Tài liệu ISIS Lab Scenario I pdf

CertificationZone Page 1 of 12 http://www.certificationzone.com/studyguides /?Issue=35&IssueDate=04-01-2001&CP= 11/06/01 Date of Issue: 04-01-2001 ISIS Lab Scenario I by Peter A. Van Oene Lab Scenario Phase 1: Layer 1/2 Topology Phase 2: IP Addressing Phase 3: CLNS Addressing Phase 4: Basic ISIS Configuration Phase 5: ISIS Security Completion Criteria Solution Configurations R1 R2 R3 R4 R5 Routing Tables R1 R2 R3 R4 R5 Link State Databases R1 R2 R3 R4 R5 Adjacencies R1 R2 R3 R4 R5 Lab Scenario CertificationZone Page 2 of 12 http://www.certificationzone.com/studyguides /?Issue=35&IssueDate=04-01-2001&CP= 11/06/01 Phase 1: Layer 1/2 Topology 1. Physically cable the routers as depicted in the corresponding diagram. 2. The frame relay cloud between R1, R2, and R3 should be partially meshed with no PVC between R1 and R2. 3. The link from R4 to R5 should be 2 Mbps with R4 providing clocking. 4. Each router should have only the necessary physical interfaces turned up along with one loopback each. 5. R3's S0 must use sub interfaces. Phase 2: IP Addressing 1. Assign each router a loopback address from the 150.100.0.248/29 subnet. 2. Assign R3's S0 the address 150.100.0.1/29. 3. Assign R4's E0 the address 150.100.0.193/28. 4. Fill in the rest of the addresses appropriately from within the 150.100.0.0/24 prefix. Phase 3: CLNS Addressing 1. Use each router's Loopback address as the System ID. 2. Assign R1 the Area ID 47.0001. 3. Assign R2 an Area ID different from R1. 4. Assign R4 an Area ID different from R1 and R2. 5. Assign R5 the same Area ID as R4. Phase 4: Basic ISIS Configuration 1. All routers must be configured as Level 1 only. 2. R3's E0 must be the DR for the segment between itself and R4. 3. ISIS Hello packets should be sent every 30 seconds from R4's E0 interface. 4. Assign the metric 20 to R5's Serial 0. Phase 5: ISIS Security 1. An area password of CZarea should be configured on R3. 2. All adjacencies should be authenticated with the password Czadj. Completion Criteria 1. All interfaces must be able to reach all other interfaces. Solution CertificationZone Page 3 of 12 http://www.certificationzone.com/studyguides /?Issue=35&IssueDate=04-01-2001&CP= 11/06/01 Configurations R1 Current configuration: ! version 12.0 service timestamps debug uptime service timestamps log uptime no service password-encryption ! hostname r1 ! ! ip subnet-zero ip tcp synwait-time 5 no ip domain-lookup ! ! ! ! ! ! interface Loopback0 ip address 150.100.0.249 255.255.255.255 no ip directed-broadcast ip router isis ! interface Ethernet0 no ip address no ip directed-broadcast shutdown ! interface Serial0 no ip address no ip directed-broadcast encapsulation frame-relay no ip mroute-cache ! interface Serial0.103 point-to-point ip address 150.100.0.2 255.255.255.248 no ip directed-broadcast ip router isis frame-relay interface-dlci 103 isis password CZadj level-1 ! interface Serial1 no ip address no ip directed-broadcast shutdown ! interface TokenRing0 no ip address no ip directed-broadcast shutdown ! router isis net 47.0001.1501.0000.0249.00 is-type level-1 area-password CZarea ! ip classless no ip http server ! ! ! line con 0 exec-timeout 0 0 privilege level 15 transport input none line aux 0 exec-timeout 