SE Practice CCIE Lab V1.0GG SE Practice CCIE Lab Cisco Systems Internal Use Only 1 SE Practice CCIE Lab V1.0GG E0 Frame Relay 2524 Sleepy DLCI 101 DLCI 100 2524 Grumpy S0 E0 S1/1 S1/2 S1/0 S0 Dopey E0 E0 Physical Layout Diagram 1 Shorn DLCI 100 DLCI 102 S1 2511 3620 S0 S0 E0/0 ISDN 2513 Happy 2513 TO 0 TO 0 S0 S1 Cisco Systems Internal Use Only 2 SE Practice CCIE Lab V1.0GG Dopey IP address 171.68.39.15/24 E0 2513 Happy 2524 Sleepy 2513 Shorn Line 1 Line 2 Line 3 Line 5 3620 Frame- Switch Comm Server Setup Diagram 2 2511 2524 Grumpy Line 4 Cisco Systems Internal Use Only 3 SE Practice CCIE Lab V1.0GG Topology Diagram 3 E0 ISDN 2524 Sleepy DLCI 101 DLCI 100 2524 Grumpy S0 E0 S1 S1/1 S1/2 S1/0 S0 Dopey E0 2513 Shorn DLCI 100 DLCI 102 2511 S0 IGRP RIP OSPF area 0 OSPF area 1 OSPF area 0 OSPF area 2 3620 S0 Frame Relay 2513 TO 0 TO 0 area 3 S1 S0 Happy E0 E0/0 RIP Lab 1 Communications Server Setup / Network Connections Cisco Systems Internal Use Only 4 SE Practice CCIE Lab V1.0GG • The Communications Server is cabled as shown on the previous diagram. • Communication Server port 1 is connected to 2513_1 (Shorn) • Communication Server port 2 is connected to 2513_2 (Happy) • Communication Server port 3 is connected to 2524_1 (Sleepy) • Communication Server port 4 is connected to 2524_2 (Grumpy) • Communication Server port 5 is connected to a 3620 acting as a Frame Relay Switch. • Configure the Communications Server so that when you type the name of a router on the Server you are connected to the console port of that respective router. TIME: 30 minutes Cisco Systems Internal Use Only 5 SE Practice CCIE Lab V1.0GG Lab 2 IP Routing Configuration The objective of this lab is to configure OSPF/IGRP/EIGRP/BGP/RIP in different parts of the network and to redistribute routing information. In the working setup all routers should see every route and should be able to ping any interface in the network. Do NOT configure static routes to accomplish this. Topology and Basic IP Setup You will be using the CLASS B network 172.17.0.0 with the 3’rd octet set to 59. Thus all your addresses should look like 172.17.59.X. Ensure that you conserve as much address space as possible for future expansion. Do not use static routes for IP on any router unless explicitly directed. 2.0 Configure Frame Relay switch: • Configure the frame switch with DLCI’s per the lab diagram. • Use LMI type Cisco, and encapsulation IETF • Ports are DCE and the speed should be set to 64K. 2.1 Configure IP across the Frame Relay network: • Use a 28 bit subnet mask. • Confirm connectivity across the Frame Relay network by pinging from Grumpy to Sleepy and Grumpy to Shorn. • Use sub-interfaces on Sleepy & Shorn. Use “frame-relay map” statements on Grumpy. TIME: 30 minutes 2.2 Configure IP across the ISDN link: • Grumpy is connected to an ISDN simulator on port 1. • Sleepy is connected to an ISDN simulator on port 2. • Switch type is NI-1 • Port 1 SPID1: 0835866101 Directory Number: 835-8661 • Port 1 SPID2: 0835866301 Directory Number 835-8663 • Port 2 SPID1: 0835866201 Directory Number: 835-8662 • Port 2 SPID2: 0835866401 Directory Number 835-8664 • Use a 28 bit subnet mask. Cisco Systems Internal Use Only 6 SE Practice CCIE Lab V1.0GG • Configure the ISDN link such that traffic from Sleepy to Grumpy will force the ISDN line to dial, but not vice-versa. • Confirm connectivity across the ISDN link by pinging from Sleepy to Grumpy. TIME: 30 minutes 2.3 Configure IP across the remaining interfaces: • Subnet Ethernet 0 on Grumpy such that it has 14 host addresses. • Set up the serial link between Grumpy and Dopey as a 64K back to back link. Use a subnet with a 28 bit mask to connect the serial ports. • Set up the serial link between Happy and Shorn as a 64K X.25 back to back link. Use a subnet with a 28 bit mask to connect the serial ports. • Configure Shorn’s Ethernet 0 to 172.17.59.137/30 and the frame switch ethernet to 172.17.59.138/30. • Configure Shorn’s Token Ring 0 with a 29 bit mask. • Subnet Sleepy’s Ethernet 0 such that it has 2 hosts. • Subnet Happy’s Token Ring 0 with a 30 bit mask. • Verify that you have basic IP setup by pinging the local interfaces that you have just configured. TIME: 20 minutes 