Tài liệu Big case SE Practice lab pdf

SE Practice CCIE Lab V2.0K2 SE Practice CCIE Lab Cisco Systems Internal Use Only SE Practice CCIE Lab V2.0K2 Physical Layout Diagram Sleepy E0 2524 S0 ISDN Frame Relay DLCI 101 Grumpy S1/0 S1/1 3620 S1/2 S0 E0 DLCI 102 2524 DLCI 100 E0/0 S1 DLCI 100 S0 Shorn E0 Dopey S0 S0 E0 2511 S1 2513 TO TO 2513 Happy Cisco Systems Internal Use Only SE Practice CCIE Lab V2.0K2 Happy 2513 Sleepy Grumpy 2513 Shorn 2524 2524 Line Line Line Line 2511 Dopey E0 IP address 171.68.39.15/24 FrameSwitch 3620 Line Comm Server Setup Diagram Cisco Systems Internal Use Only SE Practice CCIE Lab V2.0K2 Sleepy OSPF area Topology Diagram E0 2524 S0 ISDN OSPF area RIP S0 2524 Dopey Frame Relay DLCI 101 Grumpy E0 DLCI 100 S1/1 DLCI 102 IGRP 3620 E0/0 OSPF area S1 S1/0 S1/2 DLCI 100 S0 E0 Happy S0 S1 Shorn 2513 TO E0 2511 2513 TO S0 OSPF area area Lab Communications Server Setup / Network Connections Cisco Systems Internal Use Only SE Practice CCIE Lab V2.0K2 • The Communications Server is cabled as shown on the previous diagram • Communication Server port is connected to 2513_1 (Shorn) • Communication Server port is connected to 2513_2 (Happy) • Communication Server port is connected to 2524_1 (Sleepy) • Communication Server port is connected to 2524_2 (Grumpy) • Communication Server port is connected to a 3620 acting as a Frame Relay Switch • Configure the Communications Server so that when you type the name of a router on the Server you are connected to the console port of that respective router TIME: 30 minutes Cisco Systems Internal Use Only SE Practice CCIE Lab V2.0K2 Lab IP Routing Configuration The objective of this lab is to configure OSPF/IGRP/EIGRP/BGP in different parts of the network and to redistribute routing information In the working setup all routers should see every route and should be able to ping any interface in the network Do NOT configure static routes to accomplish this Topology and Basic IP Setup You will be using the CLASS B network 172.17.0.0 with the 3’rd octet set to 59 Thus all your addresses should look like 172.17.59.X Do not use static routes for IP on any router 2.0 Configure Frame Relay switch: • • • Configure the frame switch with DLCI’s per the lab diagram Use LMI type Cisco, and encapsulation IETF Ports are DCE and the speed should be set to 64K 2.1 Configure IP across the Frame Relay network: • • • Use a 28 bit subnet mask Confirm connectivity across the Frame Relay network by pinging from Grumpy to Sleepy and Grumpy to Shorn Use sub-interfaces on Sleepy & Shorn Use “frame-relay map” statements on Grumpy TIME: 30 minutes 2.2 Configure IP across the ISDN link: • • • • • • • • • Grumpy is connected to an ISDN simulator on port Sleepy is connected to an ISDN simulator on port Switch type is NI-1 Port SPID1: 0835866101 Directory Number: 835-8661 Port SPID2: 0835866301 Directory Number 835-8663 Port SPID1: 0835866201 Directory Number: 835-8662 Port SPID2: 0835866401 Directory Number 835-8664 Use a 28 bit subnet mask Configure the ISDN link such that traffic from Sleepy to Grumpy will force the ISDN line to dial, but not vice-versa Cisco Systems Internal Use Only SE Practice CCIE Lab V2.0K2 Confirm connectivity across the ISDN link by pinging from Sleepy to Grumpy • TIME: 30 minutes 2.3 Configure IP across the remaining interfaces: • Subnet Ethernet on Grumpy such that it has 14 host addresses • Set up the serial link between Grumpy and Dopey as a 64K back to back link Use a subnet with a 28 bit mask to connect the serial ports • Set up the serial link between Happy and Shorn as a 64K X.25 back to back link Use