0 0 CertificationZone Page 4 of 12 http://www.certificationzone.com/studyguides /?Issue=35&IssueDate=04-01-2001&CP= 11/06/01 privilege level 15 line vty 0 4 exec-timeout 0 0 privilege level 15 login ! end R2 Current configuration: ! version 12.0 service timestamps debug uptime service timestamps log uptime no service password-encryption ! hostname r2 ! ! ! ! ! ! ip subnet-zero ip tcp synwait-time 5 no ip domain-lookup ! isdn voice-call-failure 0 cns event-service server ! ! ! ! ! interface Loopback0 ip address 150.100.0.250 255.255.255.255 no ip directed-broadcast ip router isis ! interface Ethernet0 no ip address no ip directed-broadcast shutdown ! interface Serial0 no ip address no ip directed-broadcast encapsulation frame-relay no ip mroute-cache no fair-queue ! interface Serial0.203 point-to-point ip address 150.100.0.10 255.255.255.248 no ip directed-broadcast ip router isis frame-relay interface-dlci 203 isis password CZadj level-1 ! interface Serial1 no ip address no ip directed-broadcast shutdown ! interface BRI0 no ip address no ip directed-broadcast shutdown isdn guard-timer 0 on-expiry accept ! router isis net 47.0002.1501.0000.0250.00 is-type level-1 area-password CZarea CertificationZone Page 5 of 12 http://www.certificationzone.com/studyguides /?Issue=35&IssueDate=04-01-2001&CP= 11/06/01 ! ip classless no ip http server ! ! ! line con 0 exec-timeout 0 0 privilege level 15 transport input none line aux 0 exec-timeout 0 0 privilege level 15 line vty 0 4 exec-timeout 0 0 privilege level 15 login ! end R3 Current configuration: ! version 12.0 service timestamps debug uptime service timestamps log uptime no service password-encryption ! hostname r3 ! ! ! ! ! ! ip subnet-zero ip tcp synwait-time 5 no ip domain-lookup ! ! ! ! process-max-time 200 ! interface Loopback0 ip address 150.100.0.251 255.255.255.255 no ip directed-broadcast ip router isis ! interface Ethernet0 ip address 150.100.0.194 255.255.255.240 no ip directed-broadcast ip router isis isis password CZadj level-1 isis priority 127 isis hello-interval 30 ! interface Serial0 no ip address no ip directed-broadcast encapsulation frame-relay no ip mroute-cache no fair-queue cdp enable ! interface Serial0.301 point-to-point ip address 150.100.0.1 255.255.255.248 no ip directed-broadcast ip router isis frame-relay interface-dlci 301 isis password CZadj level-1 ! interface Serial0.302 point-to-point CertificationZone Page 6 of 12 http://www.certificationzone.com/studyguides /?Issue=35&IssueDate=04-01-2001&CP= 11/06/01 ip address 150.100.0.9 255.255.255.248 no ip directed-broadcast ip router isis frame-relay interface-dlci 302 isis password CZadj level-1 ! interface Serial1 no ip address no ip directed-broadcast shutdown ! interface Serial2 no ip address no ip directed-broadcast shutdown ! interface Serial3 no ip address no ip directed-broadcast shutdown ! interface BRI0 no ip address no ip directed-broadcast shutdown ! router isis net 47.0002.1501.0000.0251.00 net 47.0001.1501.0000.0251.00 net 47.0004.1501.0000.0251.00 is-type level-1 area-password CZarea ! ip classless no ip http server ! ! ! line con 0 exec-timeout 0 0 privilege level 15 transport input none line aux 0 exec-timeout 0 0 privilege level 15 line vty 0 4 exec-timeout 0 0 