2.4 Configure OSPF on your network as per Diagram 3. • Configure OSPF on Grumpy, Shorn, Happy and Sleepy. Refer to Diagram 3 for area designations. • Ensure that Grumpy can ping Sleepy’s Ethernet interface and Shorn’s Token Ring 0 interface. Also ensure that Sleepy can ping Shorn’s Token Ring 0 interface and Happy’s Token Ring 0 interface. TIME: 45 minutes Cisco Systems Internal Use Only 7 SE Practice CCIE Lab V1.0GG 2.5 Configure ISDN backup of the Frame Relay network: • Configure Sleepy so that the ISDN line will come if the frame relay connection fails. • Verify you are getting OSPF updates across the ISDN link. • Confirm connectivity across the backup link by pinging from Sleepy to the rest of the network. TIME: 30 minutes 2.6 Configure OSPF MD5 Authentication. • Configure OSPF MD5 authentication between Grumpy and Sleepy. • Configure the MD5 password as “cisco”. • Ensure that Grumpy, Sleepy, and Shorn can still see all routes. TIME: 15 minutes IGRP Configuration and Redistribution 2.7 Configure IGRP on your network as per Diagram 3. • Configure IGRP on Dopey’s Ethernet 0, and the serial link between Dopey and Grumpy. • Make sure that these are the ONLY interfaces that are advertising IGRP. • Redistribute between OSPF and IGRP on Grumpy. • Verify that Dopey can ping all interfaces in the OSPF domain. TIME: 45 minutes RIP Configuration and Redistribution 2.8 Configure RIP on your network as per Diagram 3. • Configure RIP on Grumpy’s Ethernet 0. • Make sure that this is the ONLY interface that is advertising RIP. • Redistribute RIP into OSPF. • Verify that Sleepy, Dopey and Shorn can ping Grumpy’s Ethernet 0. • Configure a loopback interface on the frame switch in the 200.200.200.x network with a class C mask. Cisco Systems Internal Use Only 8 SE Practice CCIE Lab V1.0GG • Configure RIP between the frame switch and Shorn with md5 authentication. • Ensure the ethernet interfaces are the only interfaces advertising RIP on both routers. Have the frame switch advertise the 200.200.200.x network to Shorn. • Configure Shorn so it sees the 200.200.200.x network with a hop count of 5. TIME: 30 minutes BGP Configuration 2.9 Configure External BGP: • Configure 3 loopback interfaces on the frame switch using the network addresses 150.100.0.0, 160.100.0.0, and 170.100.0.0. • Configure BGP on the frame switch with an AS number 100, and set it up to advertise the three networks. • Configure BGP on Shorn using AS 200. Configure BGP between the frame switch and Shorn such that Shorn sees all three loopbacks configured on the frame switch. NOTE – Show the Proctor you understand how to make BGP changes take effect quickly. • Configure BGP on Dopey using AS 300. Configure BGP between the Shorn and Dopey so Dopey sees all three loopbacks configured on the frame switch. • A “show ip bgp” and “show ip route” on Shorn and Dopey should show the three routes advertised by the frame switch. TIME: 45 minutes 2.10 Configure Internal BGP: • Configure BGP between Grumpy and Sleepy so that both are in AS400. Use unique private AS numbers for the BGP processes on each router. • Configure BGP between Grumpy and Shorn. DO NOT make Sleepy a neighbor to Shorn. • DO NOT redistribute between BGP and OSPF, RIP or IGRP. • A “show ip bgp” and “show ip route” on Grumpy and Sleepy should show the three routes advertised by the frame switch. Cisco Systems Internal Use Only 9 SE Practice CCIE Lab V1.0GG TIME: 30 minutes 2.11 BGP Route Filtering / Attribute manipulation • Configure a filter on Shorn such that the only BGP route now seen on Grumpy and Sleepy is 150.100.0.0. • On Shorn, make the route 160.100.0.0 appear to Dopey as if it traversed through AS 1. TIME: 15 minutes 2.12 Change BGP Weight / Timers • Configure Grumpy such that the weight is set to 1000 and the metric 10 for network 150.100.0.0. • After BGP is stable, ensure that BGP traffic is only seen every 10 minutes. TIME: 20 minutes IP FIREWALL 2.13 Configure an inbound access-list on Dopey’s Serial 0 interface that satisfies the following criterion: • Telnet sessions are permitted only if originated from Shorn’s ethernet interface subnet. • FTP sessions are permitted only if established from Dopey’s Ethernet 0 subnet. • TFTP