Reliabilityis255/255
Loadis1/255
MinimumMTUis1500
Hopcountis2
131.1.23.3(Serial0/0.23),from131.1.23.3,Sendflagis0x0
Compositemetricis(3958528/156160),RouteisInternal
Vectormetric:
Minimumbandwidthis772Kbit
Totaldelayis25100microseconds
Reliabilityis255/255
Loadis1/255
MinimumMTUis1500
Hopcountis2
R2#
Note,thecostthroughR3is3958528
Thenextstepistoperformthefollowingdivision:
3958528(ThecostthroughR3)/2300416(ThecostthroughR4)
Theresultis1.720rounduptothenextvalue,whichis2
Ifthesametasksareperformedfornetwork131.1.100.0/24,youshouldseethe
following:
3830528/ 2172416=1.7632roundupto2
Thelaststepistoconfigurethevariancecommand,asfollows:
OnR2
www.ccieuniversity.com
R2(config)#routereigrp100
R2(configrouter)#variance2
Toverifytheconfiguration:
OnR2
R2#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
D1.0.0.0/8[90/156160]via131.1.12.1,00:03:22,FastEthernet0/0
C2.0.0.0/8isdirectlyconnected,Loopback0
D3.0.0.0/8[90/2300416]via131.1.24.4,00:03:22,Serial0/0.24
[90/3955968]via131.1.23.3,00:03:22,Serial0/0.23
D4.0.0.0/8[90/2297856]via131.1.24.4,00:03:22,Serial0/0.24
[90/3958528]via131.1.23.3,00:03:22,Serial0/0.23
D5.0.0.0/8[90/2300416]via131.1.24.4,00:03:22,Serial0/0.24
[90/3958528]via131.1.23.3,00:03:22, Serial0/0.23
131.1.0.0/24issubnetted,4subnets
C131.1.12.0isdirectlyconnected,FastEthernet0/0
C131.1.23.0isdirectlyconnected,Serial0/0.23
C131.1.24.0isdirectlyconnected,Serial0/0.24
D131.1.100.0[90/2172416] via131.1.24.4,00:03:23,Serial0/0.24
[90/3830528]via131.1.23.3,00:03:23,Serial0/0.23
R2#
InthiscaseEigrpwillperformaninverseproportionalloadbalancingandthe
variancecommandmeansthateverytwooutofthebestpath,itwillsendoneout
ofthesecondbestpath.Thefollowingcommandrevealstheproportions:
OnR2
R2#Showiproute5.0.0.0
Routingentryfor5.0.0.0/8
Knownvia"eigrp100",distance90,metric2300416,typeinternal
www.ccieuniversity.com
Redistributingviaeigrp100
Lastupdatefrom131.1.23.3on Serial0/0.23,00:05:18ago
RoutingDescriptorBlocks:
*131.1.24.4,from131.1.24.4,00:05:18ago,viaSerial0/0.24
Routemetricis2300416,trafficsharecountis240
Totaldelayis25100microseconds,minimumbandwidthis1544Kbit
Reliability255/255,minimumMTU1500bytes
Loading1/255,Hops2
131.1.23.3,from131.1.23.3,00:05:18ago,viaSerial0/0.23
Routemetricis3958528,trafficsharecountis139
Totaldelayis25100microseconds,minimumbandwidthis772Kbit
Reliability255/255,minimumMTU1500bytes
Loading1/255,Hops2
Task6
Erasethestartupconfigandreloadtheroutersbeforeproceedingtothenextlab.
www.ccieuniversity.com
Lab5
EIGRPauthenticationandadvanced
configuration
R1
R2
S0/0
S0/0
FrameRelay
LabSetup:
Configuretheframerelayroutersinapointtopointmanner.
IPaddress:
Routers
R1
R2
Interface
Lo0
FramerelayconnectiontoR2
Lo0
FramerelayconnectiontoR1
IPaddress
1.1.1.1 /8
131.1.12.1/24
2.2.2.2/8
131.1.12.2/24
www.ccieuniversity.com
Task1
ConfigureEIGRP100ontheroutersandadvertisetheirdirectlyconnectednetworks.
OnR1
R1(config)#routereigrp100
R1(configrouter)#noau
R1(configrouter)#netw131.1.0.0
R1(configrouter)#netw1.0.0.0
OnR2
R2(config)#routereigrp100
R2(configrouter)#noau
R2(configrouter)#netw2.0.0.0
R2(configrouter)#netw131.1.0.0
Task2
Enableauthenticationontherouters,useciscoasthepassword.
EigrpuseskeychainbaseauthenticationjustlikeRIPv2,theonlyauthentication
modeavailableinEigrpisMD5.
On BothRouters
(config)#keychainTEST
(configkeychain)#key1
(configkeychainkey)#keystringcisco
OnR1
R1(config)#intS0/0.12
R1(configsubif)#ipauthenticationkeychaineigrp100TEST
R1(configsubif)#ipauthenticationmodeeigrp100md5
OnR2
R2(config)#intS0/0.21
R2(configsubif)#ipauthenticationkeychaineigrp100TEST
R2(configsubif)#ipauthenticationmodeeigrp100md5
www.ccieuniversity.com
Task3
R1shouldbeconfiguredtologneighborwarningmessagesfortheEIGRP100andrepeat
thewarningmessagesevery10minutes.
ToenabletheloggingofEigrpneighborwarningmessagesyoumustentereigrp
logneighborwarningscommandundertheroutereigrpprocess.Thiswarning
messagecanberepeatedbasedonthenumberofsecondsconfigured.
Bydefault,neighborwarningmessagesarelogged.Ifthisbehaviorneedstobe
changed,thennoeigrplogneighborwarningmessagemustbeused.
OnR1
R1(configsubif)#routereigrp100
R1(configrouter)#eigrplogneighborwarning600
Task4
R2shouldnotloganyofitsadjacencychanges.
BydefaultEigrplogschangesinEigrpneighboradjacencies.Ifthisisnotneeded,
thisfeaturecanbeturnedoffusingthefollowingconfiguration:
OnR2
R2(config)#routereigrp100
R2(configrouter)#noeigrplogneighborchanges
Task5
ConfigureR2suchthatitadvertisesEIGRProuteswithgreaterthan110hopsas
unreachable.
OnR2
R2(config)#routereigrp100
R2(configrouter)#metricmaximumhops110
Theabovecommandwilladvertisetherouteswithahopcounthigherthan110as
unreachable,thedefaultsettingis100hops,anditcanbeincreasedupto255.
www.ccieuniversity.com
Task6
CreateastaticrouteonR2fornetwork3.0.0.0/8reachablebyR2andredistributethe
staticrouteintoEIGRProutingprocess.EnsurethatR1canseethisnetworkinitsrouting
table.
OnR2
R2(config)#iproute3.0.0.0255.0.0.0Null0
R2(config)#routereigrp100
R2(configrouter)#redistributestaticmetric15442000025511500
Task7
OnR1,changetheadministrativedistanceofallexternalnetworksto110.
Beforewechangetheadministrativedistanceoftheexternalroutes,weshouldsee
thedefaultsettings:
OnR1
R1#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
C1.0.0.0/8isdirectlyconnected,Loopback0
D2.0.0.0/8[90/2297856]via131.1.12.2,00:00:05,Serial0/0.12
DEX3.0.0.0/8[170/7289856]via131.1.12.2,00:00:05,Serial0/0.12
131.1.0.0/24issubnetted,1subnets
C131.1.12.0isdirectlyconnected,Serial0/0.12
Note,bydefaulttheadministrativedistanceofEigrpexternalnetworksis170.
www.ccieuniversity.com
ThefollowingcommandchangestheadministrativedistanceofEigrpexternal
routesto110.Rememberthiswillaffecttherouteronwhichitsconfiguredon.
OnR1
R1(config)#routereigrp100
R1(configrouter)#distanceeigrp90110
Thefirstvalueafterthedistanceeigrpcommandspecifiestheadministrative
distanceofEigrpinternalroutesandthesecondvaluespecifiestheadministrative
distanceofEigrpexternalroutes.
ToVerifytheconfiguration:
OnR1
R1#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
C1.0.0.0/8isdirectlyconnected,Loopback0
D2.0.0.0/8[90/2297856]via131.1.12.2,00:00:12,Serial0/0.12
DEX3.0.0.0/8[110/7289856]via131.1.12.2,00:00:12,Serial0/0.12
131.1.0.0/24issubnetted,1subnets
C131.1.12.0isdirectlyconnected,Serial0/0.12
R1#
Task8
EnsurethatR1neverusesmorethan45%ofthebandwidthforEIGRPupdatesyou
shoulduseanEIGRPspecificcommandtoaccomplishthistask.
OnR1
www.ccieuniversity.com
R1(configrouter)#intS0/0.12
R1(configsubif)#ipbandwidthpercenteigrp10045
TheabovecommandcanbeusedtoconfigurethebandwidththatEigrpusesonan
interface.
Task9
YouwereaskedtolimitEigrpsBandwidthutilizationonR1to386Kbits/sec,butyou
cannotrememberthecommand,useanothermethodtoaccomplishthesametask.
OnR1
R1(configrouter)#intS0/0.12
R1(configsubif)#noipbandwidthpercenteigrp10045
R1(configsubif)#bandwidth772
BydefaultEigrputilizes50%ofthebandwidth,ifyoumultiplythedesiredvalueby
two(Inthiscase772)andsetthebandwidthoftheinterfacetothatnumber,Eigrp
willusehalfofthatnumberwhichisthedesiredvalue.
Task10
Erasethestartupconfigandreloadtheroutersbeforeproceedingtothenextlab.
www.ccieuniversity.com
Lab6
EIGRPStub
R1
R2
.1
.2
131.1.12.0/24
S0/0
FrameRelay
S0/0
Labsetup:
ConfiguretheIPaddressingandFramerelayconnectionbetweentherouters
accordingtotheabovediagram.Ensurethattheroutersareconfiguredinapoint
topointmanner.
ConfigureF0/0interfaceontheroutersasfollowing:
R1sF0/0=200.1.1.1/24,andR2sF0/0=200.2.2.2/24
ConfigurethefollowingLoopbackinterfacesonR1andR2andadvertisethemin
EIGRP100:
Router Interface IPaddress
R1
Lo0
1.1.0.1/24
Lo1
1.1.1.1/24
Lo2
1.1.2.1/24
Lo3
1.1.3.1/24
R2
Lo0
Lo1
Lo2
Lo3
2.2.0.2/24
2.2.1.2/24
2.2.2.2/24
2.2.3.2/24
www.ccieuniversity.com
R1andR2shouldsummarizetheLoopbackinterfacesandadvertiseasingle
summarytoeachother.
CreatethefollowingstaticroutesonR1andR2andredistributetheminEIGRP:
Router Staticroute
R1
Createastaticroutetonetwork11.0.0.0/8viaF0/0
R2
Createastaticroutetonetwork22.0.0.0/8viaF0/0
AdvertisetheFastEthernetinterfacesoftheroutersasfollows:
Routers Interface
R1
F0/0(200.1.1.0/24)
R2
F0/0(200.2.2.0/24)
Routingprotocol
RIPv2
RIPv2
RedistributetheRIProutesintoEIGRProutingprotocol.
Theabovebulletitemsmustbecompletedinordertotestthenextsixscenarios:
www.ccieuniversity.com
TestEIGRPstubroutingoptionsonR1andR2,andanswerthefollowingquestions:
TEST#1
ConfigureEigrpstubroutingonR1usingtheconnectedoptions,andfillthefollowing
chart
OnR1
Routereigrp100
Eigrpstubconnected
Test#1iscompletedsothestudentswillunderstandwhattheyhavetodoforthenext5
tests.The1st columnidentifiesthenetworks,thesecondcolumniswhatR2seesinits
routingtable,andthethirdcolumniswhatR1seesinitsroutingtable.
Connected
R2routingtable R1sroutingtable
NO
YES
R1=1.1.0.0/24R2=2.2.0.0/24
1.1.1.0/242.2.1.0/24
1.1.2.0/242.2.2.0/24
1.1.3.0/242.2.3.0/24
Summarized
Becausetheyare
theconnected
routes
Becausethesummarized
routeswillincludethemore
specificroutes.
NO
YES
R1=1.1.0.0/22
Becauseonly
connectedroutes
areneeded
STUBroutingdoesNOT
affectthisrouter
NO
YES
Becauseonly
connectedroutes
areneeded.
STUBroutingdoesNOT
affectthisrouter
NO
YES
Becauseonly
connectedroutes
areneeded.
STUBroutingdoesNOT
affectthisrouter
R2=2.2.0.0/22
Static
R1=11.0.0.0/8
R2=22.0.0.0/8
Redistributed
R1=200.1.1.0/24
11.0.0.0/8
R2=200.2.2.0/24
22.0.0.0/8
AfterR1wasconfiguredwithEigrpstuboption,enteraShowiprouteandwrite
downthetypeofroutesinyourroutingtable.
Aftercompletingthechart,removetheeigrpstubroutingoptionandensurethatall
theroutesarereceivedbybothroutersbeforeproceedingtothenextTEST.
www.ccieuniversity.com
TEST#2
ConfigureEigrpstubroutingonR1usingthesummaryoptions,andfillthefollowing
chart:
OnR1
Routereigrp100
Noeigrpconnected
Eigrpstubsummary
Connected
R1=1.1.0.0/24R2=2.2.0.0/24
1.1.1.0/242.2.1.0/24
1.1.2.0/242.2.2.0/24
1.1.3.0/242.2.3.0/24
Summarized
R1=1.1.0.0/22
R2=2.2.0.0/22
Static
R1=11.0.0.0/8
R2=22.0.0.0/8
Redistributed
R1=200.1.1.0/24
11.0.0.0/8
R2=200.2.2.0
22.0.0.0/8
R2routingtable
NO
R1sroutingtable
NO
Becausethe
summarizedroutes
willincludethe
morespecific
routes.
YES
Becausethesummarized
routeswillincludethemore
specificroutes.
YES
Becausetheyarethe STUBroutingdoesNOT
summarizedroutes, affectthisrouter.
andsummaryoption
wasconfigured.
NO
YES
Becauseonlythe
summaryoptionis
configured.
STUBroutingdoesNOT
affectthisrouter
NO
YES
Becauseonlythe
summaryoptionis
configured
STUBroutingdoesNOT
affectthisrouter
Removetheeigrpstubroutingoptionandensurethatalltheroutesarereceivedby
bothroutersbeforeproceedingtothenexttest.
www.ccieuniversity.com
TEST#3
ConfigureEigrpstubroutingonR1usingtheStaticoptions,andfillthefollowingchart:
OnR1
Routereigrp100
Noeigrpsummary
Eigrpstubstatic
R2routingtable
NO
R1sroutingtable
NO
R1=1.1.0.0/24R2=2.2.0.0/24
1.1.1.0/242.2.1.0/24
1.1.2.0/242.2.2.0/24
1.1.3.0/242.2.3.0/24
Summarized
Becauseonlythestatic
optionisconfigured
NO
Becausethe
summarizedroutes
willincludethemore
specificroutes.
YES
R1=1.1.0.0/22
Becauseonlythestatic
optionisconfigured
STUBroutingdoes
NOTaffectthisrouter
YES
YES
Becausethestaticoption
wasconfigured.
STUBroutingdoes
NOTaffectthisrouter
NO
YES
Becauseonlythestatic
optionisconfigured
STUBroutingdoes
NOTaffectthisrouter
Connected
R2=2.2.0.0/22
Static
R1=11.0.0.0/8
R2=22.0.0.0/8
Redistributed
R1=200.1.1.0/24
11.0.0.0/8
R2=200.2.2.0
22.0.0.0/8
Removetheeigrpstubroutingoptionandensurethatalltheroutesarereceivedby
bothroutersbeforeproceedingtothenexttest.
www.ccieuniversity.com
TEST#4
ConfigureEigrpstubroutingonR1usingthereceiveonlyoptions,andfillthefollowing
chart:
OnR1
Routereigrp100
Noeigrpstubstatic
Eigrpstubreceiveonly
R2routingtable
NO
R1sroutingtable
NO
R1=1.1.0.0/24R2=2.2.0.0/24
1.1.1.0/242.1.1.0/24
1.1.2.0/242.1.2.0/24
1.1.3.0/242.1.3.0/24
Summarized
BecauseR1isconfigured
inreceiveonly,therefore
itllNOTadvertiseany
routestoR2
NO
Becausethe
summarizedroutes
willincludethemore
specificroutes.
YES
R1=1.1.0.0/22
BecauseR1isconfigured STUBroutingdoes
inreceiveonly,therefore NOTaffectthisrouter
itllNOTadvertiseany
routestoR2
NO
YES
Connected
R2=2.2.0.0/22
Static
R1=11.0.0.0/8
R2=22.0.0.0/8
Redistributed
R1=200.1.1.0/24
11.0.0.0/8
R2=200.2.2.0/24
22.0.0.0/8
BecauseR1isconfigured STUBroutingdoes
inreceiveonly,therefore NOTaffectthisrouter
itllNOTadvertiseany
routestoR2
NO
YES
BecauseR1isconfigured STUBroutingdoes
inreceiveonly,therefore NOTaffectthisrouter
itllNOTadvertiseany
routestoR2
Removetheeigrpstubroutingoptionandensurethatalltheroutesarereceivedby
bothroutersbeforeproceedingtothenexttest.
www.ccieuniversity.com
TEST#5
ConfigureEigrpstubroutingonR1usingtheredistributedoptions,andfillthe
followingchart:
OnR1
Routereigrp100
Noeigrpstubreceiveonly
Eigrpstubredistributed
R2routingtable
NO
R1sroutingtable
NO
R1=1.1.0.0/24R2=2.2.0.0/24
1.1.1.0/242.1.1.0/24
1.1.2.0/242.1.2.0/24
1.1.3.0/242.1.3.0/24
Summarized
Becausethesummarized
routeswillincludethe
morespecificroutes.
Becausethe
summarizedroutes
willincludethemore
specificroutes.
YES
R1=1.1.0.0/22
Becausethisoptionalso
enablesConnected,
Summaryaswellas
Redistributed.
STUBroutingdoes
NOTaffectthis
router
YES
YES
Becausetheserouteswill
showupasredistributed.
STUBroutingdoes
NOTaffectthis
router
YES
YES
Becausethisoptionalso
enablesConnected,
Summaryaswellas
Redistributed.
STUBroutingdoes
NOTaffectthis
router
Connected
R2=2.2.0.0/22
Static
R1=11.0.0.0/8
YES
R2=22.0.0.0/8
Redistributed
R1=200.1.1.0/24
11.0.0.0/8
R2=200.2.2.0/24
22.0.0.0/8
Removetheeigrpstubroutingoptionandensurethatalltheroutesarereceivedby
bothroutersbeforeproceedingtothenexttest.
www.ccieuniversity.com
TEST#6
ConfigureEigrpstubroutingonR1usingthecommandwithoutanoptions,andfillthe
followingchart:
OnR1
Routereigrp100
Noeigrpredistributed
Eigrpstub
Connected
R1=1.1.0.0/24R2=2.2.0.0/24
1.1.1.0/242.1.1.0/24
1.1.2.0/242.1.2.0/24
1.1.3.0/242.1.3.0/24
Summarized
R1=1.1.0.0/22
R2=2.2.0.0/22
Static
R1=11.0.0.0/8
R2routingtable
NO
R1sroutingtable
NO
Becausethesummarized
routeswillincludethe
morespecificroutes.The
connectedrouteswillbe
advertisedifthe
summarizationwasnot
performed.
YES
Becausethe
summarizedroutes
willincludethemore
specificroutes.
Becausethisoptionalso
enablesConnected,
SummaryaswellasStub.
STUBroutingdoes
NOTaffectthis
router
NO
YES
Staticroutesarenot
advertisedinthisoption.
STUBroutingdoes
NOTaffectthis
router
NO
YES
StaticroutesareNOT
advertisedinthisoption.
STUBroutingdoes
NOTaffectthis
router
R2=22.0.0.0/8
Redistributed
R1=200.1.1.0/24
11.0.0.0/8
YES
R2=200.2.2.0/2
22.0.0.0/8
Erasethestartupconfigandreloadtheroutersbeforeyouproceedtothenext
protocol.
www.ccieuniversity.com
Lab1
OptimizationofOSPFandAdjustingTimers
R1
R2
.1
S0/0
.2
FrameRelay
S0/0
F0/0.2
.3
F0/0
.3
R4
.4
. R3
FrameRelay
S0/0S0/0
LabSetup:
R2andR3sF0/0interfaceshouldbeconfiguredinVLAN23.
R1andR2,R3andR4shouldbeconfiguredinaframerelaypointtopoint
manner.
IPAddressing
Router
R1
R2
Interface
Lo0
F/Rinterface
Lo0
F/Rinterface
F0/0
IPaddress
1.1.1.1/8
131.1.12.1/24
2.2.2.2/8
131.1.12.2/24
131.1.23.2/24
www.ccieuniversity.com
R3
R4
Lo0
F/Rinterface
F0/0
Lo0
F/Rinterface
3.3.3.3/8
131.1.34.3/24
131.1.23.3/24
4.4.4.4/8
131.1.34.4/24
Task1
ConfigureOSPFonallroutersandadvertisetheirdirectlyconnectednetworksinarea0.
OnR4
R4(config)#routerospf1
R4(configrouter)#net0.0.0.00.0.0.0are0
OnR3
R3(configif)#routerospf1
R3(configrouter)#network0.0.0.00.0.0.0are0
OnR2
R2(configif)#routerospf1
R2(configrouter)#netw0.0.0.00.0.0.0are0
OnR1
R1(configif)#routerospf1
R1(configrouter)#netw0.0.0.00.0.0.0are0
Task2
R4isgettingfloodedwithLSAtype6packetsensurethatR4doesnotgenerateasyslog
messageforthesepackets.
CiscoroutersdoNOTsupportLSAtype6packetsandeachtimeanOSPFrouter
receivesanMOSPF(LSAtype6)packetitsendsasyslogmessage.Iftherouters
receivemanyLSAtype6packetstheywillgeneratealargenumberofsyslog
www.ccieuniversity.com
messages.Thisfeatureshouldbedisabledtopreventthisfromoccurring.
OnR4
R4(config)#routerospf1
R4(configrouter)#ignorelsamospf
Task3
Toensurefastdetectionofaneighborbeingdown,configureR2andR3tosendtheir
hellosfourtimesasecondwithaholdtimeofonesecond.
OnR2
R2(config)#intf0/0
R2(configif)#ipospfdeadintervalminimalhellomultiplier4
OnR3
R3(configif)#intf0/0
R3(configif)#ipospfdeadintervalminimalhellomultiplier4
ThedeadintervalisadvertisedinOSPFhellopackets.Thevaluesofthisparameter
mustbethesamefortworoutersinorderforthemtoform aneighboradjacency.
Byspecifyingtheminimalandhellomultiplierkeywordswithamultiplier
value,youareenablingOSPFfasthellopackets.Theminimalkeywordsetsthe
deadintervalto1secondandthehellomultipliervaluesetsthenumber ofhello
packetssentduringthat1second.
Task4
EnsurethattheserouterslookupDNSnamesforuseinallOSPFshowcommands,test
thistasktoensureproperoperation.SincetherearenoDNSserversinthislabyoushould
usetheroutersforthatpurpose.
TotesttheOSPFShowcommandsbeforeimplementingthisfeature,enterthe
following:
Showipospfdatabaserouter
OSPFRouterwithID(1.1.1.1)(ProcessID1)
www.ccieuniversity.com
RouterLinkStates(Area0)
LSage:1575
Options:(NoTOScapability,DC)
LSType:RouterLinks
LinkStateID:1.1.1.1
AdvertisingRouter:1.1.1.1
LSSeqNumber:80000002
Checksum:0x1D3F
Length:60
NumberofLinks:3
Notetherouteridisdisplayed
OnAllRouters
(config)#ipospf namelookup
(config)#iphostR11.1.1.1
(config)#iphostR22.2.2.2
(config)#iphostR33.3.3.3
(config)#iphostR44.4.4.4
Showipospfdatabaserouter
OSPFRouterwithID(1.1.1.1)(ProcessID1)
RouterLinkStates(Area0)
LSage:1651
Options:(NoTOScapability,DC)
LSType:RouterLinks
LinkStateID:1.1.1.1
AdvertisingRouter:R1
LSSeqNumber:80000002
Checksum:0x1D3F
Length:60
NumberofLinks:3
Notethechange,itsreplacedbythenameconfigured
intheIPhostcommand.
Task5
ConfigureR2suchthatifitdoesnotreceiveanacknowledgmentfromR3foragiven
LSA,itwaitsfor10secondsbeforeitresendsthatgivenLSA.
www.ccieuniversity.com
OnR2
R2(config)#intf0/0
R2(configif)#ipospfretransmitinterval10
WhenanOSPFenabledroutersendsanLSAtoitsneighbor,itkeepstheLSAuntil
itreceivesanACKfromthatgivenneighbor.Iftheretransmissiontimerexpires
andtherouterreceivesnoACKs,therouterwillresendthatLSA.Thedefaulttimer
issetto5seconds,andtherangeis165535.
Task6
ConfigureR2suchthatitlimitsthenumberofnonselfgeneratedLSAsthatanOSPF
routingprocesscankeepintheOSPFLSDBto900.
OnR2
R2(configif)#routerospf1
R2(configrouter)#maxlsa900
BydefaultthenumberofnonselfgeneratedLSAsthatanOSPFroutingprocess
cankeepinthedatabaseisnotlimited.Tolimitthisnumber,wecanusethemax
lsacommandintherouterconfigurationmode.Thiscommandcontainsthe
followingfields:
Maxlsamaximumnumber[thresholdpercentage][warningonly][ignoretimeminutes]
[ignorecount#][resettimeminutes]
Maximumnumber ThemaximumnumberofnonselfgeneratedLSAsthatan
OSPFroutercankeepintheOSPFdatabase.
ThresholdpercentageThepercentageofthemaximumLSAnumber,as
specifiedbythemaximumnumber,atwhichawarningmessageislogged.The
defaultis75.
