Tài liệu CINCI-CCIE-LAB-SCENARIO 1 pptx

TIME: 45 minutes 2.4 Configure OSPF on your network as per Diagram 3.. • Configure OSPF on Grumpy, Sneezy, Happy, and Sleepy.. TIME: 45 minutes IGRP Configuration and Redistribution 2.5

CVG-CCIE Practice Lab

Physical Layout

Diagram 1

Frame Relay

L0

Happy

S 1

S 0

E 0

Token Ring

Grumpy

Dopey

Sleepy

S 0

These routers are physically connected together as shown

Token Ring

E0 E0

E0

S 0

S 0

S 0 E0

T0

T0

S3

S0 Sneezy

ISDN

BRI 0

BRI 0

Dopey Sleepy

E0

Line 3

Line 4

Comm Server ASET #3 2511

IP Address: 216.68.103.150

Comm Server Setup

Diagram 2

Line 1

Line 2 Sneezy

Happy

Line 5

Routing Topology

Diagram 3

Frame Relay

L0 Happy

S 1

S 0

E 0

Token Ring 2

Grumpy

Dopey

Sleepy

S 0

Token Ring 1

E0 E0

E0

S 0

S 0

S 0 E0

T0

T0

S3

S0 Sneezy

ISDN

BRI 0

BRI 0

RIP

OSPF Backbone Area

IGRP

EBGP VLAN 3

VLAN 2

IBGP

EIGRP

Area 2

Area 3

Area 4

Lab 1 Communications Server Setup / Network Connections

• The Communications Server is cabled as shown on the previous diagram

• For the purposes of this practice lab, you are coming into a pre-configured communications server To see the hosts names type “show hosts” and you will be presented a list of them Ordinarily you will configure the Communications Server so that when you type the name of a router on the Server you are connected to the console port of that respective router You should know how to do this

• Review all of the steps in the following labs and create a network diagram on

a separate piece of paper Include the network numbers, network address ranges, and subnet mask for each network on the diagram

TIME: 20 minutes

Lab 2

IP Routing Configuration

The objective of this lab is to configure OSPF/IGRP/EIGRP/BGP/RIP in different parts of the network and to redistribute routing information In the working setup all routers should see every route and should be able to ping any interface in the

network Do NOT configure static routes to accomplish this.

Topology and Basic IP Setup

You will be using the CLASS B network 170.100.0.0 Thus all your addresses

should look like 170.100.X.X Do not use static routes for IP on any router.

2.1 Refer to the Frame-Relay Switch configuration for the DLCI's 2.2 Configure IP across the Frame Relay network:

• Use a 24-bit subnet mask

• Configure Sleepy using two sub-interfaces Use a sub-interface for the connection to Dopey and use one sub-interface for the connection

to Grumpy and Sneezy Do not configure sub-interfaces for Dopey, Grumpy or Sneezy

• Confirm connectivity across the Frame Relay network by pinging from

Grumpy to Sleepy, Grumpy to Sneezy.

TIME: 20 minutes

2.3 Configure IP across the remaining interfaces:

• Configure Dopey's Ethernet 0 to ip address 170.100.200.1 with a 24 bit subnet mask

• Subnet Token Ring 0 on Sneezy such that it has 6 host addresses

• Subnet the Loopback 0 on Happy such that it has 30 host addresses

• Configure ip addresses for VLAN2 and VLAN3 VLAN2 ip address 170.100.42.241, allow 14 hosts, VLAN3 use a 24-bit subnet mask

• Configure an ip address for Dopey's Token Ring 0 with a mask that will allow 254 host on the network Dopey's interface address is 170.100.51.33

• Configure the ISDN link between Sleepy and Grumpy with a 28-bit subnet mask Verify pings from Sleepy and Grumpy

• Configure ISDN using these numbers:

Port1 SPID1 0835866101 DN 835-8661

Port1 SPID2 0835866301 DN 835-8663

Port2 SPID1 0835866201 DN 835-8662

Port2 SPID2 0835866401 DN 835-8664

• Switch type is NI1 Grumpy should be set up as the dialer when it’s serial link goes down

• Configure Grumpy to use ISDN as a backup link, when the frame-relay connection to Sleepy is lost

• Verify that you have basic IP setup by pinging the local interfaces that you have just configured

TIME: 45 minutes

2.4 Configure OSPF on your network as per Diagram 3.

• Configure OSPF on Grumpy, Sneezy, Happy, and Sleepy Refer to

Diagram 3 for area designations.

• Ensure that Grumpy can ping Happy’s Loopback 0 interface Also

ensure that Sleepy can ping Grumpy’s Ethernet 0 interface

TIME: 45 minutes

IGRP Configuration and Redistribution

2.5 Configure IGRP on your network as per Diagram 3.

• Configure IGRP on Sleepy’s serial sub-interface and Dopey’s Serial 0

• Make sure that these are the ONLY interfaces that are advertising IGRP

• Redistribute OSPF into IGRP on Sleepy

• Verify that Dopey can ping all interfaces in the OSPF domain

TIME: 45 minutes

EIGRP Configuration and Redistribution

• Configure EIGRP on Sneezy’s Token Ring 0.

