Lab :BGP-II

Task

 Configure IP Address as per given in topology. Make sure all routers have four loopbacks (e.g. on R1 L1
1.1.1.1/24 L2 1.1.2.1/24.)
 Configure IBGP as per given in topology and advertise first two loopbacks in IBGP Domain.
 Configure HSRP on R5 and R6. Use Virtual IP as 192.168.20.254 and MD5 authentication key as
"N3tW@x!ab".
 Configure Server as per given in topology. Make sure Routers who participate in BGP 100 will ping
netwaxlab and blog.eincop.com
 Configure BGP as per given in topology. Also Configure Sub BGP in BGP 1000.
 Make sure Loopback which is participating in BGP domains will communicate each other’s.
 Make sure OSPF Area 0 authenticate with MD5 using "N3tW@x!ab" key.
 Configure BGP authentication between R4 and R6 using "N3tW@x!ab" key.
 On R9, R14 is the best path for networks 8.8.1.0, 8.8.2.0, 8.8.3.0 and 8.8.4.0.
 R11 receives all the routes from R8. Expect their own BGP domain.
Lab :BGP-II
Solution
Task 2: Configure IBGP as per given in topology and advertise first two loopbacks in IBGP Domain.

R1

router ospf 1
router-id 1.1.1.1
network 1.1.1.0 0.0.0.255 area 0
network 1.1.2.0 0.0.0.255 area 0
network 10.0.13.0 0.0.0.255 area 0
network 10.0.14.0 0.0.0.255 area 0
exit

R2

router ospf 1
router-id 2.2.2.2
network 2.2.1.0 0.0.0.255 area 0
network 2.2.2.0 0.0.0.255 area 0
network 10.0.23.0 0.0.0.255 area 0
network 10.0.24.0 0.0.0.255 area 0
exit

R3

router ospf 1
router-id 3.3.3.3
network 3.3.1.0 0.0.0.255 area 0
network 3.3.2.0 0.0.0.255 area 0
network 10.0.13.0 0.0.0.255 area 0
network 10.0.23.0 0.0.0.255 area 0
exit

R4

router ospf 1
router-id 4.4.4.4
network 4.4.1.0 0.0.0.255 area 0
network 4.4.2.0 0.0.0.255 area 0
network 10.0.14.0 0.0.0.255 area 0
network 10.0.24.0 0.0.0.255 area 0
network 20.0.45.0 0.0.0.255 area 1
network 20.0.46.0 0.0.0.255 area 1 exit
R5

router ospf 1
router-id 5.5.5.5
network 5.5.1.0 0.0.0.255 area 1
network 5.5.2.0 0.0.0.255 area 1
network 20.0.45.0 0.0.0.255 area 1
network 192.168.20.0 0.0.0.255 area 1
exit

R6

router ospf 1
router-id 6.6.6.6
network 6.6.1.0 0.0.0.255 area 1
network 6.6.2.0 0.0.0.255 area 1
network 20.0.46.0 0.0.0.255 area 1
network 192.168.20.0 0.0.0.255 area 1
exit

R11

router eigrp 100

network 10.0.112.0 0.0.0.255
network 10.0.113.0 0.0.0.255
network 11.11.1.0 0.0.0.255
network 11.11.2.0 0.0.0.255
no auto-summary

R12

router eigrp 100

network 10.0.112.0 0.0.0.255
network 10.0.114.0 0.0.0.255
network 12.12.1.0 0.0.0.255
network 12.12.2.0 0.0.0.255
no auto-summary

R13

router eigrp 100

network 10.0.113.0 0.0.0.255
network 13.13.1.0 0.0.0.255
network 13.13.2.0 0.0.0.255
no auto-summary

R14

router eigrp 100

network 10.0.114.0 0.0.0.255
network 14.14.1.0 0.0.0.255
network 14.14.2.0 0.0.0.255
no auto-summary

Task 3: Configure HSRP on R5 and R6. Use Virtual IP as 192.168.20.254 and MD5 authentication key as
"N3tW@x!ab".