WarningonlyThisspecifiesthatonlyawarningmessageissentwhenthe
maximumlimitforLSAsisexceeded.
IgnoretimeminutesThisvaluespecifiesthetime,inminutes,toignoreall
neighborsafterthemaximumlimitofLSAshasbeenexceeded.Thedefaultis5
minutes.
Ignorecountcountnumber SpecifiesthenumberoftimestheOSPFprocess
canconsecutively beplacedintotheignorestate.Thedefaultis5times.The
routercannotexceedthisnumber.
Resettimeminutes Thisvaluespecifiesthetime,inminutes,afterwhichthe
www.ccieuniversity.com
ignorecountisresettozero.Thedefaultis10minutes.
Task7
TocontroltherateatwhichLSAupdatesoccur,R3shouldsettheinterpacketpacing
betweenconsecutiveLSUs(LinkstateUpdates)intheOSPFtransmissionqueueto60
milliseconds.
OnR3
R3(config)#routerospf1
R3(configrouter)#timerspacingretransmission60
Thiscounterspecifiestime(inmilliseconds)atwhichLSAsintheretransmission
queuearepaced.Thedefaultvalueis66millisecondsandtherangeis5 200
milliseconds.
Task8
R3andR4shouldexchangehellosevery15secondswithaholdtimeof60seconds.Do
NOTuseipospfdeadintervaltoaccomplishthistask.
OnR3
R3(configrouter)#IntS0/0.34
R3(configsubif)#ipospfhellointerval15
OnR4
R4(configrouter)#IntS0/0.43
R4(configsubif)#ipospfhellointerval15
Oncethehellointervalisset,OSPFprocesswillsetthedeadintervaltobefour
timesthehellointerval.Thedefaultvalueforthehellotimerisasfollows:
OnEthernetsegmentitssetto10seconds.
OnNonbroadcastnetworks,itssetto30seconds.
Toverifytheconfiguration:
OnR4
www.ccieuniversity.com
R4#ShowipospfintS0/0.43
Serial0/0.43isup,lineprotocolisup
InternetAddress131.1.34.4/24,Area0
ProcessID1,RouterID4.4.4.4,NetworkTypePOINT_TO_POINT,Cost:64
TransmitDelayis1sec,StatePOINT_TO_POINT,
Timerintervalsconfigured,Hello15,Dead60,Wait60,Retransmit5
oobresynctimeout60
Helloduein00:00:03
SupportsLinklocalSignaling(LLS)
(Therestoftheoutputisomitted)
Task9
Erasethestartupconfigurationandreloadtheroutersbeforeproceedingtothenextlab.
www.ccieuniversity.com
Lab2
Authentication
UsethetopologyandIPaddressingfromLab1
Task1
ConfiguretherouterswithOSPFroutingprotocolasfollows:
OnR1,allinterfacesshouldbeconfiguredinarea2
OnR2,theFramerelayandLoopback0interfaceshouldbeconfiguredinarea2,
andF0/0,Loopback1(22.2.2.2/8)shouldbeconfiguredinarea1.
OnR3,F0/0andLoopback0interfaceshouldbeconfiguredinarea1,andthe
framerelayandLoopback1(33.3.3.3/8)shouldbeconfiguredinarea0
OnR4,allinterfacesshouldbeconfiguredinarea0
TheseroutersshouldusetheirLo0interfacesIPaddressastheirOSPFrouterid.
OnR1
R1(config)#routerospf1
R1(configrouter)#routerid1.1.1.1
R1(configrouter)#netw0.0.0.00.0.0.0area2
OnR2
R2(config)#routerospf1
R2(configrouter)#routerid2.2.2.2
R2(configrouter)#netw131.1.12.20.0.0.0are2
R2(configrouter)#netw2.2.2.20.0.0.0are2
R2(configrouter)#netw22.2.2.20.0.0.0are1
R2(configrouter)#netw131.1.23.20.0.0.0are1
OnR3
R3(config)#routerospf1
R3(configrouter)#routerid3.3.3.3
www.ccieuniversity.com
R3(configrouter)#netw131.1.23.30.0.0.0are1
R3(configrouter)#netw3.3.3.30.0.0.0are1
R3(configrouter)#netw131.1.34.30.0.0.0are0
R3(configrouter)#netw33.3.3.30.0.0.0are0
OnR4
R4(config)#routerospf1
R4(configrouter)#routerid4.4.4.4
R4(configrouter)#netw0.0.0.00.0.0.0are0
WhenconfiguringOSPF,alwaysconfiguretherouteridoftherouter,itsmuch
bettertostaticallyconfiguretherouteridasopposetolettingtheOSPFprocessto
chooseonefortherouter.IfweallowtheOSPFprocesstoelectarouteridanda
virtuallinkiscreatedbasedonthatrouterid,letssaylateronaloopbackinterface
iscreatedwithanumericallyhigherIPaddressandtherouterisrebooted,the
routerwillelectthenewloopbackinterfaceasitsrouteridandthevirtuallinkwill
godown.
Task2
EnsurethattheseroutershaveNLRItotheadvertisedinterfacesintheOSPFrouting
domain.
OnR2
R2(config)#routerospf1
R2(configrouter)#area1virtuallink3.3.3.3
OnR3
R3(configif)#routerospf1
R3(configrouter)#area1virtuallink2.2.2.2
Toverifytheconfiguration:
OnR1
R1#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
www.ccieuniversity.com
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
C1.0.0.0/8isdirectlyconnected,Loopback0
2.0.0.0/32 issubnetted,1subnets
O2.2.2.2[110/65]via131.1.12.2,00:10:31,Serial0/0.12
33.0.0.0/32issubnetted,1subnets
OIA33.3.3.3[110/66]via131.1.12.2,00:10:11,Serial0/0.12
3.0.0.0/32issubnetted,1subnets
OIA3.3.3.3[110/66]via131.1.12.2,00:10:31,Serial0/0.12
4.0.0.0/32issubnetted,1subnets
OIA4.4.4.4[110/130]via131.1.12.2,00:10:11,Serial0/0.12
22.0.0.0/32issubnetted,1subnets
OIA22.2.2.2[110/65]via131.1.12.2,00:10:32,Serial0/0.12
131.1.0.0/24issubnetted,3subnets
C131.1.12.0isdirectlyconnected,Serial0/0.12
OIA131.1.23.0[110/65]via131.1.12.2,00:10:33,Serial0/0.12
OIA131.1.34.0[110/129]via131.1.12.2,00:10:14,Serial0/0.12
R1#
Task3
Area2shouldbeconfiguredwithareabasedauthenticationusingCisco12asthe
password.Usethestrongestauthenticationmethod.
OnR1
R1(config)#routerospf1
R1(configrouter)#area2authenticationmessagedigest
R1(configrouter)#intS0/0.12
R1(configsubif)#ipospfmessagedigestkey1md5Cisco12
OnR2
R2(config)#routerospf1
R2(configrouter)#area2authenticationmessagedigest
R2(configrouter)#intS0/0.21
www.ccieuniversity.com
R2(configsubif)#ipospfmessagedigestkey1md5Cisco12
Toverifytheconfiguration:
OnR1
Debugipospfpacket
OSPFpacketdebuggingison
*Mar1101:44:27.847:OSPF:rcv.v:2t:1l:48rid:2.2.2.2
aid:0.0.0.2 chk:0aut:2 keyid:1seq:0x3C8D5AE3fromSerial0/0.12
Aid=areaidis2,Authenticationtypeis2,whichmeansMD5(Type1meanscleartext,
type0meansnoauthentication),andkeyed:1meansthekeynumberusedis1.
ShowipospfinterfaceS0/0.12
Serial0/0.12isup,lineprotocolisup
InternetAddress131.1.12.1/24,Area2
ProcessID1,RouterID1.1.1.1,NetworkTypePOINT_TO_POINT,Cost:64
TransmitDelayis1sec,StatePOINT_TO_POINT,
Timerintervalsconfigured,Hello10,Dead40,Wait40,Retransmit5
oobresynctimeout40
Helloduein00:00:07
SupportsLinklocalSignaling(LLS)
Index1/1,floodqueuelength0
Next0x0(0)/0x0(0)
Lastfloodscanlengthis1,maximumis1
Lastfloodscantimeis0msec,maximumis0msec
NeighborCountis1,Adjacentneighborcountis1
Adjacentwithneighbor2.2.2.2
Suppresshellofor0neighbor(s)
Messagedigestauthenticationenabled
Youngestkeyidis1
Task4
Area0shouldbeconfiguredwithareabasedauthenticationusingCisco0asthe
passwordthisauthenticationshouldonlybeappliedtothelinkthatconnectsR3toR4.
Usethestrongestauthenticationmethod.
OnR4
www.ccieuniversity.com
R4(config)#routerospf1
R4(configrouter)#are0authenticationmessagedigest
R4(configrouter)#intS0/0.43
R4(configsubif)#ipospfmessagedigestkey1md5Cisco0
OnR3
R3(configrouter)#routerospf1
R3(configrouter)#area0authenticationmessagedigest
R3(configrouter)#intS0/0.34
R3(configsubif)#ipospfmessagedigestkey1md5Cisco0
Toverifytheconfiguration:
OnR4
R4#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
33.0.0.0/32issubnetted,1subnets
O33.3.3.3[110/65]via131.1.34.3,00:01:41,Serial0/0.43
3.0.0.0/32issubnetted,1subnets
OIA3.3.3.3[110/65]via131.1.34.3,00:01:41,Serial0/0.43
C4.0.0.0/8isdirectlyconnected,Loopback0
22.0.0.0/32issubnetted,1subnets
OIA22.2.2.2[110/66]via131.1.34.3,00:01:41,Serial0/0.43
131.1.0.0/24issubnetted,2subnets
OIA131.1.23.0[110/65]via131.1.34.3,00:01:41,Serial0/0.43
C131.1.34.0isdirectlyconnected,Serial0/0.43
Note,R4isnotgettingnetworksadvertisedinarea0.Whenconfiguringareabased
authentication,allroutersthathaveaninterface(PhysicalorLogical)shouldbe
configuredwiththearea0authenticationmessagedigestcommand,inthiscase
R2hasalogicallinktoarea0,thereforeitmustbeconfiguredasfollows:
www.ccieuniversity.com
OnR2
R2(config)#routerospf1
R2(configrouter)#area0authenticationmessagedigest
Iftheabovecommandisnotconfigured,theroutersinarea2willnothaveallthe
routesintheirroutingtable.
Toverifytheconfiguration:
OnR4
R4#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
1.0.0.0/32issubnetted,1subnets
OIA1.1.1.1[110/130]via131.1.34.3,00:04:31,Serial0/0.43
2.0.0.0/32issubnetted,1subnets
OIA2.2.2.2[110/66]via131.1.34.3,00:04:31,Serial0/0.43
33.0.0.0/32issubnetted,1subnets
O33.3.3.3[110/65]via131.1.34.3,00:04:31, Serial0/0.43
3.0.0.0/32issubnetted,1subnets
OIA3.3.3.3[110/65]via131.1.34.3,00:04:31, Serial0/0.43
C4.0.0.0/8isdirectlyconnected,Loopback0
22.0.0.0/32issubnetted,1subnets
OIA22.2.2.2[110/66]via131.1.34.3,00:04:32,Serial0/0.43
131.1.0.0/24issubnetted,3subnets
OIA131.1.12.0[110/129]via131.1.34.3,00:04:32,Serial0/0.43
OIA131.1.23.0[110/65]via131.1.34.3,00:06:35,Serial0/0.43
C
131.1.34.0isdirectlyconnected,Serial0/0.43
R4#
www.ccieuniversity.com
Task 5
Removetheauthenticationconfigurationfromtasks3and4beforeproceedingtothenext
task.
OnR1
R1(config)#intS0/0.12
R1(configsubif)#noipospfmessagedigestkey1md5Cisco12
R1(configsubif)#routerospf1
R1(configrouter)#noarea2authenticationmessagedigest
OnR2
R2(configsubif)#routerospf1
R2(configrouter)#noarea0authenticationmessagedigest
R2(configrouter)#noarea2authenticationmessagedigest
R2(config)#intS0/0.21
R2(configsubif)#noipospfmessagedigestkey1md5Cisco12
OnR3
R3(config)#intS0/0.34
R3(configsubif)#noipospfmessagedigestkey1md5Cisco0
R3(configsubif)#routerospf1
R3(configrouter)#noarea0authenticationmessagedigest
On R4
R4(config)#intS0/0.43
R4(configsubif)#noipospfmessagedigestkey1md5Cisco0
R4(configsubif)#routerospf1
R4(configrouter)#noarea0authenticationmessagedigest
Toverifytheconfiguration:
OnR1
R1#Showiproute
www.ccieuniversity.com
Task 6
Configureinterfacebasedcleartextauthenticationforalltheroutersinarea2.Use
cisco2asthepassword.
OnR1
R1(configrouter)#intS0/0.12
R1(configsubif)#ipospfauthentication
R1(configsubif)#ipospfauthenticationkeyCisco2
OnR2
R2(configrouter)#intS0/0.21
R2(configsubif)#ipospfauthentication
R2(configsubif)#ipospfauthenticationkeyCisco2
www.ccieuniversity.com
Toverifytheconfiguration:
OnR1
ShowipospfintS0/0.12
Serial0/0.12isup,lineprotocolisup
InternetAddress131.1.12.1/24,Area2
ProcessID1,RouterID1.1.1.1,NetworkTypePOINT_TO_POINT,Cost:64
TransmitDelayis1sec,StatePOINT_TO_POINT,
Timerintervalsconfigured,Hello10,Dead40,Wait40,Retransmit5
oobresynctimeout40
Helloduein00:00:07
SupportsLinklocalSignaling(LLS)
Index1/1,floodqueuelength0
Next0x0(0)/0x0(0)
Lastfloodscanlengthis1,maximumis1
Lastfloodscantimeis0msec,maximumis0msec
NeighborCountis1,Adjacentneighborcountis1
Adjacentwithneighbor2.2.2.2
Suppresshellofor0neighbor(s)
Simplepasswordauthenticationenabled
R1#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPF interarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
C1.0.0.0/8isdirectlyconnected,Loopback0
2.0.0.0/32issubnetted,1subnets
O2.2.2.2[110/65]via131.1.12.2,00:02:48,Serial0/0.12
33.0.0.0/32issubnetted,1subnets
OIA33.3.3.3[110/66]via131.1.12.2,00:02:48,Serial0/0.12
3.0.0.0/32issubnetted,1subnets
OIA3.3.3.3[110/66]via131.1.12.2,00:02:48,Serial0/0.12
4.0.0.0/32issubnetted,1subnets
OIA4.4.4.4[110/130]via131.1.12.2,00:02:48,Serial0/0.12
www.ccieuniversity.com
22.0.0.0/32issubnetted,1subnets
OIA22.2.2.2[110/65]via131.1.12.2,00:02:50,Serial0/0.12
131.1.0.0/24issubnetted,3subnets
C131.1.12.0isdirectlyconnected,Serial0/0.12
OIA131.1.23.0[110/65]via131.1.12.2,00:02:53,Serial0/0.12
OIA131.1.34.0[110/129]via131.1.12.2,00:02:53,Serial0/0.12
Task 7
ConfigureperareabasedMD5authenticationforalltheroutersinarea1usingcisco1
asthepassword.
OnR2
R2(config)#routerospf1
R2(configrouter)#area1authenticationmessagedigest
R2(configrouter)#intf0/0
R2(configif)#ipospfmessagedigestkey1md5Cisco1
OnR3
R3(config)#routerospf1
R3(configrouter)#area1authenticationmessagedigest
R3(configrouter)#intf0/0
R3(configif)#ipospfmessagedigestkey1md5Cisco1
Task 8
Area0shouldhavecleartextperinterfacebasedauthenticationusingcisco0asthe
password.DONOTapplyauthenticationonthevirtuallink/s.
OnR4
R4(config)#IntS0/0.43
R4(configsubif)#ipospfauthentication
R4(configsubif)#ipospfauthenticationkeyCisco0
OnR3
www.ccieuniversity.com
R3(config)#IntS0/0.34
R3(configsubif)#ipospfauthentication
R3(configsubif)#ipospfauthenticationkeyCisco0
ToVerifytheconfiguration:
OnR1
R1#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
C1.0.0.0/8isdirectlyconnected,Loopback0
2.0.0.0/32issubnetted,1subnets
O2.2.2.2[110/65]via131.1.12.2,00:06:28,Serial0/0.12
33.0.0.0/32issubnetted,1subnets
OIA 33.3.3.3[110/66]via131.1.12.2,00:06:08,Serial0/0.12
3.0.0.0/32issubnetted,1subnets
OIA3.3.3.3[110/66]via131.1.12.2,00:06:28,Serial0/0.12
4.0.0.0/32issubnetted,1subnets
OIA4.4.4.4[110/130]via131.1.12.2,00:00:52, Serial0/0.12
22.0.0.0/32issubnetted,1subnets
OIA22.2.2.2[110/65]via131.1.12.2,00:06:29,Serial0/0.12
131.1.0.0/24issubnetted,3subnets
C131.1.12.0isdirectlyconnected,Serial0/0.12
OIA131.1.23.0[110/65]via131.1.12.2,00:06:30,Serial0/0.12
OIA131.1.34.0[110/129]via131.1.12.2,00:06:10,Serial0/0.12
R1#
Note,thedifferencebetweentheperareabasedauthenticationandperinterface
authenticationisthatinperareabasedauthenticationeventherouterswithlogical
interfaceconnectiontoarea0musthaveauthenticationenabledundertherouter
configurationmode,whereasinperinterfacebasedauthentication,thisisnot
required.
www.ccieuniversity.com
Task 9
R2andR3shouldchangetheirpasswordwithoutanyinterruptiontothelinkusing
ciscoasthepassword.DoNOTremoveanycommandstoaccomplishthistask.
OnR2
R2(config)#intf0/0
R2(configif)#ipospfmessagedigestkey2md5cisco
R2#shipospfintf0/0
FastEthernet0/0isup,lineprotocolisup
InternetAddress131.1.23.2/24,Area1
ProcessID1,RouterID2.2.2.2,NetworkTypeBROADCAST,Cost:1
TransmitDelayis1sec,StateBDR,Priority1
DesignatedRouter(ID)3.3.3.3,Interfaceaddress131.1.23.3
BackupDesignatedrouter(ID)2.2.2.2,Interfaceaddress131.1.23.2
Timerintervalsconfigured,Hello10,Dead40,Wait40,Retransmit5
oobresynctimeout40
Helloduein00:00:03
SupportsLinklocalSignaling(LLS)
Index2/4,floodqueuelength0
Next0x0(0)/0x0(0)
Lastfloodscanlengthis1,maximumis3
Lastfloodscantimeis0msec,maximumis0msec
NeighborCountis1,Adjacentneighborcountis1
Adjacentwithneighbor3.3.3.3(DesignatedRouter)
Suppresshellofor0neighbor(s)
Messagedigestauthentication enabled
Youngestkeyidis2
Rolloverinprogress,1neighbor(s)usingtheoldkey(s):
keyid1
R2#
Noteeventhoughthesecondkey(key2)isonlyconfiguredonR2,R2andR3are
stillauthenticatingbasedonthefirstkey(key1),thisisdisplayedonthelastlineof
theabovedisplay.
Buttherouterknowsthatthesecondkeyisconfigured(Thirdlastlineintheabove
display)anditknowsthattherolloverisinprogress(Secondlastlineofthedisplay)
,buttheotherend(R3)hasnotbeenconfiguredyet.
OnR3
R3#Showiproute
www.ccieuniversity.com
www.ccieuniversity.com
Messagedigestauthenticationenabled
Youngestkeyidis1
R3#
Note,theauthenticationwithR2isbasedonthefirstkey(key1)
R3(config)#intf0/0
R3(configif)#ipospfmessagedigestkey2md5cisco
Toverifytheconfiguration:
OnR3
R3#ShowipospfintF0/0
FastEthernet0/0isup,lineprotocolisup
InternetAddress131.1.23.3/24,Area1
ProcessID1,RouterID3.3.3.3,NetworkTypeBROADCAST,Cost:1
TransmitDelayis1sec,StateDR,Priority1
DesignatedRouter(ID)3.3.3.3,Interfaceaddress131.1.23.3
BackupDesignatedrouter(ID)2.2.2.2,Interfaceaddress131.1.23.2
Timerintervalsconfigured,Hello10,Dead40,Wait40,Retransmit5
oobresynctimeout40
Helloduein00:00:01
SupportsLinklocalSignaling(LLS)
Index1/1,floodqueuelength0
Next0x0(0)/0x0(0)
Lastfloodscanlengthis1,maximumis4
Lastfloodscantimeis0msec,maximumis0msec
NeighborCountis1,Adjacentneighborcountis1
Adjacentwithneighbor2.2.2.2(BackupDesignatedRouter)
Suppresshellofor0neighbor(s)
Messagedigestauthenticationenabled
Youngestkeyidis2
R3#
Task10
Erasethestartupconfigandreloadtheroutersbeforeproceedingtothenextlab.
www.ccieuniversity.com
Lab3
OSPFCost
R1
R2
.1.2
S0/0
FrameRelay
S0/0
F0/0.2
.3
F0/0
.3
. R3
LabSetup:
ConfigureR2andR3inVlan23
ConfiguretheframerelayconnectionbetweenR1andR2inapointtopoint
manner.
www.ccieuniversity.com
Ipaddressing
Router InterfaceandIPaddress
R1
Lo0=1.1.1.1/8
FramerelayinterfacetoR2=131.1.12.1/24
R2
Lo0=2.2.2.2/8
FramerelayinterfacetoR1=131.1.12.2/24
F0/0interfacetoR3=131.1.23.2/24
R3
Lo0=3.3.3.3/8
F0/0interfacetoR2=131.1.23.3/24
Task1
ConfigureallthreeroutersinOSPFarea0andadvertisetheirdirectlyconnected
networksinthisarea.EnsurethatallroutershaveNLRItoeveryadvertisednetwork.
Ensurethatloopbackinterface/sisadvertisedwiththeircorrectmask.
On R1
R1(config)#routerospf1
R1(configrouter)#netw0.0.0.00.0.0.0are0
R1(configrouter)#intlo0
R1(configif)#ipospfnetpointtopoint
Thistaskisaskingustoensurethattheloopbackinterfacesareadvertisedwith
theircorrectmask,onewaytoaccomplishthistaskistochangetheirnetworktype
topointtopoint.
OnR2
R2(config)#routerospf1
R2(configrouter)#netw0.0.0.00.0.0.0are0
R2(configrouter)#intlo0
R2(configif)#ipospfnetworkpointtopoint
OnR3
R3(config)#routerospf1
R3(configrouter)#netw0.0.0.00.0.0.0are0
www.ccieuniversity.com
R3(configrouter)#intlo0
R3(configif)#ipospfnetworkpointtopoint
Toverifytheconfiguration:
OnR1
R1#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
C1.0.0.0/8isdirectlyconnected,Loopback0
O2.0.0.0/8[110/65]via131.1.12.2,00:00:16,Serial0/0.12
O3.0.0.0/8[110/66]via131.1.12.2,00:00:16,Serial0/0.12
131.1.0.0/24issubnetted,2subnets
C131.1.12.0isdirectlyconnected,Serial0/0.12
O131.1.23.0[110/65]via131.1.12.2,00:00:16,Serial0/0.12
R1#
Task 2
ConfigureR1suchthatitadvertisesacostof20foritsloopback0interface.
Youshouldcheckthecostofnetwork1.0.0.0/8thatisadvertisedtoR2byR1.
OnR2
R2#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
www.ccieuniversity.com
OnR1
R1(configif)#intlo0
R1(configif)#ipospfcost20
Toverifytheconfiguration:
OnR2
R2#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
O1.0.0.0/8[110/84]via131.1.12.1,00:00:07,Serial0/0.21
C2.0.0.0/8isdirectlyconnected,Loopback0
O3.0.0.0/8[110/2]via131.1.23.3,00:00:07,FastEthernet0/0
131.1.0.0/24issubnetted,2subnets
www.ccieuniversity.com
C131.1.12.0isdirectlyconnected,Serial0/0.21
C131.1.23.0isdirectlyconnected,FastEthernet0/0
R2#
Note,thecostaftertheconfigurationis84,whichisthesumof64(Thecostofthe
serialinterface)plus20(Whichisthecostofthelo0interface).
Task 3
Inthefutureagigabitinterfacewillbeinstalledononeoftheroutersinthisrouting
domain.Ensurethatthecostsoftheotherinterfacesareadjustedproportionally.
OnAllRouters
(configif)#routerospf1
(configrouter)#autocostreferencebandwidth1000
(config)#End
#Clearipospfproc
ResetALLOSPFprocesses?[no]:y
Bydefault,OSPFcalculatesthecostofaninterfacebydividingthebandwidth ofthe
interfaceinto100million.Usingthedefaultvalue,whenyournetworkhasinterfaces
withabandwidthgreaterthan100millionisnotrecommended,because,OSPFwill
notbeabletodifferentiatebetween100mbpsinterfaceandaninterfacewitha
bandwidththatisgreaterthan100mbps,IPOSPFCOSTcommandenablesyou
tochangetheOSPFcostforaninterface,butabetterwaytoaccomplishthisisto
changethedefaultreferencevalueusedtocalculatetheOSPFcostofaninterface.
Thisvaluecanbemodifiedusingthecommandautocostreferencebandwidth.If
youareplanningtousethiscommand,rememberthateveryrouterintheOSPF
routingdomainmustbeconfiguredaswell.
Task 4
Removethecommandconfiguredintask3.
OnAllRouters
(configif)#routerospf1
(configrouter)#noautocostreferencebandwidth1000
(config)#End
www.ccieuniversity.com
#Clearipospfproc
ResetALLOSPFprocesses?[no]:y
Task 5
ConfiguretherouterssuchthattheFastEthernetinterfaceoftheserouterswillhavea
costof 70.Theotherinterfacesshouldhavetheircostcalculatedproportionally.
