Ccie Routing Switching

CCIEROUTING&SWITCHING
www.MicronicsTraining.com
NarbikKocharians
CCIE#12410
R&S,Security,SP
3550/3560
Answers
CCIER&SbyNarbikKocharians FREE LabsPage 1 of338

2007NarbikKocharians.Allrightsreserved
RouterToSwitchconnection
CAT1 CAT2
R1
F0/1 F0/1
F0/0F0/1
R2
F0/2 F0/2
F0/0F0/1
R3
R3F0/3 F0/3
F0/0 F0/1
R4
F0/4 F0/4
F0/0F0/1
R5
F0/5 F0/5
F0/0F0/1
R6
F0/6 F0/6
F0/0 F0/1

CAT1 CAT2
F0/20
F0/19
F0/22F0/21 F0/21 F0/22
F0/19
F0/20
SW3 SW4
CAT1 SW4
F0/7
F0/8
CAT2 SW3
F0/7
F0/8

Lab1
Basic3560configurationI
Task1
ConfigurethefirstandthesecondswitchtobeinVTPdomaincalledCCIE
BeforeassigningaVTPdomainname,theremustbeatrunkestablishedbetween
thetwoswitchessotheconfigurationswillbepropagatedtotheotherswitch.
Onboth switches
Switch#Showinterfacetrunk
Switch#
Notethetwo3560sswitchesareconnectedwith 2crossoverethernetcables,ifthese
switcheswere3550s,thetwo portswouldhavenegotiatedanISLtrunk,actually
theywouldshowupasnisl,thisisbecausebydefaulttheportswereconfigured
indesirablemode.With3560switches,theportsarenotindesirablemode,ashow
runintf0/19willrevealthisinformation,andtherefore,theport/smustbe
configuredstaticallytotrunkornegotiateatrunk.
OnBothswitches:
Switch#Showcdpneighbors
CapabilityCodes:RRouter,T TransBridge,BSourceRouteBridge
S Switch,HHost, I IGMP,r Repeater,P Phone
DeviceIDLocalIntrfceHoldtmeCapabilityPlatform PortID
Switch Fas0/22 178SI WSC35602Fas0/22
NotetheShowcdpneighborscommandrevealstheportsconnectingthetwo
switches.Theoutputmaybedifferent.

OnBothswitches:
Switch(config)#intrangef0/1920
Switch(configifrange)#switchporttrunkencapsulationisl
Switch(configifrange)#switchportmodetrunk
Toverifytheconfiguration:
On thefirstswitches:
Switch#Showinttrunk
Port ModeEncapsulationStatus Nativevlan

Fa0/19on isl trunking1
Fa0/20on isl trunking1
PortVlansallowedontrunk
Fa0/1914094
Fa0/2014094
PortVlansallowedandactiveinmanagementdomain
Fa0/191
Fa0/201
PortVlansinspanningtreeforwardingstateandnotpruned
Fa0/191
Fa0/20 none
Nowthatthetrunkisestablishedbetweenthetwoswitches,youcangoonwithVTP
configurationasfollows:
Onthefirstswitch
Switch(config)#VTPdomainCCIE
Bydefaultthe3560switchesarememberofadomaincalledNULL,therefore,after
enteringtheabovecommand,you will getthefollowingmessageunlesstheswitch
wasmemberofanotherdomain:
ChangingVTPdomainnamefromNULLtoCCIE
ThistaskcouldalsobeaccomplishedbyenteringtheVLANdatabaseasfollows:

Switch#Vlandatabase
Switch(vlan)#VtpdomainCCIE
Switch(vlan)#Exit
WhenacommandisenteredintheVlandatabase,youmustperformtheexitor
theapplycommandforthechangestotakeeffect.
NotethedisplaybelowrevealsthatVTPpropagatedtheVTPdomaininformationto
thesecondswitch:
Onthesecondswitch:
Switch#Shvtpstatus
VTPVersion :2
ConfigurationRevision :0
MaximumVLANssupportedlocally:1005
NumberofexistingVLANs :5
VTPOperatingMode :Server
VTPDomainName :CCIE
VTPPruningMode :Disabled
VTPV2Mode :Disabled
VTPTrapsGeneration :Disabled
MD5digest :0x570xCD0x400x650x630x590x470xBD
Configurationlastmodifiedby0.0.0.0at000000:00:00
LocalupdaterIDis0.0.0.0(novalidinterfacefound)
Task2
ThisVTPdomainshouldbepasswordprotectedusingCiscoasthepassword.
On bothswitches
Switch(config)#vtppasswordCisco
Youshouldgetthefollowingmessage:
SettingdeviceVLANdatabasepasswordtoCisco
Note,ifa domainnameisnotassignedtotheswitchesand thedefaultnameof

NULLisused,apasswordcannotbeassigned.
ThisVTPpasswordcommandcanbeenteredinglobalconfigurationmode,
privilegeconfigurationmodeorintheVLANdatabasemode.

Thepasswordcommandmustbeconfiguredstaticallyonbothswitchesbecausethis
changewillNOTgetpropagatedviaVTPmessages.
OntheFirstswitch
Switch#Showvtpstatus
VTPVersion :2
NumberofexistingVLANs:5
VTPOperatingMode:Server Themodeisserverbydefault
VTPDomainName:CCIE Thedomainname
VTPV2Mode :Disabled
MD5digest :0x140x7D0x150x090xDC0x390x650xC2
VTPpasswordcanbechangedinthreeways:
Privilegemode:
Switch#vtppasswordCisco
VlanDatabase:
Vlandatabase
VtppasswordCisco
Exit
Globalconfigmode:
Switch(config)#vtppasswordCisco
OntheSecondswitch
Switch#Showvtpstatus
VTPVersion :2
ConfigurationRevision:0
VTPOperatingMode:Server Themodeisserverbydefault

VTPDomainName:CCIE Thedomainname
VTPPruningMode:Disabled
VTPV2Mode :Disabled
VTPTrapsGeneration:Disabled
MD5digest :0x570xCD0x400x650x630x590x470xBD
Onanyoftheswitches:
Switch#ShowVTPpassword Thisverifiesthepassword,remember
Spaceswillnotshow
VTPPassword:Cisco
Task3
ThefirstCatalystswitchshouldbeconfiguredwithahostnameof Cat1andthesecond
Catalystshouldhaveahostnameof Cat2.
OnthefirstSwitch
Switch(config)#HostnameCat1
OntheSecondSwitch
Task4
Cat2shouldNOThavetheabilitytocreate,deleteorrenameVLANorVLAN
information.
On Cat2
Cat2(config)#Vtpmodeclient
Thisconfigurationcanbeperformedinthevlandatabaseor globalconfigmode.

Theabovecommanddisplaysthecommandasitwasenteredintheglobalconfig
mode.Ifyouareaskedtoenterthecommandinthevlandatabase,youmustfirst
enterthevtpdatabasecommandintheprivilegemode,thenenter vtpclient
andlastlytheexitcommandmustbeusedforthechangestotakeeffect.
Oncethecommandisenteredyoushouldgetthefollowingmessage:
SettingdevicetoVTPCLIENTmode.
Theswitchescanoperateinthreemodesandtheyareasfollows:
SERVERTheswitchisabletodelete,create,orrenameVLAN
information.Catalyst3560in servermodeparticipatesintheVTP
domainandpropagatestheVLANinformation.
CLIENTInthismodetheswitchisabletoreceiveandprocessthe
VTPmessages,buttheyarenotabletocreate,delete,orrename
VLANinformation.TheycanassignaporttoagivenVLANthat
alreadyexists.Catalyst3560inclientmodeparticipatesintheVTP
domainandpropagatestheVTPmessages.
TransparentInthismodetheswitchisabletocreate,deleteand
modifytheVLANinformationbutitwillnotpropagateitsVLAN
informationtootherswitches.Catalyst3560switchesinthismodedo
NOTparticipateinVTPdomain.ACatalyst3560switchmustbein
thismodeinordertocreatetheextendedrangeVLANs(10064094),
thisconfigurationcanonlybeperformedinthe globalconfigmode
andNOTin the Vlandatabase. Whentheswitchisinthismodethe
VLANinformationispartoftherunningorstartupconfiguration,the
VLANinformationisNOTkeptintheVLANdatabase(vlan.dat).
Task5
CreateandconfigurethefollowingVLANassignmentson Cat1:
RouterInterface VLANnumber CATSwitchesPort

R1F0/0 12 SW1F0/1
R2F0/0 12 SW1F0/2
R3F0/0 34 SW1F0/3
R4F0/0 34 SW1F0/4
R5F0/0 56 SW1F0/5
R6F0/0 56 SW1F0/6

On Cat1
Cat1(config)#interfacerangef0/12
Cat1(configif)#switchmodeaccess
Cat1(configif)#switchaccessvlan 12
Cat1(config)#interfacerangef0/34
Cat1(configif)#switch accessvlan 34
Cat1(config)#interfacerangeF0/56
Cat1(configif)#switch accessvlan 56
Cat1(configif)#End
NotetheVlaninformationwillbepropagatedtotheotherswitch(Cat2),because
bothswitchesareinthesameVTPdomainandtheyarebothconfiguredwiththe
samepassword.
On Cat2
Cat2#Showvlanbrie
VLANNameStatusPorts

1defaultactiveFa0/1,Fa0/2,Fa0/3,Fa0/4
Fa0/5,Fa0/6,Fa0/7,Fa0/8
Fa0/9,Fa0/10,Fa0/11,Fa0/12
Fa0/13,Fa0/14,Fa0/15,Fa0/16
Fa0/17,Fa0/18,Fa0/23,Fa0/24
Gi0/1,Gi0/2
12VLAN0012active
34 VLAN0034active
56VLAN0056active
(Therestoftheoutputisomitted)
Cat2#ShowVTPStatus
VTPVersion:2
Maximum VLANssupportedlocally:1005
VTPOperatingMode:Client
VTPDomainName:CCIE

VTPV2Mode :Disabled
MD5digest:0x970x9D0xF10xF90xFE0x210xCC0x1D
On Cat1
Cat1#ShowVTPStatus
VTPVersion:2
VTPOperatingMode:Server
VTPDomainName:CCIE
VTPV2Mode:Disabled
MD5digest:0x970x9D0xF10xF90xFE0x210xCC0x1D
Note,VTPversionis2,Configurationrevisionis3,numberofexistingVLANsis8
onbothswitches,(becausetheyaresynchronized),andthereasontheVLAN
informationwaspropagatedisbecausetheVTPdomainnameandthepasswordis
identicalonbothswitchesandtheswitchesaretrunked.
Task6
ConfigureLoopback0andLoopback1interfaceson Cat1,usetheIPaddressof1.1.1.1
/8and11.1.1.1/8respectively andensurethatONLY theIPaddressofLoopback1
interfaceisusedasthepreferredsourcefortheVTPIPupdateraddress.
NoteinthepreviousTaskwhentheshowvtpstatuscommandwasenteredon
Cat1, thelastlineoftheoutputdisplayednovalidinterfacefound.
NoteCat1 willalwaysusetheloopback0interfaceasthesourceofallVTP
messages,butthisbehaviorcanbechangebyusingtheVTPinterfaceLoopback1
globalconfigcommand.
On Cat1

Cat1(config)#InterfaceLoopback0
Cat1(configif)#Ipaddress1.1.1.1255.0.0.0
Cat1(config)#InterfaceLoopback1
Cat1#Showvtpstatus
VTPVersion:2
VTPOperatingMode :Server
VTPDomainName:CCIE
VTPV2Mode:Disabled
MD5digest :0x970x9D0xF10xF90xFE0x210xCC0x1D
LocalupdaterIDis1.1.1.1oninterfaceLo0(preferredinterface)
Preferredinterfacenameislo0
NoteLoopback0isusedasthesourceofallVTPmessages.Enterthefollowing
commandtochangethesourcetoLoopback1interface:
Cat1(config)#VtpinterfaceLoopback1only
NotetheONLYargumentmakesthisinterfacemandatory.
On Cat1
Cat1#Showvtpstatus
VTPVersion :2
ConfigurationRevision: 3
VTPOperatingMode:Server
VTPDomainName:CCIE
VTPV2Mode :Disabled
LocalupdaterIDis11.1.1.1oninterfaceLo1(preferredinterface)
Preferredinterfacenameisloopback1(mandatory)
On Cat2
Cat2#Showvtpstatus
VTPVersion :2
VTPOperatingMode:Client
VTPDomainName:CCIE
VTPV2Mode :Disabled
Notethischangehasnotbeenpropagated,therefore,youmustcreateaVLAN
(VLAN80)on Cat1 soyoucanseethatthechangewasmadebytheLoopback 1
interfacewithanIPaddressof 11.1.1.1onCat2.ThisVLANshouldbedeleted
beforeproceedingtothenexttask.
On Cat1
Cat1(config)#Vlan80
Cat1(configvlan)#Exit
On Cat2
Cat2#Showvtpstatus
VTPVersion :2
VTPOperatingMode :Client
VTPDomainName :CCIE
VTPV2Mode :Disabled

MD5digest :0x020x050x920x340xF00xC00x350x9D
On Cat1
Cat1(config)#Novlan80
Task7
ConfigureatrunkbetweenthetwoswitchesusingportsF0/19andF0/20.Noneof these
switchesshoulduseDTPtonegotiatethetrunk.
On BothSwitches
(config)#InterfacerangeF0/1920
(configifrange)#Switchportmodetrunk
(configifrange)#Switchportnonegotiate
Notetheportsmustbeintrunkmodebeforethenonegotiatecommandisentered,
otherwiseyouwillreceivethefollowingerrormessage:
Commandrejected:Conflictbetweennonegotiateanddynamicstatus.
Aportcanbeconfiguredasfollows:
StaticAccessThisportcanbelongtoONLYoneVLAN,anditsmanually
assignedtoagivenVLAN.
Trunk AtrunkportbydefaultismemberofallnormalrangeVLANs11005(but
notethatVLANs1,1002 1005areautomaticallycreatedandcannotberemoved,
only2to1001canbemanuallycreated,theseVLANsarekeptintheVLAN.DAT).
ThisalsoincludestheextendedrangeVLANs(10064094),andthismembership
canbelimitedbyconfiguringtheallowedvlancommand.Thisportcanbe
encapsulatedbyISLortaggedby802.1q.
DynamicAccessAdynamicaccessportcanonlybeamemberofonenormal
VLAN,andtheseportsaredynamicallyassignedtoagivenVLANbyaVMPS.
VoiceVLANThisisanaccessportconnectedtoanIPphonesuchasCiscos7960,
andthisVLANisusedforVoicetraffic.
Dot1qTunnel Thesearetunnelportsandareusedfor802.1qtunnelingto
maintaincustomerVLANintegrityacrossaserviceprovidersnetwork.Atunnel
portisconfiguredonanedgeswitchintheserviceprovidersnetworkandits
connectedtoan802.1qtrunkportonacustomerswitchsinterface,atunnelport
belongstoasingleVLANthatisdedicatedtotunneling.
Task8
Configuretheswitchessuchthatfloodedtrafficisrestrictedtothetrunklinksthatthe
trafficmustusetoreachthedestinationdevice.
Toseethedefaultsetting:
On Cat2
Cat2#Show vtpstatus
VTPVersion :2
ConfigurationRevision : 5
VTPOperatingMode :Client
VTPDomainName :CCIE
VTPV2Mode :Disabled Pruningisdisabled
Configurationlastmodifiedby 11.1.1.1at319300:12:48
NoteVTPPruningisdisabledbydefault,enterthefollowingtoenableVTP
pruning:
On Cat1
Cat1#Vtppruning
Thiscommandcanbeconfiguredinprivilegemode,Globalconfigmode,and/orin
theVlandatabase.Oncethisfeatureisenableditwillgetpropagatedtotheother
switcheswithintheVTPdomain.
Toverifytheconfigurationonbothswitches:
On Cat2
Cat2#Show vtpstatus
VTPVersion :2
ConfigurationRevision : 5
VTPOperatingMode : Client
VTPDomainName :CCIE
VTPPruningMode:Enabled
VTPV2Mode :Disabled
Configurationlastmodifiedby 11.1.1.1at319300:12:48
NoteVTPmessagespropagatethechangethroughtheentireVTPdomain.
Task9
ConfigureCat1andCat2 suchthatonlythetrunkports(F0/19andF0/20)andtheports
thatroutersR1toR6areconnectedtoareinuse,therestoftheportsshouldbe
configuredinadministrativelydownstate.
OnBothSwitches:
(config)#Intrangef0/718,F0/2124
(configifrange)#Shut
Task10
EnsurethatCat1 istherootbridgefortheVLANs12,34andCat2 istherootbridgefor

VLAN56.DoNOTuse theprioritycommandtoaccomplishthistask.
Therearethreecommandsthatcanbeusedto displaytheBIDforagivenswitch:
Showversion
Showspanningtreebridge

On Cat1
Cat1#Showversion
Cat1#Showver
CiscoIOSSoftware,C3560Software(C3560ADVIPSERVICESK9M),Version12.2(25)SEE2,
RELEASESOFTWARE(fc1)
Copyright(c)19862006byCiscoSystems,Inc.
CompiledFri28Jul0612:34byyenanh
Imagetextbase:0x00003000,database:0x012237D0
(Theoutputisomitted)
512Kbytesofflashsimulatednonvolatileconfigurationmemory.
BaseethernetMACAddress:00:19:56:DB:94:00
Motherboardassemblynumber :73989706
Powersupplypartnumber :341009702
Motherboardserialnumber :CAT10385ERJ
Powersupplyserialnumber : DCA103584S4
Modelrevisionnumber :D0
(Therestoftheoutputisomitted) ThebaseMAC
ThefollowingcommandrevealsthebaseMACaddressoftheswitch,thecombinationof
priorityandthebase MACaddressistheBIDfor agivenswitch.
Cat1#Showspanningtreebridge
HelloMaxFwd
Vlan BridgeID TimeAge DlyProtocol

VLAN0001 32769 (32768,1) 0019.56db.9400 2 20 15 ieee
VLAN0012 32780 (32768,12) 0019.56db.9400 2 20 15 ieee
VLAN0034 32802 (32768,34) 0019.56db.9400 2 20 15 ieee
VLAN0056 32824 (32768,56) 0019.56db.9400 2 20 15 ieee
Notetheprioritystartswith32768,eachVLANthatiscreatedaddsitsVLANnumberto
thedefaultpriorityvalue(IfthebasepriorityandtheVLANnumberisaddedwithinthe
parenthesis,thesumwillbethepriorityforthatgivenVLAN),VLAN12adds12tothe
defaultpriorityvaluethereforethepriorityis32780andVLAN34adds34tothedefault
priorityvalue,therefore,thepriorityis32802.Notethat theMACisthebaseMACaddress
andit remainsthesame,inthiscase(0019.067f.8900).
NoteyourMACaddressmaybedifferent.
TofindouttheBIDandtherootbridgeforagivenVLAN,enterthefollowingShow
command:
On Cat1
Cat1#Showspanningtreevlan12
VLAN0012
Spanningtreeenabledprotocolieee TheMACaddressoftherootbridge
RootIDPriority32780
Address0019.56db.9400
Thisbridgeistheroot
HelloTime2secMaxAge20secForwardDelay15sec
BridgeIDPriority32780(priority32768sysidext12)
AgingTime300
TheMacaddressofthelocalswitch
Interface Role Sts CostPrio.NbrType

Fa0/19 Desg FWD 19128.21 P2p
Fa0/20Desg FWD 19128.22 P2p
NotetheoutputoftheShowspanningtreevlan12onyourswitchmightshowmoreports.
EnterthefollowingcommandstoconfigureCat1tobetherootbridgeforVLANs12and
34:
On Cat1
Cat1(config)#Spanningtreevlan12,34rootprimary
TheabovecommandconfiguresCat1tobetherootforVLANs12and34theroot
keywordisamacrothatreducestheBIDofthe switchforagivenVLANbyavalueof 8192

(Thelower valueisthepreferredvalue).Therearenospacesbetweenthe12andthecomma
andthe34.
Cat1#Showspanningtreevlan12
VLAN0012 Note32768+128192=24588
Spanningtreeenabledprotocolieee
RootID Priority24588
Thisbridgeistheroot
BridgeID Priority24588 (priority24576sysidext12)

AgingTime300

InterfaceRoleStsCost Prio.NbrType

Fa0/19DesgFWD19 128.21P2p
Fa0/20DesgFWD19128.22P2p
On Cat2
Cat2(config)##Spanningtreevlan 56rootprimary
Cat2
Cat2#Showspanningvlan56
VLAN0056
Spanningtreeenabledprotocolieee
RootID Priority24632
Address001a.2f0a.2000
Thisbridgeistheroot
BridgeID Priority24632 (priority24576sysidext56)

Address001a.2f0a.2000
AgingTime300
InterfaceRoleStsCostPrio.NbrType

Task 11
ConfigureCat1suchthattheportsthattheroutersareconnectedtobypasslisteningand
learningstate.IfanyoftheseportsreceiveBPDUpackets,they shouldtransitioninto
errdisablestate.Useminimumnumberofcommandstoaccomplishthistask. This
configurationshouldonlybeappliedtotheportsthattheroutersR1 R6areconnected
to.

On Cat1
Cat1(config)#Spanningtreeportfastbpduguarddefault
Cat1(config)#InterfacerangeF0/16
Cat1(configif)#Spanningtreeportfast
Oncetheportfastcommandisenteredyoushouldseethefollowingwarning
message:
%Warning:portfastshouldonlybeenabledonportsconnectedtoasingle
host.Connectinghubs,concentrators,switches,bridges,etc...tothis
Interfacewhenportfastisenabled,cancausetemporarybridgingloops.
UsewithCAUTION
%Portfastwillbeconfiguredin6interfacesduetotherangecommand
butwillonlyhaveeffectwhentheinterfacesareinanontrunkingmode.
Thespanningtreeportfastbpduguarddefaultcommandinglobalconfigmode
willshuttheportdowninerrdisablemodeifanyportfastenabledportreceives
BPDUpackets.
Task 12
ConfigureCat2suchthattheportsthattheroutersareconnectedto(F0/1F0/6) bypass
listeningandlearningstate.IfanyoftheseportsreceiveBPDUpackets,they should
loosetheirportfaststate. Thisconfigurationshouldapplytoexistingandfutureportsthat
areconfiguredasportfast.
On Cat2
Cat2(config)#Spanningtreeportfastbpdufilterdefault
Cat2(config)#InterfacerangeF0/16
Cat2(configif)#Spanningtreeportfast
Oncetheportfastcommandisenteredyoushouldseethefollowingwarning
message:
%Warning:portfastshouldonlybeenabledonportsconnectedtoasingle
host.Connectinghubs,concentrators,switches,bridges,etc...tothis
Interfacewhenportfastisenabled,cancausetemporarybridgingloops.
UsewithCAUTION

%Portfastwillbeconfiguredin6interfacesduetotherangecommand
butwillonlyhaveeffectwhentheinterfacesareinanontrunkingmode.
Atthegloballevel,youcanenableBPDUfilteringonPortFastenabledinterfaces
byusingthespanningtreeportfastbpdufilterdefaultglobalconfiguration
command.
Task 13
YoureceivedarequestfromtheITdepartmenttomonitorandanalyzeallthepackets
sentandreceivedbythehostconnectedtoportF0/14on Cat1 youhaveconnectedthe
packetanalyzertoportF0/15onthesameswitch.Configuretheswitchtoaccommodate
thisrequest.
On Cat1
Cat1(config)#monitorsession1sourceinterfaceF0/14both
Cat1(config)#monitorsession1destinationinterfaceF0/15
Notethefollowing:
Therecanonlybetwomonitor sessionsconfiguredonagivenswitch
TheirdirectiontomonitorcanbeconfiguredasRx,Tx,orBoth. Rxis
forreceivedtraffic,TxisforTransmittedtraffic,andbothisinboth
direction.
VLANscanONLYbeconfiguredinRxdirection.
ToverifyEnter theShowmonitorsession1command.
On Cat1
Cat1#Showmonitorsession1
Session1
Type:LocalSession
SourcePorts:
Both:Fa0/14
Destination Ports:Fa0/15
Encapsulation:Native
Ingress:Disabled

Task14
YoureceivedanotherrequestfromyourITdepartmenttokeeptrackofalltheMAC
addressesthatarelearnedby Cat2portF0/18.Theswitchmustuse theNMSlocatedat
192.168.1.1/24,configuretheswitchtohandlethisrequest. YoushoulduseanIP
addressof2.2.2.2/8toaccomplishthistask.
On Cat2
Cat2(config)#Snmpserverhost192.168.1.1trapprivate
%IP_SNMP3SOCKET:can'topenUDPsocket
Unabletoopensocketonport161
NotesincethisswitchisnotconfiguredwithanIPaddress,itwillfailtoconfigure
theSnmpserver.Therefore,anIPaddressshouldbeconfiguredbeforeenteringthe
snmpservercommandasfollows:
Cat2(config)#Intlo0
Cat2(configif)#Ipaddr2.2.2.2255.0.0.0
Cat2(config)#snmpserverhost192.168.1.1 trapprivate
(TosetuptheSnmpServer)
Cat2(config)#snmpserverenabletrapsmacnotification
ConfigurestheswitchtosendmacaddresstrapstotheNMS
Cat2(config)#macaddresstablenotification
ToenableMACaddressnotification
Cat2(config)#Interf0/18
Cat2(configif)#snmptrapmacnotificationadded
TheabovecommandenablestheSNMPtrapon interfaceF0/18andconfiguresthe
switchtosendMACnotificationtrapswheneveraMACaddressisadded.Ifthe
switchmustbeconfiguredtoreporttheMACaddressesthatarelearntandexpired,
thensnmptrapmacnotificationremovedcommandmustalsobeconfigured.
Cat2#Showmacaddresstablenotificationinterfacef0/18
MACNotificationFeatureisEnabledontheswitch
Interface MACAddedTrapMACRemovedTrap


FastEthernet0/18 Enabled Disabled
Noteifthesnmptrapmacnotificationremovedcommandwasalsoenteredfor
F0/18interface,undertheMACremovedTrapcolumnyouwillalsoseeas
Enabled.
Cat2#Showmacaddresstablenotification
IntervalbetweenNotificationTraps:1secs
NumberofMACAddressesAdded:0
NumberofMACAddressesRemoved:0
NumberofNotificationssenttoNMS:0
MaximumNumberofentriesconfiguredinHistoryTable:1
CurrentHistoryTableLength :0
MACNotificationTrapsareEnabled
HistoryTablecontents
Task15
On Cat2portF0/14configuretheamountofbandwidthutilizationforbroadcasttraffic
to50%.
On Cat2
Cat2(config)#InterfaceF0/14
Cat2(configif)#Stormcontrolbroadcastlevel50.00
StormcontrolcanbeusedforBroadcast,UnicastandMulticasttraffic,this
commandspecifiestrafficsuppressionlevelforagiventypeoftrafficfora
particularinterface.Thelevelcanbefrom0to100andanoptionalfractionofa
levelcanalsobeconfiguredfrom099.Athresholdvalueof100percentmeans
thatnolimitisplacedforthespecifiedtypeoftrafficavalueof0.0meansthatthe
particulartypeoftrafficisblockedalltogether.
On3550switcheswhentherateofMulticasttrafficexceedsapredefinedthreshold,
allincomingtraffic(Broadcast,MulticastandUnicast)isdroppeduntilthelevel of
Multicasttrafficisdroppedbelowthethresholdlevel.Oncethisoccurs,onlythe
Spanningtreepacketsareforwarded.WhenBroadcastor Unicastthresholdsare
exceeded,trafficisblockedforonlythetypeoftrafficthatexceededthethreshold.

Cat2#Showstormcontrolf0/14broadcast
InterfaceFilterState Upper LowerCurrent

Fa0/14Forwarding50.00%50.00%0.00%
Task16
MacaddresseslearntdynamicallybythesetwoswitchesshouldnotstayintheMAC
addresstableiftheyareinactiveforlongerthan10minutes.
BydefaulttheMACaddressesthatareinactivewillexpirewithin300seconds,this
taskisaskingfora10minutesthreshold,10minutesequatesto600seconds,the
followingcommandwill accomplishthistask:
On Cat1andCat2
(config)#Macaddresstableagingtime600
On Cat1orCat2
Cat1#Shmacaddresstableagingtime
VlanAgingTime

1600
12600
34600
56600
Task17
Formanagementpurposes,assignanIPaddressof10.1.1.11/24toCat1,withadefault
gatewayof10.1.1.2/24.
On Cat1

Cat1(config)#InterVlan1
Cat1(configif)#Noshut
Cat1(configif)#Exit
Cat1(config)#Ipdefaultgateway10.1.1.2
Task18
ConfigureroutersR1andR3usingthefollowingIPaddresses:
R1F0/0=10.1.12.1/24
R3F0/0=10.1.34.3/24
ConfigureCat1 toroutebetweenVLAN12and34suchthattheserouterscanpingeach
other.UseanyIpaddresson Cat1 toaccomplishthistask.
OnR1
R1(config)#InterfaceF0/0
R1(configif)#Ipaddress10.1.12.1255.255.255.0
R1(configif)#Noshut
R1(configif)#Exit
R1(config)#Iproute0.0.0.00.0.0.010.1.12.100
OnR3
R3(configif)#Noshut
R3(configif)#Exit
R3(config)#Iproute0.0.0.00.0.0.010.1.34.100
On Cat1
Cat1(config)#Iprouting
Cat1(config)#InterfaceVlan12

Cat1(config)#InterfaceVlan34
ASwitchVirtualInterface(SVI)representsaVLANofswitchportsasoneinterface
totherouting.OnlyoneSVIcanbeassociatedwithaVLAN.Thisisnecessarywhen
configuringInterVlanrouting.
WhencreatinganSVIforaVLAN,thedesignatednumbermustmatchtheVLAN
number.
OnR1
R1#Ping10.1.34.100
Typeescapesequencetoabort.
Sending5,100byteICMPEchosto10.1.34.100,timeoutis2seconds:
!!!!!
Successrateis100percent(5/5),roundtripmin/avg/max=1/2/4ms
OnR3
R3#Ping10.1.12.100
!!!!!
Task 19
RemovetheconfigurationfromthepreviousstepandconfigureInterVlanrouting
betweenVLANs12and34.DONOTuseSVIstoaccomplishthistask.F0/1interfaceof
anyroutercanbeusedtoaccomplishthistask.UsetheIPaddressingfromtheprevious
task.Ensuretouseanindustrystandardprotocolforthetrunk.
SinceR5sF0/0ispartofVLAN56,R5sF0/1isusedtoaccomplishthistask.
On Cat1
Cat1(config)#NoInterfaceVlan12

Cat1(config)#NoInterfaceVlan34
On Cat2
Cat2(config)#Iprouting
Cat2(configif)#SwitchporttrunkencapDot1q
Cat2(configif)#Switchportmodetrunk
OnR5
R5(configif)#Noshut
R5(configif)#Exit
R5(config)#Intf0/1.12
R5(configif)#Encapdot1q12
R5(config)#Intf0/1.34
R5(configif)#Encapdot1q34
OnR1&R3
R1#Cleararp
OnR1
R1#Ping10.1.34.3
!!!!!
Successrateis100percent(5/5), roundtripmin/avg/max=1/1/4ms
OnR3
R3#Ping10.1.12.1
!!!!!
Task20
ConfigureCat1suchthatwhenevertheswitchlearnsorremovesaMACaddressonits
portF0/18,anSNMPnotificationisgeneratedandsenttotheNMSlocatedat
192.168.1.100.Sincetherearemanyuserscomingandgoingfromthenetwork,setupa
trapintervaltimetobundlethenotificationtrapsandreducenetworktrafficusingthe
followingparameters:
Thetrapsshouldbegeneratedevery30minutes.
Thetrapshouldcontainamaximumof150entries.
ThisfeatureenablesustotrackusersonanetworkbystoringtheMacaddress
activityontheswitch.Onceconfigured,everytimeaMACaddressislearnedor
removedanSNMPnotificationisgeneratedandsenttotheNMS.Onaverybusy
networkwhenlotsofuserscomeandgo,thedefaultbehavioristhatanSNMPtrap
issenteverysecond.Becausethiscanconsumebandwidth,therearetwoparameters
thatcanbeconfiguredtoremedythissituationandtheyareasfollows:
Macaddresstablenotificationinterval Thisvaluespecifiesthenotification
trapintervalinsecondsbetweeneachsetoftrapsthataregeneratedtotheNMS.
Defaultvalueisonesecond,andtherangeis02,147,483,647seconds.
MacaddresstablenotificationhistorysizeSpecifiesthemaximumnumberof
entriesintheMACnotificationhistorytable.Thedefaultvalueis1,andtherange
is1500entries.
On Cat1
Cat1(config)#Snmpserverhost192.168.1.100trapsprivate
TheabovecommandidentifiestheNMS
Cat1(config)#Snmpserverenabletrapsmacnotification
ThiscommandenablesSNMPtrapsmacnotification
Cat1(config)#Macaddresstablenotification
Theabovecommandenablesthemacaddresstablenotificationontheswitch
Cat1(config)#Macaddresstablenotificationinterval1800
Thiscommandsetstheinterval

Cat1(config)#Macaddresstablenotificationhistorysize150
Thiscommandsetsthehistorysize
Cat1(config)#Intf0/18
Cat1(configif)#Snmptrapmacnotificationadded
ToenabletheMACnotificationtrapwheneveraMACaddressisadded
Cat1(configif)#Snmptrapmacnotificationremoved
ToenabletheMACnotificationtrapwheneveraMACaddressisremoved
Cat1#Showmacaddresstablenotificationinterfacef0/18
Interface MACAddedTrap MACRemovedTrap

FastEthernet0/18 Enabled Enabled
Cat1#Showmacaddresstablenotification
Cat1#shmacaddresstablenotification
IntervalbetweenNotificationTraps:1800secs
NumberofMACAddressesAdded:0
NumberofMACAddressesRemoved:0
NumberofNotificationssenttoNMS:0
MaximumNumberofentriesconfiguredinHistoryTable:150
CurrentHistoryTableLength:0
MACNotificationTrapsareEnabled
HistoryTablecontents
Task21
OptimizeCat1usingthefollowingpolicies:
Cat1shouldbeconfiguredsuchthatitsmemoryresourcesintheswitchare
optimizedforrouting.

