R&S CCIE Practice Lab 24
[Point=55]
Lab Rules
1. Static routes, default-routes, or default-networks may not be used unless specifically noted.
2. Routes to Null0 are not allowed unless otherwise stated.
3. Only 1 routing protocol allowed on any single interface unless stated in the lab instructions.
4. BGP “no-sync” is not allowed unless otherwise stated.
5. All subnets must be reachable from every router unless otherwise stated.
IP Addressing
1. The major network of 172.150.0.0/16 will be used for all subnets unless specified otherwise.
2. Configure IP addressing as specified by the network diagram.
3. Use 10.x.x.x (where x=router number) for loopback 0 interfaces on all routers.
Frame-relay
1. R1, R2 & R6 are not allowed subinterfaces on the frame-relay network that commonly connects them. R1, R2, R5 and R6 should be able to ping their own interfaces.
2. R5 is allowed a single point-to-point sub interface and a single multipoint sub interface
3. Look at the DLCI assignment table below. The frame-relay switch is full meshed but make sure that only the assigned DLCI’s are used or seen on each router. Use the DLCI’s referenced in the network diagram.
4. The frame-relay network between R1 and R2 should be setup in a way that allows PPP encapsulation over frame. Make sure there are no layer 3 addressing on either major or subinterfaces.
5. Make sure the frame-relay connection between R1 and R2 has a speed of 128k
Router DLCI
R2 201 R5 102
R2 202 R1 102
R2 206 R6 602
R1 101 R5 101
R1 102 R2 202
R1 106 R6 610
R5 101 R1 101
R5 102 R2 201
R5 106 R6 601
R6 601 R5 106
R6 602 R2 206
R6 610 R1 106
ATM
1. Set up the PVC’s according to your ATM Switch configuration
2. Make R14 your arp-server.
3. R13’s ESI address is 000000000013.13 and R14’s is 000000000014.14.
Catalyst 3550
1. Setup a VTP domain of CCIE using Version 2 and with authentication enabled using a password of “cisco”.
2. Configure the following VLANs:
3. 10 - VLAN_A
4. 20 - VLAN_B
5. 30 - VLAN_C
6. 40 - VLAN_D
7. Make sure that all Fast Ethernet ports, except trunk ports, are setup so that DHCP clients are not effecting by spanning-tree upon startup.
8. Assign VLAN20 the IP address of 172.150.200.62/26 with the default gateway set to 172.150.200.13.
9. Set the system name to SJ_Core , Location to San Jose, and contact SJ_MIS.
10. All routers must be able to ping the SC0 interface when lab is done.
11. Configure port 0/13 as an ISL trunk
12. Make sure only VLANs 1, 20, & 40 are allowed across the trunk
13. Ensure that the Catalyst 3550 will be root bridge for VLAN 1 & 10 only and never root bridge for VLAN 20 and 30.
14. Assume the 3550 is the core for VLAN 1 & 10 and it will never have more that 1 switch uplinked to it. Make spanning-tree converge as fast as possible.
15. Set port 0/11 up so that a sniffer can monitor traffic to and from R2.
16. Setup port 0/1 to allow only the MAC of d0d0.d0d0.d0d0 if this policy is violated then the port needs to be shut down.
17. When the port is disabled make sure that the port is automatically re-enabled after 10 minutes.
18. Set up Gigabit Ethernet Interface 0/1 as an ISL trunk allowing all VLANs to cross, then configure the interface so that any broadcast, unicast or multicast storms will only take up a maximum of 50% bandwidth before dropping packets.
19. Also configure the G0/1 interface to detect unidirectional links and shutdown the port if one is detected.
IGP
1. Configure EIGRP 100 on the frame-relay network between R5 and R1. Make sure all networks on R1 is included in the EIGRP domain except for S1.
2. Configure the Frame-Relay network between R5, R6 & R2 as the OSPF backbone, include loopback addresses.
3. Configure EIGRP 100 on the frame-relay network between R1 and R2. Make sure to include the Loopback 0 interface on R2 such that its AD is 170.
4. Only allow EIGRP to take up to 32k of bandwidth on the frame-relay network.
5. When establishing adjacencies make sure you do not use the “ip ospf network” command on the frame-relay interfaces.
6. Make sure that OSPF supports the highest level of authentication on the subnet 172.150.5.0/28.
7. Configure Area 1 on R3 and R5, make sure that LSA type 5’s are not allowed.
8. Area 1 should use R5 for it’s default network. Only configure R5 to accomplish this. You are allowed to create a default route on R5 and that route will be a route to NULL0 in the routing table.
9. Configure OSPF Area 2 for the Ethernet subnet connecting R2, R6 and R13.
10. Configure OSPF Area 13 for the loopback interface on R13.
11. Make sure that R13 is the DR for network 172.150.200.0/26.
12. Configure RIP for the ATM network between R13 and R14. Make sure to include the R14 loopback interface but you are not allowed to use the “network” command.
13. Ensure that on R6 the subnet on the loopback interface is not advertised as a host route into the OSPF network, you are not allowed to use summary commands.
