You are on page 1of 3

1.

Given the topology above, what command is going to be used to peer the cityhub1-corr01 and cityhub1-corr02 to cityhub1-dmzs02?
cityhub1-corr01(config) # router bgp 65500
cityhub1-corr01(config-router) # neighbor 10.180.178.229 remote-as 64588
cityhub1-corr02(config) # router bgp 65500
cityhub1-corr02(config-router) # neighbor 10.180.178.229 remote-as 64588
cityhub1-dmzs02 (config) # router bgp 64588
cityhub1-dmzs02 (config-router) # neighbor 10.180.161.2 remote-as 65500
cityhub1-dmzs02 (config-router) # neighbor 10.180.161.3 remote-as 65500

2.

If the cityhub1 site uses the IP address 10.0.0.0/8, where 10.0.1.0/24 is a subnet that should not be broadcasted to cityhub2-iacr02, write a route map
to be configured on cityhub1-corr02 or in cityhub2-iacr02 (you may choose either of the two routers or both) so to achieve this goal. There are many
ways to do this, and theres only 9 of you in the class. This will be graded depending on the uniqueness and correctness of the answer.
cityhub1-corr02(config) # access-list 90 permit 10.0.1.0 0.0.0.255
cityhub1-corr02(config) # access-list 91 permit 10.0.0.0 0.255.255.255
cityhub1-corr02(config) # router bgp 65500
cityhub1-corr02(config-router) # neighbor 10.180.185.1 remote-as 65500
cityhub1-corr02(config-router) # neighbor 10.180.185.1 route-map FILTER out
cityhub1-corr02(config) # route-map FILTER deny 10
cityhub1-corr02(config-route-map)# match ip address 90
cityhub1-corr02(config) # route-map FILTER permit 20
cityhub1-corr02(config-route-map)# match ip address 91

3. If the following commands were written on cityhub1-dmzs02, explain each section and how it affects BGP routing advertisements:
route-map rm-64589-to-65500 deny 5
This command denies routing advertisements of particular subnets specified
match ip address prefix-list pl-64589-to-65500
in the prefix-list list pl-64589-to-65500.
route-map rm-64589-to-65500 permit 10
This command executes AS prepending, adding 17493.
match as-path 10
ip prefix-list pl-64589-to-65500 seq 5 permit 10.0.0.0/8
This command is a prefix list pertaining to starting octet of 10 and mask 8.
ip as-path access-list 10 permit ^17493
ip as-path access-list 10 permit ^$

4.

This command is used in conjunction to the AS prepending earlier.

If cityhub2 uses the IP address 172.16.0.0/24, write all the necessary configuration on cityhub2-iacr02 to:
a. Peer cityhub2-iacr02 with cityhub2-dmzs02

cityhub2-iacr02 (config) # router bgp 65500


cityhub2-iacr02 (config-router) # neighbour 10.180.150.253 remote-as 64589
cityhub2-dmzs02 (config) # router bgp 64589
cityhub2-dmzs02(config-router) # neighbour 10.180.144.140 remote-as 65500

b.

Broadcast this subnet to cityhub1-corr02

cityhub2-iacr02 (config) # router bgp 65500


cityhub2-iacr02 (config-router) # network 172.16.0.0 255.255.255.0

You might also like