Switchdatabasemanagement(SDM)aretemplatesthatcanbeconfiguredto
allocatememoryresourcesintheswitchforaspecificfeaturedependingonwhatthe
switchisusedforinagivennetwork.
Aswitchcanbeconfiguredtouseoneofthefollowingtemplates:
AccessUsedforQOSclassificationandSecurity.
Routing Usedforrouting
VlanDisablesroutingandsetstheswitchtobealayer2switch.
Extendedmatchreformatsroutingmemoryspacetoallow144bitlayer3
TCAMsupportneededforWCCPand/ormultipleVRFinstances.
On Cat1
Cat1(config)#Sdmpreferrouting
Youmustrebootforthesesettingstotakeeffect.
ToVerifytheconfiguration:
On Cat1
Cat1#Showsdmprefer
Thecurrenttemplateis"desktoprouting"template.
Theselectedtemplateoptimizestheresourcesin
theswitchtosupportthisleveloffeaturesfor
8routedinterfacesand1024VLANs.
numberofunicastmacaddresses: 3K
numberofIPv4IGMPgroups+multicastroutes:1K
numberofIPv4unicastroutes: 11K
numberofdirectlyconnectedIPv4hosts: 3K
numberofindirectIPv4routes: 8K
numberofIPv4policy basedroutingaces: 512
numberofIPv4/MACqosaces: 512
numberofIPv4/MACsecurityaces: 1K
On Cat2
Cat2#Shsdmprefer
Thecurrenttemplateis"desktopdefault"template.
Theselectedtemplateoptimizestheresourcesin
theswitchtosupportthisleveloffeaturesfor

8routedinterfacesand1024VLANs.
numberofunicastmacaddresses: 6K
numberofIPv4IGMPgroups+multicastroutes:1K
numberofIPv4unicastroutes: 8K
numberofdirectlyconnectedIPv4hosts: 6K
numberofindirectIPv4routes: 2K
numberofIPv4policybasedroutingaces: 0
numberofIPv4/MACqosaces: 512
numberofIPv4/MACsecurityaces: 1K
Notethedifferenceinmemoryallocationisrevealedifthebufferallocationof Cat2
iscomparedtothe Cat1.
Task22
CreateVLANs30,31and32on Cat1 andensurethattheseVLANscannottraversethe

trunklinkbetween Cat1andCat2.
BydefaultatrunkportsendsandreceivestrafficfromallVLANs,however,agiven
VLANorVLANscanberemovedfromthetrunklinkinordertopreventtrafficfrom
thatVLAN/sfromtraversingoverthetrunk.
On Cat1
Cat1(config)#Vlan3032
BeforeconfiguringthetaskwehavetochecktoseeiftheVLANsthatwejustcreated
cantraversethetrunklink.
Cat1#Showinterfacetrunk
PortModeEncapsulationStatusNativevlan
Fa0/19onisltrunking1
Fa0/19 14094
Fa0/2014094
Fa0/19 1,12,3032,34,56
Fa0/20 1,12,3032,34,56

Fa0/19 1,12,34,56
Fa0/20 1 NoteVlans3032areprunedbecausetheseVLANshave
NOPortmembership
ToremovethoseVLANsfromthetrunklinks:
OnBothSwitches
Switch(config)#Interfacerangef0/1920
Switch(configifrange)#Switchporttrunkallowedvlanexcept30,31,32
Noteif anEtherChannelwascreated,thecommandhadtobeconfigureddirectly
under theportchannelinterface.
On Cat1
Cat1#Showinttrunk
PortMode EncapsulationStatusNativevlan
Fa0/19129,334094 NoteVLANs30 32areremovedfrom thetrunk
Fa0/20129,334094
Fa0/19 1,12,34,56
Fa0/20 1,12,34,56
Fa0/191,12,34,56
Fa0/20 1
NotetheoptionsthatcanbeusedwithSwitchporttrunkallowedVLANcommand
are:Remove,add,all,andexcept.
TheSwitchporttrunkallowedvlanremove30,31,32commandcouldaccomplishthe
sametask.

Task23
ConfigureCat1sportF0/15andF0/16suchthatwhenclientPCsconnecttotheseports,
theyautomaticallybecomememberofagivenVLAN.Cat1shouldbeconfiguredtouse
10.1.1.1astheprimaryand10.1.1.2asthesecondaryVMPSserver.Ensurethatthelocal
switchreconfirmstheVLANmembershipeveryhalfhourandiftheVMPScannotbe
contacted,thelocalswitchwillretry5timesbeforeconsideringtheVMPSunavailable.
VMPS:
The3550switchcantbesetupasaVMPSserver,butitcanbeconfiguredasa
VMPSclient.
TheclientcommunicateswiththeVMPSthroughVlanQueryProtocol(VQP).
WhenaVMPSreceivesaVQPfromtheclient,itsearchesitsdatabaseforaMAC
toVLANmapping,andifthemappingisfound,itconveystheVLANinformation
totheclientandthentheclientassignsthatgivenVLANtotheportthattheclient
isconnectedto.
TheVMPScanoperateinSecuremode,whichmeansthatifaMACtoVLAN
mappingcannotbefoundinitsdatabase,theVMPSwillsendaportshutdown
messagetotheclientandtheclientwillshutdownthatgivenport,however,ifthe
VMPSisnotconfiguredinasecuremode,itwillsendaccessdenymessage,andthe
clientwillconstantlymonitortheportandwillrejectalltrafficfromthatgiven
port.
TheVMPSclientperiodicallyreconfirmstheVLANmembershipinformation
receivedfromtheVMPSserver.Bydefaultthisisperformedevery60minutes,this
intervalcanbechangedusingVMPSreconfirmglobalconfigcommand.
IftheVMPSclientcantcontacttheVMPSserver,itwillretrytoestablishthat
communicationthreetimesandthisvaluecanbechangedusingvmpsretry
commandintheglobalconfigmode.
ThedatabaseisinformofanASCIIfilesavedonaTFTPserver,whichtheVMPS
serveraccesses.
On Cat1
Beforeconfiguringthistask weshouldchecksomeofthedefaultvalues:
Cat1#Showvmps
VQPClientStatus:


VMPSVQPVersion:1
ReconfirmInterval:60min
ServerRetryCount:3
VMPSdomainserver:
Reconfirmationstatus
VMPSAction: NoDynamicPort
VMPSVQPversionisversion1,andthereconfirmationisatitsdefaultvalueof60
minutes,andtheretryvalueissetto3.TherearenoVMPSservers.
Cat1(config)#intrangef0/1516
Cat1(configifrange)#switchportmodeaccess
Cat1(configifrange)#switchportaccessvlandynamic
Cat1(configifrange)#noshut
TheabovecommandsetsportsF0/15andF0/16toVLANdynamic,whichmeansthatthey
willacquiretheirVLANinformationdynamically.
Cat1(config)#vmpsreconfirm30
Cat1(config)#vmpsretry5
Theabovetwocommandsconfigurethereconfirmationintervalto30minutesandthe
retrycounterto5.
Cat1(config)#vmpsserver10.1.1.1primary
Cat1(config)#vmpsserver10.1.1.2
ThesecommandsconfiguretheprimaryandthesecondaryVMPSservers.
Cat1#Showvmps
VQPClientStatus:
VMPSVQPVersion:1
ReconfirmInterval: 30min
ServerRetryCount: 5
VMPSdomainserver:10.1.1.2
10.1.1.1(primary,current)
Reconfirmationstatus
VMPSAction: NoDynamicPort

Task24
PortF0/17 on Cat1 isconnectedtoaCisco7960IPPhone.Voicetrafficthatoriginates

fromthephoneistaggedwithaCoSof5.
APCisconnectedtothe7960IPPhonewhichisgeneratingtrafficwithCoSof3.Ensure
thatthedatatrafficbelongstoVLAN3andtheVoicetrafficbelongstoVLAN5.The
trafficoriginatedbythe7960IPPhoneshouldmaintainitsCoSvalue,whereasthe
trafficthatoriginatedfromthePCconnectedtothe7960IPPhoneshouldberewritten
withaCoSof1.
On Cat1
Cat1(config)#Mlsqos
Cat1(configif)#SwitchportaccessVlan3
Cat1(configif)#SwitchportvoiceVlan 5
Cat1(configif)#Switchportpriorityextendcos1
Cat1(configif)#Mlsqostrustcos
Whenthephonegetsconnectedtotheswitchitwillforman802.1qtrunklink.The
trafficdestinedtothePCwillbecarriedintheaccessVLAN,whereasthetraffic
destinedforthe7960IPPhonewillbecarriedinVoiceVLAN.
Bydefaultthe3550doesntprocesstheCoSvalueandrewritesallframeswitha
CoSvalueof0.ToconfigurethephonesuchthatitprocessestheCoSvalues,the
QOSmustbeenabledgloballyusingthemlsqoscommand.
ToconfiguretheswitchsoittruststheincomingCoSvaluefromthe7960IPPhone
themlsqostrustcoscommandisused.
SincethePCconnectedtotheIPPhonecansendtraffictothePhonewithanyCos
valueandthephonewantstoensurethatthevoicetrafficthatitgeneratesgetbetter
priority,itoverridestheCoSforalltrafficthatisoriginatedbythePC.Inthistask
wehavetoconfiguretheswitchsuchthatitrewritesthetrafficwithaCoSof1,
therefore,theSwitchportpriorityextendedcos1commandisused.
Task25
Configuretrunkingbetween Cat1andCat2suchthatVLAN12doesnotgettagged
whenthetrafficforthisVLANtraversesthetrunk.
NotethetrunkingencapsulationonthetrunklinksshouldhavebeenDOT1Qinthe
CCIElab,whenconfiguringagivensection,theentiresectionshouldbereadbefore
configuringtheindividualtaskswithinthatsection.
WhenatrunkisconfiguredwithDot1q,itcanreceivebothtagged anduntagged
traffic.Bydefault,theswitchforwardsuntaggedtrafficinthenativeVLANONLY.
IfagivenVLANshouldNOTbetaggedasittraversesthetrunklinkthen,that
VLANshouldbesetasthenativeVLAN.
WhenthenativeVLANischanged,ensurethatthechangeisconfiguredonboth
switchesorthetrunklinkwillgodown.
OnBothSwitches
(configifrange)#Switchporttrunkencapdot1q
On Cat1
Fa0/19on802.1qtrunking1
Fa0/19129,334094
Fa0/20129,334094
Fa0/191,3,12,34,56
Fa0/201,3,12,34,56
Fa0/191,3,12,34,56
Fa0/201
ToconfigurethenativeVLAN:
OnBothSwitches
(configifrange)#SwitchporttrunknativeVLAN12
On Cat1
PortModeEncapsulationStatus Nativevlan
Fa0/19on 802.1qtrunking 12
Fa0/20on802.1qtrunking 12
Fa0/19129,334094
Fa0/20129,334094
Fa0/19 1,3,12,34,56
Fa0/201,3,12,34,56
Fa0/191,3,12,34,56
Fa0/201
On Cat2
PortModeEncapsulationStatus Nativevlan
Fa0/514094
Fa0/19129,334094
Fa0/20129,334094
Fa0/51,3,12,3032,34,56
Fa0/191,3,12,34,56
Fa0/201,3,12,34,56
Fa0/51,3,12,3032,34,56
Fa0/191,12,34
Fa0/20none
Task26
ConfigureMultiinstanceofSpanningTreeontheswitchesusingthefollowspolicy:

ThereshouldbetwoinstancesofSTP,instance1and2
Instance1shouldhandleVLANs12and34
Instance2shouldhandleVLAN56
AllfutureVLANsshoulduseinstance0
Instance1shoulduseF0/19
Instance2shoulduseF0/20
Cat1shouldbetherootbridgeforthefirstinstance
Cat2shouldbetherootbridgeforthesecondinstance
Thenameofthisconfiguration shouldbeCCIE
Therevisionnumbershouldbe1
OnBothSwitches
ThedefaultmodeforspanningtreeisPVST,thefollowingShowcommandverifies
thisinformation:
Showspanningtreesummary
Switchisinpvstmode
Rootbridgefor:none
ExtendedsystemIDisenabled
OnBothSwitches
(config)#Spanningtreemodemst
ThiscommandchangesthemodeoftheswitchtoMST.
(config)#Spanningtreemstconfiguration
(configmst)#Revision1
(configmst)#NameCCIE
(configmst)#Instance1vlan 12,34
(configmst)#Instance2vlan56
ThefirstcommandallowsustoenterintheMSTconfigurationmode.Thesecond
commandspecifiestheconfigurationrevisionnumbertherangeforthisnumberis
165535.Thethirdcommandspecifiesthenameforthisconfigurationinthiscase
CCIE.TheforthandfifthcommandsmaptherequestedVLANstothespecified
instances,MSTsupports16instances,bydefaultallthefutureVLANswillbe
assignedtoinstance0,instance0isthecatchallinstance).
Toverifythisconfiguration:
OnbothSwitches
#Showspanningtreemstconfiguration
Name[CCIE]
Revision1
InstanceVlansmapped

0111,1333,3555,574094
1 12,34
256
Noteinstance0handlestherestoftheVLANsthatarenotassignedtoagiven
instanceinstance0isthecatchallinstance.
ToVerifytheconfiguration beforeconfiguringthenextportionofthe
task:
On Cat1
Cat1#Showspanningtreebridge
Hello Max Fwd

MSTInstanceBridgeID Time Age Dly Protocol

MST0 32768(32768,0) 0019.56db.9400 2 20 15 mstp
MST1 32769(32768,1) 0019.56db.9400 2 20 15 mstp
MST2 32770(32768,2) 0019.56db.9400 2 20 15 mstp
NotethiscommanddisplaystheBIDforyourswitch,andinsteadofassigningaBID
toeachVLAN,thereisaBIDforeachinstance.
On Cat1
Cat1#Showspanningtreeroot
Root Hello Max Fwd
MSTInstanceRootID Cost Time Age DlyRootPort

MST0 32768 0019.56db.9400 0 220 15
MST1 327690019.56db.9400 0220 15
MST2 327700019.56db.9400 0 2 20 15
TheabovecommanddisplaystheBIDoftherootbridgefordifferentinstances.
NoteinthiscaseCat1 istherootforallinstances.

On Cat1
Cat1(config)#Spanningtreemst1priority0
On Cat2
Theabovecommandswillchangetheswitchpriorityandmakeitmorelikelythat
Cat1willbechosenastherootswitchforinstance1and Cat2 willbechosenasthe
rootbridgeforinstance2.
Thisnumbermustbeinincrementsof4096.Rememberthelowervaluehashigher
preference.
On Cat1
Cat1#Showspanningroot
Root Hello Max Fwd

MSTInstance RootID Cost Time Age Dly RootPort

MST0 32768 0019.56db.9400 0 2 20 15
MST1 1 0019.56db.9400 0 2 20 15
MST2 2 001a.2f0a.2000 200000 2 20 15 Fa0/19
Notethelocalswitch(Cat1)istherootbridgeforinstance0&1,whereas,Cat2 is
therootforinstances2.
On Cat2
Cat2#Showspanningroot
Root Hello Max Fwd

MSTInstance RootID Cost Time Age Dly RootPort

MST0327680019.56db.9400022015 Fa0/19
MST110019.56db.9400 2000002 2015Fa0/19

MST2 2 001a.2f0a.2000 0 2 20 15
NoteCat2 istherootbridgeforinstance2,whereas,Cat1istherootforinstances
0and1.
Toconfigurethelastportionofthistask,portpriorityfeatureisusedasfollows:
OnBothSwitches
(config)#IntF0/19
(configif)#Spanningtreemst1portpriority0 Highpriority
(configif)#Spanningtreemst2portpriority128
(config)#IntF0/20
(configif)#Spanningtreemst1portpriority128
(configif)#Spanningtreemst2portpriority 0
InthistaskPortpriorityisusedwhenselectinganinterfacetoputintothe
forwardingstateforagiveninstancealowervaluehasahigherpriority.Inthis
caseportF0/19willbeusedbyalltheVLANsthatareassignedtoinstances0&1,
becauseithasahigherpriority(Lowervalue),andinstance2 willuseportF0/20
becauseithasbeenconfiguredwithahigherpriority(Lowervalue).
On Cat1
Cat1#Showspanningtreeintf0/19
MstInstanceRoleSts CostPrio.NbrType

MST0 DesgFWD200000128.21 P2p
MST1 DesgFWD200000128.21 P2p
MST2 AltnBLK200000128.21 P2p
Cat1#Shspanningtreeintf0/20
MstInstanceRoleStsCostPrio.NbrType

MST0 Desg FWD 200000128.22P2p
MST1DesgFWD200000128.22P2p
MST2 RootFWD200000128.22 P2p
On Cat2


MST0 Root FWD200000128.21P2p
MST1RootFWD2000000.21P2p
MST2DesgFWD 200000128.21P2p
Cat2#Shspanningtreeintf0/20

MST0 Altn BLK 200000 128.22P2p
MST1AltnBLK200000128.22P2p
MST2DesgFWD2000000.22P2p
Noteinstances0&1isblockedonportF0/20butforwardedonF0/19andinstance
2isblockedoninterfaceF0/19andforwardedonF0/20.
Task27
TheITdepartmentdecidedtostopmonitoringportF0/14fromTask13,youhave
receivedanewrequesttomonitorportF0/14on Cat1 buttheprotocolanalyzeris
connectedtoportF0/18on Cat2. Configuretheswitchestoaccommodatethisrequest.
On Cat1
Cat1(config)#nomonitorsession1
Cat1(config)#Vlan90
Cat1(configvlan)#Remotespan
Cat1(configvlan)#Exit
ThecreationofthisVLANcanonlybedoneintheglobalconfigurationmode,
becausethisistheonlymodethatallowsustosettheVLANasremotespan.Ensure
thatthisVLANispropagatedtoCat4.
On Cat1:
Cat1#Sh vlanbrie
VLANNameStatusPorts

1defaultactiveFa0/7,Fa0/8,Fa0/9,Fa0/10

Fa0/11,Fa0/12,Fa0/13,Fa0/14
Fa0/18,Fa0/21,Fa0/22,Fa0/23
Fa0/24,Gi0/1,Gi0/2
3VLAN0003activeFa0/17
12VLAN0012activeFa0/1,Fa0/2
30VLAN0030active
31VLAN0031active
32VLAN0032active
90VLAN0090active EnsurethatthisVLANispropagated
(Therestoftheoutputisomitted) toCat2
On Cat2
Cat2#Shvlanbrie
VLANName StatusPorts

1default activeFa0/1,Fa0/2,Fa0/3,Fa0/4
Fa0/6,Fa0/7,Fa0/8,Fa0/9
Fa0/10,Fa0/11,Fa0/12,Fa0/13
Fa0/14,Fa0/15,Fa0/16,Fa0/17
Fa0/18,Fa0/21,Fa0/22,Fa0/23
Fa0/24,Gi0/1,Gi0/2
3VLAN0003active
12VLAN0012active
30VLAN0030 active
31VLAN0031active
32VLAN0032active
34VLAN0034active
56VLAN0056active
90VLAN0090active NotetheVLANispropagated.
On Cat1
Cat1#Showvlanremotespan
RemoteSPANVLANs
90
On Cat2
Cat2#Showvlan remotespan
RemoteSPANVLANs
90
NoteVLAN90shouldbedisplayedasremotespanonbothswitches.
On Cat1
Cat1(config)#Monitorsession1sourceinterfaceF0/14
Cat1(config)#Monitorsession1destinationremotevlan90
On Cat1
Cat1#Show monitorsession1
Session1
Type :RemoteSourceSession
SourcePorts :
Both :Fa0/14
DestRSPANVLAN: 90
On Cat2
Cat2(config)#Monitorsession1sourceremotevlan90
Cat4(config)#Monitorsession1destinationinterfaceF0/18
PortF0/18iswheretheprotocolanalyzerisconnected.
On Cat2
Cat2#Shmonitorsession1
Session1
Type:RemoteDestinationSession
SourceRSPANVLAN:90
DestinationPorts:Fa0/18
Encapsulation:Native
Ingress:Disabled
RSPANextendsSPANbyenablingremotemonitoringofmultipleswitchesacrossyour
network.ThetrafficforRSPANtraversesoverauserdefinedRSPANVLAN(remote
vlan),inthiscaseVLAN90.TheSPANtrafficfromportF0/14isreflectedtoVLAN90
(TheRSPANVLAN)andthenforwardedoverthetrunktoportF0/18anRSPAN
destination.
Task 28
ConfigurethehostnameofthethirdswitchtobeCat3.
OnthethirdSwitch
Task29
ConfigureportsF0/21andF0/22on Cat3andCat1astrunklinksusinganindustry
standardprotocol,theselinksshouldappeartoSTPasasinglelink.Ifoneofthelinks
fails,thetrafficshouldusetheotherlinkwithoutanyinterruption.
EtherChannelsprovidethefollows:
Faulttolerant,highspeedlinksbetweenswitchesandrouters.
EtherChannelprovidesanautomaticrecoveryforthelossofalinkby
redistributingthetrafficacrosstheremaininglink/s.
STPwillnotblockoneofthelinksinthebundlebecausetoSTP,thebundlelooks
likeasinglelink.
Upto8linkscanbecombinedtoprovidemorebandwidth.
Thelinkswithinthebundlemusthavethesamecharacteristicssuchasduplexing,
speedandetc.
EtherChannelcanbeconfiguredaslayer2orlayer3.
WithLayer3,alogicalinterface(PortChannel)isstaticallyconfiguredandall
Layer3configurationsareperformedunderthatinterface.
WithLayer2,thelogicalinterfaceiscreatedautomatically.
WithbothLayer2andLayer3,physicalinterfacesmustbemanuallyassignedto
thelogicalinterfaceusingchannelgroupconfigurationcommand.
EtherChannelscanbeconfiguredautomaticallyusingPortaggregationprotocol
(PAgP)orLinkAggregationprotocol(LACP).
PAgPisaCiscoproprietaryprotocol,whereasLACPisanindustrystandard

IEEE802.3adprotocol.
SwitchescanbeconfiguredtousePAgPbyconfiguringtheminAUTOor
DESIRABLEmode.
SwitchescanbeconfiguredtouseLACPbyconfiguringtheminACTIVEor
PASSIVEmode.
IftheswitchesareconfiguredinONmode,theywillnotexchangeLACPor
PAgPpackets.
Thereare5modesthattheswitchescanbeconfiguredin:
ONForcestheinterfaceintoanEtherChannelwithoutPAgPorLACPpackets,
bothswitchesmustbeconfiguredinONmodefortheEtherChanneltobe
established.
ACTIVEUsedinLACP,theswitcheswillactivelynegotiateanEtherChannel
link.
PASSIVEUsedinLACP,itplacestheinterfaceinapassivenegotiationmode
whereitonlyrespondstoLACPpacketsthatitreceives.Inthismodetheswitch
willnotstartthenegotiationprocessthissettingminimizesthetransmissionof
LACPpackets.
AUTOUsedinPAgP,itplacestheinterfaceinapassivenegotiationmodeIt
onlyrespondstoPAgPpacketsthatitreceives.Inthismodetheswitchwillnot
startthenegotiationprocessthissettingminimizesthetransmissionofPAgP
packets.
DESIRABLEUsedinPAgP,theswitcheswillactivelynegotiatean
EtherChannellink.
ThefollowingtableisveryimportantwhenconfiguringEtherChannels:
Switchoneisconfiguredas Switchtwoisconfiguredas WillanEtherChannel

beestablished?
Desirable Desirable YES
Desirable Auto YES
Auto Auto NO
Active Active YES
Active Passive YES
Passive Passive NO
BeforeconfiguringEtherChannel,youshouldchecktoensurethattheinterfacesare
configuredwiththesamecharacteristics.
On Cat1andSwitch3
(config)#Intrangef0/2122
(configifrange)#Switchporttrunkencapdot1q
(configifrange)#Channelgroup1mode on
(configifrange)#noshut
Notetheswitchwilldisplaythefollowingmessagethatthelogicalinterfacewillbe
created.
CreatingaportchannelinterfacePortchannel1
On Cat1
Cat1#Showinttrunk
Port ModeEncapsulationStatusNativevlan
Po1on802.1qtrunking1
Fa0/19129,334094
Fa0/20129,334094
Po114094
Fa0/19 1,3,12,34,56,90
Fa0/20 1,3,12,34,56,90
Po1 1,3,12,3032,34,56,90
Fa0/191,3,12,34,90
Fa0/201,56
Po11,3,12,3032,34,56,90
OnCat3
Cat3#Shinttrunk
Po1 on802.1qtrunking1
Po114094
Po11
Po1 1
On Cat1

MST00DesgFWD100000128.616P2pBound(STP)
MST01BounFWD100000128.616P2pBound(STP)

MST00DesgFWD100000128.616P2pBound(STP)
OnCat3
VlanRoleStsCostPrio.NbrType

VLAN0001RootFWD12128.65P2p
Vlan RoleStsCostPrio.NbrType

VLAN0001RootFWD12128.65P2p
Noteallinterfacesareinforwardingstatebecausetospanningtree,theport
channelappearsasasingleinterface.
Ashowetherchannel1detailcommandcanrevealthattheinterfacesareworking
inthebundle.
Task30
EnsurethattheEtherChannelcreatedinthepreviousstepusesdestinationMAC
addressestoloadbalancethetrafficload.
Loadbalancingcanbedonebasedonthefollowing:
SourceMACaddressPacketsforwardedtoanEtherChannelaredistributedacrossthe
portsinthechannelbasedonthesourceMACaddressoftheincomingpackets.When
sourceMACaddressloadbalancingisenabled,theloaddistributionbasedonthesource
anddestinationIPaddressisalsoenabled
DestinationMACaddressIftheEtherChannelisbetweenarouterandaswitchand
sincetherouterhasasingleMACaddress,destinationbasedloadbalancingisthebest
way.
Toseethedefaultloadbalancing:
On Cat1
Notethedefaultloadbalancingisbasedonthe
Cat1#showetherchannelload SourceMacaddress
EtherChannelLoadBalancingOperationalState(srcmac):
NonIP:SourceMACaddress
IPv4:SourceMACaddress
IPv6:SourceIPaddress
ToconfiguretheloadbalancingbasedonthedestinationMacaddresses:
On Cat1andCat3
(config)#portchannelloadbalancedstmac
Cat1#showetherchannelload
EtherChannelLoadBalancingOperationalState(dstmac):
NonIP:DestinationMACaddress
IPv4:DestinationMACaddress
IPv6:DestinationIPaddress

Task31
ErasethestartupconfigurationandVLAN.datbeforeproceedingtothenextlab

CCIERoutingandSwitching
NarbikKocharians
CCIE#12410
R&S,Security,SP
FrameRelay
Answers

Lab1HubnSpokeusingFramerelaymap
statements
R1
FrameRelay
R4 R2
R3

IPaddressingandDLCIinformationChart
Routers IPaddress LocalDLCI Connectingto:

R1sFramerelayinterfaceS0/0 150.1.100.1/24 102 R2
103 R3
104 R4
203 R3
204 R4
302 R2
304 R4
402 R2
403 R3
Task1
ConfigureaframerelayHubandspokeusingframerelaymapstatements.UsetheIP
addressingintheabovechart.
Disableinversearpsuchthattheroutersdonotgenerateinversearprequestpackets,and
ensurethatonlytheassignedDLCIsareused,theseDLCIsshouldbeasfollows:
OnR1:102,103and104shouldbeusedforconnectionstoR2,R3andR4
respectively.
OnR2,R3andR4:DLCIs201,301and401shouldbeusedonR2,R3andR4
respectivelyfortheirconnectiontoR1(Thehub).
InthefutureOSPFroutingprotocolwillberunningontheserouters,ensurethatthe
routerscanhandletheMulticasttrafficgeneratedbytheOSPFroutingprotocol.

OnR1
R1(config)#IntS0/0
R1(configif)#Encapsulationframe
R1(configif)#Framerelaymapip150.1.100.2102 b
R1(configif)#Noframerelayinversearp
R1(configif)#Noshut
OnR1
R1#showframemap
Serial0/0(up):ip0.0.0.0dlci110(0x6E,0x18E0)
broadcast,
CISCO,statusdefined,inactive
Serial0/0(up):ip0.0.0.0dlci109(0x6D,0x18D0)
broadcast,
Serial0/0(up):ip0.0.0.0dlci108(0x6C,0x18C0)
broadcast,
Serial0/0(up):ip0.0.0.0dlci107(0x6B,0x18B0)
broadcast,
Serial0/0(up):ip0.0.0.0dlci106(0x6A,0x18A0)
broadcast,
Serial0/0(up):ip0.0.0.0dlci105(0x69,0x1890)
broadcast,
Serial0/0(up):ip150.1.100.2dlci102(0x66,0x1860),static,
broadcast,
broadcast,
broadcast,

NoteDLCIs105,106,107,108,109and110aremappedto0.0.0.0IPaddress,these
maynotaffectUnicasttraffic,butitcanaffectMulticastand/orBroadcasttraffic,
therefore,theyshouldberemovedfromthemappingtable.Theclearframerelay
inarpcommandcanbeused,butitmaynotclearthetable,whereassavingthe
configurationandthenreloadingtherouterwilldefinitelyclearthe0.0.0.0
mappings.
OnR1
R1#Wr
R1#Reload
R1#Showframemap
broadcast,
broadcast,
broadcast,
OnR2
R2(config)#IntS0/0
R2(configif)#Framerelaymapip150.1.100.1 201b
R2(configif)#Noshut
OnR2
R2#Ping150.1.100.1
!!!!!

R2#Showframemap
Serial0/0(up):ip150.1.100.1dlci201(0xC9,0x3090),static,
broadcast,
CISCO,statusdefined,active
OnR3
R3(config)#IntS0/0
R3(configif)#Framerelaymapip150.1.100.1301b
R3(configif)#Noshut
OnR3
R3#Ping150.1.100.1
!!!!!
R3#Showframemap
Serial0/0(up):ip150.1.100.1dlci301(0x12D,0x48D0),static,
broadcast,
OnR4
R4(config)#IntS0/0
R4(config)#Ipaddress150.1.100.4255.255.255.0
R4(config)#Encapsulationframe
R4(config)#Framerelaymapip150.1.100.1401b
R4(config)#Noframerelayinversearp
R4(config#Noshut

OnR4
R4#Showframemap
broadcast,
R4#Ping150.1.100.1
!!!!!
Task2
EnsurethateveryroutercanpingeveryIPaddressconnectedtothecloud.
Ensurethatthehub routerdoesnotreceiveredundantroutingtraffic.
OnR1
Totesttheexistingconfiguration:
R1#Ping150.1.100.1
.....
Successrateis0percent(0/5)
Noteinamultipointframerelayconfiguration,twoissuesmustberesolvedbefore
anIPaddresscanbereached:
A. ThedestinationIPaddressmustbeintheroutingtablewithavalidnext
hop.
B. Theremustbeaframerelaymappingtothatdestination.
InthiscasethedestinationIPaddressisintheroutingtable,buttheframerelay

mappingismissing.Configuretheframerelaymappingasfollows:
OnR1
R1(config)#InterfaceS0/0
R1(configif)#Framerelaymapip150.1.100.1102
OnR1
R1#Showframemap
broadcast,
broadcast,
broadcast,
R1#Ping150.1.100.1
!!!!!
OnR2
R2(configif)#InterfaceS0/0
OnR2
R2#Ping150.1.100.2
!!!!!
OnR3
OnR3
R3#Ping150.1.100.3
!!!!!
OnR4
Notewhenconfiguringtheframerelaymappingfromonespoketoanotherspoke,
thebroadcastargumentshouldnotbeused,ifthiskeywordisused,thehub
routerwillreceiveredundantroutingtraffic.ThiscanbeverifiedbyrunningRIPv2
andperformingadebugipripcommandonthehubrouter.
OnR4
R4#Ping150.1.100.2
!!!!!
R4#
R4#Ping150.1.100.3
!!!!!
R4#Ping150.1.100.4
!!!!!
OnR3
R3#Ping150.1.100.2
!!!!!
R3#
Task3
ConfiguretherouterssuchthattheLMIstatusinquiriesaresentevery5secondsandFull
StatusLMIrequestsaresentevery 3cyclesinsteadof6.
BydefaultframerelayrouterssendtheirLMIStatusinquiries,every10seconds,
andafullstatusinquiryevery6th cycle(Every60seconds).Thestatusinquiriescan
bechangedusingtheKeepalivecommand,whereastheFramerelaylmi
n391dtecommandcanbeusedtochangetheintervalforthecompletestatus
inquiry.Notethestatusinquiriesaresentevery10seconds,andacompletestatus
inquiryissentevery6thcycleasfollows:
OnR1
R1#Debugframelmi

*Nov2419:59:57.407:Serial0/0(out):StEnq,myseq125,yourseen124,DTEup
*Nov2419:59:57.407:datagramstart=0x3F401ED4,datagramsize=14
*Nov2419:59:57.407:FRencap=0x00010308
*Nov2419:59:57.407:00759501010103027D7C
*Nov2419:59:57.407:
*Nov2419:59:57.411:Serial0/0(in):Status,myseq125,paksize14
*Nov2419:59:57.411:RTIE1,length1,type1
*Nov2419:59:57.411:KAIE3,length2,yourseq125,myseq125
*Nov2420:00:07.407:datagramstart=0x3F6B0294,datagramsize=14
*Nov2420:00:07.407:FRencap=0x00010308
*Nov2420:00:07.407:00759501010103027E7D
*Nov2420:00:07.407:
*Nov 2420:00:07.411:RTIE1,length1,type1
*Nov2420:00:17.407:datagramstart=0x3F400C14,datagramsize=14
*Nov2420:00:17.407:FRencap=0x00010308
*Nov2420:00:17.407:00759501010103027F7E
*Nov2420:00:17.407:
*Nov2420:00:27.407:datagramstart=0x3F6AF394,datagramsize=14
*Nov2420:00:27.407:FRencap=0x00010308
*Nov2420:00:27.407:00 75950101010302807F
*Nov2420:00:27.407:
*Nov2420:00:37.407:datagramstart=0x3F644ED4,datagramsize=14
*Nov2420:00:37.407:FRencap=0x00010308
*Nov2420:00:37.407:00759501010103028180
*Nov2420:00:37.407:

*Nov2420:00:47.407:datagramstart=0x3F6B03D4,datagramsize=14
*Nov2420:00:47.407:FRencap=0x00010308
*Nov2420:00:47.407:00759501010003028281
*Nov2420:00:47.407:
*Nov2420:00:47.419:PVCIE0x7,length0x3,dlci102,status0x2
R1#
Notewhentheswitchreceivesthecompletestatusinquiry,itrespondsbackwithall
theDLCIsthatareconfiguredforthatgivenrouter.
Tochangethesetimers:
Onallrouters
(config)#InterfaceS0/0
(configif)#Keepalive5
(configif)#Framerelaylmin391dte3
Totesttheconfiguration:
Rx#DebugframeLMI
*Nov2420:13:52.411:datagramstart=0x3F6AEFD4,datagramsize=14
*Nov2420:13:52.411:FRencap=0x00010308
*Nov2420:13:52.411:0075950101 010302DDDC
*Nov2420:13:52.411:

*Nov2420:13:57.411:datagramstart=0x3F400D54,datagramsize=14
*Nov2420:13:57.411:FRencap=0x00010308
*Nov2420:13:57.411:0075950101 010302DEDD
*Nov2420:13:57.411:
*Nov2420:14:02.411:datagramstart=0x3F6AF394,datagramsize=14
*Nov2420:14:02.411:FRencap=0x00010308
*Nov2420:14:02.411:0075950101 000302DFDE
*Nov2420:14:02.411:
*Nov2420:14:02.427:PVC IE0x7,length0x3,dlci108,status0x0
Noteinitiallytheroutersendsouttwotype1inquiries,andthethirdmessagethat
theroutersendsoutismessagetype0,whichtellstheswitchtorespondwithallthe
DLCIsthatareconfiguredforthatgivenrouter.
Task4
Reconfiguretheroutersinafullmeshconfigurationandtest/verifytheconfiguration.In
thisconfigurationtherouterswillnotberunningaroutingprotocol.
Task5
Erasethestartupconfigurationandreloadtheroutersbeforeproceedingtothenextlab.