a subnet with a 28 bit mask to connect the serial ports • Configure Shorn’s Ethernet to 172.17.59.137/30 • Configure Shorn’s Token Ring with a 29 bit mask • Subnet Sleepy’s Ethernet such that it has hosts • Subnet Happy’s Token Ring with a 30 bit mask • Verify that you have basic IP setup by pinging the local interfaces that you have just configured TIME: 20 minutes 2.4 Configure OSPF on your network as per Diagram • Configure OSPF on Grumpy, Shorn, Happy and Sleepy Refer to Diagram for area designations • Ensure that Grumpy can ping Sleepy’s Ethernet interface and Shorn’s Token Ring interface Also ensure that Sleepy can ping Shorn’s Token Ring interface and Happy’s Token Ring interface TIME: 45 minutes 2.5 Configure ISDN backup of the Frame Relay network: Cisco Systems Internal Use Only SE Practice CCIE Lab V2.0K2 • • • Configure Sleepy so that the ISDN line will come up if the frame relay connection fails Verify you are getting OSPF updates across the ISDN link Confirm connectivity across the backup link by pinging from Sleepy to the rest of the network TIME: 30 minutes 2.6 Configure OSPF MD5 Authentication • Configure OSPF MD5 authentication between Grumpy and Sleepy • Configure the MD5 password as “cisco” • Ensure that Grumpy, Sleepy, and Shorn can still see all routes TIME: 15 minutes IGRP Configuration and Redistribution 2.7 Configure IGRP on your network as per Diagram • Configure IGRP on Dopey’s Ethernet 0, and the serial link between Dopey and Grumpy • Make sure that these are the ONLY interfaces that are advertising IGRP • Redistribute between OSPF and IGRP on Grumpy • Verify that Dopey can ping all interfaces in the OSPF domain TIME: 45 minutes RIP Configuration and Redistribution 2.8 Configure RIP on your network as per Diagram • Configure RIP on Grumpy’s Ethernet • Make sure that this is the ONLY interface that is advertising RIP • • Redistribute RIP into OSPF Verify that Sleepy, Dopey and Shorn can ping Grumpy’s Ethernet TIME: 20 minutes BGP Configuration Cisco Systems Internal Use Only SE Practice CCIE Lab V2.0K2 2.9 Configure External BGP: • • • • Configure loopback interfaces on the frame switch using the network addresses 150.100.0.0, 160.100.0.0, and 170.100.0.0 Configure Ethernet with an IP address of 172.17.59.138 and a 30 bit mask Configure BGP on the frame switch with an AS number 100, and set it up to advertise the three networks Configure BGP on Shorn using AS 200 Configure BGP between the frame switch and Shorn such that Shorn sees all three loopbacks configured on the frame switch A “show ip bgp” and “show ip route” on Shorn should show the three routes advertised by the frame switch TIME: 30 minutes 2.10 Configure Internal BGP: • • • • Configure BGP between Grumpy and Shorn Make sure they are part of the same AS Configure BGP on Sleepy using the same AS Configure BGP on Sleepy so that it is a neighbor to Grumpy ONLY DO NOT make Sleepy a neighbor to Shorn DO NOT redistribute between BGP and OSPF, RIP or IGRP A “show ip bgp” and “show ip route” on Grumpy and Sleepy should show the three routes advertised by the frame switch TIME: 30 minutes 2.11 BGP Route Filter • Configure a filter on Shorn such that the only BGP route now seen on Grumpy, Shorn and Sleepy is 150.100.0.0 TIME: 15 minutes 2.12 Change BGP Weight • Configure Grumpy such that the weight is set to 1000 and the metric 10 for network 150.100.0.0 TIME: 20 minutes IP FIREWALL Cisco Systems Internal Use Only 2.13 • • • • • • • SE Practice CCIE Lab V2.0K2 Configure an inbound access-list on Dopey’s Serial interface that satisfies the following criterion: Telnet sessions