• Make sure that this is the ONLY interface that is advertising EIGRP

• Redistribute OSPF into EIGRP and EIGRP into OSPF

TIME: 30 minutes

RIP:

• Configure Happy with RIP on E0 (Refer to diagram) Redistribute to allow full network connectivity

• You will be able to see RIP bringing in several routes from outside the system These routes will be network 210.200.20.0, 211.200.20.0,

212.200.20.0, 193.14.12.0, and network 170.100.0.0 Make sure that the only route that Happy accepts from RIP is the network 193.14.12.0 Also make sure that no routes are being advertised into Backbone 1 from Grumpy or any connected network (refer to the diagram)

TIME: 10 minutes

BGP Configuration

2.7 Configure BGP on Dopey and Grumpy:

• Configure Grumpy and Dopey to be IBGP neighbors Configure BGP

on Dopey and Grumpy with an AS of 10 Configure Dopey such that it will pass routes to an EBGP neighbor (170.100.200.7) with an AS of 4

• Configure BGP supernetting using ip address 170.0.0.0, this is to be advertised to AS 4 only Verify that there are no update problems with this being advertised back into your IGP and BGP

• Make sure that the proper BGP routes are seen by Grumpy

TIME: 30 minutes

2.8 BGP Route Filter

• You will notice a number of networks coming in from outside the network from AS 4 These networks are network 14.0.0.0, network 129.14.0.0, 130.14.0.0, 131.14.0.0, and network 196.12.14.0

Configure a filter on Dopey such that the only route now seen on Grumpy is 196.12.14.0

• Make sure that the only external BGP route that is accepted by Dopey

is that of the network 196.12.14.0

TIME: 15 minutes

Network Address Translation

• Configure NAT on vlan2 Host addresses are 1.1.1.1 to 1.1.1.253 Use the valid 14-host network on Sleepy's E0 as the valid addresses (into the rest of the network) Make sure that all 253 addresses could be

translated simultaneously

• Make sure that the other routers see the 170.100.42.x route but not the 1.1.1.0 network Verify that the 1.1.1.x addresses actually translate

without removing the 170.100.42.x address from vlan 2

TIME: 15 minutes

HSRP

• Configure HSRP between Grumpy and Sneezy Make sure that no

connections are lost when the frame-relay links on either of the routers goes down

• Make sure that Grumpy is configured as the active router

TIME: 10 minutes

IP FIREWALL

Configure an inbound access-list on Dopey’s Token Ring 0

• Telnet sessions are permitted only if originated from Happy’s Ethernet interface subnet

• FTP sessions are permitted only if established from Dopey’s Token 0 subnet

• TFTP is permitted both ways allowed

• SMTP is not allowed

• WWW is not allowed

• PING is permitted from everywhere

TIME: 30 minutes

Lab 3 Appletalk Routing Configuration

3.1 Appletalk configuration:

• Configure all lan ports for appletalk routing

• Configure Appletalk EIGRP across the OSPF core only

• Configure 2 tunnels: Sleepy to Grumpy and Sleepy to Dopey

TIME: 45 minutes

3.2 Appletalk filter:

• Configure a filter on Dopey such that it only sees routes and zones from Grumpy

• Filter AppleTalk Zone’s on Sneezy such that users on the token ring will only see its own zone

TIME: 45 minutes

Lab 4 IPX Routing Configuration

4.1 IPX configuration:

• Enable IPX routing on all routers

• Configure all ports for IPX

• Configure IPX EIGRP across the frame-relay network

• Verify that all routes appear in each router

• Verify that you can IPX ping from any router to any other router

TIME: 45 minutes

4.2 IPX SAP configuration and filter:

• Configure two static SAPs on Dopey, one print server and one file sever

• Verify that these two SAPs appear in Grumpy’s SAP table

• Configure a filter on Grumpy such that it can see only one of the static SAPs

• Verify that Grumpy can now only see one of Dopey’s static SAPs in his SAP table

TIME: 45 minutes

4.3 IPX route filter:

• Configure a filter on Sneezy such that the only IPX routes it sees are Dopey’s Token

• Verify that only this one route appears in Sneepy’s route table

TIME: 30 minutes

Lab 5 DLSw Configuration

5.1 DLSw configuration:

• Configure DLSw between Dopey’s token 0 and Sleepy's Ethernet 0, and Sneezy's token 0

• Verify that the DLSw peers are in the connected state

TIME: 20 minutes

5.2 DLSw protocol filter:

• Configure a filter such that the only protocol that is transported via DLSw is NetBIOS

• Apply this filter to the DLSw remote peer statement on Dopey

TIME: 20 minutes

5.3 DLSw mac filter:

• Change the DLSw configuration such that Sneezy informs all his

peers that the only mac address that Sneezy can reach is

4000.3725.0101

• Verify that your configuration is correct by checking the peer

capabilities

TIME: 20 minutes

Lab 6 Multicast IP Configuration

6.1 Multicast IP configuration:

• Configure ip multicast such that a multicast server on VLAN 2 can send multicast packets to receivers on VLAN 3 and Token 1

TIME: 15 minutes

Lab 7 Queueing

7.1 Queueing

Configure a custom queue from Dopey to Sleepy that will permit IPX traffic and IP traffiic to have 30% of the bandwidth per protocol and then dedicate all other traffic to the remaining 30%

TIME: 15 minutes