R5

int f0/0
standby 1 ip 192.168.20.254
standby 1 priority 101
standby 1 preempt
standby 1 authentication md5 key-string N3tW@x!ab
exit

R6

int f1/0
standby 1 ip 192.168.20.254
standby 1 priority 99
standby 1 preempt
standby 1 authentication md5 key-string N3tW@x!ab
exit

Task 4: Configure Server as per given in topology. Make sure Routers who participate in BGP 100 will ping
netwaxlab and blog.eincop.com

R6

int l1
ip add 99.99.99.100 255.255.255.0

int l2
ip add 99.99.98.11 255.255.255.0

R4, R5 and R6

ip domain lookup
ip name-server 192.168.20.200

Task 5: Configure BGP as per given in topology. Also Configure Sub BGP in BGP 1000. (Task 6 will also
complete in this task).

R1

router bgp 100

no synchronization
bgp log-neighbor-changes
network 1.1.3.0 mask 255.255.255.0
network 1.1.4.0 mask 255.255.255.0
neighbor 10.0.13.3 remote-as 100
neighbor 10.0.14.4 remote-as 100
neighbor 10.0.14.4 route-reflector-client
neighbor 10.0.14.4 next-hop-self
no auto-summary

R2

router bgp 100

no synchronization
bgp log-neighbor-changes
network 2.2.3.0 mask 255.255.255.0
network 2.2.4.0 mask 255.255.255.0
neighbor 10.0.23.3 remote-as 100
neighbor 10.0.24.4 remote-as 100
neighbor 10.0.24.4 route-reflector-client
neighbor 10.0.24.4 next-hop-self
no auto-summary

R3

router bgp 100

no synchronization
bgp log-neighbor-changes
network 3.3.3.0 mask 255.255.255.0
network 3.3.4.0 mask 255.255.255.0
neighbor 7.7.1.1 remote-as 200
neighbor 7.7.1.1 ebgp-multihop 2
neighbor 7.7.1.1 update-source Loopback1
neighbor 8.8.1.1 remote-as 1422
neighbor 8.8.1.1 ebgp-multihop 2
neighbor 8.8.1.1 update-source Loopback1
neighbor 10.0.13.1 remote-as 100
neighbor 10.0.13.1 next-hop-self
neighbor 10.0.23.2 remote-as 100
neighbor 10.0.23.2 route-reflector-client
neighbor 10.0.23.2 next-hop-self
neighbor 10.0.37.7 remote-as 200
neighbor 10.0.38.8 remote-as 1422
no auto-summary

R4

router bgp 100

no synchronization
bgp log-neighbor-changes
network 4.4.3.0 mask 255.255.255.0
network 4.4.4.0 mask 255.255.255.0
neighbor 10.0.14.1 remote-as 100
neighbor 10.0.14.1 route-reflector-client
neighbor 10.0.14.1 next-hop-self
neighbor 10.0.24.2 remote-as 100
neighbor 10.0.24.2 route-reflector-client
neighbor 10.0.24.2 next-hop-self
neighbor 20.0.45.5 remote-as 100
neighbor 20.0.45.5 route-reflector-client
neighbor 20.0.45.5 next-hop-self
neighbor 20.0.46.6 remote-as 100
neighbor 20.0.46.6 route-reflector-client
neighbor 20.0.46.6 next-hop-self

no auto-summary

R5

router bgp 100

no synchronization
bgp log-neighbor-changes
network 5.5.3.0 mask 255.255.255.0
network 5.5.4.0 mask 255.255.255.0
network 192.168.20.0
neighbor 20.0.45.4 remote-as 100
no auto-summary

