CCIE Routing and Switching Practice Labs Martin James Duggan, CCIE No. 7942 Port ee Sets to Cte) encom TS iyeacaie Your Short Cut to Knowledge12 CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 About the Author Martin James Duggan, CCIE No, 7942, isa network architect for AT&T. He designs network solutions for customers globally aad specializes in Campus LAN dasiga and network reviews, Martin mentor: celleaguss through their Cisoo (qualifications and holds regular intemal training clases. Previous to this Martin vasa network architect for IBM. performing IP network designs and global network reviews. Martin has been in the industry for [8 years and hes focused ‘on Cisco solutions forthe last 11 yesrs. Martinis the co-author of the Cisco Press tite Routing and Switching Practice Labs, Volume About the Technical Reviewers Maurilio de Paula Gorito, CCIE No. 3807, is a tiple CCIE, having certified in Routing & Switching in 1998, WAN Switching in 2001, ard Security in 2002 Mauriio has more than 18 years of experience in networking, iaciudiag Cisco networks and IBM/SNA environments. Maurlio’s experience includes the planning, designing, implementation, and trou- bleshooting of lage IP networks runaing RIP. IGRP, EIGRP, BGP, OSPF, QoS, and SNA worldwide, including Brazil and the USA, He elsohas more than 7 years of experience in teaching technical classes at schools ard companies. Mauriio cuurenily works for Cisco as part oF the CCIE Team. As a content ead, Maurilio is responsible for managing the coment deselopment process forthe CCIE Routing & Switching lab and written exams, for being in touch with candidates as part of the CCIE customer service, and for proetoring CCTE Roating & Switching and CCIE Secarity Lab exams atthe CCTE Lab in San Jose, California, USA. Maurilio alo has presented power sessions at Cisco seminars. He holds degrees in ‘mathematics and pedsgogy. Leah Lynch, CCIE No, 7220 (Routing and Switshirg) isthe product manager for outing protocol asi MPLS techaclogies con the Spirent TestCenter platform at Spireat Communications. Leah has more than 12 years of experience in the IT industry, with 10 years focused on heterogenecus intemetwork environments, including banking. retail, medical, government, manufacturing, corporate, sales, network service provider, telecommunications, and motile wireless networks, Lean also lds several otter Cisco Certficaions and is currently working on ner Service Provider CCIE. (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe das13) CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Dedications T would like to dedicate this publication to my family. Mum and Dad, tharks for loking after my house while T have been away in Spain. Don't worry: we will be coming back! Adela. you area fantastic mether to our wonderful chilies. ‘They ere so fertusate to have someone ss caring, as theughiful, and so willing to make sscriices as you are to call mu, James, you are one cool dude; it’s about time England won Wimbledon, and I'l be there cheering you on when you make itt Center Court. I also be the guy miles behind you when you swap your skis fora saowboard! Ana, what can I say? ‘We are all so proud you were chosen as a member ofthe Corte de Hlosor in Valencia 2008. Enjoy your yeas, and for us| ‘you will always be the Qasen, Blanc eres muy especial y tu Familia Inglesa te quiere muchisimo, siento que este libro ao sea muy interesante para th ‘Peto tus padres Puco y Eva lo puedea uilizar pera dormirtepronto—Un Beso, tio “Maen” Acknowledgments “This is my second opportnity to write for Cisco Press, o would lik to thank Bret Bartow for once spain provicing ine with this enviable opportnty. ‘To Maurto and Leah. who reviewed ths pblcation, I would like to say thanks forthe ime an experience you have put ino ths. You have shed my work, an I ell valve your contributions. Tie to hark my cunt manages, Dave Mack. Tam very esky to have you asa mangos; Dave. You lly helped me ths yea, for which Tam extemely grateful would also like to thank my previous manager. Nick Cooke. Nick, thanks forhaving fith and supporting my carer. You sil have some crits to seep, so est cll when you want to cash them in, just nots erly net time, please. ToPhil Geers Tike to say thanks for trying out sone ofthese questions and bringing me back ta reity when they nde fne-tining Tomy Tonos who ssheules the CCTE Asiossor sits, you relly earned your payshack when Tnceded access t the sit “Thanks very much and sony fr al hele aie equsts: this won't have ben posable withow yur help (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das14) CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Icons Used in This Book S aw Command Syntax Conventions “The conveations ised to present contmand syntak ia ths book ae the same conventions used i the 1OS Command Reference. The Command Reference dereribes thes conventions es flows © Boldface indicates commands and keywords that ere enteed literally as shown, In actus! configuration exsmples ‘and output (not general command syntax), boldface indicates commands that are manually input by the user (such as show command) 1 Tulics inicate argumenss fer which you supply aul values. Vertical bars() separate altemative, mutually exclasive elements. 18 Square brackets |] inicate optional elements Braces | | indicate a required choice. = Braces withia brackets [{ }] indicate a required choice within an optional element. ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme das1s) CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Introduction For more than 10 years, the CCIE program has isentified networking professionals withthe highest level of expertise. Fever than 3 peceat ofall Cisco certified profeescnalsacwaly achieve CCIE status. Th majority of candidate who take the exam fail atthe frst attempt because they are rot flly prepared. They generally find that their study plan did not rmatch what was expected of them inthe exam. This practice exam as been designed to bring you s close as possible to actually tang the feel lab exam. It can show you wheter you are ready to Schedule your la orf you must reevaluate ‘you sty plan Exam Overview ‘The CCIE qualification consists of 2exams, a 2-hoar, writen exam followed by an S-hovs, hands-on lab exam. Writen exams are computer-based, multiple-choice exams lasting ? hours and available at hundreds of authorized testing centers ‘worldwide. The written exam is desianed to test your theoretical knowledge to ensure that you are ready to take the lab exam. As such, you ae eligible to schedule the ab exam oly after you have passed the written exam. Because you have purchased his practice lab exam, it assumed that you have passed the writen exam and are ready to pracice forthe lab ‘exam. The lab exam is an 8-Hous, hands-on exam tit requtes you to coniigue series uf complex scenarios in stick accordance tothe questions. t's tough but achievable, Troubleshooting isan important skill, and candidates are expected to identify and sole ists as pat ofthe CCIE lah exam. Current lah hiseprint content information canbe fin a the following URL: hupisinw:cieco.com/wsb/learning/e/ssiees/ab_exam_blveprint html ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme das16) CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Scoring Point System In the eal exam, a higher numberof points offered for certain questions generally indicates that the required selution takes mors time to achove or thet multiple nes of configuration ae involved. This peace lab closely echoes the scoring system in place inthe eal exam. Ifyou find you are running shor‘ on time, try to get the smalle tasks completed and then return tothe more complex questicas. Study Roadmap Taking the lab exam i ll about experience. You can't expect to take it and pas after just completing your writen exam and by selying on your theoretical keowedge. You must spend countless hours of rack time configu features and leaning how protscotsintorect with one anothec. To be confident enough to schedule your exam, make sure you follow the guidelines ontined next Assessing Strengths Using the content blueprat, determine your experience and knowledge in the major topic areas. For areas of stength, [rocticing for speed should be your focus. For weak areas, you might need training or book study in addition to practice, Study Materials (Choose lab materials that provide configuration examples and take a hands-on approach. Look for materials that are approved or provided by Cisco and is Learning Parnes. (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das171 CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Hands-On Practice Build and practice lab scenario on a per topic basis Gi beyond the basies and practice addtional features. Learn the show and debug commands along with each topic. I protocol has multiple ways of configuring a feature, practice all of them, Cisco Documentation CD Make sure you can navignte the Cisco documentation CD with confidence because this isthe only resource you are allowed during the lab. Make the CD put of your regular study; ifyou are familiar with i, you can save time daring the ‘exam. As of March 2006, the documentation can be navigated using only the iad; the search function has beon disabled, Home Labs Although acquiring a personsl home lab is ideal, gathering all the equipment you need can be costly CCIE Assessor ‘You can access a practice lab on live Cisco equipment via s web interface, and it provides a portonslized performance sessment. This practice exam was created using the CCIE Assessor version B topology and is avaiable fer ovine rental in 4-hour slots. Ifyou do not have your ownequipment this isan excellent method of completing this practice lab. Load the initial configuration files supplied aod sun through the questions. Information on the Assessor can be found here: hutpvw-cisco.comweb/learning/le3ecie/preparation index. tm Ifyou plan (0 use the Assessor for this exercise, i is suggested you rua through the lb instructions price to beginning ‘your online ssicn to meximiize your time on the sit. ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme das18) CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Equipment List and lOS Requirements ‘The lab exam tests any feature that ca he configured oa the equpencat aad the IOS versions indicated ay follows: 13725 series routers - Cisco 10S Software Release 12.4 msnlin: Advanced Enterprise Services 13825 series routers - Cisco 10S Software Release 12.4 mainline: Advanced Enterprise Services 1 Catalyst 3550 series switches running Cisco 10S Software Release version 12.2: IP Services = Catalyst 3560 sores switches running Ciseo IOS Software Release version 12.2: Advanced IP Services ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme dasPrectice Lab NOTE lab mer loded with CARTS avemempe- tmz 25-0 hn the STI S-avemsmpeeh- tmz 24-6.in 19) CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Practice Lab Aim adhere tthe ume lic 8 hous on thsi on he intial ruhrough. Then iter sore yours a this pat or Contin ul yu fel yeu nce al te ejects You now te ging ob pide tong he spent ee tote and pea aks i preparon fring hs pte ed TThs lab was created using the official Cisco online CCIE R&S Assessor, version B topology. Detailed information on the Assessor cant he found on the following URL: hutp:sfvw:cisco.com/web/learning/e3/ecielpreparationasvessor_details. tl If you don't own six routers and four switches, the Assessor Iab can be used for this fab by loading the inital files supplied for this chapter in Appendix A. Equipment List ‘You need the following hardware and software components to commeace this practice lab 1m Six routers loaded with Cisco 10S Software Release 12.4 Advanced Enterprise image and the minimum interfuce configuration as documented i Table 1-1 Table 141 _Horchware Required per Router Rowtor Model Ethornst uF Soria UF RI 3825 1 1 Be as T Re 3s T 7 Re ms? = RS 3825 7 a 325 (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe dasPractice Lab Nore ‘TReCCE Asercr version Benne ab Youcan se al 3505 oF all 3560s if you chose, roa plans. insovionk.z EEnand he ‘wth 26e0pserecesio- (101 CIE Routing and Switching Practice Labs Matin James Duggan, CCE No. 7942 © One 3550 suitch with Cisco IOS Software release 12.2 IP Services and three 3560 switches with Ciseo TOS Software release 12.2 Advanced IP Services Setting Up the Lab Feal foe to use aay combination of routers as long as you fulfil the requizements within the topology diagram as shown in Figure 1-1. However, iis ecommended that you use the sume model of routers because this males life easier if you load configurations directly from those supplied into your own devices Access Configuration Appendixes Online Log in at www:ciscopress.com/account to guin access to copy/paste enabled versions ofthe configuration fies contained in he appendixes. A link tothe content willbe listed on your Account page under Registered Products, Lab Topology “This practice Ib uses the topology oulinedin Figure I-1, which you must e-reat with your own equipment o by simply using the CCTE Assessor 122008 ceo yetoms ne. Agnerecered Tie pubbaione protect LopyGht ees ete page Sr mae dea,iy CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Prectice Lab FIGURE 1-1 ano at Lab Topology Diagram Nore confguntins supplied that som: inrfaces do boceuse either you do ot tee that interac a you inert from dealt svt te exarcs, The sna ceaigaranons to procntigue your rowers and itches different itace spends than thoe wd within the leant iterficesto oop all itrace spoads ‘yu do tot gt unvaried betevor enue of ‘amering itor 2008 cisco systems, Alright reseried, This pubatens protected by copyright Plese so page Si fermere desiPrectice Lab NOTE TheCCIE Ares sor nse forthe ah ‘Adora cterfices ‘lable on the Asestor this lb lave beer mite rom Figure 1-1 you ar ex using Figue Fad Figure 1-40 determine ow topeoey. NOTE Swich 2is configuree ‘ston for VANS tnd VLANSG interface Fat, [2] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Switch Instructions Configure virual LAN (VLAN) ascigaments from the configurations supplied or from Table 1-2, with the exception of switch 2 Fa0/4 (this is configured during the lab) Table 1-2 VLAN Assignment VIAN Switeh 1 ‘Switch 2 Switch 3 ‘Switch 4 4 ROLROS — = Snes See questions | = = ROG See questions | = = oo 0 = = 20 0 = = 300 EP VLAN300___FaO/S, Fal6,UEVLAN30_UFVLAN30O UF VLAN3O0 ‘Coanest your switches with RI-45 Ethemet crossover cables, & shown in Figare 1-2 ©2008 cisco Systens ne. Alrights served. This pba is protect copyrgnt Pees see pagePrectice Lab FIGURE 1-2 ‘Swtch-o-Switeh Connectivity [13] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 eeegee peegg?e giggge gg22ee Frame Relay Instructions CCeafigue one of your rosters you ae gong to use inthe lb a a Frame Relay switch, or have a dedicated rou purely for this ask. This abuses a dedicated outer within the CCTE Assessce version B topology for the Fame Relay itch. A fully nested enviconnert is configured between all the Frame Relay routers, Pay attention ia the ab ato which perm teat vial ciruis (PVC) ar actally quired. Keep the encapsulation and Local Mangement Interface (LMM setings to default for this exewise, but experiment withthe stings ouside the las to enhance your Frame Relay knowledge. (©2008 cisco Systens ne. Al rights served. Tis pba is protec copyrgnt Pees see pagePrectice Lab FIGURE 1-3 Frame Rela Leics! Comectiviy [4] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 If you ae using your own equipment, keep the data circuit terminating equipment (DCE) cables atthe fame switch end for simplicity and provide a clock rate t (all inks fiom this end. Afier configuration, the Frame Relay connectivity represents the logical Frame Relay network, as shown in Figore 1-3 IP Address Instructions Inthe real CCIE lab, you find that the majority of your IP addiesses are preconfigured. For this exercise, you are required to configure your IP exlresses as shown in Figure 1-4 of lead the initial outer configurations supplied ia Appendix A. IF ‘you are manuslly configuring your equipment, be sure you includ the following loopback addresses: RI Lo0 120.001.1204 2 Lo0 120.002.1204 3 Lo0 120.1003.124 A Lo0 120.100.1024 5 Lo0 120.005.1204 (©2008 ceo systems Inc Alights sere ris pbtzatin is prtecteaby copyrght Peso see Faye St formic daisPrectice Lab 115] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 6 Lol (20006.124 SWI Lod 120.100.7124 2 Lod 129.100381104 SW3 Lo? 120.100.9124 Wa Lo 129.100.10.124 FIGURE 1-4 oinosaes IPAddressng vente Diagram 2008 cisco systems, Alright reseried, This pubatens protected by copyright Plese so page Si fermere desiPrectice Lab NOTE ‘Access ey ihe prec ing URL, nosthe who. becouse yeu are ort to se coc rests, Cosi opating oveal windows ley to feok ato sve time daring your ab [18] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Prelab Tasks Build the lab topology per Figure 1-1 and Figure 1-2. Configure your Frame Relay switch router to provide the aecesssry data-link connection identifiers (DLC per Figure 13. (Configure the IP addresses on each router as shown in Figure 1-4 and add the loopback adresses Alternaively, you can load the intial configuration files supplied in Appendix A if your router is compatible with those wed to create this exercise, RI requires a secondary IP address on its GigubitEtheract (1 interface for this lab, Details can be found on the accompanying initial configuration for RI in Appendix A. General Guidelines Prease read the whale lab hefore you start, Do not configure any staticldefaul routes unless othenwise specified, {Use only the DLCTs provided in the appropriate figures, Ensue full IP visibility between routers for ping tsting/Telnet access to your devices, with the exception of the switen loopback addresses, These re not visible o the majorty of your aetwork because ofthe configuration task, Ifyou find yourself runsing out of ime, choose questions that you are confident you can arswer. Failing this, choose questions with higher point rang to maximize your potential score, Get into a comfortable snd quiet environment where you can focus for the next 8 hours ‘Take a 30-minute break midway through the exercise. Have a Cisco Documentation CD-ROM availa, or access the latest documentation online from the following URL: swonw cisco. com/anivered/homelhome htm ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme dasPrectice Lab FIGURE 1-5 Lab Tepotogy Diagram U7) CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Practice Lab 1 ‘You will now be snsworiag questions in relation tothe astwork topology as shown in Figure LS, (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe dasPrectice Lab [18] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Section 1: LAN Switching and Frame Relay (28 Points) ‘= Configure your switches as a collagsed backbone network with switches | and 2 performing core andl distiibution functionality and switches 3 and 4 as acess switches in your topology. Switcher 3 and 1 should ecanest cay tothe core switches. (2 points) 1m Swvtches | and 2 should run spanaing toe in $02.1 mode: switches 3 and 4 should oparata in their default spanning-tree mode. (2 ports) 1 Configure switch 1 to be the root bridge apd switch 2 to be the secondary soot bridge for VLANs 1 and 300. 2 points) 1m Ensue that you fully utilize the avsilable bandwidth tetuoen switches by grouping your Iner. Switch Links (ISL) as tnunks. Ensure that only dotlq and EtherCkantel are supported. (3 pints) 1m Ensure that traffic is distibuted on individual Exhoonet trunks between switches based oa the destination MAC address of individual flows, 2 points) 1m Ensure that user interfaces ore shut down dynamically by al switches i they toggle excessively they remain stable for 35 second, they should be re-enabled. 3 points) 1m Fist Ethernet ports (/11-17 will be used for future connectivity en exch switch. Configure those ports as ascees ports for VLAN300, which should hepin forwarding trafic immediately on connection, Devices conected to these ports will dynamically receive IP addresses from a DHCP server, whichis due to be connected to port O/18 on si! in the future. For security purposes, this is the only port on tie network where DHCP addresses shoul be allocated irom, Ensue thatthe switches intercept the DHCP requests and add the ingress port, VLAN, and switch MAC address prior 0 sending on (othe DACP server, Limit DHCP requests 10 600 packets per minute per user port. (6 points) 1m For additional security, ensure that the user ports on switches 1-4 (Fast Ethemet ports (/11-17) can only communi- ste with the network with IP addresses gained from the DHCP feature configured previously. Use dynamic feawe te ensure thatthe only information forwarded upon connection is DHCP request packets and then eny traffic that ‘matches the DHCP TP information received from the DHCP binding for aetional secusity. (3 points) (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[19] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Prectice Lab 1m RS and RG have beea preconfigured with IP addresses on their Ethernet interfaces. Configure RA and its associated switch port accordingly without using secondary addressing to communicate with RS ard R6. Coniigure R$ with an [P address of 120.100.45.4/24 to communicate with RS, and configure R4 with an IP address of 120-100.45.424 to ‘communicate with R6, Conigure Re Gi0/l and switch 2 FEO only. (3 points) ‘© Your inital Frame Relay configuration has been supplied forthe R1-R2-R3 consectvity and R2-RS. Configure each device per Figure 1-6 to ensure that each device is reachable over the Frame Relay setwork Use only the indicated DLCWs. @ points) FIGURE 1-6 Frame tela, Be a ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme das[20] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Prectice Lab Section 2: IPv4 IGP Protocols (22 Points) In this seeiion, you will be answering questions about EIGRP, OSPF, and redistribution between these protocols Section 2.1: OSPF © Configure OSPF per Figure 1-7. Use a process ID of 1. Where possible, all Open Shortest Path Fist (OSPE) contig trations should sot be configured under the process ID. Do not change the preconfigured interface types where applicable. Configure the loopback interfaces of routers RI, R2, and R3 fo be in area O, Ré in area 34, and RS in area 5. (2 points) FIGURE 1-7 (OSPF Tepalogy one a ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme dasPrectice Lab ay CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 1m No loopback networks should be advertised as host routes. 1 poiat) 1m Ensure that RI does not advertise the preconfigured secondary aclress under interface Gigabit DVI of 120,100.100.1/24 to the OSPF network. Do not use any filtering techniques to achieve this. (2 points) 1&5 should use the Frame Relay ink within area 5 for its primary communication to the OSPF retwork. If this network should fil ether at Layer | or Layer 2, RS should form neighbor relationship with R4 under area St ‘maintain comeciviy. Your solution should be dynamic, ensuring that while the area 5 frame relay link is opera- tional, no neighbor relationship exists between R4 and RS. However, the Ethemnetinterfuces of R4 and RS must remain up. To confirm the operational status of the Frame Relay network, you should ensure that the serial interface of RS is reachable by configuration of RS. You are permitted o define neighbor statements between RS and RA. (points) Section 2.2: EIGRP = Configure Eshanced Interior Gateway Routing Protocol (EIGRP) per Figure 1-8 using an AS number of 1. The loop- back interfaces ofall routers and switchos should be advertised withia EIGRD. (2 points) 1m Ensure that R4 does not install any ofthe EIGRP loopback routes from any of the switches inte its routing table. Ax such, these routes should also ot be presoat in the OSPF network post redisrbatioa. Do not use aay soute-fikering avcess control lists (ACL), prefix lists, or admin distance manipulation to achieve this, and perform coafigaration only on RA. ( points) © 4 will have dusl equal-cas roates to VLAN300 (network 150.1003) From RS and RS. Fnsure that R4 sends tuufic to this destination network to RS rather than load sharing. Should the route from RS become unavailable, trafic should be sent toR6. Do not policy route, alter the bandwidth or delay statements on RA's interfaces, or use an ofiet list, Perform your configuration on R4 osly. Your solution should be applied to all routes received from RS and R6 as opposed to solely tothe route to network VLAN3OD. (3 points) (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe das[22] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Prectice Lab FIGURE 1-8 EIGRP Topology Section 2.3: Redistribution 1m Perform mutual redistribution of IGP protccols on Rd, All routes should be sccessible with the exception of the switch loopback networks because these should net be visible vie R4 as aoted in an easier question. EIGRP routes redistributed within the OSPF network should remain with a fixed cost of S00 throughout the network. (3 points) © Configure R4 to distribute up to only five EIGRP routes and to generate a system waming when the fourth route is redistibuted. Do not use any access lists in your sation. (2 points) (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[23] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Prectice Lab FIGURE 1-9 BGP Tenclogy © Configure Internal Border Gateway Protocol (BGP) peering as follows: RI-R3,R2R3, RRS, Swl-R6, SwL-RS. Use minimal configuration and use loopback interfaces foe your peering. Configure External Border Gateway Protocol (eBGP) peering as follows: R3-R4, RA-RS, RALRS, RS-R2. Use minim! configuration and use loophack interfaces for your peering with the exception of RA to RS. Use the AS umers supplied in Figure 1-9. (2 points) 1m AS200 is to he used as s backup transit network for traffic herween AS100 snd AS300, As such, ifthe Frame Relay network between RS and R2 fails, ensure thatthe peesing between R2 and RS is not maintained via the Ethernet network. Do not use any ACL-type restrictions or change the existing peering. (2 points) ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme das[a4] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Prectice Lab © Configure a aew loopback interface 2 on R2 of 130.100.200.1/24 and advertise this into Border Gateway Protocol (BGP) using the network command. Configure R2 in such a way that if te Frame Relay connection between R2 and RS fails, AS300 no longer receives this route. Do not ase any filtering between neighbors or neighborspecitic commands to achieve this. @ points) © Configure Hot Standby Router Protocol (HSRP) between RS and R6 on VLANS00 with RS the active for 1/24. I te network 130.100200.0/24 is no longer visible to AS300, R6 should dynamically become the HSRP acive. Configure RS to achieve this solution. point) 1 Configure two new loopback imerfuces on R | and R2 of 126..1.1/24 and 130.1.1.1/24, respectively, and advertise these inte BGP using the network command, R3 should be configured to allow only BGP routes originated from RI ‘up to.network 128,00,0 and from above nctwork 1281.0.9 oly those originated from R2. Use only a single ACL on 3 as pat of your solution. (3 poss) Section 4: IPv6 (14 Points) 1 Configure IP addrsses on your sotwork as follows 2007:C15:C0:10:464—RI GOV 2007:C15:C0:1 1s I64—RI SOMO 2007:C15:C0:11:2I64—R2 SOMO 2007:C15:C0:11v64—R3 SOMO 2007-C15.C0:12-2464RO FEO 2007.C15.00.14.2464—R2 80” 2007:C1S:C0:145%64—RS SOM 2OO7:C1S:C0:1S:8164—R3 Gian ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme das[25] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Prectice Lab 2007:C15.Co:1S 4/64—RA Gio! 2007: C15:CH:16:64—RS GioMt 2007.C1S.CH.16 6/61—R6 Gio“ FIGURE 1-10 IPv8 Topology Section 4.1: RIPng = Configure Routing Information Protocol next generation (RIPng), ensuring that your IPv6 routes age visible through. out your RIPng domain. Do not disable spli-horizoa. (3 points) 2008 cisco Systems, Alright resend, This pubatens protected by copyright Peso ss page Skt ermere desiPrectice Lab [26] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Section 4.2: OSPFv3 © Configuse OSPF V3 with a process ID of 1 and with all OSPFinterfaces assigned tates 0. (2 points) 1m The IPv6 newwork is deemed to be stable. As sich, reduce the number of ink-sste advertisements (LSA) flooded ‘within the OSPF domain. (2 points) Section 4.3: Redistribution 1m Resdistribate RIPag routes into the OSPEV3 demand (one way). RIP routes should have a fixed cost of S000 associ- ‘aed to them within the OSPF network. (1 poist) 1m Ensue thatthe OSPEV3 network is reachable irom the RIP network by a single coms of 200716, which showed be seen within the RIP domain. Configure RS only to actieve ths. The OSPF domain should continue to receive specific RIPog subnets. (2 poinis) 1m Ifthe serial link fils between the OSPF and RIPng domains, ensre that rotting is still possible between RS and R4 over VLAN4S. Do not enable RIP on the VLANAS interfaces of Rd and RS. Configure R4 and RS to achieve this, and this should te considered an alternative path only in the event ofa failure. (3 pcints) 1m Ensure that the summary route configured previously is not seen back on the routing table of RS. Configuee oaly RS toachieve ths. (I point) (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasLr CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Prectice Lab Section 5: QoS (8 Points) = You ae required to configure quality of serviee (QoS) on switch 1 acconding tothe Cisco QoS baseline model CCroata a Modular QoS configuration tht facilitatos the following requisemeats forall user ports (Fast Ethernet 1-24) G points: 1. Allport should trust the Differentiated Services Code Point (DSCP) values received fom their connecting devices, 2. Packets received from the user ports with DSCP values of 10, 16, 24, 28, 32, 4,46, aad 48 should bo romarked to DSCP 8 Per Hop Behavior (PHB CS1) in the event of trac flowing above S Mbps on a per port basis. This traffic could bea combination of any ofthe earlier DSCP values with aay source/destination combination. Ensure that a minimum burst value is configured above the 5 Maps. © Switch 1 will be connected to a new trusted demain inthe future using isteriace Gigabi: O/|. A DSCP value of ARA3 received locslly on sw! should be mapped to AF42 when desined forthe new domain. 2 points) ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme das[23] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Prectice Lab 1& Configure Cisco Modular QoS into classes as follows on Ri forthe following traffic types based on their esocated HB. Incorporate these into an overall policy that should be applied to the TI interface SOMO, Assume a permanent virtual circu (PVO) of line rate on the Frame Relay network and allow each class the effective bandwidth as detailed 3 points) Chess PHB, ‘Assigned Speed Rowing sé 4 kbps Vor EF 247 hops Ineracve Video ‘AFIT 247 Kops ‘Mision Critical Daa ABL 247 Kops CallSignaing | cst 2 Kips “Teanectioml Data API 216 ope Newoie mart Ripe Dak Daw ‘AFIT 7 ps Scavenger ci 15 pe Default ° 336 hops ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme das[29] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Prectice Lab ‘© Configure R3 to identify and discard the fellowing custom virus, The virus is characterized by the ASCII characters “Hastings_Beor” within the payload and uilizes User Datagrem Protocol (UDP) ports 11664 to 11866, Tho ID of the virus begins on the third character of the payload. The virus criginated on VLAN34. (3 points) 1m An infected hostis on VLAN200 of 150.100,2.100. Eastre that coly within BGP AS10, trafic destined for this host is directed to Nuil0 ofeach local eater, Yeu cannot use any ACLs to block traffic to this st specifically, but you can use a static route pointiag to NallO for traffic destined to 1920.20 /24 on reuters within ASIO. R2 can have an ditional static route pointing to Null0, Use a BGP feature on R2 to ensure that traffic to this source is blocked. Prevent unnecessary replies when traffic is passed to the Nulld inerfice for users residing om VLANIOO. G points) Section 7: Multicast (6 Points) 1 Configure souters RI, R2, R3, end RA for IPvé Multicast. Configure R3 1 send multicast advetisements of is ova time by wse of Network Time Protecol (NTP) sourced from interface Gig 0, Configure Protocol Independent ‘Mulicast (PIM) spare rode onal required interfaces, R3 should also be used to adverse its oun Gigabit interface P adliress as a rendevous point (RP). R3 should also advertise the IP address you are using forthe NTP adverse ‘ments, which is to be 224.0 1.1. De not use the command nip server in any configurations. Routers RL, R2, and R& should all show a clock synchronized to that of RS. 5 points) (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe dasPrectice Lab NOTE ‘les to sompletethe «quest. Inthe real does notent ints ans dlscassions egarcing he questens erasers He ensure tat yu do net have prostens wi te lenent of the exam. [30] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 “Ask the Proctor” Section 1: LAN Switching and Frame Relay (Q: Do you want me to configurethe collapsed backbone network by manipulating spanning tre to ensure that wich J and swith 2 are the cores foreach VLAN in use? A: You are requested to configure root bridges in a laze question. (Q: All the switches are alteady connected, so can't change this unless I shutdown seme of the connections between switches, Bhs acepable? ALYes (Q: Would you lke me to VLAN loadalance to utilize bandwih? ‘A: No. the question directs you how to ase the trunks. (Q: Would you like me configure witch I to alloste DHCP aldreeres? ‘A: No, the question slats toa fettious DHCP server tht would be consected to Fa0/8on svt L (Q; Can [manipulate helperadctess function to answer the DHCP question by wring ACLs? ‘A: No, we a recognized DHCP security-related solution. Q:Can Feonfigue port curity to bind my MAC addresses? A:No, ue a feate hat compliments your DHCP sation Can Tost configure BA to tule to switch? ard have «subinterface in both VLANAS end LANA? Ayes (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasPrectice Lab By CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Q: Te configured my trunk on switch 2 to RA, and Tean' ping between Ré and RS. Similarly. can't ping between R& and RB. B there anything else T need 10 do? ‘A: Remember, th svitches are in VLAN Trunking Protocol (VTP) Transpareat mode. You might wan to check that switch 2 has the required VLANs contiguied 1» erable propagator within your switched network, (Q: My Frame Relay network picks up the DLCIs automaticaly. Is this okay? A: No, you need o ensure that you do net use aditional DLCIsetherthan thse specified (0: So, do you want ne to manually map tothe DLC I should be using?” AGYou Section 2: IPv4 IGP Protocols In this section, you will bs answering questions abcut EIGRP, OSPF, and redistribution botwoon these protocols Section 2.1: OSPF (Q: Tam asedto configuring OSPF under the process. Surely this the only place I can configure the parameters? ‘A: Recent advances in OSPF allow you tn configure it purely under specie areas ofthe routes, rather ike with IPr6, Takea Teok at the commands available to you ude the ineraces (Q: My neighbor relationship is down over the Frame Relay netwerk. [notice Ihave different OSPF nework types preconfigured. Can Tchange these? ‘A: No, we an alemative method of binging the imterface parameters back int lise. (Q: My secondary addres is edvectised automatically under OSPF Can T use a distribute lito prefistype Hist 0 Book it? A:No, mse an OSPE fears to dial the advertiement of ths secondary address 2008 cisco systems, Alright reseried, This pubatens protected by copyright Plese so page Si fermere desiPrectice Lab [32] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 (Q:Tve tempted to fort a neighbor relionship with Rd from RS using a backup interface. Is this okay? ‘A: No. the question stats that yeur solution should eater for either Laver I or Layer? failures and tha the Fibemet should remain up. Backap interfaces would be fine for aLayerLfilare, but aot foraLayer? type issue. If you hve problems with specific DLCls that cause neighbor fallures over he Frame Relay: this Feacure also ensures tha the Ethernet nawerk is down until the backap interlace is activated (Q: How about heving an OSPF demand circuit baween R4 and RS? A:No, this vould involve a mejahbor relationship being mainained. You needto allow the neighbor relaticnship to be formed nly inthe eve of alive contin, (0: Can tse BED baween 4 and RS? [A:No, this might ain failure cetction butt dhes not meet the objectives ofthe quetin (Q: To confim the operation status of RSs serial teface, can just ping? ‘A: You can we Internet Contol Messe Proiccol (ICMP) bt you need to ensure tha Your solution is dyaamc. (Q: My Foams Rely i up om RS, and I can ping soroe ito RO from RS. But cat ping my own Frame Relay intefse, this noomal? A: You eoform a debug of the Fame Rely packets if you nce ta, Remember what you teed to gain conmwetvity on a Frame Relay network (0:11 use IP serve level agreement (SLA) 6 automatically ping RSto check the status then is tis okay? AGYeu (Q: Chay. Ihave IP SLA sunning, butT'm stuck 1s cis anything o do with uacking the response w Ue ping? ALYes (Q: How about if use policy outing withthe next hop based on the tacking status? Ar This fine, Jas rember that this trafic is based locally onthe router when applying any policies 2008 cisco systems, Alright resend, This pubaten spotted by copyright Plesoe cs page Si ermere desi[33] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Prectice Lab Q:T've worked out how to do this and managed 1 get a neigtbor up when the Frame Relay fails, but my OSPF connectivity is all ot petfect through the EthemetIs this roel? A: Notifyou have configured correlly. Take lok at your pology and areas; something might have changed wien RS ‘onrects ver the Ethernet. Section 2.2: EIGRP (Q: 1 adverise my loopoachs imo EIGRP, won't tha: mean that 4 wn RS have thls loepbacks advetised by both OSPF and FIGRP? [A: Yes, this sin ad inn ecconlnce with he question (0: To stp R4 fom meving the swich loopbacts, can Tstop advertising them from the switches [A:No, you should wie afeatare on Rt to block hem (Q:Can Tse a neighior prefix lit o block the lepbacks? A:No, you cannot ue ary type of ACL or pref iss (0: Te noticed when [Tooke tthe specific Inopack totes that they ve a op count associated with them. Is uns to ‘ssaciatehop comnts with EIGRE. bu cat I blockrowes based on thee hop count” ALYes (Q: 1 cont charge the Handwicth apd delay om RA, can T gee a route map to manipulite tie “EIGRP K” alee actocntedon {per neighbor basis? aes 2008 cisco Systems, Alright resend, This pubatens protected by copyright Peso ss page Skt ermere desiPrectice Lab [34] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Section 2.3: Redistribution (Q: Dos yo reste ists lit to black the switch lnoghacks from enteing the OSPF domain? A: No, you should hie Mlcked thes frum encting your IP rowing table within R¢ previously, se adlional Mocking should rot he reared. Q: Thave only one reisvibuion pitt. As such, Frcap no bevefit in cecating Sltering We petcet assis potmtialrutig Lops hetmeen protocols. Is this acceptable? A: Yor, ia thie reomaio filtering woul he superflow :Can Tusea rute map o allow fie specific EIGRP rowtes to be redistibutd isto OSPF? ‘A: No, the question does't guide you to redistribute specific routes: se a mere general methed of allowing aspecifc number wh retee Section 3: BGP QB it chay to disable antosynchronizaton ia BOP? A: You must determine wheter you aed this festure on or off, Remember that you stould have synchronization cn only when you are fly redstibuing between DGP and your ICP (Q: 1nd that when the Fame Relay sewwork fails, my neightor relationship stil mained between R2 and RS. This is ecanse the oothack routes are all available over the alternative path through the network. Can Tock my Teaphacks or policy route at rome point t effectively break the peering? A: You medio effectively break the peering. but you san ase a fr simpler method to achieving this, one that sill mates tnalered comminicatios between R2 and RS, Think abott what you need to configure when jou have eBGP peer. (Q: might have ena litle generous wih my oviginal multi-hop value between R2 and RS. Tcanbreak the peering if reduce this down toa Time To Live (TTL) of 2 = this oéay? AlYes (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasPrectice Lab 135] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 (Q: thin can stop the Joogback on R2 being acvertsedby aring the commanity vale of no-expot but Tenable this te R2, ‘wouldn't make tt RS even when the Prame Relay i working” ‘A: Iiwoaldst be adventsed o RS AS300 from R2. You jst lave to thnk abeut whether R2 isthe best place to send the commu nity 0 erga (Q: For the HSRP question, is this some fom of endtional advertising? [A:No, the ete i inthe quiton: jus find away of tacking the BGP rue and manipulate the HSRP process (0: So ifTemble IP SLA to tacka rutin the retire table, Lean use thst contol HSRP? aes. (Q: You haven't old me what addess I should use for HSRP. Is it okay 0 use he frstadees in the stbnes? anes (Q: Thave configured my two new loophacks.Can I use two route mas inbound from RI and R2 both pointing to different ACLs sothateach reute maponly calls ene ACL? A:No, you lll have two ACL. (Q:Can [set community values on the routes ane! math en these wsing a single ACL? ‘A: No, you ae instructed to use en ACL: your solutin would require addtional confisuration (Q: Can Tose a prefs ist to achieve tix? A: you ate instructed to wse an ACL, (Q; So, Lneod an ACL with a mask that is suitable forth ranges? A: Not nscessaily You omly need to match one sequizement on th permit furetioniys the other could be met by deny. 2008 cisco systems, Alright reseried, This pubatens protected by copyright Plese so page Si fermere desiPrectice Lab [36] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Section 4: IPv6 (2: Shoull Take the ult ales forma when configuring my addres? [A:Noyif thee were required, you would have hesninstrctd to dos inthe question. (Q:T've configured my IPv6 addresses and created a Frame Relay map forthese on my existing DLCs, but ill cant ping seross the Fame Rely rework. Shu be able to? A: Yes, if you debug your Frame Rely tai, yeu find you need addtional configuration Q:Thave configured RIPyg between RI, R2,andR3.R3 receives both spoke routes, but RI does not see the R2 IFV6 route and ‘ee Vera If thi is splithorizonbehavice and I can't dstble it, can Lereatesubierfaces on my Frame Relay network?” ‘A: No, ute a feature that is common when sunning IPV6 over [Pv networks (Q;Socan Feuntel between RI and R2? ALYes (Q: You we not raqucting mutual redistibution between RIPng ard OSPF 3, How cas my RlPog domain communicate wih the OSPF¥3 domain? A: This nate i dence inthe Fallwing tak (QT cant ane RIPug diclly cx VLANS hetmocn RS and RS, cats Tccnfigure OSPF on VLANSS? ‘A: No find «way tostill un RIPng between routers without enabling it cathe physical teraces Q:So,can Teunme between R4 and RS? ALYes 2008 cisco systems, Alright resend, This pubaten spotted by copyright Plesoe cs page Si ermere desiPrectice Lab (7) CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Section 4.3: Redistribution Q:Thave restated RIPng inio OPSFV3 o9 RS, which the only evtaleInction, and noticed that Thave noticed ia my (OSPF3 domain donot se the [Pv6 network configured on the Fane Relay network between R2 ard RS. Isthis okey? A:No, this netwnkshosld e acverisedto the GPSF+3 domain, Use fete within the OPSF ‘vercome tha if this were IP redsibaion (0: Can [redistribute a static IPv6 route on RS into RIPng for 2007/16? A:No static routes ae petted unless specified What woul yeu do if thc were IPod? races as you wold to (Q:111 cat enable RIPng on VLAN betwcen Ré and BS, ca Lenible OSFFV3? ‘A: No, this would also require you to perform redstrbution at this pomt. (Q: How about tunneling again and enabling RIPng over the tunel, i this kay? AlYes (0: Thave created my tunel and found that this is now the primary route ahr than an altsnaive path. Can T perform some nd of backup interface to makethis come up only inthe event ofa hilure onthe Frame Rely? A: No. you haven’ been given sufficient infomation to make ths jdzment. This approach would als break your Pvt network. Think why the Ethernet path is prefered and manipulate i (Q; Can Tuse a prefs list to Hock the summary and permit all other IP routes? As Yes thi fine 2008 cisco Systems, Alright resend, This pubatens protected by copyright Peso ss page Skt ermere desi[33] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Prectice Lab Section 5: QoS (2: Can Ljuattnnt DSCP on my physical pore? [A:No, this should be completed as part of your policy. (Q: Shall a-tinit my ports to SM on aperportbasis? [A:No, this ould be completed spt of your policy. (0: You haven't indicated wha the minimum burs size should be. 1 hs comet? [As Yes, jst ee the evailbl iis within the command options (Q:Tbelieve can use a DSCP mutation map © conve the DSCP values forthe future bu the command won' take the values ARS an ARI" A: No, itwon't because these ae Assured Fowatling Valles. You need to conven these to DSCP values. Seach your Docameataton CD cr aailale Cisco.com ruses (Q: Tam wying to assign handwidh within my cles withthe spools stpplid, but cas see only a percentage option. Ie this A: Yee, you'll nen to do some math, You are supplied withthe informatin you rite ar jac ned to remember how fat TL ine ie Section 6: Security (Q; Can Tuse a rte map and ACLs to identify the trafic by port aumer! A:No, this would identify the Usidizsetinnal Link Detection (UBL) trafic but mt the vi payload at por the qrestion Investigate the onions open fo you with Network-Baved Application Reccgniion (NBAR). (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[39] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Prectice Lab Q:Can Ipoliy route trafic destined to the infected host o NallO? A:No, you teed o use a BGP related feature (Q:A stale route for 12.02.0204 won't have any bearing on talic destined to the infested host. Why isthe elevent? ‘A: Think about the way BGP works. I's the only rowing protocol where you don't need tobe directly comected to form a rcighhorreationahip- Ac sach, you tansport nex-hop infrmaion seh your pests Section 7: Multicast (Q: 1 cant configure ntp erver on R1,R2, and RU, have no way to ge these mer to peer with RB. Te this core? ‘Ar Yes, you don’ ned to specifically pest with RS asthe server. You shoul sim t seve the INTP steam that RS is somfigured to mint Do you want me fo crate and announce the group 2240.11 on RS? Ayes ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme dasPrectice Lab [40] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab Debrief ‘The lab debrief soction now analyz0s cach question, showing you what was required and how to achiove the desired resilts You should use this section to produce an overall scone For this practice lab, Section 1: LAN Switching and Frame Relay (28 Points) 1 Configure your switshes ca collapsed backbone network with evitches | and 2 performing core a disibation functionality and switches 3and 4 a access switches in your topology. Switches 3 and 4 sould ccnnet caly tothe core switches. 2 points) This isa simp siat tothe exercise."The switches are fully meshed to begin with. To create a collapsed backbone topel- ogy the core switches should be conaected together, and each access itch soukd be dual homed to the core switees. ‘The only switches that should nct connect dirocdy to cach other ars tho access switchs (Sw3 and Sw), By shutting down the interfaces between Sw and Sw, you create the required topology. If you have configured this eceectly as shown in Example I-I, you have sceced 2 points. Even though the resalting topalogy is not looped st this stage you can verify coute bridge ascigoment by using the show spanning tree root command. Example 1-1 Sw3 and sw4 Configuration ‘na(contagy# interrace range 012( contig. sf rarge)e shut u4(contigh# interface range fastétnernet 0)23.26 a( contig-if-rarge)# shut ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme dasPrectice Lab iy CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 1m Switches | and 2 should run spanning tee in $02.lw mode; switches 3 and 4 should operate in their default spanning-tree mode. (2 ports) 802.1 is rapid spanning tee. This is backward compatible with the switches’ default (PST), so by configuring switches Land 2 into rapid spansing-tree mode, spanning te still operates effectively with switches 3 and 4, I'you have configared this coractly, as shown ia Example 1-2, you have 2 eamed anether 2 poict. Example 1-2 _ Sw1 and Sw2 Configuration H1(config}# spanning-tree mode rapid-prst Ha(contig)# spanning tree mode rapié-pyst 1& Configure switch Ito be the rot bridge and switch to be the secondary root bridge for VLANs 1 and 200. (2 poins) A straightforward question forthe core switches. Ifyou have configured this correctly, as shown in Example 1 have 2poiats Example 1-2 Swt and Sw? Rost Bridge Configuration ‘31 (contig}# spasning-troe wlan 1 root pedaary 11(config}# spasning-tree vlan 380 root prinary ne(contigh# spanning-tree vlan 4 ondary 12(confio}# spanning-tree vlan 380 root sezonéary © Nake sure that you fully utilize the avilable bandwidth between switches by grouping your Inter-Switch Links (SL) as trunks. Ensure that only dotlq and EtherChannel are supported. (3 points) (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe dasPrectice Lab [2] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Another staightforwerd question forall switches to create EtherChamnels between devices. Using the command channel- group n mode on under the physical interfaces ensures that only EtherChannel is supported, as cpposed to Fort Agaregation Protocol (PAGP) or Link Aggregation Control Proiocel (LAC?) and dotiq isthe trunking protecol. For Layer 2 EihesChannels, you don't have to cea port-channelinvrTace frst by using the uterface ‘command before sssigning a physical pot toa channel group. You can use the cho itchannnel configucaion erface configuration coup command, which autcmatically creates the port-shaane interface, although a manual port channel coafiguration has heen shown here for clarity, IF you have configured this correctly, as shown in Example 1-4, you have scored 3 points. Example 1-4 _ Switches 1, 2,3, and 4 EtherChannel Configuration ‘1(contig)# interface Port-channelt ‘watehport trunk encspeulation dotiq mi contag-ar)e O11( contig sf# 9H1(contig- iti 941(contig-ifi# 1 contig-ate ou contig- sft SHC contig-ifi# 9H1(contig-if)# 9H1(contig-if)# (contag-ar)e S11(contig-sf# 9H1(contig-if# 41(contig-ifi# 41(contig-if# interface Port-channel2 foritchport trunk encepeulation dotiq swatchpert node ‘witehport trunk encapsulation dotia switchpert node interface range fenanned-greup 1 chamel-greup 2 interface range chamel-greup 3 ‘unk FestEthernet0/ 19. S12(contio}# interface Port-ehannelt 912{contig-if}# ewitchport trunk encepsulation dotiq 12(config-if}# ewitehport mode trunk ‘2{contag-a)# antertace Fort-channel2 O12( config. Sf)# ewitenport trunk enespeulation dotig (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasPrectice Lab Example 1-4 143] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Switches 1, 2,3, and 4 EtherChannel Configuration _covineed 912{contig-ite 912{contig-if# 912{contig-if)# o1a(contig- if) 12(config-ifi# 912{contig-if)# 912{contig-if)# e(contag-ar)e o1a( contig sf# 912{contig-ifi# ‘wtchpert node trunk interface Port-channel3 fwitehport trunk encepeulation dotiq interface range FustEtherne chamel-greup 1 wede on interface range FustEtherne cname1-greup 2 sede on chamel-greup 3 wede on 130-20 21-22 o¥a(contigy# interface Port-channelt S13(contig-ifi# 913(contig-if)# 915(contig-if)# s(conrag-ar)e 012( contig sf) 913(confio-ifie 915(contig-if)# 915(contig-if)# ona( contig ft switehport trunk encapsulation dotia stchpert node trunk interface Port-channel2 foratenport trunk encepeulation dotiq interface range FustEthernet0/19-20 chamel-greup 1 wede on interface range FustEthernet0/21-22 14( contigh# interface Port-channelt a( contig-it)# 4( contig-ite Oa( contig sf)# a( contig-itit cwitehport trunk encepeulation dotiq swatchpert ode trunk sotchpert trunk encepsulation dotiq ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme dasPrectice Lab [44] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Example 1-4 _ Switches 1, 2.3, and 4 EtherChannel Configuration conned (4(config-if)# ewitchport mode trunk 14(config-if}# interface range FestEtherne 14(config-if}# chamel-group 1 wade on Ova config-if)# interface range FeetEtherne i4(confio-ifi# chamel-oreup ? wade on ‘show antertaces port-shamnel 1 status Port Mame status Van Pot connected trunk 1 show interfaces port-zhamnel 2 status Port Mame Status Vian oe connected trunk SF show interfaces port-zhamnel 3 status Poo connected trunk SS show etherchancel sunsary Nusber of chamel-groupe in use: 8 uber of agaregstors: a Duptoe aul Durtax all aul Spaed Tyre ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme dasPrectice Lab 145] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Example 1-4 _ Switches 1, 2.3, and 4 EtherChannel Configuration _covsined + Pow(su) Fx0/10(P) Fa0)20(°) 2 Pea(su) Fx9/21(P) Fa0/22(°) 2 Peo(aU) F00/29(P) Fasi2a(r) 928 show interfaces port-zhamnel 1 status Pot connected trunk a-full 28 show interfaces port-zhamnel 2 status Poo connected trunk a-full 128 show interfaces port-zhamnel 3 status Pore name status ian uptox 42# show etherchaneel sunsary Nunber of chamel-groupe in use: 8 ecup Port-chanrol Protocol Porte + Posy) Fx0/70(P) Fa0)20(°) 2 pee(au) Fs0/2(P)Fa0)22(°) 8 Pos(su) Fx0/23(P) Fa0/24(°) 2008 cisco Systems, Alright resend, This pubatens protected by copyright Peso ss page Skt ermere desiPrectice Lab [48] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Example 1-4 _ Switches 1, 2.3, and 4 EtherChannel Configuration conned 94GE show interface port-channel 1 status Port Mame Status Vian Duylax_Spned Tyo Pot connected trunk a-full S4GE show interface port-channel 2 status Poe connected trunk a-full H2# show etherchaneel sunsary uber of egareastors: 2 Gecup Port-chanrol Protocol Porte + Poueu) Fs0/10(°) 2 Poesy) Fx9/21(P) Port Mame Status Vian uplox _sp26d Type Pot connected trunk a-full ‘91a show interface port-chanrel 2 status (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasPrectice Lab 7) CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Example 1-4 _ Switches 1, 2.3, and 4 EtherChannel Configuration _caviined Port Mame status Vian Tye Poe fonnecte trunk Nunber of chamel-graus in usa: 2 Nunber of agaregstors: 2 Sorcup Port-chanpol Fretosol Porte 4 Posy) Fx0/10(P) 2 Poesy) Fx9/21(P) 1m Ensure that traffic is distibuted on individual Exhcenet trunks between switches based oa the destination MAC adress of individual ows. 2 points) ‘A commos problem with EtherChamnels is traffic ant being distributed equally among the physical interfaces. ‘Configuring chanael load balancing based on the destication MAC adiress ofan individual flow is jast ane method avail- able to distribute trafic. If you have configured this comecty, as shown in Example 1-5, you have scored 2 points. Example 1-5 _ Switches 4, 2,3, and 4 EtherChannal Load Balancing Configuration (01 (contig}# port-chanmel 912{config}# port-channel 1oad-balance dst-nac 13(contigy# port-ctannel 1oad-batance dst-nae ‘4( contig}# port-channel load-balance dst-nac ‘1 show etherenantel Load-belance ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme dasPrectice Lab [43] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Example 1-5 _ Switches 1, 2.3, and 4 EtherChannel Load Balancing Configuration _covined Ethorhanrel Losd-Balancing Opsrationel Stats (dst mc) Non-IP: Destination ING addrese Pvt: Destination IAC address 1m Ensure that user interfaces ere shut down dynamically by all switches ifthey toggle excessively. [they remain stable for 35 second, they should be re-enabled. 3 points) Tnerfices that lap can cause preblems in network, Toggling would usually indicate a problem such as a faulty connecte ing notwork interface cand (NIC) or faulty cable. Placing the ports into errr disable i a method of stablizing the eavi- ronment. Ifyou have configured this comectly, ss shown in Example 1-6, you have scored 3 points Example 1-6 _ Switches 1, 2,3, and 4 Configuration ‘(config)# erréLeable recovery caure Link-flap OUI(config}# erréieable recovery interval 35 S12(confio}# srréisable recovery saute Link-flap 9H2(config}# #rréieable recovery interval. 