privilege level 15 login ! end R4 Current configuration: ! version 12.0 service timestamps debug uptime service timestamps log uptime no service password-encryption ! hostname r4 ! ! ! ! ! ! ip subnet-zero ip tcp synwait-time 5 no ip domain-lookup ! ! ! CertificationZone Page 7 of 12 http://www.certificationzone.com/studyguides /?Issue=35&IssueDate=04-01-2001&CP= 11/06/01 ! interface Loopback0 ip address 150.100.0.252 255.255.255.255 no ip directed-broadcast ip router isis ! interface Ethernet0 ip address 150.100.0.193 255.255.255.240 no ip directed-broadcast ip router isis isis password CZadj level-1 isis hello-interval 30 ! interface Serial0 no ip address no ip directed-broadcast no ip mroute-cache shutdown no fair-queue ! interface Serial1 ip address 150.100.0.210 255.255.255.240 no ip directed-broadcast ip router isis isis password CZadj level-1 ! interface TokenRing0 no ip address no ip directed-broadcast shutdown ! router isis net 47.0004.1501.0000.0252.00 is-type level-1 area-password CZarea ! ip classless no ip http server ! ! ! line con 0 exec-timeout 0 0 privilege level 15 transport input none line aux 0 exec-timeout 0 0 privilege level 15 line vty 0 4 exec-timeout 0 0 privilege level 15 login ! end R5 Current configuration : 1587 bytes ! version 12.1 no service single-slot-reload-enable service timestamps debug uptime service timestamps log uptime no service password-encryption ! hostname r5 ! ! ip subnet-zero no ip finger ip tcp synwait-time 5 ! ! ! CertificationZone Page 8 of 12 http://www.certificationzone.com/studyguides /?Issue=35&IssueDate=04-01-2001&CP= 11/06/01 ! interface Loopback0 ip address 150.100.0.253 255.255.255.255 ip router isis ! interface Serial0 ip address 150.100.0.209 255.255.255.240 ip router isis no fair-queue clockrate 2000000 isis metric 20 isis password CZadj level-1 ! interface Serial1 no ip address shutdown ! interface TokenRing0 no ip address shutdown ! interface BRI0 no ip address shutdown ! router isis net 47.0004.1501.0000.0253.00 is-type level-1 area-password CZarea ! ip classless no ip http server ! ! ! line con 0 exec-timeout 0 0 privilege level 15 transport input none line aux 0 exec-timeout 0 0 privilege level 15 line vty 0 4 exec-timeout 0 0 privilege level 15 login ! end Routing Tables R1 r1#sh ip route Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, * - candidate default U - per-user static route, o - ODR, P - periodic downloaded static route T - traffic engineered route Gateway of last resort is not set 150.100.0.0/16 is variably subnetted, 9 subnets, 3 masks i L1 150.100.0.250/32 [115/30] via 150.100.0.1, Serial0.103 i L1 150.100.0.251/32 [115/20] via 150.100.0.1, Serial0.103 C 150.100.0.249/32 is directly connected, Loopback0 i L1 150.100.0.252/32 [115/30] via 150.100.0.1, Serial0.103 i L1 150.100.0.253/32 [115/40] via 150.100.0.1, Serial0.103 i L1 150.100.0.208/28 [115/30] via 150.100.0.1, Serial0.103 i L1 150.100.0.192/28 [115/20] via 150.100.0.1, Serial0.103 CertificationZone Page 9 of 12 http://www.certificationzone.com/studyguides /?Issue=35&IssueDate=04-01-2001&CP= 11/06/01 C 150.100.0.0/29 is directly connected, Serial0.103 i L1 150.100.0.8/29 [115/20] via 150.100.0.1, Serial0.103 R2 r2#sh ip route Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area * - candidate default, U - per-user static route, o - ODR P - periodic downloaded static route Gateway of last resort is not set 150.100.0.0/16 is variably subnetted, 9 subnets, 3 masks C 150.100.0.250/32 is directly connected, Loopback0 i L1 150.100.0.251/32 [115/20] via 150.100.0.9, Serial0.203 i L1 150.100.0.249/32 [115/30] via 150.100.0.9, Serial0.203 i L1 150.100.0.252/32 [115/30] via 150.100.0.9, Serial0.203 i L1 150.100.0.253/32 [115/40] via 150.100.0.9, Serial0.203 i L1 150.100.0.208/28 [115/30] via 150.100.0.9, Serial0.203 i L1 150.100.0.192/28 [115/20] via 150.100.0.9, Serial0.203 i L1 150.100.0.0/29 [115/20] via 150.100.0.9, Serial0.203 C 150.100.0.8/29 is directly connected, Serial0.203 R3 r3#sh ip route Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area * - candidate default, U - per-user static route, o - ODR P - periodic downloaded static route Gateway of last resort is not set 150.100.0.0/16 is variably subnetted, 9 subnets, 3 masks i L1 150.100.0.250/32 [115/20] via 150.100.0.10, Serial0.302 C 150.100.0.251/32 is directly connected, Loopback0 i L1 150.100.0.249/32 [115/20] via 150.100.0.2, Serial0.301 i L1 150.100.0.252/32 [115/20] via 150.100.0.193, Ethernet0 i L1 150.100.0.253/32 [115/30] via 150.100.0.193, Ethernet0 i L1 150.100.0.208/28 [115/20] via 150.100.0.193, Ethernet0 C 150.100.0.192/28 is directly connected, Ethernet0 C 150.100.0.0/29 is directly connected, Serial0.301 C 150.100.0.8/29 is directly connected, Serial0.302 R4 r4#sh ip route Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area * - candidate default, U - per-user static route, o - ODR P - periodic downloaded static route Gateway of last resort is not set 150.100.0.0/16 is variably subnetted, 9 subnets, 3 masks i L1 150.100.0.250/32 [115/30] via 150.100.0.194, Ethernet0 i L1 150.100.0.251/32 [115/20] via 150.100.0.194, Ethernet0 i L1 150.100.0.249/32 [115/30] via 150.100.0.194, Ethernet0 C 150.100.0.252/32 is directly connected, Loopback0 i L1 150.100.0.253/32 [115/20] via 150.100.0.209, Serial1 C 150.100.0.208/28 is directly connected, Serial1 CertificationZone Page 10 of 12 http://www.certificationzone.com/studyguides /?Issue=35&IssueDate=04-01-2001&CP= 11/06/01 C 150.100.0.192/28 is directly connected, Ethernet0 i L1 150.100.0.0/29 [115/20] via 150.100.0.194, Ethernet0 i L1 150.100.0.8/29 [115/20] via 150.100.0.194, Ethernet0 R5 r5#sh ip route Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area * - candidate default, U - per-user static route, o - ODR P - periodic downloaded static route Gateway of last resort is not set 150.100.0.0/16 is variably subnetted, 9 subnets, 3 masks i L1 150.100.0.250/32 [115/50] via 150.100.0.210, Serial0 i L1 150.100.0.251/32 [115/40] via 150.100.0.210, Serial0 i L1 150.100.0.249/32 [115/50] via 150.100.0.210, Serial0 i L1 150.100.0.252/32 [115/30] via 150.100.0.210, Serial0 C 150.100.0.253/32 is directly connected, Loopback0 C 150.100.0.208/28 is directly connected, Serial0 i L1 150.100.0.192/28 [115/30] via 150.100.0.210, Serial0 i L1 150.100.0.0/29 [115/40] via 150.100.0.210, Serial0 i L1 150.100.0.8/29 [115/40] via 150.100.0.210, Serial0 Link State Databases R1 r1#sh isis database IS-IS Level-1 Link State Database LSPID LSP Seq Num LSP Checksum LSP Holdtime