• Confirm connectivity across the Frame Relay network by pinging from Grumpy to Sleepy and Grumpy to Shorn.. TIME: 30 minutes 2.2 Configure IP across the ISDN link: • Grumpy is connec
Trang 1SE Practice
CCIE Lab
Trang 2E0
Frame Relay
2524 Sleepy
DLCI 101
DLCI 100
2524
Grumpy
S0 E0
S1/1
S1/2 S1/0 S0
Dopey
E0
E0
Physical Layout
Diagram 1
Shorn
DLCI 100
DLCI 102 S1
2511
3620
S0
S0
E0/0
ISDN
2513 Happy
2513
TO 0
TO 0
S0 S1
Trang 3Dopey IP address
171.68.39.15/24
E0
2513
Happy
2524
Sleepy
2513
Shorn
Line 1
Line 2 Line 3
Line 5
3620
Frame-Switch
Comm Server Setup Diagram 2
2511
2524
Grumpy
Line 4
Trang 4Topology
Diagram 3
E0
ISDN
2524 Sleepy
DLCI 101
DLCI 100
2524
Grumpy
S0 E0
S1
S1/1
S1/2 S1/0 S0
Dopey
E0
2513
Shorn
DLCI 100
DLCI 102
2511
S0
IGRP RIP
OSPF area 0
OSPF area 1
OSPF area 0
OSPF area 2
3620
S0
Frame Relay
2513
TO 0
TO 0
area 3
S1
S0
Happy E0
E0/0
Lab 1 Communications Server Setup / Network Connections
Trang 5• The Communications Server is cabled as shown on the previous diagram
• Communication Server port 1 is connected to 2513_1 (Shorn)
• Communication Server port 2 is connected to 2513_2 (Happy)
• Communication Server port 3 is connected to 2524_1 (Sleepy)
• Communication Server port 4 is connected to 2524_2 (Grumpy)
• Communication Server port 5 is connected to a 3620 acting as a
Frame Relay Switch
• Configure the Communications Server so that when you type the name of a router on the Server you are connected to the console port of that respective router
TIME: 30 minutes
Trang 6Lab 2
IP Routing Configuration
The objective of this lab is to configure OSPF/IGRP/EIGRP/BGP in different parts of the network and to redistribute routing information
In the working setup all routers should see every route and should be
able to ping any interface in the network Do NOT configure static
routes to accomplish this
Topology and Basic IP Setup
You will be using the CLASS B network 172.17.0.0 with the 3’rd octet set to 59 Thus all your addresses should look like 172.17.59.X
Do not use static routes for IP on any router
2.0 Configure Frame Relay switch:
• Configure the frame switch with DLCI’s per the lab diagram
• Use LMI type Cisco, and encapsulation IETF
• Ports are DCE and the speed should be set to 64K
2.1 Configure IP across the Frame Relay network:
• Use a 28 bit subnet mask
• Confirm connectivity across the Frame Relay network by pinging from
Grumpy to Sleepy and Grumpy to Shorn
• Use sub-interfaces on Sleepy & Shorn Use “frame-relay map” statements on Grumpy
TIME: 30 minutes
2.2 Configure IP across the ISDN link:
• Grumpy is connected to an ISDN simulator on port 1
• Sleepy is connected to an ISDN simulator on port 2
• Switch type is NI-1
• Port 1 SPID1: 0835866101 Directory Number: 835-8661
• Port 1 SPID2: 0835866301 Directory Number 835-8663
• Port 2 SPID1: 0835866201 Directory Number: 835-8662
• Port 2 SPID2: 0835866401 Directory Number 835-8664
• Use a 28 bit subnet mask
• Configure the ISDN link such that traffic from Sleepy to Grumpy will force the ISDN line to dial, but not vice-versa
Trang 7• Confirm connectivity across the ISDN link by pinging from Sleepy to
Grumpy
TIME: 30 minutes
2.3 Configure IP across the remaining interfaces:
• Subnet Ethernet 0 on Grumpy such that it has 14 host addresses
• Set up the serial link between Grumpy and Dopey as a 64K back to
back link Use a subnet with a 28 bit mask to connect the serial ports
• Set up the serial link between Happy and Shorn as a 64K X.25 back
to back link Use a subnet with a 28 bit mask to connect the serial
ports
• Configure Shorn’s Ethernet 0 to 172.17.59.137/30
• Configure Shorn’s Token Ring 0 with a 29 bit mask
• Subnet Sleepy’s Ethernet 0 such that it has 2 hosts
• Subnet Happy’s Token Ring 0 with a 30 bit mask
• Verify that you have basic IP setup by pinging the local interfaces that you have just configured
TIME: 20 minutes
2.4 Configure OSPF on your network as per Diagram 3
• Configure OSPF on Grumpy, Shorn, Happy and Sleepy Refer to
Diagram 3 for area designations.