35 oua(contag)e srreteabLe recovery saute Link-tuep [42(configh# errdieable recovery interval 95 i4(config)# srréisabLe recovery saute Link-flep la(config}# srréeable recovery interval 3 ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme dasPrectice Lab [49] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 1m Fist Ethernet ports (/11-17 will be used for future connectivity en esch switch. Configure these pets as ascess ports for VLAN300, which sbould begin forwarding trafic immediately on coanertion. Devices conected to these ports will dynamically receive IP addresses from a DHCP server which is due to be connected to por: O/18 on sw! in the future, For security purposes, this is the only port on the network from which DHCP addresses should be allocated Ensue thatthe switches intercept the DHCP requests and acs the ingress port, VLAN, and switch MAC addresses prior co sending on (othe DACP server, Limit DHCP requests 10 600 packets per minute per user port. (6 points) ‘This isa DHCP siooping question, concerning a very useful security feature that protects the network ftom rogue DHCP servers. When the DECP Opzion 82 feature is enabled on the switch with the command ip dep snoopin ‘oplion, a subseriter is identified by the switch port through which it connects to the aetwork and by its MAC addres. DECP sncoping sso facilitates «rate-limiting feature for DHCP requests to prevent a DHCP denial of services (DoS) by excessive false requests froma host that would have the “gobbler effect” of requesting numerous leases from the same port. The guostion includes « couple of points that could easily be overlooked if you are suffering from exam pressare Namely. the ports are actully required to be configured with the command switelpport host (or by configuring portfast) to set the port mode to access and to forwacd immediately and the rate limiting is configured in packets per second, not per minute, as implied. So, you need to pay attention to detail. Ifyou have configared this carectly, as shown in Example 1-7, you have scored 6 points Example 1.7 Switshoo 1, 2,3, and 4 DHCP Snooping Configuration OHi(contigh® ip anep emvoping Hi(confio}# Lp éhep smeoping vax 3 H1(contig}# ip dep sneoping infornetion option H1(config)# int fastEtnernet 0/18 Hi(contig-tf)8 4p dhep snooping trust S(config}# intarface range SHI(config-if-rarge}# ip dhop snocping init rate 10 SUi(config}# interface range fastéthernet 0/11-18 H1(contig-af-rarge}F snitenport tost O41( config if rarge)t enitenport cecere vlan 909 (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe dasPrectice Lab [50] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Example 1-7 Switches 1,2, 3, and 4 DHCP Snooping Configuration _covsinud ‘12{contig}# ip éhep sneoping 912{contig}# ip éhep smeoping ve o1a(contiey# ping informetion option S12{confio}# interface range fastitnernet 0019-17 12{config-if-rarge}# ip dhop snooping init rate 10 912{config-if-rarge)# sritenport tost na(contag-at-rarge)® endtenport eocers vian 209 913(contig}# ip aep smeoping 915(contigy# 8H5(contig}# ip dep snooping infornetion option OH9(contigy# interface range fastEthernet 0) 14-47 S43(config-if-rarge}# ip dhop snocping Linit rate 18 915(config-if-rarge}# sriteaport fost H9(config-if-rarge)# snitenport eecers vlan 200 ova(contieye 44( contioy# ‘14(contig}# ip dep sneoping infornstion option a(contigh# interface range fastéthernet 0)11-17 Oua{contig-if-rarge)t tp chop snocping Linkt rate 10 ‘a\config-if-rarge)t snitenport host 14(contig-if-rarge}# enitenport eccers vlan 300 SH sn ip dnep snocping Srsten DHEP oncoping £2 enabled DHEP snooping is configured on following YLANS: (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasPrectice Lab [5] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Example 1-7 Switches 1,2, 3, and 4 DHCP Snooping Configuration _cowinued a Incortion of option 82 is enabled froust-id format; vlan-nod-port Option 82 on untmistad gort is mot allowad Verifivation of twadir field 4s ensbled Interface Trusted ate Liait (64) no 0 no 0 0 0 no 0 yes wolinitos 1m For additional socurity, ensure that che user ports en svitchos 1-4 (Fast Ethernet poss 0/1117) cas only communi. cate with the network with IP adresses gained from the DHCP feature configured previously. Use a dynamic feature toensure thatthe only information forwarded upon connection is DHCP request packets and then any wraffc tit ‘matckes the DHCP IP information received from the DHCP binding for additional security. (3 points) {A complennenvary feature to DHCP snooping is IP Source Guard. Ths fecture bitds the information received from the DECP addsess offered and elfectvely builds « dynumie VLAN access contol list (VACL) on a per-prt bass tallow only source traffic matched fiom the DHCP offer to ingross the switch port for additional security. I you have configured. this correctly, as shown in Example |-8, you have soored 3 points ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme dasPrectice Lab [52] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Example 1-8 _ Switch 1, 2, 3.and 4 IP Source Guard Configuration (11(config)# interface range fast 0/11-17 SHI(contig-if-rarge)é ip verify source ova(contig)# interface range fant 0/ 01-47 SR(conFig-if-rarge)é ip verity source oH9(config)# interface range fast 0/11-17 1s(contig-aT-rarge)é 4p versty source OuA(configh# interface range fast 0/11-17 a( contig-if-rarge)# ip verity source = RS and RG have been precoafigured with IP addresses on their Ethernet interfaces. Configure RA and its associated witch port accordingly without using secondary addressing to communicate with RS and R6. Conigure Ré with an TP acldressof 120,100.45.4/24 to communicate with RS, and configure RA with sn TP address of 120.100.45,4/24 to communicate with R6. Configure R4 Gi0/l and switch 2 FEO ony. 3 points) ‘This is just a simple trunking question on switch 2 to Ré to enable R4 to connect to VLANAS and VLAN46, One point to bear in mind is that switch 2 does nct have YLANGS and VLAN46 configured locally within the default configuration, so ‘you aced to crcate the VLANs lecally prior to configuring the trunk. IF you have configured this correctly, es shows in Example 1-9, you have scored 3 points Example 1-9 _ Switch 2 and R4 Trunking Configuration Ra(contigh# interface GigabitEthernetO/ 1.65 Fs(contig-it)# encapsulation dotid 5 fs(conrag-ar)s 4p adiress 120.100.05.8 255.255.255.0 Ra(contig- it) interface Cigabittthernet®/1.a8 Rs(contig-it)# encapsulation dotid <6 ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme dasPrectice Lab 153] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Example 1-9 _ Switch 2 and R4 Trunking Configuration conned Fa(contig-it)# ip adlress 120.100.06.4 255.255.255.0 912{contig}# vlan 45-36 O12{contigy# interface Fast thers S12(confio-ifit ewitchport trunk encapsulation dotia 912{config-if}# ewitchport trunk eLloved vlan 45,48 H2(config-if}# ewitchport node trunk ‘= Your inital Frame Relay configuration has been supplied forthe R1-R2.R3 conaestvity and R2-RS. Configure each device as per Figure 1-6 to ensure tat each device is reachable over the Frame Relay network. Use only the indie cated DLCs, (2 points) ‘The intial Frame Relay configuration hss been supplied for you; all you seed to add is additional maps on RU and R2 spokes to enable themt to communicate with each other by directing traffic to the hub router (R3) because the inital configaration uses no inverse arp. Commutication between R2 ard RS works without modification by defeult. Ifyou have configured this correctly, as shown ia Example 1-10, you have scored 2 points Example 1-10 _R1 and R2 Additional Frame Relay Configuration and Testing ie cont ¢ Ri(contigyt int <0/010 Fi(eontig-it)# teame-relay aap 4p 12€.109.123.2 105 broadcast Rae cont t Enter configuration somands, one por ine. End with ONTL/2. R2(contia}e int 0/0 Ra(oontig-if)# frane-relay aap ip 12 109.129.1 202 broadeast (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe dasPrectice Lab [54] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Example 1-10 _R1 and R2 Additional Frame Relay Configuration and Testing _comsiwed Fig ping 120.100.121.2 ‘Typ escape: saquence to abort. nn Suecess rete Le 100 porcent (5/5), round-trip min/evgimax = 8/8/8 a6 Section 2: IPv4 IGP Protocols (22 Points) In this section, you will be answering questions about EIGRP, OSPF, and redistribution between these protocols, Section 2.1: OSPF 1m Use a process ID of 1. Where possible, all OSPF configuatioas should not be configured under the process ID. Do ‘ot change the precenfigured interface types where applicable. Configure the loopback intorfaces ef routers RI, RD ‘and R3 to he in srea0, Ra in area 34, and RS in area 5, (2 points) Recent advances in OSPF have allowed contigucation ofthe network area directly under the interface as opposed to within the OSPF process. Example I-11 details the OSPF contiguraticn. Example 1-11 OSPF Configuration Ti(contigh interface GigabitEthernet 0/7 Ri(oontio-i#)# ip onof 1 area Ri(contight interface Serial Ri(contig-it)# ip spt 1 area (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasPrectice Lab Example 1-11 155] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 OSPF Configuration comiued Ri (contig-it)# Ri (contig-it)# “interface Loopback @ 4p ospf ta Re(configh interface Leoptack & Ra(oontig-if)# R2(contig-it)# R2(contig-it)# ne(oonrag-at)# Ra(oontig sf)# Ra(contig-it)# Ra(contig-it)# ip osof + area Anterface Serial 4p ospf + area 2 Anterface FastEthernet 0/1 4p ospf + area 200 Ro(config interface Looptack & Ra(oontig-if)# Ra(contig-it)# Ra(contig-it)# rs(eonrag-at)# Ro(oontig sf)# 4p osof + area Anterface Serial 4p ospf + area 8 anterrace Gigabiternernet 0/0 s(contigi# interface Leopack @ Fa(contig-it)# fe(contig-if)+ a(oontig-if)# Ra(contig-it)# Fa(contig-it)+ ip ospt + area 38 4p ospf + area 38 interface GigabitEthernet 0/1.45, 4p ospf + area s ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme dasPrectice Lab [58] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Example 1-11 OSPF Configuration conned As(contigi# interface Leoptack @ Rs(contig-it)# ip spt + areas As(oontig-if)# interface GigabitEthernet 0/0 Ro(contig-if)# ip apt ¢ area 5 Rs(contig-it)# interface Serial 00/1 Rs(contig-it)# ip spf 1 area s Initial configueation changes the OSPF uetwork interface pes on router RI, R2, and R3 Frame Relay interfaces. This changes the hello and decd interval timers, which results ina mismatch with seighbor relationship never being formed. Example 1-12 shows the differing imerface parameters between routers and required configuration cn routers RI and 3. Because you are rot able to change the network type, you must manully adjust the OSPF hello interval, The most logical place to do this ison the hub router R3 to exsure a common configuration. If you have configured OSPF correctly, as shown in Examples 1-11 and 1-12, you have scored 2 points. Example 1-12 _OSPF Interface Parameters and Configuration Serial0/0/0 is up, Line protocol is up Internet Addross 120.100.123.1/24, Area 0 Frocse ID 1, outer ID 120.100.1-1, Natwork Type POINT_TO_PCINT, Co Transmit Daisy is 1 aa, State POTNT_To_POTNT Timer intorvale configured, Hello 18, Dead 40, Wait a8, Aetrensait 5 oob-resyno timeout 0 Hello dus an @0:40:ee fupporte Link: Iocal Signaling (LS) Cisco NEF helper swppert snabled JETF NSF halpar support enabled Index 1/2, flood quoue length @ ext @x0(0)/x€(0) ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme dasPrectice Lab (37) CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Example 1-12 OSPF Interface Parameters and Configuration cowimed Last feed sean Length is 0, maximun is 0 Last feed sean tite is 0 n520, saxiaum is 2 nsec Neighbor Count is #, Adjacent neightor count is @ Sippracs hello for @ reighbor(=) OF show ip capf interface Serial 0/0/@ Sertalo/070 45 up, Line prozosot 38 up Internet Addeoee 120.400.120.3/21, fron 0 Frocsse ID 1, Fouter ID 120.109.2.1, No:work Type POINT TO MULTIPOINT, Cost: 6 Enabled by interfase config, including secondary io addressee Transmit Delay is 1 seo, State POINT TO MULTIPOINT ‘ob -reeyne timeout 120 Hello dus in 0: Supports Lisk-local Signaling (LIS) caso NEF helper sippert enabled Inder 2/2, flood quoue lonath @ Naxt ©6(0)/xe(0) Last feed sean Length is 0, maximun is 0 eigibor Gout is #, Adjacent neightor count is @ Sipprace hello for @ radgtbor(s) Ra(contigit int Serial 0/0/0 Ra(contig-it)# ip ospf hello-interval 10 SE sh ip ospf neighbor (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe dasPrectice Lab [58] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Example 1-12 OSPF Interface Parameters and Configuration cowimed Neighbor 1D Fri state Dead Tine Adiross Interface eo FUL 120.4 Sorialoio/e eo FU 120.4 Sorialoi0/e + Futyeon tad oigebseeenerne 1m No loopback networks should be advertised as host routes. 1 poiat) Loopback interfaces within OSPF are by defaul advertised as host routes. To manipulate this behavior, you must override the network type tht the IOS associates withthe loopback interface. Example 1-13 shows the host routes learned on R2 [Note that 120.100.123.3/22 is actually alhost route generated by OSPF for the Frame Relay congoction, so this i expected behavior and acceptable inthe routing table. IF you have configured this comectly, es shown in Example 1-13, ‘you have scored | point. Example 1-13 _ OSPF Loopback Interface Host Routes and Configuration 2s sh Ap route | Anclude 192 0 129. 400.8.4/82 [110/05] via 120.4 0:08:98, seriai0/ 0 120.100.4.1/82 [110188] vie 120.1 142, Serial0/@ ° tm. o 1m, 0 ta. . , Sersal0/e 18 cont t Ai(contigi# int Loopbact © fi(eontig-it)# 4p spr network point-to-potat (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasPrectice Lab [59] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Example 1-13 OSPF Loopbsck Interface Host Routes and Configuration _contimed Rae cont t R2(contight interface Leoptack & Re(contig-it)# 4p oop network point-to-posat ae conf t R3(contig}# int Loopback © Fs(oonrag-at)# 1p spr network potnt-to-posst at cont t Rs(contigi# int Loopback 0 Fs(contig-it)# ip ospf network point-to-poiat Fst cont t Rs(contigit int Loopbact 0 Fa(contig-it)# ip ospf network point-to-poiat ia ubnetted, 2 subnets ° [110765] via 120.1 43, Serilo/e ° [10760} vie 120.1 ° 1107120) via 20. 48, Serial o [110/65} via 120.1 43, Seril0/6 ° 24 [110/85] via 48, SerialO/+ 0K 129. 100.04.0/24 [110/85] via 120.700.125.5, 00:00:48, Serial0)0 ow 100.0/ 24 [440/20] vie 420.400.4200, 00:00:00, Geriai0/0 2008 cisco systems, Alright reseried, This pubatens protected by copyright Plese so page Si fermere desiPrectice Lab [80] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 1m Ensure that RI does not advertise the preconfigured secondary address under interface Gigabit D/l of 120.100.100.1/24 to the OSPF network. Do not use any filtering techniques to achieve this. (2 points) ‘The associated behavior with coafiguring OSPF directly under the interface is thar by desaul it advertises any secondary addresses asigned to the interface. RI bas « preconfigured secondary address on interface Gigabit Q/1, which i therfore advertised, Because you cantot filter thie advertisement, you must inform OSPF aot io include the secondary addresses Under ihe interface command. If you have configured this corectly, as shown in Example 1-14, you have seored 2 poiats. Example 1-14 OSPF Secondary Address Advertisement and Configuration F1# show ip capf Ant GigebitEthernet 07+ GigabitetrernstO/t is up, line protocel is up Internet Addeoos 16 4/24, Area 4 Frocese ID 1, fouter ID 120.100.1.1, Norwork Type BROKDCAST. Cost Enabled by interfase config, including secondary io addressee Transmit Dolay is 1 seo, State Of, Friority + eeignated fouter (10) 120.100.1.1, Interrace addrass 18@. Timer intervals configured, Hello 18, Dead 40, Wait a0, Aetrensait § fob-recyno tinoovt 0 Hello du an @0:40:00 fupporte Link: Iocal Signaling (LS) Cisco NEF helper swppert snabled TETF NSF helper support enabled Index 1/1, flood quoue length @ ext @x0(0) x0) Last feed sean tine is 0 wo20, saxiaum is 2 nsec Neighbor Count 16 #, Adjacent neightor count is @ ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme dasPrectice Lab [ay] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Example 1-14 OSPF Secondary Address Advertisement and Configuration _cowined Sipprace hello for @ radgtbor(s) Ai(oontigy# interface GigabitEtnernet 0/1 i(contig-it)# dp oapt | aren 10 R24 sh ip route 121 ‘ Subnst rot in table 1m RS should uss the Frame Relay link within area S for its primary commutication to the OSPF network. If this network should fil either at Layer | or Layer 2, RS should fown 4 neighbor relationship with Ré under ares Sto ‘maintain conseetivty. Your solution should be dynamic, ensuring that while the areaS frame relay Link is operational, ‘no neighbor relationship exists between Re and RS, However the Ethemet interfaces of Rand RS must remain up. To confirm the operational status ofthe Frame Relay retwork, you should ensure thatthe serial interface of RS is teach- able by configuration of RS. You are permitted to define neighbor statements between RS ani Ré. (4 points) This isa complex seenario, ene that really consumes your time. However all the clues ar inthe question, so some lateral thinking is required. You can sul outa backup interface solution because the Etheenet needs to remain up and the sol tion mist eater for Layer 1 and Layer 2 rather than purely for Layer 1. Similarly. a demand scenario is aso out because this would involve a neighbor relationship being formed. ‘You are also requested to confirm operational status ofthe Frame Relay interface on RS with your overall salution being dynamic. This takes a great deal of effort and trial and errer, but you can ase the IP SLA feature to monitor the IP address of the Frame Relay ieterface on RS hy RS itself. I this responds to the automatic polling with Internet Control Message Protocol (ICMP), you know the Frame Relay is up at Layers 1 and 2. (Layer 2 also ngeds to be up for a valid sespense because the ICMP packet is sent over the Frame Relay network and a local map to RS's own IP address is required for this.) I the pelling fails, you know the interface is down. IP SLA can then be used to inform the router, anda forwarding decision can he anipulaed. This feature is known as Policy Based Routing (PBR) Support with Multiple Tracking Options. This gives PBR access to all the objects that are available through the tracking process. ©2008 ceo systens ne Alrigts sere ris publi is rtsceaby copyrght Peso Seo Faye St forme dasPrectice Lab [32] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 ‘The tracking process provides the ability to track individual objects such as ICMP ping reachability and to inform the required PBR prozess when an object state changes. So, in summary, ifthe object status changes, RS can simply manipu- late the way itseods trafic by policy routing. The rtfic it manipulates must be OSPF; it should be directed to RA to oom the aljacency over the Etherne’ neiwork (VLAN43). So, when RS Frame Relay is yp aad running, you just need 10 break tho adjacency botwoon RS and Rd, When the Framo Reley fails, you nood to allow the adjacency between RS and, Rett form. The first step in this solution is to configure the IP SLA object teckiag on RS. Remember, the additional ‘map is needed locally so that it can ping its own Serial interface. This configuration is detailed in Example 1-15, Example 1-15 _RSIP SLA Configuration and Status As(contigi# interface Serie10/0/1 Rs(conrig-it)s Trane-relay map 1p 12¢.100.25.8 812 broadcast As(oontig Af)# ost As(configy# ip sla 1 Rs(contig-ip-sla)# iewp-ecto 120.:00.25.5 fs(contig-ip-sla-echo)# ip sla schedule + Lite forever Ro(config track 4 rer 1 reachability Fst show ip sla statistics found trap Tane (RIT) ter tntox 4 Latest operation start tine: #21: Latost operation return code: OK Nunber of successes: 2 1689 UTC Won Fab 10 2007 Oparation tins to Lives Forwar ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme dasPrectice Lab Nore areal teenconfgured between and BS oon configuraion Thencighbar adjiceney takes awe waking or (20 ecandsaterching Ing of tn OSPF setwork [33] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 ‘OSPF must be coafigared between R4 and RS with manual neightor statements, as directed in the question, that ensure the routers unicast trafic to each other. To do this, you must change the network type to aonbroadeast. The unicast traffic between neighbors can be identified by an ACL that the PBR process can match, and thea instead of allowiag normal twalfic low be:ween RS and 4 to form the aeighbor relationship, che next hop ean be modified. Because the OSPF TTL, is sot to 1 by dofaul, the traffic is effectively dropped by the next hop, and the OSPF between RS apd RA never estab- lishes. Simla, when the object tracking fails, the PRR process is overridden, asd tic can flow as par aorwal. This then allows RS and Ré to form an OSPF adjacency. So, if you use the PBR command set ip next-hop verify-availability 120,100,252 10 track 1, RS can forward normal (OSPF traffic to 120.100.25.2.(R2 Frame Relay) to effectively discard the trafic ifthe tracked abject (1) i up. TF the object status changes to down, the PBR process s informed and the OPSF traffic to 120.100.25.2 follows the usual next hop. RS must be configured to locally policy route traffic as ncrmsl PBR behavior fe traffic manipulation for traffic that flows through the router sather than iafic that is generated by the router itself. Example 1-16 shows the required OSPF configuration on Ré and R5, the PBR on RS, a debug of R2 sending TTL expired to RS after the OSPF trafic is seat to RO inswoad of RS, and the resulting neighbor partial adjacency that is farmed between RA and RS. Example 1-16 _R4 and RS OSPF and PBR Configuration a(contigi# interface GigabitEthernetO/ 1.65 Rs(contig-it)# ip ospf network nor-broadzast Ra(contig-it)# rauter ospt 4 fe(config-router# neighbor 128 As(oontigy® interface GigahitEthernet ho(conrag-at)# 1p spr network not-broadsast As(oontig.Af)# rauter opt 4 Rs(contig-router)# neighbor 12 Rs(contig-router}# exit ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme dasPrectice Lab [34] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Example 1-16 _R4 and RS OSPF and PBR Configuration continued Rs(contigh# access-List 100 perait ospf host 120.100.45.5 host 129.1 As(contig}t route-map TEST perait 10 As(config-rovte-nap)# mate ip adere Ro(contig-route-map)t oct ip next-hop verify Asicontig-route-map)# interface GigabitEtharne Rs(contig-if)# ip policy route-nap TEST As(contig-if)# exit Rs(conragye 1p local policy route.nap TEST 2s debug ip icmp IOIP packet dsbucping 4¢ on Fab 98 20:9749.087) TOM oe Hine exceeded (tine Yo Live) sant 400.45.6 (dost was 120. 46.4) ot show sp ospr neigh Neighbor 1D Fri state yeero.24 8 FUL) $2000.41 4 IMET/OROTHER 00: Intertac 25.2 Serialo/0rt 45.4 Gigabitethemete/0 Example 1-17 shows the OSPF adjacency being formed when the Frame Relay between R2 and RS is shut down on RS. ‘The PBR is overriddea, and sormal touting occurs because the next hop is aot bsing verified by tho object tracking. If your routing table isn't an exact replica ofthat shown in Example 1-17. did you remember that when an OSPF adjacency fooms betweer RS and R2, you are running from area 5 into area 34? So, you need a virtual link between R3 and R4 to 2008 cisco Systems, Alright resend, This pubatens protected by copyright Peso ss page Skt ermere desiPrectice Lab [35] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 extend aren 0. IF you dide't remember, it’s an ecsy mistake that weuld take your points away. Isa very difficult question, but a good one to practice with and examine how features operate and interact with each other. You might have boea scratching your head or cursing, but you likely learned something new from this question. If you configured this correctly, including the virtual link, you have scored 4 points. This is definitely a question worth leaving to the end of your exam when hopefully you have time lft over to experiment. Example 1-17 _R3 and Ré OSPF Virtual Link Configuration and RS Test Fa(eonragiF router ospr a RD(oontig.router)# area 24 vintual-Link 120.100.4.1 Rs(contigy# router ospf 4 Rs(contig-router)# area 36 virtual-Link 120.1 Rs(contight interface As(contig-it)# shut hs(contag-it)# Intarface down or detached ‘Jan 2 21:68:18.607; SLINK-S-GANIED: Interface Serial0/0/1, changed etate to adninistrstively down Jen 2 21:58:10.807: SLINEPROTO-5-UPLOM: Line protacol on Interface Serial€/0/1, changed state to down Ac(oontig-if)# de how ip oof neigh 4 Nbr 120.409.2.4 07 Gorsal0/0/1 From FULL to MM, Neighbor Downs Neighbor 10 Fri stato Doad Tine Ad Interfoce wa © ATTEMPT/OROTHER 00:08:23 120,100.45.4 CigshitEthamneta/0 Ro(eontag-t)# Down: Dead tiner expirec As(contig-it)# (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasPrectice Lab [36] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Example 1-17 _R3 and Ré OSPF Virtual Link Configuration and RS Test _coninat an 2 22:00:08,195: SCSPF-6-ADI0KG: 41, Nor 120.400.6.1 e GigabitEthemste/0 fron LOADIYG to FULL, Loading Dene As(contig-it)* Fst sh ip rovte ospt 24 is eubnstted, 8 subnets + Gigabitethernsto/o om 41, Sigebittnernot0/e 01 120.100.2.0724 [110767] via 120.100.45.4, 09:00:41, Gioabstetrernat0,® 0 120.100.8.0/24 [11073] vie 120.100.45.4, 00:00:41, Sigebitztnernot0/e 0 120,100.54.0)24 [140/2} via 120.100.45.4, 00:00:41, Gigabstetrernst0,/@ ow 125.8/32 [11079] vie 120.100.48.4, 60:00:44, GigabitE themnet0/@ 100. 123.028 [1107199] vie 12 + Gigabietnernsto/ Section 2.2: EIGRP © Configure EIGRP usingan AS aummber of |. The loopback interfaces ofall routers and switches should be advertised ‘within EIGRP. @ points) 2008 cisco systems, Alright reseried, This pubatens protected by copyright Plese so page Si fermere desi(a7) CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Prectice Lab ‘This isnota difficult question by any means, but its one that has 2 magnitude of configuration and sets up your EIGRP network for te felloving questions. You must remember to include your preconfigured loopback interfeces and enable routing on the Layer 3 switches. Use the show ip eigrp neighbor command to very your peering prior to moving onto the neit question. Ifyou have configured this correctly, as shown ia Example 1-18, you have scered 2 point, Example 1-18 _EIGRP Configuration Fat sh eur | ba etary router eierp | network 120 possi interface Leoptack® network 120 network 20 auto -euamiry fos sh cur | beg ebgre network 120 network 120 network 150 ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme dasPrectice Lab [38] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Example 1-18 EIGRP Configuration cone 11(contigh# ip routing Hi(contigh# exit OW sh ren | beg eigrp network 120,100.71 0.0.0.0 retwork 150.100.9.7 0.6, no auta-eummiry o1a(contig}# ip routing 912{contig}# exit ove eh ren | beg eigrp router sigrp 1 network 160,100.9.8 8.0.0.0 ro auto-euamiry s(contsg)# 1p routing o12{contig)# oxit 943F sh run | beg edarp router eigrp | retwork 129,100.9.1 0.6, (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe das[39] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Prectice Lab Example 1-18 EIGRP Configuration sone 14(contigh# ip routing a( contigh# exit ua sh ran | beg eigrp network 120.100.10.1 0.9.0.0 retwork 150,100.2.19 0.0.0.0 no auto-euamiry 1m Ensure that RA does not install any ofthe EIGRP loopback routes from any of the switches into its routing table. Az such, these routes shoul alsa ot he preseat in the OSPF network pest redisribatioa. Do not use any soute-Fikering agcess contra lists (ACL), prefix lists, or admin distance manipulation to achieve this and perform configuration only on RA. ( points) A distribute or prefix ist the obvious choice here, but this is not permite. Upon close inspection of the Joopback routes within Example 1-19, you can notice thatthe routes have a hop count of 2associated with them, Hop count isn't something you naturly assimilate with EIGRP, but you can configure the process to ignore routes received with a hop count larger than a configured threshold with the command met mops. By configuring the maximum hop count of 1 on R4, you can simply stop the leopback routes from entering the process. If you have configured this correctly, 2s shown in Example 1-19, you have scored 3 points. Example 1-19 _EIGRP maximum-hogs Configuration fas stow ap route eigrp 450.100.0.0/24 2 cabnstted, 2 atbnote 0 te. [00/307 20] vin a2 [00730720 vin 2 (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasPrectice Lab (70) CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Example 1-19 _EIGRP maximum-hops Configuration continued > tm, Gigabitethemeta/1.48 , GigabitEthernet/ 1.45 )- GigabitEthernetd/4 48 ), GigabitEthernet/1.45 o + Siganstetnernet/ 1.45 01307, Gigabitethernet0/4 45 o + Gigabitetherneta/1.45 ° 5 CigabseEthernet/ 1.48 . ), Gigabitetherneta/1.48 [00/158720] via 120,100.48. , Gigabitethernet/ 1.45 Fas show ip route 12 Routing entry for 120.100.8.0/24 oon via "signe 1', distance 9 Fedistributing vie ove 1) eigrp Davertised by cspf 1 estric 5900 subnats Last upests fren 120. 190.48.6 on GigabitEtherns outing Dessrigtor Blocks 7'420.400.45.6, 0m 129.100.48.6, Total delay is 5200 microsecunde, mininum bandvidsn ic 149000 Kbit inetrie 158720, type interned 1-48, 15 age 5 age, via Gigebatetherns:0/1.48 2008 cisco systems, Alright reseried, This pubatens protected by copyright Plese so page Si fermere desiPrectice Lab CCIE Routing and Switching Practice Labs Example 1-19 _EIGRP maximum-hops Configuration _contined i Martin Jamas Duggan, COE No, 7042 elisbility 256/265, nininun MTU 1510 bytes Loading 1/255, Hope 2 Rovtiny entry for 120.100.9.0/24 oown via "signe 1', distance 9 Fedistributing vie oset 1, eigrp 1 Pavertised by capt 1 eetric 5200 subnets Last upeats fren 420.190.16.6 on Gieabisethernst0/146, Bs outing Dessrigtor Bleoke *420.100.48.6, fom 120.100.48.8, (0:00:25 ago, via Gigebitetherne:0/ 1.48 outs mitrie is 168720, traffic share oount ds 4 eLisbility 256/255, nininun MTU 1580 bytes Loading 1/255, Hoge 2 inetrde 158720, type internal Ra(oontigit router aig Rs(contig-router}# metric maximun-hops + Rs(contig-router)# do stow ip route eigrp 150.100.0.0/24 is subnstted, 8 subnets [00730720] vie 120,100.48.6, [00730720 via 120.100.48-8, 14, GigabstEthervatO/ 1.18 104, GigabstEthervat0/ 1.15, 120.0.0.0/8 is variably cubnettec, 18 subnets, 2 mcks D129. 100.5.0724 [00/4e160] vis 120.100.46.6, 60:00:01, GigahitEthemneta/4 48 Dd 129.100.6.0724 [00/155160] via 120. 0.48.8, 00:04, Gigabitetnernst0/ 1.46 ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme dasPrectice Lab (72) CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 ‘© R4 will have dusl equal-cos routes to YLAN300 (network 150.100.3.0) from RS and RS. Ensure that R4 sends tuuffic to this destination network to RS rather than load shariag. Should the route from RS become unavailable, trafic should be sent toR6. Do not policy route, alte the bandwidth or delay statements on R4's interfaces, or use ‘an offset list, Perform your sonfiguation on R¢ osly. Your solution should be agplid to all routes received from RS and R6 as opposed to Solely tothe route to network VLAN3OD. 3 points) ‘To receive identical routes, your topology must have identical interface types or bandwidth statements used on RA, RS, and R6. Example 1-20 shows the VLAN300 route (150.100.3.0/24) received on 4 from both RS and RE with 2 metric of 30720. If you wanted to manipulate this route, te usual best practice method would be to modify the bandwidth or delay (on one ofthe Ethernet interfaces, bu this isnot pemnitted. In fict, you are left with only one method that ean be applied ‘on R4 that influences all ues from RS and RE as opposed to just this individual route, ‘A route map is roquired to override the EIGRP assigned metrics assigned to routes on one interface by manipulating the bandwidth assigned to Gigabit 1/0.45, Gigabit V/0.46 by default hes a lower bandwidth assigned to routes received from it {rom the permit 20 statement in the roue map. The route map is applied inbound to the process as & stitute lis. Example 1-20also shows that when the intsface Gigabit OVD is shat dawn on RS, the route for VLAN30O is stil received. from 6 (R's fecsibl successor), so the routo i still available, but with « different moti. IF you have configured this correctly, 2s shown in Exmple 1-20. you have scored 3 points. (You could have also manipulated the delay within the route map of crested a statentent for each individual interface es opposed to just Gigabit /0.45.) Example 1-20 _EIGRP Metric Manipulation Configuration fad sh ip route 15 -100.9.0/24 noun via "ior 1!, iatanoa 98, metric 98720, type sntarnsl Fedistributing via oset 1, eigrp 1 averted by capf 1 estric 5200 subnets Last upeate fron 120.100.45.5 on GigabiEthernst0/1.48, 00:26:40 age outing Dovsrigtor Blcoke 7420.400.48.6, fron 120 8.6, 00 2 ago, via Gigabitfthernato/1.48 (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe dasPrectice Lab (731 CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Example 1-20 _EIGRP Metric Manipulation Configuration conned outs mtric 4s 31720, traffic share oount 48 1 Total delay is 200 aisrossconds, minimum bandwidth is 4 oLiability 254/255, nininun MTU 1580 bytes Loading 1/205, Hope 4 129.100.45.6, fom 120.100.45,5, 60:25:40 age, via GioshstEtneenst0/ 1.45 outs mitric 4s 90720, traffic share count de 1 Total delay is 200 aisrossconds, minimum bandwidth is 4 eLinpaLty 252/285, minanun MTU 1880 bytes Lousing 1/285, Hope 4 ost ost Fs(contig}# route-map CIANCEMETRIS perait 1 a(config-route-mp)# netch interface gigabitEtherset 0/1.48 Ra(contig-route-map}é set metric 2000 10 255 1 1500 Ra(oontig-route-map)e reute-map CHNGENETRIC permis 20 Rs(contig-route-map)F set metric 1000 10 255 1 1500 ha(conrag-route-aap)# reuter eigrp 1 Ra(oontig.rovter)# distribute-Liet raute-nap CHANGENETREC in Ra(contig-routeri# “Z fas clear ip route * fas sh ip rovte 15 Routing entry for 150. 160.9.0/24 3. noun via "aor 1!, iatinos 90, metric 1250680, type interes distributing via oset 1, eigrp 1 averted by ospf 1 estric 5200 subnets Last upeate fron 120.190.15.5 on GigabiEtnernste/1.48, 02s outing Devsrigtor Bheske + 429.100.45.5, fom 120.100.45.8, (0:08:10 ago, via Gigebitethernst0/ 1.45 Route metric is 1282580, traffic chere cout is 1 10 age (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasPrectice Lab CCIE Routing and Switching Practice Labs Example 1-20 _EIGRP Metric Manipulation Configuration continued Total delay is 100 aisrocsconds, aininn bandwidth is 2 oLiability 255/255, nininun MTU 1580 bytes Loading 1/255, Hope 4 rit Asicontigi# int sig0i0 Rs(contig-it)# shutdown has sn ap rovte 15 Roveing entry for 150.160.9.0/24 own via "signe 1!, latinos 90, metric 2552549, type dnterral Fedistributing via osef 1, eigrp 1 Daverticed by cspf 1 estric 5200 subnets outing Dassrictor Bleck *429.100.48.6, fom 120 (0.6 on GigabitEthernst0/ tab, 00: 48.8, 0:00:40 ago, via GigabitEthernst0/ 1.48 ‘eratfie share count $2 4 Total delay 15 180 axsrossconds, minimum bancwieth 16 1 oLiabitity 256/265, minimum MTU 1500 byte Loading 1/256. Hore 4 Section 2.3: Redistribution (a) Martin Jamas Duggan, COE No, 7042 © Perform mutual redistribution of IGP protceols on Rd, All routes should be sccessible with the exception of the switch loopback networks because these should net be visible via R4 as aoted in an easier question. EIGRP routes redistributed within the OSPF network should remain with a fixed cost of 5(00 throughout the network. (3 points) ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme dasPrectice Lab 175] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 This isa very simple redistribution question forthe wasm-up lab. You have only «single redistribution point (R4), so you have no cancers when using protocols such as EIGRP and OSPF with their inherent pretecion against routing locps. ‘The fixed cost of 5000 is achieved by advertising redistibuted roues into OSPF wsing a metic-type of 2, which isthe defaull, sono specific configuration is requised for this. The only points you need w consider when redistributing into OSPF are to se the subnets command to etsur> classless redistribution and to use default mctriss ia each protocol. If ‘you have configured this correctly, ax shown in Example 1.21, you have scored 3 points. Example 1-21 _R4 Redistribution Configuration and Verification Ra(contight router eigrp 4 fa(contig-rovter)® a(conag-rovcer)e Ra(contig.router)s fa(contig-rovter)® fa(contig-router)® on 19. oR 10, oR 10, ou oe oe oe oe oe Dx 120, redistribute ospf redistribute eigrp 1 subsets defarkt-netrie 50 2a [170/28416] 125.8/52 [170/28a416] vie 18e. 0 129.0/24 [170/2544%6] via 150.4 2008 cisco systems, Inc Alrights sere ris pbtzatin is prtscteaby copyrght Peso oo Faye 5 frmoe daisPrectice Lab (78) CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 © Configure R4 to distribute up to only five EIGRP routes and generste« system warning when the fourth route is redistibuted. Do not use any access lists in your sation. (2 points) ‘You cen limit the number of prefixes redistributed into OSPF end generate a warning when the umber of prefixes reaches a defined maximum by tse of the mm-prefix command, To generate the warning on the fourth route, you need to configure a percentage threshold (80 percent), you have configured this corset, as shown in Example 1-22, you have scored 2 points. Example 1-22 _R4 Prefix Configuration Ra(contigh® router ospf 4 As(contag-router)# redistribute mexinus- tix 5 a0 Section 3: BGP (14 Points) = Configure BGP peesing as follows: RI-R3, R2-R3, R6-RS, SwI-R6, Sw1-R5. Use miniunal eoafigaraion and use lcoptack interfaces for your peering. Contigurs cBGP peering as follows: R3-R4, RLRG, RA-RS, RS-R2. Use ‘minimal configuration aad vse loopback interfices for your peering with the exception of RA to RS, Use the AS ‘numbers supplied in Figure 1-9. (2 points) ‘These are easy points, but you de lols of typing to earn them. You aeed to remember to use peer groups to minimize configuration where possible, namely on R3, R6, and switch 1, and follow the peering instructions closely because these ‘we relevant for the Fllovring questions. You should have noticed that R3 was required tobe a route veflectee for SGP peers RI and R2 in ASIO and thet» synchronization is required because the underlying ICP is no sodstibuted into BGP. Remember o verify your peering with the show ip bzp neighbor command. If you have configured this correctly, as shown in Example 1-23, you have scored 2 point. (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe dasPrectice Lab Example 1-23 _ BGP Peering Configuration v7 CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 fie sh eur | begin bap router bgp 10 no synchronization neighbor 120,108.9.1 updats-soures Leopbick® ro auto-cuamiry rovter bgp 10 no synchronization neighbor 120.1 neighbor 120.1 neighbor 120.108.5.1 udats-soures Leopbick® ro auto-cuamiry in bsp renots-a6 10 remota 3k typ wultthop 2 router bgp 18 neighbor TBG? peor-group neighbor TBG? remote 26 10 neighbor TBO? updats-ecurce Loopbeck® neighbor TRG? routs: efector client neighbor 120.108.1.1 peer-group ISGP neighbor 128.108.2.1 peer-group ISGP rneighdor 120.106.4.1 renots-as 200 neighbor 120.1 ro auto-cuamiry sin bp tap wultthep & updats-cource Leopbuck® (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasPrectice Lab (78) CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Example 1-23 BGP Peering Configuration _cowited Fat sh eur | begin bgp router bgp 200 no syachronizatio neighbor 120.10 neighbor 122. neighbor 122 reagnoor 120. neighbor 122 no auto-euamiry 1+ stop ttinor 1 updats-coures + ranotecas 3 tgp -murtanop updates -ccures 45.5 renote-ce 94 3. 6. router bgp 308 no synchronization neighbor 120.100.2.1 renots-a6 10 reagnoor 129.186. 2.1 etgp-nutnop neightor 120.400.2.1 updats-eaurce reiahior 1 neighbor 122 neighbor 122 6.4 renote-ae ot 18.1 updats-cource 45.6 renote-ce 24 fot sh cur | beg bgp. router bgp 200 2 Leopbicke Leopbicke 2008 cisco systems, Alright reseried, This pubatens protected by copyright Plese so page Si fermere desiPrectice Lab (79) CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Example 1-23 _ BGP Peering Configuration _cowined no syohronization neighbor TBG? peor-group neighbor TBS? renots-2¢ 800 neighbor TBO? updats-ecurce Loopback® rneighior 120.100.4.1 renots-as 208 neighior neighbor 120.1 rneagnoor 120.1 ro auto-euamiry <1 etgp-aultihop 2 1 updats-soures Leopbeck® 1 pser-group 186 4 sh run | begin Sop router bgp 90 neighbor TBO? peor-group neighbor TBS? renots-2¢ $00 neagnoor 120.1 1 pser-group 186 1m AS200 is to be used as 2 backup transit network for trffic between AS100 and AS300. As such, ifthe Frame Relay rework between RS and R2 fails, ensure thatthe peesing between R2 and RS is not maintained via the Ethernet retwork. Do not use any ACL-type restrictions or chaage the existing peering. (2 points) Because R2 and BS peer to each other using their oophack interfaces. the peering is maintained ifthe Frame Relay network between R2 and RS fails. Example 1-24 shows the path taken between RS and R2 when the Frame Relay ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme dasPrectice Lab [30] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 interfave is shat down on RS. To break the peering without usiag ACLs, you simply need to ensure thatthe ebyp- rultiphop couat used inthe original peering is set at 2 and no greates. Example |-24 also stows the ICMP detug with the TIL expiration messeges that indicate the peering bas filed even though IP connectivity exists between loepbacks, If you have your eg-multihp count set at 2 between R2 and R5, you have scored 2 poiuts, Example 1-24 eBGP TTLExpirstion Asicontigy# int Rs(contig-it)# shut ‘Tye oscars sequence to abort. Teasing the route to 120.100.2.1 2420.400.129.2 4 waae * 4 wose fst debug ip cmp fs ‘an 17 21:92:02.458; IOP: tine excesdad rowd From 120.4 se 2s debug ip icmp TOIP packet dsbucning 4¢ on (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe dasPrectice Lab By CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Example 1-24 eBGP TTLExpiration conned © Configure a aew loopback interface 2 on R2 of 130.100.200.1/24 and advertise this into BGP using the neswork command. Configure R2 in such a way that ifthe Frame Relay connection between R2 and RS fails, AS300 no lenges receives this route. Do not use any filtering between neighbors or neighbor-specific command to achieve this. G points) If the pooring fils between R2 and RS, instead of flowing directly from AS100 to AS300, the new satwork cou flows from AS100 to AS300 via AS200, As such, communities cam be used to ensure thatthe soute is aot exported to AS200. ‘You simply need 10 apply a no-export value to the route as itis advertised on R2 toward R3. This way the route is not advertised to AS200 in the event of «failure. Under normal conditions AS200 would stil se the route from AS300, If ‘you have configured this correctly, as shown in Example 1-25, you have scored 3 points. Example 1-25 Route Advertisement and no-export Configuration on R2 Origin coos: 4 - 16?, ¢ - ESP, 7 - inoonmlet Network Hoxt Hop Metoie LooPe Weight Peth R2(contigh# interface Loopback? R2(contig-it)# ip adiress 130. Ra(oontag-it)# rauter bap 1 Ra(oontig.router}# network 420.4 200.1 255.255.255 (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasPrectice Lab [32] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Example 1-25 Route Advertisement and no-export Configuration on R2 _cominued R2{contig-router}# neighbor 120. R2{contig-router}# neighbor 129. Ra{contig-router}# exit Ra(confight accere-Aint & pernlt 190,100.20 R2(contigh# route-map NO-EXPORT perait 10 R2{contig-route-map)F watch ip aderess 5 R2{contig-route-map)F set comunity no-export Ra(oontag-roue-map)e reutecmap NO-EXPORT perast 20 3.4 route-aap HO-BXPORT out 9.4 send-community 3# sh ip bop 13 BOP routing table entry for 198.109. 200.0)24, version 4 Pathe: (1 available, best #1, table Osfault-IP-Routing-Table, rot advertised to FBP ser) Davertised to update groups: 2 Local, (Receives trom @ Af-ettent) 120,160.2-4 (motedo 65) Foon 129.1 Orioin 16P, metric 0, localpref 1 Community: no-axpert 2.4 (490.108.200.4) Valid, internal, best Fntar configuration someands, one par Line, End with CNTL/2. Rs(contighe int 10/0! As(contig-it)# shut fstcontig-it)# “2 Ace how 3p bap fst ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme dasPrectice Lab [33] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 © Configure Hot Standby Router Protocol (HSRP) between RS and R6 on VLAN300 with RS the active for 1/24. I the network 130.100200.0/24 is no longer visible to AS300, R6 should dynamically become the HSRP acive. Configure RS to achieve this solution. 4 points) ‘The clue is inthe question. All you need to do is track the specific route withthe IP SLA objecttracking feature and inform the HSRP process if the BGP routs is withdcawa. You might fel that this isn’t stictly a BGP question, but because the 10S section tas been removed from the exam, topics and features like this crop up within other sections. So it’s bes to be aware of as many features as possible. Because the question doesn’t specifically igstruct you to configure an exact IP address for your HSRP, you are free to use an unallocated IP address. RS should he the HSRP setive user normal conditions so this should be configured with the preempt command to rein- state control when the route becomes visible once again post withdrawal. Similar, R6 also requires preempt to take control when the priority of RS decrements. BS hasa't heen configured witha privity inthis example because it uses the default value of 100. Example 1-26 shows the configuration ad testing steps invelve to withdraw the route by shutting down the Frane Relay interface on RS and toggle the HSRP functionality between RS and R6. If you have configured this corrciy, as shown in Example |-26, you have scored 4 points Example 1-26 _IP SLA Tracking and HSRP Configuration on RS and R83 As(oontigi® track 2 ip route 13 As(contig-track)# interface Gi s(contig-it)s standey 1 ap 1 Ac(oontig 4¢)# otandsy 1 preeapt Rs(contig-if) standby 1 track 2 4 285.255.255.0 reachability Ro(oontigye Laverface Gigabitécnesnete/ 1 AS(oontig.Af)# etandby + Ap 159.100.2.4 ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme dasPrectice Lab [34] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Example 1-26 _IP SLA Tracking and HSRP Configuration on RS and RB _ continual AB(oontig-it)# standby 1 priority 90 AB(contig-it)# standby + pre wt Ast sh standby gigabitEthernet 0/1 GigabitEtrernstO/t - Graup + Virtual IP ddress 4e 150.100.9.1 dotiva virtual MAG adeross 4 Loval virtual MAG adress de act allo sant in 0.460 seo Fressption onatled dotive router Se Local 8070204 087.2cdt vt defeat) ‘Standby router 16 189.100.3.6, prtorsty 90 (expires 20 8.472 660) Priority 100 (dofoul® 100) Track cbisct 2 state Up desrenent 20 1 redurdancy rane is *hsrp-Gi0/1-1* (default) fo fst cont t Rs(contigie int s0/0!4 As(contig-it)# shut hs(oontag-at)# 2008 cisco syste, Inc Alights sere ris pbtzatin is prteceaby copyrght Peso oe paz 5 forme dasPrectice Lab 135] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Example 1-26 _IP SLA Tracking and HSRP Configuration on RS and R8_coninet SANE? -9-NOTEFIATION ASASHSAP-6-STATECHANGE sont to nsightor 12 GigabitEtnoenetO/+ Grp 1 state Active > Seal 2.1 410 (hold tins expired) @ bytes NowHGAP-€-STATEGIANIE: GigibitEthernetO/1 Grp 1 state Speck -> Standhy stan stardby gigabitEthernst 0/1 GigabitEtrernstO/t - Graup + State de Standby 25 stete changes, Lest state change dotiva virtual MAG adereos ds 0 Loval virtual MAG acres ie 607.200 087 2cdt vt defuutt) Pollo tine 3 so, tolé tine 10 seo Frassntion snabled dotive router 4s 160 Standby router is Local Priority 80 (derauit 10) 8, priority 60 (expires in 8.950 ssc) IP rodurdancy rane ie *hsro-Gi0/1-1* (default) 1m Configure two new loopback imerfaces on R | and R2 of 126..1.1/24 and 130.1.1.1/24, respectively, and advertise dese into BOP using the network command, R3 should be configured to allow only BGP routes originated from RI ‘up to.network 128.00,0 and from above network 128,009 only those originated from R2. Use only a single ACL on 3 as pat of your solution. (3 pois) (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasPrectice Lab [36] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 This isan intricate question because you are permited to use enly a single ACL tp filter the routes ca R3. The method to achieve this isto use an ACL tha: matches networks up to 128.0.000 and germit this through one route map while denying through a separate route map. The route maps should be applied on a per-neighbor bass, and both call up the sume single ACL. Example 1-27 shows the configuration forthe new loopbacks on RI and R2 and the filtering on R3. Further esting is detailed in Example 1-28 to substantiate the filtering process on R3. Ifyou have configured this correctly, as shown in Example 1-27, yeu have scored 3 points Example 1-27 _ Route Map Fitering on R3 Ri(configy# interface Leoptackt Ri(contig-it)s ip adiress 126. i(eontag-ir)# reuter bgp 10 Ri(contig-router)® matwerk 126.4.+.0 wack 255.255.255.0 1.4 185.255.255.0 R2(contigh# interface Leoptackt he(oonrag-at)s ap address 190.1.1.1 255.255.255.0 Ra(oontig Af)# reuter bgp 10 Ra(contig-router}# network 130.1.1.0 wast 255.255.255.0 Ra(oontight access-List 1 perait 127.288.256.255 a(contig}e route-mep UFTOIZ8 perait 10 Ra(contig-route-map)# natch ip adé 4 R3(contig}# route-map ABOVEY28 perait 10 fa(contig-route-aap)# etch ip ade 1 Ro(oontig.route-map)* reutecmap ABOVES2O permit 20 ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme dasPrectice Lab Nore. configuntin is ot proset onthe surpich, LT] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Example 1-27 Route Map Fitering on R3_ count Ra(contight router byp 1@ Ra(contig-router)# neighbor 121 Ra(contig-router)# neighbor 121 3# sh ip bop BOP table version is 8, Locil router ID is 129. Stetus coos: © suppresced, o damped, n nistory, * valid, > best, 1 - antoenel, Origin codes: i - 16P, ¢ - ESP, 7 - insomplete Network Hoxt Hop Metoic LooPef Weight Peth so930.404 2m ok £51130, 100.200.0/24 120.100.2. om 8k Further testing ofthe filtering quires additional interfaces to he configured end advertised on RI and R2. Example 128 shows an interface higher than 128.(.0.0 advertised on RI and one lower advertised on R2. R3 simply blocks these from entering BOP. Example 1-28 _ Route Map Fitering Verification Ii(eonrigy# interface Leoptacks Ai(oontig-if)# dp address 192. Ri(contig-it) rauter bgp 10 Ri(contig-router)# network 132.1.1.0 wast 255.255.255.0 Ri(contig-router)# “Z 2008 cisco systems, Alright resend, This pubaten spotted by copyright Plesoe cs page Si ermere desiPrectice Lab Example 1-28 Route Map Fiterin [33] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 \gVerification _cominud Ata sh ip bgp neighbors 122. BGP table version is 7, Loot) router Stetus codes: © supprocced, ¢ damped Origin codes: i T6P, © - 3. 7 Netvork Hoxt Hop so reet 072 9.0.0.8 sensor 0.0.0 Total amor of prefixes 2 BOP tabla varsion 4s 4, Local router Status codes: © suppressed, ¢ damped F FIB-failure, § Stale origin cows: 1 - 16P, €- 59, 7 Ntvork Noxt Hoo 251126.1.1.0/24 120.104 *-1190.108.200.0/28 120.100.2.1 Rae conf t R2{contig}t int Loopback na(oontag-at)# ip adi 8.1.1.1 286. 2.1 advertised Wo se 128.4.4.4 J, h history, * valid, > bect, 4 - internal, rcomplate Netrse LacPr Weight Peth 10 4s 120.100.9.1 J, W history, * valid, > best, i - internal, srcomplete Neotrio LocFrf Weiaht Path ° ot ° oa 195.285.0 (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe dasPrectice Lab [39] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Example 1-28 Route Map Fitering Verification conn Ra(oontig- it) rauter bgp 10 Ra{contig-rovter)# network 100.1. Ra(contig-router)s “Z BOP tabla varsion 4, Local router TD $e 429.100,200.+ Status codes: © supprosced, d damped, h history, * valid, > best, 1 - intoonel, FIB-failure, § Stale origin coos: 1 - 16", € - ESP, 7 - anoomplete ask 255.255.255.0 Network oct Hop steis LocPr Weight Peth By ° so7ee i ss 330404 ° seria i > 130:100.200.0/26 ° oerte i Total amor of prefixes 3 nse sn ap bgp Stetus codes: © sppresced, d damped, h history, * valid, > best, 1 - intoonel, FIB-failura, § Stale Origin codes: i - 16?, € - ESP, 7 - incomplete Network Noxt Hoo Hotoio LocFr# Waignt Path 251126.4.1.0724 ° ore ° 4 21130, 100.200.0/28 e cr (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasPrectice Lab [90] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Section 4: IPv6 (14 Points) ‘The prerequisite tothe questions is configuration ofthe IPv6 addresses and Frame Relay. You should test your IPvé connectivity to ensure thet you ae ready to progres: to the routing questions. OF course, you noed Frame Relay maps to achieve connectivity. [n contast to TP though, you need two maps: one to reach the IPv6 remote address over the PVC and one to map to the remote link local adeesses, Example 1-29 shows the iitial testing over Frame Relay and required IPX6 configuration to progress onto the routing questions. Consider using the show ipy6 interfaces brief command for a quick check of your iaterface configuration, Example 1-29 _IPv6 Testing and Initial Configuration Frane foley picket dsbugsing is on Fie ping pv 20072615:00:112:3 Sending 5, 109-byte {OHF Eovos to 2007:015:08:14':3, tingout is 2 saconds: Saria/0/0:Encape failed--90 wap entry Link 79(IPVE) Ri(configit int <0/010 Ri(contig-it)# frane-relay aap ipr6 2007:C16: ARi(contig-it)# “2 11129 100 broadeast Rat conf t Ra(conight int a fa(contig-it)# tea Ro(oontig-it)# -2 vo relay aap prs 20 11121 201 brosdeast ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme dasPrectice Lab CCIE Routing and Switching Practice Labs Example 1-29 _IPv6 Testing and Initial Configuration _consied iy Martin Jamas Duggan, COE No, 7042 Fig ping ipv 20072635:00:11::3 ‘Type escape: saquence to sbort. mn Suosess rete Le 100 porcent (5/5), round-trip min/ avg/mex rie aha ae RO sh Apv6 int 20/8/0 | declude Link-Local Pv is enabled, Link-Looil ars a Virtual Link-Loval addoees(ee) Fig sh ipy6 interface 0/0/0 | include Link-Local 16 is enabled, Link-Looil are to Virtual Link-Lovad address(es) Ras sh Apv6 interface £0/0 | inclede Lint-Leeal PVG is ented, Link-2oosl sds de FEB: :210:7°FF FE No Virtiad Link-Loved adenoa(es|: R24 sh Ap interface 0/1 | inelode Lint-Leeal PVG is ented, Link-Lootl adervse de FES: :210:7FFF FEB: BEEO a Virtual Link-Loval addoees(ee) os ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme dasPrectice Lab [92] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Example 1-29 _IPv6 Testing and Intial Configuration _conied Fst sh ApvG interface 20/0!1 | include Link-Local Pv is enabled, Link-Looal adr Fi(contig}# ipv6 unica Ii(conragie interrace giganitetnernet 0/1 Ri (oontig Af) Ayu addreve 20072¢45:C014 Ri(contig-it)s interface Serial0/0/0 Ri(contig-it)s igv6 address 24 Ri(contig-it)# frane-relay aap i(oontig-it)# feanerrelay aap Ri(oontig-if)# frane-relay aap broadsast i(contig-it)# frane-relay aap ipr6 FEB: :214:6AFF:FEFC:7390 103 broadzast Ra(oontigy® Spu6 undea R2(contial# interface fastEthernet 0/1 Ra(contig-it) igv6 address 24 Ra(contig-if)# interface serial Re(oonfig-iF)#+ iqv6 addrene 24 Ra(contig-it) frane-relay nap ipv6 2007:C1 Ra(oontig-if)# frane-relay aap Spv6 2007:C% Ra(oontig-if)# frane-relay aap Spv6 2007:C% ha(oontig-at)s trane-relay aap pr6 FEB: :219:C3FF:FETB:ESC1 203 broadzast (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe dasPrectice Lab [93] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Example 1-29 _IPv6 Testing and intial Configuration _conied R2(oontig-it)# frane-relay aap ipr6 FEBO::214:6AFF:FEFC:7390 203 broadzast Ra(contig-it)# interface serial 0/1 Ra(contig-it)# igv6 address 2007:18:C0:14: 2/66 Re(oontig-it)# frawecrelay aap spr© FEOO::214:CAFFFETC=F49 215 broadsast Ra(contig-it)# frane-relay nap ipr6 2007:C18: 245 broadcast s(eonragyF 1pv6 unseast-reuting RD(oontigit interface gigabieEthernet 0/9 Ra(contig-it)# igv6 address 26 Ra(contig-if)# interface serial Ra(contig-it)# igv6 address 26 yes Ro(oontig-if)# frawecrelay aap spr6 2007:C18: 02 broadcast fs(oonragye tpv6 unsea routing Ra(oontigit interface gigabitEthernet 0/9 Ra(contig-it)s igv6 address 24 Ro(contigy# Spv6 unica Rsicontigi# interface gigabitEthernet 0/1 Rs(contig}# ipv6 address 2007:C15:C0:16::5/54 Rs(contig-it)# interface Serial0/0/1 hs(contag-at)# igv6 address 24 Ac(oontig Af)# frane-relay aap 14 Rs(contig-it)# frane-relay aap ipr6 FEB: :213:7FFF:FEGA:EEEO 512 broadzast (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasPrectice Lab [94] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Example 1-29 _IPv6 Testing and Intial Configuration _conied B(contighF ipv6 unicast-reuting RB(contigh# interface gigabitéthernet 0/1 RB(contig-it)# igv6 address 26 16: 16/64 Section 4.1: RIPng © Configuee Routing Information Protocol next gonsration (RIPag) ensuring that your IP\6 routes are visible through- cont your RIPng domain. Donat disable split-harizoa. (3 points) By default, RS has split-horizon enabled on the Frame Relay interface. The hub receives both RJ and R? Ethernet asso ated IPV6 routes, but because split-horizon does not advertise, these back out onto the same interface. Because you are ‘not petmited to disable split horizon, you need to create a tunnel between RI and R2. Example 1-30 shows the inital Png configuration end couting tables of RU and R2 without each other's Ethoract IPV6 routes present and the reqaired tunnel configuration. If you have coefigured this correctly, as shovtn ia Example 1-30, you have scoeed 3 points Example 1-30 _ RIPng Configuration and Testing Ri(contigi# interface gigabitéthernet 0/1 Ri(contig-it) iyv6 rip CCIE i(eontig-it)# Aatertace sere Ri(contig-it)# Syu6 ndp CCIE ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme dasPrectice Lab [95] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Example 1-30 _RIPng Configuration and Testing _continsed R2(oontight interface fastEthernet 0/1 Ra(contig-it)# igv6 rip CCIE enable Ra(contig-it)# interface serial Re(oontig-if)# Sqv6 rip CCIE enable Ro(oontig-if)# interface serial 014 Ra(contig-it)# igv6 rip CCIE enable s(conragye interrace gigabitetnernet 0/8 RD(oontig.Af)# dqv6 rip CCIE enable Ra(contig-if)# interface serial Ra(contig-it)# igv6 rip CCIE enable Ia(contigh interface gigabitEthernet 0/0 Ra(contig-it)# iav6 rip CCIE enable As(contigh# interface Serial: in o(eonrag-at)# 1yv6 rap CCIE enable Aig show inv6 route rip 1Ps6 Routing Table - 1 Codes: ¢ - Comacte L = Local, § - Statie, A - RIP, B - BSP 11 = ISIS L1, 12 = TSI8L2, TA 1818 dntanarsa, 18 = 1818 summary © = OSHF intra, OL - OSFF inter, OE1 - OSPF act 1, OE2 - OF ext 2 OY = OSPF SGA ext 1, O12 - OSPF ABSA ext 2 = EIORP, Ex - ELGHP external, or se46:605 4812/64 (120/2] Via FE80::214:6FFIFEFL:7300, Serial6/0/2 ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme dasPrectice Lab [98] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Example 1-30 _RIPng Configuration and Testing _cowinet 72s show ipv6 route rip 1Ps6 Routing Table - 1 Comected, L - Local, § - static, R- AIP, B - 63P Ty = ISIS L1, 12 = T5182, TA~ 1818 iotararsa, 18 = 1818 sumary © OSFF intra, OI - OSFF inter, OE1 - OSPF ect 1, 0E2 - OFF ext 2 OW = OSPF SKA ext 1, O12 - OSF HBEA ext 2 aor sc48:60518::)64 (120/2] ia FE80::214:6FF:FEFL:7500, Serial6/0 3# show ipv6 route rip Codes © Comacted, L = Looal, § - Static, R= AIP, B BOP U Per-usar Statie soute 11 - ISIS Lt, 12 - 1818.2, TA 1818 intorarsa, 18 - 1815 sumery D - EIORP, © - ELGAP oxternal 20r7 10:60: 2/64 [120/2] ia FEBO::219:7FFFFEBUSRERD, Sorial0/0/0 Ai(contigi# interface Tunnels Ii(contag-at)# iyv6 address 24 (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe dasPrectice Lab (7) CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Example 1-30 _RIPng Configuration and Testing _contnsed ie i rie R20 R20 reo (0 R20 R20 rie Ine oe onfig-if)# iyv6 rip CCIE enable ontig-if)# tunnel. source Serial0 onfig-if)# tunnel mode pvp ontigh# interface Tunnelt ontig-if)# igv6 address 2 sontig-it)# 4yv6 rip CCIE enable onfig-if)# tunnel source Ssral0 ontig-if)# tunnel destination 12 ontig-it)# tunnel mode ipv5ip 100.4 show spvB route rip outing Teble - 11 entrioe (© = Connacted, L- Local, § - Static, R= RIP, B - ESP © = OSHF sntra, OL = OSFF inter, O€1 - OSPF act 1, OE2 - OF ext 2 OM = OSPF SGA ext 1, O12 + OSPF ABSA ext 2 D - EIGRP, EX - ELGRP external, 0r7:610:60; 2/68 [120/2] 102, Tannalt 4 (120/2) 1802, Tunnel fe (120/2), ia FE00::214:GAFFSFEFS:7200, Corsal6/0/2 (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasPrectice Lab [93] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Example 1-30__RIPng Configuration and Testing _cowinet 2s show ipv6 route rip 1Ps6 Routing Teble - 13 entrise (odes: © - Comected, L - Local, 8 - static, R - AIP, B - 63P Ty = ISIS L1, 12 = TSI8L2, TA ~ 1818 intanarsa, 18 = 1818 summary © OSHF intra, OL - OSFF inter, O€1 - OSPF ect 1, 0E2 - OF ext 2 OW = OSPF SSA ext 1, O12 - OSF HBEA ext 2 4032/64 [120/2] :7864:7801, Tunnalt i (120/2] 330, Serial0/0 Section 4.2: OSPFv3 © Configure OSPF v3 with a process ID of 1 and with all OSPFintcrfaces assigned to arve 0. (2 points) This isa clear-cut OSPFV3 configuration. Ifyou have configured tis correctly, as shown in Example 1-31, you have scored 2 points, Example 1-31 _ RS and Re OSPFVS Configuration o(oonragye intertace gigatitéthernet 0/7 Ac(oontig-st)# dyve cop 4 a RB(contigh# interface gigabitéthernet 0/1 AB(contig-it)# igv6 ospf 1 aren @ 2008 cisco systems, Alright reseried, This pubatens protected by copyright Plese so page Si fermere desiPrectice Lab [99] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Example 1-31 _R5.and R6 OSPFV3 Configuration _coninied St show ipvE o8pf redghbor Neighbor 1D Fri State Dead Tino Interface 10 Trterface 126.109.6.1 1 FULL/ON 00:00:00 9 Osgabitesnornett/4 Bt show ipvE o8pf redghbor Noignoor 10 Fra state _osad Tame Intertace 10 trterrace spesou.s.s 4 FUL/SOR oo 8 Gagabitesnornett/4 1m The [Pv6 network is deemed to be stable. As such, reduce the number of link-state advertisements (LSA) flooded ‘within the OSPF domain. (2 points) ‘Tosuppress the umnecessiry Nooding of link-state advertisements in stable copologies, the ipy6 ospf lood-reduetion command is required under intorlace configuration mode. IF you havo configured this comectly, as shown ia Example 1-22, you have score 2 pois. Example 1-32 _ RS and R6 Flood-Reduction Configuration Rs(contigi# interface gigabitéthernet 0/1 As(oontig-if)# dqv6 cept flood-reduction RB(contigi# interface gigabitEthernet 0/1 AB(oontig-if)# dgv6 cept Flood-reduction 2008 cisco systems, Alright resend, This pubaten spotted by copyright Plesoe cs page Si ermere desi[100} CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Prectice Lab Section 4.3: Redistribution © Redistibute RIPag routes into the OSPF V3 demand (one way). PIP routes should have a fixed cost of S000 associ. sed to thom within the OSPF network. (1 post) As per vanilla OSPF, the deft behavior for OSPFv3 & for redistributed routes to be advertised with a fixed cust as type 2 extemal routes, so 2 simple redistribution configuration with a defauit metric of 5000 on RS is required. Example 1 ‘hows the required configuration and routing table on R6 forthe vdisivibuted RIPag sours. Pay attention to ensure that ‘you have full soute visibility because the Frame Relay nctwork on RS (2007:C15:C0:14:) is not prescat within the ‘OSPF%3 domain unless RS specifically wedisribute ite owa cennested interfaces. If you have ccnfigured this correctly, as shown in Example 1-33, you have soored 1 point Example 1-33 _ RS OSPFv3 Redistribution Configuration As(contigh# ipv6 router ospf 4 o(oonrag-router)® reeistrabute rsp CCIE wetrae 5 ABs sh ipv6 route ospf 1Ps6 Routing Teble - 10 entrise Codes: © - Comected, L - Local, 8 - static, R- AIP, B - 63P 11 = ISIS L4, 12 = TSI8L2, TA ~ 1818 dntararsa, 18 - 1818 sumary © OSHF intra, OL - OSFF inter, O€1 - OSPF ect 1, 0E2 - OF ext 2 OW = OSPF SSA ext 1, O12 - OSFF HBSA ext 2 Jos [110/200) (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe das[01] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Prectice Lab Example 1-33 RS OSPFV3 Redistribution Configuration cominued 62 164 [110/000] 131, Gigabitethernd 164 [110/000] vie E00, :214:0AFF:FEFP:> 101, QigabisEthern 184 [110/000] FFSFEFO:FI31, Gigabittherns ee 62 o(conragie 1pv6 router ospt 4 As(oonfig.rtrj# redistribute rip (CIE wetrie 5000 include connected ss show ipv6 route 2007:C18:¢2 1Ps6 Routing Teble - 10 entrise U = Par-unar Static: souts 11 - ISIS Lt, 12 - 1818 L2, IA 1618 intorarsa, 15 - 1815 sumery © - OSHF intra, OI - OSFF inter, O€1 - OSPF act's, 0E2 - OF ext 2 2/84 [105000] FESFEFO:F131, Gigabittherns Ht 1m Ensure thatthe OSPFV3 nework isreachable fom the RIP network by a single cout of 2007/16, which should be seen within the RIP domain, Configure RS only to achieve this. The OSPF domain should continu to recive specific RIPag subaets. (2 poinss) Because you are sot mutually sedistibuiing proocels, you are required to configure an IPv6 summary route into the RIPng domain on RS to provide full connecivity from the RIPng domain into OSPFY3. If you have configured this correcly, 25 shown in Exumple 1-34, you hive scored 2 points. (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasPrectice Lab [102] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Example 1-34 RS RlPng Summary Configuration and Connectivity Testing As(config-if)# int s0/0)1 As(contig-it)# igv6 rip CCIE summary-address 26072: /16 1TPs6 Routing Table - 13 entriae R207 :2/48 [120/3] ‘via FEGO::219:7FFFAFEOL:BEED, Turnels our cxss00:128 2/64 [120/2] R00 ie (100/2] via EE, Turned 2007 164 (120/2] ia E00: :214:CAFF-FEFS:7350, Serial6/0/2 rie ie ping Type escape sequence to abort. Sending 6, 109-byte 1OMP Eanes to 20072C%6% nu Suezess rete Le 100 porcent (5/5), round-trip min/ avg/mex Fig ping pv 20072015:00:16::6 2/42/18 ne ‘Tye oscars sequence to abort Sending 5, 100-byte [OUP Eonos to 2007: nu Suesess rete Le 100 porcent (5/5), round-trip min/ avg/mex 6:26, tineout is 2 seconds: 2/45/18 06 2008 cisco systems, Alright reseried, This pubatens protected by copyright Plese so page Si fermere desiPrectice Lab [103] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 1m Ifthe serial link fils between the OSPF and RIPng domains, ensre that rotting is still possible between RS and R4 over VLANAS. Do not enable RIP on the VLANAS interfaces of Rd and RS. Configure R4 and RS to achieve this, and this should te considered an alternative path enly in the event ofa failure. (3 pcits) Réand RS both belong to the RIPag domain. Ifyou caa"t enable RIPog on the VLAN4S interfaces, all youcan do is create a tunnel beeen the devices, You might have considered enabling OSPEv3 between routers, but ou have act been given sufficient information to perform this. Also, it would thea create additional problems ia terms of redistribution points. Example 1.35 shows the required configuration to tunnel IPv6 through IPv4 on RA and RS. Notice that certain routss have a lower hop count though the tinrel as oppased to through the physical RIPng network. The quesion staes that the newly configured link should be used only inthe event of failure. As such, you must penalize the tunnel by use of an “offset-list applied directly tothe tunael interface of R4 and RS. RS still rceives the summary /16 route configured earier ‘via the tunnel, regardless of how high you set the hop count, The fallowing question addresses this condition. If you have configured this cerectly, as shown in Example 1-35, you have seored 3 points, Example 1-35 _Réand R5 Tunnel Configuration and Verificstion Fa(oontig}® interface Tannel® s(contig-it)s igv6 address 24 Fa(contig-it)# igv6 rip CCIE a(oontag-st)# tunnel source Giganstetnennes9/1.45 Ra(oontig.Af)# tunnel destination 120.109.45.5 a(oontig-if)# tunnel mode 4pv54p 1718/64 As(contigh# interface Tunnelo Ro(oontig-it)# iqv6 addreos 20072¢18:C0:17::6/68 As(contig-Af)# 4qu6 rip CCIE onable As(oontig-if)# tunnel source GigabitEtherne:0/¢ As(contig-it)# tunnel destination 120.109.05.4 o(oonrag-ar)s tunnel mode pv5ap ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme dasPrectice Lab [104] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Example 1-35 _R4 and RS Tunnel Configuration and Verification _conintet Fad show ipv6 route rip 1Ps6 Routing Teble - 12 entrise Conectod, L- Local, § - static, R- AIP, B - 63P 11 = ISIS L1, 12 = TSI8L2, TA 1818 dotararsa, 18 = 1818 sumary © OSFF intra, OI - OSFF inter, OE1 - OSPF ect 1, 0E2 - OFF ext 2 OW = OSPF SKA ext 1, O12 - OSF HBEA ext 2 Re 0nrss/48 [120/41 FFSFEFO:7990, GigabitEthernst0/0 14 (120/9] Gigadisetnarnsto/o orsec0:11::/88 (120/2] via FEBO::214:RUFFSFEFO:7200, GicabiEthernst0/0 Ror :C45200:1251/64 [120/9] Giadisetnonnsto/o via FER: :244: ‘via FE8@::7654:2006, Tunnal@ R07 :c16:00:14::/64 [120/2] ie (128/9] FF:FEFO:7390, GioabitEthernst0/0 (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe das(108) CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Prectice Lab Example 1-35 _R4 and RS Tunnel Configuration and Verification _conintet Ast show ipv6 route rip 1Ps6 Routing Table 14 entries Comected, L- Local, § - static, R- AIP, B - ESP 11 = ISIS L1, 12 = TSI8L2, TA ~ 1818 dotanarsa, 18 = 1818 sumary © OSHF intra, OL - OSFF inter, O€1 - OSPF ect 1, 0E2 - OF ext 2 OW = OSPF SKA ext 1, O12 - OSFF HBSA ext 2 Re 0nrss/48 [120/61 via FEB@::7854:2004, Tunnel i (120/9] FSFESU:BEEO, Sorial0/0/1 oer :049:00% 14s s/04 [108/2] via FE80::210:7FFF:FERL:BEED, Serial0/0/4 8 15 [120/2] FF SFESU:BECO, Serdal0/0/1 8 18:00: 132:/68 [120/2] ia FE00::219:7FFF:FEBI:BEED, Serial6/0/4 R207 :c46:00:18::/64 [120/21 ‘ia FEBO::7654:2004, Tunnal® Ro(contigh interface Tunnel Asioontig-if)# fav rip CCIE metric-offast & Rs(contig-it)# de show ipvé roste rip 1Ps6 fouting Teble - 14 entrise (Godse: © ~ Comected, L - Local, 8 - static, R- AIP, B - ESP 1 - ISIS Lt, 12 - 1818 L2, TA 1618 intorarsa, 15 - 1815 sumery (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasPrectice Lab [108) CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Example 1-35 _R4 and R5 Tunnel Configuration and Verification _conintet (© = OSHF intra, OL - OSFF sinter, OE - OSPF act 1, OE2 - OF ext 2 OY = OSPF SGA ext 1, O12 - OSPF ASEA ext 2 D - EIORP, EX - ELORP external, Ror ss/40 [12078] ia FEBO::7654:2004, Tunnal® R007 :c46:00:10::/64 [120/3] ‘via FEGO::213:7FFF:FESI:BEEO, Serial0/0/1 8 18:09:11 22/68 [120/2] vie FE90::242:7FFF:FEBI:BEED, Serial8/0/4 8 ie (100/2] FF SFESU:BEEO, Serial0/0/1 8 i (120/2) ia E00: :210:7FFF-FEBL:BEED, Gerial6/0/4 Ror :c46200:48: 164 (19079) via FEGO::213:7FFF:FESI:BEEO, Serial0/0/1 fa(conragye snterrace Tunneto Ra(oontig.Af)# dqv6 nip CCIE metrio-cffest & Rs(contig-if)# de show ipvé roste rip 1Ps6 Fouting Teble - 12 entrise Code: ¢ - Comected, L = Local, § - Static, R = AIP, B - EOP 11 = ISIS L1, 12 = TSI8L2, TA ~ TS18 intanarsa, 18 = 1818 summery © = OSHF sntra, OL - OSFF inter, OE1 - OSPF act 1, OE2 - OF ext 2 Ot = OSPF SGA ext 1, O12 + OSPF ADEA ext 2 D ELORP, EX - ELGH? external, 0073/40 [120/41 ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme dasL007) CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Prectice Lab Example 1-35 _R4 and RS Tunnel Configuration and Verification _conintet :2M:MFFIFEFE:7390, GigabivEthernstO/0 R207 via FF F0:7390, GigaditEthennstO/0 conn i ss)64 [12072] via FE80::214:FF:FEFC:7900, GicabitEtnarnstO/0 Ror 2/88 [120/38] via SAFF:FEFO:7200, Gigabittherns R08 i [120/3] S214 :BAFFSFEFE:7290, GigahisEthernst@/0 1m Ensure that the summary roate configured previously is not sven back on the routing table of RS. Configure only RS toachiowe this. (I point) As briefly discussed inthe previous question, the summary route retums to RS through the newly created tunnel interface, This is expected behavior because of the method in which it was cxiginlly advertised, A simple prefixlst is required on 5 to deny the summary and permit all othe routes entering the tunnel inierface. If you have configured this corectty, as shown in Example 1-36, you have soored 3 points, Example 1-36 _R5 Distribute-List Configuration and Verification Fst show ipv6 route rip 1Ps6 Routing Teble - 14 entrise (Godse: © - Comected, L - Local, 8 - static, R- AIP, B - 63P ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme dasPrectice Lab [109) CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Example 1-36 _RS Distribute-List Configuration and Verification _cominuat (© = OSHF intra, OL - OSFF sinter, OE - OSPF act 1, OE2 - OF ext 2 OY = OSPF SGA ext 1, O12 - OSPF ASEA ext 2 D EIGRP, EX - ELOAP external, ovr ss/40 [12078] ia FEBO::7654:2004, Tunnal® R207 :c46:00:10::/64 [120/3] ‘via FEGO::213:7FFF:FESU:BEED, Serial0/0/1 8 18:09:11 22/68 [120/2] vie FE90::242:7FFF:FEBI:BEED, Serial6/0/4 8 ie (120/21 FF SFESU:BEEO, Sorial0/0/1 8 14 (120/2] via E00: :210:7FFF-FEBL:BEED, Gerial6/0/4 Ror :c46200:48::/64 (19079) ia FEGO::213:7FFF:FES:BEED, Serial0/0/1 o(oontagye 49v6 pretax-Last BLOCK-SUMURY 409 10 deny 200722/16 As(oontigi# ipv6 prefix-Ldet BLOCK SUMAAY oq 48 perait ::/8 Le 128 Rs(contia}# inv6 router rip CCIE As(contig-rovter)# distribute-List prefir-List BLOCK-SUMIARY in Tunnel0 Rs(contig-router}# do stow ipv8 reute rip Codes © = Comacted, L = Looal, § - Static, R = AIP, B BOP U Per-usar Statio soute 11 - ISISL1, 12 - ISIS 2, IA 1616 interarsa, 18 - 1818 sumery © - OSHF antes, OL - OSFF inter, OE1 - OSPF act's, OE2 - OF ext 2 (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe das[109} CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Prectice Lab Example 1-36 _R5 Distribute-List Configuration and Verification coninuet D R207 non 1 ss)64 [12072] via FE80::210:7FFF:FERL:REED, Serial0/0/4 Ror - R00 Section 5: QoS (8 Points) © You sre required to configure quality of service (QoS) onswitch 1 acconfing tothe Cisco QoS baseline model Create a Modular QoS configuration that facilitates the following requirements forall user ports (Fast Ethernet 1-24) G points: 1. All ports should trust the DSCP values reseived from their connecting devices. 