CVG-CCIE Practice Lab Last modified 01/25/00 Cisco Systems Channel Partners Only - Confidential Information. This information may not be redistributed without written authorization from Cisco Systems, Inc. 1 CVG-CCIE Practice Lab CVG-CCIE Practice Lab Last modified 01/25/00 Cisco Systems Channel Partners Only - Confidential Information. This information may not be redistributed without written authorization from Cisco Systems, Inc. 2 Physical Layout Diagram 1 Frame Relay S1 S2 L0 Happy S 1 S 0 E 0 Token Ring Grumpy Dopey Sleepy S 0 These routers are physically connected together as shown. Token Ring E0 E0 E0 S 0 S 0 S 0 E0 T0 T0 S3 S0 Sneezy ISDN BRI 0 BRI 0 CVG-CCIE Practice Lab Last modified 01/25/00 Cisco Systems Channel Partners Only - Confidential Information. This information may not be redistributed without written authorization from Cisco Systems, Inc. 3 Grumpy Dopey Sleepy E0 Line 3 Line 4 Comm Server ASET #3 2511 IP Address: 216.68.103.150 Comm Server Setup Diagram 2 Line 1 Line 2 Sneezy Happy Line 5 CVG-CCIE Practice Lab Last modified 01/25/00 Cisco Systems Channel Partners Only - Confidential Information. This information may not be redistributed without written authorization from Cisco Systems, Inc. 4 Routing Topology Diagram 3 Frame Relay S1 S2 L0 Happy S 1 S 0 E 0 Token Ring 2 Grumpy Dopey Sleepy S 0 Token Ring 1 E0 E0 E0 S 0 S 0 S 0 E0 T0 T0 S3 S0 Sneezy ISDN BRI 0 BRI 0 RIP OSPF Backbone Area IGRP EBGP VLAN 3 VLAN 2 IBGP EIGRP Area 2 Area 3 Area 4 CVG-CCIE Practice Lab Last modified 01/25/00 Cisco Systems Channel Partners Only - Confidential Information. This information may not be redistributed without written authorization from Cisco Systems, Inc. 5 Lab 1 Communications Server Setup / Network Connections • The Communications Server is cabled as shown on the previous diagram. • For the purposes of this practice lab, you are coming into a pre-configured communications server. To see the hosts names type “show hosts” and you will be presented a list of them. Ordinarily you will configure the Communications Server so that when you type the name of a router on the Server you are connected to the console port of that respective router. You should know how to do this. • Review all of the steps in the following labs and create a network diagram on a separate piece of paper. Include the network numbers, network address ranges, and subnet mask for each network on the diagram. TIME: 20 minutes CVG-CCIE Practice Lab Last modified 01/25/00 Cisco Systems Channel Partners Only - Confidential Information. This information may not be redistributed without written authorization from Cisco Systems, Inc. 6 Lab 2 IP Routing Configuration The objective of this lab is to configure OSPF/IGRP/EIGRP/BGP/RIP in different parts of the network and to redistribute routing information. In the working setup all routers should see every route and should be able to ping any interface in the network. Do NOT configure static routes to accomplish this. Topology and Basic IP Setup You will be using the CLASS B network 170.100.0.0. Thus all your addresses should look like 170.100.X.X. Do not use static routes for IP on any router. 2.1 Refer to the Frame-Relay Switch configuration for the DLCI's 2.2 Configure IP across the Frame Relay network: • Use a 24-bit subnet mask. • Configure Sleepy using two sub-interfaces. Use a sub-interface for the connection to Dopey and use one sub-interface for the connection to Grumpy and Sneezy. Do not configure sub-interfaces for Dopey, Grumpy or Sneezy. • Confirm connectivity across the Frame Relay network by pinging from Grumpy to Sleepy, Grumpy to Sneezy. TIME: 20 minutes 2.3 Configure IP across the remaining interfaces: • Configure Dopey's Ethernet 0 to ip address 170.100.200.1 with a 24 bit subnet mask • Subnet Token Ring 0 on Sneezy such that it has 6 host addresses. • Subnet the Loopback 0 on