are permitted only if originated from Shorn’s ethernet interface subnet FTP sessions are permitted only if established from Dopey’s Ethernet subnet TFTP is permitted both ways allowed SMTP is not allowed WWW is not allowed PING is permitted from everywhere Confirm connectivity after applying the access list Ping Dopey’s Ethernet from Sleepy Also show a telnet to Dopey from Grumpy fails TIME: 30 minutes 2.14 NTP • Set the clock on Grumpy • Configure Grumpy as an NTP master clock Configure Shorn so that it will update its clock from Grumpy TIME: 15 minutes Cisco Systems Internal Use Only 10 SE Practice CCIE Lab V2.0K2 Lab Appletalk Routing Configuration 3.1 Appletalk configuration: • Configure all ports for appletalk Use different cable ranges and zones on each interface • Configure EIGRP for appletalk across the frame-relay network only • Make sure that EIGRP is the only routing protocol running on the frame-relay network TIME: 45 minutes 3.2 Appletalk filter: • Configure a filter on Grumpy such that Dopey only sees routes and zones from Shorn TIME: 25 minutes Lab Decnet Routing Configuration 4.1 Decnet configuration: • Enable Decnet routing on all routers • • Configure Dopey to be in a separate DECnet area from the rest of the routers Verify that you can DEC ping from any router to any other router TIME: 45 minutes Lab Cisco Systems Internal Use Only 11 SE Practice CCIE Lab V2.0K2 IPX Routing Configuration 5.1 IPX configuration: • Enable IPX routing on all routers • Configure all ports for IPX • • • • Configure IPX EIGRP across the frame-relay network EIGRP should be the ONLY IPX protocol running on the frame-relay Verify that all routes appear in each router Verify that you can IPX ping from any router to any other router TIME: 45 minutes 5.2 IPX SAP configuration and filter: • Configure two static SAPs on Dopey • Verify that these two SAPs appear in Grumpy’s SAP table • Configure a filter on Grumpy such that it can see only one of the static SAPs • Verify that Grumpy can now only see one of Dopey’s static SAPs in his SAP table TIME: 45 minutes 5.3 IPX route filter: • Configure a filter on Sleepy such that the only IPX routes it sees are Dopey’s ethernet and serial • Verify that only these two routes appear in Sleepy’s route table TIME: 30 minutes Lab DLSw Configuration Cisco Systems Internal Use Only 12 SE Practice CCIE Lab V2.0K2 6.1 DLSw configuration: • Configure DLSw between Shorn’s ethernet and Sleepy’s Ethernet • Verify that the DLSw peers are in the connected state TIME: 20 minutes 6.2 DLSw protocol filter: • Configure a filter such that the only protocol that is transported via • DLSw is NetBIOS Apply this filter to the DLSw remote peer statement on Shorn TIME: 20 minutes 6.3 DLSw mac filter: • • Change the DLSw configuration such that Sleepy informs all his peers that the only mac address that Shorn can reach is 4000.3725.0101 Verify that your configuration is correct by checking the peer capabilities TIME: 20 minutes Cisco Systems Internal Use Only 13 ... 2511 2513 TO S0 OSPF area area Lab Communications Server Setup / Network Connections Cisco Systems Internal Use Only SE Practice CCIE Lab V2.0K2 • The Communications Server is cabled as shown on... has 14 host addresses • Set up the serial link between Grumpy and Dopey as a 64K back to back link Use a subnet with a 28 bit mask to connect the serial ports • Set up the serial link between... routes it sees are Dopey’s ethernet and serial • Verify that only these two routes appear in Sleepy’s route table TIME: 30 minutes Lab DLSw Configuration Cisco Systems Internal Use Only 12 SE Practice