Lab2HubnSpokeusingFramerelayPoint
toPointconfiguration
R1
FrameRelay
R4 R2
R3


R1sFramerelayinterface 150.1.12.1/24 102 R2
150.1.13.1/24 103 R3
150.1.14.1/24 104 R4
203 R3
204 R4
302 R2
304 R4
402 R2
403 R3
Task1
ConfiguretheroutersinahubandspokemannerusingtheIPaddressingintheabove
chart.
Disableinversearpsuchthattheroutersdonotgenerateinversearppackets,andensure
thatonlytheassignedDLCIsareused,theseDLCIsshouldbeasfollows:
OnR1:102,103and104shouldbeusedforconnectionstoR2,R3andR4
respectively.
OnR2,R3andR4:DLCIs201,301and401shouldbeusedonR2,R3andR4
respectivelyfortheirconnectiontoR1(Thehub).
TheseroutersshouldbeabletopingeveryIPaddresswithintheirIPaddressspace.
OnR1
R1(configif)#Encapframe
R1(configif)#Noshut
R1(configif)#Exit
R1(config)#InterfaceS0/0.12pointtopoint
R1(configsubif)#Ipaddress150.1.12.1255.255.255.0
R1(configsubif)#Framerelayinterfacedlci102
R1(configsubif)#Exit

R1(configsubif)#InterfaceS0/0.13pointtopoint
R1(configsubif)#Framerelayinterfacedlci 103
R1(configsubif)#InterfaceS0/0.14pointtopoint
OnR1
R1#Showframemap
Serial0/0.12(up):pointtopointdlci,dlci102(0x66,0x1860),broadcast
statusdefined,active
Notewhenframerelayisconfiguredinapointtopointmanneritsimportantto
understandthefollowingtwobehaviors:
A. Thereisnoneedtodisablesendinginversearppackets,becauseinversearp
isdisabledwhenframerelayisconfiguredinapointtopointmanner.
B. Noneedforframerelaymapping/s,becausetherecanonlybeanotherrouter
ontheotherendofthePVC,therefore,allIPaddresses(Thisincludesthe
localroutersIPaddress)arereachableaslongasthedestinationIPaddress
isintheroutingtablewithavalidnexthopIPaddress.
OnR2
R2(config)#IntS0/0
R2(configif)#Noshut
R2(configif)#Exit
R2(config)#IntS0/0.21pointtopoint
Toverifyandtesttheconfiguration:
OnR2
R2#Showframemap
Serial0/0.21(up):pointtopointdlci,dlci201(0xC9,0x3090),broadcast
R2#Ping150.1.12.1
!!!!!
R2#Ping150.1.12.2
!!!!!
OnR3
R3(config)#IntS0/0
R3(configif)#Noshut
R3(configif)#Exit
OnR3
R3#Showframemap
Serial0/0.31(up):pointtopointdlci,dlci 301(0x12D,0x48D0),broadcast
R3#Ping150.1.13.1

!!!!!
R3#Ping150.1.13.3
!!!!!
OnR4
R4(config)#IntS0/0
R4(configif)#Noshut
R4(configif)#Exit
OnR4
R4#Showframemap
Serial0/0.41(up):pointtopointdlci,dlci 401(0x191,0x6410),broadcast
R4#Ping150.1.14.1
!!!!!
R4#Ping150.1.14.4
!!!!!
Task2
ReconfiguretheroutersinafullmeshconfigurationusingtheDLCIsintheIP
addressingandDLCIinformationchart.YoushoulduseanIPaddressingschemeof
yourchoicetoaccomplishthistask.
Task3

Lab3 MixtureofPointtopointandMultipoint
framerelay
R1
FrameRelay
R4 R2
R3


150.1.123.1/24 103 R3
150.1.14.1/24 104 R4
203 R3
204 R4
302 R2
304 R4
402 R2
403 R3
Task1
Configureframerelayontheroutersasfollows:
R1: Thisroutershouldbeconfiguredinapointtopointmannerforitsconnectionto
R4usingtheIPaddressingandDLCIinformationintheabovechart.
ThisroutershouldalsobeconfiguredforitsconnectiontoroutersR2andR3
usingtheIPaddressingandtheDLCIinformationintheabovechart.
R2: ThisroutershouldbeconfiguredusingtheIPaddressingandtheDLCI
informationintheabovechart.Thisroutermustbeconfiguredinapointtopoint
mannerforitsconnectiontoR1.
informationintheabovechart.ThisroutermustNOTbeconfiguredwithasub
interfaceforitsconnectiontoR1.
informationintheabovechart.Thisroutermustbeconfiguredinapointtopoint
mannerforitsconnectiontoR1.
Disableinversearpsuchthattheroutersdonotgenerateinversearppackets,andensure
thatonlytheassignedDLCIsfortheirconnection/sareused.
TheseroutersshouldbeabletopingeveryIPaddresswithintheirIPaddressspace.

OnR1
R1(config)#IntS0/0
R1(configif)#Noshut
R1(configif)#Exit
R1(configsubif)#IntS0/0.123multipoint
R1(configsubif)#Framerelaymapip150.1.123.2102b
R1(configsubif)#Framerelaymapip150.1.123.3103b
R1(configsubif)#Noframerelayinversearp
OnR2
R2(config)#IntS0/0
R2(configif)#Noshut
R2(configif)#Exit
Notethereisnoneedtodisablesendinginversearp,becauseitsdisabledbydefault
inapointtopointconfiguration.
Totestandverifytheconfiguration:
OnR2
R2#Showframerelaymap
Serial0/0.21(up):pointtopointdlci,dlci201(0xC9,0x3090),broadcast
R2#Ping150.1.123.1
!!!!!
OnR3
R3(config)#IntS0/0
R3(configif)#Framerelaymapip150.1.123.1301b
R3(configif)#Noshut
OnR3
R3#Showframemap
broadcast,
R3#Ping150.1.123.2
!!!!!
R3#Ping150.1.123.3
!!!!!
R3#Ping150.1.123.1
!!!!!
OnR4
R4(config)#IntS0/0
R4(configif)#Noshut
R4(configif)#Exit
OnR4
R4#Showframemap
R4#Ping150.1.14.1
!!!!!
R4#Ping150.1.14.4
!!!!!
Task2

CCIERoutingandSwitching
NarbikKocharians
CCIE#12410
R&S,Security,SP
Prefixlists
Answers

Lab1PrefixLists
R1 R2
.1 .2
10.1.12.0/24
LabSetup:
TheF0/0interfaceofR1andR2shouldbeconfiguredinVLAN12.
ConfigureRIPv2onbothrouters,thesetworoutersshouldadvertisetheirdirectly
connectedinterfacesensurethatautomaticsummarizationisdisabled.
IPAddressing:
Routers Interface/IPaddress
R1 F0/0=10.1.12.1/24
Lo0=1.1.1.1/8
Lo1=2.2.2.2/8
Lo2=3.3.3.3/8
Lo3=125.1.1.1/8
Lo4=128.1.1.1/16
Lo5=131.1.1.1/16
Lo6=191.1.1.1/16
Lo7=192.1.1.1/24
Lo8=195.1.1.1/24
Lo9=200.1.1.1/24
Lo10=223.1.1.1/24
Lo11=4.4.4.4/16
Lo12=5.5.5.5/24
Lo13=6.6.6.6/26
Lo14=132.1.1.1/24
Lo15=133.1.1.1/25
Lo16=193.1.1.1/25
Lo17=194.1.1.1/26
R2 F0/0=10.1.12.2/24

Task1
ConfigureR2suchthatONLYNetwork194.1.1.0/27isallowedinR2sroutingtable.
OnR2
R2(config)#ipprefixlistNet194seq5permit194.1.1.0/27
R2(config)#routerrip
R2(configrouter)#distributelistprefixNet194inf0/0
R2#cleariproute*
R2#Shiprouterip
194.1.1.0/27issubnetted,1subnets
R194.1.1.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
NotetheIPPrefixlistonlyallowsnetwork194.1.1.0/26anddeniestherestofthe
networksinthroughitsF0/0interface.
Task2
Removethecommandsfromtheprevioustaskandensurethatallthenetworksarein
R2sroutingtable.
OnR2
R2(config)#NoipprefixlistNet194seq5permit194.1.1.0/27
R2(configrouter)#Nodistributelistprefix Net194inf0/0
OnR2
R2#Showiprouterip
R1.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0

R6.6.6.0[120/1]via10.1.12.1,00:00:03, FastEthernet0/0
Task3
ConfigureR2suchthatitonlyallowsClassAnetworksthatarenotsubnetted.
OnR2
R2(config)#ipprefixlistClassAseq5permit0.0.0.0/1ge8le8
R2(configrouter)#distributelistprefixClassAinf0/0
R2#Cleariproute*
OnR2
R2#Showiprouterip

ClassAnetworkareidentifiedasfollows:
Wherenidentifiesthenetworkbitsandhidentifiesthehostbits.
0nnnnnnnhhhhhhhhhhhhhhhhhhhhhhhh
Firstbitissetto0Thereforethereare7networkbits24hostbits
Initialbyte:0 127
126ClassAsexist(0and127arereserved)
16,777,214hostsoneachClassA
Notethemostsignificantbitofthefirstoctetissettoabinary0,therestofthe
bitsinthefirstoctetcanbezerosorones,therefore,ifthemostsignificantbitofthe
firstoctetis0itmustbeclassA.Theprefixlistpicksonthefirstbitbyusinga
/1prefixlength.
Task4
R2sroutingtable.
OnR2
R2(config)#NoipprefixlistClassAseq5permit0.0.0.0/1ge8le8
R2(configrouter)#NodistributelistprefixClassAinf0/0
R2#Cleariproute*
OnR2
R2#Showiprouterip

R223.1.1.0/24 [120/1]via10.1.12.1,00:00:03,FastEthernet0/0
133.1.0.0/25issubnetted,1 subnets
Task5
ConfigureR2suchthatitonlyallowsClassBnetworksthatarenotsubnetted.
OnR2
R2(config)#ipprefixlistClassBseq5permit128.0.0.0/2ge16le16
R2(configrouter)#distributelistprefixClassBinf0/0
R2#Cleariproute*
OnR2
R2#Showiprouterip
10nnnnnnnnnnnnnnhhhhhhhhhhhhhhhh
Firsttwobitsaresetto10therefore,thereare14networkbitsleft
toidentifythenetworksandtheremaining16bitsidentifythehost
bits.
Initialbyte:128 191
16,384ClassBsexist
65,532hostsoneachClassB
Notethefirst&secondmostsignificantbitsofthefirstoctetissettoabinary10,
sincethefirsttwooctetsarereservedfornetworks,therestofthebitsinthefirst&
secondoctetcanbezerosorones,therefore,if thetwomostsignificantbitsofthe
firstoctetis10itmustbeclassB.Theprefixlistpicksonthefirsttwobitsby
usinga/2prefixlength,withanetworkaddressof128.0.0.0.Sincethetaskstates
thatitshouldONLYallowclassBnetworksthatareNOTsubnetted,theprefix
lengthspecifiesGE16andLE16.
Task6
R2sroutingtable.
OnR2
R2(config)#NoipprefixlistClassBseq5permit128.0.0.0/2ge16le16
R2(configrouter)#NodistributelistprefixClassBinf0/0
R2#Cleariproute*
OnR2
R2#Showiprouterip

Task7
ConfigureR2suchthatitonlyallowsClassCnetworksthatarenotsubnetted.
OnR2
R2(config)#ipprefixlistClassCpermit192.0.0.0/3ge24le24
R2(configrouter)#distributelistprefixClassCinf0/0
R2#Cleariproute*
OnR2
R2#Shiprouterip
R 200.1.1.0/24[120/1]via10.1.12.1,00:00:07,FastEthernet0/0
110nnnnnnnnnnnnnnnnnnnnnhhhhhhhh
Firstthreebitsof thefirstoctetisreservedas110Sincethefirst
threeoctetsbelongtonetworks,thereare21networkbitsleftto
identifythenetworksthereforetheremaining8bitsidentifythehost
bits
Initialbyte:192 223
2,097,152ClassCsexist
254hostsoneachClassC
Task8
R2sroutingtable.
OnR2
R2(config)#NoipprefixlistClassCseq5permit192.0.0.0/3ge24le24
R2(configrouter)#NodistributelistprefixClassCinf0/0
R2#Cleariproute*
OnR2
R2#Showiprouterip

Task9
ConfigureR2suchthatitonlyallowsClassAnetworksthatareorarenotsubnetted.
OnR2
R2(config)#ipprefixlistClassAseq5permit0.0.0.0/1ge8le32
R2(configrouter)#distributelistprefixClassAinf0/0
R2#Cleariproute*
OnR2
R2#Showiprouterip

NoteinthiscasetheprefixlistpicksonclassA,withaprefixlengthofgreaterthan
orequal8andlessthanorequal32,whichmeansthatallclassAplusallclassA
networksthataresubnetted.
Task10
R2sroutingtable.
OnR2
R2(config)#NoipprefixlistClassAseq5permit0.0.0.0/1ge8le32
R2(configrouter)#NodistributelistprefixClassAinf0/0
R2#Cleariproute*
OnR2
R2#Showiprouterip
R133.1.1.0[120/1] via10.1.12.1,00:00:04,FastEthernet0/0
Task11
ConfigureR2suchthatitonlyallowsClassBnetworksthatareorarenotsubnetted.
OnR2
R2(config)#ipprefixlistClassBseq5permit128.0.0.0/2ge16le32
R2(configrouter)#distributelistprefixClassBinf0/0
R2#Cleariproute*
R2#Shiproute rip
R 132.1.1.0[120/1]via10.1.12.1,00:00:05,FastEthernet0/0

Task12
R2sroutingtable.
OnR2
R2(config)#NoipprefixlistClassBseq5permit128.0.0.0/2ge16le32
R2(configrouter)#NodistributelistprefixClassBinf0/0
R2#Cleariproute*
OnR2
R2#Showiprouterip
Task13
ConfigureR2suchthatitonly allowsClassCnetworksthatareorarenotsubnetted.
OnR2
R2(config)#ipprefixlistClassCseq5permit192.0.0.0/3ge24le32
R2(config)#Routerrip
R2(configrouter)#distributelistprefixClassCinf0/0
R2#cleariproute*
OnR2
R2#Showiprouterip
Task14
R2sroutingtable.
OnR2
R2(config)#NoipprefixlistClassCseq5permit192.0.0.0/3ge24le32
R2(configrouter)#NodistributelistprefixClassCinf0/0
R2#Cleariproute*

OnR2
R2#Showiprouterip
Task15
ConfigureR2suchthatitonlyallowsnetworkswithaprefixlengthof25orgreaterinits
routingtable.
OnR2
R2(config)#ipprefixlistTSTseq5permit0.0.0.0/0ge25

R2(configrouter)#distributelistprefixTSTinf0/0
R2#Cleariproute*
Noteinthiscasethecombinationofthepermit0.0.0.0/0andthege25tellsthe
routerthatanynetworkthathasaprefixlengthof25orgreaterisapermitted.
OnR2
R2#Shiprouterip
Task16
R2sroutingtable.
OnR2
R2(config)#NoipprefixlistTSTseq5permit0.0.0.0/0ge25
R2(configrouter)#NodistributelistprefixTSTinf0/0
R2#Cleariproute*
OnR2
R2#Showiprouterip
Task17
ConfigureR2suchthatitonlyallowsnetworkswithaprefixlengthof16orlessinits
routingtable.
OnR2
R2(config)#ipprefixlistTSTseq5permit0.0.0.0/0le16
R2#Cleariproute*
Noteinthiscasethecombinationofthepermit0.0.0.0/0andthele16tellsthe
routerthatanynetworkthathasaprefixlengthof16orlessisapermitted.

OnR2
R2#Shiproute
Codes:C connected,S static,RRIP,M mobile,BBGP

D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPF externaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
C10.1.12.0isdirectlyconnected,FastEthernet0/0
Task18
R2sroutingtable.
OnR2
R2(config)#NoipprefixlistTSTseq5permit0.0.0.0/0le16
R2#Cleariproute*

OnR2
R2#Showiprouterip
Task19
ConfigureR2suchthatitonlyallowsnetworkswithaprefixlengthof16to25inits
routingtable.
OnR2
R2(config)#ipprefixlistTSTpermit0.0.0.0/0ge16le25

R2#Cleariproute*
R2#Showiprouterip
Task20
Removethecommandsfrom theprevioustaskandensurethatallthenetworksarein
R2sroutingtable.
OnR2
R2(config)#NoipprefixlistTSTpermit0.0.0.0/0ge16le25
R2#Cleariproute*

OnR2
R2#Showiprouterip
Task21
ErasethestartupconfigurationofR1andreloadthisrouter.Whentheroutercomesup,
copyandpastetheconfigurationfromtheCDprovidedforTask21
VerifythatR2isreceivingthefollowingroutesfromR1:
R2#Shiprouterip
10.0.0.0/8isvariablysubnetted,11subnets,7masks
Task22
ConfigureR2toONLYpermitthe10.7.0.0subnetsinitsroutingtableyoushould
configureoneprefixlisttoaccomplishthistask.
OnR2
R2#Cleariproute*
Toverifytheconfiguration
OnR2
R2#Showiprouterip
Notetheprefixlistchecksthefirst22bitstoensureamatch,then,thesubnetmask
mustbeGEto23andLE24,whichwillONLYpickonthefournetworksin
10.7.0.0thatR1isadvertising.
Task23
R2sroutingtable.

OnR2
R2#Cleariproute*
OnR2
R2#Showiprouterip

E1 OSPFexternaltype1,E2 OSPFexternaltype2
C10.1.12.0/24isdirectlyconnected,FastEthernet0/0
Task24
ConfigureR2suchthatitONLYallowsthefollowingtwoprefixesinitsroutingtable:
10.4.4.32/27and10.4.5.64/26

OnR2
R2#Cleariproute*
OnR2
R2#Showiprouterip
Notetheprefixliststartswith10.4.4.0/23,becausethefirst23bitsareidenticalin
bothprefixes,therefore,thebitsmustspecify/23.Thesubnetmaskofthenetwork
shouldbeGE26andLE27,whichpicksonlyonthetwoprefixes.
Task25
R2sroutingtable.
OnR2
R2#Cleariproute*
OnR2
R2#Showiprouterip
o ODR, P periodicdownloadedstaticroute
Task26
ConfigureR2toallowallsubnetsof10.4.0.0network.Youshouldbeveryspecificwhen
configuringtheprefixlist/s,youshouldNOTallowotherprefixesexcepttheonesinyour
routingtable.Useminimumnumberofprefixliststoaccomplishthistask.
OnR2
R2#Cleariproute*

OnR2
R2#Showiprouterip
Task27
R2sroutingtable.
OnR2
R2#Cleariproute*
OnR2
R2#Showiprouterip

Gateway oflastresortisnotset

Task28

NarbikKocharians
CCIE#12410
R&S,Security,SP
RIPv2
Answers

Lab1
ConfiguringRIPv2
R1 R2
.1.2
FrameRelay
S0/0 S0/0
F0/0.2
.3
F0/0 .
.4 .3
FrameRelay
S0/0 S0/0
R4 R3
LabSetup
R2andR3sF0/0interfaceshouldbeconfiguredinVLAN23.
R1andR2shouldbeconfiguredinaframerelaypointtopoint.

IPAddressing
Router Interface IPaddress

R1 Lo0 1.1.1.1/8
S0/0 131.1.12.1/24
R2 Lo0 2.2.2.2/8
S0/0 131.1.12.2/24
F0/0 131.1.23.2/24
R3 Lo0 3.3.3.3/8
S0/0 131.1.34.3/24
F0/0 131.1.23.3/24
R4 Lo0 4.4.4.4/8
S0/0 131.1.34.4/24
Task1
ConfigureRIPv2onallroutersandadvertisetheirdirectlyconnectednetworks.When
configuringRIP,ensurethatautosummarizationisdisabled.
OnR1
R1(configrouter)#noau
R1(configrouter)#ver2
R1(configrouter)#network131.1.0.0
OnR2
OnR3

OnR4
Task2
Configuretheserouterssuch thatupdateinterval,invalidationtimer,Holddowntimerand
flushtimersaredoublethedefaultvalue.
Tofindoutthedefaultparameters:
OnR1
Showipprotocols
RoutingProtocolis"rip"
Outgoingupdatefilterlistforallinterfacesisnotset
Incomingupdatefilterlistforallinterfacesisnotset
Sendingupdatesevery30seconds,nextduein22seconds
Invalidafter180seconds,holddown180, flushedafter240
Redistributing:rip
Defaultversioncontrol:sendversion2,receiveversion2
InterfaceSendRecvTriggeredRIPKeychain
Serial0/0.12 22
Loopback0 22
Automaticnetworksummarizationisnotineffect
Maximumpath:4
RoutingforNetworks:
1.0.0.0
131.1.0.0
RoutingInformationSources:
GatewayDistanceLastUpdate
131.1.12.212000:00:19
Distance:(defaultis120)
OnR1
Routerrip
TimersBasic?
<04294967295> Intervalbetweenupdates
R1(configrouter)#timersbasic60?
<14294967295> Invalid
<04294967295> Holddown
<14294967295> Flush
R1(configrouter)#timersbasic60360360480
OnAllRouters
(config)#Routerrip
(configrouter)#Timersbasic60360360480
Task3
Theseroutersshouldsuppressaflashupdateiftheregularupdateisduein10secondsor
less.
On AllRouter
(config)#routerrip
(configrouter)#flashupdatethreshold10
TheFlashupdatethresholdcommandsuppressesflashupdateswhenthearrivalof
aregularlyscheduledupdatematches,orislessthanthenumberofsecondsthatis
configured,inthiscase10seconds.Therangeis0 30seconds.
Theaboveconfigurationconfiguresallfourrouterstosuppressaregularly
scheduledflashupdate,iftheregularupdateisduein10secondsorless.
Showipprotocols
Flashupdateissuppressedwhennextupdateduewithin10seconds
Invalidafter360seconds,holddown360,flushedafter480
Task4
R1isahighspeedroutersendingupdatestoR2whichisalowspeedrouter.Becauseof
this,factR2mightnotbeabletoreceiveandprocessupdatesattheratethatR1operates,
therefore,configureR1suchthatwhenithasmultipleRIPpacketstosendtoR2,itwill
wait10millisecondsbetweenthepackets.Tofurtherremedythesesituations,configure
R2toincreaseitsRIPqueuedepthto75.
On R1
(config)#routerrip
(configrouter)#outputdelay10
TheaboveconfigurationwillhelpR2fromlosingroutinginformationbecausethis
commandintroducesadelayof10millisecondsbetweenpacketsinamultiplepacket
RIPupdates.Bydefaultthereisnointerpacketdelayandtherangeforthisdelayis
(850milliseconds).
On R2
(configrouter)#inputqueue75
ThiscommandwillalsohelptopreventroutinginformationfrombeinglostThe
valuespecifiesthedepthoftheinput queue,thelargerthevalue,thelargerthe
depthofthequeue.Therangeis(0 1024)andthedefaultvalueis50.
Donoterasetheconfiguration,proceedtothenextlab.

Lab2
RIPv2Authentication
(Thislabbuildsonthepreviouslab)
Task1
ConfigurecleartextauthenticationbetweenR1andR2andMD5authenticationbetween
R3andR4.Useciscotobethepassword.
ToenableauthenticationforRIPversion2,akeymustbedefinedandthenappliedto
theinterface.
RIPandEIGRPusekeychainauthentication,inwhichakeychainisconfigured.
Withinthatkeychainakeyisdefinedandakeystring(Password)isassignedtothe
definedkey.Lastlythekeychainisassignedtotheinterfaceandtheauthentication
typeisconfigured.RIPcanbeconfiguredtoauthenticatewithcleartextorMD5
OnR1
R1(config)#keychainTEST
R1(configkeychain)#key1
R1(configkeychainkey)#keystringcisco
R1(config)#intS0/0.12
R1(configif)#ipripauthenticationkeychainTEST
OnR2
R2(configif)#ipripauthenticationkeychainTEST
OnR3

R3(configsubif)#ipripauthenticationkeychainTEST
R3(configsubif)#ipripauthenticationmodemd5
OnR4
R4(configkeychainkey)#intS0/0.43
R4(configsubif)#ipripauthenticationkeychainTEST
R4(configsubif)#ipripauthenticationmodemd5
OnR1
Flashupdateissuppressedwhennextupdateduewithin10seconds
Invalidafter360seconds,holddown360,flushedafter480
Redistributing:rip
Defaultversioncontrol:sendversion2,receiveversion2
InterfaceSendRecvTriggeredRIP Keychain
FastEthernet0/022 Notethekeychainin
Serial0/0.2122 TEST UseisTEST
Loopback022
Task2
Removetheconfigurationcommandsfromthislabbeforeproceedingtothenextlab.

Lab3
ConfiguringRIPv2Updates
UsethetopologyandIPaddressingfromLab1
Task1
ConfigureRIPv2onR1,R2,R3,andR4andadvertisetheirdirectlyconnectednetworks,
ensurethatautosummarizationisdisabledonallrouters.
Task2
R1andR2shouldexchangetheirupdatesusingtheMulticastdestinationof224.0.0.9,
whereasR2andR3shouldexchangetheirupdatesviaUnicast.
RIPv2bydefaultsendsitsupdatestothedestinationaddressof224.0.0.9,this
behaviorcanbechangedsuchthattheupdatesaresenttotheneighborsIPaddress
(Unicast)ortothebroadcast(255.255.255.255)address,inthistaskweonlyneedto
beconcernedwithR2andR3sconfiguration,sinceR1andR2willsendtheir
updatesto224.0.0.9(Multicast)addressbydefault.
OnR2
R2(configrouter)#passiveinterfaceF0/0
ThepassiveinterfacecommandstopsRIPfromsendingupdatesoutofaspecified
interface.ThisrouterwillstillprocesstheupdatesthatitreceivesthroughF0/0
interface.Anotherwaytohandlethistaskistoconfigurepassiveinterface
default.ThiscommandstopssendingRIPupdatesoutofallinterfaces,andthenwe
canconfigureneighborcommandtosendupdatesONLYtothespecified
neighbor.Iftheneighborcommandisusedwithoutthepassiveinterfacecommand,
RIPwillsendtwoupdates,onetoMulticastandanothertoaUnicastdestination.
R2(configrouter)#neighbor131.1.23.3
OnR3
R3(configrouter)#neighbor131.1.23.2
Task 3
R3andR4shouldexchangeupdatesviaBroadcast.
OnR3
R3(config)#ints0/0.34
R3(configsubif)#ipripv2broadcast
OnR4
R4(config)#ints0/0.43
R4(configsubif)#ipripv2broadcast
TheIPripv2broadcastisusedtosendversion2updatestoadestinationaddress
of255.255.255.255forhosts/routersthatdonotlistentoMulticastaddresses.
Task 4
Removetheconfigurationcommandsformthislabbeforeproceedingtothenextlab.

Lab4
ConfiguringDefaultroutes
UsethetopologyandIPaddressingfrom Lab1
Task1
R1shouldNOTbeconfiguredwithanyroutingprotocol.Configureastaticroutefor
network1.0.0.0/8onR2withanexthopIPaddressof131.1.12.1,andconfigureastatic
defaultrouteonR1pointingtoR2sS0/0.21IPaddress(131.1.12.2).
OnR1
R1(config)#iproute0.0.0.00.0.0.0131.1.12.2
OnR2
R2(config)#iproute1.0.0.0255.0.0.0131.1.12.1
Task2
ConfigureRIPv2onR2,R3andR4andadvertisetheirconnectednetworks.Ensurethat
autosummarizationisdisabled.
OnR2
R2(configrouter)#netw131.1.0.0
OnR3

OnR4
Task3
ConfigureR2toinjectadefaultrouteintoRIProutingdomain.Thisconfigurationshould
betestedinthreedifferentways.
Defaultrouteinjectioncanbeconfiguredinthreewaysasfollows:
Defaultinformationoriginate
ConfiguringaStaticdefaultroute,andthenredistributingthestaticroute
intoRIProutingdomain.
IPdefaultnetworkcommand.
Firstmethod:
OnR2
R2(configrouter)#defaultinformationoriginate
Ping1.1.1.1
Youshouldbesuccessful

Thesecondmethod:
RemovethepreviouscommandfromR2.
OnR2
R2(configrouter)#nodefaultinformationoriginate
Removethestaticroutefornetwork1.0.0.0fromR2.
R2(config)#noiproute1.0.0.0255.0.0.0131.1.12.1
Configureastaticdefaultroutepointingto131.1.12.1andthenredistributestatic
routesintoRIProutingdomain.
R2(config)#iproute0.0.0.00.0.0.0131.1.12.1
R2(configrouter)#redistributestatic
Note,thismethodcanalsobeconfiguredusingthefollowingsteps:
DonotremovethestaticroutefromR2fornetwork1.0.0.0/8.
CreateastaticdefaultroutepointingtoNULL0
RedistributestaticintoRIP.
Thethirdmethod:
RemovethestaticdefaultroutethatwasconfiguredinthepreviousstepfromR2:
R2(config)#Noiproute0.0.0.00.0.0.0131.1.12.1
RemovetheredistributestaticthatwasconfiguredinthepreviousstepfromR2:
R2(configrouter)#Noredistributestatic
ConfigureipdefaultnetworkcommandtoinjectadefaultrouteintoRIPsrouting
domain.
OnR2
R2(config)#ipdefaultnetwork 2.0.0.0
TheabovecommandinjectsadefaultrouteintoRIPsroutingdomain.Thistellsthe
otherroutersthatiftheyarenotawareofanyroutes,theyshouldsendittoR2.
OnR4
Ping1.1.1.1
Note,youshouldbegettingunreachablemessagesandyourpingshouldnotbe
successful.TheactualechomessagesaregettingtoR2,butR2doesnothavearoute
tonetwork1.0.0.0/8,therefore,torectifythisproblemwehavetoconfigureastatic
routeonR2thatispointingto131.1.12.1asfollows:
OnR2
Iproute1.0.0.0255.0.0.0131.1.12.1
Task4
Removethecommand/sfromTask1andTask3beforeproceedingtothenexttask.
OnR2
R2(config)#NoIproute1.0.0.0255.0.0.0131.1.12.1
R2(config)#Noipdefaultnetwork2.0.0.0
OnR1
R1(config)#Noiproute0.0.0.00.0.0.0131.1.12.2
Task5
ConfigureEIGRPAS100onR1andR2andadvertisethefollowingnetworksinthis
routingdomain:
OnR1Advertiseitsdirectlyconnectednetworksandremovethestaticdefault
routethatpointsto131.1.12.2.
OnR2Advertisenetwork131.1.12.0/24.
OnR1
Routereigrp100
Noau
Netw1.0.0.0
Netw131.1.12.00.0.0.255
Exit
Noiproute0.0.0.00.0.0.0131.1.12.2
OnR2
Routereigrp100
Noau
Netw131.1.12.00.0.0.255
Task6
DonotredistributebetweentheroutingprotocolsandinsteadconfigureR2toinjecta
defaultrouteintoRIPsroutingdomain.Chooseanymethodtoaccomplishthistask.R3
andR4mustusethedefaultroutetoreachnetwork1.0.0.0/8.
OnR2
Routerrip
Defaultinformationoriginate
Task7
SincetheusersthatareconnectedtoR3andR4willONLYusethedefaultroutefromthe
previoussteptoreachnetwork1.0.0.0/8,configureR2suchthatitinjectsthedefault
routeonlyifnetwork1.0.0.0isinR2sroutingtable.
OnR2
R2(config)#accesslist1permit1.0.0.00.255.255.255
R2(config)#routemapTESTpermit10
R2(configroutemap)#matchipaddr1
R2(configrouter)#defaultinformationoriginateroutemapTEST
Thisconfigurationiscalledconditionaldefaultrouteinjection.Applyinga
condition,inthiscasearoutemap,candeterminewhentheroutemapisoriginated.
Theroutemapcanalsobeconfiguredtomatchanaccesslist,then,setinterface
F0/0,tobemorespecificastowhereandwhatinterfacethedefaultroutewillbe
originated.
Task8
Erasethestartupconfigandreloadtheroutersbeforeproceedingtothenextlab.