OnAllRouters
(configrouter)#routerospf1
(configrouter)#autocostreferencebandwidth7000
TheequationusedbyOSPFisasfollows:
Reference/Bandwidth=Cost
Rearrangingtheformula,wegetthefollowingequation:
Reference=CostXBandwidth=70X100,000,000=7,000,000,000
ReferenceisinunitsofMbps,andbydefaultitssetto100whichmeans100,000,000
bps,nowwehavetodividetheresultby1000,000togettheactualreference,which
is7000.
Sothecostreferenceshouldbechangedto7000
Toverifytheconfiguration:
OnR3
R3#Showipospfintf0/0
FastEthernet0/0isup,lineprotocolisup
InternetAddress131.1.23.3/24,Area0
ProcessID1,RouterID3.3.3.3,NetworkTypeBROADCAST,Cost:70
TransmitDelayis1sec,StateBDR,Priority1
(Therestoftheoutputisomitted)
www.ccieuniversity.com
Task6
Erasethestartupconfigandreloadtheroutersbeforeproceedingtothenextlab.
www.ccieuniversity.com
Lab4
OSPFSummarization
R1
R2
.1.2
S0/0
FrameRelay
S0/0
F0/0.2
.3
F0/0
.3
R4
.4
. R3
FrameRelay
S0/0S0/0
Labsetup:
ConfigureR2F0/0andR3sF0/0inVLAN23
ConfiguretheframerelayconnectionbetweenR1,R2andR3,R4inapointto
pointmanner.
www.ccieuniversity.com
IPAddressing
Router Interface
R1
Lo0
Lo1
Lo2
Lo3
F/Rinterface
R2
Lo0
F/Rinterface
F0/0
R3
Lo0
F/Rinterface
F0/0
R4
Lo0
Lo1
Lo2
Lo3
Lo4
F/Rinterface
IPaddress
1.1.0.1/24
1.1.1.1/24
1.1.2.1/24
1.1.3.1/24
131.1.12.1/24
2.2.2.2/8
131.1.12.2/24
131.1.23.2/24
3.3.3.3/8
131.1.34.3/24
131.1.23.3/24
4.4.0.4/24
4.4.1.4/24
4.4.2.4/24
4.4.3.4/24
4.4.4.4/24
131.1.34.4/24
Area
Area1
Area1
Area1
Area1
Area1
Area0
Area1
Area0
Area0
Area2
Area0
External
External
External
External
Area2
Area2
Task1
Configuretheroutersasfollows:
R4shouldredistributethefourloopbackinterfaces(4.4.0.4/24 4.4.3.4/24)in
theOSPFroutingdomain.
R4shouldadvertiseitsLoopback4andFramerelayinterfaceinArea2.
R1shouldadvertiseallofitsinterfacesinOSPFarea1.
R2shouldadvertiseitsLoopback0,F0/0interfaceinarea0andtheframerelay
interfaceinarea1.
R3shouldadvertiseitsLoopback0,F0/0interfaceinarea0,anditsframerelay
interfaceinarea2.
OnR1
R1(config)#routerospf1
R1(configrouter)#netw0.0.0.00.0.0.0area1
OnR2
R2(config)#routerospf1
www.ccieuniversity.com
R2(configrouter)#netw2.2.2.20.0.0.0are0
R2(configrouter)#netw131.1.23.20.0.0.0are0
R2(configrouter)#netw131.1.12.20.0.0.0are1
OnR3
R3(config)#routerospf1
R3(configrouter)#netw3.3.3.30.0.0.0area0
R3(configrouter)#netw131.1.23.30.0.0.0area0
R3(configrouter)#netw131.1.34.30.0.0.0area2
OnR4
R4(config)#accesslist4permit4.4.0.00.0.3.255
R4(config)#routemapTESTpermit10
R4(configroutemap)#matchipaddr4
R4(configif)#routerospf1
R4(configrouter)#netw4.4.4.40.0.0.0are2
R4(configrouter)#netw131.1.34.40.0.0.0are2
R4(configrouter)#redistributeconnectedsubnetsroutemapTEST
WhenredistributingroutesintoOSPF,thesubnetskeywordwillredistributeallthe
subnetsintoOSPF,ifthiskeywordisomitted,thenonlyclassfulnetworkswillbe
redistributedintoOSPF.
Task2
ConfiguretheOSPFrouterssuchthattheexternalroutesaresummarized.
OnR4
R4(config)#routerospf1
R4(configrouter)#summaryaddress4.4.0.0255.255.252.0
InOSPF,summarizationcanbeconfiguredontwotypesofrouters:ABR/sand/or
ASBRs.
TheinternalOSPFroutescanonlybesummarizedonABRswhereastheexternal
(redistributed)routescanonlybesummarizedonASBRs.
WhensummarizinginternalroutesonABRstheareaxxrangecommandmustbe
used,wherexxistheareaid.
SummarizationonASBRcanbeaccomplishedbyusingthesummaryaddress
www.ccieuniversity.com
command.
Toverifytheconfiguration:
OnR3
R3#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
1.0.0.0/32issubnetted,4subnets
OIA1.1.1.1[110/66]via131.1.23.2,00:13:18,FastEthernet0/0
OIA1.1.0.1[110/66]via131.1.23.2,00:13:18,FastEthernet0/0
OIA1.1.3.1[110/66]via131.1.23.2,00:13:18,FastEthernet0/0
OIA1.1.2.1[110/66]via131.1.23.2,00:13:18,FastEthernet0/0
2.0.0.0/32issubnetted,1subnets
O2.2.2.2[110/2]via131.1.23.2,00:13:50,FastEthernet0/0
C3.0.0.0/8isdirectlyconnected,Loopback0
4.0.0.0/8isvariablysubnetted,2subnets,2masks
O4.4.4.4/32[110/65]via131.1.34.4,00:13:19,Serial0/0.34
OE24.4.0.0/22[110/20]via131.1.34.4,00:00:06,Serial0/0.34
131.1.0.0/24issubnetted,3subnets
OIA131.1.12.0[110/65]via131.1.23.2,00:13:19,FastEthernet0/0
C131.1.23.0isdirectlyconnected,FastEthernet0/0
C131.1.34.0isdirectlyconnected,Serial0/0.34
Notetheexternalroutesaresummarized.
Task3
ConfigureArea1suchthatnetworks(1.1.0.0/24,1.1.1.0/24,1.1.2.0/24and1.1.3.0/24)
aresummarizedintotheOSPFroutingdomain.
OnR2
www.ccieuniversity.com
R2(configrouter)#router ospf1
R2(configrouter)#area1range1.1.0.0255.255.252.0
NotetheseroutesareoriginatedbyR1,buttheycanonlybesummarizedbythe
ABR,inthistopologytheABRisR2.Sincetheroutesthatarebeingsummarized
originatedinarea1,thearearangecommandmustspecifytheareaarea1
rangefollowedbythesummarynetworkaddress(1.1.0.0)andthenthesubnet
mask(255.255.252.0).
Task4
TheroutersshouldNOTinstallanull0routeintheroutingtablewhentheysummarize
internalorexternalroutes.
InOSPF,thediscardrouteiscreatedautomaticallywheneverasummaryrouteis
configured,therearetwotypesofsummaryroutes:InternalandExternal.
Wheninternalsummaryroutesareconfigured,OSPFwillinjectaninternaldiscard
route,andwhenanexternalsummaryrouteisconfigured,theOSPFprocesswillcreate
anexternaldiscardroute.Thediscardroutesarecreatedtostopforwardingloops.
OnR2
R2#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
Thisistheinternaldiscardroute
1.0.0.0/8isvariablysubnetted,5subnets,2masks
O
1.1.1.1/32[110/65]via131.1.12.1,00:13:53,Serial0/0.21
O1.1.0.0/22isasummary,00:13:53,Null0
O1.1.0.1/32[110/65]via131.1.12.1,00:13:53,Serial0/0.21
O1.1.3.1/32[110/65]via131.1.12.1,00:13:53,Serial0/0.21
O
1.1.2.1/32[110/65]via131.1.12.1,00:13:53,Serial0/0.21
C
2.0.0.0/8isdirectlyconnected,Loopback0
www.ccieuniversity.com
3.0.0.0/32issubnetted,1subnets
O
3.3.3.3[110/2]via131.1.23.3,00:13:54,FastEthernet0/0
4.0.0.0/8isvariablysubnetted,2subnets,2masks
OIA4.4.4.4/32[110/66]via131.1.23.3,00:13:54,FastEthernet0/0
OE24.4.0.0/22[110/20]via131.1.23.3,00:13:54,FastEthernet0/0
131.1.0.0/24issubnetted,3subnets
C
131.1.12.0isdirectlyconnected,Serial0/0.21
C
131.1.23.0isdirectlyconnected,FastEthernet0/0
OIA131.1.34.0[110/65]via131.1.23.3,00:13:55,FastEthernet0/0
OnR2
R2(config)#routerospf1
R2(configrouter)#nodiscardrouteinternal
Thediscardroutethatwearediscardingistheresultofsummarizingtheinternal
routes,thereforeweneedtospecifyinternal.
ToVerifytheconfiguration:
OnR4
R4(config)#routerospf1
R4(configrouter)#nodiscardrouteexternal
Intheabovecommandwearediscardingtheexternaldiscardroutethatwascreatedas
aresultofsummarizingtheexternalroutes.
Task5
Erasethestartupconfigandreloadtheroutersbeforeproceedingtothenextlab.
www.ccieuniversity.com
Lab5
VirtuallinksandGRETunnels
R1
R2
.1.2
S0/0
FrameRelay
S0/0
F0/0.2
.3
F0/0
.3
R4
.4
FrameRelay
F0/0
S0/0S0/0
F0/0
R5
. R3
www.ccieuniversity.com
LabSetup
UsetheIPaddressingchartbelowtoassignIPaddressestotheinterfaces.
TheframerelayconnectionbetweenR1andR2shouldbeconfiguredinapoint
topointmanner.
R2andR3sF0/0interfaceshouldbeconfiguredinVLAN23.
TheframerelayconnectionbetweenR3andR4shouldbeconfiguredinapoint
topointmanner.
R4andR5sF0/0interfaceshouldbeconfiguredinVLAN45.
IPAddressing
Router
R1
R2
R3
R4
R5
Interface
Lo0
Lo1
F/Rinterface
Lo0
Lo1
F0/0
F/Rinterface
Lo0
Lo1
F0/0
F/Rinterface
Lo0
Lo1
F0/0
F/Rinterface
Lo0
F0/0
IPaddress
1.1.1.1/24
10.1.1.1/24
131.1.12.1/24
2.2.2.2/24
20.2.2.2/24
131.1.23.2/24
131.1.12.2/24
3.3.3.3/24
30.3.3.3/24
131.1.23.3/24
131.1.34.3/24
4.4.4.4/24
40.4.4.4/24
131.1.45.4/24
131.1.34.4/24
5.5.5.5/24
131.1.45.5/24
www.ccieuniversity.com
Task1
R1sLoopback1interfaceshouldbeadvertisedinarea3anditsFramerelayand
Loopback0interfaceshouldbeadvertisedinarea1
R2sLoopback0anditsframerelayinterfaceshouldbeconfiguredin area1and
itsLoopback1andF0/0interfaceshouldbeconfiguredinarea0
R3sLoopback0andF0/0interfaceshouldbeconfiguredinarea0anditsframe
relayandLoopback1interfaceshouldbeconfiguredinarea2.
R4sframerelayandLoopback0interfaceshouldbeconfiguredinarea2andits
F0/0andLoopback1interfaceshouldbeconfiguredinarea4.
R5sLoopbackandF0/0interfaceshouldbeconfiguredinarea4.
OnR1
R1(configif)#routerospf1
R1(configrouter)#routerid1.1.1.1
R1(configrouter)#netw10.1.1.10.0.0.0are3
R1(configrouter)#netw131.1.12.10.0.0.0are1
R1(configrouter)#netw1.1.1.10.0.0.0are1
OnR2
R2(config)#routerospf1
R2(configrouter)#routerid2.2.2.2
R2(configrouter)#netw131.1.12.20.0.0.0are1
R2(configrouter)#netw2.2.2.20.0.0.0are1
R2(configrouter)#netw131.1.23.20.0.0.0are0
R2(configrouter)#netw20.2.2.20.0.0.0are0
OnR3
R3(configif)#routerospf1
R3(configrouter)#routerid3.3.3.3
R3(configrouter)#netw131.1.23.30.0.0.0are0
R3(configrouter)#netw3.3.3.30.0.0.0are0
R3(configrouter)#netw131.1.34.30.0.0.0are2
R3(configrouter)#netw30.3.3.30.0.0.0are2
www.ccieuniversity.com
OnR4
R4(config)#routerospf1
R4(configrouter)#routerid4.4.4.4
R4(configrouter)#netw131.1.34.40.0.0.0area2
R4(configrouter)#netw4.4.4.40.0.0.0are2
R4(configrouter)#netw131.1.45.40.0.0.0are4
R4(configrouter)#netw40.4.4.40.0.0.0are4
OnR5
R5(config)#routerospf1
R5(configrouter)#routerid5.5.5.5
R5(configrouter)#netw131.1.45.50.0.0.0are4
R5(configrouter)#netw5.5.5.50.0.0.0are4
Task2
Ensurethattheroutesfromarea3arereachablebyR1,R2,R3andR4.DoNOTusea
GRETunneltoaccomplishthistask.
Area3isfragmentedtheotherrouterswontbeabletoseetherouteadvertisedbythis
area(10.1.1.0/24).AvirtuallinkmustbecreatedthatconnectsR1(TheABRofarea3)
toarea0.
OnR1
R1(config)#routerospf1
R1(configrouter)#area1virtuallink2.2.2.2
OnR2
R2(config)#routerospf1
R2(configrouter)#area1virtuallink1.1.1.1
ToVerifytheconfiguration:
R2#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternal type2
www.ccieuniversity.com
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
1.0.0.0/24issubnetted,1subnets
O1.1.1.0[110/65]via131.1.12.1,00:00:09,Serial0/0.21
2.0.0.0/24issubnetted,1subnets
C2.2.2.0isdirectlyconnected,Loopback0
3.0.0.0/24issubnetted,1subnets
O3.3.3.0[110/2]via131.1.23.3,00:00:09,FastEthernet0/0
4.0.0.0/24issubnetted,1subnets
OIA4.4.4.0[110/66]via131.1.23.3,00:00:09,FastEthernet0/0
20.0.0.0/24issubnetted,1subnets
Notetheroutefromarea3isadvertised
C20.2.2.0isdirectlyconnected,Loopback1
10.0.0.0/24issubnetted,1subnets
OIA10.1.1.0[110/65]via131.1.12.1,00:00:00,Serial0/0.21
131.1.0.0/24issubnetted,3subnets
C131.1.12.0isdirectlyconnected,Serial0/0.21
C131.1.23.0isdirectlyconnected,FastEthernet0/0
OIA131.1.34.0[110/65]via131.1.23.3,00:00:02,FastEthernet0/0
30.0.0.0/24issubnetted,1subnets
OIA30.3.3.0[110/2]via131.1.23.3,00:00:02,FastEthernet0/0
Task3
Ensurethatalltheadvertisednetworksarereachablebyalltherouters.UseanyIP
addressinganddoNOTuseaVirtuallinktoaccomplishthistask.
TheroutingtableofR5revealsthatonlynetwork40.4.4.0/24waspropagatedby
R4.Thereasonforthisbehaviorisasfollows:
Area4isfragmentedanddoesnothaveaconnection(LogicalorPhysical)toarea0.
Inordertorectifythisproblemwemustcreateavirtuallink,sincevirtuallinkis
notallowedinthistaskaGREtunnelmustbeused.
TodisplaytheroutingtableofR5beforecreatingaGREtunnel:
OnR5
R5#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
www.ccieuniversity.com
TofixthisproblemwemustcreateaGREtunnelasfollows:
OnR4
R4(configif)#router ospf1
R4(configrouter)#netw200.1.34.40.0.0.0are0
R4(config)#inttu1
R4(configif)#ipaddr200.1.34.4255.255.255.0
R4(configif)#tunnelsource131.1.34.4
R4(configif)#tunneldestination131.1.34.3
OnR3
R3(config)#routerospf1
R3(configrouter)#netw200.1.34.30.0.0.0are0
R3(config)#inttu1
R3(configif)#ipaddr200.1.34.3255.255.255.0
R3(configif)#tunnelsource131.1.34.3
R3(configif)#tunneldestination131.1.34.4
ToVerifytheconfiguration:
OnR5
R5#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
www.ccieuniversity.com
Task4
Removetheconfigurationfromtheprevioustaskandreplaceitwithvirtuallink.
OnR4
R4(configif)#routerospf1
www.ccieuniversity.com
R4(configrouter)#nonetw200.1.34.40.0.0.0are0
R4(config)#nointtu1
R4(config)#routerospf1
R4(configrouter)#area2virtuallink3.3.3.3
OnR3
R3(config)#routerospf1
R3(configrouter)#nonetw200.1.34.30.0.0.0are0
R3(config)#nointtu1
R3(config)#routerospf1
R3(configrouter)#area2virtuallink4.4.4.4
Task5
Configureasimplecleartextauthenticationforthevirtuallinkthatconnectsarea3to
area0.UseCiscoasthepassword.
OnR1
R1(config)#routerospf1
R1(configrouter)#area1virtuallink2.2.2.2authentication
R1(configrouter)#area1virtuallink2.2.2.2authenticationkeyCisco
OnR2
R2(config)#routerospf1
R2(configrouter)#area1virtuallink1.1.1.1authentication
R2(configrouter)#area1virtuallink1.1.1.1authenticationkeyCisco
Task6
ConfigureMD5authenticationforthevirtuallinkthatconnectsarea4toarea0,use
ciscoasthepassword.
OnR4
www.ccieuniversity.com
R4(config)#routerospf1
R4(configrouter)#area2virtuallink3.3.3.3authenticationmessagedigest
R4(configrouter)#area2virtuallink3.3.3.3messagedigestkey1md5cisco
OnR3
R3(config)#routerospf1
R3(configrouter)#area2virtuallink4.4.4.4authenticationmessagedigest
R3(configrouter)#area2virtuallink4.4.4.4messagedigestkey1md5cisco
Task7
ChangethepasswordfromciscotoCCIEforthevirtuallinkthatconnectsarea4to
area0,withoutinterruptingthelink.
OnR4
R4(config)#routerospf1
R4(configrouter)#area2virtuallink3.3.3.3messagedigestkey2md5CCIE
OnR3
R3(config)#routerospf1
R3(configrouter)#area2virtuallink4.4.4.4messagedigestkey2md5CCIE
Task8
Erasethestartupconfigandreloadtheroutersbeforeproceedingto thenextlab.
www.ccieuniversity.com
Lab6
OSPFStub,TotallyStubby,andNSSAAreas
R1
. R2
S0/0S0/0
S0/0
FrameRelay
F0/0
F0/0
R4
R3
S0/0
S0/0
Frame
Relay
F0/0
F0/0
R5
LabSetup:
R4andR5sF0/0interfaceshouldbeconfiguredinVLAN45.
R2andR3sF0/0interfaceshouldbeconfiguredinVLAN23.
TheframerelayconnectionbetweenR1,R2andR3,R4shouldbeconfiguredina
pointtopointmanner.
UsetheIPaddressingchartbelowtoassignIPaddressestotherouters.
www.ccieuniversity.com
IPAddressing
Router
R1
R2
R3
R4
R5
Interface
Lo0
F/Rinterface
Lo0
Lo1
F0/0interfaceconnectiontoR3
F/RinterfaceconnectiontoR1
Lo0
F0/0interfaceconnectiontoR2
F/RinterfaceconnectiontoR4
Lo0
Lo1
F0/0interfaceconnectiontoR5
F/RinterfaceconnectiontoR3
Lo0
F0/0
IPaddress
1.1.1.1/24
131.1.12.1/24
2.2.2.2/24
22.2.2.2/24
131.1.23.2/24
131.1.12.2/24
3.3.3.3/24
131.1.23.3/24
131.1.34.3/24
4.4.4.4/24
44.4.4.4/24
131.1.45.4/24
131.1.34.4/24
5.5.5.5/24
131.1.45.5/24
Task1
ConfigureOSPFasfollows:
ConfigureR1sLoopback0andFramerelayinterfaceinarea1
ConfigureR2sLoopback0andFramerelayinterfaceinarea1andR2s
Loopback1andF0/0interfaceshouldbeconfiguredinarea0.
ConfigureR3sLoopback0,F0/0,andFramerelayinterfaceinOSPFarea0.
ConfigureR4sLoopback0,andFramerelayinterfacein area0,andits
Loopback1andF0/0inOSPFarea2.
ConfigureR5sLoopback0andF0/0interfaceinOSPFarea2.
Theloopbackinterfacesmustbeadvertisedwiththeircorrectmask.
OnR1
R1(config)#routerospf1
R1(configrouter)#netw1.1.1.10.0.0.0are1
www.ccieuniversity.com
R1(configrouter)#netw131.1.12.10.0.0.0are1
R1(config)#InterfaceLo0
R1(configif)#Ipospfnetworkpointtopoint
OnR2
R2(configif)#routerospf1
R2(configrouter)#netw2.2.2.20.0.0.0area1
R2(configrouter)#netw22.2.2.20.0.0.0are0
R2(configrouter)#netw131.1.12.20.0.0.0are1
R2(configrouter)#netw131.1.23.20.0.0.0are0
R2(config)#InterfaceLo0
R2(configif)#Ipospfnetworkpointtopoint
OnR3
R3(configif)#routerospf1
R3(configrouter)#netw3.3.3.30.0.0.0are0
R3(configrouter)#netw131.1.23.30.0.0.0are0
R3(configrouter)#netw131.1.34.30.0.0.0are0
R3(config)#InterfaceLo0
R3(configif)#Ipospfnetworkpointtopoint
OnR4
R4(configif)#routerospf1
R4(configrouter)#netw4.4.4.40.0.0.0are0
R4(configrouter)#netw131.1.34.40.0.0.0are0
R4(configrouter)#netw44.4.4.40.0.0.0are2
R4(configrouter)#netw131.1.45.40.0.0.0are2
R4(config)#InterfaceLo0
R4(configif)#Ipospfnetworkpointtopoint
OnR5
R5(configif)#routerospf1
R5(configrouter)#netw5.5.5.50.0.0.0are2
R5(configrouter)#netw131.1.45.50.0.0.0are2
R5(config)#InterfaceLo0
R5(configif)#Ipospfnetworkpointtopoint
www.ccieuniversity.com
Task 2
Configurearea1suchthatitdoesnotreceiveLSAtypes4and5.
OnR1
R1(config)#routerospf1
R1(configrouter)#area1stub
OnR2
R2(config)#routerospf1
R2(configrouter)#area1stub
ImportantpointstounderstandaboutaSTUBarea:
ASTUBareacannotbeatransitareaforVirtuallink,butaGREtunnelcan
beusedinstead.
ASTUBareacannothaveanASBR.
ThebackboneareacannotbeconfiguredasaSTUBarea.
EveryrouterandtheABRofthatareashouldhaveareaxxstub
command.
NoLSAtype5(E1,orE2)isallowedinaSTUBarea,buttheroutersinthe
STUBareacanconnecttotheExternalroutesviathedefaultroutethatis
injectedintheareabytheABR.
Bydefault,thecostofthedefaultrouteis1thiscanbeverifiedbyShowip
ospf,andShowiproute.Thecostofthedefaultroutecanbechangedby
areaxxdefaultcostcc,wherexxistheareanumber,andccisthedesired
cost
Task 3
Area2shouldnotreceiveLSAtypes3,4and5.
OnR5
R5(config)#routerospf1
R5(configrouter)#area2stub
www.ccieuniversity.com
Theabovecommandmustbeconfiguredonalltherouterswithinthisarea.
OnR4
R4(config)#routerospf1
R4(configrouter)#area2stubnosummary
TheabovecommandmustonlybeconfiguredontheABRofthisarea.
Noteyoucanreducetheroutingtablefurtherbyconfiguringanareaastotally
stubby.SincealltheIAandE(InterareaandExternal)routesarereachedthrough
theABRandtheABRhasinjecteda0/0routeintothearea,thereisnotreasonto
maintaintheIAroutesandtheyshouldbefiltered.
Task 4
Create/configurethefollowingloopbackinterfacesonR1andredistributetheminto
OSPFroutingdomain:
Lo1=11.1.0.1/24,Lo2=11.1.1.1/24,Lo3=11.1.2.1/24andLo4=11.1.3.1/24
Aftertheredistribution,area1shouldonlyreceiveandpropagateLSAtypes1,2,3and
7.Thisareashouldnothavetheability toconnecttoanyexternalroutesredistributedelse
wherewithinthisroutingdomain.
OnR1
R1(config)#routerospf1
R1(configrouter)#noarea1stub
R1(configrouter)#area1nssa
OnR2
R2(config)#routerospf1
R2(configrouter)#noarea1stub
R2(configrouter)#area1nssa
R1(configif)#intlo1
R1(configif)#ipaddr11.1.0.1255.255.255.0
R1(configif)#intlo2
R1(configif)#ipaddr11.1.1.1255.255.255.0
R1(configif)#intlo3
R1(configif)#ipaddr11.1.2.1255.255.255.0
www.ccieuniversity.com
R1(configif)#intlo4
R1(configif)#ipaddr11.1.3.1255.255.255.0
R1(config)#accesslist1permit11.1.0.00.0.3.255
R1(config)#routemapTESTpermit
R1(configroutemap)#matchipaddr1
R1(config)#routerospf1
R1(configrouter)#redistributeconnectedroutemapTESTsubnets
NotewhenconfiguringanareaasanNSSAarea,bydefaultthe0/0routewillnotbe
injectedbytheABRofthatarea.
Task 5
Create/configurethefollowingloopbackinterfacesonR5andredistributetheminto
OSPFroutingdomain:
Lo1=55.1.0.5/24,Lo2=55.1.1.5/24,Lo3=55.1.2.5/24andLo4=55.1.3.5/24
Aftertheredistribution,theroutersinthisareashouldonlymaintainandpropagateLSA
types1,2,3,7andadefaultroute.