2. Packets received from the user ports with Differentiated Services Code Point (DSCP) values of 10, 16, 24, 28, 532, 34, 46, and 48 should be remarkeé to DSCP 8 (PHB CS) inthe event of taf flowing abowe 5 Mbps on a 18-ort bass. This trafic could be a combinatioa of any ofthe earlier DSCP values with any source/destina tion combination, Ensixe that a minimum buss alue is configured above the 5 Mbp, (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasPrectice Lab [110] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Its acknowledged within the industry that» user port rarely generates more than S Mbps of trafic on a standasd FasEthernet connection. If traffic ras increase above this threshold, it could be indicative of a DoS or wor attack. A ‘method of mitigating an sttack isto create a "Scavenger-Class” that simply re-marks traffic DSCP values after the thesh- ld his been exceeded. This does nor block waffic, but does ensure thet mission-critical wafic remains unaffected fom an attack by tusting the DSCP value for known traffic and re-marking unknown application traifie down to CSI ‘Toanswer the question, you are required to create « Medular QoS policy that trusts the incoming DSCP value received from the host within the policy rather than by configuring the wust value en a per-interTace basis and by policing walic at sarate of S Mbps, When the minimum burst rates exceeded, the DSCP values are remapped according to tho policed ‘sep sap to Scavenger-Class CSI (DSCPR), Note that all DSCP baseline values are heire: remapped with the exception of DSCP26, whichis generally reserved for mission-critical data, This approach allows taffic associated with this value to emain unchanged even wien traffic rates exceed 5 Mbps. This approach also essumes thatthe virus does not itself re- ‘mark traffic to this value to increase its chances of causing darnage. ‘The exclusion of DSCP2, though, is nct relevant to the configuration and methodology you use to answer the question, ‘The question requires tha: yeu configure a standard IP ACL that permits any traffic. For Waffic matching this chssifica tioa, tke DSC? value in the incoming packet is rusted. Ifthe matched traffic exceeds an average traffic rate of S Mbps and a normal burst size of 8000 bytes, its DSCP is marked down according to the policed DSCP map values and transmit- ted. If you have configured this correctly, as shown in Example 1-37, you have scored 3 poiets Example 1-37 _ QoS Configuration and Verification SUi(contigy# ats gos OUI(config}# as qos aap policed-dscp 48 45 94 92 24 28 16 19 to @ SH1(config}# access-list 1 perit any O41 contig)# eLase-map POLICE 1 config-omp}# natch access-greup 4 H1(config-omp)# exit ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme dasPrectice Lab cnt] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Example 1-37 _ QoS Configuration and Verification _conimes 11(contigh# policy. ‘911(contig-pmp)# elass POLICE H1(contig-pmp-c)# trust deep O11(contig-pmpre)# police af 1 conFig-omp-e)# #xit S1(contig-pmp)# exit RE-NARC SHI(config}# interface range fastétnernet 0)1-28 ‘ni(conrsg-at-rarge)e servic 1% show policy-nap RE-NARK Policy bap AE-IARIK policy Anpre FE-MRK ols 5006000 6080 acoast-netion pel ioad-dsep-tranandt trust deep = Switeh 1 will be comeced ‘o anew (usted domain inthe future using terface gigabit V1. A DSCP value of AF83 received locslly on sw shoald be mapped to AF42 when desined forthe now domsin. (2 points) This requires a DSCP mutation map to convert DSCP values between environmests. If you don’t realize that AFA3 is, DSCP38 and AF4? is DSCP%6, you struggle to answer this question, but 2 search of your documentation CD ean assist ‘you. For the mutasion map to function correctly, you must explicitly trust DSCP values received onthe interface on which ‘You are configurisg the map. If you nave configured ths correctly as shown in Eample 1-38, you have scored 2 point. ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme dasPrectice Lab [112] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Example 1-38 _ Switch 1 DSCP Mutation Map Configuration Hi(contigh# als qos nap decp-autation AF4S-TO-AFAZ 38 to 36 SHi(config}# interface Gigt/1 OUI(config-if)# als qos trust dscp OU contig-if}# ale gow docp-mutation AFS9-10-Afs2 1& Configure Cisco Modular QoS into classes as follows on Ri forthe following traffic types based on their associated per hop tehavior. Incorgorae these into an overall policy tha should be applied to the TI interface SOO. Assume a ‘permanent virtual circuit (PVC) of line rate on the Frame Relay setwork and allow each clss the effective band- ‘width as detailed (3 points) Chess PHB Assigned Speed Rowting css 46%bps Vor Fy 247 kbps Ineracive Video ‘ABS 24T kbs ‘Mision Critical Daa AEST 24T kbs CalSinalina| cs 46kbos “Teancctional Data APR) 216 thre Newod-mamt 2 46h Dak Daw FIT a6 Bees Sevens cr Tip Deal a 38Ckb (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe dasPrectice Lab [113] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Heaps of points ae offered here, so you know its either going to be complex or involve a great deal of configuration. in fact, ths one is abit ofboth, so you run a risk of configuration ertors for those points to slip away. Also some math is {involved because the policy-map requires a percentage value of bandwidth as opposed to actual speed. Because you are using 2 TI interface, you know that the maximum wailable bandwidth is 154 ktps and a live ate PVC is assured, so tho values required areas follows: 1 persont= 1S kbps, 3 porcent = 46 kbps, 14 porcont = 216 kbps, 16 porcont = 247 kbps, 25 percent = 386 kbps, ‘A cass-map to match all values for the provided classes is required, which is thea associated with the polkey-amap, The ‘overall policy is thon applicd to tre outgoing interface SorilOV1/0, and a nico litle “gotcha” is that you must configure the interface with the command max-reserved-bandwilth 100; otherwise, the full bandwidth isnot made availabe for the policy. Usually yeu would assign voice traffic into 2 eal-time queve (Low Latency Queuing [LLQ), but the question doesn dictate this. So, effectively all traffic types are being assigned with different proportions of Class-Based Weighted Fair Queuing (CBWFQ). If you have configured this correctly, as shown in Example 1-39, you have scored 3 points Example 1-39 _ Switch 1 Moduler QoS Configuration 1 clese-tap natsh-ell VOIP ctoh ip doop of ce lese-aap match-eLt BULN-DATA clese-aap natsh-el1 HET -AN etch ip dsop oe clese-aap natsh-el1 VIDED elasscaap mathe OUTING ston ip doop 08 (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[a] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Prectice Lab Example 1-39 _ Switch 1 Modular QoS Configuration comined lase-aap natsh-ell SCAVENGER nctoh ip dsop ot clese-aap natsh-ell TRANS-DATA lasscaap mathe ATSSION-CRIT mctoh ip doop af8t clese-aap natsh-ell tALL-S15 meton 1p asop ox nd Fig sh eur pelécy-mp policy-map 005 ‘lase VOIP tandvidth percent 16 clase BULK-DATA andvidth percent 8 randia-cstect andvicth paroant 14 clase NET-WA andvidth percent 9 clase HOUT ING ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme dasPrectice Lab [115] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Example 1-39 Switch 1 Modular QoS Configuration cominued clase SCAVENSER tandvicth parent + clase MISSIO4-CEIT randha-catact clase CALL-SIG tandvidth percent 8 1 nd inc-raservad:bardwidth 100 servise-polisy eutprt 008 no FoLiny ap 008 clase VOI? Jandvidth 16 (6) Hox Threshold 64 (yeckste} Bandvidth 46 (4) box Thosshold 6 (gaokate) clase BULK-O8TA Bandwidth 2 ( ‘xporantial wasght @ lace min-threchold max threcheld) — nark:prebability ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme dasPrectice Lab [116] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Example 1-39 _ Switch 1 Modular QoS Configuration coined ae ane we si ane ane we ss rw ane Clase TRAS-0ATA Sanavidth 14 (9) Max Threshold 68 (yackete} Cass HETAAN Zandvidth 8 () Mot Tiroseld 64 (ptcksts) case ROUTING Sanavidtn 9 () Mot Taremeld 64 (pickets) Zandvidth + (%) Mot Tiraseld 64 (pickets) cage MISSION-CRIT Bandvidth 16 (6) blast mincthesshold —max-thresheld —aark:probability ° ue ‘ ss 2 ane 2008 cisco Systems, Alright resend, This pubatens protected by copyright Peso ss page Skt ermere desii7) CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Prectice Lab Example 1-39 _ Switch 1 Modular QoS Configuration comined 8 wie 4 ane 5 ane e we 7 si rep ae Banavidth 25 (6) ‘xporantial waight 9 ae we si rw. (©2008 cisco systens. ne Alrights sere ris pbtzatin s rtscteaby copyrght Peso See Faye St frroe dasPrectice Lab [118] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 ‘= Configure R3 10 identify and discard the fellowing custom virus, The vit is characterized by the ASCTT characters “Hastings_Beee” within the payload and uilizes User Datagram Protocol (UDP) ports 11664 to 11666.TThe ID of the virus begins on the third character ofthe payload. The virus ceiginated on VLAN 34, (4 points) ‘This fictitious virus requies the use of NBAR with Packet Description Language Module (PDLM) to inspect a packet's payload to identify the virus based oa the information supplied within the question, Because the virus is located within the third ASCU character, you must inform the custom NBAR list to ignore the fist two characters, which ensures that it begins to check the third packet. Ifyou have configured this correctly, as shown ia Example 140, you bave seered 3 point, You can use the show policy-map command to verify your configuration. Example 1-40 _RSNBAR Configuration R3(contig}F ip nbar euston Hastin R3(contigh# class-map match-all VIRUS a(conrag-enag)# match protocol Hastangs_ Beer Ra(oontig.onas)# policy map BLICK VIRUS R3(contia-pnao)s clase VIRUS R3(contig-pnap-c}# drop Ra(contig-pnap-c}# iaterface gigabite/® Ro(conigeif)# dervice-yoLicy inpet BLOCK-vinUS 2 saciid tetings Beer sdp range 11664 11665 1& An infected hostis on VLAN 200 of 150.100.2100, Ensure that only within BGP AS10, traffic destined for this host is directed to Nuil0 ofeach local cuter, Yeu cannot use aay ACL to block traffic to this hest specifically, but can use static oute pointing to NullO for traffic destined to 192.0.2.0 24 on roaters within ASIO.R2 can have an addi- tional static route pointing to Null0. Use a BGP feature on R2 to ensure that traffic to tis source is blocked. Prevent ‘unnecessary seplies when traffic is passed to the Null0 interface for wers residing oa VLAN1O0. 4 points) ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme dasPrectice Lab [119] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 This question is epresentative of Black Hole routing and is an effective method of discarding peckes being sent to a known destination. This spproach to discarding trafic is efficient because it allows the edge routers to route traffic rather than using ACLs, and it can be deployed dynamically by making use ofthe next hop field within BGP updates. You are pemited i create a static route on routers R1,R2, and R3 in ASIO for network 1920.2.024 to NullO and one additional route on R2. This route nsede tobe disesting tafficto the infect hot to Null. ‘To update routers RI and R3, R2 simply advertises the host roate for the infected host to ASLO and sets the newt-hop for this to 192.02.1, Rowers RI and R3 then divect alli .o Null when trafic is destined tothe infected lost, To ensure that the solution is used caly in AS10 you must st the community to no-export for the specific static route. Also, tagging the route with a value of 10 idenifies it. You mist fherefore send the commurity values to neighbor R3.on R2, which you should have completed previously for an earlier BGP question. Use of the no iemp unreachable command on R's GigabiEthernet interface prevents unnecessary replies when traffic is passed tothe Null0 interface. IF you have config- tured this correctly, as shown in Example 1-41, you have scored 3 points. Example 1-41 _ BGP Black Hele Routing Configuration and Verification Re(oonfigh# tp route 192.0.2.4 259.266.256.256 Mull Ra(oontig}# ip route 158.100.2100 255.255.255.255 NuL1® Tag 19 R2{contigh# router byp 18 Ra(oontig-router)# redistribute static route-nap BLACIHOLE ha(oontag-rouer)® route-nap BLAGIHOLE perait. 10 Ra(eontig-route-map}# match tag $0 R2{contig-route-map}F set ip next-hop 192.0.2-1 R2{contig-route-map}F set comunity no-export R2{contig-route-map)F exit Re(oonfigh# fp route 192,0.2.1 255.246.255.255 NulLe R2(contigi# do stow ip bgp neigh 120.100.8.1 advertised BOP table varsion is 6, Locsl router ID 4+ 199.100.200.1 Status codes: © supprosced, d damped, h history, * valid, > best, 1 - intone, (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe dasPrectice Lab [120] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Example 1-41 BGP Black Hole Routing Configuration and Verification _coninueé store Next Hep Vsti LacPr Wight Fath 2130.11.07 0.0.0.0 ° 22768 4 *> 130.100.209.0/24 0.0.0.0 e sere 4 s> 10.100.2.100/02 192.0.2.4 ° sere i Total aimtar of prefixes 2 2s show sp route 1 outing ertry Tor 189.100.2.100/32 Kav via totatict, dLetanos 4, metric © [connested) Taq 10 Rodistributing via byp 10 Advartisee by bgp 10 rovte-nap SLAMHCLE + divestly comected, via Nil1® Route wetric ic @ traffic share count is + Route tag 10 RD(oonfigit fp route 192.0.2.4 255.266.256.256 Mull Ra(contia}# do stow ip bap BOP table version is 14, Jooal router ID se 120.100.9.1 Stetus codes: © suppresced, d damped, h history, * valid, > best, 1 - intone, Origin codes: 4 - 16P, © - ESP, 7 - insomlete Nstvore Next Hep otic Locket Woight Fath fo126.4.1.0/26 120.100.1.4 2 1m fk sense.t 0/2 120.100.2.1 om ak 191900. 100.209.0/04 12 ow os + 150.100.2.100/82 192. 2 wm 8k (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasPrectice Lab [eet] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Example 1-41 _ BGP Black Hole Routing Configuration and Verification _couinted Ri(contigh# ip route 192.0.2.1 255.265.255.255 Null Ri(contigh# interface Gigabit0/1 Ri(contig-it)# ne icap unreachable Ai(contig-if)# de show ip bop BOP table varsion 4 8, Local router 1D te 498.444 Stetus coos: © suppresced, d damped, h history, * valid, > best, 1 - intoonel, FIB-Failura, § Stale origin coves: 4 = 16", € = ESP, ? - snvomplete 25 126.4.4.0/24 ° 22768 4 om 8k 2 1m a8 Fis show ip route 1 Routing entry for 150 navn yaa "bgp 18", sistance 200, noteis @, type intemal Rovtiny Descripter Blocks: 2.4, Fron 124.100.9.1, 08:00:42 ago trie is @ traffic share count is + Fis show ip route 192.0.2.1 Rovting entry for 192.022.1182 navn via *statict, distance 1, metric © [connected Fovting Descripter Blocks: Route vetric is @ traffic share count is + ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme dasPrectice Lab [122] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Section 7: Multicast (6 Points) = Configure outers RI, R2, R3, und R4 for v4 Multicast. Configure R3 1 Send multicast advertisements of is own time by wie of Network Time Protecol (NTP) sourced fom interface Gig 0/0, Configure Protocol Independent should also be used to adverse ts oun Gigabit interface TP aliess as rendevous point (RP). R3 should also advertise the IPadress you are using forthe NTP averse ‘ments, which is to be 224,0.1.1. Do not use the command ntp server in any configurations. Routers RI, R2, and Re soul all show a clack synchronized to that of R3. (5 points) ‘Multicast (PIM) spare code on all sequined interfoes, NIP can te multicast on the reserved group IP adekess of 224.01. rather than in the more familia broudcast or aicast scenarios. The question requires you to configure R3 to become the sp txster and announce the group address t the NIP clionis. Because you are not pocmited to use the command nip server, you must configure the clients with the command nip multicast client, They then have the capability ‘0 cin the NTP group by use of PIM. Its gcod practice to TTL scope your multicast amouncemeats so that they do not propagae past the domain you require, Ifyou havea’t taken this into consideration in your solution, youare not deducted points, but be aware of the facility in case you are met with ‘question that specifi this. IF you have configured ths correctly as shown in Example 1-42, you have scared 6 points Example 1-42 _ NTP Multicast Configuration anc! Verficstion Ro(oontigit Sp weitie a(contia}e tp a Ra(oontigy® interface GigahitEthernet RQ(conig-if)# ip pin sparse-node Ro(eontig-it)# mip wiaticast wea 2 Ra(eontig-sf)# Ra(contig-it)# Ra(contig-it)# a(eontagye 4p Ro(oontigye ac cope 2 group-List 4 scope 2 ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme dasPrectice Lab [123] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Example 1-42 _NTP Multicast Configuration and Verification _coninuet 3# show wtp status (look ie synonrondzed, etratun 8, reference de 427.127.7.4 rnowinal freq Le 258.0000 Hz, actual freq 36 250.0000 Hz, precision is 2°18 reference tine 4s COMFIEG1.2AE19910 (24:17:21.107 UTD Toe Feb 27 200r) look offest is €.0000 280, root delay i 0.00 asec rost dispersion is 0.02 nce>, reer disporsion is 0.02 meee fi(conragye 1p aiticast-reuting Ri(oontig.Af)# interface Gerial0/0/0 Ri(contig-it)s ip pin sparse-node Ai(contig-if)# mip multicast cliert Clock is eynonrorized, stratun 9, reference is 120.100.38.9 rnowinal freq Le 258.0000 Hz, actual freq 36 250.0000 Hz, precision is 2°18 reference tine ie COMFIEY0.OFB23210 (21:17:45.628 UTD Tue Feb 27 2007} look attest Le €.0187 880, root delay 1¢ 9.00 asec Ri (contia-it)# 18 show ip gap greup TOIP connected Group Mesbershie 22 Serial 07070 $20,100.123.4 22 SerialQ/0/0 20.100.128.3 22 Serial0/0/0 Ra(oontigyt Sp aettionst-reuting Ra(contig-it)# interface Serial0/@ (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe dasPrectice Lab [124] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Example 1-42 _NTP Multicast Configuration and Verification _coninuet Ra(conFig-if)# ip pin sparse-node Ra(oonig-if)# mip multicast cliest Cleok is eynonronized, stratum 9, reference is 120.100.88.9 rnowinal freq Le 258.0000 He, actual freq 36 250.0000 Hz, precision is 2°18 reference tine ie COMFIEYS.69673E60 (21:17:99.5%4 UTD Tue Feb 27 2007} clock otreet Le €.0182 486, rost delay 16 4.18 asec R2# show ip gap greup TOIP Connected Group Mesbershie Geeup Address Interfeoe Uptine Expires Lact Reporter pee ett erian07o 00:41:00 00:¢2:29 120.100.129.2 224.0.4.99 Sarial6/O 9:28:12 90:02:87 20.100,129.8, 22e0.1.a0 —— SerialQo 20.100.128.2 Ra(oontigit Sp aettson Ra(contig-it)s interface GigabitEthernet®/@ fa(contig-if)s ip pin sparse-node a(contig-if)# mip multicast cliert Fas show wtp status (look ie synonranized, stratum 9, reference de 120.100.94.9 rnowinal freq Le 258.0000 Hz, actual freq 36 259.000 Hz, precision is 2°18 roforence time 46 OOBFIEFY.267OS1F2 (21:19:45.160 UTD Tue Feb 27 2007) (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasPrectice Lab [125] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Example 1-42 _NTP Multicast Configuration and Verification _coninuet root dispersion ie 7877.08 ns20, pF fas show ip ignp greup TOIP Connected Group Mesborshie dispersion 8 7676.24 note GigabitEthaenstOre 100,24. igabitetnarne 203 Gigabitetnaensto/e ast Lab Wrap-Up So, how di it go? Did you run cut of time? Did you manage to finish but miss what was actually required? If you scored cover 80, well one. Ifyou accomplished this within the time frame, go book your lab! What sets the CCIE exam apart ‘within the industry is the complexity ofthe question to test you further than you thought possible, The exam isnt rying to tip you up. but it ensures that you have the ability to think laterally, an ability that ensures you sucoead in your networking career and one that sets CCIEs spart. Spend the time to go back over the questions and practice with the configarations using debug and show commands to fully absorb aay new aress you might have come across, Did you anticipate and factor into your configuration items such as the offset lst within RIPag for the tunnel anc ‘maximum reserved bandwidth within QoS? IF you did, then congratulations because this saved you time and secured your pins, It also shows that you fully understand the protccols invelved and can adaot in testing your configurations. How ‘can you ensure that you kave the ability to spot any underlying issues related to a questice? Wel, t's all mileage; you get cut of your study winat you put iat ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme dasPrectice Lab Nore The 3825 wed in hit lab mere loaded with 67m an the 3725 wa loa wits 3725-acvenemprsck [126] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Practice Lab Aim wo adhere to the time limit of & hours on this lab oa the initial usthrough. Then cither score yourself a this point oF ‘cotinie until you feel you have met all the objectives. You now are going to be guided through the equipment require. ‘ments and prelab tasks in preparation for taking ths practice lb. ‘This lb was created sing the official Cisco online CCIE R&S Assewor, version B topology, Detaled information on the Assessor can be found on the following URL huip:sfww:cisco.comweb/learniag/e3/ecielpreparstionasvessor_details. te If you doa't own six routers and four switches, the Assessor lab can be used for this lab by loading the inital files supplied for this ciapser in Appendix B. Equipment List ‘You need the following hardware and software components to commence this practice lab 1m Six routers loaded with Cisco 10S Software Release 12.4 Advanced Enterprise image and the minimum interfice ‘configuration as documented in Table 2-1 Table 21 Hardware Required per Router Router Model Ethernet /F Serial UF RI 2825 L 1 RD 3725 L 1 BB 25 r T Ra R25 z - BS R25 z Re 3825 2 ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme das(27) COCIE Routing and switching Practice Labs Maiti Jarves Duggan, CCIE No. 7942 Practice Lab NoTE ‘© One 3550 switch with Ciseo IOS Software relsase 12.2 IP Services and three 3560 switches with Ciseo TOS TRCCE Ase Software release 12.2 Advanced IP Services. Yusnue alse — Setting Up the Lab all 3560s i you choose Cistorte anc uatyou Fool fice to use aay combination of routers ax Long as you Ful the soquiemants within the topology diagram as shown might hoe ninvdiir~ ip Figue 2-1. However. itis recommended that you use the same mocel cf routers because tis makes le easier ifyou szcewes pices. Jad configurations dey fom the supplied configurions nto your on devices ee Access Configuration Appendixes Online Seb wi 5c Log in at www cicoptess.comfaccount o gain access wo eopypast enabled versions of the configuation fies contined inwrvicskOmzi22- inthe appendies, A nk tothe content wil be sted on your Account page under Regstred Pct. Ssezin Lab Topology This practice lab ses the topology as ontlined in Figure 2-1, which you mustre-ceate with your own equipeat cr by simply using the CCIE Assessor. 122008 che systems, ne Alrignterosertod Me pubtont te protects copyight Pose xe page EE mow ca,[28] CCIE Routing and Switching Practice Labs Martin Jamas Duggan. CCIE No. 7042 Prectice Lab FIGURE 2-1 Lab Topology Diagran NOTE confguntins supplied that som: inerfaces do becouse you either do not tse that interac a you swith te exarcs, The Intl centigaratons to procntigue your routers and sitces dierent inerace spots than thoe wd within the wleantitrficesto oop all itriace peas btevor because of ering ntior (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasPrectice Lab [129] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Switch Instructions Configure virtual LAN (VLAN) asciganents from the configurations supplied or from Table 2-2 Table 2-2 VLAN Assignment VAN Suite 1 ‘Switsh2 Switch Switeh M Fall3, Fa, FAS — — = % Fale Ro = 3 VEANSS 0 VANS — a = Fa0i6 VLAN? VLAN63 100 = Fa0il = = 200 = FD = = ‘Coanest your switches with RI-45 Ethemet crossover cables, es shown in Figure 2-2. ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme dasPrectice Lab FIGURE 2-2 ‘Swtch-o-Switeh Connectivity NOTE providesa fll mesh ef ‘contectionsRetwen the Asweicefor tis, yous disable he Superucs Enks © ont [130] CCIE Routing and Switching Practice Labs Martin James Duggan. CCIE No. 7942 Frame Relay Instructions Coatigue one ofthe routers you are going (0 use in the la asa Fame Relay switch, or ave a dedicated router purely for this task. This lab uses a dedicated outer shin the CCIE Assessce version B topology for the Fame Relay switch. A fully meshed enviconmert ie configured between all the Frame Relay routers. Pay attention ia the lab asto which perms. teat virtua circuits (PVC) ar actually quired. Keep the encepsulation and Local Management Interface (LM setings to default for this exewis, but experiment withthe stings ouside the las to enhance your Frame Rely knowledge. ‘IF you are using your awe equipment, keep the data circuitsterminating equipment (DCE) cables at the Frame switch eva for simplicity and provide a clock rae to all inks fiom this end. 1.2008 cisco Systane ne. lights reserved. This pba e rosea copyFgH Pees oe pag St fro dtPrectice Lab FIGURE 2-3 Framne Relay Logical Comectiviy [31] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Afr configuration, the Frame Relay connectivity represents the logical Frame Relay network, as shown in Figure 2-3, &) 1 IP Address Instructions In the real CCTE lab, you find that the majority of your IP adeesses are preconfigured. For this exercise you are required to configure your IP eddesses as showa in Figure 2-4, or load the initial router configurations supplied in Appendix B. If ‘you are manuslly configuring your equipment, be sare you include the following loopback addresses (RI asd R3 use the saune IP address for loopback 255): RU LoO 120.10).1.U/24 1Lo255 200200.200.2c0"24 2 LoO 120.100.2.1/24 3 Lo0 120,100.3.1/24 ‘Lo255 200200.200.200"24 (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe dasPrectice Lab FIGURE 2-4 IPAddressng Diagram 4 Lo0 120.100.4124 5 Lo 120,100.5.1/24 6 LoO 120.109.6.1/24 SWI Lo0 120.100,7.124 SW2 LoO 120.100.8124 SWS Lo0 120.100.9124 SW4 Lo0 120.100.10.1/24 [132] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 ms Se ces 580s | SSS (aC SSS eayozm0n0 rayon BOD (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasPrectice Lab NOTE ‘Access ey ihe prec ing URL, noth whole becouse yeu are ort se coc menace during your resticts, Consichr opatng soveal windows Tis olcok ato s86 time ding your ab [133] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Prelab Tasks Build the lab topology as per Figure 2-1 and Figure 2-2 Configure your Frame Relay switch router to provide the necessary daa-link connection identifiers (DLCD as per Figure 23. (Configure the IP addresses on each router as shown in Figure 2-4 and ad the loopback addresses. Alternatively, you can Joad the intial configuration files supplied in Appendix B if your router is compatible with those wed to create this exercise, General Guidelines Please read the whole lab befors you start, Do not configure any statcfdefaul routes unless otherwise specified, Use only the DLCs provided is the appropriate figures. Ensure full IP visibility between souters for ping testing/Telnet access to your devices, Ifyou find yourself unsing out of time, choose questions that you are confident you can arswer. Failing this, choose questions witha higher point rating to maximize your potential score. Get into a comfortable and quiet erviroament where you can focus for the next 8 hours, ‘Take 1 30.minute break midway through the exercise Have available a Cisso Docamsatation CD-ROM, or eooess oaline the latest dacumsatstion from the following URL: wonw cisco. com/anivered/homelhome htm ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme das[134] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Prectice Lab Practice Lab 2 ‘You will now be snsworing questions in relation tothe network topology as shown in Figure 2-5, FIGURE 2-5 rstor00 Lab Topology mann Diagran =e mae tag Zs Gx watt BY owe ao Ba ES gy | BE sg= ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme dasPrectice Lab [135] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Section 1: LAN Switching and Frame Relay (24 Points) © Configure your switched network to use 802.IW spansing tre. Switch I should be die root bridge for VLANs 34, 46,53, 63, 100, and 200 with ewitch 2 being the secondary root bridge forall sted VLAN. (2 points) 1m Switch 3 should use its interface directly connecting to switch 2 (Fast Ethernet (/21) for traffic directed toward even ‘numbored VLANs (34, 46, 100, 200) and the interface directly connacting to switch I (Fast Ethernet OV19) for odd ‘numbered VLANs (53, 63). G points) = Switch 4 should use its interface directly connecting to switch 2 (Fast Ethernet (/19) for traffic destined toward even-numbered VLANs (34, 46, 100, 200) and the interface directly connected to Switch 1 (Fast Ethemet 0/21) for dd-cumbered VLANs (53, 63). 3 points) 1m Ensure a cable fault between switches | and 2 does nct result in one-way trafic between the two switches resulting in spanning-tre issues. (2 points) © Configure switch 1 and switch 2 to allow connectivity of two more switches in te future to be connected into ports Fist Ethernet 0/18 on each switch. The new switches should te able o tunnel their ow configured VLANs through anew VLAN (30) between switeh | and switch 2. You have no requirement to configure a root bridge or VLAN load balancing forthe new VLAN between switch | and switch 2. (4 pois) © Configure your switched network to monitor the VLAN200 interface associsted with R2 (switch 2 Fast Ethernet O/1), and send only traffic destined to K2 on this switeh port seross your network to switch 3 port Fast Ethemet O17. Use anew VLAN (20) to assist in tis configuration. You have no requirement to configure a root bridge or VLAN lead balancing for the new VLAN. (3 points) = Configure the interface on sviteh 2 that connects © RS VLANS3 (Fast Fuhemet 0/5) in sue a way that i all he twunks on switch 2 connscting to switch 1, switch 2, and switeh should fal, this Ethomet poet traasitions into err ddsable slate, (4 points) (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe das[136] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Prectice Lab ‘= Your inital Frame Relay configuration has been supplied for the RI-R2-R3 conaeativty. Configure Frame Relay as ‘per Figure 24 toensure that each deviee is reachable over the Frame Relay network. Only use the indicated DLCIs (pois) FIOURE 2-6 Frame Relay v0 Comectiviy Section 2: IPv4 IGP Protocols (28 Points) ‘You will now be answering quesions in relation to EIGRP, OSPF, RIPy2, and redisuibution between these protocols. Section 2.1: EIGRP © Configure Exharced Interior Gateway Routing Protocol (EIGRP) as per Figure 2-7 asing an AS of 1. Each EIGRP router should have its loopback 0 interface configured and advertised within EIGRP. (2 poiats) (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[937] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Prectice Lab FIGURE 2-7 EIGRP Topology Ba hy i RA ay 7 aa © Configuse Ri to advertise astimmary svute of 120.100.0,0/16 outbound on is serial interface, R3 shoved se the original VLANL0O end loopback 0 individaal soute in addition tothe summary route. You can use oaly on sumniary route ia your configuration. (3 points) 1m Ensue that the length of time that EIGRP considers neighbors to be valid without receiving a bello packet on the Frame Relay network between B1, 82, and R3 is 200 weccnds. Do not change the ello-interval parameter. (2 poirts) ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme das[138] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Prectice Lab © Configure new loophack interfaces on RI snd R2 using a loopback interface 2 with an identical IP address of 150,101. 1.1/24 ca both routers. Adverts this network into EIGRD oa esch router. Ensure that 83 prefers the out from R2 by manipulating the delay associated with this route, Do not manually adjust the delay associated with the interface by ase ofthe delay command. You ate permuted to configure only R2 to influence the delay. (3 points) Section 2. : OSPF FIGURE 2-8 (OSPF Topalooy —_ ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme das[139] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Prectice Lab ‘© Configure Open Shertest Path First (OSPF) as per Figure 2-8 using a process ID of |. Where possible, all OSPE configurations should not be coafigured under the process ID. Each OSPF router should also have its loopback 0 interface configured anc advertised within OSPF as fellows: @ points) R4 Looptack 0- Area 0 RS Loopback 0- Area 0 R6 Loopback 0- Area 1 Sw Loopback 0- Area 2 ‘Sw2 Loopback O- Area 1 Sw3 Loopback 0- Area 2 Sw Loopback 0- Area 3 '& Area. is patitioned between R4 and RS. Ensure that your network can scoammodte this Ssue. You are sot penit- ted to form any area 0 neighbor relationship directly between R4 and RS to join area 0. (4 poinis) Section 2.3: RIPv2 © Configure RIPY2 between R2 and R3 per Figure 2-9. Configure 2 new loopback interfave on R2 (loopback 3) with an IP addess of 150.101.2.1/24. Advertise this and only this network to R3 from R2. 2 points) (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe das[40] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Prectice Lab FIGURE 2-9 RIP;2 Topclogy cH chy 1&3 should act adverise any counscted interfaces into Routing Information Protocol version 2 (RID\2). Do no! filer routing advertisements to achieve this behavior. (2 points) Section 2.4: Redistribution 1m Perform a one-way redistribution of RIPy? into EIGRP on R3 using the following default metic: 1544 20000 255 1 1500, Ensure that Rl shows a next hop for the RIPv2 advertised route of 150,10] 2.0/24 of R2. Perform configurs- tion only on R3 for this task. (3 points) (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[ty CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Prectice Lab 1m Perform mutual redistribution of EIGRP aad OSPF on RA and RS. Use a metric of S00 for redistributed routes into OSPF, which should appearas external type 2 routes, and the following K values for OSPF routes redistrituted into EIGRP: 1544 20000 255 1 1500. (2 points) 1&3 will haveequal cost external EIGRP routes tothe redistributed OSPF subnet 120.10).63.0/24 (VLAN63). Configure orly B3 to ensure that R3 routes vie a sext hop of RS (120.100.34.5) for this destination subnet. IF this route fails the route advertised from R§ (120.100.34.4) should be used dynamically. (3 points) FIGURE 2-10 BaP Tesclegy, ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme dasPrectice Lab [92] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 © Configure Border Gateway Protocel (BGP) peering as per Figure 2-10 as follows: Internal Border Gateway Protocol (BGP) RI-R3, R2-R3, B4-R6, R4-SW2, RS-Sw1,R5-Su3:; Extemal Border Gateway Protocol (eBGP) R3-R4, R3- 5, Swl-Sw3, R&-Sw4. Use loopback interfaces fo peer on all routers with the exception of peering between R3-R4 and R3-R5. Do not use the command ebyp-mnullilop within yous configurations. (3 points) 1m Routers RI end R2 in AS1OD should be made 1 oaly passively accept BGP sessions. R3 should be cosfigured to only actively create BGP sessions to RI and R2 within AS1O0. (3 points) ‘© Configure the following loopback interfaces on R3 and Sw4. Advertise these networks into BGP using the network command: @ points) 3 Loopback iaterface 5 (152.100.100.1/24) Sw - Looptackinterface 5 (152.200.32.1.24) Sw - Leoptack interface 6 (152.200.33.1224) Swe - Loopback interface 7 (152.200.34.1724) Sw - Leoptackiaterface 8 (152.200.35.124) ‘Configure R3 to inform R4 that it does not want to receive routes advertised from Sv for aetworks 152,200.33.024, 152.200,34.0724, and 152.200.35.0/24, Achieve thisin such a manner that RA docs not actually adverse these routes toward R3. You can also configure RA. (4 points) = Configure a route aap on RS ts prependh its local AS 2 an addtional two dimes for network 152.200,32.024 when sadvorised to R3. Tho route map can contain multiple permit statements, but only one prepend is permitted per lin. G points) ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme das[199] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Prectice Lab Section 4: IPv6 (12 Points) 18 Configure IPV6 addresses on your network follows: 2NOTECISCO:1O:1/64 - RI GIO 2007-C15:00:1 11/64 -RI tunaelO 2007:C15:00:11:3%64 -R3 tunnelO 2007:C15:00:12:2/64 -R2 tunnelO 2OT-C1S:CO:123V64 RB tana 2O7.C1S:C0:13:2/64 -R2 KO 2HOTECSHCOs 14.264 - 3 GIO 2OTICIS:COs14:4%64 - RA GION 2OTICIS:CO: 145/64 -RS GIO 2007:C15:00:15:5164 -RA Gilt] 2OT-CIS:COs1S:6/64 -RE GION Section 4.1: RIPng © Configure Routing Information Protocol next generation (RIPag) among R, R2, and P3 per Figure 2-11. BIPag should be enabled on the Bthertet interfaces of RI and R2 ani on all tunnel interfaces of RI. RO, snd R3. Build ‘your tunsels using ipySip mode: use an RIP process of CCIE on all required interfaces. (2 points) (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe das[ay CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Prectice Lab FIGURE 2-11 IPv8 Topology Section 4.2: OSPFv3 {© Configure OSPF V3 as per Figure 2-11 use an OSPF v3 process of Lon each router. (2 pons) 1 Configure arca | with IPsec authentication Use message digest algovithm 5 (MDS), a Security Policy Index of S00, and a key of DECODECC1EODDRA | 1BOBBOBBEDROORON. (2 points) 1m Ensue that the aca route in arca | reecives the following route; you can configure RA to achieve this. (2 poists) OF 2073/16 [11072] vin XXXX:XXXKAKAXKXXKAAKK, GigabitEthern=tO0 (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[195] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Prectice Lab Section 4.3: Redistribution 1m Redistribute RIPag into OSPF V3 on R3. Redisribated RIPng runes should have a metric of SOD0 associated with them regardless of which area they are seen in within the OSPE¥S network. (2 points) ‘© Configuse R3 sothat both RI and R2 have the following IPvé RIPag route ia place. Do aot redistribute OSPF into RIPng toachieve this and ensure that all routes have full visibility. 2 points) R 20072/16 [1202] Via XXX: AAAKANANAANNNK, Tunne0 Section 5: QoS (6 Points) 11 Two IP videoconferencing units are o be installed onto switch 2 ports FastEshemet 0/15 and 0/16 on VLAN20. The devices wse TCP ports 3230-3231 and Usce Datagram Protocol (UDP) ports 3230-2235, and this taffic is unmarked fiom the devices as it enters the switch. Configure switch ? to assign a Differentiated Services Code Point (DSCP) ‘le oF AEA to video traffic from both ofthese deviees. Ensue thatthe switch ports assigned othe devises do nat participate in the usual spaming-tee checks, cannot form trunk links, and cannet be configared as EtherChannels. (3 points) 1 Configure R2 to assign a stit privity queue witha 4 perceat reservation of the WAN badd forthe videocon- ferencing trafic in the previous questicn. Maximize the avalsble basdvidth by ensuing the real-time protocal (ETP) heades within the vdeo steam are compresseé. Te reminder ofthe banduieth should be guaranted fora default queue with Weighted Rendom Early Detection (WRED) enabled. Assume that the full Ine sate of 1.544 [Mbpsis the available WAN bandwidth, and ensure thst the complete bandwidth is wilized by bth queues. (3 point) ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme dasPrectice Lab [46) CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Section 6: Multicast (7 Points) = Configure asters Ri, R2, R3, and R4 for Pv4 Multicast Each router should use PIM spane dense mde. Bosh Rt and RD shouldbe configured to be Candidate Rendezvous Points (RD) specially fr the multicast groupe 225,225.0.1,225.225.02. 225.225.03, and 225,225.04 by use ofthe Ieoptack O interfaces. You should limit the boundary of your multicast aetwork so that it daes not propagate further into your network than Ré,R3 should be configured 2s a mapping agent to announce the rendezvous points forthe multicast network with the same houndary constraints. paints) 1 Configure R3 to ensure R4 has a Candidate RP as R for groups 2252250.1 and 225.225.0.2 and R2 for groups 225.225.0.3 and 225:225.04. (2 points) 1 Configure RI to mositor traffic Forwarded through itself fo tafe destined tothe multicast group of 25.225.0.1.1F no packet for this group is received within a single 10-second interval, ensure that a Simple Network Mansgenent Protocol (SNMP) trop is sent to an SNMP masagemeat station on 120.100.100.100 using acommunity sting of public. 2 pein) Section 7: Security (7 Points) 1 Allow router R6 to fassvely watch the SYN connections that Flow only to VLANS® for servers that might resde on this subnet. To prevent «potential denial of service (DoS) attack from a loot of SYN requests, configare the out to randomly drop SYN packets fom any source to thie VLAN that have aot been ceractly established within 20 seconds. (3 point) © Configure an access control list (ACL) on 1 to allow TCP sessions generated on this router and though its Eihemet inteface and to block TCP sessions from entering on its Frame Relay interface that were not initisted oni «x though it orignaly. Do aot use the established feature within standard ACLs to achieve this, an apply ACLS. only onthe Fane Relay interface. The ACL should time out after 100 seconds of locally initiated TCP inactivity, and itshould also allow Internet Control Message Protocol (ICMP) tac inbound for testing purpases. (4 points) ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme dasPrectice Lab Nore This econ cul be used only if yeu que (CCE Ta, he prostor does notes ints any ‘questions or answers. He or sho isprsent ensure you do ne have savonnentand 1 msin- tain th ming element [7] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 “Ask the Proctor” Section 1: LAN Switching and Frame Relay Q Do you just want me to configure the oot and secondary roct bridges into 802.Iw spasning tree? A: You should ensure that your network runs a consistent vesioa of spenniag tree. Q: Can change the root bridge assignments of cdd- and even-numbered VLANS to ensure that different interfaces are used on switch 3 and switch 4? A No: the soot bridge assignment should remain as per the first question. Q: Ta copper Ftheret cable fails hetween switch 1 and switch 2, would Tencounter spanning.tre issues hecause no Toops would be present under this coraition? A: Consider a partial fulure rather than a complete breakage. Q: But tho switches are connected with Eihemet coppor cabs. A feature like Unidirectional Link Detection (UDLD) ‘woulda’ be beneficial unless the consections are fiber, would i? A: UDED can opemte over copper Ethernat inthe same manneras her. (Q: Would you like me o configure a native VLAN of 30 on trunks tothe two now switches? A: No, « naive VLAN would not facilitate wansportation of multiple VLANs ever the single VLAN3D between switch [and evited 2 Q Are you looking fora generic routing encapsulation (GRE)-type tunnel between switches? A: No; use a Layer 2 switch tunneling feature. (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe dasPrectice Lab [199] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 (Q: Lassume that you require remote span configured for R2 traffic. Ist ckay to send both TX and RX taflic to switch 2? A: Read the question carefully because this information has been provided. .Q: Would you like me to configure UDLD aggressive mode on switch 2 to transition the equired port to errcr disable mode in the event of a trusk fuiluse? A: No, you need to configure feature that places a nontrunk link into error disable mode if all the trunks on switch 2 fal. Section 2: IPv4 IGP Protocols ‘You will now be answering questions in relation to EIGRP, OSPF, RIPy2, and redistribution between these protocols. Section 2.1: EIGRP Q F'T configure a summary-address on RI, this route overrides the VLAN|00 and loopback 0 routes from RL as received on R3. Te this cont? A Yes, thi is he expected behavior of Sumnarization, You must enable a ature dha allows the more specific routes to be received on R3 Q¢Tthink Loan achiows this with muliple summary routs, but the question restricts this, Can T use anew EIGRP ‘process instead? A: No, uso feature that allows your specific routes to leak from the summary rout. Q: Ist acceptable o adjust the held-time on the Frame Relay interfaces to change the helio interval? A: Yes. (Q: Can I manipulate the delay associsted to setwork 150.101. 1.0/24 because this advertisement leaves R2 rather thaa Ay changing an interface delay on R2? Ar Yes. (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasPrectice Lab [199] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Section 2.2: OSPF Q Tam experiencing rsighbor adjacency iseues hetcen RS and switch I. Is this part ofthe question? A: This is a byproduct of the question if you are using « 3550 in your topology. Practice your troubleshooting skills determine what isstes could be causing this tehavior Q; Tv shocked my configs hetwoon RS ond switch 1, and they look good. Am missing something from the inital configuration? A: No; if your configuantion is cowect, you shoul debug your ajacencies to provide information on what could he causing aa ssue, Tue ford a macimam eamsmisin it FTL) fs while debugging Ist okay to change a interice MTU to ix this issue? Ar Yes. Q¢ Is it acceptable to provite tinnsls hetween R4 and RS to join area? A: No, this solution weuld involve a seighbor relationship being formed beeween the routers ia arca 0. (Q:T'd noemally use a virtual link ¥ extend area 0 into a trarsit area. Can [use this technique to stretch area 0 between Ra end RS? A: You can use viru links in your solution, Thiak sbout where the Links need wo be though, 10 ensure your tpelogy operates comeciy, Section 2.3: RIPv2 Q: [ve just checked the roating table of R3 to find thatthe only RIPy2 route received from R2 is the route required in the questios. Am I good to move on, or have [ missed scmething? A: Read the quston agit. Evenifyoutave only single RIPY2coue in you ong table it dest nea it the only RIDV2 rue received by 3. vena ; * ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme dasPrectice Lab [150] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Olay, Tansee that Lam sill geneatig onal routes fom R2 toward R3. Can just Hook tise witha distib- te list on R3? Ar Yes. Q: Can I just passive out the isteriaces on R3 to make sure that they are not advertised to R2? A. No, this would stop RIPv? advertisements being sent out on these interfuces. It wouldn't stop the actual interface subsets being advertised to R2. Q: Can create an offet list on R3 marking te attached networks on R3 as unreachable so that they are not advertised oR? A: No: look for a simple solution that blocks routing advertisements from leaving an interface. Q: So I'm ckay to ase the passive interface feature on the Frame Relay interface to stop advertising cutbound but stil ‘kay to receive the specific route from R2 inbound? Ar Yes. Section 2.4: Redistribution (Q:T've followed the redistribution instrucsions. Why doe’t [receive the RIPY2 roue on RI afer redistribution? A: You are going to have some underlying issues prior to receiving the route on RI. Use your troubleshooting skills 0 determine tie problem, (Q: Ive aotized that beeause ofthe preconfigured loopback interfaces on R1 and RS beth ofthese routers have the same EIGRP router-i, Can I manually change the router-id on one ofthe routers to see whether this helps! Ar Yes. Q:Tve managed to get the RIPv? route redistributed from R3 into EIGRP on RI. but the next hop is showing as R3 Can policy roate on RI so that the next hop for this route is directly via R2? A: No, you need to have the routing table reflect the next hop of this route via R2 and not R3. ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme dasPrectice Lab [51] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Q: Can [use the EIGRP third-party next hop feature to leave the next hop of the route unaltered fom R2? A Yes. (Q: Can I modify the OSPF cost of the interface connecting R3 to the OSPF neswork to atiompt to change the next hop. forthe suboet 120.00.63.0/24 A: No, this would affect cutes raeived co RS from both Ré and PS equally because RA and RS reside on tho some subset ss RB. Q: Can [use an offet list or similar feature on RA to penalize the route 120,100.63,0/24 as it advertises to R3? A: No, you are permitted t9 configure only RB. (Q: Ist acceptable 0 use a route map on R3 and match s route source to penalize the route to 120,100.63.0/242 Ar Yes. Section 3: BGP Q: IT ean’t use EBGP multihop on my peering on R6, switch 3 and switch 4, will my peering fail because Tam peeting from ny looptack interfaces? As Yes it will. You need to configare a featur that overrides this behavior, Q Can ty to use Network Address Translation (NAT) to fix my peering? A:No, use a specific BGP feature to disregard the Time To Live (TTL) check. Q: Pm experiencing peering istics between RI snd 23 and have RGP notifications displayed on the console Is this expected behavior? A: Yes, you had a similar issue within EIGRP. Check your router ID. Q: Do you want me to configure an ACL to limit BGP connections to purely inbound or outbound on TCP post 179? (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe dasPrectice Lab [152] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 4 No, an ACL would actly beak ihe pesingenteels, Us a BGP fetue to Fre fe peesngio tecome ection Q Can I just configure a filter on RA to siop advertising specific routes to R3? A: No, you must dynamically inform R4 to not advertise specific outes via R2 Q Can [use BGP Outtound Route Filtering (ORF)? Ares. Section 4: IPv6 (Would you tke me to configure an ational IPvS subnet on Rl to receive the 2007/16 route? A: No, investigate an alternative method to creat this route from the precoafigared subnets you already have, ensuring that the route is received as illustrated in the question. (Q: Would you like me to redistribute routes into OSPE3 as extemal type Lor type 2? A: The question provides you with suficint information to determine the redistribution type to we. Section 5: QoS Q: Do the virtual circuit (VC) units use User Datagram Protocol (UDP) ports 2230 and 3235 or 3230 through 3235? A They use the range 3230 through 3235. Q: Do you want me totrustthe ports assigned tothe VC units? A The VC devices arcnot markirg the traffic, so you do net need to trust these pects (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasPrectice Lab [159] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 (Q: Would you like me o disable tunking, channeling, and spanning-tree checks on the ports assigned tothe VC unis? A Yes, hut cemember that a single command can disable all these features, Fw he hand pore sommnd on Rn my 49 pct ante nsonatin this set o answer the question A: No, the question dictates that a privity quoue be wsed, (Q; Would you like me to configure RTP compression within a Frame Relay mep-class? A: No, you can achieve all the requirements within the same quality of service (QoS) policy map. Section 6: Multicast Q [FT configure Ri and R2 forthe same muicast groups, won't R3 and R4 sce both routes as RPS for the same groups? A: Yes, you address ths behavior in the following question Q Tohave RI and R2.as Candidate RPs for different groups, can just configure group-lsts on R37 A: Ifyou were permitted to configure RI and R2, group-lists would ackieve the desired results, but you are permitted to configure only R3. Group-lists can assist in ycur solution on R3, but you need to find a method of assigning these specifically to RI and R2. {Q:Do you want me to actually configure an Intemet Group Masagement Protocol (IGMP) join-group on RL for 122522500. for the SNMP question? A: No, this isn't required. Traffic destined to this group is sent RL regardless because iis te Candidate RP fr this rou. ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme das[54] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Prectice Lab Section 7: Security & Do you want me to configure sn ACL to black SYN packets coming into VLANG3? AA: No, SYN packets stould stil eater into VLANGS. You must configure feature that monitors the SYIN packets arc loses down any half opened connections Can [use a reflexive ACL to drop SYN peckets that are not correctly established by the servers? A: No, « specific TCP feature is used to protect servers froma flood of SYN packets that could cause a DoS attack. Q: Can I just use a standard ACL. on RIL ca the Frame Relay interface to permit sessions outbound and deny everything else inbound? A: No, this would block return path traffic initiated by RL Q: Can [use a reflexive ACL to dynamically permit the return traffic with « time limit of 100 seconds? Ar Yes. ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme dasPrectice Lab [185] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab Debrief Tho lab debrief section now analyzes cash question, showing you what wes required and how to achiow the desired resilts You should use this section to produce an overall scone For this practice lab Section Points) ‘© Configuse your switched network to use 802.lw spansing tre. Switch 1 shoald be the root bridge for VLANs 34, 46, 53,63, 100, and 200 with switch 2 being the secondary reot bridge forall listed VLANs. 