Happy such that it has 30 host addresses. • Configure ip addresses for VLAN2 and VLAN3. VLAN2 ip address 170.100.42.241, allow 14 hosts, VLAN3 use a 24-bit subnet mask. • Configure an ip address for Dopey's Token Ring 0 with a mask that will allow 254 host on the network. Dopey's interface address is 170.100.51.33. CVG-CCIE Practice Lab Last modified 01/25/00 Cisco Systems Channel Partners Only - Confidential Information. This information may not be redistributed without written authorization from Cisco Systems, Inc. 7 • Configure the ISDN link between Sleepy and Grumpy with a 28-bit subnet mask. Verify pings from Sleepy and Grumpy • Configure ISDN using these numbers: Port1 SPID1 0835866101 DN 835-8661 Port1 SPID2 0835866301 DN 835-8663 Port2 SPID1 0835866201 DN 835-8662 Port2 SPID2 0835866401 DN 835-8664 • Switch type is NI1. Grumpy should be set up as the dialer when it’s serial link goes down. • Configure Grumpy to use ISDN as a backup link, when the frame- relay connection to Sleepy is lost. • Verify that you have basic IP setup by pinging the local interfaces that you have just configured. TIME: 45 minutes 2.4 Configure OSPF on your network as per Diagram 3. • Configure OSPF on Grumpy, Sneezy, Happy, and Sleepy. Refer to Diagram 3 for area designations. • Ensure that Grumpy can ping Happy’s Loopback 0 interface. Also ensure that Sleepy can ping Grumpy’s Ethernet 0 interface. TIME: 45 minutes IGRP Configuration and Redistribution 2.5 Configure IGRP on your network as per Diagram 3. • Configure IGRP on Sleepy’s serial sub-interface and Dopey’s Serial 0. • Make sure that these are the ONLY interfaces that are advertising IGRP. • Redistribute OSPF into IGRP on Sleepy. • Verify that Dopey can ping all interfaces in the OSPF domain. TIME: 45 minutes EIGRP Configuration and Redistribution 2.6 Configure EIGRP on your network as per Diagram 3. CVG-CCIE Practice Lab Last modified 01/25/00 Cisco Systems Channel Partners Only - Confidential Information. This information may not be redistributed without written authorization from Cisco Systems, Inc. 8 • Configure EIGRP on Sneezy’s Token Ring 0. • Make sure that this is the ONLY interface that is advertising EIGRP. • Redistribute OSPF into EIGRP and EIGRP into OSPF. TIME: 30 minutes RIP: • Configure Happy with RIP on E0 (Refer to diagram). Redistribute to allow full network connectivity. • You will be able to see RIP bringing in several routes from outside the system. These routes will be network 210.200.20.0, 211.200.20.0, 212.200.20.0, 193.14.12.0, and network 170.100.0.0. Make sure that the only route that Happy accepts from RIP is the network 193.14.12.0. Also make sure that no routes are being advertised into Backbone 1 from Grumpy or any connected network (refer to the diagram). TIME: 10 minutes BGP Configuration 2.7 Configure BGP on Dopey and Grumpy: • Configure Grumpy and Dopey to be IBGP neighbors. Configure BGP on Dopey and Grumpy with an AS of 10. Configure Dopey such that it will pass routes to an EBGP neighbor (170.100.200.7) with an AS of 4. • Configure BGP supernetting using ip address 170.0.0.0, this is to be advertised to AS 4 only. Verify that there are no update problems with this being advertised back into your IGP and BGP. • Make sure that the proper BGP routes are seen by Grumpy. TIME: 30 minutes 2.8 BGP Route Filter • You will notice a number of networks coming in from outside the network from AS 4. These networks are network 14.0.0.0, network 129.14.0.0, 130.14.0.0, 131.14.0.0, and network 196.12.14.0. CVG-CCIE Practice Lab Last modified 01/25/00 Cisco Systems Channel Partners Only - Confidential Information. This information may not be redistributed without written authorization from Cisco Systems, Inc. 9 Configure a filter on Dopey such that the only route now seen on Grumpy is 196.12.14.0. • Make sure that the only external BGP route that is