OnR5
R5(config)#intlo1
R5(configif)#ipaddr55.1.0.5255.255.255.0
R5(configif)#intlo2
R5(configif)#ipaddr55.1.1.5255.255.255.0
R5(configif)#intlo3
R5(configif)#ipaddr55.1.2.5255.255.255.0
R5(configif)#intlo4
R5(configif)#ipaddr55.1.3.5255.255.255.0
R5(config)#accesslist1permit55.5.0.00.0.3.255
R5(configif)#routemapTESTpermit10
R5(configroutemap)#matchipaddr1
www.ccieuniversity.com
R5(config)#routerospf1
R5(configrouter)#noarea2stub
R5(configrouter)#area2nssa
R5(configrouter)#redistributeconnectedsubnetsroutemapTEST
OnR4
R4(config)#routerospf1
R4(configrouter)#noarea2stubnosummary
R4(configrouter)#are2nssadefaultinformationoriginate
OSPF:Areaisconfiguredasstubareaalready
Notewhentheareastubnosummarycommandisconfiguredandmustbe
removed,thenoarea2stubnosummarycommandwillonlyremovetheno
summarypartofthecommand.Youmustremembertoenterthenoarea2stub
commandagaintoremovetheentirecommand.
R4(configrouter)#noare2stub
R4(configrouter)#area2nssadefaultinformationoriginate
Notethedefaultinformationoriginatecommandattheendofarea2nssawillinject
adefaultrouteintothearea.
Task 6
Area1shouldbechangedsuchthatitreceivesandpropagatesLSAtypes1,2,7plusa
defaultroute.ThisareashouldNOTmaintainInterarearoutes,butmusthavetheability
toconnecttotheseroutes.
OnR2
R2(config)#routerospf1
R2(configrouter)#area1nssanosummary
ThenosummarykeywordfiltersthesummaryLSAswhicharetheLSAtype3s.
Task 7
Thedefaultroutethatwasinjectedintoarea1shouldhaveacostof50.
www.ccieuniversity.com
OnR2
R2(config)#routerospf1
R2(configrouter)#area1defaultcost50
Bydefault,thecostofthedefaultrouteinjectedintotheareais1thiscanbe
verifiedbyShowiproute.Thecostofthedefaultroutecanbechangedbyarea
xxdefaultcostcc,wherexxistheareanumber,andccisthedesiredcost.
Task 8
Erasethestartupconfigandreloadtheroutersbeforeproceedingtothenextlab
www.ccieuniversity.com
Lab7
FilteringroutesinOSPF
R1
R2
.1.2
S0/0
FrameRelay
S0/0
F0/0.2
.3
F0/0
.3
R4
.4
. R3
FrameRelay
S0/0S0/0
Labsetup:
ConfigureR2F0/0andR3sF0/0inVLAN23
ConfiguretheframerelayconnectionbetweenR1,R2andR3,R4inapointto
pointmanner.
www.ccieuniversity.com
IPAddressing
Router Interface
R1
Lo0
Lo1
Lo2
Lo3
F/RinterfacetoR2
R2
Lo0
F/RinterfacetoR1
F0/0interfacetoR3
R3
Lo0
F/RinterfacetoR4
F0/0interfacetoR2
R4
Lo0
Lo1
Lo2
Lo3
Lo4
F/RinterfacetoR3
IPaddress
1.1.0.1/24
1.1.1.1/24
1.1.2.1/24
1.1.3.1/24
131.1.12.1/24
2.2.2.2/8
131.1.12.2/24
131.1.23.2/24
3.3.3.3/8
131.1.34.3/24
131.1.23.3/24
4.4.0.4/24
4.4.1.4/24
4.4.2.4/24
4.4.3.4/24
4.4.4.4/24
131.1.34.4/24
Area
Area1
Area1
Area1
Area1
Area1
Area0
Area1
Area0
Area0
Area2
Area0
Area2
Area2
Area2
Area2
Area2
Area2
Task1
ConfigureOSPFontheroutersaccordingtotheaboveIPaddressingchart.Ensurethat
theadvertisednetworksarereachablebyallrouters.Theloopbackinterfacesshouldbe
advertisedwiththeircorrectmask.
OnR1
R1(config)#routerospf1
R1(configrouter)#routerid1.1.1.1
R1(configrouter)#netw0.0.0.00.0.0.0area1
R1(config)#InterfaceLo0
R1(configif)#Ipospfnetworkpointtopoint
R1(config)#InterfaceLo1
R1(configif)#Ipospfnetworkpointtopoint
R1(config)#InterfaceLo2
R1(configif)#Ipospfnetworkpointtopoint
www.ccieuniversity.com
R1(config)#InterfaceLo3
R1(configif)#Ipospfnetworkpointtopoint
OnR2
R2(config)#routerospf1
R2(configrouter)#routerid2.2.2.2
R2(configrouter)#netw2.2.2.20.0.0.0area0
R2(configrouter)#netw131.1.12.20.0.0.0area1
R2(configrouter)#netw131.1.23.20.0.0.0are 0
R2(config)#InterfaceLo0
R2(configif)#Ipospfnetworkpointtopoint
OnR3
R3(config)#routerospf1
R3(configrouter)#routerid3.3.3.3
R3(configrouter)#netw3.3.3.30.0.0.0area0
R3(configrouter)#netw131.1.34.30.0.0.0area2
R3(configrouter)#netw131.1.23.30.0.0.0area0
R3(config)#InterfaceLo0
R3(configif)#Ipospfnetworkpointtopoint
OnR4
R4(config)#routerospf1
R4(configrouter)#routerid4.4.4.4
R4(configrouter)#netw0.0.0.00.0.0.0area2
R4(config)#InterfaceLo0
R4(configif)#Ipospfnetworkpointtopoint
R4(config)#InterfaceLo1
R4(configif)#Ipospfnetworkpointtopoint
R4(config)#InterfaceLo2
R4(configif)#Ipospfnetworkpointtopoint
R4(config)#InterfaceLo3
R4(configif)#Ipospfnetworkpointtopoint
R4(config)#InterfaceLo4
www.ccieuniversity.com
R4(configif)#Ipospfnetworkpointtopoint
Task2
ConfigureR3suchthattheroutersinarea2dontreceiveanyLSAsfromtheotherareas,
however,theotherareasshouldreceiveroutesfromarea2.DoNOTusedistributelist,
accesslist,oranycommandintherouterospfprocesstoaccomplishthistask.All
networksmustbeadvertised.
OnR3
R3(configrouter)#intS0/0.34
R3(configsubif)#ipospfdatabasefilterallout
BydefaultalloutgoingLSAsarefloodedtotheinterface.Thiscommandprevents
floodingofOSPFLSAsoutofagiveninterface.
Toverifytheconfiguration:
OnR4
R4#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
4.0.0.0/24issubnetted,5subnets
C4.4.0.0isdirectlyconnected,Loopback0
C4.4.1.0isdirectlyconnected,Loopback1
C4.4.2.0isdirectlyconnected,Loopback2
C4.4.3.0isdirectlyconnected,Loopback3
C4.4.4.0isdirectlyconnected,Loopback4
131.1.0.0/24issubnetted,1subnets
C131.1.34.0isdirectlyconnected,Serial0/0.43
NoteR4doesnothaveanyLSAsinitsroutingtable
www.ccieuniversity.com
OnR1
R1#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
1.0.0.0/24issubnetted,4subnets
C1.1.0.0isdirectlyconnected,Loopback0
C1.1.1.0isdirectlyconnected,Loopback1
C1.1.2.0isdirectlyconnected,Loopback2
C1.1.3.0isdirectlyconnected,Loopback3
2.0.0.0/32issubnetted,1subnets
OIA2.2.2.2[110/65]via131.1.12.2,00:12:15,Serial0/0.12
3.0.0.0/32issubnetted,1subnets
OIA3.3.3.3[110/66]via131.1.12.2,00:02:11,Serial0/0.12
4.0.0.0/32issubnetted,5subnets
OIA4.4.4.4[110/130]via131.1.12.2,00:02:02,Serial0/0.12
OIA4.4.0.4[110/130]via131.1.12.2,00:02:02,Serial0/0.12
OIA4.4.1.4[110/130]via131.1.12.2,00:02:02,Serial0/0.12
OIA4.4.2.4[110/130]via131.1.12.2,00:02:03,Serial0/0.12
OIA4.4.3.4[110/130]via131.1.12.2,00:02:03,Serial0/0.12
131.1.0.0/24issubnetted,3subnets
C131.1.12.0isdirectlyconnected,Serial0/0.12
OIA131.1.23.0[110/65]via131.1.12.2,00:02:08,Serial0/0.12
OIA131.1.34.0[110/129]via131.1.12.2,00:02:13,Serial0/0.12
NoteR1hasalltheLSAsfromR4.
Task3
ConfigureR2suchthatitfiltersalllocallygeneratedLSAsandtheLSAsfromR1
reachingR3andR4.R1andR2shouldreceiveallLSAsfromR3andR4.DoNOTuse
anyglobalconfigcommand/saspartofthesolutiontoaccomplishthistask.
www.ccieuniversity.com
OnR3
R3(configif)#intf0/0
R3(configif)#ipospfnetpointtomultipoint
OnR2
R2(configrouter)#intf0/0
R2(configif)#ipospfnetpointtomultipoint
R2(configif)#routerospf1
R2(configrouter)#neighbor131.1.23.3databasefilterallout
Inorderfortheneighbordatabasefilteralloutcommandtoworkthenetwork
typehastobeconfiguredinapointtomultipointmanner.
Youmayhavetouseclearipospfprocesscommandforthiscommandtotake
effect.
ToVerifytheconfiguration:
OnR3
R3#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
3.0.0.0/24issubnetted,1subnets
C3.3.3.0isdirectlyconnected,Loopback0
4.0.0.0/32issubnetted,5subnets
O4.4.4.4[110/65]via131.1.34.4,00:01:16,Serial0/0.34
O4.4.0.4[110/65]via131.1.34.4,00:01:16,Serial0/0.34
O4.4.1.4[110/65]via131.1.34.4,00:01:16,Serial0/0.34
O4.4.2.4[110/65]via131.1.34.4,00:01:16,Serial0/0.34
O4.4.3.4[110/65]via131.1.34.4,00:01:16,Serial0/0.34
131.1.0.0/24issubnetted,2subnets
C131.1.23.0isdirectlyconnected,FastEthernet0/0
C131.1.34.0isdirectlyconnected,Serial0/0.34
www.ccieuniversity.com
NoteR3ONLYhastheLSAsfromR4initsroutingtable.
OnR2
R2#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
1.0.0.0/24issubnetted,4subnets
O1.1.0.0[110/65]via131.1.12.1,00:00:32,Serial0/0.21
O1.1.1.0[110/65]via131.1.12.1,00:00:32,Serial0/0.21
O1.1.2.0[110/65]via131.1.12.1,00:00:32,Serial0/0.21
O1.1.3.0[110/65]via131.1.12.1,00:00:32,Serial0/0.21
2.0.0.0/24issubnetted,1subnets
C2.2.2.0isdirectlyconnected,Loopback0
3.0.0.0/32issubnetted,1subnets
O3.3.3.3[110/2]via131.1.23.3,00:00:02,FastEthernet0/0
4.0.0.0/32issubnetted,5subnets
OIA4.4.4.4[110/66]via131.1.23.3,00:00:03,FastEthernet0/0
OIA4.4.0.4[110/66]via131.1.23.3,00:00:03,FastEthernet0/0
OIA4.4.1.4[110/66]via131.1.23.3,00:00:03,FastEthernet0/0
OIA4.4.2.4[110/66]via131.1.23.3,00:00:04,FastEthernet0/0
OIA4.4.3.4[110/66]via131.1.23.3,00:00:04,FastEthernet0/0
131.1.0.0/16isvariablysubnetted,4subnets,2masks
C131.1.12.0/24isdirectlyconnected,Serial0/0.21
C131.1.23.0/24isdirectlyconnected,FastEthernet0/0
O131.1.23.3/32[110/1]via131.1.23.3,00:00:04,FastEthernet0/0
OIA131.1.34.0/24[110/65]via131.1.23.3,00:00:04,FastEthernet0/0
NoteR2canseealltheLSAs.
Task4
Removealltheconfigurationcommandsfromtheprevioustwosteps.
www.ccieuniversity.com
OnR3
R3(config)#intS0/0.34
R3(configsubif)#noipospfdatabasefilterallout
R3(configif)#intf0/0
R3(configif)#noipospfnetpointtomultipoint
OnR2
R2(configrouter)#intf0/0
R2(configif)#noipospfnetpointtomultipoint
R2(configif)#routerospf1
R2(configrouter)#noneighbor131.1.23.3databasefilterallout
Task5
ConfigureR3orR4suchthatR4doesnothavereachabilitytoNetwork3.0.0.0.You
mustusedistributelisttoaccomplishthistask.
OnR4
R4(config)#accesslist3deny3.0.0.00.255.255.255
R4(config)#accesslist3permitany
R4(config)#routerospf1
R4(configrouter)#distributelist3inS0/0.43
NotesincedistributelistoutdoesNOTworkinOSPF,theconfigurationofthis
taskmustbeperformedonR4usingthedistributelistincommand.
Task6
OnR4stopadvertisingnetworks4.4.0.0/24 4.4.3.0/24andredistributethesenetworks
intoOSPF.Ensurethatotherroutersseetheroutes asexternal.
OnR4
R4(config)#accesslist4permit4.4.0.00.0.3.255
www.ccieuniversity.com
R4(config)#routemapTESTpermit10
R4(configroutemap)#matchipaddr4
R4(config)#routerospf1
R4(configrouter)#nonetw0.0.0.00.0.0.0are2
R4(configrouter)#netw131.1.34.40.0.0.0area2
R4(configrouter)#redistributeconnectedsubnetsroutemapTEST
Task7
ConfiguretheOSPFrouterssuchthattheydonthavereachabilitytonetwork4.4.3.0/24.
DoNOTuseanyglobalconfigcommand,neighborcommand,interfaceconfig
command,oranyipospfcommandtoaccomplishthistask.
OnR4
R4(configsubif)#routerospf1
R4(configrouter)#summaryaddress4.4.3.0255.255.255.0notadvertise
NotethiscommandwasusedtosummarizetheexternalroutesintoOSPF
routingdomain.Thiscommandcanalsobeusedtofilteranexternalnetwork/s
whenconfiguredonASBR/s. Thiscommandcannotbeusedtofilterinternal
networks.
Task8
ConfiguretheOSPFrouterssuchthatR3andR4donthavereachabilityto1.1.3.0/24
network.
On R2
R2(config)#routerospf1
R2(configrouter)#area1range1.1.3.0255.255.255.0notadvertise
Notethiscommandwasusedtosummarizetheinternalroutesfromoneareainto
anotherareawithinanOSPFroutingdomain.Thiscommandcanalsobeusedto
filterinternalrouteswithinanOSPFroutingdomainandcanonlybeusedonthe
ABR/s.ThiscommandcanNOTbeusedtofilterexternalnetworks.
www.ccieuniversity.com
Task9
Removetheconfigurationcommandsfromthepreviousstep.
OnR2
R2(config)#routerospf1
R2(configrouter)#noarea1range1.1.3.0255.255.255.0notadvertise
Task10
ConfigureR3suchthatnetwork1.1.1.0/24isnotadvertisedtoarea2.
OnR3
R3(config)#ipprefixlistTESTseq5deny1.1.1.0/24
R3(config)#ipprefixlistTESTseq10permit0.0.0.0/0le32
R3(config)#routerospf1
R3(configrouter)#area2filterlistprefixTESTin
ThiscommandfiltersprefixesadvertisedinLSAtype3betweenOSPFareaofan
ABR.
ToVerifytheconfiguration:
OnR4
R4#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
1.0.0.0/24issubnetted,3subnets
OIA1.1.0.0[110/130]via131.1.34.3,00:01:20,Serial0/0.43
www.ccieuniversity.com
OIA1.1.2.0[110/130]via131.1.34.3,00:01:10,Serial0/0.43
OIA1.1.3.0[110/130]via131.1.34.3,00:01:10,Serial0/0.43
2.0.0.0/32issubnetted,1subnets
OIA 2.2.2.2[110/66]via131.1.34.3,00:11:38,Serial0/0.43
4.0.0.0/24issubnetted,5subnets
C4.4.0.0isdirectlyconnected,Loopback0
C4.4.1.0isdirectlyconnected,Loopback1
C4.4.2.0isdirectlyconnected,Loopback2
C4.4.3.0isdirectlyconnected,Loopback3
C4.4.4.0isdirectlyconnected,Loopback4
131.1.0.0/24issubnetted,3subnets
OIA131.1.12.0[110/129]via131.1.34.3,00:11:42,Serial0/0.43
OIA131.1.23.0[110/65]via131.1.34.3,00:11:42,Serial0/0.43
C131.1.34.0isdirectlyconnected,Serial0/0.43
NoteNetwork1.1.1.0/24isnotintheroutingtableofR4.IftheroutingtableofR3
isdisplayed,youwillseenetwork1.1.1.0/24intheroutingtable.RememberthatR3
isanABRanditconnectsarea0toarea2.
Task11
Erasethestartupconfigurationandreloadtheroutersbeforeproceedingtothenextlab.
www.ccieuniversity.com
Lab8
RedirectingtrafficinOSPF
R1
S0/0
FrameRelay
R3
R2
S0/0S0/0
F0/0
F0/0
F0/0
.
R4
LabSetup:
R1shouldbeconfiguredwithtwopointtopointlinks,oneconnectingR1toR2
andtheotherconnectingR1toR3.R2andR3shouldalsobeconfiguredina
pointtopointmanner.
R2,R3andR4sF0/0interfacesshouldbeconfiguredtobeinVLAN234.
UsetheIPaddresschartbelowtoassignIPaddressestotherouters.
www.ccieuniversity.com
IPAddressing
Router Interface
R1
Lo0
F/RinterfacetoR2
F/RinterfacetoR3
R2
Lo0
F/RinterfacetoR1
F0/0interface
R3
Lo0
F/RinterfacetoR1
F0/0interface
R4
Lo0
F0/0interface
IPaddress
1.1.1.1/8
131.1.12.1/24
131.1.13.1/24
2.2.2.2/8
131.1.12.2/24
131.1.234.2/24
3.3.3.3/8
131.1.13.3/24
131.1.234.3/24
4.4.4.4/8
131.1.234.4/24
Area
Area0
Area0
Area0
Area0
Area0
Area0
Area0
Area0
Area0
Area0
Area0
Task1
ConfigureOSPFonallroutersandadvertisetheirdirectlyconnectednetworkinarea0
andensurethattheserouterscanreachalltheadvertisednetworks.Ensurethatthe
loopbackinterfacesareadvertisedwiththeircorrectmask.
OnAllRouters
(configif)#routerospf1
(configrouter)#netw0.0.0.00.0.0.0are0
(configrouter)#interfaceLo0
(configif)#ipospfnetworkpointtopoint
Task2
R1hastwowaystoreachnetwork4.0.0.0/8,ensurethatR1usesR2toreachthis
network.R1shouldgodirectlytoR3toreachnetwork3.0.0.0.
However,ifR2goesdown,R3shouldbeusedasatransitroutertoreachnetwork4.0.0.0
/8.
DONOTUSETHEFOLLOWINGCOMMANDS:
Bandwidth,anyglobalconfigcommand,OSPFcostcommandorthedistance
command.
www.ccieuniversity.com
NotetheroutingtableofR1revealsthatR1canreachnetwork4.0.0.0viaR2and
R3.
OnR1
R1#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
C1.0.0.0/8isdirectlyconnected,Loopback0
O2.0.0.0/8[110/65]via131.1.12.2,00:00:21,Serial0/0.12
O3.0.0.0/8[110/65]via131.1.13.3,00:00:21,Serial0/0.13
O4.0.0.0/8[110/66]via131.1.13.3,00:00:21,Serial0/0.13
[110/66]via131.1.12.2,00:00:21,Serial0/0.12
131.1.0.0/24issubnetted,3subnets
O
131.1.234.0[110/65]via131.1.13.3,00:00:21,Serial0/0.13
[110/65]via131.1.12.2,00:00:21, Serial0/0.12
C131.1.12.0isdirectlyconnected,Serial0/0.12
C131.1.13.0isdirectlyconnected,Serial0/0.13
OnR3
R3(config)#routerospf1
R3(configrouter)#maxmetricrouterlsa
TheabovecommandwillcausearoutertooriginateLSAswithamaximummetric
of0xffff(LSInfinity).Thisisdonesothatotherroutersdonotprefertherouterasa
transithopintheirpath toagivennetwork.
ToVerifytheconfiguration:
OnR1
Showiproute
www.ccieuniversity.com
Task3
Erasethestartupconfigandreloadtheroutersbeforeproceedingtothenextlab.
www.ccieuniversity.com
Lab9
LimitingthenumberofOSPFredistributed
routes
R1
R2
FrameRelay
S0/0S0/0
F0/0
R3 F0/0
LabSetup:
TheframerelayconnectionbetweenR1andR2mustbeconfiguredinapointto
pointmanner.
R2andR3sF0/0interfaceshouldbeconfiguredinVLAN23.
www.ccieuniversity.com
IPAddressing
Router Interface
R1
Lo1
Lo2
Lo3
Lo4
Lo5
Lo6
Lo7
Lo8
Lo9
Lo10
Lo11
F/RinterfacetoR2
R2
Lo0
Lo1
F/RinterfacetoR1
F0/0interfacetoR3
R3
Lo0
F/RinterfacetoR2
IPaddress
1.0.0.1/8
2.0.0.1/8
3.0.0.1/8
4.0.0.1/8
5.0.0.1/8
6.0.0.1/8
7.0.0.1/8
8.0.0.1/8
9.0.0.1/8
10.0.0.1/8
11.0.0.1/8
131.1.12.1/24
2.2.2.2/8
22.2.2.2/8
131.1.12.2/24
131.1.23.2/24
3.3.3.3/8
131.1.23.3/24
Area
Eigrp100
Eigrp100
Eigrp100
Eigrp100
Eigrp100
Eigrp100
Eigrp100
Eigrp100
Eigrp100
Eigrp100
Eigrp100
Eigrp100
Eigrp100
OSPFarea0
Eigrp100
OSPFarea0
OSPFarea0
OSPFarea0
Task1
Configuretheroutersasfollows:
OnR1,configureEigrp100andadvertisenetworks1.0.0.0/8 5.0.0.0/8and
theframerelayinterfacetoR2.
OnR2,configureEigrp100andadvertisenetworks2.0.0.0/8andtheframe
relayinterfacelinktoR1.
OnR2,configureOSPFandadvertisenetwork22.0.0.0/8andtheF0/0interface
toR3inarea0.
OnR3,configureOSPFandadvertiseallofitsinterfacesinarea0.
OnR1
R1(config)#routereigrp100
R1(configrouter)#noau
R1(configrouter)#netw1.0.0.0
R1(configrouter)#netw2.0.0.0
www.ccieuniversity.com
R1(configrouter)#netw3.0.0.0
R1(configrouter)#netw4.0.0.0
R1(configrouter)#netw5.0.0.0
R1(configrouter)#netw131.1.12.00.0.0.255
OnR2
R2(configif)#routerospf1
R2(configrouter)#netw22.2.2.20.0.0.0are0
R2(configrouter)#netw131.1.23.20.0.0.0are0
R2(configrouter)#routereigrp100
R2(configrouter)#netw131.1.12.00.0.0.255
R2(configrouter)#netw2.0.0.0
R2(configrouter)#passiveinterfaceF0/0
R2(configrouter)#PassiveinterfaceLo1
OnR3
R2(configif)#routerospf1
R2(configrouter)#netw0.0.0.00.0.0.0are0
Task2
OnR2,performamutualredistributionbetweenOSPFandEigrp100.
OnR2
R2(config)#routereigrp100
R2(configrouter)#redistributeospf1metric15002000025511500
R2(configrouter)#routerospf1
R2(configrouter)#redistributeeigrp100subnets
NotewhenredistributingroutesintoOSPF,theywillberedistributedwithametric
of20.
Toverifytheconfiguration:
Showiproute
www.ccieuniversity.com
Task3
R2shouldbeconfiguredsuchthatthemaximumnumberofprefixesthatcanbe
redistributedintoOSPFroutingprotocolis10.
R2shouldgeneratetwowarningmessages.Thefirstmessageshouldoccurwhenthe
numberofredistributedprefixesreaches70%oftheconfiguredthreshold(10).The
secondmessageshouldoccurwhenthe10th prefixisredistributed.
OnR2
R2(configrouter)#routerospf1
R2(configrouter)#redistributemaximumprefix1070warningonly
Theabovecommandlimitsthenumberofprefixesthatcanberedistributedinto
OSPFroutingdomain.Inthiscase,therouterwillgeneratetwowarningmessages,
thefirstonewillbegeneratedwhen70%oftheconfiguredthreshold(10)isreached
andthe secondmessagewillbegeneratedwhentheconfiguredthreshold(10)is
exceeded.
Theinitialconfigfilehascreated11Loopbackinterfacesfortestingpurpose.Test
thispolicybyadvertisingtheseloopbackinterfacesoneatatimeandobservethe
warningmessages.
www.ccieuniversity.com
Task4
TheadministratorofR1isconstantlyviolatingthemaximumroutespolicy,inorderto
safeguardagainstthis,youshouldconfigureR2suchthatonly10prefixesareallowedto
beredistributedintoOSPF,ifR1advertisesmorethan10prefixesinEigrp100,R2
shouldignoretheextraprefixes.
OnR2
R2(config)#routerospf1
R2(configrouter)#noredistributemaximumprefix1070warningonly
R2(configrouter)#redistributemaximumprefix1070
Sincethewarningonlykeywordisnotused,R2willignoreanyadvertisement
abovethesetthreshold.
Task5
Erasethestartupconfigandreloadtheroutersbeforeproceedingtothenextlab.
www.ccieuniversity.com
Lab1
AuthenticationandAdvancedConfiguration
R1
R2
.1.2
S0/0
FrameRelay
AS100
S0/0
AS200
LabSetup
R1andR2shouldbeconfiguredinaframerelaypointtopoint.