3 points) LAN Switching and Frame Relay (24 802.1 is rap spansing tee. The switches are going to be in the default mod of standard per-VLAN spanning tee (PYST) and require configuration to Rapid-PVST mode. Switch Lis required to be the root bridge and switch 2 the secondary roxt bridge for VLANs 34, 46, 100, and 200. If you have configured this correctly as shown in Example 2 1, you have earned 3 points, Example 21 also shows confirmation of the root bridge and which interfaces are used to reach he root bridge from the neighboring switches. VLAN34is used as an example, but each VLAN would be identical in ths configuration. Example 2-1__ Sw1, Sw2, Sw3, and Sw Configuration and Verification (config)# spaming-tree node rapid-pret O(contigy# spanning-tree wlan 34y48,59,69,100,200 root primary ‘12{contig}# spaming-tree noce rapid-prst S12{config}# spaning-tree vlan 34,48,53,63,100,200 root secondary (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe dasPrectice Lab Example 2-1 [156] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 ‘Swi, Sw2, Sw3, and Sw Configuration and Verification _coninuat HG(config)# spaming-tree node rapid-pret ‘a{contig)# spaming-tree noge rapid-prst ou ou sue ou owe Faul28 Faeis9 our Fay at spanning-tree vlan 34 | include This bridge is the root spannang-tree vian 46 | ineiuce spanning-tree vlan 53 | include This bride is the root spanning-tree vlan 53 | include spanning-trae vlan 109 | include root This bridge is the root spanning-tree vlan 200 | include root spanning-tree vlan 34 | inelude Root FWD 19 128.28 Root FAD 19 128,21 spanning-tree vlan 34 | inelude Root AWD 19 128.28, oot FM Pap Pep oot FM Pap (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasPrectice Lab [97] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 © Switch 3 should use its interface directly connecting to switch 2 (Fas: Ethernet (/21) for traffic directed toward even- ‘numbered VLANs (34, 46, 100, 200) and the interface directly connecting to switch 1 (Fast Ethernet OV19) forodé- ‘numbered VLANs (53, 63). G points) ‘This io siraightforward VLAN load balancing question toemsure that trunk Enks are utized efficintly and not logically disabled by spanning tre, Switch 3 ass the interface diostly sonnscting to switch 1 (Fast Ethoaet 0/19) for all VLANs asthe lowest root cost path by default. IF you want to adjust this behavior. this inerface must effectively be penalized for the even-numbered VLANs t ensure that a more attractive path is via switch 2 (Fast Ethernet 0/21).If you have config- tured this correctly, as shown in Example 2-2, you have scored 3 prints, Example 2-2 _Sw3VLAN Load Balancing Configuration anc Verification ‘a(contag)# intertace Fastetrernet 0/18 S12( contig. Sf)# epaming-tree vlan 24,46,100,200 cost 108 SH9(config-if)# 40 show spanning-tree reat view Fovt Gost Tim Age ly cot Port 92760 0019.8054.0400 192 DMS 24g20 0019.0064.0400 1928 24g0 0019.8064.0400 = 1928 2asre 0019.006d.0400 9828 ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme dasPrectice Lab [158] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 © Switch 4 should use its interface directly connecting to switch 2 (Fas: Ethernet (/19) for traffic destined toward even-numbered VLANs (34, 46, 109, 200) and the interface directly connected to Switch 1 (Fast Ethernet 0/21) for dd-cumbered VLANs (53,63). (3 points) Following from the previous questioa, o ensure balanced acvess topology for VLAN load balancing, switch 4 uses the interface directly conaocting to switeh 1 (Fast Ethornat 0/21) for all VLANs as the lowest root cost path by default, rendering the second irunk connecting to switch 2 unused unless a failover condition occurs. As per the previous ques- tioa, the diecily consected interface to switch | must be penalized for the even-rumbered VLANS. Ifyou have config- ured this correctly, as shown in Example 2-3, you have scored 3 prints, Example 2-3 _Sw4VLAN Load Balancing Configuration anc Verification ‘a{contigy# antertace Fastethernet 0/21 SU( contig. Sf)# epaming-tree vlan 24, 46,100,200 cost 108 U4(config-if)# do show spanning-trew reat Foot Hallo ax Fad 92760 0019.0064.0400 19 ts Fag/at 2as0 0013.8054.0400 38 1s Feo zasze ovis.sesa.eaee 382 1s rao 24620 0019.0064.0400 10 ss F007 2430 0013.8054.0000 19 ss Fag/at 2as7s 0013.8054.0400 38 1s Feoita 2ar78 0013.8054.0000 38 1s Fann 1m Ensue a cable fault between Switches 1 ard 2 does not result in one-way traffic between the too switches realting in spanning-tree issues. (2 points) ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme dasPrectice Lab [159] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 UDLD detects unidirectional Links on fiber-optic connections. [n aggressive mode, UDLD also detects unidirectional links because of ene-way trafic on twised-pair links. By configuring the ports between switch | and switch 2 into aggressive mode, the switches become UDLD neighbors, are able io detect one-way links, and shut down the link should this condition rise o mitigate spansing-wee iswues, Ifyou have configured this correctly, as shown in Example 2-4, you have scored 2 pote Example 2-4 _Sw1 and S2 UDLD Configuration and Verification Hi(contigh# interface FastEthernet 0/23 OUI(config-if}# wld port aggressive o¥2(contigy# interface FastEthernet 9/23 SR{conFig-ifi# wld port aggressive OW show udld Fastéthernet 0/29 ble adnisistrative ble operstional stat Current operational sta Massage interval: 15 Tim out snterval: § rtiguration setting: Etabled / in egirocsive made abled / in aggressive nods vertisonsnt - Sinale neiatbor detected Expiration tine: 44 (ache Devioe ince (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe dasPrectice Lab [180] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Example 2-4 _Sw1 and S2 UDLD Configurationand Verification _cowimed Curent neighbor stete: Bidiestional Device 10: caToaasiaca Pert 1D: Fa0/2a Neightor sche + port: Fa 28 Configure switch 1 and switch 2 to allow connectivity of two more switches in te future to be connected into ports Fist Ethernet 0/18 on each switch. The new switckes should te able to tunnel their own configured VLANs through anew VLAN (30) between switch | and switch 2. You have no requirement to configure a rot bridge or VLAN load balancing forthe new VLAN between switch 1 and switeh 2. 4 pois) This isa service provider requirement whereby customers tunnel their own VLANs through the providers network To mitigate any VLAN overlaps from othercusiomers, you use a unique service provider VLAN to transpat the customer VLANs. Example 2-S shows VLAN3O being used fo transgort VLANs over a dotg-tunnel, Use the show dot ty-tunnel command to verify your tunnel configuntion on your switches. If you have configured this eorecly, as shown in Example 2-5, you have seored 4 poiats (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasPractice Lab [51] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Example 2-5 _Sw1 and Sw2 Q in Q Configuration Hi(contigh# vlan 3e H1(config-vian)# exit SU1(configh# interface FastEthernet 0/18 OU(contig-if)# awitchpert aceess vlan 30 SHI(config-if}# avitchport node dott4-tunnel 912{contigi# vlan 3e 2{contag-vian)# exit [12(contig)# interface FactEthernet 9/18 912{config-if}# avitchport access vlan 20 SHR(confignif}# mitchpert node dot tq-tunnel = Configure your switched network to monitor the VLAN200 iaterface assisted with R2 (switch 2 Fast Etheract O11), and send only traffic destined to 2 on this switch port seross your natwork to switch 3 port Fast Ethoenet 0/17. Ue a new VLAN (20) to asist in this configuration. You have no requirement to configure a root bridge or VLAN lead balancing for the new VLAN. (3 points) This is remete span questica. The only complexity is based around the question statement of where you actually aeed to ‘monitor “rafile destined to R2.” As such, this means you need to configure the span parameters to send only the traffic transmitted out ofthe switch por toward R2, which is configured by the TX parameter I ths optional parameter is ct configared, both transmit and receive traffic ie monitored. Remote span requires 2 VLAN to propagate the span traffic between switches, which is why you need to configure VLAN20 on both switches | and 2. If you have configured this correctly, 2s shown in Example 2-6, you have scored 3 points. ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme dasPrectice Lab [182] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Example 2-6 _Sw2 and Sw2 Remote Span Configuration and Verification 12{contig)# vlan 20 912{config-vian)# resote 912{config-vian)# exit O12{contigy# sonitor session 1 source interface f 12(confio}# tonitor session 1 destination renste vlan 20 S12{config}# Jo show monitor session 1 Saesion 4 Source Ports 1% only Dect SPAN VLAN Fear 20 19{contig)# van 20 915(config-vian)# oxit ‘5(cont39)# won:tor eesoion 1 source rete vien 20 ‘12(config)# sonstor vesoion + dectinstion interface fact 0/17 913(confio}# Jo show noniter session 1 Saesion 1 Source RSPAN YLAN + 20 Doctinatien Ports: Fat/17 Ercapsulation : Native Ingress + Disabled ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme dasPrectice Lab [189] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 © Configure the interface on switch 2 that connects to RS VLANS3 (Fast Ethemet 0/5) in such a way that if all the trunks on switch 2 connecting to switch 1, switch 3, and switch 4 should fail, this Ethemet port traasitions into eror- sable state. (4 points) ‘The question requires link-stte tacking to be configured. This feature provides reduadancy in the network when wed with server notwork itorface card (NIC) adaptor teamiag. If ink is lost on tho primary interface, consoctivity i trans- parently switched to the secondary interface. Perts consected to servers ae configured as dawastream ports. and ports connected to other switches ae configured 2s upstream ports. If the upstream trunk ports on switch fail ink-statetrack- ing automaticslly puts the downstream port connected to RS into exor-disable state. Example 2-7 shows the associated configuration and testing by shuting down the trunk ports on switch 2 that connect to site 1, switch 3, and switch 4, hich forces Fast Ethernet downstream ports ino error-disabl state. If you have configved this comely, as showa in Example 2-7, you have svored 4 pots Example 2-7 _ Sw2 Link-State Tracking Configuration and Verification 912{config}# Link state track 4 912{contig}# interface fasto/s ora(contag-af)# link stite group 1 dwwnstresm OHa( contig Sf}# snterface Faatithernet 0/40 S12(confio-if}# link state group 1 upstrean 912{contig-if}# interface Fastéthernet 0/21 OHO(config-if)# Link stite group 1 upstream 12{contig-i)# sntertace Fastethernet 0/23 12(config-if}# Bink atate group + upet 12# show interface FastEtherset 0/5 | include comected FastEtnervet0/S 35 up, line protocol is up (sonrected) S12{confio-ifi# int fast 0/19 Ha{contignif}# smut (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe dasPrectice Lab [184] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Example 2-7 _ Sw2 Link-State Tracking Configuration and Verification _consimed 12{contig-if)# ant fast 0/21 12{config-if}# shut 912{config-if}# ant fast ove(contigeif)# shut 2 28 show interface FastEtharnst O'S | include arr-disablad FastEtnerest0/s is down, Line gratecol ie down (rr-disibled) ‘= Your inital Frame Relay configuration has been supplied forthe RI R2.R3 sonaestivty. Configure Frame Relay a= per Figure 2-6 to ensure that each device is reachable aver the Frame Relay network. Only use the indicated DLCIs (points) ‘The intial Frame Relay configuration hss been supplied for yeu; all you teed to add are additioaal maps on RI and R2 spokes to enable themt to communicate with each other by directing traffic to the hub router (R3) because the initial configaration uses n points. ere arp. Ifyou hove configured this corvectly, as shown in Example 28, you have scored 2 Example 2-8 _R1 end R2 Adsitional Frame Relay Configuration and Testing 129.2102 broadoast 123.1 202 troadeast (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasPrectice Lab [185] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Example 2-8 _R1 end R2 Adéitional Frame Relay Configuration and Testing cowed “Tye escage saquence to abort. Sending 5, 100-byte TOMP Echos to 120.100.125.2, tineout is 2 seconde: nu Gueces rate fo 100 percent (5/8), round-trip min/eng/max ~ 6/0/8 me Section 2: IPv4 IGP Protocols (28 Points) You will now be answering questions in rletion to EIGRP, OSPF, RIPv2, and rodistbution between these protocols Section 2.1: EIGRP © Configure Esharced Interior Gateway Routing Protocol (EIGRP) as per Figure 2-7 asing an AS of 1. Each EIGRP router should have its loopback 0 interface configured and advertised within EIGRP. (2 poiats) This isa vanilla EIGRP configuntion in propartion forthe following questions. The only complexity is spotting the spltthorizon issue with R3 over the physical Frame Relay network. By default RS does ant advertise the routes leaned om its serial interface from RI back out 1 R2 and vice versa because they all shae the same interface. By disabling split- horizon for EIGRP on R3, you ae permitting the utes to propagate. IF you have configared this correctly, as shown ia Example 2-9, you have seored 2 poiats ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme das[186] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Prectice Lab Example 2-9 _EIGRP Configuration and Verification Ri(contigy# router eigro 4 Ri(contig-router)# no auto-suanary Ri (contig-router)® i(contig-rovter)® Ri (oontig-rouen)® R2(contigh# router eigro 4 fe(oonrag-router)® no auto-suanary Ra(oontig.rovter)# network 120.4 R2{contig-router}# network 120.1 Ra{contig-router)# network 120.1 Ro(oontig-if)# router sigrr + Ra(contig-router)# no auto-sunnary Ra(contig-router)# network 120.1 R3(contig-router)# network 120.1 a(eonrag-router)® network 120.1 Rs(contig-router}# router elaro 4 Rs(contig-router)# no auto-suanary Ra(contig-rovter)# network 120.1 Na(contig-router)# network 120.1 Rs(contigi# router eigro 4 As(contig-router)# no auto-sua fs(contig-router)® network 120.1 Rs(contig-rovter)# network 420.4 2008 cisco systems, Alright resend, This pubaten spotted by copyright Plesoe cs page Si ermere desiPrectice Lab [197] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Example 2-9 _EIGRP Configuration and Verification _covrimed 8 is variably cubnstted, 7 subnets, 1 msk o 24 (90)2000416] via 12 ° 310/24 [90)2000410} via 12 D420, 100.3.0/24 [90/220r8SE] via 120.100,129.9, 00:42:72, Sariae/Ore o 346/28 [00/217 2456] vie 120.100.129.2, 0:41:54, SerdalO/0}0 Fa show ip route e1grp o o 10/1S6100] via 120.100.94.5, o o 24 [V0)200r@sé] via 12 o (24 [00/2172646] vie 120.1 o coves [vo/2n72ev6) vae 120. 2s show ip route elarp a(eontigi# interface Sersaieja/e Ro(oontig Af)# ne Sp 19:14, Gigabitethernsto/a 00:50) OlgabisEthernet 9/2 $20.100.1,0/24 [9012207856] vin 120.100,129.1, @0:46:95, Sarial@r0/e 123.2, 5, Sertel 28.1, €0:48:36, SenialO/¥/e 2, eoa8:38, seraal0/0/e 8 is variably subnetted, & subnets, 1 msk o 24 [90)2000416] via 12 ° ore [90/20004%0] vie 120, 1D 420,5@0.3.0/24 {90/220r8SE] via 120.100,129.9, 00:47:18, Sarial/O ° 340/28 [90/2472418] vie 12. 123.3, 5, Sertel 23.8, 06:46:68, Seriald/0 2008 cisco Systems, Alright resend, This pubatens protected by copyright Peso ss page Skt ermere desiPrectice Lab [198] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Example 2-9 _EIGRP Configuration and Verification _cowinued ute eigrp 8 is variably cubnetted, +@ cubmots, 1 nask 0/24 [99/29004%8) vie 120.100.128.3, 02:14:61, Serie 50/24 [90)20004%} vie 120.100.129.9, 00:01:52, Seri (0/24 [00/2800858) via 120.100.128.8, 00:38:22, Seri 23.8, 00:42:12, Seri 423.8, Ob:ats4, Serko) 129.3, 00:98:52, Sersaieye/@ 8 is variably cubnetted, +@ cubmets, 1 nask 40/24 [90)20004%} vie 120.100.125.9, 00:24:49, Seri 024 [0012900496] vie 120.100,428.9, @@s14:24, Sarial0/0 © Configure RI to advertise asurmmary route of 120.100.0.0/16 outbound on its serial interface, R3 should se the original VLAN1OO end loopback 0 individaal soute in addition tothe summary route. You can use only on sumniary route ia your configuration (3 points) By dofault, summarization blocks all longer prefixes covered by tho superset contigured on an interface. As such, the ‘VLANI00 and loopback 0 rcute from RI would nce be seen by R3, Allowing specific romtesto be advertised ip conjunc- tioa with summary routes can be a valid requisement. One method used to achieve this isby configuring multiple summery routes, but the question does not permit this approach. To facilitate the specific routes in conjunction with the summery, a leak map should be configured to match the VLAN 100 and Icopback 0 interfaces op RI. The leak map, (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasPrectice Lab [189] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 which is configured as pera normal coute map, is then applied to the standard summary route statement on RL. If you have configured ths correctly, as shown in Example 2-10, you have scored 3 point. Example 2-10 _R1 Leak Map Configuration and Verification ii(eonrsg)r rowte-map LEAK-VLAN Ri(contig-rovte-nap)® actoh ip adel Ri(contig-route-map)F oxit Ri(oontigi® access-list 1 pernit 120 Ri(oontigie accese- List 1 permit 120 Ai(configh interface Seriaie/0/0 )-L00F¥ perait 70 Ri(contig-it)# ip sumnary-eddrese eigrp 4 120.100.0.0 255.265.0, 24 show ip route eigrp 120.0.0.0/8 is variably oubnetted, 10 subnete, 2 necks 100.0/24 [60/2172416] via 120.100.128.1, 180.200.0/24 [90/2172646] vie 120.100.128.2, (0: 35, Seriaio/0/e 185, SertalO/ 1m Ensue that the length of time that EIGRP consides neighbors to be valid without receiving a bello packet on the Frame Relay network between R1, R2, and R3 is 200 seconds. Do not change the hello-intrval parameter. (2 points) ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme dasPrectice Lab L170} CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 EIGRP considers neighbors to be valid up to thee times the hello inteval, The Frame Relay network is considered a slow speed link, and hello packets are sent every 60 seconds. Usually you could ture the hold time by manipulating the hello {intervals on an interface, but this question ensures that you can achieve the desired result only by manually changing the hold tine © 200 under the Frame Relay interface of routers Ri, R2, aad R3. Example 2-11 shows the required configura tioa and verification of hold time by displaying the neighbor's statistics as seen by R3. Ifyou have configured this comealy, ss shown in Example 2-11, yo have scored 2 points Example 2-11 _EIGRP Hold Timer Configuration and Verification Fi(configi# interface Seriaie/0/e Ri(contig-it)# ip hold-tine eigrp 1 2 ijeonrag-ar) Entor configuration comands, R2(contight interface Serial e(oonrag-ar)s ap nold-tine eigrp 1 200 Ra(oontig sf) 19 par Line. End with ONTLIZ. Ra(contigl# interfa RB(contig-it)# ip hold-tine eigrp 1 2 a(oontig-it)# de sh Ap elgrp neighbors TP-ETGAP paignbors for process 4 Ho Adda Interface Held UptinaSITT TO (see) (as) 8 3 Be 4 + mw 0 ° as 20 0 ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme dasPrectice Lab tty CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 © Configure new loophack interfaces on RI snd R2 using a loopback iaterfuce2 with an identical IP address of 150,101. 1.1/24 ca both routers. Adverts this network into EIGRD ca esch router. Ensure that R3 prefers the route from R2 by manipulating te delay associated with this route, Do not manually adjust the delay associated with the interface by ase ofthe delay command. You ate permite to configure only R2 to influence the delay. (3 points) 3 reesives identical routs from both RI and R2 for network 150,101.1.024, Assuch, both routes are stored the topology and soning table, R2 could influence the metic calculated by R3 by menipalating the delay of the new lcop= back interface or ofthe serial Frame Relay interface connecting directly to R3, but this isnot permitted. Because configu ration is required solely on RQ, the enly method available is to create an offse is that allows you to match specific routes and apgend further delay to them as they are advertised on R2 toward R3. Lf the offset ist isnot applied to the Frame Relay interface, i would affect the whole process and nt just advertisements coward R3, Example 2-12 shows the configuration required to advertise the new routes and the routes asthey are rezeived on R3. Initial delay is shown to be 25,000 seconds. Post-configuration ofthe offset list on R2 the delay is seen to increase to 25,003 p seconds forthe route received from R2. As Such, the cout installed into the routing table of R’ is thew the origi- nal advertised from RI with the more appealing value of 25,000 1 seconds. Ifyou have configured this comrectly, as shown ja Example 2-12, you have scored 3 poiats Example 2-12 _EIGRP Configuration and Verification Ri(contigi# interface Loooback2 Ri(contig-it)# ip address 150.101.1.1 255.255.255.2 fi(eontig-i0)# reuter elger 1 Ri(contig-router)e net $50.104.4.0 R2(contigh# interface Loopback2 Ra(oontig-it)# ip address 150.101.1.1 255.255.255.2 Re(oontig-if)# reuter eigrr 4 Ra(contig-router)# net 150.101.1 2s (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe dasPrectice Lab [172] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Example 2-12 _EIGRP Configuration and Verification conned 3H show ip route 150.107.1.0 Routing entry for 150.101.1.0/24 oom via “eigrp 1, distance 9€, metric 2207855, type internal Last upéats from 120,100.129.2 on Seri10/8/0, 00:02:51 x00 Fouting Dssoriptor Bleck 429.100.128.2, fron 126.100.123.2, 00:02:51 ago, via Serial0/0/@ Reliability 265/255, wininun MTU 16 Loading 1/285, Hes 1 * 129.400.128.1, from 120.100.128.1, 8:02:54 ago, via Serie Total Gla is 25000 nicrosscords, minimum bendvidth is 45e4 Wout Reliability 265/255, wininun MTU 1500 bytes Loading 1/285, Hes 1 bytes 070 IP-EIGAP (AS 1): Toeslony entry for 150.101.1.0/24 State is Passive, Query origin flag is 1, 2 Siosescor(s), FD is 2237885 Fouting Dessriptor Bleck 120.109.129.2 |Sertal0/0/9), fron 120.100.129.2, Sond flag fs @ Composite asteio is (2007855/128956), Route is Tntarnal Vector metric: Minimum bandridth te 1544 Kbst (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasPrectice Lab [173] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Example 2-12 _EIGRP Configuration and Verification _coninued Tetal delay is 25009 wisrosecends Felisbility is 255/255 Lad ic 1/255 Hoo court is 4 120.109.128.1 |Seriel0/0/9), fron 120.100.128.1, Sond flag is 0 Composite otric is |2207858/128258), Foute is Internal Tetal delay is 25009 wisrosscends Felisbility is 255/255 Lad ic 1/258 Hoo court is 4 fe(oonrag-router)# do show interface Sertai0/o Sorka8/@ Se up, Line protccel $+ up ardvare is GTVEK Serial Inteonst adiress is 120.100.123.2/28 MTU 1500 bytes, BH Y548 Hit, LY 20000 usec, reliability 25/205, teow 205, raload 1/205 Ra(oontigh# accese-List 1 permit 150.10 Ra(oontagit router eigro 4 Ra(oontig:router)# offect-iet 4 out 400 Gerda ©2008 cco systens. ne Alrights sere ris pubtzatin is rtscteaby copyrght Peso see Faye St forme dasPrectice Lab [ray CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Example 2-12 _EIGRP Configuration and Verification _coninued 3H show ip route 150.107.1.0 Routing entry for 150.101.1.0/24 oom via ‘eigrp 1, distance 9€, metric 2207855, type internal Last upéats from 120,100.129.1 on Seria10/8/0, 00:00:18 x00 outing Dssoriptor Bleck 7 429.400.128.1,, fPom 128.400.4128-1, 08:00:18 ago, via Serie Reliability 265/255, nininun MTU 16 Loading 1/285, Hes 1 070 byte TP-ETGIP (AS 1): Topotony entry for 150.101.1.0/24 Stats is Passive, Query origin flag is 1, 1 Siosescor(s), FD ic 2257865 Fouting Desoriptor Bleck 120.100.128.1 |Serte10/0/9), Tov 120.100.125-1, Sons Thag 16 0 Comporite noted de |2207058/42926E), Route te Internal Vector mts Mininun bandridth te 1544 Kbst Tetal delay is 25009 wisrosscends Land 46 4/255 Minimum TU Ss 156 Hop court is 1 120.100.128.2 |Sertel0/0/9), fron 120.100.125.2, Sons flag is 0 (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe das[175} CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Prectice Lab Example 2-12 _EIGRP Configuration and Verification coninued Composite natric is (2207058/ 128368), foute is Internal Vector mts Wininun bandridth te 1544 Kbst Peliubility is 256/255 Lad ic 1/255 Minimum TU Ss 156 op court a6 1 Section 2.2: OSPF '& Configure Open Shortest Path First (OSPF) as per Figure 2-8 using a process ID of |. Where possible, all OSPE ccanfigurtion should not be configured under the process ID. Each OSPF router should also hare its Icopback O interface configured anc advertised within OSPF as fellows: 2 points) R4 Looptack 0- Area 0 RS Loophack 0- Area 0 RG Loophack 0- Area 1 Swi Loopback 0- Area 2 ‘Sw2 Loopback 0 Area 1 Sw3 Loopback 0- Area 2 Sw Loopback 0 Area3 (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasPrectice Lab L176} CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 As per Lab 1, the question diects you to configare OSPF directly under the interfaces of the routers. The switches still require configuration under the OSPF process running tis version of IOS. Di you notice that area 0s paritioned? If ‘you have configured this conreetly, as shown in Example 2-13, you hare scored 2 points. Consider using the show ip ospt face command vetify your configuration. Example 2-13 Initial OSPF Configuration Fa(oontigi# interface Loopback @ Fa(contig-it)s ip ospf 1 ar Ra(contig-it)s eit Fa(oonragie antertay Fa(oontig-it)# ip Rs(contigi# interface Loopback @ Rs(contig-it)# ip ospf 1 ar Ro(oontig-it)+ wait As(cantigi# interface GigabitEthemnet 0/4 Rs(contig-it)# ip ospf 1 ar s(contigie intertay Ro(oontig- it) ip AB(oontig-if)# interface GigabitEtnernet @ RB(contig-it)# ip ospf 1 ar RB(contig-it)# ixtertace Gi fo(eonrig-ir)# Ap ospt 1 ar SH1(config)# ip routing HI(contig}# router ospr 4 ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme dasPrectice Lab NOTE you ar using he CCIE neighbor relionhippobems ring OSPF to yourrousrs MTU vaio i 1504 0 the 3550 ‘VLAN interface and 15000 the rowers and 3360s Example 214 sh 1 (3550 inthis scearo on RS. By cotugping OSPF aj has aac ofa MTU, which fences ht he neighbor ae ene only ever pail. Tho (G5e0)cefat MTU van the sme VLANSS athe MTU nooéed © congue tis ‘wertroune I youd’ spot sect tecause you dn'thave full neghborajaences ca sh LT tye of ste sows constant valida your contigra- tion as oppesed simply expect- tw) CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Example 2-13 Initial OSPF Configuration commit {(config-router}# network 129.1 H1(config-reuter}# network 129.1 o12(contig)# sp routing 2(conFig-ifi# router ospt 2(config-rovter}# net 12 2(config-router}# net 124 [1a(confie)# Ep routing 45(conFig)# router ospt 4 15(config-reuter}# network 129.1 15(config-reuter}# network 129.1 OHS(contig-revter)# network 129.1 ‘14(config}# ip routing a(conrsg)# router ospr 4 1A (contig.revtor}# network A(config-routor}# netrork ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme das[17a] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Prectice Lab Example 2-14 _R5-Sw1 OSPF Neighbor Issues Ast show ip cept neightor Neighbor Pri state ad Tims Adchost Interface 1 BXGTANT/ONOTHER 00:00:95 120.100.09.1 OigabitE there + FULLIOR 8120.4 53.8 Gigebitetharne Fo# debug 4p ospt adjacency fs Fst show interface igabitEthernet0/O | begin ITU MTU 1209 bytes, BH 109000 HOLE, OLY 100 usec, OW show interface vlan §3 | begin ITU ITU 1504 bytes, BH Y0N00e0 Foit, OLY 18 usec MTU 1500 bytes, BH Y0N00e0 Fit, DLY 18 usec, SUi(contig-if}# ant vlan 58 Ouiicontigif}# sp mt 15 Ft show ip pf neighbor Neighbor Dera state Dead Tame Adeross Intertece + FuLLfononicn of cigebstetnernet0/4 + FULLIOR SigebitEthernate/t (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe dasPrectice Lab [179] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 '& Area. is patitioned between R4 and RS. Ensure that your network can scoammodste this Ssue. You are sot perit- ted to form any area 0 neighbor relationship diectty between R4 and RS to join area 0. (4 poinis) A fundamental rule of OSPF is not to design your network with a parttioned backbone area 0 or pastiton inthe event of 1 fuilue condition. A viral link between R4 aad RS would not work here because you would ned to transit multiple (OSPF aress. A tunnel between the two routers it also not permitted because this would form a dirt neighbor elation ship, You ae required to configure a viral link between RS aad switch 3 to propagate rea 3 routes and similarly between R4 and R6. By then creating an additional virtal link between R6 and switch 3, the two effective haves of the network have been joined at an wea 0 level Remember to configue all virtul links to the router ID of the remote router ss opposed to the py'sical IP address on the corresponding interface. Example 2-15 shows the required configuration to create virtual links between RS-SW3, R4-R6, and R6-SW3. The resulting routing table verification on switch 4 shows all nctwerks are being learned correctly pest- configuration. If you have coafigared this comely, as shown in Example 2-15, you bave scared 4 points. (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasPrectice Lab [180] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Example 2-15 _ OSPF Virtual-Link Configuration and Routing Table Verification As(contigi# router spt + Rs(contig-router)# area 2 virtual-Link 12% oHa(contig-roster)# router apt 4 ‘19(config-rovter)# area 2 wistual-Link 120.108.5.1 Rs(contigit router spf + fa(conrag-router)# area 1 virtual-.ink 12% RB(contig-if)# reuter ospf 4 RB(contig-router)# area 1 virtual-Link 12 RB(contig-router}# area 3 virtual-Link 12 S19(contio-ifi# router sept 4 15(config-routor)# area 3 vietual-Link 120.108.6.1 ua sn ap route ost om 1732 (140/21 vie 120. st, viene on 1/32 [140/8] vie 120. st) viene om 1732 (148/8] vie 120. st viene om 4/32 [148/9] vie 420. viene om 1752 (4140/8) vie 120. sa) viane om 4/32 (140/2] vie 120. st, viene om 24 [110/2] vie 12 sf, Vane on 55, Vian6d 2008 cisco systems, Alright reseried, This pubatens protected by copyright Plese so page Si fermere desiPrectice Lab [81] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Section 2.3: RIPv2 ‘= Configuse RIPV2 betwoon RD and R3, por Figere 2.9. Configure a new loopback: interface on R2 Isopbact 3) with an IP airs of 150,102.24. Advertise this and only this network to R3 from R2. 2 paints) Although RIPy2 is capable of variable-lengta subnet mask (VLSM), itnevertheless is based on 2 classful protocol that by default advertses all the consected interfaces of both R2 and R3 when the classful network corumand activates the routing process. To restric advertisement to solely the aew loopback interface from R2, you need a basic distsbute list, ‘This should be applied ether on the entire process or just on the Frame Relay interface connecting to RB. It should permit only the new loopback subnet of 150.101 2.0224 If you're low on time, you can check the routing table of R3 to find thatthe only RIPV2 route received is that of the new loopback 3 interface on R2. This is because the VLAN200 and looptuck 0 interfaces of R2 are slready being learned via FIGRP, which, of course, has a lower admin distance and therefore isnot listed 2s a RIPr2 route within the rouing table. Example 2-16 shows the basic RIPv2 configuration on 2 and R3 with a debug of RIPy2 updates on R2 to illustrate which routes are being advertised to R3. The roquired distribute list configuration is also shown. IF you have configured this correcily, as shown in Example 2-16, you have scored 2 points Example 2-46 _R2 and RO RIPV2 Configuration and Verification Re(oonTigh taterface Loophacks| Ro(contig-it)# ip ald 150.101.2.1 255.286.256.0 Ra{contig-it)# reuter rip Ra(oontig-router)® version 2 fe(eonrag-router}# no auto-suanary Ra(oontig-router)# network 428 Ra(contig-router)# network 12% Ra(contigi# router rip Ro(config-rovter)# version 2 Ro(eonfig-rouer}# no ato-suanary ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme das[182] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Prectice Lab Example 2-16 _R2 and R9 RIPv2 Configuration and Verification conned R3(contig-router)# network 420, Ra(eontig-router}# do show ip route rip Rh 450.504.2.0 [42074] vin 120.100.129.2, 6, Sersa20/0/0 Ras sh ip rovte rip sending v2 update to 224 build update entris ey 20.4 reteic %, tag 0 ey een reteic +, tag 0 ney ae 101.1.0/24 vie metrae 1, tag @ sity 450.405.2.0/21 via mmotese 4) tag @ R2(contight router rip Ra(oontig-router)# distribete-List 2 out Serial0/@ Ra(oontig:router)# erst Ra(oontigi# access-list 2 permit 150,101.22 R2{conigh exit Woy 8 05:02:40,271: A Woy 8 05:02:48,274: RIP: build update entrioe Moy 8 05:02:48,271: 158.40'.2.0/28 via 0, metric 1, tag @ aw 24 is subeotted, 2 subnets H__450.101.2.0 [120/1] vin 120.100.125.2, 00:00:02, serial0ja/e (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasPrectice Lab [189] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 = R3 should not advertise any connected interfaces into Routing Information Protocol version 2 (RIP\2). Dono’ filler routing advertisements to achieve ths behavior. (2 points) Because you are sot permitted to filter routes, as per the previcus question, you simply configure the Frame Relay inter faces to be passive on R3. This allows routing updates to be reseived iabound but stops routing advertisements outbound. Example 217 shows the RIPV2 routes advertised ovigially from R3 being received by R2 withthe required configura. tioa for R3. Ifyou have configured this correctly, you have scored 2 points Example 2-17 _ RS RIPv2 Configuration and Verification Fae debug ip rip hay ‘ay ay FIP: received v2 update from 120.100.125.3 on Serial0j0 o(eontigye router rtp Ra(eontig.rouen)e_pasaivenintenta Section 2.4: Redistribution 1m Perform a one-way redistribution of RIPv2 into EIGRP on R3 using the following default metric 154420000 255 1 1500, Ensure that Rl shows a next hop for the RIPv2 advertised route of 150,101 2.0/24 of R2. Perform configura tion only on R3 for this task. (3 points) ‘This isa simple redistribution question. On inspection you might believe the only complexity is that of modifying the not hop attibute for RI, which would by default show as B3 for the RIPr? route advertised by R2. In fact, you would (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasPrectice Lab [184] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 find thatthe RIPy2 rcute would not be seen on RI gost-secistrbution from R3. This is because of ar inherent safety smechanisea within EIGRP that causes sodistibutos issues with routers that have duglicae EIGRP route IDs. Prelab configuration ensured that both K1 and R2 have the same loopback 255 IP address, whica forces the router ID to be identical Example 2-18 shows the redistribution configuration on R3. The RIPv2 route of 150,101 2.0:24 is received on R3 but is albsent on RI. Inspection of the EIGRP topology table for the route on R3 shows that it is being advertised into EIGRP ‘and that the router ID of R3 & 200.200.200.200. Similarly, the router ID of RI isalso 200.200.200.200. By changing We router ID of R3 to that of ts loopback 0 interface (120.1002.1), ths routeis thon accepted by Ri. Bat, of course, aaext hop is shown as R3 even though R2 cesides on the same IP suhnet as RI snd R2 and is the originating outer. The FIGRP. thizd-party next hop feature can be used to modify the nexthop attribute with a router redistibuting ancther routing ‘protocol into EIGRP in a similar manne: to that of BGP. Ifyou have configured this correctly as shown in Example 2-18, Example 2-18 RS Pv2 Redietribution Configuration and Verification Ro(eonfigh router igre 4 Ra(oontig-router}® redistribute rip Ra(contig-router)# defarlt-netric 1544 20000 255 1 1500 Fa show ap route rip Rh 450.101.2.0 [120/1] via 120. 100.128.2, 05, Serin10/0/0 Fig show ip route 150.101. ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme dasPrectice Lab [135] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Example 2-18 _ RS RIPv2 Redistribution Configuration and Verification commued QE show ip eigrp topology 150.101.2.0 255.288.255. TP-EIGAP (AS 1): Topology entry for 150.101.2.0/24 State is Passive, Query origin flag is 1, 1 Siosescor(s), FD is 6777885 120.109,123.2, from Fedictributa, Send flag is 00 Composite atric 1c (6777858/0), Route is Extorml Vector mts Felisbility is 255/255 Lad ic 1/258 Minimum NTU Ss 156 Hop court as 0 External dita Oniginating router is 200.20 AS number of route 4s 0 Extomal protocol 1s RIF, extemal Aiwinictrater tag te € (0:00000000) 200 (this est F3# show ip eigrp topology | include 10 IP-EIGAP Topology Table for AS(1)/10(200.21 Fig show ip eigrp topology | include 10 IP-EIGAP Topology Table for AS(1)/10(200.21 hie ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme dasPrectice Lab [136) CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Example 2-18 _ RS RIPv2 Redistribution Configuration and Verification conmued Ra(contigi# router eigre 4 Ra(contig-router}# eigrp router-id 120,10 TP-EIGAP Topology Table for A8(1)/T0(120.100.8.4) QE show ip eigrp topology 150.101.2.0 285.288.285. IP-EIGW (AS 1): Topology entry Ter 150.101.2.0/24 Seats 4s Pocesve, Query origin flag 2 4, 1 Subssscer(s), FO se 6777958 Feouting Dessriptor Bleck 120.109.128.2, fron Redistributed, Send flag i 0 Composite atric 1s (677858/0), Route is Extorml Minima bandwidth te 154 Kbst Total delay is 200800 microseconds Felisbility is 255/255 tas 16 1/288 Hop court is 0 External dt: Oniginating router is 12 Ectarnal protocol i FIP, axternsl estric se 4 Mninistrater tag Ls © (08000000) 21 (this eysten) Fie show ip route 150.101.2.8 Roveing entry for #09.404.2.0/04 oom via “eigrp 1", distance 170, wstric 7250866, type external (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe dasPrectice Lab (87) CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Example 2-18 _ RS RIPv2 Redistribution Configuration and Verification _conmued Fedistrabuting via oie Last upéate from 120. Fouting Dssoriptor Bleck +489,400.489.9, from 126, 100.4£9.9, 09:09:00 ayo, vis Sarisl0/0/0 Route aatric sa 7260058, traffic share ooint 4s 4 Total ¢olay is 220000 aisrosecends, minimn tandvisth is 1544 Kbit Reliability 265/255, wininun MTU 1500 bytes Loasang 1/285, Hes 1 23.3 en Soriclo/0/ 00:02:06 ag0 Ra(contig-it)s irtorface Soniale/0 Ra(contig-it)# ne ip nevt-hop-celf igrp 1 Routing entry for 159.101.2.0/24 Histance 170, ested 7260066, type external own vie “sigep 1 Fedistrsbuting via sig Last upeate trom 120. + 429.400.128.2, from 120.100.123.8, 00:00:24 ago, via SoniclO/0/0 Route wstric ss 7260058, traffic share ooint 4s 1 Total ¢olay is 220000 aisrosecends, minimin tandvidth is 1544 Kbit Reiebility 226/255, minimus MTU 1200 byteo Loading 1/255. Hos 1 25.2 en Sorse19/9/e, os 2 290 1m Perform mutual sedistribution of EIGRP asd OSPF on RA and RS. Use a metric of S000 for sedistributed routes into COSPE, which should appearas external type 2 routes, andthe following K values for OSPF routes redistituted into EIGRP: 1544 20000 255 1 1500. (2 points) (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasPrectice Lab [138] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 This is an unambiguous redistribution question that sets the scene for the question thst fellows. Example 2-19 shows the required configurstion on Rd and RS with verification of exteraal EIGRP received routes on R3. Because the metrics are ‘identical on R4 and RS, you have multiple routes with load-sharing petential. If you have configured this corectly, you have scored 2 poias Example 2-19 _R4 and RS Redistribution Configuration and Verification on R3 Ra(contig-router)# router ospt 4 Rs(contig-router)# redistribute eigrp 1 subsets Rs(contig-router)# defarlt-netric 50 fa(conrag-router)# router eagrp 1 Ra(oontig:router)# redistribute oop 4 Rs(contig-router)# defarlt-netric 1544 20000 255 1 1500 Ro(contig-rovter)# router expt + As(config-router}# redistribute signy 4 subsets Rs(contig-router)# defarlt-netric 50 Rs(contig-router}# router eigrp 1 As(contig-router)# redistribute orpt + Ac(oontig:router)# defarit-metris 1644 29009 256 4 1600 24 show ip route eigrp 160.101.0.0/24 is subvotted, 2 subnet © [90/22978s8] via 120.108.128.1, 00:08:08, Seriai0/0/e 22, igebitetnernet9/@ 22, Gigabit Etnernet0/@ ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme dasPrectice Lab [139] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Example 2-19 _R4 and RS Redistribution Configuration and Verification on R3_cominuad oe rr 1752 [i7ojeranste] vie [i7ojeranste} vie 92 Lsvorerone] via [i70jeranete] vie 1732 Lizeysrensse 00/58150] via 120.109.04.8, Gigaditetnemsto/e Gigabitetnemete/e Gigabit Etnarnata, GigabitEtnemnste/e aganseetnemete/e 07:17, GigabisEtnarnet0/2 1 os [e/:56180) via 124.109.21.5, 00:07:17, Gigabitethernst0/a 120. 100.4.1/32 [i7OIS7AMYE] via 120.100.94.5, 60:09:29, Gigabit Fthamet9/0 es 1732 [iro jeranste} vie 20 Li7everenste} via 32 420.190.8.1/22 [iro jeranstel vie [s7ojerencte} via 22 4.5, (@:00:28, Gigabitetnornsto/e 0.34.4, 69:00:25, wigenstetnerneto/e ):28, Gigabit Ethorneta/ 24, Gigabit Etnernet9/@ 6 [90)2472416] vie 120.100.123.1, 00:05:07, Soria 0/24 [00/220reot] via 120.100.128.1, 69:02:07, Seri 420.100.2024 [9012207856] vin 120.100.129.2, @as0sre7, Sarial@r0/e ):26, Gigabit Etnoeneta/ 24, GigebitEtnerneto/e 2008 cisco systems, Alright resend, This pubaten spotted by copyright Plesoe cs page Si ermere desiPrectice Lab [100] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Example 2-19 _R4 and R5 Redistribution Configuration and Verification on R3_coninuad [ire jsranste] 24, GigabitEthernst2/e [ire jsranssey 24, GigebitEtnernet9/@ 18.0/28 [sreyerenese 9.94.5, 60:00:24, igebitetnernet9/@ [s70ieranexe] via 120,100.94.4, 60:09:24, Gigabit Ftharnet9/0 [v0y2r72et8] vie 120.1 [voy2r72eie] vie 120-1 = 3 will have equal cost external EIGRP routes tothe redistributed OSPF subnet 120.10).63.0/24 (VLAN6). Configure only B3 to ensure that R3 rontes vie a next hop of RS (120.100.34.5) for this destination subnet. TF this route fails, the route advertised from R§ (120.100.34.4) should be used dynamically. (3 points) Example 2-20 shows both roates for 120, 100,63.0/24 received on R3 fromm R4 and RS, Because all routers share a ‘common media, the interface connecting to R4 or RS cannot be modified on R3 because this would affect both routes. Similarly, an offset list to manipulate delay & of no se because You are permitted to configure R3 caly. Thesefore, you are required to penalize the rte received fiom RA only toensure that the RS generated routs is preferred co R3. By configuring a ou map on R3 to match only the rete source of R4, you can increase the metre forthe required route (120.100.63.0124), This simply allows the original route received from RS to take precedence. Example 2-20 shows the required configuration and verification thatthe route is prferred via the RS. The topology table shows thatthe R4 route is also preseat and that Ris effectively the feasible successor fer this network on this router. If the route from RS is withdrawn, the coute from RS enters the routing table automatically. You need a seconé permit state- ‘ment on the route map (permit 20) allow all other routes inbound to R3 toenter unaltered. Example 2-20 also details the routing tates of each device to confirm redstribution fom EIGRP into OSPF or vice versa, If you have coafigared this correc, as shown in Example 2-20, you have scored 3 points, (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe das[01] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Prectice Lab Example 2-20 _R9RIPv2 Redistribution Configuration and Verification Ae show ip route 120.1 oom via “eigrp 1, distance 170, wstric S780416, type external Last update from 120,100.24.5 on GinabstEtnarvat00, 00:01:69 ag0 Fouting Dssoriptor Bleck 129.100.84.5, fron 120.100.34.5, 00:01:5) ago, via Gigabité theme Reliability 265/255, wininun HT 1500 bytes Loading 1/285, Hes 1 + 129.400.51.4, from 120.108.94.4, 00:01:59 ago, ria Gigabittthernsto) Total daly 4 200400 miorosscends, minimin tandvidth is 1644 Kbit Reliability 265/255, wininun MTU 1500 bytes Loading 1/255, Hes 1 RD(oontigit acoese- List 4 porast 120.100.94.4 Ra(contia}® access-list 2 peruit 120.100.63.0 Ra(contig}t router eigro 4 Ra(contig-router}# distribete-List rut Ro(config-router# exit Ra(contigi# route-nap PENALTSE-VLANB} perwit 10 Ra(contig-route-aap}# watch ip address 2 Ra(contig-route-sap}# watch ip route-source 4 Na(eontig-route-aap}# set eetrie +s0000e Ro(oontig:route-aap}t reutenmap PEYALISE. VLANGS ap PINALISE.VLANG in GigabitEthernet9/0 (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasPrectice Lab [102] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Example 2-20 _R3 RIPv2 Redistribution Configuration and Verification _consnued Qe show ip route 120.1 oom via “eigrp 1, distance 170, astric 8750416, type external Last update from 120,100.24.5 on GipabstEtnarnat00, 00:00:21 aa0 Fouting Dsssriptor Bleck *429.100.81.5, from 120.108.94.8, 00:00:21 ago, via Gigabittthernsto) Reliability 265/255, wininun HT 1500 bytes Loading 1/285, Hes 1 TP-ETGAP (AS 1): Toeoloay entry fer 120.100,83.0/28 State is Passive, Query origin flag is 1, 1 Siosescor(s), FD ic 6730818 Fouting Dessrigtor Bleck 29.100.88.5 (G1ga>itetnernst0/0), rom 120.1€0.34.5, Sond T1ag 16 &x Comporste matedo ie |E7ED16/6777866), Route se Extennal Vector metric Minimum bandridth te 1544 Kbst Total deley is 210109 microseconds Land 46 4/258 Minimum TU Ss 156 Hop court is 1 cecternal dt: ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme dasPrectice Lab NOTE Thefll Prong tates sccompnyirg cenigee ion 1 verify yourredis- [199] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Example 2-20 _R3 RIPv2 Redistribution Configuration and Verification _consnued (Originating router is 120.108.5.1 AS swmber of route i 1 Extomal protocol is (SPF, external aetric is 2 Adinictrater tag Le © (00000000) 429.4100.24.8 (GigabitEthernst0/0). from 121 Composite nstric is 1200 Vector mts Felisbility is 0/235 Lad ic 0/255, Minanun MIU as @ External data: Oniginating router is 120.10 95 nwmber of route i 1 External protocol Ls CSFF, ertersal wewie 4s 2 Mninictrator tag te € (0-80000000) 100.34.4, Sond flag ie 0x0 8777858), Houts is External 2008 cisco systems, Alright resend, This pubaten spotted by copyright Plesoe cs page Si ermere desi[104] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Prectice Lab Section 3: BGP (15 Points) ‘= Configure Border Gateway Protocel (BGP) peering as per Figure 2-10 as follows: Internal Border Gateway Provocol GBGP) RI-R3, R2-R3, RA-R6, R4-SW2, RS-Sw1,RS-sw3; Extemal Bonler Gateway Protecol (CBGP) R3-R4, RI- 5, Sw Sw3, RE Swi. Use loopback interfaces to peer on all routers with the exception of peering between R3.RA ‘and R3-RS, Do fot use the command ebgp-multihop within your configurations. (3 points) ‘The restrictions withia the iBGP peering require you to configare R3, R4, and RSas couk reflectors within their own AS. Aulosemmarization is disabled to ensure that BGP does not summarize rcutes, and synchronization is disabled because the Interior Gateway Proweot (IGP) is not synchrouized to BGP within this lab. The question doesa’t dictate that you ‘must configure poor groups, but it s considered good practice whore you have mere than one poor with a similer peering configaration, However, the question does cctate that you must net use ebgp-mailtihop. OF course, this feaure would he required forthe peering from AS400 to AS300 and AS400 to AS200 because loopback interfuces are used for the extemal peeting here, in contrast to AS10) to AS200 and AS300, which peer fiom connected interfaces. Without ebgp-anultibop the peering fais ia and outbound from AS400. ‘The only way to fix this is touse a feature that disables connection verification to establish an eBGP peering sessca with a single-hop peer that uses a loopback interface. If you use the commend neighber disable-connected-cheek on RS, Sw3, and Sw forthe required peering, that allows you to form the peering successfully. Example 2-21 shows the basic peering configuration for BGP, the eBGP failure condition observed oa peering to and from AS400, and the required configaration to rectify the condition. If you have configured this cosrectly, you have scored 3 point Example 2-21 _ BGP Peering Configuration and Verification Ri(contig}# router bap 104 Ri(contig-router)# no auto-suanary Ri(contig-router}# no synchronization Ai(config-router)# meigibor 1 Ri(contig-router)# neighbor 12% 1 update-souree Loopback (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe dasPrectice Lab Example 2-21 [105] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 BGP Peering Configuration and Verification conned R2(contigh# router bgp 108 R2{contig-router}# no auto-suanary R2{contig-router}# no synchronization Re(config-router)# neighbor 12 Re(contig-router)® neighbor 12% 1 update-souree Loopback® Ra(contigi# router bgp 100 Fs(eonrag-router)# no auto-suanary RD(oontig.router}# no synohonization Ra(contig-router)# neighbor ASH RR{contig-router)# neighbor ASIO RR{conig-rovter)# neighbor ASHO Ro(config-router)# meighbor 12% Ra(contig-router)# neighbor 12% R3(contig-router)é Ra(contig-router)® fs(eonrag-router)# neagibor 12% peer-geoup ‘upéate-eoarce Loopback® 1 peer-aroup ASO rorte-reflector-client 4.4 renotenae 2 Ra(contia}# router bap 200 Ra(config-router}# router bgp 206 Rs(contig-router}# no auto-suauary Ne(config-router# no synchronization Ra(oontig-router}® neighbor AS200 fa(contig-router)® fa(contig-router)® Penote-as 2 Update-sosrce Loopback’ (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasPrectice Lab [198) CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Example 2-21 _ BGP Peering Configuration and Verification continued fa(contig-rovter)® fa(contig-rovter)® fa(contig-rovter)® Na(contig-rovter)# Rs(contigi# router fs(conig-router)® s(eonag-router)e As(oontig.rovter)® As(contig-rovter)® fs(contig-rovter)® fs(contig-rovter)# NRo(contig-rovter)# Asioontig-routen}® As(contig-rovter)® ro(conragie router RB(oontig.rovter)® RB(contig-routeri® AB(contig-router)® AB(contig-router)® no(contig-rovter)® Rs(oontig-rouen)® neighbor AS20 neighbor 121 neighbor 121 rorte-reflactor-client 1 peer-group A820 1 peer-group A820 tap 200 no anto-sunmary np synctrontzecion Penote-ae 3 ‘pdate-soarce Loopback’ rorte-reflector-client tap 200 neigtbor neighbor nvigtbor 1 update-source Loepback® SH1(contig}# router bgp 0 H1(contig-roster)# a0 aute-suanary OU(contig-rovter)# a0 synchronization 2008 cisco systems, Alright reseried, This pubatens protected by copyright Plese so page Si fermere desiPrectice Lab [07] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Example 2-21 _ BGP Peering Configuration and Verification continued H1(contig-routor)# aeighber 12. SH1(config-roster)# neighber 12. ova(contigy# router bgp 20 S2{conFig-router)# no auto-sunnary 912{config-roster)# a0 synchronization 912{config-roster)# neighber 12. ‘z{contag-router)# nesgnber 12. <7 uplate-souree Leopback® 13(contig}# router bep 30 915(config-rostor)# no auto-suunary 915(config-roster)# no synchronization O¥a(config-roster)# aedghbor 19(confio-rovtar)# neighbor 915(config-rostor)# neighbor 915(config-routor)# neighbor S1u(contig)# souter bgp 40 14( confio-rostor)# 20 auto-suunary ‘14( contig-roster)# a0 synchronizetion 4( contig-rostor)# neighbor 6.1 resote-as 208 va{config-roster)® aeighbor 0.1 uplate-source Loopback ‘14(contig-rovter)# neighbor 9.1 retote-as 30 ‘4(contig-rostor)# neighbor 9.1 uplate-source Leopback® 2008 cisco systems, Alright resend, This pubaten spotted by copyright Plesoe cs page Si ermere desiPrectice Lab CCIE Routing and Switching Practice Labs Example 2-21 _ BGP Peering Configuration and Verification continued [199] Martin Jamas Duggan, COE No, 7042 a 6h ip bgp weigh 120.100.5.1 | include External Ectomal 86? neighbor not directly connected. 14 show ip bgp neighbors 129,100.9.1 | inelute External External 60? neightor not directly connected. sue 94 sh ip bgp reighbors 120.100.6.1 | include active No astive TEP connsetion ‘4( contig-rostor)# neighbor 12. Oua{contig-router)# aeighber 120 conneeted- check RB(contig-router)# neighbor 12% 1 disable-connected-check s(contag-roster)# nesgnber 12. 94 show i bap neighbors 12% EGP state = Established, up for ‘14 snow ip bgp neighbors 12 1 | inelute Establishes 2% 1 | inelute Establishes ‘You alo find peesing issues between RL and R3. Example 2-22 shows the routers are informing each other they have an incorrect BGP identifier. This is simply because both rcuters have ideatical loopback interface address of 200.200.200.200, which is used as the BGP identifi. By changing the ID of one router, you establish the peering. It doesn’t matter what you change the ID to, but it needs (© be unigue. As such, the loopback 0 interface i a good choice, No extra points for this tsk hecasse this ix part ofthe original peering, 2008 cisco Systems, Alright resend, This pubatens protected by copyright Peso ss page Skt ermere desiPrectice Lab [199] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Example 2-22 _ 1 and RS Peering Issue Configuration and Verification Fig 10:90:13.287: $SGP-8-ADTIFICATION: sant to neighbor 120.100.8.1 2/3 (Bi ‘identifier wrong) 4 bytee cactoscs ose 19:28:00,048: 20P-9-ADTIFLGATION: raceived from neighbor 120.180.4.1 8! 8 (BBP identifier wrong) 4 bytes caostscs fe show 1p tgp sumary | anciude idenestaer 2# show ip bgp sumary | inclu BOP router identifier 200.20 Ri(contig-router)# bap router=id 120.1 *19:34:45.487: SEOP-5-ADICHNGE: naighbor 1 = Routers RI und R2 in AS1ON should be made wo only passively accept BGP sessions. RY should be comfigured to only actively create BGP sessions to RI and R2 within S100. (3 points) By defaulta EGP speaker attemyts to open a session on TCP port 179 with a configured pees. As such, a normal peering ‘urangement sees two sessions being established to build a suczessful aeighbee reationstip. This behavior can he modi- fiod to effectively allew sessions to be established enly either inbound or outbound. The solution to the question is achieved by configuring the neighbor transport connection-mode to passive on RI and R2 (inbound connections only ae estiblished) and active on R2 (outbound sessions only ae established). You must manually activate each neighbor on teach router forthe solution to work effectively. If you have coafigared thie corectly, ae shown in Example 2-23, you have scored 3 points. Considerusiag the show ip bgp summary command to verify your configuration, (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasPrectice Lab [200] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Example 2-23 _R1.R2, and R3 Connection Mode Configuration _conmued Ri(contigy# router byp 1 Ri(contig-router)# neighbor 1 Ri(contig-router)# neighbor 1 Ra(oontig}® router bap 106 Ra{contig-router)# neighbor 12% R2{contig-router)# neighbor 1 Ro(oontigye router bgp 108 Ra(contig-router)# neighbor AS! R3(contig-router)# neighbor 1 Ra(contig-router)# neighbor 1 1 trauspert conection-no 1 trauspert conection-no © Configure the following loopback interfaces on R3 and Sw. Advertise these networks into BGP using the network command: 2 points) 3 - Loopback interface 5 (152.100.100.1/24) Sud - Leoptackinterface § (152.200,22.1/24) Suet - Looptack interface 6 (152.200.33.1224) Swed - Looptackinterface 7 (152.200.34.1/24) Swed - Looptackinterface 8 (152.200.35.1/24) ‘This isa simple question that creates BGP routes forthe following tase. If you have configured this correctly, as shown in Example 2-24, you have scored 2 points, ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme dasPrectice Lab [21] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Example 2-24 _R3 and Sw4 Network Advertisement Configuration and Verification R3(contigh# interface Loopbacks R3(contig-it)# ip address 152.100. 100.1 255.255.255. Ra(contig-it)# reuter byp Ro(contigrrovter)# network 192.1 14( configh# interface Loopbacks a{contag-A1)# sp address 182.200.82.1 255.255.255. SIU( contig if)# interface Loopbacks UA(config-if}# sp address 152.200.93.1 255.255.255, ‘4( contig-if}# interface Loopbact7 Ua(contig-if}# sp address 152.200.34.1 255.255.255, Oua{contig-if}# interface Loopback® SUA(confio-if}# 5p addrves 152.200.96.1 255.255.286, ia(contig-if}# router bgp a0 14( contig-rostor)# network ‘a{contag-roster)# network S1U(contig-router)# setwork 14( contio-rostorl# network mask 285.255, 256. mask 285.255, 256. 3# show ip bop Status codes: s superesied, d damped, h history, * valid, > best, 4 ~ internal P AIE-failure, 8 Stele Origin codes: i - 16, » EGP, 2 - incomplete ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme dasPrectice Lab [202] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Example 2-24 R3 and Sw4 Network Advertisement Configuration and Verification _cominued stort Next Hop Metnic Locorf Wight Pat 204 0 sees 4 © 200 oye + 452,200.90,0724 ° oye © 200 400 4 + 452.200.06.0/24 2 200 400 + = 2200 400 i ‘Configure R3 to inform R4 that it does not want to receive routes advertised from Siv4 for aetworks 152.200.33.024, 152.200,34.0724, and 152.200.35.0/24, Achieve thisin such a manner that R4 does not actually advenise these routes toward R3. You can also configure R4. (4 points) BGP has a prefix-based Outbound Route Filtering (ORF) mechanism that sends and receives capabilities to misimize BGP updates sent between BGP pees. Advertisement of ORF capability indicates that a peer accepts a prefix list froma neighbor and applies the prefix list received from a neighbor locally to avoid the unnecessary sending of routes that ‘would he blocked by the receiver anyway. Therefore, R3 is configured wih a presix ist that blocks the required routes generated from Sw4 and that is sent via ORF toR4, RA is configured to receive this prefix list via ORF, andthe routes are blocked oxthouind at Rd. Example 2-25 chows the required ORF and poof list filtering with the racalting outbound advertisement on 84. The BGP uble on R3is also displayed, showing the routes are no longer being received from R4 and instead are being received sclely from RS. If you have configured this correctly, as shown in Example 2-25, you have scored 4 points, (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe dasPrectice Lab [20] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Example 2-25 BGP ORF Configuration and Verification Ra(contigi# router bgp 100 R3(contig-router)# neighbor 129.100.5¢.6 capability orf prefix-List send Ra(oonFig-router)® neighbor 120.100.96.4 prefix-List FILTER in Ro(contigh® ip prefin-Lint FILTER seq deny 192.200,29.0/24 Ra(contigi# ip prefix. List FILTER R3(contigi# ip prefix-List FILTER Ra(contigi# ip prefix-List FILTER Ra(oontég}e router bgp 200 Rs(contig-router)# neighbor 120. Rs(contig-router)# exit Ra(contigy exit 98.3 capability orf pretix-list receive BOP tabla version $4 47, Tooal routar 1D is 120,100.4.5 Status codes: © suppresied, d damped, h history, * valid, > best, i ~ internal, P RIE-failurs, § Stale origin coose: a - 16%,» EGF, 7 - snsompiote Network Novt Hop Metric LosPrf Weight Path wos950.2 2 100 400d a# clear ip bap * SE show ip bop BGP table version 46 6, Local router ID is 200.200.200.200 P AIE-failure, 8 Stele (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[204] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Prectice Lab Example 2-25 _ BGP ORF Configuration and Verification _consimed Origin codes: i - 16, © - EGP, ? - inconplete Network Novt Hop Motese LosPef Weight Path © 200 400 4 0 4 6900 400 4 3.0/24 © Configure route map on RS that prepends its local AS 2 an addtional two simes for network 152.200.32.0/24 when adverised to R3. The rcute map can ccatain multiple permit statements, but only one prepend is permited pet line. G points) ‘This isa simple AS path propond question, or soit sooms. Normally, you prepend the same AS qumbor multiple times within the same permit statement, but the question restcts this so that you are forced to use multiple permit statements with the same AS prepend statertent. Example 2-26 shows the route 152.200.32.0/24 as received initially om R3 from RS with an AS path of 300-400. After configuration of the route map to prepend the route on RS twice, the network is received on R3 wath an AS path of 300-300-400. This might look like the route has indeed been prepended twice, but the question requests an “additional” two times. In fact the route bas been prepended only once. ‘The problem is that the route-map permit 10 satemest on R3 has been execated, and the route map then does not evelu- tte any additional route map entries and simply drops cut so thatthe permit 20 statement is never actually executed. By ‘coufigaring a continue 20 statenent within the permit 10 line, che router is forced to evaluate the permit 20 line rather thon chopping out ofthe routs map after successful exscution of tho permit 1D statement. The final verification in Example 2-26 shws the route received on R3 with successful prepend applied by RS. IFyou have configured this, comrecly, 25 shown in Example 2-26, you have scored 3 points. ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme dasPrectice Lab 208) CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Example 2-26 _R5 Prepend Configuration and Verification 3# show ip bop BOP table version is 6, Local router ID is 290.200.200.2 Stetus codes: © suppressed, d damped, h history, * valid, > best, i ~ internal, Orioin codes 4-102, «= EOP, ? = Sncomplote Nstwort Novt Hop Moteie LosPef Weight Path ss 12-200.92.0/24 6 200 400 5 . 900400 4 + 150.2 300 200 i > 150.2 300 200 i As(contigi# router bgp 300 Rs(contig-router}# neighbor 120. fo(eonrag-roucer)# exit As(oonfigit acoese- List 4 porast 152.200.92.0 As(contia}# route-nap PREPEND perait 12 Rs(contig-route-map)F watch ip address 1 Rs(contig-route-map)F set as-pith prepend 3 Ro(contig-route-mp)® rvuternap PREPEND pernit 20 Asioontig-route-agp}# match ip address 4 Rs(contig-route-map)F set as-pith prepend 3 As(contig-route-nap)F raute-nap PREPEND pernit 32 38.9 rovte-nap PREPERD aut ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme dasPrectice Lab 206) CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Example 2-26 _R5Prepend Configuration and Verification conned 3# show ip bop BOP table version is 6, Local router ID is 290.200.200.2 Stetus codes: © suppressed, d damped, h history, * valid, > best, i ~ intooal, Origin codes = 102, 4 = EGP, ? - dncomplote stort Novt Hop Metese LosPef Weight Path ss 162.200.92.0/24 © 200 . 