ISDN
1. Setup ISDN connectivity between R5 and R6.
2. Make sure that both channels are up when you exceed 12k of bandwidth in any direction.
3. Configure the ISDN subnet to be in Area 0.
4. Do not allow OSPF updates to keep the link up.
5. Have the ISDN disconnect after 3 minutes of inactivity.
6. Use CHAP authentication.
7. R6 should only authenticate R5 if R5 initiates the call.
8. Set the ISDN connection on R6 as a backup in case the frame-relay network went down on R6. This should also include situations where R5 may lose frame-relay connectivity. Configure R6 for backup only!
9. Configure R6 where the ISDN link will come up if the frame connection reaches 80% capacity and goes back into standby mode when the capacity falls under 50%.
10. Make sure the ISDN line disconnects after the frame-relay connection has been restored for 30 seconds.
BGP
1. Set R1 and R2 in AS 65200, have them peer with each other. It is okay to use “no sync” on R2 only.
2. Set R3, R5 and R6 in AS 64126. Make sure they all peer with their loopback interfaces.
3. R3 and R6 are allowed only 1 IBGP Peer each.
4. Set R13 and R14 in AS 200
5. Establish a peer relationship with R13 in AS 200 and R6 in AS 100.
6. Establish a peer relationship between R5 in AS 100 and R1 in AS 65200.
7. Create a Loopback 1 interface on R1 with the IP address as 192.168.100.1/24.
8. Advertise R1 Loopback 1 interface into BGP.
9. On R3 create three new loopback interfaces. L1=192.168.10.3/24, L2=192.168.20.3/24, L3=192.168.30.3/24. Advertise all three networks into BGP.
10. Ensure that when R13 receives the 192.168.100.0/24 route, AS 65200 does not appear in the AS-PATH list. Use only one command on R6 to accomplish this.
11. All routes on all routers, except for R2, must be synchronized.
DLSW+
1. Setup DLSW peer between R3 and R2.
2. Ensure that E0 and To0 on R2 will bridge SNA and NetBIOS traffic.
3. Setup DLSW peer between R6 and R3. Make sure that R3 will prefer the circuit to R2 over R6. (Do not rely on backup configuration to accomplish this.)
4. If the connection to R2 should fail then R6 will be backup connection. The circuit to R6 should stay up for 3 minutes after R3 reconnects to R2.
5. Ensure that explorers are not sent to R2 for the MAC address of 1111.1111.1111 and that R2’s only resource is 1111.1111.1111
6. Do not allow SNA traffic to leave through R6.
Voice
1. Setup voice port on R13 such that the phone has extension number 1300 and on R14 with extension 1400.
2. Configure R13 where dialing 911 will result in the phone call going to extension 1400.
3. Configure R14 such that when the phone is picked up extension 1300 will automatically ring.
4. Set up R13 and R14 such that if the local ATM interfaces go down the connected voice-ports automatically send a busy signal.
5. Configure voice vlan 40 for ports 0/20 and 0/21 with the native and data vlans set to 10.
QoS
1. Make sure that DLSW traffic between R3 and R2 has 32K of bandwidth reserved and can burst to 42K if needed..
2. Make sure that voice traffic over the ATM links are given the highest priority and all other traffic is normal. Do this using IP Precedence and CLP.
3. Assume there are IP Phones attached to port 0/20 and 0/21, configure the switchports to extend the COS of 0 to anything attached to the IP Phone PC port.
Multicast
1. Setup PIM on R5, R2, R6 and 3550 for the recommending settings when using Auto-RP.
2. Make sure that users on the Ethernet segment in OSPF Area 2 can join the multicast groups.
3. Use Auto-RP configurations making R6 and R2 the mapping agents and only allow the Auto-RP request to go a maximum of 2 hops.
4. Ensure that only auto-RP is allowed to receive join messages.
5. Make sure that all multicast streams use Sparse mode except what is needed to make Auto-RP work.
6. Ensure that VLAN_B can only access group 229.10.10.10.
7. Make sure the Ethernet interfaces on R2 and R6 join 229.10.10.10.
8. You should be able to ping address 229.10.10.10
IP Services
1. Setup R5 such that when a user telnets to it they will receive a menu system that consists of the following options.
o Ability to display the IP routing table
o Ability to clear the IP routing table
o Ability to print off a Cisco TAC troubleshooting screen
o Exit to command line interface
2. When issuing a telnet session from R6 ensure that the destination IP address is not shown in the display.
3. Configure R13 so that when initiating a telnet session to R5 a user just needs to type in R5.
4. Make sure that hosts in R1 192.168.1.0/24 network can get to any subnet on the network except for R2’s token ring network. The 192.168.1.0/24 subnet should not appear in the routing table of any router other than R1. Allow 50 hosts for concurrent connections out.
5. Make sure that they use the frame-relay interface as their outbound interface.
6. There is a web server on the 192.168.1.0/24 network that has a web server at 192.168.1.10. This server needs to appear to have the address of 172.150.1.10.
[/Point][em05][em06]
[此贴子已经被作者于2003-10-7 16:20:48编辑过]