IPAddressing
Router
R1
R2
Interface
Lo0
S0/0.12
Lo0
S0/0.21
IPaddress
1.1.1.1/8
131.1.12.1/24
2.2.2.2/8
131.1.12.2/24
Task1
ConfigureanEBGPneighboradjacencybetweenthetworoutersandonlyadvertisetheir
LoopbackinterfaceinBGP.
OnR1
R1(config)#router bgp100
www.ccieuniversity.com
R1(configrouter)#neighbor131.1.12.2remoteas200
R1(configrouter)#network1.0.0.0
R1(configrouter)#noautosummary
OnR2
R2(config)#routerbgp200
R2(configrouter)#neighbor131.1.12.1remoteas100
R2(configrouter)#network2.0.0.0
R2(configrouter)#noautosummary
NoteeventhoughBGPisaclasslessroutingprotocol,ithasaclassfulnature,
becausebydefaultitsummarizesnetworkstotheirclassfulboundary.RIPv2and
Eigrphavethesamebehaviorandthisbehaviorcanbedisabledbyusingtheno
autosummarycommand.
Toverifytheconfiguration:
OnR1
Showipbgp
BGPtableversionis3,localrouterIDis1.1.1.1
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrf Weight
*>1.0.0.00.0.0.0
0
32768
*>2.0.0.0131.1.12.2
0
0
Path
i
200i
www.ccieuniversity.com
ValidTableEntry.
ThebestentryforthePrefix.
Theentryissuppressed.
TheentrywaslearnedviaanIBGP,thisistheItotheleftofthe
networkcolumn.TheletterIunderthepathcolumn,specifiestheto
originoftheroute.
Historystate,meaningthattheroutehasaccruedsomepenaltybutnot
H
enoughfortheroutetobeDampened.
Network Prefixentryforthenetwork,ifthemaskisomitted,thedefaultmaskis
assumed.
NextHop ThenexthopsIPaddresstogettothespecifiednetworkaddress,ifitis
0.0.0.0itisaprefixthatisadvertisedbythelocalrouter.
ThisistheInterasmetric,ortheMEDattribute.
Metric
Thisisthelocalpreferenceattribute.
LocPrf
Theprefixesthatarereceivedviaaneighborwillhaveaweightof0,but
Weight
theprefixesthatareoriginatedbythelocalrouterwillhaveaweightvalue
of32768.
IftheprefixeswereoriginatedorlearnedviaanIBGP,thepathcolumn
Path
willhavetheletterIwithoutanyASNs.If theprefix waslearnedthrough
anotherAS,thenthiscolumnwillhavetheASnumber/sfollowedbythe
letterI,theASNsindicatetheASesthataprefixhastraversed.
*
>
S
I
R1#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
C1.0.0.0/8isdirectlyconnected,Loopback0
B2.0.0.0/8[20/0]via131.1.12.2,00:02:31
131.1.0.0/24issubnetted,1subnets
C
131.1.12.0isdirectlyconnected,Serial0/0.12
Task2
OnR2,restrictthenumberofprefixesreceivedfromR1to10R2shouldgeneratea
messageif70%ofthisthresholdisreached,ifR1advertisesmorethan10prefixes,R2
shouldterminatetheneighboradjacency.
www.ccieuniversity.com
OnR2
R2(config)#routerbgp200
R2(configrouter)#neighbor131.1.12.1maximumprefix1070
Tolimitthenumberofprefixesfromagivenneighbor,usetheneighbor
maximumprefixcommandintherouterconfigmode.
Neighbor131.1.12.1maximumprefix1070
Maximumprefix10specifiesthemaximumnumberofprefixes(inthiscase
10)thatthelocalrouterisallowedtoreceivefromthespecifiedneighbor
(131.1.12.1).
Thenextvalue(70)aftertheNeighbor131.1.12.1maximumprefix10
commandspecifies,atwhatpercentageofthemaximumprefixlimitthe
routerstartstogenerateawarningmessage.Therangeis1100.
RestartOptionalkeywordthatcanbeconfiguredtotelltherouterto
automaticallyreestablishapeeringsessionthathasbeendisabledbecause
themaximumprefixlimithasbeenexceeded.Ifthiskeywordisnot
configured,adisabledsessionwillstaydown.Iftherestartkeywordis
configured,itmustbefollowedwithatimerestartinterval.Timeinterval
valueisinminutesthatapeeringsessionisreestablished.Therangeis1
65535.
WarningonlyThismessagetellsthelocalroutertogeneratealogmessage
whenthemaximumprefixlimitisexceeded.Ifthiskeywordisomitted,the
peersessionwillbeterminated.
Task3
ConfigurethefollowingEthernetlinkbetweentheroutersandassigntheIPaddressing
specifiedinthediagram:
www.ccieuniversity.com
AS100
AS200
R1
R2
.1.2
S0/0
FrameRelay
F0/0.1
S0/0
F0/0.2
200.1.1.0/24
R1F0/0IPaddress=200.1.1.1/24andR2sF0/0IPaddress=200.1.1.2/24
R1andR2sF0/0interfacemustbeconfiguredinVLAN12.
Donotadvertisenetworks1.0.0.0and2.0.0.0inBGP
AdvertisetheLoopbackinterfaces(1.0.0.0/8and2.0.0.0/8)andthelinks
betweentheroutersinRIPv2.
Cat1
Switch(config)#intrangeF0/12
Switch(configifrange)#swimodeacc
Switch(configifrange)#swiaccv12
OnR1
R1(configrouter)#intf0/0
R1(configif)#ipaddress200.1.1.1255.255.255.0
R1(configif)#noshut
OnR2
R2(configrouter)#intf0/0
R2(configif)#ipaddr200.1.1.2255.255.255.0
R2(configif)#noshut
www.ccieuniversity.com
Task4
ConfigurethefollowingLoopbackinterfacesonR1andR2andensurethatthese
loopbackinterfacesaretheonlyonesadvertisedinBGP:
R1Lo1=11.1.1.1/8andR2Lo1=22.2.2.2/8
Toensurethatthisneighboradjacencyisnotterminatedbecauseofaframerelaylink
failure,theEthernetlinkwasaddedandshouldbeusedwithoutanyinterruptiontothe
neighboradjacency.
OnR1
R1(configif)#routerbgp100
R1(configrouter)#noneighbor131.1.12.2remoteas200
R1(configrouter)#neighbor2.2.2.2remoteas200
R1(configrouter)#neighbor2.2.2.2updatesourcelo0
R1(configrouter)#neighbor2.2.2.2ebgpmultihop2
R1(configrouter)#nonetw1.0.0.0
R1(configrouter)#netw11.0.0.0
R1(config)#routerrip
R1(configrouter)#ver2
R1(configrouter)#netw1.0.0.0
R1(configrouter)#netw131.1.12.0
R1(configrouter)#netw200.1.1.0
OnR2
R2(configif)#routerbgp200
R2(configrouter)#noneighbor131.1.12.1remoteas100
R2(configrouter)#neighbor1.1.1.1remoteas100
R2(configrouter)#neighbor1.1.1.1updatesourcelo0
R2(configrouter)#network22.0.0.0
BydefaultBGPusesthebestlocalIPaddressforitsTCPconnection.ThesourceIP
addressoftheupdatesissettotheIPaddressofthebestlocalinterface.Usethe
neighborupdatesourcecommandtochangethisbehavior.
R2(configrouter)#neighbor1.1.1.1ebgpmultihop2
BydefaultBGPestablishesapeersessionwithneighborsthataredirectlyconnected
andbecauseofthispolicy,theTTLofthesepacketsissetto1.Tochangethis
behaviortheneighborebgpmultihopcommandcanbeused,thiscommand
changestheTTLofthepackets.IftheTTLvalueisnotspecifiedaTTLof255is
added.
www.ccieuniversity.com
R2(configrouter)#nonetw2.0.0.0
R2(config)#routerrip
R2(configrouter)#netw2.0.0.0
R2(configrouter)#ver2
R2(configrouter)#netw131.1.12.0
R2(configrouter)#netw200.1.1.0
Task5
EnsurethattheroutersusetheirexistingLoopback0interfaceastheirrouterID.
OnR1
R1(config)#routerbgp100
R1(configrouter)#bgprouterid1.1.1.1
OnR2
R2(config)#routerbgp200
R2(configrouter)#bgprouterid2.2.2.2
Task6
EnsurethattheseroutersauthenticateeachotherbeforeexchangingBGPupdates.They
shoulduseciscoasthepasswordforthisauthentication.
OnR1
R1(config)#routerbgp100
R1(configrouter)#neighbor2.2.2.2passwordcisco
OnR2
R2(config)#routerbgp200
R2(configrouter)#neighbor1.1.1.1passwordcisco
Task7
Erasethestartupconfigandreloadtheroutersbeforeproceedingtothenextlab.
www.ccieuniversity.com
Lab2
ConditionalandBackdoorAdvertisement
R2
R3
F0/0F0/0
S0/0
S0/0
Frame
Relay
S0/0
R1
LabSetup:
ConfigureR1tohavetwopointtopointframerelayconnections,oneconnecting
R1toR2,andtheotherconnectingR1toR3.
R2andR3shouldeachbeconfiguredwithasinglepointtopointconnectionto
R1.
ConfigureR2andR3sF0/0interfacetobeinVLAN23.
www.ccieuniversity.com
Ipaddressing:
Router
R1
R2
R3
Interface
Lo0
FramerelayconnectiontoR2
FramerelayconnectiontoR3
Lo0
FramerelayconnectiontoR1
F0/0interfaceconnectiontoR3
Lo0
Lo1
FramerelayconnectiontoR1
F0/0interfaceconnectiontoR2
IPAddress
1.1.1.1 /8
131.1.12.1/24
131.1.13.1/24
2.2.2.2/8
131.1.12.2/24
150.1.0.2/24
3.3.3.3/8
150.1.2.3/24
131.1.13.3/24
150.1.0.3/24
Task1
ConfigureEBGPpeersessionsasfollows:
R1tohaveapeersessiontoR2
R1tohaveapeersessiontoR3
R2tohaveapeersessiontoR1
R3tohaveapeersessiontoR1
OnR1
R1(config)#routerbgp100
R1(configrouter)#noauto
R1(configrouter)#neighbor131.1.12.2remoteas200
R1(configrouter)#neighbor131.1.13.3remoteas300
OnR2
R2(config)#routerbgp200
R2(configrouter)#noau
R2(configrouter)#neighbor131.1.12.1remoteas100
OnR3
R3(configif)#routerbgp300
R3(configrouter)#noau
R3(configrouter)#neighbor131.1.13.1remoteas100
ASnumber
100
200
300
www.ccieuniversity.com
Task2
R1shouldadvertiseitsLoopback0,itsframerelayconnectiontoR2andR3in
BGP
R2shouldadvertiseitsLoopback0inBGP.
R3shouldadvertiseitsLo0andLo1inBGPusingthecorrectmask.
OnR1
R1(configrouter)#routerbgp100
R1(configrouter)#network1.0.0.0
R1(configrouter)#network131.1.12.0mask255.255.255.0
R1(configrouter)#network131.1.13.0mask255.255.255.0
OnR2
R2(configrouter)#network2.0.0.0
OnR3
R3(config)#routerbgp300
R3(configrouter)#network3.0.0.0
R3(configrouter)#network150.1.2.0mask255.255.255.0
Task3
ConfigureEIGRPAS#100onthefollowingrouters:
R2andR3shouldadvertisenetwork150.1.0.0inEigrpAS#100
Theabovetworoutersshouldadvertise150.1.0.0networkasfollows,ensurethat
autosummarizationisenabled:
Routereigrp100
Network150.1.0.0
Autosum
OnR2andR3
R2(config)#routereigrp100
R2(configrouter)#netw150.1.0.0
R2(configrouter)#autosummary
www.ccieuniversity.com
Task4
NoteR2takesthescenic(R2toR1toR3)routetoreachnetwork150.1.2.0/24,ensure
thatR2reachesnetwork150.1.2.0/24throughitsF0/0interface.DoNOTusePolicy
BasedRoutingyoushoulduseaBGPsolutiontothisproblem.
AshowiproutecommandwillrevealtheroutingtableofR2asfollows:
OnR2
Showiprout
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
B1.0.0.0/8[20/0]via131.1.12.1,00:20:51
C2.0.0.0/8isdirectlyconnected,Loopback0
B3.0.0.0/8[20/0]via131.1.12.1,00:20:51
131.1.0.0/24issubnetted,2subnets
C131.1.12.0isdirectlyconnected,Serial0/0.21
B131.1.13.0[20/0]via131.1.12.1,00:04:02
150.1.0.0/24issubnetted,2subnets
B150.1.2.0[20/0]via131.1.12.1,00:03:32
C150.1.0.0isdirectlyconnected,FastEthernet0/0
NoteR2goesthroughR1andthenR3toreachnetwork150.1.2.0/24
ATraceroutecommandwillshowthecompletepathto150.1.2.3:
Traceroute150.1.2.3
Typeescapesequencetoabort.
Tracingtherouteto150.1.2.3
1131.1.12.128msec28msec32msec
2131.1.13.3[AS100]56msec*56msec
www.ccieuniversity.com
Tocorrectthisproblem:
OnR2
R2(config)#routerbgp200
R2(configrouter)#network150.1.2.0mask255.255.255.0backdoor
NoteR2receivesroutinginformationfornetwork150.1.2.0/24fromtwosources,BGPand
Eigrp.R2willaccepttheroutinginformationfromBGPbecauseithasalower
administrativedistance(20versus90).NetworkbackdoorisaBGPsolutiontothis
situation,BGPbackdoorassignsanadministrativedistanceof200totheadvertised
network,inthiscase150.1.2.0/24.AfterenteringtheBGPbackdoorcommand,R2will
acceptEigrpsadvertisement,becauseEigrpwillhavealoweradministrativedistance(90
versus200).
OnR2
R2#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
B1.0.0.0/8[20/0]via131.1.12.1,00:38:26
C2.0.0.0/8isdirectlyconnected,Loopback0
B3.0.0.0/8[20/0]via131.1.12.1,00:38:26
131.1.0.0/24issubnetted,2subnets
C131.1.12.0isdirectlyconnected,Serial0/0.21
B131.1.13.0[20/0]via131.1.12.1,00:21:37
150.1.0.0/24issubnetted,2subnets
D150.1.2.0[90/156160]via150.1.0.3,00:00:08,FastEthernet0/0
C150.1.0.0isdirectlyconnected,FastEthernet0/0
ATracerouterevealsthepath:
Traceroute150.1.2.3
Typeescapesequencetoabort.
www.ccieuniversity.com
Tracingtherouteto150.1.2.3
1150.1.0.34msec*0msec
Toactuallyseethenewlyassignedadministrativedistance:
OnR2
R2(config)#Routereigrp100
R2(configrouter)#Nonetwork150.1.0.0
R2#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
B1.0.0.0/8[20/0]via131.1.12.1,00:41:10
C2.0.0.0/8isdirectlyconnected,Loopback0
B3.0.0.0/8[20/0]via131.1.12.1,00:41:10
Noteanadministrativedistanceof200is
131.1.0.0/24issubnetted,2subnets
assignedtonetwork150.1.2.0
C131.1.12.0isdirectlyconnected,Serial0/0.21
B131.1.13.0[20/0]via131.1.12.1,00:24:21
150.1.0.0/24issubnetted,2subnets
B150.1.2.0[200/0]via131.1.12.1,00:00:04
C150.1.0.0isdirectlyconnected,FastEthernet0/0
Task5
Removethefollowingfromtheroutersbeforeproceedingtothenexttask:
ShutdownandremovetheIPaddressofF0/0interfaceonR2andR3.
RemoveEigrp100fromtheseroutersbeforeproceedingtothenexttask.
R3shouldstopadvertisingnetwork150.1.2.0/24inBGP
OnR2
R2(config)#intf0/0
www.ccieuniversity.com
R2(configif)#shut
R2(configif)#noipaddr
R2(config)#noroutereigrp100
OnR3
R3(config)#intf0/0
R3(configif)#shut
R3(configif)#noipaddr
R3(config)#noroutereigrp100
R3(config)#routerbgp300
R3(configrouter)#nonetwork150.1.2.0mask255.255.255.0
Task 6
ConfigureR1asfollows:
Ifnetwork2.0.0.0isupanditsadvertisedtoR1anditsinR1sBGPtable,R1should
takethefollowingactions:
R1shouldNOTadvertiseitsnetwork1.0.0.0/8toR3.
R1shouldadvertise2.0.0.0/8toR3
However,ifnetwork2.0.0.0/8isdown,thenR1shouldtakethefollowingactions
R1shouldadvertisenetwork1.0.0.0/8toR3.
R1shouldremovenetwork2.0.0.0/8fromitsBGPtable.
Notetheroutershaveconvergedandtheyareawareofallrouteswithinthe
topology:
R1#Showipbgp
BGPtableversionis7,localrouterIDis1.1.1.1
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
Network
*>1.0.0.0
www.ccieuniversity.com
*>2.0.0.0
131.1.12.20
*>3.0.0.0
131.1.13.30
*>131.1.12.0/240.0.0.0
0
*>131.1.13.0/240.0.0.0
0
0 200i
0 300 i
32768 i
32768 i
Toconditionallyadvertiseselectedrouteswecanusethefollowingcommands:
Advertisemap
Nonexistmap
Existmap
Thissituationcallsfortheuseoftheadvertisemapandnonexistmapas
follows:
OnR1
R1(config)#accesslist1permit1.0.0.00.255.255.255
R1(config)#accesslist2permit2.0.0.00.255.255.255
R1(config)#routemapADVpermit10
R1(configroutemap)#matchipaddr1
R1(configroutemap)#exit
R1(config)#routemapNotTherepermit10
R1(configroutemap)#matchipaddr2
R1(configroutemap)#exit
Topreventconfusionyoushouldselectmeaningfulnamesfortheroutemaps.Note
theaccesslistnumbersandthenamesoftheroutemap.
R1(config)#routerbgp100
R1(configrouter)#neighbor131.1.13.3advertisemapADVnonexistmapNotThere
Theneighborcommandhasthefollowingroutemaps:
TheadvertisemapSpecifiesthenameoftheroutemapthatwillbe
advertisediftheconditionsofthenonexistmaparemet.
Nonexistmapspecifiesthenameoftheroutemapthatwillbecompared
totheadvertisemap.Iftheconditionismetandnomatchoccurs,theroute
willbeadvertised.Ifamatchoccurs,thentheconditionisNOTmet,andthe
routeiswithdrawn.
Noteifnetwork2.0.0.0isup,thennetwork1.0.0.0shouldNOTbeadvertisedtoR3,
www.ccieuniversity.com
sinceallthenetworksareupandadvertised,R1shouldwithdrawitsnetwork
(1.0.0.0/8):
OnR1
R1#Showipbgp
BGPtableversionis7,localrouterIDis1.1.1.1
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrfWeightPath
*>1.0.0.00.0.0.0032768i
*>2.0.0.0131.1.12.20
0200i
*>3.0.0.0131.1.13.300300i
*>131.1.12.0/240.0.0.0032768i
*>131.1.13.0/240.0.0.00
32768i
NoteR1doesNOTadvertiseitsnetwork(1.0.0.0/8)toR3:
R1#Showipbgpneighbors131.1.13.3advertisedroutes
BGPtableversionis7,localrouterIDis1.1.1.1
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrfWeightPath
*>2.0.0.0131.1.12.20
0200i
*>131.1.12.0/240.0.0.0032768i
*>131.1.13.0/240.0.0.0032768i
NotethebgptableofR3doesnothavenetwork1.0.0.0network:
OnR3
R3#Showipbgp
BGPtableversionis34,localrouterIDis150.1.2.3
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
Network
NextHopMetricLocPrfWeightPath
*>2.0.0.0131.1.13.10100200i
www.ccieuniversity.com
*>3.0.0.00.0.0.0032768i
*>131.1.12.0/24131.1.13.100100i
r>131.1.13.0/24131.1.13.100100i
OnR2
R2(config)#intlo0
R2(configif)#shut
Notenetwork2.0.0.0isDOWN,therefore,R1shouldadvertiseitsnetwork(1.0.0.0)
toR3:
OnR1
R1#Showipbgpneighbors131.1.13.3advertisedroutes
BGPtableversionis7,localrouterIDis1.1.1.1
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrfWeightPath
*>1.0.0.00.0.0.0032768i
*>131.1.12.0/240.0.0.0
032768i
*>131.1.13.0/240.0.0.0032768i
Notenetwork1.0.0.0isadvertisedtoR3.
Task7
RemovetheconfigurationcommandsenteredinTask6beforeyouproceedtothenext
task.
OnR1
R1(config)#noaccesslist1
R1(config)#noaccesslist2
R1(config)#noroutemapADV
R1(config)#noroutemapNotThere
R1(config)#routerbgp100
R1(configrouter)#noneighbor131.1.13.3advertisemapADVnonexistmapNotThere
www.ccieuniversity.com
Task8
SecondLabpolicy:
R1shouldbeconfiguredasfollows:
Ifbothnetworksareup,thenbothnetworksshouldbeadvertisedtoR3.
Ifnetwork1.0.0.0/8isdown,R2shouldNOTadvertisenetwork2.0.0.0/8toR3.
OnR1
R1(config)#accesslist1permit1.0.0.00.255.255.255
R1(config)#accesslist2permit2.0.0.00.255.255.255
R1(config)#routemapADVpermit10
R1(configroutemap)#matchipaddr2
R1(configroutemap)#exit
R1(config)#routemapEXISTpermit10
R1(configroutemap)#matchipaddr1
R1(configroutemap)#exit
R1(config)#routerbgp100
R1(configrouter)#neighbor131.1.13.3advertisemapADVexistmapEXIST
Notenetwork1.0.0.0isshutdown,therefore,R1willnotadvertisenetwork2.0.0.0to
R3.
OnR1
R1#Showipbgpneighbors131.1.13.3advertisedroutes
BGPtableversionis7,localrouterIDis1.1.1.1
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
Network
NextHopMetricLocPrfWeightPath
*>131.1.12.0/240.0.0.0032768i
*>131.1.13.0/240.0.0.0032768i
www.ccieuniversity.com
Task 9
Erasethestartupconfigandreloadtheroutersbeforeproceedingtothenextlab.
www.ccieuniversity.com
Lab3
RouteDampening
R1
R2
S0/0
S0/0
FrameRelay
F0/0
R3
R4
F0/0
S0/0S0/0
F0/0
F0/0
R5
FrameRelay
www.ccieuniversity.com
LabSetup
Configuretheframerelayconnectionbetweentheroutersinapointtopoint
manner.
ConfigureR2andR3sF0/0interfaceinVLAN23.
ConfigureR4andR5sF0/0interfaceinVLAN45.
Ipaddressing
Router Interface
R1
Lo0
FramerelayconnectiontoR2
R2
Lo0
FramerelayconnectiontoR1
F0/0interfaceconnectiontoR3
R3
Lo0
FramerelayconnectiontoR4
F0/0interfaceconnectiontoR2
R4
Lo0
Lo1
Lo2
FramerelayconnectiontoR3
F0/0interfaceconnectiontoR5
R5
Lo0
F0/0interfaceconnectiontoR4
IPAddress
1.1.1.1 /8
131.1.12.1/24
2.2.2.2/8
131.1.12.2/24
131.1.23.2/24
3.3.3.3/8
131.1.34.3/24
131.1.23.3/24
4.4.4.4/8
40.4.4.4/24
44.4.4.4/24
131.1.34.4/24
131.1.45.4/24
5.5.5.5/8
131.1.45.5/24
ASnumber
100
200
300
400
500
Task1
ConfigureanEBGPpeersessionbetweenR1andR2andonlyadvertisetheir
Loopback0interfaceinBGP.EnsurethattheseroutershaveNLRItoeachothers
Loopbackinterface.R1shouldbeinAS100andR2shouldbeinAS200.
OnR1
R1(config)#routerbgp100
R1(configrouter)#noau
R1(configrouter)#neighbor131.1.12.2remoteas200
www.ccieuniversity.com
R1(configrouter)#network1.0.0.0
OnR2
R2(config)#routerbgp200
R2(configrouter)#network2.0.0.0
R2(configrouter)#neighbor131.1.12.1remoteas100
R2(configrouter)#noau
Toverifytheconfiguration:
R1#Showipbgp
BGPtableversionis3,localrouterIDis1.1.1.1
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHop
MetricLocPrfWeightPath
*>1.0.0.00.0.0.0032768i
*>2.0.0.0131.1.12.200200i
Task2
ConfigureroutedampeningonR1usingthedefaultparameters.
OnR1
R1(configrouter)#routerbgp100
R1(configrouter)#bgpdampening
TheparametersofBGPdampeningareasfollows:
HalftimeOncearoutehasbeenassignedapenalty,thepenaltyis
decreasedevery5secondssuchthatwhenthehalfperiodexpires,the
accumulatedpenaltyisreducedbyhalf.Thedefaultvalueofhalftimeis15
minutesandtherangeis1to45minutes.
ReuseIfthepenaltiesforaflappingrouteisdecreasedenoughtofallbelow
thisvalue,therouteisreusable.Thedefaultis750andtherangeis1to
20000.
SuppressOncetheaccumulatedpenaltiesreachthisvalue,therouteis
www.ccieuniversity.com
suppressed.Thedefaultvalueis2000andtherangeis1 20000.
MaxSuppressTimeThemaximumtimeinminutesthataroutecanbe
suppressed.Thedefaultvalueis4timesthehalftimevalue(60)andthe
rangeis1to20000.
Thereforethisconfigurationperformsthefollowing:
Halftime=15minutes,reuse=750,Suppress=2000andMaxSuppressTime=60.
Task3
ConfigureanEBGPpeersessionbetweenR2andR3,andadvertisetheirLoopback0
interfaceinBGP.EnsurethattheseroutershaveNLRItoeachothersLoopback
interface.
R3shouldbeinAS300.