Lab5
Filteringroutes
UsethetopologyfromLab1
LabSetup:
ConfigurethefollowingIPaddressingontherouters:

R1 Lo0 1.1.1.1/8
S0/0.12 131.1.12.1/24
R2 S0/0.21 131.1.12.2/24
F0/0 131.1.23.2/24
R3 Lo0 3.3.3.3/8
S0/0.34 131.1.34.3/24
F0/0 131.1.23.3/24
R4 Lo0 4.4.4.4/8
S0/0.43 131.1.34.4/24
ConfigurethefollowingLoopbackinterfacesonR2:
Lo02.2.0.2/24 Lo52.2.5.2/24
Lo12.2.1.2/24 Lo62.2.6.2/24
Lo22.2.2.2/24 Lo7 2.2.7.2/24
Lo32.2.3.2/24 Lo82.2.8.2/24
Lo42.2.4.2/24 Lo92.2.9.2/24
Task1
ConfigureRIPv2routingprotocolonalltheroutersandadvertisetheirdirectlyconnected
interfaces.Ensurethatautosummarizationisdisabledonallrouters.
OnR1

OnR2
OnR3
OnR4
Task2
EnsurethatR1onlyreceivestheevennumberedsubnets(2.2.0.0,2.2.2.0,2.2.4.0,2.2.6.0,
2.2.8.0)ofmajornetwork2.0.0.0fromR2.Useminimumnumberofcommandlinesto
accomplishthistask
OnR1
Beforeweconfigurethetask,weshouldchecktheroutingtableonthisrouter:
R1#Showiproute


C1.0.0.0/8isdirectlyconnected,Loopback0
R2.2.0.0[120/1]via131.1.12.2,00:00:11,Serial0/0.12
R2.2.1.0[120/1]via131.1.12.2,00:00:11,Serial0/0.12
R2.2.2.0[120/1] via131.1.12.2,00:00:11,Serial0/0.12
R2.2.3.0[120/1]via131.1.12.2,00:00:11,Serial0/0.12
R2.2.4.0[120/1]via131.1.12.2,00:00:11,Serial0/0.12
R2.2.5.0[120/1]via131.1.12.2,00:00:11,Serial0/0.12
R2.2.6.0[120/1]via131.1.12.2,00:00:12,Serial0/0.12
R2.2.7.0[120/1]via131.1.12.2,00:00:12,Serial0/0.12
R2.2.8.0[120/1]via131.1.12.2,00:00:12,Serial0/0.12
R2.2.9.0[120/1]via131.1.12.2,00:00:12,Serial0/0.12
R3.0.0.0/8[120/2]via131.1.12.2,00:00:12,Serial0/0.12
R4.0.0.0/8[120/3]via131.1.12.2,00:00:14,Serial0/0.12
C131.1.12.0isdirectlyconnected,Serial0/0.12
R131.1.23.0[120/1]via131.1.12.2,00:00:14,Serial0/0.12
R 131.1.34.0[120/2]via131.1.12.2,00:00:14,Serial0/0.12
Tofiltersuchthatonlytheevennumberedsubnetsofnetwork2.0.0.0areinthe
routingtable:
OnR1
R1(config)#accesslist1deny2.2.1.00.0.254.255
R1(config)#accesslist1permitany
R1(configrouter)#distributelist1inS0/0.12
Explanationoftheaccesslist:
Example:
Accesslist1permit2.0.0.00.255.255.255
Inthisaccesslistwearepermittinganynetworkthatmatchestheresultofthe
andingofnetwork 2.0.0.0withaninversemaskof0.255.255.255.Inorderforusto
dotheandingwemustgettheregularmask,togettheregularmask,weshould
subtract0.255.255.255from255.255.255.255,whichresultsto255.0.0.0
Therefore,theandingisasfollows:

00000010.00000000.00000000.00000000Network(Inthiscase2.0.0.0)
11111111.11111111.11111111.00000000RegularMask(Inthiscase255.255.255.0)
Theresultofthisandingis2.0.0.0,thereforeiftheresultoftheANDmatches
network2.0.0.0,itispermitted,ifNOT,itsdenied.
Inthistasktheaccesslistis:
Accesslist1deny2.2.1.00.0.254.255
Therefore,inorderforustodotheanding,wehavetogettheregularmaskforthe
inversemaskof0.0.254.255,whichis255.255.255.255minus0.0.254.255equalsto
255.255.1.0
00000010.00000010.00000000.00000000(Network)
11111111.11111111.00000001.00000000(Regularmask)
TheresultofthisANDis2.2.0.0,therefore,ifitmatches2.2.0.0,itshouldbedenied,
ifthenetworkisreplacedwithothersubnetsofnetwork2.2.0.0,wewillseethatthe
ODDnumberednetworksarealldenied.
LastlyiftheaccesslistwaswrittentopermittheevennumberednetworksONLY,
theothernetworks(131.1.34.0/24,131.1.23.0/24,4.0.0.0/8,3.0.0.0.0/8)wouldnt
havebeenadvertised.
Showiproute

R2.2.0.0[120/1]via131.1.12.2,00:00:08,Serial0/0.12
R2.2.2.0[120/1]via131.1.12.2,00:00:08,Serial0/0.12
R2.2.4.0[120/1]via131.1.12.2,00:00:08,Serial0/0.12
R2.2.6.0[120/1]via131.1.12.2,00:00:08,Serial0/0.12

R2.2.8.0[120/1]via131.1.12.2,00:00:08,Serial0/0.12
R3.0.0.0/8[120/2]via131.1.12.2,00:00:08,Serial0/0.12
R4.0.0.0/8[120/3]via131.1.12.2,00:00:09,Serial0/0.12
R131.1.23.0[120/1]via131.1.12.2,00:00:09,Serial0/0.12
R131.1.34.0[120/2]via131.1.12.2,00:00:09,Serial0/0.12
Task3
ConfigureR3suchthatitonlyreceivestheoddroutes.Useminimumnumberof
commandlinestoaccomplishthistask
OnR3
R3(configrouter)#distributelist1inF0/0
Showiproute

R2.2.9.0 [120/1]via131.1.23.2,00:00:01,FastEthernet0/0
R4.0.0.0/8[120/1]via131.1.34.4,00:00:02,Serial0/0.34
Task4
R2shouldbeconfiguredsuchthatR4filtersnetwork1.0.0.0/8
OnR2
R2(configrouter)#offsetlist1out13f0/0
ToVerifytheconfiguration
OnR4
Showiproute

R2.2.1.0[120/2]via131.1.34.3,00:00:11,Serial0/0.43
R2.2.3.0[120/2]via131.1.34.3,00:00:11,Serial0/0.43
R2.2.5.0[120/2]via131.1.34.3,00:00:11,Serial0/0.43
R2.2.7.0[120/2]via131.1.34.3,00:00:11,Serial0/0.43
R2.2.9.0[120/2]via131.1.34.3,00:00:11,Serial0/0.43
R3.0.0.0/8[120/1]via131.1.34.3,00:00:11,Serial0/0.43
R131.1.12.0[120/2]via131.1.34.3,00:00:12,Serial0/0.43
R131.1.23.0[120/1]via131.1.34.3,00:00:12,Serial0/0.43
C 131.1.34.0isdirectlyconnected,Serial0/0.43
Thingstorememberaboutoffsetlists:
1. ItonlyworkswithRIPandEigrproutingprotocols.
2. InRIP,itsusedtoaddtotheexistinghopcount.
3. InEigrpitsusedtoaddtotheexistingdelayvalue.
4. Ifanaccesslistisused,theoffsetlistwilloffsetthehopcountorthedelay
valueforthenetworksthatarepermittedintheaccesslist.
5. Ifallnetworksaretobeaffected,thenoffsetlist0shouldbeused.
Task5
Erasetheconfigurationfromthislabbeforeproceedingtothenextlab.

Lab6
AdvancedRIPv2configuration
R1
F0/0
F0/0
R2
S0/0
FrameRelay
S0/0 S0/0
R4
R3 F0/0
F0/0
R5

LabSetup:
Configuretheroutersbasedonthetopologyandipaddressingchart
R4andR5sF0/0interfaceshouldbeconfiguredinVLAN45
ConfiguretheFrameRelaycloudusingthefollowingpolicy:
a) RoutersR2,R3andR4shouldbeconfiguredinahubandspokemanner.R2
shouldbeconfiguredtobethehubwhereasR3andR4shouldbeconfigured
asspokes.
b) R2andR3shouldbeconfiguredinapointtopointmanner,whereasthe
connectionbetweenR2andR4shouldbeconfiguredinamultipointmanner.
c) R4shouldNOTbeconfiguredwithasubinterface.
IPaddressing:
Router Interface IPAddress

R1 Lo0 10.1.1.1/24
Lo1 10.1.2.1/24
Lo2 100.0.0.1/24
Lo3 111.1.1.33/27
Lo4 211.1.1.65/26
Lo5 111.1.1.17/28
F0/0 200.1.12.1/24
R2 Lo0 2.2.2.2/8
F0/0 131.1.12.2/24
FramerelayconnectiontoR3 131.1.23.2/24
R3 Lo0 3.3.3.3/8
R4 Lo0 4.4.4.4/8
F0/0 131.1.45.4/24
R5 Lo0 5.5.5.5/8
F0/0 131.1.45.5/24

Task1
ConfigureRIPv2betweenR1andR2andadvertisetheirdirectlyconnectednetworks.If
thisconfigurationissuccessful,R2shouldreceivetheLoopbacknetworkaddresses
advertisedbyR1.
OnR1
R1(configrouter)#novalidateupdatesource
OnR2
R2(configrouter)#novalidateupdatesource
RIPandIGRParetheONLYtworoutingprotocolsthatvalidatethesourceIP
addressofincomingupdates.
BeforeRIPand/orIGRProutingprotocolsacceptroutesfromagivenneighbor,
theywanttomakesurethatthesourceIPaddressoftheadvertisingrouterisfrom
thesameIPaddressspaceasthelinkthatthetworoutersareconnectedto.
IftheroutersthathavetoexchangeroutinginformationarefromdifferentIP
addressspaces,thenthesourcevalidationshouldbenegatedusingnovalidate
updatesource
OnR2
R2#Showiproute

R100.0.0.0[120/1]via200.1.12.1,00:00:00
R111.1.1.32/27[120/1]via200.1.12.1,00:00:00
R111.1.1.16/28[120/1]via200.1.12.1,00:00:00
R10.1.2.0[120/1]via200.1.12.1,00:00:00
R10.1.1.0 [120/1]via200.1.12.1,00:00:00
R211.1.1.64[120/1]via200.1.12.1,00:00:02
Note,eventhoughthenetworksareintheroutingtableofR2,theyareNOT
reachable,becauseR2doesNOThaveNLRI(NetworkLayerReachability
Information)tothenexthopIPaddress(200.1.12.1)thatisadvertised.
Task2
R2shouldonlyreceiveprefixeswithaprefixlengthof8to24andtheseprefixesshould
ONLYbereceivedfromR1andnootherrouter.DoNOTuseaneighborcommand,NAT
oranaccesslisttoaccomplishthistask.
OnR2
R2(config)#ipprefixlistTESTseq5permit0.0.0.0/0ge8le24
TheIPPrefixListcommandthatisnamedTESTstatesthatstartingwith0.0.0.0/0
(Anynetworkaddress)withaprefixlengthofGreaterthanorEqualto8,andLess
thanorequalto24.

R2(config)#ipprefixlistALLOWseq5permit200.1.12.1/32
ThisIPPrefixListcommandthatsnamedALLOW,permits200.1.12.1/32IP
address.
R2(configrouter)#distributelistprefixTESTgatewayALLOWinF0/0
Thegatewaykeywordidentifiestherouterthatyouwillbeacceptingroutesfrom.
ThisrouterisidentifiedinaPrefixListcalledALLOW.Theroutesthatyouare
acceptingisidentifiedinthePrefixListcalledTEST.
OnR2
R2#Showiproute

E1 OSPFexternal type1,E2 OSPFexternaltype2
Gatewayof lastresortisnotset
100.0.0.0/24 issubnetted,1subnets
R 100.0.0.0 [120/1]via200.1.12.1,00:00:18
R 10.1.2.0 [120/1]via200.1.12.1,00:00:18
R 10.1.1.0 [120/1]via200.1.12.1,00:00:18

Task 3
EnsurethatR2canpingR1andallthenetworksadvertisedbyR1.DoNOTusea
secondaryIPaddressorNATtoaccomplishthistask.Youareallowedonestaticroute
perroutertoaccomplishthistask.
InorderforR2topingthesenetworks,thenexthopIPaddressofallthenetworks
advertisedbyR1shouldbereachable,thiscanbeaccomplishedasfollows:
OnR2
R2(config)#iproute200.1.12.1255.255.255.255f0/0
OnR1
R1(config)#iproute131.1.12.2255.255.255.255f0/0
Task 4
ConfigureRIPv2betweenR2andR3R3shouldadvertiseitsdirectlyconnectednetwork
intotheRIPv2routingdomain.
R2shouldbeconfiguredsothatitonlysendsitsupdateswhenthereisatopologychange.
IftherearenotopologychangesR2shouldsuppressitsregularperiodicupdates.
ToaccomplishthistaskweneedtoenabletriggeredextensionstoRIP.Thisfeature
willsuppressregularupdatesunlessthereisatopologychange.Toverifythis
configurationwecanusedebugipripcommand.
On R2
R2(configsubif)#ipriptriggered
OnR3
R3(configsubif)#ipriptriggered
R3(configsubif)#routerrip

Toverifytheconfigurationandensurethattheseroutersare
exchangingroutes:
OnR2
R2#Showiproute
R100.0.0.0[120/1]via200.1.12.1,00:00:12
R3.0.0.0/8[120/1]via131.1.23.3,00:01:20,Serial0/0.23
S200.1.12.1isdirectlyconnected,FastEthernet0/0
R10.1.2.0[120/1]via200.1.12.1,00:00:12
R10.1.1.0[120/1]via200.1.12.1,00:00:12
R2#
Task 5
ConfigurethefollowingloopbackinterfacesonR4andadvertiseitsdirectlyconnected
networksinRIPv2.Thisroutershoulddisableautosummary.
Lo4040.1.0.4/24,Lo41 40.1.1.4/24,Lo42 40.1.2.4,Lo43 40.1.3.4/24
OnR4
R4(config)#intlo40

R4(configif)#ipaddr40.1.0.4255.255.255.0
R4(configif)#intlo41
OnR4
Showiproute

R2.0.0.0/8[120/1]via131.1.24.2,00:00:19,Serial0/0
R100.0.0.0[120/2]via131.1.24.2,00:00:19,Serial0/0
R3.0.0.0/8[120/2]via131.1.24.2,00:00:19,Serial0/0
C40.1.1.0isdirectlyconnected,Loopback41
R10.1.2.0[120/2]via131.1.24.2,00:00:21,Serial0/0
R10.1.1.0[120/2]via131.1.24.2,00:00:21,Serial0/0
R131.1.12.0[120/1]via131.1.24.2,00:00:21,Serial0/0
R 131.1.23.0[120/1]via131.1.24.2,00:00:21,Serial0/0
C131.1.24.0isdirectlyconnected,Serial0/0
R4#
Task 6
ConfigureRIPv2betweenR4andR5.R5shouldadvertiseitsdirectlyconnected
networks.EnsurethatR5getsasummaryroutefromR4fortheLoopbackinterfacesthat
werecreatedintheprevioustask(Task5).R4shouldNOTenableautosummary.
OnR5
Showiproute

R40.1.1.0 [120/1]via131.1.45.4,00:00:25,FastEthernet0/0
Tosummarizeallthe40.1.0.0subnets:
OnR4
R4(config)#intf0/0
R4(configif)#ipsummaryaddressrip40.1.0.0255.255.252.0
OnR5
R5#Showiproute

Task 7
Erasethestartupconfigandreloadtheroutersbeforeproceedingtothenextsection.

NarbikKocharians
CCIE#12410
R&S,Security,SP
EIGRP
Answers

Lab1
ConfiguringEIGRPandadjustingtimers
R1 R2
.1.2
FrameRelay
S0/0 S0/0
F0/0 .2
.3
R4 F0/0 . R3
.4 .3
FrameRelay
S0/0 S0/0
LabSetup:
R2andR3sF0/0interfaceshouldbeconfiguredtobeinVLAN23.
R1andR2,R3andR4shouldbeconfiguredinaframerelaymultipointmanner.
Donotuseasubinterfacetoaccomplishthistask.

IPAddressing

R1 Lo0 1.1.1.1/8
F/RinterfacetoR2 131.1.12.1/24
R2 Lo0 2.2.2.2/8
F0/0interfacetoR3 131.1.23.2/24
R3 Lo0 3.3.3.3/8
R4 Lo0 4.4.4.4/8
Task1
ConfigureEIGRPAS100onallroutersandadvertisetheirdirectly connectednetworks.
OnR1
R1(config)#routereigrp100
R1(configrouter)#netw131.1.12.00.0.0.255
OnR2
OnR3
R3(configif)#routereigrp100
OnR4
Task2
Theseroutersshouldsendtheirhellosevery30secondsandiftheydontreceiveahello
fromtheirneighboringrouterfor120seconds,theneighboradjacencyshouldbe
terminated.
On R1
IntS0/0.12
R1(configsubif)#iphellointervaleigrp10030
R1(configsubif)#ipholdtimeeigrp100120
OnR2
IntS0/0.21
IntF0/0
OnR3
IntS0/0.34
IntF0/0
OnR4
IntS0/0.43

Task3
EnsurethattheseroutersusebandwidthonlyandNOTbandwidth+delaytocalculate
theircompositemetricforagivennetwork.
ThistaskisaccomplishedbysettingtheKvalues,thecommandtoconfiguredtheK
valuesis:
Metricweighttosk1k2k3k4k5
ThiscommandisenteredinrouterEigrpconfigmode,wheretosvalueisalwaysset
to0,andthe defaultKvaluesareasfollows:
K1=1,K2=0,K3=1,K4=0,K50
TheKvalueseffecttheresultofthefollowingformula:
[(K1*Bandwidth)+(K2*bandwidth/256 load)+(K3*delay)]*256
IfK5doesnotequaltozero,thenanadditionaloperationisperformedasfollows:
[K5/K4+reliability]
Therefore,ifonlythebandwidthiswhatshouldbeconsidered,thenwemustsetthe
valueofK3tozero.Butrememberthatthischangemustoccuronallroutersorelse
therouterswontestablishneighboradjacency.
TodisplaythedefaultvaluesfortheKvariables,enterthefollowingcommand:
Showipprotocols
RoutingProtocolis"eigrp100"
Defaultnetworksflaggedinoutgoingupdates
Defaultnetworksacceptedfromincomingupdates
EIGRPmetricweightK1=1,K2=0,K3=1,K4=0,K5=0
EIGRPmaximumhopcount100
EIGRPmaximummetricvariance1
Redistributing:eigrp100
EIGRPNSFawarerouteholdtimeris240s
Automaticnetworksummarizationisnotineffect ThedefaultvaluesfortheK
Maximumpath:4 Variables
RoutingforNetworks:
4.0.0.0
131.1.34.0/24
131.1.34.39000:14:15
Distance:internal90external170
On AllRouters
(configrouter)#metricweights010000
Showipprotocols
RoutingProtocolis"eigrp100"
Incomingupdatefilterlistforallinterfacesisnot set
Defaultnetworksflaggedinoutgoingupdates
Defaultnetworksacceptedfromincomingupdates
EIGRPmetricweightK1=1,K2=0,K3=0,K4=0,K5=0
EIGRPmaximumhopcount100
EIGRPmaximummetricvariance1
Redistributing:eigrp100
EIGRPNSFawarerouteholdtimeris240s
Automaticnetworksummarizationisnotineffect
Maximumpath:4
RoutingforNetworks:
4.0.0.0
131.1.34.0/24
131.1.34.3 9000:00:05
Distance:internal90external170
Task4

Lab2
EIGRPMetric
Task1
RunRIPv2onR1andadvertiseitsdirectly connectednetworks.
OnR1
Task2
R2shouldadvertiseitsframerelayandLoopback0interfaceinRIPv2andLoopback1
(22.2.2.2/8)andF0/0interfaceinEIGRP100.
OnR2
R2(configsubif)#routerrip
R2(configrouter)#routereigrp100

Task3
R3andR4shouldrunEIGRP100andadvertisetheirdirectlyconnectednetworksinthe
EIGRProutingdomain.
OnR3
OnR4
Task4
PerformamutualredistributionbetweenRIPv2andEIGRPsuchthatR1seestheEIGRP
routeswiththecorrecthopcount.Forexample,R1shouldseenetwork3.0.0.0twohops
away,andnetwork4.0.0.0threehopsaway.
On R2
R2(configroutemap)#setmetric2

Note,routemapTESTpermit50mustbeconfiguredforthefuturenetworksthat
mayberedistributedintoRIP.
R2(configrouter)#routerrip
R2(configrouter)#redistributeeigrp100routemapTEST
R2(configrouter)#redistributeripmetric15002000025511500
Task5
Erasestartupconfigandreloadtheroutersbeforeproceedingtothenextlab.

Lab3
EIGRPSummarization&Advanced
Summarization
R1 R2
.1.2
F0/0 F0/0
S0/0 .2
FrameRelay
.3
R4 S0/0 . R3
.4 .3
F0/0 F0/0
IPAddressing

R1 Lo0 1.1.0.1/24
Lo1 1.1.1.1/24
Lo2 1.1.2.1/24
Lo3 1.1.3.1/24
R2 Lo0 2.2.4.2/24
Lo1 2.2.5.2/24
Lo2 2.2.6.2/24
Lo3 2.2.7.2/24
S0/0interfacetoR3 131.1.23.2/24

R3 Lo0 3.3.8.3/24
Lo1 3.3.9.3/24
Lo2 3.3.10.3/24
Lo3 3.3.11.3/24
S0/0interfacetoR2 131.1.23.3/24
R4 Lo0 4.4.12.4/24
Lo1 4.4.13.4/24
Lo2 4.4.14.4/24
Lo3 4.4.15.4/24
LabSetup:
R2andR3sFramerelayconnectionshouldbeconfiguredinamultipoint
manner.Donotuseasubinterfacetoaccomplishthistask.
Task1
ConfigureEIGRPAS100onallroutersandadvertisetheirdirectlyconnectednetworks.
OnR1
OnR2
OnR3
OnR4
Task2
ConfigureR2suchthatitadvertisesasummaryrouteforitsLoopbackinterfacestoR3.
InEigrproutingprotocol,summarizationcanbeperformedonanyrouter,inEigrp
summarizationmustbeperformedintheinterfaceconfigurationmode.
OnR2
R2(configrouter)#intS0/0
R2(configif)#ipsummaryaddresseigrp1002.2.4.0255.255.252.0
OnR2
R2#Showiproute

D1.1.0.0[90/156160]via131.1.12.1,00:01:17,FastEthernet0/0
D1.1.1.0[90/156160] via131.1.12.1,00:01:17,FastEthernet0/0

D2.2.4.0/22isasummary,00:01:17,Null0 Note,whensummarizationis
C2.2.5.0/24isdirectlyconnected,Loopback1 configured,Eigrpwillinjecta
C2.2.6.0/24isdirectlyconnected,Loopback2 discardrouteforloopavoidance
D3.3.8.0[90/2297856]via131.1.23.3,00:01:18,Serial0/0
D3.3.9.0[90/2297856]via131.1.23.3,00:01:18,Serial0/0
D 3.3.10.0[90/2297856]via131.1.23.3,00:01:18,Serial0/0
D3.3.11.0[90/2297856]via131.1.23.3,00:01:18,Serial0/0
D4.4.12.0[90/2300416]via131.1.23.3,00:01:18,Serial0/0
D4.4.13.0[90/2300416]via131.1.23.3,00:01:18,Serial0/0
D4.4.14.0[90/2300416]via131.1.23.3,00:01:18,Serial0/0
D4.4.15.0[90/2300416]via131.1.23.3,00:01:18,Serial0/0
D131.1.34.0[90/2172416]via131.1.23.3,00:01:18,Serial0/0
R2#
OnR3
R3#Showiproute

D1.1.0.0[90/2300416]via131.1.23.2,00:11:26,Serial0/0
D1.1.1.0[90/2300416]via131.1.23.2,00:11:26,Serial0/0
D1.1.2.0[90/2300416]via131.1.23.2,00:11:26,Serial0/0
D1.1.3.0[90/2300416]via131.1.23.2,00:11:26,Serial0/0
D 2.2.4.0[90/2297856]via131.1.23.2,00:03:55,Serial0/0

C 3.3.11.0isdirectlyconnected,Loopback3
D131.1.12.0[90/2172416]via131.1.23.2,00:11:27,Serial0/0
Task3
R2shouldsummarizeitsloopbackinterfacesandadvertiseasinglesummaryrouteplus
allthespecificroutestoR1.
TheleakmapwasintroducedinIOS12.3(14)T anditmustbeconfiguredunderthe
physicalinterfaceandNOTasubinterface.
Configuringleakmapoptionallowsustoadvertiseacomponentroute(Oneor
morespecificnetworksofasummaryroute)thatwouldotherwisebesuppressedby
themanualsummarization.
Therearethreerulestoremember:
Iftheleakmapisconfiguredtoreferencearoutemapthatdoesnotexist,
onlythesummaryrouteisadvertisedandthemorespecificroutesare
suppressed.
Iftheleakmapisconfiguredtoreferencearoutemapandtheroutemapis
referencinganaccesslistthatdoesNOTexist,thenthesummaryrouteplus
allthespecificroutesareadvertised.
Iftheleakmapisconfiguredtoreferencearoutemapandtheroutemap
matchesonanaccesslist,allthepermittednetworksbytheaccesslistwillbe
advertisedalongwiththesummaryroute.
OnR2
R2(config)#intF0/0
R2(configif)#ipsummaryaddresseigrp1002.2.4.0255.255.252.0leakmapTEST21
R2(config)#routemapTEST21permit10
R2(configroutemap)#exit
Note,theleakmapisreferencingaroutemapandtheroutemapismatchingonan
accesslistthatdoesnotexist,therefore,thesummaryrouteplusallthespecific
routesareadvertised.Iftheroutemapdoesnot haveamatchcommandconfigured
thesamewillresult.
OnR1
R1#Showiproute

Notethesummaryroute+
1.0.0.0/24issubnetted,4subnets allthespecificroutes
C1.1.0.0isdirectlyconnected,Loopback0 areadvertisedtoR1
D2.2.4.0/24[90/156160]via131.1.12.2,00:00:47,FastEthernet0/0
D 2.2.7.0/24[90/156160]via131.1.12.2,00:00:48,FastEthernet0/0
D 3.3.10.0[90/2300416]via131.1.12.2,00:18:01,FastEthernet0/0
D 4.4.13.0[90/2302976]via131.1.12.2,00:17:40,FastEthernet0/0
C 131.1.12.0isdirectlyconnected,FastEthernet0/0

R1#
Task4
ConfigureR4tosummarizeitsloopbackinterfacesandadvertiseasummaryrouteplus
network4.4.13.0/24toR3.
OnR4
R4(config)#IntF0/0
OnR3
R3#Showiproute

D1.1.0.0[90/2300416]via131.1.23.2,01:47:09,Serial0/0
D1.1.1.0[90/2300416]via131.1.23.2,01:47:09,Serial0/0
D1.1.2.0[90/2300416]via131.1.23.2,01:47:09,Serial0/0
D1.1.3.0[90/2300416]via131.1.23.2,01:47:09,Serial0/0
D2.2.4.0[90/2297856]via131.1.23.2,01:39:38,Serial0/0
D131.1.12.0 [90/2172416]via131.1.23.2,01:47:12,Serial0/0
R3#
Task5
ConfigureR3tosummarizeitsloopbackinterfacesandadvertiseasinglesummary plus
3.3.10.0/24and3.3.11.0/24toR4.
OnR3
R3(config)#intF0/0
OnR4
R4#Showiproute

D2.2.4.0 [90/2300416]via131.1.34.3,00:07:13,FastEthernet0/0
D4.4.12.0/22isasummary,00:07:17,Null0
R4#
Task6
ConfigureR4toinjectadefaultrouteintoEigrp100routingdomain.DoNOTuseany
globalorrouterconfigurationcommandtoaccomplishthistask.
OnR4
R4(config)#intF0/0
R4(configif)#ipsummaryaddresseigrp1000.0.0.00.0.0.0
OnR3
R3#Showiproute

Gatewayoflastresortis131.1.34.4tonetwork0.0.0.0
D1.1.0.0[90/2300416]via131.1.23.2,00:10:40,Serial0/0
D1.1.1.0[90/2300416]via131.1.23.2,00:10:40,Serial0/0
D1.1.2.0[90/2300416]via131.1.23.2,00:10:40,Serial0/0
D1.1.3.0[90/2300416]via131.1.23.2,00:10:40,Serial0/0
D2.2.4.0[90/2297856]via131.1.23.2,00:10:40,Serial0/0
D3.3.8.0/22isasummary,00:10:41,Null0
C 3.3.9.0/24isdirectlyconnected,Loopback1
D131.1.12.0[90/2172416]via131.1.23.2,00:10:42,Serial0/0
D*0.0.0.0/0[90/30720]via131.1.34.4,00:00:11,FastEthernet0/0
R3#
Task7

Lab4
EIGRPLoadBalancing
R1
F0/0
F0/0
R2
S0/0
FrameRelay
S0/0 S0/0
R3 R4
F0/0 F0/0
F0/0
R5

LabSetup:
R1andR2sF0/0interfaceshouldbeinVLAN12
R3,R4andR5sF0/0interfaceshouldbeinVLAN345
Theframerelaycloudshouldbeconfiguredinahubandspokemanner,withR2
beingthehubandR3andR4asthespokes,R2shouldbeconfiguredwithtwo
subinterfacesinamultipointmanner,DLCI203connectingR2toR3andDLCI
204connectingR2toR4.
R3andR4shouldbeconfiguredinamultipointmannerthesetworoutersshould
notbeconfiguredwithasubinterface.
IPAddressing

R1 Lo0 1.1.1.1/8
R2 Lo0 2.2.2.2/8
R3 Lo0 3.3.3.3/8
F0/0interfacetoR4andR5 131.1.100.3/24
R4 Lo0 4.4.4.4/8
R5 Lo0 5.5.5.5/8
Task1
ConfigureEigrp100onallroutersandadvertisetheirdirectlyconnectednetworks.
EnsurethattheseroutershaveNLRItoalltheprefixesadvertisedinthistopology.
TheseroutersshouldNOTtakesuboptimalroutestoreachanynetwork.
OnR1
OnR2
OnR3
OnR4
OnR5
OnR3
R3#Showiproute


D1.0.0.0/8[90/2300416]via131.1.23.2,00:00:44,Serial0/0
D2.0.0.0/8[90/2297856]via131.1.23.2,00:00:44,Serial0/0
D131.1.12.0[90/2172416]via131.1.23.2,00:00:44,Serial0/0
Task2
ConfigureR2suchthatitwaits60minutesbeforedeclaringaroutetobeSIA.
OnR2
R2(configrouter)#timersactivetime60
Task3
ConfigureR5suchthattherouterdisablestheSIAtimersandpermitstheroutingwait
timetoremainactiveindefinitely
On R5
R5(configrouter)#timersactivetimedisabled
Task4
OnR2,changethebandwidthoftheserialsubinterfaceconnectiontoR3tohalfofits
defaultvalue.
OnR2
R2(configsubif)#bandwidth772
Task5
EnsurethatR2performsunequalcostloadbalancingforallthedownstreamnetworks.
TheVariancecommandallowsustoperformunequalcostloadbalancingifthe
feasibilityconditionismet.Onlypathsthatarefeasiblecanbeusedforload
balancingandincludedintheroutingtable.Alwaysrememberthefollowingrules:
Theadvertiseddistancemustbelowerthanthelocalroutersfeasibledistance.
Themultiplier(Variancecommandsvalue)timesthelocalbestmetricforthe
destinationmustbegreaterthanorequaltothemetricthroughthenextrouter.
Thepathmustbeintheroutingtablefortheroutertouseit.
Inthiscasethebestpathtonetworks5.0.0.0/8and131.1.100.0/24isreachable
throughR4.Wehavetofindout thecompositemetricthroughR4asfollows:
OnR2
R2#Showiproute

N1 OSPFNSSAexternaltype1,N2 OSPFNSSA externaltype2
D3.0.0.0/8[90/2300416]via131.1.24.4,00:02:18,Serial0/0.24
D4.0.0.0/8[90/2297856]via131.1.24.4,00:02:18,Serial0/0.24
D5.0.0.0/8[90/2300416]via131.1.24.4,00:02:18,Serial0/0.24
D131.1.100.0[90/2172416]via131.1.24.4,00:02:20,Serial0/0.24
R2#

Note,thecostofthepaththroughR4toreachnetwork5.0.0.0/8is2300416and
network131.1.100.0/24is2172416.
ThenextstepistofigureoutthecostoftheroutethroughR3,thefollowing
commandwillrevealthatinformation:
OnR2
R2#Showipeigrptopology5.0.0.0/8
IPEIGRP(AS100):Topologyentryfor5.0.0.0/8
StateisPassive,Query originflagis1,1Successor(s),FDis2300416
RoutingDescriptorBlocks:
131.1.24.4(Serial0/0.24),from131.1.24.4,Sendflagis0x0
Compositemetricis(2300416/156160),RouteisInternal
Vectormetric:
Minimumbandwidthis1544Kbit
Totaldelayis25100microseconds
Reliabilityis255/255
Loadis1/255
MinimumMTUis1500
Hopcountis2
131.1.23.3(Serial0/0.23),from131.1.23.3,Sendflagis0x0
Compositemetricis(3958528/156160),RouteisInternal
Vectormetric:
Minimumbandwidthis772Kbit
Totaldelayis25100microseconds
Reliabilityis255/255
Loadis1/255
MinimumMTUis1500
Hopcountis2
R2#
Note,thecostthroughR3is3958528
Thenextstepistoperformthefollowingdivision:
3958528(ThecostthroughR3)/2300416(ThecostthroughR4)
Theresultis1.720rounduptothenextvalue,whichis2
Ifthesametasksareperformedfornetwork131.1.100.0/24,youshouldseethe
following:
3830528/ 2172416=1.7632roundupto2
Thelaststepistoconfigurethevariancecommand,asfollows:
OnR2
R2(configrouter)#variance2
OnR2
R2#Showiproute

D3.0.0.0/8[90/2300416]via131.1.24.4,00:03:22,Serial0/0.24
[90/3955968]via131.1.23.3,00:03:22,Serial0/0.23
D4.0.0.0/8[90/2297856]via131.1.24.4,00:03:22,Serial0/0.24
[90/3958528]via131.1.23.3,00:03:22,Serial0/0.23
D5.0.0.0/8[90/2300416]via131.1.24.4,00:03:22,Serial0/0.24
[90/3958528]via131.1.23.3,00:03:22, Serial0/0.23
D131.1.100.0[90/2172416] via131.1.24.4,00:03:23,Serial0/0.24
[90/3830528]via131.1.23.3,00:03:23,Serial0/0.23
R2#
InthiscaseEigrpwillperformaninverseproportionalloadbalancingandthe
variancecommandmeansthateverytwooutofthebestpath,itwillsendoneout
ofthesecondbestpath.Thefollowingcommandrevealstheproportions:
OnR2
R2#Showiproute5.0.0.0
Routingentryfor5.0.0.0/8
Knownvia"eigrp100",distance90,metric2300416,typeinternal
Redistributingviaeigrp100
Lastupdatefrom131.1.23.3on Serial0/0.23,00:05:18ago
RoutingDescriptorBlocks:
*131.1.24.4,from131.1.24.4,00:05:18ago,viaSerial0/0.24
Routemetricis2300416,trafficsharecountis240
Totaldelayis25100microseconds,minimumbandwidthis1544Kbit
Reliability255/255,minimumMTU1500bytes
Loading1/255,Hops2
131.1.23.3,from131.1.23.3,00:05:18ago,viaSerial0/0.23
Routemetricis3958528,trafficsharecountis139
Totaldelayis25100microseconds,minimumbandwidthis772Kbit
Reliability255/255,minimumMTU1500bytes
Loading1/255,Hops2
Task6

Lab5
EIGRPauthenticationandadvanced
configuration
R1 R2
S0/0 S0/0
FrameRelay
LabSetup:
Configuretheframerelayroutersinapointtopointmanner.
IPaddress:
Routers Interface IPaddress

R1 Lo0 1.1.1.1 /8
R2 Lo0 2.2.2.2/8

Task1
ConfigureEIGRP100ontheroutersandadvertisetheirdirectlyconnectednetworks.
OnR1
OnR2
Task2
Enableauthenticationontherouters,useciscoasthepassword.
EigrpuseskeychainbaseauthenticationjustlikeRIPv2,theonlyauthentication
modeavailableinEigrpisMD5.
On BothRouters
(config)#keychainTEST
(configkeychain)#key1
(configkeychainkey)#keystringcisco
OnR1
R1(configsubif)#ipauthenticationkeychaineigrp100TEST
R1(configsubif)#ipauthenticationmodeeigrp100md5
OnR2
R2(configsubif)#ipauthenticationkeychaineigrp100TEST
R2(configsubif)#ipauthenticationmodeeigrp100md5

Task3
R1shouldbeconfiguredtologneighborwarningmessagesfortheEIGRP100andrepeat
thewarningmessagesevery10minutes.
ToenabletheloggingofEigrpneighborwarningmessagesyoumustentereigrp
logneighborwarningscommandundertheroutereigrpprocess.Thiswarning
messagecanberepeatedbasedonthenumberofsecondsconfigured.
Bydefault,neighborwarningmessagesarelogged.Ifthisbehaviorneedstobe
changed,thennoeigrplogneighborwarningmessagemustbeused.
OnR1
R1(configsubif)#routereigrp100
R1(configrouter)#eigrplogneighborwarning600
Task4
R2shouldnotloganyofitsadjacencychanges.
BydefaultEigrplogschangesinEigrpneighboradjacencies.Ifthisisnotneeded,
thisfeaturecanbeturnedoffusingthefollowingconfiguration:
OnR2
R2(configrouter)#noeigrplogneighborchanges
Task5
ConfigureR2suchthatitadvertisesEIGRProuteswithgreaterthan110hopsas
unreachable.
OnR2
R2(configrouter)#metricmaximumhops110
Theabovecommandwilladvertisetherouteswithahopcounthigherthan110as
unreachable,thedefaultsettingis100hops,anditcanbeincreasedupto255.