• Ensure that Grumpy can ping Sleepy’s Ethernet interface and Shorn’s Token Ring 0 interface Also ensure that Sleepy can ping Shorn’s
Token Ring 0 interface and Happy’s Token Ring 0 interface
TIME: 45 minutes
2.5 Configure ISDN backup of the Frame Relay network:
Trang 8• Configure Sleepy so that the ISDN line will come up if the frame relay connection fails
• Verify you are getting OSPF updates across the ISDN link
• Confirm connectivity across the backup link by pinging from Sleepy to
the rest of the network
TIME: 30 minutes
2.6 Configure OSPF MD5 Authentication
• Configure OSPF MD5 authentication between Grumpy and Sleepy
• Configure the MD5 password as “cisco”
• Ensure that Grumpy, Sleepy, and Shorn can still see all routes
TIME: 15 minutes
IGRP Configuration and Redistribution
2.7 Configure IGRP on your network as per Diagram 3
• Configure IGRP on Dopey’s Ethernet 0, and the serial link between
Dopey and Grumpy
• Make sure that these are the ONLY interfaces that are advertising IGRP
• Redistribute between OSPF and IGRP on Grumpy
• Verify that Dopey can ping all interfaces in the OSPF domain
TIME: 45 minutes
RIP Configuration and Redistribution
2.8 Configure RIP on your network as per Diagram 3
• Configure RIP on Grumpy’s Ethernet 0
• Make sure that this is the ONLY interface that is advertising RIP
• Redistribute RIP into OSPF
• Verify that Sleepy, Dopey and Shorn can ping Grumpy’s Ethernet 0
TIME: 20 minutes
BGP Configuration
Trang 92.9 Configure External BGP:
• Configure 3 loopback interfaces on the frame switch using the network addresses 150.100.0.0, 160.100.0.0, and 170.100.0.0 Configure Ethernet 0 with an IP address of 172.17.59.138 and a 30 bit mask
• Configure BGP on the frame switch with an AS number 100, and set it
up to advertise the three networks
• Configure BGP on Shorn using AS 200 Configure BGP between the frame switch and Shorn such that Shorn sees all three loopbacks configured on the frame switch
• A “show ip bgp” and “show ip route” on Shorn should show the three routes advertised by the frame switch
TIME: 30 minutes
2.10 Configure Internal BGP:
• Configure BGP between Grumpy and Shorn Make sure they are part
of the same AS
• Configure BGP on Sleepy using the same AS Configure BGP on Sleepy so that it is a neighbor to Grumpy ONLY DO NOT make Sleepy a neighbor to Shorn
• DO NOT redistribute between BGP and OSPF, RIP or IGRP
• A “show ip bgp” and “show ip route” on Grumpy and Sleepy should show the three routes advertised by the frame switch
TIME: 30 minutes
2.11 BGP Route Filter
• Configure a filter on Shorn such that the only BGP route now seen on Grumpy, Shorn and Sleepy is 150.100.0.0
TIME: 15 minutes
2.12 Change BGP Weight
• Configure Grumpy such that the weight is set to 1000 and the metric
10 for network 150.100.0.0
TIME: 20 minutes
IP FIREWALL
Trang 102.13 Configure an inbound access-list on Dopey’s Serial 0 interface
that satisfies the following criterion:
• Telnet sessions are permitted only if originated from Shorn’s ethernet interface subnet
• FTP sessions are permitted only if established from Dopey’s Ethernet 0 subnet
• TFTP is permitted both ways allowed
• SMTP is not allowed
• WWW is not allowed
• PING is permitted from everywhere
• Confirm connectivity after applying the access list Ping Dopey’s Ethernet
0 from Sleepy Also show a telnet to Dopey from Grumpy fails
TIME: 30 minutes
2.14 NTP
• Set the clock on Grumpy
• Configure Grumpy as an NTP master clock Configure Shorn so that it will update its clock from Grumpy
TIME: 15 minutes
Trang 11Lab 3 Appletalk Routing Configuration
3.1 Appletalk configuration:
• Configure all ports for appletalk Use different cable ranges and zones
on each interface
• Configure EIGRP for appletalk across the frame-relay network only
• Make sure that EIGRP is the only routing protocol running on the frame-relay network
TIME: 45 minutes
3.2 Appletalk filter:
• Configure a filter on Grumpy such that Dopey only sees routes and zones from Shorn
TIME: 25 minutes
Lab 4 Decnet Routing Configuration
4.1 Decnet configuration:
• Enable Decnet routing on all routers
• Configure Dopey to be in a separate DECnet area from the rest of the routers
• Verify that you can DEC ping from any router to any other router
TIME: 45 minutes
Lab 5
Trang 12IPX Routing Configuration
5.1 IPX configuration:
• Enable IPX routing on all routers
• Configure all ports for IPX
• Configure IPX EIGRP across the frame-relay network
• EIGRP should be the ONLY IPX protocol running on the frame-relay
• Verify that all routes appear in each router
• Verify that you can IPX ping from any router to any other router
TIME: 45 minutes
5.2 IPX SAP configuration and filter:
• Configure two static SAPs on Dopey
• Verify that these two SAPs appear in Grumpy’s SAP table
• Configure a filter on Grumpy such that it can see only one of the static SAPs
• Verify that Grumpy can now only see one of Dopey’s static SAPs in his SAP table
TIME: 45 minutes
5.3 IPX route filter:
• Configure a filter on Sleepy such that the only IPX routes it sees are Dopey’s ethernet and serial
• Verify that only these two routes appear in Sleepy’s route table
TIME: 30 minutes
Lab 6 DLSw Configuration
Trang 136.1 DLSw configuration:
• Configure DLSw between Shorn’s ethernet 0 and Sleepy’s Ethernet 0
• Verify that the DLSw peers are in the connected state
TIME: 20 minutes
6.2 DLSw protocol filter:
• Configure a filter such that the only protocol that is transported via DLSw is NetBIOS
• Apply this filter to the DLSw remote peer statement on Shorn
TIME: 20 minutes
6.3 DLSw mac filter:
• Change the DLSw configuration such that Sleepy informs all his
peers that the only mac address that Shorn can reach is
4000.3725.0101
• Verify that your configuration is correct by checking the peer
capabilities
TIME: 20 minutes