OnR2
R2(config)#routerbgp200
R2(configrouter)#neighbor131.1.23.3remoteas300
OnR3
R3(config)#routerbgp300
R3(configrouter)#noau
R3(configrouter)#network3.0.0.0
R3(configrouter)#neighbor131.1.23.2remoteas200
Toverifytheconfiguration:
R3#Showipbgp
BGPtableversionis4,local routerIDis3.3.3.3
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrfWeightPath
*>1.0.0.0131.1.23.20200100i
*>2.0.0.0131.1.23.200200i
*>3.0.0.00.0.0.00
32768i
www.ccieuniversity.com
Task4
ConfigureroutedampeningonR3suchthatthehalflifeparameterissetto30
minutes.Thisroutershouldusethedefaultparametersforsuppresslimit,reuse,and
maximumsuppresstime.
OnR3
R3(configrouter)#bgpdampening30750200060
Task5
ConfigureanEBGPsessionbetweenR3andR4.AdvertiseLoopback0,Loopback1
andLoopback2interfaceofR4inBGP.
R4shouldbeconfiguredinAS400.
OnR4
R4(config)#routerbgp400
R4(configrouter)#netw4.0.0.0
R4(configrouter)#netw40.4.4.0mask255.255.255.0
R4(configrouter)#netw44.4.4.0mask255.255.255.0
R4(configrouter)#neighbor131.1.34.3remoteas300
R4(configrouter)#noau
OnR3
R3(config)#routerbgp300
R3(configrouter)#neighbor131.1.34.4remoteas400
Toverifytheconfiguration:
OnR4
R4#Showipbgp
BGPtableversionis7,localrouterIDis44.4.4.4
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrfWeightPath
www.ccieuniversity.com
*>1.0.0.0131.1.34.30300200100i
*>2.0.0.0131.1.34.3
0300200i
*>3.0.0.0131.1.34.300300i
*>4.0.0.00.0.0.0032768i
*>40.4.4.0/240.0.0.00
32768i
*>44.4.4.0/240.0.0.0032768i
Task6
ConfigureanEBGPpeersessionbetweenR4andR5.R5shouldadvertiseitsLoopback0
interfaceinBGP.EnsurethattheseroutershaveNLRItoeachothersLoopbackinterface.
R5shouldbeinAS500.
OnR5
R5(config)#routerbgp500
R5(configrouter)#noau
R5(configrouter)#neighbor131.1.45.4remoteas400
R5(configrouter)#netw5.0.0.0
OnR4
R4(config)#routerbgp400
R4(configrouter)#neighbor131.1.45.5remoteas500
Toverifytheconfiguration:
R5#Showipbgp
BGPtableversionis8,localrouterIDis5.5.5.5
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrfWeightPath
*>1.0.0.0131.1.45.40400300200100i
*>2.0.0.0131.1.45.4
0400300200i
*>3.0.0.0131.1.45.40400300i
*>4.0.0.0131.1.45.40
0400i
*>5.0.0.00.0.0.0032768i
*>40.4.4.0/24131.1.45.400400i
*>44.4.4.0/24131.1.45.40
0400i
www.ccieuniversity.com
Task7
ConfigureroutedampeningonR4asfollows:
Network40.4.4.0/24shouldhavethefollowingdampeningparametersapplied:
MaxSuppressTimeof90
Reuse800
Suppress2400
HalfTimeof20
Network44.4.4.0/24shouldhavethefollowingdampeningparametersapplied:
MaxSuppressTimeof60
Reuse700
Suppress2000
HalfTimeof15
OnR4
R4(config)#accesslist40permit40.4.4.00.0.0.255
R4(config)#accesslist44permit44.4.4.00.0.0.255
R4(config)#routemapTESTpermit10
R4(configroutemap)#matchipaddr40
R4(configroutemap)#setdampening20800240090
R4(config)#routemapTESTpermit20
R4(configroutemap)#matchipaddr44
R4(configroutemap)#setdampening15700200060
R4(config)#routerbgp400
R4(configrouter)#bgpdampeningroutemapTEST
Notetheroutemapgivesusflexibility.Inthiscasewehaveappliedtwodifferent
routedampeningparameterstodifferentroutes.Thetwonetworksareidentified
withaccesslists.Theroutemapreferencestheaccesslistsandsetsthedampening
parametersbasedonthenetworks.
www.ccieuniversity.com
Task 8
ConfigureroutedampeningonR2usingthefollowingpolicy:
AlltheexistingandfutureprefixesfromAS300shouldhavethefollowing
parametersapplied:
MaxSuppressTimeof80
Reuse750
Suppress2200
HalfTime30
OnR2
R2(config)#ipaspathaccesslist1permit^300$
R2(config)#routemapTESTpermit10
R2(configroutemap)#matchaspath1
R2(configroutemap)#setdampening30750220080
R2(configroutemap)#exit
R2(config)#routerbgp200
R2(configrouter)#bgpdampeningroutemapTEST
Thecombinationofroutemapandtheaspathaccesslistcommandcanapply
bgpdampeningtoanASbasedontheASnumber.
Task 9
Erasethestartupconfigandreloadtheroutersbeforeproceedingtothenextlab.
www.ccieuniversity.com
Lab4
RouteAggregation
R1
R2
S0/0S0/0
FrameRelay
LabSetup:
Configureframerelayconnectionbetweentheroutersinapointtopointmanner.
Ipaddressing
Router Interface
R1
Lo0
FramerelayconnectiontoR2
R2
Lo0
Lo1
Lo2
Lo3
FramerelayconnectiontoR1
IPAddress
1.1.1.1 /8
131.1.12.1/24
2.2.0.2/24
2.2.1.2/24
2.2.2.2/24
2.2.3.2/24
131.1.12.2/24
ASnumber
100
200
www.ccieuniversity.com
Task1
ConfigureanEBGPsessionbetweentheroutersandonlyadvertisetheirLoopback
interfacesinBGP.
OnR1
R1(config)#routerbgp100
R1(configrouter)#noau
R1(configrouter)#netw1.0.0.0
R1(configrouter)#neighbor131.1.12.2remoteas200
OnR2
R2(config)#routerbgp200
R2(configrouter)#noau
R2(configrouter)#neighbor131.1.12.1remoteas100
R2(configrouter)#network2.2.0.0mask255.255.255.0
R2(configrouter)#network2.2.1.0mask255.255.255.0
R2(configrouter)#network2.2.2.0mask255.255.255.0
R2(configrouter)#network2.2.3.0mask255.255.255.0
Toverifytheconfiguration
R2#Showipbgp
BGPtableversionis6,localrouterIDis2.2.3.2
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
Network
NextHopMetricLocPrfWeightPath
*>1.0.0.0131.1.12.100100i
*>2.2.0.0/240.0.0.0032768i
*>2.2.1.0/240.0.0.0032768i
*>2.2.2.0/240.0.0.0032768i
*>2.2.3.0/240.0.0.0032768i
Task2
ConfigureR2suchthatitsummarizesitsLoopbackinterfacesandadvertisesasingle
summarytoR1.R2shouldnotassignanatomicaggregatetothesummaryroute
whenitadvertisesittoanyofitsneighbors.
www.ccieuniversity.com
OnR2
R2(config)#Routerbgp200
R2(configrouter)#aggregateaddress2.2.0.0255.255.252.0
OnR1
R1#Showipbgp
BGPtableversionis7,localrouterIDis1.1.1.1
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrfWeightPath
*>1.0.0.00.0.0.0
032768i
*>2.2.0.0/24131.1.12.200200i
*>2.2.0.0/22131.1.12.200200i
*>2.2.1.0/24131.1.12.20
0200i
*>2.2.2.0/24131.1.12.200200i
*>2.2.3.0/24131.1.12.200200i
Notebydefaulttheaggregateandallthespecificroutesareadvertised.A
summaryonlyargumentwillsuppresstheroutessothatonlythesummaryroute
isadvertised.
OnR2
R2#Showipbgp
BGPtableversionis7,localrouterIDis2.2.3.2
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrfWeightPath
*>1.0.0.0131.1.12.100100i
*>2.2.0.0/240.0.0.0032768i
*>2.2.0.0/220.0.0.032768i
*>2.2.1.0/240.0.0.0032768i
*>2.2.2.0/240.0.0.00
32768i
*>2.2.3.0/240.0.0.0032768i
www.ccieuniversity.com
Notenoneoftheprefixesaresuppresses.
OnR2
R2(config)#routerbgp200
R2(configrouter)#aggregateaddress2.2.0.0255.255.252.0 summaryonly
NotethesummaryonlyargumentwillsuppressalltheprefixesonR2suchthat
R2sneighborswontseethemorespecificroutes.
OnR2
R2#Showipbgp
BGPtableversionis11,localrouterIDis2.2.3.2
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrfWeightPath
*>1.0.0.0131.1.12.100100i
s> 2.2.0.0/240.0.0.0032768i
*>2.2.0.0/220.0.0.032768i
s> 2.2.1.0/240.0.0.0032768i
s> 2.2.2.0/240.0.0.0032768i
s> 2.2.3.0/240.0.0.0
032768i
Notetheletterstotheleftofthe>sign.Thesmeansthattheseprefixesare
suppressed.
OnR1
R1#Showipbgp
BGPtableversionis11,localrouterIDis1.1.1.1
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrfWeightPath
*>1.0.0.00.0.0.0032768i
*>2.2.0.0/22131.1.12.200200i
NotetheonlyroutethatisadvertisedtoR1isthesummaryroute.Ifthesummary
routeisdisplayedinBGP,weshouldseetheatomicaggregateattribute
www.ccieuniversity.com
OnR2
R2#Showipbgp2.2.0.0/22
BGProutingtableentryfor2.2.0.0/22,version7
Paths:(1available,best#1,tableDefaultIPRoutingTable)
Advertisedtoupdategroups:
1
Local,(aggregatedby2002.2.3.2)
0.0.0.0from0.0.0.0(2.2.3.2)
OriginIGP,localpref100,weight32768,valid,aggregated,local,atomicaggregate,
best
Notetheoutputofthisdisplayrevealstwoattributesaggregatorandatomic
aggregate.
Theaggregatorattributeidentifiestherouterthatperformedtheaggregation.
Theatomicattributetellsusthatsomeinformationislostbecauseoftheaggregate.
OnR2
R2(config)#routerbgp200
R2(configrouter)#aggregateaddress2.2.0.0255.255.252.0summaryonly asset
NoteinBGP,anaggregateisonlycreatedifatleastamorespecificrouteofthe
aggregateexistsintheBGPtable.Itisrecommendedtoconfiguremostifnotallthe
specificrouteswithaNetworkstatement,becauseifonlyasingleNetworkis
configuredtosatisfytherequirements,andthatparticularNetworkgoesdownfor
whateverreason,thentheaggregateisremoved.
Anotherwaytoadvertiseanaggregateisbycreatingastaticroutethatmatchesthe
summaryrouteandthenredistributingthestaticintoBGPasfollows:
Iproute172.16.0.0255.255.252.0null0
Routerbgp200
Redistributestatic
Butsincethatisnotanoptionhere,weneedtoadvertiseeveryspecificprefix.
AnatomicaggregateThisisanattributethatisassignedtotheaggregateroute
automaticallyiftheassetargumentisnotusedintheaggregateaddress
command.
Whenanaggregationisperformed,certaininformationislost.InBGPthat
informationcanbetheASnumbersthattheprefixestraversedthroughtogettothe
routerthatisperformingtheaggregation.Ifitsnotcorrectedaroutingloopcan
occur.Inordertopreventtheroutingloopsfromoccurring,theASSET
argumentshouldbeusedwhenperformingaggregation.
www.ccieuniversity.com
Task3
Reconfiguretheroutersusingthefollowsdiagram/IPaddressinginformationandONLY
advertisetheirLoopbackinterfacesin BGP.
R2
R1
S0/0S0/0
F0/0
FrameRelay
R3
F0/0
Ipaddressing:
Router Interface
R1
Lo0
FramerelayconnectiontoR2
R2
Lo0
FramerelayconnectiontoR1
F0/0interfaceconnectiontoR3
R3
Lo0
Lo1
Lo2
Lo3
F0/0interfaceconnectiontoR2
IPAddress
3.1.0.1 /24
131.1.12.1/24
2.2.2.2/8
131.1.12.2/24
131.1.23.2/24
3.1.1.3/24
3.1.2.3/24
3.1.3.3/24
3.1.4.3/24
131.1.23.3/24
OnR1
R1(config)#routerbgp100
R1(configrouter)#noau
R1(configrouter)#netw3.1.0.0mask255.255.255.0
ASnumber
100
200
300
www.ccieuniversity.com
R1(configrouter)#neighbor131.1.12.2remoteas200
OnR2
R2(config)#routerbgp200
R2(configrouter)#noau
R2(configrouter)#neighbor131.1.23.3remoteas300
R2(configrouter)#neighbor131.1.12.1remoteas100
R2(configrouter)#network2.0.0.0
OnR3
R3(config)#routerbgp300
R3(configrouter)#neighbor131.1.23.2remoteas200
R3(configrouter)#netw3.1.1.0mask255.255.255.0
R3(configrouter)#netw3.1.2.0mask255.255.255.0
R3(configrouter)#netw3.1.3.0mask255.255.255.0
R3(configrouter)#netw3.1.4.0mask255.255.255.0
Toverifytheconfiguration:
OnR3
R3#Showipbgp
BGPtableversionis7,localrouterIDis3.1.4.3
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrfWeightPath
*>2.0.0.0131.1.23.200200i
*>3.1.0.0/24131.1.23.20200100i
*>3.1.1.0/24
0.0.0.0032768i
*>3.1.2.0/240.0.0.0032768i
*>3.1.3.0/240.0.0.0032768i
*>3.1.4.0/240.0.0.0
032768i
Task4
R2shouldaggregateallthenetworksin3.1.0.0/16addressspace.Thisaggregation
shouldbedonesuchthatR1inAS100istheonlyASthatreceivestheaggregateroute,
www.ccieuniversity.com
R3shouldnotreceivetheaggregateroute.R3shouldhaveastaticroutepointingtoR2
fornetwork3.1.0.0/24.
OnR2
R2(config)#ipaspathaccesslist1permit^300
TheabovecommandidentifiesASnumber300.
R2(config)#routemapTESTpermit10
R2(configroutemap)#matchaspath 1
Theroutemapcommandreferencestheaspathaccesslist.
R2(configrouter)#aggregateaddress3.1.0.0255.255.0.0assetsummaryonlyadvertisemapTEST
TheadvertisemapcommandassignstheroutemapTESTtotheaggregateaddress
command.
Toverifytheconfiguration:
OnR1
R1#Showipbgp
BGPtableversionis12,localrouterIDis3.1.0.1
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrfWeightPath
*>2.0.0.0131.1.12.200200i
*>3.1.0.0/240.0.0.0032768i
*>3.1.0.0/16
131.1.12.200200300i
OnR3
Showipbgp
BGPtableversionis8,localrouterIDis3.1.4.3
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrfWeightPath
*>2.0.0.0131.1.23.200200i
www.ccieuniversity.com
*>3.1.1.0/240.0.0.0032768i
*>3.1.2.0/240.0.0.0032768i
*>3.1.3.0/240.0.0.0032768i
*>3.1.4.0/240.0.0.0032768i
NoteR3getstheaggregateroutebutitrejectsitbecauseitseesitsownASnumberintheas
pathlist.R1receivesandprocessestheaggregateroutebecauseitdoesnotseeitsownAS
numberintheaspathlistadvertisedbyR2.
Task5
ConfigureR2suchthatacostof50isassignedtotheaggregateroute.
OnR2
R2(config)#routemapCOSTpermit10
R2(configroutemap)#setmetric50
R2(config)#routerbgp200
R2(configrouter)# aggregateaddress3.1.0.0255.255.0.0summaryonlyadvertisemapTESTasset
attributemapCOST
Theattributemapidentifiesthenameoftheroutemapusedtosettheattribute/softheaggregate
route.
Toverifytheconfiguration:
OnR1
R1#Showipbgp
BGPtableversionis13,localrouterIDis3.1.0.1
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
Network
NextHopMetricLocPrfWeightPath
*>2.0.0.0
131.1.12.20
0200i
*>3.1.0.0/24
0.0.0.00
32768i
0200300i
*>3.1.0.0/16131.1.12.2
50
NoteR1gettheaggregateroutewithacostof50.
www.ccieuniversity.com
Task6
ThepolicyforR1requiresthatitshouldreceivetheaggregaterouteplusoneofthemore
specificsubnets(3.1.3.0/24).Thisshouldbeperformedandtestedusingasuppressmap,
andunsuppressmap,butonlyoneofthesolutionsshouldbeimplemented.
TotesttheSuppressmap:
OnR2
R2(config)#accesslist1deny3.1.3.00.0.0.255
R2(config)#accesslist1permitany
R2(config)#routemapSUPPpermit10
R2(configroutemap)#matchipaddr1
R2(config)#routerbgp200
R2(configrouter)# aggregateaddress3.1.0.0255.255.0.0summaryonlyadvertisemap
TESTassetattributemapCOSTsuppressmapSUPP
Toverifytheconfiguration:
Showipbgp
BGPtableversionis14,localrouterIDis3.1.0.1
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrf WeightPath
*>2.0.0.0131.1.12.20
0200i
*>3.1.0.0/24
0.0.0.0
0
32768i
*>3.1.0.0/16131.1.12.250
0200300i
*>3.1.3.0/24131.1.12.20200300i
TotesttheUnsuppressmap:
OnR2
R2(config)#noaccesslist1
R2(config)#accesslist1permit3.1.3.00.0.0.255
R2(config)#routerbgp200
R2(configrouter)#no aggregateaddress3.1.0.0255.255.0.0summaryonlyadvertise
www.ccieuniversity.com
mapTESTassetattributemapCOSTsuppressmapSUPP
R2(configrouter)#aggregateaddress3.1.0.0255.255.0.0summaryonlyadvertisemap
TESTassetattributemapCOST
R2(configrouter)#neighbor131.1.12.1unsuppressmapSUPP
OnR1
R1#Showipbgp
BGPtableversionis4,localrouterIDis3.1.0.1
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrfWeightPath
*>2.0.0.0131.1.12.200200i
*>3.1.0.0/16131.1.12.2500200300i
*>3.1.0.0/24
0.0.0.0
32768i
*>3.1.3.0/24131.1.12.2
0200300i
Task7
Erasethestartupconfigandreloadtheroutersbeforeproceedingtothenextlab.
www.ccieuniversity.com
Lab5
TheCommunityattribute
R1
R2
S0/0S0/0
FrameRelay
F0/0
R3
R4
F0/0
S0/0S0/0
FrameRelay
LabSetup:
Configuretheroutersthatareconnectedtotheframerelaycloudsinapointto
pointmanner.
R2andR3sF0/0interfaceshouldbeconfiguredinVLAN23.
www.ccieuniversity.com
Ipaddressing:
Router Interface
R1
Lo0
Lo1
FramerelayconnectiontoR2
R2
Lo0
FramerelayconnectiontoR1
F0/0interfaceconnectiontoR3
R3
Lo0
FramerelayconnectiontoR4
F0/0interfaceconnectiontoR2
R4
Lo0
FramerelayconnectiontoR3
IPAddress
1.1.1.1/8
11.1.1.1/8
131.1.12.1/24
2.2.2.2/8
131.1.12.2/24
131.1.23.2/24
3.3.3.3/8
131.1.34.3/24
131.1.23.3/24
4.4.4.4/8
131.1.34.4/24
ASnumber
100
200
300
400
Task1
ConfiguretheroutersaccordingtotheabovechartandONLYadvertisetheirLoopback
interface/sinBGP.
OnR1
R1(config)#routerbgp100
R1(configrouter)#netw1.0.0.0
R1(configrouter)#netw11.0.0.0
R1(configrouter)#noau
R1(configrouter)#neighbor131.1.12.2remoteas200
OnR2
R2(config)#routerbgp200
R2(configrouter)#netw2.0.0.0
R2(configrouter)#noau
R2(configrouter)#neighbor131.1.12.1remoteas100
R2(configrouter)#neighbor131.1.23.3remoteas300
OnR3
R3(config)#routerbgp300
R3(configrouter)#netw3.0.0.0
R3(configrouter)#noau
R3(configrouter)#neighbor131.1.23.2remoteas200
R3(configrouter)#neighbor131.1.34.4remoteas400
www.ccieuniversity.com
OnR4
R4(config)#routerbgp400
R4(configrouter)#netw4.0.0.0
R4(configrouter)#noau
R4(configrouter)#neighbor131.1.34.3remoteas300
Toverifytheconfiguration:
R1#Showipbgp
BGPtableversionis6,localrouterIDis11.1.1.1
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrfWeightPath
*>1.0.0.0
0.0.0.0032768i
*>2.0.0.0131.1.12.200200i
*>3.0.0.0131.1.12.20200300i
*>4.0.0.0131.1.12.20200300400i
*>11.0.0.00.0.0.0032768i
Task2
ConfigureR1suchthatwhenitadvertisesnetwork1.0.0.0/8toR2inAS200,the
networkisnotadvertisedtoanyofR2sIBGPorEBGPneighbors.
OnR1
R1(config)#routerbgp100
R1(configrouter)#neighbor131.1.12.2sendcommunity
R1(configrouter)#neighbor131.1.12.2routemapTESTout
R1(config)#routemapTESTpermit10
R1(configroutemap)#matchipaddr1
R1(configroutemap)#setcommunitynoadvertise
R1(configroutemap)#routemapTESTpermit20
www.ccieuniversity.com
Iftheabovecommandisnotconfigured,noroutewillbeadvertisedtoR2.Thisis
thecatchallcommand,meaningthatwhateverthatwasnotspecifiedintheroute
mapTESTpermit10commandwillbecoveredbythiscommand.
R1(config)#accesslist1permit1.0.0.00.255.255.255
Bydefaultnocommunityattributeissenttoanyneighbor.Tospecifythata
communityattributeshouldbesenttoaBGPneighbor,theneighborsend
communitycommandisconfiguredintherouterconfigmode.
Thewellknowncommunitiesareasfollows:
InternetIfassignedtoanetwork/s,thatnetwork/sshouldbeadvertised.
LocalasIfassignedtoanetwork/s,thatnetwork/sshouldONLYbe
advertisedwithinthatAS.
NoadvertiseIfassignedtoanetwork/s.thatnetwork/sshouldNOTbe
advertisedtoanyBGPneighbor.
NoexportIfassignedtoanetwork/s,thatnetwork/sshouldNOTbe
advertisedtoanEBGPneighbor.
To verifytheconfiguration:
OnR3
R#Showipbgp
BGPtableversionis8,localrouterIDis3.3.3.3
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrfWeightPath
*>2.0.0.0131.1.23.200200i
*>3.0.0.00.0.0.0032768i
*>4.0.0.0131.1.34.400400i
*>11.0.0.0131.1.23.2
0200100i
Task3
ConfigureR2suchthatwhenitadvertisesitsnetwork2.0.0.0toR3inAS300,the
networkisonly advertisedtoAS300routers,AS300shouldNOTadvertisethisnetwork
toanyEBGPneighbor.DoNOTconfigureAS300toaccomplishthistask.
OnR2
www.ccieuniversity.com
R2(configrouter)#accesslist1permit2.0.0.00.255.255.255
R2(config)#routemapTESTpermit10
R2(configroutemap)#matchipaddr1
R2(configroutemap)#setcommunitynoexport
R2(configroutemap)#routemapTESTpermit20
R2(config)#routerbgp200
R2(configrouter)#neighbor131.1.23.3sendcommunity
R2(configrouter)#neighbor131.1.23.3routemapTESTout
Thisisanotherwellknowncommunity.Inthiscasenetwork2.0.0.0willONLYbe
advertisedtotheroutersinAS300.AS300routerswillNOTadvertisethisnetwork
toanyoftheirEBGPneighbor/s.
Toverifytheconfiguration:
OnR4
R4#Showipbgp
BGPtableversionis12,localrouterIDis4.4.4.4
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHop
MetricLocPrfWeightPath
*>3.0.0.0131.1.34.300300i
*>4.0.0.00.0.0.0032768i
*>11.0.0.0131.1.34.3
0300200100i
Task4
ConfigureR3inAS300toadvertisenetwork2.0.0.0/8toitsEBGPneighbors.DoNOT
removetheconfigurationcommand/sfromtheprevioustask.
OnR3
R3(config)#accesslist1permit2.0.0.00.255.255.255
R3(config)#routemapTESTpermit10
R3(configroutemap)#matchipaddr1
www.ccieuniversity.com
R3(configroutemap)#setcommunityinternet
R3(configroutemap)#routemapTESTpermit20
R3(config)#routerbgp300
R3(configrouter)#neighbor131.1.23.2sendcommunity
R3(configrouter)#neighbor131.1.23.2routemapTESTin
NoteinthiscasetheroutemapTESTcommandisappliedtotheinbound,
becauseitshouldaffectthelocalrouterforthatnetworkandcommunity.
Toverifytheconfiguration:
OnR4
R4#Showipbgp
BGPtableversionis17,localrouterIDis4.4.4.4
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrfWeightPath
*>2.0.0.0131.1.34.30300200i
*>3.0.0.0131.1.34.30
0300i
*>4.0.0.00.0.0.0
0
32768i
*>11.0.0.0131.1.34.3
0300200100i
Task5
ConfigureR4suchthatwhenitadvertisesitsnetwork4.0.0.0/8inBGP,thisnetworkis
onlyadvertisedwithinitsownAS(AS400).DoNOTusefilteringofanykindto
accomplishthistask.
OnR4
R4(config)#accesslist1permit4.0.0.00.255.255.255
R4(config)#routemapTESTpermit10
R4(configroutemap)#matchipaddr1
R4(configroutemap)#setcommunitylocalas
www.ccieuniversity.com
R4(configroutemap)#routemapTESTpermit20
R4(config)#routerbgp400
R4(configrouter)#network4.0.0.0routemapTEST
NotethelocalascommunityattributeisNOTsenttoagivenneighbor,its
advertisedusingaroutemapthathasthelocalascommunityattributeattached.