Task6
CreateastaticrouteonR2fornetwork3.0.0.0/8reachablebyR2andredistributethe
staticrouteintoEIGRProutingprocess.EnsurethatR1canseethisnetworkinitsrouting
table.
OnR2
R2(config)#iproute3.0.0.0255.0.0.0Null0
R2(configrouter)#redistributestaticmetric15442000025511500
Task7
OnR1,changetheadministrativedistanceofallexternalnetworksto110.
Beforewechangetheadministrativedistanceoftheexternalroutes,weshouldsee
thedefaultsettings:
OnR1
R1#Showiproute

D2.0.0.0/8[90/2297856]via131.1.12.2,00:00:05,Serial0/0.12
DEX3.0.0.0/8[170/7289856]via131.1.12.2,00:00:05,Serial0/0.12
Note,bydefaulttheadministrativedistanceofEigrpexternalnetworksis170.

ThefollowingcommandchangestheadministrativedistanceofEigrpexternal
routesto110.Rememberthiswillaffecttherouteronwhichitsconfiguredon.
OnR1
R1(configrouter)#distanceeigrp90110
Thefirstvalueafterthedistanceeigrpcommandspecifiestheadministrative
distanceofEigrpinternalroutesandthesecondvaluespecifiestheadministrative
distanceofEigrpexternalroutes.
OnR1
R1#Showiproute

D2.0.0.0/8[90/2297856]via131.1.12.2,00:00:12,Serial0/0.12
DEX3.0.0.0/8[110/7289856]via131.1.12.2,00:00:12,Serial0/0.12
R1#
Task8
EnsurethatR1neverusesmorethan45%ofthebandwidthforEIGRPupdatesyou
shoulduseanEIGRPspecificcommandtoaccomplishthistask.
OnR1

R1(configrouter)#intS0/0.12
R1(configsubif)#ipbandwidthpercenteigrp10045
TheabovecommandcanbeusedtoconfigurethebandwidththatEigrpusesonan
interface.
Task9
YouwereaskedtolimitEigrpsBandwidthutilizationonR1to386Kbits/sec,butyou
cannotrememberthecommand,useanothermethodtoaccomplishthesametask.
OnR1
R1(configsubif)#noipbandwidthpercenteigrp10045
R1(configsubif)#bandwidth772
BydefaultEigrputilizes50%ofthebandwidth,ifyoumultiplythedesiredvalueby
two(Inthiscase772)andsetthebandwidthoftheinterfacetothatnumber,Eigrp
willusehalfofthatnumberwhichisthedesiredvalue.
Task10

Lab6
EIGRPStub
R1 R2
.1 .2
131.1.12.0/24
S0/0 S0/0
FrameRelay
Labsetup:
ConfiguretheIPaddressingandFramerelayconnectionbetweentherouters
accordingtotheabovediagram.Ensurethattheroutersareconfiguredinapoint
topointmanner.
ConfigureF0/0interfaceontheroutersasfollowing:
R1sF0/0=200.1.1.1/24,andR2sF0/0=200.2.2.2/24
ConfigurethefollowingLoopbackinterfacesonR1andR2andadvertisethemin
EIGRP100:

R1 Lo0 1.1.0.1/24
Lo1 1.1.1.1/24
Lo2 1.1.2.1/24
Lo3 1.1.3.1/24
R2 Lo0 2.2.0.2/24
Lo1 2.2.1.2/24
Lo2 2.2.2.2/24
Lo3 2.2.3.2/24

R1andR2shouldsummarizetheLoopbackinterfacesandadvertiseasingle
summarytoeachother.
CreatethefollowingstaticroutesonR1andR2andredistributetheminEIGRP:
Router Staticroute
R1 Createastaticroutetonetwork11.0.0.0/8viaF0/0
R2 Createastaticroutetonetwork22.0.0.0/8viaF0/0
AdvertisetheFastEthernetinterfacesoftheroutersasfollows:
Routers Interface Routingprotocol

R1 F0/0(200.1.1.0/24) RIPv2
R2 F0/0(200.2.2.0/24) RIPv2
RedistributetheRIProutesintoEIGRProutingprotocol.
Theabovebulletitemsmustbecompletedinordertotestthenextsixscenarios:

TestEIGRPstubroutingoptionsonR1andR2,andanswerthefollowingquestions:
TEST#1
ConfigureEigrpstubroutingonR1usingtheconnectedoptions,andfillthefollowing
chart
OnR1
Routereigrp100
Eigrpstubconnected
Test#1iscompletedsothestudentswillunderstandwhattheyhavetodoforthenext5
tests.The1st columnidentifiesthenetworks,thesecondcolumniswhatR2seesinits
routingtable,andthethirdcolumniswhatR1seesinitsroutingtable.
R2routingtable R1sroutingtable
Connected YES NO
R1=1.1.0.0/24R2=2.2.0.0/24 Becausetheyare Becausethesummarized

1.1.1.0/242.2.1.0/24 theconnected routeswillincludethemore
1.1.2.0/242.2.2.0/24 routes specificroutes.
1.1.3.0/242.2.3.0/24
Summarized NO YES
R1=1.1.0.0/22 Becauseonly STUBroutingdoesNOT

connectedroutes affectthisrouter
R2=2.2.0.0/22 areneeded
Static NO YES

connectedroutes affectthisrouter
R2=22.0.0.0/8 areneeded.
Redistributed NO YES

11.0.0.0/8 connectedroutes affectthisrouter
areneeded.
R2=200.2.2.0/24
22.0.0.0/8
AfterR1wasconfiguredwithEigrpstuboption,enteraShowiprouteandwrite
downthetypeofroutesinyourroutingtable.
Aftercompletingthechart,removetheeigrpstubroutingoptionandensurethatall
theroutesarereceivedbybothroutersbeforeproceedingtothenextTEST.
TEST#2
ConfigureEigrpstubroutingonR1usingthesummaryoptions,andfillthefollowing
chart:
OnR1
Routereigrp100
Noeigrpconnected
Eigrpstubsummary
Connected NO NO
R1=1.1.0.0/24R2=2.2.0.0/24
1.1.1.0/242.2.1.0/24 Becausethe Becausethesummarized
1.1.2.0/242.2.2.0/24 summarizedroutes routeswillincludethemore
1.1.3.0/242.2.3.0/24 willincludethe specificroutes.
morespecific
routes.
Summarized YES YES
R1=1.1.0.0/22
Becausetheyarethe STUBroutingdoesNOT
R2=2.2.0.0/22 summarizedroutes, affectthisrouter.
andsummaryoption
wasconfigured.
Static NO YES
R1=11.0.0.0/8
Becauseonlythe STUBroutingdoesNOT
R2=22.0.0.0/8 summaryoptionis affectthisrouter
configured.
R1=200.1.1.0/24
11.0.0.0/8 Becauseonlythe STUBroutingdoesNOT
summaryoptionis affectthisrouter
R2=200.2.2.0 configured
22.0.0.0/8
Removetheeigrpstubroutingoptionandensurethatalltheroutesarereceivedby
bothroutersbeforeproceedingtothenexttest.

TEST#3
ConfigureEigrpstubroutingonR1usingtheStaticoptions,andfillthefollowingchart:
OnR1
Routereigrp100
Noeigrpsummary
Eigrpstubstatic
Connected NO NO
R1=1.1.0.0/24R2=2.2.0.0/24 Becauseonlythestatic Becausethe

1.1.1.0/242.2.1.0/24 optionisconfigured summarizedroutes
1.1.2.0/242.2.2.0/24 willincludethemore
1.1.3.0/242.2.3.0/24 specificroutes.
Summarized NO YES
R1=1.1.0.0/22 Becauseonlythestatic STUBroutingdoes

optionisconfigured NOTaffectthisrouter
R2=2.2.0.0/22
Static YES YES
R1=11.0.0.0/8 Becausethestaticoption STUBroutingdoes

wasconfigured. NOTaffectthisrouter
R2=22.0.0.0/8
R1=200.1.1.0/24 Becauseonlythestatic STUBroutingdoes

11.0.0.0/8 optionisconfigured NOTaffectthisrouter
R2=200.2.2.0
22.0.0.0/8

TEST#4
ConfigureEigrpstubroutingonR1usingthereceiveonlyoptions,andfillthefollowing
chart:
OnR1
Routereigrp100
Noeigrpstubstatic
Eigrpstubreceiveonly
Connected NO NO
R1=1.1.0.0/24R2=2.2.0.0/24 BecauseR1isconfigured Becausethe

1.1.1.0/242.1.1.0/24 inreceiveonly,therefore summarizedroutes
1.1.2.0/242.1.2.0/24 itllNOTadvertiseany willincludethemore
1.1.3.0/242.1.3.0/24 routestoR2 specificroutes.
Summarized NO YES
R1=1.1.0.0/22 BecauseR1isconfigured STUBroutingdoes

inreceiveonly,therefore NOTaffectthisrouter
R2=2.2.0.0/22 itllNOTadvertiseany
routestoR2
Static NO YES

inreceiveonly,therefore NOTaffectthisrouter
R2=22.0.0.0/8 itllNOTadvertiseany
routestoR2

11.0.0.0/8 inreceiveonly,therefore NOTaffectthisrouter
itllNOTadvertiseany
R2=200.2.2.0/24 routestoR2
22.0.0.0/8

TEST#5
ConfigureEigrpstubroutingonR1usingtheredistributedoptions,andfillthe
followingchart:
OnR1
Routereigrp100
Noeigrpstubreceiveonly
Eigrpstubredistributed
Connected NO NO
R1=1.1.0.0/24R2=2.2.0.0/24 Becausethesummarized Becausethe

1.1.1.0/242.1.1.0/24 routeswillincludethe summarizedroutes
1.1.2.0/242.1.2.0/24 morespecificroutes. willincludethemore
1.1.3.0/242.1.3.0/24 specificroutes.
Summarized YES YES
R1=1.1.0.0/22 Becausethisoptionalso STUBroutingdoes

enablesConnected, NOTaffectthis
R2=2.2.0.0/22 Summaryaswellas router
Redistributed.
Static YES YES
R1=11.0.0.0/8 Becausetheserouteswill STUBroutingdoes

showupasredistributed. NOTaffectthis
R2=22.0.0.0/8 router
Redistributed YES YES

11.0.0.0/8 enablesConnected, NOTaffectthis
Summaryaswellas router
R2=200.2.2.0/24 Redistributed.
22.0.0.0/8

TEST#6
ConfigureEigrpstubroutingonR1usingthecommandwithoutanoptions,andfillthe
followingchart:
OnR1
Routereigrp100
Noeigrpredistributed
Eigrpstub
Connected NO NO
R1=1.1.0.0/24R2=2.2.0.0/24 Becausethesummarized Becausethe

1.1.1.0/242.1.1.0/24 routeswillincludethe summarizedroutes
1.1.2.0/242.1.2.0/24 morespecificroutes.The willincludethemore
1.1.3.0/242.1.3.0/24 connectedrouteswillbe specificroutes.
advertisedifthe
summarizationwasnot
performed.
Summarized YES YES

enablesConnected, NOTaffectthis
R2=2.2.0.0/22 SummaryaswellasStub. router
Static NO YES
R1=11.0.0.0/8 Staticroutesarenot STUBroutingdoes

advertisedinthisoption. NOTaffectthis
R2=22.0.0.0/8 router
R1=200.1.1.0/24 StaticroutesareNOT STUBroutingdoes

11.0.0.0/8 advertisedinthisoption. NOTaffectthis
router
R2=200.2.2.0/2
22.0.0.0/8
Erasethestartupconfigandreloadtheroutersbeforeyouproceedtothenext
protocol.

NarbikKocharians
CCIE#12410
R&S,Security,SP
OSPF
Answers

Lab1
OptimizationofOSPFandAdjustingTimers
R1 R2
.1 .2
FrameRelay
S0/0 S0/0
F0/0.2
.3
R4 F0/0 . R3
.4 .3
FrameRelay
S0/0S0/0
LabSetup:
R1andR2,R3andR4shouldbeconfiguredinaframerelaypointtopoint
manner.
IPAddressing

R1 Lo0 1.1.1.1/8
F/Rinterface 131.1.12.1/24
R2 Lo0 2.2.2.2/8
F0/0 131.1.23.2/24
R3 Lo0 3.3.3.3/8
F0/0 131.1.23.3/24
R4 Lo0 4.4.4.4/8
Task1
ConfigureOSPFonallroutersandadvertisetheirdirectlyconnectednetworksinarea0.
OnR4
R4(config)#routerospf1
R4(configrouter)#net0.0.0.00.0.0.0are0
OnR3
R3(configif)#routerospf1
R3(configrouter)#network0.0.0.00.0.0.0are0
OnR2
R2(configrouter)#netw0.0.0.00.0.0.0are0
OnR1
Task2
R4isgettingfloodedwithLSAtype6packetsensurethatR4doesnotgenerateasyslog
messageforthesepackets.
CiscoroutersdoNOTsupportLSAtype6packetsandeachtimeanOSPFrouter
receivesanMOSPF(LSAtype6)packetitsendsasyslogmessage.Iftherouters
receivemanyLSAtype6packetstheywillgeneratealargenumberofsyslog
messages.Thisfeatureshouldbedisabledtopreventthisfromoccurring.
OnR4
R4(configrouter)#ignorelsamospf
Task3
Toensurefastdetectionofaneighborbeingdown,configureR2andR3tosendtheir
hellosfourtimesasecondwithaholdtimeofonesecond.
OnR2
R2(config)#intf0/0
R2(configif)#ipospfdeadintervalminimalhellomultiplier4
OnR3
R3(configif)#intf0/0
R3(configif)#ipospfdeadintervalminimalhellomultiplier4
ThedeadintervalisadvertisedinOSPFhellopackets.Thevaluesofthisparameter
mustbethesamefortworoutersinorderforthemtoform aneighboradjacency.
Byspecifyingtheminimalandhellomultiplierkeywordswithamultiplier
value,youareenablingOSPFfasthellopackets.Theminimalkeywordsetsthe
deadintervalto1secondandthehellomultipliervaluesetsthenumber ofhello
packetssentduringthat1second.
Task4
EnsurethattheserouterslookupDNSnamesforuseinallOSPFshowcommands,test
thistasktoensureproperoperation.SincetherearenoDNSserversinthislabyoushould
usetheroutersforthatpurpose.
TotesttheOSPFShowcommandsbeforeimplementingthisfeature,enterthe
following:
Showipospfdatabaserouter
OSPFRouterwithID(1.1.1.1)(ProcessID1)

RouterLinkStates(Area0)
LSage:1575
Options:(NoTOScapability,DC)
LSType:RouterLinks
LinkStateID:1.1.1.1
AdvertisingRouter:1.1.1.1
LSSeqNumber:80000002
Checksum:0x1D3F
Length:60 Notetherouteridisdisplayed
NumberofLinks:3
OnAllRouters
(config)#ipospf namelookup
(config)#iphostR11.1.1.1
Showipospfdatabaserouter
OSPFRouterwithID(1.1.1.1)(ProcessID1)
RouterLinkStates(Area0)
LSage:1651
Options:(NoTOScapability,DC)
LSType:RouterLinks Notethechange,itsreplacedbythenameconfigured
LinkStateID:1.1.1.1 intheIPhostcommand.
AdvertisingRouter:R1
LSSeqNumber:80000002
Checksum:0x1D3F
Length:60
NumberofLinks:3
Task5
ConfigureR2suchthatifitdoesnotreceiveanacknowledgmentfromR3foragiven
LSA,itwaitsfor10secondsbeforeitresendsthatgivenLSA.

OnR2
R2(config)#intf0/0
R2(configif)#ipospfretransmitinterval10
WhenanOSPFenabledroutersendsanLSAtoitsneighbor,itkeepstheLSAuntil
itreceivesanACKfromthatgivenneighbor.Iftheretransmissiontimerexpires
andtherouterreceivesnoACKs,therouterwillresendthatLSA.Thedefaulttimer
issetto5seconds,andtherangeis165535.
Task6
ConfigureR2suchthatitlimitsthenumberofnonselfgeneratedLSAsthatanOSPF
routingprocesscankeepintheOSPFLSDBto900.
OnR2
R2(configrouter)#maxlsa900
BydefaultthenumberofnonselfgeneratedLSAsthatanOSPFroutingprocess
cankeepinthedatabaseisnotlimited.Tolimitthisnumber,wecanusethemax
lsacommandintherouterconfigurationmode.Thiscommandcontainsthe
followingfields:
Maxlsamaximumnumber[thresholdpercentage][warningonly][ignoretimeminutes]
[ignorecount#][resettimeminutes]
Maximumnumber ThemaximumnumberofnonselfgeneratedLSAsthatan
OSPFroutercankeepintheOSPFdatabase.
ThresholdpercentageThepercentageofthemaximumLSAnumber,as
specifiedbythemaximumnumber,atwhichawarningmessageislogged.The
defaultis75.
WarningonlyThisspecifiesthatonlyawarningmessageissentwhenthe
maximumlimitforLSAsisexceeded.
IgnoretimeminutesThisvaluespecifiesthetime,inminutes,toignoreall
neighborsafterthemaximumlimitofLSAshasbeenexceeded.Thedefaultis5
minutes.
Ignorecountcountnumber SpecifiesthenumberoftimestheOSPFprocess
canconsecutively beplacedintotheignorestate.Thedefaultis5times.The
routercannotexceedthisnumber.
Resettimeminutes Thisvaluespecifiesthetime,inminutes,afterwhichthe
ignorecountisresettozero.Thedefaultis10minutes.
Task7
TocontroltherateatwhichLSAupdatesoccur,R3shouldsettheinterpacketpacing
betweenconsecutiveLSUs(LinkstateUpdates)intheOSPFtransmissionqueueto60
milliseconds.
OnR3
R3(configrouter)#timerspacingretransmission60
Thiscounterspecifiestime(inmilliseconds)atwhichLSAsintheretransmission
queuearepaced.Thedefaultvalueis66millisecondsandtherangeis5 200
milliseconds.
Task8
R3andR4shouldexchangehellosevery15secondswithaholdtimeof60seconds.Do
NOTuseipospfdeadintervaltoaccomplishthistask.
OnR3
R3(configrouter)#IntS0/0.34
R3(configsubif)#ipospfhellointerval15
OnR4
R4(configrouter)#IntS0/0.43
R4(configsubif)#ipospfhellointerval15
Oncethehellointervalisset,OSPFprocesswillsetthedeadintervaltobefour
timesthehellointerval.Thedefaultvalueforthehellotimerisasfollows:
OnEthernetsegmentitssetto10seconds.
OnNonbroadcastnetworks,itssetto30seconds.
OnR4
R4#ShowipospfintS0/0.43
Serial0/0.43isup,lineprotocolisup
InternetAddress131.1.34.4/24,Area0
ProcessID1,RouterID4.4.4.4,NetworkTypePOINT_TO_POINT,Cost:64
TransmitDelayis1sec,StatePOINT_TO_POINT,
Timerintervalsconfigured,Hello15,Dead60,Wait60,Retransmit5
oobresynctimeout60
Helloduein00:00:03
SupportsLinklocalSignaling(LLS)
Task9

Lab2
Authentication
Task1
ConfiguretherouterswithOSPFroutingprotocolasfollows:
OnR1,allinterfacesshouldbeconfiguredinarea2
OnR2,theFramerelayandLoopback0interfaceshouldbeconfiguredinarea2,
andF0/0,Loopback1(22.2.2.2/8)shouldbeconfiguredinarea1.
OnR3,F0/0andLoopback0interfaceshouldbeconfiguredinarea1,andthe
framerelayandLoopback1(33.3.3.3/8)shouldbeconfiguredinarea0
OnR4,allinterfacesshouldbeconfiguredinarea0
TheseroutersshouldusetheirLo0interfacesIPaddressastheirOSPFrouterid.
OnR1
R1(configrouter)#routerid1.1.1.1
R1(configrouter)#netw0.0.0.00.0.0.0area2
OnR2
OnR3
OnR4
WhenconfiguringOSPF,alwaysconfiguretherouteridoftherouter,itsmuch
bettertostaticallyconfiguretherouteridasopposetolettingtheOSPFprocessto
chooseonefortherouter.IfweallowtheOSPFprocesstoelectarouteridanda
virtuallinkiscreatedbasedonthatrouterid,letssaylateronaloopbackinterface
iscreatedwithanumericallyhigherIPaddressandtherouterisrebooted,the
routerwillelectthenewloopbackinterfaceasitsrouteridandthevirtuallinkwill
godown.
Task2
EnsurethattheseroutershaveNLRItotheadvertisedinterfacesintheOSPFrouting
domain.
OnR2
R2(configrouter)#area1virtuallink3.3.3.3
OnR3
OnR1
R1#Showiproute

O2.2.2.2[110/65]via131.1.12.2,00:10:31,Serial0/0.12
OIA33.3.3.3[110/66]via131.1.12.2,00:10:11,Serial0/0.12
OIA3.3.3.3[110/66]via131.1.12.2,00:10:31,Serial0/0.12
OIA4.4.4.4[110/130]via131.1.12.2,00:10:11,Serial0/0.12
OIA22.2.2.2[110/65]via131.1.12.2,00:10:32,Serial0/0.12
OIA131.1.23.0[110/65]via131.1.12.2,00:10:33,Serial0/0.12
OIA131.1.34.0[110/129]via131.1.12.2,00:10:14,Serial0/0.12
R1#
Task3
Area2shouldbeconfiguredwithareabasedauthenticationusingCisco12asthe
password.Usethestrongestauthenticationmethod.
OnR1
R1(configrouter)#area2authenticationmessagedigest
R1(configsubif)#ipospfmessagedigestkey1md5Cisco12
OnR2
OnR1
Debugipospfpacket
OSPFpacketdebuggingison
*Mar1101:44:27.847:OSPF:rcv.v:2t:1l:48rid:2.2.2.2
aid:0.0.0.2 chk:0aut:2 keyid:1seq:0x3C8D5AE3fromSerial0/0.12
Aid=areaidis2,Authenticationtypeis2,whichmeansMD5(Type1meanscleartext,
type0meansnoauthentication),andkeyed:1meansthekeynumberusedis1.
ShowipospfinterfaceS0/0.12
oobresynctimeout40
Helloduein00:00:07
Index1/1,floodqueuelength0
Next0x0(0)/0x0(0)
Lastfloodscanlengthis1,maximumis1
Lastfloodscantimeis0msec,maximumis0msec
NeighborCountis1,Adjacentneighborcountis1
Adjacentwithneighbor2.2.2.2
Suppresshellofor0neighbor(s)
Messagedigestauthenticationenabled
Youngestkeyidis1
Task4
Area0shouldbeconfiguredwithareabasedauthenticationusingCisco0asthe
passwordthisauthenticationshouldonlybeappliedtothelinkthatconnectsR3toR4.
Usethestrongestauthenticationmethod.
OnR4

R4(configrouter)#are0authenticationmessagedigest
OnR3
R3(configrouter)#routerospf1
OnR4
R4#Showiproute

O33.3.3.3[110/65]via131.1.34.3,00:01:41,Serial0/0.43
OIA3.3.3.3[110/65]via131.1.34.3,00:01:41,Serial0/0.43
OIA22.2.2.2[110/66]via131.1.34.3,00:01:41,Serial0/0.43
OIA131.1.23.0[110/65]via131.1.34.3,00:01:41,Serial0/0.43
Note,R4isnotgettingnetworksadvertisedinarea0.Whenconfiguringareabased
authentication,allroutersthathaveaninterface(PhysicalorLogical)shouldbe
configuredwiththearea0authenticationmessagedigestcommand,inthiscase
R2hasalogicallinktoarea0,thereforeitmustbeconfiguredasfollows:
OnR2
Iftheabovecommandisnotconfigured,theroutersinarea2willnothaveallthe
routesintheirroutingtable.
OnR4
R4#Showiproute

OIA1.1.1.1[110/130]via131.1.34.3,00:04:31,Serial0/0.43
OIA2.2.2.2[110/66]via131.1.34.3,00:04:31,Serial0/0.43
O33.3.3.3[110/65]via131.1.34.3,00:04:31, Serial0/0.43
OIA3.3.3.3[110/65]via131.1.34.3,00:04:31, Serial0/0.43
OIA22.2.2.2[110/66]via131.1.34.3,00:04:32,Serial0/0.43
OIA131.1.12.0[110/129]via131.1.34.3,00:04:32,Serial0/0.43
OIA131.1.23.0[110/65]via131.1.34.3,00:06:35,Serial0/0.43
R4#

Task 5
Removetheauthenticationconfigurationfromtasks3and4beforeproceedingtothenext
task.
OnR1
R1(configsubif)#noipospfmessagedigestkey1md5Cisco12
R1(configsubif)#routerospf1
R1(configrouter)#noarea2authenticationmessagedigest
OnR2
OnR3
On R4
OnR1
R1#Showiproute

C1.0.0.0/8isdirectly connected,Loopback0
O2.2.2.2[110/65]via131.1.12.2,00:02:41,Serial0/0.12
OIA33.3.3.3[110/66]via131.1.12.2,00:02:41,Serial0/0.12
OIA3.3.3.3[110/66]via131.1.12.2,00:02:41,Serial0/0.12
OIA4.4.4.4[110/130]via131.1.12.2,00:00:06,Serial0/0.
OIA22.2.2.2[110/65]via131.1.12.2,00:02:42,Serial0/0.12
OIA131.1.23.0[110/65]via131.1.12.2,00:02:44,Serial0/0.12
OIA131.1.34.0[110/129]via131.1.12.2,00:02:44,Serial0/0.12
R1#
Task 6
Configureinterfacebasedcleartextauthenticationforalltheroutersinarea2.Use
cisco2asthepassword.
OnR1
R1(configsubif)#ipospfauthentication
R1(configsubif)#ipospfauthenticationkeyCisco2
OnR2
OnR1
ShowipospfintS0/0.12
oobresynctimeout40
Helloduein00:00:07
Next0x0(0)/0x0(0)
Adjacentwithneighbor2.2.2.2
Simplepasswordauthenticationenabled
R1#Showiproute

D EIGRP,EX EIGRPexternal,OOSPF,IA OSPF interarea
O2.2.2.2[110/65]via131.1.12.2,00:02:48,Serial0/0.12
OIA33.3.3.3[110/66]via131.1.12.2,00:02:48,Serial0/0.12
OIA3.3.3.3[110/66]via131.1.12.2,00:02:48,Serial0/0.12
OIA4.4.4.4[110/130]via131.1.12.2,00:02:48,Serial0/0.12

OIA22.2.2.2[110/65]via131.1.12.2,00:02:50,Serial0/0.12
OIA131.1.23.0[110/65]via131.1.12.2,00:02:53,Serial0/0.12
OIA131.1.34.0[110/129]via131.1.12.2,00:02:53,Serial0/0.12
Task 7
ConfigureperareabasedMD5authenticationforalltheroutersinarea1usingcisco1
asthepassword.
OnR2
R2(configrouter)#intf0/0
R2(configif)#ipospfmessagedigestkey1md5Cisco1
OnR3
R3(configif)#ipospfmessagedigestkey1md5Cisco1
Task 8
Area0shouldhavecleartextperinterfacebasedauthenticationusingcisco0asthe
password.DONOTapplyauthenticationonthevirtuallink/s.
OnR4
R4(config)#IntS0/0.43
OnR3

R3(config)#IntS0/0.34
OnR1
R1#Showiproute

O2.2.2.2[110/65]via131.1.12.2,00:06:28,Serial0/0.12
OIA 33.3.3.3[110/66]via131.1.12.2,00:06:08,Serial0/0.12
OIA3.3.3.3[110/66]via131.1.12.2,00:06:28,Serial0/0.12
OIA4.4.4.4[110/130]via131.1.12.2,00:00:52, Serial0/0.12
OIA22.2.2.2[110/65]via131.1.12.2,00:06:29,Serial0/0.12
OIA131.1.23.0[110/65]via131.1.12.2,00:06:30,Serial0/0.12
OIA131.1.34.0[110/129]via131.1.12.2,00:06:10,Serial0/0.12
R1#
Note,thedifferencebetweentheperareabasedauthenticationandperinterface
authenticationisthatinperareabasedauthenticationeventherouterswithlogical
interfaceconnectiontoarea0musthaveauthenticationenabledundertherouter
configurationmode,whereasinperinterfacebasedauthentication,thisisnot
required.

Task 9
R2andR3shouldchangetheirpasswordwithoutanyinterruptiontothelinkusing
ciscoasthepassword.DoNOTremoveanycommandstoaccomplishthistask.
OnR2
R2(config)#intf0/0
R2(configif)#ipospfmessagedigestkey2md5cisco
R2#shipospfintf0/0
FastEthernet0/0isup,lineprotocolisup
ProcessID1,RouterID2.2.2.2,NetworkTypeBROADCAST,Cost:1
TransmitDelayis1sec,StateBDR,Priority1
DesignatedRouter(ID)3.3.3.3,Interfaceaddress131.1.23.3
BackupDesignatedrouter(ID)2.2.2.2,Interfaceaddress131.1.23.2
oobresynctimeout40
Helloduein00:00:03
Next0x0(0)/0x0(0)
Adjacentwithneighbor3.3.3.3(DesignatedRouter)
Messagedigestauthentication enabled
Youngestkeyidis2
Rolloverinprogress,1neighbor(s)usingtheoldkey(s):
keyid1
R2#
Noteeventhoughthesecondkey(key2)isonlyconfiguredonR2,R2andR3are
stillauthenticatingbasedonthefirstkey(key1),thisisdisplayedonthelastlineof
theabovedisplay.
Buttherouterknowsthatthesecondkeyisconfigured(Thirdlastlineintheabove
display)anditknowsthattherolloverisinprogress(Secondlastlineofthedisplay)
,buttheotherend(R3)hasnotbeenconfiguredyet.
OnR3
R3#Showiproute
OIA1.1.1.1[110/66]via131.1.23.2,00:06:16,FastEthernet0/0
O4.4.4.4[110/65]via131.1.34.4,00:06:16, Serial0/0.34
O22.2.2.2[110/2]via131.1.23.2,00:06:17,FastEthernet0/0
C131.1.34.0isdirectly connected,Serial0/0.34
R3#
R3#ShowipospfintF0/0
TransmitDelayis1sec,StateDR,Priority1
oobresynctimeout40
Helloduein00:00:09
Next0x0(0)/0x0(0)
Adjacentwithneighbor2.2.2.2(BackupDesignatedRouter)

Youngestkeyidis1
R3#
Note,theauthenticationwithR2isbasedonthefirstkey(key1)
R3(config)#intf0/0
R3(configif)#ipospfmessagedigestkey2md5cisco
OnR3
R3#ShowipospfintF0/0
TransmitDelayis1sec,StateDR,Priority1
oobresynctimeout40
Helloduein00:00:01
Next0x0(0)/0x0(0)
Adjacentwithneighbor2.2.2.2(BackupDesignatedRouter)
Youngestkeyidis2
R3#
Task10

Lab3
OSPFCost
R1 R2
.1.2
FrameRelay
S0/0 S0/0
F0/0.2
.3
F0/0 . R3
.3
LabSetup:
ConfigureR2andR3inVlan23
ConfiguretheframerelayconnectionbetweenR1andR2inapointtopoint
manner.