300 900 400 4 + 150.2 «300 200 +> 150.2 300 200 Rs(contig}t route-nap PFEPEND gorwit 10 fo(eonrag-route-map)F centime 20 a# clear ip bap * SE show ip bop Status codes: s superesied, damad, history, * valid, > best, 4 ~ internal P AIE-failure, 8 Stele Origin codes: i - 16, » EGP, 2 - incomplete 80.4 ° wre 4 109.0724 (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe das[207] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Prectice Lab Example 2-26 _R5Prepend Configuration and Verification _cowrinsed 32.0/28 © 200 200 3 © 200 290 S00 400 3 900 400 4 120-100.94.5 300 400 Section 4: IPv6 (12 Points) 1 Configure IP addresses on your setwork a fllows: 207 C15:C0-10:1164 RI G0 2007.C15.C06111064 RI tunaet0 207-C15:COe1 364 - RS tunaet0 2007. C15:C0:12:2164 -R2tunaet0 2007. C15:C012:3064 -R tunaelt 2007. C15:C0:13:2164 - Re 2007 C15:C0- 14-464 RGD 207.C15:Cos 4.164 -RAGIOD 2NTC1S:CO: 145164 -RS GIO 2007. C15:COs1S:5I64 -RA GIL 2007. C15:C0s1S:6I64 RE GIO (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasPrectice Lab [208] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 ‘The prerequisite tothe following questions is configuration of the [Pv6 addresses and tuene interfaces. You should test ‘your IPv6 connectivity postconfiguration to ensure that you are ready to progress to the routing questions. You do aot need Frame Relay maps to achieve connectivity because tunneling is equired rather than IPY6 direcily configured under the serial interfaces oa RL, R2, and R3. Example 2-27 shows the intel IPV6 configuration, Tuntel specifics are provided. in lator questions, so just eroating the tunnel interfaces and configuring an IPv6 address is required ct this point. Ne points on offer here for this tick, uafortunaely. Consider using the show ipvé interfaces brief command fora quick check of your interface configurtion, Example 2-27 _IPV6 Initial Configuration Fi(contigy® ipv6 uniee n(conragie anterray Ri(oontig st) Syv6 Ri(contig-if)# interface tennelO Ri(contig-it)# ipv8 address 2007:215:0 Re(contigy spe unsee R2(contight interfe Ra(oontig-it)# ipy6 addres R2(contig-it)# ixtertace tenn e(oonrag-at)s 1pv8 address 200 R3(contig}# pws uniee Ra(contigh# int Gigebitethernet0/9 no(contig-it)+ ip Ra(contig-it)# interface tennelo 1164 2164 3164 ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme dasPrectice Lab [209] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Example 2-27 _IPV6 Initial Configuration _continant Ra(oontig-it)# irterface tennelt Ra(contig-it)# ipv8 address 2007:018:C Raioontio}® inve uns Ra(contiglt interfay GigabitEtheenes0/e Fs(contig-it)# ipv8 address 2007:015:C0:14::6/64 ha(oontag-st)¢ sntertace Giganitétnernet2/ Ra(oontig.Af)# Spv6 address 2007:C45:C0:16:24/64 Rs(contig}# ipv6 uniee Rs(contigit interfay Ro(conig-it)+ ip B(contig}# pws uniee ro(conragie antertai AS(oontig.At)¢ Syv6 Section 4.1: RIPng © Configure Routing Information Protocol next generation (RIPng) among R1, R2, and RS per Figure 2-11. RIPag should be enabled on the Ethers interfaces of RI and R2 and on all tunnel interfaces of RI, R2, and R3. Build ‘your tuntels using ipv6ip mode; use ax RIP process of CCIE on all cequred imerfeces. (2 points) ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme dasPrectice Lab [210) CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 ‘This isa sraightforward RIPng configuration that requires the process of CCIE spplied to the required interfaces. The tunnel mode iaformation, ipv6ip for a manually configured IPv6 tunnel, is supplied within this question, Ifyou have configured this corectly, as shown in Example 2-28, you have scored 2 points Example 2-28 _RlPng Configuration and Verification ifconfig interface GigabitEthenet 0/1 Ri(contig-if)# iav6 rip CCIE enable Ai(contig-it)# interface Tennelo Ri(contig-it)# a6 rip CCIE enable Ai(eontig-t0)# twnmel spuree ser Ai(oontig.Af)# tenmel destination 120.100. 129.9 Ri(oontig-if)# twnnel mode SpvGip R2(contigh# interface Fastétnernet Ra(oontig if) Spy ep CCIE enable Ro(contig-if)# interface Tennelo Ra(contig-it)# igv6 rip CCIE enable Ra(contig-it)# tunnel spuree Seri e(oonrag-at)s tunnel destination 1 Ra(oontig.Af)# tennel mode SpSip Ra(contigh# interface Tunnel Ra(contig-it)# igv6 rip CCIE enable Ro(oontig-it)# termed Ra(oontig-if)# tennel. destination + Ra(contig-it)# tunnel mode ipvsip Ra(contig-it)# interface Tennelt a(contig-at)# igv6 rap COLE enable $00. 929.1 (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe dasPrectice Lab [ait] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Example 2-28 RIPng Configuration and Verification _couimed Ra(contig-if)# tunnel source Seria Ra(contig-if)# tunnel destination 124 Ra(contig-it)# tunnel mde ipwsip Fig show ipvé route rip TP\6 Routing Table - 8 entries 1. ISIS Li, 12 - 118 La, 0 - OSPF intra, oF OMI = OSFF MISA ext 1, 0m2 R207 :c45:00:12::164 (12072) vie FEB@::7854:7693, Tunn® 2s show ipvé reute rip 1Ps6 Routing Table - 8 entries Code: © = Connected, L- Local, § T= ISIS LY, 12 - ISIS U2, 0 = WPF intra, OF ON! = OSFF HISA ext 1, 042 D = ElGRr, & jes (109/9] OSPF inter, 01 OSPF inter, 064 on 100. 128.2, 1 - I818 irteraree, 18, 08PF oct 1, 082 OSPF NSEA ext 2 1518 summary O9PF ext 2 Static, A. AIP, 8 - BGP Ik = S18 ftersras, 18 08PF oct 1, 082 OSPF NSEA ext 2 1818 summary O9PF ext 2 IGP extarnal (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[212] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Prectice Lab Example 2-28 _RIPngConfiguration and Verification cowimed 364:7808, Tunnel je [12072] 364:7805, Tunnel at show ‘v8 costa rip 1Ps6 Routing Table - 11 entries Godse: © = Connected, L = Local, § = Static, R= RIP, 8 ~ BOP 0 - OSPF intra, OL - OSPF inter, OEY - OSPF axt 1, OE2 - OSPF ext 2 ON! = OSFF HIGA ect 1, O42 = OSPF NSGA ext 2 D = EIGRP, EX - EIGRP’extarnal A or :c49:00:10::/04 (108/2} ‘vin FES::7564:7601, Tunne1® R207 #8:2/84 [120/2] ‘vis FES¢::7964:7802, Tunnels Section 4.2: OSPFv3 1 Configure OSPFr3 as per Figure 2-11. Use an OSPF%3 process of 1 on cach router. (2 points) ‘This isa vanilla OSPFV3 configuration among R3. 24, RS, and RE. If you have configured this correctly. as shown in Example 2-29, you have scored 2 points. 2008 cisco systems, Alright reseried, This pubatens protected by copyright Plese so page Si fermere desiPrectice Lab [213] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Example 2-29 _OSPF¥S Configuration and Verification Ro(oonfigh# interface GigabitEthemet 0) Ra(contig-if)# ipv8 ospt 1 area @ Ia(contigh interface GigebitEthernes0/® Ra(contig-if)# ipv8 ospt 1 area @ Ra(oontig-if# interface CigabitEtnernet®/1 Fs(contig-it)# igv6 ospt + area + As(oontigit interface GigabitEtheenes0/@ Rs(contig-if)# ipv8 ospt 1 area @ RB(contigh# interface digabitEtheenet0/@ Ro(contigcit) igve opr + aren + 3# show ipvé reute ospf 1Ps6 Routing Tobie - 11 entries 1. ISIS Li, 12 - IIS La, 1 - 815 isteraree, 18 - 1818 summary 0 - OSPF intra, OF - OSPF inter, Ot - OSPF ext 1, OE2 - OSPF ext 2 OMI = OSFF MISA ext 1, 0m2 OSPF NSEA ext 2 Or 07 45:00 via FEB je (11072) Fst show ipvé reute ospf 18: COFF-FETB:EUAD, Gigebit Ett) ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme das[24] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Prectice Lab NOTE The OSFFv3 routing Example 2-29 _OSPF¥S Configuration and Verification _ conned (odes: C - Connected, L - Local, § - Static, R- RIP, 8 ~ BGP U = Par-tsar Static route thisteuue pipes 11 - ISIS Lt, 12 - ISIS L2, 1K - 1815 interaree, 15 - 1818 sumary comsecsta eich YS 0 = OWPF intra, OF - OFF inter, OEL ~ OSPF axt\1, OEP ~ OSPF ext 2 network ands such oes ON! = OSFF MISA ect 1, O42 = OSPF SSA ext 2 tot discover any OSPF¥3 D - EIGAP, EI - EIGAP extornal Gymamicrowes this OY 20073C16:C0:¥5:=/64 [110/2] pot ne vaa Fe Fas show ipvé reute ospf 1Ps6 Routing Table - 5 entries Codes: C - Connected, L - Local, § - 8 11 = ISIS L4, 12 = ISIS 12, 1K - ISIS interaras, 15 = TSI8 sannary 0 - OSPF intra, OF - OSPF inter, OEt - OSPF ext 1, OE2 - OSPF ext 2 ON - OSPF MISA ext 1, O42 - OSPF SGA ext 2 Or 07 sc46sc0s44es/64 [140/2] vig FE60::213:(3FF:FETB:EW, GinabitEtrervet0)@ tio, A RIP, 8 - BOP 1m Configure area | with IPsec authentication, use message digest message digest algorithm 5 (MDS), a Security Pokey Index of 500, and key of DECODECCIEDDBAl 1BOBBOBBEDBIOBOO. (2 points) Authentication is quired on Ra and Ré because they both belong to area 1. The question explicitly stats the specific parameters required, end you sheulda’t enccunter any issues oher than ifyou incorrectly enter one of the keys. At 32 hex. characiers long, this could easily be done while under a time constraint. Ifyou have configured this correctly, as shown in Example 2-30, you have scored 2 points. 2008 cisco Systems, Alright resend, This pubatens protected by copyright Peso ss page Skt ermere desiPrectice Lab [218] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Example 2-30 _Area 1 Authentication Configuration Rs(contigi® ipv6 rovter ospf + Fs(contig-router)# area 1 authentication ipsec spi 500 ais TECeDECCYEWDBAY o(contigh dpv6 voter ona + RBicontig-router}# area 1 authentication ipsec spi 500 mis VECeDECCYEMORLY 1m Ensue thatthe area router in area | receives the following route; you can configure R4 to achieve this. (2 points) OF 20073/16 [10/2] via XXXX:XXAK:AKAXARAXEAXRK, Gigabitfthernet00 ‘The only srea router within area | is 6. Ris the srea border router within this srea. OL within the routing table is an ‘OSPF Interarea route, so thisroule must be generated from another area. Because area 0 is the oaly ther area within the OSPF+3 nctwork, the route must be generated from this arca as opposed to a redistributed route, which would show asan extemal route. A wimmary route generated on the azea harder router RA of 2007116 within area 0 provides the required route to be received on RS. If you have eonfigwed this comecty, as shown in Example 2-31, you have szored 2 poiats. Example 2-31 _OSPF¥S Configuration and Verification Aa(contigh# dove hatcomrag.rtre a Astshov ips cout ospt | include Ot Or 200722148 [11072] via Fk (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[216) CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Prectice Lab Section 4.3: Redistribution = Redistribute RIPag into OSPFV3 on R3. Redistributed RIPng routes should have a metric of S000 associated with them regardless of which area they are seen in within the OSPF network. (2 paints) AA one-way redistribution of RIPag to OSPFv3 is requised on R3. The default redistribution behavior ensures that external routes ae advertised as etteral type 2, which havea fired cost associated with them, regardless of which area or loca tioa of the OSPF\3 network they ave Seen in, You simply teed the metric set 5000 on the OSPFV3 process. You must remember to advertise connected routes also; otherwise, the OSPF V3 actwork does not sce the directly consected tunnel interfaces on R3. If you have configured this carectly, as shown in Example 2-32, ‘you have scored ? points, Example 2-32 _ R3IPV6 Redistribution Configuration and Verification R3(contigh# ipv6 rocter ospf + RQ(contig-rtr)# redistribute rip CCIE inelude-connected aetric Fas show ipvé reute ospf 1Ps6 Routing Tebie - 11 entries Codes: © - Connected, L - Local, § - Static, R - RIP, 8 - BOP 11 - ISIS La, 12 - ISIS L2, 1A - 1815 interaree, 15 - 1818 sumary 0 - OSPF intra, OF - OSPF inter, Ot - OSPF ext 1, OE2 - OSPF ext 2 OMI = OSFF MISA ext 1, O42 - OSPF SGA ext 2 0 aan /48 [41079] nue 2008 cisco systems, Alright reseried, This pubatens protected by copyright Plese so page Si fermere desiPrectice Lab [217] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Example 2-32 _R31Pv6 Redistribution Configuration and Verification _comtiued 062 2007:015:00:11::/64 [11075000] 64 [110/000] SBW:EHFF-FEFC:7090, OigabitE ther 88 [1015000] 0&2 Drorscsss ia Feb © Configure R3 so that both RI aad R2 have the following IPv6 RIPuC route in place, Do not redistbute OSPF into Pog toactiove this and eacure that all reutess have fll visibility. 2 points) R 2007:/16 [1202] via XXXX:AXAXANANAXKAXRXY, TunneO ‘You should have noticed inthe provious question that mutual redistribution was not quired, As such, the RIPag network ‘does not have eachahility ofthe OSPFV3 network. This question ensures that the RIPhg network sends trafic to R3 fee the summarized network of 2007/16, Becaase you are not pesmited to redistribute OSPEV3 wi a summary address, ‘you mast configure RIPng summarization oa the tuanel interfaces on R3 toward RI end R2. This provides the correct, route end hop count as per the question, Exsmple 2-33 shows the required coafiguration and verification ofthe rou in addition to ICMP reachability to the remote OSPFV3 area | nexwork on RS. This est clesly demonstrabs full end-to-end reachability from RIPng io OSPEv3. If you have configured this correstly, as shown in Example 2-33, you have scored 2 points. ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme das[218] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Prectice Lab Example 2-33 _R31PV6 Summarization Configuration andl Veritication Ra(contigi# interface tunnel @ Ra(contig-it)# ipv8 rip CCIE cuumry-adéress 2007::/15 Ra(contig-it) ixterface tennel 1 Ro(contig-it)# igv0 rp COLE eumenry-adér Fig show ipvé route rip 1P\6 Routing Table - 7 entries 11 - ISIS Lt, 12 - ISIS L2, 1K - 1815 interaree, 15 - 1818 sumary 0 - OSPF intra, OF - OSPF inter, OEt - OSPF axt'1, OE2 - OSPF ext 2 OMI = OSFF MISA ext 1, O42 - OSPF SEA ext 2 R007 :2148 [12072] ‘via FEGQ::7654:7808, Tunnal@ Fig ping ipvé 2007:C18:C0:15::6 Sending 5, 100-byte TOMP Echos to 2027:Cts: nu Sueress rete is 100 porcont (55), round-trip min/avg/nas timsoit 4s 2 saconde: 41718 0s 2s show ipvé route rip 1Ps6 Routing Table - 7 entries Godse: C= Connected, L = Local, § - Static, R= RIP, 8 - 8OP U = Par-tsar Stetie route (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe dasPrectice Lab [219] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Example 2-33 _R31Pv6 Summarization Configuration andl Verification conned 0-- FPF intra, OL - OSPF inter, OEt - OSPF axt 1, OE2 - OSPF ext 2 ON! = OSFF HIGA ext 1, ON2 = OSPF SGA ext 2 D = EIGRP, EX ~ EIGRP’extarnal Noor ss/40 [120/21 ‘via FEBO::7654:7808, Tunnal@ 2s ping ipvé 20072018: Sending 5, 100-byte TOMP Echos to 2087:C18:00:16: :6, timeout is 2 saconds: Suezess rete is 1 4/718 ws percent (55), round-trip min/avg/nay Section 5: QoS (6 Points) 12 Two IP videocorferencing units ae ote installed onto switch 2 ports FastBthemet 0/15 and 0/6 on VLAN200. The devices use TCP ports 2230-3231 and User Datayram Procol (UDP) ports 3230-2235, al this afc is unmarked from the devices as it enters the switch, Configure switch 2 to assign a Diffecentiated Services Code Point (DSCPY ‘ule of AFA to wideo taf from ho ofthese deviees. Ens thatthe stitch pots asipned to the devises do ant participate i the usual spamning-trce checks, cannot form trunk Links, and cennot be coafiged as EtherChamaels. (3 point) This isa DSCP coloring of an applicatcn traffic question. The TCP and UDP port information is provided so that sccess lists matching these ports within a class map are required for identification ofthe video taic and a policy mag colors the trafic to aDSCP value of 41. The overall QoS service policy is applied tothe videoconferescing ports of FastEthernet (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasPrectice Lab [220] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 O/15 and 0/16 on switch 2. The ports are quired to be set to VLAN200 with spanning-tee checks disabled, and trunking and channeling disabled using the corumand switepert host. Tho ports can also be explicitly configured to disable each feature individually, but the switehport host command does allthis for you. Lf you have configured this comecty, as shown in Example 2-34, you have scored 3 points. Use the show pollc}-map cosnmod (o veily your configuration. Example 2-34 _OSPFv3 Contiguration ‘2(confio}# interface range teatéthernst 0115-16 912{config-if-rarge)F svitchport access vias 200 12{config-if-rarge}# svitehport host a{contag-aT-rarge)e exat 0v2{contig)# ale 912(confio}# chass-nap VIDEO ‘12{contig-omp)# aatch acc 912{contig-omp)# exit O12{contigy# accres-List 140 peralt top any any range 9290 9231 SI2(contig}# sccese-List $00 porait adp any any range 2200 2236 ‘12{contig}# policy-aap VIDEO-IMAK ‘12{contig-pmp)# class VIDEO ‘H2{contig-pmp-e)# set dscp AFAt Ov2( contig: pmp-e)# sxit 912{config}# interface range fastéthernet 0115-16 H2(config-if-rarge)# sarvice-policy dnpet VIDEO-MARK 2-group 1m Configure R2 to assign a sictpricrity queue with a 40 perceat reservation ef the WAN bandwidth for the videooon= feronsing trafic inthe previous questica, Maximize the available bandwidth by ensuring tho real-time protocct (RTP) hexdes within the video stream are compressed. The remainder of the bandwidth should be guarantsed fora default queue with Weighted Random Early Detection (WRED) enabled. Assume that the full Line rate of 1.544 ‘Mbps the available WAN bandwidth, and ensure tht the complete bandwidth is wilized by both queues. (3 points) ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme das[221] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Following from the previous question, R2 is required to provide QoS on the Frame Relay link. A class map matches the ‘recolored video traffic of DSCP 41. You then need a policy map t call the class map ard assiga a strict 40 percent priority queue withthe command priority percent 40, RTP compression is configured within the pelicy map for the Video traffic. The defeult queue las s guaranteed bandwidth reservation with the command bandwidth percent 60, and WRED is enabled within this quoue. Both queues ao able to we the fll bancwith of the WAN link oly ifthe command ma vdwidth 100 is configured under the Frame Relay inerface. Otherwise, only 75 pervert of available bancwicth is used by default. If you have configured this comectly as shown in Example 2-35, you heve scored. 3 points reserved Example 2-35 _R2 QoS Configuration and Verification F2{oontigi# class-nep mated-all VIDED Ra(oontig-cnas)# match Joop aft R2(contig-cnao)# policy map VIDEO-008 R2(contig-pnap)# class VIDEO R2{contig-pnag-c)# priority percent <® Re(contig-pnay-o}# compress neader tp rtp Ra(oontig-paay-c)# class clase-datault R2(contig-pnap-c}# bandwidth percent 60 Re(contig-pnay-}# Re(eontag-pnap-0)# Ra(oontigie inverts R2(contig-if)# aax-reserved-bandwidth 100 Ra(contig-if)# servize-policy output VITEO-005 ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme dasPrectice Lab [222] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Section 6: Multicast (7 Points) = Configure souters RI, R2, RB, und R4 for Py Multicast. Each router should use PIM spane dense mde. Bosh Rt and R2 should be configured to be Candidate Rendezvous Points (RP) specially forthe flloning multicast groups 225.225.0.1,225.228.02, 228.225.03, and 225.225.04 by use oftheir Icoptack 0 iatriaces. You should imi the boundary af your multicast aetwark so that it des not propagate Farther ito your network than RA, R3 should he configured 2s a mapping agent to announce the Rendezvous Points for the muiast network with the same beund- aay constants. @ paints) The question dictates that R1 and R2 be rendezvous points and advertse the same groups to the mulkicast network. R3 is required to announce the rendezvous points, and R4 by defwull elects R2 as the RP for each group because it has the higher loopback address compared to R for the same groupe. TTL scoping ie used withia the configuration to limit the boundary of advertisements on both the candidate RPs anl the discovery sgent up to Ra, Example 2-36 shows the required configuration and RP mappings as ceived on R4. If you have configured this correctly, as shown in Example 2-36, you have scored 3 points. Example 2-36 _R1,R2, R9, and R4 Multicast Configuration and Verification Fi(eonragyF ap wuaticast-routang Ri(oontigit interface Loopback Ri(contig-it)# ip pin sparse-cense-mode Ri(contig-it)# interface Seri Ai(eontag-at)s ip pin spars Ai(contig-if) ip pin send:rpeennounse Loopback® scope 9 group-List GROUPS Ri(contigi# ip access-list standard GROUPS Ai(contig-std-nacl)# permit 225.225. Ri(contig-std-nacl)# permit 225.225. fi(eonrag-sta-nact} peemat 225.225. Ri (oontig.ctd nacl}# permit 225,225.04 (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe dasPrectice Lab Example 2-36 CCIE Routing and Switching Practice Labs Rt. R2, RS, and R4 Multicast Configuration and Verification [223] Martin Jamas Duggan, COE No, 7042 continu R2(contigi® Ap talticast-routing R2(contight interface Loopbacke Ra(contig-it)# na(oontig-if)+ Ra(oontig-if)# Ra(contig-it)# R2(contigh® ip fe(oonrag-sta-nact) perat 225.225. 4p pin cparse-cense-mude 4p in sparse-cense-nude 4p pin send.rp-announse Loopbact® scope 3 group-List GIOUPS, fecees-List standard GROUPS Ra(oontig.ctd nacl}# permit 225.225. 0.2 R2(contig-std-nacl)}# permit 225.225. R2(contig-std-nacl}# permit 225.225. no(contigh tp Ra(oontig}# interface Laophack Ra(contig-it)# ip pin sparse-cense-mode Ra(oontighe interface GigabitEtheenet0/® ns(eonrag-ar)# Ra(oontig sf)¢ Ra(contia-it)# Ra(contig-it)# R3(contigh® ip fa(contig-i)# a(oontig-if)# a(contig-it)# 1p pan sparse-cense-mode cense-mode Pin send-rp-discovery ot scope 2 interface GigabitEenernetd/@ ip pin sparse-cense-mude fe show ip pia rp eapping (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasPrectice Lab [224] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Example 2-36 _R1.R2. R3, and R4 Multicast Configuration and Verification coud {Secup(s) 225.225.0.1/82 FP 120.100.2.1 (2), viv Info soures: 120,100.24.9 (2), alacted via Auto-AP eeup(s) 225.225. FP 120.100.2.1 (2), viv Info soures: 120,100.24.9 (2), alacted via Auto-AP Uptime: 0:0: 98 Ceccup(s) 26. 826.0.9)22 via Auto-R vis Auto-RP = Configuse R3 to ensure that RA has « Candidate RP as RI for groupe 225.2250. and 225,225.0.2 and R2 for grope 295.225 0,3 and 225225.0.4. (2 points) AAs detailed in the previous example, R2 becomes by default the candidate RP as selected by the discovery egent (R3) because of having a higher Icoptack IP addiess as used in the PIM announcements compared to R1. By configuring a group liston te discovery agent, you can filler RP announcertens. By configuring wo Site lists with each candidate RP associated to them, you allow the discovery ageat to announce two differeat RPs. Example 2.37 shows the required coafigaration, a debug of the auto-rp announcements cn R3 to detail the filtering, and the resulting RP mappings on Rd If you have ccnfigured this comestly, as shown in Example 2-27, you have soared 2 points ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme dasPrectice Lab [225] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Example 2-37 _R2 QoS Configuration and Verification Ra(eonfig)# dp pin rp-annosnes-filter rp-List 1 group-Liet R1-CROUPS R3(contigi# ip pin rp-announce-filter rp-List 82 group-List R2-CROUPS Ra(contigh# ip access-List standard 81 Ro(config-std-nacl)}# permit 120 Ra(oontig-stdnacl}# exit Ra(contigh# ip access-List stundard R2 R3(contig.std-nacl)}# permit 129.100.2.1 fs(oonrag-sta-nact)# exit RD(oontigit dp assess. Liat standard 94-cR0106 Ra(contig-std-nacl}# permit 225.225. Ra(contig-std-nacl)}# permit 225.225. Ra(contig-std-nacl}# exit Ro(config dp access-List stendard N2-cNOUPs Ra(oontig-std-nacl}# permit 225.225.0.9 Ra(eontig-std-nacl)# permit 225.225.0.4 2 at debug ap pis auto-rp auto Received RP-announce, fron 129-10. auto Update (205.226. ‘to Update (205.225. auto 1d 96.205 Auto Received RP-announce, fron 129-100.4.1, APont 1, ht 181 auto Update (225.225.0.1/52, RP:120.1€0.1.1), PIW2 vi auto Update (225.225.0.2/52, RP:120.180.1.1), PlwW2 vt nto Fittered 226.005.0.0/02 for HP 400. 1, RBont 1, he 181 <1), PDWN2 vi <1), PDW2 vi ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme dasPrectice Lab [226] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Example 2-37 _R2QoS Configuration and Verification _coninuai ‘Auto-RP(@): Filtered 225.225.0.4/30 fur FP 120 Fas show ip pin ep aapring 25.0.1)82 at (2), vet nto sourea: 128,100.24.9 (2), alaoted via AUto-RP Info sure Seeup(s) 225.225. FP 120.100.2.1 (2), viv Info soures: 128,100.24.9 (2), alacted via Auto-AP Uptime: e0:: 12 Ceccup(s) 226. 226.0.4)22 iP 120.1 via Auto-R 00 © Configure RI to monitor traffic Forwanied thrcugh itself for traffic destined tothe multicast group of 225,225.0.1.1F ‘no packet for this group is received within a single 10-second interval. ensure that a Simple Nework Mansgement Protocol (SNMP) trap is sent to an SNMP masagement station on 120.100.100.100 using acommunity sting of public. (2 points) (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe dasPrectice Lab [227] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 ‘The IP multicast heasibest feature facilitates the menitering ofthe delivery of IP muhicast packets and fulure notification based on configurable parameters. Ifyou coafigure RI to enable the heartheat menitering forthe group 225255.0.1 with the subparumeters of | and 1), te router monitors a packet lost within | interval of 10 seconds and sends an SNMP trap to the SNMP host 120.100.100.100, which is required to be coafigated within the basic SNMP tap conviguration. Example 2-38 dots the roqaired multisast heartbeat configuration and vsification ofthe SNMP trap by isus of « ping to 22522501 from R3. Even though RI doos not Have valid IGMP join ercup for this group, tafic i still dicted to it and the heartbeat process is activated. If you have configured this correctly, as shown in Example 2-38, you have scored 2 points Example 2-38 R1 Multicast Heartbeat Contiguration publi Rt (oontig}e snap: server ena Ri(contigl® ip multicast he Fig debug snep packets A1sSWl@: ueuing packet to 120 SMP: 71 Trap, ort eisceExperinent.2.: oiscolplfoutleertBeatintry.2.226.280, ciscoledFout HeertBvatEntry.3.228.226. fscolplfoutsHeertBvatntry 4.226.225. fscolplfoutsHeertBvatntry. 6.226.226, (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[228] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Prectice Lab Section 7: Security (7 Points) 1 Allow router R6o passively watch the SYN connections that Flow only wo VLAN6® for servers that might resde on this subnet. To prevent «potential denial of service (DoS) attack from a loo! of SYN requests, configare the route to randomly drop SYN packsts fom any course to this VLAN that have aot boon cersstly established within 20 seconds. (3 points) ‘The question requires thar the TCP intercept feature be configured on R6. Tis protects TCP servers from TCP SYN- floodisg attacks inthe form of a wave of half-opened connections overwhelming the server's CPU, resulting efiectvely ina DoS atack. The default behavior ofthe fealure isto inercept the SYN connections to a server and effectively prosy the connoction unlit has beon conectly establish. Bocanse you ars requested to passively moniter th eonnecticn, you ‘re required to configure the feature inta warch mode by use of the global ip tep intercept mode watch commancl, You awe also asked to ensie that the feature is enabled only on VLANG3 from any source, so-an access lst is required to which the intercept feature restricts its monitoring. ‘The default behavior ofthe feature is 1 drop SYN connections hased on the oldest first, hut the question dictated that random connections must be dropped. This is achieved withthe global comman fercept drop-mode random. Toensire thatthe 20-second limit is met as opposed tothe default 30 seconds, you must adjust the timers with the global command ip tcp intercept watch-timecut 20. If you have configured this comecily, as shown in Example 2-39, you have scored 3 points. Use the show tcp intercept connections command to very your configuration, Example 2-39 _R6TOP Intervent Configuration RB(config}# dp tep intercept tet 100 RB(contigh® access-List 100 permit tep any 120 RB(contig}# ip tep intercept aode watch AB(oontag}e 4p tep antercept érop-made rancon Ac(oontigit dp tep intercept wateh-tineeut 20 ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme dasPrectice Lab [229] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 © Configure an access control list (ACL) on 8 to allow TCP sessions generated on this router and through its Ethemet interface and to block TCP sessions from entering on its Frame Relay interface that were not initiated on it or through it originally. Do aot use the esteblished feature within standard ACLS to achieve this, and apply ACLs. only on the Frame Relay interface. The ACL should time out after 100 seconds of locally initiated TCP inactivity, and it should als allow Intemet Control Message Protocol (ICMP) tic inbound for testing purposes. 4 points ‘The question eoquires that a seflexive ACL be configured on RI. This allows TCP trafic for sessions originating from within the network, bat denies TCP trafic for sessions originating from outside the network. The reflexive ACL contains only temporary entries that ave automatically created when a new TCP session is initiated. The entries are simply removed 300 seconds after the session ends by default. However, the question requires that this be modified to 100 seconds. To favlilate the eflexine ACL, you must configure a standard ACL inbound on the Frame Relay interface that [petits the requised trafic inbound to RI and enly returns traffic matching the reflexive ACL, Required traffic is, of course, FIGRP, PIM, [Pv tuaneling, and, as disected, ICMP for tasting. esa cruel question because if you forget to pesnit any of the required traffic inbound, you lose points from a previous section that you might have otherwise achieved full mivks i. IF you don't know what protocol IPv6 uses, you can simply use the log option on your indound ACL on final deny sttentent. This shows you thatthe tunneling from R3 inbound to 1 uses IP protocol 4, which must be included in your inbouad ACL. Example 2-40 shows the required configuration and verification of the reflexive ACL. Because traffic isevaluated by the ACL caly 2s it passes through the routes, switch | bas heen configured to helong to VEAN00 to Telnet through RI to R3iin the example. After i is initiated by switch |. the Telnet session passes through the ACL FILTER-OUT on RI ard creates an entry in the reflexive ACL DYNAMIC-TCP. Yeu can see real-iime details by issuing the show aceess-ists command on R1. The reflexive ACL permits retur trafic 0 the Telnet session inbound on the Frame Relay interface for the configured incctivity interval of 100 seconds. If you have configured this correctly, as shown in Example 2-40, you have scored 4 points (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe dasPrectice Lab CCIE Routing and Switching Practice Labs Example 2-40 _R1 Reflexive ACL Configuration and Verification Ri(contig-if)# ip acces i (contig-ext i(contig-ext Ai (contig-ext Ri (oontio-ext i (contig-ext Fi (contig-ext rr(conrag-ext i (oontig-oxt i (contig-ext Ri(contigi® ip reflecive-List tineout 4 Ri(contight interface Serial Ai(contig-if)# Ap acces Ri(contig-if)# ip acces H1(contigh# interface gui(conrig-arie sp aad 11(config af) SH1(confio}# ip route 120.1 nach) nach)? rect) act nach) nach) aca) act) nach) SHi(contig}# exit ue trace 121 ist extended FILTER-IN permit icap any any permit eigrp any any permit top host 120.100.3.1 host 120.10 permit 41 host :20.100.123.3 host 120.1 fevaluate DYRLNIC-To? 4p access-11st extende 10 roup FILTER-OUT out 9.4 255.255.255.255 120.100.100.1 ‘Tyee escasa ssquence to abort Teeoing the route to 128.109.3.4 + 129,100.19. [230] Martin Jamas Duggan, COE No, 7042 (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[231] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Prectice Lab Example 2-40 _ 1 Reflexive ACL Configuration and Verification _coninued OF telnet 120.100.9.1 Toying 128.100.3.1 ... User Aces Varieation Password: Roe ie show acces 48 psarmit 120.100.1.0 (2 matetas) 20 parmit 120.100.1000 (3 matones) Standard IP acoais List OROUPS 18 pormit 225.225.0.1 80 permit 225.225.0.3 448 pomit 225.225.0.4 Reflexive IP aco4ss List DMAMIC-T0P ches) (tine Isft 90) Extanded. IP acoase List FILTER-IN 5 permit cn ary any |180 matches) © parmit igrp any any (1710 matches) w 11004 (St met ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme das[232] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Prectice Lab NOTE Example 2-40 _ 1 Reflexive ACL Configuration and Verification continued Thereflxive ACLs ‘ang ony ror rae route, As such, You rigat experince contec- ate Tehet sen from Ri vitestsniitrs | ab Wrap-Up the Tent source tion, 25 parmit top host 120.1 0 avalusts DYNMIC-TOF Extonded IP acosis List FILTER OUT 18 pamit top any any reflact OYWIE-TOP (10 watche 3.4 host 12 1.1 eq bgp (125 satenes) “Thien hae no So, how di it go? Did you sun cut of time? Did you manage to finish, but miss what wae actually required” IF you secred. beating m pents scored yer 80, well done. If you accomplished this within the tine frame, go book your lab! and shoud be considered ‘bypmaictoftnesois- i you rmanage to configure items such EIGRP third-party next hop and the continue statement within your BOP tion Ifyou fico ssimlar pepending? Teme like these might soem inconsequential but they can mske or break your lab, questicnin he rd eam tnd Test comes i yous configuring, you ane spocFcally instructed that out, 2008 cisco systems, Alright resend, This pubaten spotted by copyright Plesoe cs page Si ermere desiPrectice Lab [233] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Summary Are You Ready? Thi became a well-known Cisco slogan tht identified the Interne! revolution, By the ent ofthis practise exam you should have a good ieaif you ate rey. Di you fc confident working through the questions, or was it a compte shook tothe eyter? Are you mare sed to being spoor-fed solitary scensrioe than actully baving to aealyze questions and piece together pars ofa complex newer jigsaw? Life is full of challenges. During your education and careet, the CCIE Cestification is as tough as it gets: The exam is designed to test your technical stills, your understanding and enalysis of complex topologies, and your capscity to build a network with IP routing protocols and features, Problems can occur during the exam that you need to troubieshoot with only Shours to achieve a misimum score of 80 percent to pass Further Reading “The following Chico Pres tiles ae on topics appearing onthe CCIE exam blueprint. These books are not required study resources but they canbe used to build knowledgeincetsin areas. CCIE Practical Studer, Volume | (Solie, ISBN# 1587200023) CCIE Practical Studer, Volume Tl (CCIE Self-Study) (Solie, Lynch, ISBN# 1587050722) CCIE Routing and Switching Exam Quick Reference Sheets: Exam 350-001 v3.0 (Sequeita, ISBN #15870S3373) CCIE Routing and Switching Flash Cards (Sequeira and Wallace, ISBN# 1587201291) CCIE Routing and Switching Practice Labs (Duggan, Govto, ISBN# 1587051478) Cisco BGP-4 Command and Confguration landbook (Parkaurst, ISBN 158705017) (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe dasPrectice Lab [234] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Cisco Cataiyst QoS: Quality of Service in Canpes Networks (Flnnagaa, Froom, Turek, ISBN# 1587051206) Cisco Frame Relay Solutions Guide (Chin, ISBN 1587051168) Cisco LAN Switching (Clack, Hamilton, ISBN# 1578700949) Cisco OSPF Command and Configuration Handbook (Parkhurst, ISBN# 1587050714) CCHE Routing and Switching Exant Certification Guide, 3rd Eiition (Odom, Healy, Mehta, ISBN¢ 1587201568) Developing IP Muticast Networks, Volume I (Williamson, ISBN # 1578700776 Implementing Cisco IPv6 Networks (IPy6) (Desmeules, ISBN# 1587050862) Inside Cisco 108 Software Architecture (Bollapesgad, Murphy, White, ISBN# 1578701813) Intemet Routing Arhivectares, Sevoud Baitien Halabi, ISBN# 15787050862) MPLS and VPN Architectures (Pepelnjak, Guichard ISBN 1587050021) “MPLS and VPX Architectures, Volume TI (Pepelnjak, Guichard, Apcar, ISBN# 1587051125) Routing TCP/IP, Nolune I, Sesond Edition (Doyle, Caroll, ISBN# 1587052024) Routing TCP/IP, Nokune Il (CCTE Professioral Development) (Doyle, DeHaven Carroll, ISBN 1578701892) Troubleshooting IP Routing Protocols (CCIE Profesional Development Series) (Aziz, Liu, Mastey, Shanon, ISBN# 1587050196) Troubleshooting Remote Access jenvorks (CCIE Prafessional Developmen: Series} (Nedeltchev, ISBN# 1587080765) (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasPrectice Lab [235] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Help and Advice f2 Look at ww.csco som/galcie for the latest information regarding the CCIE Ceticaion, which inches suagested training and reading 1 Keep your schedule lesible using your rack ime, Inside time for breaks end elation, Often Saninutor away from the keyboard can help you consider possible solutions. Most importantiy, do not forget the people you care for and make tne for them also, 1 Build your study plan based on a balance between theory and practice. You seed to understand the concepts throush the theory and then consolidate this Knowledge during you ck ime. 1 Begin with simple topics insolation. and then work up to complex Ib scenarios. Spend as much time repeating ‘your configurations a posible to improve your speed and ability to perform basic configurations with your eyes Shut, This saves you time for aras where you need it during the exan, 1m Explore the Cisoo CD documentation ce the URL www.cisco.com/usivescd/horseMhome:htm. This & your research lifeline during the exam, a place where you can find information, concepts, and samples regarding all technologies involved in the exam. 1m Siart to plan for your exam atleast 6 months before the lab dat. 1m Ifyou find this practice lab has highlighted weak areas, do nct be affad to postpone your lab dite. How Can | Schedule My CCIE Lab Exam? Goto www.isco.con/gotocie, aad you can find al the information on how to sckedule your exam including locations, start times, and more. You mast bave a CCO user ID and your CCIE written exam date and score to be able to view your ‘profile and schedule your exem, ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme dasPrectice Lab [236] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 The Day Before the Exam If you are traveling to take your exam, ty to ative the day before to fmiliarine yourself with the area. Take a ut the Jab location so that you won't be late on the day. The Ist thing you need 10 do isto arrive flustered. The day before is a day to be relaxed and notto attempt any last-minute studying. Have alight dinner and tr to have a good night's sleep. Most importastly, save the beer until after the exam, Pass or fail, you will feel like one or two for sure. The CCE exara might be the reason why Stella Artois isso popular in Brussels! The Day of the Exam ‘On the day of theexam, plan to arrive at least 15 minutes before the exam begins for registretios. The proctor walks you to the lab and gives you z brifing before the exam stars, telling you ebout the lab environment, on which rack or station ‘you are going to work, and about the general guidelines for the day. ‘The proctor cannot discuss solutions or possible solutions for a given question with you. The proctor caa help you under- stand the wording or meaning ofthe questions; can make sure that the backbone routers and Frame Relay switches are working properly: and can make sure thatthe herdvare and software on your cack are working perfectly sothat your ‘exam runs smoothly. Ask the proctor for any assistance or verification; the worst he proctor can say is "Sorry, everything locks okay from my side, Please check your configuration.” Read the entie exam before you start so that you have an idea ofthe biggor picture, ensuriag you fully understand ech question and its requirsmeats. Begin by porforming easier tasks and leave the most difficult for later. Take some small breaks during the moming and the afternoon to refresh your- self and to relieve the stress. ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme das[237] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Prectice Lab Pass or Fail, What Next? Tf you pass, you certainly have something to celsbrate, You have just joined a very elite club, one that nn doubt will enhance your carer. You have achieved the highest level of certification inthe networking world, and you should aim to continue your thist for knowledge that sets you apart ftom your peers. But first, take a break before stating your next CCIE rack! If you failed, don't worry and don't ‘ake it personally. Most people fail the fist time around. You have to consider it experience and get back on the keyboard as soon as you canto werk cut what weat wrong. More thn likely you will be successful next time end will ultimately become a better engineer for your extra rack time T hope this proctice exam and these tips are helpful and guie you to take your exam with success. (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe das[238] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files Appendix A Lab 1 Router and Switch Configuration Files Router Configuration Files Router 1 Initial Configuration Building configuration... Current configuration : 1988 bytes ps debup datetine asec ps og eatotine move no service pascwerd-ancryption hostnames boot -start-nacker no logning console foneble password cisoo ' ' recourse polisy 1 1.2008 cisco Systane ne. Alrights reserved This blaine rose copysgn Pees oe page St fro dt[239] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files nowory-si2e ionon 10 ip cof 1 1 no ip domein Leohip voiee-sard 0 no dep fara 2008 cisco systems, Alright reseried, This pubatens protected by copyright Plese so page Si fermere desi[210] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files 1 1 4p address 120.100. 1 interface Gigibitethanneto/0 shutdwn aepler auto speed auto eaia-type ras ' interface GigibitEthoeneto/* 4p adiross 150.100.1.1 255.255.25. speed auto nedie-type ras negotiation auto interface Sariale/e 4p address 120.100.123.1 255.256.28. oreapsuletion frame: relay 4p o6pf retwork pount-to-potnt no frame-reliy inverse-arp 1 1 258.286.255 ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme dasLab 1 Router and Switch Configuration Files interface Sorial@/0/1 no ip aderass 1 1 ip http server [au] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 2008 cisco Systems, Alright resend, This pubatens protected by copyright Peso ss page Skt ermere desi[292] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files pessword cisco Aegging syncirorous aegin Lire aux @ stopbite 1 Line vty 04 password ehsco Aegging syncirorous Aegin cotadular allocate 2 1 wabvpn context Default_eontext Router 1 Final Configuration fie sh cue Building configuration Curent configuration : 8568 bytes 1 (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[233] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files | Last configuration change at 21:22:48 UTC Tue Feb 27 2007 1 service tinsstenps log catotine move no service pascwerd-aneryption 1 1 boot-start-nacker boot -end-rarker foneble password cisoo ' 1 nowory-ei2e ionen 10 ap oct rer-node ' S9n6 undosst-routing ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme das[2u4y CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files voive-card 0 no depfarn clase-tap natsh-ell VOIP elese-tap matsh-el1 BULK-DATA etch ip doop aftt clese-aap natsh-el1 HET-AN nctch ip doop atat lese-aap matsh-ell OUTING meten 4p doop 068 2008 cisco systems, Alright resend, This pubaten spotted by copyright Plesoe cs page Si ermere desi[238] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files elass-aap mateh-el1 nctoh ip deop ot felass-xap maten-el1 clese-tap natsh-el notch ip doop aft class-aap nateh-el1 ' 1 policy-map aos clase Vite0 tandvith paroent clase BULK-DATA clase TRINS-DATA tandvith percent clase HEI-WAW clase ROUTING tandvith percent clase SCAVENGER tandviatn paroant andvith peroant randim-catect scavencen, rsst04-crat CALL-SI8 6 6 (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe das[236] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files clase CALL-St andvidtn parcent 3 4ov6 address 2007 4gv6 vip CCIE erable tunnel. scurcs Serialo/0/0 1 interface Loopback 4p address 120.100.1.1 265.255.256. ip osof 1 arse @ 1 interface Loopbackt Ap address 126.1-1.1 205.280.288.0 intorface Gigibitethamneto/0 no ip aderass shutdmn (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[27] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files aepler auto speed auto neaie-type ras ' interface Gigibite thoenetO/* 4p address 120.100.100.4 255.256.285. 46 oni 1 Aran 100 secondaries non aepler auto speed auto eaie-type ras ov adress 2007 4gv6 vip CCIE erable 1 interface Sertale/e 4p pin sparse-ncde orcapsuletion frane-celay 4p ost retwork point-to-point nto nulticast client {pv6 address 2007 4gv6 rip CCIE erable Trame-relay wap 1p 120.100.123.2 188 broedcast Frame-reley nap ipvé 2007:016:08:11::2 108 kroadcect 16:00 Frame-reley nap ipvé 207 ‘rame-relay nap ipvé FESO::213:7FFF :FEBA'BEED 103 broadcast ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme das[239] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files Frame-reley nap ipv® FEBO::214:6AFF:FEFC:7800 103 broadcast ro frame-reliy inverse-arp interface Seriel@/0/1 no ip aderass ' router oopf 4 eg acenoy-change router bap 10 bop 1og-reigibor-changes network 126.1.1.0 mask 255.256.258, 3.4 updats-source Leopbuck® rn auto-euamiry ' 4p route 2 1 ip http server no ip nttp secure-server 2.4 265.285.258.285 NuLO 1 Sor6 router rip (OIE u ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme dasLab 1 Router and Switch Configuration Files « Aegin stopbite 4 Lire aux @ Line vey 04 pessword cisco Aeyging syncncorous trancport input telaot 1 cotaduler allocate 20000 1000 [299] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 2008 cisco Systems, Alright resend, This pubatens protected by copyright Peso ss page Skt ermere desi[230] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files itp clock-peried #717986 1 wobvpn context Dereult_eontext fod esthentisate verify all 1! 1 ne fie sh ver (eo 105 sorenare, 3880 Sortware (CSE2S-ADVENTENPRISERS-M), Version 12.4(5)1, RELEASE SOFTWARE (fet) Teennizal Support: ttp:/ww-cisco. cen/techsupport Copyright (=) 1085-2008 by Cisco Systens, Ino. Gowpilad Thu 28-Feb-08 eY2@2 by cox OW: Syston Bootstrap, Version 12.8(1)T2, RELEASE SOFTWARE (1e1) Fi uptine is 2 hours, 14 winutos ‘ysten returned to FIM ty Psload at 16:18:21 UTC Tue Feb 2 2087 System rastarted at 19:11:89 UTC Tus Fab 27 2007 System image File ds *flash:0925-adventarprdeek0-mz.124-6.1 bin" Stetes and losel country laws gavernira inport, axport, transfer a8 Use. Livery of Cisco cryptographic products doss mot imply third-party authority te imort, export, distribute or use encryption Inporters, exporters, distributors ane users are responsible ter compliance with US. ane losal country lave. Sy using this product you (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasLab 1 Router and Switch Configuration Files CCIE Routing and Switching Practice Labs Martin Jamas Dugoan. give to comply mith applicibla Leve and regulations, If you are unable ‘0 comly with U.S. and Loci laws, return this prodict insedictely. http: nm. cisco.conjwul/axport/erypte/ tol! starg. tal If you reqiire further essistance please contact us by sending onail to Cisco 3825 (revision 1.0) with 47216sK/52224K bytes of nenory. Prooessor board ID FAKOGOTFOVU 2 cagenst Etnarnet anterraces 2 Goria (eyns/aeyne) Antorfi 2 Virtual Private Network (VPH) Mofules DORM configurticn ds 64 bits wide with parity enabled. 47% bytes oF IVFAM. tom Conpactf Lesh (Head/trite) Configuration register is 0:21 hie sh ap rovte D - EIORP, © - ELGAP oxtorwal, 0 - OSPF, TA ~ OFF inter eroa Nt - OSPF NSS external type 1, NO - OSPF NSSA oxtomel type 2 Et OSPF external type 1, €2 | OSPF axternal type 2 © = OD8, F - periodic downloaded static route Gatoway of Last resort 36 not set [251] CCIE No. 7042 ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme dasLab 1 Router and Switch Configuration Files 128.0.0.0/26 ie suinetted, + sub © 128.4.4.6 ds directly comets 180.1.0.0/28 46 sumnetted, 1 sub Bb ta0.4.4.0 [200/6} vie 120.100. 180.100.0.0/24 is subnstted, 1 3 B —190.100.200.0 [200/0] vie 120. 102.0.2.0/82 ie suinetted, + sub 450.100.0.0716 is variably sna 190. Bw 19. 0/24 de directly oo 5/8 i variably subnetter 65] via + 0 45.0)24 [119/66] vin 24 (410/88) via 10.0/ 24 48 aurectiy N16 ts vardably eubne 2008 cisco systems, [252] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 ed, Loogbectt nets 2, tad, 4 subnets, 2 masks 96 21:58, Sorialoj0/e 25.3, 61:05:07, Sersai0/0/e 6, 12 subnets, 2 wicks 28.3, 01:08:64, Serial0/0/® 23.3, 01:29:69, Serialo/e/o 129.3, 91:06:21, forin19/0/@ 121.3, 01:06:08, Sersai0/0/o 11:59, Sorialoj0/e 129. 100.123.8, 01:21:59, Sersal0/0/e 120.100.429,8, 94:06:03, fordal@)0/@ $20.100.129.9, 94:21:89, S4ria10)0/0 connected, sigattetnerneto/1 ttod, 4 subsets, 2 nasks 128.3, 01:22:08, Sorial0)0/e Inc Alrights sere ris pbtzatin is prtscteaby copyrght Peso oo Faye 5 frmoe dais[259] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files 0/8 ie variably subnettec, 12 subne' -28.0/24 [110/192] v4a 120,100.125.3, 81:07:01, Sertale 4.0/24 [149/66] vis 420.400.129.9, 04:22:06, Senile 28 + Seriaio)0ye 18, Serial0/0/? 2a 14 128.8, 91:22:08, Seriale)0/e 5/24 [140/65] vie 120.100. 129.9,,01:28:08, SersalO/e TK 490, 100.26.024 (410/66) via 120,100.429.9, 01:06:19, Sarial0j0/0 -24.0/24 [190/85] via 120.100.123.3, 01:22:08, Sorial0j0/e 128.8)32 [110/64] via 120.4 fie sh ap bgp Status coos: © suppresced, d damped, h history, * valid, > best, 1 - internal, FIB-fadlura, § Stale Origin coos: i - 16?, ¢ - ESP, 7 - dnsomplete 2128.11.01 0.0.0.0 ° sere 4 fo130.1. 1.0/2 120.100.2.4 om 8k 251130 100.200.0/28 Crs so s950-100.2.100/92 2m 82 fie sh ipv6 route 1Ps6 Routing Table - 13 entries Codes: C - Comacted, L = Local, § - Static, R= AIP, B - EOP © - OSHF sntra, OL - OSFF inter, OE1 - OSPF act 1, OE2 - OF ext 2 OY = OSPF SGA ext 1, O12 - OSPF ABSA ext 2 = EIORP, Ex - ELGHP external, (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe das[254] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files 8 48 [12073] 6427802, Tunnel! © isa [9/9], L 10::1/128 [0/0] SigabitEthernatoy4 © 4 [079] fy Sordale)o/@ Lor c46sc0e442917128 (070) 1, Serdal0)@/@ 8 1222164 [120/2] e 19::164 [0/0] 8 Tuna 1928 (0/0) A 1432/64 [120/2] 8 (ea [12072] FFSFEFO:7200, Sorial0/0/0 8 et [120/3) ‘vin FEGQ::214:8iFFAFEEC:7200, Sorial0/0/0 (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[235] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files Router 2 Initial Configuration ae sh cue Building configuration cuncent cuntiguretion : 1479 bytes version 1244 service tinssteaps dsbup datst ine service tinsstenps 1og catorine move 1 hostnave F2 ' 1 no logping console fonable password cisoo fo aa new-nodel 1 recourse polisy ip cof ' 2008 cisco systems, Alright reseried, This pubatens protected by copyright Plese so page Si fermere desi[238] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files no ip domein Leohip 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 interface Fastétharn no ap aderass 2008 cisco systems, Alright resend, This pubaten spotted by copyright Plesoe cs page Si ermere desi[257] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files srutdwn aepler auto speed auto interface Seriele/@ 4p address 120.100.123.2 255.256.286. orcapsuletion frane-relay frame-celay nap 4p 120.100,129.9 209 brosdoast no frame-roliy inverse-arp ' amtorrace Fastetrernstoyt aipler auto opaed auto ' interface Geriel@/t oreapsuletion frame: celay 4p ospf retwork point-to-point rame-relay nap 1p 120.100.25.5 215 troadcast no ip nttp secure-server (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe dasLab 1 Router and Switch Configuration Files pessword cisco Aegging syncirorous aegin Lire ax @ Line vty 04 pessword exsco Aegin trancport input telaot 1 [258] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[259] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files webvpn contort Default_eontext el authantiate versfy all nd Router 2 Final Configuration ae sh cue Building configuration Ccurnent centaguretion : S85: bytes | Last configuration change at 21: 1 version 1244 Ure Tue Fab 27 2007 service tinastancs lop catating se no service pascwerd-aneryption ' boot -start-nacker boot -end-rarker ' ro Aogping consexe nab password chsow 1 2008 cisco systems, Alright reseried, This pubatens protected by copyright Plese so page Si fermere desi[230] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files fo ase new-nodel 1 recourse pouty nowory-6i2e ionon 15 ip oof 1 1 1 no ip domein Leohip 4p muletoest-routang pv6 unioest-routing ' 2008 cisco systems, Alright resend, This pubaten spotted by copyright Plesoe cs page Si ermere desiCCIE Routing and Switching Practice Labs Lab 1 Router and Switch Configuration Files 1 1 1 1 1 no ip aderass {pv address 2007 4gv6 vip CCIE erable ‘tunnel scurcs sersaioye tunnel ede iovéip 1 interface Loopback ip ost 1arsa@ 1 Antorface Loopbackt 1 interface Loopback? 4p address 130.10. no ip aderass stutdmn 1 258.256.256, [231] Martin Jamas Duggan, COE No, 7042 (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe das[232] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files aepler auto opsed auto Antorface Sortale/@ 4p address 120.100.123.2 255.256.26. 4p pin sparse-ncde oreapsuletion frane-celay fp oni 1 aren @ ntp aulticast client 4gv6 address 2007 4gv6 rap OCIE erable rame-reley nap 208 broalcast Frane-reley nap ip 120.100.123.3 208 brosdcast Frame-relay nap Frame-reley nap ipvé FEBO::214:6AFF:FEFC:7900 203 broadcast no frame-reliy inverse-arp ' Antorface FastEthernsto/t 4p adiross 150.100.2.1 265.255.256. 4p ospf 1 arva 200 plex auto speed auto 4gv6 rip CCIE erable 2168 (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[239] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files interface Sorial@/t 4p address 120.100.25.2 255.255.255.0 oreapsuletion Trane: relay ip oof tara s pus address 2007 4gv6 rip CCIE erable fFrame-celay nap ipvé 2007:616200141:6 218 broadest Frame-relay nap ip 128.100.25.5 215 broadcast no frame-reliy inverse-arp router oopf 4 1e9-adjacenoy-changys 1 router bgp 18 network 190.1.1.0 mask 265.256.25, network 190,100,200,0 ask 256.255, 255.0 reduetratute stetie noute-nep SLAOKHILE neighbor 120.1 neighbor 120.1 neighbor 120.1 neignoor 128.1 i auto-euamiry eod-someunity reuto-nap NO-EXFORT out renots-a 3k tgp wurtanop 2 Updats-coures Leopheck® ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme das[234] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files 4p route 160.100.2. 4p route 12 no ip nttp secure-server 1 1 1 Sor6 router rip (OIE route-sap NO-EXPCRT poreit nctoh ip addrose 5 ost comunity ne-export 1 route-tap BLAPKHCLE port ston tap 10 255.255.955.258 WuILO tag 10 2.4 255.255.255.255 Null0 1 1 contrel-plene 1 ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme das[235] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files 1 1 1 1 1 ‘eac-timeout 0 6 pessword cisco Aegging syncirorous agin Lire aux @ Line vey 04 « Aegin transport input teleet 1 1 wabvpn contort Default_eontext feel authenticate vers¥y all ' 1 2008 cisco Systems, Alright resend, This pubatens protected by copyright Peso ss page Skt ermere desi236) CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files Rae sh version isso 108 Sofenare, 8700 Software [03725-ADVENTERPRISEKO-W), Version 12.4(8)7, RELEASE SOPTHARE (T#1) TTechnisal Supports https) wwn.cheos. con techeuppert Copyright (=) 1985-2008 by Cisca Systens, Ino. Compiled Thu 28-Feb-08 60:25 by cond OW: yeten Bootstrap, Version 12-2(6r)T2, RELEASE SOFTWARE (fet) 2 uptine is 2 heurs, 18 winutos System returned to RIM by Palos system restarced at 19:11:48 UTC Tue Feb 27 2007 Oyen smege Fle Se ‘Tis product contains eryptographis features and is subject to Unite® third-party authority te imort, export, distribute or use encryption Inportars, exporters, distributors and users are responsible fer compliance with U-8. anc lozal country avs. 8y using this product you give to comply mith applicsble Love end regulations, If you are wable ‘0 comly with U.S. and Lecil laws, return this prodict insedictely. 'A summary of U.8. Lave governing Oisce cryptographic products nay be found at: haps /(i.c1sco.conjwal/axport/ crypto too strg.ttal If you reqiirs further essistance please contact us by sending onail to cxporticisco.coa. (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[257] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files Ciseo 9725 (R008) processor (revision Prooessor board 1D JIKOGISLAZF 1) witn 2252821/36012K bytes of nenory. Free oFU at 2éOMtz, InpLomentation Se, Rev 3.3, 2568 LZ cache 2 Serial eyns/asyne) interte DORM configuration is 64 bite wide with purity disabled 58K bytes of WR. 125108K bytes of ATA Gystom Conpacifleah |feed/Write) Configuration register is 0:21 has sn ap rovte D - EIORP, © - ELGAP oxtorval, 0 - OSPF, TA OMPF inter aaa, NN ~ OSPF NSS extornal type 1, NO - OSPF NSSA oxtommel type 2 Ei - OSPF external type 1, €2 | OSPF axternal type 2 © = OD8, F - periodic downloaded static route Gatoway of Last resort 36 not set 126.0.0.0/24 4 eutnstted, 1 subate B128.4.4.8 [200/0} vie 120.100.1.1 180.1.0.0/24 i eutnetted, 1 subrate © 1e0.4.1.8 4s directly cometed, Loopback 0.0724 te aubnetted, 1 subnars 200.8 is directly conrasted, Loopback? 102.0.2.0/82 ie eutnetted, + subrats ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme das[238] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files 2.1 is directly connsoted, Wild 0/16 is varinbly culnetted, 4 subnets, 2 nasks 2.109) 52 48 axrectly connected, Hud 2.0/4 se dinoctly comocted, FastEtyornste/4 serialo)t serinle)o 25.5, 01:67:94, Sorial0/1 128.3, 01:07134, Serdale [110765) via 129.100.125.8, 01:28:93, seriatove 25.8, 01:07:84, SerialOl 128.9, 04:07:94, Sardal0)0 129.8/52 [110/64] via 120.100.129.3, 01:29:59, Geriale 15.0/24 4s directly connscted, Sania10/0 2s sh ip rovte ospt 0/16 is varinbly culnetted, 4 subnets, 2 nasks 5000] ia 120.100.25.5, 01:07:49, Sordald)t 40/24 [1107420] via 120.100.429.2, 94:07:40, Sordai0)0 0/8 ic variably cubnettee, 11 subnets, 2 micks 40/24 [110/68] vie 120.100.123.3, 01:07:49, Serdalo/e [110765] via 129.100.25.5, 01:07:49, Seréald/1 60/24 [118/9000] 1a 120,108.123.3, 01:07 40, Sertale 40/24 [110/420] via 120.100.429.2, 94:29:48, Serdai0)0 20/24 [110/65] vie 120.100.123.3, 01:25:48, SerialO/e -45.0)24 [110/88] via 120.100.25.5, 01:07:49, SerialO/+ WK 129100.34.0/28 [110/85] via 120.700.128.8, 01:67:49, serial0j0 ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme dasLab 1 Router and Switch Configuration Files 0 tm. 2s sh ip bop -128.9)32 [110764] via 120.4 FP FIB-failura, § Stale Origin codes: i - 16?, € - ESP, 7 - invomplete soH96.4.4.012 120.100.4441 2 m8 130.1 1.0/24 0.0.0.0 ° sere *> 130.100-209.0/24 9.0.0.0 ° were => 150.100.2.100/82 192.0.2.1 ° sere 1Ps6 Routing Teble 14 entries (Godse: © - Comected, L - Local, 8 - static, R - AIP, B - 63P U = Per-usar Statie soute OW = OSPF SKA ext 1, O12 - OSPF ABSA ext 2 D - EDORP, © - E1GAP external 2007 :3/48 [120/2) vie FE90::214:8FFSFEFD:F100, Seréal6/4 R07 :c46:00:10::/64 [120/21 ‘via FE80::7654:7004, Tunnelt © Bor scys:c0sst::/64 [0/0], Loar sc4esest4=:27428 (0 + Seriale)@ © Bor sc45:c0:s2::/64 [0/0] via #1, Fastetnernst0/1 CCIE Routing and Switching Practice Labs [239] Martin Jamas Duggan, COE No, 7042 (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe das[270} CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files 21128 [0/0] FactEtornet0/1 1322/68 [0/0] 132221428 [0/0] 54 [079] Lor c46:c0e445:27128 (070) , Serdalo)t 8 a [12072] FFSFEFC:7 S90, Seraaie/o A Joa (12970) 200, Serial0/0 L as Router 3 Initial Configuration Current centiguretion : 1528 bytes 1 service tinastancs dabug datetine asec (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasLab 1 Router and Switch Configuration Files service tinostenps log catotine move ro service pascwerd-sneryption 1 bovt-start-nacker boot -end-rarker 10 loaning console foneble password cisoo 1 recourse policy ' nowory-ei2e ionen 15 1 1 1 1 voive-sare 0 no depfarn lay CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme das[272] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files 1 1 1 1 1 1 1 1 1 1 1 4p address 120.100.9.1 265.255.255.0 1 ntorface Gigabitetomneto/0 aepler auto speed auto nedia-type ras gotiation ute intorface GigibitE thoeneto/* no ip aderess shutdown, 2008 cisco systems, Alright resend, This pubaten spotted by copyright Plesoe cs page Si ermere desi[273] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files peed auto edia-type ras negotiation auto interface Seriele/o 4p addross 120.100.123.5 255.256.256. orcapsuletion frane-relay frame-celay wap 4p 120.100.429.1 901 brosdoast Frame-reley nap ip 120.100.123.2 202 brosdcast no frame-reliy inverse-arp Antorface Goriale/o/s no ip aderass shutdown 1 ip http server no ip nttp secure-server contrel-plene 1 1 (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe dasLab 1 Router and Switch Configuration Files 1 1 1 1 1 ‘sesc-timeout 0 @ pessword cisco Aegging syncirorous aegin Lire aux @ stopbite 1 Line vey 04 Aegging syncirorous Aegin tranport input telaet cotadular allocate 2 1 webvpn context Default_context [27a] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das(278) CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files Router 3 Final Configuration oe sh eur Building configuration cuncent cunriguretion : $002 bytes | Last configuration change at 21 1 vvarsson 1264 Ure Tue Fab 27 2007 service tinsstenps log catotine move ro service pascwerd-aneryption ' boot -start-nacker boot -end-rarker ' rable password cfsow 1 fo ata new-nodel 1 nowory-ei2e ionon 15 ip of 1 2008 cisco systems, Alright reseried, This pubatens protected by copyright Plese so page Si fermere desi(276) CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files 4p nbar custon Hestings Boor 2 ascii Hastings Be 1 4p multioest routing ' {pv6 unicast routing lp range 19054 11656, ro den farm ' 1 1 1 1 1 1 1 1 1 1 clese-uap natsh-elL VIRUS naton protocol Hastings Beer ' ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme das[27 CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files policy-map BLOCK VIRUS clase VIRUS interface Loopback Ap a8iress 120.100.9.1 286.255.256, spoof tara @ 1 intorface Gigibitethomneto/0 ip ospf Tava ca aepler auto speed auto ntp nulticast ttl 2 {gv6 address 2007 4gv6 rap CCIE erate ' intorface GigibitE thoeneto/* no ap aderess (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe das[278] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files ' Antonface Soriale/o/s no ip aderass shutdmn srutdmn aepler auto speed auto negotiation ute interface Sorialt/e) ip pin searse-ncde oreapsuletion frame: relay 4p ospf retwork point-to-miltipoint 4p ost reiio-arcerval 10 4gv6 adress 2007 4gv6 rip CCIE erable Frame-reley nap ip 120.100.123.1 901 brosdcast Frame-reley nap ipvé 2007:016:08:11::2 302 broadcast no frame-reliy inverse-arp router ospt area 24 virtual Link 120,100.41 (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[279} CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files router bgp 18 no synchronization gp 1og-reagivor-cnanges neighbor TBO? rents 26 10 neighbor TBG? updats-scurce Loopback® neighbor IBG? reute- reflector client neighbor 120.106.1.1 raute-nap UPTOA2® in neighbor 128.108.2.1 peer-group ISGP rneighdor 120.108.2.1 raute-nap ABOVEY28 sn neignoor 128.108.4.1 renote-as 21 rnsighbor 120.1 no auto-eummiry ' 1 ip http server no ap nttp secure-server 4p pin eond-cp-arnounce GigsbitEthernct®/@ coope 2 group-Lict 4 4p pin serd-ro-disoovery GigabitEtherv=t®)0 scope 2 ' aocass-List 1 pormit 0.0.0 127.255.255.255, sooves-List 4 permit 224.0.1.1 1 Sor6 router rip (OIE u tap wutthep & Uundats-coures Leopbuck® ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme das{230} CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files rovte-uap UPTDI26 permit 10 notch ip address + notch ip address + ' rovte-aap ABOIEIZS permit 20 1 1 1 contret-plene Lire can @ fveo-timeout 0 @ pessword cisco Aeyging syncncerous stopbite 1 Lire aux @ stopbite 1 ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme das[231] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files Line vey 04 fvso-timeout 0 @ pesswora exsco cain trancport input telaot 1 1 webvpn contort Default_context fel authentisate versty ald oe sh version Cisso 108 Sofenare, 900 Software [03825-ADVENTENPRISEKO-W), Version 12.4(8)7, RELEASE SOFTHARE (tot) Copyright (=) 1985-2008 by Cisco Systens, Ino. Compiled Thu 28-Feb-08 61:02 by cox 1 Supports itp /www.siece. ol techeuppert OM: systen Bootstrap, Version 12.9(11)T2, RELEASE SCETARE (121) 3 uptine is 2 hours, 18 winutos System returned to ROM ty reload et 10:00:85 UTO Tue Fob 27 2007 (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe dasCCIE Routing and Switching Practice Labs Martin Lab 1 Router and Switch Configuration Files System restarted at 19:11:42 UTC Two Feb 27 2007 System image File As *flash:0925-advantarpr desk? mz, 124-6.1 bin" ‘Tis product contains eryptogrephis features and is subject to Unite® States and local country lavs governirg inport, axport, transfer a Use. DaLivery of Cisco cryptographic products doss nat ply Tagortars, augorters, distributors and users ars resoonsible fer compliance with U-8. ané losal country avs. By using this product you ‘gree to conply with applicibla leve end regulations, If you are able 0 comply witn U.S. and Loci laws, return this proaict amedsetely. 