Toverifytheconfiguration:
OnR3
R3#Showipbgp
BGPtableversionis6,localrouterIDis3.3.3.3
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
Network
NextHopMetricLocPrf Weight Path
*>2.0.0.0
131.1.23.2
0
0 200i
*>3.0.0.0
0.0.0.0
0
32768 i
*>11.0.0.0131.1.23.2
0 200100i
Task6
Erasethestartupconfigandreloadtheroutersbeforeproceedingtothenexttask.
www.ccieuniversity.com
Lab6
TheASPathattribute
R1
R2
S0/0S0/0
F0/0
F0/0
FrameRelay
R3
R4
F0/0F0/0
S0/0
S0/0
FrameRelay
LabSetup:
Configuretheroutersthatareconnectedtotheframerelaycloudsinapointto
pointmanner.
R1andR4sF0/0interfaceshouldbeconfiguredinVLAN14.
R2andR3sF0/0interfaceshouldbeconfiguredinVLAN23.
www.ccieuniversity.com
Ipaddressing:
Router Interface
R1
Lo0
Lo1
FramerelayconnectiontoR2
F0/0interfaceconnectiontoR4
R2
Lo0
FramerelayconnectiontoR1
F0/0interfaceconnectiontoR3
R3
Lo0
F0/0interfaceconnectiontoR2
FramerelayconnectiontoR4
R4
Lo0
F0/0interfaceconnectiontoR1
FramerelayconnectiontoR3
IPAddress
1.1.1.1/8
11.1.1.1/8
131.1.12.1/24
131.1.14.1/24
2.2.2.2/8
131.1.12.2/24
131.1.23.2/24
3.3.3.3/8
131.1.23.3/24
131.1.34.3/24
4.4.4.4/8
131.1.14.4/24
131.1.34.4/24
ASnumber
100
200
200
200
Task1
ConfiguretheroutersastheabovediagramwithIPaddressingandASnumbersidentified
inthechart,andonlyadvertisetheLoopbackinterfaceoftheroutersinBGP.
EnsurethattheroutersONLYadvertisetheirlinks(131.1.12.0/24,131.1.23.0/24,
131.1.34.0/24and131.1.14.0/24)inRIPv2,disableautosummarizationinRIPv2
routingprotocol.
OnR1
R1(configif)#routerbgp100
R1(configrouter)#noau
R1(configrouter)#neighbor131.1.14.4remoteas 200
R1(configrouter)#neighbor131.1.12.2remoteas200
R1(configrouter)#netw11.0.0.0
R1(configrouter)#netw1.0.0.0
R1(config)#routerrip
R1(configrouter)#noau
R1(configrouter)#ver2
R1(configrouter)#network131.1.0.0
OnR2
R2(config)#routerbgp200
R2(configrouter)#noau
www.ccieuniversity.com
R2(configrouter)#nosyn
R2(configrouter)#netw2.0.0.0
R2(configrouter)#neighbor131.1.12.1remoteas100
R2(configrouter)#neighbor131.1.23.3remoteas 200
R2(configrouter)#neighbor131.1.34.4remoteas200
R2(configrouter)#neighbor131.1.23.3nexthopself
R2(configrouter)#neighbor131.1.34.4nexthopself
R2(config)#routerrip
R2(configrouter)#noau
R2(configrouter)#ver2
R2(configrouter)#netw131.1.0.0
OnR3
R3(config)#routerbgp200
R3(configrouter)#noau
R3(configrouter)#nosyn
R3(configrouter)#netw3.0.0.0
R3(configrouter)#neighbor131.1.34.4remoteas 200
R3(configrouter)#neighbor131.1.23.2remoteas200
R3(config)#routerrip
R3(configrouter)#noau
R3(configrouter)#ver2
R3(configrouter)#netw131.1.0.0
OnR4
R4(config)#routerbgp200
R4(configrouter)#nosyn
R4(configrouter)#noau
R4(configrouter)#netw4.0.0.0
R4(configrouter)#neighbor131.1.34.3remoteas 200
R4(configrouter)#neighbor131.1.23.2remoteas200
R4(configrouter)#neighbor131.1.34.3nexthopself
R4(configrouter)#neighbor131.1.23.2nexthopself
R4(configrouter)#neighbor131.1.14.1remoteas100
R4(config)#routerrip
R4(configrouter)#noau
R4(configrouter)#ver2
R4(configrouter)#netw131.1.0.0
www.ccieuniversity.com
Task2
ConfigureR1inAS100suchthatroutersinAS200usethelinkthroughR2toreachits
network1.0.0.0/8.UsetheASPathattributetoaccomplishthistask.
OnR1
R1(config)#accesslist1permit1.0.0.00.255.255.255
R1(config)#routemapTEST1permit10
R1(configroutemap)#matchipaddr1
R1(configroutemap)#setaspathprepend100100100100
R1(configroutemap)#exit
R1(config)#routemapTEST1permit20
R1(configroutemap)#routerbgp100
R1(configrouter)#neighbor131.1.14.4routemapTEST1out
OnR4
R4#Showipbgp
BGPtableversionis17,localrouterIDis4.4.4.4
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrf Weight Path
*>i1.0.0.0131.1.23.201000100i
*131.1.14.100100100100100100i
*>i2.0.0.0
131.1.23.201000i
*>i3.0.0.0131.1.34.301000i
*>4.0.0.00.0.0.0032768i
*i11.0.0.0131.1.23.2
01000100i
*>131.1.14.100100i
NotetheASpathattributeisusedtoinfluencethedegreeofpreferenceinanother
AS.R4willgothroughR2toreachnetwork1.0.0.0/8.
www.ccieuniversity.com
Task3
ConfigureR1inAS100suchthattheroutersinAS200usethelinkthroughR4toreach
network11.0.0.0/8.UsetheASPathattributetoaccomplishthistask
OnR1
R1(config)#accesslist11permit11.0.0.00.255.255.255
R1(config)#routemapTEST11 permit10
R1(configroutemap)#matchipaddr11
R1(configroutemap)#setaspathprepend100100100100
R1(configroutemap)#routerbgp100
R1(configrouter)#neighbor131.1.12.2routemapTEST11 out
Toverifytheconfiguration:
OnR2
R2#Showipbgp
BGPtableversionis28,localrouterIDis2.2.2.2
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrf Weight Path
*>1.0.0.0131.1.12.10
0100i
*>2.0.0.0
0.0.0.00
32768i
*>i3.0.0.0131.1.23.30
100
0i
*>i4.0.0.0131.1.34.40
100
0i
*>i11.0.0.0131.1.34.40
100
0100i
*
131.1.12.1
0
0100100100100100i
Task 4
Erasethestartupconfigurationandreloadtheroutersbeforeproceedingtothenextlab.
www.ccieuniversity.com
Lab7
TheLocalPrefattribute
R1
R2
S0/0S0/0
F0/0
F0/0
FrameRelay
R4
R3
F0/0F0/0
S0/0
S0/0
FrameRelay
Ipaddressing:
Router Interface
R1
Lo0
Lo1
FramerelayconnectiontoR2
F0/0interfaceconnectiontoR4
R2
Lo0
FramerelayconnectiontoR1
F0/0interfaceconnectiontoR3
R3
Lo0
F0/0interfaceconnectiontoR2
FramerelayconnectiontoR4
R4
Lo0
F0/0interfaceconnectiontoR1
Framerelayconnection toR3
IPAddress
1.1.1.1/8
11.1.1.1/8
131.1.12.1/24
131.1.14.1/24
2.2.2.2/8
131.1.12.2/24
131.1.23.2/24
3.3.3.3/8
131.1.23.3/24
131.1.34.3/24
4.4.4.4/8
131.1.14.4/24
131.1.34.4/24
ASnumber
100
200
200
200
www.ccieuniversity.com
Task1
ConfiguretheroutersbasedonthepreviouslabstopologyandIPaddressingscheme.
OnlyadvertisetheLoopbackinterface/softheroutersinBGP.
EnsurethattheroutersONLYadvertisetheirlinks(131.1.12.0/24,131.1.23.0/24,
131.1.34.0/24and131.1.14.0/24)inRIPv2,disableautosummarizationinRIPv2
routingprotocol.
OnR1
R1(configif)#routerbgp100
R1(configrouter)#noau
R1(configrouter)#neighbor131.1.14.4remoteas 200
R1(configrouter)#neighbor131.1.12.2remoteas200
R1(configrouter)#netw11.0.0.0
R1(configrouter)#netw1.0.0.0
R1(config)#routerrip
R1(configrouter)#noau
R1(configrouter)#ver2
R1(configrouter)#network131.1.0.0
OnR2
R2(config)#routerbgp200
R2(configrouter)#noau
R2(configrouter)#nosyn
R2(configrouter)#netw2.0.0.0
R2(configrouter)#neighbor131.1.12.1remoteas100
R2(configrouter)#neighbor131.1.23.3remoteas 200
R2(configrouter)#neighbor131.1.34.4remoteas200
R2(configrouter)#neighbor131.1.23.3nexthopself
R2(configrouter)#neighbor131.1.34.4nexthopself
R2(config)#routerrip
R2(configrouter)#noau
R2(configrouter)#ver2
R2(configrouter)#netw131.1.0.0
OnR3
R3(config)#routerbgp200
R3(configrouter)#noau
R3(configrouter)#nosyn
www.ccieuniversity.com
R3(configrouter)#netw3.0.0.0
R3(configrouter)#neighbor131.1.34.4remoteas 200
R3(configrouter)#neighbor131.1.23.2remoteas200
R3(config)#routerrip
R3(configrouter)#noau
R3(configrouter)#ver2
R3(configrouter)#netw131.1.0.0
On R4
R4(config)#routerbgp200
R4(configrouter)#nosyn
R4(configrouter)#noau
R4(configrouter)#netw4.0.0.0
R4(configrouter)#neighbor131.1.34.3remoteas 200
R4(configrouter)#neighbor131.1.23.2remoteas200
R4(configrouter)#neighbor131.1.34.3nexthopself
R4(configrouter)#neighbor131.1.23.2nexthopself
R4(configrouter)#neighbor131.1.14.1remoteas100
R4(config)#routerrip
R4(configrouter)#noau
R4(configrouter)#ver2
R4(configrouter)#netw131.1.0.0
Task2
Ensurethattheroutersin AS200useR4toreachnetwork1.0.0.0/8inAS100.Local
Prefattributemustbeusedtoaccomplishthistask.
OnR4
R4(config)#accesslist1permit1.0.0.00.255.255.255
R4(config)#routemapTEST1permit10
R4(configroutemap)#matchipaddr1
R4(configroutemap)#setLocalpreference400
R4(configroutemap)#exit
R4(config)#routemapTEST1permit20
R4(configroutemap)#routerbgp200
R4(configrouter)#neighbor131.1.14.1routemapTEST1in
www.ccieuniversity.com
ThelocalpreferenceattributeisusedtopreferanexitpointfromthelocalAS.
Unliketheweightattribute,thelocalpreferenceattributeispropagatedthroughout
thelocalAS.IftherearemultipleexitpointsfromthelocalAS,thelocalpreference
attributeisusedtoselecttheexitpointforaspecificorallroutes.Sincethelocal
preferenceattributeaffectstherouterswithintheAS,theroutemapshouldbe
configuredintheindirection.
Toverifytheconfiguration:
OnR2
R2#Showipbgp
BGPtableversionis9,localrouterIDis2.2.2.2
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrfWeightPath
*>i1.0.0.0131.1.34.4
04000100i
*131.1.12.100100i
*>2.0.0.00.0.0.0032768i
*>i3.0.0.0131.1.23.3
01000i
*>i4.0.0.0131.1.34.401000i
*i11.0.0.0131.1.34.401000100i
*>131.1.12.10
0100i
Task 3
EnsurethattheroutersinAS200useR2toreachnetwork11.0.0.0/8.LocalPref
attributemustbeusedtoaccomplishthistask.
OnR2
R2(config)#accesslist11permit11.0.0.00.255.255.255
R2(config)#routemapTEST permit10
R2(configroutemap)#matchipaddr11
R2(configroutemap)#setLocalpreference400
R2(config)#routemapTEST permit20
www.ccieuniversity.com
R2(configroutemap)#routerbgp200
R2(configrouter)#neighbor131.1.12.1routemapTESTin
Toverifytheconfiguration:
OnR2
R2#Showipbgp
BGPtableversionis7,localrouterIDis2.2.2.2
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrfWeightPath
*1.0.0.0
131.1.12.100100i
*>i131.1.34.404000100i
*>2.0.0.00.0.0.0
032768i
*>i3.0.0.0131.1.23.301000i
*>i4.0.0.0131.1.34.401000i
*>11.0.0.0131.1.12.104000 100i
OnR3
R3#Showipbgp
BGPtableversionis14,localrouterIDis3.3.3.3
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrfWeightPath
*>i1.0.0.0131.1.34.404000100i
*>i2.0.0.0131.1.23.201000i
*>3.0.0.00.0.0.0
032768i
*>i4.0.0.0131.1.34.401000i
*>i11.0.0.0131.1.23.204000100i
OnR4
R4#Showipbgp
www.ccieuniversity.com
BGPtableversionis11,localrouterIDis4.4.4.4
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrfWeightPath
*>1.0.0.0
131.1.14.104000100i
*>i2.0.0.0131.1.23.201000i
*>i3.0.0.0131.1.34.301000i
*>4.0.0.00.0.0.0
032768i
*>i11.0.0.0131.1.23.204000100i
*131.1.14.100100i
Task 4
Erasethestartupconfigandreloadtheroutersbeforeproceedingtothenextlab.
www.ccieuniversity.com
Lab8
TheWeightattribute
R1
R2
S0/0S0/0
F0/0
F0/0
FrameRelay
R4
R3
F0/0
F0/0
S0/0S0/0
FrameRelay
Ipaddressing:
Router Interface
R1
Lo0
Lo1
FramerelayconnectiontoR2
F0/0interfaceconnectiontoR4
R2
Lo0
Lo1
FramerelayconnectiontoR1
F0/0interfaceconnectiontoR3
R3
Lo0
Lo1
F0/0interfaceconnectiontoR2
FramerelayconnectiontoR4
R4
Lo0
F0/0interfaceconnectiontoR1
FramerelayconnectiontoR3
IPAddress
1.1.1.1/8
11.1.1.1/8
131.1.12.1/24
131.1.14.1/24
2.2.2.2/8
22.2.2.2/8
131.1.12.2/24
131.1.23.2/24
3.3.3.3/8
33.3.3.3/8
131.1.23.3/24
131.1.34.3/24
4.4.4.4/8
131.1.14.4/24
131.1.34.4/24
ASnumber
100
200
300
400
www.ccieuniversity.com
Task1
ConfigureBGPontheroutersbasedonthetopologyandtheIPaddressingchartprovided
above.ONLYadvertisetheLoopbackinterface/sinBGP.TheBGPPeersessionsshould
beestablishedaccordingtothetopology.Ensurethattherouterscanreachtheadvertised
Loopbackinterfaces.
EnsurethattheroutersONLYadvertisetheirlinks(131.1.12.0/24,131.1.23.0/24,
131.1.34.0/24and131.1.14.0/24)inRIPv2,disableautosummaryinRIPv2routing
protocol.
OnR1
R1(configif)#routerbgp100
R1(configrouter)#noau
R1(configrouter)#neighbor131.1.14.4remoteas 400
R1(configrouter)#neighbor131.1.12.2remoteas200
R1(configrouter)#netw11.0.0.0
R1(configrouter)#netw1.0.0.0
R1(config)#routerrip
R1(configrouter)#noau
R1(configrouter)#ver2
R1(configrouter)#network131.1.0.0
On R2
R2(config)#routerbgp200
R2(configrouter)#noau
R2(configrouter)#netw2.0.0.0
R2(configrouter)#netw22.0.0.0
R2(configrouter)#neighbor131.1.12.1remoteas100
R2(configrouter)#neighbor131.1.23.3remoteas 300
R2(config)#routerrip
R2(configrouter)#noau
R2(configrouter)#ver2
R2(configrouter)#netw131.1.0.0
OnR3
R3(config)#routerbgp300
R3(configrouter)#noau
R3(configrouter)#netw3.0.0.0
R3(configrouter)#netw33.0.0.0
www.ccieuniversity.com
R3(configrouter)#neighbor131.1.34.4remoteas 400
R3(configrouter)#neighbor131.1.23.2remoteas200
R3(config)#routerrip
R3(configrouter)#noau
R3(configrouter)#ver2
R3(configrouter)#netw131.1.0.0
OnR4
R4(config)#routerbgp400
R4(configrouter)#nosyn
R4(configrouter)#netw4.0.0.0
R4(configrouter)#neighbor131.1.34.3remoteas 300
R4(configrouter)#neighbor131.1.14.1remoteas100
R4(config)#routerrip
R4(configrouter)#noau
R4(configrouter)#ver2
R4(configrouter)#netw131.1.0.0
Toverifytheconfiguration:
OnR4
R4#Showipbgp
BGPtableversionis8,localrouterIDis4.4.4.4
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrf WeightPath
*1.0.0.0131.1.34.30300200100i
*>131.1.14.100100i
*2.0.0.0131.1.34.3
0300200i
*>131.1.14.10100200i
*3.0.0.0131.1.14.10100200300i
*>131.1.34.3
00300i
*>4.0.0.00.0.0.0032768i
*11.0.0.0131.1.34.30300200100i
*>131.1.14.100100i
*22.0.0.0131.1.34.30300200i
*>131.1.14.10100200i
*33.0.0.0131.1.14.10100200300i
www.ccieuniversity.com
*>131.1.34.300300i
Task2
ConfigureR1inAS100touseAS200toreachalltheprefixeswithinthistopologyyou
mustuseTheWeightattributetoaccomplishthistask.
OnR1
R1(config)#routerbgp100
R1(configrouter)#neighbor131.1.12.2weight40000
TheweightattributeisaCiscodefinedattributethatislocaltotherouter.This
attributeisNOTadvertisedtoanyneighboringrouter.Iftherearemorethanone
routetoagivendestination,theweightattributecandecidewhichpathisbetter.
Thehigherthevaluethehigherthepreference.
Toverifytheconfiguration:
OnR1
R1#Showipbgp
BGPtableversionis13,localrouterIDis11.1.1.1
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHop
MetricLocPrfWeightPath
*>1.0.0.00.0.0.0032768i
*>2.0.0.0131.1.12.2040000200i
*131.1.14.4
0400300200i
*>3.0.0.0131.1.12.240000200300i
*131.1.14.40400300i
*>4.0.0.0131.1.12.2
40000200300400i
*131.1.14.400400i
*>11.0.0.00.0.0.0032768i
*>22.0.0.0131.1.12.20
40000200i
*131.1.14.40400300200i
*>33.0.0.0131.1.12.240000200300i
*131.1.14.4
0400300i
www.ccieuniversity.com
Task3
ThepolicyofAS100ischangedtothefollowing:
R1inAS100shoulduseR4inAS400toreachprefixes33.0.0.0/8
ExistingandfutureprefixesfromAS200shouldhaveaweightattributeof54000
throughR2.
OnR1
R1(config)#accesslist33permit33.0.0.0
R1(config)#routemapTEST33permit10
R1(configroutemap)#matchipaddr33
R1(configroutemap)#setweight45000
R1(config)#routemapTEST33permit20
R1(config)#ipaspathaccesslist1permit^200$
R1(config)#routemapTEST1permit10
R1(configroutemap)#matchaspath1
R1(configroutemap)#setweight54000
R1(config)#routemapTEST1permit20
R1(configroutemap)#routerbgp100
R1(configrouter)#neighbor131.1.12.2routemapTEST1in
R1(configrouter)#neighbor131.1.14.4routemapTEST33in
Toverifytheconfiguration:
OnR1
R1#Showipbgp
BGPtableversionis12,localrouterIDis11.1.1.1
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrfWeightPath
*>1.0.0.00.0.0.0032768i
www.ccieuniversity.com
*>2.0.0.0131.1.12.2054000200i
*131.1.14.40400300200i
*>3.0.0.0131.1.12.240000200300i
*
131.1.14.40400300i
*>4.0.0.0131.1.12.240000200300400i
*131.1.14.400400i
*>11.0.0.00.0.0.0032768i
*>22.0.0.0131.1.12.2054000200i
*131.1.14.40400300 200i
*33.0.0.0131.1.12.240000200300i
*>131.1.14.445000400300i
Task4
Erasethestartupconfigandreloadtheroutersbeforeproceedingtothenextlab.
www.ccieuniversity.com
Lab9
MultiExitDiscriminatorattribute
R1
R2
S0/0S0/0
F0/0
F0/0
FrameRelay
R3
R4
F0/0
F0/0
S0/0S0/0
FrameRelay
LabSetup:
Ipaddressing:
Router Interface
R1
Lo0
Lo1
Framerelayconnection toR2
F0/0interfaceconnectiontoR4
R2
Lo0
Lo1
FramerelayconnectiontoR1
F0/0interfaceconnectiontoR3
IPAddress
1.1.1.1/8
11.1.1.1/8
131.1.12.1/24
131.1.14.1/24
2.2.2.2/8
22.2.2.2/8
131.1.12.2/24
131.1.23.2/24
ASnumber
100
200
www.ccieuniversity.com
R3
R4
Lo0
Lo1
F0/0interfaceconnectiontoR2
FramerelayconnectiontoR4
Lo0
F0/0interfaceconnectiontoR1
FramerelayconnectiontoR3
3.3.3.3/8
33.3.3.3/8
131.1.23.3/24
131.1.34.3/24
4.4.4.4/8
131.1.14.4/24
131.1.34.4/24
200
200
Task1
ConfigureBGPonallroutersaccordingtothetopologyandtheIPaddressingchart,and
onlyadvertisetheirLoopbackinterface/sinBGP.Ensurethattheroutershave
reachabilitytoeveryadvertisednetwork
EnsurethattheroutersONLYadvertisetheirlinks(131.1.12.0/24,131.1.23.0 /24,
131.1.34.0/24and131.1.14.0/24)inRIPv2,disableautosummaryinRIPv2routing
protocol.
OnR1
R1(config)#routerbgp100
R1(configrouter)#noau
R1(configrouter)#netw1.0.0.0
R1(configrouter)#netw11.0.0.0
R1(configrouter)#neighbor131.1.12.2remoteas200
R1(configrouter)#neighbor131.1.14.4remoteas200
R1(config)#routerrip
R1(configrouter)#noau
R1(configrouter)#ver2
R1(configrouter)#netw131.1.0.0
OnR2
R2(config)#routerbgp200
R2(configrouter)#noau
R2(configrouter)#netw2.0.0.0
R2(configrouter)#netw22.0.0.0
R2(configrouter)#neighbor131.1.12.1remoteas100
R2(configrouter)#neighbor131.1.23.3remoteas200
R2(configrouter)#neighbor131.1.34.4remoteas200
R2(configrouter)#neighbor131.1.34.4nexthopself
R2(configrouter)#neighbor131.1.23.3nexthopself
R2(config)#routerrip
www.ccieuniversity.com
R2(configrouter)#noau
R2(configrouter)#ver2
R2(configrouter)#netw131.1.0.0
OnR3
R3(config)#routerbgp200
R3(configrouter)#noau
R3(configrouter)#netw3.0.0.0
R3(configrouter)#netw33.0.0.0
R3(configrouter)#neighbor131.1.23.2remoteas200
R3(configrouter)#neighbor131.1.34.4remoteas200
R3(config)#routerrip
R3(configrouter)#noau
R3(configrouter)#ver2
R3(configrouter)#netw131.1.0.0
OnR4
R4(configif)#routerbgp200
R4(configrouter)#noau
R4(configrouter)#netw4.0.0.0
R4(configrouter)#neighbor131.1.34.3remoteas200
R4(configrouter)#neighbor131.1.23.2remoteas200
R4(configrouter)#neighbor131.1.23.2nexthopself
R4(configrouter)#neighbor131.1.34.3nexthopself
R4(configrouter)#neighbor131.1.14.1remoteas100
R4(config)#routerrip
R4(configrouter)#noau
R4(configrouter)#ver2
R4(configrouter)#netw131.1.0.0
Toverifytheconfiguration:
OnR1
R1#Showipbgp
BGPtableversionis22,localrouter IDis11.1.1.1
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
www.ccieuniversity.com
Task2
ConfigureAS200suchthattheroutersinAS100takeR4toreachanyprefixes
advertisedinAS200.ManipulateMEDtoaccomplishthistask.
OnR2
R2(config)#routemapTESTpermit10
R2(configroutemap)#setmetric100
R2(config)#routerbgp200
R2(configrouter)#neighbor131.1.12.1routemapTESTout
MEDisusedasasuggestiontoanexternalASregardingthepreferredrouteinto
theASthatisadvertisingthemetric.Thereasonsuggestionisusedhereisbecause
theASthatisreceivingMEDattributecoulduseanotherattributesuchasWeight
thatwilloverridetheMEDattribute.Thelowerthevaluethebetterthepath.
Toverifytheconfiguration:
OnR1
R1#Showipbgp
BGPtableversionis27,localrouterIDis11.1.1.1
www.ccieuniversity.com
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetric LocPrf Weight Path
*>1.0.0.0
0.0.0.0032768i
*2.0.0.0131.1.12.21000200i
*>
131.1.14.40200i
*3.0.0.0
131.1.12.21000200i
*>
131.1.14.40200i
*4.0.0.0131.1.12.21000200i
*>
131.1.14.400200i
*>11.0.0.00.0.0.0032768i
*22.0.0.0131.1.12.21000200i
*>
131.1.14.40200i
*33.0.0.0131.1.12.21000200i
*>131.1.14.40200 i
Task3
Removetheconfigurationcommandfromtheprevioustaskbeforeproceedingtothe
nexttask.
OnR2
R2(config)#noroutemapTESTpermit10
R2(config)#routerbgp200
R2(configrouter)#noneighbor131.1.12.1routemapTESTout
Task4
ConfigureAS200suchthatAS100canreachprefix33.0.0.0/24throughR4andPrefix
3.0.0.0/8throughR2.UtilizeMEDtoaccomplishthistask.