ATT/P/OL 1501.0000.0249.00-00* 0x00000021 0x850A 896 0/0/0 1501.0000.0250.00-00 0x00000020 0xAD89 840 0/0/0 1501.0000.0250.01-00 0x00000001 0x7CCD 0 (904) 0/0/0 1501.0000.0251.00-00 0x00000023 0x249F 842 0/0/0 1501.0000.0251.01-00 0x0000001A 0x42ED 0 (904) 0/0/0 1501.0000.0251.03-00 0x00000018 0x1D9A 1138 0/0/0 1501.0000.0252.00-00 0x0000001F 0xAB76 566 0/0/0 1501.0000.0253.00-00 0x0000001D 0x63F0 648 0/0/0 R2 r2#sh isis database IS-IS Level-1 Link State Database: LSPID LSP Seq Num LSP Checksum LSP Holdtime ATT/P/OL 1501.0000.0249.00-00 0x00000021 0x850A 842 0/0/0 r2.00-00 * 0x00000020 0xAD89 791 0/0/0 r2.01-00 * 0x00000001 0x7CCD 0 (787) 0/0/0 r3.00-00 0x00000023 0x249F 790 0/0/0 r3.01-00 0x0000001A 0x42ED 0 (753) 0/0/0 r3.03-00 0x00000018 0x1D9A 1086 0/0/0 r4.00-00 0x0000001F 0xAB76 515 0/0/0 r5.00-00 0x0000001D 0x63F0 596 0/0/0 R3 r3#sh isis database IS-IS Level-1 Link State Database: LSPID LSP Seq Num LSP Checksum LSP Holdtime ATT/P/OL 1501.0000.0249.00-00 0x00000021 0x850A 911 0/0/0 r2.00-00 0x00000020 0xAD89 857 0/0/0 r2.01-00 0x00000001 0x7CCD 0 (867) 0/0/0 [...]... r3#sh clns is-nei System Id r2 1501.0000.0249 r4 Interface Se0.302 Se0.301 Et0 R4 r4#sh clns is-nei System Id r3 r5 Interface Et0 Se1 http://www.certificationzone.com/studyguides /?Issue=35&IssueDate=04-01-2001&CP= 11/06/01 CertificationZone Page 12 of 12 R5 r5#sh clns is-nei System Id r4 Interface Se0 State Up Type Priority L1 0 Circuit Id 00 Format Phase V [IE -ISIS- LS1-F03] [2001-03-30-02] Copyright ©... Adjacencies R1 r1#sh clns is-nei System Id Interface 1501.0000.0251 Se0.103 State Up Type Priority L1 0 Circuit Id 00 Format Phase V State Up Type Priority L1 0 Circuit Id 01 Format Phase V State Up Up Up Type L1 L1 L1 Priority 0 64 64 Circuit Id 00 00 r3.03 Format Phase V Phase V Phase V State Up Up Type Priority L1 127 L1 0 Circuit Id r3.03 00 Format Phase V Phase V R2 r2#sh clns is-nei System Id r3 Interface... 0x63F0 LSP Holdtime 856 802 804 0 (709) 1100 534 619 ATT/P/OL 0/0/0 0/0/0 0/0/0 0/0/0 0/0/0 0/0/0 0/0/0 R4 r4#sh isis database IS-IS Level-1 Link State Database: LSPID LSP Seq Num 1501.0000.0249.00-00 0x00000021 r2.00-00 0x00000020 r3.00-00 0x00000023 r3.01-00 0x0000001A r3.03-00 0x00000018 r4.00-00 * 0x0000001F r5.00-00 0x0000001D R5 r5#sh isis database IS-IS Level-1 Link State Database: LSPID LSP Seq... R5 r5#sh clns is-nei System Id r4 Interface Se0 State Up Type Priority L1 0 Circuit Id 00 Format Phase V [IE -ISIS- LS1-F03] [2001-03-30-02] Copyright © 2001 Genium Publishing Corporation http://www.certificationzone.com/studyguides /?Issue=35&IssueDate=04-01-2001&CP= 11/06/01 ...CertificationZone Page 11 of 12 r3.00-00 r3.01-00 r3.03-00 r4.00-00 r5.00-00 * 0x00000023 * 0x0000001A * 0x00000018 0x0000001F 0x0000001D 0x249F 0x42ED 0x1D9A 0xAB76 0x63F0 859 0 (760) 1155 584 665 0/0/0 0/0/0 0/0/0 0/0/0 0/0/0 LSP Checksum 0x850A 0xAD89 0x249F 0x42ED 0x1D9A 0xAB76 0x63F0 LSP Holdtime 868 814 815 0 (718) 1112 545 626 ATT/P/OL 0/0/0 0/0/0 . no ip directed-broadcast ip router isis ! interface Ethernet0 ip address 150.100.0.194 255.255.255.240 no ip directed-broadcast ip router isis isis. no ip directed-broadcast ip router isis ! interface Ethernet0 ip address 150.100.0.193 255.255.255.240 no ip directed-broadcast ip router isis isis