'A summary of U.8. Lavs governing Oisce eryptoaraphic products nay be ‘ound at hetps/wm.cisco.conjwul/axport/erspte/tol/ srg. tal Cisco 3825 (revision 1.0) with 446i6sK/77824K bytes of nenory. Proeessor board ID FAKOGSTFOSD 2 Serial (synolesyne) interficse 2 Virtual Private Nasvork (VPN) Modules DORM configuraticn ds 64 bits wide with parity enabled. 627204 byron of ATA System ConpactFlach (Read/oite) Configuration register is 0:2102 [232] Jamas Duggan, CCIE No, 7042 (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[233] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files 3# sh ip rovte Codes: © - comected, § - static, R- RIP, M- mobile, B - S6P Et - OSPF external type 1, &2 - OSPF axternal type 2 4 18S, ou - 18-18 sumary, L1 - 18-15 lovel-1, 12 - 15-18 Jevel-2 ia - 5-19 dntar aren, * = cancidate default, U - par-user static route Gatoway of last resort is not set 125.0.0.0/26 46 cutnetted, + subrats DB Heb.4.4.6 (2H0/6} vie 190.100.4.4, 01:00:40 120.1.0.0/24 i eutnstted, 1 suboate B190.4.4.8 [200/0} vie 120.100.2.1 180.100.0.0/24 is subnstted, 1 subnets 2 te. [20/0] vie 20. 409.0.2.0/92 4 sutnated, + subeat 8 102.0.2.1 is directly connected, NuIIB 0/16 ie varisbly culnetted, 4 subnets, 2 nasks B —499.100.2.100/32 (200/@} via 12.0.2.1, om 2.0/24 [140/65] vis 420.400.123.2, 04:24:90, SuntalO/e ° 0.24.4, 01:09:07, GigabitEthervet0/e om 85] vie 120.100.123.1, 01:24:94, SerialO/e 0/26 18 suinetted, 10 sutnecs ow 25.0 [490/420] vie 120.4108.122.2, 04:10:54, Sorial0/0/0 ° 4.0 [1102] via 120.100.3444, 01:28:50, GigabitE tome om [146/129] vie 120.100.123.2, 1:10:54, Sersalo/e/e 02 1291100.6.0 [10/5090] vis 120.100.24.4, 01:00:08, GigebstetnernatO/e ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme das[234] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files 120.1, 013 120.2, 01 1s earactly comected, Loopback 45.0 [140/2] via $20.100.34.4, 01:00:08, GigebstEtrernet0/0 24.0 8 dirsctly connected, CigabitEtharnstd/0 is directly sonvacted, Serial0/0/e 284, Sericl0/0/e , Sericl0/0/0 3# sh ip rovte ospt 150.100.9.0/16 is variably subnetted, 4 subuete, 2 mace 0 499.100,2.0724 [140785] vie 120.100,129.2, 01:24:99, Sersalore/e o [1107 s000} via 120.100.8424, & 0 199. 100.1.0724 [110/65] vae 129.1 0/24 £0 auinstted, 10 sutnate [110/128] vie 120-100.123.2, 01:10:56, Seria10/0/0 1146/2] via 420.100.0104, 01:27:04, Gigebstetharne )-5.0 [110/129] vie 120.100.128.2, 01:10:68, Sersal0vo/e |146/0090) vis 126.109.0404, 01:89:10, Gigabitethernsto/e 1.0 [446/85) vin 120.100.129.4, 61:24:20, Seris10/9/0 129.2, 01:21:99, Seris10/0/0 84.4, 01:09:13, GigebstEtrerneto/o 13, GigabitEtnersat0re 123.1, 01:21:89, sersalore Fa# sh ap bop Stetus coos: © supprecced, d damped, h history, * valid, > best, 1 - intone, FIB-failura, § Stale Origin codes: i - 16?, € - ESP, 7 - insomplete so28.4 1.0/2 120.100.1.4 2 1m Ok fo130.t.1.0/24120.100.2.4 om ok 751130, 100-200.0/24 120.100.2.1 om 88 (©2008 ceo systens ne Alrigts sere This pbtzatin sprtscteaby copyrght Pete See Faye St forme dasLab 1 Router and Switch Configuration Files #>1150.100.2.100/82 192.0.2.4 3# sh ipv6 route pve fouting Table ~ 12 entrae U Per-usar Statie coute 1. BIS Lt, 12 - 181312, © - OSPF intra, of 08F inter, Ot (238) CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 om 8 TA - ISIS intorersa, 18 - 1618 sumery OSPF ect 1, 0E2 = OF wxt 2 D ETORP, EX - FTOR? wcterval 8 FF SFEBU:BEED, Sorial0/0/0 8 jt 1120/2] © our :cis:c0:t1::/64 [0/0] via i, Serial0)9/e Lor c46s00:44 5297128 0) + Seraee7e Re panr-c45s00-2::/64 [190/2) ia FES0::218:7FFFIFESA:BEED, ovr :c46:00:18::/64 [120/2] ia FE80::215:C9FF:FETB:ESDD, ovr :c46:00:14::/6¢ [120/21 ‘via FEGQ::213:7FFF:FESU:BEED, © 2007 :c45:c0:18::/64 [0/0] via i, sigebLtetnernscoye Loar -c4sscasts: 9/198 [0/0] + SigabitEtherns:o/@ ovr :c16:00:17 3/64 [120/2] ia FE80::215:C3FF:FETB:ESD, Sertan6/0/0 Serial6y0/2 Sertal9/0/e Serdat0/0/2 Serial6y072 Giganiseenarnstovo (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das236) CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files Router 4 Initial Configuration fae sh cue Current configuration : 1978 bytes 1 service tinsstenps 1og catotine move ro service pascwerd-aneryption 1 ' bovt-start-nacker boot -end-rarker foneble password cisoo ' ro aaa new-nodel resourse policy 1 ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme das[27] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files Ap oof ' 1 ro ip domein Leohip ' no den farm 2008 cisco systems, Alright resend, This pubaten spotted by copyright Plesoe cs page Si ermere desi[238] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files 1 1 1 interface Gigibitethomneto/0 4p address 120.100.24.4 255.255.255.0 spaed auto nedie-type ras negotiation ute ntorface GigabstetnsenetO/+ description 60/1 used for com with RS end RS no ip aderass aepler auto negotiation ute ' ntorface Seriele/e stutdmn ' interface Seriale/0/1 no Ap aderass 1 1 1 (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe das[239] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files ip http server no ip nttp secure-server ort -plene 1 1 1 1 1 1 1 1 1 1 1 pessword cisco Aegging syncirorous Aegin stopbite 1 Line vty 04 fvso-timeout © 6 (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[230] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files pessword cisco Aegging syncirorous aegin 1 cotadular allocate 24008 100 1 1 authenticate verify all ' nd Router 4 Final Configuration at sh cue Current cenfiguretion : 5081 bytes 1 1 Last corraguration change at 21 version 1244 service tinostenge dsbup datetin service tinastenps 1og catotine move 1% paserecd-ancryption ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme dasLab 1 Router and Switch Configuration Files hostnane Ai 1 1 ro logping console foneble password cisoo fo aa new-nodel ' recourse polisy ip cet ' 1 no ip domein Leohip 4p multicast -routing u vyoive-sare 0 no depfarn [21] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 2008 cisco systems, Alright resend, This pubaten spotted by copyright Plesoe cs page Si ermere desi232) CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files 4pv6 address 2007 4gv6 rip CCIE erable gus rip OCIE netris-offeot 4 funnel csuros Gigebitethorset@/t as 400.48.5 tunnel destination 12 tunnel meds pvp 1 4p of retwork point-to-point ip ospf 1 arsa ca 1 (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe das[299] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files interface Gigibitethomneto/0 4p address 120.100.24.4 255.255.255.0 4p pin sparse-ncde aipler auto speed auto nedia-type ras itp multicast cltent 4gv8 address 2007 4gv6 vip CCIE erable interface GigubsteensenetO/+ description 60/1 used for com with RS end RB no ip aderass aepler auto negotiation ute ' interface Gigibitetnoeneto/1 45 4p address 120.100.45.4 255.255.255.0 4p ospf retwork non-breadeast Spoof tara s fo map trap Link-stats interface GigibitE thoenetO/1 48 oroapsuletion dett0 48 (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[294] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files 4p address 120.100.48.4 255.255.255.0 no map trap Link-status Antorface Sortale/o no ip aderass shutdmn 1 interface Gerial@/0/1 no ip aderess shutdon ' rover axgrp 1 redietritute copf 4 network 120.10 retork 120.10 retork 120.10 Gistribute-List route-ap CHANGEMETRIC in ro auto-eummiry ' router oopf 4 169-adjacenoy-chanae frea 24 virtual Link 120,100.94 redietrdtute macimi-prefic § 6 default-eetric 200 ' ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme dasLab 1 Router and Switch Configuration Files router tgp 200 no synchronization gp 1og-reagivor-cnanges neighbor 122 neighbor 122. neighbor 122 tgp-ultihop updats-courcs renots-a 3k otap-wutthop neighior 120.108.6.1 urdats-source neighbor 122. ro auto-cuamiry ip http server no ip nttp secure-server 45.5 renote-ce 2 Sor6 router rip (OIE rovte-sap CHAISEIETRIC corait 12 cto inter fice GigibitEthernsto/1 4s 10-255 4 15 10 258 1 150 [235] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 2 Leopbicke Leopbicke 2008 cisco systems, Alright resend, This pubaten spotted by copyright Plesoe cs page Si ermere desiLab 1 Router and Switch Configuration Files 1 contr -plene ‘veo-timeout 0 @ pessword cisco Aegging syncirorous Lire aux @ stopbite 1 ire vey 04 pessword cisco Aegging syncirorous Aegin cotadular allocate 24008 100 itp clock-peried 17179865 1 [238) CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe dasLab 1 Router and Switch Configuration Files eel authantiate verdfy all 1 1 nd [207] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Cnn 108 Software, 500 Software (C325 AIVENTERPRISEK®-M), Vanstion 12.4(6)1, RELEASE SOFWARE (fot) Technizal Support: http! wwcisoo. cen techsupport Copyeaght (=) 1885-2008 by vasca syetens, Ino. Compiled Thu 20-Feb-08 61:02 by coai OW: Syston Bootstrap, Version 12.8(1r)T2, RELEASE SOFTWARE (101) System returnad to ROM by psload st 10:00:20 UTE Tus Fab 27 2007 System restarted at 19:11:87 UTO Two Feb 27 2007 gysten image File ds *Flaeh:0925-advantarprieek0 mz, 124-6.1 bin" ‘This product contains eryptoarephis features and is subject to Unite® States and local country laws governing inport, axport, transfer a8 Dsldvery of Cisco eryptographic roducte do ot mpl nind-party asthorsty te Amore, etport, distribute or vse encryption compliance with U-8. ané lozal country lave. By using this product you agree to comply with applicable Love nd regulation. Tf you ere unable 0 comly witn U.S. and Lecil laws, return this proaict insedistely. (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[238] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files ‘A cumnary of U.8. Lars governing Cisce cryptographic products nay be found at: https /wm.cisco.conjwul/axport/erspte/ tol! stag. heal If you require forth cecistance please contact ue by sending omail te exporticisco. con. Cisco 3825 (revision 1.0) with 47216sK/52224K bytes of menory. 2 Gigabit Ethernet snterFacss 2 Soria (eyns/asyne) interte 2 Virtual Private Nasvork (VPN) Modules DM contaguriticn 4s 64 Dice wise With persty enabled. 170 bytee of FAM. 62720K bytes of ATA system ConcactFlash (Read/Write) Configuration rogister is 0:21 Code: C - oomected, § - static, R- RIP, M- mbile, B - 0P 1D EIGRP, Ex'- ELORP external, 0. OSPF, TA - OSPF inter area NN ~ O8PF'NSS external type 1, N2 - OSPF NSSA oxtomal type 2 Et OSPF oxtornal type 4, 2 | OGHF axtermal type 2 i = 18-18, ou - 18-18 sumary, Lt - 18-15 lovel-1, 12 - 18-18 Jevel-2 ia - 15-19 inter aren, * = cancidate default, U = per-user static route © = OD8, F - periodic dovnload static route 128.0.0.0/24 i eutnetted, + subrats B128.4.1.6 (2070) vin 120.190.5.1, 04 100.4.0.0/24 0 eutnstsed, + subrate ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme das[239] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files B490.4.4.6 [2070] vin 120.100.5.1, 00: 180.100.0.0/24 is subnstted, 1 subnets 8 t#, {20/| via 120.100.5.1, 6 450.100.0.0/24 2 cabnstted, 2 eubete om 100.34.3, 01:12:08, GigabstEtrernsto/o ° 00, Bigebitetnernct@/s.<5 120.0,0.018 4 variably subnattec, 12 subnets, 2 mesks 0 129,100,25.0124 [110/129] vis 120.100.24.9, 01:12:04, GigabsxEtneonet0/0 © 40/24 1s directly cornested, Lowpbacke 01:25:12, BigebitEtheencto/s. ss o 01:23:11, BigebitEtheeneto/s.<8 ° 2.0/24 [440/88] vin 429.100.24-9, 01:25:00, Gigabit Etharne o 2.0724 [14012] via 120.100.04.9, 01:25:00, Sigebstetnernat0/e © 24 de dirsctly connacted, GigabitEsnarnstt/1 45 © 129. 100.26,0/24 a6 directly cannactod, Gigabite:nernett/1 65 ° 129.9792 [11071] via 20.100.24.9, 61:25:00, Gigabitetnamnste/@ 0 429.100.128.0/24 [110/129] vie 120.1€9.54.3, 01:28:08, aigaptternemneto/o 0/24 is subnstted, 8 subnets 100.38.3, 01:12:15, GigabstEtrernsto/o ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme das300} CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files 12:18, igab:tEtrerveto/e 0/8 ie variably cubnettec, 42 subnets, 2 micks [110/120] vis 199.100.01.9, o1:12618, GigabseeenonnetO/o 84.3, 01:25:10, Gigabitethern: [110711 via 20.100.24.3, 61:25:19, Gigabitetnarnatero. 0 129.100.128.0/24 [110/120] vis 120.100.94.9, 01:25:19, GigabsxEtneonet0/0 fs sh ap rovte eagtp o [00/4282560] via 120.100.4.8, 01:29:26, GigebitetnernstO/s.45. 0/8 is variably cubnettec, 42 subnets, 2 micks ° 28 [00/4289860) via 120.100.48.8, 01:29:27, BigehitFthecnetO/s 45 Dd 129.100.6.0724 [0072552560] via 12 has sh ap bgp Status codes: © suppresced, d damped, h history, * valid, > best, 1 - intoonel, FIB-failura, § Stale Origin coos: i - 16?, ¢ - ESP, 7 - dnsomplete Bigebitetneencto/s.s8 + 16.11.0728 120.100.8.1 2 310 19 4 ows (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe dasLab 1 Router and Switch Configuration Files Fast ore 12 » 12 => 130.100.200.0/28 12 1Ps6 Routing Table ~ 12 entries Code: © - Comected, L = Loea U Por-usar Static rou © = OSHF intra, ot - ost Ot = OSPF SKA ext 1, D - EIORP, Bx - E1OAP 8 6 (120/8) ® 154 (12073 FERC: 8 15 [12072 Re panrsc4ssc0-2:s)64 [120/9 vie FE80::214:.0FF FEF: R200 :C45200:485:/64 [12079] ‘via FEGO::214:64F FEC: aon sc4esc0ct4:s/64 [42879] vie FE80::214:.4F FFE: © 2007 :c45:c0:18::/64 [0/0] ia :, SigabitEtherns:0/ Lan scrosc0: 1054/1280 via #, GigdhitEthernas0/ © Bor scy5:c0s4r::/64 [0/0] via #2, Tunnalo L nour exS:c0s9 1128 (0/9 [a1] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 2 m0 1 4 ows 1, 5 - Static, R RIP, B - BSP FF inter, OF1 - OSPF act 1, 02 - OF xt 2 (2 = OSFF HSA ext 2 ternal 200, GigabisEenernst9/9 1 330, GigabitEtnernst 9/9 1 280, OigabisEenernnt 9/9 1 330, GigabitEtnernst 9/9 i 330, GigabisEtnernst 9/9 1 330, GicabitEtnernst 0/9 1 7 (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[302) CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files Router 5 Initial Configuration fst sh eur Current configuration : 1448 bytes 1 service tinsstenps 1og catotine move ro service pascwerd-aneryption 1 1 bovt-start-nacker boot -end-rarker fonsble password cisoo 1 fo aaa new-nodel reourse policy 1 ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme das[aay CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files nowory-si2e donon 10 ip oof 1 1 ro ip domein Leohip voioe-card @ no depfarn 2008 cisco systems, Alright resend, This pubaten spotted by copyright Plesoe cs page Si ermere desi[904] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files 1 1 4p address 120.100, 1 intorface Gigibitethomneto/0 dolar sito speed auto edie-type ras negotiation auto interface GimbitEthoenet0/* 4p address 150.100.8.5 255.255.256 aepler auto 1 255.256.255 negotiation ute ' interface Seriele/e stutdon ' interface Seriale/0/1 Ap address 120.100.25.8 258.288.288.0 Frame-relay nap ip 128.100.25.2 512 troadcast 4p ospf retwork point-to-point no frame-reliy inverse-arp (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe dasLab 1 Router and Switch Configuration Files pessword exsco Aegin stopbite 1 Lire ax @ [908] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasLab 1 Router and Switch Configuration Files Line vty 04 pesswora exsco cain tranport input telaot 1 1 webvpn context Default_eontext feel authentiate versfy all nd [206) CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Router 5 Final Configuration Fst ah rue Building configuration Cureent centaguretion : S857 bytes version 12.4 service tinsstenps dsbug datst ine service tinastenps 1og catotine move ho servtoe pasonerd-aneryption 1 2008 cisco systems, Alright reseried, This pubatens protected by copyright Plese so page Si fermere desi(307) CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files hostnave FS 1 1 ro logping console foneble password cisoo fo aa new-nodel ' recourse polisy ip cet ' 1 ro ip domein Leohip ip slat Aemp-2oho 120.100.28.5 1 Spn6 undosst-routing voive-card 0 2008 cisco systems, Alright resend, This pubaten spotted by copyright Plesoe cs page Si ermere desi[90] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files 1 1 1 1 1 1 1 1 treok 1 rte 4 rocchabitity ' treok 2 ip route 190.100.200, interface Tunelé no ip aderass {gv6 address 2007 4gv8 rp CCIE erate tunnel scurce GigabitEtneraete/® tunnel. destination 120.100.45.4 tunnel meds spveip (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe dasLab 1 Router and Switch Configuration Files interface Loopback 4p adiross 120.100.5.1 265.255.256. 4p ospT retwork pourt-to-poant 1 interface Gigibitethonneto/0 CCIE Routing and Switching Practice Labs 4p address 120.100.45.£ 255.255.255.0 4p os9f retwork non-breadonst ip oof 1arsa § aepler auto speed auto ' interface Gignbite thoeneto/* speed auto nedie-type ras negotiation ate 4gv8 v6pf Flood reduction gv opt 1 arse © standoy 1 ip 180 standdy 1 precast standyy 4 trick 2 dcrenent 20 1 interface Seriele/o no ap aderass 3a [209} Martin Jarnes Duggan. COE No. 7942 (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[310] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files stutdmn 1 amtorrace seriale/o/1 oreapsuletion frane-relay 4p ospf retwork point-to-point ip ost tara s 4nv8 vip OOTE erable 4gv6 vip CCIE cunmary-eddrass 2007: :/18 Frame-reley nap ipvé 2007:016:08:14::2 52 broadcast ‘rame-reley wap 1pv# FES0::213:7FF :FESA SEED S12 oroadcast eu Frame-reley nap ip 128.100.25.5 512 troadcast no frame-roliy inverse-arp ' retwork 129.100.5.1 0.6, network 120,100.45.5 network 150,100.2.6 0.0.0 1 router ospf 4 eg acenoy-changes reignoor 120.1 router bgp 200 no synchronization bp log-reigibor-changes ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme das[ait] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files remots-a6 10 tgp-nultthop 2 Updats-courcs Leopbuck® Uupdats-cource Leopbuck® 5.6 renate-as 200 neighbor 120.1 neighbor 120.1 rneagnoor 120.1 neighbor 120.1 neighbor 120.1 neighbor 150.1 1 4p Local policy route-mep TEST ' 7 remota 3 ' soosse-List 1 Sox6 router ospf 4 egal acenoy-changes Pedietritute rip OCIE wetric 5000 include-conneste® {pv6 router ip (OIE distribute-List pretixList BLOCK-SLAMARY in Tuneld ' Sov6 poefik-List BLOIK-UNMARY seq 10 deny 20072:/16 Sov6 pref ik-Liet BLOTK-SUMMARY 86g 15 parnit 13/0 Le 128 orait copf host 120.100.15.5 host 12 ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme das[312] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files route-aap TEST permit 16 cto ip address 100 ost 1p noct-top verity-avattanaiy 12 pessword cisco coin stopbite 1 Lire auc @ Hie vey 04 pessword cisco Acgging syncirorous 2008 cisco Systems, Alright resend, This pubatens protected by copyright Peso ss page Skt ermere desi[313] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files Aegin tranport input telaot 1 webvpn cortoxt Default_eontext el athantiate versfy all 1 1 fst sh version isso 108 Software, 900 Software [03E25-ADVENTENPRISEKS-W), Version 12.4(8)7, RELEASE SOFTHARE (fot) Technical Support: http! fwwacisce. con techouppert Copyright (=) 1066-2008 by Chaco Syetane, Tne Compiled Thu 28-Feb-08 61:02 by cox OW: systen Bootstrap, Version 12.8(11)T2, RELEASE SOFWARE (101) As uptine is 2 hours, 21 winutos System returned to ROM by reload et 10:17 14 UTO Tue Fob 27 2007 System image File As "flash: 0925-adventarpr seek? mz. 124-6.1 bin" ‘Tis product contains eryptographis features and is subject to Unite® States and local country lavs governirg inport, axport, transfer a8 Use. Delivery of Cisco cryptographic products doss not! nmply (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[314] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files third-party authority te import, export, distribute or uso encryption Importers, exporters, distributors and users are responsible fer compliance with U-8. anc 10281 country avs. Sy using this proauct you give to conply mith applicsble Love end regulations, If you are wnable ‘0 comly witn U.S. and locil laws, return this prodict insedictely. 'A cumnary of U.8. Lave governing Gisce cryptographic products nay be found at: hetps/ nw. ciaco-conlwl/axport/erspte! tool tary. heal If you reqiirs further essistance please contact us by sending onail to exporticisco. con. Cieso 2006 (revieion 1.8) with A72HGAN/2EDAK byte oF monary. Prooessor board ID FAKOCTFODS 2 Gigedit Ethernet interfaces 2 Serial (yns/asyne) interte 2 Virtual Prinate Nevork (VPH) Modsdes 470 bytes oF NVFAM. 62720K bytes of ATA system CongactFlash (ead/Weite) Ast sh ip rovte Codoe: © - comected, § - static, R- RIP, M- mobile, B - S0P 1 OSPF oxtornel type 1, €2 - OSPF axternal type 2 4-18-15, ou - 18-18 sumary, L1 - 18-15 lovel-1, 12 - 15-18 Jovel-2 ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme das[315] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files ia - 18-16 inter aren, * = cancidate default, U par-user static route © = OD8, F - periodic downloaded static route 128.0.0.0/2« i eutnetted, + subrats B128.4.4.6 [2070] vin 120.100.2.1, 00: 10.1.0.0/24 ds sutnetted, 1 subrats BR $20.4.4.6 [2070] vin 120.100,2.1, 00:24:00 0/24 is subnstted, 1 subnets 8 200.8 [20/0] via 120,100.21, 0/24 16 subnsttes, 3 supnevs ° [146/65) via 420.100.26.2, 01:41:40, Sorsas0/04 c 1s directly comectod, GigebitEtarnete/1 ° [140/493] via 120.100.25.2, e4:41:47, Serdal0/0/ 0/8 is variably cubnettec, 16 subnets, 2 micks © 24 ts directly cermectod, Gerial6/6/t 38, Gigabitethervotort ° 28, GigabstEtnerrot0lt 9.9.10, 61:90:28, GigabitEthernet0/t o 0.45.4, 61:90:81, GigabitEtherneta/o © 20/24 Js directly comocted, Loupback® 5 e.0/m [00/185160] via 150.100.2.6, 01:98:91, GigabitEtnereatO/4 D> 129.100.7.0724 [00/155160} via 150.100.3.7, & (98, GigabstEthervotot ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme das[316] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files om 193) via 12 om 2.0724 [140185] vie 120.1 ow ea) via o 10.8.6, 01:90:33, Gigabisetnernst9/1 100.45.4, 01:92:85, GigabitEthervet/e ow 124 [110/129] vin 120.100.28.2, 91211248, Gorinl/0/4 0 120.100.128.972 [410/128] vie 120.409.26.2, 01:14:48, Serial6/0/1 0% 120.100.128.0/24 [110/128] vie 120.109.26.2, 01:11:48, Serial6/0/1 Ast sh ip rovte osp? 0/24 16 subnsttes, 3 sunets 140/65) via 420.100.26.2, 01:41:69, Gordas0/o4 11467493] vie 120.100.25.2, 4:41:53, Serdel@/0/1 0/8 ie variably cubnettec, 16 subnets, 2 micks 25.2," 01211253, Serdel0/0/t 20/24 [110/05] vie 120.100.26.2, 81:14:69, Serdal0/0)t 2.0/24 [140/120] vie 120.100.26.2, @4:41288, Berial@/0/4 -24.0)24 [110/123] via 120,100.25.2, B1:11:53, fordalo)0/4 128.8)32 [110/128] vie 120.400.28.2, 01:11:58, Seriale//t 09.123.0/24 [110/125] vie 12 0/8 i variably subnettee, 16 subre' ° 80/24 [00/155160) via 148, Gigabitethorvot/t Dre. 100.6.0724 00/455160) waa 198, GigabstEthereat@t > 129,100,10.0124 [00/155160] via 150.100,9.10, 01:90:90, GigahitEtnemeta/4 D129. 100.2.0/24 [00/425160] wie + 9.4.4, 64:09:42, CigabstCtheenetd/o (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe das[317] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files Dd 129.100.6.0724 [00/155160] via 150.100.3.6, 01:90:42, GigabitEthorratO/4 > v29.100.7.0724 [00/455160] via 150.100.2.7, 0 10.8.6, 01:90:42, Gigabisetnernst9/1 100.4544, 01:92:42, GigabitEthervet0/e BOP tabla varsion 4s 47, Tosal router ID s= 420.100.5.4 Stetus coos: © supprosced, d damped, h history, * valid, > best, 1 - interne, F FIB-failure, § Stale origin coves: 4 + 16", € = SSP, 7» dnvompLete Netvork Hoxt Hos Metoic LooPe Weiaht Peth 2128.4. 1.0/24 —120.100.2.4 ows fo 130.4. t.0/28—120.100.2.4 ° ows +> 190. 100.209.0/24 120.100.2.1 ° oa 1Ps6 Routing Table ~ 13 entries Codes: © - Comacted, L = Local, § - Static, R= AIP, B - BOP U- Per-usar Statie coute © = OSHF sntra, OL - OSFF inter, O€1 - OSPF act 1, OE2 - OF ext 2 OY = OSPF SGA ext 1, O12 - OSPF ADEA ext 2 D EIORP, BX - ELGR? external, R200rscr9:00:18::/64 [128/9] via FE80::242:7FFF-FEBI:REED, Seria16/0/4 Ror :c45:00:14:s/64 [120/2) ia FEGO::213:7FFF:FES:BEEO, Serial0/0/1 (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[318] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files R o0rscts: a [12072] via FE80::219:7FFF:FESL:BEED, Serial6/0/1 bor 2045 sa (12072) via FE90::249:7FFF:FEBI:BEED, Serial8/0/4 © 1425164 [0/0] Sersal0/0/4 L 5/128 [0/0] via is, Sordalo/0/1 Ror c46200:482 2164 (190/9) 210: TFFFIFESU:BEEO, Serdal0/0/1 14 [079] saganstetnernaco/3 10::6/120 [0/0] SigabitEthernat/4 1722164 [0/0] 5/428 (0/0) Router 6 Initial Configuration fot sh cue Butiding configuration Current centiguretion : 1892 bytes 1 2008 cisco systems, Alright reseried, This pubatens protected by copyright Plese so page Si fermere desiLab 1 Router and Switch Configuration Files version 12.4 service tinssteaps dsbug datst ine service tanastenps tog caterine ms%e 1 hostnane 5 1 boot -end-aarkar 1 no Logping console foneble password cts00 fo aaa new-nodel ' recourse polisy ip oof u 1 1 ro ip domein Leohip ' ' 1 1 CCIE Routing and Switching Practice Labs [319} Martin Jamas Duggan, COE No, 7042 2008 cisco systems, Alright resend, This pubaten spotted by copyright Plesoe cs page Si ermere desi[320] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files 1 1 1 1 1 1 1 1 1 1 1 1 1 sntorface Loopback 1 intorface Gigibitethomneto/0 4p address 120.100.48.6 255.255.255.0 axpter auto nedia-type ras negotiation ute 2008 cisco Systems, Alright resend, This pubatens protected by copyright Peso ss page Skt ermere desiLab 1 Router and Switch Configuration Files interface GigibitethoenetO/* 4p address 150.100.8.6 255.255.256 axpier auto nedie-type ras negotiation ute ' interface Sertalel no ip aderess shutdon ' amtorrace soriele/o/1 shutdmn 1 1 no ip nttp secure-server [221] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasLab 1 Router and Switch Configuration Files 1 1 1 1 1 ‘sesctimsout 0 6 pesstord cisco Aegging syncirorous aegin Lire aux @ stopbite 1 Line vty 04 Aegging syncirorous Aegin transport input telaet webvpn contort Default_eontext [322] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme das[223] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files Router 6 Final Configuration fot sh rue Building configuration cuncent cuntiguretion : 1827 bytes version 1244 service tinssteaps dsbup datst ine service tinastenps log catorine move 1 hostnae F5 ' 1 no logping console foneble password ctsoo fo aaa new-nodel ' recourse polisy ip oof ' 2008 cisco systems, Alright resend, This pubaten spotted by copyright Plesoe cs page Si ermere desi[324] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files no ip domein Leohip 1 2pv6 untoest-routang no denfarn ' 1 1 1 1 1 1 1 1 1 1 1 1 1 1 interface Loopback 4p address 120.100.8.1 265.255.256 2008 cisco Systems, Alright resend, This pubatens protected by copyright Peso ss page Skt ermere desi[225] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files interface Gigibitethamneto/0 4p address 120.100.48.6 255.255.255.0 axpier auto nedie-type ras negotiation ute ' interface Oigabite tnrnetO/! fp adiness 150, 100.9.6 258. 255.256.0 aepler auto speed auto eaie-type ras sow adress 2007 4gv8 v6pf Flood reduction {pv opt 1 arse © botany ap 126 standhy 4 priority standby 1 proengt 1 interface Seriele/e stutdmn 1 interface Serial@/0/1 no Ap aderass 1 router sigrp 1 retwork 29.100.8.1 0.0.0.0 (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das(226) CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files network 150.100.0.6 0 no auto-euamiry router bgp 300 no syohronization bgp 1og-reighbor-chan 8 neighbor TBG? peor-group neighbor TBS? urate neighbor 120.1 neighbor 120.1 rneagnoor 120.1 rnsighior 150.1 rn auto-euamiry ' ip http server no dp nttp sacure-earv ' 1 Sox6 router spf 4 eg acenoy-changes scar Loopback remota 2 tgp-nultihop 2 Updats-courcs Leopbuck® eer-aroup TBSP ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme dasLab 1 Router and Switch Configuration Files pessword cisco Aegging syncirorous Aegin stopbite 1 Line vty 04 fvso-timeout 0 6 caging eyncnerous Aegin trancport input telaet 1 [327] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 2008 cisco systems, Alright resend, This pubaten spotted by copyright Plesoe cs page Si ermere desi[928} CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files webvpn contort Default_eontext eel authantisate versfy all fe ah version Ciseo 108 Software, 9500 Software [03E25-ADVENTERPRISEKO-W), Version 12.4(8)7, RELEASE SOFTHARE (fot) Texnnasad Support: netp://mmtsce.can/techsupport Copyright (2) 1065-2000 by Ciac0 Gjetena, Ino. Compiled Thu 28-Fob-08 61:02 by coxi OW: Syston Bootstrap, Version 12.8(1)T2, RELEASE SOFTWARE (1e1) System returned to ROM ty reload et 10:00:81 UTO Tue Fob 27 2007 gysten image File As "flash:09625-adventarprdeekt mz. 124-6.1 bin" ‘Tis product contains eryptogrephis features and is subject to Unite® States and local country laws governing inport, sxport, transfer a Use. DaLivery of Cisco cryptographic products doss not’ nply nira-perty authority te Amore, etport, distribute or vse encryption compliance with U-8. ané lozal country avs. By using this product you fgrve to conply with applicibla Leve and regulations, If you are wale 0 comply witn U.S. and Loci laws, return this prodict imedistely. (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe das[229] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files ‘A cumnary of U.8. Lars governing Cisce cryptographic products nay be found at: https /wm.cisco.conjwul/axport/erspte/ tol! stag. heal If you require forth cecistance please contact ue by sending omail te exporticisco. con. Cisco 3825 (revision 1.0) with 47206sK/52224K bytes of nenory. 2 Gigabit Etnarnet snterFacss 2 Soria (eyns/asyne) interte 2 Virtual Private Nasvork (VPN) Modules DM contaguriticn 4s 64 Dice wise With persty enabled. 170 bytee of FAM. 62720K bytes of ATA system ConcactFlash (Read/Write) Configuration rogister is 0:21 Codes: © - comected, § - static, R- RIP, M - mobile, B - S0P D - EDORP, &x'- ELGAP oxtornal, 0 | OSPF, IA - OFF inter roa NN ~ O8PF'NSS external type 1, N2 - OSPF NSSA oxtomal type 2 Et OSPF oxtornal type 4, 2 | OGHF axtermal type 2 4-18-18, ou ~ 18-18 sumary, L1 - 18-15 lovel-1, 12 - 18-18 Jevel-2 1» - sancidate defanlt, U .'por-user static route ia» 15-18 inter are © = OD8, F - periodic downloaded static route 128.0.0.0/2« ic eutnetted, + subrats (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[330] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files B128.4.4.8 [200/0} vie 120.100.2.1 724 is sutnetied, + subrats 6 {200/0) via 120.108 0.0/24 £4 eubnottod, 1 ctr 200.0 [200/0] vie 120.100.2.1, 24 is eubnstted, 8 subnets o [179/204100) via 120.100.46.4, 01:01:80, DigebitetnernetOre © 489,100.5.0 is cinastly comactad, GigabitEtnarnate/s Dex 19, [1707284160] via 120.100.46.4, 01:21:27, BigebitEtnernstO7e 5/8 18 varsebly subne:tec, 16 subnets, 2 mLcks 1, Bigwbitetheenctore o 198, GigabitEthorrat0/4 o + Gigabitethometd/4 o [00/4H5160] vis 120.100.48.4, 01:28:89, GignhitEthomnetd/@ ° 100. 5.0724 [00/185160] via 150.100.3., 01:26:38, GigabsitEthorratOl4 c 0/24 is directly comected, Loop ° ona [00/455160] via 150.100.9.7, 01:26:39, GigabstEtnareatO/4 oe 28, Sigibitethernsto/e oe uty 81:01:20, BgubsetenernetO/e 2008 cisco systems, Alright reseried, This pubatens protected by copyright Plese so page Si fermere desi[331] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files oe 28, Bigtbitetnernst 070 [00/26720} via 150.100.9.5, 01:26:34, GigabseEthornst0)/t {90/9672} via 120.100.26.4, 01:26:94, GigabstEthernatO/® 24 is directly cxrmactod, GigabitEthernet oe 24 [1797284160] vie 126.100.4645 01:21:20, aigibiteenernetO/® om Bigenitetnemnctore oe sageostetnemnetore oe Bigenitetnennctore [170724160] via 120.100.46.4, 01:21:90, Bigubseeenennstay 0/8 is variably cubnettec, 16 subnets, 2 micks [170724160] via 120.100.46.4, 01 52, Sigebitetnernst ove > 429.190.6.0724 [00/185160] via 160.100.3.8, 01:26:48, GinabitEthorrtOl4 Dd 129.100.6.0724 [90/455160] va 150.100.2.6, 01:26:49, GigabitEtnarrato/4 [00/425460) vin 160.100.2.40, 61:28:48, GigabitEthemnata/4 D129. 100.2.0724 [90/195160] via 120.100.48.4, 01:25:42, Gigahitetnemneta/@ > ta9.100.5.0724 [00/425100) wie ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme das[332] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files Dd 129.100.7.0724 [00/155160] via 160.100.3.7, 01:26:48, GigabitEthorratol4 De 129. 100.1.0724 [1707234160] via 120.4 464, 01:01590, GigubstEtnenneto/e 46.4, 0 140, Sigibitethernsto/e [rr97aewo) via 12 D429, 100.25,0124 [00730720 via 15 Abst, 01:21:40, Sigibitetnernet0/e 10.8.5, 01:28:44, Gigabisetnernst9/1 100.16.4, 01:26:44, GigabstEtnervett/e Aoat, O1:04140, SkgubseCtnernsto/e oe 46.4, 01:21:48, Sigibitethernsto/e oe 128.0) 24 [179720] vie 12 BOP table version is 19, lozal router ID ie 120.100.8.1 Status codes: © supprosced, d damped, h history, * valid, > best, 1 - interne, AIB-failura, 8 stale abut, 01:21:40, SigibitEthernet0/e Network Hoxt Hop Metoic LooPe Weight Peth so128.1 1.0/2 120.100.2.4 2 1m OWE sat s.0r —120.100.2°4 a mows . 120.100.4.1 2 210 19 4 om ows (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe dasLab 1 Router and Switch Configuration Files Aas sh ipv6 route 1Ps6 Routing Teble - 11 entrise 11- ISIS Lt, 12 - 1515.2, 1A © - OSHF antes, OL - OSFF intr Ot = OSPF HSK ext 1, O12 - of 062 29@7:015:C0:10::/64 [11075000] ‘via FEGO::244:04FFFEFCCFION, A 062 29@7:018:60:11::/64 [11075000] 02 ene7:0%e:00:125:/64 [110/2006] vie FE80::214:0FFSFEFCSF ISN, Os 062 29@7:018:60:19::/64 [110/5000] via FE80::214:0FFSFEFCSP ISN Oh 062 e067:640.00:14::/64 [110/906] 5:00:15::/64 [10/5200] ‘via FEGO::214:04FFFEFCGPION, © 2007 :e45:c0:98::/64 [8/0] + SigabstEthernat0/4 ee Lovr :c45:00:18::8/128 [0/0] 5 SigabitEthernat0/4 62 5:00:175:/84 [10/5000] L 110 [9/0] via i, Wile L 8 (ove) + une [1339] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 1818 intorarea, IS - 1818 sumery 5, OE - OSPF ext 1, 0E2 - OF ext 2 SPF SSA ext 2 eabisetnernst9/1 cabasetnernsto/1 cabisEtnernst9/1 cabisEtnernst9/1 cabisetnecnst 9/1 eabisetnernst9/t gabe tnernsto/1 (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[334] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files Switch Configuration Files Switch 1 Initial Configuration Building configuration... Current centiguretion : 2781 bytes varsion 12.2 no service pa service tinasteaps dsbup uptine service tinostengs 1og uptine 1 ' on 1 fo aaa new-nodel 4p suonet-z2r0 1 tp dovain oote tp mode. transparent ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme das[1335] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files no file verify auto spanning-tree noe prst spanning-troe extend syston-iB 1 1 Vien 81, 48-46, 1 4p address 120.100. 1 intorface FastEthernst0/t intorface Fastéthernst0/2 conitenport mde dynanic desirable ' ntonface Fastethornst0/3 soniteneort ascess vian 34 conitenport mde acovss ' Anteerace Fascetrernscoye onitenport mde acovss 1 1 258.286.255 ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme dasLab 1 Router and Switch Configuration Files intorface FastEthornsto/s onitenport ascess vian 45 soratenport mde access intorface FastEthornst0/s onitenport azcess vian 48 onitenport mde acovss interface FastEtharnatO/7 onitenport mde dynanic desirable ' amtorrace Fascetrarnsto/s 1 interface FastEthornst0/o coritenport mde dynanic desirable interface FastEtharnetO/40 coritenport mde dynanic desirable ' sntorface Fastétrarnste/tt 1 intorface FastEthornsto/12 coritenport mde dynanic desirable interface FastEtharnetO/49 oritenport mde dynanic desirable 1 [1336] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe das[337] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files intorface FastEthornsto/t4 onitenport mde dynanic desirable ntorface FastEthernst0/1s onitenport mde dynanic desirable 1 intorface FastEthornsto/16 1 intorface FastEthornsto/17 oritenport mde dynanic desirable ntorface Fastbthernsto/10 conitencort mde dynanic desirable 1 intorface FastEthernsto/10 1 intorface FastEthernst]/20 ‘rstenport trunk envapsulation dotta 1 interface FastEthernst0/2t ‘rdtenport trunk envapsulation dottq suitenport mde trunk intorface FastEthernst0 22 ‘rdtenport trunk envapsulation dotta conatenport mde trunk (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[338] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files intorface FastEthornst]23 ‘idtenport trunk ensapsulation dottq oratengort mde trunk intorface FastEthernst]/24 ‘rdtenport trunk envapsulation dotta coritenport mde trunk interface Gigubitéthernet0/* conitenport mde dynanic desirable 1 amtorrace eigibitetnamneto/2 1 interface Vlant no ip aderass interface Vana 4p address 150.100.8.7 265.255.256. 1 4p http securs-cerver ' contrel-plene 1 1 ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme das[339] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files Lire con @ pesswora exsco Aegin Line vey 04 no Login swactimsot 0 @ pessword cisco Aegging syncirorous aegin ' nd Switch 1 Final Configuration Building cntiguetin Current configuration : stat bytes no service paB service tinasteaps debug uptine service tinsstenes 1og uptine ho servtoe pasonerd-sneryption 1 2008 cisco systems, Alright resend, This pubaten spotted by copyright Plesoe cs page Si ermere desi[310] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files ' ro Aogpang console 1 orndisable recovery sauce Link Flap fs a5 mep policad-dsce 10 18 24 28 92 St 48 a8 to 8 fe gos mep dcp mutation AF43-TO-AF&2 98 to 95 se gos 4p subnet-z0r0 no ip domein-Leohip ' 4p dep stooping vlan 300 tp mode transparent on new-nodel port-chanrel Leae-balance dst-ac spanning-tree noc rapie-pvst spanning-troe extond syston iB spanning-tree vlen 1,308 priority 24575 (©2008 cisco systems ne Alrigts sere ris pbtzatin is prtscteaby copyrght Peso See Faye St forme das[ait] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files Vien intemal allocation policy assencing 1 clese-tap nateh-el1 POLICE watch access-group 1 1 policy-map RE-NARK lass POLICE police 5000002 8100 exces 1 1 interface Loopback Antarface Port-channslt ‘rdtenport trunk envapsulation dotta conatenport mde trunk Antarface Port-channsl2 ‘rdtenport trunk envapsulation dottq conitenport mde trunk ‘rdtenport trunk envapsulation dotta conitenport mde trunk ' action polioad-deep-tranenit ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme das[392] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files intorface Fastéthernst0/t onitenport mde dynanic desirable servaice-poly input REMARK intorface FastEthernst0/2 onitenport mde dynanic desirable servie-poliy input REARIK interface FastEtharnat0/ onitenport ascess vian 34 conitenport mde access service-poLy input REMARK ntarface Fastétharnst0/¢ onitenport ascess vian 3¢ conitenport mde acovss intorface FastEthernsto/s onitenport ascess vian 45 onitenport mde acovss 1 intorface FastEthornst0/s onitenport ascess vian 48 suitenport mde acovss 1 ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme dasLab 1 Router and Switch Configuration Files intorface Fastéthernste/7 oritenport mde dynanic desirable service-poLiy input RE-NARK intorface FastEthornst0/8 ‘oritenport mde dynanic desirable servie-poliy input REAKIK Interface FastEtharnat0/® onitenport mde dynanic desirable servie-poliy input REARIK ntorface Fastbthernste/10 oritencort mde dynanic desirable service-poliy input REAAIK ' interface FastEthernst0/tt conitenport mde access service-poliy input REARRK spanning-tree perttast 4p verify eource 4p chop snooping Linit cate 18 1 intorface FastEthornsto/12 ‘sutenport ascese vian 300 servie-poliy input REAKIK spanning-tree pertfast [313] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe dasLab 1 Router and Switch Configuration Files 4p verity source 4p chop snooping Linit rate 18 ntorface FastEthernsto/19 sonitengort ascese vian 300 conitenport mde acovss servie-poliy input REARIK in verify source 4p chop snooping Linit rate 18 1 amtorrace Fastetrernsteyta onitoncort mde access servie-policy input REARIK spanning-tree pertfast 1 intorface FastEthornste/ts natenport ascete vian $00 servis policy input REAARK spanning-tres pertfast 4p verity souree 4p chop snooping Linke rate 18 intorface FastEthornste/16 onitengort ascese vian 300 conitenport mde acovss [344] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[398] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files service poly input REARIK spanning-tree pertfast ap veraty source 1 intorface FastEthornsto/17 conitengort ascese vian 300 servia-foliy input REAARK spanning-tres pertfast 4p verity souree 4p chop snooping Lint rate 18 interface FastEthernst/18 sonitengort ascese vian 300 conitenport mde acovss 4p chop snooping trust 1 Antorface FastEthornste/19 conitencort mde trunk service-poliy input REARIK channal-group + mode or interface FastEtharnet0/20 ‘rdtenport trunk ensapsulation dottq coritenport mde trunk ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme dasLab 1 Router and Switch Configuration Files servie-poliy input REAKIK channal-group + mode on ntonface Fastethornst0/2t conitengort trunk ensapevlation detta conitenport mde trunk servie-poliy input REAKIK ' intorface FastEthernst0/22 ‘rdtenport trunk envapsulation dotta ratengort mde trunk channal-crous 2 mode on ' intorface FastEthernst023 servie-poliy input REARIK channsl-group 8 modo on ' ntorface FastEthernst/24 conitencort trunk ensapeulation dtta sonitenport mde trunk service-poliy input REARRK cramot-group 8 mous on intorface GigibitE thoeneto/* onitenport mde dynanic desirable (©2008 ceo systems [316] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Inc Alrights sere ris pbtzatin is prtscteaby copyrght Peso oo Faye 5 frmoe dais[397] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files mis qos trust deop ils qpe csop-autation AF49-7O.AFA2 ntonface GigabstethuonetO/2 onitenport mde dynanic desirable ' interface Vlant shutdoen ' Sntarface Vana 3p a8ir966 150.100.5.7 286.255.256 network 20.100.7.1 0.6, retweork 150.100.2.7 0.6, router bgp 200 no synohronization bp log-reigibor-changes neighbor TBG? renots-26 800 neighbor 128.108.5.1 peer-group ISGP neighbor 128.108.8.1 peer-group ISGP 4p classless 4p http server (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe das[998] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files 4p http securs-cerver 1 1 contel-plane 1 ins con @ pessword cisco Aegging syncirorous Lire vey 04 no Login Line vty 515 Aegging syncirorous Aegin transport input telaet nd 1 eh version cise 108 sorenare, O38e0 So eere (C598 TFSERVICESKO-M), Version 12.2(25)8EE, RELEASE SOFWARE (2) Copyright (=) 1985-2008 by Cisco Syetens, Tho. (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasLab 1 Router and Switch Configuration Files [319] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Compiled Fr 09-Feb-08 €7:24 by antonino Tnege toxt-base: 0100008000, date-base: 0: 11 uptine is 2 hours, 27 minutes System returned to ROM by powar-on Syston imege File Ae "flash: /9850-ipesryScoskd-e 122-28.C66, ‘Tis product contains oryptographis features and is subject to Unite® states anc local courtry 1avs gavernirg import, export, tancrar a thind-sarty authority te imort, export, distribute or use encryption Inportars, exporters, distributors and users are responsible fer compliance with U-8. ane lozal country lave. By using this product you furor to comply nith applicable Lees snd regulations, If you are walle ‘A cumnary of U.8. 1avs governing Cisce cryptographic products nay be found at: hetps/(wm.cisco.coniwul/axport/crspte/ tool starg. tal If you rewire further essistance please contact us by sending onail to cxporticisco. con. ciiwe ¥8-C3020-26 (PowerPC) procestor (revision PO) with BESZEH/BI2K bytes of Processor board ID CATOEYKI7K. Lat raeet from warn-cecet Furing Leyere/ Switching Lnage ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme das[380] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files Ethocnat controller 1 hes 12 Fast Ethernot/TEEE enoenot controller 2 hes 12 Fast Etnerna%/ IEEE Ethocnat controller 8 hes 1 Gigebit Ethornet/TEEE 802.3 interface Ethocnat controller & hes 1 Gigebit Ethornet/TEEE 602.3 interface 24 FastEttannst interfaces 2 Gigabit Ethernet interfaces ‘Ine paseword-recevery mechanisw 16 eneblod. 20K bytes of Fleeh-simLatod WAL. Baca ethernst MAC Addrece: 00:13: Motherdoard asconbly nuber: 73-5710-12 Povor supply art number: 84-0058-04 Pawar supply senda) mumber: DTHO007=S ModeL ravieion number: FO Motherboard cevision nurber: AG ModsL number: WS-C3550-24-SHL Syeton eer nunbors CATOD! 17K Configuration recister ie @c10F 04:0 HF sh ip route Nt - OSPF NSS external type 1, NO - OSPF NSSA oxtomel type 2 1 - OSPF oxtornel type 1, &2 - OSPF axternal type 2, & - ESP 4 1818, ou - 18-18 sumary, LY - 18-18 lovel-1, 12 - 15-18 level-2 ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme das[951] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files 4a» 18-18 inter are 1% sancidate defanlt, U - por-user static route © - OD8, F - periodic downloaded static route 128.0.0.0/24 i eutnetted, + subrats B128.4.1.6 [200/0) vie 120.100.2.4, 08:27:40 190.1.0.0/24 i» sutnetted, 1 subrats BR 190.4.4.6 [200/8) vie 120,100.2.4, 08:27:10 0/24 is subnstted, 1 subnets 200.4 [200/0] vie 120.100.2.1, 09:27:10 0/24 16 subnettes, 3 suDnets |179/204«4] via 160.100.9.6, 01:22426, Vianaes 1s directly comected. Viens |170/2848%6] vie 150.100.3.8, 01:22:28, VLan3oo 0/8 is variably cubnettec, 18 subnets, 2 miske 25. 0/24 [178/264416] vie 180-109.9-6, 01:16:06, Vande 8.0/4 (00/120616] viz 458.400.9.8, 01:99:90, Vian300 5/24 [90/190816] vie 150.100.3.9, 91:88:07, VLan3e@ 24 [00/190518} via 150.100.9.10, 0 5/24 [90/156416] vie 150.100.9.6, 81:93:11, VLansee [oo/tee%6} vie 450.100.2.5, 01:29:44, vaana0e [o0/190816} vie 150.100.8.5, 91:88:15, VIan300 [poy 90816] vie 150.100.3.6, 91:88:15, VLan300 4s directly comacted, Loopback [n70/264218} via 190.180.9.8, 01:22:2r, vise [r70/204486) via 150.100.9.6, 01:22:27, viaa00 [170)284816} via 150.100.8.6, 01:22:27, Viasee -45.0)24 [00|28416] vie 150.100.3.5, 81:83:17, VLan300 129, 100.48,0/24 [90/284%6] vie 150.100.3.6, 01:93:17, VLanse0 RRS (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe das[982] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files oe 24. 0)24 [170/28416] via 150.100.3.6, 01:22:27, Vian3e oe « oe 01:22:91) Vianaoo om o o o 24 [99(199515| via 150.109.3.40, 61:93:07, vianse ° [Woy teb410] vie 409.100.0.6, 94:00:17, \1an000 [oo 156416] vie 150.100.3.5, 91:98:17. Vian300 ° [90190216] vie 450.100.3.5, 91:88:22, vian300 o [voy 190816] vie 450.100.3.6, 91:88:22, V1an300 De [170/204016} vin 150.100.9.6, 01:22:52, Vise om [170/204446 via 150.100.2.6, 01:22:99, via00 oe [170/284816} via 150.100.8.6, 01:22:32, Viasee o 24 [00/284%6] vie 150. D129. 100.48.0/24 [99/2846] vie 150.109.3.6, 01:55:22, VLanse0 oe 24.0)24 [479/264486] via 160.100.9.6, 01222299, Vian oe 128.8) [170/284418] via 1% oe 128.4) 24 [170/288] via 150.100.3.5, 01: He sh ip bap FIB-failura, § Stale Origin coos: i - 16?, € - ESP, 7 - insomplete (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasLab 1 Router and Switch Configuration Files Netvork 253126.4.4.0724 soms0.1 1.0724 ue sh Sviteh 4s in apis Rost bride for: VLAIOOGY, YLANOOGL, VLANEOKS-VLAN@NKS, VLAN: Porefart Osfault Loepauara perwwit Hoxt Hop 12% pret node POU Guerd Heft POU Falter Default UplinkFast BacktoneFest vat vimio024 vumious ume 400.2.1 209.0/24 120.100.2-4 ning-tree suanary [959] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Wetrse LacPr weight Pet 6 disables 4s disables 4s disables 4s disables 4s disables Configured Pathecet aothod used is short ° ‘ 5 5 ° ‘ 4 4 ° ‘ a a ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme dasCCIE Routing and Switching Practice Labs Lab 1 Router and Switch Configuration Files Switch 2 Initial Configuration 9128 sh ran Building configuration current eunriguretion : version 12.2 fo service pa service tinasteaps dibup uptine ro service pascwerd-snervetion ' hostnane 2 fonsble password cisoo 1 rer-nodel 4p subnet-z0r0 no ip domein-leohip [954] Martin Jamas Duggan, COE No, 7042 2008 cisco systems, Alright resend, This pubaten spotted by copyright Plesoe cs page Si ermere desi[1985] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files no file verify auto spanning-tree noe prst spanning-troe extend syston 35 Vian intemal allocation polioy sevsncing 1 ven 4 1 interface Loopback 4p address 120.100, 200,300 1 255.256.255 ntorface FastCthernsto/t sonitencort ascese vian 100 conitenport mde acovss ' ntorface FastEthernst0/2 coritenport mde acovss ' ntorface Fastétrernste/s interface FastEtharnst0/¢ ' intorface FastEthernsto/s sutenport ascese vian 308 (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe das(956) CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files intorface FastEthornst0/s conitengort ascese vian 300 soratenport mde access interface Fastétharn ' interface Fastétharn interface FastEtharne ' interface Fastétharn interface FastCtharnsto/tt 1 Sntarface Fastétharn ' interface Fastétharn ' Sntarface Fastétharn interface Fastétharn ' interface Fastétharns or 0/8 2 2/10 2/12 2113 ore on 2118 on7 2/18 (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasLab 1 Router and Switch Configuration Files intorface FastEthernsto/10 ‘rdtenport trunk ensapsulation dottq oratengort mde trunk intorface FastEthernst0 20 ‘rdtenport trunk envapsulation dottq coritenport mde trunk Anterfioe FastEtharnat0/24 ‘rdtenport trunk envapsulation dotta conitenport mde trunk ntorface Fastbthernste/22 soritencort trunk ensapevlation dotta conitenport mde trunk ' Antorface Fast thernst0/29 conitenport mde trunk ' Antorface FastEthornste24 coritencort mde trunk ' intorface GigibitE thocneto/? sutenport mde dynante desirabie intorface Gigibitethomneto/? conitenport mde dynanic desirable ' (©2008 ceo systems, [987] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Inc Aleights sere ris pbtzatin sprtecteaby copyrght Peso oe Faye St forme das[958] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files interface Vlant no ip aderass 7 10.2.8 255.255.256.0 ip http securs-cerver ' contrel-plene 1 1 pessword eisso Aegging syncirorous Aegin ine vey 84 no Loain Line vty 515 pesswor exsco Aegin transport input telaot 1 2008 cisco systems, Alright resend, This pubaten spotted by copyright Plesoe cs page Si ermere desiCCIE Routing and Switching Practice Labs Lab 1 Router and Switch Configuration Files Switch 2 Final Configuration ve sh ren Building configuration current euntiguretion : version 12.2 fo service pa service tinastenps dsbup uptine ro service pascuerd-aneryetion ' hostnane 92 fonsble password cisoo ' rer-nodel 4p subnet-z0r0 4p routing 4p dhep srooping vlan 300 4p dhep stooping ' [989] Martin Jamas Duggan, COE No, 7042 2008 cisco Systems, Alright resend, This pubatens protected by copyright Peso ss page Skt ermere desi[380] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files 1 1 forratsable recovery sauce Link-Lap port-chanrel Leae-balance dst-rac no file verify auto 1 spanming-traa extend system 3B spanning-tree vien 1,308 priority 28672 ' ian antemal etlocation poiisy astoncing Ven 45-46, 109,200, 3 1 1 1 Snterface Port-channslt ‘rstenport trunk envapsulation dotta 1 Antarface Port-channsl2 ‘rdtemport trunk envapsulation dotta suitenport mde trunk (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[951] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files interface Port-channel3 ‘rdtenport trunk ensapsulation dottq oratengort mde trunk interface FastEthernsto/t onitenport ascese vlan 100 onitenport mde access Anterfare FastEtharnet 0/2 onitenport ascese vian 200 conitenport mde access ntonface FastCtharnst0/ 1 interface FastEthernst0/é ‘rstemport trunk envapsulation dottq 1 intorface FastEthernsto/s natenport ascete vian $00 1 intorface FastEthornst0/s onitenport ascese vian 300 suitenport mde acovse intorface Fastéthernst0/7 1 ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme dasLab 1 Router and Switch Configuration Files interface Fastétharn 1 interface FastEtharns ' interface Fastétharns 0/8 0/9 2/10 on switoncort mde acooss spanning-tree pertfast 4p verity source 4p chop snooping Lint rate 18 interface FastEtharnst]/12 onitenport ascese vlan 300 onitenport mde acovss ip verify source 4p chop snooping Linit rate 18 1 Antorface FastEthornste/13 onitoncort mde acovss spanning-tree pertfast 4p verity source 4p chop snooping Linke rate 18 intorface FastEthornsto/t4 conitenport ascese vian 300 conitenport mde acovss [982] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 2008 cisco systems, Alright resend, This pubaten spotted by copyright Plesoe cs page Si ermere desiLab 1 Router and Switch Configuration Files spanning tres pertfast 4p verity souree 4p chop snooping Lint rate 18 intorface FastEthornste/ts sonitenport ascete vian 300 onitenport mde access 4p verify souroe 4p chop snooping Linit rate 18 1 amtorrace Fastetrornste/16 oritoncort mde acovss spanning-tree pertfast 4p verity souree intorface FastEthornsto/17 sonitenport ascete vian 300 soritenport mde acovss sp verify source 4p chop snooping Linit rate 18 1 antorace Fastetrernste/18 intorface FastEthornsto/10 ‘rdtenport trunk ensapsulation dottq (©2008 C20 systems, [1389] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Inc Alights sere ris pbtzatin is prteceaby copyrght Peso oe paz 5 forme das[984] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files coritenport mde trunk channal-group 1 mode on ntorface FastEthernst]/20 soritengort trunk ensapevlation dtta conitenport mde trunk channal-group + mode on Interface FastEtharneto/24 ‘rdtenport trunk envapsulation dottq conitenport mde trunk cranns-group 2 mode on interface FastEthernst]/22 ‘rdtenport trunk envapsulation dottq conitenport mde trunk intorface FastEthornst]/23 ‘rdtenport trunk envapsulation dottq sonatenport mde trunk 1 intorface FastEthornsto/24 ‘rstenport trunk envapsulation dotta suatenport mde trunk 1 intorface GigibitEthocneto/* onatenport mde dynamic desirable (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das(935) CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files interface Gigibitethomneto/2 onitenport mde dynanic desirable no ip aderass shutdmn 1 no ip adress ' interface Vana 3p a8ire66 150. 100.9.8 255.255.26. network 120.100.8.1 0.6. rnetork 150,100.2.8 0.6, 4p classless Ap http server 4p http securs-cerver 1 1 contel-plane Lire con @ fvso-timeout 0 @ pessword cisco ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme dasCCIE Routing and Switching Practice Labs Martin Lab 1 Router and Switch Configuration Files Aegging syncirorous Aegin tue vey 04 Line vty 515 pessword cisco Ieain trancport input teleet 1 vee eh ver Ciszo 108 Software, 63560 Software (C3580 TPSERVICESKO-N) , Version 12.2(25)8EE, RELEASE SOFWARE (fo2) Copyright (2) 1066-2008 by Cioce Systane, Ino. Comiled Fri 82-Feb-08 €7:28 by antonino nage toxt-bas 105000 OW: Bootstrap program 36 C368 boxt loader BooTLOR: C2560 Boot Loacer (C2550-NBDGT M) Version 42.2|26r)6EH, AELELSE SOFWARE (fe) 912 uptine is 2 hours, 29 minutes fysten returned 20 ROM Ly power-on System Smage File 42 "Flach: (9550. ipaurvScosk0 az 129-95. SEF Hat (936) Jamas Duggan. CCIE No, 7042 2008 cisco systems, Alright resend, This pubaten spotted by copyright Plesoe cs page Si ermere desi[387] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files ‘Tis product contains cryptographis features and is subject to Unite® States and losel country laws governing inport, axport, transfer a8 lise. Delivery of cisco cryptographic products doss nat ply thind.party authersty te import, oxport, distribute on vso encryption Inportars, exporters, distributors and users are responsible fer compliance with U-8. ane lozal country avs. By using this product you fgrve to conply with applicibla Leve and regulations, If you are unable | summary of U.S. Lave govarning Cisce eryptogrephic products nay be found at hetps/w.cisco.conlwul/axport/erspte/tol/ tary. tal exporticisco. com. ce pleece contact us by sending ameil te ceis2o ¥S-C3580-20°8 |PonerPL406) processor (revision NB) with “18734K)12230K byt Lact raeet from power-on 8 Virtual Ethernet interfaces 24 FastEtternst antertaces ‘The passwerd-rocavery mechanism is eneblod. 1K bytes of Flesh-simLsted non-voletile configuration watery. Povor supply pert nusber + 941 -0020-04 Motherboard sardel number caTeosious Power supply serial amber: DTH0STe0NO (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe dasLab 1 Router and Switch Configuration Files Model cavieion number : Motnerdoard revision nuxber Sytem corsa munbor : op Assembly Fart Hunber Top Assontly Aovision Nunbor Version 1D Hardware Board Revision Mimber + + 4 a s.cose0-2475 128 sh ip route Codes: © - comected, § - static, D - ELGRP, &x'- ELGHP external, 0 Et - OSPF oxternel type 1, 4-18-18, ou - 18-18 sumary, Lt ia. 15-18 inter aren, * Gatoway of last resort is not set [388] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 © 1 4100-25061-3 0 vos oo ‘version sw mage 12.2(25)8E 95t0-TPSEIVIOESKE-M H-RIP, M- nobis, B - SoP O3PF, IA - "OSPF anter area O5tF external type 2 © - EP 18-18 Leval-1, L2 - 18-18 level 2 candidate default, U - per-user static route (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[339] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files Rare RRR 150.1 190. 0.0/24 is eubnsttod, $ our © [r70284a] via 16 (@ is cirestiy connected, Viana 0.4.0 [170/284446] via 160.100.3.6, 01:29:67, VianaW0 5/8 As variably subnectec, 16 subnets, 2 mecks 25.0/24 [170/264418] via 150.100.3.6, 01:17:98, Vianaeo 0/24 is directly comected, Loop 0/24 [00/198616] vie 128.109.9.0, 01:94:98, VLend00 20848) via 150.100.2.40, 01:24:84, Vian900 156216] vie 150.100.8.6, [poy 1s6416] vie 150.100.3.5, [voy 1s0e16] vas 150.100.3.5, {007 +200%6) vie 400.100.0.6, [00 190816} vie 150. 01:28:57, Vienaoo [170/204«16} via 150.100.9.6, 01:29:50, Vise 45.0)24 [90/29416] vie 450.400.9.5, 01:94:88, Viar900 24 [99/2818] vie 158. 24 [170/264418] via 15 129. 190.128.4/32 [170/25448] via 160.100 120. 190.129.4/24 [470/294416] via 160-4 8.6, 91:84:49, VLend00 818, 01:23:50, VIan3 5, 01:28:66, Viansve Switch 3 Initial Configuration 91" sh ren Buttding contiguratin Current centiguretion : 1002 bytes 2008 cisco systems, Alright reseried, This pubatens protected by copyright Plese so page Si fermere desi370} CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files version 12.2 fo service pa service tanasteaps debug upcine ro service pascwerd-sneryption ' hostnane 2 10 loaning console foneble password cisoo ' vtp mode transparent 4p subnet-z0r0 no ip domein-leohip ro file verify auto spanning-tree noee prst spanning-troe extend syston iB 1 ven 390 1 2008 cisco systems, Alright resend, This pubaten spotted by copyright Plesoe cs page Si ermere desi[arty CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files interface Loopback 4p address 120.100. ntonface FastEthernste/t 1 intorface FastEthornst0/2 1 1 intorface FastEthernsto/ ' amtorrace Fascetrarnste/s ntarface FastEtharnst0/6 ' intorface Fastéthernst0/7 interface FastEthannatO/® ' intorface FastEthornst0/o ' ntonface FastEthernsta/10 1 intorface FastEthernst0/tt ' amtorrace Fastetrernste/12 intorface FastEthernsto/13 1 1 255.256.255 (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe dasLab 1 Router and Switch Configuration Files intorface FastEthornsto/t4 1 amtorrace Fastetrornste/1s intorface FastEthornsto/16 ' intorface FastEthernsto/17 interfioe FastEtharnat@/se ' intorface FastEthernste/10 ‘rstenport trunk envapsulatson dotta ' intorface FastEthornst]/20 ‘rstemport trunk envapsulation dottq intorface FastEthernst0/2t ‘rdtenport trunk envapsulation dotta conatenport mde trunk ntarface FastEthernst]/22 ‘rdtenport trunk envapsulation dottq conitenport mde trunk interface FastEtharnet0/29 ‘rdtenport trunk ensapsulation dottq conitenport mde trunk ' (©2008 ceo systems [972] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Inc Alights sere ris pbtzatin is prtecteaby copyrght Peso see Faye St formic dais[373] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files intorface FastEthernst0/24 ‘rdtenport trunk ensapsulation dottq oratengort mde trunk intorface GigibitE thoeneto/* ' intorface Gigabit thamneto/2 interface Viant no ip aderass shutdmn 4p address 150.100.8.9 265.255.256. 