OnR2
R2(config)#accesslist3permit3.0.0.0
R2(config)#accesslist33permit33.0.0.0
R2(config)#routemapTESTpermit10
www.ccieuniversity.com
R2(configroutemap)#matchipaddr3
R2(configroutemap)#setmetric50
R2(config)#routemapTESTpermit20
R2(configroutemap)#matchipaddr33
R2(configroutemap)#setmetric100
R2(config)#routemapTESTpermit30
R2(config)#routerbgp200
R2(configrouter)#neighbor131.1.12.1routemapTESTout
OnR4
R4(config)#accesslist3permit3.0.0.0
R4(config)#accesslist33permit33.0.0.0
R4(config)#routemapTESTpermit10
R4(configroutemap)#matchipaddr3
R4(configroutemap)#setmetric100
R4(config)#routemapTESTpermit20
R4(configroutemap)#matchipaddr33
R4(configroutemap)#setmetric50
R4(config)#routemapTESTpermit30
R4(config)#routerbgp200
R4(configrouter)#neighbor131.1.14.1routemapTESTout
To verifytheconfiguration
OnR1
R1#Showipbgp
BGPtableversionis8,localrouterIDis11.1.1.1
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrfWeightPath
*>1.0.0.00.0.0.0032768i
*2.0.0.0131.1.12.200200i
*>
131.1.14.40200i
www.ccieuniversity.com
*>3.0.0.0131.1.12.2500200i
*131.1.14.41000200i
*4.0.0.0131.1.12.20200i
*>131.1.14.400200i
*>11.0.0.00.0.0.0032768i
*22.0.0.0
131.1.12.200200i
*>131.1.14.40200i
NetworkNextHopMetricLocPrfWeightPath
*33.0.0.0131.1.12.21000200i
*>131.1.14.4500200i
Task5
RemoveBGProutingprotocolandanypreviousBGPrelatedcommand/sfromthe
previoustasksandreconfigurethembasedonthechartbelow.Theseroutersshould
ONLYadvertisetheirloopbackinterface/sinBGP.
Router Interface
R1
Lo0
Lo1
FramerelayconnectiontoR2
F0/0interfaceconnectiontoR4
R2
Lo0
Lo1
FramerelayconnectiontoR1
F0/0interfaceconnectiontoR3
R3
Lo0
Lo1
F0/0interfaceconnectiontoR2
FramerelayconnectiontoR4
R4
Lo0
F0/0interfaceconnectiontoR1
FramerelayconnectiontoR3
OnR1
R1(config)#Norouterbgp100
OnR2
R2(config)#norouterbgp200
IPAddress
1.1.1.1/8
11.1.1.1/8
131.1.12.1/24
131.1.14.1/24
2.2.2.2/8
22.2.2.0/8
131.1.12.2/24
131.1.23.2/24
3.3.3.3/8
33.3.3.0/8
131.1.23.3/24
131.1.34.3/24
4.4.4.4/8
131.1.14.4/24
131.1.34.4/24
ASnumber
100
200
300
400
www.ccieuniversity.com
R2(config)#noaccesslist3
R2(config)#noaccesslist33
R2(config)#noroutemapTEST
OnR4
R4(config)#norouterbgp200
R4(config)#noaccesslist3
R4(config)#noaccesslist33
R4(config)#noroutemapTEST
OnR1
R1(config)#routerbgp100
R1(configrouter)#noau
R1(configrouter)#netw1.0.0.0
R1(configrouter)#netw11.0.0.0
R1(configrouter)#neighbor131.1.12.2remoteas200
R1(configrouter)#neighbor131.1.14.4remoteas400
OnR2
R2(config)#routerbgp200
R2(configrouter)#netw2.0.0.0
R2(configrouter)#netw22.0.0.0
R2(configrouter)#noau
R2(configrouter)#neighbor131.1.12.1remoteas100
R2(configrouter)#neighbor131.1.23.3remoteas300
OnR3
R3(config)#routerbgp300
R3(configrouter)#noau
R3(configrouter)#netw3.0.0.0
R3(configrouter)#netw33.0.0.0
R3(configrouter)#neighbor131.1.23.2remoteas200
R3(configrouter)#neighbor131.1.34.4remoteas400
OnR4
R4(config)#routerbgp400
R4(configrouter)#noau
R4(configrouter)#netw4.0.0.0
R4(configrouter)#neighbor131.1.14.1remoteas100
www.ccieuniversity.com
R4(configrouter)#neighbor131.1.34.3remoteas300
Toverifytheconfiguration:
OnR1
R1#Showipbgp
BGPtableversionis8,localrouterIDis11.1.1.1
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origin codes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrfWeightPath
*>1.0.0.00.0.0.0032768i
*>2.0.0.0131.1.12.20
0200i
*3.0.0.0131.1.12.20200300i
*>131.1.14.40400300i
*4.0.0.0131.1.12.2
0200300400i
*>131.1.14.400400i
*>11.0.0.00.0.0.0032768i
*>22.0.0.0131.1.12.20
0200i
*33.0.0.0131.1.12.20200300i
*>131.1.14.40400300i
Task6
ConfigureR4inAS400topassaMED of100toR1inAS100andconfigureR2inAS
200topassaMEDof120toR1inAS100.
OnR2
R2(config)#routemapTESTpermit10
R2(configroutemap)#setmetric120
R2(config)#routerbgp200
R2(configrouter)#neighbor131.1.12.1routemapTESTout
OnR4
R4(config)#routemapTESTpermit10
www.ccieuniversity.com
R4(configroutemap)#setmetric100
R4(config)#routerbgp400
R4(configrouter)#neighbor131.1.14.1routemapTESTout
Toverifytheconfiguration:
R1#Showipbgp
BGPtableversionis18,localrouterIDis11.1.1.1
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
Network
NextHopMetricLocPrfWeight Path
*>1.0.0.0
0.0.0.0032768i
*>2.0.0.0131.1.12.21200200i
*3.0.0.0131.1.12.21200200300i
*>
131.1.14.41000400300i
*4.0.0.0131.1.12.21200200300400i
*>131.1.14.41000400i
*>11.0.0.00.0.0.0032768i
*>22.0.0.0131.1.12.21200200i
*33.0.0.0131.1.12.21200200300i
*>
131.1.14.41000400300i
Task7
EnsurethatR1inAS100alwaystakesR4toreachallotherprefixesadvertisedinthis
topology.UtilizeMEDinAS100toaccomplishthistask.
OnR1
R1(config)#routerbgp100
R1(configrouter)#bgpalwayscomparemed
R1(configrouter)#bgpbestpathaspathignore
Notethetabkeywillnotworkwhenenteringthebgpbestpathaspathignore
command.
TheMEDasstatedinRFC1771,isanoptionalnontransitiveattribute.Thevalue
ofthisattributemaybeusedbytheBGPbestpathselectionprocesstodiscriminate
amongmultipleexistpointstoaneighboringAS.Thelowerthevaluethebetterthe
path.TheMEDvaluecomparisonisdoneonlyamongpathsfromthesameAS.The
www.ccieuniversity.com
bgpalwayscomparemedcommandisusedtochangethisbehaviorbyenforcing
MEDcomparisonbetweenallpaths,regardlessoftheASfromwhichthepathsare
received.
Notethesecondcommandbgpbestpathaspathignoreisusedtoaccomplishthis
task,thiscommandisneededbecauseaspathislookedatfirstbeforeMED.Once
BGProutingprotocolistoldtoignoretheaspathattributeinbestpathcalculation,
BGPwilllookattheMEDvaluenext.
Notethefollowingdisplayisperformedbeforethebgpbestpathaspathignore
command.
OnR1
R1#Showipbgp
BGPtableversionis8,localrouterIDis11.1.1.1
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrfWeightPath
*>1.0.0.00.0.0.0032768i
*>2.0.0.0131.1.12.21200200i
*131.1.14.41000400300200i
*3.0.0.0131.1.12.21200200300i
*>131.1.14.4100
0400300i
*4.0.0.0131.1.12.21200200300400i
*>131.1.14.41000400i
*>11.0.0.00.0.0.00
32768i
*>22.0.0.0131.1.12.21200200i
*131.1.14.41000400300200i
*33.0.0.0131.1.12.2120
0200300i
*>131.1.14.41000400300i
Enterthefollowingcommandtoseethebgptableafterthebgpbestpathaspath
ignorecommand:
R1#Showipbgp
BGPtableversionis8,localrouterIDis11.1.1.1
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrfWeightPath
www.ccieuniversity.com
*>1.0.0.0
0.0.0.0032768i
*2.0.0.0131.1.12.21200200i
*>131.1.14.4
1000400300200i
*3.0.0.0
131.1.12.21200200300i
*>131.1.14.4
1000400300i
*4.0.0.0131.1.12.21200200300400i
*>
131.1.14.4
1000400i
*>11.0.0.00.0.0.0032768i
*22.0.0.0131.1.12.21200200i
NetworkNextHopMetricLocPrfWeightPath
*>131.1.14.4
1000400300200i
*33.0.0.0131.1.12.21200200300i
*>
131.1.14.4
1000400300i
Task8
RemovetheBGPconfigurationfromtheprevioustwotasks(Task6).ConfigureR4in
AS400topassaMEDvalueof100toR1inAS100R2inAS200shouldNOTpass
anyMEDvaluestoR1.EnsurethatR1inAS100takesR4toreachanyprefixadvertised
inthistopology.
NoteR2isnotgivingaMEDvaluetoR1.R1willalwaystakethepathwiththe
lowestMED.R4isgivingaMEDvalueof100toR1.
R1willtakethepaththroughR2.
Totestthescenario:
OnR2
ToremovethecommandfromR2
R2(config)#routerbgp200
R2(configrouter)#noneighbor131.1.12.1routemapTESTout
R2(config)#noroutemapTEST
OnR4
ToremovethecommandfromR4
R4(config)#routerbgp400
R4(configrouter)#noneighbor131.1.14.1routemapTESTout
www.ccieuniversity.com
R4(config)#noroutemapTEST
OnR1
ToremovethecommandfromR1
R1(config)#routerbgp100
R1(configrouter)#nobgpalwayscomparemed
R1(configrouter)#nobgpbestpathaspathignore
OnR4
ToconfigureR4togiveaMEDvalueof100toR1
R4(config)#routemapTESTpermit10
R4(configroutemap)#setmetric100
R4(config)#routerbgp400
R4(configrouter)#neighbor131.1.14.1routemapTESTout
Toverifytheconfiguration:
OnR1
R1#Showipbgp
BGPtableversionis12,localrouterIDis11.1.1.1
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHop
MetricLocPrfWeightPath
*>1.0.0.0
0.0.0.00
32768i
*>2.0.0.0131.1.12.20
0200i
*3.0.0.0
131.1.14.4100
0400300i
*>
131.1.12.2
0200300i
*>4.0.0.0131.1.14.4100
0400i
*>11.0.0.0
0.0.0.00
32768i
*>22.0.0.0131.1.12.20
0200i
*33.0.0.0
131.1.14.4100
0400300i
*>
131.1.12.2
0200300i
NoteR1takesthepathwiththelowerMEDvalue,inthiscaseR2.
www.ccieuniversity.com
OnR1
R1(config)#routerbgp100
R1(configrouter)#bgpbestpathmedmissingasworst
NotetheabovecommandtellsBGPtosetthepathwiththemissingMEDtobethe
worstpath.
Toverifytheconfiguration:
OnR1
R1#Showipbgp
BGPtableversionis8,localrouterIDis11.1.1.1
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrfWeightPath
*>1.0.0.00.0.0.0032768i
*>2.0.0.0131.1.12.200200i
*
131.1.14.41000400300200i
*3.0.0.0131.1.12.242949672950200300i
*>131.1.14.41000400300i
*4.0.0.0131.1.12.242949672950200300400i
*>131.1.14.41000400i
*>11.0.0.00.0.0.0032768i
*>22.0.0.0
131.1.12.200200i
*131.1.14.41000400300200i
*33.0.0.0131.1.12.242949672950200300i
*>
131.1.14.41000400300i
NoteR1takesthepaththroughR4togetalltheroutesexceptthenetwork/s
advertisedbyR2.Canyouguessthecommandtofixthissituation?
Ifyoucannotthinkofthecommandtoresolvethisproblem,doNOTsignupfor
thelabexamyet(justkidding),checkthesolutionintask7.
Task 9
Erasethestartupconfigandreloadtheroutersbeforeproceedingtothenextlab.
www.ccieuniversity.com
Lab10
FilteringRoutesUsingAccesslistsand
Prefixlists
R1
R2
S0/0S0/0
F0/0
F0/0
FrameRelay
R4
R3
F0/0F0/0
S0/0
S0/0
FrameRelay
LabSetup:
Ipaddressing:
Router Interface
R1
Lo0
Lo1
Lo2
Lo3
Lo4
FramerelayconnectiontoR2
F0/0interfaceconnectiontoR4
IPAddress
1.1.0.1/24
1.1.1.1/24
1.1.2.1/24
1.1.3.1/24
1.1.4.1/24
131.1.12.1/24
131.1.14.1/24
ASnumber
100
www.ccieuniversity.com
R2
R3
R4
Lo0
Lo1
FramerelayconnectiontoR1
F0/0interfaceconnectiontoR3
Lo0
Lo1
F0/0interfaceconnectiontoR2
FramerelayconnectiontoR4
Lo0
F0/0interfaceconnectiontoR1
FramerelayconnectiontoR3
2.2.2.2/8
22.2.2.2/8
131.1.12.2/24
131.1.23.2/24
3.3.3.3/8
33.3.3.3/8
131.1.23.3/24
131.1.34.3/24
4.4.4.4/8
131.1.14.4/24
131.1.34.4/24
200
300
400
Task1
ConfigureBGPontheroutersaccordingtotheabovechartandthediagram.TheBGP
routersshouldonlyadvertisetheirLoopbackinterfacesinBGP.Ensurethattherouters
canreachalltheadvertisednetworksinthistopology.
EnsurethattheroutersONLYadvertisetheirlinks(131.1.12.0/24,131.1.14.0/24,
131.1.34.0/24and131.1.23.0/24)inRIPv2,disableautosummaryinRIPv2routing
protocol.
OnR1
R1(config)#routerbgp100
R1(configrouter)#noau
R1(configrouter)#netw1.1.0.0 mask255.255.255.0
R1(configrouter)#netw1.1.1.0 mask255.255.255.0
R1(configrouter)#netw1.1.2.0 mask255.255.255.0
R1(configrouter)#netw1.1.3.0 mask255.255.255.0
R1(configrouter)#netw1.1.4.0 mask255.255.255.0
R1(configrouter)#neighbor131.1.12.2remoteas200
R1(configrouter)#neighbor131.1.14.4remoteas400
R1(configrouter)#routerrip
R1(configrouter)#netw131.1.0.0
R1(configrouter)#noau
R1(configrouter)#ver2
OnR2
R2(config)#routerbgp200
R2(configrouter)#netw2.0.0.0
R2(configrouter)#netw22.0.0.0
R2(configrouter)#noau
www.ccieuniversity.com
R2(configrouter)#neighbor131.1.12.1remoteas100
R2(configrouter)#neighbor131.1.23.3remoteas300
R2(configrouter)#routerrip
R2(configrouter)#netw131.1.0.0
R2(configrouter)#noau
R2(configrouter)#ver2
OnR3
R3(config)#routerbgp300
R3(configrouter)#noau
R3(configrouter)#netw3.0.0.0
R3(configrouter)#netw33.0.0.0
R3(configrouter)#neighbor131.1.23.2remoteas200
R3(configrouter)#neighbor131.1.34.4 remoteas 400
R3(configrouter)#routerrip
R3(configrouter)#ver2
R3(configrouter)#noau
R3(configrouter)#netw131.1.0.0
OnR4
R4(config)#routerbgp400
R4(configrouter)#noau
R4(configrouter)#netw4.0.0.0
R4(configrouter)#neighbor131.1.14.1remoteas100
R4(configrouter)#neighbor131.1.34.3 remoteas 300
R4(configrouter)#routerrip
R4(configrouter)#netw131.1.0.0
R4(configrouter)#noau
R4(configrouter)#ver2
Toverifytheconfiguration:
OnR4
R4#Showipbgp
BGPtableversionis11,localrouterIDis4.4.4.4
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
www.ccieuniversity.com
NetworkNextHopMetricLocPrfWeightPath
*>1.1.0.0/24131.1.14.100100i
*>1.1.1.0/24131.1.14.1
00100i
*>1.1.2.0/24131.1.14.100100i
*>1.1.3.0/24131.1.14.100100i
*>1.1.4.0/24131.1.14.10
0100i
*>2.0.0.0131.1.14.10100200i
*>3.0.0.0131.1.14.10100300i
NetworkNextHopMetricLocPrfWeightPath
*>4.0.0.00.0.0.0032768i
*>22.0.0.0131.1.14.10100200i
*>33.0.0.0131.1.14.10100300i
Task2
ConfigureR2toblocknetwork1.1.4.0/24fromgettingintoitsroutingandBGPtables.
Usedistributelistandaccesslisttoaccomplishthistask.
OnR2
R2(config)#accesslist4deny 1.1.4.00.0.0.255
R2(config)#accesslist4permitany
R2(config)#routerbgp200
R2(configrouter)#neighbor131.1.12.1distributelist4in
R2(configrouter)#neighbor131.1.23.3distributelist4in
Notethetrickypartwastounderstandthetopology,ifthetopologyinnot
understoodsillymistakescanoccurwhichcancostyoupoints.Thetrickypartof
thistaskistoblocktheprefixfrombothneighbors.
Task 3
Removetheconfigurationcommandfromprevioustask,andaccomplishthesametask
usingprefixlistanddistributelist.
OnR2
R2(config)#noaccesslist4
R2(config)#routerbgp200
www.ccieuniversity.com
R2(configrouter)#noneighbor131.1.12.1 distributelist1in
R2(configrouter)#noneighbor131.1.23.3 distributelist1in
R2(config)#ipprefixlistTESTseq5deny1.1.4.0/24
R2(config)#ipprefixlistTESTseq10permit0.0.0.0/0le32
R2(config)#routerbgp200
R2(configrouter)#neighbor131.1.12.1prefixlistTESTin
R2(configrouter)#neighbor131.1.23.3prefixlistTESTin
Notetherearemanywaystoaccomplishagiventask,understandingand
rememberingthedifferentwayscanbethekeytosuccess.
Task 4
ConfigureR3inAS300toblocknetwork22.0.0.0/8fromenteringitsroutingandBGP
table.DoNOTusedistributelistorprefixlist.Aroutemapandanaccesslistshouldbe
usedtoaccomplishthistask.Usingaroutemapandanaccesslistaccomplishthistaskin
anotherway.
OnR3
R3(config)#accesslist22deny22.0.0.0
R3(config)#accesslist22permitany
R3(config)#routemapTESTpermit10
R3(configroutemap)#matchipaddr22
R3(config)#routerbgp300
R3(configrouter)#neighbor131.1.23.2routemapTESTin
R3(configrouter)#neighbor131.1.13.1routemapTESTin
Notethesametaskcanbeaccomplishedinanotherway:
R3(config)#accesslist22permit22.0.0.0
R3(config)#routemapTESTdeny10
R3(configroutemap)#matchipaddr22
R3(config)#routemapTESTpermit20
R3(config)#routerbgp300
R3(configrouter)#neighbor131.1.23.2routemapTESTin
www.ccieuniversity.com
R3(configrouter)#neighbor131.1.13.1routemapTESTin
Task5
Erasethestartupconfigandreloadtheroutersbeforeproceedingtothenextlab.
www.ccieuniversity.com
Lab11
RegularExpressions
R1
R2
S0/0
S0/0
F0/0
FrameRelay
R3
R4
F0/0
S0/0S0/0
FrameRelay
LabSetup:
Configuretheroutersthatareconnectedtotheframerelaycloudsinapointto
pointmanner.
R2andR3sF0/0interfaceshouldbeconfiguredinVLAN23.
www.ccieuniversity.com
Ipaddressing:
Router Interface
R1
Lo0
FramerelayconnectiontoR2
R2
Lo0
FramerelayconnectiontoR1
R3
R4
Lo0
F0/0interfaceconnectiontoR2
FramerelayconnectiontoR4
Lo0
FramerelayconnectiontoR3
IPAddress
1.1.1.1/8
131.1.12.1/24
2.2.2.2/8
131.1.12.2/24
131.1.23.2/24
3.3.3.3/8
131.1.23.3/24
131.1.34.3/24
4.4.4.4/8
131.1.34.4/24
ASnumber
100
200
300
400
Task 1
ConfigureBGPontheroutersandONLYadvertisetheirLoopbackinterface/sinBGP.
EnsurethattheroutershaveNLRItoeveryadvertisedLoopbackinterfaceinthis
topology.
EnsurethattheroutersONLYadvertisetheirlinks(131.1.12.0/24,131.1.23.0/24,and
131.1.34.0/24)inRIPv2,disableautosummaryinRIPv2routingprotocol.
OnR1
R1(configif)#routerbgp100
R1(configrouter)#noau
R1(configrouter)#netw1.0.0.0
R1(configrouter)#neighbor131.1.12.2remoteas200
R1(configrouter)#routerrip
R1(configrouter)#noau
R1(configrouter)#ver2
R1(configrouter)#netw131.1.0.0
OnR2
R2(configif)#routerbgp200
R2(configrouter)#noau
R2(configrouter)#netw2.0.0.0
R2(configrouter)#neighbor131.1.12.1remoteas100
R2(configrouter)#neighbor131.1.23.3remoteas300
R2(configrouter)#routerrip
R2(configrouter)#noau
www.ccieuniversity.com
R2(configrouter)#ver2
R2(configrouter)#netw131.1.0.0
OnR3
R2(configif)#routerbgp300
R2(configrouter)#noau
R2(configrouter)#netw3.0.0.0
R2(configrouter)#neighbor131.1.34.4remoteas400
R2(configrouter)#neighbor131.1.23.2remoteas200
R2(configrouter)#routerrip
R2(configrouter)#noau
R2(configrouter)#ver2
R2(configrouter)#netw131.1.0.0
OnR4
R4(configif)#routerbgp400
R4(configrouter)#noau
R4(configrouter)#netw4.0.0.0
R4(configrouter)#neighbor131.1.34.3remote300
R4(configrouter)#routerrip
R4(configrouter)#noau
R4(configrouter)#ver2
R4(configrouter)#netw131.1.0.0
Toverifytheconfiguration:
OnR1
R1#Showipbgp
BGPtableversionis5,localrouterIDis1.1.1.1
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrfWeightPath
*>1.0.0.00.0.0.0032768i
*>2.0.0.0131.1.12.200200i
*>3.0.0.0131.1.12.2
0200300i
*>4.0.0.0131.1.12.20200300400i
www.ccieuniversity.com
Task 2
ConfigureR1suchthatitblocksalltheprefixesthatoriginatedinAS300.
OnR1
R1(config)#ipaspathaccesslist1deny_300$
R1(config)#ipaspathaccesslist1permit.*
R1(config)#routerbgp100
R1(configrouter)#neighbor131.1.12.2filterlist1in
Task 3
Removetheconfigurationcommand/sfromthepreviousLabbeforeproceedingtothe
nexttask.
OnR1
R1(config)#noipaspathaccesslist1
R1(config)#routerbgp100
R1(configrouter)#noneighbor131.1.12.2filterlist1in
Task5
ConfigureR1suchthattheyblockalltheprefixesthattraversedthroughAS300.
OnR1
R1(config)#ipaspathaccesslist1deny_300_
R1(config)#ipaspathaccesslist1permit.*
R1(config)#routerbgp100
R1(configrouter)#neighbor131.1.12.2filterlist1in
Task6
RemovetheconfigurationcommandfromthepreviousLabbeforeproceedingtothenext
task.
www.ccieuniversity.com
OnR1
R1(config)#noipaspathaccesslist1
R1(config)#routerbgp100
R1(configrouter)#noneighbor131.1.12.2filterlist1in
Task7
ConfigureR3suchthatitdoesntadvertisetheprefixesthatoriginatedinitsownASto
anyofitsneighbors.
OnR3
R3(config)#ipaspathaccesslist1deny^$
R3(config)#ipaspathaccesslist1permit.*
R3(config)#routerbgp300
R3(configrouter)#neighbor131.1.23.2filterlist1out
R3(configrouter)#neighbor131.1.34.4filterlist1out
Task8
RemovetheconfigurationcommandfromthepreviousLabbeforeproceedingtothenext
task.
OnR3
R3(config)#noipaspathaccesslist1deny^$
R3(config)#routerbgp300
R3(configrouter)#noneighbor131.1.23.2filterlist1out
R3(configrouter)#noneighbor131.1.34.4filterlist1 out
Task9
ConfigureR3suchthatitblocksalltheprefixesfromitsneighboringAS200.
www.ccieuniversity.com
OnR3
R3(config)#ipaspathaccesslist1deny^200$
R3(config)#ipaspathaccesslist1permit.*
R3(config)#routerbgp300
R3(configrouter)#neighbor131.1.23.2filterlist1in
Task10
RemovetheconfigurationcommandfromthepreviousLabbeforeproceedingtothenext
task.
OnR3
R3(config)#noipaspathaccesslist1
R3(config)#routerbgp300
R3(configrouter)#noneighbor131.1.23.2filterlist1in
Task11
ConfigureR3suchthatitblocksalltheprefixesfromitsexistingandfuturedirectly
connectedneighbors.
OnR3
R3(config)#ipaspathaccesslist1deny^[09]+$
R3(config)#ipaspathaccesslist1permit.*
R3(config)#routerbgp300
R3(configrouter)#neighbor131.1.23.2filterlist1in
R3(configrouter)#neighbor131.1.34.4filterlist1in
Task12
RemovetheconfigurationcommandfromthepreviousLabbeforeproceedingtothenext
task.
www.ccieuniversity.com
OnR3
R3(config)#noipaspathaccesslist1
R3(config)#routerbgp300
R3(configrouter)#noneighbor131.1.23.2filterlist1in
R3(configrouter)#noneighbor131.1.34.4filterlist1in
Task13
ConfigureR1suchthatitblocksalltheprefixesthatoriginatedinAS300andtraversed
throughAS200.
OnR1
R1(config)#ipaspathaccesslist1deny_200_300$
R1(config)#ipaspathaccesslist1permit.*
R1(config)#routerbgp100
R1(configrouter)#neighbor131.1.12.2filterlist1in
Task14
Erasethestartupconfigandreloadtheroutersbeforeproceedingtothenextlab.