Ipaddressing
Router InterfaceandIPaddress
R1 Lo0=1.1.1.1/8
FramerelayinterfacetoR2=131.1.12.1/24
R2 Lo0=2.2.2.2/8
FramerelayinterfacetoR1=131.1.12.2/24
F0/0interfacetoR3=131.1.23.2/24
R3 Lo0=3.3.3.3/8
F0/0interfacetoR2=131.1.23.3/24
Task1
ConfigureallthreeroutersinOSPFarea0andadvertisetheirdirectlyconnected
networksinthisarea.EnsurethatallroutershaveNLRItoeveryadvertisednetwork.
Ensurethatloopbackinterface/sisadvertisedwiththeircorrectmask.
On R1
R1(configrouter)#intlo0
R1(configif)#ipospfnetpointtopoint
Thistaskisaskingustoensurethattheloopbackinterfacesareadvertisedwith
theircorrectmask,onewaytoaccomplishthistaskistochangetheirnetworktype
topointtopoint.
OnR2
R2(configif)#ipospfnetworkpointtopoint
OnR3

R3(configif)#ipospfnetworkpointtopoint
OnR1
R1#Showiproute

O2.0.0.0/8[110/65]via131.1.12.2,00:00:16,Serial0/0.12
O3.0.0.0/8[110/66]via131.1.12.2,00:00:16,Serial0/0.12
O131.1.23.0[110/65]via131.1.12.2,00:00:16,Serial0/0.12
R1#
Task 2
ConfigureR1suchthatitadvertisesacostof20foritsloopback0interface.
Youshouldcheckthecostofnetwork1.0.0.0/8thatisadvertisedtoR2byR1.
OnR2
R2#Showiproute


O1.0.0.0/8[110/65] via131.1.12.1,00:01:24,Serial0/0.21
O3.0.0.0/8[110/2]via131.1.23.3,00:01:24,FastEthernet0/0
R2#
Note,thecostoftheloopbackinterfaceis65thisistheresultofaddingthecostof
theserialinterface(100,000,000/1,544,000=64,remembertodropthedecimal
points)plusthecostoftheloopbackinterface(100,000,000/8000,000,000=1,
rememberthatyoucantusedecimals,therefore,youshouldroundupto1).
Enterthefollowingtochangethecostofthelo0interfaceonR1:
OnR1
R1(configif)#intlo0
R1(configif)#ipospfcost20
OnR2
R2#Showiproute

O1.0.0.0/8[110/84]via131.1.12.1,00:00:07,Serial0/0.21

R2#
Note,thecostaftertheconfigurationis84,whichisthesumof64(Thecostofthe
serialinterface)plus20(Whichisthecostofthelo0interface).
Task 3
Inthefutureagigabitinterfacewillbeinstalledononeoftheroutersinthisrouting
domain.Ensurethatthecostsoftheotherinterfacesareadjustedproportionally.
OnAllRouters
(configif)#routerospf1
(configrouter)#autocostreferencebandwidth1000
(config)#End
#Clearipospfproc
ResetALLOSPFprocesses?[no]:y
Bydefault,OSPFcalculatesthecostofaninterfacebydividingthebandwidth ofthe
interfaceinto100million.Usingthedefaultvalue,whenyournetworkhasinterfaces
withabandwidthgreaterthan100millionisnotrecommended,because,OSPFwill
notbeabletodifferentiatebetween100mbpsinterfaceandaninterfacewitha
bandwidththatisgreaterthan100mbps,IPOSPFCOSTcommandenablesyou
tochangetheOSPFcostforaninterface,butabetterwaytoaccomplishthisisto
changethedefaultreferencevalueusedtocalculatetheOSPFcostofaninterface.
Thisvaluecanbemodifiedusingthecommandautocostreferencebandwidth.If
youareplanningtousethiscommand,rememberthateveryrouterintheOSPF
routingdomainmustbeconfiguredaswell.
Task 4
Removethecommandconfiguredintask3.
OnAllRouters
(configrouter)#noautocostreferencebandwidth1000
(config)#End
#Clearipospfproc
ResetALLOSPFprocesses?[no]:y
Task 5
ConfiguretherouterssuchthattheFastEthernetinterfaceoftheserouterswillhavea
costof 70.Theotherinterfacesshouldhavetheircostcalculatedproportionally.
OnAllRouters
(configrouter)#routerospf1
(configrouter)#autocostreferencebandwidth7000
TheequationusedbyOSPFisasfollows:
Reference/Bandwidth=Cost
Rearrangingtheformula,wegetthefollowingequation:
Reference=CostXBandwidth=70X100,000,000=7,000,000,000
ReferenceisinunitsofMbps,andbydefaultitssetto100whichmeans100,000,000
bps,nowwehavetodividetheresultby1000,000togettheactualreference,which
is7000.
Sothecostreferenceshouldbechangedto7000
OnR3
R3#Showipospfintf0/0
TransmitDelayis1sec,StateBDR,Priority1

Task6

Lab4
OSPFSummarization
R1 R2
.1.2
FrameRelay
S0/0 S0/0
F0/0.2
.3
R4 F0/0 . R3
.4 .3
FrameRelay
S0/0S0/0
Labsetup:
ConfigureR2F0/0andR3sF0/0inVLAN23
ConfiguretheframerelayconnectionbetweenR1,R2andR3,R4inapointto
pointmanner.

IPAddressing
Router Interface IPaddress Area

R1 Lo0 1.1.0.1/24 Area1
Lo1 1.1.1.1/24 Area1
Lo2 1.1.2.1/24 Area1
Lo3 1.1.3.1/24 Area1
F/Rinterface 131.1.12.1/24 Area1
R2 Lo0 2.2.2.2/8 Area0
F0/0 131.1.23.2/24 Area0
R3 Lo0 3.3.3.3/8 Area0
F0/0 131.1.23.3/24 Area0
R4 Lo0 4.4.0.4/24 External
Lo1 4.4.1.4/24 External
Lo4 4.4.4.4/24 Area2
Task1
Configuretheroutersasfollows:
R4shouldredistributethefourloopbackinterfaces(4.4.0.4/24 4.4.3.4/24)in
theOSPFroutingdomain.
R4shouldadvertiseitsLoopback4andFramerelayinterfaceinArea2.
R1shouldadvertiseallofitsinterfacesinOSPFarea1.
R2shouldadvertiseitsLoopback0,F0/0interfaceinarea0andtheframerelay
interfaceinarea1.
R3shouldadvertiseitsLoopback0,F0/0interfaceinarea0,anditsframerelay
interfaceinarea2.
OnR1
OnR2
OnR3
OnR4
R4(configrouter)#redistributeconnectedsubnetsroutemapTEST
WhenredistributingroutesintoOSPF,thesubnetskeywordwillredistributeallthe
subnetsintoOSPF,ifthiskeywordisomitted,thenonlyclassfulnetworkswillbe
redistributedintoOSPF.
Task2
ConfiguretheOSPFrouterssuchthattheexternalroutesaresummarized.
OnR4
R4(configrouter)#summaryaddress4.4.0.0255.255.252.0
InOSPF,summarizationcanbeconfiguredontwotypesofrouters:ABR/sand/or
ASBRs.
TheinternalOSPFroutescanonlybesummarizedonABRswhereastheexternal
(redistributed)routescanonlybesummarizedonASBRs.
WhensummarizinginternalroutesonABRstheareaxxrangecommandmustbe
used,wherexxistheareaid.
SummarizationonASBRcanbeaccomplishedbyusingthesummaryaddress
command.
OnR3
R3#Showiproute

O4.4.4.4/32[110/65]via131.1.34.4,00:13:19,Serial0/0.34
OE24.4.0.0/22[110/20]via131.1.34.4,00:00:06,Serial0/0.34
Notetheexternalroutesaresummarized.
Task3
ConfigureArea1suchthatnetworks(1.1.0.0/24,1.1.1.0/24,1.1.2.0/24and1.1.3.0/24)
aresummarizedintotheOSPFroutingdomain.
OnR2

R2(configrouter)#router ospf1
R2(configrouter)#area1range1.1.0.0255.255.252.0
NotetheseroutesareoriginatedbyR1,buttheycanonlybesummarizedbythe
ABR,inthistopologytheABRisR2.Sincetheroutesthatarebeingsummarized
originatedinarea1,thearearangecommandmustspecifytheareaarea1
rangefollowedbythesummarynetworkaddress(1.1.0.0)andthenthesubnet
mask(255.255.252.0).
Task4
TheroutersshouldNOTinstallanull0routeintheroutingtablewhentheysummarize
internalorexternalroutes.
InOSPF,thediscardrouteiscreatedautomaticallywheneverasummaryrouteis
configured,therearetwotypesofsummaryroutes:InternalandExternal.
Wheninternalsummaryroutesareconfigured,OSPFwillinjectaninternaldiscard
route,andwhenanexternalsummaryrouteisconfigured,theOSPFprocesswillcreate
anexternaldiscardroute.Thediscardroutesarecreatedtostopforwardingloops.
OnR2
R2#Showiproute

Gatewayoflastresortisnotset Thisistheinternaldiscardroute
O 1.1.1.1/32[110/65]via131.1.12.1,00:13:53,Serial0/0.21
O1.1.0.0/22isasummary,00:13:53,Null0
O1.1.0.1/32[110/65]via131.1.12.1,00:13:53,Serial0/0.21
O1.1.3.1/32[110/65]via131.1.12.1,00:13:53,Serial0/0.21
O 1.1.2.1/32[110/65]via131.1.12.1,00:13:53,Serial0/0.21
C 2.0.0.0/8isdirectlyconnected,Loopback0

O 3.3.3.3[110/2]via131.1.23.3,00:13:54,FastEthernet0/0
OIA4.4.4.4/32[110/66]via131.1.23.3,00:13:54,FastEthernet0/0
OE24.4.0.0/22[110/20]via131.1.23.3,00:13:54,FastEthernet0/0
C 131.1.23.0isdirectlyconnected,FastEthernet0/0
OnR2
R2(configrouter)#nodiscardrouteinternal
Thediscardroutethatwearediscardingistheresultofsummarizingtheinternal
routes,thereforeweneedtospecifyinternal.
OnR4
R4(configrouter)#nodiscardrouteexternal
Intheabovecommandwearediscardingtheexternaldiscardroutethatwascreatedas
aresultofsummarizingtheexternalroutes.
Task5

Lab5
VirtuallinksandGRETunnels
R1 R2
.1.2
FrameRelay
S0/0 S0/0
F0/0.2
.3
R4 F0/0 . R3
.4 .3
FrameRelay
F0/0 S0/0S0/0
F0/0
R5

LabSetup
UsetheIPaddressingchartbelowtoassignIPaddressestotheinterfaces.
TheframerelayconnectionbetweenR1andR2shouldbeconfiguredinapoint
topointmanner.
TheframerelayconnectionbetweenR3andR4shouldbeconfiguredinapoint
topointmanner.
IPAddressing

R1 Lo0 1.1.1.1/24
Lo1 10.1.1.1/24
R2 Lo0 2.2.2.2/24
Lo1 20.2.2.2/24
F0/0 131.1.23.2/24
R3 Lo0 3.3.3.3/24
Lo1 30.3.3.3/24
F0/0 131.1.23.3/24
R4 Lo0 4.4.4.4/24
Lo1 40.4.4.4/24
F0/0 131.1.45.4/24
R5 Lo0 5.5.5.5/24
F0/0 131.1.45.5/24

Task1
R1sLoopback1interfaceshouldbeadvertisedinarea3anditsFramerelayand
Loopback0interfaceshouldbeadvertisedinarea1
R2sLoopback0anditsframerelayinterfaceshouldbeconfiguredin area1and
itsLoopback1andF0/0interfaceshouldbeconfiguredinarea0
R3sLoopback0andF0/0interfaceshouldbeconfiguredinarea0anditsframe
relayandLoopback1interfaceshouldbeconfiguredinarea2.
R4sframerelayandLoopback0interfaceshouldbeconfiguredinarea2andits
F0/0andLoopback1interfaceshouldbeconfiguredinarea4.
R5sLoopbackandF0/0interfaceshouldbeconfiguredinarea4.
OnR1
OnR2
OnR3

OnR4
OnR5
Task2
Ensurethattheroutesfromarea3arereachablebyR1,R2,R3andR4.DoNOTusea
GRETunneltoaccomplishthistask.
Area3isfragmentedtheotherrouterswontbeabletoseetherouteadvertisedbythis
area(10.1.1.0/24).AvirtuallinkmustbecreatedthatconnectsR1(TheABRofarea3)
toarea0.
OnR1
OnR2
R2#Showiproute

N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternal type2

O1.1.1.0[110/65]via131.1.12.1,00:00:09,Serial0/0.21
20.0.0.0/24issubnetted,1subnets Notetheroutefromarea3isadvertised
OIA10.1.1.0[110/65]via131.1.12.1,00:00:00,Serial0/0.21
Task3
Ensurethatalltheadvertisednetworksarereachablebyalltherouters.UseanyIP
addressinganddoNOTuseaVirtuallinktoaccomplishthistask.
TheroutingtableofR5revealsthatonlynetwork40.4.4.0/24waspropagatedby
R4.Thereasonforthisbehaviorisasfollows:
Area4isfragmentedanddoesnothaveaconnection(LogicalorPhysical)toarea0.
Inordertorectifythisproblemwemustcreateavirtuallink,sincevirtuallinkis
notallowedinthistaskaGREtunnelmustbeused.
TodisplaytheroutingtableofR5beforecreatingaGREtunnel:
OnR5
R5#Showiproute

O 40.4.4.0[110/2]via131.1.45.4,00:04:00,FastEthernet0/0
TofixthisproblemwemustcreateaGREtunnelasfollows:
OnR4
R4(configif)#router ospf1
R4(config)#inttu1
R4(configif)#tunnelsource131.1.34.4
R4(configif)#tunneldestination131.1.34.3
OnR3
R3(config)#inttu1
R3(configif)#tunnelsource131.1.34.3
R3(configif)#tunneldestination131.1.34.4
OnR5
R5#Showiproute

Notealltheroutesareadvertised.TheIPaddressofthetunnelinterfaceMUSTbe
advertisedinarea0orelsethetunnelwillnotwork.
Task4
Removetheconfigurationfromtheprevioustaskandreplaceitwithvirtuallink.
OnR4
R4(configrouter)#nonetw200.1.34.40.0.0.0are0
R4(config)#nointtu1
OnR3
R3(config)#nointtu1
Task5
Configureasimplecleartextauthenticationforthevirtuallinkthatconnectsarea3to
area0.UseCiscoasthepassword.
OnR1
R1(configrouter)#area1virtuallink2.2.2.2authentication
R1(configrouter)#area1virtuallink2.2.2.2authenticationkeyCisco
OnR2
R2(configrouter)#area1virtuallink1.1.1.1authentication
R2(configrouter)#area1virtuallink1.1.1.1authenticationkeyCisco
Task6
ConfigureMD5authenticationforthevirtuallinkthatconnectsarea4toarea0,use
ciscoasthepassword.
OnR4
R4(configrouter)#area2virtuallink3.3.3.3authenticationmessagedigest
R4(configrouter)#area2virtuallink3.3.3.3messagedigestkey1md5cisco
OnR3
R3(configrouter)#area2virtuallink4.4.4.4authenticationmessagedigest
R3(configrouter)#area2virtuallink4.4.4.4messagedigestkey1md5cisco
Task7
ChangethepasswordfromciscotoCCIEforthevirtuallinkthatconnectsarea4to
area0,withoutinterruptingthelink.
OnR4
R4(configrouter)#area2virtuallink3.3.3.3messagedigestkey2md5CCIE
OnR3
R3(configrouter)#area2virtuallink4.4.4.4messagedigestkey2md5CCIE
Task8
Erasethestartupconfigandreloadtheroutersbeforeproceedingto thenextlab.

Lab6
OSPFStub,TotallyStubby,andNSSAAreas
R1 S0/0S0/0 . R2
S0/0
FrameRelay
F0/0
F0/0 R3
R4 S0/0
S0/0 Frame
Relay
F0/0
F0/0
R5
LabSetup:
TheframerelayconnectionbetweenR1,R2andR3,R4shouldbeconfiguredina
pointtopointmanner.
UsetheIPaddressingchartbelowtoassignIPaddressestotherouters.

IPAddressing

R1 Lo0 1.1.1.1/24
R2 Lo0 2.2.2.2/24
Lo1 22.2.2.2/24
F0/0interfaceconnectiontoR3 131.1.23.2/24
F/RinterfaceconnectiontoR1 131.1.12.2/24
R3 Lo0 3.3.3.3/24
R4 Lo0 4.4.4.4/24
Lo1 44.4.4.4/24
R5 Lo0 5.5.5.5/24
F0/0 131.1.45.5/24
Task1
ConfigureOSPFasfollows:
ConfigureR1sLoopback0andFramerelayinterfaceinarea1
ConfigureR2sLoopback0andFramerelayinterfaceinarea1andR2s
Loopback1andF0/0interfaceshouldbeconfiguredinarea0.
ConfigureR3sLoopback0,F0/0,andFramerelayinterfaceinOSPFarea0.
ConfigureR4sLoopback0,andFramerelayinterfacein area0,andits
Loopback1andF0/0inOSPFarea2.
ConfigureR5sLoopback0andF0/0interfaceinOSPFarea2.
Theloopbackinterfacesmustbeadvertisedwiththeircorrectmask.
OnR1
R1(config)#InterfaceLo0
R1(configif)#Ipospfnetworkpointtopoint
OnR2
OnR3
OnR4
OnR5
Task 2
Configurearea1suchthatitdoesnotreceiveLSAtypes4and5.
OnR1
R1(configrouter)#area1stub
OnR2
ImportantpointstounderstandaboutaSTUBarea:
ASTUBareacannotbeatransitareaforVirtuallink,butaGREtunnelcan
beusedinstead.
ASTUBareacannothaveanASBR.
ThebackboneareacannotbeconfiguredasaSTUBarea.
EveryrouterandtheABRofthatareashouldhaveareaxxstub
command.
NoLSAtype5(E1,orE2)isallowedinaSTUBarea,buttheroutersinthe
STUBareacanconnecttotheExternalroutesviathedefaultroutethatis
injectedintheareabytheABR.
Bydefault,thecostofthedefaultrouteis1thiscanbeverifiedbyShowip
ospf,andShowiproute.Thecostofthedefaultroutecanbechangedby
areaxxdefaultcostcc,wherexxistheareanumber,andccisthedesired
cost
Task 3
Area2shouldnotreceiveLSAtypes3,4and5.
OnR5

Theabovecommandmustbeconfiguredonalltherouterswithinthisarea.
OnR4
R4(configrouter)#area2stubnosummary
TheabovecommandmustonlybeconfiguredontheABRofthisarea.
Noteyoucanreducetheroutingtablefurtherbyconfiguringanareaastotally
stubby.SincealltheIAandE(InterareaandExternal)routesarereachedthrough
theABRandtheABRhasinjecteda0/0routeintothearea,thereisnotreasonto
maintaintheIAroutesandtheyshouldbefiltered.
Task 4
Create/configurethefollowingloopbackinterfacesonR1andredistributetheminto
OSPFroutingdomain:
Lo1=11.1.0.1/24,Lo2=11.1.1.1/24,Lo3=11.1.2.1/24andLo4=11.1.3.1/24
Aftertheredistribution,area1shouldonlyreceiveandpropagateLSAtypes1,2,3and
7.Thisareashouldnothavetheability toconnecttoanyexternalroutesredistributedelse
wherewithinthisroutingdomain.
OnR1
R1(configrouter)#noarea1stub
R1(configrouter)#area1nssa
OnR2
R1(configif)#intlo1
R1(configif)#intlo2
R1(configif)#intlo3

R1(configif)#intlo4
R1(config)#routemapTESTpermit
R1(configrouter)#redistributeconnectedroutemapTESTsubnets
NotewhenconfiguringanareaasanNSSAarea,bydefaultthe0/0routewillnotbe
injectedbytheABRofthatarea.
Task 5
Create/configurethefollowingloopbackinterfacesonR5andredistributetheminto
OSPFroutingdomain:
Lo1=55.1.0.5/24,Lo2=55.1.1.5/24,Lo3=55.1.2.5/24andLo4=55.1.3.5/24
Aftertheredistribution,theroutersinthisareashouldonlymaintainandpropagateLSA
types1,2,3,7andadefaultroute.
OnR5
R5(config)#intlo1
R5(configif)#intlo2
R5(configif)#intlo3
R5(configif)#intlo4
R5(configif)#routemapTESTpermit10

OnR4
R4(configrouter)#noarea2stubnosummary
R4(configrouter)#are2nssadefaultinformationoriginate
OSPF:Areaisconfiguredasstubareaalready
Notewhentheareastubnosummarycommandisconfiguredandmustbe
removed,thenoarea2stubnosummarycommandwillonlyremovetheno
summarypartofthecommand.Youmustremembertoenterthenoarea2stub
commandagaintoremovetheentirecommand.
R4(configrouter)#noare2stub
R4(configrouter)#area2nssadefaultinformationoriginate
Notethedefaultinformationoriginatecommandattheendofarea2nssawillinject
adefaultrouteintothearea.
Task 6
Area1shouldbechangedsuchthatitreceivesandpropagatesLSAtypes1,2,7plusa
defaultroute.ThisareashouldNOTmaintainInterarearoutes,butmusthavetheability
toconnecttotheseroutes.
OnR2
R2(configrouter)#area1nssanosummary
ThenosummarykeywordfiltersthesummaryLSAswhicharetheLSAtype3s.
Task 7
Thedefaultroutethatwasinjectedintoarea1shouldhaveacostof50.

OnR2
R2(configrouter)#area1defaultcost50
Bydefault,thecostofthedefaultrouteinjectedintotheareais1thiscanbe
verifiedbyShowiproute.Thecostofthedefaultroutecanbechangedbyarea
xxdefaultcostcc,wherexxistheareanumber,andccisthedesiredcost.
Task 8
Erasethestartupconfigandreloadtheroutersbeforeproceedingtothenextlab

Lab7
FilteringroutesinOSPF
R1 R2
.1.2
FrameRelay
S0/0 S0/0
F0/0.2
.3
R4 F0/0 . R3
.4 .3
FrameRelay
S0/0S0/0
Labsetup:
ConfigureR2F0/0andR3sF0/0inVLAN23
ConfiguretheframerelayconnectionbetweenR1,R2andR3,R4inapointto
pointmanner.

IPAddressing

R1 Lo0 1.1.0.1/24 Area1
Lo1 1.1.1.1/24 Area1
Lo2 1.1.2.1/24 Area1
Lo3 1.1.3.1/24 Area1
F/RinterfacetoR2 131.1.12.1/24 Area1
R2 Lo0 2.2.2.2/8 Area0
F0/0interfacetoR3 131.1.23.2/24 Area0
R3 Lo0 3.3.3.3/8 Area0
F0/0interfacetoR2 131.1.23.3/24 Area0
R4 Lo0 4.4.0.4/24 Area2
Lo1 4.4.1.4/24 Area2
Lo2 4.4.2.4/24 Area2
Lo3 4.4.3.4/24 Area2
Lo4 4.4.4.4/24 Area2
Task1
ConfigureOSPFontheroutersaccordingtotheaboveIPaddressingchart.Ensurethat
theadvertisednetworksarereachablebyallrouters.Theloopbackinterfacesshouldbe
advertisedwiththeircorrectmask.
OnR1

OnR2
R2(configrouter)#netw131.1.23.20.0.0.0are 0
OnR3
OnR4

Task2
ConfigureR3suchthattheroutersinarea2dontreceiveanyLSAsfromtheotherareas,
however,theotherareasshouldreceiveroutesfromarea2.DoNOTusedistributelist,
accesslist,oranycommandintherouterospfprocesstoaccomplishthistask.All
networksmustbeadvertised.
OnR3
R3(configsubif)#ipospfdatabasefilterallout
BydefaultalloutgoingLSAsarefloodedtotheinterface.Thiscommandprevents
floodingofOSPFLSAsoutofagiveninterface.
OnR4
R4#Showiproute

NoteR4doesnothaveanyLSAsinitsroutingtable

OnR1
R1#Showiproute

OIA2.2.2.2[110/65]via131.1.12.2,00:12:15,Serial0/0.12
OIA3.3.3.3[110/66]via131.1.12.2,00:02:11,Serial0/0.12
OIA4.4.4.4[110/130]via131.1.12.2,00:02:02,Serial0/0.12
OIA4.4.0.4[110/130]via131.1.12.2,00:02:02,Serial0/0.12
OIA4.4.1.4[110/130]via131.1.12.2,00:02:02,Serial0/0.12
OIA4.4.2.4[110/130]via131.1.12.2,00:02:03,Serial0/0.12
OIA4.4.3.4[110/130]via131.1.12.2,00:02:03,Serial0/0.12
OIA131.1.23.0[110/65]via131.1.12.2,00:02:08,Serial0/0.12
OIA131.1.34.0[110/129]via131.1.12.2,00:02:13,Serial0/0.12
NoteR1hasalltheLSAsfromR4.
Task3
ConfigureR2suchthatitfiltersalllocallygeneratedLSAsandtheLSAsfromR1
reachingR3andR4.R1andR2shouldreceiveallLSAsfromR3andR4.DoNOTuse
anyglobalconfigcommand/saspartofthesolutiontoaccomplishthistask.

OnR3
R3(configif)#ipospfnetpointtomultipoint
OnR2
R2(configif)#ipospfnetpointtomultipoint
R2(configrouter)#neighbor131.1.23.3databasefilterallout
Inorderfortheneighbordatabasefilteralloutcommandtoworkthenetwork
typehastobeconfiguredinapointtomultipointmanner.
Youmayhavetouseclearipospfprocesscommandforthiscommandtotake
effect.
OnR3
R3#Showiproute

O4.4.4.4[110/65]via131.1.34.4,00:01:16,Serial0/0.34
O4.4.0.4[110/65]via131.1.34.4,00:01:16,Serial0/0.34
O4.4.1.4[110/65]via131.1.34.4,00:01:16,Serial0/0.34
O4.4.2.4[110/65]via131.1.34.4,00:01:16,Serial0/0.34
O4.4.3.4[110/65]via131.1.34.4,00:01:16,Serial0/0.34
NoteR3ONLYhastheLSAsfromR4initsroutingtable.
OnR2
R2#Showiproute

O1.1.0.0[110/65]via131.1.12.1,00:00:32,Serial0/0.21
O1.1.1.0[110/65]via131.1.12.1,00:00:32,Serial0/0.21
O1.1.2.0[110/65]via131.1.12.1,00:00:32,Serial0/0.21
O1.1.3.0[110/65]via131.1.12.1,00:00:32,Serial0/0.21
C131.1.12.0/24isdirectlyconnected,Serial0/0.21
NoteR2canseealltheLSAs.
Task4
Removealltheconfigurationcommandsfromtheprevioustwosteps.

OnR3
R3(configsubif)#noipospfdatabasefilterallout
R3(configif)#noipospfnetpointtomultipoint
OnR2
R2(configif)#noipospfnetpointtomultipoint
R2(configrouter)#noneighbor131.1.23.3databasefilterallout
Task5
ConfigureR3orR4suchthatR4doesnothavereachabilitytoNetwork3.0.0.0.You
mustusedistributelisttoaccomplishthistask.
OnR4
R4(configrouter)#distributelist3inS0/0.43
NotesincedistributelistoutdoesNOTworkinOSPF,theconfigurationofthis
taskmustbeperformedonR4usingthedistributelistincommand.
Task6
OnR4stopadvertisingnetworks4.4.0.0/24 4.4.3.0/24andredistributethesenetworks
intoOSPF.Ensurethatotherroutersseetheroutes asexternal.
OnR4

Task7
ConfiguretheOSPFrouterssuchthattheydonthavereachabilitytonetwork4.4.3.0/24.
DoNOTuseanyglobalconfigcommand,neighborcommand,interfaceconfig
command,oranyipospfcommandtoaccomplishthistask.
OnR4
R4(configrouter)#summaryaddress4.4.3.0255.255.255.0notadvertise
NotethiscommandwasusedtosummarizetheexternalroutesintoOSPF
routingdomain.Thiscommandcanalsobeusedtofilteranexternalnetwork/s
whenconfiguredonASBR/s. Thiscommandcannotbeusedtofilterinternal
networks.
Task8
ConfiguretheOSPFrouterssuchthatR3andR4donthavereachabilityto1.1.3.0/24
network.
On R2
R2(configrouter)#area1range1.1.3.0255.255.255.0notadvertise
Notethiscommandwasusedtosummarizetheinternalroutesfromoneareainto
anotherareawithinanOSPFroutingdomain.Thiscommandcanalsobeusedto
filterinternalrouteswithinanOSPFroutingdomainandcanonlybeusedonthe
ABR/s.ThiscommandcanNOTbeusedtofilterexternalnetworks.

Task9
Removetheconfigurationcommandsfromthepreviousstep.
OnR2
R2(configrouter)#noarea1range1.1.3.0255.255.255.0notadvertise
Task10
ConfigureR3suchthatnetwork1.1.1.0/24isnotadvertisedtoarea2.
OnR3
R3(config)#ipprefixlistTESTseq5deny1.1.1.0/24
R3(config)#ipprefixlistTESTseq10permit0.0.0.0/0le32
R3(configrouter)#area2filterlistprefixTESTin
ThiscommandfiltersprefixesadvertisedinLSAtype3betweenOSPFareaofan
ABR.
OnR4
R4#Showiproute

OIA1.1.0.0[110/130]via131.1.34.3,00:01:20,Serial0/0.43

OIA1.1.2.0[110/130]via131.1.34.3,00:01:10,Serial0/0.43
OIA1.1.3.0[110/130]via131.1.34.3,00:01:10,Serial0/0.43
OIA 2.2.2.2[110/66]via131.1.34.3,00:11:38,Serial0/0.43
OIA131.1.12.0[110/129]via131.1.34.3,00:11:42,Serial0/0.43
OIA131.1.23.0[110/65]via131.1.34.3,00:11:42,Serial0/0.43
NoteNetwork1.1.1.0/24isnotintheroutingtableofR4.IftheroutingtableofR3
isdisplayed,youwillseenetwork1.1.1.0/24intheroutingtable.RememberthatR3
isanABRanditconnectsarea0toarea2.
Task11

Lab8
RedirectingtrafficinOSPF
R1
S0/0
FrameRelay
R3
R2 S0/0S0/0
F0/0 F0/0
F0/0
.
R4
LabSetup:
R1shouldbeconfiguredwithtwopointtopointlinks,oneconnectingR1toR2
andtheotherconnectingR1toR3.R2andR3shouldalsobeconfiguredina
pointtopointmanner.
R2,R3andR4sF0/0interfacesshouldbeconfiguredtobeinVLAN234.
UsetheIPaddresschartbelowtoassignIPaddressestotherouters.

IPAddressing

R1 Lo0 1.1.1.1/8 Area0
R2 Lo0 2.2.2.2/8 Area0
F0/0interface 131.1.234.2/24 Area0
R3 Lo0 3.3.3.3/8 Area0
R4 Lo0 4.4.4.4/8 Area0
Task1
ConfigureOSPFonallroutersandadvertisetheirdirectlyconnectednetworkinarea0
andensurethattheserouterscanreachalltheadvertisednetworks.Ensurethatthe
loopbackinterfacesareadvertisedwiththeircorrectmask.
OnAllRouters
(configrouter)#netw0.0.0.00.0.0.0are0
(configrouter)#interfaceLo0
(configif)#ipospfnetworkpointtopoint
Task2
R1hastwowaystoreachnetwork4.0.0.0/8,ensurethatR1usesR2toreachthis
network.R1shouldgodirectlytoR3toreachnetwork3.0.0.0.
However,ifR2goesdown,R3shouldbeusedasatransitroutertoreachnetwork4.0.0.0
/8.
DONOTUSETHEFOLLOWINGCOMMANDS:
Bandwidth,anyglobalconfigcommand,OSPFcostcommandorthedistance
command.

NotetheroutingtableofR1revealsthatR1canreachnetwork4.0.0.0viaR2and
R3.
OnR1
R1#Showiproute

O2.0.0.0/8[110/65]via131.1.12.2,00:00:21,Serial0/0.12
O3.0.0.0/8[110/65]via131.1.13.3,00:00:21,Serial0/0.13
O4.0.0.0/8[110/66]via131.1.13.3,00:00:21,Serial0/0.13
[110/66]via131.1.12.2,00:00:21,Serial0/0.12
O 131.1.234.0[110/65]via131.1.13.3,00:00:21,Serial0/0.13
[110/65]via131.1.12.2,00:00:21, Serial0/0.12
OnR3
R3(configrouter)#maxmetricrouterlsa
TheabovecommandwillcausearoutertooriginateLSAswithamaximummetric
of0xffff(LSInfinity).Thisisdonesothatotherroutersdonotprefertherouterasa
transithopintheirpath toagivennetwork.
OnR1
Showiproute

O2.0.0.0/8[110/65]via131.1.12.2,00:04:12,Serial0/0.12
O3.0.0.0/8[110/65]via131.1.13.3,00:04:12,Serial0/0.13
O4.0.0.0/8[110/66]via131.1.12.2,00:04:12,Serial0/0.12
O131.1.234.0[110/65]via131.1.12.2,00:04:12,Serial0/0.12
Task3

Lab9
LimitingthenumberofOSPFredistributed
routes
R1 R2
FrameRelay
S0/0S0/0
F0/0
R3 F0/0
LabSetup:
TheframerelayconnectionbetweenR1andR2mustbeconfiguredinapointto
pointmanner.

IPAddressing

R1 Lo1 1.0.0.1/8 Eigrp100
Lo2 2.0.0.1/8 Eigrp100
Lo3 3.0.0.1/8 Eigrp100
Lo4 4.0.0.1/8 Eigrp100
Lo5 5.0.0.1/8 Eigrp100
Lo6 6.0.0.1/8 Eigrp100
Lo7 7.0.0.1/8 Eigrp100
Lo8 8.0.0.1/8 Eigrp100
Lo9 9.0.0.1/8 Eigrp100
Lo10 10.0.0.1/8 Eigrp100
Lo11 11.0.0.1/8 Eigrp100
F/RinterfacetoR2 131.1.12.1/24 Eigrp100
R2 Lo0 2.2.2.2/8 Eigrp100
Lo1 22.2.2.2/8 OSPFarea0
F/RinterfacetoR1 131.1.12.2/24 Eigrp100
F0/0interfacetoR3 131.1.23.2/24 OSPFarea0
R3 Lo0 3.3.3.3/8 OSPFarea0
F/RinterfacetoR2 131.1.23.3/24 OSPFarea0
Task1
Configuretheroutersasfollows:
OnR1,configureEigrp100andadvertisenetworks1.0.0.0/8 5.0.0.0/8and
theframerelayinterfacetoR2.
OnR2,configureEigrp100andadvertisenetworks2.0.0.0/8andtheframe
relayinterfacelinktoR1.
OnR2,configureOSPFandadvertisenetwork22.0.0.0/8andtheF0/0interface
toR3inarea0.
OnR3,configureOSPFandadvertiseallofitsinterfacesinarea0.
OnR1
OnR2
R2(configrouter)#PassiveinterfaceLo1
OnR3
Task2
OnR2,performamutualredistributionbetweenOSPFandEigrp100.
OnR2
R2(configrouter)#redistributeospf1metric15002000025511500
R2(configrouter)#redistributeeigrp100subnets
NotewhenredistributingroutesintoOSPF,theywillberedistributedwithametric
of20.
Showiproute

OE25.0.0.0/8[110/20]via131.1.23.2,00:01:18, FastEthernet0/0
OE2131.1.12.0[110/20]via131.1.23.2,00:01:20,FastEthernet0/0
Task3
R2shouldbeconfiguredsuchthatthemaximumnumberofprefixesthatcanbe
redistributedintoOSPFroutingprotocolis10.
R2shouldgeneratetwowarningmessages.Thefirstmessageshouldoccurwhenthe
numberofredistributedprefixesreaches70%oftheconfiguredthreshold(10).The
secondmessageshouldoccurwhenthe10th prefixisredistributed.
OnR2
R2(configrouter)#redistributemaximumprefix1070warningonly
Theabovecommandlimitsthenumberofprefixesthatcanberedistributedinto
OSPFroutingdomain.Inthiscase,therouterwillgeneratetwowarningmessages,
thefirstonewillbegeneratedwhen70%oftheconfiguredthreshold(10)isreached
andthe secondmessagewillbegeneratedwhentheconfiguredthreshold(10)is
exceeded.
Theinitialconfigfilehascreated11Loopbackinterfacesfortestingpurpose.Test
thispolicybyadvertisingtheseloopbackinterfacesoneatatimeandobservethe
warningmessages.