R6

router bgp 100

no synchronization
bgp log-neighbor-changes
network 6.6.3.0 mask 255.255.255.0
network 6.6.4.0 mask 255.255.255.0
network 99.99.98.0 mask 255.255.255.0
network 99.99.99.0 mask 255.255.255.0
network 192.168.20.0
neighbor 9.9.1.1 remote-as 1330
neighbor 9.9.1.1 ebgp-multihop 2
neighbor 9.9.1.1 update-source Loopback1
neighbor 10.0.69.9 remote-as 1330
neighbor 10.10.1.1 remote-as 400
neighbor 10.10.1.1 ebgp-multihop 2
neighbor 10.10.1.1 update-source Loopback1
neighbor 20.0.46.4 remote-as 100
neighbor 20.0.46.4 next-hop-self
no auto-summary

R7

router bgp 200

no synchronization
bgp log-neighbor-changes
network 7.7.1.0 mask 255.255.255.0
network 7.7.2.0 mask 255.255.255.0
network 7.7.3.0 mask 255.255.255.0
network 7.7.4.0 mask 255.255.255.0
network 10.0.0.0 mask 255.255.255.0
network 20.0.0.0 mask 255.255.255.0
neighbor 3.3.1.1 remote-as 100
neighbor 3.3.1.1 ebgp-multihop 2
neighbor 3.3.1.1 update-source Loopback1
neighbor 10.0.37.3 remote-as 100
no auto-summary

R8

router bgp 1422

no synchronization
bgp log-neighbor-changes
network 8.8.1.0 mask 255.255.255.0
network 8.8.2.0 mask 255.255.255.0
network 8.8.3.0 mask 255.255.255.0
network 8.8.4.0 mask 255.255.255.0
network 192.168.4.0
neighbor 3.3.1.1 remote-as 100
neighbor 3.3.1.1 ebgp-multihop 2
neighbor 3.3.1.1 update-source Loopback1
neighbor 10.0.38.3 remote-as 100
neighbor 10.0.81.11 remote-as 1000
neighbor 11.11.1.1 remote-as 1000
neighbor 11.11.1.1 ebgp-multihop 2
neighbor 11.11.1.1 update-source Loopback1
no auto-summary

R9

router bgp 1330

no synchronization
bgp log-neighbor-changes
network 9.9.1.0 mask 255.255.255.0
network 9.9.2.0 mask 255.255.255.0
network 9.9.3.0 mask 255.255.255.0
network 9.9.4.0 mask 255.255.255.0
neighbor 6.6.1.1 remote-as 100
neighbor 6.6.1.1 ebgp-multihop 2
neighbor 6.6.1.1 update-source Loopback1
neighbor 10.0.69.6 remote-as 100
neighbor 10.0.149.14 remote-as 1000
neighbor 14.14.1.1 remote-as 1000
neighbor 14.14.1.1 ebgp-multihop 2
neighbor 14.14.1.1 update-source Loopback1
no auto-summary

R10

router bgp 400

no synchronization
bgp log-neighbor-changes
network 10.10.1.0 mask 255.255.255.0
network 10.10.2.0 mask 255.255.255.0
network 10.10.3.0 mask 255.255.255.0
network 10.10.4.0 mask 255.255.255.0
neighbor 6.6.1.1 remote-as 100
neighbor 6.6.1.1 ebgp-multihop 2
neighbor 6.6.1.1 update-source Loopback1
neighbor 10.0.60.0 remote-as 100
no auto-summary

R11

router bgp 1000

no synchronization
bgp log-neighbor-changes
bgp confederation identifier 1000
bgp confederation peers 230
network 11.11.3.0 mask 255.255.255.0
network 11.11.4.0 mask 255.255.255.0
neighbor 8.8.1.1 remote-as 1422
neighbor 8.8.1.1 ebgp-multihop 2
neighbor 8.8.1.1 update-source Loopback1
neighbor 10.0.81.8 remote-as 1422
neighbor 10.0.112.12 remote-as 1000
neighbor 10.0.112.12 next-hop-self
neighbor 10.0.113.13 remote-as 230
neighbor 10.0.113.13 next-hop-self
no auto-summary