is permitted in both directions. • SMTP is not allowed. • WWW is not allowed. • PING is permitted from all IP addresses whose last octet is an even number. • Confirm connectivity after applying the access list. Ping Dopey’s Ethernet 0 from Sleepy. Also show a telnet to Dopey from Grumpy fails. • Ensure that routing still works but explicitly deny all other traffic. TIME: 30 minutes 2.14 NTP Cisco Systems Internal Use Only 10 [...].. .SE Practice CCIE Lab V1.0GG • Set the clock on Grumpy • Configure Grumpy as an NTP master clock Configure Shorn so that it will update its clock from Grumpy • Configure md5 authentication between Grumpy and Shorn TIME: 15 minutes Cisco Systems Internal Use Only 11 SE Practice CCIE Lab V1.0GG Lab 3 Appletalk Routing Configuration 3.1 Appletalk configuration:... to any other router TIME: 45 minutes Lab 5 Cisco Systems Internal Use Only 12 SE Practice CCIE Lab V1.0GG IPX Routing Configuration 5.1 IPX configuration: • Enable IPX routing on all routers except the frame switch which the proctor will configure Assume you do not have access to the frame switch for this portion of the lab • Configure all ports for IPX except the serial link between Shorn and Happy... on Dopey One is a file server and one is a print server • Verify that these two SAPs appear in Grumpy’s SAP table • Configure a filter on Grumpy such that it can see the file server static SAPs • Verify that Grumpy can now only see Dopey’s static file server SAP in his SAP table TIME: 45 minutes 5.3 IPX route filter: • Configure a filter on Sleepy such that the only IPX route it sees is Dopey’s ethernet... filter: • Configure a filter on Sleepy such that the only IPX route it sees is Dopey’s ethernet • Verify that only this route appears in Sleepy’s route table TIME: 30 minutes Lab 6 Cisco Systems Internal Use Only 13 SE Practice CCIE Lab V1.0GG DLSw Configuration 6.1 DLSw configuration: • Configure DLSw between Shorn’s ethernet 0 and Sleepy’s ethernet 0 Ensure that only Sleepy initiates the dlsw connection... reset dlsw connections without altering the configuration of dlsw TIME: 20 minutes 6.3 DLSw mac filter / NETBIOS filter: • Change the DLSw configuration such that Happy informs his peer that the only mac address known by Happy is 4000.3725.0101 • Configure Dopey to only allow NETBIOS names that contain the letters CISCO to be advertized to its peer Cisco Systems Internal Use Only 14 • SE Practice CCIE. .. Lab 3 Appletalk Routing Configuration 3.1 Appletalk configuration: • Configure all ports for appletalk except the serial link from Grumpy to Dopey Configure Dopey to exchange routes with Sleepy and Happy so clients on Dopey’s ethernet segment can access the rest of the appletalk network • Use different cable ranges and zones on each interface except that Happy’s token ring and Grumpy’s ethernet should... Configure a filter on Dopey such that Dopey only sees routes and zones from Shorn • Configure a filter on Sleepy to block the network from Happy’s token ring Sleepy should still Grumpy’s ethernet network TIME: 35 minutes Lab 4 Decnet Routing Configuration 4.1 Decnet configuration: • Enable Decnet routing on all routers • • Configure Dopey to be in a separate DECnet area from the rest of the routers... switch NOTE: Make adjustments to your IP configurations, such that Sleepy and the frame switch can communicate ONE static route is allowed • Ensure that Shorn is responsible for DSLW advertisements for its ethernet segment If DLSW fails on Shorn, the frame switch should continue keep DLSW active to Sleepy Also ensure in the event of a failure that the frame switch remains active for 8 minutes after Shorn’s... only allow NETBIOS names that contain the letters CISCO to be advertized to its peer Cisco Systems Internal Use Only 14 • SE Practice CCIE Lab V1.0GG Verify that your configuration is correct by checking the peer capabilities TIME: 30 minutes Cisco Systems Internal Use Only 15 . SE Practice CCIE Lab V1.0GG SE Practice CCIE Lab Cisco Systems Internal Use Only 1 SE Practice CCIE Lab V1.0GG E0 Frame Relay. E0/0 RIP Lab 1 Communications Server Setup / Network Connections Cisco Systems Internal Use Only 4 SE Practice CCIE Lab V1.0GG • The Communications Server