accepted by Dopey is that of the network 196.12.14.0. TIME: 15 minutes Network Address Translation • Configure NAT on vlan2. Host addresses are 1.1.1.1 to 1.1.1.253. Use the valid 14-host network on Sleepy's E0 as the valid addresses (into the rest of the network). Make sure that all 253 addresses could be translated simultaneously. • Make sure that the other routers see the 170.100.42.x route but not the 1.1.1.0 network. Verify that the 1.1.1.x addresses actually translate without removing the 170.100.42.x address from vlan 2. TIME: 15 minutes HSRP • Configure HSRP between Grumpy and Sneezy. Make sure that no connections are lost when the frame-relay links on either of the routers goes down. • Make sure that Grumpy is configured as the active router. TIME: 10 minutes IP FIREWALL Configure an inbound access-list on Dopey’s Token Ring 0 interface that satisfies the following criterion: CVG-CCIE Practice Lab Last modified 01/25/00 Cisco Systems Channel Partners Only - Confidential Information. This information may not be redistributed without written authorization from Cisco Systems, Inc. 10 • Telnet sessions are permitted only if originated from Happy’s Ethernet interface subnet. • FTP sessions are permitted only if established from Dopey’s Token 0 subnet. • TFTP is permitted both ways allowed. • SMTP is not allowed. • WWW is not allowed. • PING is permitted from everywhere. TIME: 30 minutes [...]... Sneezy can reach is 4000.3725. 010 1 Verify that your configuration is correct by checking the peer capabilities TIME: 20 minutes Cisco Systems Channel Partners Only - Confidential Information This information may not be redistributed without written authorization from Cisco Systems, Inc 13 CVG-CCIE Practice Lab Last modified 01/ 25/00 Lab 6 Multicast IP Configuration 6 .1 Multicast IP configuration: •... Cisco Systems Channel Partners Only - Confidential Information This information may not be redistributed without written authorization from Cisco Systems, Inc 11 CVG-CCIE Practice Lab Last modified 01/ 25/00 Lab 4 IPX Routing Configuration 4 .1 IPX configuration: • • • • Enable IPX routing on all routers Configure all ports for IPX Configure IPX EIGRP across the frame-relay network Verify that all routes... multicast server on VLAN 2 can send multicast packets to receivers on VLAN 3 and Token 1 TIME: 15 minutes Lab 7 Queueing 7 .1 Queueing Configure a custom queue from Dopey to Sleepy that will permit IPX traffic and IP traffiic to have 30% of the bandwidth per protocol and then dedicate all other traffic to the remaining 30% TIME: 15 minutes Cisco Systems Channel Partners Only - Confidential Information This... minutes Cisco Systems Channel Partners Only - Confidential Information This information may not be redistributed without written authorization from Cisco Systems, Inc 12 CVG-CCIE Practice Lab Last modified 01/ 25/00 Lab 5 DLSw Configuration 5 .1 DLSw configuration: • • Configure DLSw between Dopey’s token 0 and Sleepy's Ethernet 0, and Sneezy's token 0 Verify that the DLSw peers are in the connected state...CVG-CCIE Practice Lab Last modified 01/ 25/00 Lab 3 Appletalk Routing Configuration 3 .1 Appletalk configuration: • • • Configure all lan ports for appletalk routing Configure Appletalk EIGRP across the OSPF core only Configure 2 tunnels: Sleepy to Grumpy and Sleepy... traffic to the remaining 30% TIME: 15 minutes Cisco Systems Channel Partners Only - Confidential Information This information may not be redistributed without written authorization from Cisco Systems, Inc 14 . networks are network 14 .0.0.0, network 12 9 .14 .0.0, 13 0 .14 .0.0, 13 1 .14 .0.0, and network 19 6 .12 .14 .0. CVG-CCIE Practice Lab Last modified 01/ 25/00 Cisco Systems. these numbers: Port1 SPID1 083586 610 1 DN 835-86 61 Port1 SPID2 08358663 01 DN 835-8663 Port2 SPID1 08358662 01 DN 835-8662 Port2 SPID2 08358664 01 DN 835-8664 •