Task4
TheadministratorofR1isconstantlyviolatingthemaximumroutespolicy,inorderto
safeguardagainstthis,youshouldconfigureR2suchthatonly10prefixesareallowedto
beredistributedintoOSPF,ifR1advertisesmorethan10prefixesinEigrp100,R2
shouldignoretheextraprefixes.
OnR2
R2(configrouter)#noredistributemaximumprefix1070warningonly
R2(configrouter)#redistributemaximumprefix1070
Sincethewarningonlykeywordisnotused,R2willignoreanyadvertisement
abovethesetthreshold.
Task5

NarbikKocharians
CCIE#12410
R&S,Security,SP
BGP
Answers

Lab1
AuthenticationandAdvancedConfiguration
R1 R2
.1.2
FrameRelay
S0/0 S0/0
AS100 AS200
LabSetup
IPAddressing

R1 Lo0 1.1.1.1/8
S0/0.12 131.1.12.1/24
R2 Lo0 2.2.2.2/8
S0/0.21 131.1.12.2/24
Task1
ConfigureanEBGPneighboradjacencybetweenthetworoutersandonlyadvertisetheir
LoopbackinterfaceinBGP.
OnR1
R1(config)#router bgp100
R1(configrouter)#neighbor131.1.12.2remoteas200
R1(configrouter)#noautosummary
OnR2
R2(config)#routerbgp200
R2(configrouter)#noautosummary
NoteeventhoughBGPisaclasslessroutingprotocol,ithasaclassfulnature,
becausebydefaultitsummarizesnetworkstotheirclassfulboundary.RIPv2and
Eigrphavethesamebehaviorandthisbehaviorcanbedisabledbyusingtheno
autosummarycommand.
OnR1
Showipbgp
BGPtableversionis3,localrouterIDis1.1.1.1
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrf Weight Path

*>1.0.0.00.0.0.0 0 32768 i
*>2.0.0.0131.1.12.2 0 0 200i

* ValidTableEntry.
> ThebestentryforthePrefix.
S Theentryissuppressed.
I TheentrywaslearnedviaanIBGP,thisistheItotheleftofthe
networkcolumn.TheletterIunderthepathcolumn,specifiestheto
originoftheroute.
H Historystate,meaningthattheroutehasaccruedsomepenaltybutnot
enoughfortheroutetobeDampened.
Network Prefixentryforthenetwork,ifthemaskisomitted,thedefaultmaskis
assumed.
NextHop ThenexthopsIPaddresstogettothespecifiednetworkaddress,ifitis
0.0.0.0itisaprefixthatisadvertisedbythelocalrouter.
Metric ThisistheInterasmetric,ortheMEDattribute.
LocPrf Thisisthelocalpreferenceattribute.
Weight Theprefixesthatarereceivedviaaneighborwillhaveaweightof0,but
theprefixesthatareoriginatedbythelocalrouterwillhaveaweightvalue
of32768.
Path IftheprefixeswereoriginatedorlearnedviaanIBGP,thepathcolumn
willhavetheletterIwithoutanyASNs.If theprefix waslearnedthrough
anotherAS,thenthiscolumnwillhavetheASnumber/sfollowedbythe
letterI,theASNsindicatetheASesthataprefixhastraversed.
R1#Showiproute

B2.0.0.0/8[20/0]via131.1.12.2,00:02:31
Task2
OnR2,restrictthenumberofprefixesreceivedfromR1to10R2shouldgeneratea
messageif70%ofthisthresholdisreached,ifR1advertisesmorethan10prefixes,R2
shouldterminatetheneighboradjacency.
OnR2
R2(configrouter)#neighbor131.1.12.1maximumprefix1070
Tolimitthenumberofprefixesfromagivenneighbor,usetheneighbor
maximumprefixcommandintherouterconfigmode.
Neighbor131.1.12.1maximumprefix1070
Maximumprefix10specifiesthemaximumnumberofprefixes(inthiscase
10)thatthelocalrouterisallowedtoreceivefromthespecifiedneighbor
(131.1.12.1).
Thenextvalue(70)aftertheNeighbor131.1.12.1maximumprefix10
commandspecifies,atwhatpercentageofthemaximumprefixlimitthe
routerstartstogenerateawarningmessage.Therangeis1100.
RestartOptionalkeywordthatcanbeconfiguredtotelltherouterto
automaticallyreestablishapeeringsessionthathasbeendisabledbecause
themaximumprefixlimithasbeenexceeded.Ifthiskeywordisnot
configured,adisabledsessionwillstaydown.Iftherestartkeywordis
configured,itmustbefollowedwithatimerestartinterval.Timeinterval
valueisinminutesthatapeeringsessionisreestablished.Therangeis1
65535.
WarningonlyThismessagetellsthelocalroutertogeneratealogmessage
whenthemaximumprefixlimitisexceeded.Ifthiskeywordisomitted,the
peersessionwillbeterminated.
Task3
ConfigurethefollowingEthernetlinkbetweentheroutersandassigntheIPaddressing
specifiedinthediagram:

AS100 AS200
R1 R2
.1.2
FrameRelay
S0/0 S0/0
F0/0.1 F0/0.2
200.1.1.0/24
R1F0/0IPaddress=200.1.1.1/24andR2sF0/0IPaddress=200.1.1.2/24
R1andR2sF0/0interfacemustbeconfiguredinVLAN12.
Donotadvertisenetworks1.0.0.0and2.0.0.0inBGP
AdvertisetheLoopbackinterfaces(1.0.0.0/8and2.0.0.0/8)andthelinks
betweentheroutersinRIPv2.
Cat1
Switch(config)#intrangeF0/12
Switch(configifrange)#swimodeacc
Switch(configifrange)#swiaccv12
OnR1
R1(configif)#ipaddress200.1.1.1255.255.255.0
R1(configif)#noshut
OnR2
R2(configif)#noshut

Task4
ConfigurethefollowingLoopbackinterfacesonR1andR2andensurethatthese
loopbackinterfacesaretheonlyonesadvertisedinBGP:
R1Lo1=11.1.1.1/8andR2Lo1=22.2.2.2/8
Toensurethatthisneighboradjacencyisnotterminatedbecauseofaframerelaylink
failure,theEthernetlinkwasaddedandshouldbeusedwithoutanyinterruptiontothe
neighboradjacency.
OnR1
R1(configif)#routerbgp100
R1(configrouter)#noneighbor131.1.12.2remoteas200
R1(configrouter)#neighbor2.2.2.2updatesourcelo0
R1(configrouter)#neighbor2.2.2.2ebgpmultihop2
R1(configrouter)#nonetw1.0.0.0
OnR2
R2(configrouter)#noneighbor131.1.12.1remoteas100
R2(configrouter)#neighbor1.1.1.1updatesourcelo0
BydefaultBGPusesthebestlocalIPaddressforitsTCPconnection.ThesourceIP
addressoftheupdatesissettotheIPaddressofthebestlocalinterface.Usethe
neighborupdatesourcecommandtochangethisbehavior.
R2(configrouter)#neighbor1.1.1.1ebgpmultihop2
BydefaultBGPestablishesapeersessionwithneighborsthataredirectlyconnected
andbecauseofthispolicy,theTTLofthesepacketsissetto1.Tochangethis
behaviortheneighborebgpmultihopcommandcanbeused,thiscommand
changestheTTLofthepackets.IftheTTLvalueisnotspecifiedaTTLof255is
added.
R2(configrouter)#nonetw2.0.0.0
Task5
EnsurethattheroutersusetheirexistingLoopback0interfaceastheirrouterID.
OnR1
R1(configrouter)#bgprouterid1.1.1.1
OnR2
R2(configrouter)#bgprouterid2.2.2.2
Task6
EnsurethattheseroutersauthenticateeachotherbeforeexchangingBGPupdates.They
shoulduseciscoasthepasswordforthisauthentication.
OnR1
R1(configrouter)#neighbor2.2.2.2passwordcisco
OnR2
R2(configrouter)#neighbor1.1.1.1passwordcisco
Task7

Lab2
ConditionalandBackdoorAdvertisement
R2 R3
F0/0F0/0
S0/0 S0/0
Frame
Relay
S0/0
R1
LabSetup:
ConfigureR1tohavetwopointtopointframerelayconnections,oneconnecting
R1toR2,andtheotherconnectingR1toR3.
R2andR3shouldeachbeconfiguredwithasinglepointtopointconnectionto
R1.
ConfigureR2andR3sF0/0interfacetobeinVLAN23.

Ipaddressing:
Router Interface IPAddress ASnumber

R1 Lo0 1.1.1.1 /8 100
R2 Lo0 2.2.2.2/8 200
R3 Lo0 3.3.3.3/8 300
Lo1 150.1.2.3/24
Task1
ConfigureEBGPpeersessionsasfollows:
R1tohaveapeersessiontoR2
OnR1
R1(configrouter)#noauto
OnR2
OnR3

Task2
R1shouldadvertiseitsLoopback0,itsframerelayconnectiontoR2andR3in
BGP
R2shouldadvertiseitsLoopback0inBGP.
R3shouldadvertiseitsLo0andLo1inBGPusingthecorrectmask.
OnR1
R1(configrouter)#routerbgp100
R1(configrouter)#network131.1.12.0mask255.255.255.0
OnR2
OnR3
Task3
ConfigureEIGRPAS#100onthefollowingrouters:
R2andR3shouldadvertisenetwork150.1.0.0inEigrpAS#100
Theabovetworoutersshouldadvertise150.1.0.0networkasfollows,ensurethat
autosummarizationisenabled:
Routereigrp100
Network150.1.0.0
Autosum
OnR2andR3
R2(configrouter)#autosummary

Task4
NoteR2takesthescenic(R2toR1toR3)routetoreachnetwork150.1.2.0/24,ensure
thatR2reachesnetwork150.1.2.0/24throughitsF0/0interface.DoNOTusePolicy
BasedRoutingyoushoulduseaBGPsolutiontothisproblem.
AshowiproutecommandwillrevealtheroutingtableofR2asfollows:
OnR2
Showiprout

B1.0.0.0/8[20/0]via131.1.12.1,00:20:51
B3.0.0.0/8[20/0]via131.1.12.1,00:20:51
B131.1.13.0[20/0]via131.1.12.1,00:04:02
B150.1.2.0[20/0]via131.1.12.1,00:03:32
NoteR2goesthroughR1andthenR3toreachnetwork150.1.2.0/24
ATraceroutecommandwillshowthecompletepathto150.1.2.3:
Traceroute150.1.2.3
Tracingtherouteto150.1.2.3
1131.1.12.128msec28msec32msec
2131.1.13.3[AS100]56msec*56msec

Tocorrectthisproblem:
OnR2
R2(configrouter)#network150.1.2.0mask255.255.255.0backdoor
NoteR2receivesroutinginformationfornetwork150.1.2.0/24fromtwosources,BGPand
Eigrp.R2willaccepttheroutinginformationfromBGPbecauseithasalower
administrativedistance(20versus90).NetworkbackdoorisaBGPsolutiontothis
situation,BGPbackdoorassignsanadministrativedistanceof200totheadvertised
network,inthiscase150.1.2.0/24.AfterenteringtheBGPbackdoorcommand,R2will
acceptEigrpsadvertisement,becauseEigrpwillhavealoweradministrativedistance(90
versus200).
OnR2
R2#Showiproute

B1.0.0.0/8[20/0]via131.1.12.1,00:38:26
B3.0.0.0/8[20/0]via131.1.12.1,00:38:26
B131.1.13.0[20/0]via131.1.12.1,00:21:37
ATracerouterevealsthepath:
Traceroute150.1.2.3

Tracingtherouteto150.1.2.3
1150.1.0.34msec*0msec
Toactuallyseethenewlyassignedadministrativedistance:
OnR2
R2(config)#Routereigrp100
R2(configrouter)#Nonetwork150.1.0.0
R2#Showiproute

B1.0.0.0/8[20/0]via131.1.12.1,00:41:10
B3.0.0.0/8[20/0]via131.1.12.1,00:41:10 Noteanadministrativedistanceof200is
131.1.0.0/24issubnetted,2subnets assignedtonetwork150.1.2.0
B131.1.13.0[20/0]via131.1.12.1,00:24:21
B150.1.2.0[200/0]via131.1.12.1,00:00:04
Task5
Removethefollowingfromtheroutersbeforeproceedingtothenexttask:
ShutdownandremovetheIPaddressofF0/0interfaceonR2andR3.
RemoveEigrp100fromtheseroutersbeforeproceedingtothenexttask.
R3shouldstopadvertisingnetwork150.1.2.0/24inBGP
OnR2
R2(config)#intf0/0
R2(configif)#shut
R2(configif)#noipaddr
R2(config)#noroutereigrp100
OnR3
R3(config)#intf0/0
R3(configif)#shut
R3(configif)#noipaddr
R3(config)#noroutereigrp100
R3(configrouter)#nonetwork150.1.2.0mask255.255.255.0
Task 6
ConfigureR1asfollows:
Ifnetwork2.0.0.0isupanditsadvertisedtoR1anditsinR1sBGPtable,R1should
takethefollowingactions:
R1shouldNOTadvertiseitsnetwork1.0.0.0/8toR3.
R1shouldadvertise2.0.0.0/8toR3
However,ifnetwork2.0.0.0/8isdown,thenR1shouldtakethefollowingactions
R1shouldadvertisenetwork1.0.0.0/8toR3.
R1shouldremovenetwork2.0.0.0/8fromitsBGPtable.
Notetheroutershaveconvergedandtheyareawareofallrouteswithinthe
topology:
R1#Showipbgp
rRIBfailure,SStale
Network NextHopMetric LocPrf Weight Path

*>1.0.0.0 0.0.0.0 0 32768 i
*>2.0.0.0 131.1.12.20 0 200i
*>3.0.0.0 131.1.13.30 0 300 i
*>131.1.12.0/240.0.0.0 0 32768 i
*>131.1.13.0/240.0.0.0 0 32768 i
Toconditionallyadvertiseselectedrouteswecanusethefollowingcommands:
Advertisemap
Nonexistmap
Existmap
Thissituationcallsfortheuseoftheadvertisemapandnonexistmapas
follows:
OnR1
R1(config)#routemapADVpermit10
R1(config)#routemapNotTherepermit10
Topreventconfusionyoushouldselectmeaningfulnamesfortheroutemaps.Note
theaccesslistnumbersandthenamesoftheroutemap.
R1(configrouter)#neighbor131.1.13.3advertisemapADVnonexistmapNotThere
Theneighborcommandhasthefollowingroutemaps:
TheadvertisemapSpecifiesthenameoftheroutemapthatwillbe
advertisediftheconditionsofthenonexistmaparemet.
Nonexistmapspecifiesthenameoftheroutemapthatwillbecompared
totheadvertisemap.Iftheconditionismetandnomatchoccurs,theroute
willbeadvertised.Ifamatchoccurs,thentheconditionisNOTmet,andthe
routeiswithdrawn.
Noteifnetwork2.0.0.0isup,thennetwork1.0.0.0shouldNOTbeadvertisedtoR3,
sinceallthenetworksareupandadvertised,R1shouldwithdrawitsnetwork
(1.0.0.0/8):
OnR1
R1#Showipbgp
rRIBfailure,SStale
NetworkNextHopMetricLocPrfWeightPath
*>1.0.0.00.0.0.0032768i
*>2.0.0.0131.1.12.20 0200i
*>3.0.0.0131.1.13.300300i
*>131.1.12.0/240.0.0.0032768i
*>131.1.13.0/240.0.0.00 32768i
NoteR1doesNOTadvertiseitsnetwork(1.0.0.0/8)toR3:
R1#Showipbgpneighbors131.1.13.3advertisedroutes
rRIBfailure,SStale
*>2.0.0.0131.1.12.20 0200i
*>131.1.12.0/240.0.0.0032768i
*>131.1.13.0/240.0.0.0032768i
NotethebgptableofR3doesnothavenetwork1.0.0.0network:
OnR3
R3#Showipbgp
rRIBfailure,SStale
Network NextHopMetricLocPrfWeightPath
*>2.0.0.0131.1.13.10100200i

*>3.0.0.00.0.0.0032768i
*>131.1.12.0/24131.1.13.100100i
r>131.1.13.0/24131.1.13.100100i
OnR2
R2(config)#intlo0
R2(configif)#shut
Notenetwork2.0.0.0isDOWN,therefore,R1shouldadvertiseitsnetwork(1.0.0.0)
toR3:
OnR1
rRIBfailure,SStale
*>1.0.0.00.0.0.0032768i
*>131.1.12.0/240.0.0.0 032768i
*>131.1.13.0/240.0.0.0032768i
Notenetwork1.0.0.0isadvertisedtoR3.
Task7
RemovetheconfigurationcommandsenteredinTask6beforeyouproceedtothenext
task.
OnR1
R1(config)#noaccesslist1
R1(config)#noroutemapADV
R1(config)#noroutemapNotThere
R1(configrouter)#noneighbor131.1.13.3advertisemapADVnonexistmapNotThere
Task8
SecondLabpolicy:
R1shouldbeconfiguredasfollows:
Ifbothnetworksareup,thenbothnetworksshouldbeadvertisedtoR3.
Ifnetwork1.0.0.0/8isdown,R2shouldNOTadvertisenetwork2.0.0.0/8toR3.
OnR1
R1(config)#routemapADVpermit10
R1(config)#routemapEXISTpermit10
R1(configrouter)#neighbor131.1.13.3advertisemapADVexistmapEXIST
Notenetwork1.0.0.0isshutdown,therefore,R1willnotadvertisenetwork2.0.0.0to
R3.
OnR1
rRIBfailure,SStale
*>131.1.12.0/240.0.0.0032768i
*>131.1.13.0/240.0.0.0032768i

Task 9

Lab3
RouteDampening
R1 R2
S0/0 S0/0
FrameRelay F0/0
R4 R3
F0/0
S0/0S0/0
F0/0 FrameRelay
F0/0
R5

LabSetup
Configuretheframerelayconnectionbetweentheroutersinapointtopoint
manner.
ConfigureR2andR3sF0/0interfaceinVLAN23.
ConfigureR4andR5sF0/0interfaceinVLAN45.
Ipaddressing

R1 Lo0 1.1.1.1 /8 100
R2 Lo0 2.2.2.2/8 200
R3 Lo0 3.3.3.3/8 300
R4 Lo0 4.4.4.4/8 400
Lo1 40.4.4.4/24
Lo2 44.4.4.4/24
R5 Lo0 5.5.5.5/8 500
Task1
ConfigureanEBGPpeersessionbetweenR1andR2andonlyadvertisetheir
Loopback0interfaceinBGP.EnsurethattheseroutershaveNLRItoeachothers
Loopbackinterface.R1shouldbeinAS100andR2shouldbeinAS200.
OnR1

OnR2
R1#Showipbgp
rRIBfailure,SStale
NetworkNextHop MetricLocPrfWeightPath
*>1.0.0.00.0.0.0032768i
*>2.0.0.0131.1.12.200200i
Task2
ConfigureroutedampeningonR1usingthedefaultparameters.
OnR1
R1(configrouter)#routerbgp100
R1(configrouter)#bgpdampening
TheparametersofBGPdampeningareasfollows:
HalftimeOncearoutehasbeenassignedapenalty,thepenaltyis
decreasedevery5secondssuchthatwhenthehalfperiodexpires,the
accumulatedpenaltyisreducedbyhalf.Thedefaultvalueofhalftimeis15
minutesandtherangeis1to45minutes.
ReuseIfthepenaltiesforaflappingrouteisdecreasedenoughtofallbelow
thisvalue,therouteisreusable.Thedefaultis750andtherangeis1to
20000.
SuppressOncetheaccumulatedpenaltiesreachthisvalue,therouteis
suppressed.Thedefaultvalueis2000andtherangeis1 20000.
MaxSuppressTimeThemaximumtimeinminutesthataroutecanbe
suppressed.Thedefaultvalueis4timesthehalftimevalue(60)andthe
rangeis1to20000.
Thereforethisconfigurationperformsthefollowing:
Halftime=15minutes,reuse=750,Suppress=2000andMaxSuppressTime=60.
Task3
ConfigureanEBGPpeersessionbetweenR2andR3,andadvertisetheirLoopback0
interfaceinBGP.EnsurethattheseroutershaveNLRItoeachothersLoopback
interface.
R3shouldbeinAS300.
OnR2
OnR3
R3#Showipbgp
BGPtableversionis4,local routerIDis3.3.3.3
rRIBfailure,SStale
*>1.0.0.0131.1.23.20200100i
*>2.0.0.0131.1.23.200200i
*>3.0.0.00.0.0.00 32768i

Task4
ConfigureroutedampeningonR3suchthatthehalflifeparameterissetto30
minutes.Thisroutershouldusethedefaultparametersforsuppresslimit,reuse,and
maximumsuppresstime.
OnR3
R3(configrouter)#bgpdampening30750200060
Task5
ConfigureanEBGPsessionbetweenR3andR4.AdvertiseLoopback0,Loopback1
andLoopback2interfaceofR4inBGP.
R4shouldbeconfiguredinAS400.
OnR4
R4(configrouter)#netw40.4.4.0mask255.255.255.0
OnR3
OnR4
R4#Showipbgp
rRIBfailure,SStale
*>1.0.0.0131.1.34.30300200100i
*>2.0.0.0131.1.34.3 0300200i
*>3.0.0.0131.1.34.300300i
*>4.0.0.00.0.0.0032768i
*>40.4.4.0/240.0.0.00 32768i
*>44.4.4.0/240.0.0.0032768i
Task6
ConfigureanEBGPpeersessionbetweenR4andR5.R5shouldadvertiseitsLoopback0
interfaceinBGP.EnsurethattheseroutershaveNLRItoeachothersLoopbackinterface.
R5shouldbeinAS500.
OnR5
OnR4
R5#Showipbgp
rRIBfailure,SStale
*>1.0.0.0131.1.45.40400300200100i
*>2.0.0.0131.1.45.4 0400300200i
*>3.0.0.0131.1.45.40400300i
*>4.0.0.0131.1.45.40 0400i
*>5.0.0.00.0.0.0032768i
*>40.4.4.0/24131.1.45.400400i
*>44.4.4.0/24131.1.45.40 0400i

Task7
ConfigureroutedampeningonR4asfollows:
Network40.4.4.0/24shouldhavethefollowingdampeningparametersapplied:
MaxSuppressTimeof90
Reuse800
Suppress2400
HalfTimeof20
Network44.4.4.0/24shouldhavethefollowingdampeningparametersapplied:
MaxSuppressTimeof60
Reuse700
Suppress2000
HalfTimeof15
OnR4
R4(configroutemap)#setdampening20800240090
R4(configrouter)#bgpdampeningroutemapTEST
Notetheroutemapgivesusflexibility.Inthiscasewehaveappliedtwodifferent
routedampeningparameterstodifferentroutes.Thetwonetworksareidentified
withaccesslists.Theroutemapreferencestheaccesslistsandsetsthedampening
parametersbasedonthenetworks.

Task 8
ConfigureroutedampeningonR2usingthefollowingpolicy:
AlltheexistingandfutureprefixesfromAS300shouldhavethefollowing
parametersapplied:
MaxSuppressTimeof80
Reuse750
Suppress2200
HalfTime30
OnR2
R2(config)#ipaspathaccesslist1permit^300$
R2(configroutemap)#matchaspath1
R2(configrouter)#bgpdampeningroutemapTEST
Thecombinationofroutemapandtheaspathaccesslistcommandcanapply
bgpdampeningtoanASbasedontheASnumber.
Task 9

Lab4
RouteAggregation
R1 R2
S0/0S0/0
FrameRelay
.
LabSetup:
Configureframerelayconnectionbetweentheroutersinapointtopointmanner.
Ipaddressing

R1 Lo0 1.1.1.1 /8 100
R2 Lo0 2.2.0.2/24 200
Lo1 2.2.1.2/24
Lo2 2.2.2.2/24
Lo3 2.2.3.2/24

Task1
ConfigureanEBGPsessionbetweentheroutersandonlyadvertisetheirLoopback
interfacesinBGP.
OnR1
OnR2
Toverifytheconfiguration
R2#Showipbgp
rRIBfailure,SStale
*>1.0.0.0131.1.12.100100i
*>2.2.0.0/240.0.0.0032768i
*>2.2.1.0/240.0.0.0032768i
*>2.2.2.0/240.0.0.0032768i
*>2.2.3.0/240.0.0.0032768i
Task2
ConfigureR2suchthatitsummarizesitsLoopbackinterfacesandadvertisesasingle
summarytoR1.R2shouldnotassignanatomicaggregatetothesummaryroute
whenitadvertisesittoanyofitsneighbors.

OnR2
R2(config)#Routerbgp200
R2(configrouter)#aggregateaddress2.2.0.0255.255.252.0
OnR1
R1#Showipbgp
rRIBfailure,SStale
*>1.0.0.00.0.0.0 032768i
*>2.2.0.0/24131.1.12.200200i
*>2.2.0.0/22131.1.12.200200i
*>2.2.1.0/24131.1.12.20 0200i
*>2.2.2.0/24131.1.12.200200i
*>2.2.3.0/24131.1.12.200200i
Notebydefaulttheaggregateandallthespecificroutesareadvertised.A
summaryonlyargumentwillsuppresstheroutessothatonlythesummaryroute
isadvertised.
OnR2
R2#Showipbgp
rRIBfailure,SStale
*>1.0.0.0131.1.12.100100i
*>2.2.0.0/240.0.0.0032768i
*>2.2.0.0/220.0.0.032768i
*>2.2.1.0/240.0.0.0032768i
*>2.2.2.0/240.0.0.00 32768i
*>2.2.3.0/240.0.0.0032768i

Notenoneoftheprefixesaresuppresses.
OnR2
R2(configrouter)#aggregateaddress2.2.0.0255.255.252.0 summaryonly
NotethesummaryonlyargumentwillsuppressalltheprefixesonR2suchthat
R2sneighborswontseethemorespecificroutes.
OnR2
R2#Showipbgp
rRIBfailure,SStale
*>1.0.0.0131.1.12.100100i
s> 2.2.0.0/240.0.0.0032768i
*>2.2.0.0/220.0.0.032768i
s> 2.2.1.0/240.0.0.0032768i
s> 2.2.2.0/240.0.0.0032768i
s> 2.2.3.0/240.0.0.0 032768i
Notetheletterstotheleftofthe>sign.Thesmeansthattheseprefixesare
suppressed.
OnR1
R1#Showipbgp
rRIBfailure,SStale
*>1.0.0.00.0.0.0032768i
*>2.2.0.0/22131.1.12.200200i
NotetheonlyroutethatisadvertisedtoR1isthesummaryroute.Ifthesummary
routeisdisplayedinBGP,weshouldseetheatomicaggregateattribute
OnR2
R2#Showipbgp2.2.0.0/22
BGProutingtableentryfor2.2.0.0/22,version7
Paths:(1available,best#1,tableDefaultIPRoutingTable)
Advertisedtoupdategroups:
1
Local,(aggregatedby2002.2.3.2)
0.0.0.0from0.0.0.0(2.2.3.2)
OriginIGP,localpref100,weight32768,valid,aggregated,local,atomicaggregate,
best
Notetheoutputofthisdisplayrevealstwoattributesaggregatorandatomic
aggregate.
Theaggregatorattributeidentifiestherouterthatperformedtheaggregation.
Theatomicattributetellsusthatsomeinformationislostbecauseoftheaggregate.
OnR2
R2(configrouter)#aggregateaddress2.2.0.0255.255.252.0summaryonly asset
NoteinBGP,anaggregateisonlycreatedifatleastamorespecificrouteofthe
aggregateexistsintheBGPtable.Itisrecommendedtoconfiguremostifnotallthe
specificrouteswithaNetworkstatement,becauseifonlyasingleNetworkis
configuredtosatisfytherequirements,andthatparticularNetworkgoesdownfor
whateverreason,thentheaggregateisremoved.
Anotherwaytoadvertiseanaggregateisbycreatingastaticroutethatmatchesthe
summaryrouteandthenredistributingthestaticintoBGPasfollows:
Iproute172.16.0.0255.255.252.0null0
Routerbgp200
Redistributestatic
Butsincethatisnotanoptionhere,weneedtoadvertiseeveryspecificprefix.
AnatomicaggregateThisisanattributethatisassignedtotheaggregateroute
automaticallyiftheassetargumentisnotusedintheaggregateaddress
command.
Whenanaggregationisperformed,certaininformationislost.InBGPthat
informationcanbetheASnumbersthattheprefixestraversedthroughtogettothe
routerthatisperformingtheaggregation.Ifitsnotcorrectedaroutingloopcan
occur.Inordertopreventtheroutingloopsfromoccurring,theASSET
argumentshouldbeusedwhenperformingaggregation.

Task3
Reconfiguretheroutersusingthefollowsdiagram/IPaddressinginformationandONLY
advertisetheirLoopbackinterfacesin BGP.
R1 R2
S0/0S0/0
FrameRelay F0/0
R3
F0/0
Ipaddressing:

R1 Lo0 3.1.0.1 /24 100
R2 Lo0 2.2.2.2/8 200
R3 Lo0 3.1.1.3/24 300
Lo1 3.1.2.3/24
Lo2 3.1.3.3/24
Lo3 3.1.4.3/24
OnR1
OnR2
OnR3
OnR3
R3#Showipbgp
rRIBfailure,SStale
*>2.0.0.0131.1.23.200200i
*>3.1.0.0/24131.1.23.20200100i
*>3.1.1.0/24 0.0.0.0032768i
*>3.1.2.0/240.0.0.0032768i
*>3.1.3.0/240.0.0.0032768i
*>3.1.4.0/240.0.0.0 032768i
Task4
R2shouldaggregateallthenetworksin3.1.0.0/16addressspace.Thisaggregation
shouldbedonesuchthatR1inAS100istheonlyASthatreceivestheaggregateroute,

R3shouldnotreceivetheaggregateroute.R3shouldhaveastaticroutepointingtoR2
fornetwork3.1.0.0/24.
OnR2
R2(config)#ipaspathaccesslist1permit^300
TheabovecommandidentifiesASnumber300.
R2(configroutemap)#matchaspath 1
Theroutemapcommandreferencestheaspathaccesslist.
R2(configrouter)#aggregateaddress3.1.0.0255.255.0.0assetsummaryonlyadvertisemapTEST
TheadvertisemapcommandassignstheroutemapTESTtotheaggregateaddress
command.
OnR1
R1#Showipbgp
rRIBfailure,SStale
*>2.0.0.0131.1.12.200200i
*>3.1.0.0/240.0.0.0032768i
*>3.1.0.0/16 131.1.12.200200300i
OnR3
Showipbgp
rRIBfailure,SStale
*>2.0.0.0131.1.23.200200i

*>3.1.1.0/240.0.0.0032768i
*>3.1.2.0/240.0.0.0032768i
*>3.1.3.0/240.0.0.0032768i
*>3.1.4.0/240.0.0.0032768i
NoteR3getstheaggregateroutebutitrejectsitbecauseitseesitsownASnumberintheas
pathlist.R1receivesandprocessestheaggregateroutebecauseitdoesnotseeitsownAS
numberintheaspathlistadvertisedbyR2.
Task5
ConfigureR2suchthatacostof50isassignedtotheaggregateroute.
OnR2
R2(config)#routemapCOSTpermit10
R2(configrouter)# aggregateaddress3.1.0.0255.255.0.0summaryonlyadvertisemapTESTasset
attributemapCOST
Theattributemapidentifiesthenameoftheroutemapusedtosettheattribute/softheaggregate
route.
OnR1
R1#Showipbgp
rRIBfailure,SStale
*>2.0.0.0 131.1.12.20 0200i
*>3.1.0.0/24 0.0.0.00 32768i
*>3.1.0.0/16131.1.12.2 50 0200300i
NoteR1gettheaggregateroutewithacostof50.

Task6
ThepolicyforR1requiresthatitshouldreceivetheaggregaterouteplusoneofthemore
specificsubnets(3.1.3.0/24).Thisshouldbeperformedandtestedusingasuppressmap,
andunsuppressmap,butonlyoneofthesolutionsshouldbeimplemented.
TotesttheSuppressmap:
OnR2
R2(config)#routemapSUPPpermit10
R2(configrouter)# aggregateaddress3.1.0.0255.255.0.0summaryonlyadvertisemap
TESTassetattributemapCOSTsuppressmapSUPP
Showipbgp
rRIBfailure,SStale
NetworkNextHopMetricLocPrf WeightPath
*>2.0.0.0131.1.12.20 0200i
*>3.1.0.0/24 0.0.0.0 0 32768i
*>3.1.0.0/16131.1.12.250 0200300i
*>3.1.3.0/24131.1.12.20200300i
TotesttheUnsuppressmap:
OnR2
R2(configrouter)#no aggregateaddress3.1.0.0255.255.0.0summaryonlyadvertise

mapTESTassetattributemapCOSTsuppressmapSUPP
R2(configrouter)#aggregateaddress3.1.0.0255.255.0.0summaryonlyadvertisemap
TESTassetattributemapCOST
R2(configrouter)#neighbor131.1.12.1unsuppressmapSUPP
OnR1
R1#Showipbgp
rRIBfailure,SStale
*>2.0.0.0131.1.12.200200i
*>3.1.0.0/16131.1.12.2500200300i
*>3.1.0.0/24 0.0.0.0 32768i
*>3.1.3.0/24131.1.12.2 0200300i
Task7

Lab5
TheCommunityattribute
R1 R2
S0/0S0/0
FrameRelay F0/0
R4 R3
F0/0
S0/0S0/0
FrameRelay
LabSetup:
Configuretheroutersthatareconnectedtotheframerelaycloudsinapointto
pointmanner.