1 ip classless ' 1 1 1 1 Lire con @ Aegging syncirorous Aegin Lire vey 04 ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme dasLab 1 Router and Switch Configuration Files Line vty 618 pesswora exsco cain trancport input telaot 1 [ara] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Switch 3 Final Configuration 912" sh ren Building configuration Curent configuration £ 9906 bytes 1 version 12.2 no service pa service tinastancs log untine no service pascwerd-aneryption ' no logning console foneble password cisoo ' vito donain core 2008 cisco systems, Alright resend, This pubaten spotted by copyright Plesoe cs page Si ermere desi[375} CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files tp mode. transparent 4p subnet-z0r0 4p rourang 1 4p dep stooping vian 300 4p dhep stooping orndisable recovery interval 35 port-chanrel Leae-balance dst-ac no file verify auto ' lan intemal elevation policy ascending 1 1 1 interface Loopback Ap address 120.100.9.1 280.208.208.8 Snterface Port-channslt ‘rstenport trunk ensapsulation dotta conatenport mde trunk (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe das[376} CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files interface Port-channsl2 ‘rdtenport trunk ensapsulation dotta oratenport mde trunk Sntarface Fastétharn ' interface FastEtharn interfioe Fast Ethane ' interface Fastétharn ntonface Fast tharnst0/e 1 interface Fastétharn ' Sntarface FastEtharn ' sntarface Fastétharn interface Fastétharn ' intorface Fastéthernsto/tt ‘sutenport ascese vian 300 spanning-troe pertfast 4p verity souree 4p chop snooping Linit rate 1@ on or 2r8 0/8 2/8 on 2/8 0/0 2110 (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[37] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files intorface FastEthornsto/12 conitengort ascese vlan 300 oratenport mde access 4p verity souree 4p chop snooping Linit rate 18 1 ntorface Fast thernste/19 ‘ustenoort access vlan 300 conitenport mde access spanning-tree pertfast 4p veraty source 1 intorface FastEthornsto/t4 conitenport ascese vian 300 4p verity souree 4p chop snooping Linit rate 18 1 ntorface FastEthernst/1s sonitencort ascese vian 300 sonitenport mde acovss spanning-tree pertfast 4p vertty source 1 intorface FastEthornsto/18 ‘natenport ascese vian $00 ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme dasLab 1 Router and Switch Configuration Files conitenport mde acovss spanning-tree pertfast 4p veraty souree 1 intorface FastEthernsto/17 conitengort ascese vian 300 sranning-tras port fast 4p verity souree 4p chop snooping Linit rate 18 ntorface Fastbthernste/10 1 intorface FastEthernsto/10 ‘rstenport trunk envapsulation dottq 1 intorface FastEthernst]/20 ‘rstenport trunk envapsulation dotta channal-crous + mode on ' interface FastEtharnst0/2t ‘dtenport Crunk envapsulation dotta channal-group 2 mode on ' CCIE Routing and Switching Practice Labs [ara] Martin Jamas Duggan, COE No, 7042 2008 cisco systems, Alright resend, This pubaten spotted by copyright Plesoe cs page Si ermere desiLab 1 Router and Switch Configuration Files intorface FastEthernst0/22 ‘rdtenport trunk ensapsulation dotta sratengort mde trunk 1 intorface FastEthornst]23 ‘rdtenport trunk ensapsulation dottq shutdoen 1 intorface FastEthornst]/24 ‘ratenport trunh envapsulatson dotta shutdwn ' interface Gigibit€ thocneto/* interface Gigubitethernst/? ' interface Vlant no ap aderass 1 interface Vand 4p address 150.100. retwork 129.100.9.1 0.0.0.0 network 150.100.2.9 0.6, no auto -eummiry 9 258.286.255 (©2008 C20 systems, [379} CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Inc Alights sere ris pbtzatin is prteceaby copyrght Peso oe paz 5 forme das[1330] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files 4p classless 4p http server ap nttp securs-cerver 1 cont -plene 1 Lire con @ pesswora exsco coin Line vty 04 no Login pessword cisco Aegging syncirorous aegin 1 nd Clase 10S Sofeware, C2560 Suftuare (CS5K0.TPSERVICESID-M) , Version 49.2(25)SEE, RELEASE SOFWARE (2) Copyright (2) 1985-2008 by Cisco Syetens, Ino. (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[331] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files Compiled Fr 89-Feb-¥8 7:08 by antonsno nage toxt-base: 0100005000, data-base: O:01705000 BOGTLOR: C3589 Beot Loacer (09550-KBOCT-M) Version 12.2|25r)SEA, FELEASE SOFWARE (fe) Sytem raturnad to ROM by powaron System image File is "flash: /03550-ipsorvicosh9-1z 122-25.SEE.bin* Stetes and local courtry lavs gavernira inport, sxport, transfer a8 Use. Dalivery of Cisco cryptographic products doss nat inply thind-party authority te imort, export, distribute or use encryption compliance with U8. ane 2osal country lave. Sy using this product you ‘gree to conply with applicibla leve and regulations, If you are wable +0 comly witn U.S. and Locil laws, return this prodict insedictely. http: /ww.cisco.coniwul/axoort/erspte/ tol tara. tal If you reqiire further essistance plesse contact us by sending onail to exporteciseo.com. cis20 ¥S.C3689-208 |PonerPL40s) processor (revision NO} with *18734K)12230K byte of wenory. Prosestor board ID CATOSSSNALB ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme dasLab 1 Router and Switch Configuration Files Lat from gowsr-on 2 Virtual Ethernet interfaces [1932] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 ‘The passwerd-rocavery mechanism is eneblod. 51K bytes of Flesh-simlated non. Motherdoard asseubly nunber = Povor supply art nunber Motherboard ssrdel number over supply sersal wmeer = Motnerdoard revision nuxber Mods number System ceria nuaber : Version ID CLEL Code Mmber Hardware Goard Revision Number fiten Forts odel Configuration register ie OF olstile configuration astory. 79-673.08 4} -9029-04 caTeogseocy 1 -cas00-2486-6 caTeoastate ves cow 00K 01 Version SH nage 12.2(20)st (8060 -IPseRvI0ESKe ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme das[1939] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files HGF sh ip route (Codes: © - comected, § - static, R- RIP, M- mubile, B - S6P 1 - OSPF oxtornel type 1, &2 - OSPF axternal type 2, & - ESP i 18S, ou - 18-18 sumary, L1 - 18-15 lovel-1, 12 - 15-18 Jovel-2 ia + 18-18 inter are 1, - sancidate defanlt, U - por-user static route Gatoway of Last resort is not set 0/24 16 subnsttes, 5 supnets [179/204e46} via 160.100.9.6, 01:26:04, Vianaeo 1s directly comected. Viens |170/2848%6) vie 150.100.3.8, 01:25:04, VIan3oo 0/8 ie variably cubnettec, 18 subnets, 2 micke -25.0)24 [178/264416] vie 160-109.9-6, 01:18:49, Vande 6.0/4 (00/190616] viz 458.400.9.8, 01:95:44, Van300 9/24 is directly cormected, Loopback® 24 [00/190518} via 150.100.8.10, [Wor 156416] vie 150.100.5.6, 81:96:44, VLansee [oo/+ee416] vis 450.100.9.5, o1;26:44, V2an000 [90/190816} vie 150.100.3.5, 91:96:44, VIan300 [90190816] vie 450.100.3.6, 91:96:44, V1an300 [90/190816] vie 450.100.3.7, 91:96:48, VLan300 [1707264216 via 190.180.9.8, 01:29:26, vise [r70/204046) via 150.100.9.6, 01:26:26, via00 [170)284818} via 150.100.8.6, 01:25:28, Viasee -45.0)24 [00|28416] vie 150.100.3.5, 81:95:45, VLan300 129, 100.48,0/24 [90/284%6] vie 150.100.3.6, 81:95:48, VLanJe0 RRS (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe das[934] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files ox 19. Dx 10. 24.0)24 [170/26ua18] via 10. 125.8/32 [170/2844%6] via 16e. 123.0/ 24 [1Yoy2saaie] vaa 18e. Switch 4 Initial Configuration Boning enfguetion Current configuration : 1003 bytes 1 version 12.2 no servace pab service tinostenps log uptine no service passuerd-sneryption 1 ' no logping console foneble password cisoo wtp dovain OotE ‘tp mods. transparent 4p subnet-z2r0 1 1 (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[938] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files 1 1 no file verify auto spanning-tree noe prst spanning-troe extond syston iB Vlen intemal etocation poliy ascending 1 1 interface Loosback® 4p address 120.100, 1 ntorface Fasttthernst0/t intorface FastEthernst0/2 ' ntorface Fastétrarnste/s interface FastEtharnst0/¢ ' intorface FastEthornst0/s 4 255.255.255.0 interface FastEtharnut O/B ' intorface Fastéthornstey7 ' ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme das(936) CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files intorface Fastéthornst0/s 1 antorrace Fastetrarnstey intorface FastEthernsto/10 ' intorface FastEthernst0/tt interface FastEtharnat@/42 ' intorface FastEthornsto/13 ntorface Fastbthernste/t4 1 intorface FastEthornsto)ts ' interface Fast thernste/16 intorface FastEthernsto/17 ' ntorface FastEthornste/18 interface FastEthernst]/10 ‘rdtenport trunk envapsulation dotta coritenport mde trunk interface FastEtharnet0/20 ‘rdtenport trunk envapsulation dotta coritenport mde trunk ' ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme das337) CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files intorface Fastéthornst0/2t ‘rdtenport trunk ensapsulation dotta oratenport mde trunk intorface FastEthernst0)22 ‘rdtenport trunk envapsulation dotta coritenport mde trunk interface FastEtharnet@/29 ‘rdtenport trunk envapsulation dottq conitenport mde trunk Antorface Fatbthernsto/a4 conitencort trunk ensapevlation dtta conitenport mde trunk ' interface OigabitE ernetO/! interface Gigibitethomneto/2 ' sntarface Vlant stutdon ' Sntarface Vana Ap Address 190-100.9.10 208.285.258.8 ip classless 4p http server (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe das[938] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files 4p http sscurs-cerver 1 contrel-plane 1 1 ‘sesc-timeout 0 @ pessword cisco Aegging syncirorous aegin ine vey 84 no loain Line vty 515 fac-timeout 0 Aegin Switch 4 Final Configuration Botting enfguatin. Curent centiguretion + 8400 bytes 1 (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasLab 1 Router and Switch Configuration Files version 12.2 fo service pa service tanasteaps debug upcine ro service pascwerd-sneryption ' hostnane 94 10 loaning console foneble password cisoo 1 ‘te moto transparent 4p subnet z0r0 4p routing 4p dhep stooping vlan 300 4p dhep stooping u 1 1 1 port-chanrel Leae-balance dst-ac no file verify auto spanning-tr2e noee prst [.339) CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 2008 cisco systems, Alright reseried, This pubatens protected by copyright Plese so page Si fermere desi[330] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files spanning-troe extond syston iB 1 vin antemal etlocation polis astoncing vlan 9h 1 1 4p adiness 120. 100.10.1 255.985.258.0 1 Antarface Port-channslt ‘rstenport trunh envapsulatson dotta 1 Antarface Port-channsl2 ‘rdtemport trunk envapsulation dotta intorface FastEthernst0/t ' ntorface Fastétrernste/2 interface FastEtharnst0/a ' intorface FastEthernst0/é interface FastEtharnet 0/5 ' intorface Fastéthornst0/s ' ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme das[291] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files intorface Fastéthernst0)7 1 amtorrace Fascetrarnsto/s intorface Fastéthernst0/o ' interface Fastéthernsto/10 interface FastEtharnato/t4 sonitenport ascese vian 300 conitenport mde acovss spanning-tree pertrast sp verify eource 4p chop snooping Linit rate 18 1 intorface FastEthornsto/12 spanning-tree pertfast 4p verity source 4p chop snooping Linit rate 1@ ntarface FastEtharnst]/19 sonitenport ascese vian 300 sonitenport mde acovss spanning-tree portrast ip verify course 4p chop snooping Linit rate 18 1 (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe das[392] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files intorface FastEthernsto/t4 conitengort ascese vian 300 oratenport mde access 4p verity souree 4p chop snooping Linit cate 18 1 interface Fast thernste/1s ‘iitenport asorse vlan 900 onitenport mde acovss spanning-tres pertfast ap veraty souree 1 intorface FastEthornsto/18 sonitenport ascete vian 300 4p verity souree 4p chop snooping Linit rate 18 1 ntorface FastEthernsto/t7 sonitencort ascese vian 300 coritenport mde acovss spanning-tree pertfast ap vertty source 1 intorface FastEthornsto/18 ' (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[aa] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files intorface FastEthornste/10 ‘rdtenport trunk ensapsulation dotta ratengort mde trunk 1 intorface FastEthernst]/20 ‘rdtenport trunk ensapsulation dotta hanna eros + mods on 1 interface FastEtharnst0/2t ‘rstenport Crumb envapsulatson cotta channal-crous 2 mode on ' intorface FastEthernst0/22 channal-group 2 mode on 1 Antorface FastEthornste)23 soritencort mde trunk shutdmn, ' ore coritenport mde trunk stutdmn, ' 2008 cisco systems, Alright reseried, This pubatens protected by copyright Plese so page Si fermere desi[394] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files interface GigibitE thocneto/* 1 amtorrace cigibitetnamneto/2 interface Vlant no ip aderass stutdmn Anterfane Vian00e 4p address 150.100.9.10 255.255.255.0 1 rover exgrp 1 network 150.100.2, no auto-eummiry ' Ap http securs-cerver u 1 contel-plene 1 1 pessword cisco Aegging syncirorous Aegin ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme das[395] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files Line vty 04 no Login ine vey 518 pessword cisco Aegging syncirorous Aegin 1 nd Ciese 106 Goferare, 2660 EoFewere (C2560 IPEERVICEEKO M), Vor RELEASE SOFTWARE (2) Copyright (=) 1985-2008 by Cisco Systens, Tho. Cowpilad Fri 92-Feb-08 €7:98 by antonino son 12.0(25)00C, OW: Bootstrap program is C3680 boxt loader BOGTLOR: C3589 Beot Loacer (03550-KBOCT-M) Version 12.2|25r)SEA, FELEASE SOFWARE (te) 1 uptine 1s 2 hours, & minutes System returned to ROM ty powar-on System imego File is "flash: /03550-ipsorvicosh9-1z 122-25.SEE.bin* Tis product contains eryptogrephis features and is subject to Unite® States and local country lavs governing inport, axport, transfer a8 (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe dasCCIE Routing and Switching Practice Labs Martin Lab 1 Router and Switch Configuration Files Delivery of Cisco cryptographic products doss nat inply thind-party authority te import, export, distribute or use encryption Inporters, exporters, astributors anc users are responsible ter cowLianoe with U-8. ane 2osal country lave. Sy veing thie product you agree to conply with aplicible Levs and regulations. If you are wable 0 comply witn U.S. and Loesl laws, return this prodict inmedistely. netps ini. osc0.conlwwl/ ex poet/ersptel tol sary. heal If you reqiirs further essistance please contact us by sending onail to exportecisco. con. eiseo ¥S-C3580-208 |PonerPL40E) processor (revision NO} with *18734K)12230K bytos of wenory. Provestor board 1D CATOCOSN2K 24 FastEtternst interfaces 2 cigedit Ethernet interfaces The pasewerd-recevery mechanisw is enebled. Stik bytes of Flesh-simated non-volstile configuration watery. aes ethermst IAG Address $8:62:85:A4:00 Motherdoard ascoubly nusbor —: 78-0873-06, ower supply pert umber 1 941 -9029-08 Power supply serial amber = OTHODS1EA22 Model cavieion number © Motnerdoard cevision nurber 2 A® [996] Jamas Duggan, CCIE No, 7042 ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme dasLab 1 Router and Switch Configuration Files Mode unter : System serial nuaber Top assembly Fart nunber Version ID CLET Code Nmber Hardwr foand Revision Numer friten Forts odel Configuration register ie OF D - EDORP, © - ELGAP axtornal, 0 OSPF SSA axtarvel type 1, M2 Ms Et = OSPF axtarnal type 1, 4a + 18-18 inter are © - 008, F 180. 190. 0724 ic subnstted, 2. oe [170)2848%6] vie 16 © 1991100.5.0 ss cirectly comactad, Viana [397] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 w-cas00-2486-6 caTeoaston ves cou 00K 01 Version SH image 12.2(25)886 9880-IPSENVICESRE-M OSPF, TA - OSPF inter area (SPE SSA oxtarnal typ 2 08h external tyye 2 & - ESP candidate default, U - per-user static route e periodic dovntoaded static raute 2 subnets 3.8, 01:25:57, Viensoo ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme das[398] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 1 Router and Switch Configuration Files |170)2848%6] vie 150.100.3.8, 01:26:57, VIan3oo 0/8 is variably cubnettec, 16 subnets, 2 micks -28.0)24 [170/28418] via 150.109.3-8, 61:19:85, vianse £.0/24 [00/120616] vie 458.409.9.6, 01:96:26, \Lar200 80/24 [90/190816] vie 150.100.3.9, 01:98:35, VLan3e0 24 is directly cennacted, Loopback® 40/24 [00/1584%6] vie 150.100.9.6, 01:98:34, V1an300 [907120410] vie 429.100.9.5, 91:96:94, v24r000 [vo/:908%6] via 450.1€0.9.5, 91:98:94, vIan000 [90190816] vie 450.100.8.6, 91:98:34, v1an300 [v0/190816] vie 450.100.3.7, 91:98:35, vLan300 254218] via 150.109.3.5, 61:28:58, Vase 204416] via 160.100.9.6, 01:26:60, Vieoee 284418} via 150.100.3.6, 01:25:50, Vlado 28418] vie 150.100.3.5, 91:98:35, Vande 28416] vie 150.100.3.6, 01:98:35, Vendo 24 [170/20t416] vie 160.109.9-6, 01:22:60, vianoe 123.2192 [470/2244:6] via 150.100.9.5, 64:95:56, Viana RET RRR é (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe das[339} CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files Appendix B Lab 2 Router and Switch Configuration Files Router Configuration Files Router 1 Initial Configuration ie sh run Curent configureti 1 service tinastenrs dhbup datetine asec service tinastenps log catotine move ho service pascnerd-aneryption boot start ' no logping console foneble password cisoo 1 recourse polisy 1.2008 cisco Systane ne. Alrights reserved This blaine rose copysgn Pees oe page St fro dt[400] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files nowory-si2e ionon 10 ip cof 1 1 no ip domein Leohip voiee-sard 0 no dep fara 2008 cisco systems, Alright reseried, This pubatens protected by copyright Plese so page Si fermere desi[at] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files 1 1 4p address 120.100. 1 interface Loopback2ss 1 intorface Gigibitethamneto/0 no ip aderess 1 258.286.255 speed auto nedie-type ras negotiation ute interface Gigubitethernst0/* 4p address 120.100.100.1 255.256.285. aepler auto speed auto H interface Seriele/o Ap address 120.100. 123.1 259.288.280.0 rame-reley nap ip 120.100.123.3 188 brosdcast no frame-reliy inverse-arp ' ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme dasLab 2 Router and Switch Configuration Files interface Sorial@/0/1 no ip aderass 1 1 ip http server svso-timeout 0 @ pessword cisco Acgging syncirorous [402] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 2008 cisco Systems, Alright resend, This pubatens protected by copyright Peso ss page Skt ermere desi[409] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files Aegin stopbite 1 Line vey 04 pessword cisco Iain transport input teleet 1 webvpn context Default_context feel authenticate versfy all H 1 nd Router 1 Final Configuration Building configuration Current cenfiguretion : $282 bytes varsion 12.4 (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasLab 2 Router and Switch Configuration Files service tinostenge dsbup datetine « CCIE Routing and Switching Practice Labs service tinsstenps log catotine move no servaoe pascwera-sneryption ' boot -start-nacker ft boot -end-aarksr ' oneble password cisoo 1 recourse polisy 1 1 1 ro ip domein Leohip 4p multicast -routing 4p multicast nearthext 228.225. 4p reflexive-List tinsout 10 {py6 unioest routing voive-card 0 [4p] Martin Jamas Duggan, COE No, 7042 ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme das[05] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files no depfarn ' 1 1 1 1 1 1 1 1 1 1 1 1 1 1 Sntarface Tun no Ap aderass pu adcrone 2007 =018:00544 4/88 4gv6 vip CCIE erable ‘tunnel. ccurcs Seréal9/0/0 2008 cisco systems, Alright resend, This pubaten spotted by copyright Plesoe cs page Si ermere desi[4n6} CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files tunnel destination 12 tunnel meds ipvip 4p address 120.100.1.1 265.255.256. 4p pin cparss-dense-moce 1 4p adiness 150.101.1.4 255. 255.256.0 1 interface Loopback2ss Ap aires 200.200.200.200 255.256. 285.0 intorface Gisabitethomneto/0 no ip aderess shutdmn 190.129.9 edie-type ras negotiation ute ' ntonface Gigubste noenetO/* 4p address 120.100.100.1 255.256.25. aepler auto speed auto edactype ras 4gv6 address 2007 :015:00: 10 4gv6 vip CCIE erable 1 (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe das[a7] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files interface Seriele/o 4p address 120.100.123.1 255.256.286. 4p acs9ce-group FILIER-IN in 4p hold-tine eierp 1 200 4p pin cparss-dense-moce orcapsuletion frane-elay frame-relay nap ip 120.100.429.2 109 brosdoast frame-reley nap ip 12 no frame-roliy saver Antorface Goriale/o/s no ip aderass shutdown ' network 120,100.100.0 €, retork 120,100.429,0 €.0.0.255 network 150.101.1.0 0.0.0, 255 ' router bgp 100 bgp router-id 120.100.1.1 bop og-reagibor-cnanges neighbor 120.1 neighbor 120.1 ' 3.1 transport comection-node passive 1 updats-soures Leopbuck® (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[409] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files actoe fanily sipvs neighbor 120.1 ro auto-cuamiry snst-addreos-fanily ' 1 no ip nttp secure-server 4p pin serd-rp-amnounce Loopbask® scope 3 group-List GROUPS permit 225.226, permit 225.226, permit 225.226, e-List extended FILTER IN permit icmp any any permit eigrp any any permit 41 host 120.108.128.8 host 120.100.125.4 fvaluste DMUAIC-TOP Ap access-11s¢ extended FILTER UT ' scovss-List 1 permit 120.100 aocaes-List 1 pormit 128.109. 120.0 4.4 09 bop ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme das[a9] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files snap carver snap-sorver host 120.1 {pv6 router ip (OIE ' 1 mctoh ip adress + able traps Spaultioast 129 public Aegging syncirorous Aegin stopbite 1 2008 cisco systems, Alright resend, This pubaten spotted by copyright Plesoe cs page Si ermere desiLab 2 Router and Switch Configuration Files Line ax @ stopbite 1 ie vey 04 pessword cisco Aegging syncirorous Aegin wobvpn context Derauit_eontext ond asthentisate verify all 1 Fig sh ip rovte Godse: © - comected, § - static, Nt = OSPF SSA external type 1 N2 Et = OSPF axternal type 1, 2 4 181, ou - 18-18 sumery, L1 Gatoway of last resort is not set [410] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 HIP, M- nobis, 6 BoP (SPE SSA oxtarnal typ 2 O5tF external tyye 2 18-18 levels, 12 18-18 level-2 por-user stare route (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe daslaity CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files 200.0724 ic directly convasted, Loopbeck2ss 0/24 is subnstted, 4 subnets 22.0 [200/0] via $20.100.24.5, 0/24 is subnstted, 1 subnets 100.4 [200/0] vie 120.100.9.1, 0 0,0/24 ‘i¢ aubnetted, 2 stbnats 01.2.0 [170/7280888] vie 120,108.128.2, 00:21:48, Serial 01.4.0 is ciractly comectod, Loopback? 0/8 48 vardabiy cuonettec, 20 subnets, 3 micks 04/20 [17017200416] ve 120.109.120.0, 00:01240, Sorsal0/0/e 81/82 [17017200416] via 120.100.128.8, 00:212«7, Serialevo/e 10.1192 [170/7252418] via 12 h:47, Sarda? S482 [17017200416] via 120 19:49, Sersal0/0/¢ 40/24 [90/2000410} vin 120.100.123.3, 1 garie10/0/0 50/24 [00/29004%6| via 120.100.129.9, 00:21:47, Sartslo 44/82 [17017202416] via 120.100.128.8, 7-4/82 [17017200416] via 120.100.1288, [n70)72024%6} via 120.100.128.3, e0:21:07, Serialei0/e 4s directly comacted, Leosbecke [90/2800858) via 120.100.123.2, [p07 2207358) via 120.100.123.3, -69.0/24 [170/7292818] via 128.10 R RAR RRR Ree a 3 = 5.0)24 [170)7292418] via 120.10 24 [902172416] via 120.100.128.8, 129. 100.128.4/24 48 directly connected, serialojo/e (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[412] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files ‘ o 12. 120. 100.4) 24 de directly connected, bigenittthannstO/1 200.4) 24 [90/2684416] via 120.100.122.2, 0:21:48, Sarda fig sn ap rovte eagrp o « RRQ RRA RRR 450.101.0.0/24 2 cabnstted, 2 atbnete 150.104.2.0 [1707280853] via 120,100.128.2, 00:21:58, Serialt 0/8 is variably cubnettec, 20 subnets, 3 micks 8.4182 [170/7200416] via 120 2, Sersal0v0/e 64/82 [17017200410] ve 120.100.125.9, 00:21:00, Sersal0/0/e 1£29.100.10.1199 [170/72924:6] via 120.100.122.9, 00:24:58, Serial0/0,0 -5.1/82 [17017202416] via 120.100.128.8, 00:19:65, Sariel0/0/e [voy 2900818} via 120.100.123.3, [vor 2300818} via 120.100.123.3, 44/80 [a70l7e9e4te] vie 10. 7.4182 [17917200416] via 120. 6.4182 [17017200416] via 120. 18 is a summary, 60:21:58, N10 20/24 [90/2000350} vin 120.100.123.2, [poy 2007356) via 120.100.129.9, 24 [170)7292418] via 120.100.123.9, 24 [170/7292418] via 120.10 2 Sersal0/0/e 8, Sersal0/0/¢ 129.2, 00:21:50, Sorsalo/0/e 100.123.2, 08:21:59, Serial Ris sh ip bop BOP table version is 6, Loci router 1D i¢ 120.1 Status cows: © suppressed, o damped, n nistory, * valid, » best, 1 - Antenne, Origin coos: i - 16?, € - ESP, 7 - incomplete ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme das[413] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files Network Hoxt Hop Metoic LooPef Weight Peth £51152.100.409.0/24 120.100.8.1 2 1% s>1152.200.52.0/28 120.100.58.4 ow 90 *1952.200.09.0/24 120.100.20.8 2 1 03 #53152.200.34.0/24, ow 903 2>1152.200.35.0/24 ow 05 ig show ipv6 route Codes C = Comacted, L = Looal, § - Static, R = AIP, B BOP U = Per-usar Static soute 11 - ISIS Lt, 12 - 1818 L2, IA ~ 1818 intorarsa, 18 - 1818 sumery D - EDORP, © - ELGAP external 6 (120/2| ‘via FEBQ::7854:7698, Tunnsl@ © 2007:049:00:10::/04 [8/9] GigahsttenaenatO/4 L 00: 18::1/128 [0/0] SigabitEthernatoyt © 09 11::/84 [0/0] L 118 (0) L 0 [0/2] LFn@::78 (07a) vias, Sule 18 show ver Cieso 108 Sofenare, 908 Software [C3E25-ADVENTENPRISEKS-M), Version 12.4(8)1, RELEASE Gor WARE (ot) ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme das[aa] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files Technisal Support: ttp://ww.ciseo. cen) techsupport Copyright (=) 1985-2008 by Cisca Systens, Ino. Compiled Thu 28-Feb-08 e1:02 by ce4d OW: Syston Bootstrap, Version 12.8(4%)T2, RELEASE SOFTWARE (fe1) Fi uptine is + heur, 13 minsto System returned to MOM Ly reload at 18:18:90 UTC Mon May 14 2007 System Snags File i "flash:0928-advantarorSeakt m7. 424-6.1 bin" ‘nis procuct contains cryptographic Teatures and 18 subject to Unstos Use. Dolivery of Cisco eryptoaraghic groducts doss rat inply thind-party authority te imort, export, distribute or use encryption Inportars, exporters, distributors and users are responsible fer gree to comply with applicible Lave end regulations, Tf you are mabe ‘0 comly witn U.S. and Locil laws, return this prodict insedictely. 'A summary of U.8. Lave governing Gisce cryptographic products nay be ‘ound at: hetps/ inn. o2c0-conlw/oxport/erypte/ toc sg. heal If you reqiirs further essistance plesse contact us by sending onail to exporticisco. con. (Chino 9605 (revision 1-6) with A7DNEAK/S2S94K bytes of manory, Prooessor board ID FAKOGOTFOVU 2 Gigabit Ethernet interfaces 2 serial (yns/asyne) Anterti (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe das[415] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files 2 Virtual Private Navork (VPM) Modules DORM configuraticn Js 64 bite wide with parity enabled. 4479 bytes oF NVA. 62720K bytoe of ATA Byctem ConcactFlach (Ro sweste) Configuration register is 0:2102 Router 2 Initial Configuration Building configuration Current centiguretion : 1470 bytes service tinostange dsbup datetin service tinastenps 1og catering move no service pascwerd-sneryption hostnana Fo boot -start-nacker no Logning console fonsble password cisoo ' ' (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[416] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files recourse polisy 1 nowory-6220 tonen 15 ' 1 1 no An domain Loohin ' 2008 cisco systems, Alright reseried, This pubatens protected by copyright Plese so page Si fermere desitar7] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files 1 1 4p address 120.100. 1 Snterface FastEtharns shutdwn aepler auto peed auto Antorface Bortele/@ 4p address 120.100.1232 255.256.256. oreapsuletion frame: relay Frame-reley nap ip 120.100.123.3 208 brocdcast intorface Fastéthernsto/t 4p address 120.100.2.1 265.255.256. aepler auto 1 interface Sorial@/t no ip aderass 1 258.286.255 ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme das[413] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files ip http server no ip nttp secure-server ort -plene 1 1 1 1 1 1 1 1 1 1 1 pessword cisco Aegging syncirorous Aegin Line vey 04 pessword cisco 2008 cisco Systems, Alright resend, This pubatens protected by copyright Peso ss page Skt ermere desi[419] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files Aegging syncirorous Aegin 1 webvpn cortoxt Default_eontext el athantiate versfy all ' 1 Router 2 Final Configuration ae sh cue Building configuration... Current centiguretion : 800% bytes ' version 12.4 service tinostenge dsbup datetin service tanastenps 1og catorine more 1 ' re boot -end-aarksr ' (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[420] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files oneble password cisov 1 raource policy 1 nowory-si2e ionen 15 ' 1 1 4p multicast routing ' {pv6 unioest-routing 2008 cisco systems, Alright reseried, This pubatens protected by copyright Plese so page Si fermere desi[at] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files 1 1 clese-uap natsh-ell VIDEO eton decp aft 1 policy-map VIOEO.008 ase VICEO| priority percent 40 compress nsader 3p tp tandvicth paroant 60 randin-ctect interface Tunele no ip aderass ps6 address 2007 4yv6 rp CCIE erate tel scares Sersaio/e tunnel destination 120.100,129.3 ‘anne meds ipvip 1 ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme das[422] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files interface Loopback 4p address 120.100.2.1 255.256.256. 4p pin oparss-dense-moce interface Loopback? 4p address 150.101.1.1 265.255.256 1 4p adiness 150.101.9.4 255. 255.256.0 1 Snterface FastEtharns no ap aderess duplex auto opaed auto ' interface Seriale/@ 4p hold-tins sigrp 1 260 4p pin cparss-dense-mce orcapsuletion frane-relay rame-reley nap ip 120.100.123.3 208 broedcast no frame-roliy inverse-arp foc-racerved-bardwideh 100 service poLiy eutpet VIDED-108 intorface Fastéthernst0/t 4p address 120.100.200.1 255.256.265. aepler auto (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe das[423] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files opsed auto 4pv6 address 2007015: 4gv6 rap CCIE erable intorface Sorial@/t no ip aderass stutdon offeet-List | network 120 serint0ya 255 network 150.104.4 no auto -eummiry ' network 120 network 150.104 istripute-List 2 ovt seraun0/e router tgp 100 bp 1og-reigibor-changes reighoor 128.108.9.1 revots-as 1 3.1 updats-souree Leopbuck® neighbor 122. (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[42a] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files actoe fanily sipvs neighbor 120.1 ro auto-cuamiry snst-addreos-fanily 1 no ip nttp secure-server 4p pin serd-rp-amnounce Loopbask® scope 3 group-List GROUPS permit 225.226, permit 225.225, permit 225.226, 1 aocass-List 1 pormit 150.101.1.2 scovss-List 2 permit 150.101.2. 1 Sor6 router rip (OIE ' ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme dasLab 2 Router and Switch Configuration Files pessword cisco Aegging syncirorous Aegin Line vty 04 pessword cisco coin transport input teleet 1 feel authantiate versfy all 1 [425] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 2008 cisco systems, Alright resend, This pubaten spotted by copyright Plesoe cs page Si ermere desi1426) CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files oe Ras sh ip rovte 1 - ETGRP, EX’. FTOR? wcternal, 0. OSPF, TA - OSPF intr sean Nt ~ OSPF NSS extornal type 1, NO - OSPF NSSA oxtomel type 2 Et - OSPF external type 1, €2 | OSPF axternal type 2 2 ISS, 6u ~ 18-18 sumary, LI - 15-15 16ve1-1, Lz - 15-18 Jevel-2 © = OD8, F - periodic dovnload static route Gatoway of last resort is not set 452.900.0.0/24 2 subnstted, 1 atbnete 8 [200/0} vin 120.100.84.4, of 8 [20070) vin 120.100.88-5, on 8 00.4.0 [200/0) vin 120. 100.38-5, oF ® 25.0 [260/0] via 420.100.94.5, 0 0/24 is cubnstted, 1 subnets 8 [200/0} vie 120.100.3.1, 0 0/24 is subnstted, 2 subnets 120.0.0.0/8 is variably subnettec, 20 subnets, 3 mcks D& — 120.100.6.1/22 [170/7202418] via 120.100.125.8, 00:21:49, Sersel0/e DE 129. 100.8.1/02 [179/7202418] via 129.100.125.8, 00:21:49, Sersele/e (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe das[427] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files « A)92 [170/72304%8] via 12 [170)72024%8} via 120.100.128.3, [vor zs0err8} via 120.100.123.3, [poy 2000%%6} via 120.100.123.2, 44/82 [17017202416] via 120.100.128.8, 7.42 123.3, 6.472 128.3, 00:21:40, Sorial0/0 5/16 [90/2004440| vim 120.100. 123-1, 60:21:46, Ser [07 2600856) via 120.100.123.1, e0:24z40, Sanisi0/0 is directly comacted, Leopbecke [v0y2207358) via 120.100.123.3, RRR & RRS 24 [90/2472416] via 120.100.123.8, 00:21 0/24 is directly connected, Seria10)0 524 [08/2684416] ve 128.100.129-4 200.024 42 directly conmactad, Fastetnernst 2s sh ip route eigrp 120.0.0.0/8 is variably subnettec, 20 subnets, 3 mcks pe 3, Sersalov0 oe 4:85, Sardal0/0 oe o [poy 2s0es18} via 120.100.123.3, ° [voy 2500018} via 120.180.123.3, om 44/92 [17917292486] via 490.400.429.2, 00:90:23, Sersai0/0 oe 7.4182 [170)7202416] vha 120.100.120.9, 00:21:66, SarsalOr0 oe 6.4182 [17017202416] vha 120.100.129.2, 00:21:66, SarsalOrO D129. 100.6.0/16 [20/2884418) via 120.109.123.1, 00:21:56, SorsclO/® (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[423] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files o o 20/24 [00/ 2207386] via 12 100.123.1,, 100.123.3, be .0)28 [170/7a82si6] via 120.109.123.9, oe 2.0)24 [170/7202416] va 120.100-120.9, oe 24 [170/7292418] via 120.100.123.8, o 24 [90/2472416] via 120.100.123.8, 00:21:67, Seriel0/0 o 100.4) 24 [90/2884418] via 12 OP tabla varsion is 6, Local router ID ie 459.401.2.4 Stetus codes: © supprosced, 4 damped, h history, * valid, > best, 1 - intomnel, FIB-failure, § Stale origin coos: 1 - 16? € - ESP, 7 - ansompete 12.4 1:87, SerialD/0 Netvork Hoxt Hos Metoic LooPe Weiaht Peth £51152.100.109.0/24 120.100.8.1 2 mek #51152.200.92.0/24 120.100.34.4 10 0.24 +-152,200.09.0/24 120.100.5425 19 0.0K s31459.200.04.0/24 120.100.2465 £51152.200.35.0/24 120.100.84.5 2s sh ipv6 route 1P¥6 fouting Table - 7 entries U Per-usar Static soute 1 - ISIS Lt, 12 - 1818 L2, IA 1818 intorarsa, 18 - 1815 sumery © - OSHF intra, OI - OSFF inter, O€1 - OSPF act's, 0E2 - OFF ext 2 Rr :s/48 [12072] vie FE80::7854:7809, Tonnel® 10 0.3K ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme das[429] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files © 15 [0/0] © 1 {0/0} + Fastethernet0/1 L 18 0) + FaatEthornet o/s L 140 [079] > une L 8 (ove) fae sh ver isso 108 Software, 8700 Software [03725-ADVENTENPRISEKO-W), Version 12.4(8)7, RELEASE SOFWARE (fot) Tecinizal Support: http! fwwaciscs. con techouppert Copyright (=) 1066-2008 by Chaco Systane, Toe Compiled Tu 28-Feb-08 60:25 by cox OW: Syston Bootstrap, Version 12.2(8e)T2, RELEASE SOFTWARE (fe1) 2 uptine is + heur, 15 minsto System returned to RIM by rslose System image File As *flash:02725-adventarprdsekt mz, 124-6.1 bin" This product contains eryptographis features and is subject to Unite® Stetes and local country lavs governing inport, axport, transfer a8 Use. slivery of Cisco cryptographic products doss nat’ nmply ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme das[430] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files third-party authority te imort, export, distribute or use encryption Inportars, exporters, distributors and users are responsible fer compLianoe with U-8. anc 10281 country 1avs. Sy sing this proauct you give to comply mith applicsble Love end regulations, IF you are wable ‘0 comly witn U.S. and Locil laws, return this prodict insedictely. ‘A cumnary of U.8. Lave governing Gisce cryptographic products nay be found at: hetps/ nw. cisco-conlwl/axport/erspte! tool tary. heal If you reqiire further essistance please contact us by sending onail to exporticisco. con. Ciese 2726 (R808) proceecer (revision Prooessor board 1D JIKOGELO2F re@0 OFU at 240MHz, Inplonontation 3°, Rev 3.3, 2588 L2 Cache 2 Fastithernat interfaces 1+) wien 22mn00K/ 000404 bytan oF wenery 2 Geral (aynetaoyne) dntor fa 58K bytes of WR. 12518 bytes of ATA Syctom ConpactFlesh (Read/Write) Router 3 Initial Configuration oe sh cue Building configuration... Curent configuration : 1528 bytes 1 (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe dasCCIE Routing and Switching Practice Labs Lab 2 Router and Switch Configuration Files version 12.4 service tinssteaps dabup datst ine service tanastenps tog caterine ms%e 1 hostnave Fa 1 boot -end-aarkar ' no logping console foneble password ctso0 ro aaa new-nodel ' recourse polisy ip of ' 1 1 ro ip domein Leohip ' ' 1 1 [431] Martin Jarnes Duggan. COE No. 7942 (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[432] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files 1 1 1 1 1 1 1 1 1 1 1 1 1 Antorface Loopback 1 interface Loopback2ss 4p address 200.200.200.200 255.265.255, interface Gigubstethernst/0 4p address 120.100.24. 255.255.255.0 aepler auto speed auto ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme das[433] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files nediactype ras negotiation ute ntonface GigibstetnsenetO/+ no ip aderess shutdmn, aepler auto ediactyes elas negotiation ute ' amtorrace sorte oreapsuletion frame: relay 10.120.4 101 brosdoast 429.2 902 brosdeast interface Sorial@/0/1 no ip aderass shutdmn, 1 1 ip http server no Ap nttp secure-server 2008 cisco systems, Alright resend, This pubaten spotted by copyright Plesoe cs page Si ermere desiLab 2 Router and Switch Configuration Files « Aegin stopbite 4 Lire aux @ Line vey 04 pessword cisco Aeyging syncncorous trancport input telaot 1 cotaduler allocate 29008 1000 [434] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 2008 cisco Systems, Alright resend, This pubatens protected by copyright Peso ss page Skt ermere desi[435] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files webvpn contort Default_eontext eel authantisate versfy all nd Router 3 Final Configuration oe sh cue Building configuration Current centaguretion : 4257 bytes version 1244 service tinssteaps dabup datst ine service tinsstenps log catotine move 1 hostnave Fo ' 1 onsble password cisoo ' (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[436] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files recourse polisy 1 nowory-6220 to0nen 15 ' 1 1 0 An domain Loohin 4p multicast -routing u S9v6 undoset-soutsng no deofarn 2008 cisco systems, Alright reseried, This pubatens protected by copyright Plese so page Si fermere desiLab 2 Router and Switch Configuration Files 1 1 1 1 1 no ip adress 4pv6 address 2007 4gv6 rip CCIE erable 3gv6 rap CCIE cunmary-codrass 20 fennel cxuros Gersai9/0/@ tunnel. dectination 120.100.1294 tunnel meds pvp 1 4pv6 address 2007 4gv6 rip CCIE erable 4gv6 ip CCIE cumary-cddrass 207 fennel csuros Sersai9/¢/0 490.129.2 tunnel destination 12 tunnel meds pvp 1 4p pin cparso-dense-moce 1 (©2008 ceo systems 1437) CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 18 Inc Alrights sere ris pbtzatin is prtscteaby copyrght Peso oo Faye 5 frmoe dais[433] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files interface Loopbacks 4p address 152.10 4p address 200.200.200.200 255.265.285 1 interface Gigibitethomneto/0 4p pin starse-dense-noce aepler auto speed auto neaie-type ras ov address 2007 4pv8 opt 1 arse © 1 258.256.255, interface OigabitE rnetO/! shutdmn aepler auto speed auto ' interface Seriele/o Ap address 120.100. 123.5 299.288.280.0 no ip next-hop- calf eirp # 4p pin cparso-dense-moce oreapsuletion frane-celay (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe das[439] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files ro ip split-torizon oir + 100.129.1 901 browdoset frame-reley nap ip 12 Trame-reiey nap 1p 12 ' intorface Serial@/0/1 no ip aderass ' router eigrp 1 redietritues rip network 120.100.129,0 6. default metric 1544 20000 255 11500 distribute-List route-rap PENALISE-VIANES in GigabitEthennet0/@ ' router rip version 2 network 20 no auto-euamiry ' router bgp 100 neighbor A8100 2er-grcup neighbor A8100 romota-cs 10 Ineighdor A8100 transport connsction-#nde active civo- interface Sorist0/9 (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[410] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files neighbor ASt neighbor 120.1 rneagnoor 120.1 neighbor 120.1 H acta Update course Loophack® 1 pser-group A5108 1 pser-group A3108 34.8 renote-ae 00 fanily ipvs rneighior 120.108.4.1 activita neighbor 120.108.2.1 activi neighbor 122.10€.34.4 ectivate Ineignoor 128.108.38.4 capaniiity ert protae-tist send neighbor 128.10€.98.5 ectivats ro auto-euamiry no synchronization 1 1 1 4p pin serd-rp-disoovary scope 2 4p pin rp-announce filter ry-List RY group-List GROUPS 4p pln rp-anounce Titer ry-L4st RZ group-2ist #2-cROURS 4p accoss-List standard At permit 120.100.1.1 ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme das[any CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files 4p access-List standard Bt -AROUPS permit 225.226, permar 229.225, permit 120.100.2.1 4p access-List standard R2-SROUS permit 225.226, ' 1 4p pretix-List FILTER seq 5 dany 152.200.88.0/24 4p prerax-1ise FILTEN seq 10 dony 182.24 4p pretix-list FILTER cea 20 porit 8. faocass-List 1 pommit 120.109.34.4 aocaes-List 2 pormit 120.109.63. Sox6 router ospf 4 egal acenoy-changes Pedietritute rip OCIE wetric 5000 include-conneste® pv6 router ip (OIE ' 1 rouce-eap PENALISE-VLANES parait 18 cto ip route-course 1 ost tric +0000 ' ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme dasLab 2 Router and Switch Configuration Files rovte-aap PEVALISE-VIANED parait 24 pessword cisco Aegging syncirorous aegin Lire aux @ stopbite 1 Line vty 04 Aegging syncirorous Aegin transport input telaet [42] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 2008 cisco Systems, Alright resend, This pubatens protected by copyright Peso ss page Skt ermere desi[499] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files wobvpn context Derauit_eontext fed esthantisate verify all 1 ne 3# sh ip rovte NN - OSPF NSS extornal type 1, NO - OSPF NSSA oxtommel type 2 Et - OSPF external type 1, €2 | OSPF axternal type 2 i 18-18, ou - 18-18 sumary, L1 - 18-15 lovel-1, L2 - 15-18 Jovel-2 Gatoway of last resort is not set £00.200.0/21 se diseotly sonrasted, Loopbeck25s 0/24 is subnstted, 4 subnets [200] via 120.100.34.8, [2070] via 120-100.24.5, 54.0 [20/0] via 120.100.34.9, 25.0 [20/0] via 128-400-215 0724 is subnstted, 1 subnets 100.8 ic directly conracted, Loopbacks 150.101.0.0/24 1s subnstted, 2 subnets (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasLab 2 Router and Switch Configuration Files R490.404.2.0 |120/4] via 128.100.1282, © |90/22078s6) via 1 8 6 varsabiy subnertec, 0.4/0 [rroversouie) vin [rroversoets] vin De 120.100.8.1/22 [rrevereeute] wie [rroreranse] vis 0 & 129,100.10.1192 [rroversouis] vin [rroyersoer6] van Do 109.190.6.4/02 [rroversoete] vin 129. o [00/455160) via 120.100.24.5, De 120.100.0.1/32 [rroversoete] vin 129. De 129.100.7.1/32 [reyes] vin 120.40 [rroversoute] vin 129. De 120.100.6.1/32 [rroversoeie] vin 129. [rroversoers] vie 120. ° 0146 (00/2472446) via o o © [444] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 19, Sonial0/0i0 123.1, 00:22:20, Sorial0)0/@ Gigaditettornste) GigabitEttornate) BigaditEtrorntol9 Gigaditettornste) erganstetrornete; Ginabitetrornstolo , Gigabitetherneta/e oigabiternameta/0 10, Gigebitetornstol0 1:18, GigabitEthornst2 1:18, GigebitEthornsta 1:10, Oigabitettermte) 420. 100.28°1, 00:29:25, Soris10/2/0 25, Sericdoy0/0 25, Sericdo/0/0 2008 cisco systems, Alright reseried, This pubatens protected by copyright Plese so page Si fermere desi[495] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files Dex 19. on [rroversoete] vin 129. [reverses] vis 120 [rroyersoets] vin 129. Dex 19. [rr0yersoete] vin 129. 21:11, Gigabitethernste)e 120.100.128.0/24 is directly connected, serial0i0/0 21:48, Gigabitethernsto)e 21:98, GigabitEthernst0)0 450.101.0.0/24 ¢ cubnstted, 2 subnets D499. 401-1.0 [90/2207856) via 12 120.0.0.0/8 is variably subne:tec, 29 subre! De 129.190.6.1/92 [rroreranise) vis [rr0yersoete] vin De 120.100.8.1/32 [rroversoute) van [rroveseuss] vie De —129,100.10.1192 [rroversoeis] vin [rroversoeis] vin 22:28, Serial0}0/@ 5S mks 17, BigebitEtrornst0j0 17, Gigebitetrornst0j0 17, BigabitEtrornatol0 17, BigabitEthornat0j0 De 129. 100.201/32 [rrojeranse) vis 21:48, Gigabstetharnsto)0 D129. 100.2.0724 [007155160] via 120. 22:28, Gigabitethernst0/@ ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme das[416] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files o [007155160] vi 120. 22:28, Gigabitethernst0/@ De 1e9.100.0.1/32 [rrejeseute] vie 10, bigabseeronneto}0 De 120.100.7.1/32 [rroversoute] vin 21:48, Gigabitethernsto)e [rroversoete] vin 21:48, Gigabitethernste)e De 129. 190.6.1/92 [rroreranuse) vin 120 21:49, Gigabstetharnst9)0 [rr0yersoets] vin 129. 21:19, Gigabitetharnste/0 D—129.100.6.0/18 [00/2172418] via 120.100.128.1, D Yap. 100.1.0/24 [v0/ 2297886) vin 120.109.125.1, D—449.190.2.0/24 [00/2207066] via 120.109.120.2, Dex 10, 24 [rroversoeie] vin 129. 21:48, Gigabitethernste)e De 120,100.52.0124 [rreversoete] vie 120. 21:47, Cigabitethernet0)e [rrorersause] vis 120 21:47, GigabstEtharnst0)0 DK 120,100.28,0124 [rroversoeie] vin 129. 129.100. 109.0/24 (99/2172416) via 120.10 D—420.190.200.0/24 [o9/2t72416) via 120.40 fae sh ip bop BOP table version is 6, LocsL router ID 4+ 200.200.200.200 Status coos: © supprosced, d damped, h history, * valid, > best, 1 - intone, 19, GigebitEtrornstoj0 123.1, 00:22:90, Sersa10/0/e Network Hoxt Hop Metoic LooPe Weight Peth 25 152.100.100.0/24 9.0.0.0 ° sere 4 (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe dasta] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files 152,200.92.0/24 2 st 2 24 182.200.85.0/24 2 st 452.200.94.0/24 120.100.04.6 2 on 152.200.96.0/24 120.100.84.5 2 st 2s sh ipv6 route 1Ps6 Routing Teble 11 entrio U = Par-tnar Static: souts 11 - ISIS Lt, 12 - 1818 L2, IA 1818 intorarsa, 15 - 1815 sumery © - OSHF intra, OI - OSFF inter, O€1 - OSPF ects, 0E2 - OFF ext 2 or :016:00:48:: 84 [120/21 vie FE30::7854:7801, Tunael® or :c18:00:11:/88 [0/0] via it, Tunnalo 2047 sc18:603 via it, Tuna via #2, Tunnel or :c16:00:13::/88 [120/2] vie FE80::7884:7802, Tannalt 20nrsc19:60: 142/68 (0/0) via i, GigahitEthernas0/@ 2047 se18:002 1429/28 [0/0] via i, BigebitEthennato/e 2oy7sexse002 182/64 [10/2] ‘via FEOO::219:0HFFHFEYB:E-HO, GigabitCthernst®/9 128 (9) 1 [0/0] 128 9) (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[499] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files foe sh ver isso 108 Software, 9500 Software [03E25-ADVENTERPRISEKO-W), Version 12.4(8)7, RELEASE 86 WARE (Fe!) Teennival Support: http! ww.ciso0, cea teehsuppert Copyright (=) 1985-2008 by Cisco Systens, Ino. Compiled Thu 28-Feb-08 61:02 by cexd ow: oyeten Osctetrap, Version 12.0(4%F)T2, RELEASE SOFWARE (404) 3 uptine is + heur, 18 winsto System returned to ROM by reload et 18:00:28 UTC Won May 14 2007 ‘Tis product contains oryptographis features and is subject to Unite® States and local country lavs governirg inport, axport, transfer a thind-sarty authority te imort, erport, distribute or usa encryption Inportars, exporters, distributors and users are responsible fer compliance with U-8. anc lozal country lave. By using this product you gree co conply with appLiesbie Leve and regulations, Tf you ere wable ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme dasLab 2 Router and Switch Configuration Files [419] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 'A summary of U.8. Lavs governing Gisce cryptographic products nay be found at: http: /ww.cisco.conjwul/axport/erspte/ tol! tary. tal If you require forthor cecdstance please contact ue by sending omail t6 exporticisco. con. Cisse 3825 (revision 1.0) with 446i6sK/77824K bytes of nonory. 2 Gigabit Ethernet interfaces 2 Serial (syno/asyne) interficoe 2 Virtual Private Nasvork (VPH) Modules DOM contaguraticn 4s 64 bits wise with persty enabled. 170 bytee oF NVFAML 62720K bytes of ATA System ConcactFlash ([ead/Weite) Configuration register is 0:21 Router 4 Initial Configuration at ah cue Building configuration Current centaguretion : 1875 bytes version 1244 service tinssteaps dsbug datst ine service tinastenps 1og catotine move ho servtoe pasonerd-sneryption 1 2008 cisco systems, Alright resend, This pubaten spotted by copyright Plesoe cs page Si ermere desiLab 2 Router and Switch Configuration Files hostnane Fi 1 1 ro Logping console foneble password cisoo fo aa new-nodel ' recourse polisy ' 1 1 1 voive-card 0 no depfarn [450] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 2008 cisco Systems, Alright resend, This pubatens protected by copyright Peso ss page Skt ermere desi[451] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files 1 1 1 1 1 1 1 1 1 interface Loopback 4p address 120.100.4.1 265.255.256 interface Gigubitethernst/0 4p address 120.100.24.4 255.255.255.0 aepler auto speed auto ' intorface GignbitEthoeneto/* Ap Address 120.100.48.4 258.289.258.8 speed auto nedia-type ras negotiation auto (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasLab 2 Router and Switch Configuration Files interface Seriele no ip aderass interface Soriale/0/1 no ip aderass stutdon 1 1 ip http server no ap nttp secure-server 1 1 1 1 control -plane ' 1 1 1 1 1 1 [452] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 2008 cisco systems, Alright resend, This pubaten spotted by copyright Plesoe cs page Si ermere desiLab 2 Router and Switch Configuration Files Lire con @ pesswora exsco Aegin stopbite 1 Lire ax @ Tine vty 04 pessword cisco Aegging syncirorous trancort inout telaot 1 cotadular allocate 2 feel athentiate versfy all H 1 nd CCIE Routing and Switching Practice Labs [453] Martin Jamas Duggan, COE No, 7042 2008 cisco Systems, Alright resend, This pubatens protected by copyright Peso ss page Skt ermere desi[454] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files Router 4 Final Configuration at sh cue Building configuration cuncent cuntiguretion : 2278 bytes version 12.4 service tinssteaps dabup datst ine service tinastenps 1og catorine move 1 hostnane A ' 1 foneble password cisco ' 1 recourse polisy 1 1 (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das1435) CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files no ip domein Leohip 4p multicast routing voive-card 0 no depfarn 2008 cisco systems, Alright reseried, This pubatens protected by copyright Plese so page Si fermere desi[456] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files interface Loopback fp adress 120.100. apospt 1arsa.e interface Gigibitethomneto/0 4p address 120.100.24.4 255.255.255.0 4p pin cparss-dense-mace spaed auto nedie-type ras negotiation ute p16 adress 2007: 1 intorface Gigibit€ thoeneto/? 4p address 120.100.48.4 255.255.255.0 1 258.286.255 speed auto nedie-type ras negotiation auto ov6 vepf 4 ee + 1 interface Seriele/o ro Ap aderass ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme das1497) CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files interface Sorial@/0/1 no ip aderass router eigrp 1 radietritute ospf 4 default estric 1544 20000 255 1 1500 ro auto-cummiry ' router ospt 4 farea 1 virtusL-Link 420.100 redistribute eigrp 1 subnets default-eetric £200 router bgp 208 no synohronization bp 1og-reigibor-changes neighoor 48200 fer-grcup Ledate course Leopback® routs-neflestor-cLient 1 pser-group As200 18.1 peor-group A320 rneignoor 120.1 neighbor 120.1 (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe das[458] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files no auto-suamiry no ip nttp secure-server 1 1 Sox6 router ospf 4 ‘eg acenoy chang area 9 range 2007 22/36 ort -plene (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasLab 2 Router and Switch Configuration Files Lire con @ fvso-timeout 0 @ pesswora exsco Aegin stopbite 4 Lire ax @ Tine vty 04 exso-timeout 0 @ pessword cisco Aegging syncirorous trancort input telaot feel althantiate versfy all H 1 nd fas sh ap route [459] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 D - EIORP, &x - ELGAP oxtornal, 0 - OSPF, TA - OFF inter roa NN - OSPF NSS extornal type 1, NO - OSPF NSSA oxtommel type 2 Et = OSPF axternal type 1, E2 StF external tyye 2 ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme das[430] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files 4 = 18:8, ou - 18-18 sumary, L1 - 18-15 lovel-t, L2 - 18-18 Jovel-2 ia - ISIS inter aren, * = cancidate default, U - par-user static route © = 004, F - porsodie dovntoade szatie route Gatoway of Last resort is not set 0/24 is subnstted, 4 subnets ° 2.0 [20/0] vin 120.100.1015 0 B—492.200.59.0 [260/0) vin 120. 100.40.1, 0 8 c 8 “ ° [0/0] via 120.100.04.0, 90:00:07 46 aubntted, 2 eubnets o [170/e7e016] vin 120.100.51.5, 0:90:04, GigebstEtnarnatOl0 [1797670018] vie 129, 109.51.9, 00:90.00, ignbitEtherent9/® [90/2200416) via 120.109.4.9, 00:90:60, Gigebitetnernstor £20.0.0.0/8 is variably subnettec, 19 subnets, 3 mcks 0 129.100.6.1/82 [110/3] vie 1201100.46.6, 00:80:53, Sigebstetnernot0/+ ° 2.4/92 [14072] via 420.100.46.2, 00:20:99, aigabstethornot®)/s om 10.1182 [110/3] via 120.100.48.8, 00:80:33, GigabitEthernst0/t o [10/4] via 120,109.46.6, 00:20:39, Gigebstetnernat Ol © 4s directly coracted, Leopbecke [00/455160] via 120.100.24.8, 00:90:50, Gigabitetnerneta/d om 7.4182 [14014] via 120.100.46.6, 00:20:99, GigebstztnernatO/+ o 6.4182 [14012] via 120.100.46.6, 00:20:99, GigebstetnernatO/+ Dd ta9.100.6.0716 [o0/27a0re) via 12 04.0, 80:00:50, Sigubsectnernsto/e ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme dasLab 2 Router and Switch Configuration Files o [00/2200416] via 120.4 Dd 129.100.8.0724 [00/155160] via 120.100.34. om 4 [110/2] via 1 ow 24 [110/9] via © 129.100.48.0124 48 diractly ¢ 24 is directly o 128.0) 24 [ooy2t7 246) via 12 ° 100.0724 [ooy2sra0re) via 12 o 200.0) 24 Fas sh ip rovte eigrp 150.101.0.0/24 16 cubnstted, 2 3 [rroversoete] vin 129. [rr0yersoetg] vin 129. $50.10144 [00/2s00416) vie 128 0/® 2 variably aubnatter 129.100.8.0/24 [007125160] via 120. 9.24 (©2008 C20 systems, [431] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 50, Bigtbitetnernst ove 20:60, BigubitEtnernstOr® 3, 60:31:00, Gigabittherneta/e 20.100.48.8, 00:30:34, GigabitEtornstO/t eanactad, GigabitEtharnetd/t eonacted, GigabitEthorne nets os, 1.9 30:20, GigabitEttornstol0 30:20, GigabitEttornst0/0 -38.3, 00:51:14, Sigibitetnernscore 91:44, Gigabitetnernst0/e Inc Alights sere ris pbtzatin is prteceaby copyrght Peso oe paz 5 forme das[432] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files o 00:31:14, Gigabitethemnctore 31214, BagebseEenennsto/e o 84.8, 00:91:14, Sigibitethernsto/e o [00/420100] vin 120.109.04.0, 69:01:14, Oigahitethernst9/@ o 84.8, 00:91:14, Sigibitethernsto/e o [90/2174076) via 120.109.94.9, 00:31:14, aagebstEtnernstor® > 149.190.200.0/24 [ooy2sraare) via 12 Fas sh ip rovte ospt 120.0.0.0/8 is variably subnettec, 19 subnets, 3 mcks 34.3, 0 15, Bigebitetnernst re ow $1182 [11019] vis 128,100.40.0, 00:20:89, Digebit=tnernetO/ ° 2.4/22 [14072] via 426.100.46.2, 00:20:53, Gigabitethernat®/s om -10.1/82 [110/3] vie 120.100.48.6, 00:90:63, GigabitEthernst0/t ° 54/82 [14014] via 120.100.46.6, 00:20:59, SigebstetnernstO/+ om 46.8, 00:30:53, Sigebittnernot0/ ° 6.4/92 [14072] via 420.100.46.6, 00:20:59, Gigabstethornot®)/s om om Fas sh ip bop FIB-failura, § Stale Origin coos: i - 16?, € - ESP, 7 - insomplete (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[48] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files Network Hoxt Hop Metoie LooPe Weight Peth 2 152.100.100.0/28 ° 2 1K > 52.200.82.0/28 om eww + 452.200.09.0/24 2 wt om ow + 452.200.84.0/24 on nt om ow + 452,200.98.0/24 oa 4 120.100.10.1 om ow fas sh ipv6 route 1Ps6 Routing Table 11 entries 1 - ISIS Lt, 12 - 1818 L2, TA ~ 1818 intorarsa, 18 - 1815 sumery © - OSHF intra, OL - OSFF inter, O€1 - OSPF act 1, OE2 - OF xt 2 OY = OSPF SGA ext 1, O12 + OSPF ABSA ext 2 0 panrss148 [11070] via i: We 062 2907:C15:C0:10::/64 [11075000] ‘via FEGO::214:64FFAFEFC:7200, GugabatEthernst0/0 062 a0er:cte.c0:t4 13/64 [110/=006] FFSFEFO:7200, GioabitEthernst0/0 62 1232/84 [110/000] FFSFEFO:7200, GigabitEthernst0/0 062 2007:610:60:19::/64 [110/000] via FEBO::214:RIFFAFEEC:7200, GigabitEthernst@/0 © Bor sc4s:c0:14::/64 [0/0] + SigabitEtherns:0/@ ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme das[434] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files © 1 0/0) 182:4/128 [0/0] SigabitEthernatoy4 LFF00::78 (ove) via 1, Wwll® ae Cieso 106 Goferare, 2080 Software [C3026 ADVENTENPRISEKD-M), Veredon 12.4(6)7, RELEASE SOFWARE (fot) Teehnizal Support: http://ww.cisco. cen) techsupport Copyright (=) 1985-2008 by Cisca Systens, Ino. OW: Syston Bootstrap, Version 12.8(4)T2, RELEASE SOFTWARE (fe1) Fis uptine is + neur, 24 minstoe Sytem returned to ROM by psload et 18:08:56 UTC Mon May 14 2007 System image File As *flash:03826-edventorprisek0 -a2-124-8.T-bin" ‘This product contains eryptograpnis features end 4s subject to Unites Use. Livery of Cisco cryptographic products doss mat imply thind-party authority te imort, export, distribute or use encryption 2008 cisco systems, Alright resend, This pubaten spotted by copyright Plesoe cs page Si ermere desiLab 2 Router and Switch Configuration Files [435] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Inportors, exporters, distributors and users are responsible fer compliance with U-8. ane lozal country lave. By using this product you gree to conply with applicibis Leve and regulations, 17 you are wable ‘A cumnary of U.8. Lave governing Cisce cryptographic products nay be found at: hetps/nm.cisco.conjwu/axport/erspte/tool/ stag. teal Tf you reauirs further essistanes please contact us by sending anail to cxporticisco. con. (isso sees (revision 1.8) with a7Z¥6aN/S2224K byte oF nenory. 2 Gigabit Ethernet interfaces 2 Serial (yno/asyne) interficse 2 Virtual Private Nasvork (VPN) Modules {70K bytes of WIL 62720K bytes of ATA System CongactFlash (Read/Write) Configuration register is oxziee Router 5 Initial Configuration fst sh cue Building configuration cuncent cunriguretion £ 1428 bytes ' 2008 cisco Systems, Alright resend, This pubatens protected by copyright Peso ss page Skt ermere desiCCIE Routing and Switching Practice Labs Lab 2 Router and Switch Configuration Files version 12.4 service tinssteaps dabup datst ine service tanastenps tog caterine ms%e 1 hostnane FS 1 boot -end-aarksr ' ro Logping console foneble password cts00 fo ae new-nodel ' recourse polisy ip oof ' 1 1 ro ip domein Leohip ' ' 1 1 [436] Martin Jarnes Duggan. COE No. 7942 (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[437] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files 1 1 1 1 1 1 1 1 1 1 1 1 1 Antorface Loopback 1 intorface Gigibitethomneto/0 4p address 120.100.24. 255.255.255.0 aupter auto edie-type ras negotiation ute 2008 cisco systems, Alright reseried, This pubatens protected by copyright Plese so page Si fermere desi[439] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files interface GigibitE thoeneto/* 52.5 255.285.255.0 axpier auto nedie-type ras negotiation auto 1 interface Gert no ip adress shutdmn 1 amtorrace seriale/0/1 shutdmn ip http server no ip nttp secure-server 2008 cisco systems, Alright resend, This pubaten spotted by copyright Plesoe cs page Si ermere desiLab 2 Router and Switch Configuration Files Tins con @ pessword cisco Aegging syncirorous stopbite 4 Lire auc @ stopbite 1 pesstord cisco Aegging syncirorous aegin 1 sotadular allocate 2 1 varity all [439] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 2008 cisco Systems, Alright resend, This pubatens protected by copyright Peso ss page Skt ermere desi[470] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files Router 5 Final Configuration Ast sh rue futlding configuration... Current configuration : 2842 bytes 1 version 12.4 service tnostange osbup daretin ro service pascwerd-aneryption 1 hoot -start-nacker boot -end-rarksr ' foneble password ctso0 ' recourse polisy fs 4 n-nodel (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dastart] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files nowory-si2e ionon 10 ip cof 1 1 no ip domein Leohip ove unicast outing vvoive-sare 0 no depfarn 2008 cisco systems, Alright reseried, This pubatens protected by copyright Plese so page Si fermere desiLab 2 Router and Switch Configurati 1 1 interface Loopback 4p address 120.100, ip osof 1 arse @ Interface Giosbiteth 4p address 120.100. aepler auto speed auto gv address 2007 4gv8 opt 1 arse © 4p address 120.100. ip osof 1 arse? aepler auto nsdiectyee ria negotiation ute ' Amtertace sertene/e stutdmn 1 [472] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 ion Files 1 258.256.255 raenet/0 4.6 255.255.255.0 heraet0y 9.6 255.255.255.0 ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme dasLab 2 Router and Switch Configuration Files interface Sorial@/0/1 no ip aderass router eigrp 1 radietritute ospf 4 default estric 1544 20000 255 1 1500 ro auto-cummiry ' router ospt 4 farea 2 virtual Link 420.100 redistribute eigrp 1 subnets default-estric £200 router bgp 308 no synchronization bop log-reigibor-changes rneighoor 48300 2er-grcup Ledate course Leopback® route-reflestor-client 1 pser-group 43300 9.1 peor-group 43300 34.3 routs-nap PREPEIO out rneignoor 128.1 neighbor 120.1 [a7] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe das(474) CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files no auto-suamiry no ip nttp secure-server 1 1 1 Spx6 router ospf 1 eg cenoy change 1 rovte-uap PREPEND permit 10 notch ip address + ' rovte-aap PREPEND permit 20 mctoh ap adress + 1 rovte-aap PREPEND permit 80 1 (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasLab 2 Router and Switch Configuration Files pessword cisco Aegging syncirorous Aegin stopbite 1 Line vty 04 ‘vso-tameout 0 @ Aeaaing eyncnerous Aegin tranport input telaot 1 [a75} CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 2008 cisco systems, Alright reseried, This pubatens protected by copyright Plese so page Si fermere desi[a76} CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files wbvpn context Default_eontext eel authantisate versfy all fs Ast sh ip rovte Code: C= oomacted, § = statio, R= AIP, M- mubile, B - 0P Et - OSPF external type 1, €2 - OSPF axternal tyoe 2 i 181, ou - 18-18 sumary, L1 - 18-15 lovel-1, L2 - 18-18 Jovel-2 ia - [5-16 inter aren, * = cancidate default, U » par-user static route Gatoway of last resort is not set 0/24 is subnstted, 4 subnets ® 22.0 [200/0) via $20.100.40.1, 0 8 1. 8 + 8 4 8 (2070) via’ 120.400.24.9, 08:34:24 46 subnetted, 2 eubnets o |140/5000} vis 120.100.59.3, 00:21:06, Gigabitethernat0/s ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme dastay CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files o [00/2900416) via 120.109.94.9, 00:35:06, GigebitEtnernsto/e 0/8 18 vardabiy cuonettec, 49 subnets, 3 musks ° 0.4/92 [14072] via 420.100.52.3, 00:21:07, Gigubstethernot®)/+ o 64182 [14014] via 120.100.59.9, 00:21:07, GigebstetneenatO/+ ° 4/92 [110/9] via 129.100.59.3, 00:21:07, GigabstEthernst0/1 o 4.0/2 [00/120100] vin 120.109.04.4, 69:08:84, OigahitEthernet9/® © 129.100.5.0724 48 diractly comacted, Loophack® o 120.100.58.8, 00:31:67, Sigebittnernot0/+ ° 120-400.58.1 00:31:67, Sigebitztnernot0/ om 129.100.88.5, 60:81:07, sagebatetnernot0/? 