R12

router bgp 1000

no synchronization
bgp log-neighbor-changes
bgp confederation identifier 1000
bgp confederation peers 260
network 12.12.3.0 mask 255.255.255.0
network 12.12.4.0 mask 255.255.255.0
neighbor 10.0.112.11 remote-as 1000
neighbor 10.0.112.11 next-hop-self
neighbor 10.0.114.14 remote-as 260
neighbor 10.0.114.14 next-hop-self
no auto-summary

R13

router bgp 230

no synchronization
bgp log-neighbor-changes
bgp confederation identifier 1000
bgp confederation peers 1000
network 13.13.3.0 mask 255.255.255.0
network 13.13.4.0 mask 255.255.255.0
neighbor 10.0.113.11 remote-as 1000
no auto-summary

R14

router bgp 260

no synchronization
bgp log-neighbor-changes
bgp confederation identifier 1000
bgp confederation peers 1000
network 14.14.3.0 mask 255.255.255.0
network 14.14.4.0 mask 255.255.255.0
neighbor 9.9.1.1 remote-as 1330
neighbor 9.9.1.1 ebgp-multihop 2
neighbor 9.9.1.1 update-source Loopback1
neighbor 10.0.114.12 remote-as 1000
neighbor 10.0.114.12 next-hop-self
neighbor 10.0.149.9 remote-as 1330
no auto-summary

Task 6: Already completed in above task.

Task 7: Make sure OSPF Area 0 authenticate with MD5 using "N3tW@x!ab" key.

R1

router ospf 1
area 0 authentication
exit

int se0/0
ip ospf authentication message-digest
ip ospf message-digest-key 10 md5 N3tW@x!ab
exit

int se0/1
ip ospf authentication message-digest
ip ospf message-digest-key 10 md5 N3tW@x!ab
exit

R2

router ospf 1
area 0 authentication
exit

int se0/0
ip ospf authentication message-digest
ip ospf message-digest-key 10 md5 N3tW@x!ab
exit

int se0/1
ip ospf authentication message-digest
ip ospf message-digest-key 10 md5 N3tW@x!ab
exit

R3

router ospf 1
area 0 authentication
exit
int se0/0
ip ospf authentication message-digest
ip ospf message-digest-key 10 md5 N3tW@x!ab
exit

int se0/1
ip ospf authentication message-digest
ip ospf message-digest-key 10 md5 N3tW@x!ab
exit

R4

router ospf 1
area 0 authentication
exit

int se0/0
ip ospf authentication message-digest
ip ospf message-digest-key 10 md5 N3tW@x!ab
exit

int se0/1
ip ospf authentication message-digest
ip ospf message-digest-key 10 md5 N3tW@x!ab
exit

Task 8: Configure BGP authentication between R4 and R6 using "N3tW@x!ab" key.

R4

router bgp 100

neighbor 20.0.46.6 password N3tW@x!ab
exit

R6

router bgp 100

neighbor 20.0.46.4 password N3tW@x!ab
exit
Task 9: On R9, R14 is the best path for networks 8.8.1.0, 8.8.2.0, 8.8.3.0 and 8.8.4.0.

R9

access-list 10 permit 8.8.1.0 0.0.0.255 access-list 10 permit 8.8.2.0 0.0.0.255 access-list 10 permit 8.8.3.0
0.0.0.255 access-list 10 permit 8.8.4.0 0.0.0.255

route-map R8 permit 10
match ip address 10
set local-preference 500
exit

route-map R8 permit 20
exit

router bgp 1330

neighbor 10.0.149.14 route-map R8 in
exit

Task 10: R11 receives all the routes from R8. Expect their own BGP domain.

R11

access-list 10 permit 9.9.1.0 0.0.0.255 access-list 10 permit 9.9.2.0 0.0.0.255 access-list 10 permit 9.9.3.0
0.0.0.255 access-list 10 permit 9.9.4.0 0.0.0.255

route-map R9 permit 10
match ip address 10
set weight 1500
exit

route-map R9 permit 20
exit

router bgp 1000

neighbor 10.0.81.8 route-map R9 in
exit