Ipaddressing:

R1 Lo0 1.1.1.1/8 100
Lo1 11.1.1.1/8
R2 Lo0 2.2.2.2/8 200
R3 Lo0 3.3.3.3/8 300
R4 Lo0 4.4.4.4/8 400
Task1
ConfiguretheroutersaccordingtotheabovechartandONLYadvertisetheirLoopback
interface/sinBGP.
OnR1
OnR2
OnR3

OnR4
R1#Showipbgp
rRIBfailure,SStale
*>1.0.0.0 0.0.0.0032768i
*>2.0.0.0131.1.12.200200i
*>3.0.0.0131.1.12.20200300i
*>4.0.0.0131.1.12.20200300400i
*>11.0.0.00.0.0.0032768i
Task2
ConfigureR1suchthatwhenitadvertisesnetwork1.0.0.0/8toR2inAS200,the
networkisnotadvertisedtoanyofR2sIBGPorEBGPneighbors.
OnR1
R1(configrouter)#neighbor131.1.12.2sendcommunity
R1(configrouter)#neighbor131.1.12.2routemapTESTout
R1(configroutemap)#setcommunitynoadvertise
R1(configroutemap)#routemapTESTpermit20

Iftheabovecommandisnotconfigured,noroutewillbeadvertisedtoR2.Thisis
thecatchallcommand,meaningthatwhateverthatwasnotspecifiedintheroute
mapTESTpermit10commandwillbecoveredbythiscommand.
Bydefaultnocommunityattributeissenttoanyneighbor.Tospecifythata
communityattributeshouldbesenttoaBGPneighbor,theneighborsend
communitycommandisconfiguredintherouterconfigmode.
Thewellknowncommunitiesareasfollows:
InternetIfassignedtoanetwork/s,thatnetwork/sshouldbeadvertised.
LocalasIfassignedtoanetwork/s,thatnetwork/sshouldONLYbe
advertisedwithinthatAS.
NoadvertiseIfassignedtoanetwork/s.thatnetwork/sshouldNOTbe
advertisedtoanyBGPneighbor.
NoexportIfassignedtoanetwork/s,thatnetwork/sshouldNOTbe
advertisedtoanEBGPneighbor.
To verifytheconfiguration:
OnR3
R#Showipbgp
rRIBfailure,SStale
*>2.0.0.0131.1.23.200200i
*>3.0.0.00.0.0.0032768i
*>4.0.0.0131.1.34.400400i
*>11.0.0.0131.1.23.2 0200100i
Task3
ConfigureR2suchthatwhenitadvertisesitsnetwork2.0.0.0toR3inAS300,the
networkisonly advertisedtoAS300routers,AS300shouldNOTadvertisethisnetwork
toanyEBGPneighbor.DoNOTconfigureAS300toaccomplishthistask.
OnR2
R2(configrouter)#accesslist1permit2.0.0.00.255.255.255
R2(configroutemap)#setcommunitynoexport
Thisisanotherwellknowncommunity.Inthiscasenetwork2.0.0.0willONLYbe
advertisedtotheroutersinAS300.AS300routerswillNOTadvertisethisnetwork
toanyoftheirEBGPneighbor/s.
OnR4
R4#Showipbgp
rRIBfailure,SStale
*>3.0.0.0131.1.34.300300i
*>4.0.0.00.0.0.0032768i
*>11.0.0.0131.1.34.3 0300200100i
Task4
ConfigureR3inAS300toadvertisenetwork2.0.0.0/8toitsEBGPneighbors.DoNOT
removetheconfigurationcommand/sfromtheprevioustask.
OnR3
R3(configroutemap)#setcommunityinternet
R3(configrouter)#neighbor131.1.23.2routemapTESTin
NoteinthiscasetheroutemapTESTcommandisappliedtotheinbound,
becauseitshouldaffectthelocalrouterforthatnetworkandcommunity.
OnR4
R4#Showipbgp
rRIBfailure,SStale
*>2.0.0.0131.1.34.30300200i
*>3.0.0.0131.1.34.30 0300i
*>4.0.0.00.0.0.0 0 32768i
*>11.0.0.0131.1.34.3 0300200100i
Task5
ConfigureR4suchthatwhenitadvertisesitsnetwork4.0.0.0/8inBGP,thisnetworkis
onlyadvertisedwithinitsownAS(AS400).DoNOTusefilteringofanykindto
accomplishthistask.
OnR4
R4(configroutemap)#setcommunitylocalas

R4(configrouter)#network4.0.0.0routemapTEST
NotethelocalascommunityattributeisNOTsenttoagivenneighbor,its
advertisedusingaroutemapthathasthelocalascommunityattributeattached.
OnR3
R3#Showipbgp
rRIBfailure,SStale
Network NextHopMetricLocPrf Weight Path

*>2.0.0.0 131.1.23.2 0 0 200i
*>3.0.0.0 0.0.0.0 0 32768 i
*>11.0.0.0131.1.23.2 0 200100i
Task6
Erasethestartupconfigandreloadtheroutersbeforeproceedingtothenexttask.

Lab6
TheASPathattribute
R1 R2
S0/0S0/0
F0/0 FrameRelay F0/0
R4 R3
F0/0F0/0
S0/0 S0/0
FrameRelay
LabSetup:
pointmanner.

Ipaddressing:

R1 Lo0 1.1.1.1/8 100
Lo1 11.1.1.1/8
R2 Lo0 2.2.2.2/8 200
R3 Lo0 3.3.3.3/8 200
R4 Lo0 4.4.4.4/8 200
Task1
ConfiguretheroutersastheabovediagramwithIPaddressingandASnumbersidentified
inthechart,andonlyadvertisetheLoopbackinterfaceoftheroutersinBGP.
EnsurethattheroutersONLYadvertisetheirlinks(131.1.12.0/24,131.1.23.0/24,
131.1.34.0/24and131.1.14.0/24)inRIPv2,disableautosummarizationinRIPv2
routingprotocol.
OnR1
R1(configrouter)#neighbor131.1.14.4remoteas 200
OnR2
R2(configrouter)#nosyn
R2(configrouter)#neighbor131.1.23.3nexthopself
OnR3
OnR4

Task2
ConfigureR1inAS100suchthatroutersinAS200usethelinkthroughR2toreachits
network1.0.0.0/8.UsetheASPathattributetoaccomplishthistask.
OnR1
R1(configroutemap)#setaspathprepend100100100100
R1(configroutemap)#routerbgp100
R1(configrouter)#neighbor131.1.14.4routemapTEST1out
OnR4
R4#Showipbgp
rRIBfailure,SStale

*>i1.0.0.0131.1.23.201000100i
*131.1.14.100100100100100100i
*>i2.0.0.0 131.1.23.201000i
*>i3.0.0.0131.1.34.301000i
*>4.0.0.00.0.0.0032768i
*i11.0.0.0131.1.23.2 01000100i
*>131.1.14.100100i
NotetheASpathattributeisusedtoinfluencethedegreeofpreferenceinanother
AS.R4willgothroughR2toreachnetwork1.0.0.0/8.

Task3
ConfigureR1inAS100suchthattheroutersinAS200usethelinkthroughR4toreach
network11.0.0.0/8.UsetheASPathattributetoaccomplishthistask
OnR1
R1(config)#routemapTEST11 permit10
R1(configroutemap)#setaspathprepend100100100100
R1(configrouter)#neighbor131.1.12.2routemapTEST11 out
OnR2
R2#Showipbgp
rRIBfailure,SStale

*>1.0.0.0131.1.12.10 0100i
*>2.0.0.0 0.0.0.00 32768i
*>i3.0.0.0131.1.23.30 100 0i
*>i4.0.0.0131.1.34.40 100 0i
*>i11.0.0.0131.1.34.40 100 0100i
* 131.1.12.1 0 0100100100100100i
Task 4

Lab7
TheLocalPrefattribute
R1 R2
S0/0S0/0
R4 R3
F0/0F0/0
S0/0 S0/0
FrameRelay
Ipaddressing:

R1 Lo0 1.1.1.1/8 100
Lo1 11.1.1.1/8
R2 Lo0 2.2.2.2/8 200
R3 Lo0 3.3.3.3/8 200
R4 Lo0 4.4.4.4/8 200
Framerelayconnection toR3 131.1.34.4/24

Task1
ConfiguretheroutersbasedonthepreviouslabstopologyandIPaddressingscheme.
OnlyadvertisetheLoopbackinterface/softheroutersinBGP.
131.1.34.0/24and131.1.14.0/24)inRIPv2,disableautosummarizationinRIPv2
routingprotocol.
OnR1
OnR2
OnR3
On R4
Task2
Ensurethattheroutersin AS200useR4toreachnetwork1.0.0.0/8inAS100.Local
Prefattributemustbeusedtoaccomplishthistask.
OnR4
R4(configroutemap)#setLocalpreference400
R4(configrouter)#neighbor131.1.14.1routemapTEST1in
ThelocalpreferenceattributeisusedtopreferanexitpointfromthelocalAS.
Unliketheweightattribute,thelocalpreferenceattributeispropagatedthroughout
thelocalAS.IftherearemultipleexitpointsfromthelocalAS,thelocalpreference
attributeisusedtoselecttheexitpointforaspecificorallroutes.Sincethelocal
preferenceattributeaffectstherouterswithintheAS,theroutemapshouldbe
configuredintheindirection.
OnR2
R2#Showipbgp
rRIBfailure,SStale
*>i1.0.0.0131.1.34.4 04000100i
*131.1.12.100100i
*>2.0.0.00.0.0.0032768i
*>i3.0.0.0131.1.23.3 01000i
*>i4.0.0.0131.1.34.401000i
*i11.0.0.0131.1.34.401000100i
*>131.1.12.10 0100i
Task 3
EnsurethattheroutersinAS200useR2toreachnetwork11.0.0.0/8.LocalPref
attributemustbeusedtoaccomplishthistask.
OnR2
R2(config)#routemapTEST permit10
R2(configroutemap)#setLocalpreference400
R2(config)#routemapTEST permit20

OnR2
R2#Showipbgp
rRIBfailure,SStale
*1.0.0.0 131.1.12.100100i
*>i131.1.34.404000100i
*>2.0.0.00.0.0.0 032768i
*>i3.0.0.0131.1.23.301000i
*>i4.0.0.0131.1.34.401000i
*>11.0.0.0131.1.12.104000 100i
OnR3
R3#Showipbgp
rRIBfailure,SStale
*>i1.0.0.0131.1.34.404000100i
*>i2.0.0.0131.1.23.201000i
*>3.0.0.00.0.0.0 032768i
*>i4.0.0.0131.1.34.401000i
*>i11.0.0.0131.1.23.204000100i
OnR4
R4#Showipbgp

rRIBfailure,SStale
*>1.0.0.0 131.1.14.104000100i
*>i2.0.0.0131.1.23.201000i
*>i3.0.0.0131.1.34.301000i
*>4.0.0.00.0.0.0 032768i
*>i11.0.0.0131.1.23.204000100i
*131.1.14.100100i
Task 4

Lab8
TheWeightattribute
R1 R2
S0/0S0/0
R4 R3
F0/0 F0/0
S0/0S0/0
FrameRelay
Ipaddressing:

R1 Lo0 1.1.1.1/8 100
Lo1 11.1.1.1/8
R2 Lo0 2.2.2.2/8 200
Lo1 22.2.2.2/8
R3 Lo0 3.3.3.3/8 300
Lo1 33.3.3.3/8
R4 Lo0 4.4.4.4/8 400

Task1
ConfigureBGPontheroutersbasedonthetopologyandtheIPaddressingchartprovided
above.ONLYadvertisetheLoopbackinterface/sinBGP.TheBGPPeersessionsshould
beestablishedaccordingtothetopology.Ensurethattherouterscanreachtheadvertised
Loopbackinterfaces.
131.1.34.0/24and131.1.14.0/24)inRIPv2,disableautosummaryinRIPv2routing
protocol.
OnR1
On R2
OnR3
OnR4
OnR4
R4#Showipbgp
rRIBfailure,SStale
NetworkNextHopMetricLocPrf WeightPath
*1.0.0.0131.1.34.30300200100i
*>131.1.14.100100i
*2.0.0.0131.1.34.3 0300200i
*>131.1.14.10100200i
*3.0.0.0131.1.14.10100200300i
*>131.1.34.3 00300i
*>4.0.0.00.0.0.0032768i
*11.0.0.0131.1.34.30300200100i
*>131.1.14.100100i
*22.0.0.0131.1.34.30300200i
*>131.1.14.10100200i
*33.0.0.0131.1.14.10100200300i
*>131.1.34.300300i
Task2
ConfigureR1inAS100touseAS200toreachalltheprefixeswithinthistopologyyou
mustuseTheWeightattributetoaccomplishthistask.
OnR1
R1(configrouter)#neighbor131.1.12.2weight40000
TheweightattributeisaCiscodefinedattributethatislocaltotherouter.This
attributeisNOTadvertisedtoanyneighboringrouter.Iftherearemorethanone
routetoagivendestination,theweightattributecandecidewhichpathisbetter.
Thehigherthevaluethehigherthepreference.
OnR1
R1#Showipbgp
rRIBfailure,SStale
*>1.0.0.00.0.0.0032768i
*>2.0.0.0131.1.12.2040000200i
*131.1.14.4 0400300200i
*>3.0.0.0131.1.12.240000200300i
*131.1.14.40400300i
*>4.0.0.0131.1.12.2 40000200300400i
*131.1.14.400400i
*>11.0.0.00.0.0.0032768i
*>22.0.0.0131.1.12.20 40000200i
*131.1.14.40400300200i
*>33.0.0.0131.1.12.240000200300i
*131.1.14.4 0400300i

Task3
ThepolicyofAS100ischangedtothefollowing:
R1inAS100shoulduseR4inAS400toreachprefixes33.0.0.0/8
ExistingandfutureprefixesfromAS200shouldhaveaweightattributeof54000
throughR2.
OnR1
R1(config)#accesslist33permit33.0.0.0
R1(configroutemap)#setweight45000
R1(config)#ipaspathaccesslist1permit^200$
R1(configroutemap)#matchaspath1
R1(configroutemap)#setweight54000
OnR1
R1#Showipbgp
rRIBfailure,SStale
*>1.0.0.00.0.0.0032768i
*>2.0.0.0131.1.12.2054000200i
*131.1.14.40400300200i
*>3.0.0.0131.1.12.240000200300i
* 131.1.14.40400300i
*>4.0.0.0131.1.12.240000200300400i
*131.1.14.400400i
*>11.0.0.00.0.0.0032768i
*>22.0.0.0131.1.12.2054000200i
*131.1.14.40400300 200i
*33.0.0.0131.1.12.240000200300i
*>131.1.14.445000400300i
Task4

Lab9
MultiExitDiscriminatorattribute
R1 R2
S0/0S0/0
R4 R3
F0/0 F0/0
S0/0S0/0
FrameRelay
LabSetup:
Ipaddressing:

R1 Lo0 1.1.1.1/8 100
Lo1 11.1.1.1/8
Framerelayconnection toR2 131.1.12.1/24
R2 Lo0 2.2.2.2/8 200
Lo1 22.2.2.2/8

R3 Lo0 3.3.3.3/8 200
Lo1 33.3.3.3/8
R4 Lo0 4.4.4.4/8 200
Task1
ConfigureBGPonallroutersaccordingtothetopologyandtheIPaddressingchart,and
onlyadvertisetheirLoopbackinterface/sinBGP.Ensurethattheroutershave
reachabilitytoeveryadvertisednetwork
EnsurethattheroutersONLYadvertisetheirlinks(131.1.12.0/24,131.1.23.0 /24,
protocol.
OnR1
OnR2
OnR3
OnR4
OnR1
R1#Showipbgp
BGPtableversionis22,localrouter IDis11.1.1.1
rRIBfailure,SStale

*>1.0.0.00.0.0.0032768i
*2.0.0.0131.1.14.40200i
*>131.1.12.200200i
* 3.0.0.0131.1.12.20200i
*>131.1.14.40200i
*4.0.0.0131.1.14.40 0200i
*>131.1.12.20200i
*>11.0.0.00.0.0.0032768i
*22.0.0.0131.1.14.4 0200i
*>131.1.12.200200i
*33.0.0.0131.1.12.20200i
*>131.1.14.4 0200i
Task2
ConfigureAS200suchthattheroutersinAS100takeR4toreachanyprefixes
advertisedinAS200.ManipulateMEDtoaccomplishthistask.
OnR2
MEDisusedasasuggestiontoanexternalASregardingthepreferredrouteinto
theASthatisadvertisingthemetric.Thereasonsuggestionisusedhereisbecause
theASthatisreceivingMEDattributecoulduseanotherattributesuchasWeight
thatwilloverridetheMEDattribute.Thelowerthevaluethebetterthepath.
OnR1
R1#Showipbgp

rRIBfailure,SStale
NetworkNextHopMetric LocPrf Weight Path

*>1.0.0.0 0.0.0.0032768i
*2.0.0.0131.1.12.21000200i
*> 131.1.14.40200i
*3.0.0.0 131.1.12.21000200i
*> 131.1.14.40200i
*4.0.0.0131.1.12.21000200i
*> 131.1.14.400200i
*>11.0.0.00.0.0.0032768i
*22.0.0.0131.1.12.21000200i
*> 131.1.14.40200i
*33.0.0.0131.1.12.21000200i
*>131.1.14.40200 i
Task3
Removetheconfigurationcommandfromtheprevioustaskbeforeproceedingtothe
nexttask.
OnR2
R2(config)#noroutemapTESTpermit10
R2(configrouter)#noneighbor131.1.12.1routemapTESTout
Task4
ConfigureAS200suchthatAS100canreachprefix33.0.0.0/24throughR4andPrefix
3.0.0.0/8throughR2.UtilizeMEDtoaccomplishthistask.
OnR2
OnR4
To verifytheconfiguration
OnR1
R1#Showipbgp
rRIBfailure,SStale
*>1.0.0.00.0.0.0032768i
*2.0.0.0131.1.12.200200i
*> 131.1.14.40200i
*>3.0.0.0131.1.12.2500200i
*131.1.14.41000200i
*4.0.0.0131.1.12.20200i
*>131.1.14.400200i
*>11.0.0.00.0.0.0032768i
*22.0.0.0 131.1.12.200200i
*>131.1.14.40200i
*33.0.0.0131.1.12.21000200i
*>131.1.14.4500200i
Task5
RemoveBGProutingprotocolandanypreviousBGPrelatedcommand/sfromthe
previoustasksandreconfigurethembasedonthechartbelow.Theseroutersshould
ONLYadvertisetheirloopbackinterface/sinBGP.

R1 Lo0 1.1.1.1/8 100
Lo1 11.1.1.1/8
R2 Lo0 2.2.2.2/8 200
Lo1 22.2.2.0/8
R3 Lo0 3.3.3.3/8 300
Lo1 33.3.3.0/8
R4 Lo0 4.4.4.4/8 400
OnR1
R1(config)#Norouterbgp100
OnR2
R2(config)#norouterbgp200

R2(config)#noroutemapTEST
OnR4
R4(config)#norouterbgp200
OnR1
OnR2
OnR3
OnR4

OnR1
R1#Showipbgp
rRIBfailure,SStale
Origin codes:i IGP,e EGP,? incomplete
*>1.0.0.00.0.0.0032768i
*>2.0.0.0131.1.12.20 0200i
*3.0.0.0131.1.12.20200300i
*>131.1.14.40400300i
*4.0.0.0131.1.12.2 0200300400i
*>131.1.14.400400i
*>11.0.0.00.0.0.0032768i
*>22.0.0.0131.1.12.20 0200i
*33.0.0.0131.1.12.20200300i
*>131.1.14.40400300i
Task6
ConfigureR4inAS400topassaMED of100toR1inAS100andconfigureR2inAS
200topassaMEDof120toR1inAS100.
OnR2
OnR4

R1#Showipbgp
rRIBfailure,SStale
Network NextHopMetricLocPrfWeight Path

*>1.0.0.0 0.0.0.0032768i
*>2.0.0.0131.1.12.21200200i
*3.0.0.0131.1.12.21200200300i
*> 131.1.14.41000400300i
*4.0.0.0131.1.12.21200200300400i
*>131.1.14.41000400i
*>11.0.0.00.0.0.0032768i
*>22.0.0.0131.1.12.21200200i
*33.0.0.0131.1.12.21200200300i
*> 131.1.14.41000400300i
Task7
EnsurethatR1inAS100alwaystakesR4toreachallotherprefixesadvertisedinthis
topology.UtilizeMEDinAS100toaccomplishthistask.
OnR1
R1(configrouter)#bgpalwayscomparemed
R1(configrouter)#bgpbestpathaspathignore
Notethetabkeywillnotworkwhenenteringthebgpbestpathaspathignore
command.
TheMEDasstatedinRFC1771,isanoptionalnontransitiveattribute.Thevalue
ofthisattributemaybeusedbytheBGPbestpathselectionprocesstodiscriminate
amongmultipleexistpointstoaneighboringAS.Thelowerthevaluethebetterthe
path.TheMEDvaluecomparisonisdoneonlyamongpathsfromthesameAS.The
bgpalwayscomparemedcommandisusedtochangethisbehaviorbyenforcing
MEDcomparisonbetweenallpaths,regardlessoftheASfromwhichthepathsare
received.
Notethesecondcommandbgpbestpathaspathignoreisusedtoaccomplishthis
task,thiscommandisneededbecauseaspathislookedatfirstbeforeMED.Once
BGProutingprotocolistoldtoignoretheaspathattributeinbestpathcalculation,
BGPwilllookattheMEDvaluenext.
Notethefollowingdisplayisperformedbeforethebgpbestpathaspathignore
command.
OnR1
R1#Showipbgp
rRIBfailure,SStale
*>1.0.0.00.0.0.0032768i
*>2.0.0.0131.1.12.21200200i
*131.1.14.41000400300200i
*3.0.0.0131.1.12.21200200300i
*>131.1.14.4100 0400300i
*4.0.0.0131.1.12.21200200300400i
*>131.1.14.41000400i
*>11.0.0.00.0.0.00 32768i
*>22.0.0.0131.1.12.21200200i
*131.1.14.41000400300200i
*33.0.0.0131.1.12.2120 0200300i
*>131.1.14.41000400300i
Enterthefollowingcommandtoseethebgptableafterthebgpbestpathaspath
ignorecommand:
R1#Showipbgp
rRIBfailure,SStale

*>1.0.0.0 0.0.0.0032768i
*2.0.0.0131.1.12.21200200i
*>131.1.14.4 1000400300200i
*3.0.0.0 131.1.12.21200200300i
*>131.1.14.4 1000400300i
*4.0.0.0131.1.12.21200200300400i
*> 131.1.14.4 1000400i
*>11.0.0.00.0.0.0032768i
*22.0.0.0131.1.12.21200200i
*>131.1.14.4 1000400300200i
*33.0.0.0131.1.12.21200200300i
*> 131.1.14.4 1000400300i
Task8
RemovetheBGPconfigurationfromtheprevioustwotasks(Task6).ConfigureR4in
AS400topassaMEDvalueof100toR1inAS100R2inAS200shouldNOTpass
anyMEDvaluestoR1.EnsurethatR1inAS100takesR4toreachanyprefixadvertised
inthistopology.
NoteR2isnotgivingaMEDvaluetoR1.R1willalwaystakethepathwiththe
lowestMED.R4isgivingaMEDvalueof100toR1.
R1willtakethepaththroughR2.
Totestthescenario:
OnR2
ToremovethecommandfromR2
OnR4

OnR1
R1(configrouter)#nobgpalwayscomparemed
R1(configrouter)#nobgpbestpathaspathignore
OnR4
ToconfigureR4togiveaMEDvalueof100toR1
OnR1
R1#Showipbgp
rRIBfailure,SStale
*>1.0.0.0 0.0.0.00 32768i
*>2.0.0.0131.1.12.20 0200i
*3.0.0.0 131.1.14.4100 0400300i
*> 131.1.12.2 0200300i
*>4.0.0.0131.1.14.4100 0400i
*>11.0.0.0 0.0.0.00 32768i
*>22.0.0.0131.1.12.20 0200i
*33.0.0.0 131.1.14.4100 0400300i
*> 131.1.12.2 0200300i
NoteR1takesthepathwiththelowerMEDvalue,inthiscaseR2.

OnR1
R1(configrouter)#bgpbestpathmedmissingasworst
NotetheabovecommandtellsBGPtosetthepathwiththemissingMEDtobethe
worstpath.
OnR1
R1#Showipbgp
rRIBfailure,SStale
*>1.0.0.00.0.0.0032768i
*>2.0.0.0131.1.12.200200i
* 131.1.14.41000400300200i
*3.0.0.0131.1.12.242949672950200300i
*>131.1.14.41000400300i
*4.0.0.0131.1.12.242949672950200300400i
*>131.1.14.41000400i
*>11.0.0.00.0.0.0032768i
*>22.0.0.0 131.1.12.200200i
*131.1.14.41000400300200i
*33.0.0.0131.1.12.242949672950200300i
*> 131.1.14.41000400300i
NoteR1takesthepaththroughR4togetalltheroutesexceptthenetwork/s
advertisedbyR2.Canyouguessthecommandtofixthissituation?
Ifyoucannotthinkofthecommandtoresolvethisproblem,doNOTsignupfor
thelabexamyet(justkidding),checkthesolutionintask7.
Task 9

Lab10
FilteringRoutesUsingAccesslistsand
Prefixlists
R1 R2
S0/0S0/0
R4 R3
F0/0F0/0
S0/0 S0/0
FrameRelay
LabSetup:
Ipaddressing:

R1 Lo0 1.1.0.1/24 100
Lo1 1.1.1.1/24
Lo2 1.1.2.1/24
Lo3 1.1.3.1/24
Lo4 1.1.4.1/24

R2 Lo0 2.2.2.2/8 200
Lo1 22.2.2.2/8
R3 Lo0 3.3.3.3/8 300
Lo1 33.3.3.3/8
R4 Lo0 4.4.4.4/8 400
Task1
ConfigureBGPontheroutersaccordingtotheabovechartandthediagram.TheBGP
routersshouldonlyadvertisetheirLoopbackinterfacesinBGP.Ensurethattherouters
canreachalltheadvertisednetworksinthistopology.
protocol.
OnR1
R1(configrouter)#netw1.1.0.0 mask255.255.255.0
OnR2
OnR3
R3(configrouter)#neighbor131.1.34.4 remoteas 400
OnR4
R4(configrouter)#neighbor131.1.34.3 remoteas 300
OnR4
R4#Showipbgp
rRIBfailure,SStale
*>1.1.0.0/24131.1.14.100100i
*>1.1.1.0/24131.1.14.1 00100i
*>1.1.2.0/24131.1.14.100100i
*>1.1.3.0/24131.1.14.100100i
*>1.1.4.0/24131.1.14.10 0100i
*>2.0.0.0131.1.14.10100200i
*>3.0.0.0131.1.14.10100300i
*>4.0.0.00.0.0.0032768i
*>22.0.0.0131.1.14.10100200i
*>33.0.0.0131.1.14.10100300i
Task2
ConfigureR2toblocknetwork1.1.4.0/24fromgettingintoitsroutingandBGPtables.
Usedistributelistandaccesslisttoaccomplishthistask.
OnR2
R2(config)#accesslist4deny 1.1.4.00.0.0.255
R2(configrouter)#neighbor131.1.12.1distributelist4in
R2(configrouter)#neighbor131.1.23.3distributelist4in
Notethetrickypartwastounderstandthetopology,ifthetopologyinnot
understoodsillymistakescanoccurwhichcancostyoupoints.Thetrickypartof
thistaskistoblocktheprefixfrombothneighbors.
Task 3
Removetheconfigurationcommandfromprevioustask,andaccomplishthesametask
usingprefixlistanddistributelist.
OnR2
R2(configrouter)#noneighbor131.1.12.1 distributelist1in
R2(configrouter)#noneighbor131.1.23.3 distributelist1in
R2(config)#ipprefixlistTESTseq5deny1.1.4.0/24
R2(config)#ipprefixlistTESTseq10permit0.0.0.0/0le32
R2(configrouter)#neighbor131.1.12.1prefixlistTESTin
R2(configrouter)#neighbor131.1.23.3prefixlistTESTin
Notetherearemanywaystoaccomplishagiventask,understandingand
rememberingthedifferentwayscanbethekeytosuccess.
Task 4
ConfigureR3inAS300toblocknetwork22.0.0.0/8fromenteringitsroutingandBGP
table.DoNOTusedistributelistorprefixlist.Aroutemapandanaccesslistshouldbe
usedtoaccomplishthistask.Usingaroutemapandanaccesslistaccomplishthistaskin
anotherway.
OnR3
R3(config)#accesslist22deny22.0.0.0
Notethesametaskcanbeaccomplishedinanotherway:
R3(config)#routemapTESTdeny10
Task5

Lab11
RegularExpressions
R1 R2
S0/0 S0/0
FrameRelay F0/0
R4 R3
F0/0
S0/0S0/0
FrameRelay
LabSetup:
pointmanner.

Ipaddressing:

R1 Lo0 1.1.1.1/8 100
R2 Lo0 2.2.2.2/8 200
131.1.23.2/24
R3 Lo0 3.3.3.3/8 300
R4 Lo0 4.4.4.4/8 400
Task 1
ConfigureBGPontheroutersandONLYadvertisetheirLoopbackinterface/sinBGP.
EnsurethattheroutershaveNLRItoeveryadvertisedLoopbackinterfaceinthis
topology.
EnsurethattheroutersONLYadvertisetheirlinks(131.1.12.0/24,131.1.23.0/24,and
131.1.34.0/24)inRIPv2,disableautosummaryinRIPv2routingprotocol.
OnR1
OnR2
OnR3
OnR4
R4(configrouter)#neighbor131.1.34.3remote300
OnR1
R1#Showipbgp
rRIBfailure,SStale
*>1.0.0.00.0.0.0032768i
*>2.0.0.0131.1.12.200200i
*>3.0.0.0131.1.12.2 0200300i
*>4.0.0.0131.1.12.20200300400i

Task 2
ConfigureR1suchthatitblocksalltheprefixesthatoriginatedinAS300.
OnR1
R1(config)#ipaspathaccesslist1deny_300$
R1(config)#ipaspathaccesslist1permit.*
R1(configrouter)#neighbor131.1.12.2filterlist1in
Task 3
Removetheconfigurationcommand/sfromthepreviousLabbeforeproceedingtothe
nexttask.
OnR1
R1(config)#noipaspathaccesslist1
R1(configrouter)#noneighbor131.1.12.2filterlist1in
Task5
ConfigureR1suchthattheyblockalltheprefixesthattraversedthroughAS300.
OnR1
R1(config)#ipaspathaccesslist1deny_300_
Task6
RemovetheconfigurationcommandfromthepreviousLabbeforeproceedingtothenext
task.

OnR1
Task7
ConfigureR3suchthatitdoesntadvertisetheprefixesthatoriginatedinitsownASto
anyofitsneighbors.
OnR3
R3(config)#ipaspathaccesslist1deny^$
R3(configrouter)#neighbor131.1.23.2filterlist1out
R3(configrouter)#neighbor131.1.34.4filterlist1out
Task8
task.
OnR3
R3(config)#noipaspathaccesslist1deny^$
R3(configrouter)#noneighbor131.1.23.2filterlist1out
R3(configrouter)#noneighbor131.1.34.4filterlist1 out
Task9
ConfigureR3suchthatitblocksalltheprefixesfromitsneighboringAS200.

OnR3
R3(config)#ipaspathaccesslist1deny^200$
Task10
task.
OnR3
Task11
ConfigureR3suchthatitblocksalltheprefixesfromitsexistingandfuturedirectly
connectedneighbors.
OnR3
R3(config)#ipaspathaccesslist1deny^[09]+$
Task12
task.

OnR3
Task13
ConfigureR1suchthatitblocksalltheprefixesthatoriginatedinAS300andtraversed
throughAS200.
OnR1
R1(config)#ipaspathaccesslist1deny_200_300$
Task14


Ccie Routing Switching

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Ccie Routing Switching

Uploaded by

Copyright:

Available Formats

CCIEROUTING&SWITCHING

CCIER&SbyNarbikKocharians FREE LabsPage 1 of338

CCIER&SbyNarbikKocharians FREE LabsPage 2 of338

F0/22F0/21 F0/21 F0/22

CCIER&SbyNarbikKocharians FREE LabsPage 3 of338

CCIER&SbyNarbikKocharians FREE LabsPage 4 of338

Port ModeEncapsulationStatus Nativevlan

CCIER&SbyNarbikKocharians FREE LabsPage 5 of338

Note,ifa domainnameisnotassignedtotheswitchesand thedefaultnameof

CCIER&SbyNarbikKocharians FREE LabsPage 6 of338

CCIER&SbyNarbikKocharians FREE LabsPage 7 of338

CCIER&SbyNarbikKocharians FREE LabsPage 8 of338

RouterInterface VLANnumber CATSwitchesPort

CCIER&SbyNarbikKocharians FREE LabsPage 9 of338

CCIER&SbyNarbikKocharians FREE LabsPage 10 of338

CCIER&SbyNarbikKocharians FREE LabsPage 11 of338

CCIER&SbyNarbikKocharians FREE LabsPage 13 of338

EnsurethatCat1 istherootbridgefortheVLANs12,34andCat2 istherootbridgefor

CCIER&SbyNarbikKocharians FREE LabsPage 16 of338

keywordisamacrothatreducestheBIDofthe switchforagivenVLANbyavalueof 8192

BridgeID Priority24588 (priority24576sysidext12)

CCIER&SbyNarbikKocharians FREE LabsPage 18 of338

BridgeID Priority24632 (priority24576sysidext56)

CCIER&SbyNarbikKocharians FREE LabsPage 19 of338

CCIER&SbyNarbikKocharians FREE LabsPage 20 of338

CCIER&SbyNarbikKocharians FREE LabsPage 21 of338

CCIER&SbyNarbikKocharians FREE LabsPage 22 of338

CCIER&SbyNarbikKocharians FREE LabsPage 23 of338

InterfaceFilterState Upper LowerCurrent

CCIER&SbyNarbikKocharians FREE LabsPage 24 of338

CCIER&SbyNarbikKocharians FREE LabsPage 25 of338

CCIER&SbyNarbikKocharians FREE LabsPage 26 of338

CCIER&SbyNarbikKocharians FREE LabsPage 28 of338

Interface MACAddedTrap MACRemovedTrap

CCIER&SbyNarbikKocharians FREE LabsPage 29 of338

CCIER&SbyNarbikKocharians FREE LabsPage 30 of338

CreateVLANs30,31and32on Cat1 andensurethattheseVLANscannottraversethe

CCIER&SbyNarbikKocharians FREE LabsPage 31 of338

CCIER&SbyNarbikKocharians FREE LabsPage 32 of338

CCIER&SbyNarbikKocharians FREE LabsPage 33 of338

CCIER&SbyNarbikKocharians FREE LabsPage 34 of338

PortF0/17 on Cat1 isconnectedtoaCisco7960IPPhone.Voicetrafficthatoriginates

CCIER&SbyNarbikKocharians FREE LabsPage 37 of338

Hello Max Fwd

CCIER&SbyNarbikKocharians FREE LabsPage 39 of338

Root Hello Max Fwd

Root Hello Max Fwd

MST110019.56db.9400 2000002 2015Fa0/19

CCIER&SbyNarbikKocharians FREE LabsPage 41 of338

CCIER&SbyNarbikKocharians FREE LabsPage 42 of338

CCIER&SbyNarbikKocharians FREE LabsPage 45 of338

Switchoneisconfiguredas Switchtwoisconfiguredas WillanEtherChannel

CCIER&SbyNarbikKocharians FREE LabsPage 49 of338

CCIER&SbyNarbikKocharians FREE LabsPage 50 of338

CCIER&SbyNarbikKocharians FREE LabsPage 51 of338

CCIER&SbyNarbikKocharians FREE LabsPage 52 of338

Routers IPaddress LocalDLCI Connectingto:

CCIER&SbyNarbikKocharians FREE LabsPage 53 of338

CCIER&SbyNarbikKocharians FREE LabsPage 54 of338

CCIER&SbyNarbikKocharians FREE LabsPage 55 of338

CCIER&SbyNarbikKocharians FREE LabsPage 56 of338

CCIER&SbyNarbikKocharians FREE LabsPage 57 of338

CCIER&SbyNarbikKocharians FREE LabsPage 60 of338