08, Bigebitetnernst Ore ° 08, Gigubitethenneto/e [002200416] vie 190.4 35:04, SigubstEtnerneta Dd 129.100.2.0724 [00/185160] via 120.100.24.9, 00:95:99, Gigahitetnemneta/0 0 129. 100.68.0)24 [110/2] vie 120.100. 58.3, 00:81:08, GigabatEthernsto/t e 1210)24 se dinostly cennocted, GigabitEshornett/t om 24 [110/3] via 129.100.88.3, 00:81:08, GigabitEthernst0/t © 24 is dirsctly cunnacted, Gigabiteshamett/@ o 128.0) 24 [o0y2sr2nie) via 120.100.24.9, 00:99:90, aigibstEenernetore ° 104/24 [90/2174076) via 120.100.94.9, 00:35:07, GigebitEtnernstor D> 129.100.200.0/24 [o0/2sraure] via 120.100.34.8, 00:38: + SigibitEtnenneto/e (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe das[ara] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files Fst sh ip route eigrp 150.101.0.0/24 is cubnstted, 2 subnets [06/2200416) via 120.100.51.9, 00:36:17, aigubstzenennstO/® 8 is variably subnestec, 19 subnets, 3 mucks ° + Gigabitetherneta/e 96:17, Sigubitethernstore o 17, Gigibitethennctoye 26:14, Sigubsecenernst0/e o + Gigabitetherneta/e o s6:41, Sigibiteenerneto/e D—420.100-100.0724 [ooj2sra0re via 120. 00:35:17, Gigabitethemnetore D> 129.100.200.0/24 (ovieavre) vi 30 14, GigabitEthenneto/e 150.101.0.0/24 is eubnstted, 2 subnets 02 190.101.2.0 [10/5000] vie 120.100.59.3, 00:31:23, Sigebitztnernot0/+ £20.0.0.0/8 is variably subnettec, 19 subnets, 3 mecks 6.1/22 [110"2} vis 120.109.09.3, 00:91:29, @igabitztnernato/s 2.4/22 [140/4] via 426.100.59.3, 00:21:99, Gigabitetharnat®/s 12. 00:31:28, GigabitEtnernstO/t 120. 13, GigebitzthennstO/s 129. 100.7.1/82 [110(2] via 120.100.59.1, 60:81:23, Sigebatetnernot0/+ a (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[479] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files om 10, om 40, 61/82 [11013] vie 120.4 24 [110/2] via 120.1 24 [10/9] via 129.1 BOP table version is 6, Loci router 1D i¢ 120.1 Status coos: © supprosced, d damped, h history, * valid, > best, 1 - intoonel, FIB-failura, § Stale Network Hoxt Hop Metoic LooPe Weight Peth *> 152.100.109.0/24 120.100.88.3 ° 2 1K + 152.200.52.0/28 120.100.58.4 one 10 0 at 100 aK 10 0 at *55952,200,99.0/24 120.100.10. 251152.200.34.0/28 12 £51152.200.35.0/24 120.100.10. Code: C - Comacted, L = Looal, § - Static, R= AIP, B - EOP U = Per-usar Static soute 11 = ISIS L1, 12 - ISIS 2, IA ~ 1818 antevarsa, 18 - 1818 sumery OY = OSPF SGA ext 1, O12 - OSPF ABSA ext 2 D EIORP, BX - ELOAP external, 062 20@7:018:C0:10::/64 [11075000] via FE: :214:0F:FEFC:7950, OLgaDLcEtnarnstO/o 02 paer:c4s:c0:142:/84 [410/006] ‘via FEGO::214:64FF2FEFO:7200, GigabitEthernst0/0 062 20e7:C18:60:12::/64 [110/5000] via FE80::214:0F:FEFC:7200, GgapasEtnenst0/0 ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme das[430] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files 5:00:13::/684 [110/200] FF:FEFO:7290, GigabitEthernst0/0 © 154 0/0) + Sigabitetherns:0/@ L 1128 (0/0) + SigabitEtherns:0/@ or 4 (11072) vis E00: :219;09FFFE7B:E8N@, OigabitEthernet@/0 fst sh ver Cisso 108 Software, 9500 Software [03E25-ADVENTENPRISEKO-W), Version 12.4(8)7, RELEASE SOFWARE (fot) Tecinizal Support: http! fwwaciscs. con techouppert Copyright (=) 1966-2008 by Chaco Systane, Toe Compiled Tu 28-Feb-08 61:02 by cond Ow: systen Bootstrap, Version 12.8(11)T2, RELEASE SOFWARE (101) Fs uptine is + heur, 25 winsto System returned to ROM by reload et 18:17:81 UTO Mon May 14 2007 gysten image File As "flash:09625-advantarprieekt mz. 124-8.1 bin" This product contains eryptographis features and is subject to Unite® Stetes and local country lavs governing inport, axport, transfer a8 Use. Dalivery of Cisco cryptographic products doss nat ply nied party authersty te imvort, export, distribute or veo encryption ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme dasLab 2 Router and Switch Configuration Files [431] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Inportors, exporters, distributors and users are responsible fer compliance with U-8. ane lozal country lave. By using this product you gree to conply with applicibis Leve and regulations, 17 you are wable ‘A cumnary of U.8. Lave governing Cisce cryptographic products nay be found at: hetps/nm.cisco.conjwu/axport/erspte/tool/ stag. teal Tf you reauirs further essistanes please contact us by sending anail to cxporticisco. con. (isso sees (revision 1.8) with 47Z¥6aN/S2224K byte oF nenory. 2 Gigabit Ethernet interfaces 2 Serial (syno/asyne) interficoe 2 Virtual Private Nasvark (VPN) Modules {70K bytes of WIL 62720K bytes of ATA system CongactFlash (Read/Write) Configuration register is ox2iee Router 6 Initial Configuration fot sh cue Building configuration current euntiguretion £ 1832 bytes ' 2008 cisco Systems, Alright resend, This pubatens protected by copyright Peso ss page Skt ermere desiCCIE Routing and Switching Practice Labs Lab 2 Router and Switch Configuration Files version 12.4 service tinssteaps dabup datst ine service tanastenps tog caterine ms%e 1 hosters 5 1 boot -end-aarkr ' no logping console foneble password ctso0 ro aaa new-nodel ' recourse polisy ip of ' 1 1 ro ip domein Leohip ' ' 1 1 [432] Martin Jarnes Duggan. COE No. 7942 (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[439] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files 1 1 1 1 1 1 1 1 1 1 1 1 1 Antorface Loopback 1 intorface Gigabitethomneto/0 4p address 120.100.48.€ 255.255.255.0 aupter auto edie-type ras negotiation ute 2008 cisco systems, Alright reseried, This pubatens protected by copyright Plese so page Si fermere desi[434] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files interface GignbitEthoeneto/* 4p address 150.100.83.6 255.255.255.0 axpier auto nedie-type ras negotiation auto 1 ntorface Serta no ip adress shutdon ' antorrace soriale/0/1 shutdmn 1 1 no ip nttp secure-server 2008 cisco systems, Alright resend, This pubaten spotted by copyright Plesoe cs page Si ermere desiLab 2 Router and Switch Configuration Files 1 1 1 1 1 ‘eac-timeout 0 6 pessword cisco Aegging syncirorous agin Lire ax @ stopbite 1 Line vty 04 Aegging syncirorous Aegin transport input telaet webvpn contort Default_eontext [435] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe das(436) CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files Router 6 Final Configuration fot sh cue sak 10-26 fot sh cue Buttding contiguratin 13: 24.488: $EYS-5-CONFT_T: Configured from console by concole Current centiguretion : 2024 bytes 1 version 12.4 service tinsstenps log catotine move ro service pascwerd-ancryption ' bovt-start-nacker boot -end-rarker ' 1 fo aaa new-nodel ' rewurce poutey nowory-si2e ionon 10 ip of 4p tep intercapt List 100 4p tep interespt mode wetch (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[437] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files 4p tep interospt drop ede random 1 1 ro ip domein Leohip 1 voioe-card @ no depfarn 2008 cisco systems, Alright reseried, This pubatens protected by copyright Plese so page Si fermere desiLab 2 Router and Switch Configurati 1 1 4p adress 120.100, ip ospf 1 arva t 1 [ana] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 ion Files 1 258.256.255 interface Oigabitetarnet0/0 fp adiness 120,100.16. 6 255.285.258.0 ip ospf 1 arva t plex auto space auto 4gv6 address 2007 pv vept 4 aes + interface Gigubitethernst0/* 4p address 120.100.83.6 255.255.255.0 ip oof tara s aepler auto nsdiectyee ria negotiation ute ' Amtertace sertene/e stutdmn 1 ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme das[439] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files interface Sorial@/0/1 no ip aderass router ospf 4 eg acenoy-changes farea { virtunl Link 420.100.4.4 ' router tgp 200 no synchronization yp t0g-reagivor-cnanges 1 updats-soures Leopbuck® 0.4 renate-as 400 0.4 claatdo-conacted-check neighbor 120.1 neighbor 120.1 neighbor 120.1 1 1 ' scones List 1 Sor6 router ospf 4 eg acenoy change arait top any 120,100.60.0 (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe das[430] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files area {authentication ipsee opi 12 v6 ECADECEYEANDRA1 EOBBIEEDEMNDN 1 1 1 cont -plene 1 1 1 1 1 1 svso-timeout 0 @ pessword cisco Acgging syncirorous stopbite 1 Lire auc @ stopbite 1 pessword cisco Aegging syncirorous Aegin (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[a1] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files transport input telaot 1 webvpn contort Default_context feel authenticate versfy all FB# sh ip rovte Codoe: © - comected, § - static, R- RIP, M- mobile, B - S0P D - EDORP, &x'- EIGAP oxtornal, O | OSPF, TA - OfFF inter area EA = OSPF external type 4, &2 = OSHF axcternal type 2 4 18-18, ou - 18-18 sumary, Lt - 18-18 level, L2 Sa» 15-18 inter are © = OD8, F - periodic downloaded static route Gatoway of Last resort is not set 0/24 is subnstted, 4 subnets 2.0 [20/0] via 120.180.10.1, 22.0 [20/0] via 420-400-10-4 24.0 [20/0] via 120.100.10.1, 25.0 [20/0] via 120.100.10.1, 452. 100.0.0/24 18 subnstted, 1 subnets |, - sancidate defanlt, U 'por-user static route ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme das[492] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files 8 34.3, 0/24 is subnstted, 2 subnets 0 2 199,401.2.0 [16/5090] vis 120.100.46.4, 0:91:98, sigHbstetnennsto/e 0 460.404-4.0 [10/5000] vin 120-100.46.4, 00:21:97, Gigebstzenennst0/t 120.0.0.0/8 is variably subnettec, 20 subnets, 3 mcks 0m 129.100.6.1/22 [11072] vie 12004 ST, Sigebittnernot0/+ 0 129.100.8.1/22 [11072] vie 120.4 57, BigebitzthernstO/e © 199,100.10. 1198 [11072] vie 199.1 91:90, OigabitethernetO/t 0 420-100.5.4/22 [14073] vie 120.100.62.9, 00:91:90, Sigshstetnennat + 0 129.100.2.0/24 {11075000} vis 120,100.16.4, 00:91:90, GigabstEthernato/@ [41072000] vin 120,100.40.4, 09:04:00, GigabitCthereet@/@ ° -£.4)82 [11012] via 120-100.46.4, 00:31:90, Sigebitztnernot0/e on 7.4182 [14019] via 120.100.69.9, 00:21:90, Gigebstetnernat/+ c 60/24 is dirgctly cornested, Loupback® oe 16 [41072000] vin 120.100.48.4, 08:94:20, GigahitEtherrata/@ ° 28 100.18.4, 130, GigabitEthervsto/@ {11071000} vin 120,100.16.4, 08:94:20, GigahitEtherneto/@ 100.18.4, 01:81:39, GigabitEthervetO/e -£3.0)24 is directly cxrmacted, GigabitEthornett/1 -93.0/24 [110/2] via 120.100.65.3, 0:81:40, GigabitELnernsto/1 4 9)24 [1107 s900| vin 12 100.18.4, 140, GigabitEthervet0/e ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme das[499] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files ° 140, GigabitEthervet0/e [11071000] vin 120.100.48.4, 08:94:44, GigabitEtherret@/e 02 129.100.200.0/24 [1107 s900| vi 12 sé sh ip rovte osp? 150.101.0.0/24 is subnatted, 2 otbnete 159.104.2.0 [1105000] vie 120.100,46.4, 00:31:48, Sigtbitetnernat0/t [40/5000] vis 120.100.46.4, 00:21:48, GigabitetnernatOe 0/8 is variably subnettec, 20 subnets, 3 micks 8.4182 [198/2] via 120,100.69.9, 00:21:46, S1gHbStEtnenNatO/+ 192 [14018] via 480,409.46.2, 00:94:46, digehitcthernatO/e 4192 [410/21 via 120.100.63.4, 00:81:48, GigabitEthernst0/1 5.4182 [14019] via 120.100.69.9, 00:21:46, SigebstetnernstO/+ 20/24 1107200) win 12 0 120.100.5.0/24 [11073000 via 120,100.26.4, 00:91:46, GigabstEthernatO/@ 0 429.100.4.1/82 [11072] vie 1201100.46.4, 00:31:48, Sigebitztnernot0/e 0 129.100.7.1/82 [110/3} vie 120.100.83.3, 0:81:48, Sigebstetnernot0/ 100.18.4, 141, Gigabstethervete/e RR 0 19.90.0016 [11075900 via 120,100.48.4, GigabitEthernat0ie 0 129.100.1.0/24 [110/s900} via 120.100.48.4, igabitetnareatve 0 129. 100.2.0728 {41071000} vie 120.100.46.4, 08:94:47, GigahitEtherrat@/@ 02 129.100.2.0/24 [11075900 via 120.100.48.4, igabitetnereatv0 (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe das[494] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files om 124 [110/2] via 120.100.63.3, 00:81:47, Gigabitethernst0/1 o 24 [1107 s900) van 12 0 429.100.129.0/24 [1107 s900| via 2 100.46. 00:91:48, exgebstEtnerveto/e 100.48.4, 01:81:48, GigabitEtnervetO/e [1107 2920} vie 120.100.48.4, 09:91:48, GigabitEthervoto/e (41075900) vie 120,100.48.4, Fae sh ip bop BGP table version is 6, Loot) router ID is 129.10.8.1 status coos: © wuppresced, o damped, n nistory, * valid, > best, 1 - antornel, Origin codes: i - 16P, ¢ - ESP, 7 - insomlete 81:48, GigabitEthernatO/o Network Hoxt Hop Netoic LooPe Weight Peth +152. 108.109.0/24 120.100.58.3 ome #5 459.200.22.0/24 0.100.104 ° 2 as *> 152.200.83.0/24 120,100.10. ° 2 aK #5 152.200.34.0/24 120.100.10. ° 2 aK 2 152.200.95.0/28 120.100.1014 e ate 1Ps6 Routing Table - 9 entries Codes: © - Comected, L - Local, 8 - static, R- AIP, B - ESP U = Per-usar Statie soute OW = OSPF SKA ext 1, O12 - OSPF HBEA ext 2 D - EDORP, © - ELGAP external (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasLab 2 Router and Switch Configuration Files [495] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Or 2072/48 [11072] ‘via FE60::24 IFF-FETB:E4M , GigabitEthernst0/0 “vin FEGO: 219 :CHFFAFETB:EAMt, GigabitCthernst@/0 062 29@7:C18:60:11::/64 [110/5000] ‘via FEGO::219:CIFFFETB:E4M , GigabitEthernst0/9 062 20@7:018:60:12::/64 [11075000] vie FEO, :249;09FFFETB:EaAt OigabitEthernst@/0 062 D9@7:C15:C0:492:/64 [11075000] via FE80::210:COFF:FETB:EAMY, GigabitEtnenst0/0 © 2007 :c45:c0:15::/64 [0/0] via, sigabatetnerns:o/@ Lcnnrcres00:465:4/ 120 [0/0] via ::, BigcbitEthernato/e LFE80::/40 [0/0] via i, WD Lr0@::10 ove) foe foe sh ver Cieeo 108 Software, 9800 Sortware (C3E25-ADVENTENPRISEKS-M), Version 12.4(8)1, RELEASE SUF WARE (fot) Teehnizal Support: http:/ww.cisoo. cen techsuppert Copyright (=) 1985-2008 by Cisca Systens, Ino. Compiled Thu 28-Feb-08 61:02 by cond ow: Syetan Bootstrap, Version 12.9(4%n)T2, RELEASE SCETMARE (fo4) ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme das[496) CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files FS uptine is + heur, 28 ninsto System returned to ROM by reload et 18:00:22 UTO Mon May 14 2007 system anage Ale 48 "Tlaeh:02626-adventarpr seek m2. 124-8.1 bn This product contains eryptographis features and is subject to Unite® Stetes and local country laws gavernirg inport, sxport, transfer a8 thind-oarty authority te imort, export, distribute or usa eneryation Inportars, exporters, distributors and users are responsible fer compliance with U-8. anc lozal country lavs. By using this product you ‘gree to conply with applicible Leve and regulations, 17 you are wable ‘A cumnary of U.8. Lave governing Oisce cryptographic products nay be found at: hetps/ww.cisco.conjwul/axport/erspte/tol/ tary. tal Tf you require furthar secistance pleats contact us by sanding omatl 26 exporticisco. con. Cisse S825 (revision 1.0) with 47216aN/52224K bytes of menory. 2 Gigabit Ethernet interfaces 2 Serial (yno/asyne) interficse 2 Virtual Private Nasvork (VPH) Modules DRM contiguretien 4a 64 bite wide with persty snabled. {70K bytes of WIL 62720K bytes of ATA system CongactFlash (Read/Write) Configuration register is oxziee ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme das[437] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files Switch Configuration Files Switch 1 Initial Configuration Building configuration... Current centiguretion : 2781 bytes varsion 12.2 fo service pa service tinastenps debug uptine service tinestenps 1og uptine 1 ' ou 1 fo ass new-nodel 4p subnet-z2r0 1 ‘tp dovain Oote (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe dasLab 2 Router and Switch Configuration Files tp mole transparent no file verify auto spanming-traa extend system 3B CCIE Routing and Switching Practice Labs Vien intemal allocation policy assencing interface Loopback intorface Fastéthernst0/t onitenport mde dynanic desirable intanface FastEthornst0/2 conitencort mde dynanic desirable intorface FastEtharnst0/3 ‘suitenport avcess vian 3¢ [499] Martin Jamas Duggan, COE No, 7042 (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasLab 2 Router and Switch Configuration Files intorface Fastéthernsto/e oritenport ascess vian 34 oratenport mde acovss intorface Fastéthernst0/s onitenport ascess vian 34 onitenport mde acovss interface FastEtharnat OV oritenport ascess vian 48 soritenport mde acovss ntorface Fast tharnst0/? onitencort mde dynanic desirable ' intorface Fastéthornst0/s intorface FastEthernst0/0 onitenport mde dynanic desirable ' ntorface FastEthernsto/10 conitencort mde dynamic desirable ' intorface FastEthernst0/tt sutenport mde dynante dosirabie intorface FastEthornsto/12 conitenport mde dynanic desirable ' [439] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme dasLab 2 Router and Switch Configuration Files intorface FastEthornsto/13 conitenport mde dynanic desirable ntorface FastEthernsto/t4 onitenport mde dynanic desirable ' intorface FastEthornstots 1 intorface FastEthornsto/16 onitenport mde dynanic desirable ntorface Fastbthernsto/t7 conitencort mde dynanic desirable ' intorface FastEthornsto/18 intorface FastEthernste/10 ‘rdtenport trunk envapsulation dotta conatenport mde trunk ntarface FastEthernst]/20 ‘rdtenport trunk envapsulation dotta coritenport mde trunk interface FastEthannet 0/24 ‘rdtenport trunk envapsulation dotta coritenport mde trunk ' (©2008 ceo systems 1800} CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Inc Alrights sere ris pbtzatin is prtscteaby copyrght Peso oo Faye 5 frmoe dais[sot] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files intorface FastEthernst]/22 ‘rdtenport trunk ensapsulation dotta oratenport mde trunk intorface FastEthernst]/23 ‘rdtenport trunk envapsulation dotta coritenport mde trunk interface FastEtharnet@/2e ‘rdtenport trunk envapsulation dotta conitenport mde trunk interface Gigubsteenseneto/+ oritencort mode dynanic desirable intorface Gigibitethomneto/2 interface Vlant no ip aderess shutdmn Sntarface Vans 4p address 120.100.63.1 255.255.255.0 1 4p classiese 4p http securs-cerver (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe dasCCIE Routing and Switching Practice Labs Lab 2 Router and Switch Configuration Files contrel-plane 1 pessword cisco Aegging syncirorous ine vty 04 no Login Line vty 515 Aeaaing eyncnrerous Aegin trancport input telaot Switch 1 Final Configuration i sh ran Buising conriguration Current centiguretion : 5254 bytes 1 version 12.2 fo service pat service tinastenes dabup uptine 802] Martin Jamas Duggan, COE No, 7042 (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das['503) CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files service tinsstenps log uptine no service pascwerd-sneryption ' foneble password cisoo 1 in subset -z0r0 4p routing no ip domein-Loohip ‘te mote transparent 1 no fils verify auto ' spanning ' Vian tntemat entocation poltey aseencing extond syston-i8 2 vlan 84, 48,53, 63,10 8 prionity 24673 2008 cisco systems, Alright reseried, This pubatens protected by copyright Plese so page Si fermere desi[504] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files Vien 89,34,48,53,68, 100,200 1 4p address 120.100, 1 intorface FastEthernst0/t 1 interface FastEthernst0/2 onitenport mde dynanic desirable ntonface FastCtharnst0/o sonitoneort ascess vian 34 conitenport mde acovss ' ntorface FastEthernst0/t 1 258.286.255 coritenport mde acovss ' ntorface Fastétrernste/s conitencort mde access ' intorface FastEthornst0/s sutenport avcess vian 48 ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme dasLab 2 Router and Switch Configuration Files intorface FastEthernste/7 onitenport mde dynanic desirable ntonface Fastethornst0/e onitenport mde dynanic desirable ' intorface FastEthornst0/o 1 intorface FastEthornsto/10 coritenport mde dynanic desirable Antorface FassCtharnsto/tt onitencort mde dynanic desirable ' intorface FastEthornsto/12 intorface FastEthornsto/13 conitenport mde dynanic desirable ' ntorface FastEthernsta/t4 conitencort mde dynanic desirable ' intorface FastEthornste/ts sutenport mode dynante dosirabie intorface FastEthornsto/16 coritenport mde dynanic desirable ' (508) CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe das806) CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files intorface FastEthornsto/17 onitenport mde dynanic desirable ntorface FastEthernsto/16 onitenport ascess vian 30 coritengort mde dotiq-tunnel 1 interface Fast thernste/10 ‘istenport trunk ensapsuTation dotta conitenport mde trunk ' amtorrace Fastetrernste)20 soritencort mde trunk shutdmn, ' ntorface FastEthernst0/2t coritenport mde trunk 1 Antorface FastEthornste)22 soritencort mde trunk shutdmn, ' Amtorace Fastetrernste23 conitenport mde trunk ald port aggressive ' (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasLab 2 Router and Switch Configuration Files intorface FastEthornst0/24 ‘rdtenport trunk ensapsulation dotta sratengort mde trunk ' intorface GigibitE thoeneto/* onitenport mde dynanic desirable interface GigibitEthernst9/? conitenport mde dynanic desirable 1 shutdmn ' Sntarface Vans 807) CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 ' router oop 4 ‘eg acenoy chang network 129.100.89.1 2 ' router bgp 200 neighbor 128.108.5.1 renote-as 3 2008 cisco systems, Alright resend, This pubatens protected by copyright Peso so poge Si ermere desi[150] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files neighbor 128.106.5.1 update-soures Leopbicke ro auto-euamiry 4p http securs-cerver 1 contl-plene 1 ‘veo-timeout 0 @ pessword cisco Aegging syncirorous ins vey 04 no Login Line vty 515 fveo-tameout 0 6 caging eyncnerous Aegin trancport input telaet 2008 cisco Systems, Alright resend, This pubatens protected by copyright Peso ss page Skt ermere desi[809] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files SHE sh ip route ost 0/24 is subnstted, 2 subnets 0 2 199.101.2.8 [110/5009] vie 120.100.83.5, 09:35:28, viarSs 0 460.404-4.0 [10/5000] vie 120.100-59.5, 00:26:21, VBanss 120.0.0.0/8 is variably subnettec, 20 subnets, 3 musks ota. 2) vie 120.4 91, Vises om 40, fa] vie 12004 26, Vass 0% 129.190.10.1192 [11079] vie 120.100.29.3, 00:90:91, VBens9 0 120.100.6.1/22 [14072] vie 120.100.53,5, 00:36:31, Vlors3 ° [11006 + Vans ° [110506 viens om 221/82 [118/4] via 128.100.58.3, 60:36:25, VLarss ow -6.4/82 [14010] via 128.400.60.0, 00:96:86, Viare9 o 2 Varsa ° 1 Vargo ° 96:21, Vans oe [1072009] vie 129.1 20:2, vaareo ow 62.0124 [110/2] vis 190-100.59.9, 09:26:92, Vianss on -8.0)24 [110/3] vie 120.100.58.3, 00:96:27, VIenss oe -24.0/24 [110/5000] vie 120.100.58.5, 00:98:22, Viensa 0&2 149.100.128.0/24 [110/000] via 120.100.59.5, 00:96:22, Vianss on $00.4/24 [440/200} via 120.100.52-5, 09:06:22, Vians oe 200.4) 24 [110/5000} via 120.100.53.5, 00:36:22, Vans HF sh ip route Godse: © + comected, § = static, R- AIP, M- mbile, B - 86° 1 - OSPF oxtornel type 1, &2 - OSPF axternal type 2, & - ESP 4-18-15, ou - 18-18 sumary, L1 - 18-15 lovel-1, 12 - 18-18 Jovel-2 (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[810] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files fa» 18-18 inter are 1% sancidate defanlt, U - por-user static route © = OD8, F - periodic downloaded static route a ® 2 8 100.9 [200/0] vie 120. 0/24 L0 eubnstted, 2 eubnete ° vie 120.100.53.3, ° via 120.100.53.8, 0/8 is variably subnettec, 20 subnets, 3 misks ° 24/82 [10/2] vie 128.400.09.9, 00:36:00, Vieres om 2-4/92 [140/4] via 420.100.59.9, 00:26:99, VIans3 on 10.1182 [110/3] vie 120.100.68.3, 00:96:39, VIenss on [110/2} vie 120.100.58.5, 00:36:80, Vierss oe [11/s0e0) vie 120.108.53.5, 00:95:95, viens on [110/000] via 120.100.59.5, 90:99:00, vIans2 om [11074) vie 120.100.58.8, 00:36:88, viens © is directly coracted, Loopback om )-8.4/82 [11018] vie 120.100.59.8, 00:36:88, Vierss oe 810/16 [118/300] vie 120.108.58.5, vara op 10/24 [140/s000] via 120 100.59.5, vias ° 20/24 53.5, Vers o 20/24 58.5, 00:96:29, VIans3 0K 129. 100.68.0)24 [110/2} vin 120.100.55.3, 0:96:99, VLen5s ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme das[sit] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files © 24 is directly cenmacted, Vianss om 24 [110/3] vie 120.100.68.3, 00:96:84, VIenss oe 24 [110/8000} vie 120.109.55.5, €0:98:20, Viens on 0/24 [440/5000] via $20.100.59.5, 00:96:90, VIanso oe 24 [110/200} via 120.100.53.5, 00:36:80, Vans oe 24 [110/900 via 120.100.53-5, SH sh ip bop Statue cosa: © aingrasced, d danpad, history, * valid, > best, 4 - intarns] F FIB-failure, § Stale Origin coos: i - 16?, € - ESP, 7 - insomplete #55152, 100,109.0/24 120.100. 24.3 ow i #51152.200.32.0/24 120.100.10. 2 19 4 #51152.200.33.0/24 120.100.10. 2 1% 4 s>152.200.04.0/24 120.100.10. ow 4 *31159.200.95.0/24 0.100.104 a 109 i HF sh cép neigh Capability Codes: R - Reuter, T - Trans Bridge, B - Source Route Bridge S- Suiten, H - Host, I~ IaMP, © - Repoater, P - Phone Device 10 Local intros Holctua Capability Pletfoow Port 18 backbone Fas 0/10 saa ST W8.03550-2Fast/s ue Fas 0/21 193 RST WS-C8569-2Fac0)21 ove Fas 0728 138 RST w3-c3se0-2Faco/23 sv Fas 0719 40 RET wS.c3569.2Fac0/10 ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme das[512] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files Ro Fas 0/3 wer RST 3x25 Gigolo 8 Fas 0/8 es RST 3225 Gighlo na Fas 074 vee HSr sms gore fs Fas 07s 420 RET 2m cig0/0 one ue eh ver isso 108 Software, 6350 Software (C3550 TPSERVICESKO-N) , Version 12.2(25)SEE, RELEASE 9G WARE (Ft) Copyright (2) 4065-2408 by Chao Systane, Tne Cowpilad Fri 92-Feb-08 7:24 by antonino nage toxt-base: 010000000, date-bas 11 uptine is 1 four, 31 minutos System returned to RIM ty powar-on Syston imege File Ae "flash: /9850- Speer Scoskd-e 122-28.C66, ‘Tis product contains oryptogrephis features and is subject to Unite® States and local country lavs governirg import, sxport, transfer a thind-oarty authority te imort, erport, distribute or use encryption (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe das[813] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files Inporters, exporters, distributors and users are responsible fer compliance with U-8. ané lozal country laws. By sing this product you gree co conply with applicibls Leve and regulations, 17 you are wable | cumnary of U.S. Lave govarning Cisce enyptogrephic products nay be found at https /wm.cisco.conjwul/axport/erspte/ tol! stag. heal Tf you reauirs further essistance please contact us by sending anail to cxporticisco. con. Cie29 ¥S-Cs850-26 (Perro) procecsor (revision PO) WIth BESZBR/SWEK bytes of Processor board ID CATOEYKI7K Lact reset from wara-recet Furning Leyer2/3 Switching fnage Frtannetconteollen | hes 42 Fast Etharnat/TEFE $09.9 sutarfaces Ethocnat controller 2 hes 12 Fast Ethernot/ IEEE 2 Antara Eetonnot controller 9 hee 4 Gigabit Ethornet/TEEE 602.9 interfase Ethocnat controller & hes 1 Gigebit Ethornet/TEEE 802.3 interface (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[514] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files ‘The passwerd-recivery mechanism is enebled 88K bytes of Flech-simlated WAH. Power supply art nunber: 84-0058.04 Motherboard serdel umber: CATEDNS11K Povor supply serial amber: DTHOGU7SSsK Motherboard revision nubars AG ModeL number: WS-C3550-24-SHT System serial number: CATOD!1KI7K Conriguration register 36 @c10F Switch 2 Initial Configuration 9128 sh ren Building configuration Current configuration : 2288 bytes ' version 12.2 fo service pa service tanasteaps debug upcine ro service pascwerd-sneryption ' hostnane 92 2008 cisco systems, Alright reseried, This pubatens protected by copyright Plese so page Si fermere desi[515] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files no logping console foneble password cisoo wtp dovain OotE ‘tp mode transparent 4p subnet-z0r0 no file verify auto spanning-tr2e noe prst lan intemal allocation policy ascending 1 len $0, 84,48,58,63,100,200 interface Loosback® 4p address 120.100, 1 Amteeace Fascetrernstoyt 1 255.266.255 conitenport mde accvss 1 ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme das16) CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files intorface Fastéthernst0/2 sonitenport ascese vian 200 oratenport mde access intorface FastEthornst0/s ' intorface FastEthernsto/é 1 intorface Fastéthernst0/s onitenport ascess vian 58 oratenport mde access ntarface FastEtharnst0/6 onitenport ascess vian 68 onitenport mde acovss interface FastEthannutO/7 ' intorface FastEthornst0/s ' ntonface Fastethornst0/0 1 intorface FastEthornsto/10 ' amteetace Fascetrernsce/tt intorface FastEthernsto/12 1 (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe dasLab 2 Router and Switch Configuration Files interface Fastétharn 1 interface Fastétharn ' interface Fastétharn interface FastEtharne ' interface Fastétharn Antorface Fastbthernste/10 conitencort trunk ensapevlation dtta conitenport mde trunk ' ntorface Fast thernst0/20 coritenport mde trunk ' sntorface Fastétrarnste/2t coritencort mde trunk ' intorface FastEthernst0)22 ‘dtengort Crunk envapsulation dotta 2/13 one 25 2/18 27 2/18 (©2008 ceo systems [817] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Inc Alights sere ris pbtzatin is prtecteaby copyrght Peso see Faye St formic daisCCIE Routing and Switching Practice Labs Lab 2 Router and Switch Configuration Files intorface FastEthornst0)23 ‘rdtenport trunk ensapsulation dottq oratengort mde trunk intorface FastEthernsto/24 ‘rdtenport trunk envapsulation dotta coritenport mde trunk interface Gigubitéthernet0/* conitenport mde dynanic desirable ' antorrace cigibitetnamneto/2 ' interface Vlant no ip aderass Sntarface Vanté 4p address 120.100.48.2 255.255.255.0 1 4p http ' control 1 1 plane [518] Martin Jamas Duggan, COE No, 7042 ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme das[519] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files Lire con @ pesswora exsco Aegin ine vty 04 no Login seacetimeout 0 6 pesstord cisco Aegging syncirorous agin 1 nd Switch 2 Final Configuration Building cntiguetin Current cenfiguretion : $508 bytes no service paB service tinasteaps debug uptine service tinsstenes 1og uptine ho servtoe pasonerd-sneryption 1 2008 cisco systems, Alright resend, This pubaten spotted by copyright Plesoe cs page Si ermere desi[820] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files hostnane 2 1 foneble password ctso0 fo aaa new-nodel vep douain oot ‘tp mode. transparent fn subnat-rero 4p routing no ip domein-Leohip ss aos 1 1 no file verify auto ' spanning-tree noce rapie-pyst spanning-troe vien 3é,46,83,63,100,200 priority 28672 1 Vien intemal allocation policy assencing van dotrg tay netive vie 20 ranots e580 ' (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe das[21] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files Vian 80,8448, 58,63,100,200 1 flese-uap matsn-elt ¥10E0 1 1 policy-map VIDEO MARK 1 1 4p address 120.100. 1 intorface Fastéthernst0/t 1 255.286.258.0 1 interface FastEthornst0/2 nitenport ascese vian 200 1 intorface FastEthornst0/s ' on (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[822] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files intorface Fastéthernst0/s onitenport ascess vian 58 ratenport mde access 1 intorface FastEthornst0/s sonitenport ascess vlan 68 1 intorface Fastéthernst0/7 ' antorrace Fastetrarnste/s interface FastEtharnst0/0 ' intorface FastEthernsto/10 interface FastEtanneto/tt ' intorface FastEthernsto/12 ' ntonface FastEthernsto/19 1 intorface FastEthernsto/t4 ' Amtortace Fastetrernsteyts conitenport mde access servis -polisy input VIDEO-WAAK spanning-tree perttast ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme dasLab 2 Router and Switch Configuration Files intorface FastEthornsto/16 conitenport ascese vian 200 oratenport mde access spanning-tree pertfast ' intorface FastEthernsto/17 interface FastEtharnatO/se onitenport ascess vian 30 soritenport mde dotig-tunnel ntorface Fastbthernste/t0 conitencort trunk ensapevlation dotta coritenport mde trunk Link state group + upstrean interface FastEtharnet0/20 ‘rdtetport trunk envapsulation dottq sonitenport mde trunk shutdown interface FastEtharnst0/2t ‘rdtenport trunk envapsulation dotta coritenport mde trunk ink state group 1 apetrean intorface FastEthernst0/22 ‘rdtenport trunk ensapsulation dotta ©2008 cisco systems 823] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 he Alrights reserved This pubtzatins protected copyrght Peso see Faye 54 frmowe das24] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files coritenport mde trunk stutdmn, ntorface FastEthernst]/20 coritengort trunk ensapevlation dotta coritenport mde trunk ald port aggressive 1 intorface FastEthernst0/24 ‘rdtenport trunk envapsulation dotta ratenport mde trunk 1 intorface Gigibitethoeneto/* coritenport mde dynanic desirable interface Gigibitethernst/? coritenport mde dynanic desirable ' sntarface Vlant stutdon ' Sntarface Vans Ap Address 120.100.48.2 208.288.258.0 router ospf 4 eg acenoy change (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe das[825] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files router bgp 200 no synchronization bp 1og-reigibor-changes of remote 2 1 updats-soures Leopbeck® neighbor 120.1 ' 4p classless ap nttp server ' 1 soosee List 1 arait top any any rargs 6090 3201 contrel-plene ' 1 svso-timeout 0 @ pessword cisco Aegging syncirorous aegin Hin vey 04 no Login Line vty 515 fvso-tameout 0 6 (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[826] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files pessword cisco Aegging syncirorous aegin 1 1 roniter session 1 source interface Fat/t sn 9128 sh ip route Nt - OSPF NSS extornal type 1, NO - OSPF NSSA oxtommel type 2 Et - OSPF oxternel type 1, 2 | OSPF axternal type 2, 4-18-18, ou - 18-18 sumary, Lt - 1-18 lovel-1, 2 Gatoway of Last resort is not set 0/24 se cabnstted, 4 eubnete (2070) +0 (2070) [20079) vie 120.0 80.0 [20/0] via 120.10 0/24 x subnstted, 1 subnets {20/0} vie 120.100.34.3, 0/24 is subnstted, 1 subnets via ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme das[827] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files © 1s eirectly comected, Viens 0/24 is subnstted, 2 subnets oe [146/8090} vie 120.109.06.4, 69:34:21, Viana 0 460.494-4.0 [10/5000] vie 120.100-46.4, 00:27:08, VBanas 120.0.0.0/8 is variably subnettec, 20 subnets, 3 mecks 0 120.100.6.1/22 [11073] vie 120.108.48.6, 00:37:24, VDaras © 120.100.8.0/24 ic directly comacted, Loopback 0 129. 190.10.1192 [11079] vie 120.100.45.0, 0:97:20, VBends 01 420.100.5.1/22 [14074] vie 120.100.46.6, 00:97:74, Viana o ° om 1/82 om 74/00 he 120:109.40.6, 00:27:24, Vande o 84192 via 120.100.46.6, 00:97:27, Vlan4s ° 18 sre, Vianis o 77, Vans oe 20/84 [110/9000] vin 120.1 rier, Vaan on 20/24 [140/500] via 120.4 2708, Vlani® om 4 [110/2] via 120.1 37:28, Viana on 2 [110/9] via 120.1 3728, Viana. © 1291100.26.0)24 de dansctly conmactod, Vianss oe 24.0)24 [149/5000] vie 120.409.48.4, 00:97:08, Vien4s ° 24 [410/900 via 120.100.48.4, 00:97:08, Viana ° 24 [110/000 via 120-100-484, 00:97:08, Viana ° 24 [110/000 via 120.100.48.4, 00:97:08, Viana ae su tp raute ospr 4$50.101-0.0/24 2 subnstted, 2 atbnete 0 199,101.2.0 vis 120.100.46.4, 00:24:26, Vanas o via 120.100.46.4, 00:97:11, VandS 120.0.0.0/8 45 variebly subnettec, 20 subnets, 3 mcks ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme das[828] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files om 81/82 [11913] vie 120.4 om 10.1182 [110/3] vie 120.1 ow -S1/82 [18/4] via 120.100.46.5, 08: oe [10/5000] vie 120.100.48.4, 90:34228, VBants o in om [11072} vie 420.1 om 7.1782 [11014] vie 120.4 ° 64/82 [11012] vie 128.400.40.6, 00:37:82) Viard® 0 129.100.0076 o ° oe [11@/s009) v8 120.1 ow 4 [44072] via 10004 om 24 (110/3] vie 120.1 ° 24 [110/5000) vie 12 ° 0/24 [110/000] via 120.100.48.4, 8:87:13, Vanes oe 24 [1407 2900} vi 120.100.4845 69:97:19, Vane op 200.024 (110/5900) vin 120.100.16.4, 00297243, Viande 128 sh ip bop BGP table version is 6, Loci) router ID is 129.10.8.1 Status coos: © wupprosced, ¢ damped, hn nistory, * valid, > best, 1 - internal, Origin coos: i - 16?, ¢ - ESP, 7 - insomplete Network Hoxt Hop Metoie LooPe Weight Peth so1152,100.100.0/28 120.100.58.3 om s31459.200.2.0/24 120.100.10-4 ery £51152.200.93.0/24 120.108.1041 2 1% *51152.200.84.0/24 ow 2>1152.200.95.0/28 120.100.1014 2 1 (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe das[829] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files 9128 sh cép neigh Capability Codes: R - Reuter, T - Trans Bridge, B - Source Route Bridge 5» sutton, Host, I - Iai, ¢ - Repoater, F - Fone Device 10 Local intefee Holctus Capability Pletfoow Port 18 backbone v2 Fas 0/10 199 ST W8.03550-2Fast/S ue Fas 0/19 aa RST W3-€3560.2Fac0!19 ou Fae 0728 17 Re — wo-coeea-2Fac0/23 910 Fas 0/24 40 RST wS.cOS69.2Fae0/24 Re Fas 0/2 55 RST gras Fact Ri Fas 0/1 18 RST 3225 Gighlt co Fas 075 a3 RSr sms tagort fs 151 RST 3x25 Gigolt owe ove eh ver Ciece 106 Software, 69260 GoFtwere (C3560-TPSERVICESKO-M), Version 12.2(25)8EE, RELEASE SCE WARE (22) Copyright (=) 1085-2008 by Cisco Syston, Tho. (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[1830] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files Compiled Fri 89-Feb-¥8 7:08 by antonsno nage toxt-base: 010000000, data-base: O:01705000 BOGTLO: C3589 Beot Loacer (03550-FBOCT-M) Version 12.2|25r)SEA, FELEASE SOFWARE (fe) System raturnad to ROM by powaron System imego File is "flash: /03550-ipsorvicosh9-z 122-25.SEE.bint Stetes and losel country lavs governira inport, sxport, transfer a8 Use. DaLivery of Cisco cryptographic products doss mat ply thind-party authority te imort, export, distribute or use encryption compliance with U8. ane 2osal country lave. Sy using this product you ‘gree to conply with applicibla leve and regulations, If you are wable +0 comly witn U.S. and Locil laws, return this prodict insedictely. http: /ww.cisco.coniwul/axoort/erspte/ tol tara. tal If you reqiire further essistance plesse contact us by sending onail to exporteciseo.com. cis20 ¥S.C3689-208 |PonerPL40s) processor (revision NO} with *18734K)12230K bytes of wenory. ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme das[831] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files Prosessor board ID CATOCASN2S0 Lat caeet from power-on 2 Gigabit Ethernet interfaces The passwerd-rocavery mechanism is eneblod. SHEK bytes of Flesh-simdated non-velstide configuration manor). fam etharnat IAG Adinees + 40:18:62:85:8860 Motherdoard ascoubly nurber = 78-0873-06, Powor supply part nunber 24} -9020-04 Power supply sersel wmter + OTHODYG0HD ModeL cavieion number 0 Motnerdoard evision nurber—: K® Mods number 1 WS-(2560-24F6-8 Top Assontly Revision Muabor : 82 Version ID ves CLEL Gods tomer com oe friten Forts odel Version SH image +4 oe mS.casse.sas — 49.2(08)88F Casta. 1PSEWVICeSKE- Configuration register 36 OF ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme dasCCIE Routing and Switching Practice Labs Lab 2 Router and Switch Configuration Files Switch 3 Initial Configuration 912" sh ren Building configuration current euntiguretion : version 12.2 fo service pa service tinastenps dsbup uptine ro service pascuerd-aneryetion ' hostnane 92 foneble password cisoo ' rer-nodel 4p subnet-z2r0 no ip domein-Leohip [832] Martin Jamas Duggan, COE No, 7042 2008 cisco Systems, Alright resend, This pubatens protected by copyright Peso ss page Skt ermere desi[1833] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files no fils verify auto spanning-tree nooo prst spanning-troe extend syston 38 ‘Vien intemal allocation poliey asssncing 1 lan 20,84,48,58,63,100,200 Interface Loosback® 4p address 120.100, 1 amtorrace Fastetrernstoyt interface FastEtharnst0/2 ' intorface FastEthornst0/s interface FastEtharnutO/t ' intorface FastEthornst0/s ' Antonface Fastethornst0/6 1 intorface FastEthernst0)7 ' anterace Fascetrernsc0/s intorface Fastéthernst0/o 1 1 255.256.255 (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[834] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files intorface FastEthornsto/10 1 antorrace Fascetrarnste/1t intorface Fastéthernsto/12 ' intorface FastEthernsto/13 interface FastEtharnato/ta ' intorface FastEthornsto/ts ntorface Fastbthernsto/t6 ' intorface FastEthernsto/17 ' interface Fast thernste/16 intorface Fastéthernsto/10 ‘rdtenport trunk envapsulation dotta conitenport mde trunk interface FastEtharnst]/20 ‘rdtenport trunk envapsulation dotta conitenport mde trunk interface FastEtannet0/24 ‘rdtenport trunk envapsulation dotta coritenport mde trunk ' ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme das[1835] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files intorface FastEthornst022 ‘rdtenport trunk ensapsulation dotta oratengort mde trunk intorface FastEthernst0)23 ‘rdtenport trunk envapsulation dotta coritenport mde trunk interface FastEtharnat0/2e ‘rdtenport trunk envapsulation dottq conitenport mde trunk ntorface Gigubstenseneto/+ 1 intorface Gigibitethamneto/2 ' shutdwn ' sntarface Vans 1 Sntarface Vian69 4p address 120.100.83.8 255.255.255.0 4p http server ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme das[1836] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files 4p http sscurs-cerver 1 contrel-plene ' 1 ‘seac-timsout 0 @ pessword cisco Aegging syncirorous aegin ine vey 84 no Loain Line vty 515 « Aegin transport input teleet 1 Switch 3 Final Configuration Buti entguatin Curent cenfiguretion + 2730 bytes 1 2008 cisco Systems, Alright resend, This pubatens protected by copyright Peso ss page Skt ermere desi[837] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files version 12.2 no service pa service tanasteaps dsbup upcine ro service pascuerd-sneryption ' rable password chsow 1 no aaa new-nodel ‘yep dovaan cose 4p subnet-z0r0 4p routing no ip domein-Leohip 10 no file verify auto ' spanning-tree noce rapie-pvst spannag-troe extend syetem-i8 lan intemal elevation policy ascending 1 (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[1833] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files Ven 29,34,48,53,68, 100,200 1 4p address 120.100, 1 intorface FastEthernst0/t interfaoe FastEtharnatO/? ' intorface Fastéthornst0/s Antonface FastCtharnst0/é ' intorface FastEthornst0/s ' ntorface Fast thernst0/6 intorface Fastéthernst0)7 ' ntorface Fastétrernste/s interface FastEtharnst0/0 ' intorface FastEthornste/10 interface FastEtanneto/ts ' intorface FastEthernsto/12 ' 1 255.256.255 ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme das[1839] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files intorface FastEthornsto/13 1 antorrace Fastetrernsteta intorface FastEthornsto/ts ' intorface FastEthornsto/16 interface FastEtharnstO/s7 ' intorface FastEthornsto/18, ntorface Fastbthernste/10 conitencort trunk ensapevlation dotta sonitenport mde trunk spanning-tres vlan 84, 46,100,200 cost 100 interface FastEtharnet0/20 ‘rdtenport trunk envapsulation dotta soritenport mde trunk shutdown interface FastEtharnst0/2t ‘rdtenport trunk envapsulation dotta coritenport mde trunk interface FastEtharnet0/22 ‘rdtemport trunk envapsulation dotta coritenport mde trunk shutdown ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme das[510] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files intorface Fastéthernst]23 ‘rdtenport trunk ensapsulation dotta soratengort mde trunk ' intorface FastEthernst]/24 ‘rdtenport trunk ensapsulation dotta shutdoen 1 intorface GigibitE thoeneto/* ntorface Gigabsteenseneto/2 1 interface Vlant no ip aderass interface Vianso 4p address 120.100.63.8 255.255.255.0 1 4p address 120.100.83.8 255.255.255.0 1 router oop 4 2eg-adjacency oranges frea 2 virtusl Link 420.100.6.4 network 120.100.9.1 0.6, area? (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe das[sit] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files rovter bgp 300 no synchronization bp 1og-reigibor-changes neighbor 128.106.5.1 renote-as 3 neighbor 120.106.5.1 update-oource Leopbick® neighior 120,100.10.4 raote-as 400 neighbor 128.10€.10.1 disablo-comactad-check rneighor 120.108. 10.1 pdate-soures Loopbacl® rn auto-euamiry 4p classless Ap http server 4p http securs-cerver 1 contrel-plene ' Lire con @ fveo-timeout 0 @ pessword cisco Aeyging syncnrorous Line vty 04 ro Login (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasCCIE Routing and Switching Practice Labs Lab 2 Router and Switch Configuration Files Line vty 615 fvso-timeout 0 @ pesswora exsco cain trancport input telaet fonitor session 4 dastination interfacs FA0/47 fonitor etesion 1 source remota vlan 2 ne Codser & D Ms comected, § - static, R- AIP, M EIGAP, EX - EIGR? external, 0 OSPF SSA axtarvel type 1, M2 5-15 inter eras, * - vancidate default, U - por-usar static coute 004, F - poriodis dovnloaded static rwute bile, 8 - 35° OSPF, TA - OSPF inter area (SPE SSA oxtarnal type 2 0/24 is subnstted, 4 subnets 2.0 [20/0] via 120.100.10.1, 53.0 [20/0] via 120.100.10.1, 24.0 [20/0] vie 420-400-10-4 25.0 [20/0] via 120.100.10.1, 0/24 is subnstted, 1 subnets [512] Martin Jamas Duggan, COE No, 7042 ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme das[519] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files 8 34.3, 0/24 is subnstted, 2 subnets 0 199.101.2.8 [110/8009] vie 120.109.63.5, 89:38:08, ViaNES 0 460.404-4.0 [10/5000] vie 120.100-69.5, 00:97:58, vBanss 120.0.0.0/8 is variably subnettec, 20 subnete, 3 mucks © 129.100.6.0/24 ic diractly comested, Loopback 0 120.100.8.1/22 [11073] vie 120.100.63.6, 00:38:08, VRar63 0129. 190.10.1/92 [11072] vie 120.100.69.4, 00:90:17, VIen6 0 429.100.5.4/22 via 126.400,69.5, 00:28:07, Vans o 95300, Vans ° a, Vans om via 120.100.69.6, 00:28:07, Vanes ° aris, Vans ° aris, Vans © 24 is directly cxrmactod, Viané3 © 24 is directly cxrmacted, Vians3 0 129. 100.25.0/24 [110/2] vin 120.100.65.5, 0:98:07, VIen6s oe 24.0)24 [449/5000] vite 120.409.59.5, 20:97:57, Viens? ° 24 [410/000 via 120.100.53.5, 00:97:58, Vans ° 24 [110/000] via 120.100.53.5, 00:97:58, Vianss ° 24 [110/900} via 120.100.53.5, 00:97:58, Vlanss HSE sn tp route ospr 4$50.101-0.0/24 2 subnstted, 2 atbnete 0 199,101.2.0 vis 126.100.69.6, 00:25:14, Vans o via 120.100.59.5, 00:28:01, Vans 120.0.0.0/8 15 variebly subnettec, 20 subnets, 3 mecks ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme das[54] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files om 81/82 [110/8] vie 120.100.69.8, 00:38:11, Vierés o 10.1182 [110/2] vie 120.100.63.4, 00:88:21, VIen6s ° -5.1/82 [118(2] via 120.100.58.5, 60:38:71, Viens oe 1000] vin 120,100.59.=, 90:26714, Vane ° ° ° 7-42 ow 64/82 [110/2] vie 128.400.09.6, 00:30:12, Vieres 0 120.100.6.0/16 [14075000] via 120,100.53.5, 00:38:02, Viana ° ° o ° 120.100.59.5, 0 oe 24 [110/5000) via 120.100.83.5, oe 24 [140/2900] va 120.100.59.0, 09: BOP table version is 6, Loctl router ID is 129.10.0.1 Status codes: © supprosced, d damped, h history, * valid, > best, 1 - internal, AIB-failura, 8 stale Network Hoxt Hop Metoic LocPef Weight Peth + 152,100.100.0/24 120.100.10. #5 459.200.09.0/24 120.100.10-4 #> 152.200.93.0/24 120.108.1041 > 152.200.34.0/24 7 152.200.95.0/28 120.100.10.1 (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe das[515] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files HEF sh cép neigh Capability Codes: R- Reuter, T - Trans Bridge, B - Source Route Bridge 5» sutton, Host, I - Iai, ¢ - Repoater, F - Fone Device 10 Local intefee Holctus Capability Pletfoow Port 18 backbone Fas 0/10 188 ST nS9550-2Fae/ 16 ou Fas 0/19 ve RST w5-€3560-2Fact!19 ove Fas 0/2 124 Re —wa-coce»-2Feo0/24 sue HF eh ver Cisso 108 Software, 63560 Software (C3580 TPSERVICESKO-M), Version 12.2(25)SEE, RELEASE SOF MARE (to2) Copyright (2) 4065-2000 by Ciace Ojetena, Ino. Compiled Fri 83-Feb-08 €7:38 by entonino nage toxt-base: 0100005000, data-base: O:01105000 BOGTLOR: (2560 Beot Loacer (C9550-KBOGT.M) Version 42.2|25r)SE4, RELEASE SOFWARE (fe) 3 uptine 1s 1 Four, $6 minutos Sytem returned to RUM by power-on System image File is "flash: /03550-ipsorvicosh9-1z 122-25.SEE.bin* (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasLab 2 Router and Switch Configuration Files [516] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Tis product contains eryptogrephis features and is subject to Unite® States and local country lavs governing inport, axport, transfer a8 DeLivery of cisco cryptographic products doss mot amply ty athersty te imyort, export, distribute or veo encryption Inportars, exporters, distributors and users are responsible fer compliance with U-8. ane lozal country lave. By using this product you ‘gree to conply with applicibla leve and regulations, If you are wable | eamnary of U.S. Lave govarning Cisce eryptogrephic products nay be found at hetps/ww.cisco.conjwul/axport/erspte/tol/ tary. tal exporticisco. con. ‘lease contact ue by sending amet te cis20 ¥S-C3589-208 |PonerPL40E) processor (revision NO} with *18734K)12230K Lact raeet from power-on 8 Virtual Ethernet interfaces 24 FastEtternst antertaces ‘The passwerd-rocavery mechanism is eneblod. 51K bytes of Flesh-simlated non: Power supply pert nusber : Motnerdoard sardel umber Powor supply serial wmter = oletile configuration astory. 24} -9029-04 caTeogseocy vvenareeca ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme dasLab 2 Router and Switch Configuration Files Model cavieion number Motherboard revision nuxber Sytem corsa munbor Top Assembly Fart Hunber Top Assontly Aovision Nunbor Version 1D Hardware Board Revision Number + 4 a G.c0s80-2475 [897] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 25861-¢8 ‘version sw mage 12.2(25)8E 96H TPSEIVTOESKE-W Switch 4 Initial Configuration ua sh ran Building configuration 1 version 12.2 fo service pa service tinestemps dup upcine 1009 bytoe 2008 cisco systems, Alright resend, This pubaten spotted by copyright Plesoe cs page Si ermere desi[599] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files service tinsstenps log uptine no service pascwerd-sneryption 1 ro Logping console foneble password cisoo fo aa new-nodel vtp douain 0ote th made transparent 4p subnet-z2r0 no file verify auto spanning-tr2e noce prst 1 Vien intemal allocation policy assencing 1 1 interface Loopback Ap address 120.100.10.1 255.255.255.8 (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe dasLab 2 Router and Switch Configuration Files interface Fastétharn 1 interface Fastétharn ' interface FastEtharn interfioe Fast Ethane ' intorface Fastéthornst0/s ntonface FastCtharnst0/7 1 interface Fastétharn ' Sntarface FastEtharn ' sntarface Fastétharn interface Fastétharn ' interface Fastétharns ' interface Fastétharns ' on ore 0/8 0/8 0/8 7 2/10 on 2112 2/13 oie 25 [519] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro dasLab 2 Router and Switch Configuration Files intorface FastEthornsto/16 1 amtorrace Fastetrernste/17 intorface FastEthornsto/18, ' intorface FastEthernsto/10 switonsort mde trunk 1 intorface FastEthernst]/20 ‘rstenport trunh envapsuiatson cotta 1 intorface FastEthernst0/2t ‘rdtenport trunk ensapsulation dotta intorface FastE thernst0/22 ‘rdtenport trunk envapsulation dottq conitenport mde trunk interface FastEtharnst]/20 ‘rdtenport trunk envapsulation dotta conitenport mde trunk interface FastEtharnet0/24 ‘rdtenport trunk entapsulation dotta coritenport mde trunk ' (©2008 ceo systems, 11880] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Inc Aleights sere ris pbtzatin sprtecteaby copyrght Peso oe Faye St forme das[851] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files interface GigibitE thocneto/* 1 amtorrace cigibitetnamneto/2 interface Vlant no ip aderass stutdmn interface VIad69 4p address 120.100.83.4 255.255.255.0 1 4p claseiess ' 1 1 Lire con @ pessword cisco Aegging syncirorous Aegin Line vty 615 pessword cisco 2008 cisco systems, Alright resend, This pubaten spotted by copyright Plesoe cs page Si ermere desi[1882] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files Aegging syncirorous Aegin nd ‘Switch 4 Final Configuration ua sh ren Current configuration : 2885 bytes 1 service tinasteaps dsbup uptine service tinsstengs log uptine ro service pascwerd-ancryption hostess ue ' foneble password cisoo vtp douain cote Vt made transparent 4p subnet z2r0 4p rouctng 2008 cisco Systems, Alright resend, This pubatens protected by copyright Peso ss page Skt ermere desi[1859] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files no ip domein-Leohip 1 1 1 1 ' spanning-troe noce rapie-pust spanning-troe extend syston-iB 1 lan 34, 48,53, 63,10 1 4p address 120.100. 1 Antorface Loopbacks 1 interface Loopback 4p address 152.200.28.1 255.255.255.0 4p address 152.200.24.1 255.255.255.0 1 4 255.255.255.0 (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das854) CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files interface Loopback 4p addooss 152.200.05.1 255.255.255.0 Antonface FastEthernst0/t ' Sntarface Fastétharn 1 1 interface Fastétharn ' interface FastEtharn ' interface Fastétharn ' Sntarface Fastétharns ' ntonface FastEthernste/10 1 intorface FastEthernst0/tt or 2/8 0/8 018 218 or ore 2/0 intorface FastEthernsto/13 1 2008 cisco systems, Alright reseried, This pubatens protected by copyright Plese so page Si fermere desi11885) CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files intorface FastEthernsto/t4 1 amtorrace Fastetrornstey1s intorface FastEthornsto/18 ' intorface FastEthornsto/17 interface FastEtharnetO/se ' intorface FastEthernsto/10 ‘rstenport trunh envapsuiatson dotta 1 intorface FastEthernst0 20 ‘rdtenport trunk envapsulation dottq 1 intorface FastEthernst0/2t spanning-tres vlan 84,4, 100,200 cost 100 coritencort mde trunk ' intorface FastEthernst022 ‘dtenport Crunk envapsuletion dota stutdmn 1 ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme das11856) CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files intorface FastEthernst]23 ‘rdtenport trunk ensapsulation dotta ratengort mde trunk ' intorface FastEthornst0/24 ‘rdtenport trunk ensapsulation dotta shutdoen 1 intorface GigibitE thoeneto/* ntorface Gigabsteenseneto/2 1 interface Vlant no ip aderass Sntarface Vian69 4p address 120.100.83.4 255.255.255.0 1 router oopf 4 1e9-adjacenoy-chanays retwork 120.10 router bgp 408 no syohronization by Log-reigibor-changes network 152, 200.22.0 mask 255.255.255.0 (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe das1887] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files network 152,20 network 152,20 neighbor 120.1 rneighvor 120.1 neighbor 120.1 neighbor 120.108.9.1 no auto-eummiry ' 4p claseiess 1 1 1 1 Lire con @ pessword eisso Aegging syncirorous Aegin Line vty 518 vso-timeout 0 @ mmesk 255.255.256.0 isk 255.255.256.0 disable-oonniotad- check Updats-cource Leopbuck® renots-ae Undats-source Leopback® (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[1858] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files pessword cisco Aegging syncirorous aegin 1 nd Codes © + onmacted, § = static, R= RIP, M- mabe, B 86° 1D EIGRP, Ex'- ELORP external, 0. OSPF, TA OSPF inter area Nt - OSPF NSS extornal type 1, N2 ~ OSPF NSSA axtommel type 2 1 OSPF oxtornel type 1, &2 | OSHF axternal type 2, E - ESP ia - 15-18 intor aren, * - candidate default, U - per-usor static route © = OD8, F - periodic dovnloaded static route © © © 85.0 is dirvetly connected, Leopbacks 0/24 is subnstted, 1 subnets 8 100.8 [20/0] via 120.100.6.1, 00:3 10.101.9.0/20 1s eubnatted, 2 stinete 0 $e0.404.2.0 [16/5000] via 120.100.62.6, 00:25:50, VIanes 0 490.101.1.0 [110/5000] vie 120.100.63.6, 00:28:52, viar6s [10/5090] via 120. 100.63.3, 00:38:52, var6s 120.0.0.0/8 4s variably subnettec, 20 subnets, 3 mcks ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme das[1859] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files om 2] vie 120.4 07, Vana om 3] vie 120.1 07, Vise © 124 18 anrectiy cennacted, Loopback ow 54/92 [110/9] via 420.400.60.9, 00:26:67, Viaré ° 95169, VIar62 96:00, VLar62 o 95:22, VIar62 0 120,100,4.1/22 [14073] vie 120.100.63.6, 00:38:53, VIeres on ).7-4)82 [11018] vie 120.100.83.8, 00:30:08, Vierés on )-8.1/82 [110/2] vie 120-100.83.8, 00:30:08, Vierés oe 5000] 2a 120.1 98362, \ian6 ° via 120.1 98:3, VIar62 via 120.1 98:68, Vane ° via 120.4 98:63, VIar62 via 120.4 98:88, VLar6 © directly cannactod, Vianss 0 129. 100.88.0/24 [110/2} vin 120.100.68.3, 0:89:00, VIen6s ow 16.0)24 [149/2] vis 120-400.69.6, 00:20:00, vianeo ° 24 [110/5000] vie 120.100.68.8, 00:38:54, Viens [110/500] vie 120.109.88., 08:38:54, Views ° 128.4) 24 [1107 000) 100.89.8, 1:98:54, Vlan6s [1107 s00), 10.69.5, e0:98:54, vian6s on 1004/24 (440/200), 190.8218, 8:28:84, VIande [1107 5200), 100.89.3, 1:98:54, VIan6s oe 200.4) 24 [110)200) 0.89.8, 1:98:54, VIan6s [110/000 via 120.100.83.3, 0:98:54, vanes ©2008 ceo systens. ne Alrigts sere ris pbtzatin srtsceaby copyrght Peso seepage St forme das[1880] CCIE Routing and Switching Practice Labs Martin Jarmas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files 9a sh ip route ostt 0/24 is subnstted, 2 subnets oe [116/8090} vie 120.109.63.6, 69:36:05, viares 0 460.404-4.0 [10/5000] vie 120.100-62.6, 00:28:50, vBanes |140/5000} via 120. 100.63.3, 00:38:58, vanes 0/8 is variably subnettec, 20 subnets, 3 micks ° -8.4)82 [11012] via 120-100.63.3, ° -64/82 [110/9] vie 128.100.09.6, 00:30:16, ViereS 0m 429.100.5.1/22 20:29:63) Viares ° 9:06:05, viaréa om )-4.4)82 [11018] vie 120.100.63.8, 00:38:69, Vierés on )7-4/82 [11018] vie 120-100.89.8, 00:30:74, Vierés om 2] via 120.100.83.8, 00:30:78, Vierés oe 5000] via 120,100.63. Viera 5000] via 420 100-69 vias oe ‘ia 120,100.69.6, vara ‘ia 120,100.69.9, viaraa oe v8 120,100.69.6, vars oe 120,100.69.6, vara 420, 190.69.2, 90:98:59, VIar6 om -<3.0)24 [110/2] vie 120.100.68.3, 00:89:15, VIen63 on -8.0/24 [110/2] vie 129.100.65.8, 0:99:18, vIeN6S oe 24.0124 [140/5000] viz 120.400.69.6, 00:30:00, VIeneo [11075000] vie 120.109.58.3, 00:30:00, Views ° vanes [110/000 via 120.109.83.3, 9:39:00, viangs (©2008 ceo systens ne lights sere ris pbtzatin is rtecteaby copyrgt Pees oeo paz St frmowe das[831] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files o 100.4) 24 [11075000] via 120.100.83.6, vanes [110/2200} via 120.100.83., vanes oe 200.0) 24 [110/500] via 120.109.83-86, vanes [1107 200| via 120.400.69-9, vines ua en ip bop BOP table version is 6, Locil router ID ic 192.200.85.1 Stetus codes: © supprosced, d damped, h history, * valid, > best, 1 - intone, Origin codes: i 16P, © - ESP, 7 - incomplete Network Hoxt Hop Metoic LooPe Weight Peth + 152,100.100.0/28 120.100.9.1 ° +> 152,200,02.0/24 ° sere > 152.200.83.0/24 ° sere > 152.200.34.0/24 ° sere > 452,200.98.0/24 ° sere Capability Codes: R - Reuter, T - Trans Bridge, B - Source Route Bridge 8» Sulton, Host, I - I3MP, - Repoater, P - Phone Device 10 Lscad intefoe Hoictno Capability Pletfonw Pont 18 ou Fas 0/21 wea RST W5-€8569-2Fac0)21 owe Fas 0/19 es RST w3-¢3560-2Faco!19 our Ciuso 10S Software, C2560 Suftuare (C5560. TPEERVICESID-W) , Version 49.2(25)SEE, RELEASE SOFWARE (2) (©2008 cisco systens. ne Alrigts sere ris pbtzatin is rtsceaby copyrght Peso See pay St fro das[1882] CCIE Routing and Switching Practice Labs Martin Jarnas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files Copyright (=) 1985-2008 by Cisco Syetens, Tho. Compiled Fri 99-Feb-08 7:08 by antonino nage toxt-base: ex0veasn09, data-base: erorTC5we OW: Bootstrap program ic 63660 boxt loader (3560 Bot Loader (03589-HEOCT-M) Voreiun 12.2|25r)SEA, RELEASE SOFWARE 16 uptine is + four, 36 winutas System returned to RIM ty powar-on System imego File is "flash: /03550-ipsorvicosh9-z 122-25.SEE.bin* ‘Tis product contains oryptoarephis features and is subject to Unite® States and local country lavs governirg inport, sxport, transfer a Use. DaLivery of Cisco cryptographic products doss nat’ mply compliance with U-8. ané lozal country lave. By using this product you fgroe to conply with applicibla leve and regulations, If you are nable 0 comly witn U.S. and Lecil laws, return this product insedictely. ‘A cumnary of U.8. Lars governing Gisce cryptographic products nay be found at: hetps/nm.cisco.conjwul/axport/erspte/tol/ stag. heal IF you reqitre Turtner essistance plesse contact us by sending omelt to citeo ¥S-C3589-208 |PonerPL40E) processor (revision NO} with *18734K)12230K bytos ot memory. ©2008 ceo systems ne Alrights sere Tis pbtzatin is prtscteaby copyrght Peso See paz St forme das[1889] CCIE Routing and Switching Practice Labs Martin Jamas Dugoan, CCIE No. 7942 Lab 2 Router and Switch Configuration Files Prooessor board 1D CATOCOSN2A Lact raeet from power-on 2 Gigabit Ethernet interfaces The passwerd-rocavery mechanism is eneblod. Stak bytes of Fe fara etharnat WAG Adirece + 40: 15:62:85:84'60 Wothersoard ascoubly nusber —: 78-0873.06, Povor supply part nunber 24} -9020-04 Power supply serdal winter + OTINDOICAR2 Model cavieion number © Motherboard cevision nurber—: K® Mods number 1 WS-(2560-24F6-8 Top Assontly Revision Muabor : 82 Version ID ves CLEL Gods tomer com oe friten Forts odel Version SH image +4 oe mS.casse.sas — 49.2(08)88F Casta. 1PSEWVICeSKE- Configuration register 36 OF ©2008 cco systems. ne lights sere ris publican is rtscteaby copyrght Peso see Faye St forme dasCCIE Routing and Switching Practice Labs ian bon cena agente Sat ‘hopes gona agent Susp rgevgcie scat Bae reheat tetas Warning and Disclaimer The rations pridecon "2h The pris Pe See hl enter’ iti ty i ae aig toma Sa ei ein ial hr Caton CCIE Routing and Switching Practice Labs Martin J. Duggan (Cepia © 28 Cio Syms Sache tugs nan 2400S is ard Noa i gal SC my be ped eo (comp psn cietre teal ing erp ‘Soo py eo sn tte et vie Fle May 08 (Warning and Disclaimar The rnin pride "2h The pris Pe Ene sheen lag nares ies aya igang fot cam a ie ‘Trademark Aekrowledgments in i a ht hr ra oi me hen em a iit str‘Cu steve as te ily any aa eh Feedoack information (i omg rin pb ek fie phn ual abe bok aed inc ac ogee oct nto ee pst ene (lyst dg SC orev en eet a ars waa Corporate and Government Sabs ‘hing os mating, nd waning ines Fe me flaw ma US Ceres ‘Cnet as asta epalsupssonengepece Fernie te Unie Stes les ric erat Saleen pean Trademark Ackrowiedgments ‘A em icin is al ho Cat soon betes sie mse en cp ht tated Chen resi Sem nen ae arf hana La ae ils Talal Shor Gaba renee ste ey cing ama ae ks Feedback Information {iC Penge ks the hp gual ake. Ec beak ial Saw annein nse icone lyst males ana cyst nee the Foran hava Sem sista Sect ser aaron weal 2008 cisco systems, ne.Ailrigtsesered This puteatn is protects by copyght Peso se page St fro ata